KTI Networks KGS-0841-W, KGS-0860-WP, KGS-0861-WP, KGS-0862-WP, KGS-0863-WP User Manual

KGS-0841-W
KGS-0860-WP KGS-0861-WP
KGS-0862-WP KGS-0863-WP

IP65/67 Rated Gigabit Ethernet Switches

Firmware Rev1.04 up

User’s Manual

DOC.150331

1

©2013-2015 KTI Networks Inc.
All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to
make any directive work (such as translation or transformation) without permission from KTI Networks Inc.

KTI Networks Inc. reserves the right to revise this documentation and to make changes in content from time to
time without obligation on the part of KTI Networks Inc. to provide notification of such revision or change.

For more information, contact:

United States KTI Networks Inc.
P.O. BOX 631008
Houston, Texas 77263-1008

Phone: [phone]
Fax: [phone]
E-mail: [e-mail]
URL: http://www.ktinet.com/

International Fax: [phone]
E-mail: [e-mail]
URL: http://www.ktinet.com.tw/

2

The information contained in this document is subject to change without prior notice.
Copyright ©All Rights Reserved.

TRADEMARKS

Ethernet is a registered trademark of Xerox Corp.

FCC NOTICE

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This
device may not cause harmful interference, and (2) This device must accept any interference received, including
the interference that may cause undesired operation.

CE NOTICE

Marking by the symbol indicates compliance of this equipment to the EMC directive of the European Community.
Such marking is indicative that this equipment meets or exceeds the following technical standards:

VCCI-A Notice

3

4

Table of Contents

1. Introduction..................................................................................................................................................... 7

1.1 Features................................................................................................................................. 8

1.2 Product Model Options ..........................................................................................................8

1.3 Product Panels..................................................................................................................... 10

1.3.1 KGS-0841-W..................................................................................................................... 10

1.3.2 KGS-0860-WP.................................................................................................................. 10

1.3.3 KGS-0861-WP.................................................................................................................. 11

1.3.4 KGS-0862-WP.................................................................................................................. 11

1.3.5 KGS-0863-WP.................................................................................................................. 12

1.3.6 KGS-086x-WP Fiber Interfaces ........................................................................................ 13

1.4 LED Indicators .....................................................................................................................14

1.5 Specifications....................................................................................................................... 14

2. Installation..................................................................................................................................................... 20

2.1 Unpacking............................................................................................................................ 20

2.1.1 Package Accessory Kit.....................................................................................................20

2.2 Safety Cautions.................................................................................................................... 20

2.3 Panel Mounting.................................................................................................................... 21

2.4 Flat Mounting....................................................................................................................... 23

2.5 Applying Power.................................................................................................................... 24

2.5.1 Direct DC Power............................................................................................................... 24

2.5.2 Powered via PoE over Cat.5.............................................................................................26

2.6 Making Cat.5 Connections...................................................................................................28

2.6.1 Patch Cables for Fast Ethernet Port Types ...................................................................... 28

2.6.2 Patch Cables for Gigabit Ethernet Port Types.................................................................. 29

2.6.3 Important Functions of M12 Copper Ports........................................................................ 31

2.7 Making Console Connection................................................................................................ 32

2.8 Making PoE PSE Connection to PD Device........................................................................33

2.9 Making Fiber Connection.....................................................................................................35

2.10 LED Indication.................................................................................................................... 37

2.11 Configuring IP Address for the Switch............................................................................... 38

2.12 Abbreviation for Console Interface and Web Interface...................................................... 38

3. Console Command Line Interface............................................................................................................... 40

3.1 Console CLI......................................................................................................................... 40

3.2 System Command ............................................................................................................... 40

5

3.3 Console Commands ............................................................................................................45

3.4 IP Commands...................................................................................................................... 47

4. Web Management ......................................................................................................................................... 50

4.1 Start Browser Software and Making Connection.................................................................50

4.2 Login to the Switch Unit....................................................................................................... 50

4.3 Main Management Menu..................................................................................................... 53

4.4 System................................................................................................................................. 55

4.4.1 Management VLAN...........................................................................................................57

4.5 Ports..................................................................................................................................... 58

4.5.1 Port Type .......................................................................................................................... 60

4.5.2 FX DDM Status................................................................................................................. 61

4.6 VLANs.................................................................................................................................. 62

4.6.1 VLAN Function .................................................................................................................. 63

4.6.2 Port-based VLAN Mode.................................................................................................... 67

4.6.3 Port-based VLAN ISP Mode............................................................................................. 68

4.6.4 Simplified Tag-based VLAN Mode....................................................................................69

4.6.4.1 VLAN Groups................................................................................................................. 70

4.6.4.2 Per Port Settings............................................................................................................ 71

4.6.4.3 Simplified Tag-based VLAN Operation.......................................................................... 72

4.6.5 Advanced VLAN Mode...................................................................................................... 74

4.6.5.1 Ingress Default Tag........................................................................................................ 75

4.6.5.2 Ingress Settings............................................................................................................. 76

4.6.5.3 Egress Settings.............................................................................................................. 78

4.6.5.4 VLAN Groups................................................................................................................. 79

4.6.6 Simplified Tag-based VLAN vs. Advanced VLAN............................................................. 80

4.6.7 Important Notes for VLAN Configuration .......................................................................... 81

4.7 LACP.................................................................................................................................... 82

4.8 RSTP ................................................................................................................................... 83

4.9 802.1X Authentication.......................................................................................................... 85

4.9.1 802.1X Configuration........................................................................................................ 86

4.9.2 802.1X Re-authentication Parameters..............................................................................88

4.10 IGMP Snooping.................................................................................................................. 89

4.11 Mirroring............................................................................................................................. 90

4.12 Quality of Service............................................................................................................... 91

4.12.1 QoS Configuration .......................................................................................................... 93

6

4.12.2 802.1p Mapping.............................................................................................................. 94

4.12.3 DSCP Mapping............................................................................................................... 95

4.12.4 QoS Service Policy......................................................................................................... 96

4.13 Storm Control..................................................................................................................... 97

4.14 Multi Ring........................................................................................................................... 98

4.15 Statistics Overview............................................................................................................. 99

4.16 Detailed Statistics ............................................................................................................ 100

4.17 LACP Status .................................................................................................................... 101

4.18 RSTP Status.................................................................................................................... 103

4.19 IGMP Status..................................................................................................................... 105

4.20 PoE Status....................................................................................................................... 106

4.21 Multi Ring Status.............................................................................................................. 107

4.22 Ping.................................................................................................................................. 110

4.23 Reboot System ................................................................................................................ 111

4.24 Restore Default................................................................................................................ 111

4.25 Update Firmware ............................................................................................................. 111

4.26 Configuration File Transfer .............................................................................................. 112

4.27 Logout.............................................................................................................................. 112

5. SNMP Support............................................................................................................................................. 113

Appendix A Specifications of Fiber Interface Options ............................................................................... 114

1. Introduction

KTI’s KGS-0860 IP65/67 switch series offers a diverse range of managed Ethernet switches with the ruggedized
hardware design for protection against strong jets of water and temporary immersion in water. The series includes
a variety of 8-ports switches featured with different configurations composed of Fast Ethernet ports and Gigabit
Ethernet ports. The available port types are copper port, fiber optical port and combo port with dual-media support
(copper and fiber optical).

In addition to standard direct power input, the series provides optional solution that the switch can be powered
over network cable instead of direct power input. This way called “Power over Ethernet” allows the switch
receives electric power along with data from the connected network cable and the switch can be installed in place
where power is not present. Not only PoE powered switch solutions the series also offers PoE power sourcing
switches which can deliver power to other switches over the connected cables. It provides complete and
diversified solutions for PoE deployment with the IP65/67 switches.

Designed to operate reliably in harsh industrial environments the series provides a high level of immunity to
electromagnetic interference and heavy electrical surges usually found in industrial environments. An operating
temperature range of -40°C to +70°C coupled with IP65/67 rated waterproof design allows the switches to be
installed in any locations virtually.

To meet requirements for advanced applications, the switch series provides advanced layer 2 network functions, a
variety of management interfaces enhanced with security features, and a full array of useful functions for high
network availability and manageability. Featured with the ruggedized hardware design, the KGS-0860 series
provides ideal solutions for any harsh environments, such as strong vibrations, extreme temperatures and wet or
dusty conditions.

7

8

1.1 Features

 Diverse range of 8-port unmanaged and managed switches for selection
 Full wire speed forwarding and filtering
 Provide optional fiber interfaces to support variety of fiber connections
 Provide 802.1Q VLAN, 802.1p QoS, DSCP QoS functions
 Provide LACP port link aggregation function
 Provide port mirroring function
 Support jumbo frame up to 9.6K bytes
 Provide packet storm control function
 Support console, web, SNMP management interfaces
 Support DHCP for IP configuration
 Provide password authentication for management access
 Provide 802.1x authentication for port access
 Support 802.1w RSTP, 8021D STP for preventing loop connection
 Support redundant ring applications with enhanced industrial RSTP
 Support IGMP snooping function
 Waterproof enclosure design, LAN port connectors and power connector
 IP67 rated for protection against temporary immersion in water
 IP65 rated for protection against strong jets of water
 Support either direct DC input or PoE over network cable
 Offer optional high power PoE+ PSE switch models

1.2 Product Model Options

Model Name Managed*7 Fast Ethernet Gigabit Ethernet Fiber options PoE feature
KGS-0841-W - 8 ports - - ­KGS-0860-WP



8 ports - - PD*5

KGS-0860-WP-x



8 ports - 1 100Base-FX*1 PD

KGS-0860-WP-2x



8 ports - 2 100Base-FX*2 PD

KGS-0861-WP



- 8 ports - PD

KGS-0861-WP-x



- 8 ports 1 1000Base-X*3 PD

KGS-0861-WP-2x



- 8 ports 2 1000Base-X*4 PD

KGS-0862-WP



- 8 ports - 8 PSE*6

KGS-0862-WP-x



- 8 ports 1 1000Base-X 8 PSE

KGS-0862-WP-2x



- 8 ports 2 1000Base-X 8 PSE

KGS-0863-WP



6 ports 2 ports - 8 PSE

KGS-0863-WP-x



6 ports 2 ports 1 1000Base-X 8 PSE

KGS-0863-WP-2x



6 ports 2 ports 2 1000Base-X 8 PSE

Remark:

9

*1: Additional 100Base-FX fiber interface on Port #8
*2: Additional two 100Base-FX fiber interfaces on Port #7 and Port #8
*3: Additional 1000Base-X fiber interface on Port #8
*4: Additional two 1000Base-X fiber interfaces on Port #7 and Port #8
*5: PoE PD function on Port #4 (The switch can be powered via PoE on Port #4.)
*6: All ports are featured with PoE+ PSE function.
*7: Featured with management interfaces.

1.3 Product Panels

1.3.1 KGS-0841-W

1.3.2 KGS-0860-WP

10

1.3.3 KGS-0861-WP

1.3.4 KGS-0862-WP

11

1.3.5 KGS-0863-WP

12

1.3.6 KGS-086x-WP Fiber Interfaces

The following figures illustrate the fiber interfaces of the models with fiber options:

No fiber interface

One fiber interface

Two fiber interfaces

13

1.4 LED Indicators

LED Function

POWER Power status
1000M 1000M link & activities status (Gigabit Ethernet ports)
10-100M 10M or 100M link & activities status (Gigabit Ethernet ports)
100M 100M link & activities status (Fast Ethernet ports)
10M 10M link & activities status (Fast Ethernet ports)
PoE PoE power status (PoE input ports, PoE output ports)
F7 Port 7 fiber transceiver in use
F8 Port 8 fiber transceiver in use
MNGT Management operation status

1.5 Specifications

Fast Ethernet (FE) Ports

Compliance IEEE 802.3 10Base-T, 100Base-TX
Connector M12 D-code, 4-pole, female, 60V/2A rated per pole
per IEC 61076-2-101, IP67 rated

Configuration Auto-negotiation or software control
Transmission rate 10Mbps, 100Mbps
Duplex support Full duplex, Half duplex
Network cable Cat.5 or better
Pin assignments Auto MDI/MDI-X detection

Pin# LAN Signal

1 TX+
2 RX+
3 TX­4 RX-

Fast Ethernet (FE) Port built-in PoE Input

PoE Standard IEEE 802.3af PoE PD (Powered Device)
PSE Support IEEE 802.3af & 802.3at PSE
Power Classification Class 0
Input Voltage (V

poe

) 36 ~ 57VDC via Cat.5

Power Reception Pin assignments

14

Pin# PoE Input LAN Signal

1 V

poe

+ TX+

2 V

poe

- RX+

3 V

poe

+ TX-

4 V

poe

- RX-

Power polarity protection

Fast Ethernet (FE) Port built-in PoE Output

PoE Standard IEEE 802.3at PSE (High power PoE+)
PD Support Type 1 Class 0 ~ 3, Type 2 Class 4
Power Delivery 30W max. (per port)
Protection Under voltage, Over voltage, Over current, Over temperature
PSE Power Pins

Pin# PoE Output LAN Signal

1 V

poe

+ TX+

2 V

poe

- RX+

3 V

poe

+ TX-

4 V

poe

- RX-

Gigabit Ethernet (GbE) Ports

Compliance IEEE 802.3 10Base-T, 100Base-TX, 1000Base-T
Connector M12 A-code, 8-pole, female,
IP67 rated, 60V/2A rated per pole

Configuration Auto-negotiation or software control
Transmission rate 10Mbps, 100Mbps, 1000Mbps
Duplex support Full duplex, Half duplex
Network cable Cat.5 or better
Pin assignments Auto MDI/MDI-X detection

Pin# Signal

1 D1+
2 D1­3 D0+
4 D3+
5 D3-

15

16

6 D0­7 D2+
8 D2-

Gigabit Ethernet (GbE) Port built-in PoE Input

Standard IEEE 802.3af PD (Powered Device)
PSE Support IEEE 802.3af & 802.3at PSE
Power Classification Class 0
Input Voltage (V

poe

) 36 ~ 57VDC via Cat.5

Power Reception Pin assignments

Pin# PoE Signal

1 V

poe

- D1+

2 V

poe

- D1-

3 V

poe

+ D0+

4 V

poe

- D3+

5 V

poe

- D3-

6 V

poe

+ D0-

7 V

poe

+ D2+

8 V

poe

+ D2-

Power polarity protection

Gigabit Ethernet (GbE) Port built-in PoE Output

PoE Standard IEEE 802.3at PSE (High power PoE+)
PD Support Type 1 Class 0 ~ 3, Type 2 Class 4
Power Delivery 30W max. (per port)
Protection Under voltage, Over voltage, Over current, Over temperature
PSE Power Pins Pin assignments

Pin# PoE Signal

1 V

poe

- D1+

2 V

poe

- D1-

3 V

poe

+ D0+

4 V

poe

- D3+

5 V

poe

- D3-

6 V

poe

+ D0-

7 V

poe

+ D2+

8 V

poe

+ D2-

100Base-FX Fiber interface

Compliance 100Base-FX
Connector LC for single fiber, Dual LC for duplex fiber

Configuration 100Mbps, Full duplex
Transmission rate 100Mbps
Network cables MMF 50/125 60/125, SMF 9/125
Eye safety IEC 825 compliant
Optical Specifications Refer to Appendix X for variety of fiber options

1000Base-X Fiber interface

Compliance 1000Base-SX/LX/BX
Connector LC for single fiber, Dual LC for duplex fiber
Configuration Auto/Forced, 1000Mbps, Full duplex
Transmission rate 1000Mbps
Network cables MMF 50/125µm 60/125µm, SMF 9/125µm
Eye safety IEC 825 compliant
Optical Specifications Refer to Appendix X for variety of fiber options

Console Port

Interface RS-232, DTE type
Connector M12 A-code, 8-pole, female, IP67 rated

Pin assignments

Pin# Signal

1, 2, 3, 7, 8 NC

4 SG
5 RXD
6 TXD

Power Interface

Connector M23 6-pole, male

Operating Voltages +7.5 ~ +60VDC (For no PoE PSE option)
+45 ~ +57VDC for support Type 1 PDs

17

18

+51 ~ +57VDC for support Type 1 and Type 2 PDs
* Warning: The -48VDC power supply is not supported.
Power Consumption 11.5W max. (No PoE support)
Pin Assignments

Pin# Signal

1 DC+
2 DC­3 Frame Ground

4, 5, 6 NC

Insulation FG vs. DC power lines (500VDC/10M-Ohm)

Switch Functions

MAC Addresses Table 8K entries
Forwarding & filtering Non-blocking, full wire speed
Switching technology Store and forward
Maximum packet length 1526 bytes (Jumbo frame support disabled)
Jumbo frame support Up to 9.6K bytes
IP Multicast groups 8192 supported
Flow control IEEE 802.3x pause frame base for full duplex operation

Back pressure for half duplex operation
VLAN function Port-based VLAN and IEEE 802.1Q Tag-based VLAN
QoS function Port-based, 802.1p-based, IP DSCP-based
Port control Port configuration control via software management
Storm control Broadcast, Multicast storm protection control via software management
Aggregation Link aggregation (port trunking)
Port Mirroring Mirror received frames to a sniffer port

Mechanical

Dimension (base) 163 x 195 x 60.5 mm (WxDxH)
Housing Aluminum housing with no fan
IP Protection IP65, IP67
Mounting Panel mounting, flat mounting

Environmental

Operating Temperature Typical -40

o

C ~ +70oC

Storage Temperature -40

o

C ~ +85oC

Relative Humidity 5% ~ 90% non-condensing

Test

FCC Part 15 rule Class A
CE EMC

19

EN 55011, EN 61000-3-2, EN 61000-3-3
EN 61000-6-2 industrial environment
IEC 60068-2-1 cold temperature test
IEC 60068-2-2 dry heat test
IEC 60068-2-30 damp heat test
IEC 60068-2-48 storage temperature test
IEC 60068-2-27 shock test
EN 50155 railway applications for rolling stock
NEMA TS2 Environment
IPX5 water jets test
IPX7 water immersion test
IP6X ingress of dust test
Safety / LVD IEC 60950-1

20

2. Installation

2.1 Unpacking

The product package contains:

 The switch unit
 One accessory kit
 One product CD-ROM

2.1.1 Package Accessory Kit

Panel mount bracket 1 pc
M4-6mm screw (for panel mounting) 4 pcs
PWR3PE-PMF-2 DC power cable 2 meters 1 pc
C5EFPE-CMR-2 Console cable 2 meters 1 pc
C5EFPE-FMR-2 Patch cable for Fast Ethernet port 1 pc
C5EFPE-GMR-2 Patch cable for Gigabit Ethernet port 1 pc
M5-15mm screw (for flat mounting) 4 pcs

2.2 Safety Cautions

To reduce the risk of bodily injury, electrical shock, fire and damage to the product, observe the following
precautions.

 Do not service any product except as explained in your system documentation.
 Opening or removing covers may expose you to electrical shock.
 Only a trained service technician should service components inside these compartments.
 If any of the following conditions occur, unplug the product from the electrical outlet and replace the

part or contact your trained service provider:

 The power cable, extension cable, or plug is damaged.
 The product has been dropped or damaged.
 The product does not operate correctly when you follow the operating instructions.
 Do not push any objects into the openings of your system. Doing so can cause fire or electric shock

by shorting out interior components.

 Operate the product only from the type of external power source indicated on the electrical ratings

label. If you are not sure of the type of power source required, consult your service provider or local
power company.

2.3 Panel Mounting

One stainless panel mount bracket is included in product package as shown below:

Install the bracket on the bottom with M4 screws.

21

There is one screw is provided on panel mount bracket. It can be used for PE (Protective Earth) connection if
needed.

Dimension of the device with mounting bracket

22

2.4 Flat Mounting

The device can support flat mount onto a flat panel face as illustrated below:

There are four screw holes located on the front. Use M5-15mm screw for fixing the device on the flat panel.

After installation

23

2.5 Applying Power

Two methods for applying power to the device are:

1. Direct DC power input via Power connector

2. PoE power input via Port 4

The table below lists the available power method for different models:

Model Name PoE feature Direct DC PoE via Port 4

KGS-0841-W -



-

KGS-0860-WP-xx PD

 

KGS-0861-WP-xx PD

 

KGS-0862-WP-xx 8 PSE



-

KGS-0863-WP-xx 8 PSE



-

2.5.1 Direct DC Power

The power connector is shown below:

24

Use appropriate power cable as shown below to supply DC power from external power supply.

The pin assignments are:

Pin# Contacts

1 DC+
2 DC­3 Frame Ground

4, 5, 6 NC
Pin #3 connects to device frame ground and it is isolated from power lines DC+/DC-. It can be used for PE
(Protective Earth) connection.

Plug the cable

25

The working voltages and maximal power required for different applications are listed as follows:

Model Name Application Operating voltage range Max. power
KGS-0841-W General +6.5 ~ +60VDC 11.5W
KGS-0860-WP-xx General +6.5 ~ +60VDC 11.5W
KGS-0861-WP-xx General +6.5 ~ +60VDC 11.5W
KGS-0862-WP-xx Type 1 PoE +45 ~ +57VDC 135W
KGS-0862-WP-xx High power PoE +51 ~ +57VDC 256W
KGS-0863-WP-xx Type 1 PoE +45 ~ +57VDC 135W
KGS-0863-WP-xx High power PoE +51 ~ +57VDC 256W

2.5.2 Powered via PoE over Cat.5

The following model series provide optional PoE power method:

Model Name Direct DC PoE via Port 4

KGS-0860-WP-xx

 

KGS-0861-WP-xx

 

Port #4 is equipped with function of receiving power from connected PoE PSE device over Cat.5 cable. The
remote PoE PSE devices can be a mid-span PoE injector or end-span PoE switched port.

The figure below illustrates a connection example:

The switches can support the following PSE:

 802.3af compliant PSE (Typical, Type 1 PSE)

Possible voltages received: +36 ~ +57VDC

 802.3at compliant PSE (High power PoE, Type 2 PSE)

Possible voltages received: +42.5 ~ +57VDC

26

PoE LED Indicator on “FE port built-in

PoE input” and “GbE port built-in PoE input”:

27

2.6 Making Cat.5 Connections

2.6.1 Patch Cables for Fast Ethernet Port Types

Types: Fast Ethernet Ports (Typical)
Fast Ethernet Ports with built-in PoE power input
Fast Ethernet Ports with built-in PoE power output (PSE)

Available patch cable specifications

 IP65/67 protection with M12 connector
 M12 D-code connector compliant with IEC 61076-2-101
 HDPE Cat.5e for outdoor and harsh environment
 Temperature range -40C to 80C
 Solutions with RJ-45 (TIA/EIA-568B std.) for general purpose connection

Optional Part List

C5EFPE-FMM-100 C5EFPE-FMR-2

28

Cable Pin Assignments

2.6.2 Patch Cables for Gigabit Ethernet Port Types

Types: Gigabit Ethernet Ports (Typical)
Gigabit Ethernet Ports with built-in PoE power input
Gigabit Ethernet Ports with built-in PoE power output (PSE)

Available patch cable specifications

 IP65/67 protection with M12 connector
 HDPE Cat.5e for outdoor and harsh environment
 Temperature range -40C to 80C
 Solutions with RJ-45 (TIA/EIA-568B std.) for general purpose connection

Optional Part List

C5EFPE-GMM-100 C5EFPE-GMR-2

29

Cable Pin Assignments

Plug cable to the device and screw it securely.

30

31

2.6.3 Important Functions of M12 Copper Ports

Auto MDI/MDI-X Function

This function allows the port to auto-detect the twisted-pair signals and adapts itself to form a valid MDI to
MDI-X connection with the remote connected device automatically. No matter a straight through cable or
crossover cable connected, the ports can sense the receiving pair automatically and configure self to match the
rule for MDI to MDI-X connection. It simplifies the cable installation.

Auto-negotiation Function

The ports are featured with auto-negotiation function and full capability to support connection to any Ethernet
devices. The port performs a negotiation process for the speed and duplex configuration with the connected device
automatically when each time a link is being established. If the connected device is also auto-negotiation capable,
both devices will come out the best configuration after negotiation process. If the connected device is incapable in
auto-negotiation, the switch will sense the speed and use half duplex for the connection.

Port Configuration Management

For making proper connection to an auto-negotiation incapable device, it is suggested to use port control function
via software management to set forced mode and specify speed and duplex mode which match the configuration
used by the connected device.

2.7 Making Console Connection

Use the listed cable below for console connection.

Cable Pin Assignments

Baud Rate information:
Baud rate – 115200 Data bits - 8
Parity – None Stop bit – 1 Flow control – None

Plug the cable to the console port and screw it securely.

32

2.8 Making PoE PSE Connection to PD Device

Cables

No special cable is required for this connection. Depending on the port types, use the suggested cables listed in
Section 2.6.1 and 2.6.2.

Typical PoE Applications

Supported Powered Devices (PD): 802.3af compliant devices
PoE Power output: 15.4W max. per PSE port
DC power input working voltage range: +45 ~ +57VDC
Total required power input: 135W (PoE output plus switch basic consumption)

33

High Power PoE Applications

The switches can support PoE high power applications. It means the power delivered can be up to 30watts by
single PSE port connection to a PD device which consumes larges power than typical PoE 15.4W.

Supported Powered Devices (PD): 802.3af or 802.3at compliant devices
PoE Power output: 30W max. per PSE port
DC power input working voltage range: +51 ~ +57VDC
Total required power input: 252W (PoE output plus switch basic consumption)

34

2.9 Making Fiber Connection

Some models provide optional fiber interfaces for Port #8 or Port #7 and Port #8 both as shown below:

The fiber interface may come with one LC connector for single fiber cable or come with two LC connectors for
duplex fiber cables depending on the model optical specification. Refer to Appendix A for details.

LED Display for fiber interface

F7 & F8 LEDs turned ON to indicate fiber interfaces are selected for Port #7 and Port #8.

Network Cables

Multimode (MMF) - 50/125µm, 62.5/125µm
Single mode (SMF) - 9/125µm

35

Cable Installation for IP67

For IP65 and IP67 protection, one optional fiber accessory part, FO-PLUG-P-L is required for fiber cable
installation. The part is for protection purpose only.

FO-PLUG-P-L Fiber port plug kit, IP67 rated

The installation of the part with fiber cable is shown as follows:

There are four seals packed in the kit. The seals support installation for the following cables:

 Single fiber, diameter 2.8mm
 Duplex fiber, diameter 2.8mm
 Single fiber, diameter 1.8mm
 Duplex fiber, diameter 1.8mm

36

37

2.10 LED Indication

___________________________________________________________________________________________________________________________________________________

LED Function

___________________________________________________________________________________________________________________________________________________

POWER Power status
ON: power on
OFF: power off

___________________________________________________________________________________________________________________________________________________

1000M 1000M link & activities status (Gigabit Ethernet ports)
ON: port link on, speed 1000M
BLINK: data in transmission
OFF: port link off

___________________________________________________________________________________________________________________________________________________

10-100M 10M or 100M link & activities status (Gigabit Ethernet ports)
ON: port link on, speed 100M or 10M
BLINK: data in transmission
OFF: port link off

___________________________________________________________________________________________________________________________________________________

100M 100M link & activities status (Fast Ethernet ports)
ON: port link on, speed 100M
BLINK: data in transmission
OFF: port link off

___________________________________________________________________________________________________________________________________________________

10M 10M link & activities status (Fast Ethernet ports)
ON: port link on, speed 10M
BLINK: data in transmission
OFF: port link off

___________________________________________________________________________________________________________________________________________________

PoE PoE power status (PoE input ports, PoE output ports)
ON: PoE power On
OFF: PoE power Off

___________________________________________________________________________________________________________________________________________________

F7/F8 Port 7 Port 8 fiber interface in use
ON: fiber interface in use
OFF: not use

___________________________________________________________________________________________________________________________________________________

MNGT Management operation status
ON: System diagnostics & initialization finished
BLINK: Failure detected on Main chip, Phy chip, and PoE chip
OFF: System diagnostics & initialization in process

___________________________________________________________________________________________________________________________________________________

38

2.11 Configuring IP Address for the Switch

The switch is shipped with the following factory default settings for software management:

Default IP address of the switch: 192.168.0.2 / 255.255.255.0

The IP Address is an identification of the switch in a TCP/IP network. Each switch should be designated a new
and unique IP address in the network. Two methods to configure the IP address are:

1. Use console port

The console command sequence to set a fixed IP for the switch is:

>IP
IP>Setup [<ipaddress>[<ipmask>[<ipgateway>]]]

The console command sequence to use DHCP mode for IP is:

>IP
IP>Dhcp enable　
IP>

2. Use Web management

Refer to Web management interface for System Configuration. The switch is shipped with factory default

password 123 for software management. The password is used for authentication in accessing to the switch
via Http web-based interface. For security reason, it is recommended to change the default settings for the
switch before deploying it to your network. Refer to Web management interface for System Configuration.

2.12 Abbreviation for Console Interface and Web Interface

Ingress Port: Ingress port is the input port on which a packet is received.

Egress Port: Egress port is the output port from which a packet is sent out.

IEEE 802.1Q Packets: A packet which is embedded with a VLAN Tag field

VLAN Tag: In IEEE 802.1Q packet format, 4-byte tag field is inserted in the original Ethernet frame between the

Source Address and Type/Length fields. The tag is composed of:

#of bits 16 3 1 12
Frame field TPID User priority CFI VID

TPID: 16-bit field is set to 0x8100 to identify a frame as an IEEE 802.1Q tagged packet

39

User Priority: 3-bit field refer to the 802.1p priority

CFI: The Canonical Format Indicator for the MAC address is a 1 bit field.

VID: VLAN identifier, 12-bit field identifies the VLAN to which the frame belongs to.

Untagged packet: A standard Ethernet frame with no VLAN Tag field

Priority-tagged packet: An IEEE 802.1Q packet which VID filed value is zero (VID=0)

VLAN-Tagged packet: An IEEE 802.1Q packet which VID filed value is not zero (VID<>0)

PVID (Port VID): PVID is the default VID of an ingress port. It is often used in VLAN classification for

untagged packets. It is also often used for egress tagging operation.

DSCP: Differentiated Service Code Point, 6-bit value field in an IP packet

VLAN Table lookup: The process of searching VLAN table to find a VLAN which matches the given VID index

MAC address table lookup: The process of searching MAC address table to find a MAC entry which matches

the given destination MAC address and the port where the MAC address is located

Packet forwarding: also known as packet switching in a network switch based on MAC address table and VLAN
table information

VLAN forwarding: the operation that a packet is forwarded to an egress destination port based on VLAN table
information

VLAN group: configuration information about a VLAN which can be recognized in the switch. The information
includes a VID associated to the VLAN, member ports, and some special settings.

3. Console Command Line Interface

3.1 Console CLI

System Boot Up Message

Enter default Password: 123 to enter CLI mode.

Top level commands

Press ? or help to get help. The help depends on the context:

- At top level, a list of command groups will be shown.

- At group level, a list of the command syntaxes will be shown.

- If given after a command, the syntax and a description of the
command will be shown.
>help
Commands at top level:

System - System commands
Console - Console commands
IP - IP commands

>

3.2 System Command

>sys
System>?
System Configuration [all]
System Restore Default [keepIP]
System Name [<name>]
System Reboot
System SNMP [enable|disable]

40

41

System Trap [<IP Address>]
System Readcommunity [<community string>]
System Writecommunity [<community string>]
System Trapcommunity [<community string>]
System Power Saving [full|up|down|disable]

Configuration

___________________________________________________________________________________________________________________________________________________

System>Config help

Syntax:

System Configuration [all]

Description:

Show system name, software version, hardware version and management MAC address.
[all]: Show the total switch configuration (default: System configuration only)

System>Config
System Configuration:
Name:
S/W Version: 1.02
CVS Tag: sw_8051_2_34d
Compile Date: Mar 28 2013 15:40:27
H/W Version: 1.0

MAC address: 00-40-F6-EA-12-34
SNMP: enabled
Trap IP: 0.0.0.0
Readcommunity: public
Writecommunity: private
Trapcommunity: public

Restore Default

___________________________________________________________________________________________________________________________________________________

System>Restore Default help

Syntax:

System Restore Default [keepIP]

Description:

Restore factory default configuration.
[keepIP]: Preserve IP configuration (d ef ault: Not preserved).

42

Name

___________________________________________________________________________________________________________________________________________________

System>Name help

Syntax:

System Name [<name>]

Description:

Set or show the system name.
[<name>]: String of up to 16 characters (default: Show system name).

Reboot

___________________________________________________________________________________________________________________________________________________

System>Reboot help

Syntax:

System Reboot

Description:

Reboot the switch.

SNMP

___________________________________________________________________________________________________________________________________________________

System>SNMP help

Syntax:

SNMP [enable|disable]

Description:

Activate or deactivate the SNMP.
[enable|disable]: Enable/disable SNMP (default: Show SNMP mode).

Trap

___________________________________________________________________________________________________________________________________________________

System>Trap help

Syntax:

Trap [<IP Address>]

Description:

Set or show SNMP traps destination.
<IP Address>: IP address to send traps to. (default: Show trap configuration)

43

Readcommunity

___________________________________________________________________________________________________________________________________________________

System>Readcommunity help

Syntax:

Readcommunity [<community string>]

Description:

Set or show SNMP read community string.
[<community string>]: New community string. (default: Show current value).

Writecommunity

___________________________________________________________________________________________________________________________________________________

System>Writecommunity help

Syntax:

Writecommunity [<community string>]

Description:

Set or show SNMP write community string.
[<community string>]: New community string. (default: Show current value).

Trapcommunity

___________________________________________________________________________________________________________________________________________________

System>Trapcommunity help

Syntax:

Trapcommunity [<community string>]

Description:

Set or show SNMP trap community string.
[<community string>]: New community string. (default: Show current value).

Power Saving

___________________________________________________________________________________________________________________________________________________

System>Power Saving help

Syntax:

Sytem Power Saving [full|up|down|disable]

Description:

Configure mode of power saving.
[full|up|down|disable]:

44

full: Power saving at both link-up and link-down.
up: Power saving at link-up only.
down: Power saving at link-down only.
disable: No power saving.

45

3.3 Console Commands

Console>?

Commands at Console level:

Console Configuration
Console Password [<password>]
Console Timeout [<timeout>]
Console Prompt [<prompt string>]

Configuration

___________________________________________________________________________________________________________________________________________________

Console> Configuration help

Syntax:

Console Configuration

Description:

Show configured console password and timeout.

Password

___________________________________________________________________________________________________________________________________________________

Console>Password help

Syntax:

Console Password [<password>]

Description:

Set or show the console password. The empty string ("") disables the password check.
[<password>]: Password string of up to 16 characters.

Timeout

___________________________________________________________________________________________________________________________________________________

Console>Timeout help

Syntax:

Console Timeout [<timeout>]

Description:

Set or show the console inactivity timeout in seconds. The value zero disables timeout.
[<timeout>]: Timeout value in seconds, 0,60-10000.

Prompt

___________________________________________________________________________________________________________________________________________________

Console>Prompt help

46

Syntax:

Console Prompt [<prompt_string>]

Description:

Set or show the console prompt string.
[<prompt_string>]: Command prompt string of up to 10 characters.

3.4 IP Commands

IP>help

Commands at IP level:

IP Configuration
IP Status
IP Setup [<ipaddress> [<ipmask> [<ipgateway>]]] [<vid>]
IP Mode [enable|disable]
IP Ping [-n <count>] [-w <timeout>] <ipaddress>
IP Arp
IP Dhcp [enable|disable]

Configuration

___________________________________________________________________________________________________________________________________________________

IP>Configuration help

Syntax:

IP Configuration

Description:

Show IP configured IP address, mask, gateway, VLAN ID and mode.

IP>config
IP Configuration:
Address: 192.168.0.2
Subnet Mask: 255.255.255.0
Gateway: 192.168.0.1
VID: 0
Mode: enabled
dhcp: disabled

Status

___________________________________________________________________________________________________________________________________________________

IP>Status help

Syntax:

IP Status

-47-

Description:

Show current IP status.

Setup

___________________________________________________________________________________________________________________________________________________

IP>Setup help

Syntax:

IP Setup [<ipaddress> [<ipmask> [<ipgateway>]]] [<vid>]

Description:

Setup or show IP configuration.

[<ipaddress>]: IP address. (default: Show IP configuration)
[<ipmask>]: IP subnet mask (default: Subnet mask for address class).
[<ipgateway>]: Default IP gateway, (default: 0.0.0.0).
[<vid>]: VLAN ID, 1-4094 (default: 1).

Mode

___________________________________________________________________________________________________________________________________________________

IP>Mode help

Syntax:

IP Mode [enable|disable]

Description:

Activate or deactivate the IP configuration.
[enable|disable]: Enable/disable IP (default: Show IP mode).

Ping

___________________________________________________________________________________________________________________________________________________

IP>Ping help

Syntax:

IP Ping [-n <count>][-w <timeout>] <ipaddress>

Description:

Ping the specified IP address.

[-n <count>]: Number of echo requests to send (default: 1).
[-w <timeout>]: Timeout in seconds to wait for each reply (default: 2).

-48-

Arp

___________________________________________________________________________________________________________________________________________________

IP>Arp help

Syntax:

IP Arp

Description:

Show the content of the ARP table.

Dhcp

___________________________________________________________________________________________________________________________________________________

IP>Dhcp help

Syntax:

IP DHCP [enable|disable]

Description:

Activate or deactivate the DHCP protocol.

[enable|disable]: Enable/disable DHCP (default: Show DHCP mode).

-49-

4. Web Management

The switch features an http server which can serve the management requests coming from any web browser
software over TCP/IP network.

Compatible Web Browser

Compatible web browser software with JAVA script support
Microsoft Internet Explorer 6.0 or later
Google Chrome
Mozilla Firefox

Set IP Address for the System Unit

Before the switch can be managed from web browser software, make sure a unique IP address is configured for
the switch.

4.1 Start Browser Software and Making Connection

Start your browser software and enter the IP address of the switch unit to which you want to connect. The IP
address is used as URL for the browser software to search the device.

URL: http://xxx.xxx.xxx.xxx/

Factory default IP address: 192.168.0.2

4.2 Login to the Switch Unit

When browser software connects to the switch unit successfully, a Login screen is provided for you to login to
the device as the left is played below:

-50-

Factory default password: 123

The switch will accept only one successful IP connection at the same time. The other connection attempts will
be prompted with a warning message as the right is played above.

A new connection will be accepted when the current user logout successfully or auto logout by the switch due
to no access for time out of 300 seconds.

System Configuration is displayed as follows after a successful login:

-51-

-52-

4.3 Main Management Menu

Configuration

System Switch information, system and IP related settings
Ports Port link status, port operation mode configuration
VLAN VLAN related configuration
LACP LACP configuration for port link aggregation
RSTP RSTP (Rapid spanning tree protocol) related configuration

802.1X 802.1X authentication related configuration
IGMP Snooping IGMP snooping related configuration
Mirroring Port mirroring related configuration
QoS Quality of Service related configuration
Storm Control Packet Storm protection control configuration
Multi Ring Multiple Redundant Rings configuration

-53-

Monitoring

Statistics Overview List simple statistics for all ports
Detailed Statistics List detailed statistics for all ports
LACP Status LACP port status
RSTP Status RSTP protocol status
IGMP Status IGMP snooping status
PoE Status Power over Ethernet function status
Multi Ring Status Multi redundant ring status
Ping Ping command from the switch to other IP devices

Maintenance

Reboot System Command to reboot the switch
Restore Default Command to restore the switch with factory default settings
Update Firmware Command to update the switch firmware
Configuration File Command to transfer (upload/download) configuration file
Transfer
Logout Command to logout from the switch management

-54-

4.4 System

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

MAC Address The MAC address factory configured for the switch.

It can not be changed in any cases.
S/W Version Firmware version currently running
H/W Version Hardware version currently operating
Active IP Address Current IP address for the switch management

-55-

Active Subnet Mask Current subnet mask for IP address for the switch management
Active Gateway Current gateway IP address for the switch management
DHCP Server Current IP address of the DHCP server
Lease Time Left The time left for the lease IP address currently used
DHCP Enabled Use DHCP to get dynamic IP address configuration for the switch
Fallback IP Address IP address used when DHCP mode is disabled
Fallback Subnet Mask Subnet mask for IP address used when DHCP mode is not enabled
Fallback Gateway Default gateway IP address used when DHCP mode is not enabled
WDT Watch Dog Timer configuration
Management VLAN Set management VLAN ID
Name *

1

Set the system name for this switch unit
Password Set new password
Inactivity Timeout No user interaction timeout for web disconnection. Options:

0 - no timeout
60 ~ 10000 seconds

SNMP enabled Enable SNMP agent
SNMP Trap destination The IP address of the SNMP trap manager
SNMP Read community SNMP co mmunity allowed for the SNMP [get] message
SNMP Write community SNMP community allowed for the SNMP [set] message
SNMP Trap community SNMP community used for the SNMP trap messages sent by the switch

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

___________________________________________________________________________________________________________________________________________________

Note:

1. It is suggested to give each switch unit a system name as an alternative unique identification beside IP

address.

2. Setting change of DHCP mode takes effective in next boot-up.

-56-

4.4.1 Management VLAN

Management VLAN settings allow administrator to access the switch and perform the switch management over
a dedicated VLAN.

The following rules are applied with the Management VLAN:

1. If [Management VLAN] setting is zero, no VLAN limitation is applied in accessing the switch

web management interface.

2. If [Management VLAN] setting is not zero, the switch web (http) server only replies to the

management hosts located in the matched VLAN group. That means the egress port will be
limited in the member ports of the matched VLAN group.

3. The switch web (http) server can accept untagged or tagged management accessing packets. Reply

to the web access host based on the following rule:

Incoming web access packets Reply packets (Outgoing to the management host)
Untagged packets Untagged packets
Tagged packets Packets tagged with configured management VLAN

ID

4. The system will cross-check VLAN group table and reject un-existing VLAN setting during

configuring Management VLAN value.

5. If VLAN group configuration causes a result that no VLAN group matches the management

VLAN setting, the management VLAN setting will be reset to zero by the system automatically.

Notes:

1. To apply management VLAN function, be sure to configure a VLAN group that matches the

management VLAN first.

2. No matter how management VLAN is configured, login password authentication is still required.

-57-

4.5 Ports

___________________________________________________________________________________________________________________________________________________

Configuration Function

___________________________________________________________________________________________________________________________________________________

Enable Jumbo Frames Set to enable jumbo frame support
Power Saving Mode Full - all the time

Link-up - power saving only when link up
Link-down - power saving only when link down
Disable - disable port power saving

Port The port number

Ex.

8 Indicates Port 8 media type – M12 (Copper interface)
8(GE FX) Indicates Port 8 current media type – Gigabit fiber interface
8(FE FX) Indicates Port 8 current media type – Fast Ethernet fiber interface

In some model options, Port 7 and Port 8 support dual media. Use [Port Type] button
to change media type to be used. (GE FX) and (FE FX) are model-dependent.

Link Speed and duplex status with green background - port is link on

-58-

Down with red background - port is link down

Mode Select port operating mode

Disabled - disable the port operation
Mode Auto-negotiation Speed capability Duplex capability

Auto Enable 10, 100, 1000M Full, Half
10 Half Disable 10M Half
10 Full Disable 10M Full
100 Half Disable 100M Half
100 Full Disable 100M Full
1000 Full Enable 1000M Full
Auto 1000 Full Enable 1000M Full
Force 1000 Full Disable 1000M Full

Flow Control Set port flow control function

v - set to enable 802.3x pause flow control for ingress and egress

PoE Enable Set port PoE PSE function

v - set to enable port PoE PSE function (Optional model-dependent function)

Drop frame after excessive collision

v - set to enable the function

___________________________________________________________________________________________________________________________________________________

[FX DDM] Click to display DDM information and status of the fiber transceivers
[Port Type] Click to set port media type, <M12> or <Fiber> for Port 7 and Port 8 options
[Apply] Click to apply the configuration change

___________________________________________________________________________________________________________________________________________________

Above port configuration example illustrates that both Port #7 and Port #8 are equipped with two media
interfaces, M12 copper interface and FX fiber interface. Click [Port Type] button to select preferred media
type.

-59-

4.5.1 Port Type

Port 7 and Port 8 supports two media types, M12 copper and FX fiber interface. Use this button to
select the port type.

___________________________________________________________________________________________________________________________________________________

Information Function

___________________________________________________________________________________________________________________________________________________

Port # Port number (Port 7 & Port 8)

Only Port 7 and Port 8 support dual media types, M12 copper and FX fiber and the
available options are model-dependent. For fiber support, the port is built-in with an
internal fiber transceiver.

Type M12 Use Copper interface

Fiber Use fiber interface.
If <M12> is the only available option, the associated port does not support fiber
media.

___________________________________________________________________________________________________________________________________________________

Notes:
The available mode options are:
Mode (M12) Auto-negotiation Speed capability Duplex capability
Auto Enable 10, 100, 1000M Full, Half
10 Half Disable 10M Half
10 Full Disable 10M Full
100 Half Disable 100M Half
100 Full Disable 100M Full
1000 Full Enable 1000M Full

Mode (GE FX) Auto-negotiation Speed capability Duplex capability
Auto 1000 Full Enable 1000M Full
Force 1000 Full Disable 1000M Full

Mode (FE FX) Auto-negotiation Speed capability Duplex capability
Force 100 Full Disable 100M Full

-60-

4.5.2 FX DDM Status

DDM (Digital Diagnostic Monitoring) information and status are provided in some transceivers. Part of the
information are retrieved and listed as follows:

___________________________________________________________________________________________________________________________________________________

Information Function

___________________________________________________________________________________________________________________________________________________

Port Port number which has fiber interface
Identifier The identifier information of the fiber transceiver
Connector The connector type used on the fiber transceiver
SONET Compliance SONET compliance information of the transceiver
GbE Compliance Gigabit Ethernet compliance information of the transceiver
Vendor Name The vendor name of the transceiver
Vendor OUI The vendor OUI of the transceiver
Temperature The current temperature sensed inside the transceiver
Voltage The working voltage sensed inside the transceiver
TX Power The transmission optical power sensed

___________________________________________________________________________________________________________________________________________________

[Refresh] Click to refresh current configuration
[Back] Click to back to previous page

___________________________________________________________________________________________________________________________________________________

Note:

1. TX power data is displayed with unit of dBm.

2. N/A: the information is not available in the transceiver

-61-

4.6 VLANs

___________________________________________________________________________________________________________________________________________________

VLAN Configuration Description

___________________________________________________________________________________________________________________________________________________

VLAN Disable Select to disable VLAN function

All ports are allowed to communicate with each others freely

with no VLAN limitation.
Port-based VLAN Mode Simple configuration for 2 port-based VLAN groups
Port-based VLAN ISP Mode Simple configuration for 7 port-based VLAN groups (also called

metro-mode sometimes)
Simplified Tag-based VLAN Mode Simple configuration for Tag-based VLAN (Less optional settings)
Advanced VLAN Mode Full VLAN configuration for port-based and Tag-based VLAN

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

___________________________________________________________________________________________________________________________________________________

-62-

4.6.1 VLAN Function

The switch can support port-based VLAN, 802.1Q Tag VLAN and eight VLAN groups. The following figure
illustrates the basic VLAN operation flow beginning from a packet received on an ingress port until it is
transmitted from an egress port.

The following sections describe the VLAN processes and Advanced VLAN mode settings provided by the
switch. A global setting means the setting is applied to all ports of the switch. A per port setting means each
port can be configured for the setting respectively.

Ingress Rules

When a packet is received on an ingress port, the ingress rules are applied for packet filtering and packet tag
removal. The related Ingress port settings are:

802.1Q Tag Aware Per port setting

Tag-aware - 802.1Q Tag Aware mode is used. The switch examines the tag content of every received

packet. For a VLAN tagged packet, the packet VLAN tag data is retrieved as packet tag
information for VLAN classification and egress tagging operation. For untagged packet and
priority-tagged packet, port-based mode is used.

Tag-ignore - Port-based mode is used. The switch ignores the tag content of every received packets. Ingress

Port Default Tag is always used as packet tag information for VLAN classification.

-63-

Keep Tag Per port setting

Enable - The VLAN tag in the received VLAN tagged packet will be kept as it is and is not stripped in

whole forwarding operation.

Disable - The VLAN tag data in the received VLAN tagged packet is stripped (removed).

Drop Untag Per Port Setting

Enable - All untagged packets and priority-tagged packets are dropped. A priority-tagged packet is

treated as an untagged packet in this switch. Only VLAN-tagged packets are admitted.

Disable - Disable untagged packet filtering

Drop Tag Per Port Setting

Enable - All VLAN-tagged packets are dropped. A priority-tagged packet is treated as an untagged

packet in this switch. Only untagged packets are admitted.

Disable - Disable VLAN-tagged packet filtering

Ingress Default Tag Per Port Setting

Each port can be configured with one Ingress Default Tag. This ingress port default tag is used when ingress
port is in Tag-ignore mode or for the received untagged packets in Tag-aware mode. The Ingress Default Tag
includes PVID, CFI and User Priority configuration.

When Ingress port default tag is used, it is copied as packet associated Packet Tag Information for VLAN
classification. The PVID is used as index to one VLAN group in VLAN group table.

Packet Tag Information

Under VLAN process, every packet is associated with one Packet Tag information in packet forwarding
operation. The tag information includes VID, CFI and User Priority data and is used for two purposes:

 The VID in tag is used as index for VLAN classification.
 The tag is used for egress tag insertion if egress tagging is enabled.

The following table lists how the Packet Tag information is generated:

Tag Aware setting Received Packet Type Packet Tag information source

Tag-ignore Untagged packet Ingress Port Default Tag
Tag-ignore Priority-tagged packet Ingress Port Default Tag
Tag-ignore VLAN-tagged packet Ingress Port Default Tag
Tag-aware Untagged packet Ingress Port Default Tag
Tag-aware Priority-tagged packet Ingress Port Default Tag
Tag-aware VLAN-tagged packet Received packet VLAN Tag

-64-

VLAN Group Table Configuration

The switch provides a table of eight VLAN groups to support up to eight VLANs at the same time. Each
VLAN group is associated to one unique VLAN. The table is referred for VLAN classification.

A VLAN group contains the following configuration settings:

VID: 12-bit VLAN Identifier index to the VLAN to which the group is associated
Member Ports: The admitted egress ports for packets belonging to this VLAN
Source Port Check: Tthe ingress port of the packet must also be the member port of this VLAN. Otherwise,

the packet is discarded.

VLAN Classification

VLAN classification is a process to classify a VLAN group to which a received packet belongs. The VID of the
generated Packet Tag information associated to the received packet is used as an index for VLAN group table
lookup. The VID matched VLAN group will be used for packet forwarding. If no matched VLAN group is
found in table lookup, the packet is dropped.

Refer to section 4.6.1.7 for details of how Packet Tag information is generated.

The member ports specified in the matched VLAN group are the admitted egress port range for the packet. The
packet will never be forwarded to other ports which are not in the member ports.

The Source Port Check setting of the matched VLAN group is also referred. If it is enabled, the ingress port
will be checked whether it is a member port of this group.

Packet Forwarding

The forwarding is a process to forward the received packet to one or more egress ports. The process uses the
following information as forwarding decision:

Member ports of the matched VLAN group: the egress port range for forwarding
Source Port Check setting of the matched VLAN group: check ingress port membership
The packet destination MAC address: for MAC address table loop up
The switch MAC address table: to find the associated port where a MAC address is learned

If the MAC address table lookup is matched and the learned port is the VLAN member port, the packet is
forwarded to the port (egress port). If the lookup failed, the switch will broadcast the packet to all member
ports.

-65-

Egress Tagging Rules

Egress Tagging rules are used to make change to the packet before it is stored into egress queue of an egress
port. The egress settings are provided for each port and are described as follows:

Egress Settings

Insert Tag (per port setting)

Enable - Insert the Tag data of the associated Packet Tag information into the packet
Disable - No tagging is performed.

Untagging Specific VID (per port setting)
Enable - No tag insertion if the VID data of the associated Packet Tag information matches the Untagged

VID configured in next setting even [Insert Tag] is enabled.

Disable - This rule is not applied.

Summary of VLAN Function

VLAN Modes (Configuration methods)

Port-based VLAN Mode: Simple UI to configure Port-based 2-VLAN-groups
Port-based VLAN ISP Mode: Simple UI to configure Port-based 7-VLAN-groups
Simplified VLAN Mode: Simple UI to configure Tag-based VLAN
Advanced VLAN Mode: Full VLAN configuration for port-based and Tag-based VLAN

VLAN range supported: 1 ~ 4095 (eight VLANs at the same time)
[PVID] [VID] [Untagged VID] value range: 1 ~ 4095

-66-

4.6.2 Port-based VLAN Mode

=>

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Group 1, 2 Port-based VLAN group number
Member ports Select member ports for the group

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration
[Back] Click to go back to upper menu

___________________________________________________________________________________________________________________________________________________

Operation in this mode:

1. The member ports of two groups are allowed to overlap.

2. The member ports in same group can communicate with other members only.

3. No packet tag is examined.

4. A received packet will not be modified (i.e. tagging or untagging) through VLAN operation till it is

transmitted.

Note:
VLAN group 1 is configured with VID (VLAN ID) 1 and group 2 is configured with VID 2 by the system
automatically.

-67-

4.6.3 Port-based VLAN ISP Mode

=>

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Joint port Select a port as the joint port for all 7 port-based VLAN groups

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration
[Back] Click to go back to upper menu

___________________________________________________________________________________________________________________________________________________

Example:
If Port 8 is selected as the joint port, the 7 port-based VLAN groups are configured as follows automatically:

Group 1 - member [Port 1, Port 8], Group 2 - member [Port 2, Port 8]
Group 3 - member [Port 3, Port 8], Group 4 - member [Port 4, Port 8]
Group 5 - member [Port 5, Port 8], Group 6 - member [Port 6, Port 8]
Group 7 - member [Port 7, Port 8]

Mode Operation:

1. The joint port is the shared member port for all groups.

2. Two member ports are configured in each group.

3. The member ports in same group can communicate with other only.

4. No packet tag is examined.

5. A received packet will not be modified (i.e. tagging or untagging) through VLAN operation till it is

transmitted.

Note:
The seven groups are configured with associated VID 1 ~ 7 respectively by the system.

-68-

4.6.4 Simplified Tag-based VLAN Mode

=>

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

[VLAN Groups] Click to configure VLAN groups first
[VLAN Per Port] Click to configure per port simplified VLAN settings

___________________________________________________________________________________________________________________________________________________

-69-

4.6.4.1 VLAN Groups

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Group Group number
VID VID of the VLAN to which this group is associated

1 ~ 4095 - decimal 12-bit VID value

Member Ports Select the admitted egress ports for the packets belong to the VLAN

Port 1 ~ 8 - click to select

Source Port Check Check whether the ingress port is the member port of the VLAN

Enable - set to enable this check, the packet is dropped if ingress port is not member
port of the VLAN.

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration
[Back] Click to go back to upper menu

Disable - set to disable this check

___________________________________________________________________________________________________________________________________________________

Note: This VLAN group configuration is also applied to Advanced VLAN configuration

-70-

4.6.4.2 Per Port Settings

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Port Port number
PVID Port VID, VID of Ingress Default Tag (See section 4.6.4.1)

1 ~ 4095 - decimal 12-bit VID value

Drop Untag Drop all untagged packets and priority-tagged packets (ingress)

Enable - drop untagged packets and priority-tagged packets
Disable - admit untagged packets and priority-tagged packets

Egress Tagging Tagging rule for egress operation

Tag - Tagging all egress packets
Untag - No tagging for all egress packets
Specific Tag - Tagging egress packets except those matched [Untagged VID]

Untagged VID VID for Specific Tag in [Egress Tagging] setting

1 ~ 4095 - decimal 12-bit VID value

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration
[Back] Click to go back to upper menu

___________________________________________________________________________________________________________________________________________________

-71-

4.6.4.3 Simplified Tag-based VLAN Operation

Ingress filtering setting [Drop Untag] = Enable

Ingress Packets Rule
Untagged packets Dropped
Priority packets Dropped
Tagged packets Admitted to get into forwarding operation

Ingress filtering setting [Drop Untag] = Disable

Ingress Packets Rule
Untagged packets Admitted to get into forwarding operation
Priority packets Admitted to get into forwarding operation
Tagged packets Admitted to get into forwarding operation

Ingress filtering setting [Drop Untag] = Disable
Egress rule setting [Egress Tagging] = Tag

Ingress Packets Egress rule
Untagged packets Tagging with Ingress Default Tag* (Tagging)
Priority packets Tagging with Ingress Default Tag* (Tagging)
Tagged packets Egress with no packet modification

* Ingress Default Tag = Ingress port PVID + CFI (0) + User priority (0)

Ingress filtering setting [Drop Untag] = Disable
Egress rule setting [Egress Tagging] = Untag

Ingress Packets Egress rule
Untagged packets Egress with no packet modification (untagged)
Priority packets Egress with no packet modification (untagged)
Tagged packets Tag is removed (Untagging)

* Ingress Default Tag = Ingress port PVID + CFI (0) + User priority (0)

Ingress filtering setting [Drop Untag] = Disable

-72-

Egress rule setting [Egress Tagging] = Specific Tag

Ingress Packets Egress rule
Untagged packets Tagging with Ingress Default Tag* (Tagging)
Priority packets Tagging with Ingress Default Tag* (Tagging)
Tagged packets Egress with no packet modification

except the packets with VID equal to [Untagged VID] setting*

* Ingress Default Tag = Ingress port PVID + CFI (0) + User priority (0)
& not equal to [Untagged VID] setting
* The packets with VID equal to [Untagged VID] setting are removed the tag.

For more information about Ingress Default Tag, refer to section 4.6.1.

-73-

4.6.5 Advanced VLAN Mode

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Ingress Default Tag Click to configure per port Ingress Default Tag settings
Ingress Settings Click to configure per port ingress settings
Egress Settings Click to configure per port egress settings
VLAN Groups Click to configure VLAN group table

___________________________________________________________________________________________________________________________________________________

-74-

4.6.5.1 Ingress Default Tag

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Port Port number
PVID Port VID, VID for Ingress Default Tag

1 ~ 4095 - decimal 12-bit VID value

CFI CFI for Ingress Default Tag

0, 1 - 1-bit CFI value

User Priority User priority for Ingress Default Tag

0 ~ 7 - decimal 3-bit value

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration
[Back] Click to go back to upper menu

___________________________________________________________________________________________________________________________________________________

PVID is used as index for VLAN classification (VLAN group table lookup) in one of the following conditions:

1. Ingress port [Tag Aware] setting = Tag-ignore

2. Ingress port [Tag Aware] setting = Tag-aware

and the received packet is untagged or priority-tagged

[PVID+CFI+User Priority] = Ingress Default Tag for the ingress port
It is used as the tag for insertion in egress tagging operation in one of the following conditions:

1. Ingress port [Tag Aware] setting = Tag-ignore, Egress port [Insert Tag] = Enable

2. Ingress port [Tag Aware] setting = Tag-aware, Egress port [Insert Tag] = Enable

and the received packet is untagged or priority-tagged

-75-

4.6.5.2 Ingress Settings

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Port Port number
Tag Aware Check tag data for every received packet

Tag-aware - set to activate Tag-based mode
Tag-ignore - set to use port-based mode and ignore any tag in packet

Keep Tag Tag is removed from the received packet if exists

Enable - set to activate tag removal for VLAN-tagged packets
Disable - set to disable tag removal function

Drop Untag Drop all untagged packets and priority-tagged packets

Enable - drop untagged packets and priority-tagged packets
Disable - admit untagged packets and priority-tagged packets

Drop Tag Drop all VLAN-tagged packets

Enable - drop VLAN-tagged packets
Disable - admit VLAN-tagged packets

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

___________________________________________________________________________________________________________________________________________________

Note:

1. Priority-tagged packet (VID=0) is treated as untagged packet in the switch.

2. [Tag Aware] setting affects the index used for VLAN classification (VLAN table lookup). The following

-76-

table lists the index used:
Ingress [Tag Aware] setting
Received packet type Tag-ignore Tag-aware
Untagged PVID PVID
Priority-tagged (VID=0) PVID PVID
VLAN-tagged (VID>0) PVID Packet tag VID

3. Both [Drop Untag] and [Drop Tag] are set to Disable to admit all packets.

-77-

4.6.5.3 Egress Settings

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Port Port number
Insert Tag Activate tagging (Insert a tag to the packet)

Enable - set to activate tagging
Disable - set to disable tagging function

Untagging Specific VID No tag insertion if packet tag information matches [Untagged VID]

Enable - set to enable this function
Disable - set to disable this function

Untagged VID VID for [Untagging Specific VID] setting

1 ~ 4095 - decimal 12-bit VID value

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration
[Back] Click to go back to upper menu

___________________________________________________________________________________________________________________________________________________

The inserted tag sources when [Insert Tag] = Enable are listed as follows:

Received packet type [Tag Aware]=Tag-ignore [Tag Aware]=Tag-aware

Untagged Ingress Default Tag Ingress Default Tag
Priority-tagged (VID=0) Ingress Default Tag Ingress Default Tag
VLAN-t

agged (VID>0) Ingress Default Tag Packet own tag

-78-

4.6.5.4 VLAN Groups

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Group Group number
VID VID of the VLAN to which this group is associated

1 ~ 4095 - decimal 12-bit VID value

Member Ports Select the admitted egress ports for the packets belong to the VLAN

Port 1 ~ 8 - click to select

Source Port Check Check whether the ingress port is the member port of the VLAN

Enable - set to enable this check, the packet is dropped if ingress port is not member
port of the VLAN.
Disable - set to disable this check

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration
[Back] Click to go back to upper menu

___________________________________________________________________________________________________________________________________________________

Note: This VLAN groups configuration is also applied to Advanced VLAN configuration.

-79-

4.6.6 Simplified Tag-based VLAN vs. Advanced VLAN

Simplified Tag-based mode comes from “Advanced” mode actually. Some optional settings in “Advanced”
mode are pre-configured and hidden for no change under Simplified mode. The following table lists the setting
relations between Simplified mode and Advanced:

Hidden Advanced settings & pre-configured value in Simplified Mode

Setting Value

[CFI] 0
[User Priority] 0
[Tag Aware] enable
[Keep Tag] disable
[Drop Tag] disable

Simplified Mode [Egress Tagging] is equal to combination of Advanced Mode [Insert Tag] & [Untagging
Specific VID]. The setting options are:

Simplified Mode Advanced Mode
[Egress Tagging]

[Insert Tag] [Untagging Specific VID]

Tag Enable Disable
Untag Disable Disable
Specific Tag Enable Enable

-80-

4.6.7 Important Notes for VLAN Configuration

Some considerations should be checked in configuring VLAN settings:

1. Switch VLAN Mode selection

It is suggested to evaluate your VLAN application first and plan your VLAN configuration carefully before

applying it. Any incorrect setting might cause network problem.

2. Aggregation/Trunking configuration

Make sure the members of a link aggregation (trunk) group are configured with same VLAN configuration

and are in same VLAN group.

3. Double Tagged in Advanced VLAN Mode

For a received packet, Ingress port [Keep Tag] setting and Egress port [Insert Tag] setting are enabled at

the same time. It will cause the packet double-tagged when egress. Although, it is often applied in Q-in-Q

provider bridging application. However, such condition should be avoided in normal VLAN configuration.

See table below:

Settings Ingress port Egress port
[Keep Tag] [Insert Tag]

> Received Packet > Packet Transmitted

Enable Enable Priority-tagged Double-tagged
Enable Enable VLAN-tagged Double-tagged

-81-

4.7 LACP

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Port Port number
Protocol Enabled Enable LACP support for the port
Key Value An integer value assigned to the port that determines which ports are aggregated into

an LACP link aggregate. Set same value to the ports in
same LACP link aggregate. Value: 1 ~ 255.
Auto - key value is assigned by the system

__________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

___________________________________________________________________________________________________________________________________________________

Notes:

1. This configuration is used to configure LACP aggregate groups.

2. The ports which have same key value are in same LACP aggregate group.

3. The ports with Auto key are in same LACP aggregate group.

4. The ports configured in non-LACP aggregation are not available in this configuration.

-82-

4.8 RSTP

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

System Priority The lower the bridge priority is the higher priority it has. Usually, the bridge with the

highest bridge priority is the root. Value: 0 ~ 61440

Hello Time Hello Time is used to determine the periodic time to send normal BPDU from

designated ports among bridges. It decides how long a bridge should send this
message to other bridge to tell I am alive. Value: 1 ~ 10

Max Age When the switch is the root bridge, the whole LAN will apply this setting as their

maximum a ge time. Value: 6 ~ 40

Forward Delay This figure is set by Root Bridge only. The forward delay time is defined as the time

spent from Listening state moved to Learning state and also from Learning state
moved to Forwarding state of a port in bridge. Value: 4 ~ 30

-83-

Force Version Two options are offered for choosing STP algorithm.

Compatible - STP (IEEE 802.1D)

___________________________________________________________________________________________________________________________________________________

Aggregations Enabled to support port trunking in STP. It means a link aggregate is treated as a

physical port in RSTP/STP operation.
Port Protocol Enabled Port is enabled to support RSTP/STP.
Port Edge An Edge Port is a port connected to a device that knows nothing about STP or RSTP.

Usually, the connected device is an end station. Edge Ports will immediately transit to

forwarding state and skip the listening and learning state because the edge ports

cannot create bridging loops in the network.
Port Path Cost Specifies the path cost of the port that switch uses to determine which port are the

forwarding ports the lowest number is forwarding ports, the rage is 1 ~ 200,000,000

and Auto. Auto means a default cost is automatically calculated in RSTP operation

based on the port link speed.

The default costs are:

Normal - RSTP (IEEE 802.1w)

Link Speed

Auto Default Cost
10Mbps 2000000
100Mbps 200000

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

1000Mbps 20000

___________________________________________________________________________________________________________________________________________________

-84-

4.9 802.1X Authentication

For some IEEE 802 LAN environments, it is desirable to restrict access to the services offered by the LAN to
those users and devices that are permitted to make use of those services. IEEE 802.1X Port-based network
access control function provide a means of authenticating and authorizing devices attached to a LAN port that
has point-to-point connection characteristics, and of preventing access to that port in cases in which the
authentication and authorization process fails. The 802.1X standard relies on the client to provide credentials in
order to gain access to the network. The credentials are not based on a hardware address. Instead, they can be
either a username/password combination or a certificate. The credentials are not verified by the switch but are
sent to a Remote Authentication Dial-In User Service (RADIUS) server, which maintains a database of
authentication information. 802.1X consists of three components for authentication exchange, which are as
follows:

 802.1X authenticator: This is the port on the switch that has services to offer to an end device, provided the

device supplies the proper credentials.

 802.1X supplicant: This is the end device; for example, a PC that connects to a switch that is requesting to

use the services (port) of the device. The 802.1X supplicant must be able to respond to communicate.

 802.1X authentication server: This is a RADIUS server that examines the credentials provided to the

authenticator from the supplicant and provides the authentication service. The authentication server is
responsible for letting the authenticator know if services should be granted.

802.1X authenticator operates as a go-between with the supplicant and the authentication server to provide
services to the network. When a switch is configured as an authenticator, the ports of the switch must then be
configured for authorization. In an authenticator-initiated port authorization, a client is powered up or plugs
into the port, and the authenticator port sends an Extensible Authentication Protocol (EAP) PDU to the
supplicant requesting the identification of the supplicant. At this point in the process, the port on the switch is

-85-

connected from a physical standpoint; however, the 802.1X process has not authorized the port and no frames
are passed from the port on the supplicant into the switching engine. If the PC attached to the switch did not
understand the EAP PDU that it was receiving from the switch, it would not be able to send an ID and the port
would remain unauthorized. In this state, the port would never pass any user traffic and would be as good as
disabled. If the client PC is running the 802.1X EAP, it would respond to the request with its configured ID.
(This could be a username/password combination or a certificate.)

After the switch, the authenticator receives the ID from the PC (the supplicant). The switch then passes the ID
information to an authentication server (RADIUS server) that can verify the identification information. The
RADIUS server responds to the switch with either a success or failure message. If the response is a success, the
port will be authorized and user traffic will be allowed to pass through the port like any switch port connected
to an access device. If the response is a failure, the port will remain unauthorized and, therefore, unused. If
there is no response from the server, the port will also remain unauthorized and will not pass any traffic.

4.9.1 802.1X Configuration

-86-

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Mode Disabled - disable 802.1X function

Enabled - enable 802.1X function

RADIUS IP IP address of the Radius server
RADIUS UDP Port The UDP port for authentication requests to the specified Radius server
RADIUS Secret The Encryption key for use during authentication sessions with the Radius server. It

must match the key used on the Radius server.

Port Port number
Admin State Port 802.1X control

Auto - set to the Authorized or Unauthorized state in accordance with the outcome of
an authentication exchange between the Supplicant and the Authentication Server.

Force Authorized - the port is forced to be in authorized state.
Force Unauthorized - the port is forced to be in unauthorized state.

Port State Port 802.1X state

802.1X Disabled - the port is in 802.1X disabled state
Link Down - the port is in link down state
Authorized (green color) - the port is in 802.1X authorized state
Unauthorized (red color) - the port is in 802.1X unauthorized state

___________________________________________________________________________________________________________________________________________________

[Re-authenticate] Click to perform a manual authentication for the port
[Force Reinitialize] Click to perform an 802.1X initialization for the port
[Re-authenticate All] Click to perform manual authentication for all ports
[Force Reinitialize All] Click to perform 802.1X initialization for all ports
[Parameters] Click to configure Re-authentication parameters
[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

___________________________________________________________________________________________________________________________________________________

-87-

4.9.2 802.1X Re-authentication Parameters

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Reauthentication Enabled Check to enable periodical re-authentication for all ports
Reauthentication Period The period of time after which the connected radius clients must be re-authenticated

(unit: second), Value: 1- 3600

EAP timeout The period of time the switch waits for a supplicant response to an EAP request (unit:

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

second), Value: 1 - 255

___________________________________________________________________________________________________________________________________________________

-88-

4.10 IGMP Snooping

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

IGMP Enabled Check to enable global IGMP snooping.
Router Ports Specify which ports have multicast router connected and require being forwarding

IPMC packets unconditionally.

VLAN ID List of current existing VLANs
IGMP Snooping Enabled Check to enable IGMP snooping on the associated VLAN.
IGM P Que r y i n g E n a b l ed Check to enable IGMP querying on the associated VLAN.

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

___________________________________________________________________________________________________________________________________________________

-89-

4.11 Mirroring

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Mirror Port The port for being forwarded all packets received on the mirrored ports
Mirror Source Select the ports which will be mirrored all received packets to the mirror port.

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

___________________________________________________________________________________________________________________________________________________

-90-

4.12 Quality of Service

The switch provides a powerful Quality of Service (QoS) function to guide the packet forwarding in
four priority classes. The versatile classification methods can meet most of the application needs. The
following figure illustrates the QoS operation flow when a packet received on the ingress port until it
is transmitted out from the egress port:

Packet Priority Classification

Each received packet is examined and classified into one of four priority classes, Class 3, Class 2, Class 1 and
Class 0 upon reception. The switch provides the following classification methods:

802.1p classification: use User Priority tag value in the received IEEE 802.1Q packet to map to one priority
class
DSCP classification: use DSCP value in the received IP packet to map to one priority class

-91-

Port-based classification: used when 802.1p and DSCP are disabled or fail to be applied

They all can be configured to be activated or not. More than one classification methods can be enabled at the
same time. However, 802.1p classification is superior over DSCP classification.

802.1p mapping tables: Each ingress port has its own mapping table for 802.1p classification.
DSCP mapping table: All ingress ports share one DSCP mapping table for DSCP classification.
Default port priority: A port default priority class is used when port-based classification is applied

All configuration settings are in per port basis except that DSCP mapping table is global to all ports. A received
packet is classified into one of four priority class before it is forwarded to an egress port.

Priority Class Queues

Each egress port in the switch is equipped with four priority class egress queues to store the packets for
transmission. A packet is stored into the class queue which is associated to the classified priority class. For
example, a packet is stored into Class 3 egress queue if it is classified as priority Class 3.

Egress Service Policy

Each port can be configured with an egress service policy to determine the transmission priority among four
class queues. By default, higher class number has higher priority than the lower class numbers.

Four policies are provided for selection as follows:

 Strict priority : Packets in high priority class queue are sent first until the queue is empty
 Weighted ratio priority Class 3:2:1:0 = 4:3:2:1 : four queues are served in 4:3:2:1 ratio
 Weighted ratio priority Class 3:2:1:0 = 5:3:1:1 : four queues are served in 5:3:1:1 ratio
 Weighted ratio priority Class 3:2:1:0 = 1:1:1:1 : four queues are served equally

Strict priority policy lets high priority class queue is served first until it is empty. Lower priority queue may not
get any service (or egress bandwidth) when higher priority traffic is heavy for long time. Three weighted ratio
policies are provided to resolve such problem. Four class queues are served in weighted round robin basis.
Every priority class can get a guaranteed ratio for the egress bandwidth.

-92-

4.12.1 QoS Configuration

___________________________________________________________________________________________________________________________________________________

QoS Configuration Description

___________________________________________________________________________________________________________________________________________________

Port Port number

802.1p 802.1p priority classification
Enable - set to enable this classification to the port for priority-tagged and
VLAN-tagged packets
Disable - 802.1p classification is not applied to the port

DSCP DSCP classification

Enable - set to enable DSCP classification to the port for IP packets
Disable - DSCP classification is not applied to the port

Port Priority Port default priority class, it is used as a port-based QoS mode when 802.1p and

DSCP classifications are disabled. It is also used as default priority class for the
received packet when both 802.1p and DSCP classification failed in classification.
Class 3 ~ Class 0 - priority class

___________________________________________________________________________________________________________________________________________________

[802.1p Mapping] Click to configure 802.1p mapping tables.
[DSCP Mapping] Click to configure DSCP mapping table.
[Service Policy] Click to configure per port egress service policy mode.
[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

___________________________________________________________________________________________________________________________________________________

-93-

Note:

802.1p classification is superior over DSCP classification if both are enabled. That means if a received packet

is classified successfully in 802.1p classification, the classified priority class is used directly for the packet and
the result of DSCP classification is ignored.

4.12.2 802.1p Mapping

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Port n Port number n
tag m 3-bit User priority tag value m ( range : 0 ~ 7 )
Priority class Mapped priority class for tag m on Port n

Class 3 ~ Class 0

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration
[Back] Click to go back to upper menu

___________________________________________________________________________________________________________________________________________________

Every ingress port has its own 802.1p mapping table. The table is referred in 802.1p priority classification for
the received packet.

-94-

4.12.3 DSCP Mapping

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

DSCP [0-63] Seven user-defined DSCP values which are configured with a priority class

0 ~ 63 - 6-bit DSCP value in decimal

Priority The priority class configured for the user-defined DSCP value

Class 3 ~ Class 0

All others The other DSCP values not in the seven user-defined values are assigned a default

priority class
Class 3 ~ Class 0

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration
[Back] Click to go back to upper menu

___________________________________________________________________________________________________________________________________________________

Only one DSCP mapping table is configured and applied to all ports. The table is referred in DSCP priority
classification.

-95-

4.12.4 QoS Service Policy

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Port Port number
Policy Service policy for egress priority among four egress class queues

Strict priority - high class queue is served first always till it is empty
Weighted ratio priority Class 3:2:1:0 = 4:3:2:1 - weighted ratio 4:3:2:1
Weighted ratio priority Class 3:2:1:0 = 5:3:1:1 - weighted ratio 5:3:1:1
Weighted ratio priority Class 3:2:1:0 = 1:1:1:1 - weighted ratio 1:1:1:1

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration
[Back] Click to go back to upper menu

___________________________________________________________________________________________________________________________________________________

Notes:

1. Queue with higher class number has higher priority than queue with lower class number. That means

Class 3 > Class 2 > Class 1 > Class 0 by default.

2. In weighted ratio policies, a weighted fairness round robin service is guaranteed normally. However, when

excess bandwidth exists higher class queue will take advantage on bandwidth allocation.

-96-

4.13 Storm Control

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Broadcast Rate The rate limit of the broadcast packets transmitted on a port.
Broadcast Rate The rate limit of the Multicast packets transmitted on a port.
Flooded Unicast Rate The rate limit of the flooded unicast packets transmitted on a port. The Flooded

unicast packets are those unicast packets whose destination address is not learned in
the MAC address table.

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

___________________________________________________________________________________________________________________________________________________

Notes:

1. The unit of the rates is pps (packets per second).

2. No Limit - no protection control

-97-

4.14 Multi Ring

___________________________________________________________________________________________________________________________________________________

Configuration Description

___________________________________________________________________________________________________________________________________________________

Ring Group 1 -4 Up to four redundant rings supported in one switch
Ring Port 1, 2 Two ring ports are needed to support one redundant ring.
Backup Port Check to specify the ring port as a backup port.
Ring Group ID One unique ID is assigned for the associated ring group. The ring group ID should be

same for all switch members in the associated ring.

___________________________________________________________________________________________________________________________________________________

[Apply] Click to apply the configuration change
[Refresh] Click to refresh current configuration

___________________________________________________________________________________________________________________________________________________

Notes:

1. One switch provides two ports to support one redundant ring. As a slave switch, both ports are configured

<Ring Port>. To be a master of a ring, one port must be set to <Backup Port>.

2. Only one backup port is configured among the member switches in a redundant ring.

3. One switched port can only be configured either Multi Ring enabled or RSTP enabled.

-98-

4.15 Statistics Overview

___________________________________________________________________________________________________________________________________________________

Statistics Description

___________________________________________________________________________________________________________________________________________________

Port Port number
Tx Bytes Total of bytes transmitted on the port
Tx Frames Total of packet frames transmitted on the port
Rx Bytes Total of bytes received on the port
Rx Frames Total of packet frames received on the port
Tx Errors Total of error packet frames transmitted on the port
Rx Errors Total of error packet frames received on the port

___________________________________________________________________________________________________________________________________________________

[Clear] Click to reset all statistic counters
[Refresh] Click to refresh all statistic counters

___________________________________________________________________________________________________________________________________________________

-99-

4.16 Detailed Statistics

___________________________________________________________________________________________________________________________________________________

Button Description

___________________________________________________________________________________________________________________________________________________

[Port #] Click to display the detailed statistics of Port #.
[Clear] Click to reset all statistic counters
[Refresh] Click to refresh the displayed statistic counters

___________________________________________________________________________________________________________________________________________________

-100-