KTI Networks KGS-2416 User Manual
MMaannaaggeedd 2244--PPoorrtt
GGiiggaabbiitt EEtthheerrnneett SSwwiittcchh wwiitthh 2244 SSF
FFiibbeerr SSuuppppoorrtt
F
UUsseerr’’ss MMaannuuaal
l
PP
DOC.090920
User's Manual
16-Port SFP + 8-Port Combo GbE L2 Plus Managed Switch
MANUFACTURE SOFTWARE LICENSE AGREEMENT
NOTICE: Please carefully read this Software License Agreement (hereinafter referred to as this “Agreement”) before copying or using the accompanying
software or installing the hardware unit with pre-enabled software or firmware (each of which is referred to as “Software” in t his Agreement). BY COPYING
OR USING THE SOFTWARE, YOU ACCEPT ALL OF THE PROVISIONS AND CONDITIONS OF THIS AGREEMENT. THE PROVISIONS EXPRESSED IN
THIS AGREEMENT ARE THE ONLY PROVISION UNDER WHICH MANUFACTURE WILL PERMIT YOU TO USE THE SOFTWARE. If you do not accept
these provisions and conditions, please immediately return the unused software, manual and the related product. Written approval is NOT a prerequisite to
the validity or enforceability of this Agreement and no solicitation of any such written approval by or on behalf of Manufacture shall be deemed as an
inference to the contrary.
LICENSE GRANT. The end user (hereinafter referred to as “Licensee”) of the Software is granted a personal, non-sublicensable, nonexclusive,
nontransferable license by Manufacture Corporation (“Manufacture”): (1) To use the Manufacture’s software (“Software”) in object code form solely on a
single central processing unit owned or leased by Licensee or otherwise embedded in the equipment offered by Manufacture. (2) To copy the Software only
for backup purposes in support of authorized use of the Software. (3) To use and copy the documentation related to the Software solely in support of
authorized use of the Software by Licensee. The License applies to the Software only except other Manufacture’s software or hardware products. Without
the prior written consent of Manufacture, Licensee has no right to receive any source code or design documentation with respect to the Software.
RESTRICTIONS ON USE; RESERVATION OF RIGHTS. The Software and related documentation are protected under copyright laws. Manufacture and/or
its licensors retain all title and ownership in both the Software and its related documentation, including any revisions made by Manufacture. The copyright
notice must be reproduced and included with any copy of any portion of the Software or related documentation. Except as expressly authorized above,
Licensee shall not copy or transfer the Software or related documentation, in whole or in part. Licensee also shall not modify, translate, decompile,
disassemble, use for any competitive analysis, reverse compile or reverse assemble all or any portion of the Software, related documentation or any copy.
The Software and related documentation embody Manufacture’s confidential and proprietary intellectual property. Licensee is not allowed to disclose the
Software, or any information about the operation, design, performance or implementation of the Software and related documentation that is confidential to
Manufacture to any third party. Software and related documentation may be delivered to you subject to export authorization required by governments of
Taiwan and other countries. You agree that you will not export or re-export any Software or related documentation without the proper export licenses
required by the
governments of affected countries.
LIMITED SOFTWARE WARRANTY. Manufacture warrants that any media on which the Software is recorded will be free from defects in materials under
normal use for a period of twelve (12) months from date of shipment. If a defect in any such media should occur during the effective warranty period, the
media may be returned to Manufacture, then Manufacture will replace the media. Manufacture shall not be responsible for the replacement of media if the
failure of the media results from accident, abuse or misapplication of the medi a.
EXCLUSIONS. The warranty as mentioned above does not apply to the Software, which (1) customer does not comply with the manual instructions offered
by Manufacture in installation, operation, or maintenance, (2) Product fails due to damage from unusual external or electrical stress, shipment, storage,
accident, abuse or misuse, (3) Product is used in an extra hazardous environment or activities, (4) any serial number on the Product has been removed or
defaced, or (5) this warranty will be of no effect if the repair is via anyone other than Manufacture or the authorized agents. The maximum liability of
Manufacture under this warranty is confined to the purchase price of the Product covered by this warranty.
DISCLAIMER. EXCEPT AS PROVIDED ABOVE, THE SOFTWARE IS PROVIDED “AS IS ” AND MANUFACTURE AND ITS LICENSORS MAKE NO
WARRANTIES, EXPRESS OR IMPLIED, WITH REPSECT TO THE SOFTWARE AND DOCUMENTAITON. MANUFACTURE AND ITS LICENSORS
DISCLAIM ALL OTHER WARRANTIES, INCLUSIVE OF WITHOUT LIMITATION, IMPLIED WARRANTIES OR MERCHANTABILITY, FITNESS FOR A
PARTICULAR PURPOSE AND NONINFRINGEMENT. FURTHER, MANUFACTURE DOES NOT WARRANT, GUARANTEE, OR MAKE ANY
REPRESENTATIONS REGARDING THE USE, OR THE RESULTS OF THE USE, OF THE SOFTWARE OR RELATED WRITTEN DOCUMENTAITON IN
TERMS OF CORRECTNESS, ACCURACY, RELIABILITY, OR OTHERWISE.
CONSEQUENTIAL DAMAGES. IN NO EVENT SHALL MANUFACTURE OR ITS AUTHORIZED RESELLER BE LIABLE TO LICENSEE OR ANY THIRD
PARTY FOR (A) ANY MATTER BEYOND ITS REASONABLE CONTROL OR (B) ANY CONSEQUENTIAL, SPECIAL, INDIRECT OR INCIDENTAL
DAMAGES ARISING OUT OF THIS LICENSE OR USE OF THE SOFTWARE PROVIDED BY MANUFACTURE, EVEN IF MANUFACTURE HAS BEEN
NOTIFIED OF THE POSSIBILITY OF SUCH DAMAGES IN ADVANCE. IN NO EVENT SHALL THE LIABILITY OF MANUFACTURE IN CONNECTION
WITH THE SOFTWARE OR THIS AGREEMENT EXCEED THE PRICE PAID TO MANUFACTURE FOR THE LICENSE.
TERM AND TERMINATION. The License is effective until terminated; however, all of the restrictions in regard to Manufacture’s copyright in the Software
and related documentation will cease being effective at the date of expiration; Notwithstanding the termination or expiratio n of the te rm of this a greemen t, it
is acknowledged and agreed that those obligations relating to use and disclosure of Manufacture’s confidential information shall survive. Licensee may
terminate this License at any time by destroying the software together with all copies thereof. This License will be immediately terminated if Licensee fails to
comply with any term and condition of the Agreement. Upon any termination of this License for any reason, Licensee shall discontinue to use the Software
and shall destroy or return all copies of the Software and the related documentation.
GENERAL. This License shall be governed by and construed pursuant to the laws of Taiwan. If any portion hereof is held to be invalid or unenforceable,
the remaining provisions of this License shall remain in full force and effect. Neither the License nor this Agreement is assignable or transferable by
Licensee without Manufacture’s prior written consent; any attempt to do so shall be void. This License constitutes the entire License between the parties
with respect to the use of the Software.
LICENSEE ACKNOWLEDGES THAT LICENSEE HAS READ THIS AGREEMENT, UNDERSTANDS IT, AND AGREES TO BE BOUND BY ITS TERMS AND
CONDITIONS. LICENSEE FURTHER AGREES THAT THIS AGREEMENT IS THE ENTIRE AND EXCLUSIVE AGREEMENT BETWEEN MANUFACTURE
AND LICENSEE.
i
Table of Contents
CAUTION............................................................................................................................................ IV
ELECTRONIC EMISSION NOTICES ....................................................................................................... IV
1. INTRODUCTION........................................................................................................................6
1-1. OVERVIEW OF SW24GF................................................................................................................6
1-2. CHECKLIST ...................................................................................................................................9
1-3. FEATURES .....................................................................................................................................9
1-4. VIEW OF SW24GF......................................................................................................................11
1-4-1. User Interfaces on the Front Panel (Button, LEDs and Plugs)......................................... 11
1-4-2. AC Power Input on the Rear Panel....................................................................................12
1-5. VIEW OF THE OPTIONAL MODULES.............................................................................................12
2. INSTALLATION........................................................................................................................13
2-1. STARTING SW24GF UP................................................................................................................13
2-1-1. Hardware and Cable Installation ......................................................................................13
2-1-2. Installing Chassis to a 19-Inch Wiring Closet Rail............................................................15
2-1-3. Cabling Requirements........................................................................................................15
2-1-3-1. Cabling Requirements for TP Ports........................................................................................... 15
2-1-3-2. Cabling Requirements for 1000SX/LX SFP Module.................................................................15
2-1-3-3. Switch Cascading in Topology.................................................................................................. 17
2-1-4. Configuring the Management Agent of SW24GF ..............................................................20
2-1-4-1. Configuring the Management Agent of SW24GF through the Serial RS-232 Port................... 21
2-1-4-2. Configuring the Management Agent of SW24GF through the Ethernet Port............................ 23
2-1-5. IP Addr ess Assignme nt.......................................................................................................24
2-2. TYPICAL APPLICATIONS................................................................................................................29
3. OPERATION OF WEB-BASED MA N AG E MENT...............................................................31
3-1. WEB MANAGEMENT HOME OVERVIEW.......................................................................................32
3-1-1. System Information............................................................................................................35
3-1-2. Account Configuration.......................................................................................................37
3-1-3. T ime Configuration............................................................................................................37
3-1-4. IP Configuration ................................................................................................................40
3-1-5. Loop Detection...................................................................................................................43
3-1-6. Management Policy...........................................................................................................44
3-1-7. System log..........................................................................................................................47
3-1-8. Virtual Stack.......................................................................................................................48
3-2. PORT CONFIGURATION ................................................................................................................50
3-2-1. Port Configuration.............................................................................................................51
3-2-2.Port Status...........................................................................................................................53
3-2-3. Simple Counter..................................................................................................................55
3-2-4. Detail Counter...................................................................................................................58
3-2-5. Power Saving.....................................................................................................................61
3-3. VLAN ........................................................................................................................................62
3-3-1. VLAN Mode........................................................................................................................62
3-3-2. Tag-based Gr oup................................................................................................................65
3-3-3. Port-based Group ..............................................................................................................67
3-3-4. Ports...................................................................................................................................69
3-3-5. Port Isolation.....................................................................................................................71
3-3-6. Management ......................................................................................................................72
3-4. MAC ..........................................................................................................................................73
3-4-1. Mac Address Table.............................................................................................................73
i
3-4-2. Static Filter........................................................................................................................75
3-4-3. Static Forward ...................................................................................................................76
3-4-4. MAC Alias..........................................................................................................................77
3-4-5. MAC Table.........................................................................................................................78
3-5. GVRP.........................................................................................................................................79
3-5-1. Config ................................................................................................................................79
3-5-2. Counter..............................................................................................................................82
3-5-3. Group.................................................................................................................................84
3-6. QOS(QUALITY OF SERVICE) CONFIGURATION.............................................................................85
3-6-1. Ports...................................................................................................................................85
3-6-2. Qos Control List.................................................................................................................87
3-6-3.Rate Limiters.......................................................................................................................93
3-6-4.Storm Control......................................................................................................................95
3-6-5.Wizard.................................................................................................................................96
3-7. SNMP CONFIGURATION............................................................................................................106
3-8. ACL..........................................................................................................................................108
3-8-1.Ports..................................................................................................................................108
3-8-2.Rate Limiters.....................................................................................................................110
3-8-3.Access Control List........................................................................................................... 111
3-8-4.Wizard...............................................................................................................................139
3-9. IP MAC BINDING .....................................................................................................................149
3-9-1.IP MAC Binding Configuration........................................................................................149
3-9-2. IP MAC BINDING DYNAMIC ENTRY.....................................................................................151
3-10. 802.1X CONFIGURATION.........................................................................................................152
3-10-1.Server..............................................................................................................................157
3-10-2.Port Configuration..........................................................................................................159
3-10-3.Status...............................................................................................................................162
3-10-4. Statistics.........................................................................................................................163
3-11. TRUNKING CONFIGURATION....................................................................................................164
3-11-1.Port .................................................................................................................... .............166
3-1 1-2 Aggregator View..............................................................................................................168
3-1 1-3 ACP System Priority........................................................................................................169
3-12 STP CONFIGURATION...............................................................................................................170
3-12-1. Status..............................................................................................................................170
3-12-2. Configuration.................................................................................................................172
3-12-3. STP Port Configuration.................................................................................................174
3-13 MSTP......................................................................................................................................177
3-13-1 Status...............................................................................................................................177
3-13-2 Region Config.................................................................................................................178
3-13-3 Instance View ..................................................................................................................179
3-14. MIRROR ..................................................................................................................................187
3-15. MULTICAST.............................................................................................................................188
3-15-1 IGMP Mode....................................................................................................................188
3-15-2 IGMP Proxy....................................................................................................................189
3-15-3 Snooping.........................................................................................................................191
3-15-4 Group Membership.........................................................................................................192
3-15-5 MVR................................................................................................................................193
3-15-6 MVID..............................................................................................................................194
3-15-7 Group Allow....................................................................................................................195
3-15-8 MVR Group Membership................................................................................................196
3-16. ALARM CONFIGURATION ........................................................................................................197
3-16-1 Events..............................................................................................................................198
3-16-2 Email...............................................................................................................................199
3-17. DHCP SNOOPING....................................................................................................................200
3-17-1. DHCP Snooping S t ate....................................................................................................200
ii
3-17-2. DHCP Snooping Entry...................................................................................................201
3-17-3. DHCP Snooping Client..................................................................................................202
3-18. LLDP......................................................................................................................................202
3-18-1 . LLDP State....................................................................................................................203
3-18-2 . LLDP Entry...................................................................................................................205
3-18-3 . LLDP Statistics .............................................................................................................207
3-19. SAVE/ RESTORE.......................................................................................................................209
3-19-1. Factory Defaults....................................................................................................... .....210
3-19-2 . Save Start......................................................................................................................210
3-19-3 . Save User......................................................................................................................210
3-19-4 . Restore User ................................................................................................................. 211
3-20. EXPORT/ IMPORT.....................................................................................................................212
3-21. DIAGNOSTICS..........................................................................................................................213
3-21-1 . Diag..............................................................................................................................213
3-21-2 .Ping................................................................................................................................214
3-22 MAINTENANCE ........................................................................................................................215
3-22-1 .Reset Device...................................................................................................................215
3-22-2 .Software Upload............................................................................................................215
3-23 LOGOUT...................................................................................................................................216
4. OPERATION OF CLI MANAGEMENT...............................................................................217
4-1. CLI MANAGEMENT...................................................................................................................217
4-1-1. Login................................................................................................................................217
4-2. COMMANDS OF CLI..................................................................................................................219
4-2-1. Global Commands of CLI................................................................................................220
4-2-2. Local Commands of CLI ..................................................................................................226
5. MAINTENANCE..........................................................................................................................310
5-1. RESOLVING NO LINK CONDITION .............................................................................................310
5-2. Q&A.........................................................................................................................................310
APPENDIX A TECHNICAL SPECIFICATIONS.........................................................................311
APPENDIX B NULL MODEM CABLE SPECIFICA TIONS......................................................314
iii
Caution
Circuit devices are sensitive to static electricity, which can damage their delicate
electronics. Dry weather conditions or walking across a carpeted floor may cause you to
acquire a static electrical charge.
To protect your device, always:
• Touch the metal chassis of your computer to ground the static electrical charge before
you pick up the circuit device.
• Pick up the device by holding it on the left and right edges only.
• If you need using outdoor device connect to this device with cable then you need to
addition an arrester on the cable between outdoor device and this device.
Fig. Addition an arrester between outdoor device and this switch
Electronic Emission Notices
Federal Communications Commission (FCC) Statement
This equipment has been tested and found to comply with the limits for a class A
computing device pursuant to Subpart J of part 15 of FCC Rules, which are designed to
provide reasonable protection against such interference when operated in a commercial
environment.
European Community (CE) Electromagnetic Compatibility Directive
This equipment has been tested and found to comply with the protection requirements
of European Emission Standard EN55022/EN61000-3 and the Generic European Immunity
Standard EN55024.
EMC:
EN55022(2003)/CISPR-22(2002) class A
IEC61000-4-2(2001) 4K V CD, 8KV, AD
IEC61000-4-3(2002) 3V/m
IEC61000-4-4(2001) 1KV – (power line), 0.5KV – (signal line)
iv
About this user’s manual
In this user’s manual, it will not only tell you how to install and connect your
network system but configure and monitor the SW24GF through the built-in CLI and
web by RS-232 serial interface and Ethernet ports step-by-step. Many explanations
in detail of hardware and software functions are shown as well as the examples of
the operation for web-based interface and command-line interface (CLI).
Overview of this user’s manual
Chapter 1 “Introduction” describes the features of SW24GF
Chapter 2 “Installation”
Chapter 3 “Operation of Web-based Management”
Chapter 4 “Operation of CLI Management”
Chapter 5 “Maintenance”
5
1. Introduction
1-1. Overview of SW24GF
SW24GF, a 24-port Gigabit L2 Plus Managed Switch, is a standard switch
that meets all IEEE 802.3/u/x/z Gigabit, Fast Ethernet specifications. 16-Port
1000Mbps SFP and 8-Port Combo Gigabit TP/SFP Fiber dual media management
Ethernet switch. The switch can be managed through RS-232 serial port via directly
connection, or through Ethernet port using CLI or Web-based management unit,
associated with SNMP agent. With the SNMP agent, the network administrator can
logon the switch to monitor, configure and control each port’s activity in a friendly
way. The overall network management is enhanced and the network efficiency is
also improved to accommodate high bandwidth applications. In addition, the switch
features comprehensive and useful functions such as QoS (Quality of Service),
Spanning Tree, VLAN, Port Trunking, Bandwidth Control, Port Security,
SNMP/RMON, IGMP Snooping capability via the intelligent software. It is suitable
for both metro-LAN and office applications.
Others the switch increase support the Power saving for reduce the power
consumption with "ActiPHY Power Management" and "Perfect Reach Power
Management" two technique. It could efficient saving the switch power with auto
detect the client idle and cable length to provide different power.
In this switch, Port 1 and Port 8 include two types of media --- TP and SFP
Fiber (LC, BiDi LC…); this port supports 10/100/1000Mbps TP or 1000Mbps SFP
Fiber with auto-detected function. 1000Mbps SFP Fiber transceiver is used for highspeed connection expansion.
⎯ 1000Mbps LC, Multi-Mode, SFP Fiber transceiver
⎯ 1000Mbps LC, 10km, SFP Fiber transceiver
⎯ 1000Mbps LC, 30km, SFP Fiber transceiver
⎯ 1000Mbps LC, 50km, SFP Fiber transceiver
⎯ 1000Mbps BiDi LC, 20km, 1550nm SFP Fiber WDM transceiver
⎯ 1000Mbps BiDi LC, 20km, 1310nm SFP Fiber WDM transceiver
10/100/1000Mbps TP is a standard Ethernet port that meets all IEEE
802.3/u/x/z Gigabit, Fast Ethernet specifications. 1000Mbps SFP Fiber transceiver
is a Gigabit Ethernet port that fully complies with all IEEE 802.3z and 1000BaseSX/LX standards.
1000Mbps Single Fiber WDM (BiDi) transceiver is designed with an optic
Wavelength Division Multiplexing (WDM) technology that transports bi-directional
full duplex signal over a single fiber simultaneously.
For upgrading firmware, please refer to the Section 3-21 or Section 4-2-2 for
more details. The switch will not stop operating while upgrading firmware and after
that, the configuration keeps unchanged.
Note:
The switch was for using indoor purpose, if it was used in outdoor
environment or connect with cable to outdoor then it must to use a
lightning arrester to protect the switch.
6
• Key Features in the Device
QoS:
Support Quality of Service by the IEEE 802.1P standard. There are two
priority queue and packet transmission schedule.
Spanni ng Tree:
Support IEEE 802.1D, IEEE 802.1w (RSTP: Rapid Spanning Tree
Protocol) standards.
VLAN:
Support Port-based VLAN and IEEE802.1Q Tag VLAN. Support 256 active
VLANs and VLAN ID 1~4094.
Port Trunking:
Support static port trunking and port trunking with IEEE 802.3ad LACP.
Bandwidth Control:
Support ingress and egress per port bandwidth control.
Port Security:
Support allowed, denied forwarding and port security with MAC address.
SNMP/RMON:
SNMP agent and RMON MIB. In the device, SNMP agent is a client
software which is operating over SNMP protocol used to receive the
command from SNMP manager (server site) and echo the corresponded
data, i.e. MIB object. Besides, SNMP agent will actively issue TRAP
information when happened.
RMON is the abbreviation of Remote Network Monitoring and is a branch of
the SNMP MIB.
The device supports MIB-2 (RFC 1213), Bridge MIB (RFC 1493), RMON
MIB (RFC 1757)-statistics Group 1,2,3,9, Ethernet-like MIB (RFC 1643),
Ethernet MIB (RFC 1643) and so on.
IGMP Snooping:
Support IGMP version 2 (RFC 2236): The function IGMP snooping is used
to establish the multicast groups to forward the multicast packet to the
member ports, and, in nature, avoid wasting the bandwidth while IP
multicast packets are running over the network.
IGMP Proxy:
The implementation of IP multicast processing. The switch supports IGMP
version 1 and IGMP version 2, efficient use of network bandwidth, and fast
response time for channel changing. IGMP version 1 (IGMPv1) is
described in RFC1112, and IGMP version 2 (IGMPv2) is described in RFC
2236. Hosts interact with the system through the exchange of IGMP
messages. Similarly, when you configure IGMP proxy, the system interacts
with the router on its upstream interface through the exchange of IGMP
messages. However, when acting as the proxy, the system performs the
host portion of the IGMP task on the upstream interface as follows:
• When queried, sends group membership report s to the group.
• When one of its hosts joins a multicast addre s s group to which none of
its other hosts belong, sends unsolicited group membership reports to
that group.
• When the last of its hosts in a particula r multica st gro up leaves the
7
group, sends an unsolicited leave group membership report to the allrouters group (244.0.0.2).
DHCP Snooping:
This feature enables the DHCP Snooping to include information about client
when forwarding DHCP requests from a DHCP client to a DHCP server via
Trust Port. DHCP snooping can be configured on LAN switches to harden
the security on the LAN to only allow clients with specific IP/
to have access to the network. In short, DHCP snooping ensures IP
integrity on a Layer 2 switched domain.
Power Saving:
The Power saving using the "ActiPHY Power Management" and "Perfect
Reach Power Management" two techniques to detect the client idle and
cable length automatically and provides the different power. It could efficient
to save the switch power and reduce the power consumption.
Q-in-Q VLAN for performance & security:
The VLAN feature in the switch offers the benefits of both security and
performance. VLAN is used to isolate traffic between different users and
thus provides better security. Limiting the broadcast traffic to within the
same VLAN broadcast domain also enhances performance. Q-in-Q, the use
of double VLAN tags is an efficient method for enabling Subscriber
Aggregation. This is very useful in the MAN.
Link Layer Discovery Protocol (LLDP)
IEEE Standard─ 802.1AB （ Link Layer Discovery Protocol），Provide
more easy debug tool and enhance the networking management availability,
Others it can provide auto-discovery device and topology providing.
MAC addresses
MVR:
Multicast VLAN Registration (MVR) can support carrier to serve content
provider using multicast for Video streaming application in the network.
Each content provider Video streaming has a dedicated multicast VLAN.
The MVR routes packets received in a multicast source VLAN to one or
more receive VLANs. Clients are in the receive VLANs and the multicast
server is in the source VLAN.
Access Control List (ACL):
The ACLs are divided into Ether Types. IPv4, ARP protocol, MAC and VLAN
parameters etc. Here we will just go over the standard and extended
access lists for TCP/IP. As you create ACEs for ingress classification, you
can assign a policy for each port, the policy number is 1-8, and however,
each policy can be applied to any port. This makes it very easy to
determine what type of ACL policy you will be working with.
IP-MAC-Port Binding:
The IP network layer uses a four-byte address. The Ethernet link layer uses
a six-byte MAC address. Binding these two address types together allows
the transmission of data between the layers. The primary purpose of IPMAC binding is to restrict the access to a switch to a number of authorized
users. Only the authorized client can access the Switch’s port by checking
the pair of IP-MAC Addresses and port number with the pre-configured
database. If an unauthorized user tries to access an IP-MAC binding
enabled port, the system will block the access by dropping its packet.
8
1-2. Checklist
Before you start installing the switch, verify that the package contains the
following:
⎯ SW24GF 24-port Layer 2 plus Gigabit Managed Switch
⎯ SFP Modules (optional)
⎯ Mounting Accessory (for 19 ” Rack Shelf)
⎯ This User's Manual in CD-ROM
⎯ AC Power Cord
⎯ RS-232 Cable
Please notify your sales representative immediately if any of the aforementioned
items is missing or damaged.
1-3. Features
The SW24GF, a standalone off-the-shelf switch, provides the comprehensive
features listed below for users to perform system network administration and
efficiently and securely serve your network.
Hardware
•
• 16 SFP Fiber ports
• 8 10/100/1000Mbps TP or 1000Mbps SFP Fiber dual media auto sense
• 1392KB on-chip frame buffer
• Support jumbo frame up to 9K bytes
• Programmable classifier for QoS (Layer 4/Multimedia)
• 8K MAC address and 4K VLAN support (IEEE802.1Q)
• Per-port shaping, policing, and Broadcast Storm Control
• Power Saving with "ActiPHY Power Management" and "Perfect Reach Power
Management" techniques.
• IEEE802.1Q Q-in-Q nested VLAN support
• Full-duplex flow control (IEEE 802.3x) and half-duplex backpressure
• Extensive front-panel diagnostic LEDs; System: Power, TP Port1-8: LINK/ACT,
10/100/1000Mbps, SFP Port 1-24: SFP(LINK/ACT)
• Management
• Supports concisely the status of port and easily port configuration
• Supports per port traffic monitoring counters
• Supports a snapshot of the system Informatio n when you login
• Supports port mirror function
• Supports the static trunk function
9
• Supports 802.1Q VLAN
• Supports user management and limits three users to login
• Maximal packet length can be up to 9600 bytes for jumbo frame application
• Supports DHCP Broadcasting Suppression to avoid network suspended or
crashed
• Supports Link Layer Discovery Protocol (LLDP)
• Supports to send the trap event while monitored events happened
• Supports default configuration which can be restored to overwrite the current
configuration which is working on via web browser and CLI
• Supports on-line plug/unplug SFP modules
• Supports Quality of Service (QoS) for real time applications based on the
information taken from Layer 2 to Layer 4, such as VoIP
• Built-in web-based management and CLI management, providing a more
convenient UI for the user
• Supports port mirror function with ingress/egress traffic
• Supports rapid spanning tree (802.1w RSTP)
• Supports multiple spanning tree (802.1s MSTP)
• Supports 802.1X port security on a VLAN
• Supports IP-MAC-Port Binding for LAN security
• Supports user management and only first login administrator can configure the
device. The rest of users can only view the switch
• SNMP access can be disabled and prevent from illegal SNMP access
• Supports Ingress, Non-unicast and Egress Bandwidth rating management with
a resolution of 1Mbps
• The trap event and alarm message can be transferred via e-mail
• Supports diagnostics to let administrator kn owing the hardware status
• Supports loop detection to protect the switch crash when the networking has
looping issue
• HTTP and TFTP for firmware upgrade, system log upload and configuration file
import/export
• Supports remote boot the device through user interface and SNMP
• Supports NTP network time syn chroni zation and daylight saving
• Supports 120 event log records in the main memory and display on the local
console
10
g
1-4. View of SW24GF
Fig. 1-1 Full View of SW24GF
1-4-1. User Interfaces on the Front Panel (Button, LEDs and Plugs)
There are 8 TP Gigabit Ethernet ports and 24 SFP fiber ports for optional
removable modules on the front panel of the switch. LED display area, locating on
the left side of the panel, contains a Power LED, which indicates the power status
and 24 ports working status of the switch. One RS-232 DB-9 interface is offered for
configuration or management.
Power Indication LED Gigabit Ethernet Port
RS-232 DB-9 Connector
RESET Button:
RESET button is used
to reset the
mana
ement system.
• LED Indicators
LED Color Function
System LED
POWER
10/100/1000Ethernet TP Port 1 to 8 LED
LINK/ACT
10/100/1000Mbps
1000SX/LX Gigabit Fiber Port 1, 24 LED
SFP(LINK/ACT)
SFP Fiber Port Fiber Port Status Indication LEDs
Fig. 1-2 Front View of SW24GF
Green Lit when +5V DC power is on and good
Lit when connection with remote device is good
Green
Green/
Amber
Green
Blinks when any traffic is present
Off when cable connection is not good
Lit green when 1000Mbps speed is active
Lit ember when 100Mbps speed is active
Off when 10Mbps speed is active
Lit when connection with the remote device is good
Blinks when any traffic is present
Off when module connection is not good
Table1-1
11
1-4-2. AC Power Input on the Rear Panel
One socket on the rear panel is for AC power input.
AC Line 100-240V 50/60 Hz
Fig. 1-3 Rear View of SW24GF
1-5. View of the Optional Modules
In the switch, Port 1~ 8 includes two types of media --- TP and SFP Fiber (LC,
BiDi LC…); this port supports 10/100/1000Mbps TP or 1000Mbps SFP Fiber with
auto-detected function. 1000Mbps SFP Fiber transceiver is used for high-speed
connection expansion; the following are optional SFP types provided for the switch:
⎯ 1000Mbps LC, MM, SFP Fiber transceiver
⎯ 1000Mbps LC, SM 10km, SFP Fiber transceiver
⎯ 1000Mbps LC, SM 30km, SFP Fiber transceiver
⎯ 1000Mbps LC, SM 50km, SFP Fiber transceiver
⎯ 1000Mbps BiDi LC, type 1, SM 20km, SFP Fiber WDM transceiver
⎯ 1000Mbps BiDi LC, type 2, SM 20km, SFP Fiber WDM transceiver
⎯ 1000Mbps LC, SM 10km, SFP Fiber transceiver with DDM
Fig. 1-4 Front View of 1000Base-SX/LX LC, SFP Fiber Transceiver
Fig. 1-5 Front View of 1000Base-LX BiDi LC, SFP Fiber Transceiver
12
r
2. Installation
2-1. Starting SW24GF Up
This section will give users a quick start for:
- Hardware and Cable Installation
- Management Station Installation
- Software booting and configuration
2-1-1. Hardware and Cable Installation
At the beginning, please do first:
⇒ Wear a grounding device to avoid the damage from electrostatic discharge
⇒ Be sure that power switch is OFF before you insert the power cord to power
source
• Installing Optional SFP Fiber Transceivers to the SW24GF
Note: If you have no modules, please skip this section.
• Connecting the SFP Module to the Chassis:
The optional SFP modules are hot swappable, so you can plug or u nplug it
before or after powering on.
1. Verify that the SFP module is the right model and conforms to the chassis
2. Slide the module along the slot. Also be sure that the module is properly
seated against the slot socket/connector
3. Install the media cable for network connection
Fig. 2-1 Installation of Optional SFP Fiber Transceive
4. Repeat the above steps, as needed, for each module to be installed into
slot(s)
5. Have the power ON after the above procedures are done
Note:
The switch supports the SFP Vendor includes: Manufacture,
Agilent, Avago and Finisa
13
• TP Port and Cable Installation
⇒ In the switch, TP port supports MDI/MDI-X auto-crossover, so both types of
cable, straight-through and crossed-over can be used. It means you do not have
to tell from them, just plug it.
⇒ Use Cat. 5 grade RJ-45 TP cable to connect to a TP port of the switch and the
other end is connected to a network-aware device such as a workstation or a
server.
⇒ Repeat the above steps, as needed, for each RJ-45 port to be connected to a
Gigabit 10/100/1000 TP device.
Now, you can start having the switch in operation.
• Power On
The switch supports 100-240 VAC, 50-60 Hz power supply. The power
supply will automatically convert the local AC power source to DC power. It does not
matter whether any connection plugged into the switch or not when power on, even
modules as well. After the power is on, all LED indicators will light up immediately
and then all off except the power LED still keeps on. This represents a reset of the
system.
• Firmware Loading
After resetting, the boot loader will load the firmware into the memory. It will
take about 30 seconds, after that, the switch will flash all the LED once and
automatically performs self-test and is in ready state.
14
2-1-2. Installing Chassis to a 19-Inch Wiring Closet Rail
Fig. 2-2
Caution: Allow a proper spacing and proper air ventilation for the cooling fan
at both sides of the chassis.
⇒ Wear a grounding device for electrostatic discharge.
⇒ Screw the mounting accessory to the front side of the switch (See Fig. 2-2).
⇒ Place the Chassis into the 19-inch wiring closet rail and locate it at the proper
position. Then, fix the Chassis by screwing it.
2-1-3. Cabling Requirements
To help ensure a successful installation and keep the network performance
good, please take a care on the cabling requirement. Cables with worse
specification will render the LAN to work poorly.
2-1-3-1. Cabling Requirements for TP Ports
⇒ For Fast Ethernet TP network connection
⎯ The grade of the cable must be Cat. 5 or Cat. 5e with a maximum length of
100 meters.
⇒ Gigabit Ethernet TP network connection
⎯ The grade of the cable must be Cat. 5 or Cat. 5e with a maximum length of
100 meters. Cat. 5e is recommended.
2-1-3-2. Cabling Requirements for 1000SX/LX SFP Module
It is more complex and comprehensive contrast to TP cabling in the fiber
media. Basically, there are two categories of fiber, multi mode (MM) and single
mode (SM). The later is categorized into several classes by the distance it supports.
They are SX, LX, LHX, XD, and ZX. From the viewpoint of connector type, there
mainly are LC and BIDI LC.
⎯ Gigabit Fiber with multi-mode LC SFP module
⎯ Gigabit Fiber with single-mode LC SFP module
15
⎯ Gigabit Fiber with BiDi LC 1310nm SFP module
⎯ Gigabit Fiber with BiDi LC 1550nm SFP module
The following table lists the types of fiber that we support and those else not
listed here are available upon request.
Multi-mode Fiber Cable and Modal Bandwidth
IEEE 802.3z
Gigabit Ethernet
1000SX 850nm
1000BaseLX/LHX/XD/ZX
Multi-mode 62.5/125μm Multi-mode 50/125μm
Modal
Bandwidth
160MHz-Km 220m 400MHz-Km 500m
200MHz-Km 275m 500MHz-Km 550m
Single-mode Fiber 9/125μm
Single-mode transceiver 1310nm 10Km
Single-mode transceiver 1550nm 30, 50Km
Distance
Modal
Bandwidth
Distance
Single-Mode
1000Base-LX
Single Fiber
(BIDI LC)
Table2-1
*20Km
Single-Mode
*20Km
TX(Transmit) 1310nm
RX(Receive) 1550nm
TX(Transmit) 1550nm
RX(Receive) 1310nm
16
2-1-3-3. Switch Cascading in Topology
• Takes the Delay Time into Account
Theoretically, the switch partitions the collision domain for each port in switch
cascading that you may up-link the switches unlimitedly. In practice, the network
extension (cascading levels & overall diameter) must follow the constraint of the
IEEE 802.3/802.3u/802.3z and other 802.1 series protocol specifications, in which
the limitations are the timing requirement from physical signals defined by 802.3
series specification of Media Access Control (MAC) and PHY, and timer from some
OSI layer 2 protocols such as 802.1d, 802.1q, LACP and so on.
The fiber, TP cables and devices’ bit-time delay (round trip) are as follows:
1000Base-X TP, Fiber 100Base-TX TP 100Base-FX Fiber
Round trip Delay: 4096 Round trip Delay: 512
Cat. 5 TP Wire: 11.12/m Cat. 5 TP Wire: 1.12/m Fiber Cable: 1.0/m
Fiber Cable : 10.10/m TP to fiber Converter: 56
Bit Time unit : 1ns (1sec./1000 Mega bit)
Bit Time unit: 0.01μs (1sec./100 Mega bit)
Table 2-2
Sum up all elements’ bit-time delay and the overall bit-time delay of
wires/devices must be within Round Trip Delay (bit times) in a half-duplex network
segment (collision domain). For full-duplex operation, this will not be applied. You
may use the TP-Fiber module to extend the TP node distance over fiber optic and
provide the long haul connection.
• Typical Network Topology in Deployment
A hierarchical network with minimum levels of switch may reduce the timing
delay between server and client station. Basically, with this approach, it will
minimize the number of switches in any one path; will lower the possibility of
network loop and will improve network efficiency. If more than two switches are
connected in the same network, select one switch as Level 1 switch and connect all
other switches to it at Level 2. Server/Host is recommended to connect to the Level
1 switch. This is general if no VLAN or other special requirements are applied.
17
Case1: All switch ports are in the same local area network. Every port can access
each other (See Fig. 2-3).
If VLAN is enabled and configured, each node in the network that can
communicate each other directly is bounded in the same VLAN area.
Here VLAN area is defined by what VLAN you are using. The switch
supports both port-based VLAN and tag-based VLAN. They are different in practical
deployment, especially in physical location. The following diagram shows how it
works and what the difference they are.
Case2a: Port-based VLAN (See Fig.2-4).
Fig. 2-3 No VLAN Configuration Diagram
1. The same VLAN members could not be in different switches.
2. Every VLAN members could not access VLAN members each other.
3. The switch manager has to assign different names for each VLAN groups
at one switch.
Fig. 2-4 Port-based VLAN Diagram
18
Case 2b: Port-based VLAN (See Fig.2-5).
1. VLAN1 members could not access VLAN2, VLAN3 and VLAN4 members.
2. VLAN2 members could not access VLAN1 and VLAN3 members, but they could
access VLAN4 members.
3. VLAN3 members could not access VLAN1, VLAN2 and VLAN4.
4. VLAN4 members could not access VLAN1 and VLAN3 members, but they could
access VLAN2 members.
Case3a: The same VLAN members can be at different switches with the same VID
(See Fig. 2-6).
Fig. 2-5 Port-based VLAN Diagram
Fig. 2-6 Attribute-based VLAN Diagram
19
2-1-4. Configuring the Management Agent of SW24GF
We offer you three ways to startup the switch management function. They
are RS-232 console, CLI, and Web. Users can use any one of them to monitor and
configure the switch. You can touch them through the following procedures.
Section 2-1-4-1: Configuring the Management Agent of SW24GF through the Serial
RS-232 Port
Section 2-1-4-2: Configuring the Management Agent of SW24GF through the
Ethernet Port
Note: Please first modify the IP address, Subnet mask, Default gateway and DNS
through RS-232 console, and then do the next.
20
2-1-4-1. Configuring the Management Agent of SW24GF through the Serial RS-
232 Port
To perform the configuration through RS-232 console port, the switch’s serial
port must be directly connected to a DCE device, for example, a PC, through
RS-232 cable with DB-9 connector. Next, run a terminal emulator with the default
setting of the switch’s serial port. With this, you can communicate with the switch.
In the switch, RS-232 interface only supports baud rate 115200 bps with 8
data bits, 1 stop bit, no parity check and no flow control.
RS-232 DB-9 Connector
SW24GF L2 Managed Sw itch
Default IP Setting:
IP address = 192.168.1.1
Subnet Mask = 255.255.255.0
Default Gateway = 192.168.1.254
Fig. 2-7
Terminal or Terminal Emulator
To configure the switch, please follow the procedures below:
1. Find the RS-232 DB-9 cable with female DB-9 connector bundled.
Normally, it just uses pins 2, 3 and 7. See also Appendix B for more
details on Null Modem Cable Specifications.
2. Attaches the DB-9 female cable connector to the male serial RS-232
DB-9 connector on the switch.
3. Attaches the other end of the serial RS-232 DB-9 cable to PC’s serial
port, running a terminal emulator supporting VT100/ANSI terminal with
The switch’s serial port default settings. For example,
Windows98/2000/XP HyperTerminal utility.
Note: The switch’s serial port default settings are listed as follows:
Baud rate 115200
Stop bits 1
Data bits 8
Parity N
Flow control none
RS-232 cable
with female
DB-9 connector
at both ends
4. When you complete the connection, then press <Enter> key. The login
prompt will be shown on the screen. The default username and
password are shown as below:
Username = admin Password = admin
21
• Set IP Address, Subnet Mask and Default Gateway IP Address
Please refer to Fig. 2-7 CLI Management for details about ex-factory IP
setting. They are default setting of IP address. You can first either configure your PC
IP address or change IP address of the switch, next to change the IP address of
default gateway and subnet mask.
For example, your network address is 10.1.1.0, and subnet mask is
255.255.255.0. You can change the switch’s default IP address 192.168.1.1 to
10.1.1.1 and set the subnet mask to be 255.255.255.0. Then, choose your default
gateway, may be it is 10.1.1.254.
Default Value SW24GF Your Network Setting
IP Address
Subnet
Default Gateway
After completing these settings in the switch, it will reboot to have the
configuration taken effect. After this step, you can operate the management through
the network, no matter it is from a web browser or Network Management System
(NMS).
192.168.1.1 10.1.1.1
255.255.255.0 255.255.255.0
192.168.1.254 10.1.1.254
Table 2-3
22
A
2-1-4-2. Configuring the Management Agent of SW24GF through the Ethernet
Port
There are three ways to configure and monitor the switch through the
switch’s Ethernet port. They are CLI, Web browser and SNMP manager. The user
interface for the last one is NMS dependent and does not cover here. We just
introduce the first two types of management interface.
SW24GF L2 Managed Switch
Default IP Setting:
IP = 192.168.1.1
Subnet Mask = 255.255.255.0
Default Gateway = 192.168.1.254
Ethernet LAN
ssign a reasonable IP address,
For example:
IP = 192.168.1.100
Subnet Mask = 255.255.255.0
Default Gateway = 192.168.1.254
Fig. 2-9
• Managing SW24GF through Ethernet Port
Before you communicate with the switch, you have to finish first the
configuration of the IP address or to know the IP address of the switch. Then,
follow the procedures listed below.
1. Set up a physical path between the configured the switch and a PC by a
qualified UTP Cat. 5 cable with RJ-45 connector.
Note: If PC directly connects to the switch, you have to setup the same
subnet mask between them. But, subnet mask may be different for the PC
in the remote site. Please refer to Fig. 2-9 about the switch’s default IP
address information.
2. Run CLI or web browser and follow the menu. Please refer to Chapter 3
and Chapter 4.
23
Fig. 2-10 the Login Screen for Web
2-1-5. IP Address Assignment
For IP address configuration, there are three parameters needed to be filled
in. They are IP address, Subnet Mask, Default Gateway and DNS.
IP address:
The address of the network device in the network is used for internetworking
communication. Its address structure looks is shown in the Fig. 2-11. It is “classful”
because it is split into predefined address classes or categories.
Each class has its own network range between the network identifier and
host identifier in the 32 bits address. Each IP address comprises two parts: network
identifier (address) and host identifier (address). The former indicates the network
where the addressed host resides, and the latter indicates the individual host in the
network which the address of host refers to. And the host identifier must be unique
in the same LAN. Here the term of IP address we used is version 4, known as IPv4.
32 bits
Network identifier Host identifier
Fig. 2-11 IP address structure
With the classful addressing, it divides IP address into three classes, class A,
class B and class C. The rest of IP addresses are for multicast and broadcast. The
bit length of the network prefix is the same as that of the subnet mask and is
denoted as IP address/X, for example, 192.168.1.0/24. Each class has its address
range described below.
Class A:
Address is less than 126.255.255.255. There are a total of 126 networks can
be defined because the address 0.0.0.0 is reserved for default route and
127.0.0.0/8 is reserved for loopback function.
Bit # 0 1 7 8 31
24
0
Network address Host address
Class B:
IP address range between 128.0.0.0 and 191.255.255.255. Each class B
network has a 16-bit network prefix followed 16-bit host address. There are 16,384
(2^14)/16 networks able to be defined with a maximum of 65534 (2^16 –2) hosts
per network.
Bit # 01 2 15 16 31
10
Network address Host address
Class C:
IP address range between 192.0.0.0 and 223.255.255.255. Each class C
network has a 24-bit network prefix followed 8-bit host address. There are
2,097,152 (2^21)/24 networks able to be defined with a maximum of 254 (2^8 –2)
hosts per network.
Bit # 0 1 2 3 23 24 31
110
Network address Host address
Class D and E:
Class D is a class with first 4 MSB (Most significance bit) set to 1-1-1-0 and
is used for IP Multicast. See also RFC 1112. Class E is a class with first 4 MSB set
to 1-1-1-1 and is used for IP broadcast.
According to IANA (Internet Assigned Numbers Authority), there are three
specific IP address blocks reserved and able to be used for extending internal
network. We call it Private IP address and list belo w:
Class A 10.0.0.0 --- 10.255.255.255
Class B 172.16.0.0 --- 172.31.255.255
Class C 192.168.0.0 --- 192.168.255.255
Please refer to RFC 1597 and RFC 1466 for more information.
Subnet mask:
It means the sub-division of a class-based network or a CIDR block. The
25
t
N
subnet is used to determine how to split an IP address to the network prefix and the
host address in bitwise basis. It is designed to utilize IP address more efficiently and
ease to manage IP network.
For a class B network, 128.1.2.3, it may have a subnet mask 255.255.0.0 in
default, in which the first two bytes is with all 1s. This means more than 60
thousands of nodes in flat IP address will be at the same network. It’s too large to
manage practically. Now if we divide it into smaller network by extending network
prefix from 16 bits to, say 24 bits, that’s using its third byte to subnet this class B
network. Now it has a subnet mask 255.255.255.0, in which each bit of the first
three bytes is 1. It’s now clear that the first two bytes is used to identify the class B
network, the third byte is used to identify the subnet within this class B network and,
of course, the last byte is the host number .
Not all IP address is available in the sub-netted network. Two special
addresses are reserved. They are the addresses with all zero’s and all one’s host
number. For example, an IP address 128.1.2.128, what IP address reserved will be
looked like? All 0s mean t he network itself, and all 1s mean IP broadcast.
10000000.00000001.00000010.1 0000000
etwork
25 bits
All 0s = 128.1.2.128
All 1s= 128.1.2.255
Subne
1 0000000
1 1111111
In this diagram, you can see the subnet mask with 25-bit long,
255.255.255.128, contains 126 members in the sub-netted network. Another is that
the length of network prefix equals the number of the bit with 1s in that subnet mask.
With this, you can easily count the number of IP addresses matched. The following
table shows the result.
Prefix Length No. of IP matched No. of Addressable IP
/32 1 /31 2 /30 4 2
26
Loading...