LEGRAND Mosaic Manageable switch, Area box distribution switch Installation And Configuration Manual
Manageable Mosaic switch Installation and User Guide
GIGABIT PoE
Manageable Mosaic switch
INSTALLATION AND CONFIGURATION GUIDE
Manageable Mosaic switch Installation and User Guide
II
Important Notice
© 2012 by Legrand
This document provides the required information for the manageable Mosaic switch. It is intended for
network administrators who are responsible for installing and setting up network equipment.
This document contains confidential and proprietary information of Legrand and may not be copied,
transmitted, stored in a retrieval system or reproduced in any format or media, in whole or in part,
without the prior written consent of Legrand. Information contained in this document supersedes any
previous manuals, guides, specifications, data sheets or other information that may have been provided
or made available to the user. This document is provided for informational purposes only, and Legrand
does not guarantee the accuracy, adequacy, quality, validity or completeness of the information
contained in this document. Legrand reserves the right to make updates, improvements and
enhancements to this document and the products to which it relates at any time without prior notice to
the user. IN NO EVENT SHALL Legrand BE LIABLE FOR ANY INCIDENTAL, SPECIAL, INDIRECT,
OR CONSEQUENTIAL DAMAGES WHATSOEVER, INCLUDING BUT NOT LIMITED TO LOST
PROFITS, ARISING OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION CONTAINED
HEREIN, OR THE USE OF THE PRODUCT, EVEN IF Legrand HAS BEEN ADVISED OF, KNOWN,
OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES.
Trademark Acknowledgement
This document contains trademarks, trade names and service marks of Legrand and other
organizations, all of which are the property of their respective owners.
Warnings and Cautions
If equipped with a laser based SFP tranceiver
LASER WARNING
Fiber optic port of the 0 779 05 switch includes 1310/1550nm Class 1 laser components certified
according to IEC 60825-1 transmitting invisible laser radiation.
• DO NOT stare into the beam or view directly with optical instruments.
• Avoid direct exposure to beam.
• Do not remove the protective covers on the fiber optic connectors until you are
ready to connect the fiber optic cables.
• When dealing with fiber optic cables, please ensure that the TX at one end of the
link is connected to the RX at the other end of the F/O link.
ELECTRICAL WARNING
To avoid the possibility of severe and potentially fatal electric shock, never install electrical
devices in a wet location or during a lightning storm. Only a qualified electrician should connect
electrical devices.
Before configuring your device, please download the latest firmware from the following website
http://www.wifi.legrandelectric.com and update your device with this firmware.
Warning: for Telnet configuration please read chapter 8 “Telnet” before connecting.
Manageable Mosaic switch Installation and User Guide
III
Table of Contents
1 Introduction ............................................................................................................................ 7
1.1 Overview ...............................................................................................................................................7
1.2 General Characteristics ........................................................................................................................8
1.3 Manageable Mosaic switch Shipped Components .............................................................................10
1.4 Front & Side panel components..........................................................................................................10
1.4.1 LED Indications.........................................................................................................................11
1.5 Remote Management Options............................................................................................................12
2 Hardware Installation ........................................................................................................... 13
2.1 Overview .............................................................................................................................................13
3 Device Management............................................................................................................. 14
3.1 Overview .............................................................................................................................................14
3.1.1 User Names / Access Levels and Passwords ..........................................................................14
3.1.2 Management Passwords Scheme ............................................................................................15
3.2 Launching the Embedded web interface Application via a Web Browser...........................................15
3.2.1 Using Radius Server Password Authentication ........................................................................16
3.3 Port Level Configuration .....................................................................................................................16
3.3.1 Port Details and Status .............................................................................................................17
3.3.2 Configuring the Port Name .......................................................................................................18
3.3.3 Factory Default Port Settings....................................................................................................18
3.3.4 Changing Port Settings.............................................................................................................19
3.3.5 Power over Ethernet (PoE).......................................................................................................22
3.3.6 MAC Security............................................................................................................................24
3.3.7 QoS...........................................................................................................................................26
3.4 Embedded web interface Menu system ..............................................................................................28
3.4.1 Port Indications.........................................................................................................................30
3.5 Device Configuration Menus...............................................................................................................32
3.5.1 System Device Information.......................................................................................................33
3.5.2 Inventory ...................................................................................................................................34
3.5.3 Power Supply............................................................................................................................34
3.5.4 Environment..............................................................................................................................34
3.5.5 Factory Defaults........................................................................................................................35
3.5.6 RADIUS Server.........................................................................................................................36
3.5.7 Remote Software Reset............................................................................................................36
3.6 Features Menus ..................................................................................................................................36
3.6.1 Global Configuration .................................................................................................................36
3.6.2 VLAN Mode ..............................................................................................................................37
3.6.3 802.1Q VLAN Membership Configuration ................................................................................38
3.6.4 802.1Q Port Settings ................................................................................................................39
3.6.5 Port Based VLAN......................................................................................................................41
3.6.6 Transparent VID .......................................................................................................................41
3.6.7 Rapid Spanning Tree Protocol (RSTP) Configuration .............................................................. 42
3.6.8 IGMP......................................................................................................................................... 44
4 Remote Device Configuration............................................................................................. 45
4.1 Configuration via the Terminal Emulation Application ........................................................................45
4.1.1 Configuring the IP and Community Parameters .......................................................................46
Manageable Mosaic switch Installation and User Guide
IV
4.2 LAN Configuration via the LCS2 - FTTO Init Application.....................................................................51
4.2.1 Running the LCS2 - FTTO Init application ................................................................................ 51
4.2.2 Configuring the IP and Community Parameters ....................................................................... 52
4.2.3 Changing the Password ........................................................................................................... 52
4.3 Default Settings of the manageable Mosaic switch ............................................................................53
4.3.1 Restoring manageable Mosaic switch Default Settings............................................................53
4.3.2 Changing manageable Mosaic switch Factory Default Settings............................................... 54
4.3.3 Restoring manageable Mosaic switch Factory Default Settings...............................................55
4.3.4 Configuring Active Management Interfaces.............................................................................. 55
5 Device Security ....................................................................................................................57
5.1 Securing Management Access ........................................................................................................... 57
5.1.1 Community String / Passwords.................................................................................................58
5.1.2 User Access Levels..................................................................................................................58
5.1.3 Management Access List..........................................................................................................58
5.1.4 Management Interfaces............................................................................................................59
5.1.5 Management Access (Secure NMS) Path ................................................................................ 60
5.1.6 Securing Management Access via VLAN.................................................................................60
5.1.7 Web Management User’s Authentication .................................................................................61
5.2 Securing Network Access................................................................................................................... 61
5.2.1 MAC Access Security - Securing User Access to the Network ................................................61
5.2.2 802.1X Port Based Network Access Security...........................................................................63
5.2.3 Secure HTTP Protocol (HTTPS)...............................................................................................66
6 Monitoring and Analysis ..................................................................................................... 68
6.1 Configuring SNMP Trap Destinations.................................................................................................68
6.2 Device Level – Event Log ...................................................................................................................69
6.2.1 Viewing Recorded Events ........................................................................................................69
6.2.2 Event Filter................................................................................................................................70
6.3 Port Level Statistics and RMON Counters..........................................................................................71
6.4 Port Monitoring....................................................................................................................................72
7 Updating Firmware Versions .............................................................................................. 74
7.1 General ...............................................................................................................................................74
7.2 Local (CLI) Firmware Update.............................................................................................................. 74
7.3 Remote Firmware Update via LCS2 - FTTO Init .................................................................................75
7.4 Remote Firmware Update via Embedded web interface .................................................................... 76
7.5 LCS2 - FTTO Bulk Firmware Update ..................................................................................................77
7.6 Firmware Licensing (in order to activate optional features) ................................................................79
7.6.1 Activating the Special Add-on Feature(s) License Key ............................................................80
8 Telnet..................................................................................................................................... 82
8.1 General ...............................................................................................................................................82
8.2 Run Telnet ..........................................................................................................................................82
8.2.1 Invoking Telnet Help .................................................................................................................82
8.3 Selecting the static IP address of the device ......................................................................................83
8.4 Changing User Level Passwords via Telnet.......................................................................................84
8.4.1 Defining the Radius Server via Telnet ......................................................................................84
8.5 Changing MAC Security via Telnet.....................................................................................................85
Manageable Mosaic switch Installation and User Guide
Page 5 of 87
Table of Figures!
Figure 1-1 manageable Mosaic switch ............................................................................... 7
Figure 1-2 manageable Mosaic switch Front view............................................................10
Figure 1-3 manageable Mosaic switch Side view.............................................................11
Figure 3-1 Login Window via the Web Browser................................................................16
Figure 3-2 Port configuration, Properties and Status tabs...............................................17
Figure 3-3 Administration tab, Copper Port Configuration...............................................19
Figure 3-4 Administration & SFP tabs, SFP Port Configuration ......................................21
Figure 3-5 Port View Window, PoE tab ...........................................................................22
Figure 3-6 Port View menu, MAC Security tab................................................................ 25
Figure 3-7 Port View menu, QoS tab...............................................................................26
Figure 3-8 manageable Mosaic switch Main Screen........................................................28
Figure 3-9 Close pop-up menu.......................................................................................32
Figure 3-10 Apply pop-up menu ...................................................................................... 32
Figure 3-11 Refresh pop-up menu....................................................................................32
Figure 3-12 System View menu, Properties tab ..............................................................33
Figure 3-13 System View menu, Inventory tab...............................................................34
Figure 3-14 System View menu, Power Supply tab .........................................................34
Figure 3-15 System View menu, Environment tab ...........................................................34
Figure 3-16 Thresholds window........................................................................................35
Figure 3-17 System View menu, Factory Defaults tab .....................................................35
Figure 3-18 System View menu, RADIUS Server tab ......................................................36
Figure 3-19 System menu, Commands tab.....................................................................36
Figure 3-20 Features menu, Global Configuration tab ................................................... 37
Figure 3-21 Features menu, VLAN Mode tab.................................................................37
Figure 3-22 Features menu, 802.1q VLAN Membership tab.......................................... 38
Figure 3-23 Features Menu, 802.1q Port Settings tab.....................................................39
Figure 3-24 Features Menu, Port Based VLAN tab......................................................... 41
Figure 3-25 Features Menu, Transparent VID tab...........................................................41
Figure 3-26 RSTP Settings tab......................................................................................... 43
Figure 3-27 RSTP Ports Configuration tab.......................................................................44
Figure 4-1 COM Properties Window................................................................................45
Figure 4-2 Hyper Terminal Boot Sequence ...................................................................... 46
Figure 4-3 LCS2 - FTTO Init Discovery screen ................................................................51
Figure 4-4 LCS2 - FTTO Init Discovery screen - Discovered Devices .............................51
Figure 4-5 LCS2 - FTTO Init Password prompt dialog .....................................................52
Figure 4-6 LCS2 - FTTO Init Main Screen ........................................................................ 52
Figure 4-7 Changing the LCS2 - FTTO Init password .......................................................53
Manageable Mosaic switch Installation and User Guide
Page 6 of 87
Figure 4-8 Changing Factory Defaults via Embedded web interface ............................... 54
Figure 4-9 Restoring Factory Defaults via Embedded web interface............................... 55
Figure 4-10 Changing Management Interfaces................................................................ 56
Figure 4-11 Changing Management Interfaces-Services................................................. 56
Figure 5-1 Management menu, Access List tab.............................................................. 59
Figure 5-2 Changing Management Interfaces-Services................................................... 59
Figure 5-3 Changing the Secured NMS Path................................................................... 60
Figure 5-4 The Port View Window MAC Security tab...................................................... 62
Figure 5-5 802.1X Access Authentication Scheme......................................................... 64
Figure 5-6 Port View Window, 802.1X Tab ..................................................................... 65
Figure 5-7 802.1X Access Authentication Enabled icon ................................................. 66
Figure 5-8 HTTPS Enabled icon .....................................................................................67
Figure 6-1 Management menu, SNMP Traps tab ...........................................................68
Figure 6-2 Event Log window.......................................................................................... 69
Figure 6-3 Event log with the Event Filter window .......................................................... 70
Figure 6-4 Port Statistics and Counters .......................................................................... 72
Figure 6-5 Port View window, Monitor tab....................................................................... 73
Figure 7-1 LCS2 - FTTO Init screen, Firmware Update commands ................................75
Figure 7-2 File Operations Window ................................................................................. 76
Figure 7-3 LCS2 - FTTO Bulk Source screen .................................................................. 77
Figure 7-4 LCS2 - FTTO Bulk Targets screen ................................................................. 78
Figure 7-5 LCS2 - FTTO Bulk Schedule screen .............................................................. 78
Figure 7-6 LCS2 - FTTO Bulk Status screen ................................................................... 79
Figure 7-7 System Configuration window, General tab.................................................... 80
Figure 7-8 Firmware License Tab ...................................................................................80
Figure 8-1 Telnet Commands........................................................................................... 83
Figure 8-2 Telnet Help on specific command................................................................... 83
Manageable Mosaic switch Installation and User Guide
Page 7 of 87
1
1
Introduction
Introduction
1.1 Overview
Figure 1-1 manageable Mosaic switch
The manageable Mosaic switch is a high end fully manageable six-port installation (duct) switch. It is
specifically designed for Fiber to the Office (FTTO) duct/trunk installations, floor tanks or hollow space
sockets.
The manageable Mosaic switch better suits networks requiring PoE functionality
Main Feature list:
• Four external 10/100/1000M RJ45 A/N auto MDI ports
• 1x Gigabit/100M SFP F/O uplink and 1xRJ45 10/100/1000M daisy chain/uplink ports
• Power over LAN (PoE) option supports IEEE 802.3at/af PDs (PoE+, PoE) on all four
RJ45 external ports
• High power embedded management providing SNMP agent, Web (full Java applet) and
Telnet
• Remote management via Legrand's enhanced Embedded web interface application,
Web browser and Telnet
• Highly secured in-band access via IP access list, secure NMS path, passwords and
optional HTTPS
• Low voltage (52VDC) operation via compact external power supply
• The uplink ports of the manageable Mosaic switch are used for the network/backbone
connections and support star, ring and daisy-chain topologies.
• The manageable Mosaic switch enables distributed network architecture. It provides
efficient use of cable infrastructure and bandwidth using bandwidth aggregation for
remote workgroups. The uplink ports enable connections to other workgroup switches
from which additional devices can be cascaded. Thus, allowing the number of ports in
the network center and cable infrastructure to be reduced for a simple installation and
maintenance process.
• The manageable Mosaic switch is an advanced, full-featured switch with sophisticated
attributes built-in. 802.1x per port access control & HTTPS support on embedded web
interface.
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 8 of 87
1.2 General Characteristics
Table 1-1 manageable Mosaic switch Characteristics
Ports 1 to 4
(external user
ports)
10/100/1000BaseT.
Auto-negotiate, auto MDI, and polarity
100 meter (330 Feet) distance over TP cables Cat5e and higher
F/O SFP Uplink
Port
Interface – fiber optic SFP transceiver
Provided with 1000 base-SX multimode (MM), 850/1310nm;
connectors: SFP (LC) SC
Accept also single-mode (SM) 1310/1550nm; connectors: SFP (LC) SC
Compatible with 1000 base-SX 1000 base-LX
RJ45
Uplink/daisy-chain
Port
10/100/1000BaseT.
Auto-negotiate, auto MDI, and polarity
100 meter (330 Feet) distance over TP cables Cat5e and higher
QoS and VLANs
QoS / CoS configuration with four traffic classes and prioritized packet
streams per port. QoS based on IEEE802.3ac or IP TOS (supporting
IPv4, IPv6).
802.1Q VLAN, support 64 VLANs, tag insertion and removal.
Double tag support, Transparent VID.
Access Security
(per port)
Port based MAC access security.
802.1Q VLAN, port based VLAN
802.1X Port based network access control.
Management
Management
Security
SNMP management agent with in-band connection supporting SNMP,
Telnet and Web
Manageable via Telnet (IP) and Web.
Three password protected access levels.
Get Community and Set Community passwords.
Management access list ("white" IP address list).
Management access path.
Management by specific VLAN.
Management user authentication through up to four Radius servers for
Web access.
Spanning Tree support
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 9 of 87
Additional
Features
RSTP/STP Spanning Tree support
IGMP Snooping
Monitoring
Event logging, filtering and sorting, prioritization and trap management
(up to 8 trap destinations) with notification.
Port level RMON and statistics.
Port monitoring (mirroring) for data analysis / recording.
Global device
management
Internal voltage and temperature measurement, thresholds and events.
Control of switch learning and aging parameters.
User's name assignment on device and port levels.
Reset, configure and restore factory defaults via SNMP, Telnet and Web.
Software
download
Remote firmware updating capabilities.
Upload/download device configuration.
Special features key activation.
Set-up and testing
Secured remote initial set-up via LCS2 - FTTO Init (Legrand remote
device initialization application).
Power Supply
AC input voltage: 100–240 VAC, 50/60Hz
Manageable Mosaic switch Power Consumption:
- 8 Watts, without PoE
- 60 Watts max with PoE
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 10 of 87
1.3 Manageable Mosaic switch Shipped Components
The manageable Mosaic switch is shipped with the following components:
• Manageable Mosaic switch
• Mosaic power supply.
1.4 Front & Side panel components
manageable Mosaic switch front panel contains LED indicators for Ports 1–4 as well as for the Uplink Ports
(Power, Management and the PoE LEDs are also located on the front panel.
Figure 1-2 manageable Mosaic switch Front view
(1) To press the Reset button user needs to remove first the user identification marking slide. Use
narrow tool such as needle to press the button. Keeping the button pressed for a long period
(few seconds) will force to unit to switch to the default factory settings.
Power LED
Port 1 L/A &
PoE LEDs
Port 2 L/A &
PoE LEDs
Port 3 L/A &
PoE LEDs
Port 4 L/A &
PoE LEDs
Management
LED
Uplink 2 L/A LED
Uplink 1 L/A LED
CLI Connector (reserved)
Uplink 1 RJ45 Port
Uplink 2 SFP Port
Main DC Power
Connector
User Identification
Marking Slides
Reset
(1)
Internal
Push button
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 11 of 87
Figure 1-3 manageable Mosaic switch Side view
(2) The two RJ45 built-in LEDs, part of Uplink 1 RJ45 connector,
are not active in the manageable Mosaic switch
1.4.1 LED Indications
Table 1-2 lists the LED indicators and their description.
Table 1-2 manageable Mosaic switch LED Descriptions
LED Indicators
Description
Power
ON
– Main Power connected and power supply OK
Network Management
System (NMS)
OFF
ON
– Management startup/inoperable
– Management up and active
Uplink 1-2 L/A (Link
Activity)
OFF
ON
BLINKING
– no link
– link established on uplink port(s)
– activity detected (TX and / or RX) on the port(s)
PoE Ports 1-4
OFF
BLINKING
ON
– PoE / PSE disabled on the port
– PoE / PSE enabled, but PoE power not provided to
the port (PD device not detected on the port)
– PD detected, PoE / PSE power (52VDC) provided to
the port
Ports 1-4
OFF
ON
BLINKING
– no link
– link established
– activity detected (TX and / or RX) on the port(s)
Uplink 1 RJ45 Port
(2)
Uplink 2 SFP Port
Cooling Plate
Shield Terminal
Main DC Power Connector
Front Panel
Uplink 1 RJ 45 ethernet port
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 12 of 87
1.5 Remote Management Options
The manageable Mosaic switch can be managed via any of the following two management
interfaces:
The Embedded web interface Web Management application - from any Web browser - as
an applet
• Telnet connection
Factory defaults configure all three management interfaces to be active. This configuration can
be changed so that the device can only be managed by one or a combination of two
management interfaces.
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 13 of 87
2
2
Hardware
Hardware
Installation
Installation
2.1 Overview
The manageable Mosaic switch features a compact design with a low mounting depth that fits into
standard 45x90 or larger faceplates and ducts. Installation of the manageable Mosaic switch includes
the following recommended steps:
• Mount the manageable Mosaic switch external PS (Power Supply) in the duct and connect the
PS to the main power
• Connect the DC connector of the PS to the manageable Mosaic switch (the manageable
Mosaic switch should start booting)
• Performing initial IP configuration of the specific device:
a. Connecting a PC/laptop via LAN cable to any manageable Mosaic switch port and setting the
IP parameters via the LCS2 - FTTO Init application.
b. Connecting a PC/laptop via the manageable Mosaic switch special RS232 serial cable
(optional) to the CLI connector of the manageable Mosaic switch, performing manageable
Mosaic switch restart and following the options.
• After the IP parameters are set, connect the manageable Mosaic switch to the network (via the
F/O uplink and/or copper uplink/daisy-chain ports)
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 14 of 87
3
3
Device Management
Device Management
3.1 Overview
The manageable Mosaic switch can be managed remotely through the Embedded web interface EMS
(Element Management System) application via any Web browser or via Telnet.
The Embedded web interface EMS application can be installed on any computer running a Windows 98
/ 2000 / XP / Vista / 7 platform, Linux or Solaris. This software requires prior installation of the Java
JRE1.6 minimum.
Remote management can also be conducted from any Web browser which has access to the Legrand
device network. The Web browser launches a complete Embedded web interface GUI using a Java
applet (see Section 3.2).
The device may also be managed via Telnet (see Section 8).
3.1.1 User Names / Access Levels and Passwords
Each Embedded web interface session, is accessed by logging in using one of three user names,
representing access levels, and its respective password. Factory default passwords are available for
each user name.
User Name / Access Level
Default Password
Guest
guest
Admin
admin
Technician
tech
Service Center
Not Available
CLI password
mypass
Table 3-1 User name access level and password
The four user names (access levels) are as follows:
• Guest– Allows only monitoring and viewing the configuration and status
information. Password, configuration and traps option are not accessible at this
level. Default password is guest.
• Admin– Allows access to all configuration options except for service options such
as power supply thresholds and Technician’s password (accessible by Technician
level). Default password is admin.
• Technician – Allows access to all configuration options and to service options such
as temperature and power supply thresholds. Also, login as a Technician to gain
access to the System Configuration window Firmware Update tab. A Technician
can change the password for all other user levels, and change default factory
settings. The default password is tech.
• Service Center – Not available in this version.
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 15 of 87
3.1.2 Management Passwords Scheme
Legrand devices can be managed in several ways: with the Embedded web interface application,
through Web access or via Telnet. Each way has its own password scheme as follows:
• When using the Embedded web interface application all user access level
passwords are stored in the application and can be changed through it. Embedded
web interface allows access to all Legrand manageable devices.
• The passwords for Web access to manage Legrand devices are stored in each
individual device. They can also be stored in up to four Radius servers, allowing
central password management. Passwords stored in the device can be changed
via the Telnet command set http password (see Section 8) while passwords
stored on the Radius servers are changed in the Radius server itself. Upon logging
in to the device, the password is verified either according to what is stored in the
individual device or, if configured to the Radius server, is authenticated by one of
the Radius servers (see Section 3.2.1).
NOTE: In the case where multiple Radius servers are present, authentication begins at the
first Radius server in the Radius Server Index List. If that Radius server is not found,
authentication automatically proceeds to the next Radius Server in the list.
If a Radius Server is found, but does not authenticate the user, the authentication process
is ended and no further search takes place.
• The Telnet connection and the CLI access use the same password (mypass is the
factory default). This password can only be changed via the CLI connection, see
section 8.3. For security reasons, Telnet sessions are automatically terminated
after about 60 seconds of idle time and require reconnecting and login (see Section
8).
3.2 Launching the Embedded web interface Application via
a Web Browser
1. Verify that your computer is connected to the same network as that of the manageable
Mosaic switch unit to be managed.
NOTE: The Embedded web interface Web application is a Java-based application. In order
to use the Embedded web interface Web application, JRE (Java Runtime Environment) or
JVM (Java Virtual Machine) must already be installed on your computer. Java is freeware
and can be downloaded from: www.javasoft.com.
2. This software requires prior installation of the Java JRE 1.6 minimum.
Launch your Web browser. In the browser address bar type the IP address of the
manageable Mosaic switch unit to be accessed and press enter. It may take a few
seconds for the Java applet to load the Embedded web interface application GUI.
Once completed, the Login window appears as shown in Figure 3-1.
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 16 of 87
Figure 3-1 Login Window via the Web Browser
3. Choose your user name according to the three user access levels available. (Guest,
Admin, or Technician). (User access levels are described in Section 3.1.1).
4. Enter the appropriate default password guest, admin or tech.
NOTE: User level passwords cannot be changed via the Web browser; they can only be
changed via Telnet (see Section 0) or controlled by a Radius server. (Section 3.2.1).
5. Be sure that the Get and Set Community strings match the Community parameters of
the target device, or change them accordingly. SNMP Get community – public
SNMP Set community – private (Community parameters are discussed in
Section 5.1.1).
6. Click Connect in order to see the Embedded web interface main screen. You can now
manage the device (see Section 3.3).
3.2.1 Using Radius Server Password Authentication
Legrand manageable devices can be configured to seek user level password authentication from a
central Radius server, such as from a Freeradius, Winradius or Radiator server, while logging in from a
Web browser. The advantage of storing user level passwords in the Radius server is that if the Web
management passwords are changed, they need to be changed only in the Radius server and not in
each individual device.
Telnet is used to direct a Legrand manageable device to seek password authentication from the Radius
server while logging in from a Web browser. (See Section 0)
3.3 Port Level Configuration
Port configuration is done via port view windows. To access the port view windows, in the Embedded
web interface main screen, click the port icon and the port’s view related window appears.
NOTE: The name of the port view window matches the type of port. For example, clicking
the Uplink port icon, will bring up the configuration window name is Uplink View; click Port
1, and the configuration window name is port 1 View, etc. The appearance of the
configuration windows, and the available configurable port parameter options differ for
copper and for F/O ports. When an option is not available for the selected port type, the tab
is not displayed.
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 17 of 87
3.3.1 Port Details and Status
The Port View screen shows information about the port, connection type and status.
To view this information, click the Properties and Status tabs.
Figure 3-2 Port configuration, Properties and Status tabs
The Port View configuration window includes the following tabs, depending on port type.
Table 3-2 Port Configuration Options
Parameter
Description
Properties:
Displays port description and connection type.
Assigns a name to a specific port.
Status:
Provides visual indications of port status and activity.
The indicators include Link, Activity and Collision.
Administration:
Contains the port status, speed, duplex, negotiation
and flow control settings. Part of the parameters use
scroll bars, for the user to select between available
options
Monitor:
Allows port monitoring to be enabled or disabled.
PoE
Allows control of port’s output power. (Not available
for uplink ports
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 18 of 87
Table 3-2 Port Configuration Options
Parameter
Description
MAC Security:
(Copper ports only)
Allows individual ports to be disabled.
QoS:
(Copper ports only)
Allows setting the Quality of Service parameters of
the port.
Statistics:
Displays various statistics regarding traffic, port
usage, and packets.
SFP: (SFP ports only)
Contains specific information concerning the type of
SFP connector in the port, including type, bit rate,
wavelength, vendor, model type and serial number
NOTE: On SFP ports, the connector type and other physical descriptions of the port are
found in the SFP tab only, and not in the Properties tab
3.3.2 Configuring the Port Name
Each port can be named in order to identify the user or device connected to that port. In the specific
Port View window, click the Name field to enter the new value and then click Apply.
3.3.3 Factory Default Port Settings
The device ports are factory preset with the following default values:
Table 3-3 Factory Default Port Configuration Values
Parameter
Description
10/100/1000BaseT copper ports:
Status – On
Auto Negotiate – Enabled
Speed – Depends on A/N results
Duplex – Depends on A/N results
MDI – Auto
Flow Control – Enabled
PoE – Disabled on external user ports
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 19 of 87
Table 3-3 Factory Default Port Configuration Values
Parameter
Description
F/O SFP Uplink port:
Port Status – On
Auto Negotiate – Enabled
Speed – Depends on A/N results
Duplex – Depends on A/N results
Flow Control – Enabled
3.3.4 Changing Port Settings
Figure 3-3 Administration tab, Copper Port Configuration
To change the port settings
1. From Port View, expand the Administration tab.
2. Change the appropriate parameters with new values and click Apply.
The left side of the field consists of the parameter set by the user (Admin). The parameters on
the left side reflect the configuration identified by the operant (Oper)
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 20 of 87
Table 3-4 Administration tab, Copper Port Parameters
Copper Port Parameters
Description
Status
Disables / Enables the port; Options: On, Off
Mode
Port speed and duplex setting.
--Auto-negotiate – the port is set to negotiate speed and
duplex mode with the link partner.
--Manual – speed and duplex are manually defined. Usually
used when connecting to devices which do not support
auto-negotiation or when link parameters must be forced.
Auto Neg. Type
Select the type of Auto Negotiation Preferred/Forced
Master/Slave
Speed
Applicable if auto-negotiation is set to Manual.
Options: 10M, 100M, 1000M.
Duplex
Applicable if auto-negotiation is set to Manual.
Options: Full duplex, Half duplex.
MDI/MDIX
--Auto Negotiate – Three advertise possibilities:
1) MDI and MDIX, 2) MDI, 3) MDIX
--Manual – Two possibilities: MDI or MDIX
Flow control
Enables / Disables flow control.
In case of SFP F/O port, the properties port description will be SFP 1000BaseX Fiber Port or SFP
100BaseFX Fiber Port. The following figure list the Administration and SFP tabs, for the SFP port
configuration
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 21 of 87
Figure 3-4 Administration & SFP tabs, SFP Port Configuration
Table 3-5 Administration & SFP tabs, SFP Port Parameters
Administration & SFP
Port Parameters
Description
Status
Disables / Enables the port; Options: On, Off
Speed
Displays 1000M or 100M, in accordance with the SFP
plugged in transceiver. Otherwise, it is kept in Auto. Oper
field displays the actual speed value, once it is established
with the F/O link partner.
Duplex
When the system detects 100Mbit SFP it enables Full/Half
Duplex setting for the port. Otherwise, it is kept in Auto
Oper field displays the actual value, once it is established
with the F/O link partner.
Note; The following SFP Port Parameters are read from the plugged in SFP Transceiver
Connector
Identified type of connector
Bit Rate
Identified bit rate
Wavelength
Identified wavelength
Vendor Name
Model Type
Identified Vendor Name, Model Type and Serial Number
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 22 of 87
Administration & SFP
Port Parameters
Description
Serial Number
Temperature
Monitored Transceiver internal temperature. (data available
only if the SFP transceiver supports DDM (Digital Diagnostic
Monitoring)
Tx Power
Monitored Transceiver Transmitted Power. (Data available
only if the SFP transceiver supports DDM (Digital Diagnostic
Monitoring)
Rx Power
Monitored Transceiver Received Power. (Data available only
if the SFP transceiver supports DDM (Digital Diagnostic
Monitoring)
3.3.5 Power over Ethernet (PoE)
On the main GUI main screen a PoE LED image appears above each PoE capable copper port. In
addition, in the Port View window a PoE tab appears.
The manageable Mosaic switch provides 802.3at/af (PoE+, PoE) Power Source Equipment (PSE)
capabilities with a total power capacity of up to 50 Watts on the ports. When an 802.3at/af PD device is
connected to the port, the port detects and classifies the device according to the 802.3at/af standard
and activates the PSE accordingly. If the PD device is not 802.3at/af complaint, it will not be recognized
and the port will not supply PoE power to the PD. The monitoring and management of the PoE
operation of the ports is done from the PoE tab in the Port View window.
3.3.5.1 PoE Management and Operation Tab
If a port is PoE Capable, the PoE tab of the Port View window appears (this tab is not
there in a non-PoE port). From this tab one can turn the PoE option on and off,
configure the disconnect mode, monitor general PoE characteristics and power
consumption, and reset the PoE.
Figure 3-5 Port View Window, PoE tab
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 23 of 87
Table 3-6 PoE Parameters
Parameter
Description
Status
The left selection tab indicates that the port is open for PoE
connections (will supply power if a PD is connected). The
right field indicates whether or not power is being supplied to
the port. An ON indication appears when a PD is detected
and the PSE power is provided to that port. An OFF
indication is when PSE power is not provided to the port due
to several possible reasons: 1) if the Admin Status is OFF
(PoE is disabled on the port) 2) nothing is connected to the
port, 3) the device connected to the port is not an 802.3at/af
PD device.
Reset
Pressing this button disconnects the PSE Power for about 5
seconds and then automatically re-connects it providing
remote power reset to the PD device.
Disconnect
Select between AC Disconnect or DC Disconnect mode in
the port configuration window. Selecting DC Disconnect
enables detection only of DC PDs (the most common type of
PDs currently). Select AC Disconnect enables detection only
of AC type PDs (mostly old PDs). The default is DC
Disconnect.
Type/PD Class
Indicates the 802.3at/af power classifications of the device
connected to the manageable Mosaic switch port. The type is
indicated by dot3af or dot3at (meaning 802.3at/af) and
ClassX (to indicate which class is connected). In the above
example, no device is connected to the manageable Mosaic
switch, consequently the PD Device Type indicates Class-0
(Load Not Detected) which is the default indication. (See
following table.)
PoE
Class
802.3af
Min Power
Levels at
PSE
output
PoE+
Class
802.3at
Min Power
Levels at
PSE output
0
15.4 Watts
0 30.0 Watts
1
4.0 Watts
1 4.0 Watts
2
7.0 Watts
2 7.0 Watts
3
15.4 Watts
3 15.4 Watts
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 24 of 87
Table 3-6 PoE Parameters
Parameter
Description
4
As Class 0
4 30.0 Watts
Consumption
Displays the actual power being consumed by the PD device
connected to the port.
Voltage
Displays the voltage supplied by the PoE Power Supply to
the manageable Mosaic switch.
3.3.5.2 PoE Power Capacities
The total power capacity of all four PoE ports combined cannot exceed 50 Watts.
Consequently, when connecting PD devices to the ports, the device detects its class
and provides PSE power to the port only if the device can allocate enough power to
that port within the total 50 Watt limitation.
3.3.5.3 manageable Mosaic switch PoE LED Indicators
The existence of the LED itself indicates that the port is PoE Capable. Ports with no
PoE capabilities have no PoE LEDs.
On a PoE capable switch there are three possible PoE LED indications: OFF,
BLINKING and ON (steady illumination).
A: PoE LED OFF: Indicates that PoE is administratively disabled on this port. This can
be changed through the PoE tab in the Port View window.
B: PoE LED BLINKING: Indicates that PoE is enabled on the port, but no PD is
connected.
C: PoE LED ON (steady illumination): A PD device is detected on the port(s) and PSE
power is provided to those port(s).
3.3.6 MAC Security
There are two modes of MAC security:
• MAC Access Security is locally authenticated according to the approved MAC
• The Approved MAC is authenticated by the Radius server before continuing with the
MAC Access Security process.
The MAC security mode is selected only through the Telnet application. See Section 8.5.
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 25 of 87
Figure 3-6 Port View menu, MAC Security tab
MAC Security Configuration Fields:
• MAC Address 1-3 list displays the MAC address entries belonging to that port in the
look-up table.
• Approved MAC field displays the specific MAC address to be secured (the MAC
address according to which the MAC security algorithm works).
• Mode field displays the MAC security operation mode (disabled, low security or high
security).
• Status field displays the port security status (disable, port forwarding, or port blocked).
When disabled appears in the Status field, this means that the MAC security is
disabled. When port forwarding or port blocked appears in the Status field, this
means that the MAC security is enabled and that specific port is either forwarding or
blocked in accordance to the MAC security algorithms.
NOTE: Port Monitoring, MAC security and 802.1X cannot be active at the same time.
1. In the Approved MAC list select the MAC address to be designated as the
approved MAC address.
2. Open the Mode list and set the mode according to the following parameter
descriptions:
• Disable – MAC security is not enabled.
• Low Security Level – The port is open (forwards data) for all devices as long as
the approved MAC address exists on the port's look-up table. When the designated
device is disconnected and its MAC address is removed from the port table, the
port blocks data communication to all devices.
• High Security Level – Only the designated approved MAC address can use the
port (i.e., only the approved MAC address exists on the port’s look-up table). If the
port receives frames from another device (other addresses in the look-up table),
then the port blocks all data transmission, even for the approved address.
NOTE: When a port is blocked through MAC Security it is detected as a major event and
an appropriate trap is sent to the authorized SNMP managers.
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 26 of 87
3.3.7 QoS
The packet flow through each port is defined by the Ingress / Egress Policy. manageable Mosaic switch
provides three criteria that determine the policy:
• QoS priority information
• Rate Limit
• 802.1Q based VLANs
3.3.7.1 QoS Priority Definitions
The manageable Mosaic switch uses an advanced non-blocking, four priority output port queue
architecture. Frames exit the switch using a weighted, fair queuing scheme in which 8, 4, 2, 1 is applied
to the four priority output queues: eight frames from priority 3 egress, followed by four frames from
priority 2, etc. Ingress frames are queued to the proper output queues according to their priority. The
frame priority is determined either in the 802.3ac tag or in the TOS field.
Figure 3-7 Port View menu, QoS tab
QoS priority definition criteria
• Default PRI (priority level) – Sets the priority level of ingressing frames arriving
without a priority level (four priority levels: 0-3).
• Ingress 802.3ac – Enables queuing of ingressing frames with 802.3ac tags
containing 802.1p priority information to be queued accordingly.
• Ingress TOS (Type of Service) - Enables queuing of ingressing frames with IPv4
TOS / DiffServ or IPv6 Traffic Class priority to be queued accordingly.
NOTE: If both Ingress IEEE 802.3ac and Ingress ToS are enabled, and a frame arrives
with both types of priorities set, the frame will be queued according to the IEEE 802.3ac
information.
3.3.7.2 Rate Limit Definitions
Frames enter (ingress) the port at the rate limit allocated to their identified priority level. Frames without
a priority level, enter the switch at the rate limit assigned to the port (default PRI parameter). All frames
exit (egress) the port at the Egress rate limit.
The manageable Mosaic switch support progressive Ingress rate limits for four priorities, where the rate
for each priority level is relative to the previous level. Only Priority-0 is assigned a value.
For example, if Priority 0 rate is set to 8 Mbps, then priority 1 rate may be the same or double that of
priority 0, priority 2 rate is the same or double that of priority 1, etc.
SUMMARY
Manageable Mosaic switch Installation and User Guide
Page 27 of 87
To define QoS Rate Limits:
1. Click on the Ingress PRI0 field to set its value, or on Ingress PRI1 through Ingress
PRI3 to set their value according to PRI0.
Table 3-7 Rate Limit Parameters
Parameter
Available options
Egress rate:
Not limited or Limited to one of the defined rates between 128
Kbps to 8 Mbps (128K; 256K; 512K; 1M; 2M; 4M; 8M)
Ingress PRI 0:
Unlimited or in seven steps to a value between 128 Kbps to 8
Mbps (128K; 256K; 512K; 1M; 2M; 4M; 8Mbps).
Ingress PRI 1:
Same as PRI 0 or double (i.e. unlimited up to 16 Mbps
depending on PRI 0 settings).
Ingress PRI 2:
Same as PRI 1 or double (i.e. unlimited up to 32 Mbps
depending on PRI 0 & 1 settings).
Ingress PRI 3:
Same as PRI 2 or double (i.e. unlimited up to 64 Mbps
depending on PRI 0, 1 & 2 settings)
The manageable Mosaic switch also supports different Rate Limit Criteria when counting
packets. The switch can count all packets, broadcasts, multicasts and FUcasts in some
combinations.
To define the Rate Limit Criteria:
1. Click the Rate Limit Criteria field and select the appropriate value from the list.
SUMMARY
Loading...