PLANET Technology does not warrant that the hardware will work properly in all environments and applications, and makes no
warranty and representation, either implied or expressed, with respect to the quality, performance, merchantability, or fitness for
a particular purpose. PLANET has made every effort to ensure that this User's Manual is accurate; PLANET disclaims liability
for any inaccuracies or omissions that may have occurred.
Information in this User's Manual is subject to change without notice and does not represent a commitment on the part of
PLANET. PLANET assumes no responsib ility for any inaccuracies that may be co nt a ined in t hi s User's Manual. PLANET makes
no commitment to updat e or k eep curr en t the information in this U ser 's Manual, and reserves th e ri ght to make improvement s t o
this User's Manual and/or to the products described in this User's Manual, at any time without notice.
If you find information in this manual that is incorrect, misleading, or incomplete, we would appreciate your comments and
suggestions.
FCC Warning
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC
Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated
in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and
used in accordance with the Instruction manual, may cause harmful interference to radio communications. Operation of this
equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the
interference at his own expense.
CE Mark Warning
This is a Class A product. In a domestic environment, this product may cause radio interference, in which case the user may be
required to take adequate measures.
Energy Saving Note of the Device
This power required device does not support Standby mode operation. For energy saving, please remove the power cable to
disconnect the device from the power circuit. In view of saving the energy and reducing the unnecessary power consumption, it
is strongly suggested to remove the power connection for the device if this device is not intended to be active.
WEEE Warning
To avoid the potential effects on the environment and human health as a result of the presence of
hazardous substances in electrical and electronic equipment, end users of electrical and electronic
equipment should understand the meaning of the crossed-out wheeled bin symbol. Do not dispose of
WEEE as unsorted municipal w aste and have to colle ct such WEEE separately.
Revision
PLANET GS-5220 Series User's Manual
Model: GS-5220 Series
Revision: 1.2 (JANUARY, 2017)
Part No: EM-GS-5220-series _v1.2
1.3 How to Use This Manual ............................................................................................................................ 14
1.4 Product Features ........................................................................................................................................ 15
1.5 Product Specificatio n s .............................................................................................................................. 19
2.1.1 Switch Front Panel .............................................................................................................................................. 31
2.1.2 LED Indications ................................................................................................................................................... 33
3.3 Administrati on Console ............................................................................................................................. 54
3.4 Web Management ....................................................................................................................................... 55
4. WEB CONFIGURATION ...................................................................................................... 58
4.1 Main Web Page ........................................................................................................................................... 60
4.2 System ......................................................................................................................................................... 62
4.2.1 System Information .............................................................................................................................................. 63
4.2.2 IP Configuration ................................................................................................................................................... 64
4.2.3 IP Status .............................................................................................................................................................. 66
4.2.7 Time Conf igur ati on .............................................................................................................................................. 72
4.2.11 CPU Load .......................................................................................................................................................... 79
4.2.12 System Log ........................................................................................................................................................ 80
4.2.24 Factory D efault .................................................................................................................................................. 89
4.2.25 System Reboot .................................................................................................................................................. 90
4.3.4 SNMP System Information .................................................................................................................................. 96
4.3.5.3 SNMPv3 Groups ........................................................................................................................................ 99
4.4 Port Management ..................................................................................................................................... 103
4.4.1 Port Configuration .............................................................................................................................................. 103
4.4.2 Port Statistics Overview ..................................................................................................................................... 105
4.4.3 Port Statistics Detail ........................................................................................................................................... 106
4.4.4 SFP Module Information .................................................................................................................................... 108
4.4.5 Port Mirror .......................................................................................................................................................... 109
User’s Manual of GS-5220 Series
5
4.5 Link Aggregation ...................................................................................................................................... 112
4.5.1 Static Aggregat ion .............................................................................................................................................. 114
4.5.3 LACP System Status ......................................................................................................................................... 117
4.5.4 LACP Port Status ............................................................................................................................................... 118
4.5.5 LACP Port Statistics ........................................................................................................................................... 118
4.6.3 VLAN Port Configuration ................................................................................................................................... 124
4.6.4 VLAN Membership Status .................................................................................................................................. 130
4.6.5 VLAN Port Status ............................................................................................................................................... 131
4.6.6 Port Isolation ...................................................................................................................................................... 133
4.6.7.1 Two Separate 802.1Q VLANs .................................................................................................................. 135
4.6.7.2 VLAN T ruc king between two 802.1Q aware switches ............................................................................. 137
4.6.7.3 Port Isolate .............................................................................................................................................. 140
4.7 Spanning Tree Protocol ........................................................................................................................... 146
4.7.1 Theory ............................................................................................................................................................... 146
4.7.2 STP System Configuration ................................................................................................................................ 152
4.7.3 Bridge Status ..................................................................................................................................................... 154
4.7.4 CIST Port Configuration ..................................................................................................................................... 155
4.7.8 Port Status ......................................................................................................................................................... 162
4.7.9 Port Statistics ..................................................................................................................................................... 163
4.8.6 IGMP Snooping Port Group Filtering ................................................................................................................. 174
4.8.7 IGMP Snooping Status ...................................................................................................................................... 175
User’s Manual of GS-5220 Series
6
4.8.8 IGMP Group Information .................................................................................................................................... 176
4.8.9 IGMPv3 Information ........................................................................................................................................... 177
4.8.12 MLD Snooping Port Group Filtering ................................................................................................................. 181
4.8.13 MLD Snooping Status ...................................................................................................................................... 182
4.8.14 MLD Group Information ................................................................................................................................... 183
4.8.15 MLDv2 Information .......................................................................................................................................... 184
4.8.17 MVR Status ...................................................................................................................................................... 188
4.8.18 MVR Groups Information ................................................................................................................................. 189
4.8.19 MVR SFM Information ..................................................................................................................................... 189
4.9 Quality of Service ..................................................................................................................................... 191
4.9.2 Port Policing ...................................................................................................................................................... 192
4.9.3 Port Classification .............................................................................................................................................. 193
4.9.4 Port Scheduler ................................................................................................................................................... 194
4.9.5 Port Shaping ...................................................................................................................................................... 195
4.9.5.1 QoS Egress Port Schedule and Shapers ................................................................................................ 196
4.9.6 Port Tag Remarking ........................................................................................................................................... 197
4.9.6.1 QoS Egress Port Tag Remarking ............................................................................................................. 198
4.9.7 Port DSCP ......................................................................................................................................................... 199
4.9.11 QoS Control List............................................................................................................................................... 203
4.9.11.1 QoS Control Entry Configuration ........................................................................................................... 205
4.9.12 QCL Status ...................................................................................................................................................... 207
4.9.13 Storm Control Configuration ............................................................................................................................ 208
4.10 Access Control Lists .............................................................................................................................. 216
4.10.1 Access Control List Status ............................................................................................................................... 216
4.10.2 Access Control List Configuration .................................................................................................................... 218
4.12.1 Port Limit Control ............................................................................................................................................. 276
4.12.6 Port Security Status ......................................................................................................................................... 283
4.12.7 Port Security Detail .......................................................................................................................................... 286
4.12.13 ARP Inspection Stati c T able ........................................................................................................................... 293
4.13.1 MAC Table Configuration ................................................................................................................................. 296
4.13.2 MAC Address Table Status .............................................................................................................................. 298
4.14.6 Port Statistics ................................................................................................................................................... 314
4.15.3 Remote IP Ping Test ........................................................................................................................................ 319
4.16 Power over Ethernet (GS-5220-8P2T2S only) ...................................................................................... 322
4.16.1 Power over Ethernet Powered Device ............................................................................................................. 322
4.16.2 System Configuration ...................................................................................................................................... 324
4.16.3 Power Over Ethernet Configuration ................................................................................................................. 325
4.16.4 Port Sequential ................................................................................................................................................ 327
4.16.5 Port Configuration ............................................................................................................................................ 328
4.16.6 PoE Status ....................................................................................................................................................... 330
4.18.5 RMON History Configuration ........................................................................................................................... 344
4.18.6 RMON History Status....................................................................................................................................... 345
APPENDIX B : GLOSSARY .................................................................................................. 354
User’s Manual of GS-5220 Series
10
1. INTRODUCTION
Thank you for purchasing PLANET GS-5220 Managed Switch series, which comes with mu ltipl e Gigabit Ethernet copper and
SFP/SFP+ fiber optic connectibility and robust layer 2 and layer 4 features. The description of this model is shown below:
Model Name Gigabit RJ45 Ports Gigabit SFP Slots PoE Ports 10G SFP+ Slots
If any of these are missing or damaged, please contact your dealer immediately; if possible, retain the carton including the
original packing material, and use them again to repack the product in case there is a need to return it to us for repair.
User’s Manual of GS-5220 Series
12
1.2 Product Description
Ideal Combination of 10G Uplink, High-density, Gigabit and Layer 3 Static Routing
PLANET GS-5220 series is a Layer 2+ managed Gigabit/10 Gigabit Ethernet switch and supports static Layer 3 routing in a
1U case. The GS-5220 series can handle extremely large amounts of data in a secure topology linking to an enterprise
backbone or high capacity servers.
Layer 3 IPv4 and IPv6 VLAN Routing for Secure and Flexible Management
The GS-5220 series switch not only provides ultra high transmission performance, and excellent layer 2 and layer 4
technologies, but also layer 3 IPv4/IPv6 VLAN routing feature which allows to cross over different VLANs and different IP
addresses for the purpose of having a highly-secured, flexible management and simpler networking application.
IPv6/IPv4 Dual Stack
Supporting both IPv6 and IPv4 pr otoc ols , the GS-5220 series helps the SMBs to step in the IPv6 era with the low est inv est ment
as its network facilities need not to be replaced or overhauled if the IPv6 FTTx edge network is set up.
Robust Layer 2 Features
The GS-5220 series can be programmed for advanced switch management functions such as dynamic port link aggregation,
Q-in-Q VLAN, private VLAN, Multiple Spanning Tree protocol (MSTP), Layer 2 to Layer 4 QoS, bandwidth control and
IGMP/MLD Snooping. Via the link aggregation of supporting ports, the GS-5220 series allows the operation of a high-speed
trunk to combine with multiple fiber ports and supports fail-over as well.
Powerful Security
The GS-5220 series off er s a c ompre hensive lay er 2 to layer 4 Access Control List (ACL) for enforcing security to the edge. It
can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or
defined typical network applications. Its protection mechanism also comprises 802.1X Port-based and MAC-based user and
device authentication. With the private VLAN function, communication between edge ports can be prevented to ensure user
privacy. The GS-5220 series also provides DHCP Snooping, IP So urce Guard and Dynamic ARP Inspection functions to
prevent IP snooping from attack and discard ARP packets with invalid MAC address. The network administrators can now
construct highly secured corporate networks with considerably less time and effort than before.
Excellent Traffic Control
The GS-5220 series is loaded with powerful traffic management and QoS features to enhance connection services by SMBs.
The QoS features inclu de wire-speed Layer 4 tr af fic classifiers and b andwidth limit that ar e p ar ti cul ar useful for multi-tena nt un it,
multi business unit, Telco, or Network Service Provider’s applications. It also empowers the enterprises to take full advantages
of the limited network resources and guarantees the best performance in VoIP and video conferencing transmission.
User’s Manual of GS-5220 Series
13
Efficient and Secure Management
The GS-5220 series Managed Switch is equipped with console, Web and SNMP management interfaces. With the built-in
Web-based management interface, the GS-5220 series offer s an easy-to-use, platform-independent management and
configuration facility. The GS-5220 series supports standard Simple Network Management Protocol (SNMP) and can be
managed via any manag eme n t so ftware based on standard of SNM P protocol. For reducing pr oduct learn ing time, the GS-5220
series offers Cisco-li ke com ma nd via Telnet or console port and customer doesn’t need to learn new command from these
switches. Moreover, the GS-5220 serie s offers secure remote management by supporting SSH, SSL and SNMPv3 connection
which encrypt the packet content at each session.
Flexibility and Extension Solution
The multi-mini-GBIC slots built in the GS-5220 series support dual speed as it features 100BASE-FX and 1000BASE-SX/LX
SFP (Small Form-factor Pluggable) fiber-optic modules. Now the administrator can flexibly choose the suitable SFP transceiver
according to not only the transmission distance, but also the transmission speed required. The distance can be extended from
550 meters to 2km (multi-mode fiber ) u p to above 10/20/30/40/50/70/ 12 0 ki lo meters (single-mode fiber or WDM fiber). They are
well suited for applications within the enterprise data centers and distributions.
Intelligent SFP Diagnosis Mechanism
The GS-5220 series supports SFP-DDM (Digital Diagnostic Monitor) function that greatly helps network administrator to
easily monitor real-time parameters of the SFP, such as optical output power, optical input power, temperature, laser bias
current, and transceiver supply voltage.
User’s Manual of GS-5220 Series
14
1.3 How to Use This Manual
This User’s Manual is structured as follows:
Section 2, INSTALLATION
The section explains the functi ons of the Managed Switch and how to physically install the Managed Switch.
Section 3, SWITCH MANAGEMENT
The section contains the information about the software function of the Managed Switch.
Section 4, WEB CONFIGURATION
The section explains how to manage the Managed Sw itch by Web interface.
Section 5, SWITCH OPERATION
The chapter explains how to do the switch operation of the Managed Switch.
Section 6, POWER over ETHERNET OVERVIEW
The chapter introduces the IEEE 802.3af / 802.3at PoE standard and PoE provision of the Managed Switch.
Section 7, TROUBLESHOOTING
The chapter explains how to do troubleshooting of the Managed Switch.
Appendix A
The section contains cab le inf or mat ion of the Managed Switch.
RJ45 console interface for switch basic mana gem ent and set up
Power over Ethernet(GS-5220-8P2T2S)
Complies with IEEE 802.3at High Power over Ethernet end-span PSE
Complies with IEEE 802.3af Power over Ethernet end-span PSE
Up to 8 ports of IEEE 802.3af/802.3at devices powered
Supports PoE Power up to 30.8 watts for each PoE port
Auto detects powered device (PD)
Circuit protection prevent s power interference between ports
Remote power feeding up to 100 meters
PoE Management
− Total PoE power budget control
− Per port PoE function enable/disable
− PoE Port Power feeding priority
− Per PoE port power limitation
− PD classification detection
− PD alive check
− PoE schedule
− PD power recycling schedule
Layer 2 Features
Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
High performance of Store-and-Forward architecture, and runt/CRC filtering eliminates erroneous packets to optimize
the network bandwidth
Storm Control supp or t
− Broadcast/Unicast/Unknown-unicast
Supports VLAN
− IEEE 802.1Q tagged VLAN
− Up to 255 VLANs groups, out of 4094 VLAN IDs
− Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)
− Private VLAN Edge (PVE)
− Protocol-based VLAN
− MAC-based VLAN
− IP Subnet-based VLAN
16
− Voice VLAN
Supports Spanning Tree Protocol
− STP, IEEE 802.1D Spanning Tree Protocol
− RSTP, IEEE 802.1w Rapid Spanning Tree Protocol
− MSTP, IEEE 802.1s Multiple Spanning Tree Protocol, spanning tree by VLAN
− BPDU Guard
Supports Link Aggregation
− 802.3ad Link Aggregation Control Protocol (LACP)
− Cisco ether-channel (Static Trunk)
− Up to 8 ports per trunk group
− Up to 16Gbps bandwidth (full duplex mode)
Provides port mirror (many-to-1)
Port mirroring to monitor the incoming or outgoing traffic on a particular port
Loop protection to avoid broadcast loops
User’s Manual of GS-5220 Series
Layer 3 IP Routing Features
Supports maximum 32 static routes and route summarization
Quality of Service
Ingress Shaper and Egress Rate Limit per port bandwidth control
8 priority queues on all switch ports
Traffic classification
- IEEE 802.1p CoS
- TOS/DSCP/IP Precedence of IPv4/IPv6 packets
- IP TCP/UDP port number
- Ty pical networ k applic at io n
Strict priority and Weighted Round Robin (WRR) CoS policies
Traffic-policing policies on the switch port
DSCP remarking
Multicast
Supports IGMP Snooping v1, v2 and v3
Supports MLD Snooping v1 and v2
Querier mode support
IGMP Snooping port filtering
MLD Snooping port filtering
MVR (Multicast VLAN Registration)
- Built-in RADIUS client to cooperate with the RADIUS servers
- RADIUS/TACACS+ users access authentication
Access Control List
- IP-based Access Control List (ACL)
- MAC-based Access Control List (ACL)
Source MAC/IP address binding
DHCP Snooping to filter distrusted DHCP messages
Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
IP Source Guard preven t s IP spoofing attacks
IP address access management to prevent unauthorized intruder
IPv6 Address/NTP management
Built-in T riv ial File Transfer Protocol (TFTP) client
BOOTP and DHCP for IP address assignment
System Maintenance
- Firmware upload/download via HTTP/TFTP
- Reset button for system reboot or reset to factory default
- Dual Images
DHCP Relay and Option 82
User Privilege levels control
NTP (Network Time Protocol)
Link Layer Discovery Protocol (LLDP) and LLDP-MED
Network Diagnostic
- SFP-DDM (Digital Diagnostic Monitor)
- Cable Diagnostic technology provides the mechanism to detect and report potential cabling issues
- ICMPv6/ICMPv4 Remote Ping
SMTP/Syslog remote alarm
Four RMON groups (history, statistics, alarms and events)
SNMP trap for interface Link Up and Link Down notification
System Log
PLANET Smart Discovery Utility for deploy management
User’s Manual of GS-5220 Series
18
Redundant Power System(GS-5220-16S8CR, GS-5220-16T4S2XR, GS-5220-20T4C4XR)
■ 100~240V AC/36-60V DC Dual power redundant
■ Active-active redundant power failure protection
■ Backup of catastrophic power failure on one supply
PoE Injector Port 8 ports with 802.3at/af PoE injector function with Port-1 to Port-8
Console 1 x RJ45 serial port (115200, 8, N, 1)
Switch Architecture Store-and-Forward
Switch Fabric 24Gbps/non-blocking
Throughput 17.76Mpps@64 bytes
Address Table 8K entries, automatic source address learn ing and agi ng
Shared Data Buffer
Flow Control
Jumbo Frame 9KB
Reset Button
LED
2 x 100/1000BASE-X SFP interfaces with Port-11 to Port-12
Supports 100/1000Mbps dual mode and DDM
100/1000Mbps SFP Combo Interfaces (Port 11 to Port 12):
LNK/ACT (Green)
Power Requirements
Power Consumption
(Full Loading)
ESD Protection
Dimensions (W x D x H)
Weight
Power over Ethernet
PoE Standard
PoE Power Supply Type
Power Pin Assignment
100~240V AC, 50/60Hz
320 watts/1091.9 BTU (max.)
6KV DC
330 x 200 x 43.5 mm, 1U height
2kg
IEEE 802.3af/802.3at PoE/PSE
End-span
Per port 54V DC, max. 30.8 watts
1/2(+), 3/6(-)
User’s Manual of GS-5220 Series
20
PoE Power Budget
PD @ 7 watts
PoE Ability
Layer2 Management Functions
Basic Management Interfaces Console, Telnet, Web browser, SNMP v1, v2c
Secure Management Interfac es SSH, SSL, SNMP v3
Port Configuration
Port Status
Port Mirroring
VLAN
Link Aggregation
PD @ 15.4 watts
PD @ 30.8 watts
240 watts (max.) @ 25 degrees C
200 watts (max.) @ 50 degrees C
8 units
8 units
8 units
Port disable/enable
Auto-negotiation 10/100/1000Mbps full and half duplex mode selection
Flow Control disable/enable
Display each port’s speed duplex mode, link status, flow control status, auto
negotiation status, trunk status
TX/RX/Both
Many-to-1 monitor
802.1Q tagged based VLAN, up to 255 VLAN groups
Q-in-Q tunneling
Private VLAN Edge (PVE)
MAC-based VLAN
Protocol-based VLAN
Voice VLAN
MVR (Multicast VLAN Registration)
Up to 255 VLAN groups, out of 4094 VLAN IDs
IEEE 802.3ad LACP/S t at i c Trunk
Supports 6 trunk groups with 8 ports per trunk
QoS
IGMP Snooping
MLD Snooping
Access Control List
Bandwidth Control
SNMP MIBs
Traffic classification based, strict priority and WRR
8-level priority for switching
- Port number
- 802.1p priority
- 802.1Q VLAN tag
- DSCP/TOS field in IP packet
IGMP (v1/v2/v3) Snooping, up to 255 multicast groups
IGMP Querier mode support
MLD (v1/v2) Snooping, up to 255 multicast groups
MLD Querier mode support
IEEE 802.3 10BASE-T
IEEE 802.3u
100BASE-TX/100BASE-FX
IEEE 802.3z 1000BASE-SX/LX
IEEE 802.3ab 1000BASE-T
IEEE 802.3x flow control and b
pressure
IEEE 802.3ad port trunk with
LACP
IEEE 802.1D Spanning Tree
Protocol
IEEE 802.1w Rapid Spanning T
Protocol
IEEE 802.1s Multiple Spanning
Tree Protocol
IEEE 802.1p Class of Service
Dimensions (W x D x H)
Weight
Power Requirements – AC
8 10/100/1000BASE-T RJ45 Auto-MDI/MDI-X ports, shared with Port-1~Port-8
24 100/1000BASE-X Dual Speed SFP interfaces
1 x RS232-to-RJ45 serial port (115200, 8, N, 1)
Store-and-Forward
48Gbps/non-blocking
Port disable/enable
Auto-negotiation 10/100/1000Mbps full and half duplex mode selection
Flow control disable/enable
Display each port’s speed duplex mode, link status, flow control status, auto negotiation st atus, trunk
status
TX/RX/Both
Many-to-1 monitor
802.1Q tagged based VLAN, up to 255 VLAN groups
Q-in-Q tunneling
Private VLAN Edge (PVE)
MAC-based VLAN
Protocol-based VLAN
Voice VLAN
MVR (Multicast VLAN Registration)
Up to 255 VLAN groups, out of 4094 VLAN IDs
IEEE 802.3ad LACP/Static Trunk
IEEE 802.3ad LACP/Static Trunk
Supports 11 groups of 8-Port trunk Static Trunk
Supports 12 groups of 10-Port trunk LACP
Supports 14 groups of 8-Port trunk
Stat ic Trunk
Supports 12 groups of 10-Port trunk
LACP
QoS
IGMP Snooping
MLD Snooping
Access Control List
Bandwidth Control
SNMP MIBs
Traffic classification based, strict priority and WRR
8-level priority for switching
- Port number
- 802.1p priority
- 802.1Q VLAN tag
- DSCP/TOS field in IP packet
IGMP (v1/v2/v3) Snooping, up to 255 multicast Groups
IGMP Querier mode support
MLD (v1/v2) Snooping, up to 255 multicast Groups
MLD Querier mode support
IP-based ACL/MAC-based ACL
Up to 256 entries
Per port bandwidth control
Ingress: 500Kb~80Mbps
Egress: 64Kb~80Mbps
This section describes the hardware features and installation of the Managed Switch on the desktop or rack mount. For easier
management and control of the Managed Switch, familiarize yourself with its display indicators, and ports. Front panel
illustrations in this chapter disp lay the unit LED indicators. Bef ore conne cting any network device to the Managed Switch, please
read this chapter completely.
2.1 Hardware Description
2.1.1 Switch Front Panel
The front panel provides a simple interface monitoring the Managed Switch. Figures 2-1-1 to 2-1-10 show the front panel of the
Managed Switch.
GS-5220-8P2T2S Front Panel
GS-5220-16S8C Front Panel
GS-5220-16S8CR Front Panel
Figure 2-1-1: Front Panel of GS-5220-8P2T2S
Figure 2-1-2: Front Panel of GS-5220-16S8C
Figure 2-1-3: Front Panel of GS-5220-16S8CR
GS-5220-16T4S2X Front Panel
Figure 2-1-4: Front Panel of GS-5220-16T4S2X
32
GS-5220-16T4S2XR Front Panel
GS-5220-20T4C4X Front Panel
GS-5220-20T4C4XR Front Panel
User’s Manual of GS-5220 Series
Figure 2-1-5: Front Panel of GS-5220-16T4S2XR
Figure 2-1-6: Front Panel of GS-5220-20T4C4X
GS-5220-44S4C Front Panel
GS-5220-46S2C4X Front Panel
Figure 2-1-7: Front Panel of GS-5220-20T4C4XR
Figure 2-1-8: Front Panel of GS-5220-44S4C
Figure 2-1-9: Front Panel of GS-5220-46S2C4X
GS-5220-48T4X Front Panel
Figure 2-1-10: Front Panel of GS-5220-48T4X
User’s Manual of GS-5220 Series
33
■ Gigabit TP interface
10/100/1000BASE-T Copper, RJ45 twisted-pair: Up to 100 meters.
■ SFP slot
100/1000BASE-X mini-GBIC slot, SFP (Small Factor Pluggable) transceiver module: From 550 meters to 2km (multi-mode
fiber), up to above 10/20/30/40/50/70/120 kilometers (single-mode fiber).
■ 10 Gigabit SFP+ slot
10GBASE-SR/LR mini-GBIC slot, SFP+ (Small Factor Pluggable Plus) Transceiver module supports from 300 meters
(multi-mode fiber) up to 10 kilometers (single mode fiber)
■ Console port
The console port is a RJ45 port connector. It is an interface for connecting a terminal directly. Through the console port, it
provides rich diagnostic information including IP address setting, factory reset, port management, link status and system
setting. Users can use the attached DB9 to RJ45 console cable in the package and connect to the console port on the
device. Af ter the con nec tio n, users can run any terminal emulation program (Hyper Terminal, ProComm Plus, Telix,
Winterm and so on) to enter the startup screen of the device.
■ Reset button
The front panel of the
GS-5220-8P2T2S/GS-5220-16S8C(R)/GS-5220-16T4S2X(R)/GS-5220-20T4C4X(R)/GS-5220-44S4C/GS-5220-46S2C4X
comes with a res et butt on desi gned for reboot ing the Manage d Sw itch without turning off and on the power . The following is
the summary table of reset button functions:
Reset Button Pressed and Released Function
< 5 sec: System Reboot Reboot the Managed Switch.
Reset the Managed Switch to Factory Default configuration.
The Managed Switch will then reboot and load the default
settings as shown below:
The reset button of GS-5220-48T4X is located at the side of the switch.
2.1.2 LED Indications
The front panel LEDs indicate inst ant st at us of power and system status, fan status, port links / PoE-in-use and data activity;
they help monitor and troubleshoot when needed. Figures 2-1-11 to 2-1-20 show the LED indications of the Managed Switch.
34
Lights to indicate the system is working.
Off to indicate the system is booting.
GS-5220-8P2T2S LED Indication
Figure 2-1-11: GS-5220-8P2T2S LED on Front Panel
■ System
LED Color Function
Fan Alert GreenLights to indicate that the fan is not working.
SYS Green
PWR GreenLights to indicate the Switch has power.
User’s Manual of GS-5220 Series
■ Per 10/100/1000BASE-T PoE+ Port
LED Color Function
LNK/ACT Green
PoE-in-Use Orange
■ 10/100/1000BASE-T Interfaces (Port-9 to Port-10)
LED Color Function
LNK/ACT Green
1000 Orange
Lights To indicate the link through that port is successfully established.
Blinks To indicate that the switch is actively sending or receiving data over that port.
Lights to indicate the port is providing 54VDC in-line power.
Off to indicate the connected device is not a PoE Powered Device (PD).
Lights To indicate the link through that port is successfully established.
Blinks To indicate that the switch is actively sending or receiving data over that port.
Lights To indicate that the port is operating at 1000Mbps.
Off If LNK/ACT LED is lit, it indicates that the port is operating at 10/100Mbps.
If LNK/ACT LED is off, it indicates that the port is link-down.
■ 10/100/1000BASE-X SFP Interfaces (Port-11 to Port-12)
LED Color Function
LNK/ACT Green
1000 Orange
Lights To indicate the link through that port is successfully established.
Blinks To indicate that the switch is actively sending or receiving data over that port.
Lights To indicate that the port is operating at 1000Mbps.
Off If LNK/ACT LED is lit, it indicates that the port is operating at 100Mbps.
If LNK/ACT LED is off, it indicates that the port is link-down.
35
Fault
Green
GS-5220-16S8C / GS-5220-16S8CR LED Indication
Figure 2-1-12: GS-5220-16S8C LED on Front Panel
User’s Manual of GS-5220 Series
Figure 2-1-13: GS-5220-16S8CR LED on Front Panel
System
LED Color Function
PWR GreenLights to indicate that the Switch has AC power input.
DC GreenLights to indicate that the Switch has DC power input. (GS-5220-16S8CR Only)
Alert
LED Color Function
Fan Green
Per 10/100/1000Mbps RJ45 port (Port-1 to Port-8)
LED Color Function
1000
LNK/ACT
10/100
LNK/ACT
Green
Orange
Lights to indicate fan failure.
Lights to indicate ports 1~24 or power input failure.
Lights To indicate the port is runn ing i n 1000Mbps speed and successfully established.
Blinks To indicate that the switch is actively sending or receiving data over that port.
Lights
Blinks To indicate that the switch is actively sending or receiving data over that port.
To indicate the port is running in 10/100M bps speed and suc c essf ully established.
Per 100/1000BASE-X SFP Interface (Port-1 to Port-24)
LED Color Function
1000
LNK/ACT
100
LNK/ACT
Green
Orange
Lights To indicate the port is successfully established at 1000Mbps.
Blinks To indicate that the Switch is actively sending or receiving data over that port.
Lights To indicate the port is successfully established at 100Mbps.
Blink To indicate that the Switch is actively sending or receiving data over that port.
36
Blinks to indicate the System is running under upgrading procedure
Blinks to indicate that the switch is actively sending or receiving data over that port.
Blink
GS-5220-16T4S2X LED Indication
User’s Manual of GS-5220 Series
Figure 2-1-14: GS-5220-16T4S2X LED on Front Panel
System
LED Color Function
FAN
PWR Green
SYS Green
Per 10/100/1000BASE-T Interface (Port-1 to Port-16)
LED Color Function
1000
LNK/ACT
10/100
LNK/ACT
Per 100/1000BASE-X Interface (Port-17 to Port-20)
LED Color Function
Red
Green
Orange
Lights to indicate fan has failed.
Lights to indicate that the Switch is powered on.
Lights to indicate the System is ready.
Lights to indicate the port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights to indicate the port is running at 10/100Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
1000
LNK/ACT
100
LNK/ACT
Per 10G uplink SFP+ Interface (Port-21 to Port-22)
LED Color Function
10G
LNK/ACT
1G
LNK/ACT
Green
Orange
Orange
Green
Lights to indicate the SFP port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that SFP port.
Lights to indicate the SFP port is running at 100Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that SFP port.
Lights to indicate the port is running at 10Gbps speed and successfully established.
Lights to indicate the port is running at 1Gbps speed and successfully established.
s to indicate that the switch is actively sending or receiving data over that port.
37
Blinks to indicate the System is running under upgrading procedure
Blinks to indicate that the switch is actively sending or receiving data over that port.
Blinks to indicate that the switch is actively sending or receiving data over that port.
GS-5220-16T4S2XR LED Indication
User’s Manual of GS-5220 Series
Figure 2-1-15: GS-5220-16T4S2XR LED on Front Panel
System
LED Color Function
FAN
DC Green
AC Green
SYS Green
Per 10/100/1000BASE-T Interface (Port-1 to Port-16)
LED Color Function
1000
LNK/ACT
10/100
LNK/ACT
Red
Green
Orange
Lights to indicate fan has failed.
Lights to indicate that the Switch is powered on (GS-5220-16T4S2XR Only).
Lights to indicate that the Switch is powered on.
Lights to indicate the System is ready.
Lights to indicate the port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights to indicate the port is running at 10/100Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Per 100/1000BASE-X Interface (Port-17 to Port-20)
LED Color Function
1000
LNK/ACT
100
LNK/ACT
Per 10G uplink SFP+ Interface (Port-21 to Port-22)
LED Color Function
10G
LNK/ACT
1G
LNK/ACT
Green
Orange
Orange
Green
Lights to indicate the SFP port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that SFP port.
Lights to indicate the SFP port is running at 100Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that SFP port.
Lights to indicate the port is running at 10Gbps speed and successfully established.
Lights to indicate the port is running at 1Gbps speed and successfully established.
38
Blinks to indicate the System is running under upgrading procedure
Blinks to indicate that the switch is actively sending or receiving data over that port.
Blink
GS-5220-20T4C4X LED Indication
Figure 2-1-16: GS-5220-20T4C4X LED on Front Panel
System
LED Color Function
User’s Manual of GS-5220 Series
FAN
PWR Green
SYS Green
Per 10/100/1000BASE-T Interface (Port-1 to Port-24)
LED Color Function
1000
LNK/ACT
10/100
LNK/ACT
Per 100/1000BASE-X Interface (Port-21 to Port-24)
LED Color Function
1000
LNK/ACT
100
LNK/ACT
Red
Green
Orange
Green
Orange
Lights to indicate fan has failed.
Lights to indicate that the Switch is powered on.
Lights to indicate the System is ready.
Lights to indicate the port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights to indicate the port is running at 10/100Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights to indicate the SFP port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that SFP port.
Lights to indicate the SFP port is running at 100Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that SFP port.
Per 10G uplink SFP+ Interface (Port-25 to Port-28)
LED Color Function
Lights to indicate the port is running at 10Gbps speed and successfully established.
Lights to indicate the port is running at 1Gbps speed and successfully established.
s to indicate that the switch is actively sending or receiving data over that port.
10G
LNK/ACT
1G
LNK/ACT
Orange
Green
39
Blinks to indicate the System is running under upgrading procedure
Blinks to indicate that the switch is actively sending or receiving data over that port.
Blinks to indicate that the switch is actively sending or receiving data over that port.
GS-5220-20T4C4XR LED Indication
Figure 2-1-17: GS-5220-20T4C4XR LED on Front Panel
System
LED Color Function
User’s Manual of GS-5220 Series
FAN
DC Green
AC Green
SYS Green
Per 10/100/1000BASE-T Interface (Port-1 to Port-24)
LED Color Function
1000
LNK/ACT
10/100
LNK/ACT
Per 100/1000BASE-X Interface (Port-21 to Port-24)
LED Color Function
1000
LNK/ACT
Red
Green
Orange
Green
Lights to indicate fan has failed.
Lights to indicate that the Switch is powered on (GS-5220-20T4C4XR Only).
Lights to indicate that the Switch is powered on.
Lights to indicate the System is ready.
Lights to indicate the port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights to indicate the port is running at 10/100Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights to indicate the SFP port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that SFP port.
100
LNK/ACT
Per 10G uplink SFP+ Interface (Port-25 to Port-28)
LED Color Function
10G
LNK/ACT
1G
LNK/ACT
Orange
Orange
Green
Lights to indicate the SFP port is running at 100Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that SFP port.
Lights to indicate the port is running at 10Gbps speed and successfully establish ed.
Lights to indicate the port is running at 1Gbps speed and successfully established.
40
LED
Color
Function
PWR
Green
Lights to indicate that the Switch has power.
SYS
Green
Lights
FAN1
Red
Lights
FAN2
Red
Lights to indicate that the FAN2 Group failure.
GS-5220-44S4C LED Indication
Figure 2-1-18: Front Panel LEDs of GS-5220-44S4C
System
User’s Manual of GS-5220 Series
Alert
LED Color Function
Per 10/100/1000Mbps RJ45 Interfaces (Port-1 to Port-4)
LED Color Function
Green
LNK/ACT
Per 100/1000Mbps SFP Combo Interface (Port-1 to Port-48)
LED Color Function
Orange
OFF Indicates the link through that port is successfully established at 10Mbps.
to indica te the system is working.
to indicate that the FAN1 Group failure.
Lights Indicates the link through that port is successfully established at 1000Mbps.
Blinks Indicates that the Switch is actively sending or receiving data over that port.
Lights Indicates the link through that port is successfully established at 100Mbps.
Blinks Indicates that the Switch is actively sending or receiving data over that port.
Green
LNK/ACT
Orange
Lights Indicates the link through that port is successfully established at 1000Mbps.
Blinks Indicates that the Switch is actively sending or receiving data over that port.
Lights Indicates the link through that port is successfully established at 100Mbps.
Blinks Indicates that the Switch is actively sending or receiving data over that port.
41
GS-5220-46S2C4X LED Indication
Figure 2-1-19: Front Panel LEDs of GS-5220-46S2C4X
System
LED Color Function
SYS GreenLights up to indicate the system is working.
PWR GreenLights up to indicate that the Switch has power.
FAN1 RedLights up to indicate fan1 has f aile d.
User’s Manual of GS-5220 Series
FAN2 RedLights up to indicate fan2 has f aile d.
Per 10/100/1000Mbps RJ45 port (Port-1 to Port-2)
LED Color Function
1000
LNK/ACT
10/100
LNK/ACT
Per 100/1000BASE-X SFP Interface (Port-1 to Port-48)
LED Color Function
1000
LNK/ACT
100
LNK/ACT
Green
Orange
Green
Orange
Lights up to indicate the port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights up to indicate the port is running at 10/100Mbp s speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights up to indicate the port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights up to indicate the port is running at 100Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Per 10G SFP+ Interface(Port-49 to Port-52)
LED Color Function
10G Green
1G Green
Lights up to indicate the port is running at 10Gbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights up to indicate the port is running at 1Gbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
42
GS-5220-48T4X LED Indication
Figure 2-1-20: Front Panel LEDs of GS-5220-48T4X
System
LED Color Function
SYS GreenLights up to indicate the system is working.
PWR GreenLights up to indicate that the Switch has power.
User’s Manual of GS-5220 Series
Alert
LED Color Function
FAN1~2 Green
Per 10/100/1000Mbps RJ45 port
LED Color Function
1000
LNK/ACT
10/100
LNK/ACT
Per 100/1000BASE-X SFP Interface (Port-45 to Port-48)
LED Color Function
LNK/ACT Green
Per 10G SFP+ Interface
Green
Orange
Lights up to indicate fan1~2 has failed.
Lights up to indicate the port is running at 1000Mbps speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights up to indicate the port is running at 10/100Mbp s speed and successfully established.
Blinks to indicate that the switch is actively sending or receiving data over that port.
Lights up to indicate the port is successfully established.
Blinks to indicate that the Switch is actively sending or receiving data over that port.
LED Color Function
LNK/ACT Green
Lights up to indicate the port is successfully established.
Blinks to indicate that the Switch is actively sending or receiving data over that port.
User’s Manual of GS-5220 Series
43
2.1.3 Switch Rear Panel
The rear panel of t he Managed Switch consists of the AC/DC inlet power socket. Figures 2-1-21 to 2-1-30 show the rear pan el o f
the Managed Switch.
GS-5220-8P2T2S Rear Panel
Figure 2-1-21: Rear Panel of GS-5220-8P2T2S
GS-5220-16S8C/GS-522016S8CR Rear Panel
GS-5220-16T4S2X Rear Panel
GS-5220-16T4S2XR Rear Pan el
Figure 2-1-22: Rear Panel of GS-5220-16S8C
Figure 2-1-23: Rear Panel of GS-5220-16S8CR
Figure 2-1-24: Rear Panel of GS-5220-16T4S2X
Figure 2-1-25: Rear Panel of GS-5220-16T4S2X
GS-5220-20T4C4X Rear Pan el
Figure 2-1-26: Rear Panel of GS-5220-16T4S2X
44
active all the time, please consider using UPS (Uninterrupted Power Supply) for your device.
Switch from being damaged by unregulated
GS-5220-20T4C4XR Rear Panel
GS-5220-44S4C Rear Pa nel
GS-5220-46S2C4X Rear Panel
User’s Manual of GS-5220 Series
Figure 2-1-27: Rear Panel of GS-5220-16T4S2X
Figure 2-1-28: Rear Panel of GS-5220-44S4C
Figure 2-1-29: Rear Panel of GS-5220-46S2C4X
GS-5220-48T4X Re ar Pa n el
Figure 2-1-30: Rear Panel of GS-5220-48T4X
■ 10 Gigabit SFP+ slot
10GBASE-SR/LR mini-GBIC slot, SFP+ Transceiver module supports from 300 meters (multi-mode fiber) to 60 kilometers
(single mode fiber).
■ AC Power Receptacle
For compatibility with electrical voltages in most areas of the world, the Managed Switch’s power supply can automatically
adjust line power in the range of 100-240V AC and 50/60 Hz.
Plug the female end of the power cord firmly into the receptacle on the rear panel of the Managed Switch and the other en d
of the power cord into an electrical outlet and the power will be ready.
The device is a power-required device, which means it will not work till it is powered. If your networks
should be
Power Notice:
It will prevent you from network data loss or network downtime. In some area s, installing a surge
suppression device may also help to protect your Managed
surge or current to the Switch or the power adapter.
User’s Manual of GS-5220 Series
45
■ DC Power Connector
The following three GS-5220 series supports redundant power system:
The rear panel of the above models has a power switch and a DC power connector, where the latter accepts DC power
input voltage from 3 6V to 60V DC . Connect the power cable to the Managed Switch at the input terminal block. The size of
the two screws in the terminal block is M3.5.
Warning:
Figure 2-1-16 Rear Panel of GS-5220 redundant pow er models
Before connecting the DC power cable to the input terminal block of the GS-5220 redundant power
models, make sure that the power switch is in the “OFF” position and the DC power is OFF.
User’s Manual of GS-5220 Series
46
Chapter 1,
45 tips. For more
2.2 Installing the Switch
This section describes how to install your Managed Switch and make connections to the Managed Switch. Please read the
following topics and perfor m th e proc edur e s i n the order being presented. To install your Managed Switch on a desktop or shelf,
simply complete the following step s.
2.2.1 Desktop Installation
To install the Managed Switch on desktop or shelf, please follow these steps:
Step 1: Attach the rubber feet to the recessed areas on the bottom of the Managed Switch.
Step 2: Place the Managed Switch on the desktop or the shelf near an AC power source, as shown inFigure 2-2-1.
Figure 2-2-1: Place the Managed Switch on the Desktop
Step 3: Keep enough ventilation space between the Managed Switch and the surrounding objects .
When choosing a location, please keep in mind the environmental restrictions discussed in
Section 4, and specifications.
Step 4:Connect the Managed Switch to network devices.
Connect one end of a standard network cable to the 10/100/1000 RJ45 ports on the front of the Managed Switch.
Connect the other end of the cable to the network devices such as printer server, workstation or router.
Connection to the Managed S w itch require s UTP C ategory 5e network cabling with RJ
information, please see the Cabling Specification in Appendix A.
Step 5:Supply power to the Managed Switch.
Connect one end of the power cable to the Managed Switch.
Connect the power plug of the power cable to a standard wall outlet.
When the Managed Switch receives power, the Power LED should remain solid Green.
User’s Manual of GS-5220 Series
47
arts by
2.2.2 Rack Mounting
To install the Managed Switch in a 19-inch standard rack, please follow the instructions described below.
Step 1: Place the Managed Switch on a hard flat surface, with the front panel positioned tow ar ds the front side.
Step 2: Attach the rack-mount bracket to each side of the Managed Switch with supplied screws attached to the package.
Figure 2-2-2shows how to attach brackets to one side of the Managed Switch.
Figure 2-2-2: Attach Brackets to the Managed Switch.
You must use the screws supplied with the mounting brackets. Damage caused to the p
using incorrect screws would invalidate the warranty.
Step 3: Secure the brackets tightly.
Step 4: Follow the same steps to attach the second bracket to the opposite side.
Step 5: After the bracket s ar e att ac hed to the Managed Switch, use suitable screws to securely attach the brackets to the rack,
as shown in Figure 2-2-3.
Figure 2-2-3: Mounting Managed Switch in a Rack
Step 6: Proceed with Steps 4 and 5 of sessio n 2.2 .1 Deskt op Installation to connect the network cabling and supply pow er to the
Managed Switch.
User’s Manual of GS-5220 Series
48
2.2.3 Installing the SFP/SFP+ Transceiver
The sections describe how to insert an SFP/SFP+ transceiver into an SFP/SFP+ slot. The SFP/SFP+ transceivers are
hot-pluggable and hot-sw app a ble. You can plug in and out the transceiver to/from any SFP/SFP+ port without having to power
down the Managed Switch, as the Figure 2-2-4 shows..
Figure 2-2-4: Plug-in the SFP/SFP+ Transceiver
Approved PLANET SFP/SFP+ Transceivers
PLANET Managed Switch support s both singl e mode and multi-mode SFP/SFP+ transceivers. The following list of approved
PLANET SFP/SFP+ transceivers is correct at the time of publication:
MFB-FA20 100 WDM(LC) Single Mode 20km 1310nm/1550nm 0 ~ 60 degrees C
User’s Manual of GS-5220 Series
49
MFB-FB20 100 WDM(LC) Single Mode 20km 1550nm/1310nm 0 ~ 60 degrees C
MFB-TFA20 100 WDM(LC) Single Mode 20km 1310nm/1550nm -40 ~ 75 degrees C
MFB-TFB20 100 WDM(LC) Single Mode 20km 1550nm/1310nm -40 ~ 75 degrees C
MFB-TFA40 100 WDM(LC) Single Mode 40km 1310nm/1550nm -40 ~ 75 degrees C
MFB-TFB40 100 WDM(LC) Sing le Mod e 40km 1550nm/1310nm -40 ~ 75 degrees C
Gigabit Ethernet Transceiver (1000BASE-X SFP)
ModelSpeed (Mbps)
MGB-GT 1000 Copper -- 100m -- 0 ~ 60 degree s C
MGB-SX 1000 LC Multi Mode 550m 850nm 0 ~ 60 d egrees C
MGB-SX2 1000 LC Multi Mode 2km 1310nm 0 ~ 60 degrees C
MGB-LX 1000 LC S ing l e Mode 10km 1310nm 0 ~ 60 degrees C
MGB-L30 1000 LC Single Mod e 30km 1310nm 0 ~ 60 degrees C
MGB-L50 1000 LC Single Mode 50km 1550nm 0 ~ 60 degrees C
MGB-L70 1000 LC Single Mode 70km 1550nm 0 ~ 60 degrees C
MGB-L120 1000 LC Single Mode 120km 1550nm 0 ~ 60 degrees C
MGB-TSX 1000 LC Multi Mode 550m 850nm -40 ~ 75 degrees C
MGB-TLX 1000 LC Single Mode 10km 1310nm -4 0 ~ 75 degrees C
MGB-TL30 1000 LC Single Mode 30km 1310nm -4 0 ~ 75 degrees C
MGB-TL70 1000 LC Single Mode 70km 1550nm -40 ~ 75 degrees C
It is recommended to use PLANET SFP/SFP+ on the Managed Switch. If you insert an SFP/SFP+
transceiver that is not supported, the Managed Switch will not recognize it.
1. Before we connect the GS-5220 series to the other network device, we have to make sure both sides of the SFP
transceivers are with the same media type, for example: 1000BASE-SX to 1000BASE-SX, 1000BASE-LX to
1000BASE-LX.
2. Check whether the fiber-optic cabl e type matches with the SFP transceiver requirement.
To connect to 1000BASE-SX SFP transceiver, please use the multi-mode fiber cable with one side being the male
duplex LC connector type.
To connect to 1000BASE-LX SFP transceiver, please use the single-mode fiber cable with one side being the male
duplex LC connector type.
Connect the Fiber Cable
1. Insert the duplex LC connector into the SFP/SFP+ transceiver.
2. Connect the other end of the cable to a device with SFP/SFP+ transceiver installed.
3. Check the LNK/ACT LED of the SFP/SFP+ slot on the front of the Managed Switch. Ensure that the SFP/SFP+
transceiver is operating correctly.
4. Check the Link mode of the SFP/SFP+ port if the link fails. To function with some fiber-NICs or Media Converters, user
has to set the port Link mode to “10G Force”, “1000M Force” or “100M Force”.
Remove the Transceiver Module
1. Make sure there is no network activity anymore.
2. Remove the Fiber-Optic Cable gently.
3. Lift up the lever of the MGB module and turn it to a horizont al position.
4. Pull out the module gently through the lever.
User’s Manual of GS-5220 Series
51
a horizontal
Figure 2-2-5: How to Pull Out the SFP/SFP+ Transceiver
Never pull out the module without lifting up the l ev er of the module a nd turning it to
position. Directly pulling out the module could damage the module and the SFP/SFP+ module
slot of the Managed Switch.
User’s Manual of GS-5220 Series
52
3. SWITCH MANAGEMENT
This chapter explains the methods that you can use to configure management access to the Managed Switch. It describes the
types of management applications and the communication and management protocols that deliver data between your
management device (workstation or personal computer) and the system. It also contains information about port connection
options.
This chapter covers the following topics:
Requirements
Management Access Overview
Administration Console Access
Web Management Access
SNMP Access
Standards, Protocols, and Related Reading
3.1 Requirements
Workstations running Windows 2000/XP, 2003, Vista/7/8, 2008, MAC OS9 or later, or Linux, UNIX , or other
platforms compatible with TCP/IP protocols.
Workstation is installed with Ethernet NIC (Network Interface Card)
Serial Port connect (Terminal)
• The above PC with COM Port (DB9/RS-232) or USB-to-RS232 converter
Ethernet Port connect
• Network cables - Use standard network (UTP) cables with RJ45 connectors.
The above workstation is installed with Web Browser and JAVA runtime environment plug-in
It is recommended to use Internet Explore 7.0 or above to access Managed Switch.
User’s Manual of GS-5220 Series
53
3.2 Management Access Overview
The Managed Switch gives you the flexibility to access and manage it using any or all of the following methods:
An administration console
Web browser interface
An external SNMP-based network management application
The administration console and Web browser interface support are embedded in the Managed Switch software and are
available for immediate use. Each of these management methods has their own advantages. Table 3-1 compares the three
management methods.
Method Advantages Disadvantages
Console
Web Browser
SNMP Agent
• No IP address or subnet needed
• Text-based
• Telnet functionality and HyperTerminal
built into Windows
95/98/NT/2000/ME/XP operating
systems
• Secure
• Ideal for configuring the switch remotely
• Compatible with all popular browsers
• Can be accessed from any location
• Most visually appealing
• Communicates with switch functions at
the MIB level
• Based on open standards
• Must be near the switch or use dial-up
connection
• Not convenient for remote users
• Modem connection may prove to be unreliable
or slow
• Security can be compromised (hackers need
only know the IP address and subnet mask)
• May encounter lag times on poor connections
• Requires SNMP manager software
• Least visually appealing of all three methods
• Some settings require calculations
• Security can be compromised (hackers need
only know the community name)
Table 3-1 Comparison of Management Methods
User’s Manual of GS-5220 Series
54
3.3 Administration Console
The administration con sol e is an interna l, chara cter -oriented, and command line user interface for performing system
administration such as displaying statistics or changing option settings. Using this method, you can view the administration
console from a terminal, personal computer, Apple Macintosh, or workstation connected to the Managed Switch's console
(serial) port.
Figure 3-1-1: Console Management
Direct Access
Direct access to the administration console is achieved by directly connecting a terminal or a PC equipped with a
terminal-emulation program (such as HyperTerminal) to the Managed Switch console (serial) port. When using this
management method, a straight DB9 RS232 cable is required to connect the switch to the PC. After making this connection,
configure the terminal-emulation program to use the following parameters:
The default parameters are:
115200 bps
8 data bits
No parity
1 stop bit
Figure 3-1-2: Terminal Parameter Settings
User’s Manual of GS-5220 Series
55
You can change these settings, if desired, after you log on. This management method is often preferred because you can
remain connected and monitor the system during system reboots. Also, certain error messages are sent to the serial port,
regardless of the interface through which the associated action was initiated. A Macintosh or PC attachment can use any
terminal-emulation progra m for connect ing to th e ter minal serial port . A workstation attachment under U NIX can use a n emu lator
such as TIP.
3.4 Web Management
The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the
network through a sta ndard brow ser such as M icros oft Intern et Ex plorer. After you set up yo ur IP addr ess for the sw itch, y ou can
access the Managed Switch's Web interface applications directly in your Web browser by entering the IP address of the
Managed Switch.
Figure 3-1-3: Web Management
You can then use your Web browser to list and manage the Managed Switch confi guration p aramet ers from one centr al locati on ,
just as if you were directly connected to the Managed Switch's console port. Web Management requires either Microsoft
Internet Explorer 7.0 or later, Safari or Mozilla Firefox 1.5 or later.
Figure 3-1-4: Web Main Screen of Managed Switch
User’s Manual of GS-5220 Series
56
3.5 SNMP-based Network Management
You can use an external SNMP-based application to configure and manage the Managed Switch, such as SNMP Network
Manager, HP Openview Network Node Management (NNM) or What’s Up Gold. This management method requires the SNMP
agent on the switch and the SNMP Network Management Station to use the same community string. This manageme nt
method, in fact, uses two community strings: the get community string and the set community string. If the SNMP Net-work
management Station only knows the set community string, it can read and write to the MIBs. However, if it only knows the get
community string, it can only read MIBs. The default getting and setting community strings for the Managed Switch is public.
Figure 3-1-5: SNMP Management
3.6 PLANET Smart Discovery Utility
For easily listing the Managed Switch in your Ethernet environment, the Planet Smart Discovery Utility from user’s manual
CD-ROM is an ideal solution. The following inst al lation instructions are to guide you to running the Planet Smart Discovery
Utility.
1. Deposit the Planet Smart Discovery Utility in administrator PC.
2. Run this utility as the following screen appears.
1. This utility shows all necessary information from the devices, such as MAC Address, Device Name, firmware version, and
Device IP Subnet address. It can also assign new password, IP Subnet addr e ss and description for the devices.
2. After setup is completed, press “Update Device”, “Update Multi” or “Up date A ll” button to take effect. T he mea nin g of the
3 buttons above are shown as below:
Update Device: use current setting on one single devi ce.
Update Multi: use current setting on choose multi-devices.
Update All: use current setting on whole devices in the list.
The same functions mentioned above also can be found in “Option” tools bar.
3. To click the “Control Packet Force Broadcast” function, it can allow assign new setting value to the Web Smart Switch
under a different IP subnet address.
4. Press “Connect to Device” button and the Web login screen appears in Figure 3-1-4.
5. Press “Exit” button to shut down the Planet Smart Discovery Utility.
User’s Manual of GS-5220 Series
58
.0 or later version does not allow Java Applets to open sockets. The user has to explicitly
4. WEB CONFIGURATION
This section introduces the configuration and functions of the Web-based management from Managed Switch.
About Web-based Management
The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the
network through a standard browser such as Microsoft Internet Explorer.
The Web-based Management supports Internet Explorer 7.0. It is based on Java Applets with an aim to reduce network
bandwidth consumption, enhance access speed and present an easy viewing screen.
By default, IE7
modify the browser setting to enable Java Applets to use network ports.
The Managed Switch can be configured through an Ether net connect ion, making sure the manager PC must be set on the same
IP subnet address with the Managed Switch.
For example, the default IP address of the Managed Switch is 192.168.0.100, then the manager PC should be set at
192.168.0.x (where x is a number between 1 and 254, except 100), and the default subnet mask is 255.255.255.0.
If you have changed the def aul t IP address of the Managed Switch to 192.168.1.1 with subnet mask 255.255. 255.0 via console,
then the manager PC should be set at 192.168.1.x (where x is a number between 2 and 254) to do the relative configuration on
manager PC.
Figure 4-1-1: Web Management
Logging on the Managed Switch
1. Use Internet Explorer 7.0 or above Web browser. Enter the factory-default IP addr es s to acces s the Web int erf ace . The
factory-default IP Address is shown as follows:
http://192.168.0.100
User’s Manual of GS-5220 Series
59
2. When the following login screen appears, please enter the default username "admin" with password “admin” (or the
username/password you have changed via console) to login the main screen of Managed Sw itch. The login screen in
Figure 4-1-2 appears.
Figure 4-1-2: Login Screen
Default User name: admin
Default Password: admin
After entering the username and password, the main screen appears as shown in Figure 4-1-3.
Figure 4-1-3: Web Main Page
User’s Manual of GS-5220 Series
60
Now, you can use the Web management interface to continue the switch management or manage the Managed Switch by Web
interface. The Switch Menu on the left of the web page lets you access all the commands and statistics t he Managed Switch
provides.
1. It is recommended to use Internet Explore 7.0 or above to access Managed Switch.
2. The changed IP address takes effect immediately after clicking on the Save button. You need to
use the new IP address to access the Web interface.
3. For security reason, please change and memorize the new password after this first setup.
4. Only accept command in lowercase letter under web interface.
4.1 Main Web Page
The Managed Switch provides a Web-based browser interface for configuring and managi n g it. This interface allows you to
access the Managed Switch using the Web browser of your choice. This chapter describes how to use the Managed Switch’s
Web browser interface to configure and manage it.
Main Functions Menu
Copper Port Link Status
SFP/SFP+ Port Link
Help Button
Panel Display
The web agent displays an image of the Managed Switch’s ports. The Mode can be set to display different information for the
ports, including Link up or Link down. Clicking on the image of a port opens the Port Statistics page.
The port status are illustrated as follows:
State DisabledDown Link
RJ45 Ports
SFP Ports
Figure 4-1-4: Web Main Page
Main Screen
User’s Manual of GS-5220 Series
61
Main Menu
Using the onboard web agent, y ou can de fine system parameters, manage and control the Managed Switch, and all its por t s, or
monitor network conditions. Via the Web-Management, the administrator can set up the Managed Switch by selectingthe
functions those listed in the Main Function. The screen in Figure 4-1-5 appears.
Figure 4-1-5: Managed Switch Main Functions Menu
User’s Manual of GS-5220 Series
62
This page displays the status of the IP protocol layer. The status is defined
by the IP interfaces, the IP routes and the neighbour cache (ARP cache)
Managed
the
4.2 System
Use the System men u i tem s to display and configure basic administra tiv e det a ils of the Managed S witch. Under the System, the
following topics are provided to configure and view the system information. This section has the following items:
■ System Information The Managed Switch system information is provided here.
■ IP Configuration Configures the Managed Switch-managed IP
on this page.
■ IP Status
status.
■ Users Configuration
■ Privilege Levels
■ NTP Configuration Configure NTP server on this page.
■ Time Configuration Configure time parameter on this page.
■ UPnP Configure UPnP on this page.
■ DHCP Relay Configure DHCP Relay on this page.
■ DHCP Relay Statistics This page provides statistic s for DHCP relay.
■ CPU Load This page display s the CPU load, using an SVG graph.
■ System Log The Managed Switch system log information is provided here.
■ Detailed Log The Managed Switch system detailed log information is prov ided here.
This page provides an overview of the current users. Currently the only way
to login as another user on the web server is to close and reopen the
browser.
This page provides an overview of the privilege levels.
v4/IPv6 interface and IP routes
■ Remote Syslog Configure remote syslog on this page.
■ SMTP Configuration Configuration SMTP parameters on this page.
■ Web Firmware Upgrade This page facilitates an update of the firmware controlling the
Switch.
■ TFTP Firmware Upgrade Upgrade the firmware via TFTP server
■ Save Startup Config
■ Configuration Download
■ Configuration Upload
■ Configuration Activate
■ Configuration Delete
■ Image Select
■ Factory Default
■ System Reboot You can restart the Managed Switch on this page. After restarting,
This copies running-config to startup-config, thereby ensuring that the
currently active configuration will be used at the next reboot.
You can download the files on the switch.
You c an upload the files to the switch.
You can activate the configuration file present on the switch.
You can delete the writable files which stored in flash.
Configuration active or alternate firmware on this page.
You can reset the configuration of the Managed Switch on this page. Only
the IP configuration is ret ained.
Managed Switch will boot normally.
User’s Manual of GS-5220 Series
63
4.2.1 System Information
The System Infomation page provides information for the curr ent devi ce information. System Information page helps a switch
administrator to identify the hardware MAC address, software version and system uptime. The screen in Figure 4-2-1 appears.
The page includes the following fields:
Object Description
• Contact
• Name
• Location
• MAC Address
• Temperature
• System Date
• System Uptime
• Software Version
• Software Date
The system contact configured in SNMP | System Information | System Contact.
The system name configured in SNMP | System Information | System Name.
The system location configured in SNMP | System Information | System Location.
The MAC Address of this Managed Switch.
Indicates chipset temperature.
The current (GMT) system time and date. The system time is obtained through the
configured NTP Server, if any.
The period of time the device has been operational.
The software version of the Managed Switch.
The date when the M anaged Switch software was produced.
Figure 4-2-1: System Information Page Screenshot
Buttons
Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
: Click to refresh the page; any changes made locally will be undone.
User’s Manual of GS-5220 Series
64
4.2.2 IP Configuration
The IP Configuration includes the IP Configuration, IP Interface and IP Routes. The configured column is used to view or
change the IP configuration. The maximum number of interfaces supported is 128 and the maximum number of routes is 32.
The screen in Figure 4-2-2appears.
Figure 4-2-2: IP Configuration Page Screenshot
The current column is used to show the active IP configuration.
Object Description
• IP Configurations Mode
DNS Server
Configure whether the IP stack should act as a Host or a Router. In Host
mode, IP traffic between interfaces will not be routed. In Router mode
traffic is routed between all interfaces.
This setting controls the DNS name resolution done by the switch. The
following modes are supported:
From any DHCP interfaces
The first DNS server offered from a DHCP lease to a DHCP-enabled
interface will be used.
No DNS server
No DNS server will be used.
Configured
Explicitly provide the IP address of the DNS Server in dotted deci mal
notation.
From this DHCP interface
User’s Manual of GS-5220 Series
65
The destination IP network or host address of this route. Valid format is
The VLAN ID (VID) of the specific IPv6 interface associated with the
Specify from which DHCP-enabled inter fac e a provide d DNS server
should be preferred.
DNS Proxy
• IP Address Delete
VLAN
IPv4
DHCP
IPv4 Address
IPv6 Address
Enabled
Fallback
Current Lease
Mask Length
When DNS proxy is enabled, system will relay DNS requests to the
currently configured DNS serv er, and r eply as a DNS r esolver to the cli ent
devices on the network.
Select this option to delete an existing IP interface.
The VLAN associated with the IP inter face. O nly ports in thi s VLAN w ill be
able to access the IP interface. This field is only available for input when
creating an new interface.
Enable the DHCP client by checking this box.
The number of seconds for trying to obtain a DHCP lease.
For DHCP interfaces with an active lease, this column show the current
interface address, as provided by the DHCP server.
Provide the IP addres s of t his M anaged Switch in dotted dec imal n otat ion.
The IPv4 network mask, in number of bits (prefix length). Valid values are
between 0 and 30 bits for a IPv4 address.
Provide the IP address of this Managed Switch. A IPv6 address is in
128-bit records represented as eight fields of up to four hexadecimal
• IP Routes Delete
Network
Mask Length
Gateway
Next Hop VLAN
Buttons
: Click to add a new IP interface. A maximum of 128 interfaces is supported.
Mask Length
digits with a colon separating each field (:).
The IPv6 network mask, in number of bits (prefix length). Valid values are
between 1 and 128 bits for a IPv6 address.
Select this option to delete an existing IP route.
dotted decimal notationor a valid IPv6 notation. A default route can use
the value 0.0.0.0or IPv6 :: notation.
The destination IP network or host mask, in number of bits (prefix length).
The IP address of the IP gateway. Valid format is dotted decimal notation
or a valid IPv6 notation. Gateway and Network must be of the same type.
gateway.
: Click to add a new IP route. A maximum of 32 routes is supported.
: Click to apply changes.
: Click to undo any changes made locally and revert to previously saved values.
User’s Manual of GS-5220 Series
66
4.2.3 IP Status
IP Status displays the status of the IP protocol layer. The status is defined by the IP interfaces, the IP routes and the neighbour
cache (ARP cache) status. The screen in Figure 4-2-3appears.
Figure 4-2-3: IP Status Page Screenshot
The page includes the following fields:
Object Description
• IP Interfaces
• IP Routes
• Neighbor Cache
Buttons
Interface The name of the interface.
Type
Address The current address of the interface (of the given type).
Status The status flags of the interface (and/or address).
Network The destination IP network or host address of this route.
Gateway The gateway address of this route.
Status The status flags of the route.
IP Address The IP address of the entry.
Link Address The Link (MAC) address for which a binding to the IP address given exist.
The address type of the entry. This may be LINK or IPv4.
Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
: Click to refresh the page.
User’s Manual of GS-5220 Series
67
4.2.4 Users Configuration
This page provides an overview of the current users. Currently the only way to login as another user on the web server is to
close and reopen the browser. After setup is completed, press “Apply” button to take effect. Please login web interface with
new user name and password, t he scre en inFi gure 4-2-4 appears.
Figure 4-2-4: Users Configuration Page Screenshot
The page includes the following fields:
Buttons
Object Description
• User Name
• Privilege Level
The name identifying the user. This is also a link to Add/Edit User.
The privilege level of the user.
The allowed range is 1 to 15. If the privilege level value is 15, it can access all
groups, i.e. tha t i s gr anted the fully control of the device. But others value need to
refer to each group privilege level. User's privil ege sho uld be same or great er
than the group privilege level to have the access of that group.
By default setting, most groups privilege level 5 has the read-only acce ss and
privilege level 10 has the read-write access. And the system maintenance
(software upload, factory defaults and etc.) need user privilege level 15.
Generally, the privilege level 15 can be used for an administrator account,
privilege level 10 for a standard user account and privilege level 5 for a guest
account.
: Click to add a new user.
Add / Edit User
This page configures a user – add, edit or delete user.
68
Figure 4-2-5: Add / Edit User Configuration Page Screenshot
The page includes the following fields:
Object Description
User’s Manual of GS-5220 Series
• Username
• Password
• Password (again)
• Privilege Level
A string identifying the user name that this entry should belong to. The allowed
string length is 1 to 31. The valid user name is a combination of letters, numbers
and underscores.
The password of the user. The allowed string length is 1 to 31.
Please enter the user’s new password here again to confirm.
The privilege level of the user.
The allowed range is 1 to 15. If the privilege level value is 15, it can access all
groups, i.e. tha t i s gr anted the fully control of the device. But others valu e need to
refer to each group privilege level. User's priv il ege sho uld be same or great er
than the group privilege level to have the access of that group.
By default setting, most groups privilege level 5 has the read-only acce ss and
privilege level 10 has the read-write access. And the system maintenance
(software upload, factory defaults and etc.) need user privilege level 15.
Generally, the privilege level 15 can be used for an administrator account,
privilege level 10 for a standard user account and privilege level 5 for a guest
account.
Buttons
: Click to apply changes.
: Click to undo any changes made locally and revert to previously saved values.
: Click to undo any changes made locally and return to the Users.
: Delete the current user. This button is not available for new configurations (Add new user)
User’s Manual of GS-5220 Series
69
he
ore to the default
Once the new user is added, the new user entry shown on the Users Configuration page.
Figure 4-2-6: User Configuration Page Screenshot
If you forget the new password after changing the default password, please press the “Reset”
button on the front panel of the Managed Switch for over 10 seconds and then release i t. T
current setting including VLAN will be lost and the Managed Switch will rest
mode.
User’s Manual of GS-5220 Series
70
ingle module (e.g. LACP, RSTP or QoS), but a few of them contain
4.2.5 Privilege Levels
This page provides an overview of the privilege level s. After setup is completed, please press the “Apply” button to take effect.
Please login web interface with new user name and password and the screen inFigure 4-2-7 appears.
The name identifying the privilege group. In most cases, a privilege level group
consists of a s
more than one. The following description defines these privilege level groups in
details:
System: Contact, Name, Location, Timezone, Log.
User’s Manual of GS-5220 Series
71
Security: Authentication, System Access Management, Port (contains Dot1x
port, MAC based and the MAC Address Limit), ACL, HTTPS, SSH, ARP
Inspection and IP source guard.
IP: Everything except 'ping'.
Port: Everything except 'VeriPHY'.
Diagnostics: 'ping' and 'VeriPHY'.
Maintenance: CLI- System Reboot, System Restore Default, System
Password, Configuration Save, Configuration Load and Firmware Load.
Web- Users, Privilege Levels and everything in Maintenance.
Debug: Only present in CLI.
•Privilege Level
Every privilege level group has an authorization level for the following sub
groups:
Configuration read-only
Configuration/execute read-write
Status/statistics read-only
Status/statistics read-write (e.g. for clearing of statistics).
Buttons
: Click to apply changes.
: Click to undo any changes made locally and revert to previously saved values.
4.2.6 NTP Configuration
Configure NTP on th is page. NTP is an acronym for Network T ime P rot o col , a network protocol for sy nchro niz ing the clo c ks of
computer systems. NTP uses UDP (data gr a ms) as transport layer. You can specify NTP Servers. The NTP Configuration
screen in Figure 4-2-8appears.
Figure 4-2-8: NTPConfiguration Page Screenshot
72
The page includes the following fields:
Object Description
User’s Manual of GS-5220 Series
Buttons
• Mode
• Server #
: Click to apply changes.
Indicates the NTP mode operation. Possible modes are:
Enabled: Enable NTP mode operation. When enable NTP mode operation,
the agent forward and to tra nsfer NT P mess ages betw een th e client s and the
server when they are not on the same subnet domain.
Disabled: Disable NTP mode operation.
Provide the NTP IPv4 or IPv6 address of this switch. IPv6 address is in 128-bit
records represented as eight fields of up to four hexadecimal digits with a colon
separates each field (:).
For example, 'fe80::215:c5ff:fe03:4dc7'. The symbol '::' is a special syntax that
can be used as a shorthand way of representing multiple 16-bit groups of
contiguous zeros; but it can only appear once. It also used a following legally
IPv4 address. For example, '::192.1.2.34'.
: Click to undo any changes made locally and revert to previously saved values.
4.2.7 Time Configuration
Configure T ime Zone on this page. A Time Zone is a region that has a uniform standard time for legal, commercial, and social
purposes. It is convenient for areas in close commercial or other communication to keep the same time, so time zones tend to
follow the boundaries of countries and their subdivisions. The Time Zone Configuration screen in Figure 4-2-9 appears
User’s Manual of GS-5220 Series
73
The page includes the following fields:
Object Description
• Time Zone
• Acronym
• Daylight Saving Time
• Start Time Settings • Week - Select the starting week number.
Figure 4-2-9: TimeConfiguration Page Screenshot
Lists various Time Zones world wide. Select appropriat e Time Zone from the drop
down and click Save to set.
User can set the acronym of the time zone. This is a User configurable acronym
to identify the time zone. ( Range : Up to 16 characters )
This is used to set the clock forward or backward according to the configurations
set below for a defined Daylight Saving Time duration. Select 'Disable' to disable
the Daylight Saving Time configuration. Select 'Recurring' and configure the
Daylight Saving Time duration to repeat the configuration every year. Select
'Non-Recurring' and configure the Daylight Saving Time duration for single time
configuration. ( Default : Disabled ).
•Day - Select the starting day.
User’s Manual of GS-5220 Series
74
• Month - Select the starting month.
• Hours - Select the starting hour.
• Minutes - Select the starting minute.
• End Time Settings • Week - Select the ending week number.
• Day - Select the ending day.
• Month - Select the ending month.
• Hours - Select the ending hour.
• Minutes - Select the ending minute
• Offset Settings
Buttons
: Click to apply changes.
: Click to undo any changes made locally and revert to previously saved values.
Enter the number of minutes to add during Daylight Saving Time. ( Range: 1 to
1440 )
4.2.8 UPnP
Configure UPnP on this page. UPnP is an acronym for Universal Plug and Play. The goals of UPnP are to allow devices to
connect seamlessly and to simplify the implementation of networks in the home (data sharing, communications, and
entertainment) and in corporate environments for simplified installation of computer components. The UPnP Configuration
screen in Figure 4-2-10appears.
Figure 4-2-10: UPnPConfiguration Page Screenshot
The page includes the following fields:
Object Description
•Mode
Indicates the UPnP operation mode . Pos sible mod es are:
When the mode is enabled, two ACEs are added automatically to trap UPnP
related packets to CPU. The ACEs are automatically removed when the mode is
disabled.
Buttons
• TTL
• Advertising Duration
: Click to apply changes
: Click to undo any changes made locally and revert to previously saved values.
The TTL value is used by UPnP to send SSDP advertisement messages.
Valid values are in the range of 1 to 255.
The duration, carried in SS DP packets, is used to inform a control point or cont rol
points how often it or they should receive a SSDP advertisement message from
this switch. If a control point does not receive any message within the duration, it
will think that the switch no longer exists. Due to the unreliable nature of UDP, in
the standard it is recommended that such refreshing of advertisements to be
done at less than one-half of the advertising duration. In the implementation, the
switch sends SSDP messages periodically at the interval one-half of the
advertising duration minus 30 seconds. Valid values are in the range 100 to
86400.
Figure 4-2-11: UPnPdevices show on Windows My Network Place
User’s Manual of GS-5220 Series
76
4.2.9 DHCP Relay
Configure DHCP Relay on this page. DHCP Relay is used to forward and to transfer DHCP messages between the clients and
the server when they are not on the same subnet domain.
The DHCP option 82 enables a DHCP relay agent to insert specific information into a DHCP request packets when forwarding
client DHCP pac kets to a DHCP server and remov e the specific information from a DH CP reply packets w hen f orwarding server
DHCP packets to a DHCP client. The DHCP server can use this information to implement IP address or other assignment
policies. Specifically the option works by setting two sub-options:
Circuit ID (option 1)
Remote ID (option2).
The Circuit ID sub-option is supposed to include information specific to which circuit the request came in on.
The Remote ID sub-option was designed to carry information relating to the remote host end of the circuit.
The definition of Circuit ID in the switch is 4 bytes in length and the format is "vlan_id" "module_id" "port_no". The parameter of
"vlan_id" is the first two bytes representing the VLAN ID. The p ar amet er of "module_id" is the third byte for the module ID. T he
parameter of "port_no" is the fourth byte and it means the port number.
The Remote ID is 6 bytes in length, an d the valu e equals the DHC P r elay agent ’s M AC address. The DHCP Relay Configuration
screen in Figure 4-2-12 appears.
Indicates the DHCP relay mode operation. Possible modes are:
Enabled: Enable DHCP relay mode operation. When enabling DHCP relay
mode operation, the agent forwards and transfers DHCP me ssa ges betw een
the clients and the server when they are not on the same subnet domain.
And the DHCP broadcast message won't flood for security considered.
Disabled: Disable DHCP relay mode operation.
•Relay Server
Indicates the DHCP relay server IP address. A DHCP relay agent is used to
forward and transfer DHCP messages between the clients and the server when
they are not on the same subnet domain.
User’s Manual of GS-5220 Series
77
contains relay agen t i nformation. It will enfor ce t he p oli cy. And it only works under
• Relay Information
Mode
• Relay Information
Policy
Indicates the DHCP relay information mode option operation. Possible modes
are:
Enabled: Enable DHCP relay information mode operation. When enabling
DHCP relay information mode operation, the agent inserts specific
information (option82) into a DHCP message when forwarding to DHCP
server and removing it from a DHCP message when transferring to DHCP
client. It only works under DHCP relay operation mode enabled.
Disabled: Disable DHCP relay information mode operation.
Indicates the DHCP relay information option policy. When enabling DHCP relay
information mode operation, if agent rec eiv es a DHCP message that already
DHCP relay information operation mode enabled. Possible policies are:
Replace: Replace the original relay information when receiving a DHCP
message that already contains it.
Keep: Keep the original relay information when receiving a DHCP message
that already contains it.
Drop: Drop the package when receiving a DHCP message that already
contains relay information.
Buttons
: Click to apply changes
: Click to undo any changes made locally and revert to previously saved values.
4.2.10 DHCP Relay Statistics
This page provides statistics for DHCP relay. The DHCP Relay Statistics screen in Figure 4-2-13appears.
Receive Bad Remote ID The packets number that the Remote ID option did not match known Remote ID.
Client Statistics
Object Description
The packets number that relayed from client to server.
The packets number that errors sending packets to clients.
The packets number that received packets from server.
The packets number that received packets without agent information options.
The packets number that received packets which the Circuit ID option was
missing.
The packets number that received packets which Remote ID option was missing.
The packets number that the Circuit ID option did not match known circuit ID.
• Transmit to Client
• Transmit Error
• Receive from Client
• Receive Agent Option
• Replace Agent Option
• Keep Agent Option
• Drop Agent Option
Buttons
Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
: Click to refresh the page immediately.
The packets number that relayed packets from server to client.
The packets number that erroneously sent packets to servers.
The packets number that received packets from server.
The packets number that received packets with relay agent information option.
The packets number that replaced received packets with relay agent information
option.
The packets number that kept received packets with relay agent information
option.
The packets number that dropped received packets with relay agent information
option.
: Clears all statistics.
User’s Manual of GS-5220 Series
79
, please download Adobe SVG tool and
4.2.11 CPU Load
This page displays the CPU load, using a SVG graph. The load is measured as average over the last 100ms, 1sec and 10
seconds intervals. The last 1 2 0 sam ple s are graphed, and the last numbers are dis play ed a s text as well. In order to displ ay the
SVG graph, your browser must support the SVG format. Consult the SVG Wiki for more information on browser support.
Specifically, at the time of writing, Microsoft Internet Explorer will need to have a plugin installed to support SVG. The CPU Load
screen in Figure 4-2-14appears.
Figure 4-2-14: CPU Load Page Screenshot
Buttons
Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
If your browser cannot display anything on this page
install it in your computer.
User’s Manual of GS-5220 Series
80
4.2.12 System Log
The Managed Switch system log information is provided here. The System Log screen in Figure 4-2-15appears.
Figure 4-2-15: System Log Page Screenshot
The page includes the following fields:
Object Description
• ID
• Level
• Clear Level
• Time
• Message
The ID (>= 1) of the system log entry.
The level of the system log entry. The following level types are supported:
Info: Information level of the system log.
Warning: Warning level of the system log.
Error: Error level of the system log.
All: All levels.
To clear the system log entry level. The following level ty pe s are suppor ted:
Info: Information level of the system log.
Warning: Warning level of the system log.
Error: Error level of the system log.
All: All levels.
The time of the system log entry.
The message of the system log entry.
Buttons
Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
: Updates the system log entries, starting from the current entry ID.
: Flushes the selected log entries.
: Hides the selected log entries.
: Downloads the selected log entries.
User’s Manual of GS-5220 Series
81
: Updates the system log entries, starting from the first available entry ID.
: Updates the system log entries, ending at the last entry currently displayed.
: Updates the system log entries, start ing fr om the last entry currently displayed.
: Updates the system log entries, ending at the last available entry ID.
4.2.13 Detailed Log
The Managed Switch system detailed log information is provided here. The Detailed Log screen in Figure 4-2-16appears.
The page includes the following fields:
Object Description
• ID
• Message
Buttons
: Download the system log entry to the current entry ID.
: Updates the system log entry to the current entry ID.
: Updates the system log entry to the first available entry ID.
: Updates the system log entry to the previous available entry ID.
: Updates the system log entry to the next available entry ID.
Figure 4-2-15: Detailed Log Page Screenshot
The ID (>= 1) of the system log entry.
The message of the system log entry.
: Updates the system log entry to the last available entry ID.
: Print the system log entry to the current entry ID.
User’s Manual of GS-5220 Series
82
4.2.14 Remote Syslog
Configure remote syslog on this page. The Remote Syslog screen in Figure 4-2-17appears.
Figure 4-2-17: Remote Syslog Page Screenshot
The page includes the following fields:
Object Description
Buttons
• Mode
• Syslog Server IP
• Syslog Level
Indicates the server mode operation. When the mode operation is enabled, the
syslog message will send out to syslog server. The syslog protocol is based on
UDP communication and r ecei ved on UD P por t 514 and the s yslog server will not
send acknowledgments back s ender sin ce UDP is a connectionless protocol and
it does not provide acknowledgments. The syslog packet will always send out
even if the syslog server does not exist. Possible modes are:
Enabled: Enable remote sy s log mode operation.
Disabled: Disable remote syslog mode opera tion .
Indicates the IPv4 host address of syslog server. If the switch provides DNS
feature, it also can be a host name.
Indicates what kind of message will send to syslog server. Possible modes are:
Info: Send information, warnings and errors.
Warning: Send warnings and errors.
Error: Send errors.
: Click to apply changes
: Click to undo any changes made locally and revert to previously saved values.
User’s Manual of GS-5220 Series
83
4.2.15 SMTP Configuration
This page facilitates an SMTP Configuration on the switch. The SMTP Configure screen in Figure 4-2-18appears.
Figure 4-2-18: SMTP Configuration Page Screenshot
The page includes the following fields:
Object Description
• SMTP Mode
• SMTP Server
• SMTP Port
• SMTP Authentication
• Authentication User
Name
• Authentication
Password
• E-mail From
• E-mail Subject
Controls whether SMTP is enabled on this switch.
Type the SMTP server name or the IP address of the SMTP server.
Set port number of SMTP service.
Controls whether SMTP authentication is enabled If authentication is required
when an e-mail is sent.
Type the user name for the SMTP server if Authentication is Enable.
Type the password for the SMTP server if Authentication is Enable.
Type the sender’s E-mail address. This address is used for reply e-mails.
Type the subject/title of the e-mail.
• E-mail 1 To
• E-mail 2 To
Buttons
: Send a test mail to mail server to check this account is available or not.
: Click to save changes.
: Click to undo any changes made locally and revert to previously saved values.
Type the receiver’s e-mail address.
User’s Manual of GS-5220 Series
84
4.2.16 Web Firmware Upgrade
This page facilitates an update of the firmware controlling the switch. T he Web Firmware Upgrade screen in Figure 4-2-19
appears.
Figure 4-2-19: Web Firmware Upgrade Page Screenshot
To open Firmware Upgrade screen, perform the following:
1. Click System -> Web Firmware Upgrade.
2. The Firmware Upgrade screen is displayed as in Figure 4-2-19.
3. Click the “
4. Select on the firmware then click “
5. Once the software is loaded to the system succes sfu lly, the following screen appears. The system will load the new
software after reboot.
“button of the Main page, the system would pop up the file selection menu to choose firmware.
”, the Software Upload Progress would show the file with upload status.
DO NOT Power OFF the Managed Switch until the update progress is complete.
Do not quit the Firmware Upgrade page without pressing the “OK” button after the image is
loaded. Or the system won’t apply the new firmware. User has to repeat the firmware
upgrade processes.
User’s Manual of GS-5220 Series
85
4.2.17 TFTP Firmware Upgrade
The Firmware Upgrade page provides the functions to allow a user to update the Managed Switch firm ware from the TFTP
server in the network. Before updating, make sure you have your TFTP server ready and the firmware image is on the TFTP
server. The TFTP Firmware Upgrade screen in Figure 4-2-21appears.
DO NOT Power OFF the Managed Switch until the update progress is complete.
Do not quit the Firmware Upgrade page without pressing the “OK” button after the image is
loaded. Or the system won’t apply the new firmware. User has to repeat the firmware
upgrade processes.
Fill in your TFTP server IP address.
The name of firmware image.
(Maximum length : 24 characters)
User’s Manual of GS-5220 Series
86
4.2.18 Save Startup Config
This function allows save the c ur rent configuration, thereby ensuring that the current active configuration can be used at the
next reboot screen in Figure 4-2-22 appears. A f ter saving the configuration, the screen Figure 4-2-23will appear.
Figure 4-2-22: Configuration Save Page Screenshot
Figure 4-2-23: Finish Saving Page Screenshot
4.2.19 Configuration Download
The switch stores its configuration in a number of text files in CLI format. The files are either virtual (RAM-based) or stored in
flash on the switch.
There are three system files:
• running-config: A virtual file that represents the currently active configuration on the switch. This file is volatile.
• startup-config: The startup configuration for the sw itch, read at boot time.
• default-config: A read-only fi le with v endor-speci fic co nfigur ati on. This file is rea d w hen the s ystem is restor ed to defau lt
settings.
It is also possible to store up to two other files and apply them to running-config, thereby switching configuration.
Configuration Download page allows the download the running-config, startup-config and default-config on the switch. Please
refer to the Figure 4-2-24 shown below.
If the destination is running-config, the file will be applied to the switch configuration. This can be done in two ways:
• Replace mode: The current configuration is fully replaced with the configuration in the uploaded file.
• Merge mode: The uploaded file is merged intorunning-config.
If the file system is full (i.e. contains the three system files mentioned above plus two other files), it is not possible to create new
files, but an existing file must be overwritten or another deleted first.
4.2.21 Configuration Activate
Configuration Activate page allows to activate the startup-config and default-config files present on the switch. Please refer to
the Figure 4-2-26shown below.
In case the active firmware image is the alternate image, only the "Active Image" table is shown. In this
The firmware version and date information may be empty for older firmware releases. This does
It is possible to activate any of the configuration files present on the switch, except for running-config which represents the
currently active configuration.
Select the file to activate and click
configuration with that of the selected file.
. This will initiate the process of completely replacing the existing
4.2.22 Configuration Delete
Configuration Delete page allows to delete the startup-config and defau lt -config files which stored in FLASH. If this is done and
the switch is rebooted without a prior Save operation, this effectively resets the switch to default configuration. Please refer to
the Figure 4-2-27shown below.
This page provides information about the active and alternate (backup) firmware images in the device, and allows you to revert
to the alternate image. The web page displays two tables with information about the active and alternate firmware images. The
Image Select screen in Figure 4-2-28appears.
case, the Activate Alternate Image button is also disabled.
1. If the alternate image is active (due to a corruption of the primary image or by manual
intervention), uploading a new firmware image to the device will automatically use the primary
image slot and activate this.
: Click to use the alternate image. This button may be disabled depending on system state.
The flash index name of the firmware image. The name of primary (preferred)
image is image, the alternate image is named image.bk.
The version of the firmware image.
The date where the firmware was produced.
4.2.24 Factory Default
Y ou can reset the configur ation of the Managed Switch on t his page. O nly the IP configurati on is reta ine d. The new configuration
is available immediately, which means that no restart is necessary. The Factory Default screen in Figure 4-2-29appears.
Figure 4-2-29: Factory Default Page Screenshot
User’s Manual of GS-5220 Series
90
to the Factory default setting, you can also press the hardware reset button
at the front panel about 10 seconds. After the device be rebooted. You can login the management WEB
completely or
on, you can use
Buttons
: Click to reset the configuration to Factory Defaults.
: Click to return to the Port State page without resetting the configuration.
To reset the Managed Switch
interface within the same subnet of 192.168.0.xx.
4.2.25 System Reboot
The Reboot page enables the device to be rebooted from a remote location. Once the Reboot button is pressed, user have to
re-login the WEB interface about 60 seconds later, the System Reboot screen in Fi gure 4-2-30 appears.
Buttons
Figure 4-2-30: System Reboot Page Screenshot
: Click to reboot the system.
: Click to return to the Port State page without rebooting the system.
You can also check the SYS LED on the fr on t panel to identify whether the System is loaded
not. If the SYS LED is bl in king , then it is in the firmware load stage; if t he SYS LED light is
the Web browser to login the Managed Switch.
User’s Manual of GS-5220 Series
91
4.3 Simple Network Management Protoc ol
4.3.1 SNMP Overview
The Simple Network M anagement Pro tocol (S NM P) is an a pplicat ion lay er proto col that f acil itate s th e ex change of ma nageme nt
information between network devices. It is part of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol suite.
SNMP enables network administrators to manage network performance, find and solve network problems, and plan for network
growth.
An SNMP-managed network consists of three key components: Network management stations (NMSs), SNMP agents,
Management information base (MIB) and network-management protocol:
■Network management stations (NMSs): Sometimes called consoles, these devices execute management applications
that monitor and control network elements. Physically, NMSs are usually engineering workstation-caliber computers with
fast CPUs, megapixel color displays, substantial memory, and abundant disk sp a ce. At least one NMS must be present in
each managed environment.
■Agents: Agents are software modules that reside in network elements. They collect and store management information
such as the number of error packets received by a network element.
■Management information base (MIB): A MIB is a collection of managed objects residing in a virtual information store.
Collections of related managed objects are defined in specific MIB modules.
■Network-management protocol: A management protocol is used to convey management information between agents
and NMSs. SNMP is the Internet community's de facto standard management protocol.
SNMP Operations
SNMP itself is a simple request/response protocol. NMSs can send multiple requests without receiving a response.
■ Get -- Allows the NMS to retrieve an object instance from the agent.
■ Set -- Allows the NMS to set values for object instances within an agent.
■ Trap -- Used by the agent to asynchronously inform the NMS of some event. The SNMPv2 trap message is designed to
replace the SNMPv1 trap message.
SNMP community
An SNMP community is the group that devices and management stations running SNMP belong to. It helps define where
information is sent. The communit y name is used to identify the group. A SNMP device or agent may belong to more than one
User’s Manual of GS-5220 Series
92
SNMP community. It will not respond to requests fro m mana gemen t sta tion s that do n ot belo ng to on e of it s comm unitie s. S NMP
default communities are:
。 Write = private
。 Read = public
Use the SNMP Menu to display or configure the Managed Switch's SNMP function. This section has the following items:
System ConfigurationConfigure SNMP on this page.
Trap Configuration Configure SNMP trap on this page.
System InformationThe system information is provided here.
SNMPv3 CommunitiesConfigure SNMPv3 communities table on this page.
SNMPv3 UsersConfigure SNMPv3 users table on this page.
SNMPv3 GroupsConfigure SNMPv3 groups table on this page.
SNMPv3 ViewsConfigure SNMPv3 views table on this page.
SNMPv3 AccessConfigure SNMPv3 accesses table on this page.
4.3.2 SNMP System Configuration
Configure SNMP on this page. The SNMP System Configuration screen in Figure 4-3-1appears.
Figure 4-3-1: SNMP System Configuration Page Screenshot
The page includes the following fields:
Object Description
•Mode
Indicates the SNMP mode operation. Possible modes are:
Indicates the SNMP supported version. Possible versions are:
SNMP v1: Set SNMP supported version 1.
SNMP v2c: Set SNMP supported version 2c.
SNMP v3: Set SNMP supported version 3.
User’s Manual of GS-5220 Series
93
• Read Community
• Write Community
Indicates the community read access string to permit access to SNMP agent.
The allowed string length is 0 to 255, and the allowed content is the ASCII
characters from 33 to 126.
The field is applicable only when SNMP version is SNMPv1 or SNMPv2c. If
SNMP version is SNMPv3, the community string will be associated with SN MPv3
communities table. It provides more flexibility to configure security name than a
SNMPv1 or SNMPv2c community string. In addition to community string, a
particular range of source addresses can be used to restrict source subnet.
Indicates the community write access string to permit access to SNMP agent.
The allowed string length is 0 to 255, and the allowed content is the ASCII
characters from 33 to 126.
The field is applicable only when SNMP version is SNMPv1 or SNMPv2c. If
SNMP version is SNMPv3, the community string will be associated with SN MPv3
communities table. It provides more flexibility to configure security name than a
SNMPv1 or SNMPv2c community string. In addition to community string, a
Buttons
particular range of source addresses can be used to restrict source subnet.
•Engine ID
: Click to apply changes
: Click to undo any changes made locally and revert to previously saved values.
Indicates the SNMPv3 engine ID. The string must contain an even number
between 10 and 64 hexadecimal digits, but all-zeros and all-'F's are not allowed.
Change of the Engine ID will clear all original local users.
User’s Manual of GS-5220 Series
94
4.3.3 SNMP Trap Configuration
Configure SNMP trap on this page. The SN MP Tr ap Configur ation screen in Figure 4-3-2 appears.
Indicates which trap Configuration's name for configuring. The allowed string
length is 0 to 255, and the allowed content is ASCII characters from 33 to 126.
Indicates the SNMP trap mode operation. Possible modes are:
Indicates the SNMP trap supported version. Possible versions are:
User’s Manual of GS-5220 Series
95
using USM for authentication and privacy. A unique engine ID for these traps and
for authentication and privacy. A unique security name is needed when traps and
SNMP v1: Set SNMP trap supported version 1.
SNMP v2c: Set SNMP trap supported version 2c.
SNMP v3: Set SNMP trap supported version 3.
• Trap Community
• Trap Destination
Address
• Trap Destination Port
• Trap Inform Mode
• Trap Inform Timeout
(seconds)
• Trap Inform Retry
Times
• Trap Probe Security
Engine ID
Indicates the community access string when send SNMP trap packet. The
allowed string length is 0 to 255, and the allowed content is the ASCII characters
from 33 to 126.
Indicates the SNMP trap destination address.
Indicates the SNMP trap destination por t. S NMP Agent will send SNMP mes sag e
via this port, the port range is 1~65535.
Indicates the SNMP trap inform mode operation. Possible modes are:
Indicates the SNMP trap inform timeout.
The allowed range is 0 to 2147.
Indicates the SNMP trap inform retry times.
The allowed range is 0 to 255.
Indicates the SNMPv3 trap probe security engine ID mode of operation. Possible
values are:
• Trap Security Engine
ID
• Trap Security Name
• System
• Interface
Enabled: Enable SNMP trap probe security engine ID mode of operation.
Disabled: Disable SNMP trap probe security engine ID mode of operation.
Indicates the SNMP trap security engine ID. SNMPv3 sends traps and informs
informs is needed. When "Trap Probe Security Engine ID" is enabled, the ID will
be probed automatically. Otherwise, the ID specified in this field is used. The
string must contain a n ev en n u mber(in hexadecimal format) with number of digits
between 10 and 64, but all-zeros and all-'F's are not allowed.
Indicates the SNMP trap security name. SNMPv3 traps and informs using USM
informs are enabled.
Enable/disable that the Interface group's traps. Possible traps are:
: Click to undo any changes made locally and revert to previously saved values.
4.3.4 SNMP System Infor mation
The switch system information is provided here. The SNMP System Information screen in Figure 4-3-3 appears.
Figure 4-3-3: System Information Configuration Page Screenshot
The page includes the following fields:
Object Description
• System Contact
• System Name
• System Location
The textual identification of the contact person for this managed node, together
with information on how to contact this person. The allowed string length is 0 to
255, and the allowed content is the ASCII characters from 32 to 126.
An administratively assigned name for this managed node. By convention, this is
the node's fully-qualified domain name. A domain name is a text string drawn
from the alphabet (A-Za-z), digits (0-9), minus sign (-). No space characters are
permitted as part of a name. The first character must be an alpha character. And
the first or last character must not be a minus sign. The allowed str ing len gt h is 0
to 255.
The physical location of this node(e.g., telephone closet, 3rd floor). The allowed
string length is 0 to 255, and the allowed content is the ASCII characters from 32
to 126.
User’s Manual of GS-5220 Series
97
4.3.5 SNMPv3 Configuration
4.3.5.1 SNMPv3 Communities
Configure SNMPv3 communities table on this page. The entry index key is Community. The SNMPv3 Communities screen in
Check to delete the entry. It will be deleted during the next save.
Indicates the community access string to permit access to SNMPv3 agent. The
allowed string length is 1 to 32, and the allowed content is ASCII characters from
33 to 126. The community string will be treat ed as sec urity name and map a
SNMPv1 or SNMPv2c community string.
Indicates the SNMP access source address. A particular range of source
addresses can be used to restrict source subnet when combined with source
mask.
Indicates the SNMP access source address mask.
: Click to undo any changes made locally and revert to previously saved values.
User’s Manual of GS-5220 Series
98
4.3.5.2 SNMPv3 Users
Configure SNMPv3 users t abl e on this page. The entry index keys are Engine ID and User Name. The SNMPv3 Users screen in
Check to delete the entry. It will be deleted during the next save.
An octet string identifying the engine ID that this entry should belong to. The
string must contain a n ev en n u mber( i n hexadecimal format) w ith number o f di gits
between 10 and 64, but all-zeros and all-'F's are not allowed. The SNMPv3
architecture uses the User-based Security Model (USM) for message security
and the View-based Access Control Model (VACM) for access control. For the
USM entry, the usmUserEngineID and usmUserName are the entry's keys.
In a simple agent, usmUserEngineID is always that agen t's own snmpEngineID
value. The value can also t ake the v alue of the snm pEngineI D of a remote SNM P
engine with which this user can communicate. In other words, if user engine ID
equal system engine ID then it is local user; otherwise it's remote user.
A string identifying the user name that this entry should belong to. The allowed
string length is 1 to 32, and the allowed content is ASCII characters from 33 to
126.
Indicates the security model that this entry should belong to. Possible security
models are:
NoAuth, NoPriv: None authentication and none privacy.
Auth, NoPriv: Authentication and none privacy.
Auth, Priv: Authentication and privacy.
The value of security level cannot be modified if entry already exist. That means
must first ensure that the value is set correctly.
•Authentication
Protocol
Indicates the authentication protocol that this entry should belong to. Possible
authentication protocol are:
None: None authentication protocol.
User’s Manual of GS-5220 Series
99
MD5: An optional flag to indicate that this user using MD5 authentication
protocol.
SHA: An optional flag to indicate that this user using SHA authentication
protocol.
The value of security level cannot be modified if entry already exist. That means
must first ensure that the value is set correctly.
Buttons
• Authentication
Password
• Privacy Protocol
• Privacy Password
: Click to add a new user entry.
A string identifying the authentication pass phrase. For MD5 authentication
protocol, the allowed string length is 8 to 32. F or SH A authentication protocol, the
allowed string length is 8 to 40. The allowed content is the ASCII characters from
33 to 126.
Indicates the privacy protocol that this entry should belong to. Possible privacy
protocol are:
None: None privacy protocol.
DES: An optional flag to indicate that this user using DES authentication
protocol.
AES: An optional flag to indicate that this user uses AES aut hent i cat ion
protocol.
A string ident ify ing the priv acy p as s phrase . The allowed string length is 8 to 32,
and the allowed content is the ASCII characters from 33 to 126.
: Click to apply changes
: Click to undo any changes made locally and revert to previously saved values.
4.3.5.3 SNMPv3 Groups
Configure SNMPv3 groups table on this page. The entry index keys are Security Model and Security Name. The SNMPv3
Groups screen in Figure 4-3-6appears.
Figure 4-3-6: SNMPv3 Groups Configuration Page Screenshot
100
The page includes the following fields:
Object Description
User’s Manual of GS-5220 Series
Buttons
• Delete
• Security Model
• Security Name
• Group Name
: Click to add a new group entry.
Check to delete the entry. It will be deleted during the next save.
Indicates the security model that this entry should belong to. Possible security
models are:
v1: Reserved for SNMPv1.
v2c: Reserved for SNMPv2c.
usm: User-based Security Model (USM).
A string identifying the security name that this entry should belong to.
The allowed string length is 1 to 32, and the allowed content is the ASCII
characters from 33 to 126.
A string identifying the group name that this entry should belong to.
The allowed string length is 1 to 32, and the allowed content is the ASCII
characters from 33 to 126.
: Click to apply changes
: Click to undo any changes made locally and revert to previously saved values.
4.3.5.4 SNMPv3 Views
Configure SNMPv3 views table on this page. The entry index keys are View Name and OID Subtree. The SNMPv3 Views
screen in Figure 4-3-7appears.