PLANET SGSD-1022 User Manual

SGSD-1022 / SGSD-1022P

8-Port 10/100Base-TX + 2G TP/SFP

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

User’s Manual

SGSW-2840 / SGSW-2840R

24-Port 10/100Base-TX + 4G TP/SFP

SGSW-2840P / SGSW-2840P4

24-Port 10/100 PoE + 4G TP/SFP

Layer 2 Managed S tackable Switches

1

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Trademarks

Copyright © PLANET Technology Corp. 2010.
Contents subject to which revision without prior notice.
PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners.

Disclaimer

PLANET Technology does not warrant that the hardware will work properly in all environments and applications, and makes no
warranty and representation, either implied or expressed, with respect to the quality, performance, merchantability, or fitness for
a particular purpose. PLANET has made every effort to ensure that this User's Manual is accurate; PLANET disclaims liability
for any inaccuracies or omissions that may have occurred.

Information in this User's Manual is subject to change without notice and does not represent a commitment on the part of
PLANET. PLANET assumes no responsibility for any inaccuracies that may be contained in this User's Manual. PLANET makes
no commitment to update or keep current the information in this User's Manual, and reserves the right to make improvements to
this User's Manual and/or to the products described in this User's Manual, at any time without notice.

If you find information in this manual that is incorrect, misleading, or incomplete, we would appreciate your comments and
suggestions.

FCC Warning

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC
Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated
in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and
used in accordance with the Instruction manual, may cause harmful interference to radio communications. Operation of this
equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the
interference at whose own expense.

CE Mark Warning

This is a Class A product. In a domestic environment, this product may cause radio interference, in which case the user may be
required to take adequate measures.

Energy Saving Note of the Device

This power required device does not support Standby mode operation.
For energy saving, please remove the power cable to disconnect the device from the power circuit.
Without removing power cable, the device will still consuming power from the power source. In the view of Saving the Energy

and reduce the unnecessary power consuming, it is strongly suggested to remove the power connection for the device if this
device is not intended to be active.

WEEE Warnin

g

To avoid the potential effects on the environment and human health as a result of the presence of
hazardous substances in electrical and electronic equipment, end users of electrical and electronic
equipment should understand the meaning of the crossed-out wheeled bin symbol. Do not dispose of
WEEE as unsorted municipal waste and have to collect such WEEE separately.

Revision

PLANET 8 / 24-Port 10/100Mbps with 2 / 4 Gigabit TP / SFP Combo Managed Security Switch User's Manual

FOR MODELS: SGSD-1022 / SGSD-1022P / SGSW-2840 / SGSW-2840R / SGSW-2840P / SGSW-2840P4

REVISION: 1.1 (April.2010)

Part No: EM-SGSD-SGSW (2080-A34050-001)

2

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

TABLE OF CONETNTS

1. INTRODUTION .................................................................................................................... 23

1.1 Packet Contents .........................................................................................................................................23

1.2 Product Description...................................................................................................................................23

1.3 How to Use This Manual............................................................................................................................25

1.4 Product Features........................................................................................................................................25

1.5 Product Specification ................................................................................................................................28

2. INSTALLATION ................................................................................................................... 31

2.1 Hardware Description ................................................................................................................................31

2.1.1 Switch Front Panel ..............................................................................................................................................31

2.1.2 LED Indications ...................................................................................................................................................32

2.1.3 Switch Rear Panel ...............................................................................................................................................36

2.2 Install the Switch ........................................................................................................................................39

2.2.1 Desktop Installation .............................................................................................................................................39

2.2.2 Rack Mounting.....................................................................................................................................................40

2.2.3 Installing the SFP transceiver .............................................................................................................................. 42

3. SWITCH MANAGEMENT .................................................................................................... 44

3.1 Requirements..............................................................................................................................................44

3.2 Management Access Overview.................................................................................................................45

3.3 Administration Console .............................................................................................................................45

3.4 Web Management.......................................................................................................................................47

3.5 SNMP-Based Network Management.........................................................................................................47

3.6 Protocols.....................................................................................................................................................48

3.6.1 Virtual Terminal Protocols ....................................................................................................................................48

3.6.2 SNMP Protocol ....................................................................................................................................................48

3.6.3 Management Architecture....................................................................................................................................48

4. WEB CONFIGURATION...................................................................................................... 49

4.1 Main WEB PAGE.........................................................................................................................................52

3

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2 System.........................................................................................................................................................55

4.2.1 System Information..............................................................................................................................................56

4.2.2 Switch Information ...............................................................................................................................................57

4.2.3 Bridge Extension Configuration ...........................................................................................................................58

4.2.4 IP Configuration...................................................................................................................................................59

4.2.5 Jumbo Frames.....................................................................................................................................................61

4.2.6 File Management .................................................................................................................................................61

4.2.6.1 Copy Operation.......................................................................................................................................61

4.2.6.2 Delete .....................................................................................................................................................67

4.2.6.3 Set Startup..............................................................................................................................................67

4.2.7 Line......................................................................................................................................................................69

4.2.7.1 Console Port Settings................................................................................................................................69

4.2.7.2 Telnet Settings ...........................................................................................................................................71

4.2.8 Log ......................................................................................................................................................................72

4.2.8.1 System Log Configuration .........................................................................................................................72

4.2.8.2 Remote Log Configuration......................................................................................................................... 74

4.2.8.3 Displaying Log Messages.......................................................................................................................... 75

4.2.8.4 SMTP E-Mail Alert .....................................................................................................................................76

4.2.9 UPNP...................................................................................................................................................................78

UPnP Configuration...............................................................................................................................................78

4.2.10 Reset .................................................................................................................................................................79

4.2.11 SNTP .................................................................................................................................................................80

4.2.11.1 SNTP Configuration .................................................................................................................................80

4.2.11.2 Clock Time Zone......................................................................................................................................81

4.2.12 LLDP..................................................................................................................................................................82

4.2.12.1 LLDP Configuration .................................................................................................................................82

4.2.12.2 LLDP Port Configuration.......................................................................................................................... 84

4.2.12.3 LLDP Trunk Configuration .......................................................................................................................87

4.2.12.4 LLDP Local Device Information ...............................................................................................................90

4.2.12.5 Remote Port Information .........................................................................................................................92

4.2.12.6 LLDP Remote Information Detail .............................................................................................................93

4.2.12.7 LLDP Device Statistics ............................................................................................................................95

4.2.12.8 LLDP Device Statistics Details.................................................................................................................96

4.3 Simple Network Management Protocol....................................................................................................97

4.3.1 SNMP Agent Status .............................................................................................................................................98

4.3.2 SNMP Configuration ............................................................................................................................................98

4.3.2.1 SNMP Community .....................................................................................................................................98

4.3.2.2 SNMP Trap Management ..........................................................................................................................99

4.3.3 SNMPv3 ............................................................................................................................................................102

4.3.3.1 SNMPv3 Engine ID..................................................................................................................................102

4

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.3.3.2 SNMPv3 Remote Engine ID .................................................................................................................... 103

4.3.3.3 SNMPv3 Users ........................................................................................................................................104

4.3.3.4 SNMPv3 Remote Users ..........................................................................................................................107

4.3.3.5 SNMPv3 Groups......................................................................................................................................109

4.3.3.6 SNMPv3 View..........................................................................................................................................112

4.4 Port Management .....................................................................................................................................114

4.4.1 Port Information ................................................................................................................................................. 114

4.4.2 Port Configuration.............................................................................................................................................. 116

4.4.3 Port Broadcast Control ......................................................................................................................................118

4.4.4 Port Mirroring.....................................................................................................................................................120

4.4.4.1 Mirror Port Configuration .........................................................................................................................120

4.4.5 Rate Limit ..........................................................................................................................................................123

4.4.5.1 Input Rate Limit Port Configuration..........................................................................................................123

4.4.5.2 Output Rate Limit Port Configuration.......................................................................................................124

4.4.6 Port Statistics.....................................................................................................................................................125

4.5 Link Aggregation......................................................................................................................................130

4.5.1 Trunk Information...............................................................................................................................................131

4.5.2 Trunk Configuration ...........................................................................................................................................131

4.5.3 Trunk Broadcast Control....................................................................................................................................133

4.5.4 Trunk Membership.............................................................................................................................................134

4.5.5 LACP .................................................................................................................................................................137

4.5.5.1 LACP Configuration.................................................................................................................................138

4.5.5.2 LACP Aggregation Port ...........................................................................................................................139

4.5.5.3 Displaying LACP Port Counters...............................................................................................................142

4.5.5.4 Displaying LACP Settings and Status for the Local Side.........................................................................142

4.5.5.5 Displaying LACP Status for the Remote Side.......................................................................................... 144

4.6 Address Table...........................................................................................................................................146

4.6.1 Static Addresses ................................................................................................................................................146

4.6.2 Dynamic Addresses...........................................................................................................................................147

4.6.3 Address Aging....................................................................................................................................................149

4.7 Spanning Tree...........................................................................................................................................150

4.7.1 STA....................................................................................................................................................................158

4.7.1.1 Spanning Tree Information ......................................................................................................................158

4.7.1.2 STA Configuration....................................................................................................................................160

4.7.1.3 STA Port Information ...............................................................................................................................164

4.7.1.4 STA Port Configuration ............................................................................................................................166

4.7.2 MSTP.................................................................................................................................................................169

4.7.2.1 Configuring Multiple Spanning Trees ....................................................................................................... 169

5

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.7.2.2 Displaying Interface Settings for MSTP ...................................................................................................170

4.7.2.3 MSTP Port Configuration......................................................................................................................... 171

4.8 VLAN Configuration.................................................................................................................................173

4.8.1 IEEE 802.1Q VLANs .........................................................................................................................................174

4.8.1.1 VLAN Basic Information ..........................................................................................................................178

4.8.1.2 GVRP Status ...........................................................................................................................................179

4.8.1.3 VLAN Current Table.................................................................................................................................180

4.8.1.4 VLAN Static List.......................................................................................................................................181

4.8.1.5 VLAN Static Table ....................................................................................................................................182

4.8.1.6 Static Membership by Port.......................................................................................................................185

4.8.1.7 VLAN Port Configuration .........................................................................................................................186

4.8.2 Q-in-Q VLAN .....................................................................................................................................................189

4.8.2.1 802.1Q Tunnel Configuration...................................................................................................................192

4.8.2.2 802.1Q Tunnel Port Configuration ...........................................................................................................193

4.8.3 Private VLAN .....................................................................................................................................................195

4.8.3.1 Private VLAN Information ........................................................................................................................ 197

4.8.3.2 Private VLAN Configuration..................................................................................................................... 198

4.8.3.3 Private VLAN Association........................................................................................................................ 199

4.8.3.4 Private VLAN Port Information ................................................................................................................200

4.8.3.5 Private VLAN Port Configuration .............................................................................................................201

4.8.4 Protocol VLAN ...................................................................................................................................................203

4.8.4.1 Protocol VLAN Configuration................................................................................................................... 204

4.8.4.2 Protocol VLAN Port Configuration ...........................................................................................................205

4.9 Multicast....................................................................................................................................................207

4.9.1.1 IGMP Configuration .................................................................................................................................212

4.9.1.2 IGMP Immediate Leave...........................................................................................................................214

4.9.1.3 Multicast Router Port Information ............................................................................................................ 215

4.9.1.4 Static Multicast Router Port Configuration...............................................................................................216

4.9.1.5 IP Multicast Registration Table ................................................................................................................217

4.9.1.6 IGMP Member Port Table ........................................................................................................................218

4.9.2 IGMP Filter and Throttling..................................................................................................................................220

4.9.2.1 IGMP Filter Profile Configuration .............................................................................................................220

4.9.2.2 IGMP Filter Profile Configuration .............................................................................................................221

4.9.2.3 IGMP Filter / Throttling Port Configuration...............................................................................................222

4.9.3 Multicast VLAN Registration (MVR)................................................................................................................... 224

4.9.3.1 MVR Configuration ..................................................................................................................................225

4.9.3.2 MVR Port Configuration...........................................................................................................................226

4.9.3.3 MVR Port Information ..............................................................................................................................228

4.9.3.4 MVR Group Member Configuration .........................................................................................................228

6

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.9.3.5 MVR Group IP Information ......................................................................................................................230

4.10 Quality of Service ...................................................................................................................................231

4.10.1 Priority .............................................................................................................................................................232

4.10.1.1 Port Priority Configuration .....................................................................................................................233

4.10.1.2 Traffic Classes .......................................................................................................................................234

4.10.1.3 Queue Mode..........................................................................................................................................236

4.10.1.4 Queue Scheduling .................................................................................................................................237

4.10.2 Layer 3/4 Priority Settings................................................................................................................................238

4.10.2.1 Mapping Layer 3/4 Priorities to CoS Values ..........................................................................................238

4.10.2.2 IP DSCP Priority Status .........................................................................................................................238

4.10.2.3 IP DSCP Priority ....................................................................................................................................239

4.10.2.4 Mapping IP Precedence Priority ............................................................................................................240

4.10.2.5 IP Precedence Priority Status................................................................................................................ 240

4.10.2.6 IP Precedence Priority...........................................................................................................................241

4.10.2.7 Mapping IP TOS Priority........................................................................................................................241

4.10.2.8 IP TOS Priority Status............................................................................................................................ 242

4.10.2.9 IP TOS Priority.......................................................................................................................................243

4.10.2.10 Mapping IP Port Priority.......................................................................................................................243

4.10.2.11 IP Port Priority Status...........................................................................................................................244

4.10.2.12 IP Port Priority .....................................................................................................................................245

4.10.2.13 Mapping CoS Values to ACLs..............................................................................................................245

4.10.2.14 ACL CoS Priority..................................................................................................................................246

4.10.3 DiffServ............................................................................................................................................................247

4.10.3.1 Configuring a DiffServ Class Map..........................................................................................................248

4.10.3.2 Policy Map.............................................................................................................................................251

4.10.3.3 Service Policy ........................................................................................................................................255

4.10.4 Voice VLANs....................................................................................................................................................256

4.10.4.1 VoIP Traffic Configuration......................................................................................................................256

4.10.4.2 VoIP Port Configuration.........................................................................................................................257

4.10.4.3 Telephony OUI Configuration................................................................................................................. 259

4.11 Security....................................................................................................................................................260

4.11.1 User Authentication..........................................................................................................................................260

4.11.1 Configuring User Accounts ..............................................................................................................................260

4.11.2 Configuring Local / Remote Logon Authentication ........................................................................................... 262

4.11.3 RADIUS Settings .............................................................................................................................................264

4.11.4 TACACS Settings.............................................................................................................................................265

4.11.5 AAA Authorization and Accounting ...................................................................................................................266

4.11.5.1 RADIUS Group Settings ........................................................................................................................267

4.11.5.2 AAA TACACS+ Group Settings..............................................................................................................267

7

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.11.5.3 AAA Accounting Settings .......................................................................................................................268

4.11.5.4 AAA Accounting Update .........................................................................................................................269

4.11.5.5 AAA Accounting 802.1X Port Settings....................................................................................................270

4.11.5.6 AAA Accounting Exec Command Privileges ..........................................................................................271

4.11.5.7 AAA Accounting EXEC Settings............................................................................................................. 272

4.11.5.8 AAA Accounting Summary .....................................................................................................................273

4.11.5.9 AAA Accounting Statistics Summary ......................................................................................................274

4.11.5.10 Authorization Settings ..........................................................................................................................274

4.11.5.11 AAA Authorization EXEC Settings........................................................................................................275

4.11.5.12 AAA Authorization Summary ................................................................................................................275

4.11.6 HTTPS Setting .................................................................................................................................................276

4.11.7 SSH .................................................................................................................................................................278

4.11.7.1 Configure Secure Shell ..........................................................................................................................278

4.11.7.2 SSH Server Settings..............................................................................................................................280

4.11.7.3 SSH Host-Key Settings..........................................................................................................................281

4.11.8 802.1X Port Authentication ..............................................................................................................................284

4.11.8.1 Understanding IEEE 802.1X Port-Based Authentication........................................................................285

4.11.8.2 Displaying 802.1X Information ............................................................................................................... 288

4.11.8.3 802.1X Configuration .............................................................................................................................288

4.11.8.4 802.1X Port Configuration......................................................................................................................289

4.11.8.5 Displaying 802.1X Statistics...................................................................................................................291

4.11.8.7 Windows Platform RADIUS Server Configuration.................................................................................. 292

4.11.8.8 802.1X Client Configuration ................................................................................................................... 294

4.11.9 Client Security..................................................................................................................................................297

4.11.10 Port Security ..................................................................................................................................................298

4.11.11 Web Authentication ........................................................................................................................................301

4.11.11.1 Web Authentication Configuration ........................................................................................................302

4.11.11.2 Web Authentication Port Configuration ................................................................................................303

4.11.11.3 Web Authentication Port Information.................................................................................................... 303

4.11.11.4 Re-Authentication ................................................................................................................................304

4.11.12 Network Access (MAC Address Authentication).............................................................................................306

4.11.12.1 Network Access Configuration .............................................................................................................307

4.11.12.2 Network Access Port Configuration .....................................................................................................307

4.11.12.3 Network Access MAC Address Information..........................................................................................309

4.11.13 Access Control Lists.......................................................................................................................................311

4.11.13.1 ACL Configuration ................................................................................................................................311

4.11.13.2 Configure a Standard ACL ...................................................................................................................313

4.11.13.3 Extended ACL......................................................................................................................................314

4.11.13.4 MAC ACL.............................................................................................................................................316

4.11.13.5 ACL Port Binding..................................................................................................................................319

8

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.11.14 IP Filter ..........................................................................................................................................................321

4.11.14.1 Web IP Filter ........................................................................................................................................321

4.11.14.2 SNMP IP Filter .....................................................................................................................................322

4.11.14.3 Telnet IP Filter......................................................................................................................................323

4.11.15 DHCP Snooping.............................................................................................................................................325

4.11.15.1 DHCP Snooping Configuration ............................................................................................................326

4.11.15.2 DHCP Snooping VLAN Configuration ..................................................................................................326

4.11.15.3 Information Option Configuration .........................................................................................................327

4.11.15.4 DHCP Snooping Port Configuration.....................................................................................................329

4.11.16 IP Source Guard ............................................................................................................................................330

4.11.16.1 Port Configuration ................................................................................................................................330

4.11.16.2 Static Configuration..............................................................................................................................332

4.11.16.3 Dynamic Information............................................................................................................................333

4.12 Cluster .....................................................................................................................................................335

4.12.1 Cluster Configuration .......................................................................................................................................335

4.12.2 Cluster Member Configuration.........................................................................................................................337

4.12.3 Cluster Member Information ............................................................................................................................337

4.12.4 Cluster Candidate Information ......................................................................................................................... 338

4.13 Power Over Ethernet (SGSD-1022P / SGSW-2840P / SGSW-2840P4) ...............................................340

4.13.1 Power over Ethernet Powered Device .............................................................................................................340

4.13.2 Power Management: .......................................................................................................................................341

5. COMMAND LINE INTERFACE.......................................................................................... 344

5.1 Using the Command Line Interface........................................................................................................344

5.1.1 Accessing the CLI..............................................................................................................................................344

5.1.2 Console Connection ..........................................................................................................................................344

5.1.3 Telnet Connection ..............................................................................................................................................344

5.2 Entering Commands ................................................................................................................................346

5.2.1 Keywords and Arguments..................................................................................................................................346

5.2.2 Minimum Abbreviation .......................................................................................................................................346

5.2.3 Command Completion .......................................................................................................................................346

5.2.4 Getting Help on Commands ..............................................................................................................................346

5.2.5 Showing Commands .........................................................................................................................................347

5.2.6 Partial Keyword Lookup.....................................................................................................................................349

5.2.7 Negating the Effect of Commands.....................................................................................................................349

5.2.8 Using Command History....................................................................................................................................349

5.2.9 Understanding Command Modes ......................................................................................................................349

5.2.10 Exec Commands .............................................................................................................................................350

9

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

5.2.11 Configuration Commands ................................................................................................................................351

5.2.12 Command Line Processing.............................................................................................................................. 352

5.3 Command Groups ....................................................................................................................................353

5.4 General Commands .................................................................................................................................354

enable..................................................................................................................................................................354

disable .................................................................................................................................................................355

configure..............................................................................................................................................................356

show history ........................................................................................................................................................356

reload ..................................................................................................................................................................357

prompt .................................................................................................................................................................358

end ......................................................................................................................................................................358

exit.......................................................................................................................................................................358

quit ......................................................................................................................................................................359

5.5 System Management Commands...........................................................................................................360

5.5.1 Device Designation Commands ........................................................................................................................360

hostname.............................................................................................................................................................360

5.5.2 Banner Information Commands.........................................................................................................................361

banner configure .................................................................................................................................................361

banner configure company ..................................................................................................................................363

banner configure dc-power-info...........................................................................................................................363

banner configure department ..............................................................................................................................364

banner configure equipment-info.........................................................................................................................364

banner configure equipment-location ..................................................................................................................365

banner configure ip-lan........................................................................................................................................366

banner configure lp-number ................................................................................................................................366

banner configure manager-info ...........................................................................................................................367

banner configure mux..........................................................................................................................................368

banner configure note .........................................................................................................................................368

show banner........................................................................................................................................................369

5.5.3 System Status Commands ................................................................................................................................370

show startup-config .............................................................................................................................................370

show running-config ............................................................................................................................................372

show system........................................................................................................................................................374

show users ..........................................................................................................................................................375

show version .......................................................................................................................................................376

5.5.4 Frame Size Commands .....................................................................................................................................377

jumbo frame ........................................................................................................................................................377

5.5.5 File Management Commands............................................................................................................................ 378

copy.....................................................................................................................................................................378

10

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

delete ..................................................................................................................................................................381

dir ........................................................................................................................................................................382

whichboot ............................................................................................................................................................383

boot system .........................................................................................................................................................383

5.6 Line Commands .......................................................................................................................................384

line.......................................................................................................................................................................385

login.....................................................................................................................................................................385

password .............................................................................................................................................................386

timeout login response ........................................................................................................................................387

exec-timeout........................................................................................................................................................388

password-thresh..................................................................................................................................................388

silent-time ............................................................................................................................................................389

databits................................................................................................................................................................389

parity....................................................................................................................................................................390

speed ..................................................................................................................................................................391

stopbits ................................................................................................................................................................391

disconnect ...........................................................................................................................................................392

show line .............................................................................................................................................................392

5.7 Event Logging Commands......................................................................................................................393

logging on............................................................................................................................................................393

logging history .....................................................................................................................................................394

logging host .........................................................................................................................................................395

logging facility......................................................................................................................................................396

logging trap..........................................................................................................................................................396

clear log...............................................................................................................................................................397

show logging .......................................................................................................................................................397

show log ..............................................................................................................................................................399

5.8 SMTP Alert Commands............................................................................................................................400

logging sendmail host..........................................................................................................................................400

logging sendmail level .........................................................................................................................................401

logging sendmail source-email ............................................................................................................................ 401

logging sendmail destination-email .....................................................................................................................402

logging sendmail .................................................................................................................................................402

show logging sendmail ........................................................................................................................................403

5.9 Time Commands.......................................................................................................................................403

sntp client ............................................................................................................................................................404

sntp server...........................................................................................................................................................405

sntp poll...............................................................................................................................................................405

11

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

show sntp ............................................................................................................................................................406

clock timezone.....................................................................................................................................................406

calendar set.........................................................................................................................................................407

show calendar .....................................................................................................................................................408

5.10 Switch Cluster Commands....................................................................................................................408

cluster..................................................................................................................................................................409

cluster commander..............................................................................................................................................409

cluster ip-pool ......................................................................................................................................................410

cluster member....................................................................................................................................................410

rcommand ...........................................................................................................................................................411

show cluster ........................................................................................................................................................411

show cluster members.........................................................................................................................................412

show cluster candidates ......................................................................................................................................412

5.11 SNMP Commands...................................................................................................................................413

snmp-server ........................................................................................................................................................414

show snmp ..........................................................................................................................................................414

snmp-server community ......................................................................................................................................415

snmp-server contact ............................................................................................................................................416

Related Commands.............................................................................................................................................416

snmp-server host.................................................................................................................................................417

snmp-server enable traps....................................................................................................................................419

snmp-server engine-id.........................................................................................................................................420

show snmp engine-id ..........................................................................................................................................420

snmp-server view ................................................................................................................................................421

show snmp view ..................................................................................................................................................422

snmp-server group ..............................................................................................................................................423

show snmp group ................................................................................................................................................424

snmp-server user ................................................................................................................................................425

show snmp user ..................................................................................................................................................427

5.12 Authentication Commands....................................................................................................................428

5.12.1 User Account Commands................................................................................................................................428

username ............................................................................................................................................................428

enable password .................................................................................................................................................429

5.12.2 Authentication Sequence.................................................................................................................................430

authentication login .............................................................................................................................................431

authentication enable ..........................................................................................................................................431

5.12.3 RADIUS Client.................................................................................................................................................432

radius-server host................................................................................................................................................433

radius-server auth-port ........................................................................................................................................434

12

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

radius-server acct-port.........................................................................................................................................434

radius-server key.................................................................................................................................................434

radius-server retransmit.......................................................................................................................................435

radius-server timeout...........................................................................................................................................435

show radius-server ..............................................................................................................................................436

5.13.4 TACACS+ Client ..............................................................................................................................................437

tacacs-server host ...............................................................................................................................................437

tacacs-server port................................................................................................................................................438

tacacs-server key ................................................................................................................................................438

tacacs-server retransmit ......................................................................................................................................439

tacacs-server timeout ..........................................................................................................................................439

show tacacs-server..............................................................................................................................................440

5.12.5 AAA Commands ..............................................................................................................................................441

aaa group server .................................................................................................................................................441

server ..................................................................................................................................................................442

aaa accounting dot1x ..........................................................................................................................................442

aaa accounting exec ...........................................................................................................................................443

aaa accounting commands..................................................................................................................................444

aaa accounting update ........................................................................................................................................445

accounting dot1x .................................................................................................................................................445

accounting exec ..................................................................................................................................................446

accounting commands ........................................................................................................................................446

aaa authorization exec ........................................................................................................................................447

authorization exec ...............................................................................................................................................448

show accounting..................................................................................................................................................448

5.12.6 Web Server Commands ..................................................................................................................................450

ip http port ...........................................................................................................................................................450

ip http server........................................................................................................................................................450

ip http secure-server............................................................................................................................................451

ip http secure-port ...............................................................................................................................................452

5.12.7 Telnet Server Commands ................................................................................................................................453

ip telnet server.....................................................................................................................................................453

5.12.8 Secure Shell Commands .................................................................................................................................454

ip ssh server ........................................................................................................................................................456

ip ssh timeout ......................................................................................................................................................457

ip ssh authentication-retries.................................................................................................................................458

ip ssh server-key size..........................................................................................................................................458

delete public-key .................................................................................................................................................459

ip ssh crypto host-key generate...........................................................................................................................459

ip ssh crypto zeroize............................................................................................................................................460

13

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

ip ssh save host-key............................................................................................................................................461

show ip ssh..........................................................................................................................................................461

show ssh .............................................................................................................................................................462

show public-key...................................................................................................................................................463

5.12.9 802.1X Port Authentication ..............................................................................................................................464

dot1x system-auth-control ...................................................................................................................................465

dot1x default........................................................................................................................................................465

dot1x max-req .....................................................................................................................................................465

dot1x port-control ................................................................................................................................................466

dot1x operation-mode .........................................................................................................................................466

dot1x re-authenticate...........................................................................................................................................467

dot1x re-authentication ........................................................................................................................................468

dot1x timeout quiet-period ...................................................................................................................................468

dot1x timeout re-authperiod.................................................................................................................................469

dot1x timeout tx-period........................................................................................................................................469

dot1x intrusion-action ..........................................................................................................................................470

show dot1x ..........................................................................................................................................................471

5.12.10 Management IP Filter Commands ................................................................................................................. 473

management .......................................................................................................................................................473

show management ..............................................................................................................................................474

5.13 Client Security Commands....................................................................................................................475

5.13.1 Port Security Commands.................................................................................................................................476

port security.........................................................................................................................................................476

5.13.2 Network Access (MAC Address Authentication) ..............................................................................................477

network-access mode .........................................................................................................................................478

network-access max-mac-count..........................................................................................................................479

mac-authentication intrusion-action .....................................................................................................................479

mac-authentication max-mac-count ....................................................................................................................480

network-access dynamic-vlan .............................................................................................................................480

network-access guest-vlan ..................................................................................................................................481

mac-authentication reauth-time ........................................................................................................................... 482

clear network-access...........................................................................................................................................482

show network-access ..........................................................................................................................................483

show network-access mac-address-table............................................................................................................484

5.13.3 Web Authentication..........................................................................................................................................485

web-auth login-attempts ......................................................................................................................................485

web-auth quiet-period..........................................................................................................................................486

web-auth session-timeout....................................................................................................................................486

web-auth system-auth-control .............................................................................................................................487

web-auth..............................................................................................................................................................487

14

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

web-auth re-authenticate (Port)...........................................................................................................................488

web-auth re-authenticate (IP) ..............................................................................................................................488

show web-auth ....................................................................................................................................................489

show web-auth interface......................................................................................................................................489

show web-auth summary.....................................................................................................................................490

5.13.4 DHCP Snooping Commands ........................................................................................................................... 491

ip dhcp snooping .................................................................................................................................................491

ip dhcp snooping vlan..........................................................................................................................................493

ip dhcp snooping trust .........................................................................................................................................493

ip dhcp snooping verify mac-address ..................................................................................................................494

ip dhcp snooping information option ....................................................................................................................495

ip dhcp snooping information policy ....................................................................................................................496

show ip dhcp snooping ........................................................................................................................................496

show ip dhcp snooping binding ...........................................................................................................................497

5.13.5 IP Source Guard Commands...........................................................................................................................497

ip source-guard ...................................................................................................................................................498

ip source-guard binding .......................................................................................................................................499

show ip source-guard ..........................................................................................................................................500

show ip source-guard binding..............................................................................................................................501

5.14 Access Control List Commands...........................................................................................................501

5.14.1 IP ACLs............................................................................................................................................................502

access-list ip........................................................................................................................................................502

permit, deny (Standard ACL) ...............................................................................................................................503

permit, deny (Extended ACL) ..............................................................................................................................504

show ip access-list ..............................................................................................................................................506

ip access-group ...................................................................................................................................................507

show ip access-group..........................................................................................................................................507

map access-list ip................................................................................................................................................508

show map access-list ip.......................................................................................................................................509

5.14.2 MAC ACLs.......................................................................................................................................................509

access-list mac....................................................................................................................................................510

permit, deny (MAC ACL)......................................................................................................................................510

show mac access-list ..........................................................................................................................................512

mac access-group ...............................................................................................................................................512

show mac access-group......................................................................................................................................513

map access-list mac............................................................................................................................................513

show map access-list mac...................................................................................................................................514

5.14.3 ACL Information ...............................................................................................................................................515

show access-list ..................................................................................................................................................515

show access-group .............................................................................................................................................516

15

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

5.15 Interface Commands..............................................................................................................................516

interface...............................................................................................................................................................517

description ...........................................................................................................................................................517

speed-duplex.......................................................................................................................................................518

negotiation...........................................................................................................................................................519

capabilities...........................................................................................................................................................520

flowcontrol ...........................................................................................................................................................521

shutdown .............................................................................................................................................................522

broadcast byte-rate .............................................................................................................................................522

switchport broadcast ...........................................................................................................................................523

clear counters......................................................................................................................................................524

show interfaces status.........................................................................................................................................524

show interfaces counters.....................................................................................................................................525

show interfaces switchport ..................................................................................................................................527

5.16 Link Aggregation Commands ...............................................................................................................529

channel-group .....................................................................................................................................................530

lacp......................................................................................................................................................................530

lacp system-priority .............................................................................................................................................532

lacp admin-key (Ethernet Interface) ....................................................................................................................533

lacp admin-key (Port Channel) ............................................................................................................................ 534

lacp port-priority...................................................................................................................................................534

show lacp ............................................................................................................................................................535

5.17 Mirror Port Commands ..........................................................................................................................540

port monitor .........................................................................................................................................................540

show port monitor................................................................................................................................................541

5.18 Rate Limit Commands ...........................................................................................................................541

rate-limit...............................................................................................................................................................542

5.19 Address Table Commands ....................................................................................................................542

mac-address-table static .....................................................................................................................................543

clear mac-address-table dynamic........................................................................................................................544

show mac-address-table .....................................................................................................................................544

mac-address-table aging-time ............................................................................................................................. 545

show mac-address-table aging-time....................................................................................................................546

5.20 Spanning Tree Commands ....................................................................................................................546

spanning-tree ......................................................................................................................................................547

spanning-tree mode.............................................................................................................................................548

spanning-tree forward-time..................................................................................................................................549

spanning-tree hello-time ......................................................................................................................................549

16

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

spanning-tree max-age........................................................................................................................................550

spanning-tree priority...........................................................................................................................................551

spanning-tree pathcost method ...........................................................................................................................551

spanning-tree transmission-limit ..........................................................................................................................552

spanning-tree mst-configuration .......................................................................................................................... 552

mst vlan ...............................................................................................................................................................553

mst priority...........................................................................................................................................................554

name ...................................................................................................................................................................554

revision................................................................................................................................................................555

max-hops.............................................................................................................................................................556

spanning-tree spanning-disabled.........................................................................................................................556

spanning-tree cost...............................................................................................................................................557

spanning-tree port-priority ...................................................................................................................................558

spanning-tree edge-port ......................................................................................................................................559

spanning-tree portfast..........................................................................................................................................559

spanning-tree link-type ........................................................................................................................................560

spanning-tree mst cost ........................................................................................................................................561

spanning-tree mst port-priority.............................................................................................................................562

spanning-tree protocol-migration .........................................................................................................................563

show spanning-tree .............................................................................................................................................563

show spanning-tree mst configuration .................................................................................................................565

5.21 VLAN Commands ...................................................................................................................................567

5.21.1 GVRP and Bridge Extension Commands ........................................................................................................567

bridge-ext gvrp ....................................................................................................................................................568

show bridge-ext ...................................................................................................................................................568

switchport gvrp ....................................................................................................................................................569

show gvrp configuration.......................................................................................................................................569

garp timer ............................................................................................................................................................570

show garp timer...................................................................................................................................................571

5.21.2 Editing VLAN Groups.......................................................................................................................................572

vlan database ......................................................................................................................................................572

vlan......................................................................................................................................................................572

5.21.3 Configuring VLAN Interfaces ...........................................................................................................................573

interface vlan .......................................................................................................................................................574

switchport mode ..................................................................................................................................................574

switchport acceptable-frame-types......................................................................................................................575

switchport ingress-filtering ...................................................................................................................................576

switchport native vlan ..........................................................................................................................................577

switchport allowed vlan........................................................................................................................................577

switchport forbidden vlan.....................................................................................................................................578

17

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

5.21.4 Displaying VLAN Information...........................................................................................................................579

show vlan ............................................................................................................................................................579

5.21.5 Configuring IEEE 802.1Q Tunneling................................................................................................................581

dot1q-tunnel system-tunnel-control .....................................................................................................................582

switchport dot1q-tunnel mode .............................................................................................................................582

switchport dot1q-tunnel tpid.................................................................................................................................583

show dot1q-tunnel ...............................................................................................................................................584

5.21.6 Configuring Private VLANs .............................................................................................................................. 585

private-vlan..........................................................................................................................................................586

private vlan association .......................................................................................................................................587

switchport mode private-vlan...............................................................................................................................587

switchport private-vlan host-association ..............................................................................................................588

switchport private-vlan isolated ...........................................................................................................................589

switchport private-vlan mapping .......................................................................................................................... 589

show private-vlan ................................................................................................................................................590

5.21.7 Configuring Protocol-based VLANs .................................................................................................................591

protocol-vlan protocol-group (Configuring Groups) .............................................................................................591

protocol-vlan protocol-group (Configuring Interfaces) .........................................................................................592

show protocol-vlan protocol-group ......................................................................................................................593

show interfaces protocol-group ...........................................................................................................................594

5.21.8 Configuring Voice VLANs ................................................................................................................................595

voice vlan ............................................................................................................................................................595

voice vlan aging...................................................................................................................................................596

voice vlan mac-address.......................................................................................................................................596

switchport voice vlan ...........................................................................................................................................597

switchport voice vlan rule ....................................................................................................................................598

switchport voice vlan security ..............................................................................................................................599

switchport voice vlan priority................................................................................................................................599

show voice vlan ...................................................................................................................................................600

5.22 LLDP Commands....................................................................................................................................601

lldp.......................................................................................................................................................................603

lldp holdtime-multiplier.........................................................................................................................................603

lldp medFastStartCount.......................................................................................................................................604

lldp notification-interval ........................................................................................................................................604

lldp refresh-interval ..............................................................................................................................................605

lldp reinit-delay ....................................................................................................................................................605

lldp tx-delay .........................................................................................................................................................606

lldp admin-status .................................................................................................................................................607

lldp notification.....................................................................................................................................................607

lldp mednotification..............................................................................................................................................608

18

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

lldp basic-tlv management-ip-address .................................................................................................................608

lldp basic-tlv port-description ...............................................................................................................................609

lldp basic-tlv system-capabilities..........................................................................................................................610

lldp basic-tlv system-description..........................................................................................................................610

lldp basic-tlv system-name .................................................................................................................................. 611

lldp dot1-tlv proto-ident ........................................................................................................................................ 611

lldp dot1-tlv proto-vid ...........................................................................................................................................612

lldp dot1-tlv pvid ..................................................................................................................................................612

lldp dot1-tlv vlan-name ........................................................................................................................................613

lldp dot3-tlv link-agg.............................................................................................................................................613

lldp dot3-tlv mac-phy ...........................................................................................................................................614

lldp dot3-tlv max-frame ........................................................................................................................................614

lldp dot3-tlv poe ...................................................................................................................................................615

lldp medtlv extpoe................................................................................................................................................615

lldp medtlv inventory............................................................................................................................................616

lldp medtlv location ..............................................................................................................................................617

lldp medtlv med-cap ............................................................................................................................................617

lldp medtlv network-policy ...................................................................................................................................618

show lldp config...................................................................................................................................................618

show lldp info local-device...................................................................................................................................620

show lldp info remote-device ...............................................................................................................................621

show lldp info statistics........................................................................................................................................621

5.23 Class of Service Commands.................................................................................................................623

5.23.1 Priority Commands (Layer 2)...........................................................................................................................623

queue mode ........................................................................................................................................................623

switchport priority default.....................................................................................................................................624

queue bandwidth .................................................................................................................................................625

queue cos-map....................................................................................................................................................626

show queue mode ...............................................................................................................................................627

show queue bandwidth........................................................................................................................................627

show queue cos-map ..........................................................................................................................................628

5.23.2 Priority Commands (Layer 3 and 4) .................................................................................................................629

map ip dscp .........................................................................................................................................................629

map ip port ..........................................................................................................................................................630

map ip precedence ..............................................................................................................................................631

map ip tos............................................................................................................................................................632

map access-list ip................................................................................................................................................633

map access-list mac............................................................................................................................................633

show map ip dscp................................................................................................................................................634

show map ip port .................................................................................................................................................634

19

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

show map ip precedence.....................................................................................................................................635

show map ip tos ..................................................................................................................................................636

show map access-list ..........................................................................................................................................637

5.24 Quality of Service Commands ..............................................................................................................637

class-map ............................................................................................................................................................638

match...................................................................................................................................................................639

policy-map ...........................................................................................................................................................640

class ....................................................................................................................................................................640

set .......................................................................................................................................................................641

police ...................................................................................................................................................................642

service-policy.......................................................................................................................................................643

show class-map...................................................................................................................................................644

show policy-map..................................................................................................................................................644

show policy-map interface ...................................................................................................................................645

5.25 Multicast Filtering Commands..............................................................................................................646

5.25.1 IGMP Snooping Commands ............................................................................................................................ 646

ip igmp snooping .................................................................................................................................................646

ip igmp snooping vlan static ................................................................................................................................647

ip igmp snooping version.....................................................................................................................................647

ip igmp snooping immediate-leave ......................................................................................................................649

show ip igmp snooping ........................................................................................................................................649

show mac-address-table multicast ......................................................................................................................650

5.25.2 IGMP Query Commands (Layer 2) .................................................................................................................. 651

ip igmp snooping querier .....................................................................................................................................651

ip igmp snooping query-count .............................................................................................................................651

ip igmp snooping query-interval...........................................................................................................................652

ip igmp snooping query-max-response-time........................................................................................................ 653

5.25.3 Static Multicast Routing Commands ................................................................................................................654

ip igmp snooping vlan mrouter ............................................................................................................................654

show ip igmp snooping mrouter...........................................................................................................................655

5.25.4 IGMP Filtering and Throttling Commands........................................................................................................ 656

ip igmp filter (Global Configuration) .....................................................................................................................656

ip igmp profile ......................................................................................................................................................657

permit, deny.........................................................................................................................................................657

range ...................................................................................................................................................................658

ip igmp filter (Interface Configuration) .................................................................................................................658

ip igmp max-groups .............................................................................................................................................659

ip igmp max-groups action ..................................................................................................................................660

show ip igmp filter................................................................................................................................................660

20

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

show ip igmp profile.............................................................................................................................................661

show ip igmp throttle interface.............................................................................................................................662

5.25.5 Multicast VLAN Registration Commands.........................................................................................................663

mvr (Global Configuration) ..................................................................................................................................663

mvr (Interface Configuration)...............................................................................................................................664

show mvr .............................................................................................................................................................666

5.26 IP Interface Commands .........................................................................................................................669

ip address............................................................................................................................................................669

ip default-gateway ...............................................................................................................................................670

ip dhcp restart......................................................................................................................................................671

show ip interface .................................................................................................................................................671

show ip redirects .................................................................................................................................................672

ping .....................................................................................................................................................................672

6. CLI CONFIGURATION (To be Continued) ....................................................................... 674

System.............................................................................................................................................................674

System Information.....................................................................................................................................................674

Switch Information ......................................................................................................................................................675

Display Bridge Extension Capabilities ........................................................................................................................675

IP Address Configuration ............................................................................................................................................676

Manual IP Configuration ......................................................................................................................................676

Using DHCP/BOOTP ..........................................................................................................................................676

Sending Simple Mail Transfer Protocol Alerts.............................................................................................................676

Setting the System Clock ...........................................................................................................................................677

Setting the Time Zone ................................................................................................................................................677

7. SWITCH OPERATION ....................................................................................................... 678

7.1 Address Table...........................................................................................................................................678

7.2 Learning ....................................................................................................................................................678

7.3 Forwarding & Filtering .............................................................................................................................678

7.4 Store-and-Forward ...................................................................................................................................678

7.5 Auto-Negotiation ......................................................................................................................................679

8. POWER OVER ETHERNET OVERVIEW .......................................................................... 680

What is PoE?...................................................................................................................................................680

21

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

The PoE Provision Process...........................................................................................................................682

Stages of powering up a PoE link........................................................................................................................ 682

Line Detection.............................................................................................................................................................682

Classification ..............................................................................................................................................................683

Start-up.......................................................................................................................................................................683

Operation....................................................................................................................................................................683

Power Disconnection Scenarios .................................................................................................................................683

9. TROUBLE SHOOTING...................................................................................................... 685

APPENDEX A ........................................................................................................................ 686

A.1 Switch's RJ-45 Pin Assignments ...........................................................................................................686

A.2 10/100Mbps, 10/100Base-TX...................................................................................................................686

APPENDEX B : GLOSSARY................................................................................................. 688

22

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

1. INTRODUTION

The PLANET Layer 2 Managed Security Switch series - SGSD-1022 / SGSD-1022P / SGSW-2840 / SGSW-2840P are all

multiple ports Fast Ethernet Switched with Gigabit uplink capability and robust layer 2 features; the description of these models

as below:

SGSD-1022 :

SGSD-1022P :

SGSW-2840 :

SGSW-2840P :

SGSW-2840R :

Terms of “Managed Switch” means the Switches mentioned titled in the cover page of this User’s manual, i.e.SGSD-1022 and

SGSD-2840.

8-Port 10/100Base-TX + 2-Port Gigabit TP/SFP Combo Managed Switch

8-Port 10/100Base-TX + 2-Port Gigabit TP/SFP Combo Managed PoE Switch

24-Port 10/100Base-TX + 4-Port Gigabit TP/SFP Combo Managed Switch

24-Port 10/100Base-TX + 4-Port Gigabit TP/SFP Combo Managed PoE Switch

24-Port 10/100Base-TX + 4-Port Gigabit TP/SFP Combo Managed Switch w/ Redundant Power

1.1 Packet Contents

Open the box of the Managed Switch and carefully unpack it. The box should contain the following items:

Check the contents of your package for following parts:

; The Managed Switch

; User’s manual CD

; Quick installation guide

x1

x1

x1

; 19” Rack mount accessory kit

; Power cord

; Rubber feet

; RS-232 DB9 male Console cable

If any of these are missing or damaged, please contact your dealer immediately, if possible, retain the carton including the

original packing material, and use them against to repack the product in case there is a need to return it to us for repair.

x1

x1

X4

x1

1.2 Product Description

Full-Functioned / Advanced Features Layer 2 Managed Switch for Enterprise and Campus Networking

The PLANET SGSD-1022 / SGSW-2840 is a 8 / 24-Port 10/100Mbps Fast Ethernet Switch with 2 / 4-Port Gigabit TP/ SFP

Combo interfaces, which boasts high performance switch architecture. That is capable of providing non-blocking switch fabric

and wire-speed throughput as high as 12.8 Gbps, which greatly simplifies the tasks of upgrading the LAN for catering to

increase bandwidth demands. Its four built-in GbE uplink ports also offer incredible extensibility, flexibility and connectivity to the

core switch or servers.

23

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Robust Layer 2 Features

The SGSW-2840 can be programmed for basic switch management functions such as port speed configuration, Port

aggregation, VLAN, Spanning Tree protocol, QoS, bandwidth control and IGMP Snooping. It provides IEEE 802.1Q Tagged

VLAN and the VLAN groups allowed on the SGSW-2840 will be maximally up to 256. Via aggregation of supporting port, the

SGSW-2840 allows the operation of high-speed trunk combining multiple ports. Maximum up to 8 ports can be assigned for 12

trunk groups and it supports fail-over as well.

Excellent Traffic Control

The SGSx-series Managed Switch is loaded with powerful traffic management and QoS features to enhance services offered by

telecoms. The functionality includes QoS features such as wire-speed Layer 4 traffic classifiers and bandwidth limiting

applications that are particular useful for multi-tenant unit, multi business unit, Telco, or Network Service Provider. It also

empowers the enterprises to take full advantages of the limited network resources and guarantees the best performance in VoIP

and Video conferencing transmission.

Efficient IP Stacking Management

The SGSW-2840 supports IP Stacking function that helps network managers to easily configure up to 36 switches in the same

series via one single IP address instead of connecting and setting each unit one by one. For efficient management, the

SGSx-series Managed Ethernet Switch is equipped with console, WEB and SNMP management interfaces. With its built-in

Web-based management, it offers an easy-to-use, platform-independent management and configuration facility. It supports

standard Simple Network Management Protocol (SNMP) and can be managed via any standard-based management software

as well. For text-based management, the SGSx-series Managed Switch can also be accessed via Telnet and the console port.

Moreover, it offers secure remote management by supporting SSL and SSH connection which encrypt the packet content at

each session.

Powerful Security

The SGSx-series Managed Switc offers comprehensive Access Control List (ACL) for enforcing security to the edge. Its

protection mechanism also comprises port-based IEEE 802.1x user and device authentication. The port-security is effective in

limiting the numbers of clients pass through so that network administrators can now construct highly secured corporate

networks with considerably less time and effort than before.

Flexibility and Extension solution

The four mini-GBIC slots are compatible with 1000Base-SX/LX and WDM SFP (Small Form Factor Pluggable) fiber-optic

modules. The distance can be extended from 550 meters (Multi-Mode fiber cable) or up to 10/30/50/70/120 kilometers

(Single-Mode fiber or WDM fiber cable). They are well suited for applications within the enterprises’ data centers and

distributions.

24

User’s Manual of SGSD-1022 / SGSD-1022P

1.3 How to Use This Manual

This User Manual is structured as follows:

Section 2, INSTALLATION

The section explains the functions of the Switch and how to physically install the Managed Switch.

Section 3, SWITCH MANAGEMENT

The section contains the information about the software function of the Managed Switch.

Section 4, WEB CONFIGURATION

The section explains how to manage the Managed Switch by Web interface.

Section 5, COMMAND LINE INTERFACE

The section describes how to use the Command Line interface (CLI).

Section 6, CLI CONFIGURATION

The section explains how to manage the Managed Switch by Command Line interface.

Section 7, SWITCH OPERATION

The chapter explains how to does the switch operation of the Managed Switch.

SGSW-2840 / SGSW-2840P

Section 8, POWER OVER ETHERNET OVERVIEW

The chapter introduce the IEEE 802.3af PoE standard and PoE provision of the Managed Switch.

Section 9, TROUBSHOOTING

The chapter explains how to trouble shooting of the Managed Switch.

Appendix A

The section contains cable information of the Managed Switch.

1.4 Product Features

Physical Ports

SGSD-1022

■ 8-Port 10/100Mbps Fast Ethernet ports

■ 2 10/100/1000Mbps TP and SFP shared combo interfaces

■ RS-232 DB9 console interface for basic management and setup

SGSD-1022P

■ 8-Port 10/100Mbps Fast Ethernet ports with IEEE 802.3af PoE Injector

■ 2 10/100/1000Mbps TP and SFP shared combo interfaces

■ RS-232 DB9 console interface for basic management and setup

SGSW-2840 / SGSW-2840R

■ 24-Port 10/100Mbps Fast Ethernet ports

■ 4 10/100/1000Mbps TP and SFP shared combo interfaces

■ RS-232 DB9 console interface for basic management and setup

25

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

SGSW-2840P / SGSW-2840P4

■ 24-Port 10/100Mbps Fast Ethernet ports with IEEE 802.3af PoE Injector

■ 4 10/100/1000Mbps TP and SFP shared combo interfaces

■ RS-232 DB9 console interface for basic management and setup

Layer 2 Features

■ Complies with the IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3z Gigabit Ethernet standard

■ Supports Auto-negotiation and Half-Duplex / Full-Duplex modes for all 10Base-T/100Base-TX and 1000Base-T ports.

■ Auto-MDI/MDI-X detection for each RJ-45 port

■ Prevents packet loss Flow Control:

- IEEE 802.3x FAUSE Frame flow control for Full-Duplex mode

- Back-Pressure Flow Control in Half-Duplex mode

■ High performance of Store-and-Forward architecture, broadcast storm control and runt/CRC filtering eliminate

erroneous packets to optimize the network bandwidth

■ 8K MAC address table, automatic source address learning and ageing

■ 2Mbit embedded memory for packet buffers

■ Support VLANs

- - IEEE 802.1Q tag-based VLAN

- - IEEE 802.1v Protocol based VLAN

- - Q-in-Q tunneling

- - GVRP protocol for VLAN Management

- Up to 255 VLANs groups, out of 4041 VLAN IDs

- - Private VLAN Edge (PVE) supported

■ Support Link Aggregation

− up to 12 trunk groups

− up to 8 ports per trunk group with 1.6Gbps bandwidth (Full Duplex Mode)

− IEEE 802.3ad LACP (Link Aggregation Control Protocol)

− Cisco ether-channel (Static Trunk)

■ Spanning Tree Protocol

- STP, IEEE 802.1D (Classic Spanning Tree Protocol)

- RSTP, IEEE 802.1w (Rapid Spanning Tree Protocol)

- MSTP, IEEE 802.1s (Multiple Spanning Tree Protocol, spanning tree by VLAN)

■ Port Mirroring to monitor the incoming or outgoing traffic on a particular port

Quality of Service

■ 4 priority queues on all switch ports

■ Traffic classification:

- IEEE 802.1p CoS

- IP TOS / DSCP / IP Precedence

26

- IP TCP/UDP port number

■ Supports for strict priority and Weighted Round Robin (WRR) CoS policies

■ Supports QoS and bandwidth control on each port

■ Traffic-policing policies on the switch port

Multicast

■ Supports IGMP Snooping v1 and v2

■ Querier mode support

■ Multicast VLAN Registration (MVR)

Security

■ IEEE 802.1x Port-Based / MAC-Based Authentication

■ Web Authentication

■ RADIUS / TACACS+ users access authentication

■ IP-Based Access Control List (ACL)

■ MAC-Based Access Control List (ACL)

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

■ Port Security

Management

■ Switch Management Interface

- Console / Telnet Command Line Interface

- Web switch management

- SNMP v1, v2c, and v3 switch management

- SSH v1/v2 switch management

- SSL v3/TLS v1 switch management

■ IP Stacking management up to 36 units

■ Accesses through SNMPv1, v2c and v3 security set and get requests.

■ Four groups (history, statistics, alarms and events) of embedded remote monitoring (RMON) agents for network

monitoring and traffic analysis

■ Built-in Trivial File Transfer Protocol (TFTP) client

Power over Ethernet (SGSD-1022P / SGSW-2840P / SGSW-2840P4 Only)

■ Complies with IEEE 802.3af Power over Ethernet End-Span PSE

■ Up to 8 / 24 IEEE 802.3af devices powered

■ Support PoE Power up to 15.4 watts for each PoE ports

■ Auto detect powered device (PD)

■ Circuit protection prevent power interference between ports

■ Remote power feeding up to 100m

■ PoE Management

■ Total PoE power budget control

■ Pert port PoE function enable/disable

■ PoE Port Power feeding priority

■ Per PoE port power limit

■ PD classification detection

27

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

1.5 Product Specification

Product SGSD-1022 SGSD-1022P SGSW-2840 SGSW-2840R SGSW-2840P SGSW-2840P4

Hardware Specification

10/100Mbps Copper

Ports

1000Mbps Copper

Ports

SFP/mini-GBIC Slots

Switch Architecture

Switch Fabric

Switch Throughput

Address Table

Share Data Buffer

Flow Control

LED

Power Consumption

Dimensions ( W x D

x H)

8-Port 10/ 100Base-TX RJ-45

Auto-MDI/MDI-X

2 4

2, shared with Port-9 and

Port-10

Store-and-Forward

5.6Gbps / non-blocking 12.8Gbps / non-blocking

4.16Mpps @64Bytes 9.52Mpps @64Bytes

8K entries

2 Mbits

Back pressure for Half-Duplex

IEEE 802.3x Pause Frame for Full-Duplex

Power, Link/Act

and speed per

port

Max. 10.5 watts

/ 32.6 BTU

330 x 155 x

43.5mm

1U height

Power,

Link/Act, PoE

and speed per

port

Max. 130 watts

/ 443 BTU

330 x 155 x

43.5mm

1U height

24-Port 10/ 100Base-TX RJ-45

Auto-MDI/MDI-X

4 1000Base-SX/LX/BX, shared with Port-25~Port-28,

Port -25, Port-26 compatible with 100Base-FX SFP

Power,

Link/Act and speed per port

Max. 20 watts / 68.5 BTU

440 x 200 x 44.5mm, 1U height 440 x 300 x 44.5mm, 1U height

Power, Power alarm, FAN alarm

Link/Act and PoE In-Use per port

Max. 240 watts

/ 818 BTU

Max. 400 watts

/ 1364 BTU

Weight

Power Supply

Layer 2 Function

Management

Interface

Port Configuration

Port Status

Bandwidth Control

1.2kg 2.0kg 2.8 kg 3.0kg 4.3kg 4.8kg

AC 100~240V, 50/60Hz

Console, Telnet, SSH, Web Browser, SSL, SNMPv1, v2c and v3

Port disable / enable

Auto-negotiation

10/100/1000Mbps full and half duplex mode selection

Flow Control disable / enable

Display each port’s speed duplex mode, link status and Flow control status. Auto negotiation status,

trunk status.

Input Rate Limit

AC 100~240V,

50/60Hz

AC : 100~240V,

50/60Hz

DC: 30~60V

AC 100~240V, 50/60Hz

28

VLAN

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Output Traffic Shaper

Allow to configure per 10K or 1M

IEEE 802.1Q Tag-based VLAN

IEEE 802.1v Protocol based VLAN

Q-in-Q tunneling

GARP / GVRP for VLAN Management

Up to 255 VLANs groups, out of 4041 VLAN IDs

Private VLAN Edge (PVE) supported

Link Aggregation

QoS

IGMP Snooping

Access Control List

SNMP MIBs

Power over Ethernet

PoE Standard

Supports 12 groups of 8-Port trunk, IEEE 802.3ad LACP

Traffic classification based on TCP/UDP Port Number, 802.1p priority, DSCP/TOS/Precedence field

in IP Packet

IGMP (v1/v2) Snooping, up to 256 multicast Groups

IP-Based ACL / MAC-Based ACL

In / Out direction per port

Up to 32 rules per ACL

RFC-1213 MIB-II

RFC-2863 Interface MIB

RFC-2665 EtherLike MIB

RFC-1493 Bridge MIB

RFC-2674 Extended Bridge MIB

RFC-2819 RMON MIB (Group 1, 2, 3,9)

RFC-2737 Entity MIB

RFC-2618 RADIUS Client MIB

-- IEEE 802.3af

Power over

-- -- IEEE 802.3af Power over

Ethernet / PSE

PoE Power Supply

Typ e

PoE Power Output

Power Pin

Assignment

PoE Power Budget

Standards Conformance

Regulation

Compliance

Standards

Compliance

FCC Part 15 Class A, CE

IEEE 802.3

IEEE 802.3u

IEEE 802.3z

IEEE 802.3ab

Ethernet / PSE

-- End-Span -- -- End-Span

--

-- 1/2(+), 3/6(-) -- -- 1/2(+), 3/6(-)

-- 110 Watts -- -- 220 Watts 380 Watts

Per Port 48V DC,

350mA . Max.

15.4 watts

10Base-T

100Base-TX

1000Base- SX/LX

1000Base-T

-- -- Per Port 48V DC, 350mA . Max.

15.4 watts

29

IEEE 802.3x

IEEE 802.3ad

IEEE 802.1d

IEEE 802.1w

IEEE 802.1s

IEEE 802.1p

IEEE 802.1Q

IEEE 802.1v

IEEE 802.1x

IEEE 802.3af

Environment Specifications

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Flow Control and Back pressure

Port trunk with LACP

Spanning tree protocol

Rapid spanning tree protocol

Multiple Spanning tree protocol

Class of service

VLAN Tagging

Protocol VLAN

Port Authentication Network Control

Power over Ethernet, Powered Source Equipment

Operating

Storage

Temperature: 0 degree C ~ 50 degree C

Relative Humidity: 20% ~95% (non-condensing)

Temperature: -40 degree C ~ 70 degree C

Relative Humidity: 20% ~ 95% (non-condensing)

30

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

2. INSTALLATION

This section describes the hardware features and installation of the Managed Switch on the desktop or rack mount. For easier

management and control of the switch, familiarize yourself with its display indicators, and ports. Front panel illustrations in this

chapter display the unit LED indicators. Before connecting any network device to the switch, please read this chapter

completely.

2.1 Hardware Description

2.1.1 Switch Front Panel

The unit front panel provides a simple interface monitoring the switch. Figure 2-1 to 2-4 shows the front panel of the Managed

Switches.

SGSD-1022 Front Panel

SGSD-1022P Front Panel

SGSW-2840 / SGSW-2840R Front Panel

Figure 2-1 SGSD-1022 front panel.

Figure 2-2 SGSD-1022P front panel.

SGSW-2840P / SGSW-2840P4 Front Panel

Figure 2-4 SGSW-2840P front panel.

Figure 2-3 SGSW-2840 front panel.

31

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

■ Gigabit TP interface

10/100/1000Base-T Copper, RJ-45 Twist-Pair: Up to 100 meters.

■ Gigabit SFP slots

1000Base-SX/LX mini-GBIC slot, SFP (Small Factor Pluggable) transceiver module: From 550 meters (Multi-mode fiber),

up to 10/30/50/70/120 kilometers (Single-mode fiber).

■ Console Port

The console port is a DB9, RS-232 male seria port connector. It is an interface for connecting a terminal directly. Through

the console port, it provides rich diagnostic information includes factory reset, forgotten password access, network statistics,

link status and system setting. Users can use the attached RS-232 cable in the package and connect to the console port on

the device. After the connection, users an run any terminal emulation program (Hyper Terminal, ProComm Plus, Telix,

Winterm and so on) to enter the statup screen of the device.

2.1.2 LED Indications

The front panel LEDs indicates instant status of port links, data activity, system operation, PoE in use status and system power,

helps monitor and troubleshoot when needed.

SGSD-1022 LED indication

Figure 2-5 SGSD-1022 LED panel

■ System

LED Color Function

PWR Green

Lights to indicate that the Switch is powered on.

Blink to indicate the System is running under booting procedure.

■ 10/100Base-TX interfaces (Port-1 to Por-8)

LED Color Function

LNK/ACT Green

100 Orange

Lights:

Blink:

Lights: indicate that the port is operating at 100Mbps.

Off: If LNK/ACT LED light-> indicate that the port is operating at 10Mbps

To indicate the link through that port is successfully established.

To indicate that the switch is actively sending or receiving data over that port.

If LNK/ACT LED Off -> indicate that the port is link down

32

User’s Manual of SGSD-1022 / SGSD-1022P

■ 10/100/1000Base-T interfaces (Port-9 and Port-10) and SFP interfaces

LED Color Function

SGSW-2840 / SGSW-2840P

1000

Green

LNK/ACT

10/100

Orange

LNK/ACT

SGSD-1022P LED indication

Lights:

Blink:

Off:

Lights:

Blink:

Off:

To indicate the link through that port is successfully established with speed

1000Mbps

To indicate that the switch is actively sending or receiving data over that port.

If L10/100 NK/ACT LED light-> indicate that the port is operating at 10Mbps or

100Mbps

If LNK/ACT LED Off -> indicate that the port is link down

To indicate the link through that port is successfully established with speed

10Mbps or 100Mbps

To indicate that the switch is actively sending or receiving data over that port.

If 1000 LNK/ACT LED light-> indicate that the port is operating at 1000Mbps

If 1000 LNK/ACT LED Off -> indicate that the port is link down

Figure 2-6 SGSD-1022P LED panel

■ System

LED Color Function

PWR Green

■ 10/100Base-TX , PoE interfaces (Port-1 to Por-8)

LED Color Function

LNK/ACT Green

PoE In-Use Orange

Lights to indicate that the Switch is powered on.

Blink to indicate the System is running under booting procedure.

Lights:

Blink:

Lights:

Off:

To indicate the link through that port is successfully established.

To indicate that the switch is actively sending or receiving data over that port.

To indicate the port is providing 48VDC in-line power

To indicate the connected device is not a PoE Powered Device (PD)

33

User’s Manual of SGSD-1022 / SGSD-1022P

■ 10/100/1000Base-T interfaces (Port-9 and Port-10) and SFP interfaces

LED Color Function

SGSW-2840 / SGSW-2840P

Lights:

1000

Green

LNK/ACT

10/100

Orange

LNK/ACT

SGSW-2840 / SGSW-2840R LED indication

Blink:

Off:

Lights:

Blink:

Off:

To indicate the link through that port is successfully established with speed

1000Mbps

To indicate that the switch is actively sending or receiving data over that port.

If L10/100 NK/ACT LED light-> indicate that the port is operating at 10Mbps or

100Mbps

If LNK/ACT LED Off -> indicate that the port is link down

To indicate the link through that port is successfully established with speed

10Mbps or 100Mbps

To indicate that the switch is actively sending or receiving data over that port.

If 1000 LNK/ACT LED light-> indicate that the port is operating at 1000Mbps

If 1000 LNK/ACT LED Off -> indicate that the port is link down

Figure 2-7 SGSW-2840 LED panel

■ System

LED Color Function

PWR Green

■ 10/100Base-TX interfaces (Port-1 to Por-24)

LED Color Function

LNK/ACT Green

100 Orange

■ 10/100/1000Base-T interfaces (Port-25 to Port-28) and SFP interfaces

Lights to indicate that the Switch is powered on.

Blink to indicate the System is running under booting procedure.

Lights:

Blink:

Lights: indicate that the port is operating at 100Mbps.

Off: If LNK/ACT LED light-> indicate that the port is operating at 10Mbps

To indicate the link through that port is successfully established.

To indicate that the switch is actively sending or receiving data over that port.

If LNK/ACT LED Off -> indicate that the port is link down

34

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

LED Color Function

Lights:

1000

Green

LNK/ACT

10/100

Orange

LNK/ACT

SGSW-2840P / SGSW-2840P4 LED indication

Blink:

Off:

Lights:

Blink:

Off:

To indicate the link through that port is successfully established with speed

1000Mbps

To indicate that the switch is actively sending or receiving data over that port.

If L10/100 NK/ACT LED light-> indicate that the port is operating at 10Mbps or

100Mbps

If LNK/ACT LED Off -> indicate that the port is link down

To indicate the link through that port is successfully established with speed

10Mbps or 100Mbps

To indicate that the switch is actively sending or receiving data over that port.

If 1000 LNK/ACT LED light-> indicate that the port is operating at 1000Mbps

If 1000 LNK/ACT LED Off -> indicate that the port is link down

Figure 2-8 SGSW-2840P / SGSW-2840P4 LED panel

■ System

LED Color Function

PWR Green

PWR Alert Green Lights to indicate that the power supply failure

FAN1 Alert Green Lights to indicate that the FAN1 failure

FAN2 Alert Green Lights to indicate that the FAN2 failure

■ 10/100Base-TX, PoE interfaces (Port-1 to Por-24)

LED Color Function

LNK/ACT Green

Lights to indicate that the Switch is powered on.

Blink to indicate the System is running under booting procedure.

Lights:

Blink:

To indicate the link through that port is successfully established.

To indicate that the switch is actively sending or receiving data over that port.

PoE In-Use Orange

Lights:

Off:

To indicate the port is providing 48VDC in-line power

To indicate the connected device is not a PoE Powered Device (PD)

35

User’s Manual of SGSD-1022 / SGSD-1022P

■ 10/100/1000Base-T interfaces (Port-25 to Port-28) and SFP interfaces

LED Color Function

SGSW-2840 / SGSW-2840P

Lights:

To indicate the link through that port is successfully established with speed

1000Mbps

1000

Blink:

To indicate that the switch is actively sending or receiving data over that port.

Green

LNK/ACT

Off:

If L10/100 NK/ACT LED light-> indicate that the port is operating at 10Mbps or

100Mbps

If LNK/ACT LED Off -> indicate that the port is link down

Lights:

To indicate the link through that port is successfully established with speed

10Mbps or 100Mbps

10/100

Orange

Blink:

To indicate that the switch is actively sending or receiving data over that port.

LNK/ACT

Off:

If 1000 LNK/ACT LED light-> indicate that the port is operating at 1000Mbps

If 1000 LNK/ACT LED Off -> indicate that the port is link down

2.1.3 Switch Rear Panel

The rear panel of the Managed Switch indicates an AC inlet power socket, which accept input power from 100 to 240V AC,

50-60Hz. Figure 2-9 to Figure 2-13 shows the rear panel of these Managed Switches

SGSD-1022 Rear Panel

Figure 2-9 Rear panel of SGSD-1022

SGSD-1022P Rear Panel

Figure 2-10 Rear panel of SGSD-1022P

Power

Power

36

SGSW-2840 Rear Panel

SGSW-2840R Rear Panel

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Figure 2-11 Rear panel of SGSW-2840

Figure 2-12 Rear panel of SGSW-2840R

Figure 2-13 Rear panel of SGSW-2840

SGSW-2840P / SGSW-2840P4 Rear Panel

Figure 2-14 Rear panel of SGSW-2840P / SGSW-2840P4

■ Power Receptacle

For compatibility with electric service in most areas of the world, the WGS3-Layer 3 Switch’s power supply automatically

adjusts to line power in the range 100-240VAC and 50/60 Hz.

Plug the female end of the power cord firmly into the receptalbe on the rear panel of the Switch. Plug the other end of the

power cord into an electric service outlet then the power will be ready.

37

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

The device is a power-required device, it means, it will not work till it is powered. If your networks should

active all the time, please consider using UPS (Uninterrupted Power Supply) for your device. It will

Power Notice:

prevent you from network data loss or network downtime.

In some area, installing a surge suppression device may also help to protect your Managed Switch from

being damaged by unregulated surge or current to the Switch or the power adapter.

38

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

2.2 Install the Switch

This section describes how to install your Managed Switch and make connections to the Managed Switch. Please read the

following topics and perform the procedures in the order being presented. To install your Managed Switch on a desktop or shelf,

simply complete the following steps.

2.2.1 Desktop Installation

To install the Managed Switch on desktop or shelf, please follows these steps:

Step1: Attach the rubber feet to the recessed areas on the bottom of the Managed Switch.

Step2: Place the Managed Switch on the desktop or the shelf near an AC power source, as shown in Figure 2-15.

Figure 2-15 Place the Switch on the desktop

Step3: Keep enough ventilation space between the Managed Switch and the surrounding objects.

When choosing a location, please keep in mind the environmental restrictions discussed in Chapter

1, Section 4, and Specification.

Step4: Connect the Managed Switch to network devices.

Connect one end of a standard network cable to the 10/100/1000 RJ-45 ports on the front of the Managed Switch

Connect the other end of the cable to the network devices such as printer servers, workstations or routers…etc.

Connection to the Managed Switch requires UTP Category 5 network cabling with RJ-45 tips. For

more information, please see the Cabling Specification in Appendix A.

Step5: Supply power to the Managed Switch.

Connect one end of the power cable to the Managed Switch.

Connect the power plug of the power cable to a standard wall outlet.

When the Managed Switch receives power, the Power LED should remain solid Green.

39

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

2.2.2 Rack Mounting

To install the Managed Switch in a 19-inch standard rack, please follows the instructions described below.

Step1: Place the Managed Switch on a hard flat surface, with the front panel positioned towards the front side.

Step2: Attach the rack-mount bracket to each side of the Managed Switch with supplied screws attached to the package.

Figure 2-16 and 2-17 shows how to attach brackets to one side of the Managed Switch.

Figure 2-16 Attach brackets to the Managed Switch.

Figure 2-17 Attach brackets to the Managed Switch.

You must use the screws supplied with the mounting brackets. Damage caused to the parts by

using incorrect screws would invalidate the warranty.

Step3: Secure the brackets tightly.

Step4: Follow the same steps to attach the second bracket to the opposite side.

Step5: After the brackets are attached to the Managed Switch, use suitable screws to securely attach the brackets to the rack,

as shown in Figure 2-17 and 2-18.

40

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Figure 2-18 Mounting SGSD-1022 in a Rack

Figure 2-19 Mounting SGSW-2840 in a Rack

Step6: Proceeds with the steps 4 and steps 5 of session 2.2.1 Desktop Installation to connect the network cabling and supply

power to the Managed Switch.

41

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

2.2.3 Installing the SFP transceiver

The sections describe how to insert an SFP transceiver into an SFP slot.

The SFP transceivers are hot-pluggable and hot-swappable. You can plug-in and out the transceiver to/from any SFP port

without having to power down the Managed Switch. As the Figure 2-20 appears.

Figure 2-20 Plug-in the SFP transceiver

Approved PLANET SFP Transceivers

PLANET Managed Switch supports both Single mode and Multi-mode SFP transceiver. The following list of approved PLANET

SFP transceivers is correct at the time of publication:

■MGB-SX SFP (1000BASE-SX SFP transceiver )

■MGB-LX SFP (1000BASE-LX SFP transceiver )

It recommends using PLANET SFPs on the Managed Switch. If you insert a SFP transceiver that is

not supported, the Managed Switch will not recognize it.

Before connect the other Managed Switches, workstation or Media Converter.

1. Make sure both side of the SFP transceiver are with the same media type, for example: 1000Base-SX to 1000Base-SX,

1000Bas-LX to 1000Base-LX.

2. Check the fiber-optic cable type match the SFP transceiver model.

¾ To connect to 1000Base-SX SFP transceiver, use the Multi-mode fiber cable- with one side must be male duplex LC

connector type.

¾ To connect to 1000Base-LX SFP transceiver, use the Single-mode fiber cable-with one side must be male duplex LC

connector type.

42

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Connect the fiber cable

1. Attach the duplex LC connector on the network cable into the SFP transceiver.

2. Connect the other end of the cable to a device – switches with SFP installed, fiber NIC on a workstation or a Media

Converter..

3. Check the LNK/ACT LED of the SFP slot on the front of the Managed Switch. Ensure that the SFP transceiver is operating

correctly.

4. Check the Link mode of the SFP port if the link failed. Co works with some fiber-NICs or Media Converters, set the Link

mode to “1000 Force” is needed.

Remove the transceiver module

1. Make sure there is no network activity by consult or check with the network administrator. Or through the management

interface of the switch/converter (if available) to disable the port in advance.

2. Remove the Fiber Optic Cable gently.

3. Turn the handle of the MGB module to horizontal.

4. Pull out the module gently through the handle.

Figure 2-21 Pull out the SFP transceiver

Never pull out the module without pull the handle or the push bolts on the module. Direct pull

out the module with violent could damage the module and SFP module slot of the Managed

Switch.

43

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

3. SWITCH MANAGEMENT

This chapter explains the methods that you can use to configure management access to the Managed Switch. It describes the

types of management applications and the communication and management protocols that deliver data between your

management device (work-station or personal computer) and the system. It also contains information about port connection

options.

This chapter covers the following topics:

 Requirements

 Management Access Overview

 Administration Console Access

 Web Management Access

 SNMP Access

 Standards, Protocols, and Related Reading

3.1 Requirements

 Workstations of subscribers running Windows 98/ME, NT4.0, 2000/XP, MAC OS9 or later, Linux, UNIX or other

platform compatible with TCP/IP protocols.

 Workstation installed with Ethernet NIC (Network Interface Card)

 Serial Port connect (Terminal)

• Above PC with COM Port (DB-9 / RS-232) or USB-to-RS-232 converter

 Ethernet Port connect

• Network cables - Use standard network (UTP) cables with RJ45 connectors.

 Above Workstation installed with WEB Browser and JAVA runtime environment Plug-in

It is recommended to use Internet Explore 6.0 or above to access Managed Switch.

44

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

3.2 Management Access Overview

The Managed Switch gives you the flexibility to access and manage it using any or all of the following methods:

 An administration console

 Web browser interface

 An external SNMP-based network management application

The administration console and Web browser interface support are embedded in the Managed Switch software and are

available for immediate use. Each of these management methods has their own advantages. Table 3-1 compares the three

management methods.

Method Advantages Disadvantages

Console

Web Browser

SNMP Agent

• No IP address or subnet needed

• Text-based

• Telnet functionality and HyperTerminal

built into Windows

95/98/NT/2000/ME/XP operating

systems

• Secure

• Ideal for configuring the switch remotely

• Compatible with all popular browsers

• Can be accessed from any location

• Most visually appealing

• Communicates with switch functions at

the MIB level

• Based on open standards

• Must be near switch or use dial-up connection

• Not convenient for remote users

• Modem connection may prove to be unreliable

or slow

• Security can be compromised (hackers need

only know the IP address and subnet mask)

• May encounter lag times on poor connections

• Requires SNMP manager software

• Least visually appealing of all three methods

• Some settings require calculations

• Security can be compromised (hackers need

only know the community name)

Table 3-1 Management Methods Comparison

3.3 Administration Console

The administration console is an internal, character-oriented, and command line user interface for performing system

administration such as displaying statistics or changing option settings. Using this method, you can view the administration

console from a terminal, personal computer, Apple Macintosh, or workstation connected to the switch's console (serial) port.

There are two ways to use this management method: via direct access or modem port access. The following sections describe

these methods. For more information about using the console, refer to Chapter 5 Command Line Interface Console

Management.

45

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Figure 3-1 Console management

Direct Access

Direct access to the administration console is achieved by directly connecting a terminal or a PC equipped with a

terminal-emulation program (such as HyperTerminal) to the Managed Switch console (serial) port.

When using this management method, a straight DB9 RS-232 cable is required to connect the switch to the PC. After making

this connection, configure the terminal-emulation program to use the following parameters:

The default parameters are:

 9600 bps

 8 data bits

 No parity

 1 stop bit

Figure 3-2 Terminal parameter settings

You can change these settings, if desired, after you log on. This management method is often preferred because you can

remain connected and monitor the system during system reboots. Also, certain error messages are sent to the serial port,

regardless of the interface through which the associated action was initiated. A Macintosh or PC attachment can use any

terminal-emulation program for connecting to the terminal serial port. A workstation attachment under UNIX can use an emulator

such as TIP.

46

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

3.4 Web Management

The Managed Switch provides a browser interface that lets you configure and manage the switch remotely. After you set up your

IP address for the switch, you can access the Managed Switch's Web interface applications directly in your Web browser by

entering the IP address of the Managed Switch. You can then use your Web browser to list and manage the Managed Switch

configuration parameters from one central location, just as if you were directly connected to the Managed Switch's console port.

Web Management requires either Microsoft Internet Explorer 6.0 or later, Safari or Mozilla Firefox 1.5 or later.

Figure 3-3 Web management

3.5 SNMP-Based Network Management

You can use an external SNMP-based application to configure and manage the Managed Switch, such as SNMPc Network

Manager, HP Openview Network Node Management (NNM) or What’s Up Gold. This management method requires the SNMP

agent on the switch and the SNMP Network Management Station to use the same community string. This management

method, in fact, uses two community strings: the get community string and the set community string. If the SNMP Net-work

management Station only knows the set community string, it can read and write to the MIBs. However, if it only knows the get

community string, it can only read MIBs. The default gets and sets community strings for the Managed Switch are public.

Figure 3-4 SNMP management

47

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

3.6 Protocols

The Managed Switch supports the following protocols:

 Virtual terminal protocols, such as Telnet

 Simple Network Management Protocol (SNMP)

3.6.1 Virtual Terminal Protocols

A virtual terminal protocol is a software program, such as Telne t, that allows you to establish a management session from a

Macintosh, a PC, or a UNIX workstation. Because Telnet runs over TCP/IP, you must have at least one IP address configured on

the Managed Switch before you can establish access to it with a virtual terminal protocol.

Terminal emulation differs from a virtual terminal protocol in that you must connect a terminal directly

to the console (serial) port.

3.6.2 SNMP Protocol

Simple Network Management Protocol (SNMP) is the standard management protocol for multi-vendor IP networks. SNMP

supports transaction-based queries that allow the protocol to format messages and to transmit information between reporting

devices and data-collection programs. SNMP runs on top of the User Datagram Protocol (UDP), offering a connectionless-mode

service.

3.6.3 Management Architecture

All of the management application modules use the same Messaging Application Programming Interface (MAPI). By unifying

management methods with a single MAPI, configuration parameters set using one method (console port, for example) are

immediately displayable by the other management methods (for example, SNMP agent of Web browser).

The management architecture of the switch adheres to the IEEE open standard. This compliance assures customers that the

Managed Switch is compatible with, and will interoperate with other solutions that adhere to the same open standard.

48

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4. WEB CONFIGURATION

This section introduces the configuration and functions of the Web-Based management.

About Web-based Management

The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the

network through a standard browser such as Microsoft Internet Explorer.

The Web-Based Management supports Internet Explorer 6.0. It is based on Java Applets with an aim to reduce network

bandwidth consumption, enhance access speed and present an easy viewing screen.

By default, IE6.0 or later version does not allow Java Applets to open sockets. The user has to

explicitly modify the browser setting to enable Java Applets to use network ports.

The Managed Switch can be configured through an Ethernet connection, make sure the manager PC must be set on same the

IP subnet address with the Managed Switch.

For example, the default IP address of the SGSD / SGSW Managed Switch is 192.168.0.100, then the manager PC should be

set at 192.168.0.x (where x is a number between 1 and 254, except 100), and the default subnet mask is 255.255.255.0.

If you have changed the default IP address of the Managed Switch to 192.168.1.1 with subnet mask 255.255.255.0 via console,

then the manager PC should be set at 192.168.1.x (where x is a number between 2 and 254) to do the relative configuration on

manager PC.

Figure 4-1-1 Web Management

49

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

 Logging on the switch

1. Use Internet Explorer 6.0 or above Web browser. Enter the factory-default IP address to access the Web interface. The

factory-default IP Address as following:

http://192.168.0.100

2. When the following login screen appears, please enter the default username "admin" with password “admin” (or the

username/password you have changed via console) to login the main screen of Managed Switch. The login screen in

Figure 4-1-2 appears.

Figure 4-1-2 Login screen

Default User name: admin

Default Password: admin

After entering the username and password, the main screen appears as Figure 4-1-3.

50

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Figure 4-1-3 Default main page

Now, you can use the Web management interface to continue the switch management or manage the Managed Switch by Web

interface. The Switch Menu on the left of the web page let you access all the commands and statistics the Managed Switch

provides.

1. It is recommended to use Internet Explore 6.0 or above to access Managed Switch.

2. The changed IP address take effect immediately after click on the Apply button, you need to

use the new IP address to access the Web interface.

3. The changed IP address remains the original after reboot the switch unless the

configuration is saved. To save the changed IP address, please move to System \ File

Management \ Copy menu and select “running-config to startup-config”.

51

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.1 Main WEB PAGE

The SGSD / SGSW Managed Switch provides a Web-based browser interface for configuring and managing it. This interface

allows you to access the Managed Switch using the Web browser of your choice. This chapter describes how to use the

Managed Switch’s Web browser interface to configure and manage it.

Main Functions Menu

Port Link Status

IP Stacking

Member switch

Main Screen

Apply Button

Help Button

1. To ensure proper screen refresh, be sure that Internet Explorer is configured so that the

setting “Check for newer versions of stored pages” reads “Every visit to the page”.

• Internet Explorer 6.x and earlier: This option is available under the menu “Tools / Internet

Options / General / Temporary Internet Files / Settings”.

• Internet Explorer 7.x: This option is available under “Tools / Internet Options / General /

2. You may have to manually refresh the screen after making configuration changes by

Browsing History / Settings / Temporary Internet Files”.

pressing the browser’s

Figure 4-1-4 Main Page

52

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Panel Display

The web agent displays an image of the Managed Switch’s ports. The Mode can be set to display different information for the

ports, including Active (i.e., up or down), Duplex (i.e., half or full duplex, or Flow Control (i.e., with or without flow control).

Clicking on the image of a port opens the Port Configuration page.

Main Menu

Using the onboard web agent, you can define system parameters, manage and control the Managed Switch, and all its ports, or

monitor network conditions.

Via the Web-Management, the administrator can setup the Managed Switch by select the functions those listed in the Main

Function. The screen in Figure 4-1-5 appears.

Figure 4-1-5 SGSD/SGSW Managed Switch Main Funcrions Menu

Configuration Options

Configurable parameters have a dialog box or a drop-down list. Once a configuration change has been made on a page, be

sure to click on the Apply button to confirm the new setting. The following table summarizes the web page configuration buttons.

Button Action

Apply

Revert

Help

Sets specified values to the system.

Cancels specified values and restores current values prior to pressing Apply.

Links directly to webhelp.

53

User’s Manual of SGSD-1022 / SGSD-1022P

The following Main functions can be configured here:

 System

 SNMP

 Port Management

 Address Table

 Spanning Tree

 VLAN

 Multicast

 QoS

 Security

 Cluster

 Power over Ethernet ( SGSD-1022P / SGSW-2840P / SGSW-2840P4 Only)

SGSW-2840 / SGSW-2840P

54

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2 System

Use the System menu items to display and configure basic administrative details of the Managed Switch. Under System the

following topics are provided to configure and view the system information: This section has the following items:

■ System

Information

■ Switch

Information

■ Bridge Extension

Configuration

■ IP Configuration

■ Jumbo Frames

■ File Management

■ Line

■ Log

Provides basic system description, including contact information

Shows the number of ports, and hardware/firmware version numbers

Shows the bridge extension parameters

Sets the IP address for management access

Enables jumbo frame packets.

Copy Operation

Delete

Set Start-Up

Sets console port and telnet connection parameters

Logs

System Logs

Remote Logs

SMTP

Allows the transfer and copying files

Allows deletion of files from the flash memory

Sets the startup file

Stores and displays error messages

Sends error messages to a logging process

Configures the logging of messages to a remote logging

process

Sends an SMTP client message to a participating server.

■ Reset

■ SNTP

■ LLDP

Restarts the switch

Simple Network Time Protocol. Configures SNTP client settings, including broadcast

mode or aspecified list of servers

Link Layer Discovery Protocol

55

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.1 System Information

Use the System Information screen to display descriptive information about the Managed Switch, or for quick system

identification. You can easily identify the system by displaying the device name, location and contact information. The System

Information screen in Figure 4-2-1 appears.

The page includes the following fields:

Object Description

• System Name -

• Object ID -

• Location -

• Contact -

• System Up time -

Figure 4-2-1 System Information screenshot

Enter the name you want to use to identify this switch.

You may use up to 31 alpha-numeric characters.

The factory default is blank.

The base object ID for the Managed Switch's enterprise MIB.

Enter the location of this Managed Switch.

You may use up to 31 alpha-numeric characters. The factory default is blank.

Enter the contact person for this switch.

You may use up to 31 alpha-numeric characters.

The factory default is blank.

The time in days, hours and minutes since the last switch reboot.

This page also includes a Telnet button that allows access to the Command Line Interface via Telnet.

56

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.2 Switch Information

Use the Switch Information page to display hardware/firmware version numbers for the main board and management software,

as well as the number of ports of the system. The Switch Information screen in Figure 4-2-2 appears.

The page includes the following fields:

■ Main Board

Object Description

• Serial Number

• Number of Ports

• Hardware Version

■ Management Software

Figure 4-2-2 Switch Information screenshot

The serial number of the Managed Switch.

Number of built-in RJ-45 ports. The default value of each model as below:

SGSD-1022 / SGSD-1022P: 10

SGSW-2840 / SGSW-2840P : 28

Hardware version of the main board.

Object Description

• Loader Version

• Boot-ROM Version

• Operation Code

Version

Version number of loader code.

Version of Power-On Self-Test (POST) and boot code.

Version number of runtime code.

57

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.3 Bridge Extension Configuration

The Bridge MIB includes extensions for managed devices that support Multicast Filtering, Traffic Classes, and Virtual LANs.

You can access these extensions to display default settings for the key variables, or to configure the global setting for GARP

VLAN Registration Protocol (GVRP).

The Bridge Extension Configuration screen in Figure 4-2-3 appears.

Figure 4-2-3 Bridge Extension Configuration screenshot

The page includes the following fields:

Object Description

• Extended Multicast

Filtering Services

• Traffic Classes

• VLAN Learning

• Configurable PVID

Tagging

• Local VLAN Capable

This Managed Switch does not support the filtering of individual multicast

addresses based on GMRP (GARP Multicast Registration Protocol).

This Managed Switch provides mapping of user priorities to multiple traffic

classes. (Refer to “Class of Service Configuration”)

This Managed Switch uses Independent VLAN Learning (IVL), where each port

maintains its own filtering database.

This Managed Switch allows you to override the default Port VLAN ID (PVID

used in frame tags) and egress status (VLAN-Tagged or Untagged) on each port.

(Refer to “VLAN Configuration”.)

This Managed Switch does not support multiple local bridges outside of the

scope of 802.1Q defined VLANs.

• GMRP

GARP Multicast Registration Protocol (GMRP) allows network devices to

register endstations with multicast groups. This Managed Switch does not

support GMRP; it uses the Internet Group Management Protocol (IGMP) to

provide automatic multicast filtering.

58

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.4 IP Configuration

This section describes how to configure an IP interface for management access over the network. The IP address for the stack

is obtained via DHCP by default. To manually configure an address, you need to change the Managed Switch’s default settings

to values that are compatible with your network. You may also need to an establish a default gateway between the stack and

management stations that exist on another network segment.

You can manually configure a specific IP address, or direct the device to obtain an address from a BOOTP or DHCP server.

Valid IP addresses consist of four decimal numbers, 0 to 255, separated by periods.

Figure 4-2-4 IP Configuration screenshot

Object Description

• Management VLAN

• IP Address Mode

ID of the configured VLAN (1-4094). This is the only VLAN through which you

can manage the Managed Switch.

By default, all ports on the Managed Switch are members of VLAN 1. However,

the management station can be attached to a port belonging to any VLAN, as

long as that VLAN has been assigned an IP address.

Specifies whether IP functionality is enabled via :

 Static - manual configuration

 DHCP - Dynamic Host Configuration Protocol

 BOOTP - Boot Protocol

If DHCP/BOOTP is enabled, IP will not function until a reply has been received

from the server. Requests will be broadcast periodically by the switch for an IP

address. (DHCP/BOOTP values can include the IP address, subnet mask, and

default gateway.)

• IP Address

Address of the VLAN interface that is allowed management access. Valid IP

addresses consist of four numbers, 0 to 255, separated by periods.

(Default: 192.168.0.100)

59

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

• Subnet Mask

This mask identifies the host address bits used for routing to specific subnets.

(Default: 255.255.255.0)

• Gateway IP address

• MAC Address

• Restart DHCP

If you lose your management connection, use a console connection and enter “show ip

interface” to determine the new switch address.

 Manual Configuration

1. Click System, IP Configuration.

2. Select the VLAN through which the management station is attached, set the IP Address Mode to “Static,” enter the IP

address, subnet mask and gateway, then click Apply.

IP address of the gateway router between this device and management stations

that exist on other network segments.

(Default: 0.0.0.0)

The physical layer address for this Managed Switch.

Requests a new IP address from the DHCP server.

 Using DHCP/BOOTP

If your network provides DHCP/BOOTP services, you can configure the Managed Switch to be dynamically configured by these

services.

1. Click System, IP Configuration.

2. Specify the VLAN to which the management station is attached, set the IP Address Mode to DHCP or BOOTP.

3. Click Apply to save your changes.

4. Then click Restart DHCP to immediately request a new address.

The Managed Switch will also broadcast a request for IP configuration settings on each

power reset.

 Renewing DCHP

DHCP may lease addresses to clients indefinitely or for a specific period of time. If the address expires or the switch is moved to

another network segment, you will lose management access to the switch. In this case, you can reboot the switch or submit a

client request to restart DHCP service via the CLI.

1. If the address assigned by DHCP is no longer functioning, you will not be able to renew the IP settings via the web

interface.

2. You can only restart DHCP service via the Web interface if the current address is still available.

60

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.5 Jumbo Frames

The Managed Switch provides more efficient throughput for large sequential data transfers by supporting jumbo frames up to

9216 bytes. Compared to standard Ethernet frames that run only up to 1.5 KB, using jumbo frames significantly reduces the

per-packet overhead required to process protocol encapsulation fields.

The Jumbo Frames configure screen in Figure 4-2-5 appears.

Figure 4-2-5 Jumbo Frames configure screenshot

Object Description

• Jumbo Packet Status

Configures support for jumbo frames.

(Default: Disabled)

4.2.6 File Management

The system file folder contains firmware and configuration settings. This section has the following options:

 Copy Operation

 Delete

Allows the transfer and copying files, such as:

- Downloading System Software from a Server

- Downloading Configuration Settings from a Server

- Saving Configuration Settings

- Restoring Configuration Settings

Allows deletion of files from the flash memory

 Set Start-Up

Sets the startup file

4.2.6.1 Copy Operation

You can upload/download firmware or configuration to or from a TFTP server. By saving runtime code to a file on a TFTP

server, that file can later be downloaded to the Managed Switch to restore operation.

You can also set the Managed Switch to use new firmware without overwriting the previous version. You must specify the

method of file transfer, along with the file type and file names as required.

61

The page includes the following fields:

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Figure 4-2-6 default Copy Operation screenshot

Object Description

• File Transfer Method

The configuration copy operation includes these options:

-file to file – Copies a file within the switch directory, assigning it a new name.

-file to running-config – Copies a file in the switch to the running configuration.

-file to startup-config – Copies a file in the switch to the startup configuration.

-file to tftp – Copies a file from the switch to a TFTP server.

-running-config to file – Copies the running configuration to a file.

-running-config to startup-config – Copies the running config to the startup

config.

-running-config to tftp – Copies the running configuration to a TFTP server.

-startup-config to file – Copies the startup configuration to a file on the switch.

-startup-config to running-config – Copies the startup config to the running

config.

-startup-config to tftp – Copies the startup configuration to a TFTP server.

-tftp to file – Copies a file from a TFTP server to the switch.

-tftp to running-config – Copies a file from a TFTP server to the running config.

-tftp to startup-config – Copies a file from a TFTP server to the startup config.

• TFTP Server IP

Address

• File Type

• File Name

The IP address of a TFTP server.

Specify config (configuration) to copy configuration settings.

File names should not contain slashes (\ or /), the leading letter of the file name

should not be a period (.), and the maximum length for file names on the TFTP

server is 127 characters or 31 characters for files on the switch.

(Valid characters: A-Z, a-z, 0-9, “.”, “-”, “_”)

62

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

 Example 1: Save Current Configuration setting

To save all applied changes and set the current configuration as startup configuration. The startup-configuration file will be load

automatically across a system reboot.

1. Click System, File Management, Copy Operation.

2. Select “running-config to startup-config” as the file transfer method.

3. Select the startup file name used for startup on the Managed Switch to overwrite or specify a new file name, then click

Apply.

Figure 4-2-7 Configuration saving screenshot

You can also select any configuration file as the start-up configuration by using the

System/File Management /Set Start-Up page.

4. If you specify a new file name to startup-config, click System \ File Management \ Set Start-up to check the specified file be

set to “Y” in the “Startup” column.

Figure 4-2-8 Set Start-up screenshot

63

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

 Example 2: Downloading System Software from a Server

When downloading runtime code, you can specify the destination file name to replace the current image, or first download the

file using a different name from the current runtime code file, and then set the new file as the startup file.

1. Click System, File Management, Copy Operation.

2. Select “tftp to file” as the file transfer method, enter the IP address of the TFTP server.

3. Set the file type to “opcode,” enter the file name of the software to download, select a file on the Managed Switch to

overwrite or specify a new file name and click Apply.

4. If you replaced the current firmware used for startup and want to start using the new operation code, reboot the system via

the System/Reset menu.

Figure 4-2-9 Download system software screenshot

Figure 4-2-10 TFTP Server system software transmit screenshot

64

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

• If you download to a new destination file, go to the System / File / Set Start-Up menu, mark the operation code file used at

startup, and click Apply.

• To start the new firmware, reboot the system via the System / Reset menu.

• To delete a file, select System / File Management File / Delete. Select the file name from the given list by checking the tick

box and click Apply. Note that the file currently designated as the startup code cannot be deleted.

1. Up to two copies of the system software (i.e., the runtime firmware) can be stored in the

file directory on the Managed Switch.

2. The currently designated startup version of this file cannot be deleted.

The file name should not contain slashes (\ or /), the leading letter of the file name should

not be a period (.), and the maximum length for file names on the TFTP server is 127

characters or 31 characters for files on the switch. (Valid characters: A-Z, a-z, 0-9, ".", "-",

"_")

 Example 3: Downloading Configuration Settings from a Server

You can download the configuration file under a new file name and then set it as the startup file, or you can specify the current

startup configuration file as the destination file to directly replace it.

1. Click System / File Management / Copy Operation.

2. Select “tftp to startup-config” as the file transfer method, enter the IP address of the TFTP server.

3. Enter the file name of the configuration file to download, select a file on the Managed Switch to overwrite or specify a new

file name and click Apply.

4. Reboot the system via the System / Reset menu.

Figure 4-2-11 Download system configuration screenshot

If you download to a new file name using “tftp to startup-config” or “tftp to file,” the file is automatically set as the start-up

65

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

configuration file. To use the new settings, reboot the system via the System / Reset menu.

 Example 4: Saving or Restoring Configuration Settings

You can upload/download configuration settings to/from a TFTP server. The configuration files can be later downloaded to

restore the Managed Switch’s settings.

1. Click System / File Management / Copy Operation.

2. Select “running-config to tftp” or “startup-config to tftp” as the file transfer method, enter the IP address of the TFTP

server.

3. Enter a new file name for the configuration to upload, and click Apply.

Figure 4-2-12 Upload system configuration screenshot

1. The file “Factory_Default_Config.cfg” can be copied to the TFTP server, but cannot

be used as the destination on the Managed Switch.

2. The maximum number of user-defined configuration files is limited only by available

flash memory space.

66

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.6.2 Delete

To delete a file, select the file name from the given list by checking the tick box and then click Apply. The File Delete screen in

Figure 4-2-13 appears.

1. Click System / File Management / Delete.

2. Select the file name from the given list by checking the tick box and click Apply.

Figure 4-2-13 File Delete screenshot

The currently designated startup version cannot be deleted.

4.2.6.3 Set Startup

You can download a file under a new file name and then set it as the startup file, or you can specify the current startup file as the

destination file to directly replace it.

Figure 4-2-14 Set Start-up screenshot

67

The page includes the following fields:

Object Description

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

• Name

• Type

• Startup

• Size

If you download to a new file name using "tftp to startup-config"," the file is automatically set as the start-up configuration file.

To use the new settings, reboot the system via the Reset page.

The file "Factory_Default_Config.cfg" can be copied to the TFTP server, but cannot be

used as the destination on the Managed Switch.

The name of a file stored on the switch.

Indicates either an operation code file, or a configuration file.

Shows if this file is used when the system is started.

The length of the file in bytes.

68

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.7 Line

You can access the onboard configuration program by attaching a VT100 compatible device to the Managed Switch’s serial

console port. Management access through the console port is controlled by various parameters, including a password, timeouts,

and basic communication settings. These parameters can be configured via the Web or CLI interface.

This section has the following options:

■ Console

■ Tel net

Sets console port connection parameters

Sets Telnet connection parameters

4.2.7.1 Console Port Settings

Specify the console port connection parameters as required, then click Apply. The Console Port Settings screen in Figure

4-2-15 appears.

The page includes the following fields:

Object Description

• Login Timeout

• Exec Timeout

Figure 4-2-15 Console port settings screenshot

Sets the interval that the system waits for a user to log into the

CLI. If a login attempt is not detected within the timeout interval, the connection is

terminated for the session.

Range: 0-300 seconds;

Default: 0 seconds

Sets the interval that the system waits until user input is detected. If user input is

not detected within the timeout interval, the current session is terminated.

69

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Range: 0-65535 seconds;

Default: 600 seconds

• Password Threshold

• Silent Time

• Data Bits

• Parity

Sets the password intrusion threshold, which limits the number of failed logon

attempts. When the logon attempt threshold is reached, the system interface

becomes silent for a specified amount of time (set by the Silent Time parameter)

before allowing the next logon attempt.

Range: 0-120;

Default: 3 attempts

Sets the amount of time the management console is inaccessible after the

number of unsuccessful logon attempts has been exceeded.

Range: 0-65535;

Default: 0

Sets the number of data bits per character that are interpreted and generated by

the console port. If parity is being generated, specify 7 data bits per character. If

no parity is required, specify 8 data bits per character.

Default: 8 bits

Defines the generation of a parity bit. Communication protocols provided by

some terminals can require a specific parity bit setting. Specify Even, Odd, or

None.

Default: None

• Speed

• Stop Bits

Sets the terminal line’s baud rate for transmit (to terminal) and receive (from

terminal). Set the speed to match the baud rate of the device connected to the

serial port.

Range: 9600, 19200, or 38400 baud;

Default: 9600 bps

Sets the number of the stop bits transmitted per byte.

Range: 1-2;

Default: 1 stop bit

70

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.7.2 Telnet Settings

You can access the onboard configuration program over the network using Telnet (i.e., a virtual terminal). Management access

via Telnet can be enabled / disabled and other various parameters set, including the TCP port number, timeouts, and a

password. These parameters can be configured via the web or CLI interface.

The page includes the following fields:

Object Description

• Telnet Status

• Telnet Port Number

• Login Timeout

• Exec Timeout

Figure 4-2-16 Telnet setting screenshot

Enables or disables Telnet access to the switch.

(Default: Enabled)

Sets the TCP port number for Telnet on the switch.

(Default: 23)

Sets the interval that the system waits for a user to log into the

(Range: 0-300 seconds;

Default: 300 seconds

Sets the interval that the system waits until user input is detected. If user input is

not detected within the timeout interval, the current session is terminated.

Range: 0-65535 seconds;

Default: 600 seconds

• Password Threshold

Sets the password intrusion threshold, which limits the number of failed logon

attempts. When the logon attempt threshold is reached, the system interface

becomes silent for a specified amount of time (set by the Silent Time parameter)

before allowing the next logon attempt.

Range: 0-120;

Default: 3 attempts

71

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.8 Log

The switch allows you to control the logging of error messages, including the type of events that are recorded in switch memory,

logging to a remote System Log (syslog) server, and displays a list of recent event messages. This section has the following

options:

■ System Logs

■ Remote Logs

■ SMTP

■ Logs

Sends error messages to a logging process

Configures the logging of messages to a remote logging process

Sends an SMTP client message to a participating server.

Stores and displays error messages

4.2.8.1 System Log Configuration

The system can be configured to send debug and error messages to a logging process. This logging process controls the type

of error messages that are stored in switch memory or sent to a remote syslog server.

The system allows you to enable or disable event logging, and specify which levels are logged to RAM or flash memory.

Severe error messages that are logged to flash memory are permanently stored in the switch to assist in troubleshooting

network problems. Up to 4096 log entries can be stored in the flash memory, with the oldest entries being overwritten first when

the available log memory (256 kilobytes) has been exceeded.

The System Logs page allows you to configure and limit system messages that are logged to flash or RAM memory. The default

is for event levels 0 to 3 to be logged to flash and levels 0 to 6 to be logged to RAM.

The following table lists the event levels of the Managed Switch:

Level Severity Name Description

7

Debug

6

Informational

5

Notice

4

Warning

3

Error

2

Critical

1

Alert

0

Emergency

Debugging messages

Informational messages only

Normal but significant condition, such as cold start

Warning conditions (e.g., return false, unexpected return)

Error conditions (e.g., invalid input, default used)

Critical conditions (e.g., memory allocation, or free memory

error - resource exhausted)

Immediate action needed

System unusable

72

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Figure 4-2-17 System Logs screenshot

1. Click System / Log / System Logs.

2. Specify System Log Status, set the level of event messages to be logged to RAM and flash memory, then click Apply.

The page includes the following fields:

Object Description

• System Log Status

• Flash Level(0-7)

• RAM Level(0-7)

1. There are only Level 2, 5 and 6 error messages for the current firmware release.

Enables/disables the logging of debug or error messages to the logging process.

(Default: Enabled)

Limits log messages saved to the switch’s permanent flash memory for all levels

up to the specified level. For example, if level 3 is specified, all messages from

level 0 to level 3 will be logged to flash.

Range: 0-7,

Default: 3

Limits log messages saved to the switch’s temporary RAM memory for all levels

up to the specified level. For example, if level 7 is specified, all messages from

level 0 to level 7 will be logged to RAM.

Range: 0-7,

Default: 7

2. The Flash Level must be equal to or less than the RAM Level.

73

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.8.2 Remote Log Configuration

The Remote Logs page allows you to configure the logging of messages that are sent to syslog servers or other management

stations. You can also limit the event messages sent to only those messages below a specified level.

Figure 4-2-18 Remote Logs screenshot

1. Click System, Log, Remote Logs.

2. To add an IP address to the Host IP List, type the new IP address in the Host IP Address box, and then click Add.

3. To delete an IP address, click the entry in the Host IP List, and then click Remove.

The page includes the following fields:

Object Description

• Remote Log Status

• Logging Facility

Enables/disables the logging of debug or error messages to the remote logging

process.

(Default: Enabled)

Sets the facility type for remote logging of syslog messages. There are eight

facility types specified by values of 16 to 23. The facility type is used by the

syslog server to dispatch log messages to an appropriate service.

The attribute specifies the facility type tag sent in syslog messages. (See RFC

3164.) This type has no effect on the kind of messages reported by the switch.

However, it may be used by the syslog server to process messages, such as

sorting or storing messages in the corresponding database.

74

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Range: 16-23,

Default: 23

• Logging Trap

• Host IP List

• Host IP Address

Host IP Address = Syslog Server IP address

Limits log messages that are sent to the remote syslog server for all levels up to

the specified level. For example, if level 3 is specified, all messages from level 0

to level 3 will be sent to the remote server.

Range: 0-7,

Default: 7

Displays the list of remote server IP addresses that receive the syslog messages.

The maximum number of host IP addresses allowed is five.

Specifies a new server IP address to add to the Host IP List.

4.2.8.3 Displaying Log Messages

The Logs page allows you to scroll through the logged system and event messages. The Managed Switch can store up to 2048

log entries in temporary random access memory (RAM; i.e., memory flushed on power reset) and up to 4096 entries in

permanent flash memory.

Figure 4-2-19 System and event logs screenshot

75

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.8.4 SMTP E-Mail Alert

To alert system administrators of problems, the Managed Switch can use SMTP (Simple Mail Transfer Protocol) to send email

messages when triggered by logging events of a specified level. The messages are sent to specified SMTP servers on the

network and can be retrieved using POP or IMAP clients.

Figure 4-2-20 SMTP Configuration page screenshot

1. Click System, Log, SMTP.

2. To add an SMTP MAIL Server IP address to the Server IP List, type the new IP address in the Server IP Address box, and

then click Add.

3. To delete an IP address, click the entry in the Server IP List, and then click Remove.

The page includes the following fields:

Object Description

• Admin Status

• Email Source Address

Enables/disables the SMTP function.

(Default: Disabled)

Sets the email address used for the “From” field in alert messages. You may use

a symbolic email address that identifies the switch, or the address of an

administrator responsible for the Managed Switch.

• Severity

Sets the syslog severity threshold level used to trigger alert messages. All events

at this level or higher will be sent to the configured email recipients.

76

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

For example, using Level 7 will report all events from level 7 to level 0.

(Default: Level 7)

• SMTP Server List

• Email Destination

Address List

1. The Managed Switch doesn’t support DNS protocol, to make the SMTP alert receiver to

get the e-mail send by the Managed Switch; the correct SMTP Server’s IP address has

to be field in the Server List. Check the correct IP address of the Mail Server before

enter the field.

2. It is recommended to send a test e-mail to make sure you can receive the alert mails.

■ Example: SMTP Configuration Sample

Specifies a list of up to three recipient SMTP servers.

The Managed Switch attempts to connect to the other listed servers if the first

fails. Use the New SMTP Server text field and the Add/Remove buttons to

configure the list.

Specifies the email recipients of alert messages. You can specify up to five

recipients. Use the New Email Destination Address text field and the

Add/Remove buttons to configure the list.

In this SMTP example, the Mail server’s IP address is 220.128.188.248. The email account [e-mail] is one of the

legal account in the mail domain, once there is a level 7 event occurred, the Managed Switch will send a alert email to

[e-mail]

Figure 4-2-21 SMTP Configuration sample screenshot

77

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.9 UPNP

Universal Plug and Play (UPnP) is a set of protocols that allows devices to connect seamlessly and simplifies the deployment

of home and office networks. UPnP achieves this by issuing UPnP device control protocols designed upon open, Internet-based

communication standards.

The first step in UPnP networking is discovery. When a device is added to the network, the UPnP discovery protocol allows that

device to broadcast its services to control points on the network. Similarly, when a control point is added to the network, the

UPnP discovery protocol allows that control point to search for UPnP enabled devices on the network.

Once a control point has discovered a device its next step is to learn more about the device and its capabilities by retrieving the

device’s description from the URL provided by the device in the discovery message. After a control point has retrieved a

description of the device, it can send actions to the devices service. To do this, a control point sends a suitable control message

to the control URL for the service (provided in the device description).

When a device is known to the control point, periodic event notification messages are sent. An UPnP description for a service

includes a list of actions the service responds to and a list of variables that model the state of the service at run time.

If a device has a URL for presentation, then the control point can retrieve a page from this URL, load the page into a Web

browser and depending on the capabilities of the page, allows a user to control the device and/or view device status.

UPnP Configuration

This page allows you to enable or disable UPnP, and to set time out values.

Figure 4-2-22 UPnP Configuration page screenshot

Object Description

• UPNP Status

• Advertising Duration

Enables/disables UPnP on the device.

This sets the duration of which a device will advertise its status to the control

point.

Range: 60-86400 seconds;

Default: 100 seconds

78

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

• TTL Value

Sets the time-to-live (TTL) value for UPnP messages transmitted by the device.

Range: 1-255;

Default: 4

4.2.10 Reset

Reset the Managed Switch. The Managed Switch’s configuration will not be saved automatically; you have to save the

configuration manually before system reboot.

1. Click System, Reset.

2. Click the Reset button to reboot the Managed Switch.

3. When prompted, confirm that you want reset the switch.

Figure 4-2-23 Reset page screenshot

Figure 4-2-24 Reset page screenshot

When restarting the system, it will always run the Power-On Self-Test.

79

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.11 SNTP

Simple Network Time Protocol (SNTP) allows the Managed Switch to set its internal clock based on periodic updates from a

time server (SNTP or NTP). Maintaining an accurate time on the Managed Switch enables the system log to record meaningful

dates and times for event entries. You can also set the clock manually. If the clock is not set, the Managed Switch will only

record the time from the factory default set at the last bootup.

When the SNTP client is enabled, the switch periodically sends a request for a time update to a configured time server. You can

configure up to three time server IP addresses. The switch will attempt to poll each server in the configured sequence.

4.2.11.1 SNTP Configuration

You can configure the Managed Switch to send time synchronization requests to specific time servers (i.e., client mode), update

its clock based on broadcasts from time servers, or use both methods. When both methods are enabled, the Managed Switch

will update its clock using information broadcast from time servers, but will query the specified server(s) if a broadcast is not

received with the polling interval.

Figure 4-2-25 SNTP Configuration page screenshot

The page includes the following fields:

Object Description

• SNTP Client

Configures the Managed Switch to operate as an SNTP client. This requires at

least one time server to be specified in the SNTP Server field.

(Default: Disabled)

• SNTP Poll Interval

• SNTP Server

Sets the interval between sending requests for a time update from a time server.

(Range: 16-16384 seconds; Default: 16 seconds)

Sets the IP address for up to three time servers. The Managed Switch attempts

to update the time from the first server, if this fails it attempts an update from the

next server in the sequence.

80

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.11.2 Clock Time Zone

SNTP uses Coordinated Universal Time (or UTC, formerly Greenwich Mean Time, or GMT) based on the time at the Earth's

prime meridian, zero degrees longitude. To display a time corresponding to your local time, you must indicate the number of

hours and minutes your time zone is east (before) or west (after) of UTC.

The page includes the following fields:

Object Description

• Current Time

• Name

• Hours (0-12)

• Minutes (0-59)

• Direction

Figure 4-2-26 Clock Time Zone page screenshot

Displays the current time.

Assigns a name to the time zone.

(Range: 1-29 characters)

The number of hours before/after UTC.

The number of minutes before/after UTC.

Configures the time zone to be before (east) or after (west) UTC

81

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.12 LLDP

Link Layer Discovery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast

domain. LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device. Advertised

information is represented in Type Length Value (TLV) format according to the IEEE 802.1ab standard, and can include details

such as device identification, capabilities and configuration settings. LLDP also defines how to store and maintain information

gathered about the neighboring network nodes it discovers.

Link Layer Discovery Protocol - Media Endpoint Discovery (LLDP-MED) is an extension of LLDP intended for managing

endpoint devices such as Voice over IP phones and network switches. The LLDP-MED TLVs advertise information such as

network policy, power, inventory, and device location details. LLDP and LLDP-MED information can be used by SNMP

applications to simplify troubleshooting, enhance network management, and maintain an accurate network topology.

4.2.12.1 LLDP Configuration

Setting LLDP Timing Attributes

Use the LLDP Configuration screen to set attributes for general functions such as globally enabling LLDP on the Managed

Switch, setting the message ageout time, and setting the frequency for broadcasting general advertisements or reports about

changes in the LLDP MIB.

Figure 4-2-27 LLDP Configuration page screenshot

The page includes the following fields:

Object Description

• LLDP

• Transmission Interval

Enables LLDP globally on the switch.

Default: Enabled

Configures the periodic transmit interval for LLDP advertisements.

Range: 5-32768seconds;

82

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Default: 30 seconds

This attribute must comply with the following rule:

(Transmission Interval * Hold Time Multiplier) ≤65536, and Transmission Interval

>= (4 * Delay Interval)

• Hold Time Multiplier

• Delay Interval

Configures the time-to-live (TTL) value sent in LLDP advertisements as shown

in the formula below.

Range: 2-10;

Default: 4

The time-to-live tells the receiving LLDP agent how long to retain all information

pertaining to the sending LLDP agent if it does not transmit updates in a timely

manner.

TTL in seconds is based on the following rule:

(Transmission Interval * Holdtime Multiplier) ≤ 65536.

Therefore, the default TTL is 4*30 = 120 seconds.

Configures a delay between the successive transmission of advertisements

initiated by a change in local LLDP MIB variables.

Range: 1-8192 seconds;

Default: 2 seconds

• Reinitialization Delay

• Notification Interval

The transmit delay is used to prevent a series of successive LLDP transmissions

during a short period of rapid changes in local LLDP MIB objects, and to increase

the probability that multiple, rather than single changes, are reported in each

transmission.

This attribute must comply with the rule:

(4 * Delay Interval) ≤Transmission Interval

Configures the delay before attempting to re-initialize after LLDP ports are

disabled or the link goes down.

Range: 1-10 seconds;

Default: 2 seconds

When LLDP is re-initialized on a port, all information in the remote systems LLDP

MIB associated with this port is deleted.

Configures the allowed interval for sending SNMP notifications about LLDP MIB

changes.

Range: 5-3600 seconds;

83

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Default: 5 seconds

This parameter only applies to SNMP applications which use data stored in the

LLDP MIB for network monitoring or management. Information about changes in

LLDP neighbors that occur between SNMP notifications is not transmitted. Only

state changes that exist at the time of a notification are included in the

transmission. An SNMP agent should therefore periodically check the value of

lldpStatsRemTableLastChangeTime to detect any lldpRemTablesChange

notification-events missed due to throttling or transmission loss.

• MED Fast Start Count

Configures the amount of LLDP MED Fast Start LLDPDUs to transmit during the

activation process of the LLDP-MED Fast Start mechanisim.

Range: 1-10 packets;

Default: 4 packets

The MED Fast Start Count parameter is part of the timer which ensures that the

LLDP-MED Fast Start mechanism is active for the port. LLDP-MED Fast Start is

critical to the timely startup of LLDP, and therefore integral to the rapid availability

of Emergency Call Service.

4.2.12.2 LLDP Port Configuration

Use the LLDP Port Configuration to specify the message attributes for individual interfaces, including whether messages are

transmitted, received, or both transmitted and received, whether SNMP notifications are sent, and the type of information

advertised.

Figure 4-2-28 LLDP Port Configuration page screenshot

84

The page includes the following fields:

Object Description

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

• Admin Status

• SNMP Notification

Enables LLDP message transmit and receive modes for LLDP Protocol Data

Units.

 Options:

 Tx only

 Rx only

 TxRx

 Disabled

Default: TxRx

Enables the transmission of SNMP trap notifications about LLDP and LLDP-MED

changes. (Default: Enabled) This option sends out SNMP trap notifications to

designated target stations at the interval specified by the Notification Interval in

the preceding section. Trap notifications include information about state changes

in the LLDP MIB (IEEE 802.1AB), the LLDP-MED MIB (ANSI/TIA-1057), or

vendor-specific LLDP-EXT-DOT1 and LLDP-EXT-DOT3 MIBs.

For information on defining SNMP trap destinations. Information about additional

changes in LLDP neighbors that occur between SNMP notifications is not

transmitted. Only state changes that exist at the time of a trap notification are

• TLV Type

included in the transmission. An SNMP agent should therefore periodically check

the value of lldpStatsRemTableLastChangeTime to detect any

lldpRemTablesChange notification-events missed due to throttling or

transmission loss.

Configures the information included in the TLV field of advertised messages.

-Port Description – The port description is taken from the ifDescr object in RFC

2863, which includes information about the manufacturer, the product name, and

the version of the interface hardware/software.

-System Description – The system description is taken from the sysDescr

object in RFC 3418, which includes the full name and version identification of the

system's hardware type, software operating system, and networking software.

-Management Address – The management address protocol packet includes

the IPv4 address of the switch. If no management address is available, the

address should be the MAC address for the CPU or for the port sending this

advertisement. The management address TLV may also include information

about the specific interface associated with this address, and an object identifier

indicating the type of hardware component or protocol entity associated with this

address. The interface number and OID are included to assist SNMP

applications in the performance of network discovery by indicating enterprise

specific or other starting points for the search, such as the Interface or Entity

85

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

MIB.

Since there are typically a number of different addresses associated with a Layer

3 device, an individual LLDP PDU may contain more than one management

address TLV.

Every management address TLV that reports an address that is accessible on a

port and protocol VLAN through the particular port should be accompanied by a

port and protocol VLAN TLV that indicates the VLAN identifier (VID) associated

with the management address reported by this TLV.

-System Name – The system name is taken from the sysName object in RFC

3418, which contains the system’s administratively assigned name. To configure

the system name, see “Displaying System Information” on page 3-12.

-System Capabilities – The system capabilities identifies the primary function(s)

of the system and whether or not these primary functions are enabled. The

information advertised by this TLV is described in IEEE 802.1AB.

• MED TLV Type

Configures the information included in the MED TLV field of advertised

messages.

-Port Capabilities – This option advertises LLDP-MED TLV capabilities, allowing

Media Endpoint and Connectivity Devices to efficiently discover which

LLDP-MED related TLVs are supported on the switch.

-Network Policy – This option advertises network policy configuration

information, aiding in the discovery and diagnosis of VLAN configuration

mismatches on a port. Improper network policy configurations frequently result in

voice quality degradation or complete service disruption.

-Location – This option advertises location identification details.

-Extended Power – This option advertises extended Power-over-Ethernet

capability details, such as power availability from the switch, and power state of

the switch, including whether the switch is operating from primary or backup

power (the Endpoint Device could use this information to decide to enter power

conservation mode). Note that this device does not support PoE capabilities.

-Inventory – This option advertises device details useful for inventory

management, such as manufacturer, model, software version and other

pertinent information.

• MED Notification

• Trunk

Enables the transmission of SNMP trap notifications about LLDP-MED changes.

(Default: Enabled)

Shows if the port is a member of a trunk.

86

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.12.3 LLDP Trunk Configuration

Use the LLDP Trunk Configuration to specify the message attributes for individual interfaces, including whether messages are

transmitted, received, or both transmitted and received, whether SNMP notifications are sent, and the type of information

advertised.

Figure 4-2-29 LLDP Trunk Configuration page screenshot

The page includes the following fields:

Object Description

• Admin Status

• SNMP Notification

Enables LLDP messages transmit and receive modes for LLDP Protocol Data

Units.

Options:

 Tx only

 Rx only

 TxRx

 Disabled

Default: TxRx

Enables the transmission of SNMP trap notifications about LLDP and LLDP-MED

changes.

Default: Enabled

This option sends out SNMP trap notifications to designated target stations at the

interval specified by the Notification Interval in the preceding section. Trap

notifications include information about state changes in the LLDP MIB (IEEE

802.1AB), the LLDP-MED MIB (ANSI/TIA-1057), or vendor-specific

LLDP-EXT-DOT1 and LLDP-EXT-DOT3 MIBs.

For information on defining SNMP trap destinations, see “Specifying Trap

Managers and Trap Types” on page 3-42. Information about additional changes

in LLDP neighbors that occur between SNMP notifications is not transmitted.

Only state changes that exist at the time of a trap notification are included in the

transmission. An SNMP agent should therefore periodically check the value of

lldpStatsRemTableLastChangeTime to detect any lldpRemTablesChange

87

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

notification-events missed due to throttling or transmission loss.

• TLV Type

Configures the information included in the TLV field of advertised messages.

-Port Description – The port description is taken from the ifDescr object in RFC

2863, which includes information about the manufacturer, the product name, and

the version of the interface hardware/software.

-System Description – The system description is taken from the sysDescr

object in RFC 3418, which includes the full name and version identification of the

system's hardware type, software operating system, and networking software.

-Management Address – The management address protocol packet includes

the IPv4 address of the switch. If no management address is available, the

address should be the MAC address for the CPU or for the port sending this

advertisement. The management address TLV may also include information

about the specific interface associated with this address, and an object identifier

indicating the type of hardware component or protocol entity associated with this

address. The interface number and OID are included to assist SNMP

applications in the performance of network discovery by indicating enterprise

specific or other starting points for the search, such as the Interface or Entity

• MED TLV Type

MIB.

Since there are typically a number of different addresses associated with a Layer

3 device, an individual LLDP PDU may contain more than one management

address TLV.

Every management address TLV that reports an address that is accessible on a

port and protocol VLAN through the particular port should be accompanied by a

port and protocol VLAN TLV that indicates the VLAN identifier (VID) associated

with the management address reported by this TLV.

-System Name – The system name is taken from the sysName object in RFC

3418, which contains the system’s administratively assigned name. To configure

the system name, see “Displaying System Information”.

-System Capabilities – The system capabilities identifies the primary function(s)

of the system and whether or not these primary functions are enabled. The

information advertised by this TLV is described in IEEE 802.1AB.

Configures the information included in the MED TLV field of advertised

messages.

-Port Capabilities – This option advertises LLDP-MED TLV capabilities, allowing

Media Endpoint and Connectivity Devices to efficiently discover which

LLDP-MED related TLVs are supported on the switch.

-Network Policy – This option advertises network policy configuration

88

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

information, aiding in the discovery and diagnosis of VLAN configuration

mismatches on a port. Improper network policy configurations frequently result in

voice quality degradation or complete service disruption.

-Location – This option advertises location identification details.

-Extended Power – This option advertises extended Power-over-Ethernet

capability details, such as power availability from the switch, and power state of

the switch, including whether the switch is operating from primary or backup

power (the Endpoint Device could use this information to decide to enter power

conservation mode). Note that this device does not support PoE capabilities.

-Inventory – This option advertises device details useful for inventory

management, such as manufacturer, model, software version and other

pertinent information.

• MED Notification

• Trunk

Enables the transmission of SNMP trap notifications about LLDP-MED changes.

(Default: Enabled)

Shows if the port is a member of a trunk.

89

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.12.4 LLDP Local Device Information

Use the LLDP Local Device Information screen to display information about the switch, such as its MAC address, chassis ID,

management IP address, and port information.

Figure 4-2-30 LLDP Local Device Information page screenshot

The page includes the following fields:

Object Description

• Chassis Type

• Chassis ID

• System Name

• System Description

• System Capabilities

Identifies the chassis containing the IEEE 802 LAN entity associated with the

transmitting LLDP agent. There are several ways in which a chassis may be

identified and a chassis ID subtype is used to indicate the type of component

being referenced by the chassis ID field.

An octet string indicating the specific identifier for the particular chassis in this

system.

An string that indicates the system’s administratively assigned name (see

“Displaying System Information”).

A textual description of the network entity. This field is also displayed by the show

system command.

The capabilities that define the primary function(s) of the system.

90

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Supported

• System Capabilities

Enabled

• Management Address

ID Basis Reference

Chassis component EntPhysicalAlias when entPhysClass has a value of

Interface alias IfAlias (IETF RFC 2863)

Port component EntPhysicalAlias when entPhysicalClass has a value

MAC address MAC address (IEEE Std 802-2001)

Network address networkAddress

Interface name ifName (IETF RFC 2863)

The primary function(s) of the system which are currently enabled. Refer to the

preceding table.

The management address protocol packet includes the IPv4 address of the

switch. If no management address is available, the address should be the MAC

address for the CPU or for the port sending this advertisement.

‘chassis(3)’ (IETF RFC 2737)

‘port(10)’ or ‘backplane(4)’ (IETF RFC 2737)

Locally assigned locally assigned

Table 4-2-1 Chassis ID Subtype

ID Basis Reference

Other —

Repeater IETF RFC 2108

Bridge IETF RFC 2674

WLAN Access Point IEEE 802.11 MIB

Router IETF RFC 1812

Telephone IETF RFC 2011

DOCSIS cable device IETF RFC 2669 and IETF RFC 2670

End Station Only IETF RFC 2011

Table 4-2-2 System Capabilities

Interface Settings

The attributes listed below apply to both port and trunk interface types. When a trunk is listed, the descriptions apply to the first

port of the trunk.

91

The page includes the following fields:

Object Description

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Figure 4-2-31 Interface Settings page screenshot

• Port Description

• Port ID

A string that indicates the port’s description. If RFC 2863 is implemented, the

ifDescr object should be used for this field.

A string that contains the specific identifier for the port from which this LLDPDU

was transmitted.

4.2.12.5 Remote Port Information

Use the LLDP Remote Port/Trunk Information screen to display information about devices connected directly to the switch’s

ports which are advertising information through LLDP.

The page includes the following fields:

Object Description

• Local Port

• Chassis ID

Figure 4-2-32 LLDP Configuration page screenshot

The local port to which a remote LLDP-capable device is attached.

An octet string indicating the specific identifier for the particular chassis in this

92

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

system.

• Port ID

• Port Name

• System Name

A string that contains the specific identifier for the port from which this LLDPDU

was transmitted.

A string that indicates the port’s description. If RFC 2863 is implemented, the

ifDescr object should be used for this field.

An string that indicates the system’s administratively assigned name.

4.2.12.6 LLDP Remote Information Detail

Use the LLDP Remote Information Details screen to display detailed information about an LLDP-enabled device connected to a

specific port on the local switch.

The page includes the following fields:

Object Description

• Local Port

• Chassis Type

Figure 4-2-33 LLDP Configuration page screenshot

The local port to which a remote LLDP-capable device is attached.

Identifies the chassis containing the IEEE 802 LAN entity associated with the

transmitting LLDP agent. There are several ways in which a chassis may be

identified and a chassis ID subtype is used to indicate the type of component

being referenced by the chassis ID field.

93

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

(See Table 4-2-1, “Chassis ID Subtype,)

• Chassis ID

• Port Type

• System Name

• System Description

• System Capabilities

Supported

• System Capabilities

Enabled

• Management Address

An octet string indicating the specific identifier for the particular chassis in this

system.

Indicates the basis for the identifier that is listed in the Port ID field.

An string that indicates the system’s administratively assigned name.

A textual description of the network entity.

The capabilities that define the primary function(s) of the system.

(See Table 4-2-2, “System Capabilities,)

The primary function(s) of the system which are currently enabled. Refer to the

preceding table.

(See Table 4-2-2, “System Capabilities,)

The IPv4 address of the remote device. If no management address is available,

the address should be the MAC address for the CPU or for the port sending this

advertisement.

ID Basis Reference

Interface alias IfAlias (IETF RFC 2863)

Chassis component EntPhysicalAlias when entPhysClass has a value of

‘chassis(3)’ (IETF RFC 2737)

Port component EntPhysicalAlias when entPhysicalClass has a value

‘port(10)’ or ‘backplane(4)’ (IETF RFC 2737)

MAC address MAC address (IEEE Std 802-2001)

Network address networkAddress

Interface name ifName (IETF RFC 2863)

Agent circuit ID agent circuit ID (IETF RFC 3046)

Locally assigned locally assigned

Table 4-2-3 Port ID Subtype

94

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.12.7 LLDP Device Statistics

Use the LLDP Device Statistics screen to general statistics for LLDP-capable devices attached to the switch, and for LLDP

protocol messages transmitted or received on all local interfaces.

The page includes the following fields:

Object Description

• Neighbor Entries List

Last Updated

• New Neighbor Entries

Count

• Neighbor Entries

Deleted Count

• Neighbor Entries

Dropped Count

• Neighbor Entries

Age-out Count

Figure 4-2-34 LLDP Configuration page screenshot

The time the LLDP neighbor entry list was last updated.

The number of LLDP neighbors for which the remote TTL has not yet expired.

The number of LLDP neighbors which have been removed from the LLDP remote

systems MIB for any reason.

The number of times which the local remote database dropped an LLDPDU

because of insufficient resources.

The number of times that a neighbor’s information has been deleted from the

LLDP remote systems MIB because the remote TTL timer has expired.

95

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.2.12.8 LLDP Device Statistics Details

Use the LLDP Device Statistics Details screen to display detailed statistics for LLDP-capable devices attached to specific

interfaces on the Managed Switch.

Figure 4-2-35 LLDP Device Statistics Details page screenshot

The page includes the following fields:

Object Description

• Frames Discarded

• Frames Invalid

• Frames Received

• Frames Sent

• TLVs Unrecognized

• TLVs Discarded

• Neighbor Ageouts

Number of frames discarded because they did not conform to the general

validation rules as well as any specific usage rules defined for the particular TLV.

A count of all LLDPDUs received with one or more detectable errors.

Number of LLDP PDUs received.

Number of LLDP PDUs transmitted.

A count of all TLVs not recognized by the receiving LLDP local agent.

A count of all LLDPDUs received and then discarded due to insufficient memory

space, missing or out-of-sequence attributes, or any other reason.

A count of the times that a neighbor’s information has been deleted from the

LLDP remote systems MIB because the remote TTL timer has expired.

96

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

4.3 Simple Network Management Protocol

Simple Network Management Protocol (SNMP) is a communication protocol designed specifically for managing devices on a

network. Equipment commonly managed with SNMP includes switches, routers and host computers. SNMP is typically used to

configure these devices for proper operation in a network environment, as well as to monitor them to evaluate performance or

detect potential problems.

Managed devices supporting SNMP contain software, which runs locally on the device and is referred to as an agent. A defined

set of variables, known as managed objects, is maintained by the SNMP agent and used to manage the device. These objects

are defined in a Management Information Base (MIB) that provides a standard presentation of the information controlled by

the agent. SNMP defines both the format of the MIB specifications and the protocol used to access this information over the

network.

The Managed Switch includes an onboard agent that supports SNMP versions 1, 2c, and 3. This agent continuously monitors

the status of the Managed Switch hardware, as well as the traffic passing through its ports. A network management station can

access this information using software such as HP OpenView. Access to the onboard agent from clients using SNMP v1 and v2c

is controlled by community strings. To communicate with the switch, the management station must first submit a valid

community string for authentication.

Access to the switch using from clients using SNMPv3 provides additional security features that cover message integrity,

authentication, and encryption; as well as controlling user access to specific areas of the MIB tree.

The SNMPv3 security structure consists of security models, with each model having it’s own security levels. There are three

security models defined, SNMPv1, SNMPv2c, and SNMPv3. Users are assigned to “groups” that are defined by a security

model and specified security levels. Each group also has a defined security access to set of MIB objects for reading and writing,

which are known as “views.” The switch has a default view (all MIB objects) and default groups defined for security models v1

and v2c. The following table shows the security models and levels available and the system default settings.

Model Level Group Read View Write View Notify View Security

v1 noAuthNoPriv public (read only) defaultview none none Community string only

v1 noAuthNoPriv private(read/write) defaultview defaultview none Community string only

v1 noAuthNoPriv user defined user defined user defined user defined Community string only

v2c noAuthNoPriv public (read only) defaultview none none Community string only

v2c noAuthNoPriv private (read/write) defaultview defaultview none Community string only

v2c noAuthNoPriv user defined user defined user defined user defined Community string only

v3 noAuthNoPriv user defined user defined user defined user defined A user name match only

v3 AuthNoPriv user defined user defined user defined user defined Provides user

authentication via MD5

or SHA algorithms

97

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

v3 AuthPriv user defined user defined user defined user defined Provides user

authentication via MD5

or SHA algorithms and

data privacy using DES

56-bit encryption

The predefined default groups and view can be deleted from the system. You can then

define customized groups and views for the SNMP clients that require access.

4.3.1 SNMP Agent Status

Enable SNMP service for all management clients. (i.e., versions 1, 2c or 3).

Figure 4-3-1 SNMP Agent Status page screenshot

The page includes the following fields:

Object Description

• Snmp Agent Status

Enable / Disable SNMP on the Managed Switch

4.3.2 SNMP Configuration

Use this page to configure the community strings authorized for management access, and to specify the trap managers that will

receive SNMP notifications or trap messages.

4.3.2.1 SNMP Community

All community strings used for IP Trap Managers should be listed in this table. Up to five community strings may be entered. For

security reasons, you should consider removing the default strings.

98

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

Figure 4-3-2 SNMP Configuration page screenshot

1. Click SNMP, Configuration.

2. Add new community strings as required, select the access rights from the Access Mode drop-down list, then click Add.

The page includes the following fields:

Object Description

• SNMP Community

Capability

• Community String

• Access Mode

The switch supports up to five community strings.

A community string that acts like a password and permits access to the SNMP

protocol.

Default strings: “public” (read-only), “private” (read/write)

Range: 1-32 characters, case sensitive

Specifies the access rights for the community string:

• Read-Only – Authorized management stations are only able to retrieve MIB

objects.

• Read/Write – Authorized management stations are able to both retrieve and

modify MIB objects.

4.3.2.2 SNMP Trap Management

Traps indicating status changes are issued by the switch to specified trap managers. You must specify trap managers so that

key events are reported by this switch to your management station (using network management platforms such as HP

OpenView). You can specify up to five management stations that will receive authentication failure messages and other trap

messages from the Managed Switch.

- You can enable or disable authentication messages via the Web interface.

- You can enable or disable authentication messages, link-up-down messages, or all notification types via the CLI.

99

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

If you specify an SNMP Version 3 host, then the “Trap Manager Community String” is interpreted as an SNMP user name. If you

use V3 authentication or encryption options (authNoPriv or authPriv), the user name must first be defined in the SNMPv3 Users

page. Otherwise, the authentication password and/or privacy password will not exist, and the switch will not authorize SNMP

access for the host. However, if you specify a V3 host with the no authentication (noAuth) option, an SNMP user account will be

automatically generated, and the switch will authorize SNMP access for the host.

Notifications are issued by the switch as trap messages by default. The recipient of a trap message does not send a response to

the switch. Traps are therefore not as reliable as inform messages, which include a request for acknowledgement of receipt.

Informs can be used to ensure that critical information is received by the host. However, note that informs consume more

system resources because they must be kept in memory until a response is received. Informs also add to network traffic. You

should consider these effects when deciding whether to issue notifications as traps or informs.

To send an inform to a SNMPv2c host, complete these steps:

1. Enable the SNMP agent.

2. Enable trap informs as described in the following pages.

3. Create a view with the required notification messages.

4. Create a group that includes the required notify view.

To send an inform to a SNMPv3 host, complete these steps:

1. Enable the SNMP agent.

2. Enable trap informs as described in the following pages.

3. Create a view with the required notification messages.

4. Create a group that includes the required notify view.

5. Specify a remote engine ID where the user resides.

6. Then configure a remote user.

Figure 4-3-3 SNMP Trap Management page screenshot

100