STRIDE SE-SW8U-WT, SE-SW8U, SE-SW5U-WT, SE-SW5U-ST, SE-SW5U-ST-WT User Manual

...
Industrial Ethernet Switches
and Media Converters
USER MANUAL
Manual Number: SE-USER-M

~ WARNING ~

Thank you for purchasing automation equipment from AutomationDirect.com®, doing business as, AutomationDirect. We want your new automation equipment to operate safely. Anyone who installs or
uses this equipment should read this publication (and any other relevant publications) before installing or operating the equipment.
To minimize the risk of potential safety problems, you should follow all applicable local and national codes that regulate the installation and operation of your equipment. These codes vary from area to area and usually change with time. It is your responsibility to determine which codes should be followed, and to verify that the equipment, installation, and operation is in compliance with the latest revision of these codes.
At a minimum, you should follow all applicable sections of the National Fire Code, National Electrical Code, and the codes of the National Electrical Manufacturer’s Association (NEMA). There may be local regulatory or government offices that can also help determine which codes and standards are necessary for safe installation and operation.
Equipment damage or serious injury to personnel can result from the failure to follow all applicable codes and standards. We do not guarantee the products described in this publication are suitable for your particular application, nor do we assume any responsibility for your product design, installation, or operation.
Our products are not fault-tolerant and are not designed, manufactured or intended for use or resale as on-line control equipment in hazardous environments requiring fail-safe performance, such as in the operation of nuclear facilities, aircraft navigation or communication systems, air traffic control, direct life support machines, or weapons systems, in which the failure of the product could lead directly to death, personal injury, or severe physical or environmental damage (“High Risk Activities”). AutomationDirect specifically disclaims any expressed or implied warranty of fitness for High Risk Activities.
For additional warranty and safety information, see the Terms and Conditions section of our catalog. If you have any questions concerning the installation or operation of this equipment, or if you need additional information, please call us at 770-844-4200.
This publication is based on information that was available at the time it was printed. At AutomationDirect we constantly strive to improve our products and services, so we reserve the right to make changes to the products and/or publications at any time without notice and without any obligation. This publication may also discuss features that may not be available in certain revisions of the product.
Trademarks
This publication may contain references to products produced and/or offered by other companies. The product and company names may be trademarked and are the sole property of their respective owners. AutomationDirect disclaims any proprietary interest in the marks and names of others.
Copyright 2017, AutomationDirect.com® Incorporated
No part of this manual shall be copied, reproduced, or transmitted in any way without the prior, written consent of AutomationDirect.com® Incorporated. AutomationDirect retains the exclusive rights to all information included in this document.
All Rights Reserved
~ ADVERTENCIA ~
Gracias por comprar equipo de automatización de AutomationDirect.com®. Deseamos que su nuevo equipo de automatización opere de manera segura. Cualquier persona que instale o use este equipo debe leer esta publicación (y cualquier otra publicación pertinente) antes de instalar u operar el equipo.
Para reducir al mínimo el riesgo debido a problemas de seguridad, debe seguir todos los códigos de seguridad locales o nacionales aplicables que regulan la instalación y operación de su equipo. Estos códigos varian de área en área y usualmente cambian con el tiempo. Es su responsabilidad determinar cuales códigos deben ser seguidos y verificar que el equipo, instalación y operación estén en cumplimiento con la revisión mas reciente de estos códigos.
Como mínimo, debe seguir las secciones aplicables del Código Nacional de Incendio, Código Nacional Eléctrico, y los códigos de (NEMA) la Asociación Nacional de Fabricantes Eléctricos de USA. Puede haber oficinas de normas locales o del gobierno que pueden ayudar a determinar cuales códigos y normas son necesarios para una instalación y operación segura.
Si no se siguen todos los códigos y normas aplicables, puede resultar en daños al equipo o lesiones serias a personas. No garantizamos los productos descritos en esta publicación para ser adecuados para su aplicación en particular, ni asumimos ninguna responsabilidad por el diseño de su producto, la instalación u operación.
Nuestros productos no son tolerantes a fallas y no han sido diseñados, fabricados o intencionados para uso o reventa como equipo de control en línea en ambientes peligrosos que requieren una ejecución sin fallas, tales como operación en instalaciones nucleares, sistemas de navegación aérea, o de comunicación, control de tráfico aéreo, máquinas de soporte de vida o sistemas de armamentos en las cuales la falla del producto puede resultar directamente en muerte, heridas personales, o daños físicos o ambientales severos (“Actividades de Alto Riesgo”). AutomationDirect.com específicamente rechaza cualquier garantía ya sea expresada o implicada para actividades de alto riesgo. Para información adicional acerca de garantía e información de seguridad, vea la sección de Términos y Condiciones de nuestro catálogo. Si tiene alguna pregunta sobre instalación u operación de este equipo, o si necesita información adicional, por favor llámenos al número 770-844-4200 en Estados Unidos. Esta publicación está basada en la información disponible al momento de impresión. En AutomationDirect. com nos esforzamos constantemente para mejorar nuestros productos y servicios, así que nos reservamos el derecho de hacer cambios al producto y/o a las publicaciones en cualquier momento sin notificación y sin ninguna obligación. Esta publicación también puede discutir características que no estén disponibles en ciertas revisiones del producto.
Marcas Registradas
Esta publicación puede contener referencias a productos producidos y/u ofrecidos por otras compañías. Los nombres de las compañías y productos pueden tener marcas registradas y son propiedad única de sus respectivos dueños. Automationdirect.com, renuncia cualquier interés propietario en las marcas y nombres de otros.
PROPIEDAD LITERARIA 2017, AUTOMATIONDIRECT.COM® INCORPORATED
No se permite copiar, reproducir, o transmitir de ninguna forma ninguna parte de este manual sin previo consentimiento por escrito de AutomationDirect.com este documento. Los usuarios de este equipo pueden copiar este documento solamente para instalar, configurar y mantener el equipo correspondiente. También las instituciones de enseñanza pueden usar este manual para propósitos educativos.
®
Incorprated. AutomationDirect.com retiene los derechos exclusivos a toda la información incluida en
Todos los derechos reservados
~ AVERTISSEMENT ~
Nous vous remercions d’avoir acheté l’équipement d’automatisation de AutomationDirect.com®, en faisant des affaires comme, AutomationDirect. Nous tenons à ce que votre nouvel équipement d’automatisation fonctionne en toute sécurité. Toute personne qui installe ou utilise cet équipement doit lire la présente publication (et toutes les autres publications pertinentes) avant de l’installer ou de l’utiliser.
Afin de réduire au minimum le risque d’éventuels problèmes de sécurité, vous devez respecter tous les codes locaux et nationaux applicables régissant l’installation et le fonctionnement de votre équipement. Ces codes diffèrent d’une région à l’autre et, habituellement, évoluent au fil du temps. Il vous incombe de déterminer les codes à respecter et de vous assurer que l’équipement, l’installation et le fonctionnement sont conformes aux exigences de la version la plus récente de ces codes.
Vous devez, à tout le moins, respecter toutes les sections applicables du Code national de prévention des incendies, du Code national de l’électricité et des codes de la National Electrical Manufacturer’s Association (NEMA). Des organismes de réglementation ou des services gouvernementaux locaux peuvent également vous aider à déterminer les codes ainsi que les normes à respecter pour assurer une installation et un fonctionnement sûrs.
L’omission de respecter la totalité des codes et des normes applicables peut entraîner des dommages à l’équipement ou causer de graves blessures au personnel. Nous ne garantissons pas que les produits décrits dans cette publication conviennent à votre application particulière et nous n’assumons aucune responsabilité à l’égard de la conception, de l’installation ou du fonctionnement de votre produit.
Nos produits ne sont pas insensibles aux défaillances et ne sont ni conçus ni fabriqués pour l’utilisation ou la revente en tant qu’équipement de commande en ligne dans des environnements dangereux nécessitant une sécurité absolue, par exemple, l’exploitation d’installations nucléaires, les systèmes de navigation aérienne ou de communication, le contrôle de la circulation aérienne, les équipements de survie ou les systèmes d’armes, pour lesquels la défaillance du produit peut provoquer la mort, des blessures corporelles ou de graves dommages matériels ou environnementaux («activités à risque élevé»). La société AutomationDirect nie toute garantie expresse ou implicite d’aptitude à l’emploi en ce qui a trait aux activités à risque élevé.
Pour des renseignements additionnels touchant la garantie et la sécurité, veuillez consulter la section Modalités et conditions de notre documentation. Si vous avez des questions au sujet de l’installation ou du fonctionnement de cet équipement, ou encore si vous avez besoin de renseignements supplémentaires, n’hésitez pas à nous téléphoner au 770-844-4200.
Cette publication s’appuie sur l’information qui était disponible au moment de l’impression. À la société AutomationDirect, nous nous efforçons constamment d’améliorer nos produits et services. C’est pourquoi nous nous réservons le droit d’apporter des modifications aux produits ou aux publications en tout temps, sans préavis ni quelque obligation que ce soit. La présente publication peut aussi porter sur des caractéristiques susceptibles de ne pas être offertes dans certaines versions révisées du produit.
Marques de commerce
La présente publication peut contenir des références à des produits fabriqués ou offerts par d’autres entreprises. Les
désignations des produits et des entreprises peuvent être des marques de commerce et appartiennent exclusivement à leurs propriétaires respectifs. AutomationDirect nie tout intérêt dans les autres marques et désignations.
Copyright 2017, AutomationDirect.com® Incorporated
Nulle partie de ce manuel ne doit être copiée, reproduite ou transmise de quelque façon que ce soit sans le consentement préalable écrit de la société AutomationDirect.com® Incorporated. AutomationDirect conserve les droits exclusifs à l’égard de tous les renseignements contenus dans le présent document.
Tous droits réservés
Industrial Unmanaged and Managed
Ethernet Switches and Media Converters
USER MANUAL
Please include the User Manual Number and Issue, both shown below, when communicating with Technical Support regarding this publication.
Manual Number: SE-USER-M Issue: 2nd Ed. Rev. C Issue Date: 10/17

Publication History

Issue Date Description of Changes
1st Edition 11/07 Original issue
Rev. A 01/08 Corrected table on page 4 Rev. B 04/09 Added high temp (-WT) models Rev. C 07/11 Added SC fiber port models
2nd Edition 12/11 Added Managed Switches
Rev. A 01/12 Minor corrections and additions Rev. B 01/17 Added MAC security note for 5-port models. Minor corrections and additions Rev. C 10/17 Revised UL listing info, IP30 and IP40 info. Added Ingress note.

Table of ConTenTs

Chapter 1: Hardware ......................................1–1
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1–2
Conventions Used ...................................................1–2
Product Overview ...................................................1–3
Managed Switch Accessories ..........................................1–5
General Information .................................................1–6
LED Indicators ......................................................1–9
Installation, Plastic Case Switches ......................................1–11
Installation, Metal Case Switches ......................................1–12
Power and Alarm Wiring .............................................1–25
Communication Ports Wiring .........................................1–27
Technical Specifications ..............................................1–31
Chapter 2: Managed Switch Quick Start .......................2–1
Connecting to the Switch for the first time ...............................2–2
Connecting to the switch over Ethernet: .................................2–2
Setting up PC for USB connection to switch: .............................2–7
PC to switch using Serial Port: .........................................2–8
USB and Serial connection to switch with Terminal Software Program: ..........2–9
Default Setup ......................................................2–13
Why might you need a Managed Switch? ...............................2–16
Enhanced traffic filtering: ............................................2–16
Troubleshooting: ..................................................2–16
Redundancy: .....................................................2–16
Security: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–17
Better Network ‘Awareness’: ..........................................2–18
Table of Contents
Chapter 3: Managed Switch Software Monitoring ...............3–1
System Information ..................................................3–2
Port and Power Status ................................................3–4
Network Statistics ...................................................3–5
Spanning Tree Status ................................................3–8
Real-Time Ring Status ...............................................3–10
Multicast Filtering Status .............................................3–11
IGMP Port Status: .................................................3–11
IGMP Group Status: ................................................3–12
MAC Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3–13
Configuration Summary .............................................3–14
Chapter 4: Managed Switch Software Setup ...................4–1
Main Settings .......................................................4–2
System Settings ....................................................4–2
Remote Access Security ..............................................4–4
Port Settings .......................................................4–6
Port Mirroring .....................................................4–8
Set IP per Port .....................................................4–9
Switch Time Settings ...............................................4–10
Manage Firmware .................................................4–11
Install Firmware ...................................................4–12
Redundancy Settings ................................................4–14
Spanning Tree Settings .............................................4–18
Spanning Tree Port Settings ..........................................4–21
Real-Time Ring Settings .............................................4–23
RSTP Examples ....................................................4–24
Traffic Priority (Priority Queuing QoS, CoS, ToS/DS) ......................4–29
QoS / CoS Settings .................................................4–30
802.1p Tag Settings ................................................4–31
Message Rate Limiting ..............................................4–32
QoS Example .....................................................4–33
Multicast Filtering (IGMP) ............................................4–36
ii
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Table of Contents
IGMP Protocol Settings .............................................4–37
Port Settings ......................................................4–38
IGMP Example ....................................................4–39
Virtual LANs (VLANs). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4–40
VLAN Settings ....................................................4–41
VLAN Port Settings .................................................4–43
VLAN with RSTP ...................................................4–44
VLAN Examples ...................................................4–46
Security Settings ...................................................4–51
Remote Access Security .............................................4–51
Port Security Enables and Port Security MAC Entries .......................4–52
IPsec Settings .....................................................4–54
IKE Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4–57
IKE Pre-shared Keys ................................................4–59
IKE Certificates ....................................................4–60
Monitoring Settings ................................................4–62
Alarm (OK) Output. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4–62
Modbus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4–63
Register Mapping: .................................................4–64
SNMP Notifications ................................................4–65
Chapter 5: Managed Switch Software Advanced Operations ......5–1
Configuration Management ...........................................5–2
Restore Factory Defaults ..............................................5–4
Reset Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5–5
Update Firmware ....................................................5–6
Update Firmware using a TFTP Server: ...................................5–6
Appendix A: Troubleshooting ...............................A–1
Troubleshooting Fiber Connections: .....................................A–2
Troubleshooting Real-Time Ring ........................................A–4
Troubleshooting VLANs ...............................................A–6
Installing Switch Firmware ............................................A–8
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
iii
Table of Contents
Appendix B: Glossary ......................................B–1
Glossary of Terms ...................................................B–2
Appendix C: Switch Settings ................................C–1
General Switch Information ...........................................C–2
Alarm Configuration .................................................C–2
Mirror Configuration .................................................C–3
VLAN Configuration .................................................C–3
Port Configuration ...................................................C–3
QOS Configuration ..................................................C–3
Appendix D: CLI Commands ................................D–1
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . D–2
Accessing the CLI .................................................. D–2
CLI Commands: .................................................... D–3
Global Commands: ................................................ D–3
Access Configuration: ............................................... D–3
Alarm Configuration: ............................................... D–4
Modbus Configuration: ............................................. D–4
Info Configuration: ................................................. D–4
Network Configuration: ............................................. D–5
Ring Configuration: ................................................ D–6
RSTP Configuration: ................................................ D–7
QoS Configuration: ................................................ D–7
VLAN Configuration: ............................................... D–8
IGMP Configuration: ............................................... D–9
Checkpoint Configuration: ........................................... D–9
Firmware Configuration:. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . D–9
TFTP Configuration: ................................................ D–9
Timezone Configuration: ........................................... D–10
MSTI Configuration: ............................................... D–10
General Configuration: ............................................. D–10
iv
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Table of Contents
Appendix E: License Agreements .............................E–1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .E–2
PCRE Library .......................................................E–2
libpcap Software ....................................................E–3
lighttpd Software ...................................................E–3
spawn-fcgi Software .................................................E–4
ipsec-tools Software .................................................E–4
net-snmp Software ..................................................E–6
FastCGI Library ....................................................E–11
watchdog Software .................................................E–12
GPLv2 (General Public License v2) .....................................E–12
Crossbrowser/x-tools Library .........................................E–18
OpenSSL License ...................................................E–30
Open SSH License ..................................................E–32
PPP License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . E–33
Shadow License ....................................................E–39
Sudo License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . E–41
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
v
Chapter
C
US
Chapter
Chapter
Hardware
1
1
1
In This Chapter...
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1–2
Conventions Used ...................................................1–2
Product Overview ...................................................1–3
Managed Switch Accessories ..........................................1–5
General Information .................................................1–6
LED Indicators ......................................................1–9
Installation, Plastic Case Switches ......................................1–11
Installation, Metal Case Switches ......................................1–12
Power and Alarm Wiring .............................................1–25
Communication Ports Wiring .........................................1–27
Technical Specifications ..............................................1–31
U
L
R
Chapter 1 - Hardware

Introduction

The Purpose of this User’s Manual
Thank you for purchasing our Stride™ Industrial Ethernet Switches and Media Converters. This manual describes AutomationDirect.com’s Stride industrial Ethernet switches and media converters, their specifications, included components, and provides you with important information for installation, connectivity and setup. The manual shows you how to install, wire and use the products.
Technical Support
We strive to make our manuals the best in the industry. We rely on your feedback to let us know if we are reaching our goal. If you cannot find the solution to your particular application, or, if for any reason you need technical assistance, please call us at:
770–844–4200 Our technical support group will work with you to answer your questions. They are available
Monday through Friday from 9:00 A.M. to 6:00 P.M. Eastern Time. We also encourage you to visit our web site where you can find technical and non-technical information about our products and our company.
http://www.automationdirect.com If you have a comment, question or suggestion about any of our products, services, or manuals,
please let us know.

Conventions Used

When you see the “notepad” icon in the left-hand margin, the paragraph to its immediate right will be a special note. The word NOTE: in boldface will mark the beginning of the text.
When you see the “exclamation mark” icon in the left-hand margin, the paragraph to its immediate right will be a warning or a caution. This information could prevent injury, loss of property, or even death (in extreme cases). The words WARNING or CAUTION: in boldface will mark the beginning of the text.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-2

Product Overview

Stride Unmanaged Ethernet Switches
Part Number Description
STRIDE ™ SlimLine Industrial Unmanaged Ethernet Switch
with five 10/100BaseT RJ45 Ethernet ports. Redundant power inputs with surge and spike protection. Auto-
SE-SW5U SE-SW5U-WT
SE-SW8U SE-SW8U-WT
SE-SW5U-ST SE-SW5U-SC SE-SW5U-ST-WT SE-SW5U-SC-WT
crossover. 35 mm DIN rail mounting. Supports store & forward wire speed switching and full-duplex with flow control. UL, CSA (CUL), & CE
Note: -WT models have a metal case and are rated for a wider temperature range, from -40 ° to +85 °C.
STRIDE ™ SlimLine Industrial Unmanaged Ethernet Switch
with eight 10/100BaseT RJ45 Ethernet ports. Redundant power inputs with surge and spike protection. Auto­crossover. 35 mm DIN rail mounting. Supports store & forward wire speed switching and full-duplex with flow control. UL, CSA (CUL), & CE
Note: -WT models have a metal case and are rated for a wider temperature range, from -40 ° to +85 °C.
STRIDE ™ SlimLine Industrial Unmanaged Ethernet Switch
with four 10/100BaseT RJ45 Ethernet Ports and one 100BaseFX Fiber Optic Port (ST or SC type multimode fiber connector for links up to 4km). Redundant power inputs with surge and spike protection. Auto-crossover. 35 mm DIN rail mounting. Supports store & forward wire speed switching and full-duplex with flow control. UL, CSA (CUL), & CE
Note: -WT models have a metal case and are rated for a wider temperature range, from -40 ° to +85 °C.
Chapter 1 - Hardware
SE-SW9U-ST SE-SW9U-SC SE-SW9U-ST-WT SE-SW9U-SC-WT
SE-MC2U-ST SE-MC2U-SC
STRIDE ™ SlimLine Industrial Unmanaged Ethernet Switch
with eight 10/100BaseT RJ45 Ethernet Ports and one 100BaseFX Fiber Optic Port (ST or SC type multimode fiber connector for links up to 4km). Redundant power inputs with surge and spike protection. Auto-crossover. 35 mm DIN rail mounting. Supports store & forward wire speed switching and full-duplex with flow control. UL, CSA (CUL), & CE
Note: -WT models have a metal case and are rated for a wider temperature range, from -40 ° to +85 °C.
STRIDE ™ SlimLine Industrial Unmanaged Ethernet to
Fiber Converter with one 10/100BaseT auto-detecting, auto-crossover and auto-polarity RJ45 Ethernet Port and one 100BaseFX Fiber Optic Port (ST or SC type multimode fiber connector for links up to 4km). Redundant power inputs with surge and spike protection. 35 mm DIN rail mounting. Supports store & forward wire speed switching and full-duplex with flow control. UL, CSA (CUL), & CE
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-3
Chapter 1 - Hardware
Product Overview (cont’d)
Stride Managed Ethernet Switches
Part Number Description
STRIDE ™ SlimLine industrial managed 5-port Ethernet switch, metal
housing, -40 to +75 deg. C operating temperature range, five 10/100BaseT
SE-SW5M
SE-SW5M-2ST SE-SW5M-2SC
SE-SW8M
SE-SW8M-2ST SE-SW8M-2SC
RJ45 Ethernet ports. Redundant power inputs with surge and spike protection, auto-crossover, 35 mm DIN rail mounting. Supports Store and Forward wire speed switching and full-duplex with flow control. UL/CUL HazLoc (Class I, Div. 2, Groups A, B, C, D) and CE marked.
STRIDE ™ SlimLine industrial managed 5-port Ethernet switch, metal housing, -40 to +75 deg., three 10/100BaseT RJ45 Ethernet ports and two multi-mode 100BaseFX fiber ports(ST or SC type multimode fiber connector for links up to 4km). Redundant power inputs with surge and spike protection, auto-crossover, 35 mm DIN rail mounting. Supports Store and Forward wire speed switching and full-duplex with flow control. UL/CUL HazLoc (Class I, Div. 2, Groups A, B, C, D) and CE marked.
STRIDE ™ SlimLine industrial managed 8-port Ethernet switch, metal housing, -40 to +75 deg. C operating temperature range, eight 10/100BaseT RJ45 Ethernet ports. Redundant power inputs with surge and spike protection, auto-crossover, 35 mm DIN rail mounting. Supports Store and Forward wire speed switching and full-duplex with flow control. UL/CUL HazLoc (Class I, Div. 2, Groups A, B, C, D) and CE marked.
STRIDE ™ SlimLine industrial managed 8-port Ethernet switch, metal housing, -40 to +75 deg., six 10/100BaseT RJ45 Ethernet ports and two multi-mode 100BaseFX fiber ports(ST or SC type multimode fiber connector for links up to 4km). Redundant power inputs with surge and spike protection, auto-crossover, 35 mm DIN rail mounting. Supports Store and Forward wire speed switching and full-duplex with flow control. UL/CUL HazLoc (Class I, Div. 2, Groups A, B, C, D) and CE marked.
SE-SW16M
SE-SW8MG-4P
SE-SW10MG-2P
1-4
STRIDE ™ SlimLine industrial managed 16-port Ethernet Switch, metal housing, -40 to +75 deg. C operating temperature range, sixteen 10/100BaseT RJ45 Ethernet ports. Redundant power inputs with surge and spike protection, auto-crossover, 35 mm DIN rail mounting. Supports Store and Forward wire speed switching and full-duplex with flow control. UL/CUL HazLoc (Class I, Div. 2, Groups A, B, C, D) and CE marked.
STRIDE ™ SlimLine industrial managed 8-port Ethernet switch all Gigabit, metal housing, -40 to +75 deg., eight 10/100/1000 BaseT RJ45 Ethernet ports and four advanced combination SFP ports that accept noise-immune fiber optic links up to 40 km. Redundant power inputs with surge and spike protection, auto-crossover, 35 mm DIN rail mounting. Supports Store and Forward wire speed switching and full-duplex with flow control. UL/CUL HazLoc (Class I, Div. 2, Groups A, B, C, D) and CE marked. SFP option modules sold separately.
STRIDE ™ SlimLine industrial managed 10-port Ethernet switch with Gigabit, metal housing, -40 to +75 deg., seven 10/100 BaseT RJ45 Ethernet ports, three Gigabit 10/100/1000 BaseT RJ45 port and two advanced combination SFP ports that accept noise-immune fiber optic links up to 40 km. Redundant power inputs with surge and spike protection, auto-crossover, 35 mm DIN rail mounting. Supports Store and Forward wire speed switching and full-duplex with flow control. UL/CUL HazLoc (Class I, Div. 2, Groups A, B, C, D) and CE marked. SFP option modules sold separately.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B

Managed Switch Accessories

SFP Transceiver
Part Number Description
STRIDE ™ 100Mb Small Form Factor Pluggable (SFP)
transceiver module (Transmit/Receive). Uses a long wavelength of 1310nm, supports data transmission up
SFP-4K-FMF
SFP-30K-FSF
SFP-500-GMF
SFP-2K-GMF
SFP-10K-GSF
SFP-30K-GSF
to 4km on a multi-mode fiber. LC duplex receptacle, SFP Multi-Source Agreement compliant. 125Mbps IEEE802.3u 100Base-FX compliant, 125Mbps FDDI ISO/ IEC 9314-1 compliant.
STRIDE ™ 100Mb Small Form Factor Pluggable (SFP) transceiver module (Transmit/Receive). Uses a long wavelength of 1310nm, supports data transmission up to 30km on a singlemode fiber. LC duplex receptacle, SFP Multi-Source Agreement compliant.
STRIDE ™ Gigabit (1.25GB) Small Form Factor Pluggable (SFP) transceiver module (Transmit/ Receive). Uses a short wavelength of 850nm, supports data transmission up to 550 meters on a multi­mode fiber. LC duplex receptacle, SFP Multi-Source Agreement compliant. 1.0625Gbps Fibre Channel FC-PI 100-M5-SN-I compliant. 1.0625Gbps Fibre Channel FC-PI 100-M6-SN-I compliant. 1.25Gbps IEEE802.3z 1000Base-SX compliant. 1.25Gbps IEEE802.3ah compliant.
STRIDE ™ Gigabit (1.25GB) Small Form Factor Pluggable (SFP) transceiver module. Uses a long wavelength of 1310nm, supports data transmission up to 2km on a multi-mode fiber. LC duplex receptacle, SFP Multi-Source Agreement compliant. IEEE 802.3 1000Base-SX compliant.
STRIDE ™ Gigabit (1.25GB) Small Form Factor Pluggable (SFP) transceiver module (Transmit/ Receive). Uses a long wavelength of 1310nm, supports data transmission up to 10km on a singlemode fiber. LC duplex receptacle, SFP Multi-Source Agreement compliant. 1.0625Gbps Fiber Channel FC-PI 100-SM-LC-L compliant. 1.25Gbps IEEE 802.3 1000Base-LX compliant.
STRIDE ™ Gigabit (1.25GB) Small Form Factor Pluggable (SFP) transceiver module (Transmit/ Receive). Uses a long wavelength of 1310nm, supports data transmission up to 30km on a singlemode fiber. LC duplex receptacle, SFP Multi-Source Agreement compliant. 1.25Gbps IEEE 802.3 1000Base-LX compliant.
Chapter 1 - Hardware
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-5
Chapter 1 - Hardware

General Information

Overview
This user’s manual will help you install and maintain the STRIDE industrial Ethernet switches and media converters. Installation of these devices is very easy and they will begin to operate as soon as they are powered up.
Operation
Unlike an Ethernet hub that broadcasts all messages out all ports, these industrial Ethernet switches will intelligently route Ethernet messages only out the appropriate port. The major benefits of this are increased bandwidth and speed, reduction or elimination of message collisions, and deterministic performance when tied with real-time systems.
These industrial Ethernet switches can support 10BaseT (10 Mbps) or 100BaseT (100 Mbps) on their RJ45 ports. Each of these ports will independently auto-sense the speed and duplex, mdi/mdix-crossover and polarity allowing you to use patch or crossover cables. Managed switches include models that support gigabit Ethernet.
Some models include fiber optic ports, or slots that accept SFP fiber optic transceivers.
1-6
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Safety Standards
RoHS
These industrial Ethernet switches meet the following standards plus others:
Electrical Safety -
CE per Low Voltage Directive and EN61010-1 (IEC1010) UL recognition per UL508 (UL File #E200031) CSA per C22.2/14 (cUL File #E200031)
See Warnings on following page
Install the Switches in accordance with local and national electrical codes.
Lightning Danger: Do not work on equipment during periods of lightning activity.
Do not connect a telephone line into one of the Ethernet RJ45 connectors.
EMC (emmissions and immunity) -
• CE per the EMC directive, EN61000-6-2, EN61000-6-4
• FCC part 15 and ICES 003; Class B.
See FCC statement on following page.
Marine, maritime and offshore -
These devices, when installed in an appropriately IP rated enclosure. Comply with DNV No. 2.4 and equivalent Lloyds and ABS standards.
For marine and maritime compliance, do not install this product within 5 meters of a standard or a steering magnetic compass.
WEEE compliance -
These devices comply with the WEEE directive. Dispose of properly.
Chapter 1 - Hardware
RoHS compliance -
These devices comply with the RoHS directive and are considered lead and other hazardous substance free.
Hazardous Locations -
• CE per ATEX directive and EN60079-15 (Zone 2); EEx nA II T4 X (-40 °C m T
• UL per UL HazLoc (Class 1, Div. 2), Groups A, B, C, D (UL File #E200031)
U
L
R
C
• CSA per C22.2/213 (Class 1, Div.2), Groups A, B, C, D (cUL File #E200031)
US
See Warnings on following page
m +85 °C)
a
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-7
Chapter 1 - Hardware
Installation and Hazardous Area Warnings
Warning: These products should not be used to replace proper safety interlocking. No software-based device (or any other solid-state device) should ever be designed to be responsible for the maintenance of consequential equipment or personnel safety. In particular, AutomationDirect.com disclaims any responsibility for damages, either direct or consequential, that result from the use of this equipment in any application. All power, input and output (I/O) wiring must be in accordance with Class I, Division 2 wiring methods and in accordance with the authority having jurisdiction.
WARNING
(EXPLOSION HAZARD)
WARNING
(EXPLOSION HAZARD)
WARNING
(EXPLOSION HAZARD)
WARNING
(EXPLOSION HAZARD)
SUBSTITUTION OF COMPONENTS MAY IMPAIR SUITABILITY FOR CLASS 1, DIVISION 2 (ZONE 2).
WHEN IN HAZARDOUS LOCATIONS, DISCONNECT POWER BEFORE REPLACING OR WIRING UNITS.
DO NOT DISCONNECT EQUIPMENT UNLESS POWER HAS BEEN SWITCHED OFF OR THE AREA IS KNOWN TO BE NONHAZARDOUS.
IN HAZARDOUS OR POTENTIALLY HAZARDOUS LOCATIONS, DO NOT SEPARATE ANY PART OF THE UNIT WHEN ENERGIZED. USE THE UNIT FOR INTERNAL CONNECTIONS ONLY.
FCC Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna; Increase the separation between the equipment and receiver; Connect the equipment into an outlet on a circuit different from that to which the receiver is connected; Consult the dealer or an experienced radio/TV technician for help.
NOTE: All information in this document is subject to change without notice.
1-8
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B

LED Indicators

Overview
The Stride industrial Ethernet switches have 1 or 2 communication LEDs for each port and a power LED. The managed models also have an “OK” output LED, a status LED and dual power LEDs.
Chapter 1 - Hardware
Managed
Power
LED
See the ACT/LNK and Speed 10/100 LED
explanations that follow below & on next page
Fiber
LED
The activity,
link and
speed LEDs
are
integrated
into the
RJ45 ports
Status LED
Managed Models Only: The Status LED indicates the overall health of the switch. It is normally ON solid indicating that no internal CPU or software problems are detected. It will flash when loading firmware and briefly on power up or reset. Otherwise, if it is OFF or flashing for an extended period of time then a problem is detected. In this case, please contact AutomationDirect for support.
Unmanaged
Status
LED
The activity,
link and
speed LEDs
are
integrated
into a single
multi-color
LED. They
are labeled
for each port
number.
See the ACT/LNK/Speed LED explanation
that follows on the next page.
Power &
OK
LEDs
Power LED
On unmanaged models there is one power LED that is ON if either power input(P1 or P2) has power applied to it. On the managed models there are two Power LEDs that indicate if there is power applied to the respective input.
Explanation of LED Indicators continued on next page.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-9
Chapter 1 - Hardware
ACT/LNK LED
This is the Yellow LED on models with two LEDs per RJ45 port.
ON (yellow) (not flashing)
ON (yellow) (flashing)
OFF
Indicates that there is a proper Ethernet connection (Link) between the port and another Ethernet device, but no communications activity is detected.
Indicates that there is a proper Ethernet connection (Link) between the port and another Ethernet device, and that there is communications activity.
Indicates that there is not a proper Ethernet connection (Link) between the port and another Ethernet device. Make sure the cable has been plugged securely into the ports at both ends.
Speed 10/100 LED
This is the Green LED on models with two LED’s per RJ45 port.
ON (green)
OFF
A 100 Mbps (100BaseT) connection is detected.
A 10 Mbps (10BaseT) connection is detected.
ACT/LNK/Speed LED
This is a bi-color (Green / Yellow) LED on models with one LED per RJ45 port.
ON Solid (not flashing)
Flashing
Green
Yellow
OFF
Indicates that there is a proper Ethernet connection (Link) between the port and another Ethernet device, but no communications activity is detected.
Indicates that there is a proper Ethernet connection (Link) between the port and another Ethernet device, and that there is communications activity.
On 10/100 ports, a 100 Mbps connection is detected. On 10/100/1000 ports, a 1000 Mbps connection is detected.
On 10/100 ports, a 10 Mbps connection is detected. On 10/100/1000 ports, a 10 or 100 Mbps connection is detected.
Indicates that there is not a proper Ethernet connection (Link) between the port and another Ethernet device. Make sure the cable has been plugged securely into the ports at both ends.
1-10
OK LED
Managed Models: This LED indicates the status of the power inputs. There is an output screw terminal that can be connected as shown in the wiring diagram. The output voltage
between the screw terminal marked ‘OK’ and the terminal marked ‘–’ will be the same as the applied switch input voltage. The output will be ON when both the PI and P2 terminals
have power applied to them. It will be OFF if either input does not have power or the switch software is not running.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B

Installation, Plastic Case Switches

Overview
These industrial Ethernet switches and media converters can be snapped onto a standard 35 mm x 7.5 mm height DIN rail (Standard: CENELEC EN50022). The switches and media converters can be mounted either vertically or horizontally. Refer to the mechanical drawings that follow for proper mounting.
NOTE: Make sure to allow enough room to route your Ethernet copper or fiber optic cables.
Mounting Removal
1
2
Chapter 1 - Hardware
B
DIN Rail Mounting
DIN rail mounting steps:
1. Hook top back of unit over the DIN rail.
2. Push bottom back onto the DIN rail until it snaps into place.
DIN rail removal steps:
A. Insert screwdriver into DIN clip and pry until it releases from the DIN rail. B. Unhook top of unit from DIN rail.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
A
1-11
Chapter 1 - Hardware

Installation, Metal Case Switches

Overview
These industrial Ethernet switches can be snapped onto a standard 35 mm x 7.5 mm height DIN rail (Standard: CENELEC EN50022). They can be mounted either vertically or horizontally. Refer to the mechanical drawings that follow for proper mounting.
NOTE: Make sure to allow enough room to route your Ethernet copper or fiber optic cables.
Mounting
2
DIN Rail Mounting
DIN rail mounting steps:
1. Hook top back of unit over the DIN rail.
2. Push bottom back onto the DIN rail until it snaps into place.
DIN rail removal steps:
A. Push the unit down to free the bottom of the DIN rail. B. Rotate the bottom of the unit away from the DIN rail. C. Unhook top of unit from DIN rail.
Removal
1
C
B
A
1-12
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Mounting Options
Stride switches with metal cases offer the following optional mounting methods.
Chapter 1 - Hardware
A
A. Vertical DIN rail mount.
This mounting option allows for quickest installation and optimal utilization of rail space.
B. Vertical screw to panel mount.
This mounting option gives better shock and vibration resistance.
C. Flat screw to panel mount.
This mounting option offers a low profile orientation in shallow boxes plus the best shock and vibration resistance. The power connection terminal block is removable for access to the mounting tab.
B
Important Notes about Thermal Performance
Stride switches with metal cases use an innovative technique to remove excess heat from the product and its components. This technique effectively utilizes the heavy gauge all-aluminum case as a large heat sink. Therefore, the case may be warm during operation, especially with heavy loads such as all ports linked and active. This is normal operation. For best performance, it is recommended that a DIN rail spacer such as end clamp, part number DN-EB35, be used between the switch and any adjacent device. This will leave an air gap for best heat dissipation off the case.
For best thermal performance when direct panel mounting to a metal surface, thermal compound may be used between the switch and mounting surface. This will reduce any air gaps and optimize the transfer of heat from the case to the mounting surface.
C
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-13
Chapter 1 - Hardware
9
5 Port
8 Port
Mechanical Dimensions for 5 and 8-Port Unmanaged Models in Plastic Case
Inches [mm]
5 or 8 Port – SE-SW5U & SE-SW8U
Removable
Screw Block,
3.95
[100.3]
Phoenix
p/n 1757035
4.20
[106.7]
Dia. 0.15 [3.8]
Use for direct
panel mounting
to a flat surface.
Snaps to standard
35 mm x 7.5 mm height
DIN rail (EN50022)
1.01
[25.7]
1.98
[50.3]
1.98
[50.3]
1.01
[25.7]
1.00
[25.4]
1.50
[38.1]
3.26
[82.8]
0.06 [1.5]
Mechanical Dimensions for 5 and 9-Port Unmanaged Models with Fiber in Plastic Case
Inches [mm]
3.96
[100.6]
1.00
[25.4]
5 Port
Removable
Screw Block,
Phoenix
p/n 1757035
4.35
[110.5]
SE-SW5U-ST, SE-SW5U-SC
SE-SW9U-ST and SE-SW9U-SC
0.40
[10.2]
Dia. 0.15 [3.8]
Use for direct
panel mounting
to a flat surface.
1.50
[38.1]
Port
3.26
[82.8]
Snaps to standard
35 mm x 7.5 mm height
DIN rail (EN50022)
1.01
[25.7]
1.98
[50.3]
1.98
[50.3]
1.01
[25.7]
0.06 [1.5]
1-14
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 1 - Hardware
[
Media Converters – SE-MC2U-ST and SE-MC2U-SC
Mechanical Dimensions for 2-Port Media Converter in Plastic Case
Inches [mm]
Removable
3.96
[100.6]
Screw Block,
Phoenix
p/n 1757035
4.35
[110.5]
0.40
[10.2]
Dia. 0.15 [3.8]
Use for direct
panel mounting
to a flat surface.
Snaps to standard
35 mm x 7.5 mm height
DIN rail (EN50022)
1.01
[25.7]
1.98
[50.3]
1.98
[50.3]
1.01
[25.7]
1.00
25.4]
3.26
[82.8]
0.06 [1.5]
Mechanical Dimensions for 5 and 8-Port Unmanaged Models in Metal Case
Inches [mm]
5 or 8 Port – SE-SW5U-WT & SE-SW8U-WT
Removable
0.175 [4.4]
Screw Block,
Phoenix
p/n 1757035
4.50
[114.3]
1.10
[27.9]
5 Port
4.00
[101.6]
0.55
[14.0]
1.60
[40.6]
8 Port
4.35
[110.5]
0.80
[20.3]
0.30
35 mm x 7.5 mm height
[7.6]
Dia. 0.175 [4.4]
Use for direct panel mounting to a flat surface with
up to #8 screw.
Removable
for direct panel
mounting
1.50
[3.81]
3.00
[76.2]
Snaps to standard
DIN rail (EN50022)
2.25
[57.1]
C
2.25
[57.1]
0.39 [9.9]
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-15
Chapter 1 - Hardware
Mechanical Dimensions for 5 and 9-Port Unmanaged Models with Fiber in Metal Case
Inches [mm]
SE-SW5U-ST-WT, SE-SW5U-SC-WT
SE-SW9U-ST-WT and SE-SW9U-SC-WT
4.50
[114.3]
0.175 [4.4]
Removable
Screw Block,
Phoenix
p/n 1757035
4.00
[101.6]
0.40
[10.2]
[110.5]
4.35
0.30 [7.6]
Dia. 0.175 [4.4]
Use for direct panel mounting to a flat surface with
up to #8 screw.
Snaps to standard
35 mm x 7.5 mm height
DIN rail (EN50022)
2.25
[57.1]
C
1.10
[27.9]
5 Port
0.55
[14.0]
1.60
[40.6]
9 Port
0.80
[20.3]
Removable
for direct panel
mounting
1.50
[3.81]
3.00
[76.2]
2.25
[57.1]
0.39 [9.9]
1-16
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Mechanical Dimensions for 5-Port Managed Model
Inches [mm]
SE-SW5M
Chapter 1 - Hardware
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-17
Chapter 1 - Hardware
Mechanical Dimensions for 5-Port Managed Models with Fiber
Inches [mm]
SE-SW5M-2ST and SE-SW5M-2SC
1-18
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Mechanical Dimensions for 8-Port Managed Model
Inches [mm]
SE-SW8M
Chapter 1 - Hardware
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-19
Chapter 1 - Hardware
Mechanical Dimensions for 8-Port Managed Models with Fiber
Inches [mm]
SE-SW8M-2ST and SE-SW8M-2SC
1-20
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 1 - Hardware
Mechanical Dimensions for 8-Port Managed Gigabit Switch with Four SFP Ports
Inches [mm]
SE-SW8MG-4P
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-21
Chapter 1 - Hardware
Mechanical Dimensions for 10-Port Managed Gigabit Switch with Two SFP Ports
Inches [mm]
SE-SW10MG-2P
1-22
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Mechanical Dimensions for 16-Port Managed Model
Inches [mm]
SE-SW16M
Chapter 1 - Hardware
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-23
Chapter 1 - Hardware
Mechanical Dimensions for SFP Transceiver Modules
Inches [mm]
SFP-4K-FMF, SFP-30K-FSF, SFP-500-GMF, SFP-2K-GMF, SFP-10K-GSF and SFP-30K-GSF
1-24
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B

Power and Alarm Wiring

Single DC Power
Redundant DC Power
Single DC Power Redundant DC Power
Overview
DC voltage in the range of 10 to 30 VDC (3.0W) needs to be applied between the P1 (plus) terminal and the Minus terminal as shown below. To maintain a UL 508 panel listing use a Class 2 power supply. The chassis screw terminal should be tied to panel or chassis ground. To reduce down time resulting from power loss, these industrial Ethernet switches can be powered redundantly with a second power supply as shown below.
NOTE: When powering multiple switches from a common power supply, it is most reliable to power the switches sequentially rather than simultaneously. The characteristics of the power supply and the significant startup current of the switches may result in an error in booting the switches when powered simultaneously.
Screw Torque
When tightening the screws be careful to tighten to a max. torque of 5 lb-in [0.57 Nm]. Wire size should be between 24 AWG and 12 AWG.
Before performing any wiring to these switches make sure...
• The area is currently nonhazardous (especially when working in Class 1, Div 2 or Zone 2 hazardous locations).
• Power is off to the switch
• The screw terminal block is unplugged. This is especially important on the aluminum housed units as shown below. Connecting or disconnecting wires to the screw block when its in place and power is turned on can allow the screwdriver to short the power to the case
Unmanaged Models:
Chapter 1 - Hardware
P2 P1
Chassis
GND
+
One DC Supply
(panel)
Managed Models:
SE-SW5M, SE-SW5M-2ST, SE-SW5M-2SC, SE-SW8M, SE-SW8M-2ST and SE-SW8M-2SC
OK P2
P1
Alarm
+
Output
Load
(opt.)
One DC Supply
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chassis
GND
(panel)
+
Alarm
Output
Load (opt.)
P2 P1
+
Dual DC Supplies
OK P2
+ –
+
Dual DC Supplies
Chassis
+
GND
(panel)
P1
Chassis
GND
+
(panel)
1-25
Single DC PowerRedundant DC Power
Single DC Power Redundant DC Power
Chapter 1 - Hardware
Managed Models:
SE-SW16M and SE-SW10MG-2P
OK
Alarm
Output
Load (opt.)
SE-SW8MG-4P
One DC Supply
+ –
One DC Supply
P2P1
+
P1P2
Alarm
Output
Chassis
+
Alarm Output
Load
(opt.)
GND
(panel)
Chassis
GND
(panel)
OK
+ –
Load
(opt.)
+ –
+
OK
Dual DC Supplies
P1 OK
+
Dual DC Supplies
P1P2
+
P2
Chassis
GND
(panel)
+
Alarm
+
Output
Load
Chassis
(opt.)
GND
(panel)
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-26

Communication Ports Wiring

Overview
The industrial Ethernet switches and media converters provide connections to standard Ethernet devices such as PLCs, Ethernet I/O, industrial computers and much more. RJ45 (copper) Ethernet ports and fiber optic Ethernet ports are available depending on model.
RJ45 Ethernet Wiring
Use data-quality (not voice-quality) twisted pair cable rated category 5e (or better) with standard RJ45 connectors. Straight-through or crossover Ethernet cable can be used for all devices the switch is connected to because all the ports are capable of auto-mdi/mdix-crossover detection.
The RJ45 Ethernet port connector bodies on these products are metallic and connected to the Chassis GND terminal. Therefore, shielded cables may be used to provide further protection. To prevent ground loops, the cable shield should be tied to the metal connector body at one end of the cable only. Electrical isolation is also provided on the Ethernet ports for increased reliability.
Chapter 1 - Hardware
Straight-thru Cable Wiring
Pin 1 Pin 1
Pin 2 Pin 2
Pin 3 Pin 3
Pin 4 Pin 4
Pin 5 Pin 5
Pin 6 Pin 6
Pin 7 Pin 7
Pin 8 Pin 8
NOTE: For reference only. Either cable wiring will work.
8
1
8
1
RJ45 Cable Distance
The maximum cable length for 10/100BaseT is 100 meters (328 ft.).
Cross-over Cable Wiring
Pin 1 Pin 3
Pin 2 Pin 6
Pin 3 Pin 1
Pin 4 Pin 4
Pin 5 Pin 5
Pin 6 Pin 2
Pin 7 Pin 7
Pin 8 Pin 8
Ethernet Plug & Connector Pin Positions
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-27
Chapter 1 - Hardware
Ethernet Fiber Wiring Guidelines
Depending on the model these industrial Ethernet switches may include one, two or four fiber optic ports. All 100 Mbps fiber ports are available with dual SC or ST multimode style connectors. Refer to the technical specifications for details.
All 1000 Mbps fiber ports are provided as SFP (small form pluggable). These accept plug-in fiber transceivers that have an LC style connector. They are available with either multimode or singlemode transceivers. Refer to the technical specifications for details.
For each fiber port there is a transmit (TX) and receive (RX) signal. When making your fiber optic connections, make sure that the transmit (TX) port of the switch connects to the receive (RX) port of the other device, and the receive (RX) port of the switch connects to the transmit (TX) port of the other device.
Use standard fiber optic wiring techniques (not covered by this manual) to make your connections. The corresponding ACT/LNK LED will be ON solid or flashing when you have made a proper connection.
Fiber Ports on Switches
1-28
Fiber Ports on Media Converters
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 1 - Hardware
Duplex Operation
The RJ45 ports will auto-sense for Full or Half duplex operation; the fiber ports are configured for full duplex operation. On managed switches the duplex setting is software configurable.
NOTE: Fiber devices with half duplex settings will communicate with the switch in most situations.
Network Device Check
The industrial Ethernet switches and media converters support 10/100BaseT or 10/100/100 Base T on the RJ45 (copper) ports and 100BaseFX or gigabit Ethernet on the fiber optic ports depending on model. Make sure you connect the appropriate devices to each port.
NOTE: The following AutomationDirect PLC Ethernet Modules are not compatible with the Stride Ethernet switches and Media Converters with fiber optic connections because the modules have a speed of 10BaseF (fiber optic) only: Ethernet Communications Module, p/n H2-ECOM-F & H4-ECOM-F; Ethernet Base Controller Module, p/n H2-EBC-F & H4-EBC-F; Ethernet Remote Master Module, p/n H2-ERM-F & H4-ERM-F.
Verifying Connectivity
After all Ethernet and/or fiber connections are made, check the LEDs corresponding to the ports that each of the devices are connected to. Ensure that for each port that is in use, the LED is on or blinking. If a port LED is off, go back and check for connectivity problems between that port and the network device connected to that port. In addition, the color of the LED should indicate the speed at which your device is connected (see prior section on LEDs).
Serial Console Port Wiring
An optional way to configure the managed switch is through the RJ45 console RS232 port. Wire a serial console cable as shown below to make a connection between a COM port on your PC (DB9 male) and the RS232 port of the managed switch (RJ45 female).
Switch RJ-45
Serial Port
1 = do not use 2 = do not use 3 = do not use 4 = Signal GND 5 = RXD 6 = TXD 7 = do not use 8 = do not use
RJ45 8-pin
Phone Plug
(8P8C)
Note: Use the above wiring diagram to make your own cable. We recommend using 22 AWG shielded cable.
Serial Configuration Cable
Wiring Diagram
6
TXD
5
RXD
4
GND
shield
2
RXD
3
TXD
5
1
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
9-pin
D-sub
(female)
1
9
PC Serial Port
1 = do not use 2 = RXD 3 = TXD 4 = do not use 5 = Signal GND 6 = do not use 7 = do not use 8 = do not use 9 = do not use
1-29
Chapter 1 - Hardware
USB Console Port Wiring
The managed switches also have an USB port alternative to the RS232 port. Use a standard USB cable with a mini-USB plug on one end and an A-type-USB plug on the other end. The A-type plug goes into a standard USB port on a computer. The mini-USB plug goes into the USB port on the switch.
The USB driver is available for download at automationdirect.com.
RS232
RJ45F
Mini-USB
RS232
RJ45F
Mini-USB
1-30
NOTE: The RS-232 and/or USB ports may be located on the bottom edge or front face of the switch.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B

Technical Specifications

Technical Specs
Here are the hardware technical specifications for the industrial Ethernet switches and media converters covered by this manual.
General Specifications
Ethernet switch type
Chapter 1 - Hardware
Unmanaged or Managed
Operating mode
Devices supported
Protocols (managed models only)
Industrial Protocols supported
Standards (depends on model)
Management Interfaces (managed models only)
MAC addresses
Memory bandwidth
Latency for 10 Mbps ports*
Latency for 100 Mbps ports*
Ethernet isolation
Management Serial Port (managed models only)
* Varies on load and settings
Technical Specifications continued on the next page.
Store & forward, wire speed switching, non-blocking
All IEEE 802.3 compliant devices are supported
SNMPv1/v2/v3, RMON, DHCP, SNTP, TFTP, STP, RSTP, QoS/CoS/ToS/DS, IGMPv1/v2,
VLAN (tag and port based), HTTP, HTTPS (SSL & TSL), Telnet, SSH and more
Modbus/TCP, EtherNet/IP, PROFInet, Foundation Fieldbus HSE and others
IEEE 802.3, 802.3u, 802.3ab/z, 802.3x, 802.1D/w, 802.1p, 802.1Q and others
interface) and SNMP (see Chapter 2 - Managed Switch Software for supported MIBs)
RS232 (TXD, RXD and GND), 9600, 8, N, 1 fixed and/or mini-USB
Web, text (Telnet & SSH), CLI (command line
1024 on unmanaged models;
2048 on managed models with 5, 8 or 9 ports
8192 on Gigabit models with more than 9 ports
3.2 Gbps on models with 9 or fewer ports
3.2 Gbps on models with more than 9 ports
16 us + frame time (typical)
< 5 us + frame time (typical)
1500 VRMS 1 minute
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-31
Chapter 1 - Hardware
Technical Specifications (cont’d)
Copper RJ45 Ports: (10/100 Mbps or 10/100/1000 Mbps)
Copper Ports
Speed
Protocols supported
Auto-crossover
Auto-sensing operation
Auto-negotiating
Auto-polarity
Flow control
Ethernet isolation
Plug and play
Cable requirements
Max. cable distance
10/100 Mbps or 10/100/1000 Mbps (depending on model)
Yes, allows you to use straight-through or crossover wired cables
Twisted pair (Cat. 5 or better) (shielded recommended)
Technical Specifications continued on the next page.
Shielded RJ45
All standard IEEE 802.3
Yes, Full and half duplex
Yes, 10BaseT and 100BaseT
Yes, on the TD and RD pair
Automatic
1500 VRMS 1 minute
Yes
100 meters (328 ft)
1-32
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 1 - Hardware
Technical Specifications (cont’d)
SC or ST Fiber Ports: 100BaseF multimode
100BaseFX ports
Fiber port mode
Fiber port connector
Optimal fiber cable
Center wavelength
Links up to 4 km typ.; 1300 nm; use with 50 or 62.5/125 um fiber
Multimode
Nominal max. distance (full duplex) (see web for details)
Half and Full Duplex
Ethernet Compliance
Eye Safety
SFP (Small Form Factor pluggable) Ports
Note: On the Gigabit (MG) models these ports are pluggable and accept any SFP Multi-Source Agreement compliant transceiver.
1 on some unmanaged switch models
2 on some managed switch models
Multimode (mm)
Duplex SC or ST
50/125 or 62.5/125 µm for mm; 9/125 µm for sm
1300 nm
> Transmitter power (dB): -21 min, -17 typ, -14 max
> Receiver sensitivity (dB): -34 typ, -31 max
4 km
Full duplex
100BaseF
IEC 60825-1, Class 1; FDA 21 CFR 1040.10 and 1040.11
Gigabit SFP ports
Port Types Supported
Note: 100 Mbps fiber transceiver modules are also supported on these ports.
Ethernet Compliance
Eye safety
NOTE: Refer to SFP module specifications for details specific to the SFP installed.
NOTE: When powering multiple switches from a common power supply, it is most reliable to power the switches
sequentially rather than simultaneously. The characteristics of the power supply and the significant startup current of the switches may result in an error in booting the switches when powered simultaneously.
All SFP Multi-Source Agreement compliant transceivers
1000BaseT and 1000BaseF (SX/LX/LH)
IEC 60825-1, Class 1; FDA 21 CFR 1040.10 and 1040.11
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
2 or 4 depending on model
1-33
Chapter 1 - Hardware
Technical Specifications (cont’d)
“OK” Alarm Output (Managed models only)
“OK” Output
Voltage
Maximum Current Output
Power Input
Input power (typical with all ports active at 100
Mbps)
Input Voltage (all models)
Reverse Power Protection
Transient Protection
Spike Protection
ON if P1 and P2 have power and switch software is running
Same as switch input voltage
Power Input
Redundant Input Terminals
SE-SW8MG-4P - 12.0W - No Fiber
SE-SW8MG-4P - 15.0W - With 4 Fiber plugged in
SE-SW10MG-2P - 5.0W - No Fiber
SE-SW10MG-2P - 7.0W - With 4 Fiber plugged in
5,000 watts (10x for 10 uS)
0.5 Amp
SE-MC2U-SC - 2.0W SE-MC2U-ST - 2.0W
SE-SW5U - 2.0W
SE-SW5U-WT - 2.0W
SE-SW5U-SC - 3.0W
SE-SW5U-SC-WT - 3.0W
SE-SW5U-ST - 3.0W
SE-SW5U-SC-WT - 3.0W
SE-SW8U - 4.0W
SE-SW8U-WT - 4.0W
SE-SW9U-SC - 5.0W
SE-SW9U-SC-WT - 5.0W
SE-SW9U-ST - 5.0W
SE-SW9U-ST-WT - 5.0W
SE-SW5M - 3.6W SE-SW5M-2SC - 5.6W SE-SW5M-2ST - 5.6W
SE-SW8M - 4.3W SE-SW8M-2SC - 6.3W SE-SW8M-2ST - 6.3W
SE-SW16M - 7.0W
10-30 VDC (continuous)
Yes
15,000 watts peak
1-34
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Technical Specifications (cont’d)
Environmental
Storage Temperature Range
Humidity (non-condensing)
Electrical Safety
EMC: emissions and immunity
Hazardous Locations
Eye Safety (fiber models)
RoHS and WEEE
ISO9001:2000
Ingress Protection
Packaging and Protection
Dimensions (L x W x H)
EN61000-6-2, EN61000-6-4 Typical 8 or 9/125 µm for singlemode (sm)
Mechanical
IP30 for all plastic cased units. IP40 for all metal cased units.
Aluminum w/ protective finish for all metal cased units.
-40 to +85 °C (-40 to +185 °F)
UL508/CSA C22, EN61010-1, CE
UL HazLoc, CSA C22.2/213 (Class I, Div.2) ;
EN60079-15 (Zone2), CE (ATEX)
IEC60825-1, Class 1; FDA 21 CFR
RoHS (Pb free) and WEEE compliant
Certified “Total Quality” company
UL94V0 Lexan plastic for all plastic cased units.
See mechanical drawings for details
5 to 95% RH
FCC part 15, ICES-003;
1040.10 and 1040.11
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
1-35
Chapter
Chapter
Chapter
Managed swiTCH QuiCk sTarT
2
2
2
In This Chapter...
Connecting to the Switch for the first time ...............................2–2
Connecting to the switch over Ethernet: .................................2–2
Setting up PC for USB connection to switch: .............................2–7
PC to switch using Serial Port: .........................................2–8
USB and Serial connection to switch with Terminal Software Program: ..........2–9
Default Setup ......................................................2–13
Why might you need a Managed Switch? ...............................2–16
Enhanced traffic filtering: ............................................2–16
Troubleshooting: ..................................................2–16
Redundancy: .....................................................2–16
Security: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2–17
Better Network ‘Awareness’: ..........................................2–18
Chapter 2 - Managed Switch Quick Start

Connecting to the Switch for the first time

Connecting to the switch over Ethernet:

NOTE: See Setting up PC for USB connection to Switch later in this chapter for the option of using USB for switch connection.
Connecting to the switch for the first time over Ethernet requires no extra tools or driver installation and is, therefore, the recommended way to accomplish this.
The default IP address and subnet mask of the switch is 192.168.0.1 and 255.255.255.0. This means that your PC’s network interface card (NIC) that is connected to the switch must be set to a compatible IP address and subnet mask to access the web-based switch configuration tool. It is recommended that you connect your PC directly to the switch for the initial setup of the network settings. An example IP address and subnet mask to set your PC’s network interface to is 192.168.0.100 and 255.255.255.0.
1. Go to the Start Button and click on “Run” (if you do not see a “Run” option, type Run in the search box and hit Enter). Type in ncpa.cpl and hit OK.
2-2
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 2 - Managed Switch Quick Start
2. Right click on the Network Interface that is connected to your switch and choose Properties.
3. Scroll down and highlight the “Internet Protocol Version 4 (TCP/IPv4)” selection and click on the Properties button.
4. Write down the current settings so that you may put them back in after configuring the Network settings of the switch to a compatible setup for your environment.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
2-3
Chapter 2 - Managed Switch Quick Start
5. Type in the IP address and subnet mask of 192.168.0.100 and 255.255.255.0 or another compatible IP address and subnet mask. Click on the OK button. Click on the OK button for the Network Interface Properties window and close the Network Connections window.
NOTE: Neither the Network Address nor the Broadcast Address for you subnet are valid host addresses. For our example that has a Subnet Mask or 255.255.255.0 and the first three octets are 192.168.0, neither the pc nor the switch are permitted to be assigned 192.168.0.0 or 192.168.0.255 as an IP address.
2-4
6. Open up your web browser program such as Internet Explorer, Mozilla Firefox or other and type in 192.168.0.1 in the URL line.
7. Enter in admin for the User name and admin for the password and click on OK.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 2 - Managed Switch Quick Start
8. Read the Software License Agreement and click the “I Accept the License” button.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
2-5
Chapter 2 - Managed Switch Quick Start
9. Click on the “Quick Setup” link on the upper left hand side of the window to access the Network Settings.
10. Enter in the desired IP address and subnet mask that is compatible with the network that the
switch will go on or enable DHCP if that is the method you choose to assign the network settings. Click on the “Commit Changes” button to enable the new settings.
2-6
NOTE: Neither the Network Address nor the Broadcast Address for you subnet are valid host addresses. For our example that has a Subnet Mask or 255.255.255.0 and the first three octets are 192.168.0, neither the pc nor the switch are permitted to be assigned 192.168.0.0 or 192.168.0.255 as an IP address.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 2 - Managed Switch Quick Start
11. Return to steps 1 – 4 to put in the original network settings for your PC.
12. Connect your PC and the switch to the network and enter in the new IP address into your web browser URL to access the switch. If you chose DHCP as the method for assigning the network settings to your switch, you will need to contact the network administrator to see which IP address has been assigned to the switch or connect via USB or serial (explained further down in this document) to ascertain what the IP address is on the switch.
13. Now that you can access the switch, you may begin to configure the switch with the settings appropriate for your network. If you are unsure of where to start with the configuration, go the section titled, “Why do you need a managed switch?” to understand more about the Stride managed switch, its capabilities and how these features can be used. Note that the default settings enable RSTP and IGMP which will be adequate for many networks with no further configuration.

Setting up PC for USB connection to switch:

This method can be used to initially configure the switch settings. It may also be needed if the switch has been previously configured and the network settings are unknown. If the switch has been set to DHCP, this method can be used to ascertain the current IP address that has been assigned to the switch by the DHCP server.
Three things will be required in order to connect to the switch via the USB port:
1. USB driver: This can be obtained from www.automationdirect.com. Download the executable and
run it to install the driver.
2. Cable: The cable required is a Male-A connector (plugs into PC) to Male Mini B-type (5 pin)
connector (plugs into switch).
3. Terminal software tool: Hyperterminal used to come pre-installed in Windows until Windows
Vista and 7 were released. TeraTerm is another tool that can be downloaded and installed for free.
After the USB driver EXE file has been downloaded and run, plug the USB cable into the PC and switch.
Windows will install the driver. If the New Hardware Wizard appears, select the “No, not this time” selection and click Next. On the following screen, select the “Install Software automatically” option and click Next. Once the driver is loaded, you may get prompted by a window that says the driver has not been verified by Windows. Click on the “Continue Anyway” button to complete the installation.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
2-7
Chapter 2 - Managed Switch Quick Start
To locate which COM Port has been assigned to the switch, click on “Start” menu in the PC taskbar and choose “Control Panel”. Double click on the “System” icon. Select the “Hardware” tab.
Click on the “Device Manager” button and then expand the “Ports (COM & LPT)” option on the left hand side and you should see a “USB Serial Device” with a COMxx beside it. This will be the COM port number that you will select with your Terminal software tool.
2-8

PC to switch using Serial Port:

Switch RJ-45
Serial Port
RJ45 8-pin
1 = do not use 2 = do not use 3 = do not use 4 = Signal GND 5 = RXD 6 = TXD 7 = do not use 8 = do not use
Phone Plug
(8P8C)
Note: Use the above wiring diagram to make your own cable. We recommend using 22 AWG shielded cable.
In addition to the USB console port, the switches have an RJ45 console port. The RJ45 console port can connect to a -pin serial port on your PC. A driver does not need to be installed.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Serial Configuration Cable
Wiring Diagram
6
TXD
5
RXD
4
GND
shield
9-pin
D-sub
2
RXD
3
TXD
5
1
(female)
1
9
PC Serial Port
1 = do not use 2 = RXD 3 = TXD 4 = do not use 5 = Signal GND 6 = do not use 7 = do not use 8 = do not use 9 = do not use
Chapter 2 - Managed Switch Quick Start
USB and Serial connection to switch with Terminal Software Program:
The software terminal program used for this tutorial will be TeraTerm. Any serial terminal software should work fine. TeraTerm is free and can be downloaded from www.teraterm.org.
1. Open the TeraTerm software and choose Serial and the COM port connected to the switch.
2. Configure the terminal program to connect to the switch with the following parameters:
a. Baud rate: 9600 b. Data bits: 8 c. Parity: None d. Stop bits: 1 e. Flow control: None
3. Press Enter to get the prompt shown below.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
2-9
Chapter 2 - Managed Switch Quick Start
4. Enter the login, then the password. The default user name is admin and the default password is admin.
5. Choose selection 4 for vt100.
6. Highlight (by using the up and down arrow keys on the PC keyboard) the “Quick Setup” option and press Enter.
2-10
7. To enable DHCP, highlight the DHCP option and press Enter. Arrow down and choose the Enable option and press Enter. Press the c key to commit the change.
8. To set a static IP address, arrow down and highlight the “IP address” option and press Enter.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 2 - Managed Switch Quick Start
9. Enter in the desired IP address and subnet mask. Note that the subnet mask is configured using, what is called CIDR notation. The “/xx” number denotes how many 1’s are in the subnet mask starting from the most significant bit. A /24 indicates a subnet mask of 255.255.255.0. A /16 indicates a subnet mask of 255.255.0.0 and a /8 indicates a subnet mask of 255.0.0.0. Once the IP address and subnet mask have been configured, press Enter. Press the c key to commit this change and to activate the new IP address for the switch.
10. If the switch has been configured to obtain an IP address from a DHCP server, you can also view
the IP address that is currently assigned to the switch by hitting ESC to go back to the main menu. Arrow down and highlight the “Monitoring” option and press Enter.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
2-11
Chapter 2 - Managed Switch Quick Start
11. Highlight the first option called, “System Information” and press Enter.
12. The IP address currently assigned to the switch will be shown here.
2-12
You are now able to use your web browser with the new IP address to configure the switch.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B

Default Setup

The table below shows the Default settings for the switch:
System Settings
Remote Access Security
Main Settings
Port Settings
Set IP per Port
Switch Time Settings
Manage Firmware Default
Install Firmware
Chapter 2 - Managed Switch Quick Start
Stride Managed Switch Default Settings
Configuration Parameter Default Setting
DHCP IP Address Subnet Mask Default Gateway Primary DNS Server Secondary DNS Server Domain Redundancy Protocol System Name Switch Location Contact SNMP Access Terminal Access Web Access SNMP Firmware Loading Command Line Access Automatic Logout SNMP Read-Only SNMP Read/Write Terminal and Web Name Admin Negotiation
Speed/Duplex
Flow Control SFP Provide/Do Not Provide IP Enabled Address NTP Server Timezone Set Switch Date Set Switch Time
Protocol All Other Fields
Disabled
192.168.0.1
255.255.255.0 none none none
Rapid Spanning Tree Protocol Switch model (i.e. SE-SW8MG-4P) <Set Location of Switch> <Set Name (and email) of contact for Switch> Basic and secure SNMP access SSH and telnet access Basic and secute SNMP access Disabled Enabled Disabled Name: public No Password Name: private No Password Name: admin Password: admin port x (x being port number) Enabled Auto For non Gigabit Switches: 10h,10f,100h,100f all on For Gigabit Switches: 10h,10f,100h,100f,1000f all on Off 1000f selected Do not provide IP address to any device Off for all ports blank for all ports none Not set 1970-01-01 current time Top line selected HTTP blank
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
2-13
Chapter 2 - Managed Switch Quick Start
Stride Managed Switch Default Settings (cont’d)
Configuration Parameter Default Setting
Redundancy Protocol Bridge Priority Maximum Age Hello Time
Spanning Tree Settings
Spanning Tree Port
Redundancy Settings
Settings
Real-time Ring Settings
QoS/CoS Settings
Settings
802.1p Tag Settings
Message Rate Limiting
Forward Delay Transmission Limit Region Name Configiguration Revision Max Hops MST Instance Exclude Priority
Path Cost
Type Point-to-Point Enable Ring Name Primary Port Backup Port Ring Master Priority Frame Setting Use 802.1p Tag Priority Use IP ToS/DiffServ Priority Precedence Default Out Q Type Priority 0 (Best Effort)
Priority 2 (Spare) Priority 3 (Excellent Effort) Priority 4 (Controlled Load) Priority 5 (Video) Priority 6 (Voice) Priority 7 (Network Control) Limit Broadcast and Multicast Forward Unknown
Rapid Spanning Tree Protocol 32768 20 2 15 6
0 (grayed out) 20 (grayed out) None by default Off for all ports 128 for all ports
20000 for all 10 / 100 / 1000 Ports, 200,000 for all 10 / 100 ports Auto for all ports
Auto for all ports Off for all ports Ring x (x being port number) Grayed out by default none none Automatic Master Send all high priority fames before any others On for all ports On for all ports Tag for all ports Normal for all ports Transparent for all ports Normal Background Background Normal Expedited Expedited Urgent Urgent
Disabled for all ports
Enabled for all ports
2-14
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Configuration Parameter Default Setting
Protocol Settings
(IGMP)
Multicast Filtering
Port Settings
VLAN Settings
(VLANs)
Virtual LANs
VLAN Port Settings
Remote Access Security
Port Security Enables
Port Security MAC Entries Entry
Ipsec Settings Disabled by default
Security Settings
IKE Policy
Alarm (OK) Output
Modbus
Monitoring Settings
SNMP Notifications
Chapter 2 - Managed Switch Quick Start
Stride Managed Switch Default Settings (cont’d)
IGMP Mode Multicast Suppression IGMP Version Robustness Query Interval Query Response Interval Exclude Router VLAN Mode Core Type Learning
Default VLAN Settings
PVID Force Type Same settings as in Main
Settings Global Security Enable Port Enabled
IKE Phase 1 Policies
IKE Phase 2 Policies
IKE Phase 2 Algorithms
A power input lost enabled All others disabled Enabled Station Number Transport Layers TCP Timeout TCP Connection Limit Port Everything disabled by
default
Active IGMP handling All unreserved multicast Version 2 2 125 10 Disabled for all ports Auto detect for all ports Disabled 0x8100 Shared
Management: Tag-Based, ID=1, FID=0, CPU selected as well as all ports 1
Off for all ports Transparent for all ports
Off Off for all ports None
None 1 by default but Disabled with 8h lifetime (anonymous source and dest) Cipher aes (AES Rijndael) Enabled
Cipher 3DES Enabled Hash hmac_SHA1 Enabled Hash hmac_SHA256 Enabled Compression deflate Enabled All others disabled
Disabled 1 TCP & UDP 0 4 502
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
2-15
Chapter 2 - Managed Switch Quick Start

Why might you need a Managed Switch?

Enhanced traffic filtering:

An unmanaged switch will filter out many packets from an end device that a hub would not but there are still many types of packets that an unmanaged switch cannot determine what to do with and must forward on to all ports. Whenever a device receives a packet that is not specifically targeted to that device, there is a certain amount of processing time that takes away from other important tasks that the device may really need to be spending time on. These ‘unintentional’ packets also get in the way of the packets that are intended for that device. This hurts the determinism of a process. A managed switch can help with this in several different ways:
Multicast Filtering (IGMP): It is common in a control system to see a large amount of Multicast packets. These packets cannot be filtered out by an unmanaged switch. The Stride managed switch can intelligently ‘learn’ whether certain Multicast packets should be sent to the devices on its ports and will filter them or not filter them appropriately.
VLANs: A VLAN is a logical way to separate networks in ways that used to require physical separation. Because of existing network infrastructure or for ease of wiring (and reduced cost), it may be difficult to physically separate networks that need separation due to the type of packets that are on them. Setting up VLANs can simplify the setup for these situations.
Traffic Priority (QoS/CoS): Some traffic may be more important to a specific device than other traffic. Using the Quality of Service feature, the Stride switch can apply tags to a packet coming into the switch to give that packet a higher priority going to another switch. The last switch will then remove the tag before sending the packet to the device. It can also use the tags applied to the packets by the devices themselves if they support this.
2-16

Troubleshooting:

As Ethernet messaging becomes more of the standard for communications between devices in a control system, it may become more necessary to gain visibility to these types of communications. With hubs, it was possible to see the messages between devices because hubs broadcast every packet to all ports. Unmanaged switches took away this capability as they filter unicast packets to only the intended physical ports. Managed switches can help with this by utilizing the Port Mirroring feature. The Stride managed switch can also give you visibility in to the type of packets that are being sent across the switch by viewing the Network Statistics page in the configuration.
• Port Mirroring: With the Port Mirroring feature you simply specify which ports’ data you want to view and where to send that data. Plug your PC into that port and use Ethernet sniffing software (such as Wireshark) and you can now see the data being sent back and forth.
• Network Statistics: By looking at what kind of packets that are coming in and out of the switch, you can determine what action needs to be taken to make your network work better. If you see a lot of Multicast traffic, utilize the Multicast Filtering feature. If there are lots of broken packets, troubleshoot the wiring to determine where the problem lies.

Redundancy:

The downside of any Ethernet switch is the simple fact that it is another electronic component in the system that could be subject to failure. There is also the risk that as a network grows and more switches are added to it, a ‘ring’ may accidentally be created causing
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 2 - Managed Switch Quick Start
the network to go down. Utilizing the Spanning Tree and/or Real-Time Ring feature of the Stride managed switch can reduce these risks.
• STP: The Spanning Tree protocol simply allows you to purposely create a ring that allows for multiple, redundant paths on the network but intelligently decides one path when the network comes up and assigns alternate paths if some part of the original path goes down.
• RSTP: The Rapid Spanning Tree Protocol is the preferred method in the industry today as the manner in which it decides the original paths and the time in which it changes over to alternate paths is much, much faster than the original Spanning Tree Protocol. It is really only useful to enable the older STP if your legacy network requires this protocol. The RSTP feature is enabled by default.
• Real-Time Ring: In many Control Systems, the time it takes for the RSTP algorithm to change paths upon some network event is too slow. The Real-Time Ring is proprietary to the Stride managed switches but it has the advantage of changing paths very, very quickly.

Security:

Network security has become a great concern for facilities these days. And while the network devices themselves are only one part of a network security strategy, the Stride managed switches have several security features:
• Port Control: In the “Port Settings” setup, you can disable ports that are not being used. This can limit unauthorized access.
• Security Settings: There are several different methods of enabling security in the switch. There are security methods to prevent access to the switch (Remote Access Security), you can determine which devices can connect to the switch (Port Security MAC Entries) and you can enable encryption for data going between switches (IPsec).
• Remote Access Security: You can disable access to the switch or implement secure pass-wording in order to access the switch.
• IPsec: There are many different methods that can be employed to encrypt the data going to or from the switch. The particular method (encryption protocol/algorithm) will most likely be determined by your network administrator.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
2-17
Chapter 2 - Managed Switch Quick Start

Better Network ‘Awareness’:

The ability of the process to know when something is wrong with the network and what is wrong with the network is a great feature of the Stride managed switches. Your PLC or controlling device can make ‘smarter’ decisions as to what alarms or fallback behavior to trigger based upon the different diagnostic data that is supplied by the switch.
• Modbus Stats: If you have a controlling device on the network that has Modbus TCP or UDP client capability, there are several diagnostic tags that can be read from the switch to indicate the health of the network.
• SNMP: SNMP stands for Simple Network Management Protocol and is used for just that. There are many software tools out there that can query or receive ‘traps’ sent by the Stride managed switch to ascertain events or health of the switch.
• Port and Power Status (Alarm Output): The Stride managed switch has two power inputs that can be used for redundancy. If one of the power inputs fails, there is a relay contact that can be configured to report this failure.
• Spanning Tree Status: The switch can be configured to report when something in the Spanning Tree has changed.
• Real-Time Ring Status: The Real-Time Ring status can be ascertained from other devices as well.
• MAC Table: The switch keeps a table of the MAC IDs of devices that are communicating on it
2-18
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter
Chapter
Chapter
Managed swiTCH sofTware MoniToring
3
3
2
In This Chapter...
System Information ..................................................3–2
Port and Power Status ................................................3–4
Network Statistics ...................................................3–5
Spanning Tree Status ................................................3–8
Real-Time Ring Status ...............................................3–10
Multicast Filtering Status .............................................3–11
IGMP Port Status: .................................................3–11
IGMP Group Status: ................................................3–12
MAC Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3–13
Configuration Summary .............................................3–14
Chapter 3 - Managed Switch Software Monitoring

System Information

The System Information screen simply provides the information shown below. The screen is updated every five seconds.
3-2
Model: This field shows the model number of this particular switch. It is set by the factory and cannot be changed.
Description: This field displays more descriptive information about this particular switch model. It is also set by the factory and is not changeable. This data is available via SNMP as SYSTEM.SYSDESCR.0.
System Name: This field is configured by the user with the appropriate text for their application. It is configured in the “System Settings” tab under the Main Settings section. This field is also used as the hostname of the switch and, therefore, must contain only digits, dashes and letters. It is also available via SNMP as SYSTEM.SYSNAME.0.
Switch Location: This field is configured by the user with the appropriate text for their application. It is configured in the “System Settings” tab under the Main Settings section. This data is available via SNMP as SYSTEM.SYSLOCATION.0.
Contact: This field is configured by the user with the appropriate text for their application. It is configured in the “System Settings” tab under the Main Settings section. This data is available via SNMP as SYSTEM.SYSCONTACT.0.
IPv4 address: This field displays the current configured IPv4 address. IPv4 is the traditional 4 octet Internet Protocol address. An IPv4 address comprises 4 8-bit numbers separated by a period. Each number can be between 0 and 255 (some of the fields have more strict
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 3 - Managed Switch Software Monitoring
limitations). The IPv4 address can be manually configured in the “System Settings” tab under the Main Settings section or the address can be set to be automatically retrieved using the DHCP protocol. If the address has been configured via DHCP, it will indicate this. This field also indicates the Subnet Mask by using the ‘slash’ notation that indicates the number of bits that are 1 in the mask. For example: A Subnet Mask of 255.255.0.0 would be indicated by a /16. A Subnet Mask of 255.255.255.0 would be indicated by a /24 and so on. The subnet mask is accessible via SNMP as RFC1213-MIB::IPADENT­NETMASK.<IPADDRESS> where <IPADDRESS> is the IP address of the switch (example:
192.168.0.1). IPv6 address: This field displays the current configured IPv6 address. IPv6 is the newer
standard of Internet Protocol addressing that greatly expands the number of addressing possibilities. Instead of the standard 4 x 8-bit address format that is used IPv4, IPv6 uses 8 fields of 16 bit values separated by colons. Each address display in hex format. If one particular fields contains a 0, a :: can be used. An IPv6 address can also be retrieved by DHCP. This field also uses the / designator for the subnet mask.
Default Gateway: This field contains the IP address of the router that this switch should send external packets to. This address can be assigned manually in the “System Settings” tab under the Main Settings section or can be retrieved automatically through DHCP. The default gateway is accessible via SNMP as RFC1213-MIB::IPROUTENEXTHOP.
Serial Number: This is the serial number assigned to this switch at the factory and cannot be changed.
Firmware revision: This is the current running firmware revision of this switch. MAC address: This is the MAC address of this switch. It is configured at the factory and
cannot be changed. Uptime: This is the amount of time this switch has been running since power was applied.
This data is available via SNMP as SYSTEM.SYSUPTIME.0.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
3-3
Chapter 3 - Managed Switch Software Monitoring

Port and Power Status

The current status of each port and the Power and Ok terminal status can be viewed in this section.
3-4
Port Status: The status for each port can be viewed in this section. Some of the information shown for the ports is configured through the “Port Settings” tab of the Main Settings section. If the negotiation settings have been set to Auto, this tab will show what settings were negotiated between the switch and the attached device. On this page, the color highlighting the port number indicates the speed:
Yellow = 10 Mbps Green = 100 Mbps Red = 1000 Mbps
Power Status: There are 2 power input terminals for the input 24VDC. This tab will show which terminals have power. This tab will also show if the criteria for enabling the OK output is true or false. The configuration for this output is configured in the “Alarm (OK) Output” tab of the Monitoring Settings section.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B

Network Statistics

The Network Statistics display can be a very useful diagnostic tool for indication of the type of traffic and packets that the switch is receiving.
Chapter 3 - Managed Switch Software Monitoring
RMON Statistics: RMON stands for “Remote Monitoring” statistics and includes the following:
• Drop Events = The number of packets that have been dropped by the switch because of a lack of resources and/or large queues.
• Octets = The number of data 8-bit units received into this port.
• Packets = The number of Ethernet packets received into this port.
• Broadcast packets = The number of broadcast packets received into this port.
• Multicast packets = The number of multicast packets received into this port.
• CRC Align errors = The number of Ethernet packets received into this port with an invalid CRC.
• Undersize packets = The number of Ethernet packets received into this port that were less than 64
bytes in size but contained a valid CRC (64 bytes is the minimum required in Ethernet).
• Oversize packets = The number of Ethernet packets received into this port that were greater than 1536 bytes in size but contained a valid CRC (1536 is the maximum size allowed in Ethernet).
• Fragments = The number of Ethernet packets received into this port that were less than 64 bytes in size and did not contain a valid CRC.
• Jabbers = The number of Ethernet packets received into this port that were greater than 1536 bytes in size and did not contain a valid CRC.
• Collisions = The number of collisions detected on this port.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
3-5
Chapter 3 - Managed Switch Software Monitoring
• 64-octet Packets = The number of Ethernet packets received into this port that were 64 bytes in length.
• 65 – 127-octet Packets = The number of Ethernet packets received into this port that were between 65 and 127 bytes in length.
• 128 – 255-octet Packets = The number of Ethernet packets received into this port that were between 128 and 255 bytes in length.
• 256 – 511-octet Packets = The number of Ethernet packets received into this port that were between 256 and 511 bytes in length.
• 512 – 1023-octet Packets = The number of Ethernet packets received into this port that were between 512 and 1023 bytes in length.
• 1024 – 1518-octet Packets = The number of Ethernet packets received into this port that were between 1024 and 1518 bytes in length.
3-6
Ether-like statistics: The Ether-like statistics provide information on possible hardware, electrical and/or noise problems on the network.
• Alignment Errors = These errors are more indicative of receiving the improper number of bits. These errors are a good indication of noise and/or electrical problems. Check the wiring and routing of cables in the event that many of these errors are seen.
• FCS Errors = This is the error that results from an incorrect CRC calculation. These errors along with the Alignment Errors indicate noise and/or electrical problems. Check the wiring and routing of cables in the event that many of these errors are seen.
• Single Collision Frames = This error occurs when only 1 collision occurs and the sending device is able to send the packet on the subsequent attempt.
• Multiple Collision Frames = This error occurs when collisions occur on more than 1 attempt to send a packet from a device.
• SQE Test Errors = The Signal Quality Error test verifies that the collision detection circuit is working correctly. If the device does not detect the SQE test, this causes an error.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 3 - Managed Switch Software Monitoring
• Deferred Transmissions = A deferred transmission occurs when the device detects a carrier signal (a device is already transmitting).
• Late Collisions = In some situations, a collision is not detected until after the Ethernet device has started transmitting the packet. This is called a Late Collision. A Late Collision is more specifically defined as a collision that is detected 51.2 microseconds after the device has started sending on a 10BASE-T network and 5.12 microseconds on a 100BASE-T network. Late collisions are usually caused by improper network configurations, compliance issues between devices, incorrect cabling and/or fault Network Interface Cards.
• Excessive Collisions = As part of the CSMA/CD mechanism, an Ethernet device will attempt to re-transmit a frame 16 times if a collision is detected. If the device is unsuccessful after 16 times, it will give up and that frame will not be transmitted.
• Internal MAC Transmit Errors = This error occurs when frames fail to be transmitted correctly due to an internal MAC sub-layer transmit error.
• Carrier Sense Errors = This error occurs when the carrier sense is lost during a transmission from the Ethernet device. The error only increments once during the transmission even if the carrier sense is lost and regained multiple times during that transmission.
• Frame Too Long = This error occurs when a frame is encountered that exceeds the maximum frame size.
• Internal MAC Receive Errors = This error occurs when frames fail to be received correctly due to an internal MAC sub-layer receive error.
• Symbol Errors = These errors occur when the device could not correctly decode a symbol that has been received. This is usually indicative of bad cabling and/or electrical noise problems. A symbol is a waveform change on the wire that may contain 1 or many bits of information.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
3-7
Chapter 3 - Managed Switch Software Monitoring

Spanning Tree Status

This section shows the current status of the Spanning Tree redundancy feature of the switch. For more information on the particular details of the Spanning Tree features of the switch, refer to the “Spanning Tree Settings” section under the “Redundancy Settings” section of this document.
3-8
On this page, the color highlighting the port number indicates the speed:
Yellow = 10 Mbps Green = 100 Mbps Red = 1000 Mbps
Redundancy protocol: This is the protocol that the switch has been configured for. The selections available are Spanning Tree Protocol, Rapid Spanning Tree Protocol or None.
Designated root: This field specifies which device is the Root switch and what the Bridge ID of that switch is along with the MAC ID.
Topology changes: This counter tracks the number of times that the topology has changed on the network layout. There are a number of things that can cause the topology to change. If the link is lost on a port that is forwarding and the switch has to change its path, this will cause a topology change. If a Topology Change Notice is received by the switch from some other switch, the counter will also increment.
Time since last chg: Informs how long it has been since the last topology change occurred. Port: The number of the port. This corresponds to the labels on the switch.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter 3 - Managed Switch Software Monitoring
Name: The user configured name of the port. Status: The configured state of the port in the STP protocol (included or excluded). An
included port is part of the managed network. An excluded port will not be used as part of the managed network. For example, a single uplink from a managed network of factory devices to a business network would be configured to be excluded from STP use. A pair of ports configured for Real-Time Ring should be excluded from Spanning Tree.
State: The STP/RSTP state of the port:
STP:
• Blocking = A port in this state does not participate in frame relay (pass frames received to other
locations). Once a port is in this state, it prevents frame duplication caused by multiple paths in an active topology.
• Listening = A port in this state is about to participate in frame relay, but is not involved in any relay of frames (no frames will be forwarded). The reason for not entering frame relay immediately is to ensure that there are no temporary loops introduced when the network topology is changing. During this state, the switch will disable all learning states on its ports to prevent the race conditions when ports are changing roles and the forwarding process will discard all frames and not submit any frames for transmission. Meanwhile BPDUs (Configuration Messages - Bridge Protocol Data Units) can still be received and forwarded to keep the algorithm running.
• Learning = A port in this state is about to participate in frame relay, but it is not involved in any relay of frames. Frame relays are not performed to prevent the creation of temporary loops during the active topology of a changing bridged LAN. In addition, the forwarding process will discard all frames and not submit any frames for transmission. The reason for enabling learning is to acquire information prior to any frame relay activities. Information gathered will be used and placed in the filtering database (MAC table) to reduce the number of frames being unnecessarily relayed.
• Forwarding = A port in the forwarding state is currently participating in frame relay. BPDUs will include the forwarding port in the computation of the active topology. BPDUs received are processed according to the Spanning Tree algorithm and transmitted based on the hello time or BPDU information received.
RSTP:
• Discarding = In this state, station location information is not added to the Filtering Database
(MAC table) because any changes in port role will make the Filtering Database information inaccurate.
• Learning = In this state, information is being added to the Filtering Database under the assumption that the port role is not changing. Gathering information before frame relay (forwarding state) will reduce the number of frames sent out when entering the forwarding state.
• Forwarding = Frames will be forwarded to and from the particular port that is in the forwarding state. In addition, during the forwarding state, the learning process is still incorporating station information into the Filtering database.
Cost: The cost of using this port to reach other parts of the managed network. The cost is used in calculating the best path from the switch to the root bridge. The lower the cost, the more likely that the path will be used. See the configuration section for Spanning Tree settings for more detail.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
3-9
Chapter 3 - Managed Switch Software Monitoring

Real-Time Ring Status

Each ring that is configured is assigned a number and can be given a name. For more information on the Real-Time Ring feature, refer to the “Real-Time Ring Settings” section under the “Redundancy Settings” section of this document.
3-10
On this page, green hightlight on the ring number indicates the ring is complete, red indicates the ring is broken. On the Port, green indicates both ends of the link are connected and communicating. Red indicates on side of the link is not connected or communicating. For each ring configured a Primary port is assigned and a Backup port (if the Primary port is disrupted). The Ring Status page shows the status of the Primary port, its Link status, the status of the Backup port and its Link status.
The Status field indicates whether the Ring is complete or if there is a break in the Ring. If the Ring is broken at the switch being monitored, it will indicate “Local”. If the Ring is broken at another switch, it will indicate “Remote”.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B

Multicast Filtering Status

This section shows the current IGMP Multicast Filtering Status. For more information on the particular details of the Multicast Filtering features of the switch, refer to the “Multicast Filtering (IGMP)” section of this document.
Chapter 3 - Managed Switch Software Monitoring

IGMP Port Status:

• IGMP mode: Displays the configured mode of IGMP handling. The three choices are: IGMP disabled, Passive IGMP handling and Active IGMP handling. The specific details of each mode are discussed in more detail in the “Multicast Filtering (IGMP)” configuration section.
• Multicast suppression: Displays the configured mode of Multicast suppression. The three choices are: None, IP multicast groups and All unreserved multicast. The specific details of each mode are discussed in more detail in the “Multicast Filtering (IGMP)” configuration section.
• IGMP version: Displays the configured version of IGMP for this switch. The choices are Version 1 or Version 2. The specific details of these versions are discussed in more detail in the “Multicast Filtering (IGMP)” configuration section.
• Querier: Indicates what device is sending out IGMP query messages. When the switch is set to “Active IGMP handling”, the Querier will most often be this same switch.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
3-11
Chapter 3 - Managed Switch Software Monitoring

IGMP Group Status:

• Group: Displays the Multicast IP address of a particular multicast group.
• Port: Displays the port that the particular multicast group is active on.
• Reporter: Displays the IP address of the last host to report membership in this group on this
port. Hosts send IGMP reports to a switch or router for the purpose of having the switch or router include them into a particular multicast group.
• Age: The number of seconds since this group was last reported on this port.
• Expiration: The number of seconds until this group will be dropped unless a new report is
received.
3-12
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B

MAC Table

The MAC address table page displays the current MAC address table of the switch. This data can be filtered by the Filter Database ID (FID: Values that are applied as the devices are encountered, no other significance to the value), the port(s) of discovery or by all or part of the MAC address. Please note that Port 33 or 65 is the internal CPU port, depending upon the model.
Entries in the MAC table will time out after 300 seconds of inactivity. Alternatively, the MAC table can be flushed by power cycling the switch.
Chapter 3 - Managed Switch Software Monitoring
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
3-13
Chapter 3 - Managed Switch Software Monitoring

Configuration Summary

The Configuration Summary Page provides a complete overview of the configuration settings of the switch. The summary is generated in a print-friendly format. If an NTP (Network Time Protocol) server is configured, the report will also report a timestamp. To save these settings to a configuration file, click the “Save these settings” button to be redirected to the Configuration Management screen.
3-14
NOTE: This page is for viewing settings only. To change settings, please go to the individual configuration screens.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. B
Chapter
Chapter
Chapter
Managed swiTCH sofTware seTup
4
4
4
In This Chapter...
Main Settings ............................................................................................................. 4–2
System Settings ........................................................................................................ 4–2
Remote Access Security ............................................................................................ 4–4
Port Settings .............................................................................................................4–6
Port Mirroring ..........................................................................................................4–8
Set IP per Port .......................................................................................................... 4–9
Switch Time Settings .............................................................................................. 4–10
Manage Firmware ..................................................................................................4–11
Install Firmware ...................................................................................................... 4–12
Redundancy Settings ............................................................................................... 4–14
Spanning Tree Settings ..........................................................................................4–18
Spanning Tree Port Settings ................................................................................... 4–21
Real-Time Ring Settings .......................................................................................... 4–23
RSTP Examples .......................................................................................................4–24
Traffic Priority (Priority Queuing QoS, CoS, ToS/DS) ............................................ 4–29
QoS / CoS Settings .................................................................................................4–30
802.1p Tag Settings ............................................................................................... 4–31
Message Rate Limiting............................................................................................4–32
QoS Example..........................................................................................................4–33
Multicast Filtering (IGMP) .......................................................................................4–36
IGMP Protocol Settings ..........................................................................................4–37
Port Settings ...........................................................................................................4–38
IGMP Example .......................................................................................................4–39
Virtual LANs (VLANs)...............................................................................................4–40
VLAN Settings ........................................................................................................4–41
VLAN Port Settings ................................................................................................. 4–43
VLAN with RSTP ..................................................................................................... 4–44
VLAN Examples ...................................................................................................... 4–46
Security Settings ...................................................................................................... 4–51
Remote Access Security .......................................................................................... 4–51
Port Security Enables and Port Security MAC Entries ..............................................4–52
IPsec Settings .........................................................................................................4–54
IKE Policy................................................................................................................4–57
IKE Pre-shared Keys ................................................................................................4–59
IKE Certificates .......................................................................................................4–60
Monitoring Settings ................................................................................................4–62
Alarm (OK) Output.................................................................................................4–62
Modbus ..................................................................................................................4–63
Register Mapping: .................................................................................................. 4–64
SNMP Notifications ................................................................................................ 4–65
This page intentionally left blank
Chapter 4 - Managed Switch Software Setup

Main Settings

The Main Settings section is where the general network settings of the switch are configured, such as the IP address and security access User name and password.

System Settings

4-2
To control and monitor the switch via the network, it must be configured with basic network settings, including an IP address and subnet mask. Refer to the quick start guide in Chapter 2 to learn how to initially access your switch.
To configure the switch for network access, select Quick Setup from the Main menu to reach the System Settings menu. The settings in this menu control the switch’s general network configuration.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
Chapter 4 - Managed Switch Software Setup
DHCP Enabled/Disabled: The switch can automatically obtain an IP address from a server using the Dynamic Host Configuration Protocol (DHCP). This can speed up initial set up, as the network administrator does not have to find an open IP address.
NOTE: If DHCP has been enabled, it will be necessary to connect to the console port serially or via USB in order to ascertain which IP address has been assigned so that you may be able to access the Switch using the web browser.
IP address and Subnet Mask: The IP address of the switch can be changed to a user-defined address along with a customized subnet mask.
NOTE: For additional security, advanced users can set the IP address to 0.0.0.0 to disable the web browser access . However, any features requiring an IP address (i.e., web interface, etc.) will no longer be available.
Default gateway: A Gateway address is the address of a router that connects two different networks. This can be an IP address or a Fully Qualified Domain Name (FQDN) such as “domainname.org”.
Primary DNS server: A DNS server address will be required if domain names are used in the switch settings. A Domain Name System Server converts a name, such as “domainname. org”, into an IP address that is usable in the Ethernet messaging. Consult your network administrator for the proper DNS address for your network.
Secondary DNS server: A secondary DNS server can be configured in the case that the Primary DNS server is unreachable.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
4-3
Chapter 4 - Managed Switch Software Setup

Remote Access Security

This screen allows you to set your remote access security settings.
4-4
SNMP Access: Choose the level of SNMP access to allow.
• None: No SNMP access allowed.
• SNMPv1 & SNMPv2 access (no passwords): SNMP v1 and SNMPv2 access with community
string (None) sent in clear text and no password required.
• SNMPv3 access: SNMPv3 access with encrypted password.
• Basic and secure SNMP access: SNMPv1, SNMPv2 and SNMPv3 access allowed.
Terminal access: Choose the type of terminal access to allow
• None: No terminal access to the switch will be allowed.
• Non-secure access via telnet: Non-secure access via telnet protocol. Remote access is possible
through this protocol, although all information being transacted between server and client will be sent as clear text. Should security be of concern, use the Secure Shell protocol instead.
• Secure access via SSH: Secure access can be achieved through the use of the Secure Shell protocol (SSH), which implements strong authentication and secure communications using encryption. Using this protocol will ensure that your login information never gets sent as clear text, keeping the switch protected against possible attacks coming from the network.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
Chapter 4 - Managed Switch Software Setup
• SSH and telnet access: The switch can be accessed through secure (SSH) and non-secure (telnet) terminal access.
The switch supports these encryption algorithms for SSH:
3DES
Blowfish
AES
Arcfour
To take advantage of the SSH capability in the switch, you will need to use an SSH client program. There are many SSH client programs available for you to log onto the host (the switch).
Two open source SSH client programs are available on the Internet:
Program name: OpenSSH for Windows: http://sshwindows.sourceforge.net/
Program name: PuTTY: http://www.chiark.greenend.org.uk/~sgtatham/putty/
The SSH protocol requires some way for clients to be sure they are communicating with the intended host. The host computes a “fingerprint” based on its key and provides that to the client for verification. The first time a client program sees a fingerprint, it typically displays it and asks something like “The host is offering me these credentials, should I trust it?”
If you agree, the fingerprint is stored for later reuse. For the system to be secure, the fingerprint used for comparison must be transmitted “out of
band” (by a means other than the channel that is being secured by the fingerprint). In this case, via documentation.
The RSA fingerprint for the managed switch’s encryption key is: 1e:0f:31:39:26:3f:23:8c:ba:7e:e9:d1:56:ff:98:f6
Web access: Choose the level of web access to allow.
• No web access: No web access allowed.
• HTTP access: Basic HTTP access allowed.
• Secure HTTP (HTTPS) access: Secure HTTP (HTTPS) required. Attempts to access the switch
via http will be redirected to the secure protocol.
• Basic and secure HTTP access: Basic and secure HTTP access allowed.
SNMP firmware loading: Allows or disallows loading firmware via the SNMP protocol. Command line access: Allows or disallows Command Line (CLI) access. Automatic Logout: Specify the number of minutes of inactivity before terminal sessions
automatically logout to prevent unauthorized access. The default is 5 minutes. SNMP read-only name: This parameter sets the SNMPv2 community string and SNMPv3
user name that may be used by SNMP clients for read-only access of settings. Enter your own value if you wish to secure read-only access. (Default is “public”).
SNMP read-only password: These parameters set the password for secure SNMPv3 access by the read-only user. SNMP passwords must be at least eight characters long. The default read-only password is ‘publicpwd’ (w/out quotes).
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
4-5
Chapter 4 - Managed Switch Software Setup
SNMP read/write name: This parameter sets the SNMPv2 community string and SNMPv3 user name that may be used by SNMP clients for read/write access to settings. Enter your own value if you wish to secure read/write access. (Default is “private”).
SNMP read/write password: These parameters set the password for secure SNMPv3 access by the read/write user. SNMP passwords must be at least 8 characters long. The default read/write password is ‘privatepwd’ (w/out quotes).
Terminal and web: Password set here is used for Telnet and web access. To change the administrative password, select this option. (Default password is ‘admin’).

Port Settings

The switch comes with default port settings that allow you to connect to the Ethernet Ports without any configuration. Should there be a need to change the name of the ports, negotiation settings or flow control settings, you can do this in the Port Settings menu.
4-6
Port Name: Each port in the managed switch can be identified with a custom name. Specify a name for each port here.
Admin: Ports can be enabled or disabled in the managed switch. For ports that are disabled, they are virtually non-existent (not visible in terms of switch operation or spanning tree algorithm). Choose to enable or disable a port by selecting Enabled or Disabled, respectively.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
Chapter 4 - Managed Switch Software Setup
Negotiation: All copper ports and gigabit fiber ports in the managed switch are capable of auto-negotiation such that the fastest bandwidth is selected. Choose to enable auto­negotiation or use fixed settings. 100Mbps fiber ports are fixed speed only.
Speed/Duplex/Flow Control: Each port can be set to allow speed and duplex to be negotiated to any or all Speed/Duplex/Flow control options. Network performance can be optimized by using Fixed Negotiation and restricting Speed/Duplex/Flow Control to a single value if network traffic is known.
These options are available:
10h – 10 Mbps, Half Duplex
10f – 10 Mbps, Full Duplex
100h – 100 Mbps, Half Duplex
100f – 100 Mbps, Full Duplex
1000f – 1000 Mbps, Full Duplex
On managed switches with gigabit combination ports, those ports will have two rows, a standard row of check boxes and a row labeled “SFP” with radio buttons. The SFP setting independently sets the speed at which a transceiver will operate if one is plugged in. Otherwise, the switch will use the fixed Ethernet port and the corresponding settings for it.
NOTE: The SFP settings are NOT automatically sensed or negioated. If a 100 Mbps SFP is installed in the switch, that port must be manually set on the port settings page to 100 Mbps.
Flow Control: Flow control can also be enabled or disabled, and is indicated by ‘FC’ when enabled. Devices use flow control to ensure that the receiving devices takes in all the data without error. If the transmitting device sends at a faster rate than the receiving device, then the receiving device will eventually have its buffer full. No further information can be taken when the buffer is full, so a flow control signal is sent to the transmitting device to temporarily stop the flow of incoming data.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
4-7
Chapter 4 - Managed Switch Software Setup

Port Mirroring

In an unmanaged switch, each port is filtered to only send and receive Ethernet packets to devices physically connected to that port. This makes it impossible to view the messages occurring between two other devices from a third device (such as a PC running a tool like “Wireshark”).
The mirroring option is ideal for performing diagnostics by allowing traffic that is being sent to and received from one or more source ports to be replicated out the monitor port.
Choose a monitor port. Choose the source ports to be mirrored (monitored). For each source port choose the data
to monitor: choose to monitor messages being sent (select Egress), messages being received (select Ingress) or messages being sent and received (select Both).
NOTE: The Ingress Only option is not supported on SE-SW5M-xxx and SE-SW8M-xxx models.
4-8
To view the traffic, connect a PC running network monitoring software (such as Wireshark) to the Monitor port.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
Chapter 4 - Managed Switch Software Setup

Set IP per Port

The switch may provide an IP address to one device on each network port. This feature may be turned on and off for the whole switch and individually controlled for each port.
This feature is not a DHCP service. With Set IP per Port enabled on a port, the switch will respond to a DHCP request on that port with an IP address only.
For the feature to function properly, the host and network must meet the following criteria:
1. A single host must be directly connected to the switch port.
2. The host must not require a Subnet Mask to be offered.
3. The host and network must not require a Default Gateway to be offered.
4. There must be no other DHCP server on the network.
5. VLAN’s must not be configured on the network.
NOTE: Productivity3000, ECOM/ERM modules and C-more panels require a Subnet Mask in the DHCP.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
4-9
Chapter 4 - Managed Switch Software Setup

Switch Time Settings

This screen allows you to configure the switch’s time settings, including time zone, current date and time as well as an NTP (Network Time Protocol) time server.
4-10
NTP server: You may specify an NTP server to automatically set the switch’s clock. If a DNS server is configured, you may use a fully qualified domain name; otherwise, you must specify an IP address.
Timezone: This is the local timezone where the switch is installed. The switch will offset accordingly from the current time configured in the switch.
Set Switch Date: This is where the date is set for the switch. The format of the date is Year­Month-Day (YYYY-MM-DD).
Set Switch Time: This is where the time is set for the switch. The format of the time is hour:minute:second (HH:MM:SS).
There is also a “Get Browser Time” button to synchronize the switch’s clock to your local browser’s time and a “Normalize Time” button to format the time in a manner that the switch will view it. In other words, if the seconds are left out in time field, the normalize button will show the seconds field that will be set when the Commit button is pressed.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
Chapter 4 - Managed Switch Software Setup

Manage Firmware

The Manage firmware page displays the current status of each of the two firmware images on a switch, and allows for changing which one will run the next time the switch is reset.
Default: Shows the current default firmware image to run when the switch is reset. May be changed to run a different firmware on the next reset.
Running: Shows the current running firmware image. This may be different from the current default firmware image if the switch failed to boot recently.
Version: Displays the firmware version number for each installed firmware. If the version cannot be determined, this will report “Unknown”.
Health: Shows the health of each firmware image. The health can be one of the following:
• Healthy: The firmware is running or is expected to be in good enough shape to run.
• Broken: The firmware is known to be in a state that would prevent it from booting. The Default
column will not allow this image to be selected for booting.
• Unknown: The firmware may be bootable, but the switch cannot be certain. This will happen if the switch is running the non-default firmware. This can happen if the default firmware somehow became corrupt, or if the switch lost power part way through booting.
If the firmware that is currently running is not the default, and the switch is reset without explicitly saving the default (“Commit Changes”), the current firmware will be run again. To
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
4-11
Chapter 4 - Managed Switch Software Setup
boot the firmware marked as the default, first, commit this page and then reset the switch.

Install Firmware

The Install Firmware page allows the inactive firmware (the selection not marked Running on the Manage Firmware page) to be replaced with a new version. To make the new version be the running version on the switch, after uploading the new version, you must:
• Go to the Manage Firmware page
• Select the new version as default
• Reset the switch
4-12
Firmware may be directly uploaded to the switch from the local system. MD5 Checksum (Optional): If an MD5 checksum of the file is available, it may be entered
into this field. Providing a checksum will ensure the firmware arrives at the switch intact and without any glitches. An MD5 checksum is not required.
File name: Use the “Browse” button to locate the .fwb firmware file. Firmware may also be uploaded to the switch from a remote machine serving the .fwb
firmware file. The server must be providing the file via TFTP, HTTP, HTTPS, FTP or FTPS.
Protocol: Choose one of the following protocols to retrieve the .fwb firmware file: TFTP,
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
Chapter 4 - Managed Switch Software Setup
HTTP, HTTPS, or FTP (FTPS when available). Server Address: Enter the address of the server in this field. This may be an IP address, or a
domain name if a DNS server has been configured on the System Settings page. Literal IPv6 addresses must be surrounded with square brackets. Example: the address fdda:2301: :2 must be entered as [fdda:2301: :2].
User Name: Enter the user name in this field if required by the server. Note that this is not available for TFTP.
Password: Enter the password in this field if required by the server. Note that this is not available for TFTP.
Anonymous Download: Check this box if no User Name and Password are required by the remote server.
Remote Filename: Enter the remote .fwb firmware file name into this field. The full path is required.
MD5 Checksum (Optional): If an MD5 checksum of the file is available, it may be entered into this field. Providing a checksum will ensure the firmware arrives at the switch intact and without any glitches. An MD5 checksum is not required.
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
4-13
Chapter 4 - Managed Switch Software Setup

Redundancy Settings

Another benefit of using managed switches over unmanaged switches is their redundancy capabilities. This allows you to have an Ethernet network with extra connections, so if one path between two points on the network fails, another path can be used to deliver messages. If one link or switch fails, another link or switch can take over transparently to prevent unnecessary down time. So why not just physically connect each of the switches in your network in various loop configurations such that there are always at least two paths going to and from each switch? That would create a broadcast loop that will bring a network to its knees very quickly.
In an unmanaged Ethernet network there can be only one path between any two ports on the network. If there is more than one path from one switch to another a broadcast message (and in some cases other messages) sent by the network will be forwarded until it completes a loop by returning on the second path. Since the switches forward all broadcasts and do not keep track of the messages they have sent, the returning message will be sent around the loop again and again. A single message circulating forever around a loop at high speed is clearly not a good thing, so no loops are allowed.
The limitations of having only one path are even simpler to see. If the one and only path fails for any reason, such as a broken cable or power failure at one of the switches, there are no paths left and no network traffic can get through. We need a way to add alternate paths without creating loops. A redundancy protocol such as RSTP, a loop prevention protocol, is used such that switches can communicate with each other to discover and prevent loops.
There are four methods of accomplishing redundancy in the Stride managed switches:
Spanning Tree Protocol (STP)
Rapid Spanning Tree Protocol (RSTP)
Multiple Spanning Tree Protocol (MSTP)
Real-Time Ring
The Spanning Tree Protocols (STP, RSTP and MSTP) are an industry standard and are thus compatible with other manufacturer’s managed switches for situations where both need to coexist and communicate. The recovery time, however, is slower with the Spanning Tree Protocols than with the proprietary Real-Time Ring protocol. The merits of both will be discussed in more detail below.
4-14
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
Bridge
Bridge
Root
Designated
Chapter 4 - Managed Switch Software Setup

Spanning Tree Protocols:

In the diagram below all the links are the same speed, 100 Mbps. The root ports are those connected directly to the root bridge because they have the lowest path cost (only one hop). The paths that must go through another bridge (switch) have a higher path cost (two hops) and are designated as backup ports (decisions made internal to the switch by the Spanning Tree Protocol). The ports connected directly to end stations are assigned as edge ports (manually assigned on the Spanning Tree Port Settings page) so that RSTP doesn’t waste time considering them.
End
Station
End
Station
End
Station
End
Station
End
Station
End
Station
Bridge
E
E
E
R
E
E
E
Designated
R
= Backup Port
B
= Edge Port
E
B
Path
Failure
Active Path Backup Path (blocked)
= Root Port
Bridge
R
B
R
B
B
Designated
E E E
Backup path
activated after
root path
failure
E
E
E
The Rapid Spanning Tree Protocol provides a standardized means for intelligent switches (also called bridges) to enable or disable network paths so there are no loops, but there is an alternative path if it is needed. Why is it called Rapid Spanning Tree Protocol?
• ‘Rapid’ – it is faster than the previous (and completely compatible) version called Spanning Tree Protocol (STP).
• ‘Spanning’ – it spans (connects) all of the stations and switches of the network.
• ‘Tree’ – its branches provide only one connection between two points.
In a Spanning Tree network, only one bridge (managed switch) is responsible for forwarding packets between two adjacent LAN segments to ensure that no loops exist in a LAN. To ensure that only one bridge is responsible, all other bridges on the network must cooperate with each other to form a logical spanning tree that defines the pathways that packets should take from bridge to bridge.
The logical spanning tree has exactly one bridge that is assigned the role of root. All of the other bridges need to have exactly one active path to the root. The job of the root bridge
End
Station
End
Station
End
Station
End
Station
End
Station
End
Station
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
4-15
Chapter 4 - Managed Switch Software Setup
is to notify all bridges connected in the tree that there has been a topology change and restructuring of the tree is in progress (due to a communications link failure somewhere in the network or a new switch added in the network). The root bridge is determined by the bridge priority assigned to it and the MAC address.
By default, it is the bridge with the lowest MAC address that gets assigned the role as “root”, but a specific bridge can be forced to be the root bridge by changing its bridge priority setting (a lower number with respect to other bridges means higher priority, set on the Spanning Tree Settings page).
Every communication path between each bridge (managed switch) on the network has an associated cost. This “path cost” may be determined by the speed of each segment, because it costs more time to move data at a slower speed, or the path cost can be manually configured to encourage or discourage the use of a particular network. For example, you may not want to use a particular high-speed link except when absolutely necessary because you pay a fee to a service providor for data using that path, while another path is free (no monetary cost).
The path cost is the cumulative cost of all the hops from the root bridge to a particular port on the network. A Spanning Tree network always uses the lower cost path available between a port and the root bridge. When the available network connections change, it reconfigures itself as necessary.
See the RSTP examples topic in this section for an example of how the path cost can be utilized to establish the primary and backup connections.
During the start-up of a Spanning Tree Network, all bridges (managed switches) are transmitting configuration messages (BPDUs) claiming to be the root. If a switch receives a BPDU that is “better” than the one it is sending, it will immediately stop claiming itself as the root and send the “better” root information instead. Assuming the working network segments actually connect all of the switches, after a certain period of time there will be only one switch that is sending its own root information and this switch is the root. All other switches transmit the root bridge’s information at the rate of the root bridge’s “hello time” or when the root bridge’s BPDU is received on one of their ports.
The factor for determining which switch is the root (has the “best” root information) is the bridge priority and its tie-breaker, the switch MAC address. If a switch has more than one path to get messages from the root, other information in the configuration message determines which path is the best.
Once the root bridge is determined, all other switches see the root bridge’s information and information about path (or paths) to the root. If more than one port provides a path to the root the non-root switches must decide which port to use. They check all of their ports to select the port that is receiving messages indicating the best path to the root.
The selected port for each bridge is called the root port. It provides the best path to communicate with the root. The best path is determined first by the lowest total path cost to the root (root path cost). Each port is assigned a cost (usually based on the speed) for messages received on that port. The root path cost for a given path is just sum of the individual port costs for that path. The lowest path cost indicates the shortest, fastest path to the root. If more than one path has the same cost the port priority assigned to each port, and its tie-breaker the port number pick the best path.
4-16
Stride Industrial Ethernet Switches User Manual 2nd Ed. Rev. A
Loading...