
1
User Manual
16/24 PortPOE/4 Port Combo /2 Port SFP
Managed Switch

2
Index
* ABOUTTHIS MANUAL………………..……………P.3
* CONTENTS………………………….……………..P.4
- PART1 INTRODUCTION………………………………………........P.4
- PART 2 HARDWARE DESCRIPTION………………………….…..P.4
- PART 3 WEB CONFIGURATION………………………………...…P.4
- PART 4 WEB MANAGEMENT……………………………………....P.4
- PART 5 WEB MONITOR………………………………………..…....P.6
- PART 6 WEB DIAGNOSTICS………………………………….…....P.7
- PART 7 WEB MAINTENANCE…………………………….…..…....P.7
*Chapter 1INTRODUCTION……………….…..P.8
- PART 1 INTRODUCTION FEATURES…………….………..….....P.9
- PART 2 INTRODUCTION SPECIFICATIONS….………….........P.10
- PART 3 INTRODUCTION PACKAGE CONTENTS..................P.11
*Chapter 2HARDWARE DESCRIPTION…….P.12
- PART 1 HARDWARE DESCRIPTION REAR PANEL...............P.13
* Chapter 3 WEB MANAGEMENT………........P.14
- PART 1 WEB MANAGEMENT INITIAL SWITCH......................P.15
CONFIGURATION
- PART 2WEB MANAGEMENT CONFIGURATION OPTION.....P.16
- PART 3WEB MANAGEMENT MENU TREE…………………....P.17
- PART 4 WEB CONFIGURATION CONFIGURATION…….….....P.23
- PART 5 WEB MONITOR SYSTEM………………………….….....P.80
- PART 6 WEB DIAGNOSTICS PING…………………….….........P.119
- PART 7 WEB MAINTENANCE RESTART DEVICE….………...P.117
* Glossary..........................................................P.125

3
ABOUT THIS MANUAL
PurposeThis manual gives specific information on how to operate and use the
management functions of this switch.
AudienceThis manual is intended for use by network administrators who are
responsible for operating and maintaining network equipments ;
consequently, it assumes a basic network network knowledge of
generalswitch functions, the Internet Protocol (IP), IEEE 802.3at/af
Power over Ethernet
Standard and Simple Network Management Protocol(SNMP).

4
CONTENTS
REVISION HISTORY
ABOUT THIS MANUAL
CONTENTS
FIGURES
TABLES
PART1INTRODUCTION
Product Overview
Features
Specifications
Performance
Package Contents
PART 2HARDWARE DESCRIPTION
Physcial Dimensions / Weight
Configuration Option
Front Panel
Menu Tree
PART 3WEB CONFIGURATION
Configuration
System
Information
IP & Time
LFront Panel
LED Indicator
Rear Panel
Hardware Installation
PART4WEB MANAGEMENT
Initial Switch Configuration

8
This chapter provides an overview of thisPOEWeb Smart switch, and introduces
thekey features and supported specificationsof thisPOEWeb Smart
switches.
PRODUCT OVERVIEW
ThisPOE switch is aPOEWeb Smart switch equiped with
8-ports 10/100/1000BaseT(X) plus 2-ports gigabit SFP open
slots. It provides a broad range of features for Layer2
switching and fully802.3at/afPOE/POE+ functions.
It was designed for easy installation and high performance
in an environment where the traffic is on the network and
the number of users increases continuously. The smart
and efficient power design can improve the power saving.
FEATURES
Table 1. Features
Prevent any kind of upgrading process
failure
Supports IPv4 addressing, management
and QoS
Support local and remote syslog server
with 3 levels(Info, Warning, Error)
ActiPHY, PerfectReach
LED Power management
Thermal Protection
Private VLAN(Static)
ACLs for filtering, policing, and port copy,
including ACL wizards

Telnet, Web - username/password
Telnet - SSH
SNMP v1/2c – Community strings
SNMP version 3 – MD5 or SHA
password
Port-based 802.1X
Input rate limiting per port(manual
setting or ACL)
Speed, Duplex mode, Flow control,
MTU, Power saving mode
1 sessions, up to 10 source port to one
analysis port per session
IEEE 802.3ad Link Aggregation, static
and LACP
Supports standard STP, Rapid Spanning
Tree Protocol (RSTP)
Supports dynamic data switching and
addresses learning
Traffic classes(1,2, or 4/8 active
priorities)
Storm control for UC, MC and BC
Save and Restore configuration
Upgrade & firmware image switch using
Web & console port
Support Cli command with console port
(Baudrate:115200, DataBit:8, Parity:
N,StopBit 1)

10
SPECIFICATIONS
Table 2, Specifications
IEEE 802.3at/af Power over Ethernet(POE/POE+)
IEEE 802.3ad Link Aggregation
IEEE 802.1x Port-based Network Access Control
IEEE 802.1d Spanning Tree Protocol
IEEE 802.1w Rapid Spanning Tree Protocol
8 integrated IEEE 802.3ab-compliant 10/100/1000BASE-T
Ethernet
RFC 3411 SNMP Management Frameworks
RFC 3635 Ethernet-like MIB
PERFORMANCES
Table 3, Performance
MAC Address : 8K , 4K VLAN support
Packet Memory : 4 Megabits of Integrated shared memory
Transmission Method : Store and Forward
INTRODUCTION
SPECIFICATIONS

11
Before you start to install this switch, please verify your package that contains the following
items:
OnePOEGigabit Ethernet Switch
One Power Cord
One User’s Manual (CD disk)
Note: If any of these items is found missing or damaged, please contact your local
supplier for replacement.
INTRODUCTION
PACKAGE CONTENTS

12
This chapter primarily presents hardware of thePOE switch,
physical dimenstions and functional overview would be
described.
PHYSICAL DIMENSION AND WEIGHT
263 x 160 x 44 mm (H x W x D) / 1.5kg
FRONT PANEL
The Front Panel of thePOE Web Smart Switch consists of8-port gigabit ethernet port
and 2-port gigabit SFP open slot.
The LED indicators are also located on the Front Panel.
LED INDICATORS
The LED Indicators present real-time information of
systematic operation status. The following table provides
the description of LED status and meanings.
Table 4, LED INDICATORS
Port is linked to Power Device
No Power Device is connected
Port is disable or disconnected

13
REAR PANEL
The 3-pronged power plug is placed at the rear panel of the
POE Web Smart Switch right side show as below:
HARDWARE INSTALLATION
Theattachment with a PICTURE with Power cord, RJ45
cable,
And SFP if needed. Then step1~4 to describe
HARDWARE DESCRIPTION
REAR PANEL

14
This chapter provides the entire Web SmartPOE switch
features, along with a detailed description of how to
configure each feature via web interface.
Initial Switch Configuration
This part guides you to configure and manage this switch through the web
interface. With this facility, you can easilyconfigure and
monitor through any one port of this switch.
Start up by the following steps:
1. Place the switch close to your PC/NB that you intend to
use for configuration. It will help you to check the status
of the switch by LED in front panel while working on
your PC/NB.
2. Connect the Ethernet port of your PC/NB to any port on
the front panel of the switch. Turn the switch on and
make sure the connectivity by checking LED in the front
panel of the switch.
3. Configure your PC’s IP address the same subnet with
the switch’s.
The following table describes the default necessary
login Information:
Table. Login Information
4. Open the web browser, and go to 192.168.2.1Site then
the login windows will pop out. Key in theusername
“admin” and leave password blank then clicks OK.

15
5. After you login successfully, you will see the home page
is displayed as shown below. The home page display
the Menu Bar on the left side of the screen and show the
front panel port states on the right side.
Before you start to configure, we strongly recommended
you to change the password. To change the password,
click Security and then Switch. Fill old and new password
in Password tab.
WEB MANAGEMENT
INITIAL SWITCH CONFIGURATION

16
WEB Interface
Configuration OptionConfigurable parameters have seveal forms : text field,
drop-down list, radio button and checkbox. Once you
change the parameters, please make sure to click Save
button to apply
The following table provides the description of each
button:
Table. Configuration buttons
Front Panel The default page after you login successfully is port states’
page. The port 1 to port 8 are gigabit Ethernet port and port
9 and 10 are SFP slot. When the port image is green, it
means this port is connected. Auto-refresh mode is disable
by default setting. It will update the current port state by 5
seconds if you check it. Or you can click Refresh button to
update the statesmanually. Click the each port image will
open detailed statstics of selected port.
Set specific value into the Switch
Restore the parameters to previous
saving value
Show the help information for
selected page
Logout the management web
interface of the switch
WEB MANAGEMENT
CONFIGURATION OPTION

17
MENU TREEThere isa Menu Tree in the left side of Web management
system with 4 categories: Configuration, Monitor,
Diagnostic and Maintenance. The follow table has a breifly
description of each tab.
Table. MENU TREE
Configures system contact, name,
location and timezone offset
Configures IPv4 (Statics IP
Address, DHCP client), VLAN ID
and SNTP settings
Configures Remote system log
Server which 3 levels( Infor,
Warning, Error)
Reduces LED intensity during
specified hours and configure link
change at error settings
Configures temperature 4 priority
levels and each value. Port will
shut-down if the temperature
exceeded the assigned value.
Configures ports’ connection
settings
Configures authentication method
for console and web access via
local database and RADIUS

Table. MENU TREE (Continue)
Configures read-only and R/W
community strings for SNMP
v1/v2c, engine ID for SNMP v3,
and trap parameters
Configures community strings
Configures SNMP v3 users on this
switch
Configures SNMP v3 groups
Assigns security model, Security
level, and R/W views to SNMP
groups
Configures RADIUS authentication
server.( Max 5 Server supported)
Speifies ports to group into static
trunks
Allows ports to join trunk
dynamically
Configure ports to shutdown if the
ports are in loop
1. Configures global bridge setting
for STP and RSTP
2. Configures edge port setting for
BPDU filtering, BPDU guard
and port error recovery

Table. MENU TREE (Continue)
Configure CIST port, priority and
path cost
Configures global and related
port setting
Configures IGMP snooping per
VLAN group
Configures total power supply
and eachPOE port
type(POE/POE++/disabled)
Specifies default PVID and
VLAN atrributes
Configures Port isolation
Configures QoS Ingress
Classification Settings for all
ports
Configures QoS ingress Port
policers to constrain traffic flows
and mark frames by specific rate
Configures QoS Control Entry
based on parameters such as
VLAN ID, UDP/TCP port, IPv4
DSCP or Tag Priority
Set limitation for broadcast,
unicast and multicast traffic
Table. MENU TREE (Continue)
Set source and destination port

Displays system contact, name,
location, switch’s MAC address,
system time, firmware version
Displays CPU load by realtime
SVG graph
Displays logged message with
selected level (Info, Warning,
Error, All)
Displays fully logged message
Shows the current port
temperature and status
Displays a graphic image of the
front panel to indicate current
port states
Shows the basic port statistics
Shows the count of incoming
and outgoing egress queues
Shows the QoS Control Lists
status
Shows the detailed port statistics
Shows the ACL status by
different ACL users

Table. MENU TREE (Continue)
Displays the status of associated
authentication RADIUS servers
Displays the traffic and status of
each associated RADIUS server
Displays each local port’s LACP
information included Aggr ID,
Partner system ID and Parter
key
Displays each local port’s Key,
Aggr ID, Partner system ID and
Parnter port
Displays statistics for LACP
protocol message
Display loop status for each port
Displays STP detailed bridge
status, CIST Ports and
Aggregations state
Displays CIST role, State and
uptime for each port
Displays statistics for RSTP,
STP and TCN packets
Displays statistics related to
IGMP packets passed upstream
to the IGMP Querier or
downstream to multicast clients

Table. MENU TREE (Continue)
Displays IGMP snooping groups
information
Displays total power
consumption, PD class and
power usage for each
associated port
Show the port members for
specific VLAN ID
Shows the VLAN Port Status for
Static user
Tests specific IP Address by
using ping function
Restores all settings to
manufactory default
Updates firmware of this switch
through Web UI
Selects a rescovery firmware to
boot up the device
Saves configuration to your local
management PC
Restores the previous
configuration from a file
WEB CONFIGURATION
CONFIGURATION

23
This chapter describes all of the configuration for thisPOE
Web Smart Switch.
System Information
Using System Information page to set System Contact,
Name, Location, Timezone offset
LOCATION:
▼ Configuration
▼ System
■Information
PARAMETERS:
Administrator is responsible for this
device
( Maximum Length:255 characters)
Name of this device
( Maximum Length:255 characters)
Sets the location of this device
( Maximum Length:255 characters)
System Timezone
offset (minutes)
Sets the timezone as an offset from
Greenwich Mean Time(GMT), negative
vale is meaning before GMT, postive
value is meaning of after GMT
( Range: -720~720 )
Note the unit of system timezone is minute
WEB Interface
To configure System Information
A. Click Configuration/System/Information/
B. Specify the System contact, Name, Location and
Timezone.
C. Click Save to apply the setting or Reset to restore
the previous setting

24
IP & Time
Using IP & Time page to Configure Static IP Address or
DHCP client, and SNTP server
LOCATION:
▼ Configuration
▼ System
■IP & Time
PARAMETERS:
Sets the checkbox in configured column to
enable DHCP client or uncheck for static IP
Address
Address of the VLAN specified in the VLAN ID
field. It should match with your management
PC/NB’s setting.(Default IP:192.168.2.1)
This mask identifies the host address bits
used for routing to specific subnet.
IP address of the gateway
Default VLAN ID=1, it needs to match your
management PC/NB’s VLAN ID.
(Range:1~4096)
Clicks renew button to renew IP address

25
WEB Interface
To Configure Static IP address & DHCP Client
enable/disable:
A. Click Configuration/System/IP&Time
B. Enable DHCP client vis set checkbox
C. Specify the IP address, IP Mask, IP Router and SNTP
Server IP address
D. Click Renew button to renew IP Address under DHCP
Client Enable mode
E. Click Save to apply the setting or Reset to restore
the previous setting
Log
Using Log page to configure remote system log server.
LOCATION:
▼ Configuration
▼ System
■Log
PARAMETERS:

Enable or Disable remote system
logging function
Set IP address of remote system log
server
Choose the logging event level.
Info:send info, Warnings, Errors.
Warning:send Warnings and Errors
Error:send Errors
WEB Interface
A. Click Configuration/System/Log
B. Enable remote system logging, enter Server’s IP
Address, and choose what kind of logging level to
record
C. Click Save to apply the setting or Reset to restore
the previous setting
Power Reduction(LED)
Using LED Power Reduction page to reduce LED intensity
during specificed hour(s), the maximum setting range is 24
hours.
LOCATION:
▼ Configuration
▼ Power Reduction
■LED
PARAMETERS:

Time at which LED intensity is set
LED Intensity
(10 levels increase by 10%,
0%=LED off, 100%=LED full power)
LED set full powr for a period of
time(second) when a link change
occurs.
LED set full power when a link error
occurs.
WEB Interface
A. Click Configuration/Power Reduction/LED
B. Set LED intensity for corresponding hours, then
click Add button to attach list
C. Set the duration of LED full power when a link
change occurs
D. Set the duration of LED full power when a link error
occurs
E. Click Save to apply the setting or Reset to restore
the previous setting
Ports

28
Using Port Configuration page to configure the detail
parameters for each port. You can enable/disable each port
and set port speed such as Auto, half-duplex, full-duplexfor
10Mbps, 100Mbps, 1Gbps and disabled. It also allows to set
frame size , collision policy and Power control.
LOCATION:
▼ Configuration
■Port
PARAMETERS:
Displays the status of the ports
Current:Displays the current speed
Configured :There are 7 options
Disabled :disables the port interface
Auto :Enables auto-negotiation
10Mbps HDX:Support 10Mbps half-duplex
10Mbps FDX:Support 10Mbps full-duplex
100Mbps HDX:Support 100Mbps half-duplex
100Mbps FDX:Support 100Mbps full-duplex
1Gbps FDX:Support 1Gbps full-duplex
Current TX and Current RX indicate the Flow
control state of TX and RX.
Checks the configured box to enable Flow
Control
Flow control can eliminate packet loss. When
auto-negotiation mode is set, this switch
advertises the flow control information to
linked partner. When the manual speed is set,
the Current TX field indicates if the pause
frame be transmitted from this port, and the
Current RX field indicates whether the pasue
frame are obeyed on this port
Set the Maximum frame size allows to transfer
for each port
Configure port transmit collision behavior
Discard:Discards the frames after 16 collision

happened.
Restart:Restarts the backoff algorithm after
16 collision happened.
There are 3 options for automatic power
saving mode:
ActiPHY:It will detect unused Ethernet ports
on Network devices and power
them down.
PerfectReach:an intelligent algorithm that
actively adjusts the power level
needed based on cable length.
Enabled:Enables both ActiPHY and
PerfectReach
Disabled:Disables power saving mechanism
WEB Interface
A. Click Configuration/Port
B. Specify the Speed Configured, Flow Control,
Maximum Frame Size, Excessive Collision Mode
and Power Control.
C. Click Save to apply the setting or Reset to restore
the previous setting
● Refresh button:Re-load information of the page
manually.

30
Security
You can configure user authentication for management
access and control client access ports
Password Using this Password page to change the administrator’s
password.
LOCATION:
▼ Configuration
▼ Security
▼ Switch
■ Password
PARAMETERS:
Insert the old password
(Default is blank)

Inserts new password
(Case sensitive,
Maximum is 31 characters)
Re-types the same string as New
Password field.
WEB Interface
A. Click Configuration/Security/Switch/User
B. Enter Old Password, New Password, and Confirm
New Password.
C. Click Save to apply the setting.
Security
Auth Method Using Authentication Method Configuration page to
specify the authentication Method for access management
via console and web. Access can be controlled by
local(Password) or remote access authentication(RADIUS
Server).
LOCATION:
▼ Configuration
▼ Security
▼ Switch
■ Auth Method

Specify the authentication Method for
Administrator
There are 3 options for Console and
Web
None:disablesaccess vis specified
management interface
Local:checks by password
RADIUS:checks vis RADIUS Server
This only works for Authentication
Method =”RADIUS”. When Radius
Server authentication fail, it will check
by local password if fallback is checked
WEB Interface
A. Click Configuration/Security/Switch/Auth Method
B. Select Authentication Method for console and web,
specify the Fallback check if needed.
C. Click Save to apply the settingor Reset to restore
the previous setting.
Security
SNMP Any Network Management System (NMS) running the
Simple Network Management Protocol(SNMP) can manage
the device which equipped with SNMP agent and attached
with Management information Bases(MIBs). The SNMP is a
common comminunication protocol for managing devices
on a network. SNMP is typically using for configuring and
monitoring devices.

33
The switch supports SNMPv1, v2c and v3.It continously
monitors the status of the switch hardware as well as the
traffic passing through its’ ports.
SNMP System Using the SNMP System Configuration page to configure
SNMP settings, Community name, trap host and public
traps as well as the throttle of SNMP, A SNMP manager
must pass the authentication by identifying both
community names, then it can access the MIB information
of the switch. So, both parties must have the same
community name.
LOCATION:
▼ Configuration
▼ Security
▼ Switch
▼ SNMP
■ System
PARAMETERS:
SNMP System Configuration
Enables or disables SNMP service
Specifies the SNMP version
(SNMP v1, SNMP v2c, SNMP v3)
The community for Read access
The community for Read/Write access
The SNMP v3 Engine ID,It is only
available for SNMP v3 (10-64 HEX
digits, excluding a string of all 0’s or
F’s)
Enables or disables SNMP traps
Specifies the Trap Version
(SNMP v1, SNMP v2c, SNMP v3)
Specifies the community string for
SNMP trap packets

Specifies the IP Address of
management PC/NB to get trap
packets
Trap Authentication
Failure
Issues a notification message to
specified IP trap managers whenever
of a SNMP request fails.
Trap Link-up and
Link-down
Issues a notification message to
specified IP trap managers whenever
a port link is established or broken
Enables or disables sending
notification as inform message.
It is only available for SNMP v2c and
SNMP v3.
Inform mode can guarantee the
message is received.
The time for waiting a ACK
(Range:0-2147, unit:second)
The Maximum numbers of re-try times
before gotting ACK
Trap Probe Security
Engine ID
Specifies whether or not to use the
engine ID of the SNMP trap probe in
trap and inform messages(It is only
available for SNMP v3)
Displays the SNMP Trap security
engine ID.
(It is only available for SNMP v3)
Displays the Trap security Name
(It is only available for SNMP v3)
WEB Interface
To setup SNMP System & Trap Configuration
A. ClicksConfiguration/Security/Switch/SNMP/System
B. Set Mode to Enable SNMP service and specify
SNMP version then change the Read and Write
Community access strings if required and set the
engine ID

35
C. In the SNMP Trap Configuration table, enable Trap
mode to allow the switch to send SNMP traps.
Specifies the trap version, trap community and IP
Address of management PC/NB which will receive
the trap messages. Select inform mode for SNMP
v2c and SNMP v3 clients. Set Security engine ID for
SNMP v3 client.
D. Click Save to apply the setting or Reset to restore
the previous setting.
Communities Using SNMPv3 Community Confugration page to set
access community strings. It should include all
community strings for SNMPv1, SNMPv2c and SNMPv3.

36
LOCATION:
▼ Configuration
▼ Security
▼ Switch
▼ SNMP
■ Communities
PARAMETERS:
Specifies the community string to allow
access the SNMP agent.(Range:1-32)
Specifies the IP Address of the SNMP client
Specifies the subnet mask of the SNMP client
WEB Interface
To setup SNMP Community access string:
A. ClicksConfiguration/Security/Switch/SNMP/Commu
nities
B. Set the IP Address and subnet mask for the default
community string or delete for security.
C. Add any new Community strings by click Add new
community button
D. Click Save to apply the setting or Reset to restore
the previous setting.
Users Using SNMPv3 User Configuration page to set a specific
Engine ID, Name, security level and the types of
authentication and privacy for each SNMPv3 user.

37
LOCATION:
▼ Configuration
▼ Security
▼ Switch
▼ SNMP
■ Users
PARAMETERS:
The engine identifier for SNMP agent.
(It is only available for SNMPv3)
The unique username for SNMP agent
(Range:1-32 characters)
There are 3 options:
NoAuth, NoPriv:no authentication and
encryption during the
communication
Auth,NoPriv:with authentication but no
encryption during the
cummunication
Auth,Priv: with both authentication and
encryption during the
communication
The methods for authentication
(None, MD5, SHA,)
A plain text as password(Range:1-32
characters)
The encryption algorithm
( none or 56-bit DES)
A string for Privacy pass phrase
(Range:8-40 characters)
WEB Interface
To setup SNMPv3 User:
A. ClicksConfiguration/Security/Switch/SNMP/Users
B. Clicks “Add new user” to configure a username
C. Enters a remote Engine ID

38
D. Defines username, security level, authentication
and privacy settings
E. Click Save to apply the setting or Reset to restore
the previous setting.
Groups Using SNMPv3 Group Configuration page to configure
SNMPv3 Group, it defines a specific SNMPv3 group and
restricts assigned user’s access policy for read and write
views.
LOCATION:
▼ Configuration
▼ Security
▼ Switch
▼ SNMP
■ Groups
PARAMETERS:
The user security model, 3 options:
(v1, v2, usm=User-based security Model)
The username which connect to SNMP
agent(Range:1-32 characters)
WEB Interface
To setup SNMPv3 Group:
A. ClickConfiguration/Security/Switch/SNMP/Groups
B. Click“Add new group” to create a new group

39
C. Select a Security Model( SNMPv1, SNMPv2c or
User-based Security Model)
D. Select a Security Name
E. Enter a Group Name
F. Click Save to apply the setting or Reset to restore
the previous setting.
Figure
Views Using SNMPv3 View Configuration page to define the
restricts access policy for specific MIB tree The
default_view includes access ability for whole MIB tree.
LOCATION:
▼ Configuration
▼ Security
▼ Switch
▼ SNMP
■ Views
PARAMETERS:
The Name of SNMP view
(Range:1-32 characters)
Indicates the OID is included or excluded
in this SNMP view
Object identifiers of branches within the
MIB tree

40
WEB Interface
To setup SNMPv3 Views:
A. ClickConfiguration/Security/Switch/SNMP/Views
B. Click “Add new view” to create a new view
C. Enter a View Name, Type and OID Subtree
D. Click Save to apply the setting or Reset to restore
the previous setting.
Access Using SNMPv3 Access Configuration page to define the
Access rights for portion of MIB tree. You can have more
than one Access policy for SNMPv3 group.
LOCATION:
▼ Configuration
▼ Security
▼ Switch
▼ SNMP
■ Access
PARAMETERS:
The Name of SNMP group
(Range:1-32 characters)
The user security model, 3 options:
(v1, v2, usm=User-based security Model)
There are 3 options:
NoAuth, NoPriv:no authentication and
encryption during the
communication

Auth,NoPriv:with authentication but no
encryption during the
cummunication
Auth,Priv: with both authentication and
encryption during the
communication
Select View Name for Read Access
Select Write Name for Write Access
WEB Interface
To setup SNMPv3 Accesss:
A. ClickConfiguration/Security/Switch/SNMP/Access
B. Click “Add new access” to create a new view
C. Select a Group Name, security model, security level,
Read View and Write View.
D. Click Save to apply the setting or Reset to restore
the previous setting.
Network
ACL ports Using ACL Ports Configuration page to specify the
assigned port’s re-actions when certain kind of frames are
matchs. These behaviors include “Port Redirect”, “Mirror”,
“Logging” and “Shutdown”.
LOCATION:
▼ Configuration
▼ Security
▼ Network
▼ ACL
■Ports

Specify the Policy ID
(Range:0-255)
Permit or deny the forwarding if policy is
matched
Specify a Rate Limiter ID, the mapping
table is in “Rate Limiters” page
Specify the packets redirect to which port if
policy matched
Specify the packets also forward to
predefined mirror port if policy matched
Enable logging the matched frames to
system log
Shut down the port if policy matched
Show the number of frames which match
the specific policy
WEB Interface
To Configure ACL policies and its’ re-action:
A. ClickConfiguration/Security/Network/ACL/Ports
B. Assign policy which is set on ACE Configuration
page. Specify re-action behaviors when frames
matcheds, it includes “Port Redirect”, “Mirror”,
“Logging”, “Shutdown”.
C. Click Save to apply the setting or Reset to restore
the previous setting.
● Refresh Button:Refresh the Counter of frames
matched the policy.
● Clear Button:Clean the Counter of frames
matched the policy

43
.
.
Rate Limiters Using ACL Rate Limiter Configuration page to configure up
to 16 Rate Limit options
LOCATION:
▼ Configuration
▼ Security
▼ Network
▼ ACL
■ Rate Limiters
PARAMETERS:
Rate Limit Identifier (Range:1-16)
The dropping threshold, the allowed value:
0-3276700 in pps,0, 100, 2*100,
3*100…100000 in kbps
Unit of measure( pps, kbps)

44
WEB Interface
To Configure ACL Rate limitation:
A. Click Configuration/Security/Network/ACL/Rate
Limiters
B. Specify Rate and Unit for Rate Limiter ID(1-16)
C. Click Save to apply the setting or Reset to
restore the previous setting.
Access Control List Using Access Control List page to make up of ACE s deine
on this switch. Each row describes the ACE that is defined.
You can define filtering rules for an ACL policy, for a
specific port or for all ports.
LOCATION:
▼ Configuration
▼ Security
▼ Network
▼ ACL
■ Access Control List

Specific port or All ports
Indicate the Policy and Bitmask of the ACE
Indicate the frame type of ACE.
Any:match any frames
Ethernet:match Ethernet type frames
ARP:match ARP/RARP frames
IPv4:matchIPv4 frames
IPv4/ICMP:match IPv4 frames with ICMP
Protocol
IPv4/UDP:match IPv4 frames with UDP
Protocol
IPv4/TCP:match IPv4 frames with TCP
Protocol
IPv4/Other:match IPv4 frames which are
not ICMP/UDP/TCP
Permit or deny frames when the frames
matched
Indicate the rate limiter number of the ACE.
Indicate the port redirect operation of the ACE
Specify the mirror operation of this port
Indicate the number of times the ACE was hit
by a frame
Insert a new ACE before the current row
Edit the ACE row
Move the ACE up the list
Move the ACE down the list
Delete the ACE
The lowest plus sign adds a new entry at
the buttom of the ACE listings
WEB Interface
To Configure ACL Rate limitation:
A. Click
Configuration/Security/Network/ACL/Access

46
Control List
B. Click the button to add new ACE, or use the
button to modify the ACE row
C. Specify the parameters of the ACE
D. Click Save to apply the setting, Reset to restore
the previous setting or Cancl to back ACE list
● Clear Button:Clean the Counter of frames
matched the policy
● Remove All Button:Delete all ACE rows
● Auto-refresh:Refresh the page automatically

47
AAA Using the Authentication Server Configuration page to build
up an authenticated mechanism with RADIUS server.
LOCATION:
▼ Configuration
▼ Security
■ AAA
PARAMETERS:
Common Server Configuration
The maximum waiting time to wait for a reply
from server (Range:3-3600 seconds)
The time after which the switch
Considers an authentication server to be
dead if it does not reply
RADIUS Authentication Server Configuration
Enable the RADIUS Authentication Server by
Check this box
IP Address of RADIUS server
The UDP port to use on the RADIUS
authentication Server.
Encryption key(Maximum characters:29)
WEB Interface
To Configure ACL Rate limitation:
A. Click Configuration/Security/AAA
B. Specify the parameters of the RADIUS
Authentication Server.
C. Click Save to apply the setting or Reset to
restore the previous setting.

48
Port Trunking(Static) Using Aggregation Mode Configuration page to configure
the Aggregation Mode and Members of each static group.
LOCATION:
▼ Configuration
▼ Port Trunking
■ Static
PARAMETERS:
Enable:The source MAC Address can be
used to calculate the destination

port for the frame.(Disable is not)
Enable:The Destination MAC Address can
be used to calculate the destination
port for the frame. (Disable is not)
Enable:The IP Address can be used to
calculate the destination port for
the frame.(Disable is not)
Enable:The TCP/IP port number canbe
used to caclulate the destination port
for the frame.(Disable is not)
Normal:There is no aggregation
Note:Only one group ID is valid per port.
WEB Interface
To Configure a Static Trunk:
A. Click Configuration/Port Trunking/Static
B. Select load-balancing method in hash code
contributors
C. Assign port members to specific trunking group
D. Click Save to apply the setting or Reset to
restore the previous setting.

50
Port Trunking(LACP) Using LACP Port configuration page to enable LACP on
selected ports, configure key and LACP mode.
LOCATION:
▼ Configuration
▼ Port Trunking
■ LACP
PARAMETERS:
Control whether LACP is enabled on this
switch port. LACP will from an aggregation
when 2 or more ports are connected to the
same partner. LACP can from max 12 LLAGs
per switch and GLAGs per stack.
The Key value incurred by the port.(Range:

1-65535). The “Auto” setting will set the key
as appropriate by the physical link speed,
10Mb=1, 100Mb=2, 1Gb=3. Using the
specific setting, a user-defined value can be
entered. The same key setting ports can
participate in the same aggregation group.
The Role shows the LACP activity status. The
“Active” will transmit LACP packets each
second, while “Passive” will wait for a LACP
packet from a partner.
WEB Interface
To Configure theLACP:
A. Click Configuration/Port Trunking/LACP
B. Enable LACP on all of the ports in an LAG
C. Divide the LAG by different key
D. Set one Active role port in one LAG at least
E. Click Save to apply the setting or Reset to
restore the previous setting.

52
Loop Protection Using Loop Protection page to configure loop protection
LOCATION:
▼ Configuration
■ Loop Protection
PARAMETERS:
Controls whether loop protections is enabled
The interval between each loop protection
PDU sent on each port. Valid values are 1 to
10 seconds
The period(in seconds) for which a port will
be kept disabled in the event of loop is
detected (and the port action shuts down the
port). Valid values are 0 to 604800 seconds(7
days). A value of zero will keep a port
disabled (until next device restart)
Control whether loop protection is enabled on
this switch port
Configure the action performed when a loop
protection is detected on a port. Valid values
are “Shutdown Port”, “Shutdown Port and
Log”, or “Log only”
Control whether the port is actively
generating loop protection PDU’s, or whether
it is just passively looking for looped PDU’s
WEB Interface
To Configure the Loop Protection:
A. Click Configuration/Loop Protection
B. Enable Loop Protection, configure Transmission
Time and Shutdown Time
C. Specify reaction for each port when loop
protection is detected

53
D. Click Save to apply the setting or Reset to
restore the previous setting.
Spanning Tree The Spanning Tree Algorithm can be used to detect and
disable network loops and provide backup links between
switches, bridges and routers. This allows the switch to
cooperate with other bridging devices.
Spanning Tree
(Bridge Settings) Using the STP Bridge Settings page to configure settings
for STA which apply globally setting.

54
LOCATION:
▼ Configuration
▼ Spanning Tree
■ Bridge Settings
PARAMETERS:
The STP protocol version setting, the
Valid values are STP(IEEE 802.1D)and
RSTP(IEEE 802.1w).
Control the bridge priority, low numeric
values have higher priority
The delay used by STP Bridges to transit
Root and Designated Ports to
forwarding(used in STP compatible
mode). (Range:4-30 seconds)
The Maximum age of information
transmitted by the Bridge when it is the
Root Bridge. (Range:6-40 seconds).
Max Age must be <=(FwdDelay-1)*2
This define the initial value of remaining
Hops for MSTI information generated at
the boundary of an MSTI region.
(Range:6-40 hops)
The number of BPDU’s bridge port can
send per seconds. When exceed,
transmission of the next BPDU will delay.
(Range:1-10 BPDUs per second)
Control whether the port explicitly
configured as Edge will transmit and
receive BPDUs.
Control whether a port explicitly
configured as Edge will disable itself upon
reception of a BPDUs. The port will enter
the error-disables state and will be

removed from the active topology.
Control whether a port in the error-disable
state automatically will be enabled after a
certain time. If recovery is not enabled,
ports have to be disabled and re-enabled
from normal STP operation. The
condition is also cleared by a system
reboot.
Port Error
Recovery Timeout
The time to pass beofre a port in the
error-disabled state can be
enabled.(Range:30-86400seconds)
WEB Interface
To Configure STP Configuration:
A. Click Configuration/Spanning Tree/Bridge
Settings
B. Configure the required attributes
C. Click Save to apply the setting or Reset to
restore the previous setting.

56
Spanning Tree
(Bridge Ports) Using the STP CIST Ports Configuration page to configure
STA attributes for interfaces when the Spanning Tree mode
is set to STP or RSTP or for Interfaces in the CIST.
STA interface attributes include path cost, priority, edge
port, automatic detection of an edge port and PtP link type
LOCATION:
▼ Configuration
▼ Spanning Tree
■ Bridge Ports
PARAMETERS:
CIST Aggregation Port Configuration
Control whether STP is enabled on this
switch port
Control the Path Cost incurred by this
port. The “Auto” setting will set the path
cost as approciate by physical link speed,
using the 802.1D recommended values.
Using “specific” settings, a user-defined
value can be entered. The path cost is
used when establishing the active
topology of the network. Low path cost
ports are chosen as forwarding ports in
favour of higher path cost ports.
(Range:1-200000000)
Control the port priority. This can be used
to control priority of the ports having
identical port cost.
Enable this option if this port is connected
to an end node or at the end o the bridge.
Control whether automatic edge detection
is enabled on a bridge port
If enabled, cause the port not to be
selected as Root port for the CIST, even if

it has the best spanning tree priority
vector. This features is also known as
“Root Guard”
If enabled, cause the port not to
propagate received topology change
notifications and topology changes to
other ports.If set it can cause temporary
loss of connectivity after changes in a
spannig tree’s active topology as a result
of persistently incorrect learned station
location information. It is set by a network
administrator to prevent bridges extenal
to a core region of the network, causing
address flushing in that region, possibly
because those bridges are not under the
full control of the administrator or the
physical link state of the attached LANs
transits frequently.
If enabled, cause the port to disable itself
upon receiving valid BPDU’s. Contrary
to the similar bridge setting, the port
Edge status desn’t effect this settings.
Control whether the port connects to a
point-to-point LAN rather than a shared
medium. This can be automatically
determined, or forced either true or false.
Transtion to the forwarding state is faster
for point-to-point LAns than for shared
media.
WEB Interface
To Configure STP CIST Port Configuration:
A. Click Configuration/Spanning Tree/Bridge Port s
B. Configure the required attributes
C. Click Save to apply the setting or Reset to
restore the previous setting.

58
IGMP SNOOPING
Multi-casting is using to support real-time applications
such as video-conferencing or streaming audio. A
multicast server doesn’t have to establish a separate
connection to each client. It merely broadcasts its’ service
to the network. By this approach, it will increase a lot of
broadcast traffic in the network.
This switch can use IGMP to filter multi-cast traffic. IGMP
snooping can be used to passively monitor or snoop the
packets exchanging between multi-cast hosts and clients.
Then, it can set its filters

59
IGMP SNOOPING
Basic Configuration Using the IGMP Snooping Configuration page to configure
Global and Port Related settings to control the forwarding
of multi-cast traffic. This can decrease broadcast traffic to
improve the network performance.
LOCATION:
▼ Configuration
▼ IPMC
▼ IGMP Snooping
■ Basic Configuration
PARAMETERS:
Control whether the IGMP snooping
is enabled
Unregistered IPMCv4
Flooding Enabled
Enable unregistered IPMCv4
Flooding
Port Related Configuration
Specify which porta act as router
ports.A Router port is a port on the
Ethernet switch that leads toward the
layers multi-cast device or IGMP
querier. If an aggregation member
port is selected as a router port. The
whole aggregation will act as a router
port.
Delete a member port of mult-cast
Service immediately if a leave packet
is received at this portEnable Fast
Leave on this port.

60
WEB Interface
To Configure Global and Port related settings for IGMP
Snooping:
A. Click Configuration/IPMC/IGMP Snooping/Basic
Configuration
B. Specify the required IGMP Snooping Settings
C. Click Save to apply the setting, Reset to restore
the previous setting.

61
IGMP SNOOPING
VLAN Configuration Using the IGMP Snooping VLAN Configuration page to
configure IGMP Snooping settings.
LOCATION:
▼ Configuration
▼ IPMC
▼ IGMP Snooping
■ VLAN Configuration
PARAMETERS:
Enable the per-VLAN IGMP
Snooping. Up to 32 VLANs can be
selected for IGMP Snooping.
WEB Interface
To Configure IGMP Snooping VLAN:
A. Click Configuration/IPMC/IGMP Snooping/VLAN
Configuration
B. Specify the required IGMP Snooping VLAN
Settings
C. Click Save to apply the setting, Reset to restore
the previous setting.
● Refresh Button:Refresh the Display table
Starting from the first entry of the VLAN table.

62
Power Over EthernetThis Switch provides IEEE 802.3af/atPOE functions, it provides
PD class power allocation and power reserved manually
with different priority policy. The total power is 120 Watt.
Using Power Over Ethernet Configuration to setPOE mode,
its priority and Maximum power per port:
LOCATION:
▼ Configuration
■POE
PARAMETERS:
It depends on power supply. We provides
120 Watt for this model
ThePOE Mode represents thePOE
operating mode for the port.
Disabled:Turn thePOE off
POE:Enable 802.3af(Class 4 PD
Maximum power is 15.4Watt)
POE+:Enable 802.3at(Class 4 PD
Maximum power is 34.2Watt)
There are 3 priority levels.(Low, High,
Critical). The priority is used in the case
where the remote devices requires more
power than power supply can deliver.
In this case the port with lowest priority will
be turn off starting from the port with the
highest port number.
WEB Interface
To ConfigurePOE functions:
A. Click Configuration/POE
B. Specify Disabled/POE/POE+ and priority for
each port
C. Click Save to apply the setting, Reset to restore

63
the previous setting.
IEEE 802.1Q VLAN
This switch provides Layer 2 VLAN for following reasons;
By appropriated settings to eliminate broadcast storms in
large networks. This also provide a more secure and
cleaner network environment.
VLAN provides greater network performance by reducing
broadcast traffic and also provides high level of network
security since traffic must pass through a configured Layer
3 link to reacha different VLAN.

64
VLAN Configuration Using VLAN Membership Configuration page to set VLAN
group:
LOCATION:
▼ Configuration
▼ VLANs
■ VLAN Membership
PARAMETERS:
ID of this particular VLAN
(Range:1-4096)
The name of VLAN
(Range:up to 32 characters)
A row of checkboxes for each port is
displayed for each VLAN ID
Check the box . to include a port in a VLAN
Check the box as shown to include a port
in a forbidden port list.
Uncheck the box .. to remove a port from a
VLAN
WEB Interface
To Configure IEEE 802.1Q VLAN groups:
A. Click Configuration/VLANs/VLAN Membership
B. Change Default VLAN ID=1, if necessary.
C. Click “Add New Entry” to create a new VLAN
group with ID, Name and port members.
D. Click Save to apply the setting, Reset to restore
the previous setting.
● Refresh Button:Refresh the Display table
Starting from the first entry of the VLAN table.

65
VLAN Ports Using VLAN Ports Configuration page to set VLAN attributes for specific
interfaces, including processing frames with embedded
tags, Ingress filtering, setting the accepted frame types and
assigning Port VLAN ID.
LOCATION:
▼ Configuration
▼ VLANs
■ Ports
PARAMETERS:
Ethertype for
Custom
S-ports
This field specifies the ether type used for
Custom S-ports. This is a global setting for all
the Custom S-ports.
The logical port number of this row
Port can be one of the following types:
Unaware, Customer port(C-port),
Service Port(S-port),
Custom Service port(S-custom-port).
If Port Type is Unaware, all frames are
classified to the Port VLAN ID and tags are
not removed
Enable ingress filtering on a port by checking

the box. This parameter affects VLAN ingress
processing. If ingress filtering is enabled and
the ingress port is not a member of the
classified VLAN of the frame, the frame is
discarded. By default, ingress filtering is
disabled.
Determines whether the port accepts all
frames or only tagged/untagged frames. This
parameter affects VLAN ingress processing.
If the port only accepts tagged frames,
untagged frames received on this port will be
discarded
Configure VLAN mode to “None” or “Specific”,
None:a VLAN tag with classified VLAN ID is
Inserted in frames transmitted on the
port.This mode is normally
used for ports connected to
VLAN aware swithces.
Specific:a Port VLAN ID can be configured.
Untagged frames received on the
port are classified to the Port VLAN
ID. If If VLAN awareness is
disabled, all frames received on the
port are classified to the Port VLAN
ID. If the classified VLAN ID of a
frame transmitted on the port is
different from the Port VLAN ID, a
VLAN tag with the classified VLAN
ID is inserted in the frame.
Configures the VLAN identifier for the port.
The allowed values are 1 through 4095. The
default value is 1.
Note: The port must be a member of the
same VLAN as the Port VLAN ID.
Determines egress tagging of a port.
Untag_pvid - All VLANs except the configured
PVID will be tagged. Tag_all - All VLANs are
tagged. Untag_all - All VLANs are untagged

67
WEB Interface
To Configure attributes for VLAN port member:
A. Click Configuration/VLANs/Ports
B. Configure the required settings for each
interface.
C. Click Save to apply the setting, Reset to restore
the previous setting.

68
Private VLAN
Private VLAN provides port-base security and isolation between ports within
assigned VLAN. Data Traffic on ports assigned to a private
VLAN can only be forwarded to or from uplinks ports.
Ports isolated in the private VLAN are designated as
downlink ports and can only communicate to uplink ports
with the same private VLAN.
PVLAN Membership Using the private VLAN Membership Configuation page to assign
ports to specific private VLAN.
LOCATION:
▼ Configuration
▼ Private VLANs
■ PVLAN Membership
PARAMETERS:
The ID of this particular private VLAN
A row of check boxes for each port is
displayed for each private VLAN ID. To
include a port in a Private VLAN, check the
box. To remove or exclude the port from the
Private VLAN, make sure the box is
unchecked. By default, no ports are
members, and all boxes are unchecked
WEB Interface
To Configure VLAN port member for PVLANs:
A. Click Configuration/Private VLANs/PVLAN
Membership
B. Add or delete members of any existing PVLAN,
or click “Add New Private VLAN” to create new
PLVAN.
C. Click Save to apply the setting, Reset to restore
the previous setting.

69
Port Isolation Using the Port Isolation Configuration page to prevent
communications between customer ports within the same
private VLAN
LOCATION:
▼ Configuration
▼ Private VLANs
■ Port Isolation
PARAMETERS:
A check box is provided for each port of a
private VLAN. When checked, port isolation is
enabled on that port. When unchecked, port
isolation is disabled on that port. By default,
port isolation is disabled on all ports.
WEB Interface
To Configure PVLAN port isolation:
A. Click Configuration/Private VLANs/Port Isolation
B. Make the checked ports are isolated from each
other.
C. Click Save to apply the setting, Reset to restore
the previous setting.

70
Quality of Service
The switch supports 4 QoS queues per port with stricted or weighted fair queuing
scheduling. This QoS classification mechanism is
implemented in a QoS control list (QCL). The QoS class
assigned to a frame is used throughout the device for
providing queuing, scheduling and congestion control
guarantee to the frame according to what was configured
for that specific QoS class.
The switch also allows you to configure QoS classification criteria and service
polices. The switch’s resources can be prioritized to meet
the requirements of specific traffic types on a per hop
basis. Each packet is classified upon entry into network
based on Ethernet type, TCP/UDP port, DSCP and ToS.

71
Port Classification Using the QoS Ingress Port Configuration page to set the
basic QoS parameters for a port, including the default
traffic class, DP Level (IEEE 802.1p), user priority and drop
eligible indicator.
LOCATION:
▼ Configuration
▼ QoS
■ Port classification
PARAMETERS:
The port number for which the configuration
below applies.
Controls the default QoS class, i.e., the QoS
class for frames not classified in any other
way. There is a one to one mapping between
QoS class, queue and priority. A QoS class of
0 (zero) has the lowest priority.
Note: If the QoS class has been dynamically
changed, then the actual QoS class is
shown in parentheses after the
configured QoS class.DP level
Controls the default Drop Precedence Level,
i.e., the DP level for frames not classified in
any other way.
Controls the default Priority Code Point(PCP)
for untagged frames.
Controls the default Drop Eligible Indicator
(DEI) for untagged frames.
WEB Interface
To useQoS Ingress Port Configuration:
A. Click Configuration/QoS/Port Classification
B. Set QoS Class priority for each port, DP Level
and PCP, DEI for untagged frames.
C. Click Save to apply the setting, Reset to restore
the previous setting.

72
Port Policing The Port policing is useful in constraining traffic flows and
marking frames avobe specific rates. Policing is primarily
useful for data flows and voice or video flows because
voice video usually maintains a steady rate of traffic.
LOCATION:
▼ Configuration
▼ QoS
■ Port Policing

The port number for which the configuration
below applies.
Controls whether the policer is enabled on
this switch port.
Controls the rate for the policer. The default
value is 500. This value is restricted to
100-1000000 when the "Unit" is "kbps" or
"fps", and it is restricted to 1-3300 when the
"Unit" is "Mbps" or "kfps".
Controls the unit of measure for the policer
rate as kbps, Mbps, fps or kfps . The default
value is "kbps".
If flow control is enabled and the port is in
flow control mode, then pause frames are
sent instead of discarding frames.
WEB Interface
To Configure QoS Ingress Port Policiers:
A. Click Configuration/QoS/Port Policing.
B. Evoke which port need to enable the QoS
Ingress Port Policers and type the Rate
limitcondition
C. Scroll down to select Rate unit.
D. Click Save to apply the setting, Reset to restore
the previous setting.

74
QoS Control List Using QoS Control List Configuration page to configure Quality
of Service policies for handling ingress packets based on
Ethernet type, VLAN ID, TCP/UDP port, DSCP, ToS or VLAN
priority tag.
LOCATION:
▼ Configuration
▼ QoS
■ QoS Control List

Indicate the index of QCE.
Indicates the list of ports configured with the
QCE.
Indicates the type of frame to look for
incomming frames. Possible frame types are:
Any::The QCE will match all frame type.
Ethernet::Only Ethernet frames (with Ether
Type 0x600-0xFFFF) are allowed.
LLC:Only (LLC) frames are allowed.
SNAP: Only (SNAP) frames are allowed.
IPv4:The QCE will match only IPV4 frames.
IPv6:The QCE will match only IPV6 frames
Display the OUI field of Source MAC address,
i.e. first three octet (byte) of MAC address.
Specify the type of Destination MAC
addresses for incoming frame.
Possible values are:
Any:All types of Destination MAC addresses
are allowed.
Unicast:Only Unicast MAC addresses are
allowed.
Multicast:Only Multicast MAC addresses are
allowed.
Broadcast:Only Broadcast MAC addresses
are allowedd.
The default value is 'Any'.
Indicates (VLAN ID), either a specific VID or
range of VIDs. VID can be in the range
1-4095 or 'Any'
Priority Code Point: Valid value PCP are
specific(0, 1, 2, 3, 4, 5, 6, 7) or
range(0-1, 2-3, 4-5, 6-7, 0-3, 4-7) or 'Any'.
Drop Eligible Indicator: Valid value of DEI can
be any of values between 0, 1 or 'Any'.
Indicates the classification action taken on
ingress frame if parameters configured are

matched with the frame's content.
There are three action fields:
Class, DPL and DSCP.
Class:Classified QoS class.
DPL:Classified Drop Precedence Level.
DSCP:Classified DSCP value.
Insert a new QCE before the current row
Edit the QCE row
Move the QCE up the list
Move the QCE down the list
Delete the QCE
The lowest plus sign adds a new entry at
the buttom of the QCE listings
WEB Interface
To Configure QCE Configuration:
A. Click Configuration/QoS/QoS Control List.
B. Click the to add new QoS Control List
C. Scroll all parameters and evoke the Port Member
to join the QCE rules.
D. Click Save to apply the setting, Reset to restore
the previous setting.

77
Storm Control Using the Storm Control Configuration page to set limitation of broadcast,
multi-cast and unknown uni-cast traffic to control traffic storms
when switch device is malfunctioning. Traffic storm can degrade
the network performance or halt the network.
LOCATION:
▼ Configuration
▼ QoS
■Storm Control
PARAMETERS:
The settings in a particular row apply to the
frame type listed here: Unicast, Multicast or
Broadcast.
Enable or disable the storm control status for
the given frame type.
The rate unit is packets per second (pps).
Valid values are:1, 2, 4, 8, 16, 32, 64, 128,
256, 512, 1K, 2K, 4K, 8K,
16K, 32K, 64K, 128K,
256K, 512K , 1024K,
2048K, 4096K, 8192K,
16384K or 32768K.

78
WEB Interface
To Configure QCE Configuration:
A. Click Configuration/QoS/Storm Control.
B. Enable Storm Control for Broadcast, Multi-cast
and unknow uni-cast and Scroll down to select
the Rate value.
C. Click Save to apply the setting, Reset to restore
the previous setting.
Port Mirroring Using the Mirror Configuration page to mirror traffic from any
source port to a target port.
LOCATION:
▼ Configuration
■ Mirroring
PARAMETERS:
The logical port for the settings contained in
the same row.
Select mirror mode.
Rx only:Frames received on this port are
mirrored on the mirror port. Frames
transmitted are not mirrored.
Tx only:Frames transmitted on this port are
mirrored on the mirror port. Frames
received are not mirrored.
Disabled:Neither frames transmitted nor
frames received are mirrored.
Enabled:Frames received and frames

transmitted are mirrored on the
mirror port.
Note: For a given port, a frame is only
transmitted once. It is therefore not
possible to mirror Tx frames on the
mirror port. Because of this, mode for
the selected mirror port is limited to
Disabled or Rx only.
WEB Interface
To Configure Mirroring Configuration:
A. Click Configuration/Mirroring.
B. Select the destination port to which all mirrored
traffic will be sent
C. Set the mirror mode on any of source ports to be
mirrored.
D. Click Save to apply the setting, Reset to restore
the previous setting.

80
This chapter describes how to monitor all of the basic
Functions, Configurations, System log, Traffic views and
the switch (ports) states...etc.
Under the Monitor/System menu, it displays system
information, Real-time CPU load, log and detailed syslog.
SYSTEM
INFORMATION Using System Information page to verfiy the firmware and
hardware versions. It also displays System Contact, Device
name, Location and System uptime.
LOCATION:
▼ Monitor
▼ System
■ Information
PARAMETERS:
The system contact configured in
Configuration| System | Information | System
Contact.
The system name configured in Configuration
| System | Information | System Name.
The system location configured in
Configuration | System | Information | System
Location.
The MAC Address of this switch
The Chip ID of the switch
The current (GMT) system time and date. The
system time is obtained through the Timing
server running on the switch, if any.
The period of time the device has been
operational.
The software version of this switch

The date when the switch software was
produced
WEB Interface
To Update the System Information:
A. Click Monitor/System/Information.
● Click “Refresh” button to refresh the page
information manually.
● Check “Auto-refresh” checkbox to update page
information automatically
CPU Load This page display the CPU Load, using an SVG graph. The load
is measured as average over the last 100ms, 1 sec and 10
seconds intervals. The last 120 samples are graphed and the
last numbers are displayed as text as well. In order to display
the SVG graph, your browser must support SVG format.
Consult the SVG wiki for more information on browser support.
Specifically, at the time of writing, Microsoft Internet Explorer
will need to have a plug-in installed to support SVG.
LOCATION:
▼ Monitor
▼ System
■ CPU Load

82
WEB Interface
To Update the System Information:
B. Click Monitor/System/CPU Load.
● Default the“Auto-refresh” checkbox is checked to
update page information automatically
Log Using the System Log Information page to display event
messages
LOCATION:
▼ Monitor
▼ System
■ Log
PARAMETERS:
The level of the system log entry. The
following level types are supported:
Info:Information level of the system log.
Warning:Warning level of the system log.
Error:Error level of the system log.
All:All levels.
The time of the system log entry.
The message of the system log entry.
Auto-refresh :Check this box to enable an

automatic refresh of the page
at regular intervals.
:Updates the system log entries,
starting from the current entry ID.
:Flushes all system log entries.
:Updates the system log entries,
starting from the first available entry ID.
:Updates the system log entries, ending
at the last entry currently displayed.
:Updates the system log entries,
starting from the last entry currently
displayed.
:Updates the system log entries,
ending at the last available entry ID.
WEB Interface
To display the System Log:
A. Click Monitor/System/Log.
B. Specify the different level to show the log up.
C. Check the “auto-refresh”checkbox to update the
system log automatically and click “clear” to
clean the log.

84
Detailed Log Using the Detail System log information page to display the
detail event log
LOCATION:
▼ Monitor
▼ System
■ Detailed Log
PARAMETERS:
The detailed message of the system log entry.
:Updates the system log entries,
starting from the current entry ID.
:Updates the system log entries,
starting from the first available entry ID.
:Updates the system log entries, ending
at the last entry currently displayed.
:Updates the system log entries,
starting from the last entry currently
displayed.
:Updates the system log entries,
ending at the last available entry ID.
WEB Interface
To display the Detailed System Log:
A. Click Monitor/System/Detailed Log.
B. Specify the Detailed system log.

85
Thermal Protection Using the Thermal Protection Status page to show the thermal
status for each port.
LOCATION:
▼ Monitor
■ Thermal Protection
PARAMETERS:
Thermal
Portection Port
Status
Shows if the port is thermally protected
(link is down) or if the port is operating
normally.
Display Port Status, the port will shutdown if
temperature exceed.
Auto-refresh :Check this box to enable an
automatic refresh of the page
at regular intervals.
:Updates the system log entries,
starting from the current entry ID..
Port s State Using the Port State Overview page to display an image of
switch’s ports. Clicking specific port image to open detailed
statistics of this port.
LOCATION:
▼ Monitor
▼ Ports
■ State

The port states are illustrated as follows:
Auto-refresh :Check this box to enable an
automatic refresh of the page at
regular intervals.
:Updates the system log entries,
starting from the current entry ID.
WEB Interface
To display an image of the switch’s ports:
A. Click Monitor/Ports/State.
B. Display current state of each port.
C. Check “Auto-refresh” to update the switch’s port
state automatically.
Traffic Overview Using Port Statistics Overviewpage to display an overview of
incoming and ongoing packets for each port.
LOCATION:
▼ Monitor
▼ Ports
■ Traffic Overview

The logical port for the settings contained in the
same row.
The number of received and transmitted packets
per port.
The number of received and transmitted bytes per
port.
The number of frames received in error and the
number of incomplete transmissions per port.
The number of frames discarded due to ingress
or egress congestion.
The number of received frames filtered by the
forwarding process.
Auto-refresh :Check this box to enable an
automatic refresh of the page at
regular intervals.
:Updates the system log entries,
starting from the current entry ID.
:Flushes all system log entries.
WEB Interface
To display a summary of port statistics:
A. Click Monitor/Ports/Traffic Overview.
B. Check “Auto-refresh” to update the switch’s port
state automaticallyand click “clear” to reset all
data.

88
QoS Statistics Using the Queuing Counters page to display the number of
packets processed by each port.
LOCATION:
▼ Monitor
▼ Ports
■ QoS Statistics
PARAMETERS:
The logical port for the settings contained in the
same row.
There are 8 QoS queues per port. Q0 is the
lowest priority queue.
The number of received and transmitted packets
per queue.
Auto-refresh :Check this box to enable an
automatic refresh of the page at
regular intervals.
:Updates the system log entries,
starting from the current entry ID.
:Flushes all system log entries.

89
WEB Interface
To display a Queue Counters:
A. Click Monitor/Ports/QoS Statistics.
B. Check “Auto-refresh” to update the switch’s port
state automatically and click “clear” to reset all
data.
QCL Status Using QoS Control List Status to show QCE configured for
different users or software modules and whether or not there is a
conflict.
LOCATION:
▼ Monitor
▼ Ports
■ QCL Status

Indicates the index of QCE.
Indicates the type of frame to look for incomming
frames. Possible frame types are:
Any: The QCE will match all frame type.
Ethernet: Only Ethernet frames
(with Ether Type 0x600-0xFFFF) are allowed.
LLC:Only (LLC) frames are allowed.
SNAP:Only (SNAP) frames are allowed.
IPv4:The QCE will match only IPV4 frames.
IPv6:The QCE will match only IPV6 frames.
Indicates the list of ports configured with the
QCE.
Indicates the classification action taken on
ingress frame if parameters configured are
matched with the frame's content.
There are three action fields:
Class, DPL and DSCP.
Class:Classified QoS class; if a frame matches
the QCE it will be put in the queue.
DPL:Drop Precedence Level; if a frame matches
the QCE then DP level will set to value
displayed under DPL column.
DSCP:If a frame matches the QCE then DSCP
will be classified with the value displayed
under DSCP column.
Displays Conflict status of QCL entries. As H/W
resources are shared by multiple applications. It
may happen that resources required to add a
QCE may not be available, in that case it shows
conflict status as 'Yes', otherwise it is always 'No'.
Please note that conflict can be resolved by
releaseing the H/W resources required to add
QCL entry on pressing 'Resolve Conflict' button.
:Select the QCL Status from this

drop down list.
Auto-refresh :Check this box to refresh the
page automatically.
Automatic refresh occurs at
regular intervals.
:Click to release the resources
required to add QCL entry,
incase conflict status for
any QCL entry is 'yes'
:Updates the system log entries,
starting from the current entry ID.
WEB Interface
To display the status of QCE entries:
A. Click Monitor/Ports/QCL Status.
B. Select the user type to display from a dropdown
list.
C. If any of the entries show the conflict, click
“Rresolve Conflict” to resolve the conflict then
click “refresh” to check the result.
Detailed Port Statstics Using the Detailed Port Statistics page to display the detailed
statistic on network. All values have been accumulated since the
system bootup.

92
LOCATION:
▼ Monitor
▼ Ports
■ Detailed Statistics
PARAMETERS:
Receive Total and Transmit Total
The number of received and transmitted
(good and bad) packets.
The number of received and transmitted
(good and bad) bytes. Includes FCS, but
excludes framing bits.
The number of received and transmitted
(good and bad) unicast packets.
The number of received and transmitted
(good and bad) Multicast packets.
The number of received and transmitted
(good and bad) Broadcast packets.
A count of the MAC Control frames received
or transmitted on this port that have an
opcode indicating a PAUSE operation
Receive and
Transmit Size
Counters
The number of received and transmitted
(good and bad) packets split into categories
based on their respective frame sizes.
Receive and
Transmit Queue
Counters
The number of received and transmitted
packets per input and output queue.
The number of frames dropped due to lack
of receive buffers or egress congestion.
The number of frames received with CRC or
alignment errors.
The number of short1 frames received with
valid CRC.
The number of long2 frames received with
valid CRC.
The number of short1 frames received with

The number of long 2 frames received with
invalid CRC.
The number of received frames filtered by
the forwarding process.
1
Short frames are frames that are smaller than 64 bytes.
2
Long frames are frames that are longer than the configured
maximum frame length for this port.
The number of frames dropped due to
output buffer congestion.
The number of frames dropped due to
excessive or late collisions.
Auto-refresh :Check this box to enable an
automatic refresh of the page
at regular intervals.
:Updates the system log entries,
starting from the current entry ID.
:Flushes all system log entries.
WEB Interface
To display the Detailed Port Statistics:
A. Click Monitor/Ports/Detailed Statistics.
B. Select the Port number to display Detailed
Statistics of specific port.

94
ACL Status This ACL Status page shows the status by different ACL users.
Each row describes the ACE that is defined. It is a conflict if a
specific ACE is not applied to the hardware due to hardware
limitations. The maximum number of ACE is 256 on each switch.
LOCATION:
▼ Monitor
▼ Security
▼ Network
■ ACL Status
PARAMETERS:
Indicates the ingress port of the ACE.

Possible values are:
All:The ACE will match all ingress
port.
Port:The ACE will match a specific
ingress port.
Indicates the frame type of the ACE. Possible
values are
Any:The ACE will match any frame type.
EType:The ACE will match Ethernet Type
frames. Note that an Ethernet Type
based ACE will not get matched by IP
and ARP frames.
ARP:The ACE will match ARP/RARP frames.
IPv4:The ACE will match all IPv4 frames.
IPv4/ICMP:The ACE will match IPv4 frames
with ICMP protocol.
IPv4/UDP:The ACE will match IPv4 frames with
UDP protocol.
IPv4/TCP:The ACE will match IPv4 frames with
TCP protocol.
IPv4/Other:The ACE will match IPv4 frames,
which are not ICMP/UDP/TCP.
IPv6: The ACE will match all IPv6
standard frames.
Indicates the forwarding action of the ACE.
Permit:Frames matching the ACE may be
forwarded and learned.
Deny:Frames matching the ACE are dropped.
Indicates the rate limiter number of the ACE.
The allowed range is 1 to 16. When Disabled is
displayed, the rate limiter operation is disabled.
Indicates the port redirect operation of the ACE.
Frames matching the ACE are redirected to the
port number. The allowed values are Disabled or
a specific port number. When Disabled is
displayed, the port redirect operation is disabled.
Specify the mirror operation of this port.
The allowed values are:

Enabled:Frames received on the port are
mirrored.
Disabled:Frames received on the port are not
mirrored.
The default value is "Disabled".
Forward packet that matched the specific ACE
to CPU.
Forward first packet that matched the specific
ACE to CPU.
The counter indicates the number of times the
ACE was hit by a frame.
Indicates the hardware status of the specific
ACE. The specific ACE is not applied to the
hardware due to hardware limitations.
:Select the QCL Status from
this drop down list.
Auto-refresh :Check this box to refresh the
page automatically.
Automatic refresh occurs
at regular intervals.'
:Updates the system log entries,
starting from the current entry ID.
WEB Interface
To display ACL Status:
A. Click Monitor/Security/Network/ACL Status
B. Select a software module from the scroll-down
list.
RADIUS Overview Using the RADIUS Overview page to display a list of configured

97
RADIUS Server
LOCATION:
▼ Monitor
▼ Security
▼ AAA
■ RADIUS Overview
PARAMETERS:
The RADIUS server number. Click to navigate to
detailed statistics for this server.
The IP address and UDP port number (in <IP
Address>:<UDP Port> notation) of this server.
The current status of the server. This field takes
one of the following values:
Disabled:The server is disabled.
Not Ready:The server is enabled, but IP
communication is not yet up and
running.
Ready:The server is enabled, IP communication
is up and running, and the RADIUS
module is ready to accept access
attempts.
Dead (X seconds left):Access attempts were
made to this server, but it did not reply within the
configured timeout. The server has temporarily
been disabled, but will get re-enabled when the
dead-time expires. The number of seconds left
before this occurs is displayed in parentheses.
This state is only reachable when more than one
server is enabled.
:Select the QCL Status from
this drop down list.
Auto-refresh :Check this box to refresh the

page automatically.
Automatic refresh occurs
at regular intervals.'
:Updates the system log entries,
starting from the current entry ID.
WEB Interface
To display a list of RADIUS Server:
A. Click Monitor/Security/AAA/RADIUS Overview
RADIUS Details Using the RADIUS Details page to display statistics for RADIUS
Server.
LOCATION:
▼ Monitor
▼ Security
▼ AAA
■ RADIUS Details
PARAMETERS:

The counters of Receive Packets, including
following parameters:
(Access Accepts, Access Rejects,Access
Challenges, Malformed Access Responses,Bad
Authenticators, Unknown Types,Packets
Dropped)
The counters of Transmit Packets, including
following parameters:
(Access Requests,Access
Retransmissions,Pending Requests,Timeouts)
IP Address:Show the IP Address of RADIUS
server.
State:Show the state of RADIUS server
Round-Trip Time:the handshake time between
RADIUS Server and clients
Buttons
Auto-refresh :Check this box to refresh the
page automatically.
Automatic refresh occurs
at regular intervals.'
:Updates the system log entries,
starting from the current entry ID.
:Flushes all system log entries.
WEB Interface
To display a detail information of RADIUS Server:
A. Click Monitor/Security/AAA/RADIUS Details

100
LACP System Status Using the LACP System Status page to display an overview of
LACP groups.
LOCATION:
▼ Monitor
▼ LACP
■ System Status
PARAMETERS:
The Aggregation ID associated with this
aggregation instance. For LLAG the id is shown
as 'isid:aggr-id' and for GLAGs as 'aggr-id'
The system ID (MAC address) of the
aggregation partner.
The Key that the partner has assigned to this
aggregation ID
The time since this aggregation changed.
Shows which ports are a part of this aggregation
for this switch.