TFortis PSW-2G4F-Ex, PSW-2G4F, PSW-2G6F+M, PSW-2G6F+, PSW-2G8F+ Configuration Manual

...

Configuration Manual

PSW-2G4F PSW-2G4F-Ex PSW-2G+ PSW-2G6F+ (PSW-2G6F+M) PSW-2G8F+ PSW-2G4F-UPS PSW-1G4F PSW-1G4F-UPS PSW-2G2F+UPS SWU-16 (SWU-16M)

Multifunction Gigabit Managed Switches

for IP Video Surveillance Systems

Manual Version 10

Firmware version 0.2.2

2017

Contents

Designations................................................................................................................................................. 4

1 Introduction ................................................................................................................................................ 5

2 Switch features............................................................................................................................................. 6

3 Light indication........................................................................................................................................... 7

4 Reset and restart buttons ................................ ................................................................ ........................... 8

5 Switch management .................................................................................................................................. 9

5.1 Management interfaces ................................................................................................................. 9

5.2 What you need to know before connection .................................................................................... 9

5.3 Management by means of the Web interface ............................................................................... 10

5.3.1 First connection to the switch ......................................................................................... 10

5.3.2 Network settings ............................................................................................................ 12

5.3.3 Configuring user accounts .............................................................................................. 13

5.3.4 Device description .......................................................................................................... 14

5.3.5 Telnet setting ................................................................................................................. 14

5.3.6 SNTP setting .................................................................................................................. 15

5.3.7 Web interface language setting ...................................................................................... 16

5.3.8 Port settings ................................................................................................................... 17

5.3.9 Port status...................................................................................................................... 18

5.3.9.1 Firmware update of the SFP module.................................................................. 19

5.3.10 Configuring the Event List ............................................................................................ 20

5.3.11 Configurating Syslog .................................................................................................... 22

5.3.11.1 Syslog message list ......................................................................................... 25

5.3.12 Configuring SMTP .......................................................................................................... 26

5.3.12.1 Example of configuration with a dedicated mail server on the local network ................ 27

5.3.12.2. Example of setting with an external mail server ...................................................... 30

5.3.13 Configuring the dry contacts ............................................................................................. 32

5.3.14 Configuring VLAN 802.1q .............................................................................................. 33

5.3.14.1 Example of VLAN configuration........................................................................... 34

5.3.15 Configuring Port Based VLAN .......................................................................................... 36

5.3.16 Configuring VLAN Trunking ............................................................................................ 37

5.3.17 Configuring QoS (Quality of Service) ................................................................................. 37

5.3.17.1 General settings .................................................................................................. 38

5.3.17.2 Speed limit ......................................................................................................... 39

5.3.16.3 Configuring Class of Service ................................................................................ 40

5.3.17.4 Configuring Type of Service ................................................................................. 41

5.3.18 Configuring STP and RSTP .............................................................................................. 42

5.3.19 Configuring IGMP ........................................................................................................... 44

5.3.20 Configuring SNMP .......................................................................................................... 47

5.3.20.1 Configuring SNMP v1 ......................................................................................... 47

5.3.20.2 Configuring SNMP v3 ......................................................................................... 48

5.3.21 MAC address filtering ...................................................................................................... 49

5.3.21.1 List of blocked MAC addresses ............................................................................. 50

5.3.22 Set up Camera Comfort Start ............................................................................................. 51

5.3.23 Camera Hanging Control settings ....................................................................................... 52

5.3.24 Link Aggregation ............................................................................................................ 53

5.3.25 Port Mirroring ................................................................................................................. 54

5.3.26 Events broadcasting to Teleport integration units ................................................................. 55

5.3.27 Cable Tester .................................................................................................................... 57

5.3.28 Remote Ping ................................................................................................................... 58

5.3.29 Switch statistics ............................................................................................................... 59

5.3.29.1 Port Statistics...................................................................................................... 59

5.3.29.2 PoE Status.......................................................................................................... 60

5.3.29.3 ARP Table ......................................................................................................... 61

5.3.29.4 MAC Table ........................................................................................................ 61

5.3.29.5 DNS Table ................................................................ ......................................... 61

5.3.29.6 System log ......................................................................................................... 62

5.3.30 Firmware Update ............................................................................................................. 62

5.3.31 Save and restore settings ................................................................................................... 63

5.3.31.1 Save settings to file ............................................................................................. 64

5.3.31.2. Restore settings from the file. ............................................................................... 64

5.3.31.3 Editing configuration file ................................ ..................................................... 65

5.3.32 Reset to factory settings .................................................................................................... 72

5.3.33 Reboot ................................ ................................................................ ........................... 72

5.3.34 Optional expansion board ................................................................................................. 73

5.3.34.1 Digital inputs ................................................................................................... 73

5.3.34.2 Relay outputs .................................................................................................. 74

5.3.34.3 Logic ............................................................................................................... 74

5.3.34.4 RS485 output .................................................................................................. 75

5.3.34.5 Connecting electricity meters ................................ ........................................... 76

5.4 Management via Telnet ............................................................................................................... 78

5.4.1 Example of setting.......................................................................................................... 80

5.4.2 Description of Telnet commands .................................................................................... 82

5.4.3 The config group ............................................................................................................... 84

5.4.3.1 Network settings (config ipif) ................................................................................. 84

5.4.3.2 Configuring ports (config ports) .............................................................................. 84

5.4.3.3 Configuring multicast (IGMP Snooping) .................................................................. 85

5.4.3.4 Configuring STP/RSTP ................................ ......................................................... 86

5.4.3.5 Configuring SNMP ............................................................................................... 87

5.4.3.6 Configuring Syslog ............................................................................................... 88

5.4.3.7 Configuring VLAN ............................................................................................... 88

5.4.3.8 Configuring SNTP ................................................................................................ 89

5.4.3.9 Setting the comfort start function for the cameras ...................................................... 89

5.4.3.10 Setting protection from hanging ............................................................................ 89

5.4.3.11 Configuring dry contacts (digital inputs) ................................................................. 90

5.4.3.12 Configuring TFTP ............................................................................................... 91

5.4.3.13 Configuring events .............................................................................................. 91

5.4.3.14 Configuring user accounts .................................................................................... 92

5.4.3.15 Configuring QoS ................................ ................................................................ . 93

5.4.3.17 Configuring MAC address filtering ........................................................................ 94

5.4.3.18 Configuring inputs of the expansion board .............................................................. 95

5.4.3.19 Configuring outputs of the expansion board ............................................................ 95

5.4.3.20 Configuring RS485 ............................................................................................. 96

5.4.3.21 Configuring channel aggregation ........................................................................... 97

5.4.3.22 Configuring port mirroring ................................................................................... 98

5.4.4 Show group ...................................................................................................................... 98

5.4.4.1 View switch information ........................................................................................ 99

5.4.4.2 Viewing switch settings ....................................................................................... 101

5.4.5 Firmware update using TFTP ............................................................................................ 107

5.4.6 Saving and loading configuration and log via TFTP ............................................................. 108

5.4.6.1 Saving configuration ........................................................................................... 109

5.4.6.2 Restoring configuration ....................................................................................... 109

5.4.6.3 Saving system log ............................................................................................... 109

5.4.7 Saving settings ................................................................................................................ 109

5.4.8 Reboot ........................................................................................................................... 110

5.4.9 Exit the management mode ................................................................ ............................... 110

5.4.10 Diagnostic functions ...................................................................................................... 110

5.4.10.1 Ping utility ....................................................................................................... 110

5.4.10.2 Cable tester ................................................................ ...................................... 111

5.5 Management via USB console .................................................................................................. 113

6 Technical support .................................................................................................................................. 115

Designations

The following designations are used in this manual:

Designation

Meaning

WARNING sign

Basic Settings → Network

Settings

Italics are used to show the path to the Web page in case of configuration using the Web interface

DEFAULT

Bold type is used to highlight an important parameter, value, button name, etc.

#IPADDRESS=[192.168.0.1]

Courier New font is used to highlight parameters in the setting file

<VALUE>

Angle brackets are replaced with the variable value in the console command

config syslog state <STATE>

Console commands are in bold and italics

config syslog state enable

The output of control commands is in italics

1 Introduction

This manual describes the setting and administration process of TFortis PSW and SWU managed switches. For many protocols, configuration is based on specific examples.

All switches are similar in terms of the configuration process. Therefore we will consider the managed switch PSW-2G4F as the basic device in this manual. Differences for other series switches will be specified additionally.

This manual describes Web-based and telnet-based configuration process.

2 Switch features

TFortis PSW switches are all-weather managed PoE (or PoE+) industrial Ethernet switches for IP video surveillance systems. TFortis SWU switches are managed Ethernet switches for 19’’ 1U rack mounting.

Supported functions and protocols:

 Integrated Web interface  Telnet  SNMP v1, v3  control of camera hanging  preliminary heating of the camera housings  cable tester  redundancy protocols STP(IEEE 802.1d), RSTP(IEEE 802.1w)  Port Based VLAN  Static VLAN (IEEE 802.1q)  Flow Control (IEEE 802.3x)  Quality of Service (802.1p) (CoS, ToS(DSCP) )  IGMP Snooping v2 multicast management  SNTP  SMTP  Syslog  system log  DNS  remote Ping function  event notification settings  firmware update using TFTP  MAC filtering

3 Light indication

TFortis PSW switches have 2 LED indicators to show the operating mode of the switch processor: DEFAULT and CPU. (Figure 1.1, Table 1.1) (Descriptions and functions of other light indicators are available in Operating Manual, Section 2.7, Configuration and control elements).

Figure 1.1 DEFAULT and CPU indicators – PSW switch

Figure 1.2 DEFAULT and CPU indicators – SWU switch

Table 1.1 Purpose of indicators

Indicator status

Device status

CPU indicator flashing

slowly (at 1 Hz)

Normal operation

DEFAULT indicator on

The device is not configured, with factory-default settings.

CPU indicator flashing rapidly (at 10 Hz)

Indication of camera hanging (or there is no link on the video camera port or the camera does not respond to Ping), or indication of dry contacts active status.

CPU and Default indicators flashing in sync

Hardware or software fault is detected. Contact technical support.

4 Reset and restart buttons

TFortis PSW switches have 2 hard buttons to restore factory default settings and to restart the device. Location of the buttons is shown in Figure 1.1.

 To restart the switch, press CPU button shortly.  To restore factory settings, press DEFAULT button and hold it down for about

30 seconds. DEFAULT indicator should set ON at this point.

TFortis SWU switches have one hard RESET button.

 To restart the switch, press the RESET button and hold it down for 3-5

seconds.

 To restore default settings, press the RESET button and hold it down for 30

seconds.

5 Switch management

5.1 Management interfaces

PSW and SWU switches have the following options of remote management: Web interface, Telnet, SNMP. It is also possible to manage the switch using a local USB console. Web interface contains a full set of managed parameters with a detailed explanation and a short summary. The switch interface is available in Russian and in English. Connection to the switch is possible using a standard Web browser. Telnet is an alternative way of device configuring using a console application, such as Microsoft Telnet, PuTTY, Hyper Terminal or others. Management by means of SNMP is currently implemented in the test version and not all commands are supported in full. SNMP is recommended for monitoring rather that management of the switch. Management by means of the USB console has the same console interface as Telnet interface.

5.2 What you need to know before connection

Attention!

TFortis PSW switches have an integrated PoE injector on Fast Ethernet ports. It means that 48~55 V voltage can be supplied to these ports. Before connecting the IP cameras, make sure that PSW port parameters correspond to the camera parameters. Before connecting network devices that do not support PoE (such as a

computer or laptop) to the Fast Ethernet port, disconnect the PoE on this port by removing the jumpers. For more information about PoE hardware configuration, see Operating Manual, Section 2.3.

Attention!

Power supply elements are under high voltage. It is strictly forbidden to touch conducting elements of the power supply unit under voltage.

5.3 Management by means of the Web interface

5.3.1 First connection to the switch

When switched on for the first time, the switch has the following default settings:

IP address: 192.168.0.1 Subnet mask: 255.255.255.0 Login/password not set Management VLAN 1 DHCP client off STP off Telnet on SNMP off

Before connecting, make sure that the network card of the computer is on the same subnet as the switch (192.168.0. *). Start the Web browser and enter the IP address of the switch in the address bar

(Figure 5.3.1.1).

Figure 5.3.1.1 Connection to the switch

After connection, main Web interface page should display (Figure 5.3.1.2).

Figure 5.3.1.2 Web interface

The Web interface can be divided into 4 frames shown in Figure 5.3.1.2: 1 – side menu that provides access to various groups of settings 2 – main frame containing the group of settings 3 – help for these settings 4 – header with link status and PoE on the ports (automatically updated every 10 seconds)

Note: by default, access to Web interface is available without login and password. It is recommended to restrict access in the future by setting login and password. In this case each subsequent connection to the switch will be accompanied by a standard authentication dialog box.

5.3.2 Network settings

Basic Settings → Network Settings

This section describes the basic network settings of the switch.

Figure 5.3.2.1 Network settings

MAC – the physical address of the device used to identify the device in the network. It is not recommended to change the MAC address otherwise than in extreme cases, since it ensures uniqueness of the switch. The last 2 bytes of the factory MAC address are the serial number of the device. The factory MAC address is printed on the label and placed on the enclosure and on the circuit board of the switch. IP – the network address of the device. When working within the same subnet, it is necessary to ensure the uniqueness of the network address. Mask – the subnet mask. Gateway – gateway network address. If the gateway is not used, leave the default value: 255.255.255.255 DNS – network address of the DNS resolver. It is used in some functions to convert the host name to its network address. If not used, leave the default value:

255.255.255.255

DHCP Mode – selecting the operating mode of the DHCP protocol:

1. Disable – DHCP disabled. The switch uses static network settings (IP, Mask, Gateway and others).

2. Client – DHCP mode enabled. The switch receives network settings automatically using broadcast request to the DHCP server.

5.3.3 Configuring user accounts

Basic Settings → User Accounts

This section contains the settings of user accounts.

Figure 5.3.3.1 List of users

By default, the only account is the administrator account with an unset user name and password. It means access to Web interface and Telnet is available without authentication. To restrict access, it is necessary to create at least one user with Admin rights and one or more users with User rights, if necessary. Access rights are separated by selecting the Access Right field.

Figure 5.3.3.2 Configuring user name and password

The user with Admin rights has maximum authorities. A user with User rights has limited authorities, cannot change settings and has access to switch statistics and diagnostic tools (Ping, Virtual Cable Tester).

If setting was successful, the message "Parameters accepted" will be displayed and it will be necessary to log in using the login and password. If an error message is displayed, enter the parameters again.

Note 1: These fields are mandatory. The maximum length is 20 characters. Input language is English. Note 2: The fields are case sensitive, i.e. there is a difference between "Admin" and "admin". Note 3: Up to 4 accounts are supported.

5.3.4 Device description

Basic Settings → Device Description

Figure 5.3.4.1 Device description

Device Name – device name Device Location – device location Service Company – contact information of the service company or responsible

person

These fields are optional and only serve to simplify the identification of the switch. The maximum length of entries is 64 characters in English and 32 characters in Russian.

5.3.5 Telnet setting

Basic Settings → Telnet

Figure 5.3.5.1 Enabling Telnet and TFTP

Telnet – protocol used for remote management of network equipment based on port 23 TCP protocol.

By default, Telnet is enabled. If necessary, it may be disabled. The login and password for Telnet access are the same as for the Web interface access. Option Echo is an option of Telnet protocol enabled by default. In addition, the switch firmware may be upgraded using Telnet, in this case the

switch uses TFTP protocol. Since TFTP protocol is not secure, it is disabled by default. If necessary, it is possible to enable it, or change the standard UDP port (69) for another one.

For more details on configuring with Telnet, see Section 5.4.

5.3.6 SNTP setting

Basic Settings → SNTP

Figure 5.3.6.1 SNTP setting

SNTP (Simple Network Time Protocol) is the protocol by which the switch synchronizes its internal clock with an external time server.

The switch does not contain a built-in real-time clock, so it is necessary to use SNTP protocol to get information about the current time. The use of SNTP protocol is not mandatory and the main functions of the switch are not connected with SNTP. However, to simplify administration, the switch supports the recording of the event log in the "black box" and sending syslog and e-mail messages about the events to the network administrator. With SNTP protocol enabled, these messages will include a time stamp, which can be helpful for the administrator servicing the network.

Settings: State — state Server IP address – IP address of SNTP server

Server Name – domain name of SNTP server. If both IP address and domain name of the server are set, IP address will prevail

Time Zone – time zone (difference from UTC) Period – time period of synchronization with the server (in minutes) Synchronize – forced synchronization of time (to check the settings)

5.3.7 Web interface language setting

Basic Settings → Language

Figure 5.3.7.1 Language selection

The Web interface of the switch supports 2 languages: Russian and English. The default language is English. You may change it to Russian, if necessary. To do that, make sure there are no problems with text encodings in the browser.

Web interface of the switch uses UTF-8 encoding.

5.3.8 Port settings

Ports → Port Settings

Figure 5.3.8.1 Port settings

The following port parameters can be set:

1. State – Port status. The port can be forced to switch off, if it is not used. In this

case, the port will not transfer data and the port link will not come up.

2. Speed/Duplex – Speed/Duplex. By default, the auto negotiation mode is set

which automatically adjusts the speed and duplex mode. Speed and duplex can be set manually, however in this case it is important to make sure that the remote side will accept such settings. For Gigabit Ethernet ports, control of port status and speed is not available.

3. Flow Control – control of data flow (IEEE 802.3x)

4. PoE – Power over Ethernet. For some switch models, it is possible to manage

PoE only using option A (protocol PoE). To manage PoE using option B (Passive PoE), it is necessary to move the corresponding jumpers on the board.

To configure PoE using jumpers, see Operating Manual, Section 2.7,

Configuration and control elements.

5. SFP Link Mode – the operating mode of SFP (optical) port link.

 Forced – forcing the link to come up when an optical signal is detected

(Default mode)

 Auto – automatic mode, recommended when connecting to third-party

equipment

5.3.9 Port status

Ports → Port Status

Figure 5.3.9.1 Port status

The following port parameters are available:

1. State – port state: on/off/blocked (with RSTP protocol off)

2. Link – Link status

3. Speed/Duplex – Speed/Duplex

4. Flow Control – control of data flow (IEEE 802.3x)

5. PoE – Power over Ethernet.

6. SFP – Additional information about connected SFP modules Information from

the internal memory of the SFP module is displayed, which is securityprogrammed by the manufacturer. The "Detail" button becomes active when the module is connected.

Warning: this information is indicated by the SFP module manufacturer. However, since this information is optional, the manufacturer may not provide it or provide inaccurate or incorrect information. Therefore, this information

should be seen as additional, rather than primary.

Figure 5.3.9.2 Information from SFP module

5.3.9.1 Firmware update of the SFP module

The switches provide for SFP modules flashing. It may be necessary when

using third-party modules in the switches of some vendors (such as CISCO, HP).

Figure 5.3.9.3 SFP module flashing interface

Firmware Dump – saves the current firmware of the SFP module to a file. When flashing, it is strongly recommended to dump the old firmware in order to have the ability to rollback, i.e. return to the old version. Preloaded Firmware Download – a list of preloaded firmware for modules with the wavelengths of 1550 and 1310 nm. This list contains the latest firmware at the time of the switch firmware release.

Custom Firmware Download – download a third party firmware file.

Warning: the possibility of reprogramming depends also on the SFP

module type. There are modules whose memory only works in read-only mode. Such modules cannot be reprogrammed.

5.3.10 Configuring the Event List

Events → Event List

The PSW switch has a wide range of capabilities to ensure convenient network administration and network functionality. A key feature of the switch is the ability to provide instant administrator notifications about the events through various tools, such as Syslog, SMTP (e-mail) or SNMP Trap.

The switch may be adjusted to respond only to certain events to which an appropriate level of significance is assigned (only for the Syslog protocol). Levels range from 0 to 7, where 0 is the highest level of significance.

The following range of levels is generally accepted:

 (0) Emergency: the system is inoperable

 (1) Alert: the system requires immediate intervention  (2) Critical: the state of the system is critical  (3) Error: error messages  (4) Warning: warnings about possible problems  (5) Notice: messages of normal, but important events  (6) Informational: information messages  (7) Debug: debugging messages

Such separation of events significance levels allows to process the events differently on the server side. For example, messages about level 6 and 7 events can simply be recorded in the event log, while messages about level 0-3 events will be shown to the operator.

The settings are divided into subgroups by the following categories:

 Port.link – change the status of the link  Port.PoE – change the status of PoE  STP/RSTP – change STP/RSTP topology  Autorestart.Link – the link is lost with the Auto Restart function active  Autorestart.Ping – the remote device did not respond to PING with the Auto

Restart function active

 Autorestart.Speed – activity on the port fell below the preset value with the

Auto Restart function active

 System – change the system state (restart, update, reset to factory settings, etc.)  UPS – changes in the operation of the UPS (only in the version with the UPS)

 Inputs/Outputs – event from the access control system (dry contacts and

tamper sensor)

 MAC Filtering – an attempt was made to access the switch from a MAC

address that is not included in the list of allowed (if MAC address filtering is

enabled)

The following events are active by default:

 changing the link,  a link was lost with the Auto Restart function active, or the device did not

respond to the PING, or the speed on the port fell below the preset level

 change in the operation of the UPS module (switching to battery power, etc.)

(only in the version with UPS module available)

 events from the access control system.

When using the default configuration, you receive only the most significant information regarding the proper functioning of the system. Less significant messages are not shown.

Figure 5.3.10 Events list

5.3.11 Configuring Syslog

Events → Syslog

Syslog – the standard for sending messages about the events occurring in the system (logs) used in IP networks. Syslog protocol is simple: when certain events occur, the PSW switch sends a short text message, less than 1024 bytes in size, to the recipient of the message. Messages are sent by UDP (port 514). Syslog is used for ease of administration and information security.

The switch may be adjusted to respond only to certain events to which an appropriate level of significance is assigned. (Tab Events → Event List) Levels range from 0 to 7, where 0 is the highest level of significance.

The following range of levels is generally accepted:

 (0) Emergency: the system is inoperable  (1) Alert: the system requires immediate intervention  (2) Critical: the state of the system is critical  (3) Error: error messages  (4) Warning: warnings about possible problems  (5) Notice: messages of normal, but important events  (6) Informational: information messages  (7) Debug: debugging messages

Such separation of events significance levels allows to process the events differently on the recipient side. For example, messages about level 6 and 7 events can simply be recorded in the event log, while messages about level 0-3 events will be shown to the operator.

Syslog message format

According to the Syslog standard, the message has the following format: <significance level> <date and time> <sender's IP address> <message>

Note: the <date and time> field shows the date and time received by the SNTP protocol. If no time data is received or SNTP is not configured, the <date and time> field will show the time in seconds after the switch is turned on.

Here is an example to illustrate that: We have a message, received over Wireshark:

Figure 5.3.11.1 SNTP is not configured

As we see, the time has not been set. The time after switch start is shown.

Figure 5.3.11.2. SNTP is configured

Now the message has a standard time stamp.

Configuring Syslog on the switch

Configuring on the switch is rather simple. First, select the necessary events in the Events → Event List tab. For example, we are interested in the link change event.

Figure 5.3.11.3 Select the event

Then go to the Events → Syslog Settings tab and enable the Syslog protocol and set

the IP address of the server to which messages will be sent.

Figure 5.3.11.4 Configuring Syslog

Getting Syslog messages

After configuring the switch, proceed to configure the server. Let's consider an example for Windows OS. There are a lot of programs for working with syslog-messages, such as:

 Kiwi Syslog  Syslog Watcher  Datagram SyslogServer Suite  syslogbroadband  LogZilla  Syslog Server Free Tool

Let's choose Kiwi Log Viewer. This is a free simplified version of Kiwi Syslog Server. Nevertheless, it is fit for purpose in our case. Download address is http://www.kiwisyslog.com/downloads.aspx The installation of the program is rather simple. The main thing is to choose "Install as Service" in the "Choose Operating Mode" window (in this case, Kiwi Syslog will be installed as a service: it will start as the OS starts and will reside in the

tray).

Figure 5.3.11.5 Kiwi Syslog installation

After installation, start the program. By default, all received messages will be displayed in the main window. These messages are recorded to a text file. It is also possible to configure forwarding by email.

Figure 5.3.11.6. Kiwi Syslog interface

5.3.11.1 Syslog message list

Table 5.3.1 Syslog message list

Port #1 Link Up/Down

Link changed

Port #1 PoE A Up/Down

PoE changed

STP topology changed: root port 1, root bridge MAC 01:02:03:04:05:06

STP/RSTP topology changed with root port and MAC indication

Port #1 Autorestart: no link

No link with the enabled control of camera hanging by link criterion

Port #1 Autorestart: no reply to Ping

No response to PING requests with enabled control of camera hanging by PING criterion

Port #1 Autorestart: Low Speed

Low speed through the port with enabled control of camera hanging by SPEED criterion

Web-interface authentication: Ok

Update firmware x.x.x

Firmware update

Default settings

Reset to factory settings

Clear ARP cash

Clear the ARP cache of the switch

Start after power reset

PSW start after power reset

Start after reset

PSW start after reset

Voltage on battery is low (below 44V)

Low battery voltage, below 44V

Power souce is battery/ Power souce is external VAC

PSW power source (battery or external VAC)

Sensor 0 (Tamper) is active!

Tamper sensor is active (for PSW-2G + and PSW-2G6F +)

Sensor 1 (Dry contact) is active!

Sensor input (dry contact) is active

Input 1 is active (Open)

Output 1 is active (with current state indication)

Unallowed MAC: 01:02:03:04:05:06 Port 1

Unallowed MAC at port 1

Port 1 Error-Disabled

Port 1 is in the Error-Disabled state

5.3.12 Configuring SMTP

Events → SMTP

Short list of terms SMTP – (Simple Mail Transfer Protocol) protocol for sending e-mail

messages over the network. SMTP is used to send messages to a mail server. To receive messages from the mail server, client applications typically use POP or IMAP protocols.

Settings:

State — SMTP state Server IP address – IP address of the mail server Server domain name – domain name of the mail server Port – number of TCP port through which messages are sent (0 – 65534). By default

25. Sender e-mail address – e-mail address of the sender. Shown in the From field in the e-mail Receiver e-mail address – e-mail address of the receiver. Shown in the To field in the e-mail. For additional user opportunities, up to 3 receivers are available.

Subject – subject of the e-mail. Login, Password – login and password if the server requires authentication.

If these fields are filled in, the authentication with the server will be automatically activated. If these fields are empty, authentication will not be required. PSW switch supports AUTH PLAIN and AUTH LOGIN authentication.

If server IP address is not specified, messages are sent to this address by default. To use the domain name, set Server IP address in 0.0.0.0 and specify the domain name in the Server domain name field.

Examples of SMTP configuration

There are two options for configuring e-mail:

 A dedicated mail server is located on the local network.  An external mail server is used.

Each option has its advantages and disadvantages. A dedicated mail server can be recommended if video surveillance network is physically separated from the Internet and it is impossible to use external mail services, or there is already a mail server on the network and no additional efforts are required to create and maintain the server. Using external mail services makes configuration easier and faster, eliminates the need to maintain a mail server, but in this case you need a permanent connection to the Internet, which may not always be possible because of enterprise security policies.

5.3.12.1 Example of configuration with a dedicated mail server on the local

network

Figure 5.3.12.1.1 Network structure

Let's formulate the task as follows:

We need to configure SMTP on switch SW2 (PSW-2G) with IP 192.168.0.1 to send messages about the link change on the ports of PSW-2G switch to operator's computer 192.168.0.3. Since the SMTP protocol does not involve storing messages and issuing them to the mail client, we need to include a mail server (192.168.0.2) into the network. We select the domain name companyname.com for the network We select the e-mail address psw2g@companyname.com for PSW-2g,

server@companyname.com for SMTP server,

and client@companyname.com for the client.

Configuring PSW

First, specify the event that will send a message when it occurs. In our case,

this event is a link change. To do this, tick the appropriate event in the Events →

Event List tab.

Figure 5.3.12.1.2 Select the event

Now let's configure the SMTP

Go to Events → SMTP tab. Enable SMTP, set the IP address of the server, set the e-mail address of the sender (i.e. PSW) psw@companyname.com, set the e-mail address of the main receiver server@companyname.com, set the backup address server2@companyname.com to which the messages swill be

duplicated. E-mail subject is "PSW-2G log". Leave the Login and Password fields empty, since we are not going to use authentication.

Figure 5.3.12.1.3 Configuring SMTP in PSW

Press "Apply". Now the settings are applied.

Now let's configure the mail server

There are a number of mail server programs for various operating systems that support various protocols. We need a program that supports SMTP and POP3.

As an example of mail server for Windows, let's see Office Mail Server (https://www.box.com/oms). This is a free program with simple configuration. Technical support and instructions are available on the website:

http://oficemailserver.livejournal.com/

Install the program. After startup, the main window will be available:

Figure 5.3.12.1.4

Office Mail Server

main window

Go to menu Options->SMTP/POP3 server options and select Local domain name: companyname.com In the Users field add the user client. Then select user type [BOSS].

Office Mail Server supports the following types of users:

1. Postmaster — a user responsible for Office Mail Server operation and

maintenance. This user receives special messages generated by the system in case of an error.

2. Daemon – this is used to remotely connect to an external SMTP/POP3 server,

send and receive messages

3. Boss – this is the user who gets copies of all messages sent over the SMTP

server.

Figure 5.3.12.1.5 Office Mail Server configuration

In Options->Transaction options tab: Set the IP address of the server, check the box "Automatically send outbound message if found", disable SMTP authorization (SMTP login button)

Figure

5.3.12.1.6

Configuring

Office Mail

Server

Now all the messages coming to the server will be forwarded to client@companyname.com

Configuring client

Configuring client is rather simple. Example of configuring using Mozilla Thunderbird:

Figure 5.3.12.1.5 Configuring the mail program Mozilla Thunderbird

After finishing all the settings, you can go to the Web-interface to the SMTP Settings tab and check by sending a test message. Fill in the field Subject and Message and send out the message. If the settings are correct, Mozilla Thunderbird will notify of the new message.

Figure 5.3.12.1.6 Sending a test message

5.3.12.2. Example of setting with an external mail server

Figure 5.3.12.2.1 Sample network topology

In this example we will see how to configure PSW when an external mail server is used. Let it be a mail server mail.ru. The procedure will be similar for other servers that support AUTH PLAIN or AUTH LOGIN authentication.

We will need to create a mail account and select the SMTP connection settings. For mail.ru – the address of SMTP server is smtp.mail.ru, port 25.

Now we can start configuring. Fill in the information according to Figure 5.3.12.2.2. Address for sending messages is companyname@mail.ru, Let the recipient address be the same, as if we are sending an e-mail to ourselves. Login: companyname@mail.ru (at mail.ru login is the address itself) Password: password

Note: in this example we fill in the Server domain name field and fill the Server IP address with zeros. In this case, the switch will receive the IP address of

the server automatically through the DNS query, but for this purpose the DNS address of the resolver must be configured. If DNS is not configured, it will be necessary to directly specify the IP address of the SMTP server.

Figure 5.3.12.2.2 Configuring SMTP in PSW

After finishing all the settings, you can go to the Web-interface to the SMTP Settings tab and check by sending a test message. Fill in the field Subject and Message and send out the message.

Figure 5.3.12.2.3 Sending a test message

5.3.13 Configuring dry contacts

Special Functions → Inputs/Outputs

Depending on the model, PSW switches are equipped with connectors for contact sensors (dry contacts) and/or built-in tamper sensor. They can be used for security purposes, for example for access control.

There are two ways of sending out an alarm event:

1. Over Syslog, SMTP, SNMP Trap protocols. When a dry contact is triggered, a

message is generated, which is sent to the server which receives and logs the message and informs the operator.

2. Using the Teleport-1 integration units, which have digital outputs, it is

possible to configure the transfer of the dry contact activation in PSW switch to the output in the Teleport integration unit. In other words, if the switch input is closed and the switch is remote from the server, the output of the Teleport integration unit installed in the server room will be closed simultaneously. The output can then be connected to any security system. The configuration of the PSW-Teleport link is discussed in detail in section 5.3.26.

Figure 5.3.13.1 Configuring dry contacts

 State – enables input operation. An alarm message will be sent, if State is in

the Enable state, and Current State matches Alarm State and a tick is set in Inputs/Outputs in the Events List tab.

 Alarm State – state of the input that is considered to be an alarm.

 Open – open state  Short – closed state

 Current State – current input state.

5.3.14 Configuring VLAN 802.1q

VLAN → 802.1q Static VLAN

Terms and abbreviations: VLAN (Virtual Local Area Network) — a group of devices that have the

ability to interact directly with each other at the link layer, although physically they can be connected to different network switches. Conversely, devices in different VLANs are invisible to each other at the link level, even if they are connected to the same switch, and communication between these devices is possible only at the network and higher levels.

VID (VLAN ID) – virtual network ID VTU (VLAN Table Unit) – a table containing the list of virtual networks

configured on this switch Management VLAN ID – VLAN ID for the management network. Access to Web-interface is only possible from this network. VLAN List – a table containing information about the virtual networks configured on the switch, states and ports belonging to this VLAN.

VTU Table – VTU (VLAN Table Unit) – table for editing virtual networks, information in this table contains the following fields:

 VID (VLAN ID) – virtual network ID.  State — state. The created VLAN can be temporarily disabled by selecting the

Disable state.

 VLAN Name – virtual network ID (up to 16 characters). This field is used only for convenience of configuration and is not mandatory.

Port state in this VLAN. A port may be in one of the 3 states:

 NoMem (Not a member) – a port is not a member of this VLAN.  UnTag (Untagged) – untagged port (access port) allows to combine selected

ports into one VLAN.  Tag (Tagged) – tagged port (trunk port). Several VIDs can be set for a tagged port.

To finally apply settings, press Apply button. The switch support up to 100 different VLANs.

5.3.14.1 Example of VLAN configuration

Let's configure the virtual networks as shown in the scheme.

Figure 5.3.14.1 Network topology

Where VLAN 1 is the management network that will be used to connect switches SW1, SW2, SW3 to the Web-interface. VLAN 2 and VLAN 10 are user's VLANs

Let's start configuring from the most remote switch SW2. Ports FE1, FE2 belong only to VLAN2 and are connected to terminal devices, therefore these ports are untagged. The same is true for port FE3 which belongs only to VLAN10. Port GE1 belongs to 3 VLANs: VLAN1, VLAN2, VLAN10, therefore it is a tagged port. Based on the above, we will select the following settings:

Figure 5.3.14.2 SW2 settings

Press the Apply button. Connection with the device will be lost. Now let's configure SW3 switch.

We select the following settings:

Figure 5.3.14.3 SW3 settings

Press the Apply button. Connection with the device will be lost.

Now let's configure SW1 switch. We select the following settings:

g u r e

5 . 3 . 1 4 .

2 SW1 settings

Press the Apply button. Connection with the device will be lost.

After setting up the last switch, we must go to the Web interface of switches SW1, SW2, SW3 from a PC connected to the FE1 port of the switch SW1. It will not be possible from other ports.

5.3.15 Configuring Port Based VLAN

VLAN → Port Based

Port Based VLAN is the simplest way for organizing virtual networks by differentiating access at the level of the switching matrix of the switch. Port Based VLAN does not use packet tagging. Each individual port may belong only to one VLAN.

Attention!

Port Based VLAN is available only for outdoor PSW switches

Port Based VLAN is configured as follows:

1. Enable Port Based VLAN.

2. Check the corresponding boxes of the switching matrix.

3. Apply settings (Apply)

Example.

It is necessary to configure 2 virtual networks: VLAN1 – ports 1 and 2, VLAN2 – ports 3 and 4. Check the boxes as shown in the Figure below.

Figure 5.3.15.1 Example of Port Based VLAN configuration

5.3.16 Configuring VLAN Trunking

VLAN → VLAN Trunking

Enabling the VLAN Trunking function on the port means that any VLANs are allowed to go through this port, except for those that are statically set up (the VLAN → 802.1q Static VLAN tab). In other words, only unknown VLANs go to the port with the VLAN Trunking function enabled, others VLANs operate according to the settings, because they are included into VLAN and ports tables. The purpose of this function is as follows: if the switch is between two devices that form VLANs (for example, dynamic VLANs that need to be transparently connected to other parts of the network), then it is enough to enable VLAN Trunking on two ports and the switch will let them go through. Otherwise it would be necessary to input all possible VLANs into the table.

Figure 5.3.16.1 Configuring VLAN Trunking

To enable the VLAN Trunking function, set the state switch into enable position and check the boxes of the required ports.

If only static VLANs (802.1q) are used, activation of the VLAN Trunking function

is not required!

5.3.17 Configuring QoS (Quality of Service)

Using IEEE 802.1p QoS allows to prioritize traffic and allocate the necessary

bandwidth for applications sensitive to delays, including VoIP (Voice over IP) and video conferencing. The required bandwidth is created by reducing the transfer rate of applications that are not sensitive to delay.

The switch organizes 4 separate hardware queues on each physical port.

Packets received from different applications receive the corresponding priority.

The switch supports 3 types of priority:

1) by the number of port

2) by CoS label

3) by ToS (DSCP) label

5.3.17.1 General settings

QoS → General Settings

Select basic settings on the "General settings" tab

Figure 5.3.17.1.1 Configuring QoS

State – enable/disable QoS operation QoS Scheduling mechanism – queue scheduling type:

1. Weighted fair priority – packets with different priority are processed by

the switch with the ratio 8: 4: 2: 1. It means, the switch will process 8 high

priority packets, 4 medium priority packets, 2 low priority packets and 1 packet

with the lowest priority in one time unit.

2. Strict priority – packets with a higher priority will be processed first, until

the high-priority packet queue becomes empty. Meanwhile, packets with lower

priority will be in the queue.

Weighted fair priority is recommended by default.

Priority mode – priority for choosing CoS or ToS.

 CoS only – only CoS is active and the package priority is determined only by

the CoS (Class of Service) field in the Ethernet frame.

 ToS only – only ToS is active and packet priority is determined only by the

ToS (Type of Service) field in the IP header.

 CoS & ToS – both CoS and ToS services are active, but if a packet containing

both priority fields comes in, the priority is selected by the ToS field.

Default priority – priority by default. When the QoS mechanism is active and a packet that does not contain a priority field comes in, it is given the corresponding default priority by CoS and it is treated as a tagged packet with the appropriate priority.

There are 8 CoS priorities. Priorities are numbered from 0 – lowest priority to 7 – highest priority.

5.3.17.2 Speed limit

QoS → Rate Limit

Figure 5.3.17.2.1 Configuring speed limit

A configurable limit on the maximum receive and transmit rate for each port is available.

RX limit – limit of incoming traffic in Kbps TX limit – limit of outgoing traffic in Kbps

Note 1: The speed limit is available in the range from 64 Kbps to 102400 Kbps for

FastEthernet ports and up to 256000 Kbps for Gigabit Ethernet ports.

Note 2: If the port operates without limit, set the RX limit and TX limit fields to 0

5.3.17.3 Configuring Class of Service

QoS → CoS

Figure 5.3.17.3.1 Configuring CoS

The Class of Service (CoS) field is 3 bits in the 802.1Q tag of the Ethernet frame. It allows to divide traffic into 8 priorities with different markings at the link level. The switch supports 4 queues of service: Queue 0 – Queue 3. Queue 3 is the queue with the highest priority, Queue 0 is the queue with the lowest priority. The setting will apply, if you set the value of CoS State to Enable in the QoS General Settings tab.

By default, the priorities are sorted by queue as follows: Priority 0 belongs to Queue 1 Priority 1 belongs to Queue 0 Priority 2 belongs to Queue 0 Priority 3 belongs to Queue 1 Priority 4 belongs to Queue 2 Priority 5 belongs to Queue 2 Priority 6 belongs to Queue 3 Priority 7 belongs to Queue 3

5.3.17.4 Configuring Type of Service

QoS → ToS

Figure 5.3.17.4.1 Configuring ToS

Type of Service (ToS) – field in the IP-header (1 byte). It is intended for marking traffic at the network level. PSW switches can operate with IP packets, which have the appropriate field in the header – IP Type of Service (ToS), one byte in size. ToS is filled with the DSCP classifier.

The setting will apply, if you set the value of CoS State to Enable in the QoS General Settings tab.

By default, the priorities are sorted by queue as follows: Priorities 0-7 belong to Queue 0 Priorities 8-31 belong to Queue 1 Priority 32-55 belong to Queue 2

Priorities 56-63 belong to Queue 3

5.3.18 Configuring STP and RSTP

STP/RSTP → RSTP Settings

Figure 5.3.18.1 Ring topology

To ensure the protection of communication channels from a single failure, they

must be backed up. Reservation inevitably leads to the emergence of ring sections of the network – closed routes. The Ethernet standard provides for a tree topology only

and does not allow ring-type topologies, as this leads to looping of packets. PSW switches support Spanning Tree Protocol (STP, IEEE 802.1d), which allows to create ring routes in Ethernet networks. STP continuously analyzes the network configuration and automatically builds a tree topology, transferring redundant communication lines to the reserve. In case of a violation of the integrity of the network constructed in this way (for example, a break in the optics), STP includes the necessary backup lines in a few seconds and restores the tree structure of the network. In addition, PSW switches include a more powerful version of this protocol – Rapid Spanning Tree Protocol (RSTP, IEEE 802.1w), which allows to reduce network rebuild time to several milliseconds. When using RSTP, a break in the optics results in a short-term fading of the picture from the video camera (less than 1 second), followed by the restoration of normal operation.

It's important to remember, that IEEE802.w Standard does not recommend to include more than 7 switches into a single ring with standard parameters of RSTP protocol.

Configuring RSTP

To simplify the configuration process, most parameters are hidden. In general, you do not need to change all the variables. All you need to do is to enable RSTP and specify

Bridge Priority, if required.

Figure 5.3.18.2 RSTP basic setting

To get access to all available RSTP configuration variables, click on the "Advanced Settings Show" button.

Figure 5.3.18.1 Advanced RSTP settings

Variable available for editing:

 RSTP State – off mode, STP or RSTP.  BPDU Forward  Bridge Priority – the priority of the bridge (switch), is set in steps of 4096 (1-

32768). It is required to determine Root Bridge (of the root switch). The root switch is the one with the lowest Bridge Priority value.

 TX Hold Count – limit the maximum number of BPDU packets sent per

second (1-10).

 Bridge Max Age – time of waiting for the bridge in seconds, after which it

sends a message about rebuilding of the network (6-40 seconds).

 Bridge Hello Time – the period of sending BPDU packets in seconds (1-2

seconds).

 Forward Delay Time – the delay of transition of port states from the Listening

and Learning state to the Forwarding state (in seconds) (4-30).

Port settings:

 RSTP State – including the port in the STP / RSTP protocol. If support of the

ring topology on a specific port is not required, this port can be excluded from RSTP. However, note that if this port becomes a backup line, this may lead to the looping of packets and a storm.

 Port Priority – port priority (0-240) changes in steps of 16.  Cost – the cost of the port's path (1-200000000). If there are several alternative

paths, the one with the minimum sum of the cost of path is always chosen. The cost of the port depends on its throughput, for the FastEthernet port it is 200000, for the port GigabitEthernet it is 20000.

 Auto cost – select the cost of the port path. The cost of the path is chosen

based on the port's throughput. If the tick is not set, the cost of the path is taken from the Cost field.

 Edge – manual or automatic detection of the edge port. Edge port is a port that

directly connects to a network segment, where the creation of a loop is impossible. An example of an edge port is a port directly connected to a workstation. Ports configured as edge ports go into the packet propagation state immediately, bypassing the listening and learning states. The edge port loses its status immediately as soon as it accepts a BPDU package, becoming a usual spanning tree port.

 PTP – manual or automatic detection of a point-to-point connection, that

provides a quick transition to the mode of packet propagation. The P2P port is used to connect to other bridges.

When setting Forward Delay Time, Bridge Hello Time, Bridge Max Age,

the following condition should be met:

2*(Forward Delay Time - 1) >= Bridge Max Age >= 2*(Bridge Hello Time + 1).

After configuring RSTP, check the resulting topology in the RSTP Status tab.

5.3.19 Configuring IGMP

IGMP → IGMP Snooping

Figure 5.3.19.1 Basic settings of IGMP Snooping

IGMP snooping is designed to prevent broadcasting of multicast traffic from being relayed to consumer computers that do not explicitly claim to be interested in

it. This allows the switches to exclude such traffic from the streams sent through ports to which its consumers are not connected, thereby substantially reducing the network load.

Basically, to enable IGMP snooping, you only need to turn it on. That is why the majority of the settings are hidden. To see all the settings, click the button "Advanced Settings Show"

Figure 5.3.19.2 Advanced IGMP Snooping settings

 IGMP Snooping state – state of IGMP protocol  Send IGMP Query – Send General Query. (It is possible to disable the

sending of General Query)

 Query Interval – the interval between sending Query messages (1-255

seconds). 60 seconds by default.

 Query Response Interval – the maximum time to wait for a response from the

host to send periodic public queries (1-25 seconds). 10 seconds by default.

 Group Membership Interval – the interval while the router is waiting for an

IGMP Report. If the report was not received, then the router believes that there are no more hosts on the network that belong to the group (1-255 seconds). 250 seconds by default.

 Other Querier Present Interval – if the switch is Non-Querier, then if it has

not received a Query during this interval, it starts to consider itself a Querier. 255 seconds by default.

 Port State – IGMP Snooping activity on the selected port. If the box is

checked, IGMP is active on the port. If the box is not checked, the port returns to the normal operating mode (i.e. the port will perceive all multicast traffic as broadcast)

Note: IGMP Snooping only works with traffic from the management VLAN. To see a list of the current multicast groups, go to the IGMP → IGMP Group List tab

5.3.20 Configuring SNMP

SNMP → SNMP

SNMP (Simple Network Management Protocol) – is a protocol used to

manage and monitor network devices. Using the SNMP protocol, the software can

access information that is stored on managed devices (for example, on a switch). On

managed devices, SNMP stores information about the device on which it operates in

a database called MIB.

The switch supports SNMP v1 and SNMP v3.

5.3.20.1 Configuring SNMP v1

Figure 5.3.20.1 Configuring SNMP v1

 State — state.  Traps Server IP address – the IP address of the server to which SNMP Traps

are sent.

 Version – SNMP protocol version.  Read Community – read-only community, the string used for authentication

in SNMP v1. Also, Read Community is used to send SNMP Taps.

 Write Community – community for recording, the string used for

authentication in SNMP v1.

SNMP Traps will be sent only when events occur that are specified in the

Event List tab

5.3.20.2 Configuring SNMP v3

SNMP v3 provides a higher level of security compared to SNMP v1.

Fig. 5.3.20.2 Configuring SNMP v3

To configure SNMP v3, set the Version switch to "SNMP v3". SNMP v3 allows to flexibly configure the security level. The level is selected by the "Security Level" switch:

 NoAuth, NoPriv – authorization only on the User Name line, without

encryption (this mode is similar to SNMP v1)

 Auth, NoPriv – Auth Password authentication (method HMAC-MD5-

96), without encryption.

 Auth, Priv – Auth Password authentication (method HMAC-MD5-96),

AES-128 encryption using the Priv Password key.

Engine ID – identifier in SNMP v3. For each Switch Engine ID is unique, it is generated based on the MAC address of the device. That is, you do not need to change it, but you can set your own value if necessary.

5.3.21 MAC address filtering Security → MAC Address Filtering

TFortis switches support MAC address filtering for ports.

Figure 5.3.21.1 Configuring the port operating mode

In Normal state, the port operates in normal mode, performing packet

switching as usual, allowing any MAC addresses.

When the port is switched to Secure state, only MAC address added manually

to MAC Address Table can access this port. There are also several options how the port reacts to an unauthorized MAC address:

 Secure: MAC Filtration – if an unauthorized MAC address is detected on the

port, only this MAC address is blocked and the port continues to operate.

 Secure: Port shutdown 2 if an unauthorized MAC is detected on the port, the

port is blocked, data transmission stops.

 Secure: Temporary port shutdown – if an unauthorized MAC address is

detected on the port, the port is blocked for 5 minutes, data transfer stops. After this timeout, the port switches back to transmit data. While unauthorized MAC remains the ports blocks again.

To add a new authorized MAC address, use Add New MAC Address table. In order to do so, provide a MAC address and a port number.

Figure 5.3.21.2 Adding a new MAC address and the MAC Address table.

5.3.21.1 List of blocked MAC addresses Security →Blocked MAC Address

When MAC address filtering is enabled, this table will show the MAC address of all the devices attempted to access one of the protected ports of the switch but were not listed as permitted for this port.

Figure 5.3.21.3 List of blocked MAC addresses

In order to inform the network administrators about access attempts from unknown MAC addresses, you need to set up this event. To do so, in section Events → Event List check the box MAC Filtering

Figure 5.3.21.4 Event setup

And then configure any logging protocol (Syslog, SNMP-Trap or SMTP)

5.3.22 Set up Camera Comfort Start

Special Functions → Comfort Start

Comfort Start – A safe start of the camera. The most problematic moment in camera operations is its start at low temperature. To ensure comfortable conditions for starting a camera in the cold season it is recommended to power on the heater of the thermal housing and only then turn on the camcorder. Checked box enables 1 or 2 hours delay between powering on the switch and turning on PoE for the camera.

Attention!

This function is available only for outdoor PSW switches

Attention!

This function requires TFortis TH-02 or TH-03 thermal housings

Soft start time – select the preheating duration. If the air temperature does not fall below minus 30°C, it is recommended to set the preheating to 1 hour, for lower temperatures, it is recommended to set it to 2 hours.

Manual start – forced camera start without waiting for the preheating cycle to finish.

Figure 5.3.22.1 Camera Comfort Start settings

5.3.23 Camera Hanging Control settings

Special Functions → Auto Restart

Attention!

This function is available only for outdoor PSW switches

This function aims to automatically restart the camera if it hangs. Restart is available only when the camera is powered by active PoE. Automatic restart is not available if the camera is powered by passive PoE or by third-party PoE injector.

Figure 5.3.23.1 Camera Auto Restart settings

Auto restart mode – hanging indicator.

There are tree indicators of hanging:

 Link- loss of Link camera signal.  PING – no replies to service Ping requests.

 Speed — low port speed.

When using Ping indicator, provide camera IP address. When using Speed indicator, set up minimum port speed threshold. Speed unit is

Kbps. Manual restart – camera forced restart.

5.3.24 Link Aggregation

Ports → Link Aggregation

This function is not implemented yet!

TFortis SWU switches support creation up to 5 aggregated links containing 2 to 8 ports. Aggregation of the switch physical ports into an aggregated channel allows to increase the throughput between switches by a factor of N (where N is the number of ports in the group) and to improve the fault tolerance of the system. Aggregation is static thus it requires the manual setup.

Figure 5.3.24.1 Creating aggregated channel

In order to aggregate port groups into an aggregated channel, you need to choose in the table Add Trunk aggregating ports and specify one of them as a master port.

 State – trunk state. Set Enable to activate.  Master Port – master-port. Master port should belong to the list of ports

selected to the port group.

 Add – add a new group.

When a new group is added, it appears in Trunk List.

Figure 5.3.24.2 List of aggregated channels

To finally apply settings, press Apply button.

5.3.25 Port Mirroring

Ports → Port Mirroring

SWU switch supports traffic mirroring from the specified ports to the target

port.

Figure 5.3.25.1 Setup mirroring form port 2 to port 1

 State – enabling mirroring, by default mirroring is disabled.  Target Port — target port that receives duplicate data from the source ports.  Ports — source ports, the port supports several modes:

◦ N (Normal) — the port operated in normal mode, mirroring is disabled. ◦ R (Rx) – only received packets by this ports are duplicated to the target port ◦ T (Tx) – only sent packets by this ports are duplicated to the target port ◦ B (Both) – both, send and received packets of this port are duplicated to the

target port

5.3.26 Events broadcasting to Teleport integration units

Special Function → Teleport

TFortis Teleport-1 integration unit is aimed at connecting TFortis PSW switches to the security systems. One of the applications of Teleport-1 is the broadcasting of alarm events from TFortis PSW switches (opening the device casing, loss of connection to IP camera, etc.) to any security system, for example, "Bolid". The integration unit has relay outputs, to which the state of the dry contact inputs from the switch is relayed.

Figure 5.3.26.1 Network structure

Setup of the connection PSW switch ←→ Teleport integration unit requires the following steps:

1. Create the list of remote devices

Figure 5.3.26.2 Add new remote device

Name – text description, optional parameter, only for convenience Type – the type of remote device (Teleport-1 or Teleport-2) IP Address – IP address of the remote device

Added devices will be shown on the remote devices list:

Figure 5.3.26.3 Remote devices list

2. Binding the local input or event to the output of the remote device. Here you can bind, to which Teleport output the input signal is translated.

Figure 5.3.26.4 Inputs and events list

Inputs – input broadcasting settings

 Active – active. If this box is checked, the input is active and its state is

broadcast to the remote device.

 Remote Device – remote device  Remote Port – the remote device port number.  Inverse – inverse input state. I.e. when the input is open, the output of the

remote device will be short and vice versa.

 Current State – current input state.

Events – setting events broadcasting

 Active – active. If this box is checked, the event is broadcast to the remote

device output.

 Remote Device – remote device  Remote Port – the remote device port number.  Inverse – inverse  Current State – current state of the event

5.3.27 Cable Tester

Diagnostic Tools → Virtual Cable Tester

TFortis switches support the function of cable integrity check for "copper" Fast Ethernet ports. This test determines the type of fault (cutoff or short circuit) for each pair and specifies the distance from the switch to the fault location. The physical principle of testing relies on the fact that the switch sends a test electrical impulse over the cable, and on the basis of the delay time and the phase of the received reflected signal determines the distance to the fault and its type. For that period of time, the connection and the link on the tested port are intermitted. If the cable is fault-free and the properly functioning network device is connected to the other side, it is not possible to measure cable length this way, because test signal will be terminated by the end device and will not be a reflection.

To start testing, press the button under the relevant port in Diagnostic section. In this case, after the test, the table will display the test results for pairs 1-2 (whiteorange — orange) and 3-6 (white-green — green). In addition, the SWU switches are testing pairs 4-5, 7-8.

Possible testing results:

1. Short – Short circuit between pairs

2. Open – Break or cable is not connected

3. Good – there is no fault.

The guaranteed precision of cable length measurements by the tester is ± 2 meters. That is why it is possible that during the test of known good cable, the length of pairs 1-2 and 3-6 will be different. It may be attributed to the several factors: heterogeneous properties of copper conductors, different density of twisting of pairs, individual features of PSW switch.

In order to increase the accuracy of measurements, you can calibrate the cable tester. To do so, connect the cable with a length of at least 2 meters (leaving the

second end of the cable disconnected), in the Calibrate section of the WEB interface for the relevant port enter the length of the connected cable in meters in press Set. In

this case, the test is carried out and the correction coefficient is calculated.

Figure 5.3.27.1 Cable Tester interface

5.3.28 Remote Ping

Diagnostic Tools → Ping

Figure 5.3.28.1 Remote PING interface

PING is a software utility used to test connection in TCP/IP-based networks.

This utility sends four 32-bytes packages and waits for echo replies.

This utility helps you "ping" the camera directly from the switch. It may be

useful to resolve problems.

5.3.29 Switch statistics

The switch provides a variety of statistic information that can be useful to

solve network issues and for network administration.

5.3.29.1 Port Statistics

Statistics → Port Statistics

Figure 5.3.29.1.1 Port Statistics

Statistics on received and sent data for each switch port.

 RX – uncorrupted data received by the port (bytes).  TX – uncorrupted data sent from the port (bytes).

Note. All counters are 32-bit, they are reset after reaching the value 4294967295. By pressing «More info» you can see more detailed statistics for a particular port (see

Figure 5.3.24.1.2)

Figure 5.3.29.1.2 Detailed port statistics

5.3.29.2 PoE Status

Statistics → PoE Status

Figure 5.3.29.2.1 PoE Status

This tab displays information on PoE injection and current power for each port.

Status and power consumption are indicated only for active PoE.

Attention!

This function is available only for outdoor PoE PSW switches

 Status – PoE status (ON/OFF)  Mode – power type: type A – the power is transmitted in pairs 1-2, 3-6. Type

B – the power is transmitted in pairs 4-5, 7-8.

 Power – active PoE output power (W).  Total Power – total power (W), for correct operation should not exceed the

power budget.

5.3.29.3 ARP Table

Statistics → ARP Table

The page contains the ARP cache of the switch processor, represented as a table.

Figure 5.3.29.3.1 ARP table

5.3.29.4 MAC Table

Statistics → MAC Table

The tab contains the switching table: matching MAC-address to a physical port.

Figure 5.3.29.4.1 MAC table

5.3.29.5 DNS Table

Statistics → DNS Table

This tab contains the output of the DNS protocol: matching hostname with its IP

address.

Figure 5.3.29.5.1 DNS table

5.3.29.6 System log

Statistics → Log

The tab contains switch log. There are 10000 entries per page, in order to navigate to

the next page, click Next.

To save this log in a .txt file, press Download log as file.

Figure 5.3.29.6.1 Log

5.3.30 Firmware Update

Update/Backup → Update Firmware

PSW switch supports firmware update. The latest firmware is always available

on website tfortis.ru/en.

To update the firmware, download the firmware archive file. Unpack. The

firmware file has a *.img file extension.

Figure 5.3.30.1 *.img file

In web-interface go to Update Firmware tab and pick a firmware file by

pressing the Browse button.

Figure 5.3.30.2 Press Browse

Figure 5.3.30.3 Pick a *.img file

Press the Upload button and wait until the file is copied into device internal

storage.

Figure 5.3.30.4 Wait when the file upload is finished

When the file is uploaded, press Update to update or Cancel to cancel.

Figure 5.3.30.5 Press Update

After pressing Update, the update process will start. Do not reboot the switch

or turn off the power.

Figure 5.3.30.6 Wait while firmware update process finishes

Note: the switch also supports updating via Telnet from an external TFTP server. For

more information take a look at "Manage using Telnet" section.

5.3.31 Save and restore settings

Update/Backup → Backup/Recovery

PSW switches support saving current switch settings to a configuration file, this file editing and restoring settings from the file.

5.3.31.1 Save settings to file

In the side menu, select Update/Backup → Backup/Recovery

Figure 5.3.31.1.1 Save and restore settings interface

In section 1 press the button «Download a file». You will be asked if you want to save or open the file, Save.

Figure 5.3.31.1.2 Saving the settings file

5.3.31.2. Restore settings from the file.

If you want to restore previously saved settings from the file, then in Update/Backup

→ Backup/Recovery tab, choose in section 2 (Recovery settings) *.bak configuration

file and press «Upload» for upload.

Figure 5.3.31.2.1 Switch reboot

After uploading the file, the device will reboot and the settings will be applied.

5.3.31.3 Editing configuration file

Changing the configuration file can be useful, when a group of devices has similar settings. In this case you can create a universal configuration file for these devices and change only a small set of parameters for each device, for example, the IP address. Other parameters will be taken from the configuration file. The configuration file generated by the switch when saving settings to a file is a file with * .bak extension with settings in text form. This file can be opened with any text editor. The structure of the records has a strictly defined form of recording. In general, it looks like this:

#<variable name>=[<variable value>] Example: # IPADDRESS = [192.168.0.1], where the value of IPADDRESS variable

is 192.168.0.1

Description of settings with default parameters is shown in Table 5.3.2.

Table 5.3.2. Configuration file variables

Command syntax

Description

#IPADDRESS=[192.168.0.1]

IP address of the switch

#NETMASK=[255.255.255.0]

Subnet mask

#GATEWAY=[255.255.255.255]

default gateway

#USER_MAC=[c0:11:a6:0:0:0]

user's MAC address

#DNS=[255.255.255.255]

IP address of the DNS server

#DHCPMODE=[0]

DHCP mode (0 — disabled, 1 — DHCP client)

#LANG=[0]

interface language (0 – English, 1 — Russian)

#HTTP_USERNAME=[] #HTTP_PASSWD=[]

#USER1_USERNAME=[]

User name

#USER1_PASSWD=[]

Account password

#USER1_RULE=[0]

Access rights (0 – account disabled, 1 – Admin, 2 – User)

#SYSTEM_NAME=[]

device description

#SYSTEM_LOCATION=[]

device location

#SYSTEM_CONTACT=[]

contact information

#PORT1_STATE=[1]

port 1 state (1 – on / 0 – off) The same for other ports.

#PORT1_SPEEDDPLX=[0]

speed and duplex on port 1 (0 – auto, 1 – 10_half, 2 – 10_full, 3 – 100_half, 4 – 100_full, 5 – 1000_full), same for other ports.

#PORT1_FLOWCTRL=[0]

Flow Control on port 1 (0 – disable, 1 – enable), same for other ports.

#PORT1_WDT=[0]

automatic restart of the video camera connected to this port (0 – off, 1 –-restart after the loss of the Link signal, 2 – restart if no response to Ping, 3 – restart if speed is low), the same for other ports.

#PORT1_IPADDR=[0.0.0.0]

IP address of the camera connected to port 1, with the Ping restart function

active, the same for other ports.

#PORT1_WDT_SPEED=[0]

The lower threshold of the speed on the port with the speed restart function active for port 1, the same for the other ports. In Kbps.

#PORT_SOFTSTART_TIME=[1]

preheating time for camera housings with comfort start function (1 – 1 hour, 2 – 2 hours)

#PORT1_SOFTSTART=[0]

comfort start function for port 1 (0 – enabled, 1 – disabled), the same for other ports.

#PORT1_POE=[257]

PoE control on port 1 (257 – enabled, 0 – disabled), the same for other ports.

#SFP1_MODE=[0]

The operating mode of the SFP1 port (0forced, 1-auto), is the same for the SFP2 port.

#SMTP_STATE=[0]

SMTP protocol (0 – disabled, 1 — enabled)

#SMTP_SERV_IP=[0.0.0.0]

IP address of the SMTP server

#SMTP_TO1=[]

mailing address of recipient 1

#SMTP_TO2=[]

mailing address of recipient 2

#SMTP_TO3=[]

mailing address of recipient 3

#SMTP_FROM=[]

mailing address of the sender

#SMTP_SUBJ=[TFortis PSW-2G4F]

e-mail subject

#SMTP_LOGIN=[]

#SMTP_PASS=[]

password to access the mailbox

#SMTP_PORT=[25]

SMTP port

#SMTP_DOMAIN_NAME=[]

mail server domain name

#SNTP_STATE=[0]

SNTP protocol state

#SNTP_SETT_SERV=[0.0.0.0]

IP address of SNTP server

#SNTP_SERV_NAME=[]

Domain name of SNTP server

#SNTP_TIMEZONE=[0]

time zone, relative to UTC (from -12 to +13)

#SNTP_PERIOD=[10]

server synchronization period (1, 10 or 60 minutes)

#SYSLOG_STATE=[0]

Syslog protocol state

#SYSLOG_SERV_IP=[0.0.0.0]

IP address of the Syslog server

#EVENT_LIST_LINK_T=[12]

event of changing the link in the EventList (7 – disabled)

#EVENT_LIST_POE_T=[7]

event of changing the PoE status in the EventList list (7 – disabled)

#EVENT_LIST_STP_T=[7]

STP events in the EventList (7 – disabled)

#EVENT_LIST_ARLINK_T=[12]