Page 2 - COPYRIGHT & TRADEMARKS; Specifications are subject to change without notice.; FCC STATEMENT; ) This device may not cause harmful interference.; CE Mark Warning
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form ...
Page 3 - Safety Information
II Safety Information When product has power button, the power button is one of the way to shut off the product; When there is no power button, the only way to completely shut off power is to disconnect the product or the power adapter from the power source. Don’t disassemble the product, or mak...
Page 4 - CONTENTS; Chapter 1
CONTENTS Package Contents .......................................................................................................................... 1 Chapter 1 About This Guide ......................................................................................................... 2 1.1 Intended R...
Page 7 - IV
9.1.7 Packet Statistics ............................................................................................. 144 9.1.8 Querier Config................................................................................................ 145 9.2 MLD Snooping ...........................................
Page 9 - VI
13.2.2 Traps Config................................................................................................... 230 13.3 RMON....................................................................................................................... 233 13.3.1 History Control ........................
Page 10 - VII
VII 16.4 Network Diagnostics ................................................................................................. 270 16.4.1 Ping................................................................................................................ 270 16.4.2 Tracert..............................
Page 11 - Package Contents
Package Contents The following items should be found in your box: One TL-SL5428E switch One power cord One console cable Two mounting brackets and other fittings Installation Guide Resource CD for TL-SL5428E switch, including: This User Guide The CLI Reference Guide SNMP Mibs 802...
Page 12 - Chapter 1 About This Guide; Intended Readers
Chapter 1 About This Guide This User Guide contains information for setup and management of TL-SL5428E switch. Please read this guide carefully before operation. 1.1 Intended Readers This Guide is intended for network managers familiar with IT concepts and network terminologies. 1.2 Conventions In t...
Page 14 - Chapter 8 Ethernet OAM
Chapter Introduction Chapter 8 Ethernet OAM This module is used to configure Ethernet OAM function of the switch. Here mainly introduces: Basic Config: Enable the Ethernet OAM function, configure its OAM mode, and check out the connection status. Link Monitoring: Configure the parameters about O...
Page 16 - Return to CONTENTS
Chapter Introduction Chapter 16 Maintenance This module is used to assemble the commonly used system tools to manage the switch. Here mainly introduces: System Monitor: Monitor the memory and CPU of the switch. Log: View configuration parameters on the switch. Network Diagnostics: Including Ca...
Page 17 - Chapter 2 Introduction; Overview of the Switch; Resiliency and Availability; + Supports up to 4K VLANs simultaneously (out of 4K VLAN IDs); Quality of Service; + Supports L2/L3 granular CoS with 4 priority queues per port.; Security; + IP Source Guard prevents IP spoofing attacks.; Manageability
Chapter 2 Introduction Thanks for choosing the TL-SL5428E 24-Port 10/100Mbps + 4-Port Gigabit JetStream L2 Managed Switch! 2.1 Overview of the Switch Designed for workgroups and departments, TL-SL5428E from TP-LINK provides wire-speed performance and full set of layer 2 management features. It provi...
Page 18 - Appearance Description; Figure 2-1 Front Panel; LEDs
+ Supports Telnet, CLI, SNMP v1/v2c/v3, RMON and web access. + Port Mirroring enables monitoring selected ingress/egress traffic. 2.3 Appearance Description 2.3.1 Front Panel Figure 2-1 Front Panel The following parts are located on the front panel of the switch: 10/100Mbps RJ45 Ports: Designed to...
Page 19 - Figure 2-2 Rear Panel; Cable. For detail information, please refer to Installation Guide.
2.3.2 Rear Panel The rear panel of TL-SL5428E features a power socket and a Grounding Terminal (marked with ). Figure 2-2 Rear Panel Grounding Terminal: TL-SL5428E already comes with Lightning Protection Mechanism. You can also ground the switch through the PE (Protecting Earth) cable of AC cord o...
Page 20 - Chapter 3 Login to the Switch; Appendix B; admin; for the User; Login; button or press the; Enter; Configure the Hyper terminal as illustrated in
Chapter 3 Login to the Switch 3.1 Login In the IPv4 network: 1) To access the configuration utility, open a web-browser and type in the default address http://192.168.0.1 in the address field of the browser, then press the Enter key. Figure 3-1 Web-browser Tips: To log in to the switch, the IP add...
Page 22 - Apply
Figure 3-5 Login Tips: After logging in to the switch, you can add a global IPv6 address to your switch manually in 4.1.6 System IPv6 . Then you can configure your PC’s global IPv6 address in the same subnet and login to the switch via its global IPv6 address. For the detailed instructions, please r...
Page 23 - Config; . You are suggested to click; Save Config; before cutting off the power or rebooting the
Config . You are suggested to click Save Config before cutting off the power or rebooting the switch to avoid losing the new configurations. Return to CONTENTS 13
Page 24 - Chapter 4 System; Figure 4-1 System Summary
Chapter 4 System The System module is mainly for system configuration of the switch, including four submenus: System Info , User Management, System Tools and Access Security . 4.1 System Info The System Info, mainly for basic properties configuration, can be implemented on System Summary , Device De...
Page 25 - Figure 4-2 Port Information; Port Info; Figure 4-3 Bandwidth Utilization; Bandwidth Utilization
Indicates the 1000Mbps port is at the speed of 10Mbps or 100Mbps. Indicates the SFP port is not connected to a device. Indicates the SFP port is at the speed of 1000Mbps. Indicates the SFP port is at the speed of 100Mbps. When the cursor moves on the port, the detailed information of the port will b...
Page 27 - Figure 4-6 Daylight Saving Time
The following entries are displayed on this screen: Time Info Current System Date: Displays the current date and time of the switch. Current Time Source: Displays the current time source of the switch. Time Config Manual: When this option is selected, you can set the date and time manually. Get ...
Page 28 - The following entries are displayed on this screen:; DST Config; Enable or Disable DST.; System; to load the following page.
The following entries are displayed on this screen: DST Config DST Status: Enable or Disable DST. Predefined Mode: Select a predefined DST configuration: USA: Second Sunday in March, 02:00 – First Sunday in November, 02:00. Australia: First Sunday in October, 02:00 – First Sunday in April, 03:...
Page 29 - IP Config
Figure 4-7 System IP The following entries are displayed on this screen: IP Config MAC Address: Displays MAC Address of the switch. IP Address Mode: Select the mode to obtain IP Address for the switch. Static IP: When this option is selected, you should enter IP Address, Subnet Mask and Default ...
Page 31 - Introduction to IPv6 address; IPv6 address format
Introduction to IPv6 address 1. IPv6 address format An IPv6 address is represented as a series of 16-bit hexadecimals, separated by colons (:). An IPv6 address is divided into eight groups, and the 16 bits of each group are represented by four hexadecimal numbers which are separated by colons, for...
Page 33 - FFFE; to the middle of the; IPv6 Neighbor Discovery
An interface ID is used to identify interfaces on a link. The interface ID must be unique to the link. It may also be unique over a broader scope. In many cases, an interface ID will be the same as or based on the link-layer address of an interface. Interface IDs used in global unicast and other IPv...
Page 36 - Global Config
Choose the menu System → System Info → System IPv6 to load the following page. Figure 4-10 System IPv6 The following entries are displayed on this screen: Global Config IPv6: Enable/Disable IPv6 function globally on the Switch. Link-local Address Config Config Mode: Select the link-local address...
Page 38 - User Management; Figure 4-11 User Table
Status: Displays the status of the global address. Normal: Indicates that the global address is normal. Try: Indicates that the global address may be newly configured. Repeat: Indicates that the corresponding address is duplicate. It is illegal to access the switch using this address. 4.2 User...
Page 39 - Figure 4-12 User Config; User Info
Figure 4-12 User Config The following entries are displayed on this screen: User Info User Name: Create a name for users’ login. Access Level: Select the access level to login. Admin: Admin can edit, modify and view all the settings of different functions. Guest: Guest only can view the settin...
Page 40 - Figure 4-13 Config Restore
4.3 System Tools The System Tools function, allowing you to manage the configuration file of the switch, can be implemented on Config Restore , Config Backup , Firmware Upgrade , System Reboot and System Reset pages. 4.3.1 Config Restore On this page you can upload a backup configuration file to res...
Page 41 - Figure 4-14 Config Backup; Config Backup; to download the updated; Figure 4-15 Firmware Upgrade; You are suggested to backup the configuration before upgrading.
Figure 4-14 Config Backup The following entries are displayed on this screen: Config Backup Backup Config: Click the Backup Config button to save the current configuration as a file to your computer. You are suggested to take this measure before upgrading. Note: It will take a few minutes to backu...
Page 42 - Access Security; Management
4.3.4 System Reboot On this page you can reboot the switch and return to the login page. Please save the current configuration before rebooting to avoid losing the configuration unsaved Choose the menu System → System Tools → System Reboot to load the following page. Figure 4-16 System Reboot Note: ...
Page 43 - Figure 4-18 Access Control; Access Control Config; Select this option to limit the IP-range of the users; Session Config
Figure 4-18 Access Control The following entries are displayed on this screen: Access Control Config Control Mode: Select the control mode for users to log on to the Web management page. IP-based: Select this option to limit the IP-range of the users for login. MAC-based: Select this option to...
Page 45 - Figure 4-19 SSL Config; Enable/Disable the SSL function on the switch.; Certificate Download; connection will not work.
Figure 4-19 SSL Config The following entries are displayed on this screen: Global Config SSL: Enable/Disable the SSL function on the switch. Certificate Download Certificate File: Select the desired certificate to download to the switch. The certificate must be BASE64 encoded. Key Download Key...
Page 46 - Figure 4-20 SSH Config
Comprising server and client, SSH has two versions, V1 and V2 which are not compatible with each other. In the communication, SSH server and client can auto-negotiate the SSH version and the encryption algorithm. After getting a successful negotiation, the client sends authentication request to the ...
Page 48 - Network Requirements; Select the key type and key length, and generate SSH key.; Configuration Procedure; The key length is in the range of 256 to 3072 bits.
Network Requirements 1. Log on to the switch via key authentication using SSH and the SSH function is enabled on the mmended. 1. Select the key type and key length, and generate SSH key. switch. 2. PuTTY client software is reco Configuration Procedure Note: 1. The key length is in the range of 2...
Page 50 - Browse; to download the private key file to SSH client software and click; Open
5. Click Browse to download the private key file to SSH client software and click Open . After successful authentication, please enter the login user name. If you log on to the switch without entering password, it indicates that the key has been successfully loaded. 40
Page 52 - Chapter 5 Switching; Figure 5-1 Port Config; The following entries are displayed on this screen.
Chapter 5 Switching Switching module is used to configure the basic functions of the switch, including four submenus: Port , LAG , Traffic Monitor and MAC Address . 5.1 Port The Port function, allowing you to configure the basic features for the port, is implemented on the Port Config , Port Mirror ...
Page 53 - Switching; Figure 5-2 Port Mirror Config
Status: Allows you to Enable/Disable the port. When Enable is selected, the port can forward the packets normally. Speed and Duplex: Select the Speed and Duplex mode for the port. The deviceconnected to the switch should be in the same Speed andDuplex mode with the switch. When “Auto” is selected, t...
Page 55 - Figure 5-3 Port Security; Port Security
Figure 5-3 Port Security The following entries are displayed on this screen: Port Security Select: Select the desired port for Port Security configuration. It is multi-optional. Port: Displays the port number. Max Learned MAC: Specify the maximum number of MAC addresses that can be learned on the ...
Page 56 - Figure 5-4 Port Isolation Config; Port Isolation Config
5.1.4 Port Isolation Port Isolation provides a method of restricting traffic flow to improve the network security by forbidding the port to forward packets to the ports that are not on its forward portlist. Choose the menu Switching → Port → Port Isolation to load the following page. Figure 5-4 Port...
Page 57 - Figure 5-5 Loopback Detection Config; Web Refresh Interval:
Choose the menu Switching → Port → LoopbackDetection to load the following page. Figure 5-5 Loopback Detection Config The following entries are displayed on this screen: Global Config LoopbackDetection Status: Here you can enable or disable Loopback Detection function globally. Detection Interval:...
Page 59 - Figure 5-6 LAG Table
2. The traffic load of the LAG will be balanced among the ports according to the Aggregate Arithmetic. If the connections of one or several ports are broken, the traffic of these ports will be transmitted on the normal ports, so as to guarantee the connection reliability. Depending on different aggr...
Page 60 - Figure 5-7 Detail Information; Choose the menu; Figure 5-8 Static LAG Config; LAG Config; Select a Group Number for the LAG.; LAG Table
Figure 5-7 Detail Information 5.2.2 Static LAG On this page, you can manually configure the LAG. The LACP feature is disabled for the member ports of the manually added Static LAG. Choose the menu Switching → LAG → Static LAG to load the following page. Figure 5-8 Static LAG Config The following ent...
Page 62 - Figure 5-9 LACP Config; Click the; Select; button to quick-select the corresponding port based
Figure 5-9 LACP Config The following entries are displayed on this screen: Global Config System Priority: Specify the system priority for the switch. The system priority andMAC address constitute the system identification (ID). A lower systempriority value indicates a higher system priority. When ...
Page 63 - Traffic Monitor; Figure 5-10 Traffic Summary
Status: Enable/Disable the LACP feature for your selected port. LAG: Displays the LAG number which the port belongs to. 5.3 Traffic Monitor The Traffic Monitor function, monitoring the traffic of each port, is implemented on the Traffic Summary and Traffic Statistics pages. 5.3.1 Traffic Summary Tra...
Page 64 - Figure 5-11 Traffic Statistics
Packets Tx: Displays the number of packets transmitted on the port. Octets Rx: Displays the number of octets received on the port. The error octetsare counted in. Octets Tx: Displays the number of octets transmitted on the port. Statistics: Click the Statistics button to view the detailed traffic st...
Page 65 - Displays the details of the packets transmitted on the port.
Sent: Displays the details of the packets transmitted on the port. Broadcast: Displays the number of good broadcast packets received or transmitted on the port. The error frames are not counted in. Multicast: Displays the number of good multicast packets received or transmitted on the port. The erro...
Page 67 - Figure 5-13 Static Address
Type: Select the type of your desired entry. All: This option allows the address table to display all the address entries. Static: This option allows the address table to display the static address entries only. Dynamic: This option allows the address table to display the dynamic address entri...
Page 69 - Figure 5-14 Dynamic Address
On this page, you can configure the dynamic MAC address entry. Choose the menu Switching → MAC Address → Dynamic Address to load the following page. Figure 5-14 Dynamic Address The following entries are displayed on this screen: Aging Config Auto Aging: Allows you to Enable/Disable the Auto Aging ...
Page 70 - Figure 5-15 Filtering Address
Bind: Click the Bind button to bind the MAC address of your selected entry to the corresponding port statically. Tips: Setting aging time properly helps implement effective MAC address aging. The aging time that is too long or too short results decreases the performance of the switch. If the aging t...
Page 71 - Filtering Address Table; Displays the filtering MAC Address.
61 Filtering Address Table Select: Select the entry to delete the corresponding filtering address. It ismulti-optional. MAC Address: Displays the filtering MAC Address. VLAN ID: Displays the corresponding VLAN ID. Port: Here the symbol “__” indicates no specified port. Type: Displays the Type of t...
Page 72 - Chapter 6 VLAN; VLAN implementation
Chapter 6 VLAN The traditional Ethernet is a data network communication technology basing on CSMA/CD (Carrier Sense Multiple Access/Collision Detect) via shared communication medium. Through the traditional Ethernet, the overfull hosts in LAN will result in serious collision, flooding broadcasts, po...
Page 73 - Figure 6-2 Format of VLAN Tag; Link Types of ports; is TAG. The TRUNK port is generally used to connect the; cascaded; network devices for it
6.1 802.1Q VLAN VLAN tags in the packets are necessary for the switch to identify packets of different VLANs. The switch works at the data link layer in OSI model and it can identify the data link layer encapsulation of the packet only, so you can add the VLAN tag field into the data link layer enca...
Page 74 - Figure 6-3 VLAN Table
PVID PVID (Port Vlan ID) is the default VID of the port. When the switch receives an un-VLAN-tagged packet, it will add a VLAN tag to the packet according to the PVID of its received port and forward the packets. When creating VLANs, the PVID of each port, indicating the default VLAN to which the ...
Page 78 - Figure 6-6 View the Current VLAN of Port; VLAN ID; Configuration Procedure:
Click the Detail button to view the information of the corresponding VLAN. Figure 6-6 View the Current VLAN of Port The following entries are displayed on this screen: VLAN of Port VLAN ID Select: Click the Select button to quick-select the corresponding entry based on the VLAN ID number you enter...
Page 79 - Figure 6-7 Create and View MAC VLAN
received port. Thus, the packet is assigned automatically to the corresponding VLAN for transmission. 2. When receiving tagged packet, the switch will process it basing on the 802.1Q VLAN. If the received port is the member of the VLAN to which the tagged packet belongs, the packet will be forwarded...
Page 80 - Figure 6-8 Enable MAC VLAN for Port
6.2.2 Port Enable On this page, you can enable the port for the MAC VLAN feature. Only the port is enabled, can the configured MAC VLAN take effect. Choose the menu VLAN → MAC VLAN → Port Enable to load the following page. Figure 6-8 Enable MAC VLAN for Port Select your desired port for VLAN Mapping...
Page 81 - Table 6-2 Protocol types in common use; VLAN; Figure 6-9 Create Protocol VLAN; Create Protocol VLAN
Protocol Type Type value IPX 0x8137 IS-IS 0x8000 LACP 0x8809 802.1X 0x888E Table 6-2 Protocol types in common use The packet in Protocol VLAN is processed in the following way: 1. When receiving an untagged packet, the switch matches the packet with the current Protocol VLAN. If the packet is matche...
Page 82 - Figure 6-10 Create and View Protocol Template
Protocol VLAN Table Select: Select the desired entry. It is multi-optional. Protocol: Displays the protocol template of the VLAN. Ether Type: Displays the Ethernet protocol type field in the protocol template. VLAN ID: Displays the corresponding VLAN ID of the protocol. Operation: Click the Edit b...
Page 83 - Figure 6-11 Enable Protocol VLAN for Port; Application Example for 802.1Q VLAN
6.3.3 Port Enable On this page, you can enable the port for the Protocol VLAN feature. Only the port is enabled, can the configured Protocol VLAN take effect. Choose the menu VLAN → Protocol VLAN → Port Enable to load the following page. Figure 6-11 Enable Protocol VLAN for Port Select your desired ...
Page 85 - Application Example for MAC VLAN
6.5 Application Example for MAC VLAN Network Requirements Switch A and switch B are connected to meeting room A and meeting room B respectively, and the two rooms are for all departments; Notebook A and Notebook B, special for meeting room, are of two different departments; The two departmen...
Page 86 - Application Example for Protocol VLAN
Step Operation Description 4 Configure MAC VLAN 10 On VLAN → MAC VLAN → MAC VLAN page, create MAC VLAN10 with the MAC address as 00-19-56-8A-4C-71. 5 Configure MAC VLAN 20 On VLAN → MAC VLAN → MAC VLAN page, create MAC VLAN10 with the MAC address as 00-19-56-82-3B-70. 6 Port Enable Required. On the ...
Page 89 - Table 6-3 Values of Ethernet frame protocol type in common use; This VLAN VPN function is implemented on the; Figure 6-12 VPN Global Config
Protocol type Value LACP 0x8809 802.1X 0x888E Table 6-3 Values of Ethernet frame protocol type in common use This VLAN VPN function is implemented on the VPN Config , VLAN Mapping and Port Enable pages. 6.7.1 VPN Config This page allows you to enable the VPN function, adjust the global TPID for VLAN...
Page 90 - Figure 6-13 Create VLAN Mapping Entry
Choose the menu VLAN → VLAN VPN → VLAN Mapping to load the following page. Figure 6-13 Create VLAN Mapping Entry The following entries are displayed on this screen: VLAN Mapping Config C VLAN: Enter the ID number of the Customer VLAN. C VLAN refers to the VLAN to which the packet received by switc...
Page 91 - Figure 6-14 Enable VLAN Mapping for Port; Configuration Procedure of VLAN VPN Function:
Figure 6-14 Enable VLAN Mapping for Port Select your desired port for VLAN Mapping function. All the ports are disabled for VLAN Mapping function by default. Configuration Procedure of VLAN VPN Function: Step Operation Description 1 Enable VPN mode. Required. On the VLAN → VLAN VPN → VPN Config page...
Page 92 - The Elements of a Private VLAN; only join to one Primary VLAN.; Features of Private VLAN; A Private VLAN contains one Primary VLAN and one Secondary VLAN.; Private VLAN Implementation
6.8 Private VLAN Private VLANs, designed to save VLAN resources of uplink devices and decrease broadcast, are sets of VLAN pairs that share a common primary identifier. To guarantee user information security, the ease with which to manage and account traffic for service providers, in campus network,...
Page 93 - Port
Packets from different Secondary VLANs can be forwarded to the uplink device via promiscuous port and carry no corresponding Secondary VLAN information. Packets from Primary VLANs can be sent to end users via host port and carry no Primary VLAN information. Private VLAN is designed to save VLAN ...
Page 94 - Packet forwarding in Private VLAN
Port5 5 VLAN5 Port2 2 VLAN2 Port3 3 VLAN3 Table 6-4 Port settings before configuration synchronization Port PVID Allowed VLANs Port5 5 VLAN2, 3, 5 Port2 2 VLAN2, 5 Port3 3 VLAN2, 5 Table 6-5 Port settings after configuration synchronization MAC address duplication: After port configuration synchro...
Page 95 - PVLAN Config; and; Port Config
The Private VLAN packet forwarding process (here we take traffic transmission for PC2) based on the figure above is illustrated as follows: 1) PC2 sends out its first upstream packet with the source MAC as mac_2 and the destination MAC as mac_a. This packet is untagged. 2) When the host port Port2 o...
Page 96 - Figure 6-16 Create Private VLAN
Choose the menu VLAN → Private VLAN → PVLAN Config to load the following page. Figure 6-16 Create Private VLAN The following entries are displayed on this screen: Create Private VLAN Primary VLAN: Enter the ID number of the Primary VLAN. Secondary VLAN: Enter the ID number of the Secondary VLAN. ...
Page 97 - Figure 6-17 Create and View Protocol Template
Figure 6-17 Create and View Protocol Template The following entries are displayed on this screen: Port Config Port: Select the desired port for configuration. Port Type: Select the Port Type from the pull-down list for the port. Primary VLAN: Specify the Primary VLAN the port belongs to. Secondary...
Page 99 - GVRP
LeaveAll Timer: Once a GARP entity starts up, it starts the LeaveAll timer, and sends out a LeaveAll message after the timer times out, so that other GARP entities can re-register all the attribute information on this entity. After that, the entity restarts the LeaveAll timer to begin a new cycle....
Page 100 - Figure 6-18 GVRP Config
Figure 6-18 GVRP Config Note: If the GVRP feature is enabled for a member port of LAG, please ensure all the member ports of this LAG are set to be in the same status and registration mode. The following entries are displayed on this screen: Global Config GVRP: Allows you to Enable/Disable the GVR...
Page 101 - Application Example for Private VLAN
LeaveAll Timer: Once the LeaveAll Timer is set, the port with GVRP enabled can send a LeaveAll message after the timer times out, so that other GARP ports can re-register all the attribute information. After that, the LeaveAll timer will start to begin a new cycle. The LeaveAll Timer ranges from 100...
Page 104 - Chapter 7 Spanning Tree; Bridge Identifier
Chapter 7 Spanning Tree STP (Spanning Tree Protocol), subject to IEEE 802.1D standard, is to disbranch a ring network in the Data Link layer in a local network. Devices running STP discover loops in the network and block ports by exchanging information, in that way, a ring network can be disbranched...
Page 105 - Figure 7-1 Basic STP diagram; STP Timers; Assuming two BPDUs: BPDU X and BPDU Y; STP Generation; In the beginning
Figure 7-1 Basic STP diagram STP Timers Hello Time: Hello Time ranges from 1 to 10 seconds. It specifies the interval to send BPDU packets. It is used to test the links. Max. Age: Max. Age ranges from 6 to 40 seconds. It specifies the maximum time the switch can wait without receiving a BPDU befor...
Page 106 - Table 7-1 Comparing BPDUs; Step Operation; Table 7-2 Selecting root port and designated port; Tips
Step Operation 1 If the priority of the BPDU received on the port is lower than that of the BPDU if of the port itself, the switch discards the BPDU and does not change the BPDU of the port. 2 If the priority of the BPDU is higher than that of the BPDU of the port itself, the switch replaces the BPD...
Page 107 - Figure 7-2 Basic MSTP diagram
point-to-point link, it can transit to forwarding state after getting response from the downstream switch through handshake. RSTP Elements Edge Port: Indicates the port connected directly to terminals. P2P Link: Indicates the link between two switches directly connected. MSTP (Multiple Spanning Tr...
Page 108 - Figure 7-3 Port roles
Port States In an MSTP, ports can be in the following four states: Forwarding: In this status the port can receive/forward data, receive/send BPDU packets as well as learn MAC address. Learning: In this status the port can receive/send BPDU packets and learn MAC address. Blocking: In this st...
Page 109 - Figure 7-4 STP Config
Figure 7-4 STP Config The following entries are displayed on this screen: Global Config STP: Enable/Disable STP function globally on the switch. Version: Select the desired STP version on the switch. STP: Spanning Tree Protocol. RSTP: Rapid Spanning Tree Protocol. MSTP: Multiple Spanning Tre...
Page 110 - Spanning Tree; Figure 7-5 STP Summary
Note: 1. The forward delay parameter and the network diameter are correlated. A too small forward delay parameter may result in temporary loops. A too large forward delay may cause a network unable to resume the normal state in time. The default value is recommended. 2. An adequate hello time parame...
Page 111 - Figure 7-6 Port Config
7.2 Port Config On this page you can configure the parameters of the ports for CIST Choose the menu Spanning Tree → Port Config to load the following page. Figure 7-6 Port Config The following entries are displayed on this screen: Port Config Port Select: Click the Select button to quick-select th...
Page 115 - Figure 7-9 Instance Port Config; Global configuration Procedure for Spanning Tree function:
Figure 7-9 Instance Port Config The following entries are displayed on this screen: Port Config Instance ID: Select the desired instance ID for its port configuration. Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select t...
Page 118 - Figure 7-10 Port Protect
Figure 7-10 Port Protect The following entries are displayed on this screen: Port Protect Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select the desired port for port protect configuration. It is multi-optional. Port: Di...
Page 119 - Figure 7-11 TC Protect; TC Protect; Application Example for STP Function; A is the central switch.; Network Diagram
Figure 7-11 TC Protect The following entries are displayed on this screen: TC Protect TC Threshold: Enter a number from 1 to 100. It is the maximum number of the TC-BPDUs received by the switch in a TC Protect Cycle. The default value is 20. TC Protect Cycle: Enter a value from 1 to 10 to specify ...
Page 122 - Suggestion for Configuration; Enable TC Protect function for all the ports of switches.
The configuration procedure for switch E and F is the same with that for switch D. The topology diagram of the two instances after the topology is stable For Instance 1 (VLAN 101, 103 and 105), the red paths in the following figure are connected links; the gray paths are the blocked links. F...
Page 123 - Chapter 8 Ethernet OAM; OAM Overview; the OAMPDU is transmitted.
Chapter 8 Ethernet OAM OAM Overview Ethernet OAM (Operation, Administration, and Maintenance) is a Layer 2 protocol for monitoring and troubleshooting Ethernet networks. It can report the network status to network administrators through the OAMPDUs exchanged between two OAM entities, facilitating ...
Page 126 - As; The following figure shows how remote loopback testing works.
As Information OAMPDUs are sent between the OAM entities periodically, an OAM entity can inform one of its OAM peers of link faults through Information OAMPDUs. So the network administrator can get informed of the link faults and take action in time. Remote Loopback Remote loopback helps to ensure t...
Page 128 - Local Client; Displays the OAM mode of the selected port.
Figure 8-5 Discovery Info The following entries are displayed on this screen: Local Client The local client part shows the information of the local OAM entity. OAM: Displays whether the OAM function is enabled or disabled on the selected port. Mode: Displays the OAM mode of the selected port. Max ...
Page 129 - Remote Client
Variable Request: Displays whether the local client supports variable request. If supports, the local client can send some variable requests to the remote client to learn about the link status from the response of the remote client. PDU Revision: Displays the Information TLV revision of Information ...
Page 130 - Link Monitoring; Ethernet OAM
PDU Revision: Displays the TLV revision of the OAMPDU. Vendor Information: Displays the vender information of the remote client. 8.2 Link Monitoring On this page, you can configure the parameters about OAM link events, including the threshold and the detection period. Also, you can choose whether to...
Page 132 - Remote Loopback
Select: Select the desired port for configuration. It is multi-optional. Dying Gasp Notify: Choose whether to notify the dying gasp or not. Critical Event Notify: Choose whether to notify the critical event or not. 8.4 Remote Loopback On this page, you can initiate remote loopback if the OAM connect...
Page 138 - Application Example for DLDP
Shut Mode: Once detecting a unidirectional link, the port can be shut down in one of the following two modes: Auto : In this mode, DLDP generates logs and traps and shuts down the corresponding port on detecting unidirectional links, and the DLDP link state transits to Disable. Manual : In this ...
Page 140 - Reset; button to restore their state from Disable.
After these four ports are correctly connected, select ports 1/0/27 and 1/0/28 in the Port Config table and click the Reset button to restore their state from Disable. Return to CONTENTS 130
Page 141 - Chapter 9 Multicast; Multicast Overview; Figure 9-1 Information transmission in the multicast mode
Chapter 9 Multicast Multicast Overview In the network, packets are sent in three modes: unicast, broadcast and multicast. In unicast, the source server sends separate copy information to each receiver. When a large number of users require this information, the server must send many pieces of infor...
Page 145 - IGMP Snooping Process; IGMP Query Message
ports in a VLAN. The list is constructed and maintained by snooping IPv6 multicast control packets. MLD snooping performs a similar function in IPv6 as IGMP snooping in IPv4. The Multicast module is mainly for multicast management configuration of the switch, including three submenus: IGMP Snooping ...
Page 148 - Static Router Ports:; Configuration procedure:
Static Router Ports: Enter the static router port which is mainly used in the network with stable topology. VLAN Table VLAN ID Select: Click the Select button to quick-select the corresponding VLAN ID based on the ID number you entered. Select: Select the desired VLAN ID for configuration. It is m...
Page 156 - Multicast; Packet Statistics; IGMP Snooping Querier Config; Enter the ID of the VLAN that enables IGMP Snooping Querier.
in Layer 2 network. IGMP Snooping Querier can act as an IGMP Router in Layer 2 network. It can help to create and maintain multicast forwarding table on the switch with the Query messages it generates. Choose the menu Multicast → Querier to load the following page. Figure 9-12 Packet Statistics The ...
Page 160 - override their global configurations here.; VLAN Config
Unknown Multicast Filter: Choose to forward or drop unknown multicast data. Unknown IPv6 multicast packets refer to those packets without corresponding forwarding entries in the IPv6 multicast table: When unknown multicast filter is enabled, the switch will discard all received unknown IPv6 multicas...
Page 166 - Multicast Table
The following entries are displayed on this screen: Auto Fresh Auto Fresh: Enable/Disable auto fresh feature. Fresh Period: Enter the time from 3 to 300 seconds to specify the auto fresh period. MLD Packet Statistics Received MLD Query : Displays the number of MLD Query packets the switch has re...
Page 168 - Multicast IP Table; Displays the multicast IP.
Multicast IP Table Multicast IP: Displays the multicast IP. VLAN ID: Displays the VLAN ID. Forward Ports: Displays the forward ports of the group. Type: Displays the type of the group. Note: The max number of multicast entries is 256. The IPv4 multicast table and IPv6 multicast table share the tot...
Page 169 - Chapter 10 QoS; QoS; Figure 10-1 QoS function; Priority Mode; Priority
Chapter 10 QoS QoS (Quality of Service) functions to provide different quality of service for various network applications and requirements and optimize the bandwidth resource distribution so as to provide a network service experience of a better quality. QoS This switch classifies the ingress pac...
Page 170 - Figure 10-3 IP datagram; Schedule Mode; Mode. In this mode, the queue with higher priority will occupy the
2. 802.1P Priority Figure 10-2 802.1Q frame As shown in the figure above, each 802.1Q Tag has a Pri field, comprising 3 bits. The 3-bit priority field is 802.1p priority in the range of 0 to 7. 802.1P priority determines the priority of the packets based on the Pri value. On the Web management page ...
Page 171 - Voice VLAN
Figure 10-4 SP-Mode 2. WRR-Mode: Weight Round Robin Mode. In this mode, packets in all the queues are sent in order based on the weight value for each queue and every queue can be assured of a certain service time. The weight value indicates the occupied proportion of the resource. WRR queue overcom...
Page 172 - Figure 10-6 Port Priority Config
10.1 DiffServ This switch classifies the ingress packets, maps the packets to different priority queues and then forwards the packets according to specified scheduling algorithms to implement QoS function. This switch implements three priority modes based on port, on 802.1P and on DSCP, and supports...
Page 173 - Figure 10-7 DSCP Priority
Configuration Procedure: Step Operation Description 1 Select the port priority Required. On QoS → DiffServ → Port Priority page, configure the port priority. 2 Configure the mapping relation between the CoS priority and TC Required. On QoS → DiffServ → 802.1P/CoS mapping page, configure the mapping ...
Page 175 - Figure 10-9 Schedule Mode
The following entries are displayed on this screen: 802.1P Priority Config 802.1P Priority: Enable/Disable 802.1P Priority. Priority and CoS-mapping Config Tag-id/Cos-id: Indicates the precedence level defined by IEEE802.1P and the CoS ID. Queue TC-id: Indicates the priority level of egress queu...
Page 176 - Bandwidth Control; Rate Limit; Storm Control
WRR-Mode: Weight Round Robin Mode. In this mode, packets in all the queues are sent in order based on the weight value for each queue. The weight value ratio of TC0, TC1, TC2 and TC3 is 1:2:4:8. SP+WRR-Mode: Strict-Priority + Weight Round Robin Mode. In this mode, this switch provides two scheduling...
Page 178 - Figure 10-11 Storm Control; Storm Control Config
Figure 10-11 Storm Control The following entries are displayed on this screen: Storm Control Config Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select the desired port for Storm Control configuration. It is multi-optiona...
Page 179 - Table 10-1 OUI addresses on the switch; Port Voice VLAN Mode
10.3 Voice VLAN Voice VLANs are configured specially for voice data stream. By configuring Voice VLANs and adding the ports with voice devices attached to voice VLANs, you can perform QoS-related configuration for voice data, ensuring the transmission priority of voice data stream and voice quality....
Page 180 - Link type of the port and processing mode; Table 10-2 Port voice VLAN mode and voice stream processing mode; Security Mode of Voice VLAN; Table 10-3 Security mode and packets processing mode
Port Voice VLAN Mode Voice Stream Type Link type of the port and processing mode ACCESS: Not supported. TRUNK: Supported. The default VLAN of the port can not be voice VLAN. TAG voice stream GENERAL: Supported. The default VLAN of the port can not be voice VLAN and the egress rule of the access port...
Page 181 - Figure 10-12 Global Configuration
Note: Don’t transmit voice stream together with other business packets in the voice VLAN except for some special requirements. The Voice VLAN function can be implemented on Global Config, Port Config and OUI Config pages. 10.3.1 Global Config On this page, you can configure the global parameters of ...
Page 183 - Figure 10-14 OUI Configuration; Create OUI
Member State: Displays the state of the port in the current voice VLAN. LAG: Displays the LAG number which the port belongs to. 10.3.3 OUI Config The switch supports OUI creation and adds the MAC address of the special voice device to the OUI table of the switch. The switch determines whether a rece...
Page 184 - Configuration Procedure of Voice VLAN:
Configuration Procedure of Voice VLAN: Step Operation Description 1 Configure the link type of the port Required. On VLAN → 802.1Q VLAN → Port Config page, configure the link type of ports of the voice device. 2 Create VLAN Required. On VLAN → 802.1Q VLAN → Port Config page, click the Create button ...
Page 185 - Chapter 11 ACL
Chapter 11 ACL ACL (Access Control List) is used to filter packets by configuring match rules and process policies of packets in order to control the access of the illegal users to the network. Besides, ACL functions to control traffic flows and save network resources. It provides a flexible and sec...
Page 187 - Figure 11-3 Holiday Configuration
11.1.3 Holiday Config Holiday mode is applied as a different secured access control policy from the week mode. On this page you can define holidays according to your work arrangement. Choose the menu ACL → Time-Range → Holiday Config to load the following page. Figure 11-3 Holiday Configuration The ...
Page 189 - Figure11-6 Create MAC Rule; ACL
Choose the menu ACL → ACL Config → MAC ACL to load the following page. Figure11-6 Create MAC Rule The following entries are displayed on this screen: Create MAC-Rule ACL ID: Select the desired MAC ACL for configuration. Rule ID: Enter the rule ID. Operation: Select the operation for the switch to ...
Page 192 - Policy Config; Figure 11-9 Policy Summary
S-Port: Configure TCP/IP source port contained in the rule when TCP/UDP is selected from the pull-down list of IP Protocol. D-Port: Configure TCP/IP destination port contained in the rule when TCP/UDP is selected from the pull-down list of IP Protocol. DSCP: Enter the DSCP information contained in t...
Page 194 - Policy Binding; Figure 11-12 Binding Table
S-Mirror: Select S-Mirror to mirror the data packets in the policy to the specific port. S-Condition: Select S-Condition to limit the transmission rate of the data packets in the policy. Rate: Specify the forwarding rate of the data packets those match the corresponding ACL. Out of Band: Specify...
Page 195 - Figure 11-13 Bind the policy to the port
Policy Bind Table Select: Select the desired entry to delete the corresponding binding policy. Index: Displays the index of the binding policy. Policy Name: Displays the name of the binding policy. Interface: Displays the port number or VLAN ID bound to the policy. Direction: Displays the binding ...
Page 196 - Figure11-14 Bind the policy to the VLAN; Application Example for ACL
Figure11-14 Bind the policy to the VLAN The following entries are displayed on this screen: VLAN-Bind Config Policy Name: Select the name of the policy you want to bind. VLAN ID: Enter the ID of the VLAN you want to bind. VLAN-Bind Table Index: Displays the index of the binding policy. Policy Na...
Page 199 - Chapter 12 Network Security; Figure 12-1 Binding Table
Chapter 12 Network Security Network Security module is to provide the multiple protection measures for the network security, including six submenus: IP-MAC Binding , ARP Inspection , IP Source Guard, DoS Defend, 802.1X and PPPoE Config . Please configure the functions appropriate to your need. 12.1 ...
Page 201 - Figure 12-2 Manual Binding; Manual Binding Option
Figure 12-2 Manual Binding The following entries are displayed on this screen: Manual Binding Option Host Name: Enter the Host Name. IP Address: Enter the IP Address of the Host. MAC Address: Enter the MAC Address of the Host. VLAN ID: Enter the VLAN ID. Port: Select the number of port connected t...
Page 202 - Figure 12-3 ARP Implementation Procedure; Network Security; to load the following
address of the Host on Network layer. MAC address, the address of the Host on Data link layer, is necessary for the packet to reach the very device. So the destination IP address carried in a packet need to be translated into the corresponding MAC address. ARP functions to translate the IP address i...
Page 203 - Figure 12-4 ARP Scanning; Scanning Option
Figure 12-4 ARP Scanning The following entries are displayed on this screen: Scanning Option Start IP Address: Specify the Start IP Address. End IP Address: Specify the End IP Address. VLAN ID: Enter the VLAN ID. If blank, the switch will send the untaggedpackets for scanning. Scan: Click the Scan...
Page 204 - DHCP Working Principle; Figure 12-5 Network diagram for DHCP-snooping implementation; The Client broadcasts the DHCP-DISCOVER packet to find the
DHCP Working Principle DHCP works via the “Client/Server” communication mode. The Client applies to the Server for configuration. The Server assigns the configuration information, such as the IP address, to the Client, so as to reach a dynamic employ of the network source. A Server can assign the ...
Page 205 - DHCP Cheating Attack
( 2 ) DHCP-OFFER Stage: Upon receiving the DHCP-DISCOVER packet, the DHCP Server selects an IP address from the IP pool according to the assigning priority of the IP addresses and replies to the Client with DHCP-OFFER packet carrying the IP address and other information. ( 3 ) DHCP-REQUEST Stage: In...
Page 206 - Figure 12-7 DHCP Cheating Attack Implementation Procedure
Figure 12-7 DHCP Cheating Attack Implementation Procedure DHCP Snooping feature only allows the port connected to the DHCP Server as the trusted port to forward DHCP packets and thereby ensures that users get proper IP addresses. DHCP Snooping is to monitor the process of the Host obtaining the IP a...
Page 207 - Figure 12-8 DHCP Snooping; DHCP Snooping Config; Enable/Disable the DHCP Snooping function globally.; Global Flow Control:
Figure 12-8 DHCP Snooping Note: If you want to enable the DHCP Snooping feature for the member port of LAG, please ensure the parameters of all the member ports are the same. The following entries are displayed on this screen: DHCP Snooping Config DHCP Snooping: Enable/Disable the DHCP Snooping fu...
Page 208 - ARP Inspection
Decline Flow Control: Select the value to specify the Decline Flow Control. The trafficflow of the corresponding port will be limited to be this value ifthe transmission rate of the Decline packets exceeds theDecline Threshold. Option 82 Config Option 82 Support: Enable/Disable the Option 82 featu...
Page 209 - Imitating Gateway; Figure 12-9 ARP Attack - Imitating Gateway; Cheating Gateway
Attack, frequently occur to the network, especially to the large network such as campus network and so on. The following part will simply introduce these ARP attacks. Imitating Gateway The attacker sends the MAC address of a forged Gateway to Host, and then the Host will automatically update the A...
Page 210 - Figure 12-10 ARP Attack – Cheating Gateway; Cheating Terminal Hosts; Figure 12-11 ARP Attack – Cheating Terminal Hosts
Figure 12-10 ARP Attack – Cheating Gateway As the above figure shown, the attacker sends the fake ARP packets of Host A to the Gateway, and then the Gateway will automatically update its ARP table after receiving the ARP packets. When the Gateway tries to communicate with Host A in LAN, it will enca...
Page 215 - Figure 12-15 ARP Statistics; Auto Refresh; IP Source Guard
Figure 12-15 ARP Statistics The following entries are displayed on this screen: Auto Refresh Auto Refresh: Enable/Disable the Auto Refresh feature. Refresh Interval: Specify the refresh interval to display the ARP Statistics. Illegal ARP Packet Port: Displays the port number. Trusted Port: Indic...
Page 216 - Figure 12-16 IP Source Guard; IP Source Guard Config
Figure 12-16 IP Source Guard The following entries are displayed on this screen: IP Source Guard Config Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select your desired port for configuration. It is multi-optional. Port: ...
Page 218 - Table 12-1 Defendable DoS Attack Types
DoS Attack Type Description Ping Of Death ICMP ECHO Request Packet whose sum of "Fragment Offset" and "Total Length" fields in the IP header is greater than 65535 may cause Ping of Death attack. As the maximum packet length of an IPv4 packet including the IP header is 65,535 bytes, m...
Page 220 - The authenticator system is usually an 802.1X-supported network; Authentication Server System:; The authentication server system is an entity that; The Mechanism of an 802.1X Authentication System
protocol enabled, a supplicant can access the LAN only when it passes the authentication, whereas those failing to pass the authentication are denied when accessing the LAN. Architecture of 802.1X Authentication 802.1X adopts a client/server architecture with three entities: a supplicant system, a...
Page 221 - X Authentication Procedure; EAP Relay Mode; Figure 12-20 EAP-MD5 Authentication Procedure; packet to ask the 802.1X client program for the user name.
802.1X Authentication Procedure An 802.1X authentication can be initiated by supplicant system or authenticator system. When the authenticator system detects an unauthenticated supplicant in LAN, it will initiate the 802.1X authentication by sending EAP-Request/Identity packets to the supplicant. ...
Page 222 - EAP Terminating Mode; Figure 12-21 PAP Authentication Procedure; This timer is triggered by the switch
5. Upon receiving the key (encapsulated in an EAP-Request/MD5 Challenge packet) from the switch, the client program encrypts the password of the supplicant system with the key and sends the encrypted password (contained in an EAP-Response/MD5 Challenge packet) to the RADIUS server through the switch...
Page 224 - Figure 12-22 Global Config; Select the Authentication Method from the pull-down list.; Authentication Config
Figure 12-22 Global Config The following entries are displayed on this screen: Global Config 802.1X: Enable/Disable the 802.1X function. Auth Method: Select the Authentication Method from the pull-down list. EAP-MD5: IEEE 802.1X authentication system uses extensible authentication protocol (EAP)...
Page 226 - Figure 12-24 Radius Server
working for its fixed unauthorized status. Control Type: Specify the Control Type for the port. MAC Based: Any client connected to the port should pass the 802.1X Authentication for access. Port Based: All the clients connected to the port can access the network on the condition that any one of ...
Page 230 - Chapter 13 SNMP; SNMP Overview; SNMP Management Station is the workstation for running the; Figure 13-1 Relationship among SNMP Network Elements; SNMP Versions
Chapter 13 SNMP SNMP Overview SNMP (Simple Network Management Protocol) has gained the most extensive application on the UDP/IP networks. SNMP provides a management frame to monitor and maintain the network devices. It is used for automatically managing the various network devices no matter the ph...
Page 231 - v1 while enlarges the function of SNMP v1.; MIB Introduction; Figure 13-2 Architecture of the MIB tree; SNMP Configuration Outline; View
failing to pass community name authentication are discarded. The community name can limit access to SNMP Agent from SNMP NMS, functioning as a password. SNMP v2c: SNMP v2c also adopts community name authentication. It is compatible with SNMP v1 while enlarges the function of SNMP v1. SNMP v3: Basing...
Page 232 - Figure 13-3 Global Config
SNMP module is used to configure the SNMP function of the switch, including three submenus: SNMP Config , Notification and RMON . 13.1 SNMP Config The SNMP Config can be implemented on the Global Config , SNMP View , SNMP Group , SNMP User and SNMP Community pages. 13.1.1 Global Config To enable SNM...
Page 233 - Figure 13-4 SNMP View
13.1.2 SNMP View The OID (Object Identifier) of the SNMP packets is used to describe the managed objects of the switch, and the MIB (Management Information Base) is the set of the OIDs. The SNMP View is created for the SNMP management station to manage MIB objects. Choose the menu SNMP → SNMP Config...
Page 234 - Figure 13-5 SNMP Group; Group Config
Figure 13-5 SNMP Group The following entries are displayed on this screen: Group Config Group Name: Enter the SNMP Group name. The Group Name, Security Modeland Security Level compose the identifier of the SNMP Group.These three items of the Users in one group should be the same. Security Model: S...
Page 235 - Figure 13-6 SNMP User
Group Table Select: Select the desired entry to delete the corresponding group. It's multi-optional. Group Name: Displays the Group Name here. Security Model: Displays the Security Model of the group. Security Level: Displays the Security Level of the group. Read View: Displays the Read View name ...
Page 237 - Figure 13-7 SNMP Community
13.1.5 SNMP Community SNMP v1 and SNMP v2c adopt community name authentication. The community name can limit access to the SNMP agent from SNMP network management station, functioning as a password. If SNMP v1 or SNMP v2c is employed, you can directly configure the SNMP Community on this page withou...
Page 240 - concerned about
Type: Select the type for the notifications. Trap: Indicates traps are sent. Inform: Indicates informs are sent. The Inform type has a higher security than the Trap type. Retry: Specify the amount of times the switch resends an inform request. The switch will resend the inform request if it does...
Page 241 - Figure 13-9 Traps Config; SNMP Traps
Figure 13-9 Traps Config The following entries are displayed on this screen: SNMP Traps SNMP Authentication: If selected, the switch will send an SNMP Authentication trap when a received SNMP request fails the authentication. Coldstart: If selected, the switch will send a Coldstart trap when it is...
Page 244 - Figure 13-10 History Control; History Control Table
Figure 13-10 History Control The following entries are displayed on this screen: History Control Table Select: Select the desired entry for configuration. Index: Displays the index number of the entry. Port: Specify the port from which the history samples were taken. Interval: Specify the interval...
Page 247 - Chapter 14 LLDP; LLDPDU Format; Admin
Chapter 14 LLDP LLDP (Link Layer Discovery Protocol) is a Layer 2 protocol that is used for network devices to advertise their own device information periodically to neighbors on the same IEEE 802 local area network. The advertised information, including details such as device identification, capabi...
Page 248 - TLV; TLV Type
Disable: the port cannot transmit or receive LLDPDUs. 2) LLDPDU transmission mechanism If the ports are working in TxRx or Tx mode, they will advertise local information by sending LLDPDUs periodically. If there is a change in the local device, the change notification will be advertised. To pr...
Page 251 - Figure 14-1 Global Configuration; On this page you can configure all ports' LLDP parameters.; LLDP
Figure 14-1 Global Configuration The following entries are displayed on this screen: Global Config LLDP: Enable/disable LLDP function globally. Parameters Config Transmit Interval: Enter the interval for the local device to transmit LLDPDU to its neighbors. The default value is 30 seconds. Hold ...
Page 252 - Figure 14-2 Port Configuration
Figure 14-2 Port Configuration The following entries are displayed on this screen: LLDP Port Config Port Select: Select the desired port to configure. Admin Status: Select the port’s LLDP operating mode: Tx&Rx: Send and receive LLDP frames. Rx_Only: Only receive LLDP frames. Tx_Only: Onl...
Page 254 - Information; Device Statistics
The following entries are displayed on this screen: Auto Refresh Auto Refresh: Enable/Disable the auto refresh function. Refresh Rate: Specify the auto refresh rate. Neighbor Info Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Lo...
Page 255 - Figure 14-5 Device Statistics
Figure 14-5 Device Statistics The following entries are displayed on this screen: Auto Refresh Auto Refresh: Enable/Disable the auto refresh function. Refresh Rate: Specify the auto refresh rate. Global Statistics Last Update: Displays latest update time of the statistics. Total Inserts: Display...
Page 257 - Chapter 15 Cluster; The typical topology is as follows.; Figure 15-1 Cluster topology; Cluster Role; Indicates the device that is managed in a cluster.
Chapter 15 Cluster With the development of network technology, the network scale is getting larger and more network devices are required, which may result in a more complicated network management system. As a large number of devices need to be assigned different network addresses and every managemen...
Page 259 - Figure 15-3 NDP Summary
The following entries are displayed on this screen: Neighbor Search Option: Select the information the desired entry should contain and then click the Search button to display the desired entry in the following Neighbor Information table. Neighbor Info Native Port: Displays the port number of th...
Page 261 - Figure 15-4 NDP Config
Figure 15-4 NDP Config The following entries are displayed on this screen: Global Config NDP: Enable/Disable NDP function globally. Aging Time: Enter the period for the neighbor switch to keep the NDP packets from this switch. Hello Time: Enter the interval to send NDP packets. Port Config Selec...
Page 262 - Figure 15-5 Device Table
15.2 NTDP NTDP (Neighbor Topology Discovery Protocol ) is used for the commander switch to collect NDP information. NTDP transmits and forwards NTDP topology collection request based on NDP neighbor information table, and collects the NDP information and neighboring connection information of each de...
Page 263 - Figure 15-6 Information of the Current Device
Neighbor Info: Click the Detail button to view the complete information of this device and its neighbors. Collect Topology: Click the Collect Topology button to collect NTDP information of the switch so as to collect the latest network topology. Click the Detail button to view the complete informati...
Page 264 - Figure 15-7 NTDP Summary
Figure 15-7 NTDP Summary The following entries are displayed on this screen: Global Config NTDP: Displays the NTDP status (enabled or disabled) of the switch globally. NTDP Interval Time: Displays the interval to collect topology information. NTDP Hops: Displays the hop count the switch topology c...
Page 265 - Figure 15-8 NTDP Config; Enable/Disable NTDP for the switch globally.; Select the desired port for NTDP status configuration.
Figure 15-8 NTDP Config The following entries are displayed on this screen: Global Config NTDP: Enable/Disable NTDP for the switch globally. NTDP Interval Time: Enter the interval to collect topology information. The default is 1 minute. NTDP Hops: Enter the hop count the switch topology collects....
Page 266 - Figure 15-9 Cluster Summary for Candidate Switch
Enable: Click the Enable button to enable NTDP feature for the port you select. Disable: Click the Disable button to disable NTDP feature for the port you select. Note: NTDP function is effective only when NTDP function is enabled globally and for the port. 15.3 Cluster A commander switch can recogn...
Page 267 - Figure 15-10 Cluster Summary for Commander Switch
For a commander switch , the following page is displayed: Figure 15-10 Cluster Summary for Commander Switch The following entries are displayed on this screen: Global Config Cluster: Displays the cluster status (enabled or disabled) of the switch. Cluster Role: Displays the role the switch plays...
Page 268 - Figure 15-11 Cluster Summary for Member Switch; Figure 15-12 Cluster Summary for Individual Switch
Hops: Displays the hop count from the member switch to the commander switch. For a member switch, the following page is displayed: Figure 15-11 Cluster Summary for Member Switch The following entries are displayed on this screen: Global Config Cluster: Displays the cluster status (enabled or dis...
Page 269 - Figure 15-13 Cluster Configuration for Candidate Switch; Current Role; Figure 15-14 Cluster Configuration for Commander Switch
For a candidate switch, the following page is displayed. Figure 15-13 Cluster Configuration for Candidate Switch The following entries are displayed on this screen: Current Role Role: Displays the role the current switch plays in the cluster. Role Change Individual: Select this option to chang...
Page 270 - Figure 15-15 Cluster Configuration for Member Switch; Figure 15-16 Cluster Configuration for Individual Switch
The following entries are displayed on this screen: Current Role Role: Displays the role the current switch plays in the cluster. Role Change Candidate: Select this option to change the role of the switch to be candidate switch. Cluster Config Hold Time: Enter the time for the switch to keep t...
Page 271 - Figure 15-17 Member Config
The following entries are displayed on this screen: Current Role Role: Displays the role the current switch plays in the cluster. Role Change Candidate: Select this option to change the role of the switch to be candidate switch. 15.3.3 Member Config When this switch is the commander switch of th...
Page 272 - Figure 15-18 Collect Topology
15.3.4 Cluster Topology On this page you can see the whole cluster topology. Click the node switch to directly log on to the corresponding Web management page for you to configure and manage this switch. Double-click the node switch to view its detailed information. Choose the menu Cluster → Cluster...
Page 274 - Chapter 16 Maintenance; System Monitor; Figure 16-1 CPU Monitor
Chapter 16 Maintenance Maintenance module, assembling the commonly used system tools to manage the switch, provides the convenient method to locate and solve the network problem. ( 1 ) System Monitor: Monitor the utilization status of the memory and the CPU of switch. ( 2 ) Log: View the configurati...
Page 275 - Figure 16-2 Memory Monitor; Monitor; Severity; Level Description; Table 16-1 Log Level
16.1.2 Memory Monitor Choose the menu Maintenance → System Monitor → Memory Monitor to load the following page. Figure 16-2 Memory Monitor Click the Monitor button to enable the switch to monitor and display its Memory utilization rate every four seconds. 16.2 Log The Log system of switch can record...
Page 276 - Figure 16-3 Log Table
The Log function is implemented on the Log Table , Local Log , Remote Log and Backup Log pages. 16.2.1 Log Table The switch supports logs output to two directions, namely, log buffer and log file. The information in log buffer will be lost after the switch is rebooted or powered off whereas the info...
Page 277 - Figure 16-4 Local Log
16.2.2 Local Log Local Log is the log information saved in switch. By default, all system logs are saved in log buffer and the logs with severities from level_0 to level_2 are saved in log file meanwhile. On this page, you can set the output channel for logs. Choose the menu Maintenance → Log → Loca...
Page 278 - Figure 16-5 Log Host; Log Host; Configure the IP for the log host.; Maintenance; Figure 16-6 Backup Log; The following entry is displayed on this screen:; Backup Log
Figure 16-5 Log Host The following entries are displayed on this screen: Log Host Index: Displays the index of the log host. The switch supports 4 log hosts. Host IP: Configure the IP for the log host. UDP Port: Displays the UDP port used for receiving/sending log information. Here we use the stan...
Page 279 - Device Diagnostics; Figure 16-7 Cable Test; Cable Test
Backup Log: Click the Backup Log button to save the log as a file to your computer. Note: It will take a few minutes to backup the log file. Please wait without any operation. 16.3 Device Diagnostics This switch provides Cable Test functions for device diagnostics. Cable Test functions to test the c...
Page 280 - Network Diagnostics; Ping Config; Here you can view the Ping result.
16.4 Network Diagnostics This switch provides Ping test and Tracert test functions for network diagnostics. 16.4.1 Ping Ping test function, testing the connectivity between the switch and one node of the network, facilitates you to test the network connectivity and reachability of the host so as to ...
Page 281 - Tracert Config; Here you can view the Tracert result.
16.4.2 Tracert Tracert test function is used to test the connectivity of the gateways during its journey from the source to destination of the test data. When malfunctions occur to the network, you can locate trouble spot of the network with this tracert test. Choose the menu Maintenance → Network D...
Page 282 - Chapter 17 System Maintenance via FTP; Hardware Installation; Figure 17-1 Hardware Installation; Configure the Hyper Terminal; Start; Figure 17-2 Open Hyper Terminal
Chapter 17 System Maintenance via FTP The firmware can be downloaded to the switch via FTP function. FTP (File Transfer Protocol), a protocol in the application layer, is mainly used to transfer files between the remote server and the local PCs. It is a common protocol used in the IP network for fil...
Page 283 - the Name field and click; Figure 17-3 Connection Description; Select the port to connect in Figure 17-4 and click; Figure 17-4 Select the port to connect; Configure
2 ) The Connection Description Window will prompt shown as Figure 17-3. Enter a name into the Name field and click OK . Figure 17-3 Connection Description 3 ) Select the port to connect in Figure 17-4 and click OK . Figure 17-4 Select the port to connect 4 ) Configure the port selected in the step a...
Page 284 - Figure 17-5 Port Settings; Download Firmware via bootUtil menu; terminal. Connect FTP server to port 1 of the switch.
Figure 17-5 Port Settings 3. Download Firmware via bootUtil menu To download firmware to the switch via FTP function, you need to enter into the bootUtil menu of the switch and take the following steps. 1 ) Connect the console port of the PC to the console port of the switch and open hyper terminal....
Page 286 - Appendix A: Specifications
Appendix A: Specifications IEEE802.3 10Base-T Ethernet IEEE802.3u 100Base-TX/100Base-FX Fast Ethernet IEEE802.3ab 1000Base-T Gigabit Ethernet IEEE802.3z 1000Base-X Gigabit Ethernet IEEE802.3x Flow Control IEEE802.1p QoS IEEE802.1q VLAN Standards IEEE802.1X Port-based Access Authentication Ethernet: ...
Page 287 - Appendix B: Configuring the PCs; button, and then click; Control Panel; the; Network and Internet Connections; icon, and then click on the; Network; tab in the appearing window.
Appendix B: Configuring the PCs In this section, we’ll introduce how to install and configure the TCP/IP correctly in Windows 2000 and TCP/IPv6 in WIN7. First make sure your Ethernet Adapter is working, refer to the adapter’s manual if necessary. 1. In IPv4 network : 1) On the Windows taskbar, click...
Page 288 - IP; tab is open on this window by default.
Figure B-2 5) The following Internet Protocol (TCP/IP) Properties window will display and the IP Address tab is open on this window by default. Figure B-3 278
Page 290 - on this window by default.
Figure B-6 5) The following TCP/IPv6 Properties window will display and the IP Address tab is open on this window by default. 280
Page 291 - Use the following IPv6 address; . And the following items will be available. If the; IPv6 address; Click; OK; to save your settings.
281 Figure B-7 6) Select Use the following IPv6 address . And the following items will be available. If the switch's global IPv6 address is 3001::1/64, specify IPv6 address as 3001::14 for example , and the Subnet prefix length as 64. Now: Click OK to save your settings. Return to CONTENTS
Page 292 - Installation Guide; Next
Appendix C: 802.1X Client Software In 802.1X mechanism, the supplicant Client should be equipped with the corresponding client software complied with 802.1X protocol standard for 802.1X authentication. When the switch works as the authenticator system, please take the following instructions to insta...
Page 294 - Finish; to complete the installation.
Figure C-5 Install the Program 6. The InstallShield Wizard is installing TpSupplicant shown as the following screen. Please wait. Figure C-6 Setup Status 7. On the following screen, click Finish to complete the installation. 284
Page 295 - Figure C-7 InstallShield Wizard Complete; Software
Figure C-7 InstallShield Wizard Complete Note: Please pay attention to the tips on the above screen. If you have not installed WinPcap 4.0.2 or the higher version on your computer, the 802.1X Client Software TpSupplicant can not work. It’s recommended to go to http://www.winpcap.org to download the ...
Page 300 - Appendix D: Glossary; Differentiated Services Code Point (DSCP)
Appendix D: Glossary Access Control List (ACL) ACLs can limit network traffic and restrict access to certain users or devices by checking each packet for certain IP or MAC (i.e., Layer 2) information. Boot Protocol (BOOTP) BOOTP is used to provide bootup information for network devices, including IP...
Page 303 - A TCP/IP protocol commonly used for software downloads.
293 Secure Shell (SSH) A secure replacement for remote access functions, including Telnet. SSH can authenticate users with a cryptographic key, and encrypt data connections between management clients and the switch. Simple Network Management Protocol (SNMP) The application protocol in the Internet s...