Layer2 Gigabit Smart Switch BS-GS20 Series BS-GS20P Series User Manual Americas: www.buffaloamericas.com Europe: www.buffalo-technology.com 35020643-07 2018.
Contents Chapter 1 Initial Settings...............................................6 Product Requirements......................................................................6 Install Business Switch Configuration Tool.....................................6 Change Switch’s IP Address..............................................................7 Open Settings....................................................................................9 Configure Date and Time........................................
LLDP................................................................................................ 26 LLDP Properties........................................................................................26 LLDP Port...................................................................................................27 LLDP-MED Port..........................................................................................28 Neighbor Table....................................................................
Port Settings..............................................................................................46 IPv4/MAC Priority.....................................................................................46 IPv6 Priority...............................................................................................47 Status.........................................................................................................47 Security............................................................
ACL.................................................................................................. 63 ACL Wizard.................................................................................................63 MAC ACL....................................................................................................63 IPv4 ACL.....................................................................................................65 IPv6 ACL................................................................
Chapter 3 Troubleshooting......................................... 80 LED Is Not Lit, Abnormal Lighting or Blinking............................. 80 Cannot Access Settings.................................................................. 80 Forgot the Password...................................................................... 80 Appendix A Specifications........................................... 81 Product Specifications...................................................................
Chapter 1 Initial Settings Chapter 1 Initial Settings Product Requirements Compatible Devices, Browsers, and OSs Compatible Devices to Connect to BS-GS 1000BASE-T/100BASE-TX/10BASE-T compatible devices (PCs, Mac, NAS, switches) Compatible Browsers to Enter Settings Microsoft Edge Internet Explorer 8/9/10/11 Mozilla Firefox Google Chrome Safari Refer to our website to confirm the latest information of the compatible browser versions.
Chapter 1 Initial Settings Change Switch’s IP Address To enter Settings, the switch’s web user interface, the switch’s IP address should belong to the same segment as your PC’s IP address. 1 Connect the switch to your PC and your network with an Ethernet cable (sold separately). Confirm that link/act LED of the connected port is on. 2 Double-click the “Business Switch Configuration Tool” icon to open Business Switch Configuration Tool. 3 Click [Next] to start searching for the switch.
Chapter 1 Initial Settings 5 Click [Change IP Address]. 6 Configure the switch’s IP address to match the segment of the IP address of your PC and click [Next]. If the password input screen is displayed, enter “password” and click [Next]. 7 Click [Back to Select Switch].
Chapter 1 Initial Settings Open Settings 1 Configure the switch’s IP address referring to the “Change Switch’s IP Address” section above. 2 Double-click the “Business Switch Configuration Tool” icon to open Business Switch Configuration Tool. 3 Click [Next] to start searching for the switch. 4 Select the switch and click [Next].
Chapter 1 Initial Settings 5 Click [Settings (Web Admin Interface)]. 6 Click OK to launch a web browser and display the login screen. Enter “admin” as the username and “password” as the password, then click [Log In]. Configure Date and Time To configure the date and time, refer to the following procedure. 1 Open Settings. 2 Navigate to [Basic] - [Date & Time]. 3 Configure each settings and click [Apply]. Note: Enter the IP address or FQDN of the NTP server to change the NTP server.
Chapter 1 Initial Settings Change Username and Password To change the default username and password from “admin” and “password”, refer to the following procedure. 1 Open Settings. 2 Navigate to [Basic] - [System Security] - [Administration Account]. 3 Enter your new username and password (also fill the “Confirm” field), then click [Apply]. Notes: • For the new username, you may enter up to 8 alphanumeric characters, hyphens (-), and underscores (_).
Chapter 1 Initial Settings MAC Address Learning This switch uses SVL (Shared VLAN Learning) to learn MAC addresses. SVL is a method that retains a shared MAC address table for the entire switch. It differs from IVL, which retains a MAC address table for each VLAN. Be sure you understand how SVL works before you create a VLAN with the switch.
Chapter 2 Settings Chapter 2 Settings Refer to the “Open Settings” section in chapter 1 to access Settings. Menu System Information Displays the switch’s information. Basic System VLAN Routing SNMP LLDP MAC Addresses Port Settings System Security Configure the switch’s name, location, and contact. VLAN Settings Confirm VLAN status and create new VLAN. This switch’s IP address can also be configured on this page. VLAN Ports Configure PVID (Port VLAN ID).
Chapter 2 Settings QoS Settings Configure QoS priority. QoS Mapping Configure QoS mapping for each priority. VoIP Auto Priority Configure priority for SIP, H.323, SCCP. DiffServ QoS Security Authentication IPv4/MAC Policy Create DiffServ policies based on IPv4 or MAC addresses. IPv6 Policy Create DiffServ policies based on IPv6 addresses. Port Settings Configure ports to assign each DiffServ policy. IPv4/MAC Priority Configure priority of each DiffServ policy based on IPv4 or MAC address.
Chapter 2 Settings Dual Image Select a firmware image to be read when booting. Back Up and Restore Settings Save settings to a file or restore settings from a file. Reboot Reboot the switch. Initialize Initialize the switch. ARP Table (L3 mode only) Port Order Displays the ARP table ordered by ports. IP Address Order Displays the ARP table ordered by IP addresses. MAC Address Table Port Order Displays the MAC address table ordered by ports.
Chapter 2 Settings System Configure the switch’s name, location, and contact. Switch Name Enter the switch’s name. You may enter up to 50 alphanumeric characters, hyphens, and underscores. Location Enter the location of the switch. You may enter up to 50 alphanumeric characters, hyphens, underscores, and spaces. Contact Enter the contact information of the switch. You may enter up to 50 alphanumeric characters, hyphens, underscores, and spaces.
Chapter 2 Settings VLAN Status Displays current VLAN and PVID (Port VLAN ID) status. Click [Edit] to edit the VLAN selected. Click [Delete] to delete the VLAN selected. VLAN 1 cannot be deleted. VLAN ID Specify VLAN ID from 2-4094. VLAN Name Enter the VLAN name. You may enter up to 17 alphanumeric characters, hyphens, and underscores. Management VLAN Check it if the VLAN is a management VLAN. Only devices which belong to the management VLAN can open Settings.
Chapter 2 Settings Method of Acquiring DNS Server Address Select a method of obtaining the DNS server’s IP address. Primary DNS Server Enter the primary DNS server’s IP address. Secondary DNS Server Enter the secondary DNS server’s IP address. IPv6 Check “Enable” to enable IPv6. Obtain IPv6 address automatically Check “Enable” if the switch need to obtain router advertisement from IPv6compatible router. DHCPv6 Client Check “Enable” if using DHCPv6 client.
Chapter 2 Settings VLAN ID Specify the VLAN ID from 2-4094. VLAN Name Enter the VLAN name. You may enter up to 17 alphanumeric characters, hyphens, and underscores. Management VLAN If an IP address is assigned to the VLAN, that VLAN will become a management VLAN in L3 mode. IPv4 Address Enter an IPv4 address and a subnet mask to assign them to the VLAN. Up to 32 VLANs that a unique IPv4 addresses is assigned can be created. Tagged Select when you assign the port to tag member.
Chapter 2 Settings Static Default Gateway Enter the default gateway to configure an IPv6 default gateway manually. The default gateway prefix should be the same as the static global address. Dynamic Global Address Displays the dynamic global address obtained from DHCPv6 or router advertisement. The address with the trailing “SF” means that the address was obtained from DHCPv6. The address with the trailing “SL” means that the address was obtained from router advertisement.
Chapter 2 Settings Routing L2/L3 Settings Configure the layer mode of the switch. Specify the layer mode from the following. Mode L3 mode The switch works as a layer 3 switch. L2 mode The switch works as a layer 2 switch. Note: Switching the mode will delete static routing settings and all VLANs except VLAN 1. Static Routing Displayed only when the switch is in L3 mode. Configure the gateway to reach the specified network. Number of Static Routings Displays the number of enabled static routings.
Chapter 2 Settings Add the static routing setting to the table by entering the following items. Up to 32 static routes can be created. Static Routing Table Setting Static Routing Table Network Enter the IP address of the network that you need to configure the static routing for. Subnet Mask Enter the subnet mask of the network. Gateway Enter the IP address of the gateway to reach the specified network. Displays the static routing information.
Chapter 2 Settings SNMP Host Table Configure the SNMP host table. Note: To delete the registered host, make “Hostname” and “IP Address” field blank and click [Apply]. Enable/disable SNMP host authentication. Host Authentication Enable SNMP service will be provided from SNMP manager only. Read/write authority depends on the community. Disable Receive SNMP requests from any hosts. Read/write authority depends on the community. Hostname Enter a hostname to permit SNMP requests.
Chapter 2 Settings SNMP Trap Configure SNMP traps. Note: To use SNMP traps, register the host to the host table on the [Basic] - [SNMP] - [SNMP Host Table] page and enable “trap” for that community. Compatible traps: 0 coldStart 1 warmStart 2 LinkDown (Link Up/Down) 3 LinkUp (Link Up/Down) 4 authenticationFailure (Authentication Trap) 6 topoligyChange (STP) 7 Loop detection (Loop Detection) Private MIB OID: 1.3.6.1.4.1.5227.28.1.1.1 8 Trunk (Trunk) Private MIB OID: 1.3.6.1.4.1.5227.28.1.1.
Chapter 2 Settings SNMPv3 User Configure information of users who are authenticated with SNMPv3. SNMPv3 will authenticate users using username and the authentication can be encrypted. This switch is compatible with the following authentication and encryption method. Authentication method: HMAC-MD5-96/HMAC-SHA-96 Encryption method: CBC-DES/CFB-AES-128 Engine ID This is the switch’s unique ID to identify SNMP engine. This ID will be notified to other side when SNMPv3 communication is done.
Chapter 2 Settings LLDP LLDP Properties Configure LLDP. TLV Advertised Interval Enter the interval of sending LLDP packets. (5-32768 seconds) Hold Multiplier Enter the amount of time of TTL (Time To Live: the time that LLDP packets are held before the packets are discarded) measured in multiples of the TLV advertised interval. (2-10) Reinitializing Delay Enter the time that passes between disabling and reinitializing LLDP.
Chapter 2 Settings LLDP Port Configure LLDP for each port. Status Notification Disable Disable LLDP. Tx Only Enable transmitting LLDP packets only. Rx Only Enable receiving LLDP packets only. Tx and Rx Enable transmitting and receiving LLDP packets. If enabled, SNMP traps will be sent to the SNMP server when the neighbor table is updated. Note: To use notification, configure SNMP manager and SNMP trap settings.
Chapter 2 Settings LLDP-MED Port Configure LLDP-MED for each port. If enabled, LLDP-MED will be transmitted. Status Notification Note: To use this functionality, configure the status to [Tx Only] or [Tx and Rx] on the [LLDP Port] page. If enabled, the SNMP trap will be sent to the SNMP server when the LLDP-MED information in the neighbor table is updated. Note: To use notification, configure SNMP manager and SNMP trap settings.
Chapter 2 Settings Neighbor Table Displays the information of the LLDP-compatible devices connected to the switch. MSAP Entry # Displays the entry number of the detected devices. Local Port Displays port number that the detected devices are connected to. Chassis ID Subtype Displays the chassis ID subtype of the detected devices. Chassis ID Displays the chassis ID of the detected devices. Port ID Subtype Displays the port ID subtype of the detected devices.
Chapter 2 Settings Dynamic MAC Filtering Configure the dynamic MAC filtering that enables you to set the number of MAC address learn limits for each port. Dynamic MAC Filtering Check “Enable” to enable dynamic MAC filtering. Number Enter the number of MAC address learning limits of each port. (1-16384) Notes: • If the port’s “Number” field is left blank, all MAC addresses can pass through that port. • The number of MAC address learn limits can be set between 1-16384 for each port.
Chapter 2 Settings Convert MAC Address Add dynamic MAC addresses to static MAC filtering table to filter them in static MAC filtering. Add to Static MAC Filtering Table from Dynamic MAC Address Select a port number to display the dynamic MAC addresses that was learned from the port. Select MAC addresses to add to the static MAC filtering table and click [Add]. Static MAC Address Register the static MAC address to the MAC address table.
Chapter 2 Settings Port Settings Status Displays the port status. Name Displays the port name. Admin Displays whether the port is enabled (on) or disabled (off ). Link Status Displays whether the link is up or down. Autonegotiation Displays whether the autonegotiation is enabled (on) or disabled (off ). Speed/Duplex Displays the speed and duplex status. Flow Control Displays whether the flow control is enabled (on) or disabled (off ). IEEE 802.3az Displays whether IEEE 802.
Chapter 2 Settings Speed/Mode Settings Configure ports settings such as the transmission rate or flow control. Name Enter the port name. You may enter up to 15 alphanumeric characters, hyphens, underscores, and spaces. Admin Check to enable the port. Mode Select the transmission rate and duplex. Flow Control Check to enable flow control. IEEE 802.3az Check to enable IEEE802.3az. APD Check to enable APD (auto power down). If enabled, power consumption of link down ports can be reduced.
Chapter 2 Settings Access Management Configure each administration interface. SNMP Enable or disable SNMP administration interface. HTTPS Enable or disable HTTPS administration interface. Note: To use this functionality, upload SSL certificate on the [Basic] - [System Security] - [Certificate] page. Web Session Timeout Enter the timeout period for accessing Settings using HTTP. Maximum Web Session Number Enter the number of users who can access Settings using HTTP at the same time.
Chapter 2 Settings Upload HTTPS Certificate to Switch Upload HTTPS certificate. Download HTTPS Certificate from Switch Download HTTPS certificate. SSL Certificate Information Displays the uploaded certificate information. Click [Delete] to delete the uploaded certificate. Note: If the certificate is deleted, a certificate will be automatically created next time the switch reboots. Date & Time Configure whether to manually set the date and time or automatically using a SNTP server.
Chapter 2 Settings PoE This functionality is for PoE-compatible switches only. Status Displays the PoE status. Power Displays the maximum power, power being used, and available power. Displays if PoE is enabled (on) or disabled (off ). PoE Notes: • If you connect a PoE device to the switch while available power (shown to the right of "Available") is 16000 mW (16 W) or lower, the switch will not supply PoE power to the device. • The maximum power of BS-GS20P series is 180000 mW (180 W).
Chapter 2 Settings PoE Profiles Configure PoE settings for each profile that is used in [Power Profile] page. Profile Name To change the profile name, enter a new profile name and click [Modify]. PoE Enable or disable PoE functionality. Priority Configure the priority of PoE power feeding. When the supplied power exceeds maximum power, the switch will supply power to the ports in the order of priority. Configure the high-powered power feeding function.
Chapter 2 Settings Notes: • Click [Apply] to apply the current settings to all profiles. • To use dynamic power feeding by LLDP, configure the status to [Tx and Rx] on the [Basic] - [LLDP] - [LLDP Port] page. • If the supplied power exceeds the maximum power, the switch will supply power to the port in the order of the port number. Power Profile Configure the power saving schedule. Schedule Manual Switch the profile manually.
Chapter 2 Settings Select Profile Select a method of specifying the profile. “Copy profile from a different day” cannot be selected when “Day of week and time” is selected as the timetable type. Profile Select a profile name if “Use profile below” is selected as the method of specifying the profile. Click [Check] to confirm each profile’s settings. Use profile from Select a day of week to copy the profile if “Copy profile from a different day” is selected as the method of specifying the profile.
Chapter 2 Settings QoS Mapping Configure port-based priority for DSCP, CoS, and IP precedence. Port Priority Configure the priority of each port. DSCP Mapping Configure the DSCP priority value from 0-63. CoS Mapping Configure the CoS priority value from 0-7. IP Precedence Mapping Configure the IP precedence priority value from 0-7. Priority Configure the priority from 0-7. Note: DSCP mapping, CoS mapping, and IP precedence mapping is displayed when each type is selected.
Chapter 2 Settings VoIP Auto Priority Configure the priority of SIP, H.323, SCCP. VoIP Auto Priority Check to enable VoIP auto priority. Click [Show Detail] to enable or disable this functionality for each port. CoS Applied to the VoIP packets of SIP, H.323, SCCP only. If QoS is enabled, it is handled in accordance with CoS priority. IPv4/MAC Policy Create DiffServ policies. IPv4 and MAC addresses can be specified here.
Chapter 2 Settings The following screen appears when [Show Detail] is clicked. Policy Name Displays the selected policy name. CoS Adds the CoS value to the policy condition. Destination MAC Address Adds the frame’s destination MAC address to the policy condition. For instructions on how to enter the address, refer to “About Address and Mask” section below. Source MAC Address Adds the frame’s source MAC address to the policy condition.
Chapter 2 Settings Select the action for when the frames satisfy the condition. DiffServ Policy Permit Permits forwarding the frames and packets. Deny Discards the frames and packets. Egress Queue Changes the processing priority of the frames and packets. Remark CoS Rewrites CoS value of the frames and packets. Remark DSCP Rewrites DSCP value of the frames and packets. Remark IP Precedence Rewrites IP precedence value of the frames and packets.
Chapter 2 Settings IPv6 Policy Create DiffServ policies. IPv6 addresses can be specified here. The enabled policies will be applied when the packet or frame enters the switch. Current Number of Policies Displays the number of created policies. Current Number of Active Policies Displays the number of active policies. Policy Name Enter the policy name into the blank field and click [Apply] to create a new policy. Click [Show Detail] to configure the policy in detail.
Chapter 2 Settings Select the action for when the frames satisfy the condition. DiffServ Policy Permit Permits forwarding the frames and packets. Deny Discards the frames and packets. Egress Queue Changes the processing priority of the frames and packets. Remark CoS Rewrites CoS value of the frames and packets. Remark DSCP Rewrites DSCP value of the frames and packets. Remark IP Precedence Rewrites IP precedence value of the frames and packets.
Chapter 2 Settings Port Settings Configure the ports to apply DiffServ policies. The ports specified by ACL rules cannot be specified. Current Number of Active Policies Displays the number of active IPv4 and MAC address-based policies. Current Number of Active IPv6 Policies Displays the number of active IPv6 address-based policies. Port Settings Select a policy name and ports, then click [Apply]. IPv4/MAC (IPv6) ACL Rule List Displays the selected policy’s conditions.
Chapter 2 Settings IPv6 Priority Configure IPv6 address-based policies priority. IPv6 Policy List Displays the list of IPv6 address-based policies. Policies are listed in order of the priority. Move Policy Select a policy and enter the policy number that the selected policy moves to before (or after). Select [Before] or [After] and click [Move] to change the priority of the policy. Status Displays the DiffServ status. Policy List Displays the list of policies.
Chapter 2 Settings Security Auto DoS Attack Prevention Configure packets to be dropped. LAND Attack If enabled, the packets whose source IP address and destination IP address are the same will be dropped. Minimum TCP Header Size If enabled, the packets whose TCP header size is less than 20 bytes will be dropped. TCP/UDP L4 Port If enabled, the packets whose source port number and destination port number are the same will be dropped. Disable when using SNTP, RADIUS, and DHCP relay.
Chapter 2 Settings DHCP Snooping Configure DHCP snooping. DHCP snooping is a function to prevent leasing IP addresses when an illegal DHCP server is connected. DHCP Snooping Check to enable DHCP snooping. DHCP Option 82 Add option 82 to the DHCP packets received from DHCP clients. To obtain an IP address from the DHCP server using this functionality, the DHCP server should be compatible with option 82.
Chapter 2 Settings DHCP Table Displays the DHCP clients that obtained an IPv4 address from the DHCP server via the switch. Up to 256 clients can be listed. Note: DHCP table can be used only when DHCP snooping is enabled. MAC Address Displays the DHCP client’s MAC address. IPv4 Address Displays the IPv4 address that DHCP client obtained. Lease Time Displays the lease period of the IPv4 address. VLAN ID Displays the VLAN ID that the DHCP client belongs to.
Chapter 2 Settings Authentication Status Displays the authentication server and port authentication status. Primary/Secondary Displays if each server is enabled or disabled, and the server’s IP address and port number. Authentication Status Displays the authentication status of each port.
Chapter 2 Settings RADIUS Configure the RADIUS server. Authentication Check to enable authentication server. Authentication Server IP Enter the authentication server’s IP address. Authentication Server Port Enter the authentication server’s port number. (1-65535) Shared Secret Enter the shared secret of the authentication server. You may enter up to 20 alphanumeric characters, hyphens, and underscores. Reset Timer Enter the time that passes before re-authentication.
Chapter 2 Settings Port Authentication Configure authentication settings for each port. Prepare an authentication server (RADIUS server) separately. 802.1X Port Authenticate 802.1X based on the port. All devices connected to the port can communicate after the authentication. 802.1X MAC Authenticate 802.1X based on the MAC address. Only the authenticated devices can communicate. Up to 12 MAC addresses can be authenticated per port. By MAC Enables MAC authentication.
Chapter 2 Settings The MAC authentication port authenticates using the source MAC address when it receives IP packets. Use the following username and password to authenticate to the RADIUS server. Username: source MAC address Password: source MAC address Example: If the source MAC address of the IP packet is 00:11:22:33:AA:BB, the username and password is the following. Username: 00112233aabb Password: 00112233aabb Enter letters in lower case.
Chapter 2 Settings Notes: • 8 groups can be created in total between LACP and manual creation. Up to 8 port can be set to a group. • The ports in the same trunk group should belong to the same VLAN. • If you construct the trunk group using LACP, the opposing switch can set the LACP to both active and passive. Traffic Control Configure storm settings. If each packet exceeds the threshold configured on this page, exceeded packets will be dropped. Broadcast Select a rate to allow passing broadcasts.
Chapter 2 Settings Mirroring Configure to monitor the traffic (copy the contents of communication from source to destination). Enable Check to enable mirroring. Source Port Select ports to be monitored. Destination Port Select ports to monitor the traffic. Spanning Tree Protocol STP Settings Configure STP settings. Select a STP version from STP, RSTP or MSTP. STP Version Note: MSTP cannot be enabled when LDF is enabled. To disable LDF, navigate to [Advanced] - [Loop Prevention].
Chapter 2 Settings MSTP Status (MSTP only) Displays the MSTI configuration status. Select an MSTI ID and click [Edit] to add or delete the VLAN ID(s) and change the bridge priority value. Notes: • To use spanning tree, all devices in the segment must be compatible with spanning tree. • To configure each items, the following relational expression must be true. 2 x (Forward Delay - 1) ≥ Max Age Max Age ≥ 2 x (Hello Time + 1) Status Displays the STP status of each port.
Chapter 2 Settings Root Bridge Priority (STP/RSTP only) Select a root bridge priority of this switch. Root MAC Address (MSTP only) Displays the root bridge’s MAC address. CIST Root Bridge Priority (MSTP only) Displays the CIST root bridge’s bridge priority. CIST Root MAC Address (MSTP only) Displays the CIST root bridge’s MAC address. Regional Root Bridge Priority (MSTP only) Displays the bridge priority of the root bridge in the MST region.
Chapter 2 Settings Fastlink If enabled, the port will be in forwarding status immediately. It is recommended to enable fastlink to the port a PC is connected to. Disable it if the switch using STP is connected to the port. Note: Fastlink is disabled when the port trunking is configured. IGMP Status Displays the IGMP status. IGMP Status Displays the multicast address table. Router Port Status Displays the port connected to the multicast router (server). IGMP Settings Configure IGMP snooping.
Chapter 2 Settings IGMP Querier If IGMP querier is enabled, IGMP snooping can be enabled even if no multicast router is connected. IGMP Querier Check to enable IGMP querier. IGMP queries will be forwarded from each VLAN. Querier Interval Configure the transmit interval for the querier that confirms the existence of multicast group’s member. Querier Source IPv4 Address Enter the source IPv4 address of the querier.
Chapter 2 Settings MLD Status Displays the MLD status. MLD Status Displays the multicast address table. Router Port Status Displays the port connected to the multicast router (server). MLD Settings Configure MLD snooping. MLD Snooping Check to enable MLD snooping. If enabled, you can prevent the flooding of multicast packets except for the port connected to the host which joins the multicast group. Note: FF02::-FF02::FF and FF0X:: will be excepted from MLD snooping.
Chapter 2 Settings MLD Querier If MLD querier is enabled, MLD snooping can be enabled even if no multicast router is connected. MLD Querier Check to enable MLD querier. MLD queries will be forwarded from each VLAN. Querier Interval Configure the transmit interval for the querier that confirms the existence of multicast group’s member. Querier Source IPv6 Address Enter the source IPv6 address of the querier.
Chapter 2 Settings ACL ACL Wizard Configure ACLs with the wizard. Follow the directions on the screen. Based on source MAC address Configure to permit or deny the specified source MAC address. Based on destination MAC address Configure to permit or deny the specified destination MAC address. Based on source IPv4 address Configure to permit or deny the specified source IPv4 address. Based on destination IPv4 address Configure to permit or deny the specified destination IPv4 address.
Chapter 2 Settings The following screen is displayed when [Show Detail] is clicked. Up to 10 rules can be configured per group. ACL Rule List Displays the list of rules in the ACL group. Rules are listed in order of the priority. Move Rule Select a rule and enter the rule number that the selected rule moves to before (or after). Select [Before] or [After] and click [Move] to move the priority of the rule. ACL Group Name Displays the selected ACL group name.
Chapter 2 Settings IPv4 ACL Create IPv4 address-based ACLs. Current Number of Groups Displays the number of ACL groups. Current Number of Active Rules Displays the number of active rules for ACLs. ACL Group Name Displays the ACL group name. To create new ACLs, enter the group name and click [Apply]. Click [Show Detail] to add rules to the ACL group. To change the group name, select a group, enter the new name and click [Rename]. Number of Rules Displays the number of rules of each ACL group.
Chapter 2 Settings Select if the frames that satisfy the requirement can be forwarded to the other port or not. Permit/Deny Egress Queue Permit Forwards the incoming frames to the other port. Any packets or frames out of the range of permitted IP addresses will be dropped. Deny Drops the incoming frames. Apply the scheduling to the frames satisfy the requirement and configure the priority. Select the priority from 0 (lowest) to 7 (highest). The scheduling is executed based on strict or WRR.
Chapter 2 Settings The following screen is displayed when [Show Detail] is clicked. Up to 10 rules can be configured per group. IPv6 ACL Rule List Displays the list of rules in the ACL group. Rules are listed in priority order. Move Rule Select a rule and enter the rule number that the selected rule moves to before (or after). Select [Before] or [After] and click [Move] to move the priority of the rule. ACL Group Name Displays the selected ACL group name.
Chapter 2 Settings Ports Configure the ports to apply ACL groups. A total of up to 126 MAC ACL and IP ACL rules may be applied to the ports. Current Number of Active IPv4/MAC ACL Rules Displays the number of active rules for IPv4/MAC ACLs. Current Number of Active IPv6 ACL Rules Displays the number of active rules for IPv6 ACLs. Port Settings Select an ACL group name and ports, then click [Apply]. MAC (IPv4/IPv6) ACL Rule List Displays the selected ACL group’s rules.
Chapter 2 Settings IPv6 Priority Configure IPv6 ACL group’s priority. IPv6 ACL takes a priority than MAC and IPv4 ACL. IPv6 ACL Group List Displays the list of ACL groups. Groups are listed in order of the priority. Move Group Select a group and enter the group number that the selected group moves to before (or after). Select [Before] or [After] and click [Move] to move the priority of the group. Status Displays the ACL status. ACL Group List Displays the list of ACL groups.
Chapter 2 Settings Loop Prevention Configure loop prevention functionality. Configure the switch’s action when a loop is detected. Action Ignore When a loop is detected, the switch will do nothing for the port itself; the diag LED and loop-detected port’s LED will blink for the time configured in [Disable for] section. If a loop is detected again, it will blink and continue until the loop is resolved.
Chapter 2 Settings Loop Prevention Spanning Tree Action when the loop is detected Temporarily disables the port. After the configured time passes, the port will be enabled again. Blocks the port and switches the transmission route automatically. How to resolve the loop Resolve manually Data can be transmitted temporarily while the port is disabled. Data cannot be transmitted until the loop is resolved unless storm control is enabled.
Chapter 2 Settings Update Firmware Update firmware with the local firmware file. Select a file image to update and click [Browse] to select the firmware image, then click [Update]. Notes: • Do not turn off the switch or close the browser while updating. • To finish the update, reboot the switch. • If changing the firmware to version 1.0.3.32 or earlier, the Settings username and password may also be changed unintentionally. For more detailed information, refer to the “Restrictions” section in appendix A.
Chapter 2 Settings Notes: • Switching to the lower version image (older version firmware) may delete some settings. • If switching the firmware to version 1.0.3.32 or earlier, the Settings username and password may be changed unintentionally. For more detailed information, refer to the “Restrictions” section in appendix A. Back Up and Restore Settings Save or restore the switch’s settings. Back Up Settings Click [Save] to save current settings to a file.
Chapter 2 Settings Initialize Restore the switch settings to the factory default. Initialize Except IP Address Click [Initialize] to initialize all settings except the switch’s IPv4/IPv6 address. Initialize All Settings Click [Initialize] to initialize all switch settings. Physical Reset Button Enable or disable the reset button on the switch. ARP Table Displayed only when the switch is in L3 mode. ARP table can record up to 510 devices.
Chapter 2 Settings MAC Address Table Port Order Displays the MAC address table with the port order. Select a port from the dropdown menu to display the MAC addresses that are connected to the selected port. MAC Order Displays the MAC address table with the MAC address order. Note: “Authenticated” is displayed on “Device Authentication” section only when the PC is authenticated using 802.1X MAC or MAC authentication method.
Chapter 2 Settings Statistics Displays the switch’s statistics. Note: Each maximum value is 4,294,967,295. If this is reached or exceeded, the value will reset to 0. Rebooting the switch will also reset the value to 0. Name Displays the port name. Received Octets Displays the number of total received octets. Received Packets Displays the number of total received packets. Sent Octets Displays the number of total sent octets. Sent Packets Displays the number of total sent packets.
Chapter 2 Settings Sent Unicast Packets Displays the number of sent unicast packets. Sent Multicast Packets Displays the number of sent multicast packets. Sent Broadcast Packets Displays the number of sent broadcast packets. Discarded Sent Packets Displays the number of packets that could not be sent. Sent Packet Error Displays the number of packets that was discarded because of FCS error. Total Frames Rx Displays the number of total received EAP packets.
Chapter 2 Settings Syslog Settings Configure syslog to transfer logs. Transfer Logs Check to enable syslog server. IP Address Enter the syslog server’s IP address. Attach Header Select an item to attach to the header of the transmitted data. Type Select a type of log to transfer. Network Diagnostics Execute a communication test to the specified IP address. Ping Enter the IPv4/IPv6 address or FQDN and click [Apply] to execute a ping test to the destination.
Chapter 2 Settings Cable Diagnostics Click [Test] to check whether there are any issues with the Ethernet cable connected to each port. To check the cable status correctly, configure the following to this switch and the destination device in advance; • Autonegotiation: enabled • IEEE 802.3az (EEE): disabled • Auto power down (APD): disabled Note: If the destination device is not a BS-GS series switch, the result may not appear correctly. Displays the status of each Ethernet cable.
Chapter 3 Troubleshooting Chapter 3 Troubleshooting LED Is Not Lit, Abnormal Lighting or Blinking The power LED is not lit. • Confirm that the AC adapter or power cable is connected to the inlet. The diag LED is blinking red. • If it blinks once per a second, a loop is detected. Check the cabling. • If your switch has fans and its diag LED is blinking fast, a fan error may be occurring. Disconnect the power cable and reconnect it. If the LED keeps blinking, contact our technical support.
Appendix A Specifications Appendix A Specifications Product Specifications Refer to the quick setup guide to check the hardware specifications. Note: Only use the cables and accessories that are included in the package. Don’t use other accessories or cables unless specifically instructed to in the documentation.
Appendix A Specifications PoE Port Specification (Only for PoE-compatible devices) (Alternative A) Pin Number Power 1 Negative Vpse 2 Negative Vpse 3 Positive Vpse 4 - 5 - 6 Positive Vpse 7 - 8 - Factory Default Settings Switch Name BS + the switch’s MAC address Location Not defined Contact Not defined VLAN Mode VLAN VLAN ID 1 VLAN Name None Management VLAN Enabled Connection Method Static IP Address IPv4 Address 192.168.1.254 Subnet Mask 255.255.255.0 Default Gateway 0.
Appendix A Specifications SNMP Trap SNMP Settings SNMPv3 User LLDP Properties LLDP LLDP Port LLDP-MED Port Static MAC Filtering MAC Addresses Dynamic MAC Filtering MAC Address Aging Port Settings Speed/Mode Settings Authentication Trap Disabled Link Up/Down Disabled STP Disabled Loop Detection Disabled Trunk Disabled Username admin Access Control Read only Authentication Method None Authentication Key None Encryption None Encryption Key None TLV Advertised Interval 30 seco
Appendix A Specifications Administration Account System Security System Security Access Management Access Management Date & Time PoE (PoE-compatible product only) PoE Profiles Power Profiles QoS Settings QoS QoS Mapping VoIP Auto Priority Auto DoS Attack Prevention Security DHCP Snooping Username admin Password password SNMP Enabled HTTPS Disabled Web Session Timeout 5 minutes Maximum Web Session Number 5 Port 443 HTTPS Session Timeout 5 minutes Maximum HTTPS Session Number 2
Appendix A Specifications Authentication Authentication Port Trunking Traffic Control Mirroring RADIUS Port Authentication Authentication Primary authentication server: Enabled Secondary authentication server: Disabled Authentication Server IP 1.1.1.1 Authentication Server Port 1812 Shared Secret None Reset Timer 3600 seconds Advanced Accounting: Disabled Termination-Action: Disabled Dynamic VLAN Assignment: Disabled 802.1X Port Disabled 802.
Appendix A Specifications STP Settings Spanning Tree Protocol Ports IGMP Settings IGMP IGMP Querier Settings MLD Settings MLD MLD Querier Settings Loop Prevention Initialize DHCP Relay STP Version Disabled Hello Time 2 seconds Max Age 20 seconds Forward Delay 15 seconds Max Hop Count (MSTP only) 20 Bridge Priority 32768 BPDU Forwarding (Only when STP is disabled) Disabled MST Configuration Name (MSTP only) Automatically generated from the switch’s MAC address MST Revision Level (MSTP
Appendix A Specifications Syslog Settings Transfer Logs Disabled IP Address 0.0.0.0 Attach Header MAC Address and System Name Configuration Notice + Detail Authentication Notice + Detail Device Notice + Detail System Notice + Detail Restrictions Updating Firmware (1) If changing the firmware to version 1.0.3.32 or earlier when the current firmware version is version 1.0.3.
Appendix A Specifications Dual Imaging (1) If switching the firmware to version 1.0.3.32 or earlier when the current firmware version is version 1.0.3.36 or later and the current Settings password is longer than 8 characters, the Settings username and password will revert to the default (the username will be “admin”, and the password will be “password”).
Appendix B Regulatory Compliance Information Appendix B Regulatory Compliance Information For Customers in Europe Environmental Information • The equipment that you have purchased has required the extraction and use of natural resources for its production. • The equipment may contain hazardous substances that could impact health and the environment.
Appendix B Regulatory Compliance Information English This is a class A product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. This product may cause interference if used in residential areas. Such use must be avoided unless the user takes special measures to reduce electromagnetic emissions to prevent interference to the reception of radio and television broadcasts.
Appendix B Regulatory Compliance Information Norsk Dette er et produkt i klasse A. I et hjemmemiljø kan dette produktet forårsake radiointerferens, noe som gjør at brukeren i så fall må foreta passende tiltak. Dette produktet kan forårsake interferens dersom det brukes i boligområder. Slik bruk må unngås med mindre brukeren tar spesielle tiltak for å redusere elektromagnetisk stråling for å unngå interferens med mottak av radio- og TV-sendinger. Bruk kun kabler og tilbehør som er inkludert i pakken.
Appendix B Regulatory Compliance Information AC Adapter BS-GS2008 Asian Power Devices Inc. WA-24Q12R-Z079 BS-GS2008P Delta Electronics, Inc. DPS-150AB-13A Label Information Direct current (For BS-GS2008,BS-GS2008P) Polarity of DC connector (For BS-GS2008) Polarity of DC connector (For BS-GS2008P) The chassis of the switch may become quite hot. Before you touch the switch, disconnect the AC adapter or AC cable from the switch and wait for a short while.
