LevelOne GES-1651 16 GE with 2 Shared SFP Web Smart Switch User Manual REV1.0.
FCC STATEMENT This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications.
CONTENTS Package Contents ............................................................................................................................ 1 Chapter 1 About this Guide ............................................................................................................ 2 1.1 Intended Readers........................................................................................................... 2 1.2 Conventions ........................................................................
5.2 5.3 5.4 5.1.3 Port Security ...................................................................................................... 25 5.1.4 Port Isolation ..................................................................................................... 26 LAG .............................................................................................................................. 27 5.2.1 LAG Table ..........................................................................................
8.2 8.3 8.4 Multicast IP ................................................................................................................... 77 8.2.1 Multicast IP Table .............................................................................................. 77 8.2.2 Static Multicast IP .............................................................................................. 78 Multicast Filter .................................................................................................
11.3 11.4 Device Diagnostics......................................................................................................112 11.3.1 Cable Test.........................................................................................................112 11.3.2 Loopback ..........................................................................................................113 Network Diagnostics ...................................................................................................
Package Contents The following items should be found in your box: GES-1651 power cord 19" Rackmount Kit Quick Installation Guide Resource CD (User Manual) Note: Make sure that the package contains the above items. If any of the listed items are damaged or missing, please contact your distributor.
Chapter 1 About this Guide This User Guide contains information for setup and management of GES-1651 16 GE with 2 Shared SFP Web Smart Switch. Please read this guide carefully before operation. 1.1 Intended Readers This Guide is intended for network managers familiar with IT concepts and network terminologies. 1.
Chapter Introduction Chapter 4 System This module is used to configure system properties of the switch. Here mainly introduces: System Info: Configure the description, system time and network parameters of the switch. User Management: Configure the user name and password for users to log on to the Web management page with a certain access level. System Tools: Manage the configuration file of the switch.
Chapter Introduction Chapter 10 SNMP This module is used to configure SNMP function to provide a management frame to monitor and maintain the network devices. Here mainly introduces: SNMP Config: Configure global settings of SNMP function. Notification: Configure notification function for the management station to monitor and process the events. RMON: Configure RMON function to monitor network more efficiently.
Chapter 2 Introduction Thanks for choosing the GES-1651 16 GE with 2 Shared SFP Web Smart Switch! 2.1 Overview of the Switch Designed for workgroups and departments, GES-1651 provides wire-speed performance and full set of layer 2 management features. It provides a variety of service features and multiple powerful functions with high security. The EIA-standardized framework and smart configuration capacity can provide flexible solutions for a variable scale of networks.
Power System Link/Act On The Switch is powered on. Off The Switch is powered off or power supply is abnormal. On The switch is working abnormally. Flashing The switch is working normally. Off The switch is working abnormally. On There is a device linked to the corresponding port but no activity. Flashing The corresponding port is transmitting or receiving data. Off There is no device linked to the corresponding port. On A 1000Mbps device is connected to the corresponding port.
AC Power Connector: This is a three-pronged connector that supports the power cable. Plug in the female connector of the provided power cable into this connector, and the male into a power outlet. Grounding Terminal:GES-1651 already comes with Lightning Protection Mechanism. You can also ground the switch through the PE (Protecting Earth) cable of AC cord or with Ground Cable. For detail information, please refer to section 3.3 Connect to Ground.
Chapter 3 Login to the Switch 3.1 Login 1) To access the configuration utility, open a web-browser and type in the default address http://192.168.1.1 in the address field of the browser, then press the Enter key. Figure 3-1 Web-browser Tips: To log in to the switch, the IP address of your PC should be set in the same subnet addresses of the switch. The IP address is 192.168.1.x ("x" is any number from 2 to 254), Subnet Mask is 255.255.255.0.
Figure 3-3 Main Setup-Menu Note: Clicking Apply can only make the new configurations effective before the switch is rebooted. If you want to keep the configurations effective even the switch is rebooted, please click Saving Config. You are suggested to click Saving Config before cutting off the power or rebooting the switch to avoid losing the new configurations.
Chapter 4 System The System module is mainly for system configuration of the switch, including four submenus: System Info, User Management, System Tools and Access Security. 4.1 System Info The System Info, mainly for basic properties configuration, can be implemented on System Summary, Device Description, System Time, Daylight Saving Time and System IP pages. 4.1.1 System Summary On this page you can view the port connection status and the system information.
Click a port to display the bandwidth utilization on this port. The actual rate divided by theoretical maximum rate is the bandwidth utilization. The following figure displays the bandwidth utilization monitored every four seconds. Monitoring the bandwidth utilization on each port facilitates you to monitor the network traffic and analyze the network abnormities. Figure 4-3 Bandwidth Utilization Bandwidth Utilization Rx: Select Rx to display the bandwidth utilization of receiving packets on this port.
Device Name: Enter the name of the switch. Device Location: Enter the location of the switch. System Contact: Enter your contact information. 4.1.3 System Time System Time is the time displayed while the switch is running. On this page you can configure the system time and the settings here will be used for other time-based functions. Choose the menu System→System Info→System Time to load the following page.
Figure 4-6 Daylight Saving Time The following entries are displayed on this screen: DST Config DST Status: Enable or disable the DST. Predefined Mode: Select a predefined DST configuration. Recurring Mode: Specify the DST configuration configuration is recurring in use. Date Mode: USA: First Sunday in April, 02:00 ~ Last Sunday in October, 02:00. Australia: First Sunday in October, 02:00 ~ First Sunday in April, 03:00.
4.1.5 System IP Each device in the network possesses a unique IP Address. You can log on to the Web management page to operate the switch using this IP Address. The switch supports three modes to obtain an IP address: Static IP, DHCP and BOOTP. The IP address obtained using a new mode will replace the original IP address. On this page you can configure the system IP of the switch. Choose the menu System→System Info→System IP to load the following page.
1. Changing the IP address to a different IP segment will interrupt the network communication, so please keep the new IP address in the same IP segment with the local network. 2. The switch only possesses an IP address. The IP address configured will replace the original IP address. 3.
Figure 4-9 User Config The following entries are displayed on this screen: User Info User Name: Create a name for users’ login. Access Level: Select the access level to login. Admin: Admin can edit, modify and view all the settings of different functions. Guest: Guest only can view the settings without the right to edit and modify. User Status: Select Enable/Disable the user configuration. Password: Type a password for users’ login. Confirm Password: Retype the password.
4.3 System Tools The System Tools function, allowing you to manage the configuration file of the switch, can be implemented on Config Restore, Config Backup, Firmware Upgrade, System Reboot and System Reset pages. 4.3.1 Config Restore On this page you can upload a backup configuration file to restore your switch to this previous configuration. Choose the menu System→System Tools→Config Restore to load the following page.
Figure 4-11 Config Backup The following entries are displayed on this screen: Config Backup Backup Config: Click the Backup Config button to save the current configuration as a file to your computer. You are suggested to take this measure before upgrading. Note: It will take a few minutes to backup the configuration. Please wait without any operation. 4.3.3 Firmware Upgrade The switch system can be upgraded via the Web management page.
4.3.4 System Reboot On this page you can reboot the switch and return to the login page. Please save the current configuration before rebooting to avoid losing the configuration unsaved. Choose the menu System→System Tools→System Reboot to load the following page. Figure 4-13 System Reboot Note: To avoid damage, please don't turn off the device while rebooting. 4.3.5 System Reset On this page you can reset the switch to the default. All the settings will be cleared after the switch is reset.
Figure 4-15 Access Control The following entries are displayed on this screen: Access Control Config Control Mode: Select the control mode for users to log on to the Web management page. IP-based: Select this option to limit the IP-range of the users for login. MAC-based: Select this option to limit the MAC Address of the users for login. Port-based: Select this option to limit the ports for login.
Session Timeout: If you do nothing with the Web management page within the timeout time, the system will log out automatically. If you want to reconfigure, please login again. Access User Number Number Control； Select Enable/Disable the Number Control function. Admin Number: Enter the maximum number of the users logging on to the Web management page as Admin. Guest Number: Enter the maximum number of the users logging on to the Web management page as Guest.
Chapter 5 Switching Switching module is used to configure the basic functions of the switch, including four submenus: Port, LAG, Traffic Monitor and MAC Address. 5.1 Port The Port function, allowing you to configure the basic features for the port, is implemented on the Port Config, Port Mirror, Port Security and Port Isolation pages. 5.1.1 Port Config On this page, you can configure the basic parameters for the ports. When the port is disabled, the packets on the port will be discarded.
selected, the port can forward the packets normally. Speed and Duplex: Select the Speed and Duplex mode for the port. The device connected to the switch should be in the same Speed and Duplex mode with the switch. When “Auto” is selected, the Speed and Duplex mode will be determined by auto-negotiation. For the SFP port, this switch does not support auto-negotiation. Flow Control: Allows you to Enable/Disable the Flow Control feature.
Mirrored Port: Displays the mirrored ports. Operation: Click Edit to configure the mirror group. Click Edit to display the following figure. Figure 5-3 Mirroring Port The following entries are displayed on this screen: Mirror Group Number: Mirroring Port Mirroring Port: Select the mirror group number you want to configure. Select the mirroring port number. Mirrored Port Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered.
enabled, the outgoing packets sent by the mirrored port will be copied to the mirroring port. LAG: Displays the LAG number which the port belongs to. The LAG member can not be selected as the mirrored port or mirroring port. Note: 1. The LAG member can not be selected as the mirrored port or mirroring port. 2. A port can not be set as the mirrored port and the mirroring port simultaneously. 3. The Port Mirror function can take effect span the multiple VLANs. 5.1.
Port Security Select: Select the desired port for Port Security configuration. It is multi-optional. Port: Displays the port number. Max Learned MAC: Specify the maximum number of MAC addresses that can be learned on the port. Learned Num: Displays the number of MAC addresses that have been learned on the port. Learn Mode: Select the Learn Mode for the port. Status: Dynamic: When Dynamic mode is selected, the learned MAC address will be deleted automatically after the aging time.
Figure 5-5 Port Isolation Config The following entries are displayed on this screen: Port Isolation Config Port: Select the port number to set its forwardlist. Forward Portlist: Select the port that to be forwarded to. Port Isolation List Port: Display the port number. Forward Portlist: Display the forwardlist. 5.
For the member ports in an aggregation group, their basic configuration must be the same. The basic configuration includes STP, QoS, VLAN, port attributes, MAC Address Learning mode and other associated settings. The further explains are following: If the ports, which are enabled for the 802.1Q VLAN, STP, QoS and Port Configuration (Speed and Duplex, Flow Control), are in a LAG, their configurations should be the same.
IP addresses of the packets. LAG Table Select: Select the desired LAG. It is multi-optional. Group Number: Displays the LAG number here. Description: Displays the description of LAG. Member: Displays the LAG member. Operation: Allows you to view or modify the information for each LAG. Edit: Click to modify the settings of the LAG. Detail: Click to get the information of the LAG. Click the Detail button for the detailed information of your selected LAG. Figure 5-7 Detail Information 5.2.
Figure 5-8 Manually Config The following entries are displayed on this screen: LAG Config Group Number: Select a Group Number for the LAG. Description: Give a description to the LAG for identification. LAG Table Member Port: Select the port as the LAG member. Clearing all the ports of the LAG will delete this LAG. Tips: 1. The LAG can be deleted by clearing its all member ports. 2. A port can only be added to a LAG.
Figure 5-9 Traffic Summary The following entries are displayed on this screen: Auto Refresh Auto Refresh: Allows you to Enable/Disable refreshing the Traffic Summary automatically. Refresh Rate: Enter a value in seconds to specify the refresh interval. Traffic Summary Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Port: Displays the port number. Packets Rx: Displays the number of packets received on the port.
5.3.2 Traffic Statistics Traffic Statistics screen displays the detailed traffic information of each port, which facilitates you to monitor the traffic and locate faults promptly. Choose the menu Switching→Traffic Monitor→Traffic Statistics to load the following page. Figure 5-10 Traffic Statistics The following entries are displayed on this screen: Auto Refresh Auto Refresh: Allows you to Enable/Disable refreshing the Traffic Summary automatically.
Alignment Errors: Displays the number of the received packets that have a bad Frame Check Sequence (FCS) . The length of the packet is from 64 bytes to maximal bytes of the jumbo frame(usually 10240 bytes). UndersizePkts: Displays the number of the received packets (excluding error packets) that are less than 64 bytes long. Pkts64Octets: Displays the number of the received packets (including error packets) that are 64 bytes long.
Table 5-1 Types and features of Address Table This function includes four submenus: Address Table, Static Address, Dynamic Address and Filtering Address. 5.4.1 Address Table On this page, you can view all the information of the Address Table. Choose the menu Switching→MAC Address→Address Table to load the following page. Figure 5-11 Address Table The following entries are displayed on this screen: Search Option MAC Address: Enter the MAC address of your desired entry.
5.4.2 Static Address The static address table maintains the static address entries which can be added or removed manually, independent of the aging time. In the stable networks, the static MAC address entries can facilitate the switch to reduce broadcast packets and remarkably enhance the efficiency of packets forwarding without learning the address. The static MAC address learned by the port with Port Security enabled in the static learning mode will be displayed in the Static Address Table.
VLAN ID: Displays the corresponding VLAN ID of the MAC address. Port: Displays the corresponding Port number of the MAC address. Here you can modify the port number to which the MAC address is bound. The new port should be in the same VLAN. Type: Displays the Type of the MAC address. Aging Status: Displays the Aging Status of the MAC address. Note: 1.
The following entries are displayed on this screen: Aging Config Auto Aging: Allows you to Enable/Disable the Auto Aging feature. Aging Time: Enter the Aging Time for the dynamic address. Search Option Search Option: Select a Search Option from the pull-down list and click the Search button to find your desired entry in the Dynamic Address Table. MAC: Enter the MAC address of your desired entry. VLAN ID: Enter the VLAN ID number of your desired entry.
Figure 5-14 Filtering Address The following entries are displayed on this screen: Create Filtering Address MAC Address: Enter the MAC Address to be filtered. VLAN ID: Enter the corresponding VLAN ID of the MAC address. Search Option Search Option: Select a Search Option from the pull-down list and click the Search button to find your desired entry in the Filtering Address Table. MAC: Enter the MAC address of your desired entry. VLAN ID: Enter the VLAN ID number of your desired entry.
Chapter 6 VLAN The traditional Ethernet is a data network communication technology based on CSMA/CD (Carrier Sense Multiple Access/Collision Detect) via shared communication medium. Through the traditional Ethernet, the overfull hosts in LAN will result in serious collision, flooding broadcasts, poor performance or even breakdown of the Internet.
6.1 802.1Q VLAN VLAN tags in the packets are necessary for the switch to identify packets of different VLANs. The switch works at the data link layer in OSI model and it can identify the data link layer encapsulation of the packet only, so you can add the VLAN tag field into the data link layer encapsulation for identification. In 1999, IEEE issues the IEEE 802.1Q protocol to standardize VLAN implementation, defining the structure of VLAN-tagged packets. IEEE 802.
（3） GENERAL: The GENERAL port can be added in multiple VLANs and set various egress rules according to the different VLANs. The default egress rule is UNTAG. The PVID can be set as the VID number of any VLAN the port belongs to. PVID PVID (Port Vlan ID) is the default VID of the port. When the switch receives an untagged packet, it will add a VLAN tag to the packet according to the PVID of its received port and forward the packets.
Choose the menu VLAN→802.1Q VLAN→VLAN Config to load the following page. Figure 6-3 VLAN Table To ensure the normal communication of the factory switch, the default VLAN of all ports is set to VLAN1. VLAN1 can not be modified or deleted. The following entries are displayed on this screen: VLAN Table VLAN ID Select： Click the Select button to quick-select the corresponding entry based on the VLAN ID number you entered. Select： Select the desired entry to delete the corresponding VLAN.
Figure 6-4 Create or Modify 802.1Q VLAN The following entries are displayed on this screen: VLAN Config VLAN ID: Enter the ID number of VLAN. Description: Give a description to the VLAN for identification. Check: Click the Check button to check whether the VLAN ID you entered is valid or not. VLAN Members Port Select: Click the Select button to quick-select the corresponding entry based on the port number you entered. Select: Select the desired port to be a member of VLAN or leave it blank.
LAG: Displays the LAG to which the port belongs. 6.1.2 Port Config Before creating the 802.1Q VLAN, please acquaint yourself with all the devices connected to the switch in order to configure the ports properly. Choose the menu VLAN→802.1Q VLAN→Port Config to load the following page. Figure 6-5 802.1Q VLAN – Port Config The following entries are displayed on this screen: VLAN Port Config Port Select: Click the Select button to quick-select the corresponding entry based on the port number you entered.
PVID: Enter the PVID number of the port. LAG: Displays the LAG to which the port belongs. VLAN: Click the Detail button to view the information of the VLAN to which the port belongs. Click the Detail button to view the information of the corresponding VLAN Figure 6-6 View the Current VLAN of Port The following entries are displayed on this screen: VLAN of Port VLAN ID Select: Click the Select button to quick-select the corresponding entry based on the VLAN ID number you entered.
PC A and Server A is in the same VLAN; PC B and Server B is in the same VLAN; PCs in the two VLANs cannot communicate with each other. Network Diagram Configuration Procedure Configure Switch A Step Operation Description 1 Configure the Link Type of the ports Required. On VLAN→802.1Q VLAN→Port Config page, configure the link type of Port 2, Port 3 and Port 4 as ACCESS, TRUNK and ACCESS respectively 2 Create VLAN10 Required. On VLAN→802.
Chapter 7 Spanning Tree STP (Spanning Tree Protocol), subject to IEEE 802.1D standard, is to disbranch a ring network in the Data Link layer in a local network. Devices running STP discover loops in the network and block ports by exchanging information, in that way, a ring network can be disbranched to form a tree-topological ring-free network to prevent packets from being duplicated and forwarded endlessly in the network. BPDU (Bridge Protocol Data Unit) is the protocol data that STP and RSTP use.
Figure 7-1 Basic STP diagram STP Timers Hello Time: Hello Time ranges from 1 to 10 seconds. It specifies the interval to send BPDU packets. It is used to test the links. Max. Age: Max. Age ranges from 6 to 40 seconds. It specifies the maximum time the switch can wait without receiving a BPDU before attempting to reconfigure. Forward Delay: Forward Delay ranges from 4 to 30 seconds. It specifies the time for the port to transit its state after the network topology is changed.
Comparing BPDUs Each switch sends out configuration BPDUs and receives a configuration BPDU on one of its ports from another switch. The following table shows the comparing operations. Step Operation 1 If the priority of the BPDU received on the port is lower than that of the BPDU of the port itself, the switch discards the BPDU and does not change the BPDU of the port.
The condition for the root port to transit its port state rapidly: The old root port of the switch stops forwarding data and the designated port of the upstream switch begins to forward data. The condition for the designated port to transit its port state rapidly: The designated port is an edge port or connecting to a point-to-point link.
Figure 7-2 Basic MSTP diagram MSTP MSTP divides a network into several MST regions. The CST is generated between these MST regions, and multiple spanning trees can be generated in each MST region. Each spanning tree is called an instance. As well as STP, MSTP uses BPDUs to generate spanning tree. The only difference is that the BPDU for MSTP carries the MSTP configuration information on the switches.
Figure 7-3 Port roles The Spanning Tree module is mainly for spanning tree configuration of the switch, including four submenus: STP Config, Port Config, MSTP Instance and STP Security. 7.1 STP Config The STP Config function, for global configuration of spanning trees on the switch, can be implemented on STP Config and STP Summary pages. 7.1.1 STP Config Before configuring spanning trees, you should make clear the roles each switch plays in each spanning tree instance.
Global Config STP: Select Enable/Disable STP function globally on the switch. Version: Select the desired STP version on the switch. STP: Spanning Tree Protocol. RSTP: Rapid Spanning Tree Protocol. MSTP: Multiple Spanning Tree Protocol. Parameters Config CIST Priority: Enter a value from 0 to 61440 to specify the priority of the switch for comparison in the CIST. CIST priority is an important criterion on determining the root bridge.
4. If the TxHold Count parameter is too large, the number of MSTP packets being sent in each hello time may be increased with occupying too much network resources. The default value is recommended. 7.1.2 STP Summary On this page you can view the related parameters for Spanning Tree function. Choose the menu Spanning Tree→STP Config→STP Summary to load the following page. Figure 7-5 STP Summary 7.
Figure 7-6 Port Config The following entries are displayed on this screen: Port Config Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select the desired port for STP configuration. It is multi-optional. Port: Displays the port number of the switch. Status: Select Enable /Disable STP function for the desired port. Priority: Enter a value from 0 to 240 divisible by 16.
Port Status: Displays the working status of the port. LAG: Designated Port: Indicates the port that forwards packets to a downstream network segment or switch. Master Port: Indicates the port that connects a MST region to the common root. The path from the master port to the common root is the shortest path between this MST region and the common root. Alternate Port: Indicates the port that can be a backup port of a root or master port.
Figure 7-7 Region Config The following entries are displayed on this screen: Region Config Region Name: Create a name for MST region identification using up to 32 characters. Revision: Enter the revision from 0 to 65535 for MST region identification. 7.3.2 Instance Config Instance Configuration, a property of MST region, is used to describe the VLAN to Instance mapping configuration. You can assign VLAN to different instances appropriate to your needs.
based on the ID number you entered. Select: Select the desired Instance ID for configuration. It is multi-optional. Instance: Displays Instance ID of the switch. Status: Select Enable/Disable the instance. Priority: Enter the priority of the switch in the instance. It is an important criterion on determining if the switch will be chosen as the root bridge in the specific instance. VLAN ID: Enter the VLAN ID which belongs to the corresponding instance ID.
Figure 7-9 Instance Port Config The following entries are displayed on this screen: Port Config Instance ID: Select the desired instance ID for its port configuration. Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select the desired port to specify its priority and path cost. It is multi-optional. Port: Displays the port number of the switch. Priority: Enter the priority of the port in the instance.
Step Operation Description 1 Make clear roles the switches play in spanning tree instances: root bridge or designated bridge Preparation. 2 Globally configure parameters MSTP Required. Enable Spanning Tree function on the switch and configure MSTP parameters on Spanning Tree→STP Config→STP Config page. 3 Configure MSTP parameters for ports Required. Configure MSTP parameters for ports on Spanning Tree→Port Config→Port Config page. 4 Configure the MST region Required.
Root Protect A CIST and its secondary root bridges are usually located in the high-bandwidth core region. Wrong configuration or malicious attacks may result in configuration BPDU packets with higher priorities being received by the legal root bridge, which causes the current legal root bridge to lose its position and network topology jitter to occur. In this case, flows that should travel along high-speed links may lead to low-speed links, and network congestion may occur.
Figure 7-10 Port Protect The following entries are displayed on this screen: Port Protect Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select the desired port for port protect configuration. It is multi-optional. Port: Displays the port number of the switch. Loop Protect: Loop Protect is to prevent the loops in the network brought by recalculating STP because of link failures and network congestions.
7.4.2 TC Protect When TC Protect is enabled for the port on Port Protect page, the TC threshold and TC protect cycle need to be configured on this page. Choose the menu Spanning Tree→STP Security→TC Protect to load the following page. Figure 7-11 TC Protect The following entries are displayed on this screen: TC Protect TC Threshold: Enter a number from 1 to 100. It is the maximum number of the TC-BPDUs received by the switch in a TC Protect Cycle. The default value is 20.
Configure Switch A: Step Operation Description 1 Configure ports On VLAN→802.1Q VLAN page, configure the link type of the related ports as Trunk, and add the ports to VLAN 101-VLAN 106. The detailed instructions can be found in the section 802.1Q VLAN. 2 Enable STP function On Spanning Tree→STP Config→STP Config page, enable STP function and select MSTP version. On Spanning Tree→STP Config→Port Config page, enable MSTP function for the port.
Configure Switch C: Step Operation Description 1 Configure ports On VLAN→802.1Q VLAN page, configure the link type of the related ports as Trunk, and add the ports to VLAN 101-VLAN 106. The detailed instructions can be found in the section 802.1Q VLAN. 2 Enable STP function On Spanning Tree→STP Config→STP Config page, enable STP function and select MSTP version. On Spanning Tree→STP Config→Port Config page, enable MSTP function for the port.
For Instance 2 (VLAN 102, 104 and 106), the blue paths in the following figure are connected links; the gray paths are the blocked links. Suggestion for Configuration Enable TC Protect function for all the ports of switches. Enable Root Protect function for all the ports of root bridges. Enable Loop Protect function for the non-edge ports. Enable BPDU Protect function or BPDU Filter function for the edge ports which are connected to the PC and server.
Chapter 8 Multicast Multicast Overview In the network, packets are sent in three modes: unicast, broadcast and multicast. In unicast, the source server sends separate copy information to each receiver. When a large number of users require this information, the server must send many pieces of information with the same content to the users. Therefore, large bandwidth will be occupied. In broadcast, the system transmits information to all users in a network.
Multicast Address 1. Multicast IP Address: As specified by IANA (Internet Assigned Numbers Authority), Class D IP addresses are used as destination addresses of multicast packets. The multicast IP addresses range from 224.0.0.0~239.255.255.255. The following table displays the range and description of several special multicast IP addresses. Multicast IP address range Description 224.0.0.0～224.0.0.255 Reserved multicast addresses for routing protocols and other network protocols 224.0.1.0～224.0.1.
IGMP Snooping In the network, the hosts apply to the near Router for joining (leaving) a multicast group by sending IGMP (Internet Group Management Protocol) messages. When the up-stream device forwards down the multicast data, the switch is responsible for sending them to the hosts. IGMP Snooping is a multicast control mechanism, which can be used on the switch for dynamic registration of the multicast group.
3. IGMP Leave Message The host, running IGMPv1, does not send IGMP leave message when leaving a multicast group, as a result, the switch can not get the leave information of the host momentarily. However, after leaving the multicast group, the host does not send IGMP report message any more, so the switch will remove the port from the corresponding multicast address table when its member port time times out.
Figure 8-4 Basic Config The following entries are displayed on this screen: Global Config IGMP Snooping: Select Enable/Disable IGMP Snooping function globally on the switch. Unknown Multicast: Select the operation for the switch to process unknown multicast, Forward or Discard. IGMP Snooping Status Description: Displays IGMP Snooping status. Member: Displays the member of the corresponding status. 8.1.2 Port Config On this page you can configure the IGMP feature for ports of the switch.
Figure 8-5 Port Config The following entries are displayed on this screen: Port Config Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select the desired port for IGMP Snooping feature configuration. It is multi-optional. Port: Displays the port of the switch. IGMP Snooping: Select Enable/Disable IGMP Snooping for the desired port. Fast Leave: Select Enable/Disable Fast Leave feature for the desired port.
Figure 8-6 VLAN Config The following entries are displayed on this screen: VLAN Config VLAN ID: Enter the VLAN ID to enable IGMP Snooping for the desired VLAN. Router Port Time: Specify the aging time of the router port. Within this time, if the switch doesn’t receive IGMP query message from the router port, it will consider this port is not a router port any more. Member Port Time: Specify the aging time of the member port.
Note: The settings here will be invalid when multicast VLAN is enabled Configuration procedure: Step Operation Description 1 Enable IGMP function Snooping Required. Enable IGMP Snooping globally on the switch and for the port on Multicast→IGMP Snooping→Snooping Config and Port Config page. 2 Configure the multicast parameters for VLANs Optional. Configure the multicast parameters for VLANs on Multicast→IGMP Snooping→VLAN Config page.
Multicast VLAN: Select Enable/Disable Multicast VLAN feature. VLAN ID: Enter the VLAN ID of the multicast VLAN. Router Port Time: Specify the aging time of the router port. Within this time, if the switch doesn’t receive IGMP query message from the router port, it will consider this port is not a router port any more. Member Port Time: Specify the aging time of the member port.
on the Multicast→IGMP Snooping→Snooping Config page. Application Example for Multicast VLAN: Network Requirements Multicast source sends multicast streams via the router, and the streams are transmitted to user A and user B through the switch. Router: Its WAN port is connected to the multicast source; its LAN port is connected to the switch. The multicast packets are transmitted in VLAN3.
Step Operation Description 2 Configure ports On VLAN→802.1Q VLAN function pages. For port 3, configure its link type as GENERAL and its egress rule as TAG, and add it to VLAN3, VLAN4 and VLAN5. For port 4, configure its link type as GENERAL and its egress rule as UNTAG, and add it to VLAN3 and VLAN 4. For port 5, configure its link type as GENERAL and its egress rule as UNTAG, and add it to VLAN3 and VLAN 5.
VLAN ID: Enter the VLAN ID the desired entry must carry. Port: Select the port number the desired entry must carry. Type: Select the type the desired entry must carry. All: Displays all multicast IP entries. Static: Displays all static multicast IP entries. Dynamic: Displays all dynamic multicast IP entries. Multicast IP Table Multicast IP Displays multicast IP address. VLAN ID: Displays the VLAN ID of the multicast group. Forward Port Displays the forward port of the multicast group.
Forward Port: Search Option Search Option: Enter the forward port of the multicast group. Select the rules for displaying multicast IP table to find the desired entries quickly. All: Displays all static multicast IP entries. Multicast IP: Enter the multicast IP address the desired entry must carry. VLAN ID: Enter the VLAN ID the desired entry must carry. Port: Enter the port number the desired entry must carry.
The following entries are displayed on this screen: Create IP-Range IP Range ID: Enter the IP-range ID. Start Multicast IP: Enter start multicast IP of the IP-range you set. End Multicast IP: Enter end multicast IP of the IP-range you set. IP-Range Table IP-Range ID Select: Click the Select button to quick-select the corresponding IP-range ID based on the ID number you entered. Select: Select the desired entry to delete or modify the corresponding IP-range. It is multi-optional.
Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select the desired port for multicast filtering. It is multi-optional. Port: Displays the port number. Filter: Select Enable/Disable multicast filtering feature on the port. Action Mode: Select the action mode to process multicast packets when the multicast IP is in the filtering IP-range.
Figure 8-12 Packet Statistics The following entries are displayed on this screen: Auto Refresh Auto Refresh: Select Enable/Disable auto refresh feature. Refresh Period: Enter the time from 3 to 300 in seconds to specify the auto refresh period. IGMP Statistics Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Port: Displays the port number of the switch. Query Packet: Displays the number of query packets the port received.
Chapter 9 QoS QoS (Quality of Service) functions to provide different quality of service for various network applications and requirements and optimize the bandwidth resource distribution so as to provide a network service experience of a better quality. QoS This switch classifies the ingress packets, maps the packets to different priority queues and then forwards the packets according to specified scheduling algorithms to implement QoS function.
2. 802.1P Priority Figure 9-2 802.1Q frame As shown in the figure above, each 802.1Q Tag has a Pri field, comprising 3 bits. The 3-bit priority field is 802.1p priority in the range of 0 to 7. 802.1P priority determines the priority of the packets based on the Pri value. On the Web management page of the switch, you can configure different priority tags mapping to the corresponding priority levels, and then the switch determine which packet is sent preferentially when forwarding packets.
Figure 9-4 SP-Mode 2. WRR-Mode: Weight Round Robin Mode. In this mode, packets in all the queues are sent in order based on the weight value for each queue and every queue can be assured of a certain service time. The weight value indicates the occupied proportion of the resource. WRR queue overcomes the disadvantage of SP queue that the packets in the queues with lower priority can not get service for a long time.
The QoS module is mainly for traffic control and priority configuration, including two submenus: DiffServ, and Bandwidth Control. 9.1 DiffServ This switch classifies the ingress packets, maps the packets to different priority queues and then forwards the packets according to specified scheduling algorithms to implement QoS function. This switch implements three priority modes based on port, on 802.1P and on DSCP, and supports four queue scheduling algorithms.
Step Operation Description 2 Configure the mapping Required. On QoS→DiffServ→802.1P Priority page, relation between the 802.1P configure the mapping relation between the 802.1P priority and TC priority and TC. 3 Select a schedule mode Required. On QoS→DiffServ→Schedule page, select a schedule mode. Mode 9.1.2 Schedule Mode On this page you can select a schedule mode for the switch.
enabled, the packets with 802.1Q tag are mapped to different priority levels based on 802.1P priority mode. The untagged packets are mapped based on port priority mode. Choose the menu QoS→DiffServ→802.1P Priority to load the following page. Figure 9-8 802.1P Priority The following entries are displayed on this screen: Priority Level Priority Tag: Indicates the precedence level defined by IEEE802.1P. Priority Level: Indicates the priority level the packets with tag are mapped to.
Figure 9-9 DSCP Priority The following entries are displayed on this screen: DSCP Priority Config DSCP Priority: Select Enable or Disable DSCP Priority. Priority Level DSCP: Indicates the priority determined by the DS region of IP datagram. It ranges from 0 to 63. Priority: Indicates the 802.1P priority the packets with tag are mapped to. The priorities are labeled as CoS0 ~ CoS7.
9.2 Bandwidth Control Bandwidth function, allowing you to control the traffic rate and broadcast flow on each port to ensure network in working order, can be implemented on Rate Limit and Storm Control pages. 9.2.1 Rate Limit Rate limit functions to control the ingress/egress traffic rate on each port via configuring the available bandwidth of each port. In this way, the network bandwidth can be reasonably distributed and utilized.
Egress Rate(bps): Configure the bandwidth for sending packets on the port. You can select a rate from the dropdown list or select "Manual" to set Egress rate, the system will automatically select integral multiple of 64Kbps that closest to the rate you entered as the real Egress rate. LAG: Displays the LAG number which the port belongs to. Note: 1. If you enable ingress rate limit feature for the storm control-enabled port, storm control feature will be disabled for this port. 2.
Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select the desired port for Storm Control configuration. It is multi-optional. Port: Displays the port number of the switch. Broadcast: Select Enable/Disable to enable/disable the broadcast control function for the port. Multicast: Select Enable/Disable to enable/disable the multicast control function for the port.
Chapter 10 SNMP SNMP Overview SNMP (Simple Network Management Protocol) has gained the most extensive application on the UDP/IP networks. SNMP provides a management frame to monitor and maintain the network devices. It is used for automatically managing the various network devices no matter the physical differences of the devices. Currently, the most network management systems are based on SNMP.
SNMP v1: SNMP v1 adopts Community Name authentication. The community name is used to define the relation between SNMP Management Station and SNMP Agent. The SNMP packets failing to pass community name authentication are discarded. The community name can limit access to SNMP Agent from SNMP NMS, functioning as a password. SNMP v2c: SNMP v2c also adopts community name authentication. It is compatible with SNMP v1 while enlarges the function of SNMP v1.
3. Create SNMP User The User configured in an SNMP Group can manage the switch via the client program on management station. The specified User Name and the Auth/Privacy Password are used for SNMP Management Station to access the SNMP Agent, functioning as the password. SNMP module is used to configure the SNMP function of the switch, including three submenus: SNMP Config, Notification and RMON. 10.
Note: The amount of Engine ID characters must be even. 10.1.2 SNMP View The OID (Object Identifier) of the SNMP packets is used to describe the managed objects of the switch, and the MIB (Management Information Base) is the set of the OIDs. The SNMP View is created for the SNMP management station to manage MIB objects. Choose the menu SNMP→SNMP Config→SNMP View to load the following page.
10.1.3 SNMP Group On this page, you can configure SNMP Group to control the network access by providing the users in various groups with different management rights via the Read View, Write View and Notify View. Choose the menu SNMP→SNMP Config→SNMP Group to load the following page. Figure 10-5 SNMP Group The following entries are displayed on this screen: Group Config Group Name: Enter the SNMP Group name. The Group Name, Security Model and Security Level compose the identifier of the SNMP Group.
can be read and modified. Notify View: Select the View to be the Notify View. The management station can receive trap messages of the assigned SNMP view generated by the switch's SNMP agent. Group Table Select: Select the desired entry to delete the corresponding group. It is multi-optional. Group Name: Displays the Group Name here. Security Model: Displays the Security Model of the group. Security Level: Displays the Security Level of the group.
User Name: Enter the User Name here. User Type: Select the type for the User. Local User: Indicates that the user is connected to a local SNMP engine. Remote User: Indicates that the user is connected to a remote SNMP engine. Group Name: Select the Group Name of the User. The User is classified to the corresponding Group according to its Group Name, Security Model and Security Level. Security Model: Select the Security Model for the User.
10.1.5 SNMP Community SNMP v1 and SNMP v2c adopt community name authentication. The community name can limit access to the SNMP agent from SNMP network management station, functioning as a password. If SNMP v1 or SNMP v2c is employed, you can directly configure the SNMP Community on this page without configuring SNMP Group and User. Choose the menu SNMP→SNMP Config→SNMP Community to load the following page.
Configuration Procedure: If SNMPv3 is employed, please take the following steps: Step Operation Description 1 Enable SNMP function globally. Required. On the SNMP→SNMP Config→Global Config page, enable SNMP function globally. 2 Create SNMP View. Required. On the SNMP→SNMP Config→SNMP View page, create SNMP View of the management agent. The default View Name is viewDefault and the default OID is 1. 3 Create SNMP Group. Required.
The notification information includes the following two types: Trap ： Trap is the information that the managed device initiatively sends to the Network management station without request. Inform：Inform packet is sent to inform the management station and ask for the reply. The switch will resend the inform request if it doesn’t get the response from the management station during the Timeout interval, and it will terminate resending the inform request if the resending times reach the specified Retry times.
request. The switch will resend the inform request if it doesn’t get the response from the management station during the Timeout interval, and it will terminate resending the inform request if the resending times reach the specified Retry times. Timeout: Specify the maximum time for the switch to wait for the response from the management station before resending a request. Notification Table Select: Select the desired entry to management station.
RMON Group Function History Group After a history group is configured, the switch collects and records network statistics information periodically, based on which the management station can monitor network effectively. Event Group Event Group is used to define RMON events. Alarms occur when an event is detected. Statistic Group Statistic Group is set to monitor the statistic of alarm variables on the specific ports. Alarm Group Alarm Group is configured to monitor the specific alarm variables.
10.3.2 Event Config On this page, you can configure the RMON events. Choose the menu SNMP→RMON→Event Config to load the following page. Figure 10-10 Event Config The following entries are displayed on this screen: Event Table Select: Select the desired entry for configuration. Index: Displays the index number of the entry. User: Enter the name of the User or the community to which the event belongs. Description: Give a description to the event for identification.
Figure 10-11 Alarm Config The following entries are displayed on this screen: Alarm Table Select: Select the desired entry for configuration. Index: Displays the index number of the entry. Variable: Select the alarm variables from the pull-down list. Port: Select the port on which the Alarm entry acts. Sample Type: Specify the sampling method for the selected variable and comparing the value against the thresholds.
Interval(sec): Enter the alarm interval time in seconds. Owner: Enter the name of the device or user that defined the entry. Status: Select Enable/Disable the corresponding alarm entry. Note: When alarm variables exceed the Threshold on the same direction continuously for several times, an alarm event will only be generated on the first time, that is, the Rising Alarm and Falling Alarm are triggered alternately for that the alarm following to Rising Alarm is certainly a Falling Alarm and vice versa.
Chapter 11 Maintenance Maintenance module, assembling the commonly used system tools to manage the switch, provides the convenient method to locate and solve the network problem. （1） System Monitor: Monitor the utilization status of the memory and the CPU of switch. （2） Log: View the configuration parameters of the switch and find out the errors via the Logs. （3） Cable Test: Test the connection status of the cable to locate and diagnose the trouble spot of the network.
11.1.2 Memory Monitor Choose the menu Maintenance→System Monitor→Memory Monitor to load the following page. Figure 11-2 Memory Monitor Click the Monitor button to enable the switch to monitor and display its Memory utilization rate every four seconds. 11.2 Log The Log system of switch can record, classify and manage the system information effectively, providing powerful support for network administrator to monitor network operation and diagnose malfunction.
11.2.1 Log Table The switch supports logs output to two directions, namely, log buffer and log file. The information in log buffer will be lost after the switch is rebooted or powered off whereas the information in log file will be kept effective even the switch is rebooted or powered off. Log Table displays the system log information in log buffer. Choose the menu Maintenance→Log→Log Table to load the following page.
Figure 11-4 Local Log The following entries are displayed on this screen: Local Log Config Select: Select the desired entry to configure the corresponding local log. Log Buffer: Indicates the RAM for saving system log. The inforamtion in the log buffer is displayed on the Log Table page. It will be lost when the switch is restarted. Log File: Indicates the flash sector for saving system log.
Log Host Index: Displays the index of the log host. The switch supports 4 log hosts. Host IP: Configure the IP for the log host. UDP Port: Displays the UDP port used for receiving/sending log information. Here we use the standard port 514. Severity: Specify the severity level of the log information sent to each log host. Only the log with the same or smaller severity level value will be sent to the corresponding log host. Status: Enable/Disable the log host.
Figure 11-7 Cable Test The following entries are displayed on this screen: Cable Test Port: Select the port for cable testing. Pair: Displays the Pair number. Status: Displays the connection status of the cable connected to the port. The test results of the cable include normal, close, open or impedance. Length: If the connection status is normal, here displays the length range of the cable. Error: If the connection status is close, open or impedance, here displays the error length of the cable.
Figure 11-8 Loopback The following entries are displayed on this screen: Loopback Type Internal: Select Internal to test whether the port is available. External: Select External to test whether the device connected to the port of the switch is available Loopback Port Loopback Port: Select the desired port for loopback test. Test: Click the Test button to start the loopback test for the port. 11.
Figure 11-9 Ping The following entries are displayed on this screen: Ping Config Destination IP: Enter the IP address of the destination node for Ping test. Ping Times: Enter the amount of times to send test data during Ping testing. The default value is recommended. Data Size: Enter the size of the sending data during Ping testing. The default value is recommended. Interval: Specify the interval to send ICMP request packets. The default value is recommended. 11.4.
Figure 11-10 Tracert The following entries are displayed on this screen: Tracert Config Destination IP: Enter the IP address of the destination device. Max Hop: Specify the maximum number of the route hops the test data can pass through.
Appendix A: Specifications IEEE802.3 10Base-T Ethernet IEEE802.3u 100Base-TX Fast Ethernet IEEE802.3ab 1000Base-T Gigabit Ethernet Standards IEEE802.3z 1000Base-X Gigabit Ethernet IEEE802.3x Flow Control IEEE802.1p QoS IEEE802.1q VLAN Ethernet: 10Mbps Half Duplex, 20Mbps Full Duplex Transmission Rate Fast Ethernet: 100Mbps Half Duplex，200Mbps Full Duplex Gigabit Ethernet: 2000Mbps Full Duplex 10Base-T: UTP/STP of Cat. 3 or above 100Base-TX: UTP/STP of Cat.
Appendix B: Configuring the PCs In this section, we’ll introduce how to install and configure the TCP/IP correctly in Windows 2000. First make sure your Ethernet Adapter is working, refer to the adapter’s manual if necessary. 1) On the Windows taskbar, click the Start button, and then click Control Panel. 2) Click the Network and Internet Connections icon, and then click on the Network Connections tab in the appearing window.
5) The following TCP/IP Properties window will display and the IP Address tab is open on this window by default. Figure B-3 6) Select Use the following IP address. And the following items will be available. If the switch's IP address is 192.168.1.1, specify IP address as 192.168.1.x (x is from 2 to 254), and the Subnet mask as 255.255.255.0. Now: Click OK to save your settings.
Appendix C: Glossary Boot Protocol (BOOTP) BOOTP is used to provide bootup information for network devices, including IP address information, the address of the TFTP server that contains the devices system files, and the name of the boot file. Class of Service (CoS) CoS is supported by prioritizing packets based on the required level of service, and then placing them in the appropriate output queue.
Internet Group Management Protocol (IGMP) A protocol through which hosts can register with their local router for multicast services. If there is more than one multicast switch/router on a given subnetwork, one of the devices is made the “querier” and assumes responsibility for keeping track of group membership. IGMP Snooping Listening to IGMP Query and IGMP Report packets transferred between IP Multicast Routers and IP Multicast host groups to identify IP Multicast group members.
Remote Monitoring (RMON) RMON provides comprehensive network monitoring capabilities. It eliminates the polling required in standard SNMP, and can set alarms on a variety of traffic conditions, including specific error types. Rapid Spanning Tree Protocol (RSTP) RSTP reduces the convergence time for network topology changes to about 10% of that required by the older IEEE 802.1D STP standard.
