Advantech EKI-9728G Series User manual

User Manual
EKI-9728G Series
Ind. Rackmount L3 Managed
Switch with AC/DC

EKI-9728G Series User Manual ii
Copyright
The documentation and the software included with this product are copyrighted 2016
by Advantech Co., Ltd. All rights are reserved. Advantech Co., Ltd. reserves the right
to make improvements in the products described in this manual at any time without
notice. No part of this manual may be reproduced, copied, translated or transmitted
in any form or by any means without the prior written permission of Advantech Co.,
Ltd. Information provided in this manual is intended to be accurate and reliable. How-
ever, Advantech Co., Ltd. assumes no responsibility for its use, nor for any infringe-
ments of the rights of third parties, which may result from its use.
Acknowledgements
Intel and Pentium are trademarks of Intel Corporation.
Microsoft Windows and MS-DOS are registered trademarks of Microsoft Corp.
All other product names or trademarks are properties of their respective owners.
Product Warranty (5 years)
Advantech warrants to you, the original purchaser, that each of its products will be
free from defects in materials and workmanship for five years from the date of pur-
chase.
This warranty does not apply to any products which have been repaired or altered by
persons other than repair personnel authorized by Advantech, or which have been
subject to misuse, abuse, accident or improper installation. Advantech assumes no
liability under the terms of this warranty as a consequence of such events.
Because of Advantech’s high quality-control standards and rigorous testing, most of
our customers never need to use our repair service. If an Advantech product is defec-
tive, it will be repaired or replaced at no charge during the warranty period. For out of-
warranty repairs, you will be billed according to the cost of replacement materials,
service time and freight. Please consult your dealer for more details.
If you think you have a defective product, follow these steps:
1. Collect all the information about the problem encountered. (For example, CPU
speed, Advantech products used, other hardware and software used, etc.) Note
anything abnormal and list any on screen messages you get when the problem
occurs.
2. Call your dealer and describe the problem. Please have your manual, product,
and any helpful information readily available.
3. If your product is diagnosed as defective, obtain an RMA (return merchandise
authorization) number from your dealer. This allows us to process your return
more quickly.
4. Carefully pack the defective product, a fully-completed Repair and Replacement
Order Card and a photocopy proof of purchase date (such as your sales receipt)
in a shippable container. A product returned without proof of the purchase date
is not eligible for warranty service.
5. Write the RMA number visibly on the outside of the package and ship it prepaid
to your dealer.
Part No. XXXXXXXXXX Edition 1
Printed in Taiwan December 2017

iii EKI-9728G Series User Manual
Declaration of Conformity
CE
This product has passed the CE test for environmental specifications when shielded
cables are used for external wiring. We recommend the use of shielded cables. This
kind of cable is available from Advantech. Please contact your local supplier for
ordering information.
This product has passed the CE test for environmental specifications. Test conditions
for passing included the equipment being operated within an industrial enclosure. In
order to protect the product from being damaged by ESD (Electrostatic Discharge)
and EMI leakage, we strongly recommend the use of CE-compliant industrial enclo-
sure products.
FCC Class A
Note: This equipment has been tested and found to comply with the limits for a Class
A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference when the equipment is
operated in a commercial environment. This equipment generates, uses, and can
radiate radio frequency energy and, if not installed and used in accordance with the
instruction manual, may cause harmful interference to radio communications. Opera-
tion of this equipment in a residential area is likely to cause harmful interference in
which case the user will be required to correct the interference at his own expense.
FCC Class A
Note: This equipment has been tested and found to comply with the limits for a Class
A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference when the equipment is
operated in a commercial environment. This equipment generates, uses, and can
radiate radio frequency energy and, if not installed and used in accordance with the
instruction manual, may cause harmful interference to radio communications. Opera-
tion of this equipment in a residential area is likely to cause harmful interference in
which case the user will be required to correct the interference at his own expense.
FM
This equipment has passed the FM certification. According to the National Fire Pro-
tection Association, work sites are classified into different classes, divisions and
groups, based on hazard considerations. This equipment is compliant with the speci-
fications of Class I, Division 2, Groups A, B, C and D indoor hazards.

EKI-9728G Series User Manual iv
Technical Support and Assistance
1. Visit the Advantech web site at www.advantech.com/support where you can find
the latest information about the product.
2. Contact your distributor, sales representative, or Advantech's customer service
center for technical support if you need additional assistance. Please have the
following information ready before you call:
–Product name and serial number
–Description of your peripheral attachments
–Description of your software (operating system, version, application software,
etc.)
–A complete description of the problem
–The exact wording of any error messages
Warnings, Cautions and Notes
Document Feedback
To assist us in making improvements to this manual, we would welcome comments
and constructive criticism. Please send all such - in writing to: support@advan-
tech.com
Packing List
Before setting up the system, check that the items listed below are included and in
good condition. If any item does not accord with the table, please contact your dealer
immediately.
1 x Full Managed Ethernet Switch
3 x Terminal Blocks
1 x Startup Manual
Warning! Warnings indicate conditions, which if not observed, can cause personal
injury!
Caution! Cautions are included to help you avoid damaging hardware or losing
data. e.g.
There is a danger of a new battery exploding if it is incorrectly installed.
Do not attempt to recharge, force open, or heat the battery. Replace the
battery only with the same or equivalent type recommended by the man-
ufacturer. Discard used batteries according to the manufacturer's
instructions.
Note! Notes provide optional additional information.

v EKI-9728G Series User Manual
Safety Instructions
1. Read these safety instructions carefully.
2. Keep this User Manual for later reference.
3. Disconnect this equipment from any AC outlet before cleaning. Use a damp
cloth. Do not use liquid or spray detergents for cleaning.
4. For plug-in equipment, the power outlet socket must be located near the equip-
ment and must be easily accessible.
5. Keep this equipment away from humidity.
6. Put this equipment on a reliable surface during installation. Dropping it or letting
it fall may cause damage.
7. The openings on the enclosure are for air convection. Protect the equipment
from overheating. DO NOT COVER THE OPENINGS.
8. Make sure the voltage of the power source is correct before connecting the
equipment to the power outlet.
9. Position the power cord so that people cannot step on it. Do not place anything
over the power cord.
10. All cautions and warnings on the equipment should be noted.
11. If the equipment is not used for a long time, disconnect it from the power source
to avoid damage by transient overvoltage.
12. Never pour any liquid into an opening. This may cause fire or electrical shock.
13. Never open the equipment. For safety reasons, the equipment should be
opened only by qualified service personnel.
14. If one of the following situations arises, get the equipment checked by service
personnel:
15. The power cord or plug is damaged.
16. Liquid has penetrated into the equipment.
17. The equipment has been exposed to moisture.
18. The equipment does not work well, or you cannot get it to work according to the
user's manual.
19. The equipment has been dropped and damaged.
20. The equipment has obvious signs of breakage.
21. DO NOT LEAVE THIS EQUIPMENT IN AN ENVIRONMENT WHERE THE
STORAGE TEMPERATURE MAY GO BELOW -20° C (-4° F) OR ABOVE 60° C
(140° F). THIS COULD DAMAGE THE EQUIPMENT. THE EQUIPMENT
SHOULD BE IN A CONTROLLED ENVIRONMENT.
22. CAUTION: DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY
REPLACED. REPLACE ONLY WITH THE SAME OR EQUIVALENT TYPE
RECOMMENDED BY THE MANUFACTURER, DISCARD USED BATTERIES
ACCORDING TO THE MANUFACTURER'S INSTRUCTIONS.
23. The sound pressure level at theoperator's position accordingto IEC 704-1:1982
is no more than 70 dB (A).
DISCLAIMER: This set of instructions is given according to IEC 704-1. Advantech
disclaims all responsibility for the accuracy of any statements contained herein.

EKI-9728G Series User Manual vi
Wichtige Sicherheishinweise
1. Bitte lesen sie Sich diese Hinweise sorgfältig durch.
2. Heben Sie diese Anleitung für den späteren Gebrauch auf.
3. Vor jedem Reinigen ist das Gerät vom Stromnetz zu trennen. Verwenden Sie
Keine Flüssig-oder Aerosolreiniger. Am besten dient ein angefeuchtetes Tuch
zur Reinigung.
4. Die NetzanschluBsteckdose soll nahe dem Gerät angebracht und leicht zugän-
glich sein.
5. Das Gerät ist vor Feuchtigkeit zu schützen.
6. Bei der Aufstellung des Gerätes ist auf sicheren Stand zu achten. Ein Kippen
oder Fallen könnte Verletzungen hervorrufen.
7. Die Belüftungsöffnungen dienen zur Luftzirkulation die das Gerät vor überhit-
zung schützt. Sorgen Sie dafür, daB diese Öffnungen nicht abgedeckt werden.
8. Beachten Sie beim. AnschluB an das Stromnetz die AnschluBwerte.
9. Verlegen Sie die NetzanschluBleitung so, daB niemand darüber fallen kann. Es
sollte auch nichts auf der Leitung abgestellt werden.
10. Alle Hinweise und Warnungen die sich am Geräten befinden sind zu beachten.
11. Wird das Gerät über einen längeren Zeitraum nicht benutzt, sollten Sie es vom
Stromnetz trennen. Somit wird im Falle einer Überspannung eine Beschädigung
vermieden.
12. Durch die Lüftungsöffnungen dürfen niemals Gegenstände oder Flüssigkeiten in
das Gerät gelangen. Dies könnte einen Brand bzw. elektrischen Schlag aus-
lösen.
13. Öffnen Sie niemals das Gerät. Das Gerät darf aus Gründen der elektrischen
Sicherheit nur von authorisiertem Servicepersonal geöffnet werden.
14. Wenn folgende Situationen auftreten ist das Gerät vom Stromnetz zu trennen
und von einer qualifizierten Servicestelle zu überprüfen:
15. Netzkabel oder Netzstecker sind beschädigt.
16. Flüssigkeit ist in das Gerät eingedrungen.
17. Das Gerät war Feuchtigkeit ausgesetzt.
18. Wenn das Gerät nicht der Bedienungsanleitung entsprechend funktioniert oder
Sie mit Hilfe dieser Anleitung keine Verbesserung erzielen.
19. Das Gerät ist gefallen und/oder das Gehäuse ist beschädigt.
20. Wenn das Gerät deutliche Anzeichen eines Defektes aufweist.
21. VOSICHT: Explisionsgefahr bei unsachgemaben Austausch der Batterie.Ersatz
nur durch densellben order einem vom Hersteller empfohlene-mahnlichen Typ.
Entsorgung gebrauchter Batterien navh Angaben des Herstellers.
22. ACHTUNG: Es besteht die Explosionsgefahr, falls die Batterie auf nicht fach-
männische Weise gewechselt wird. Verfangen Sie die Batterie nur gleicher oder
entsprechender Type, wie vom Hersteller empfohlen. Entsorgen Sie Batterien
nach Anweisung des Herstellers.
23. Der arbeitsplatzbezogene Schalldruckpegel nach DIN 45 635 Teil 1000 beträgt
70dB(A) oder weiger.
Haftungsausschluss: Die Bedienungsanleitungen wurden entsprechend der IEC-
704-1 erstellt. Advantech lehnt jegliche Verantwortung für die Richtigkeit der in die-
sem Zusammenhang getätigten Aussagen ab.

vii EKI-9728G Series User Manual
Safety Precaution - Static Electricity
Follow these simple precautions to protect yourself from harm and the products from
damage.
To avoid electrical shock, always disconnect the power from your PC chassis
before you work on it. Don't touch any components on the CPU card or other
cards while the PC is on.
Disconnect power before making any configuration changes. The sudden rush
of power as you connect a jumper or install a card may damage sensitive elec-
tronic components.

EKI-9728G Series User Manual viii
Contents
Chapter 1 Product Overview ...............................1
1.1 Specifications............................................................................................ 2
1.2 Hardware Views........................................................................................ 3
1.2.1 Front View..................................................................................... 3
1.2.2 Rear View..................................................................................... 3
1.2.3 Dimensions................................................................................... 5
Chapter 2 Switch Installation .............................. 6
2.1 Warnings................................................................................................... 7
2.2 Installation Guidelines............................................................................... 9
2.3 Environment and Enclosure Guidelines.................................................... 9
2.3.1 Connecting Hardware................................................................... 9
2.4 Verifying Switch Operation...................................................................... 10
2.5 Installing the Switch................................................................................ 10
2.5.1 Rack-Mounting............................................................................ 10
2.6 Installing and Removing SFP Modules................................................... 11
2.6.1 Installing SFP Modules............................................................... 11
2.6.2 Removing SFP Modules............................................................. 13
2.7 Connecting the Switch to Ethernet Ports................................................ 14
2.7.1 RJ45 Ethernet Cable Wiring....................................................... 14
2.8 Connecting the Switch to Console Port .................................................. 14
2.9 Power Supply Installation........................................................................ 15
2.9.1 Overview..................................................................................... 15
2.9.2 Considerations............................................................................ 16
2.9.3 Grounding the Device................................................................. 16
2.9.4 Wiring a Relay Contact............................................................... 17
2.9.5 Wiring the Power Inputs.............................................................. 17
2.10 Reset Button........................................................................................... 18
Chapter 3 Configuration Utility .........................19
3.1 First Time Setup...................................................................................... 20
3.1.1 Overview..................................................................................... 20
3.1.2 Introduction................................................................................. 20
3.1.3 Administrative Interface Access.................................................. 20
3.1.4 Using the Graphical (Web) Interface .......................................... 21
3.1.5 Configuring the Switch for Network Access................................ 21
3.1.6 Configuring the Ethernet Ports ................................................... 22
3.2 Command Line Interface Configuration.................................................. 23
3.2.1 Introduction to Command-Line Interface (CLI) ........................... 23
3.2.2 Accessing the CLI....................................................................... 23
3.3 Web Browser Configuration.................................................................... 24
3.3.1 Preparing for Web Configuration................................................ 24
3.3.2 System Login.............................................................................. 24
Chapter 4 Managing Switch............................... 25
4.1 Log In...................................................................................................... 26
4.2 Recommended Practices........................................................................ 26
4.2.1 Changing Default Password....................................................... 26

ix EKI-9728G Series User Manual
4.3 System ....................................................................................................27
4.3.1 AAA.............................................................................................27
4.3.2 Advanced Configuration..............................................................35
4.3.3 Basic Configuration.....................................................................97
4.3.4 Configuration Storage.................................................................98
4.3.5 Connectivity ..............................................................................100
4.3.6 Firmware...................................................................................107
4.3.7 Logs..........................................................................................110
4.3.8 Management Access ................................................................117
4.3.9 Management Security...............................................................124
4.3.10 Passwords ................................................................................125
4.3.11 Port ...........................................................................................128
4.3.12 Slot............................................................................................134
4.3.13 Statistics....................................................................................136
4.3.14 Status........................................................................................147
4.3.15 Summary...................................................................................150
4.3.16 Users.........................................................................................154
4.3.17 Utilities ......................................................................................160
4.4 Switching...............................................................................................173
4.4.1 Auto Recovery ..........................................................................173
4.4.2 Class of Service........................................................................175
4.4.3 DHCP Snooping........................................................................176
4.4.4 IPv6 DHCP Snooping ...............................................................188
4.4.5 DVLAN......................................................................................194
4.4.6 Dynamic ARP Inspection..........................................................196
4.4.7 Filters........................................................................................202
4.4.8 GARP........................................................................................204
4.4.9 IGMP Snooping.........................................................................206
4.4.10 IGMP Snooping Querier............................................................212
4.4.11 MLD Snooping..........................................................................215
4.4.12 MLD Snooping Querier.............................................................221
4.4.13 Multicast Forwarding Database ................................................224
4.4.14 MVR..........................................................................................228
4.4.15 LLDP.........................................................................................232
4.4.16 LLDP-MED................................................................................237
4.4.17 Port Channel.............................................................................241
4.4.18 Port Security .............................................................................243
4.4.19 Protected Ports.........................................................................249
4.4.20 Spanning Tree ..........................................................................250
4.4.21 UDLD........................................................................................261
4.4.22 VLAN.........................................................................................263
4.4.23 IP Subnet Based VLAN.............................................................269
4.4.24 MAC Based VLAN ....................................................................270
4.4.25 Protocol Based VLAN...............................................................272
4.4.26 Private VLAN ............................................................................275
4.4.27 Voice VLAN...............................................................................278
4.4.28 Virtual Port Channel..................................................................280
4.5 Routing..................................................................................................286
4.5.1 ARP Table.................................................................................286
4.5.2 IP...............................................................................................289
4.5.3 Router.......................................................................................297
4.5.4 IPv6...........................................................................................302
4.5.5 IPv6 Routes ..............................................................................316
4.5.6 DHCPv6....................................................................................320
4.6 Security .................................................................................................327
4.6.1 Port Access Control..................................................................327
4.6.2 RADIUS ....................................................................................337
4.6.3 TACACS+ .................................................................................343
4.6.4 Authentication Manager............................................................346

EKI-9728G Series User Manual x
4.7 QoS....................................................................................................... 350
4.7.1 Access Control Lists................................................................. 350
4.7.2 Auto VoIP.................................................................................. 366
4.7.3 Class of Service........................................................................ 370
4.7.4 Diffserv...................................................................................... 373
Chapter 5 Command Line Interface................387
5.1 Virtual Router Redundancy Protocol Commands................................. 388
5.1.1 Virtual Router Redundancy Protocol Commands..................... 388
5.2 Open Shortest Path First Commands................................................... 394
5.2.1 General OSPF Commands....................................................... 394
5.2.2 OSPF Interface Commands...................................................... 410
5.2.3 IP Event Dampening Commands ............................................. 415
5.2.4 OSPF Graceful Restart Commands ......................................... 416
5.2.5 OSPFv2 Stub Router Commands............................................. 420
5.2.6 OSPF Show Commands........................................................... 421
5.3 Routing Information Protocol Commands............................................. 440
5.3.1 Routing Information Protocol Commands................................. 440
Chapter 6 Troubleshooting..............................447
6.1 Troubleshooting.................................................................................... 448