Atop EH7506 User manual

Industrial Managed Ethernet Switch
User’s Manual
Series covered by this manual:
EH7506, EH7508, EH7512, EH7520
EHG7504, EHG7506, EHG7508, EHG7512
Version 1.0
May 2015
TEL: [phone]
FAX: [phone]
http://www.atop.com.tw

ii
Important Announcement
The information contained in this document is the property of Atop Technologies, Inc. and is
supplied for the sole purpose of operation and maintenance of Atop Technologies, Inc
products. No part of this publication is to be used for any other purposes, and it is not to be
reproduced, copied, disclosed, transmitted, stored in a retrieval system, or translated into
any human or computer language, in any form, by any means, in whole or in part, without
the prior explicit written consent of Atop Technologies, Inc.
Published by
Atop Technologies, Inc.
2F, No. 146, Sec. 1, Tung-Hsing Rd.
Jubei, Hsinchu 30261
Taiwan, R.O.C.
Tel: [phone]
Fax: [phone]
www.atop.com.tw
Copyright © 2014 Atop Technologies, Inc. All rights reserved.
All other product names referenced herein are registered trademarks of their respective
companies.

iii
Table of Contents
1Introduction..............................................................................................2
1.1 What is a Managed Industrial Switch ..................................................................... 2
1.2 Software Features .................................................................................................... 2
2Configuring with a Web Browser ...........................................................4
2.1 Web-based Management Basics ............................................................................ 4
2.1.1 Default Settings................................................................................................ 4
2.1.2 Login Process and Main Window Interface ..................................................... 5
2.2 Basic Information ..................................................................................................... 6
2.2.1 Sys Info............................................................................................................ 6
2.2.2 Info SettingS..................................................................................................... 7
2.2.3 Console............................................................................................................ 7
2.2.4 Protocol Status................................................................................................. 8
2.2.5 Power Status.................................................................................................... 8
2.3 Administration .......................................................................................................... 9
2.3.1 Password ......................................................................................................... 9
2.3.2 IP Setting........................................................................................................ 11
2.3.3 IPv6 Setting.................................................................................................... 12
2.3.4 Ping................................................................................................................ 12
2.3.5 Ping6.............................................................................................................. 13
2.3.6 Mirror Port...................................................................................................... 14
2.3.7 System Time and SNTP ................................................................................ 15
2.3.8 Modbus Setting.............................................................................................. 16
2.3.9 PTP................................................................................................................ 22
2.3.10 SSH................................................................................................................ 23
2.4 QoS .......................................................................................................................... 25
2.4.1 QoS Setting.................................................................................................... 25
2.4.2 CoS Queue Mapping ..................................................................................... 28
2.4.3 DSCP Mapping .............................................................................................. 28
2.5 Port .......................................................................................................................... 30
2.5.1 Port Setting .................................................................................................... 30
2.5.2 Port Status ..................................................................................................... 32
2.5.3 Mini-GBIC Port Status.................................................................................... 32
2.5.4 Port Statistics................................................................................................. 33

iv
2.6 Power Over Ethernet.............................................................................................. 34
2.6.1 PoE Setting.................................................................................................... 34
2.6.2 PoE Status..................................................................................................... 35
2.6.3 PoE Alarm Setting.......................................................................................... 35
2.7 Trunking .................................................................................................................. 37
2.7.1 Trunking Setting............................................................................................. 38
2.7.2 LACP Status................................................................................................... 39
2.8 Unicast/Multicast MAC .......................................................................................... 41
2.8.1 Add Static MAC.............................................................................................. 42
2.8.2 MAC Filter...................................................................................................... 42
2.8.3 MAC Age........................................................................................................ 43
2.8.4 MAC Address Table....................................................................................... 43
2.9 GARP/GVRP/GMRP................................................................................................ 45
2.9.1 Multicast Group Table.................................................................................... 45
2.9.2 GARP Setting................................................................................................. 46
2.9.1 GVRP Settings............................................................................................... 47
2.9.2 GMRP Settings .............................................................................................. 49
2.10 IGMP/IP Multicast ................................................................................................... 50
2.10.1 IGMP Setting.................................................................................................. 50
2.10.2 IGMP Statistics .............................................................................................. 52
2.10.3 IGMP/IP Multicast Table ................................................................................ 53
2.10.4 Static IP Multicast .......................................................................................... 54
2.11 SNMP ....................................................................................................................... 56
2.11.1 SNMP............................................................................................................. 56
2.11.2 Community Strings......................................................................................... 57
2.11.3 Trap Receivers............................................................................................... 57
2.11.4 SNMPv3 Users .............................................................................................. 58
2.12 Spanning Tree......................................................................................................... 59
2.12.1 Spanning Tree Setting ................................................................................... 59
2.12.2 RSTP Main Setting ........................................................................................ 60
2.12.3 RSTP Bridge information............................................................................... 61
2.12.4 RSTP Port Status........................................................................................... 62
2.13 VLAN........................................................................................................................ 63
2.13.1 VLAN Mode.................................................................................................... 63
2.13.2 802.1Q VLAN Table....................................................................................... 65
2.13.3 802.1Q VLAN Setting..................................................................................... 66
2.13.4 802.1Q VLAN PVID Setting........................................................................... 67

v
2.13.5 Example of using 802.1Q VLAN.................................................................... 68
2.13.6 Port based VLAN Setting............................................................................... 69
2.14 Security ................................................................................................................... 71
2.14.1 Background on 802.1X ..................................................................................... 71
2.14.2 Port Security Setting ...................................................................................... 72
2.14.3 Port Security Add Static MAC........................................................................ 72
2.14.4 802.1x and Radius setting ............................................................................. 74
2.14.5 802.1.x Parameters Setting ........................................................................... 75
2.14.6 802.1x Port Setting ........................................................................................ 76
2.15 ERPS/Ring............................................................................................................... 77
2.15.1 DIP Switch...................................................................................................... 77
2.15.2 ERPS/Ring..................................................................................................... 77
UERPS Settings (optional)......................................................................................... 82
2.15.3 iA-Ring Setting............................................................................................... 83
2.15.4 Compatible-Ring Setting................................................................................ 86
2.15.5 U-Ring............................................................................................................ 87
2.16 LLDP ........................................................................................................................ 90
2.16.1 LLDP Setting.................................................................................................. 90
2.16.2 Neighbors....................................................................................................... 91
2.17 System..................................................................................................................... 93
2.17.1 Syslog ............................................................................................................ 93
2.17.2 Event Log....................................................................................................... 94
2.17.3 Warning.......................................................................................................... 95
2.17.4 Warning Event Selection................................................................................ 95
2.17.5 Alert Warning Events ..................................................................................... 97
2.17.6 SMTP Settings............................................................................................... 98
2.17.7 Backup/Restore ............................................................................................. 99
2.17.8 Firmware Upgrade ....................................................................................... 101
2.17.9 TFTP............................................................................................................ 101
2.17.10Factory Default............................................................................................. 103
2.17.11Reboot.......................................................................................................... 103
3Configuring with a Serial Console .....................................................105
3.1 Serial Console Setup ........................................................................................... 105
3.2 Command Line Interface Introduction ............................................................... 107
3.3 General Commands ............................................................................................. 108
3.4 Command Example .............................................................................................. 109

vi
3.4.1 Administration Setup using Serial Console.................................................. 109
3.4.2 Spanning Tree Setup using Serial Console................................................. 110
4Configuring with a Telnet Console.....................................................112
4.1 Telnet ......................................................................................................................112
4.2 Telnet Log-in ..........................................................................................................112
4.3 Command line interface for Telnet ......................................................................113
4.4 Commands in the privileged mode .....................................................................113
4.5 Commands in the configuration mode ...............................................................114
Appendix A: Glossary..............................................................................116
Appendix B: Modbus Memory Map.........................................................118

1
Preface
This manual contains some advanced network management knowledge, instructions, examples,
guidelines, and general theories. The contents are designed to help users manage the switch and
use its software, a background in general theory is a must when reading it. Please refer to the
Glossary for technical terms and abbreviations.
Who Should Use This User Manual
This manual is to be used by qualified network personnel or support technicians who are familiar with
network operations, and might be useful for system programmers or network planners as well. This
manual also provides helpful and handy information for first time users. For any related problems,
please contact your local distributor. If they are unable to assist you, please redirect your inquiries to
www.atop.com.tw..
Warranty Period
Atop technology provides a limited 5-year warranty for managed Ethernet switches.

2
1 Introduction
1.1 What is a Managed Industrial Switch
Atop’s EH (Ethernet Switching Hub), EHG (Ethernet Switching Hub Full Gigabit) are product lines of
powerful managed industrial switch which are referred to as OSI Layer 2* bridging devices. Unlike an
“unmanaged” switch, which is normally found in homes or in SOHO environments and runs in “auto-
negotiation” mode, each port on a “managed switch” can be configured for its link bandwidth, priority,
security, and duplex settings. The managed switches can be managed by SNMP software, web
browsers, Telnet, or serial console. Since every single port can be configured to specific settings,
network administrators can better control the network and maximize network functionality.
Atop’s managed switch is an industrial switch (as opposed to a commercial switch); a commercial
switch simply works in a comfortable office environment. However, an industrial switch is designed to
perform in harsh industrial environments, i.e., extreme temperature, high humidity, dusty air, potential
high impact or the presence of potentially high static charges. Atop’s managed switch works fine even
in these environments.
The managed switch is designed to provide faster, secure, and more stable network. One advantage
that makes it a powerful switch is that it supports technologies such as ERPS, iA-Ring, RSTP, MSTP,
and MRP. These technologies provide better network reliability and decrease recovery time down to
less than 20 ms.
The managed switch supports a wide range of IEEE standard protocols. This switch is excellent for
keeping systems running smoothly, reliable for preventing system damage or losses, and friendly to
all levels of users. The goal of this innovative product is to bring users a brand new network-
management experience.
*Note:
Throughout the manual, the symbol * indicates that more detailed information of the subject will be
provided at the end of this book.
1.2 Software Features
Three User Friendly Interfaces
-Web browser
-Telnet Console
-Serial Console

3
DHCP Server/Relay/Client with Option 66/67/68
NTP Server/Client
SNTP
IEEE 1588 PTP V2 and Transparent Clock
Port Mirror
QoS Traffic Regulation
LACP
MAC Filter
GARP/GMRP/GVRP
IGMP
SNMP v1/v2/v3 (with MD5 Authentication and DES encryption)
SNMP Inform
STP/RSTP/MSTP/MRP
VLAN
IEEE 802.1x / EAP / RADIUS / TACACS+
Ring
-ERPS
-iA-Ring
-Compatible-Ring
-U-Ring
LLDP
Profinet
Alarm System (with E-mail Notification or Relay Output)
Modbus/TCP
Ethernet/IP

4
2 Configuring with a Web Browser
Chapter 2 explains how to access the managed switch for the first time. There are three ways to
configure this Ethernet Switch:
1. Web browser
2. Telnet console
3. Serial console
The web browser and telnet console methods allow users to access the switch over the Internet or
the Ethernet LAN, while the serial console method requires a serial cable connection between the
console and the switch. There are only a few differences among these three methods. Users are
recommended to use the web browser method to configure the system because of its user-friendly
interface.
2.1 Web-based Management Basics
Users can access the managed switch easily using their web browsers (Internet Explorer 8 or 11,
Firefox 37, Chrome 42 or later versions recommended). We will proceed to use a web browser to
introduce the managed switch’s functions.
2.1.1 Default Settings
Below is a list of default factory settings. This information will be used during the login process. Make
sure the computer accessing the switch has an IP address in the same subnet and the subnet mask
is the same.
IP Address: 10.0.50.1
Subnet Mask: 255.255.0.0
Default Gateway: 10.0.0.254
User Name: NULL (leave it blank)
Password: NULL (leave it blank)

5
2.1.2 Login Process and Main Window Interface
Before users access the configuration, they have to log in; this can be done in two simple steps.
1. Launch a web browser.
2. Type in the switch IP address (e.g. http://10.0.50.1), (as shown in Figure 2.1).
*When the user name and password is left empty, the login prompt will not show.
Figure 2.1 IP address for Web-based setting
After the login process, the main interface will show up, which should look as Figure 2.2. The main
menu (left side of the screen) provides the links at the top level of the menu hierarchy and allows
them to be expanded to display lower level links. Note that in this case the Port 1 and 3 is highlighted
in green; indicating that the port is being connected. Detailed explanations of each sub-section will be
addressed later as the need arises.
Figure 2.2 Default web interface

6
2.2 Basic Information
To help users become familiar with the device, the Basic section provides important details of the
switch. This is also the main welcome screen once the user has logged in. The details make it easier
to identify different devices connected to the network. They are divided into five sections.
Figure 2.3 Basic information dropdown menu
2.2.1 Sys Info
An introduction to the equipment is done in this section, Figure 2.4.
Figure 2.4 Basic information page
Table 2.1 Basic information descriptions
Label
Description
Model name
The device’s complete model name
Description
The model type of the device.
MAC address
MAC address of the device
Application Version
Current Application version of the device.
Kernel Version
Current Kernel Version of the device.
Memory
Shows current RAM’s availability and the size of cached and shared memory.

7
2.2.2 Info SettingS
Users can enter system’s details here; this information can help identify one specific switch among all
the devices in the network that supports SNMP, (Figure 2.5).
Figure 2.5 System settings page
Table 2.2 System settings descriptions
Label
Description
Factory Default
System Name
Specifies a particular role or application of different
switches. The name entered here will also be shown
in Switch View and Device View applications.
Max. 63 Characters.
(Model name)
System
Description
Detailed description of the unit.
Max. 63 Characters.
Managed Switch
+ (Model name)
System
Location
Locations of the switch.
Max. 63 Characters.
Switch Location
System Contact
Provides contact information for maintenance. Enter
the name of whom to contact in case a problem
occurs.
Max. 63 Characters.
www.atop.com.tw
2.2.3 Console
In this chapter, we use a web browser for configuring the switch. However, there is a specific section
for the serial console method. The Console option is only for serial console parameter configuration
information. It indicates the connection parameters related to the method.
Figure 2.6 Console setting page

8
2.2.4 Protocol Status
Protocol Status page reports an overall the status of each protocol, while users can view status all at
once here, detailed explanations of each protocol and methods will be provided in later sections,
Figure 2.7 shows the web interface for Protocol Status page.
Figure 2.7 Protocol status page
2.2.5 Power Status
Atop’s Managed Switch features dual VDC power. Figure 2.8 shows the status of each power input. A
“Fault” status means that the power is either not connected or the power the not supplied normally.
Figure 2.8 Power status page

9
2.3 Administration
Here users will be able to configure Password, IP Settings, Ping, Mirror Port, System Time,
Modbus, PTP and SSH settings.
Figure 2.9 Administration dropdown menu
2.3.1 Password
Although no password is set for the device when it is manufactured, users can set a password to
assure overall system security, see Figure 2.10. The local authentication introduced here and remote
authentication in later sections will apply to web management UI, SSH, and CLI.
Figure 2.10 Password setting page
Table 2.3 Password setting descriptions
Label
Description
Factory Default
Manager’s User name
User’s Name.
Max. 15 characters.
NULL
Manager’s Password
Password to log-in
Max. 15 characters.
NULL

10
Confirmed Password
Re-type the password. This has to be
exactly the same as the password entered
in the above field.
Max.15 characters.
NULL
In addition to the local authentication, the switch can be configured to request for authentication
through a centralized RADIUS or TACACS+ server when the local authentication fails. For the
RADIUS and TACACS+ comparison, please refer to Table 2.5, you can choose the solution that best
meets your needs.
Table 2.4 Authentication server settings
Label
Description
Factory Default
Authentication Server
Enable / disable authentication through a
remote authentication server
Disabled
Server Type
Choose Authentication Server type,
RADIUS or TACACS+. See notes below for
a detailed explanation.
RADIUS
Server IP/Name
IP address of the authentication server
NULL
Server Port
Communication port of the authentication
server
1812
Shared Key
The key used to authenticate with the
server.
Max 15 characters.
12345678
Confirmed Shared Key
Re-type the shared key.
Max 15 characters.
NULL
Authentication Type
Authentication mechanism. For RADIUS:
MD5. For TACACS+: ASCII, PAP, CHAP,
MSCHAP.
RADIUS is MD5
TACACS+ is ASCII
Server Timeout (1~255
sec)
The time out period waiting for a response
from the authentication server. This will
affect the time that the next login prompt
shows up in case the server is not available.
5
*NOTE:
RADIUS (Remote Authentication Dial In User Service):
RADIUS is an access server that uses AAA protocol. It is a system of distributed security that
secures remote access to networks and network services against unauthorized access. The RADIUS
specification is described in RFC 2865, which obsoletes RFC 2138.
TACACS+ (Terminal Access Controller Access-Control System Plus):
TACACS+ is a security application that provides centralized validation of users attempting to
gain access to a router or network access server, the TACACS+ specification is described in Cisco's
TACACS+ RFC draft.
Table 2.5 Authentication server settings
RADIUS
TACACS+
Transport
Protocol
UDP
TCP
Authentication
and Authorization
Separates AAA
Combines authentication and
authorization

11
Multiprotocol
Support
No
Yes, support ARA and NetBIOS
protocol
Confidentiality
Only password encrypted
Entire packet encrypted
2.3.2 IP Setting
In this section, users may modify IP address functions to reconfigure the switch’s network settings.
Users can choose to enable DHCP (Dynamic Host Configuration Protocol) here. This function is to
obtain an IP address automatically from a DHCP Server. It provides automatic configuration and
eliminates the need for administrator intervention. Users can also opt to set up the IP address and
related fields manually. After each update, a system reboot will be required before the new settings
are effective, see Figure 2.11.
Figure 2.11 IP address setting page
Table 2.6 IP setting descriptions
Label
Description
Factory Default
Enable DHCP Client
By checking this box, an IP address will be
automatically assigned. Otherwise users
can set up the IP address manually.
Uncheck
Static IP address
Displays current IP address. Users can also
set a new static IP address for the device.
10.0.50.1
Subnet Mask
Displays current Subnet Mask or set a new
subnet mask.
255.255.0.0
Gateway
Shows current Gateway or set a new one.
10.0.0.254
Primary DNS
Sets the primary DNS IP address to be used
by your network.
NULL
Secondary DNS
Sets the secondary DNS IP address. The
Ethernet switch will locate the secondary
DNS server if the Primary DNS Server fails
to connect.
NULL

12
2.3.3 IPv6 Setting
Figure 2.12 IPv6 setting page
2.3.4 Ping
Ping is a command to test the network connectivity between the destination device and the managed
switch.
Figure 2.13 Ping page

13
Figure 2.14 Example of ping command
Users can assign an IP address or a domain name to verify network connectivity (see Figure 2.14 for
an example). After entering the IP address/name, please click “Ping” button to start the ping function.
Examples of ping results are shown in Figure 2.15 and Figure 2.16.
Figure 2.15 Example of successful ping command result
Users will have the following result for a failed ping.
Figure 2.16 Example of unsuccessful ping command result
*Note:
If users assign a domain name instead of an IP address, they should assign a DNS first. This can be
done through Administration > IP Settings as shown in Section 2.3.2.
2.3.5 Ping6
Ping6 is a command to test the network connectivity between the destination device and the
managed switch.

14
Figure 2.17 Ping6 page
Users can assign an IPv6 address to verify network connectivity (Figure 2.17). After entering the IP
address, please click “Ping6” button to start the ping function. Examples of ping results are shown in
Figure 2.18.
Figure 2.18 Example of successful ping6 result
2.3.6 Mirror Port
In order to help the network administrator keeps track of network activities, the managed switch
supports port mirroring, which allows incoming and/or outgoing traffic to be monitored by a single port
that is defined as a mirror port, (Figure 2.19).
Figure 2.19 Mirror port page
Table 2.7 Port mirroring descriptions
Label
Description
Factory Default
Monitored direction
Select the monitoring direction.
- Disable: to disable port monitoring.
- Input data stream: to monitor input data
stream of monitored ports only.
Disabled