Comnet CNGE2FE24MSPOE User manual

i
INSTALLATION AND OPERATION MANUAL
CNGE2FE24MSPOE
ENVIRONMENTALLY HARDENED MANAGED
ETHERNET SWITCH WITH (24) 10/100TX
+ (2) 10/100/1000FX RJ45 or 1000FX SFP PORTS
V1.02 – October 2009
The ComNet™ CNGE2FE24MSPoE Managed Ethernet Switch provides transmission of (24) 10/100 BASE-
TX and (2) 10/100/1000TX or 1000FX combo ports. Unlike most Ethernet switches, these environmentally
hardened units are designed for deployment in difficult operating environments, and are available for use
with either conventional CAT-5e copper or optical transmission media. The 24 electrical ports support the
10/100 Mbps Ethernet IEEE 802.3 protocol, and auto-negotiating and auto-MDI/MDIX features are
provided for simplicity and ease of installation. All 24 ports support IEEE.802.3af based POE. 2 ports are
10/100/1000 configurable for copper or fiber media for use with multimode or single mode optical fiber,
selected by optional SFP modules. These network managed layer 2 switches are optically (1000 BASE-
FX) and electrically compatible with any IEEE 802.3 compliant Ethernet devices. Plug-and-play design
ensures ease of installation, and no electrical or optical adjustments are ever required. The
CNGE2FE24MSPoE incorporates LED indicators for monitoring the operating status of the managed
switch and network. These units are rack mountable.

ii
The contents of this manual are based on the table below listing
firmware version, software kernel version, and hardware version. If the
switch functions are different from the description of contents of manual,
please contact your local representative for more information.
Firmware Version!
V2.10!
Kernel Version!
V5.57!
Hardware Version!
----------!
Notice

iii
FCC Warning
This Equipment has been tested and found to comply with the limits for a Class-A
digital device, pursuant to Part 15 of the FCC rules. These limits are designed to
provide reasonable protection against harmful interference in a residential
installation. This equipment generates, uses, and can radiate radio frequency
energy. It may cause harmful interference to radio communications if this
equipment is not installed and used in accordance with the instructions. However,
there is no guarantee that interference will not occur in a particular installation. If
this equipment does cause harmful interference to radio or television reception,
which can be determined by turning the equipment off and on, the user is
encouraged to try to correct the interference by one or more of the following
measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which
the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
CE Mark Warning
This is a Class-A product. In a domestic environment this product may cause radio
interference in which case the user may be required to take adequate measures.

iv
Content
FCC Warning ............................................................. iii!
CE Mark Warning ...................................................... iii!
Content ...................................................................... iv!
1!Introduction ....................................................... 9!
1.1!Hardware Features......................................... 9!
1.2!Software Feature .......................................... 12!
1.3!Package Contents ........................................ 15!
2!Hardware Description ..................................... 16!
2.1!Physical Dimension ...................................... 16!
2.2!Front Panel................................................... 16!
2.3!Rear Panel ................................................... 16!
2.4!LED Indicators.............................................. 18!
2.5!Cabling ......................................................... 19!
2.6!Desktop Installation ...................................... 22!
2.6.1!Attaching Rubber Feet......................................... 22!
2.7!Rack-mounted Installation ............................ 22!
3!Network Application........................................ 24!
3.1!X-Ring Application........................................ 25!
3.2!Couple Ring Application ............................... 26!
3.3!Central Ring Application............................... 27!
3.4!Dual Homing Application .............................. 28!
4!Console Management ..................................... 29!
4.1!Connecting to the Console Port ................... 29!
4.2!Login in the Console Interface...................... 29!

v
4.3!CLI Management.......................................... 31!
5!Web-Based Management................................ 33!
5.1!About Web-based Management................... 33!
5.2!Preparing for Web Management .................. 33!
5.3!System Login................................................ 34!
6!System.............................................................. 35!
6.1!System Information ...................................... 35!
6.2!IP Configuration............................................ 36!
6.3!DHCP Server – System configuration .......... 37!
6.4!DHCP Server – Client Entries ...................... 38!
6.5!DHCP Server - Port and IP Binding ............. 39!
6.6!TFTP - Update Firmware.............................. 40!
6.7!TFTP – Restore Configuration ..................... 40!
6.8!TFTP - Backup Configuration....................... 41!
6.9!System Event Log – Syslog Configuration ... 41!
6.10!System Event Log - SMTP Configuration..... 43!
6.11!System Event Log - Event Configuration ..... 44!
6.12!Fault Relay Alarm......................................... 47!
6.13!SNTP Configuration ..................................... 47!
6.14!IP Security .................................................... 50!
6.15!User Authentication ...................................... 51!
6.16!Advanced Configuration—Broadcast Storm Filter
52!
6.17!Advanced Configuration—Aging Time ......... 53!

vi
6.18!Advanced Configuration—Jumbo Frame ..... 54!
6.19!1000TX Cable Length .................................. 55!
7!Port ................................................................... 56!
7.1!Port Statistics ............................................... 56!
7.2!Port Counters ............................................... 57!
7.3!Port Control .................................................. 59!
7.4!Port Trunk..................................................... 61!
7.4.1!Aggregator setting ............................................... 62!
7.4.2!Aggregator Information ........................................ 63!
7.4.3!State Activity ........................................................ 64!
7.5!Port Mirroring................................................ 65!
7.6!Rate Limiting ................................................ 66!
7.7!VLAN configuration ...................................... 68!
7.7.1!VLAN configuration - Port-based VLAN............... 68!
7.7.2!802.1Q VLAN....................................................... 72!
7.8!Rapid Spanning Tree ................................... 77!
7.8.1!RSTP - System Configuration.............................. 77!
7.8.2!RSTP—Port Configuration................................... 79!
7.9!SNMP Configuration..................................... 81!
7.9.1!System Configuration .......................................... 82!
7.9.2!Trap Configuration ............................................... 83!
7.9.3!SNMPV3 Configuration........................................ 84!

vii
7.10!QoS Configuration........................................ 88!
7.10.1!QoS Policy and Priority Type............................. 88!
7.11!IGMP Configuration...................................... 90!
7.12!LLDP Configuration ...................................... 91!
7.13!X-Ring .......................................................... 92!
7.14!Security ........................................................ 95!
7.14.1!802.1X/Radius Configuration............................. 95!
7.14.2!MAC Address Table........................................... 98!
7.15!Access Control List..................................... 103!
7.16!Power over Ethernet................................... 104!
7.17!Factory Default ........................................... 107!
7.18!Save Configuration..................................... 107!
7.19!System Reboot........................................... 107!
8!Troubleshooting ............................................ 109!
8.1!Incorrect connections .................................109!
8.2!Diagnosing LED Indicators......................... 110!
9!Appendix A—RJ45 Pin Assignment ............ 111!
9.1.1!10 /100BASE-TX Pin outs .................................111!
9.1.2!10/100Base-TX Cable Schematic...................... 112!
9.1.3!10/100/1000Base-TX Pin outs........................... 112!
9.1.4!10/100/1000Base-TX Cable Schematic ............ 113!
10!Appendix B—Command Sets..................... 115!
10.1.1!Commands Set List ......................................... 115!

viii
10.1.2!System Commands Set ................................... 115!
10.1.3!Port Commands Set ........................................ 118!
10.1.4!Trunk Commands Set...................................... 120!
10.1.5!VLAN Commands Set...................................... 121!
10.1.6!Spanning Tree Commands Set ....................... 123!
10.1.7!QOS Commands Set ....................................... 124!
10.1.8!IGMP Commands Set...................................... 125!
10.1.9!Mac / Filter Table Commands Set ................... 126!
10.1.10!SNMP Commands Set................................... 127!
10.1.11!Port Mirroring Commands Set ....................... 129!
10.1.12!802.1x Commands Set .................................. 130!
10.1.13!TFTP Commands Set .................................... 131!
10.1.14!SystemLog, SMTP and Event Commands Set132!
10.1.15!SNTP Commands Set ................................... 134!
10.1.16!X-Ring Commands Set .................................. 135!
10.1.17!LLDP Command Set...................................... 136!
10.1.18!Access Control List Command Set ................ 136!
10.1.19!Power over Ethernet Set................................ 137!

9
1 Introduction
The CNGE2FE24MSPOE Managed Industrial PoE Switch is a cost-effective solution and
meets the high reliability requirements demanded by industrial applications. Using the fiber
ports can extend the connection distance that increases the network elasticity and
performance. The industrial switch provides the PoE function for Powered Devices to
receive power as well as data over the RJ45 cable.
1.1 Hardware Features
IEEE Standard
IEEE 802.3 10Base-T Ethernet
IEEE 802.3u 100Base-TX / 100Base-FX
IEEE802.3z Gigabit fiber
IEEE802.3ab 1000Base-T
IEEE802.3x Flow Control and Back Pressure
IEEE802.3ad Port trunk with LACP
IEEE802.1d Spanning Tree/ IEEE802.1w Rapid
Spanning Tree
IEEE802.1p Class of Service
IEEE802.1Q VLAN Tag
IEEE 802.1x User Authentication (Radius)
IEEE802.3af Power over Ethernet
IEEE802.1ab LLDP
Switch
Architecture
Back-plane (Switching Fabric): 8.8Gbps
Packet throughput ability (Full-Duplex):
13.1Mpps@64bytes

10
Transfer Rate
14,880 pps for 10Base-T Ethernet port
148,800 pps for 100Base-TX/FX Fast Ethernet port
1,488,000 pps for Gigabit Fiber Ethernet port
Packet Buffer
4Mbits
MAC address
8K MAC address table
Flash ROM
4Mbytes
DRAM
32Mbytes
Jumbo Frame
9022bytes (for Gigabit Ports)
Connector
(Front) RS-232 : Female DB-9 (for Console)
(Rear) RS-232: Male DB-9 (for UPWM)
10/100TX: 24 x RJ45
10/100/1000T/ Mini-GBIC Combo: 2 x RJ45 + 2 x
SFP sockets
LED
System Power (Green)
Gigabit Fiber:Link/Activity (Green)
Gigabit Copper: Link/Activity (Green), Full
duplex/collision (Yellow), Mini-GBIC [(Link/Activity)
Green]
Network Cable
10Base-T: 2-pair UTP/STP Cat. 3, 4, 5, 5e cable
EIA/TIA-568 100-ohm (100m)
100Base-TX: 2-pair UTP/STP Cat. 5/5e cable
EIA/TIA-568 100-ohm (100m)
1000Base-T: 2-pair UTP/STP Cat. 5e cable
EIA/TIA-568 100-ohm (100m)

11
Power Supply
DC 48V
A readily accessible disconnect device as part of the
building installation shall be incorporated into the
fixed wiring. Moreover, The disconnect device
(appropriate circuit breaker) must be included in the
ungrounded supply conductor.
Redundant Power
Supply
DC 48V
Power
Consumption
335 Watts
Operating Temp.
-40oC to +75oC
Operation
Humidity
5% to 95% (Non-condensing)
Storage
Temperature
-40oC to 85oC
Fan
Fanless
Case Dimension
440mm (W) x 280mm (D) x 44mm (H)
Installation
19” Rack mount
EMI
FCC Class A
CE EN61000-4-2/3/4/6/8,
CE EN61000-6-2, CE EN61000-6-4
Safety
UL
cUL
CE/EN60950-1

12
Stability testing
IEC60068-2-32 (Free fall)
IEC60068-2-27 (Shock)
IEC60068-2-6 (Vibration)
1.2 Software Feature
Management
SNMP v1
SNMP v2c
SNMP v3
Web/Telnet/Console (CLI)
SNMP MIB
RFC 2418 SNMP MIB, RFC 1213 MIBII, RFC 2011
SNMP V2 MIB, RFC 1493 Bridge MIB,
RFC 2674 VLAN MIB, RFC 1215 Trap MIB, RFC 1643
Ethernet Like, RFC 1757 RMON1, RSTP MIB, PoE
MIB, UPS MIB, LLDP MIB, Private MIB
VLAN
Port based VLAN, up to 24 groups
IEEE802.1Q Tag VLAN
Static VLAN groups up to 256, Dynamic VLAN group
up to 2048, VLAN ID from 1 to 4094.
GVRP up to 256 groups.
Port Trunk with
LACP
LACP Port Trunk: 13 Trunk groups/Maximum 4 trunk
members

13
LLDP
Supports LLDP to allow switch to advertise its
identification and capability on the LAN
Spanning Tree
Supports IEEE802.1d Spanning Tree and IEEE802.1w
Rapid Spanning Tree
X-Ring
Supports X-Ring, Dual Homing, Couple Ring and
Central Ring topology
Provides redundant backup feature and the recovery
time below 20ms
Quality of service
The quality of service determined by port, Tag and
IPv4 Type of service, IPv4 Different Service
Class of Service
Supports IEEE802.1p class of service, per port
provides 4 priority queues
Port Security
Supports 50 entries of MAC address for static MAC
and another 50 for MAC filter
Port Mirror
Supports 3 mirroring types: “RX, TX and Both packet”
IGMP
Supports IGMP snooping v1, v2
256 multicast groups and IGMP query
IP Security
Supports 10 IP addresses that have permission to
access the switch management and to prevent
unauthorized intruder
Login Security
Supports IEEE802.1X Authentication/RADIUS
Access Control
List (ACL)
Supports up to 255 Policy

14
Bandwidth
Control
Support ingress packet filter and egress packet limit
The egress rate control supports all of packet type and
the limit rates are 0~100Mbps
Ingress filter packet type combination rules are
Broadcast/Multicast/Unknown Unicast packet,
Broadcast/Multicast packet, Broadcast packet only and
all of packet. The packet filter rate can be set from 0 to
100Mbps
Flow Control
Supports Flow Control for Full-duplex and Back
Pressure for Half-duplex
System log
Supports System log record and remote system log
server
SMTP
Supports 1 SMTP Server and 6 e-mail accounts for
receiving event alert
Relay Alarm
Provides one relay output for port breakdown and
power failure.
Alarm Relay current carry ability: 1A @ DC 24V
SNMP Trap
1. Device cold start,
2. Authorization failure,
3. X-Ring topology changed.
4. Port link up/ link down.
5. DC disconnect trap-PoE port Event
Trap station up to 3
DHCP
Provides DHCP Client/DHCP Server/IP Relay
functions
DNS
Provides DNS client feature
Supports Primary and Secondary DNS server

15
SNTP
Supports SNTP to synchronize system clock in
Internet
Firmware
Upgrade
Supports TFTP & Console firmware update
Configuration
Upload and
Download
Supports binary format configuration file for system
quick installation (TFTP backup and restore)
ifAlias
Each port allows importing 128bit of alphabetic string
of word on SNMP and CLI interface.
1.3 Package Contents
Please refer to the package contents list below to verify them against the checklist.
CNGE2FE24MSPOE Managed Industrial PoE Switch x 1
User manual x 1
Pluggable Terminal Block x 1
Mounting plate x 2
DB-9P/F TO DB-9P/M 150cm RoHS cable x 1
Rubber feet x 4
Compare the contents with the standard checklist above. If any item is damaged or missing,
please contact your local representative for service.

16
2 Hardware Description
In this paragraph, the Industrial switch’s hardware spec, port, cabling information, and
wiring installation will be described.
2.1 Physical Dimension
CNGE2FE24MSPOE Managed Industrial PoE Switch dimensions (W x D x H) are 440mm
x 280mm x 44mm
2.2 Front Panel
The Front Panel of the CNGE2FE24MSPOE Managed Industrial PoE Switch is shown
below:
Front Panel of the CNGE2FE24MSPOE Industrial Switch
2.3 Rear Panel
The rear panel of the CNGE2FE24MSPOE Managed Industrial PoE Switch has one
terminal block connector. The ten-pin screw clamp terminal strip is for power supply
connections and connections to the fault relay. Redundant power sources may be used.
The fault relay can be configured to change from its normally open state in response to any
or all of the following conditions using the GUI check boxes shown in the image below:
•failure of power supply 1
•failure of power supply 2

17
•failure or a port
•failure of a link to the port
Pin-outs follow:
PWR1
Pin 1 or Pin 2 = +48 VDC
Pin 3 or Pin 4 = -48 VDC
PWR2
Pin 7 or Pin 8 = +48 VDC
Pin 9 or Pin 10 = -48 VDC
Fault
Pin 5 and Pin 6 = normally open relay secondary, contacts rated at 24 VDC 1A max, resistive
loads only
Rear panel of the CNGE2FE24MSPOE Industrial Switch

18
2.4 LED Indicators
The diagnostic LEDs located on the front panel of the industrial switch provide real-time
information of the system and optional status. The following table provides the description
of the LED status and their meanings for the switch.
LED
Status
Description
Red
DC power input 1 or 2 is inactive or port link down
Fault
Off
DC power 1/DC Power 2/port linking are all active,
or no power inputs
Green
DC power input 1 is active
DC-PWR1
Off
DC power input 1 is inactive
Green
DC power input 2 is active
DC-PWR2
Off
DC power input 2 is active
Green
A powered device is connected utilizing Power
over Ethernet on the port
PoE
Off
No device is connected or power forwarding fails
Green
The port is connecting with the device.
Blink
The port is receiving or transmitting data.
LNK/ACT
Off
No device attached.
Amber
The port is operating in Full-duplex mode.
FDX
Off
In Half-duplex mode
LNK/ACT (Gigabit
Green
The port is connecting with the device.

19
Blink
The port is receiving or transmitting data.
port)
25/26 port
Off
No device attached
Amber
The port is operating in Full-duplex mode
Blink
Collision of Packets occurs in the port
FDX/COL (Gigabit
port)
25/26 port
Off
In Half-duplex mode
2.5 Cabling
Use four twisted-pair, Category 5e or above cabling for RJ45 port connection. The
cable between the switch and the link partner (switch, hub, workstation, etc.) must be
less than 100 meters (328 ft.) long.
Use fiber optic cabling and connectors which are suitable for the selected SFP fiber
module installed. The maximum transmission distance will be determined by the
selected SFP module.
To connect the SFP transceiver using LC connectors, please follow the steps shown below:
First, insert the transceiver into the SFP module. Notice that the triangle mark is the bottom
of the module.

20
Transceiver to the SFP module
Transceiver Inserted
Second, insert the fiber cables LC connector into the transceiver.
LC connector to the transceiver