Comnet CNXE2GE2TX8MSPOE User manual

INSTALLATION AND OPERATION MANUAL
CNXE2GE2TX8MSPOE
INDUSTRIALLY HARDENED
HIGH SPEED 12-PORT MANAGED POE ETHERNET SWITCH
8 × GE PSE + 2 × 2.5GE SFP + 2 × 10GE SFP+ PORTS
The ComNet CNXE2GE2TX8MSPOE is a twelve-port Managed Ethernet Switch
designed to reliably operate in harsh, environmentally challenging applications.
It features eight 10/100/1000BASE-TX ports supporting IEEE 802.2af/at PSE with a
total power budget of 240 watts with a maximum of thirty watts per port to provide
power in a PoE application. It also provides two 100/1G/2.5GBASE-X ports and two
1G/10GBASE-X SFP+ ports. The SFP ports are configurable by the use of compatible
ComNet SFP+ modules. These network-managed layer 2 switches are compatible
with any IEEE802.3 compliant Ethernet device.
This manual serves the following
ComNet Model Numbers:
CNXE2GE2TX8MSPOE

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 2
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
Contents
Getting Started 7
1.1 About the CNXE2GE2TX8MSPOE 7
1.2 Software Features 7
1.3 Hardware Specifications 8
Hardware Overview 9
2.1 Installing Switch on DIN-Rail 9
2.2 Wall Mounting Installation 10
Hardware Overview 11
3.1 Front Panel 11
3.2 Front Panel LEDs 12
3.3 Top View Panel 13
Hardware Installation 14
4.1 Wiring 14
4.1.1 Fault Relay 14
4.1.2 Redundant Power Inputs 14
4.2 Connection 15
4.2.1 Cables 15
4.2.2 SFP 17
4.2.3 C-Ring 18
Redundancy 21
5.1 C-Ring 21
5.1.1 Introduction 21
5.1.2 Configurations 22
5.2 ERPS 23
VLAN Membership Configuration 27
5.3 MSTP 28
5.3.1 STP Configurations 28
5.3.2 MSTI Mapping 30
5.3.3 CIST 32
5.3.4 MSTI Ports 34
5.3.5 Bridge Status 35
5.3.6 Port Status 37
5.3.7 Port Statistics 38

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 3
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
Management 39
6.1 Basic Settings 41
6.1.1 System Information 41
6.1.2 Auth Method 42
6.1.3 Users 45
6.1.4 IP Settings 47
6.1.5 IP Status 49
6.1.6 Daylight Saving Time 50
6.1.7 HTTPS 52
6.1.8 SSH 53
6.1.9 LLDP 54
6.1.10 NTP 59
6.1.11 Universal Plug and Play (UPnP) 60
6.1.12 ModbusTCP 61
6.1.13 Ethernet/IP 61
6.1.14 Backup/Restore Configurations 62
6.1.15 Firmware Update 63
6.2 DHCP 64
6.2.1 DHCP Server 64
6.2.2 DHCP Relay 69
6.2.3 DHCP Snooping 71
6.3 Port Setting 74
6.3.1 Port Control 74
6.3.2 Port Trunk 76
6.3.3 Loop Protection 82
6.4.1 VLAN Membership 83
6.4.2 Membership Status 87
6.4.3 Port Status 88
6.4.4 Private VLAN 89
6.4.5 GVRP 91
6.5 SNMP 93
6.5.1 SNMP System Configurations 93
6.5.2 Trap 94
6.5.3 SNMP Community Configurations 97
6.5.4 SNMP User Configurations 98
6.5.5 SNMP Group Configurations 99
6.5.6 SNMP View Configurations 100

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 4
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
6.5.7 SNMP Access Configurations 101
6.5.8 RMON 102
6.6 Traffic Prioritization 108
6.6.1 Global Storm Policer Configuration 108
6.6.2 Port Classification 109
6.6.3 Port Tag Remaking 110
6.6.4 Port DSCP 111
6.6.5 Port Policing 112
6.6.6 Queue Policing 113
6.6.7 QoS Egress Port Scheduler and Shapers 114
6.6.8 Port Scheduler 116
6.6.9 Port Shaping 116
6.6.10 DSCP-Based QoS 118
6.6.11 DSCP Translation 119
6.6.12 DSCP Classification 120
6.6.13 QoS Control List 121
6.6.14 QoS Counters 123
6.6.15 QCL Status 124
6.6.16 WRED 125
6.7 Multicast 127
6.7.1 IGMP Snooping 127
6.8 Security 134
6.8.1 Device Binding 134
6.8.2 Advanced Configurations 135
6.8.2 Access Management 139
6.8.3 IP Source Guard 140
6.8.4 ACL 142
6.8.5 AAA 154
6.8.6 TACACS+ 156
6.8.7 RADIUS 157
6.8.8 NAS (802.1x) 159
6.8.9 ARP Inspecition 169
6.8.10 Port Security 170
6.9 Warning 174
6.9.1 Fault Alarm 174
6.9.2 System Warning 175

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 5
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
6.10 Monitor and Diag 177
6.10.1 MAC Table 177
6.10.2 Port Statistics 181
6.10.3 Port Monitoring 183
6.10.4 System Log Information 185
6.10.5 Cable Diagnostics 186
6.10.6 SFP Monitor 187
6.10.7 SFP Type 187
6.10.8 Ping 188
6.11 Power over Ethernet (PoE) 190
6.11.1 Configuration 190
6.11.2 Status 192
6.12 Configuration 194
6.12.1 Ac tivate 194
6.12.2 Delete 194
6.13 Save 194
6.14 Troubleshooting 195
6.14.1 Factory Defaults 195
6.14.2 Restart Device 195
Technical Specifications 196
Appendix A 199
Ethernet Ring Protection Switching Example Configuration 199
Configuring ERPS from the Web GUI 200
Ethernet Ring Protection Switching Configuration 207
Configuring ERPS from the ICLI 212

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 6
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
Getting Started
1.1 About the CNXE2GE2TX8MSPOE
The ComNet CNXE2GE2TX8MSPOE is a twelve-port Managed Ethernet Switch designed to
reliably operate in harsh, environmentally challenging applications.
It features eight 10/100/1000BASE-TX ports supporting IEEE 802.2af/at PSE with a total power
budget of 240 watts with a maximum of thirty watts per port to provide power in a PoE
application. It also provides two 100/1G/2.5GBASE-X ports and two 1G/10GBASE-X SFP+ ports.
The SFP ports are configurable by the use of compatible ComNet SFP+ modules.
These network-managed layer 2 switches are compatible with any IEEE802.3 compliant Ethernet
device.
1.2 Software Features
»Supports C-Ring (recovery time < 30ms), and MSTP (RSTP/STP compatible) for Ethernet
Redundancy
»Supports IEEE 802.3az Energy-Efficient Ethernet technology
»Supports latest Internet protocol version IPV6
»Supports HTTPS/SSH protocols for high network security
»Supports IP-based bandwidth management
»Supports application-based QoS management
»IGMP v2/v3 (IGMP snooping) support for filtering multicast traffic
»Supports SNMP v1/v2c/v3 & RMON & 802.1Q VLAN network management
»Supports ACL and 802.1x user authentication
»Supports 10K bytes Jumbo frame
»Multiple notifications during unexpected events
»Configuration via Web-based, Telnet, Console (CLI), and Windows utility (eConsole)
»Supports LLDP Protocol

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 7
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
1.3 Hardware Specifications
»Redundant 12~48VDC power inputs
»8 x 10/100/1000Base-T(X) ports, POE 30W
»2 x 1G/10GBase-X SFP+ sockets
»2 x 100/1G/2.5GBase-X SFP+ sockets
»1 x console port
»Operating temperature: -20 to +60˚ C @ 2.5G/10G SFP or -40 to +75º C @ 1G
»Storage temperature: -40 to +85ºC
»Operating humidity: 5% to 95%, non-condensing
»Casing: IP-30
»DIN-Rail and wall mounting enabled
»Dimensions: 74.3 (W) x 125 (D) x 153.6 (H) mm

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 8
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
Hardware Overview
2.1 Installing Switch on DIN-Rail
Each switch has a DIN-Rail kit pre-installed on rear panel.
Mount CNXE2GE2TX8MSPOE on DIN-Rail
DIN-Rail Mount Kit

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 9
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
2.2 Wall Mounting Installation
Each switch includes an optional wall mount panel.
Install wall mount panel CNXE2GE2TX8MSPOE
Wall-Mount Kit

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 10
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
Hardware Overview
3.1 Front Panel
The following table describes the labeling on the front panel of the CNXE2GE2TX8MSPOE.
Port Description
DG SFP Port 2 x 100 / 1G / 2.5G
TG SFP Port 2 x 1G / 10G
Copper Port 8 x 10/100/1000Base-T(X)
Console RJ-45 connecter to manage switch via RS-232
2
3
4
5
6
7
10
11
13
12
8
9
1
1. LED for PWR. When lit, indicates PWR UP.
2. LED for PWR1.
3. LED for PWR2.
4. LED for R.M (Ring master). When lit, indicates the switch is functioning as ring master.
5. LED for Ring. When lit, indicates the Redundant-Ring is activated.
6. LED for Fault. When lit, indicates a Power failure or Port down/fail.
7. Console port (RJ-45)

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 11
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
8. 10/100/1000Base-T(X) ports
9. LED for Ethernet ports link/act/speed status (right port indicator) (see table below)
10. SFP Port support 100 / 1G / 2.5G SFP+ Port support 1G / 10G
11. 10/100/1000Base-T(X) ports
12. LED for SFP Ports (see table below)
13. LED for SFP Ports (see table below)
3.2 Front Panel LEDs
LED Color Status Description
PWR Green On DC power module up
PW1 Green On DC power module 1 activated.
PW2 Green On DC Power module 2 activated.
R.M. Green On Ring Master
Ring Green
On Ring enabled
Slow blink Ring has only one link (cannot build a ring)
Fast blink Ring is working normally.
Fault Amber On Fault relay. Power failure or Port down/fail.
Gigabit Ethernet ports
ACT/LNK/SPEED
(Dual color) Green/Amber
Green Port link up on 1000Mbps
Link/Act at 1000Mbps
Amber Link/Act at 100Mbps
OFF Link/Act at 10Mbps
PoE Amber On PoE enabled
SFP ports
LNK/LNK Green On Port link up.
Blink Data transmitted.

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 12
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
3.3 Top View Panel
The bottom panel components of CNXE2GE2TX8MSPOE are as shown below:
1. Terminal block includes: PWR1, PWR2 (50-57V DC)
2. Ground wire

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 13
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
Hardware Installation
4.1 Wiring
ATTENTION
1. Be sure to disconnect the power cord before installing and/or wiring your switches.
2. Calculate the maximum possible current in each power wire and common wire. Observe all
electrical codes dictating the maximum current allowable for each wire size.
3. If the current goes above the maximum ratings, the wiring could overheat, causing serious
damage to your equipment.
4. Use separate paths to route wiring for power and devices. If power wiring and device wiring
paths must cross, make sure the wires are perpendicular at the intersection point.
5. Do not run signal or communications wiring and power wiring through the same wire conduit.
To avoid interference, wires with different signal characteristics should be routed separately.
6. You can use the type of signal transmitted through a wire to determine which wires should be
kept separate. The rule of thumb is that wiring sharing similar electrical characteristics can be
bundled together.
7. You should separate input wiring from output wiring.
8. It is advised to label the wiring to all devices in the system.
4.1.1 Fault Relay
The three-pin fault relay terminal on the front panel is used to detect user-configured events. The
two wires attached to the fault contacts form an open circuit when a user-configured event is
triggered. If a user-configured event does not occur, the fault circuit remains closed.
4.1.2 Redundant Power Inputs
The switch has two sets of power inputs, power input 1 and power input 2. Follow the steps below
to wire redundant power inputs.
Step 1: Insert the negative/positive wires into the V-/V+ terminals, respectively.
Step 2: Secure the DC wires by using a small flat-blade screwdriver to tighten the wire-clamp
screws on the front of the terminal block connector.

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 14
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
4.2 Connection
4.2.1 Cables
1000/100BASE-TX/10BASE-T Pin Assignments
The device has standard Ethernet ports. According to the link type, the switch uses CAT 3, 4, 5, or
5e UTP cables to connect to any other network devices (PCs, servers, switches, routers, or hubs).
Please refer to the following table for cable specifications.
Cable Types and Specifications:
Cable Type Max. Length Connector
10BASE-T Cat. 3, 4, 5 100-ohm UTP 100 m (328 ft) RJ-45
100BASE-TX Cat. 5 100-ohm UTP 100 m (328 ft) RJ-45
1000BASE-T Cat. 5/Cat. 5e 100-ohm UTP 100 m (328ft) RJ-45
With 10/100/1000Base-T(X) cables, pins 1 and 2 are used for transmitting data, and pins 3 and 6
are used for receiving data.
10/100Base-T(X) RJ-45 Port Pin Assignments:
Pin Number Assignment
1 TD+
2 TD-
3 RD+
6 RD-
1000Base-T RJ-45 Port Pin Assignments:
Pin Number Assignment
1 BI_DA+
2 BI_DA-
3 BI_DB+
4 BI_DC+
5 BI_DC-
6 BI_DB-
7 BI_DD+
8 BI_DD-

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 15
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
The device supports auto MDI/MDI-X operation. You can use a cable to connect the switch to a
PC. The table below shows the 10/100Base-T(X) MDI and MDI-X port pin outs.
10/100Base-T(X) MDI/MDI-X Pin Assignments:
Pin Number MDI port MDI-X port
1 TD+(transmit) RD+(receive)
2 TD-(transmit) RD-(receive)
3 RD+(receive) TD+(transmit)
4 Not used Not used
5 Not used Not used
6 RD-(receive) TD-(transmit)
7 Not used Not used
8 Not used Not used
1000Base-T MDI/MDI-X Pin Assignments:
Pin Number MDI port MDI-X port
1 BI_DA+ BI_DB+
2 BI_DA- BI_DB-
3 BI_DB+ BI_DA+
4 BI_DC+ BI_DD+
5 BI_DC- BI_DD-
6 BI_DB- BI_DA-
7 BI_DD+ BI_DC+
8 BI_DD- BI_DC-
Note: “+” and “-” signs represent the polarity of the wires that make up each wire pair.

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 16
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
RS-232 console port wiring
The device can be managed via console ports using the included RS-232 cable. You can connect
the port to a PC via the RS-232 cable with a DB-9 female connector. The DB-9 female connector of
the RS-232 cable should be connected the PC while the other end of the cable (RJ-45 connector)
should be connected to the console port of the switch.
PC pin out (male)
assignment
RS-232 with DB9 female
connector DB9 to RJ 45
Pin #2 RD Pin #2 TD Pin #2
Pin #3 TD Pin #3 RD Pin #3
Pin #5 GD Pin #5 GD Pin #5
4.2.2 SFP
The switch comes with fiber optical ports that can connect to other devices using SFP modules.
The fiber optical ports are in multi-mode and single-mode with LC connectors. Please remember
that the TX port of Switch A should be connected to the RX port of Switch B.

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 17
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
4.2.3 C-Ring
C-Ring
You can connect three or more switches to form a ring topology to gain network redundancy
capabilities through the following steps.
Connect each switch to form a daisy chain using an Ethernet cable.
Set one of the connected switches to be the master and make sure the port setting of each
connected switch on the management page corresponds to the physical ports connected. For
information about the port setting, please refer to 5.1.2 Configurations.
Connect the last switch to the first switch to form a ring topology.

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 18
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
Coupling Ring
If you already have two Redundant-Ring topologies and would like to connect the rings, you can
form them into a coupling ring.
For example:
»Select switches A and B from Ring 1 and switches C and D from Ring 2
»Link port 1 of switch A to port 2 of switch C
»Link port 1 of switch B to port 2 of switch D
»Enable Coupling Ring option on the management page and select the coupling ring matching
the connected port.
»One of the connections will act as the main path while the other will act as the backup path.
For more information on port setting, please refer to 5.1.2 Configurations.

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 19
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
Dual Homing
Connect your ring topology to a RSTP network environment using dual homing.
Choose switches A & B from the ring for connecting to the switches in the RSTP network (core
switches).
The connection of one of the switches (Switch A or B) will act as the primary path, while the other
will act as the backup path that is activated when the primary path connection fails.

INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 20
INSTALLATION AND OPERATION MANUAL CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
Redundancy
Redundancy for minimized system downtime is one of the most important concerns for industrial
networking devices. Our redundancy technologies feature faster recovery time than existing
redundancy technologies widely used in commercial applications, such as STP, RSTP, and MSTP.
our redundancy technologies support different networking topologies and assure the reliability of
the network.
5.1 C-Ring
5.1.1 Introduction
C-Ring recovery time of less than 10 milliseconds and up to 250 nodes. The ring protocols
identify one switch as the master of the network, and then automatically block packets from
traveling through any of the network’s redundant loops. In the event that one branch of the ring
gets disconnected from the rest of the network, the protocol automatically readjusts the ring so
that the part of the network that was disconnected can reestablish contact with the rest of the
network. The redundant ring technology can protect mission-critical applications from network
interruptions or temporary malfunction with its fast recover technology.