Cortex SW-10200 User manual

User’s Manual
SW-10200
PoE+ Switch 802.3at
8 x 10/100 PoE +802.3at plus 2 Gigabit Combo Ports RJ45/SFP
Rev. 141022

User’s Manual: SW-10200
Trademarks
Copyright © i3 International Inc. 2012.
Contents subject to revision without prior notice.
All other trademarks belong to their respective owners.
Disclaimer
i3 International does not warrant that the hardware will work properly in all environments and
applications, and makes no warranty and representation, either implied or expressed, with respect to the
quality, performance, merchantability, or fitness for a particular purpose. i3 International has made every
effort to ensure that this User's Manual is accurate; i3 International disclaims liability for any
inaccuracies or omissions that may have occurred.
Information in this User's Manual is subject to change without notice and does not represent a
commitment on the part of i3 International. i3 International assumes no responsibility for any
inaccuracies that may be contained in this User's Manual. i3 International makes no commitment to
update or keep current the information in this User's Manual, and reserves the right to make
improvements to this User's Manual and/or to the products described in this User's Manual, at any time
without notice.
FCC Warning
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment. This
equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the Instruction manual, may cause harmful interference to radio communications.
Operation of this equipment in a residential area is likely to cause harmful interference in which case the
user will be required to correct the interference at whose own expense.
CE Mark Warning
This is a Class A product. In a domestic environment, this product may cause radio interference, in
which case the user may be required to take adequate measures.
Energy Saving Note of the Device
This power required device does not support Standby mode operation.
For energy saving, remove the power cable to disconnect the device from the power circuit.
Without removing power cable, the device will still consume power from the power source. In the view of
Saving the Energy and reduce the unnecessary power consuming, it is strongly suggested to remove
the power connection for the device if this device is not intended to be active.
WEEE Warning
To avoid the potential effects on the environment and human health as a result of the
presence of hazardous substances in electrical and electronic equipment, end users
of electrical and electronic equipment should understand the meaning of the crossed-
out wheeled bin symbol. Do not dispose of WEEE as unsorted municipal waste and
have to collect such WEEE separately.
Revision
i3 International 8 x 10/100 PoE+ 802.3at plus 2 Gigabit Combo Ports RJ45/SFP Switch
Web Smart Switch User’s Manual
FOR MODELS: SW-10200
REVISION: 1.4.2

User’s Manual: SW-10200
TABLE OF CONTENTS
1. INTRODUCTION.................................................................................................5
1.1. Product Overview...............................................................................................................5
1.1.1. Product Features....................................................................................................................5
2. INSTALLATION...................................................................................................7
2.1. Hardware Installation.........................................................................................................7
2.1.1. Package Contents ..................................................................................................................7
2.2. Hardware Description........................................................................................................7
3. SOFTWARE CONFIGURATION .........................................................................9
3.1. Logging In...........................................................................................................................9
3.2. Administration..................................................................................................................10
3.2.1. Authentication Configuration.................................................................................................10
3.2.2. System IP Configuration.......................................................................................................10
3.2.3. System Status.......................................................................................................................11
3.3. Factory Settings...............................................................................................................11
3.3.1. Software Reset.....................................................................................................................11
3.3.2. Hardware Reset....................................................................................................................11
3.4. Firmware Update ..............................................................................................................12
3.5. Logging out.......................................................................................................................12
4. PORT MANAGEMENT......................................................................................13
4.1. Port Configuration............................................................................................................13
4.1.1 Auto-negotiation.....................................................................................................................13
4.2. Port Mirroring ...................................................................................................................14
4.3. Bandwidth Control ...........................................................................................................14
4.3.1. Broadcast Storm Control.......................................................................................................15
4.4. PoE Settings .....................................................................................................................15
4.4.1. PoE Introduction...................................................................................................................15
5. VLAN SETTING ................................................................................................17
5.1. Introduction to VLAN.......................................................................................................17
5.1.1. IEEE 802.1Q Standard .........................................................................................................17
5.2. VLAN Configuration.........................................................................................................18
5.2.1. VLAN Mode ..........................................................................................................................18
5.2.2. VLAN Member......................................................................................................................19
5.3. Multi to 1 Setting......................................................................................................................20
6. PER PORT COUNTER......................................................................................21
6.1. Port Counter .....................................................................................................................21
7. QoS SETTING...................................................................................................22
7.1. About QoS.........................................................................................................................22
7.2. Configuring QoS...............................................................................................................22
7.2.1. Priority Mode.........................................................................................................................22
71B7.2.2. Port, 802.1p, IP/DS based..............................................................................................23
8. SECURITY ........................................................................................................24
8.1. MAC Address Binding .....................................................................................................24
8.2. TCP/UDP Filter..................................................................................................................24

User’s Manual: SW-10200
9. SPANNING TREE PROTOCOL ........................................................................26
9.2. STP Port Settings.............................................................................................................27
9.3. Loopback Detection Settings..........................................................................................28
10. TRUNKING......................................................................................................29
11. BACKUP/RECOVERY.....................................................................................30
12. MISCELLANEOUS SETTINGS.......................................................................31
13. TROUBLESHOOTING ....................................................................................32
APPENDIX A: NETWORKING HARDWARE........................................................33
A.1. RJ-45 Pin Assignments...................................................................................................33
40BA.2. 10/100Mbps, 10/100Base-TX....................................................................................33
APPENDIX B: Store-and-Forward.......................................................................35
APPENDIX C: PoE OVERVIEW ...........................................................................36
C.1. PoE System Architecture ........................................................................................................36
C.1.1. Power Transference through a CAT5 Ethernet cable...........................................................36
C.2. PoE Provisioning Process.......................................................................................................37
C.2.1. Line Detection......................................................................................................................37
C.2.2. Classification........................................................................................................................38
C.2.3. Start-up ................................................................................................................................38
C.2.4. Operation.............................................................................................................................38
C.2.5. Power Overloads..................................................................................................................38
C.3. Power Disconnection Scenarios....................................................................................38
APPENDEX D: GLOSSARY .................................................................................39

User’s Manual: SW-10200
5
1. INTRODUCTION
1.1. Product Overview
This switch provides 8 10/100 Mbps PoE ports, 8 10/100BASE-TX ports that support the IEEE 802.3at PoE
protocol, and includes auto MDI/MDIX crossover detection function providing an excellent choice in network
flexibility. Each port transmits up to 30 watts, fully configurable from a convenient web UI. With this added PoE
feature, this switch is an ideal solution for building wireless, IP surveillance, and VoIP networks.
It also provides a port-based and 802.1Q tag VLAN function to provide better traffic management, reduce
latency, improve security and save bandwidth without the need to add additional hardware to the network.
1.1.1. Product Features
Web Management
Port Management
Port Configuration Port Mirroring Bandwidth Control
Broadcast Storm Control
PoE On/Off Setting
VLAN Setting
Port-based/ Tag-based
VLAN ID: 1~4094
Trunking
2 groups (1~4 port for each group)
QoS Setting
Priority Mode
Class of Service Configuration
TCP/UDP Port-based
Trunking
Link Aggregation Setting
Security Setting
MAC address filtering
TCP/UDP Port filtering
STP/RSTP
Spanning Tree Protocol
Backup Recovery Configuration
Specifications
Standard
IEEE 802.3 10BaseT IEEE 802.3u 100BaseTX IEEE 802.ab 1000BaseT
IEEE 802.3z 1000BaseSX/LX
IEEE 802.3x Full-duplex and Flow Control
IEEE 802.at PoE+
IEEE 802.3ad Link Aggregation
IEEE 802.1d Spanning tree protocol
IEEE 802.1w Rapid Spanning tree protocol
IEEE 802.1Q VLAN
IEEE 802.1p Class of Service
Number of Ports
8-port 10/100BaseTX with PoE+ (Full power)
+2 Combo Gigabit RJ45/SFP Open Slots (SFP Slots can not be equipped with 100Mbps SFP Modules)

User’s Manual: SW-10200
6
Mechanical
LED Indicator
Per Port: Link/ Act PoE
Port: Act/Status Per Unit: Power
Power Consumption
260 Watts (Max)
Power Input
100~240V/AC, 50~60Hz
Power Output
48V/DC per Port Output –30W Max per Port
Product Dimensions/ Weight
266 × 260 × 44 mm (L × W ×H) / 2.5kg
Performance
MAC Address
4K
Buffer Memory
2.75Mb
Transmission Method
Store and Forward

User’s Manual: SW-10200
7
2. INSTALLATION
2.1. Hardware Installation
2.1.1. Package Contents
Prior to installing this switch, verify that your package that contains the following items:
One PoE Switch
One Power Cord
One User Manual CD
One Rack-mount kit + 8 Screws
If any of these are missing or damaged, please contact your dealer immediately, if possible, retain the carton
including the original packing material, and use them again to repack the product in case there is a need to return it
for repair.
Figure 1 - SW-10200 switch
2.2. Hardware Description
This section describes the hardware features and installation of the 8 PoE port + 2-port Gigabit Ethernet
Combo Web Managed Switch. For easier management and control, familiarize yourself with its display indicators
and ports. Read this chapter completely before connecting any network device to it.
Physical Dimensions/ Weight
266 × 260 × 44 mm (L × W ×H) / 2.5kg
Front Panel
The front Panel of the Web Managed Switch consists of 8 10/100Base-TX RJ-45 ports (Auto MDI/MDIX) ＋
2 gigabit RJ45/SFP open slot. The LED indicators are also located on the front panel.
Figure 2 - Front panel overview

User’s Manual: SW-10200
8
LED Indicators
The LED Indicators present real-time information of systematic operation status. The following table provides
description of LED status and their meaning.
LED
Status
Description
Power
On
Power switch is on
Off
Power is off
Port
On
Link transmission at 10/100 Mbps
Blinking
Networking is active
Off
No device attached
PoE
On
Port is linked to powered device
Off
No Powered device connected
Table 1 - LED status descriptions
Rear Panel
The 3-pronged power plug is placed at the rear panel of the switch right side as shown below.
Figure 3 - Rear panel overview
Hardware Installation
Set the switch on a large flat space with a power socket close by. The flat space should be clean, smooth,
level and sturdy. Make sure there is enough clearance around the switch to allow attachment of cables, power cord
and allow air circulation. Use twisted pair cable to connect this switch to your PC.

User’s Manual: SW-10200
9
3. SOFTWARE CONFIGURATION
This section describes the software configuration of the SW-10200 switch using the Web Interface.
3.1. Logging In
Open a web browser, and enter the address 192.168.0.10 (for switches with the F/W version V141015 or newer) or
192.0.0.20 (for switches with the F/W version V110613 or older). A login screen will appear.
On authentication, “Password successfully entered” will appear and you will be taken to the main page, as shown
below.
Figure 5 –Web interface main page
If not, this message will appear.
Figure 6 - Login error
The factory default password and login for switches with the F/W
version v141015 or newer: Username: i3admin; Password: i3admin
The factory default password and login for switches with the F/W
version V110613 or older: Username: admin; Password: admin
Figure 4 - Login screen

User’s Manual: SW-10200
10
3.2. Administration
3.2.1. Authentication Configuration
Clicking on Administrator in the navigation pane will bring up administrative options on the main pane. If this
is your first login, change the username and password in the Authentication Configuration section.
Figure 7 - Set the username and password
3.2.2. System IP Configuration
This page sets information on the system configuration including the current IP address, subnet mask and
gateway.
Figure 8 - Configure the switch IP
Parameters are as follows:
IP address: Manually assign the IP address of the switch. The default IP Address is: 192.168.0.10 (for
switches with the F/W version V141015 or newer) or 192.0.0.20 (for switches with the F/W version V110613
or older).
Subnet Mask: Assign the subnet mask to the IP address.
Gateway: Assign the network gateway. Default gateway is: 192.168.0.254 (for switches with the F/W version
V141015 or newer) or 192.0.0.254 (for switches with the F/W version V110613 or older).
IP Configure: Choose between Static or DHCP network IP assignment.
Click Update to save your changes. Note: Changing the IP address will require a reboot.

User’s Manual: SW-10200
11
3.2.3. System Status
This page displays basic information about the switch.
Figure 9 - An overview of the switch
MAC Address: Displays the unique hardware address assigned by manufacturer (default).
Number of Ports: Displays number of ports in the switch.
Comment: This field may be used for notes. A maximum of fifteen characters is allowed.
System Version: Displays the switch’s firmware version.
Idle Time Security: When the web interface has been idle for an amount of time, the software will auto logout
or back to the last display. Set an Idle Time in the corresponding field. Click Auto Logout (Default) to shut
down the switch when the interface has been idle for the duration specified. Click Back to the last display
to revert the web interface back to the last screen when the interface has been idle for the duration specified.
Click Update to save your changes
3.3. Factory Settings
3.3.1. Software Reset
Clicking the Load button will revert the switch to its original factory configurations with the exception of the
user name, password and IP configuration.
Figure 10 - Click to reset factory defaults
If a factory reset of the user name, password and IP configuration settings is desired, press
the hard (physical) reset button on the switch.
3.3.2. Hardware Reset
Press the physical reset button on the switch to revert to its original factory configurations including settings

User’s Manual: SW-10200
12
which are not covered by the software reset.
(1) To activate, press the factory reset button for 5 seconds until the LED begins to blink.
(2) The blinking LED signals that the CPU is executing the reset procedure. Release the button.
After completing this procedure, all the factory settings will be restored including the IP address, the user
name, the password as well as all other switch configurations.
3.4. Firmware Update
Before updating the switch firmware, it is recommended that flash memory on the switch be erased. The Boot
Loader will be kept intact by a self-protection mechanism which ensures correct functioning even in the event of
power loss or network failure during the update.
Figure 11 - Confirm the firmware update
Enter your password and confirm it in the appropriate fields. Click Update. This screen will appear.
Figure 12 - Select an update file
Click Browse... to select the new firmware image and Click Update to save your changes.
3.5. Logging out
At any time, click the Logout link on the navigation pane to log out of the web interface.

User’s Manual: SW-10200
13
4. PORT MANAGEMENT
Port Management includes Port Configuration, Port Mirroring, Bandwidth Control, Broadcast Storm Control
and PoE
4.1. Port Configuration
To access port configuration options, click on the link Port Configuration in the navigation pane of the web
interface.
4.1.1 Auto-negotiation
Auto-negotiation automatically sets the best possible bandwidth when a connection is established with another
network device (usually at Power On or Reset). This is done by detecting the modes and speeds both connected
devices are capable of. Both 10Base-T and 100Base-TX devices can connect with the port in either Half- or Full-
Duplex mode.
If attached device is:
100Base-TX port will set to:
10Mbps, no auto-negotiation
10Mbps.
10Mbps, with auto-negotiation
10/20Mbps (10Base-T/Full-Duplex)
100Mbps, no auto-negotiation
100Mbps
100Mbps, with auto-negotiation
100/200Mbps (100Base-TX/Full-Duplex)
Table 2 - Auto-negotiation summary
Figure 13 - Configure auto-negotiation settings
In Port Configuration, you can set and view the operation mode for each port. Check the checkbox next to the
port number to view or change its current configuration.
Select Port No.: Check the check boxes beside the port numbers being set.
Configure the ports using the drop-down lists at the top. The parameters are:
TX/RX Capability: When Auto-Negotiation is disabled, users must manually Enable or Disable TX/RX.
Auto-Negotiation: Select Enable or Disable. If enabled the Speed, Duplex mode, Pause, Backpressure, TX
Capability and Address Learning are negotiated automatically. If disabled, these parameters must be
assigned manually.
Speed: When Auto-Negotiation is disabled, the speed must be manually specified.
Duplex: When Auto-Negotiation is disabled, the connection mode, either Half or Full must be specified.
Pause: Flow Control for the connection at a speed of 10/100Mbps in Full-duplex mode.
Backpressure: Flow Control for the connection at a speed of 10/100Mbps in Half-duplex mode.
Addr. Learning: When Auto-Negotiation is disabled, users must manually Enable or Disable Address

User’s Manual: SW-10200
14
Learning.
Click Update to save your changes. A table at the bottom of the main pane displays a summary of each port’s
configuration. The display shows the following information:
Current Status: Displays current port status.
Setting Status: Displays current status.
4.2. Port Mirroring
Configure port Mirroring on this page. This function monitors network traffic that forwards a copy of each
incoming or outgoing packet from one port of a network switch to another port where the packet can be studied. It
enables the manager to keep close track of switch performance and alter it if necessary.
Figure 14 - Configure port mirroring
The parameters for this setting are:
Destination (mirroring) port: For monitoring RX only, TX only or both RX and TX traffic from the source port.
Mirroring ports can be connected to LAN analyzer or Netxray.
Monitored Packets: Expand the drop-down menu to select between RX, TX or both RX and TX.
Source Port: Select ports to monitor. All monitored port traffic will be copied to the mirroring (destination)
port. Select multiple source ports by ticking the check boxes beneath the port number label to be monitored.
Click Update to save your changes
4.3. Bandwidth Control
Configure the allowed bandwidth on this page. The TX rate and Rx rate is given in a number ranging from 1to
255. This number should be multiplied by the selected bandwidth resolution to get the actual bandwidth.
Figure 15 - Set allowed bandwidth
A bandwidth usage summary is seen below.

User’s Manual: SW-10200
15
Figure 16 - Bandwidth summary
4.3.1. Broadcast Storm Control
The switch implements a broadcast storm control mechanism. Check the ports next to Enable Port to select
ports that will drop incoming broadcast packets if the number of received broadcast packets reaches the threshold
defined. Each port’s broadcast storm protection function can be enabled individually.
Figure 17 - Configure broadcast storm control
Broadcast packets are only checked at selected ports. Timing is set to 500 us for 10Mbps speed and 5ms for
100Mbps. Excess broadcast packets will be discarded. Packets for un-selected ports are treated as normal traffic.
Threshold: Type in a threshold between 1and 63 to limit the maximum byte counts which a port can send or
receive during a period of time.
Enable Port: Checked ports will stop transmitting or receiving data when their thresholds given in Threshold
are reached. Unchecked ports will function normally.
Click Update to save your changes.
4.4. PoE Settings
Various PoE settings can be set here. For more information about PoE, read the Appendix section “PoE
Provisioning Process.”
4.4.1. PoE Introduction
Based on the global standard IEEE 802.3af, PoE is a technology for wired Ethernet. PoE allows the electrical
power necessary for the operation of each end-device (IP Cameras, VoIP phones, etc) to be carried by data cables
rather than by separate power cords. Such a network configuration helps enterprises improve productivity by
minimizing the number of wires that must be used to install the network, thus incurring lower cost, and less power
failures. In the case of surveillance technology, IP cameras and access systems may be installed throughout a
facility without incurring costs associated with hiring an electrician.
Providing up to 24 PoE, in-line power interface, the switch can easily build a power central-controlled IP phone
system, IP Camera system or AP group for the enterprise. For instance, 24 camera / AP can be easily installed
around the corner in the company for surveillance demands or build a wireless roaming environment in the office.
Without the power-socket limitation, the PoE Switch makes the installation of cameras or WLAN AP easy and
efficient.
This page displays PoE information about a port’s PSE, Minimum Output and PoE Class. Check Enable to
use the port for PoE.

User’s Manual: SW-10200
16
Figure 18 - Configure PoE

User’s Manual: SW-10200
17
5. VLAN SETTING
5.1. Introduction to VLAN
AVirtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather
than the physical location. VLAN can be used to combine any collection of LAN segments into an autonomous user
group that appears as a single LAN. VLAN also logically segment the network into different broadcast domains so
that packets are forwarded only between ports within the VLAN. Typically, a VLAN corresponds to a particular
subnet, although not necessarily.
VLAN can enhance performance by conserving bandwidth, and improve security by limiting traffic to specific
domains.
End nodes that frequently communicate with each other are assigned to the same VLAN, regardless of where
they are physically on the network. Logically, a VLAN can be equated to a broadcast domain, because broadcast
packets are forwarded to only members of the VLAN on which the broadcast was initiated.
No matter what basis is used to uniquely identify end nodes and assign these nodes VLAN
membership, packets cannot cross VLAN without a network device performing a routing function
between the VLAN.
5.1.1. IEEE 802.1Q Standard
IEEE 802.1Q (tagged) VLAN is implemented on the Switch. 802.1Q VLAN require tagging, which enables
them to span the entire network (assuming all switches on the network are IEEE 802.1Q-compliant).
VLANs allow a network to be segmented in order to reduce the size of broadcast domains. All packets
entering a VLAN will only be forwarded to IEEE 802.1Q enabled switches that are members of that VLAN, including
broadcast, multicast and unicast packets from unknown sources.
VLAN can also provide a level of security to your network. IEEE 802.1Q VLAN will only deliver packets
between stations that are members of the VLAN. Any port can be configured as either tagging or untagging.
The untagging feature of IEEE 802.1Q VLAN allows a VLAN to work with legacy switches not recognizing
VLAN tags in packet headers.
The tagging feature allows VLAN to span multiple 802.1Q-compliant switches through a single physical
connection and allows Spanning Tree to be enabled and working normally on all ports.
Some relevant terms:
Tagging: The act of putting 802.1Q VLAN information into the packet header.
Untagging: The act of stripping 802.1Q VLAN information out of the packet header.
802.1Q VLAN Tags
The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC
address. Their presence is indicated by a value of 0x8100 in the Ether Type field. When a packet's Ether Type field
is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag. The tag is contained in the following two octets
and consists of 3 bits of user priority, 1 bit of Canonical Format Identifier (CFI - used for encapsulating Token Ring
packets so they can be carried across Ethernet backbones), and 12 bits of VLAN ID (VID). The 3 bits of user priority
are used by 802.1p. The VID is the VLAN identifier and is used by the 802.1Q standard. Because the VID is 12 bits
long, 4094 unique VLAN can be identified.
The tag is inserted into the packet header making the entire packet longer by 4 octets. All of the information
originally contained in the packet is retained.
The Ether Type and VLAN ID are inserted after the MAC source address, but before the original Ether
Type/Length or Logical Link Control. Because the packet is now a bit longer than it was originally, the Cyclic
Redundancy Check (CRC) must be recalculated.
Port VLAN ID
Tagged packets (carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network

User’s Manual: SW-10200
18
device to another with VLAN information intact. This allows 802.1Q VLANs to span network devices or even the
entire network provided that all network devices are 802.1Q compliant.
All physical ports on a switch have a PVID. 802.1Q ports are also assigned a PVID for use within the switch. If
no VLANs are defined on the switch, all ports are then assigned to a default VLAN with a PVID equal to 1. Any
untagged packet is assigned the PVID of the port on which they were received. Forwarding decisions are based
upon this PVID in so far as VLAN are concerned. Tagged packets are forwarded according to the VID contained
within the tag. Tagged packets are also assigned a PVID, but the VID is used to make packet forwarding decisions,
rather than the PVID.
Tag-aware switches must keep a table to relate PVID within the switch to a network VID. The switch will
compare the VID of a packet to be transmitted to the VID of the port that is to transmit the packet. If the two VIDs
are different the switch, the packet is dropped. Because of the existence of the PVID for untagged packets and the
VID for tagged packets, tag-aware and tag-unaware network devices are allowed to coexist on the same network.
A switch port can have only one PVID, but can have as many VIDs as the switch has memory in its VLAN
table to store them.
Because some devices on a network may be tag-unaware, a decision must be made at each port on a tag-
aware device before packets are transmitted. If the transmitting port is connected to a tag-unaware device, the
packet should be untagged. If the transmitting port is connected to a tag-aware device, the packet should be
tagged.
Untagged VLANs
Untagged (or static) VLANs are typically used to reduce broadcast traffic and to increase security. A group of
network users assigned to a VLAN form a broadcast domain that is separate from other VLANs configured on the
switch. Packets are forwarded only between ports that are designated for the same VLAN. Untagged VLANs can be
used to manually isolate user groups or subnets.
5.2. VLAN Configuration
To access VLAN options, click on the link VLAN Configuration in the navigation pane of the web interface.
5.2.1. VLAN Mode
You may select the VLAN Mode of the switch. Port-based VLAN groups traffic onto a single switch. There is
no handover of network traffic within VLAN groups to other switches. For the handover to other switches use Tag
Based VLAN. In VLAN Mode you can switch from Tag to Port Based VLAN. Port Based VLAN is the default mode.
Click Change VLAN mode to change the VLAN mode to Tag Based VLAN. This message may appear.
Figure 19 - Changing VLAN modes causes default VLAN settings to be loaded
Click Continue to confirm and to edit settings. The next screen will appear.

User’s Manual: SW-10200
19
Figure 20 - Select options for VLAN
On this screen you can now define and configure your Up- and Downlink ports. These are important since
here the handover between the switches of your network takes place.
VLAN Mode: Displays VLAN mode: port based/Tag based VLAN. Here you can also switch back to Port
Based VLAN Mode
Add tag means the outgoing packet of the selected port will be inserted a 802.1Q tag. Use this setting
for your Up- and Downlink Ports in your VLAN Tagged Network.
Don’t care means the outgoing packet of the selected port keep the original packet received at the
source port. This is the default setting when starting VLAN configuration. It is recommended that the
option be changed to Addor Remove Tag.
Remove tag means the 802.1Q tag of the outgoing packet of the selected port will not be sent. Use
this setting for your Network Connections to PCs. Only packets of the VLAN Group the Port is member
of will be sent.
5.2.2. VLAN Member
The ports need to be made member of your VLAN groups. This is for Tag Based and Port Based VLAN Mode.
The options available on this screen will depend on whether VLAN is running in Tag Based or Port Based Mode.
VLAN Member in Port Based Mode
In Port Based Mode you see a matrix of your 8+2 ports. Simply select the port on top screen you want to
configure, click on Read, and then select or deselect the ports that are on the same VLAN group. In this
configuration mode you do not need to worry about defining VLAN groups and VLAN IDs.
Figure 21 –Group ports for port-based VLAN mode
VLAN Member in Tag Based Mode
In Tag Based Mode you need to define and configure your VLAN groups. To ensure smooth handover, the
VLAN IDs (Numbers) need to be like on the rest of your network.

User’s Manual: SW-10200
20
Add VLAN Groups (identified throughout your network by unique and constant numbers). Start with IDs from
100 and up. Keep in mind that some switches use “1” as the default, while others use “4095” or “4096” as default.
Starting with 100 gives you enough free room and less compatibility issues.
Figure 22 –Group ports for Tag Based VLAN mode
Enter 100 in the field right of VID Setting, then select or deselect which ports are member of that group. Bear
in mind that the up- and downlink ports need to contain members of every existing group. When the ports are
assigned, click Add. The new group with its setting will be displayed at the bottom of the screen.
With the PVID Setting, define to which VLAN group incoming traffic belongs. For example, port 1 is a member
of group 100 and 101. A simple PC is connected to Port 1. If that PC is now sending out data, with PVID you define
if that data is for group 100 or 101.
A summary of VLANs and their members is given in the VLAN Member table.
5.3. Multi to 1 Setting
Multi to 1 VLAN is used in the CPE side of Ethernet-to-the-Home. When VLAN member Settings is updated,
multi to 1 setting will be negated. Disabling the port excludes it from this action. All ports excluded in this setting are
treated as the same VLAN group. In a normal Tag Based VLAN network this configuration option is not necessary.
Figure 23 - Set multi-to-1 in Port-Based VLAN to forward traffic to a port