Dahua Technology DH-PFS4210-8GT-150 User manual

8-Port Gigabit + 2-Port Gigabit SFP
L2 Managed PoE Switch
User’s Manual
V1.0.1
ZHEJIANG DAHUA VISION TECHNOLOGY CO., LTD.

Foreword I
Foreword
General
This user’s manual introduces the functions and operations of 8-Port Gigabit + 2-Port Gigabit
SFP L2 Managed PoE Switch devices.
Models
DH-PFS4210-8GT-150
Safety Instructions
The following categorized signal words with defined meaning might appear in the Manual.
Signal Words
Meaning
Indicates a high potential hazard which, if not avoided, will result
in death or serious injury.
Indicates a medium or low potential hazard which, if not avoided,
could result in slight or moderate injury.
Indicates a potential risk which, if not avoided, could result in
property damage, data loss, lower performance, or unpredictable
result.
Provides methods to help you solve a problem or save you time.
Provides additional information as the emphasis and supplement
to the text.
Revision History
Version
Revision Content
Release Time
V1.0.1
Modify chapter number and improve
format.
April 2019
V1.0.0
First Release.
June 2018
Privacy Protection Notice
As the device user or data controller, you might collect personal data of others, such as face,
fingerprints, car plate number, Email address, phone number, GPS and so on. You need to be
in compliance with the local privacy protection laws and regulations to protect the legitimate
rights and interests of other people by implementing measures, including but not limited to:

Foreword II
providing clear and visible identification to inform data subject the existence of surveillance
area and providing related contact.
About the Manual
The Manual is for reference only. If there is inconsistency between the Manual and the
actual product, the actual product shall govern.
We are not liable for any loss caused by the operations that do not comply with the Manual.
The Manual would be updated according to the latest laws and regulations of related
regions. For detailed information, see the paper User's Manual, CD-ROM, QR code or our
official website. If there is inconsistency between paper User's Manual and the electronic
version, the electronic version shall prevail.
All the designs and software are subject to change without prior written notice. The product
updates might cause some differences between the actual product and the Manual. Please
contact the customer service for the latest program and supplementary documentation.
There still might be deviation in technical data, functions and operations description, or
errors in print. If there is any doubt or dispute, please refer to our final explanation.
Upgrade the reader software or try other mainstream reader software if the Guide (in PDF
format) cannot be opened.
All trademarks, registered trademarks and the company names in the Manual are the
properties of their respective owners.
Please visit our website, contact the supplier or customer service if there is any problem
occurred when using the device.
If there is any uncertainty or controversy, please refer to our final explanation

Important Safeguards and Warnings III
Important Safeguards and Warnings
Electrical safety
All installation and operation here should conform to your local electrical safety codes.
The product must be grounded to reduce the risk of electric shock.
We assume no liability or responsibility for all the fires or electrical shock caused by
improper handling or installation.
Transportation security
Heavy stress, violent vibration or water splash are not allowed during transportation, storage
and installation.
Installation
Keep upwards. Handle with care.
Do not apply power to the Device before completing installation.
Do not place objects on the Device.
Qualified engineers needed
All the examination and repair work should be done by the qualified service engineers. We are
not liable for any problems caused by unauthorized modifications or attempted repair.
Environment
The Device should be installed in a cool, dry place away from conditions such as direct sunlight,
inflammable substances, and explosive substances.
Accessories
Be sure to use all the accessories recommended by manufacturer.
Before installation, please open the package and check all the components are included.
Contact your local retailerASAP if something is broken in your package.
Battery
Improper battery use might result in fire, explosion, or personal injury.
When replacing the battery, please make sure you are using the same type. Risk of
explosion if battery is replaced by an incorrect type.
Dispose of used batteries according to the instructions.
Make sure to use the same battery model if possible.
We recommend replace battery regularly (such as one-year) to guarantee system time
accuracy. Before replacement, please save the system setup, otherwise, you may lose the
data completely.

Table of Contents IV
Table of Contents
Foreword.................................................................................................................................................... I
Important Safeguards and Warnings.................................................................................................... III
Table of Contents ....................................................................................................................................IV
1 Introduction............................................................................................................................................ 1
1.1 Overview....................................................................................................................................... 1
1.2 Features........................................................................................................................................ 1
1.3 External Component Description.................................................................................................. 2
1.3.1 Front Panel ......................................................................................................................... 2
1.3.2 Rear Panel.......................................................................................................................... 3
1.4 Packing List................................................................................................................................... 4
2 Installation and Connection................................................................................................................. 5
2.1 Installation..................................................................................................................................... 5
2.1.1 Desktop Installation............................................................................................................ 5
2.1.2 Rack-mountable Installation in 19-inch Cabinet................................................................. 5
2.1.3 Power on the Switch........................................................................................................... 6
2.2 Connect Computer (NIC) to the Switch........................................................................................ 6
2.3 Connect Switch to the PD............................................................................................................. 7
3 Log in the Switch................................................................................................................................... 8
3.1 Switch to End Node ...................................................................................................................... 8
3.2 Log in the Switch........................................................................................................................... 8
4 Switch Configuration.......................................................................................................................... 10
4.1 Quickly Setting............................................................................................................................ 10
4.2 Port.............................................................................................................................................. 13
4.2.1 Basic Config...................................................................................................................... 13
4.2.2 Port Aggregation............................................................................................................... 15
4.2.3 Port Mirroring.................................................................................................................... 16
4.2.4 Port Rate-limit................................................................................................................... 17
4.2.5 Storm Control.................................................................................................................... 18
4.2.6 Port Isolation..................................................................................................................... 19
4.2.7 Port Information................................................................................................................ 20
4.3 VLAN........................................................................................................................................... 21
4.3.1 VLAN Settings .................................................................................................................. 21
4.3.2 Access Port Settings ........................................................................................................ 22
4.3.3 Trunk-port Setting............................................................................................................. 23
4.3.4 Hybrid-port Setting............................................................................................................ 24
4.4 Fault/Safety................................................................................................................................. 26
4.4.1 Anti-attack......................................................................................................................... 26
4.4.2 Channel Detection............................................................................................................ 32
4.4.3 ACL................................................................................................................................... 35
4.5 PoE.............................................................................................................................................. 37
4.5.1 PoE Port Config................................................................................................................ 37

Table of Contents V
4.6 STP ............................................................................................................................................. 38
4.6.1 MSTP Region ................................................................................................................... 39
4.6.2 STP Bridge........................................................................................................................ 40
4.7 DHCP Relay................................................................................................................................ 42
4.7.1 DHCP Relay ..................................................................................................................... 43
4.7.2 Option82 ........................................................................................................................... 43
4.8 QoS............................................................................................................................................. 45
4.8.1 Queue Config.................................................................................................................... 45
4.8.2 Mapping the Queue.......................................................................................................... 46
4.9 Address Table.............................................................................................................................. 49
4.9.1 MAC Management............................................................................................................ 50
4.9.2 MAC Learning and Aging ................................................................................................. 51
4.9.3 MAC Filter......................................................................................................................... 52
4.10 SNMP........................................................................................................................................ 53
4.10.1 SNMP Config.................................................................................................................. 53
4.10.2 RMON Config ................................................................................................................. 59
4.11 LACP......................................................................................................................................... 64
4.11.1 LACP Config................................................................................................................... 65
4.12 SYSTEM ................................................................................................................................... 67
4.12.1 System Config ................................................................................................................ 68
4.12.2 System Upgrade............................................................................................................. 74
4.12.3 Config Management....................................................................................................... 75
4.12.4 Config Save.................................................................................................................... 78
4.12.5 Administrator Privileges.................................................................................................. 78
4.12.6 Info Collect...................................................................................................................... 79
Cybersecurity Recommendations................................................................................... 80Appendix 1

Introduction 1
1 Introduction
Overview1.1
The Switch is a new generation designed for high security and high performance network the
second layer switch. With eight 10/100/1000Mbps self-adaption RJ45 port, and two
100/1000Mbps SFP ports, all ports support wire-speed forwarding, and provide you with larger
network flexibility. All ports support Auto MDI/MDIX function. The Switch with a low-cost,
easy-to-use, and high performance upgrades your old network to a 1000Mbps Gigabit network.
The Switch supports VLAN ACL based on port, easily implements network monitoring, traffic
regulation, priority tag and traffic control. Support traditional STP/RSTP/MSTP 2 link protection
technology. Greatly improve the ability of fault tolerance, redundancy backup to ensure the
stable operation of the network. Support ACL control based on the time, easy control the
access time accurately. Support 802.1x authentication based on the port and MAC, easily set
user access. Perfect QOS strategy and plenty of VLAN function, easy to maintenance and
management, meet the networking and access requirements of small and medium-sized
enterprises, intelligent village, hotel, office network and campus network.
All UTP ports support PoE power supply function, IEEE802.3at standard, 802.3af downward
compatibility, power supply equipment for Ethernet, so it can automatically detect identification
standard of electrical equipment, and supply power through the cable.
Features1.2
Comply with 802.3i, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3x, IEEE 802.3z, IEEE802.1Q ,
IEEE802.1p, IEEE802.3af, IEEE802.3at
Support PoE power up to 30W for each PoE port, total power up to 140W for all PoE ports
8 x 10/100/1000Mbps Auto MDI/MDI-X Ethernet port
2 x 100/1000Mbps SFP port
8K entry MAC address table of the switch with auto-learning and auto-aging
Support IEEE802.3x flow control for Full-duplex Mode and backpressure for Half-duplex
Mode
Support Web interface management
Support QoS (quality of service), port mirror, Link aggregation protocol
LED indicators for monitoring power, system, link/activity/Speed, PoE

Introduction 2
External Component Description1.3
1.3.1 Front Panel
The front panel of the Switch consists ofAC power connector, one marker, 1 x Reset button, a
series of LED indicators, 8 x 10/100/1000Mbps RJ-45 ports, 2 x SFP ports and 1x Console port
as shown as below. Front panelFigure 1-1
AC Power Connector
:
Power is supplied through an externalAC power adapter. It supportsAC 100–240V, 50/60Hz.
Grounding Terminal:
Located on the right side of the power supply connector, use wire grounding to lightning
protection.
Reset button (Reset):
Keep the device powered on and push a paper clip into the hole. Press down the button for 5
seconds to restore the Switch to its original factory default settings.
10/100/1000Mbps RJ-45 ports (1–8):
Designed to connect to the device with a bandwidth of 10Mbps, 100Mbps or 1000Mbps. Each
has a corresponding Link/Act/Speed and PoE indicator.
SFP ports (9, 10):
Designed to install the SFP module and connect to the device with a bandwidth of 100Mbps or
1000Mbps. Each has a corresponding Link/Act/Speed LED.
Console port (Console):
Designed to connect with the serial port of a computer or terminal for monitoring and
configuring the Switch.
LED indicators:
The LED Indicators will allow you to monitor, diagnose and troubleshoot any potential problem
with the Switch, connection or attached devices.
The following chart shows the LED indicators of the Switch along with explanation of each
indicator. Table 1-1 Front panel
LED
Indicator
Faceplate
Marker
Status
Indication
Power
Indicator
PWR
Off
Power Off
Solid green
Power On

Introduction 3
LED
Indicator
Faceplate
Marker
Status
Indication
System
indicator
SYS
Off
System not started
Blinking green
System is starting or the system
starts successfully
10/100/10
00
BASE-T
adaptive
Ethernet
port
indicators
(1-8)
Link/Act
/Speed
Off
The port is NOT connected.
Solid green
The port is connected at 1000Mbps.
Solid orange
The port is connected at 100/10Mbps
Blinking
The port is transmitting or receiving
data.
SFP port
indicators
(9-10)
Link/Act
/Speed
Off
The port is NOT connected.
Solid green
The port is connected at 1000Mbps.
Solid orange
The port is connected at 100Mbps
Blinking
The port is transmitting or receiving
data.
PoE
status
indicators
(1-8)
PoE
Off
No PD is connected to the
corresponding port, or no power is
supplied according to the power
limits of the port
Solid orange
A Powered Device is connected to
the port, which supply power
successfully.
Blinking
The PoE power circuit may be in
short or the power current may be
overloaded
1.3.2 Rear Panel
The rear panel of the Switch contains Heat vent shown as below.
Real panel
Figure 1-2
Heat vent:
The Heat vent is located in the middle position of the rear panel of the switch. It is used for heat
dissipation and ventilation. Do not cover it.

Introduction 4
Packing List1.4
Before installing the Switch, make sure that the following the packing list is OK. If any part is
lost and damaged, please contact your local agent immediately. In addition, make sure that you
have the tools to install switches and cables by your hands.
One PoE Web Smart Ethernet Switch
One Installation Component
One AC power cord
One User’s Manual

Installation and Connection 5
2 Installation and Connection
This part describes how to install your PoE Ethernet Switch and make connections to it. Please
read the following topics and perform the procedures in the order being presented.
Installation2.1
Please follow the following instructions to avoid incorrect installation causing device damage
and security threat.
Put the Switch on stable place or desktop in case of falling damage.
Make sure the Switch works in the properAC input range and matches the voltage labeled
on the Switch.
To keep the Switch free from lightning, do not open the Switch's shell even in power failure.
Make sure that there is proper heat dissipation from and adequate ventilation around the
Switch.
Make sure the cabinet to enough back up the weight of the Switch and its accessories.
2.1.1 Desktop Installation
Sometimes users are not equipped with the 19-inch standard cabinet. So when installing the
Switch on a desktop, please attach these cushioning rubber feet provided on the bottom at
each corner of the Switch in case of the external vibration.Allow adequate space for ventilation
between the device and the objects around it.
2.1.2 Rack-mountable Installation in 19-inch Cabinet
The Switch can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a
wiring closet with other equipment. To install the Switch, please follow these steps:
Attach the mounting brackets on the Switch's side panels (one on each side) andStep 1 secure them with the screws provided.

Installation and Connection 6
Bracket installationFigure 2-1
Use the screws provided with the equipment rack to mount the Switch on the rack andStep 2 tighten it. Rack installationFigure 2-2
2.1.3 Power on the Switch
The Switch is powered on by the AC 100-240V 50/60Hz internal high-performance power
supply. Please follow the next tips to connect:
AC Electrical Outlet:
It is recommended to use single-phase three-wire receptacle with neutral outlet or
multifunctional computer professional receptacle. Please make sure to connect the metal
ground connector to the grounding source on the outlet.
AC Power Cord Connection:
Connect theAC power connector in the back panel of the Switch to external receptacle with the
included power cord, and check the power indicator is ON or not. When it is ON, it indicates the
power connection is OK.
Connect Computer (NIC) to the Switch2.2
Please insert the NIC into the computer, after installing network card driver, please connect one
end of the twisted pair to RJ-45 jack of your computer, the other end will be connected to any
RJ-45 port of the Switch, the distance between Switch and computer is around 100 meters.
Once the connection is OK and the devices are power on normally, the LINK/ACT/Speed status
indicator lights corresponding ports of the Switch.

Installation and Connection 7
Connect Switch to the PD2.3
1-8 ports of the Switch have PoE power supply function, the maximum output power up to 30W
each port, it can make PD devices, such as internet phone, network camera, and wireless
access point work. You only need to connect the Switch PoE port directly connected to the PD
port by network cable.

Log in the Switch 8
3 Log in the Switch
Switch to End Node3.1
Use standard Cat.5/5e Ethernet cable (UTP/STP) to connect the Switch to end nodes as
described below. Switch ports will automatically adjust to the characteristics (MDI/MDI-X, speed,
duplex) of the device to which is connected.
Connect PC to switchFigure 3-1
Log in the Switch3.2
As the Switch provides Web-based management login, you can configure your computer’s IP
address manually to log on to the Switch. The default settings of the Switch are shown below.
Table 3-1 Default value
Parameter
Default Value
Default IP address
192.168.1.110
Default user name
admin
Default password
admin123
You can log in the configuration window of the Switch through following steps:
Connect the Switch with the computer NIC interface.Step 1 Power on the Switch.Step 2 Check whether the IP address of the computer is within this network segment:Step 3 192.168.1.xxx (xxx ranges 0–254, except 110), for example, 192.168.1.100.
Open the browser, and enter http://192.168.1.110 and then press Enter. The SwitchStep 4 login window appears, as shown below.

Log in the Switch 9
Login windowsFigure 3-2
Switching language to English. Enter the Username and Password (The factory defaultStep 5 Username is admin and Password is admin123), and then click LOGIN to log in the
Switch configuration window.
Switch configuration windowFigure 3-3

Switch Configuration 10
4 Switch Configuration
The Web Smart Ethernet Switch Managed switch software provides rich layer 2 functionality for
switches in your networks. This chapter describes how to use Web-based management
interface (Web UI) of this switch to configure managed switch software features.
In the Web UI, the left column shows the configuration menu. Above you can see the
information for switch system, such as memory, software version. The middle shows the
switch’s current link status. Green squares indicate the port link is up, while black squares
indicate the port link is down. Below the switch panel, you can find a common toolbar to provide
useful functions for users. The rest of the screen area displays the configuration settings.
Switch configuration window
Figure 4-1
Quickly Setting4.1
In the navigation bar, select Quickly Set to create a VLAN in this module, add the port in the
VLAN, set the basic information and modify the switch login password. The following picture:
Quickly settingFigure 4-2
[Parameter Description]

Switch Configuration 11
Parameter
Description
VLAN ID
VLAN number
VLAN Name
VLAN mark
VLAN IP
Manage the IP address of the
VLAN
Device Name
Switch name
Management VLAN
Switch’s management in use of
the VLAN
[Instructions]
Native VLAN: as a Trunk, the mouth will belong to a Native VLAN. The so-called Native VLAN
refers to UNTAG send or receive a message on the interface, and it is considered to belong to
the VLAN. Obviously, the interface of the default VLAN ID (PVID) in the IEEE 802.1 Q VLAN ID
is the Native VLAN. At the same time, send belong to Native VLAN frame on the Trunk, must
adopt UNTAG way.
Allowed VLAN list: a Trunk can transport the equipment support by default all the VLAN traffic
(1-4094). But, also can by setting the permission VLAN Trunk at the mouth of the list to limit the
flow of some VLAN can't through the Trunk.
[Configuration Example]
VLAN setting: such as create VLAN 2. Sets the port 8 to Trunk, Native VLAN 2.Step 1

Switch Configuration 12
VLAN setting IFigure 4-3
VLAN setting IIFigure 4-4
Click Next button, into other settings, such as: manage IP address set as 192.168.1.11,Step 2 device name set as switch-123, default gateway with the DNS server set as
172.16.1.241.

Switch Configuration 13
SaveFigure 4-5
Use 192.168.1.11 to log in, set a new password for admin1234.Step 3 FinishFigure 4-6
Port4.2
In the navigation bar, select PORT, you may conduct Basic config, Port aggregation, Port
mirroring, Port limit and port isolation. PortFigure 4-7
4.2.1 Basic Config
In the navigation bar, select PORT > Basic config. For panel port to port described, port speed,
port status, working mode, flow control, cross line order configuration, the following picture:

Switch Configuration 14
Basic settings IFigure 4-8
[Parameter Description]
Parameter
Description
Port
Select the current configuration
port number
Status
Choose whether to close link port
Flow Control
Whether open flow control
Port Speed
Can choose the following kinds:
Auto
10 M
100 M
1000 M
Duplex Mode
Can choose the following kinds:
Auto
Duplex
Half duplex
Port Description
The port is described
Cable Type Detection
Can choose the following kinds:
Auto
MDI
MDIX
[Instructions]
Open flow control should be negotiated will close, negotiated close is to set port speed rate and
working mode. Set the port rate more than actual rate of port, the port will be up.