Dahua DH-PFS4212-8GT-96 User manual

Ethernet Switch
Web Operation Manual
V1.0.0

I
Foreword
General
This manual introduces operations on web interface of the Ethernet Switch (hereinafter referred to
as "the Switch"). You can visit the switch on web browser, configure and manage the switch.
Safety Instructions
The following categorized signal words with defined meaning might appear in the manual.
Signal Words Meaning
Indicates a high potential hazard which, if not avoided, will result in
death or serious injury.
Indicates a medium or low potential hazard which, if not avoided,
could result in slight or moderate injury.
Indicates a potential risk which, if not avoided, could result in
property damage, data loss, lower performance, or unpredictable
result.
Provides methods to help you solve a problem or save you time.
Provides additional information as the emphasis and supplement to
the text.
Revision History
Version Revision Content Release Time
V1.0.0 First release. April 2021
About the Manual
The manual is for reference only. If there is inconsistency between the manual and the actual
product, the actual product shall prevail.
We are not liable for any loss caused by the operations that do not comply with the manual.
The manual would be updated according to the latest laws and regulations of related regions.
For detailed information, see the paper manual, CD-ROM, QR code or our official website. If
there is inconsistency between paper manual and the electronic version, the electronic
version shall prevail.
All the designs and software are subject to change without prior written notice. The product
updates might cause some differences between the actual product and the manual. Please
contact the customer service for the latest program and supplementary documentation.
There still might be deviation in technical data, functions and operations description, or errors
in print. If there is any doubt or dispute, please refer to our final explanation.

II
Upgrade the reader software or try other mainstream reader software if the manual (in PDF
format) cannot be opened.
All trademarks, registered trademarks and the company names in the manual are the
properties of their respective owners.
Please visit our website, contact the supplier or customer service if there is any problem
occurred when using the device.
If there is any uncertainty or controversy, please refer to our final explanation.

III
Important Safeguards and Warnings
The manual helps you to use our product properly. To avoid danger and property damage, read
the manual carefully before using the product, and we highly recommend you to keep it well for
future reference.
Operating Requirements
Do not expose the device directly to the sunlight, and keep it away from heat source.
Do not install the device in the damp environment, and avoid dust and soot.
Make sure the device is in horizontal installation, and install the device on solid and flat
surface to avoid falling down.
Avoid liquid spattering on the device. Do not place object full of liquid on the device to avoid
liquid flowing into the device.
Install the device in the well-ventilated environment. Do not block the air vent of the device.
Use the device at rated input and output voltage.
Do not disassemble the device without professional instruction.
Transport, use, and store the device in allowed ranges of humidity and temperature.
When removing the cable, power off the device first to avoid personal injury.
Voltage stabilizer and lightning protection device are optional according to power supply and
surrounding environment.
Power Supply Requirements
Use the battery properly to avoid fire, explosion, and other dangers.
Replace the battery with battery of the same type.
Use locally recommended power cord in the limit of rated specifications.
Use the standard power adapter. We will assume no responsibility for any problems caused by
nonstandard power adapter.
The power supply shall meet the SELV requirement. Use the power supply that conforms to
Limited Power Source, according to IEC62368-1. Refer to the device label.
Be sure to ground the device (cross section of copper wire: > 2.5 mm²; resistance to ground: ≤
4 Ω).
The coupler is the disconnecting apparatus. Keep it at the angle for easy operation.

IV
Table of Contents
Foreword .....................................................................................................................................................I
Important Safeguards and Warnings ........................................................................................................III
1 Login........................................................................................................................................................1
2 Quick Settings..........................................................................................................................................2
System Information..........................................................................................................................22.1
Local ...............................................................................................................................................32.2
VLAN ...............................................................................................................................................42.3
Aggregation ....................................................................................................................................52.4
2.4.1 Static Aggregation Configuration ...........................................................................................5
2.4.2 Dynamic Aggregation Configuration ......................................................................................6
IP and Route ....................................................................................................................................62.5
3 Advanced Settings...................................................................................................................................9
Common Configuration ...................................................................................................................93.1
3.1.1 System Configuration.............................................................................................................9
3.1.2 Port Configuration ...............................................................................................................14
3.1.3 VLAN Configuration .............................................................................................................16
3.1.4 Aggregation ........................................................................................................................17
3.1.5 MAC Table ...........................................................................................................................19
3.1.6 Spanning Tree......................................................................................................................23
3.1.7 Long Distance PoE ...............................................................................................................26
Seldom-used Configurations..........................................................................................................263.2
3.2.1 ERPS....................................................................................................................................26
3.2.2 ACL .....................................................................................................................................33
3.2.3 Loop Protection ...................................................................................................................35
3.2.4 Security ...............................................................................................................................36
3.2.5 IGMP Snooping....................................................................................................................40
3.2.6 QoS .....................................................................................................................................41
3.2.7 SNMP ..................................................................................................................................51
3.2.8 DHCP Server ........................................................................................................................54
3.2.9 LLDP....................................................................................................................................56
3.2.10 485 Configuration ..............................................................................................................58
3.2.11 PoE....................................................................................................................................59
4 Maintenance ..........................................................................................................................................63
System Reboot ..............................................................................................................................634.1
Restoring Default Settings..............................................................................................................634.2
Managing Configuration ................................................................................................................634.3
4.3.1 Exporting Configuration File.................................................................................................63
4.3.2 Uploading Configuration File................................................................................................64
Software Update............................................................................................................................644.4
Mirroring.......................................................................................................................................654.5
Ping ..............................................................................................................................................664.6
Functions of Network Management System....................................................................................664.7
4.7.1 Enabling Function and Logging in to Platform ......................................................................66
4.7.2 Exporting Network Management Configuration File.............................................................. 67

V
4.7.3 Uploading Network Management Configuration File.............................................................67
Cybersecurity Recommendations ........................................................................................ 68Appendix 1

1
1Login
Before login, make sure:
You already configure the IP address of the switch. The IP address of VLAN 1 is 192.168.1.110 by
default.
The PC with web browser is connected to the network, and the PC can ping the switch
successfully.
Enter the IP address (192.168.1.110 by default) of the switch in the address bar of the webStep 1
browser, and then press Enter key.
Web loginFigure 1-1
Enter user name and password. The user name and the password are admin by default.Step 2
Click Login.Step 3
Change the password after first login. The password must consist of 8 to 32 non-blank
characters and contain at least two types of characters among upper case, lower case,
number, and special character (excluding ' " ; : &).

2
2Quick Settings
You can view the system information, and set the device parameters, VLAN, link aggregation, IP
address and route. Take 4-port PoE switch for example. The quick setting interface is different
depending on the models of switch. The actual interface shall prevail.
System Information2.1
You can view the name, type, serial number, software version, IP address, port status and port
information of the device.
After logging in the system, the Quick Setting interface is displayed. See Figure 2-1. On the switch, if
the port shows green, it means the port is connected successfully. And If the port shows gray, it
means the port is not connected or the connection fails.
System informationFigure 2-1
Table 2-1 Port information
Parameter Description
Port
Displays all ports of the switch.
The demonstrated
switch contains 7 ports. Port quantity might vary
depending on the model you purchased, and the actual product shall
prevail.
Port Type Three types: Access, Hybrid, and Trunk.

3
Parameter Description
Link
Two link states: Up and Down. Up
indicates the port is connected
successfully, and Down
indicates the port is not connected or the
connection fails.
Flow Control Displays the flow control state.
Speed/Duplex Online: It displays the port rate and the duplex mode.
Offline: It displays Down.
VLAN VLAN port. It is VLAN 1 by default.
PoE
Displays the power consumption of POE. Only 1–4 ports are PoE ports.
Non-PoE Ethernet switches do not support this function.
The number of PoE ports supported by different models is different.
Receive Usage The current receiving speed is divided by the average speed in a certain
period (5 minutes usually).
Send Usage The current sending speed is divided by the average speed in a certain
period (5 minutes usually).
Media Type Two media types: Copper and Fiber. Copper indicates RJ-45 port, and
Fiber indicates fiber port.
Local2.2
You can set the system name, IP address, and subnet mask.
Click Local on the right of Quick setting interface.Step 1
The Local interface is displayed.
LocalFigure 2-2
Enter the system name, IP address, and mask length.Step 2
Click OK.Step 3

4
VLAN2.3
Add the port to the VLAN, and configure the VLAN. By default, the port is VLAN1.
Click Vlan on the Quick Setting interface.Step 1
The Vlan interface is displayed.
VLANFigure 2-3
Configure the port VLAN parameters.Step 2
Table 2-2 Port VLAN configuration parameter
Parameter Description
Port Displays all ports of the switch.
Mode
Three modes: Access, Hybrid, and Trunk.
Access: When the port connects to terminal devices (such as PC and IPC),
select Access.
Trunk: When the port connects to switch, select Trunk.
Hybrid: Not often used.
Port VLAN Add the port to a VLAN. By default, the port belongs to VLAN1, and the range is
1–4094.
Allowed VLANs Set the allowed VLAN. When the mode is Trunk, you can set it.
Click OK.Step 3

5
Aggregation2.4
Add the port to the aggregation. For details, see "3.1.4 Aggregation."
Click Aggregation on Quick Setting interface, and the Aggregation interface is displayed.
AggregationFigure 2-4
2.4.1 Static Aggregation Configuration
Static aggregation is a method of combining or bundling of multiple switch ports or NICs to form a
single etherchannel. For example, add port 1 and port 2 to Static Group 1.
Select Model as Static in group 1, which indicates that the group is static aggregation.Step 1
Select port 1 and port 2 in group 1 to add the two ports to static aggregation.Step 2
For 4-port PoE switch, you can configure up to 3 groups of static aggregation. Static
aggregation is different depending on different models of PoE switch. The actual interface
shall prevail.
Static configurationFigure 2-5
Click OK.Step 3
The port 1 and port 2 form a logical port.

6
2.4.2 Dynamic Aggregation Configuration
Dynamic aggregation differs from static aggregation in that port quantity is fixed in static
aggregation, but quantity of actually aggregated port is adjusted dynamically according to flow rate
strategy.
Add the ports to the dynamic group.Step 1
1) Select LACP (Active)in the Mode area, and add the ports to the aggregation group.
For example, add port 3 and port 4 to aggregation group 2.
2) Select LACP (Passive) in the Mode area, and add the ports to the aggregation group.
For example, add port 5 and port 6 to aggregation group 3.
Dynamic configurationFigure 2-6
Click OK.Step 2
IP and Route2.5
You can add the IP address of VLAN virtual interface and IP route. For details, see "3.1.1.2 IP and
Route."
Click IP & Route on the Quick Setting interface.Step 1
The IP & Route interface is displayed.

7
IP and routeFigure 2-7
Add the VLAN interface.Step 2
1) Click Add in the IP Configarea.
VLAN interfaceFigure 2-8
2) Configure the parameters.
Table 2-3 VLAN interface
Parameter Description
VLAN Enter VLAN number.
IP address Set the IP address of the VLAN interface.
Mask Length Set the mask length of the VLAN interface.
Add the IP route.Step 3
1) Click Add in the Route Config area.

8
IP routeFigure 2-9
2) Configure the parameters.
Table 2-4 IP routes
Parameter Description
Network It is the destination of the IP packet.
Mask Length
Mask length, with the destination address, is to identify the IP address of
the destination host or the route. After Logical AND between destination
address and network mask, you can get the IP address of the destination
host or the route.
Next Hop The next hop IP of the route.
Click OK.Step 4

9
3Advanced Settings
You can configure system, port, VLAN, aggregation, MAC table and other parameters on the
advanced settings interface. The advanced settings interface is different depending on the models of
switch, and the actual interface shall prevail. Take 4-port PoE switch for example.
Common Configuration3.1
3.1.1 System Configuration
3.1.1.1 System Information
You can set the device name, IP address, mask length and DHCP enable, and view the software
information, hardware information and time.
Be careful when you enable DHCP Client. After enabling DHCP Client, the IP router or DHCP server
connecting to the switch will assign IP address to the switch automatically and the existing IP
address will be invalided, and then you cannot access the web interface.
Select Advanced > Common > System Config > System Info.Step 1
The System Info interface is displayed.

10
System informationFigure 3-1
Enter the device name, IP address and mask length, and Select DHCP enable.Step 2
Click Save.Step 3
3.1.1.2 IP and Route
The hosts of different VLANs cannot communicate. Route or the layer 3 switch is needed for
forwarding.

11
The switch supports layer 3 forwarding through VLAN interface. VLAN interface is the virtual
interface of layer 3 mode, for layer 3 communication between the VLANs. It is not the physical entity
on the device. Every VLAN is related to a VLAN interface, and the VLAN interface can forward packet
for the VLAN. Generally, because the VLAN can isolate the broadcasting domain, every VLAN
corresponds to a network segment. VLAN interface is the gateway of the network segment, and it
supports layer 3 forwarding for the message based on IP address.
Select Advanced > Common > System Config > IP&Route.Step 1
IP and routeFigure 3-2
Add the VLAN interface.Step 2
1) Click Add in IP Setting region.
Add IPFigure 3-3

12
2) Configure the parameters.
Table 3-1 VLAN interface
Parameter Description
VLAN Enter VLAN number.
IP address Set the IP address of the VLAN interface.
Mask Length Set the mask length of the IP address.
3) Click OK.
Add the IP route.Step 3
1) Click Add in the Route Setting region.
Add routeFigure 3-4
Table 3-2 Description of IP routes
Parameter Description
Network It is the destination of the IP packet.
Mask Length
Mask length, with destination address, is to identify the IP address of the
destination host or the route. After L
ogical AND between destination
address and network mask, you can get the IP address of the destination
host or the route.
Next Hop The next hop IP of the route.
2) Click OK.
Click Save.Step 4
3.1.1.3 System time
Set the system time of switch.
Select Advanced > Common > System Config > Current Time.

13
Current time (1)Figure 3-5
You can set the system time through the following three methods:
Set the time manually
Set the date and time on Current Time interface, and then click Save.
Sync time
Click Sync PC, and the switch time synchronizes with the local PC time automatically.
Sync NTP server time
Only with NTP server configured in the network can you enable this function in the following
steps:
Select the NTP Enable box to enable the NTP service.Step 1
Set the IP address of the NTP server.Step 2
Current time (2)Figure 3-6
Click Save.Step 3

14
The switch time automatically synchronizes with the time of server 1.
3.1.1.4 Log
You can view logs, export logs and clear logs.
Select Advanced > Common > System Config > Log. The Log interface is displayed.
LogFigure 3-7
View logs.
Set the start time, end time and log level, and then click Search to view the details of
the logs. Log Level includes Error, Warning, Notice and Information.
Click Export to export all logs.
Click Clear to clear all logs.
3.1.2 Port Configuration
You can set the port parameters, including speed, full duplex and half duplex, and so on.
Select Advanced > Common > Port.Step 1