Dahua PFS4307-4ET-96 User manual

Hardened Managed Switch
Web Operation Manual
V1.0.0

I
Foreword
General
This manual introduces the web operations of the hardened managed switch (hereinafter referred to
as "the Switch"). Read carefully before using the device, and keep the manual safe for future
reference.
Safety Instructions
The following categorized signal words with defined meaning might appear in the manual.
Signal Words Meaning
Indicates a high potential hazard which, if not avoided, will result in
death or serious injury.
Indicates a medium or low potential hazard which, if not avoided, could
result in slight or moderate injury.
Indicates a potential risk which, if not avoided, could result in property
damage, data loss, lower performance, or unpredictable result.
Provides methods to help you solve a problem or save you time.
Provides additional information as a supplement to the text.
Revision History
Version Revision Content Release Time
V1.0.0 First release. June 2022
Privacy Protection Notice
As the device user or data controller, you might collect the personal data of others such as their face,
fingerprints, and license plate number. You need to be in compliance with your local privacy
protection laws and regulations to protect the legitimate rights and interests of other people by
implementing measures which include but are not limited: Providing clear and visible identification
to inform people of the existence of the surveillance area and provide required contact information.
About the Manual
●The manual is for reference only. Slight differences might be found between the manual and the
product.
●We are not liable for losses incurred due to operating the product in ways that are not in
compliance with the manual.
●The manual will be updated according to the latest laws and regulations of related jurisdictions.
For detailed information, see the paper user’s manual, use our CD-ROM, scan the QR code or visit
our official website. The manual is for reference only. Slight differences might be found between
the electronic version and the paper version.
●All designs and software are subject to change without prior written notice. Product updates
might result in some differences appearing between the actual product and the manual. Please
contact customer service for the latest program and supplementary documentation.

II
●There might be errors in the print or deviations in the description of the functions, operations
and technical data. If there is any doubt or dispute, we reserve the right of final explanation.
●Upgrade the reader software or try other mainstream reader software if the manual (in PDF
format) cannot be opened.
●All trademarks, registered trademarks and company names in the manual are properties of their
respective owners.
●Please visit our website, contact the supplier or customer service if any problems occur while
using the device.
●If there is any uncertainty or controversy, we reserve the right of final explanation.

III
Important Safeguards and Warnings
This section introduces content covering the proper handling of the device, hazard prevention, and
prevention of property damage. Read carefully before using the device, and comply with the
guidelines when using it.
Transportation Requirements
Transport the device under allowed humidity and temperature conditions.
Storage Requirements
Store the device under allowed humidity and temperature conditions.
Installation Requirements
●Do not connect the power adapter to the device while the adapter is powered on.
●Strictly comply with the local electrical safety code and standards. Make sure that the ambient
voltage is stable and meets the power supply requirements of the device.
●Personnel working at heights must take all necessary measures to ensure personal safety
including wearing a helmet and safety belts.
●Do not place the device in a place exposed to sunlight or near heat sources.
●Keep the device away from dampness, dust, and soot.
●Put the device in a well-ventilated place, and do not block its ventilation.
●Use an adapter or cabinet power supply provided by the manufacturer.
●The power supply must conform to the requirements of ES1 in IEC 62368-1 standard and be no
higher than PS2. Please note that the power supply requirements are subject to the device label.
●Do not connect the device to two or more kinds of power supplies, to avoid damage to the
device.
●The device is a class I electrical appliance. Make sure that the power supply of the device is
connected to a power socket with protective earthing.
●The device must be grounded by a copper wire with a cross-sectional area of 2.5 mm2and a
ground resistance no more than 4 Ω.
●Voltage stabilizer and lightning surge protector are optional depending on the actual power
supply on site and the ambient environment.
●To ensure heat dissipation, the gap between the device and the surrounding area should not be
less than 10 cm on the sides and 10 cm on top of the device.
●When installing the device, make sure that the power plug and appliance coupler can be easily
reached to cut off power.

IV
Operation Requirements
●Do not disassemble the device without professional instruction.
●Operate the device within the rated range of power input and output.
●Make sure that the power supply is correct before use.
●Make sure the device is powered off before disassembling wires to avoid personal injury.
●Do not unplug the power cord on the side of the device while the adapter is powered on.
●Use the device under allowed humidity and temperature conditions.
●Do not drop or splash liquid onto the device, and make sure that there is no object filled with
liquid on the device to prevent liquid from flowing into it.
●Operating temperature: -30 °C to +65 °C (-22 °F to +149 °F).
●This is a class A product. In a domestic environment this may cause radio interference in which
case you may be required to take adequate measures.
●Do not block the ventilator of the device with objects, such as a newspaper, table cloth or curtain.
●Do not place an open flame on the device, such as a lit candle.
Maintenance Requirements
●Power off the device before maintenance.
●Mark key components on the maintenance circuit diagram with warning signs.

V
Table of Contents
Foreword ........................................................................................................................................................................................................I
Important Safeguards and Warnings............................................................................................................................................ III
1 Login ........................................................................................................................................................................................................... 1
2 Quick Configuration............................................................................................................................................................................ 2
2.1 General............................................................................................................................................................................................ 2
2.2 Port Information ........................................................................................................................................................................ 2
2.3 Onvif................................................................................................................................................................................................. 3
2.4 IPC and NVR.................................................................................................................................................................................. 4
3 Maintenance ........................................................................................................................................................................................... 5
3.1 Configuring System Time ...................................................................................................................................................... 5
3.2 Viewing Legal Information ................................................................................................................................................... 5
3.3 Changing Password.................................................................................................................................................................. 5
3.4 Configuring Firmware............................................................................................................................................................. 6
3.5 Viewing Device Information ................................................................................................................................................ 7
3.6 Viewing Log Information....................................................................................................................................................... 7
3.7 Status Monitoring ..................................................................................................................................................................... 8
3.8 Viewing Diagnosis..................................................................................................................................................................... 8
3.9 Mirroring........................................................................................................................................................................................ 9
4 Network Settings................................................................................................................................................................................10
4.1 configuring Ports.....................................................................................................................................................................10
4.2 Configuring VLAN....................................................................................................................................................................11
4.2.1 VLAN Definition.............................................................................................................................................................11
4.2.2 VLAN Function................................................................................................................................................................11
4.2.3 Port-based VLAN...........................................................................................................................................................11
4.2.4 Adding VLAN...................................................................................................................................................................12
4.2.5 Configuring Port VLAN ..............................................................................................................................................12
4.3 Configuring IGMP Snooping..............................................................................................................................................13
4.4 Configuring STP........................................................................................................................................................................14
4.4.1 STP........................................................................................................................................................................................14
4.4.2 Port Instance ...................................................................................................................................................................15
4.5 Configuring Link Aggregation..........................................................................................................................................15
4.6 Configuring SNMP Protocol ...............................................................................................................................................16
4.6.1 Configuring SNMP V1 and V2.................................................................................................................................17
4.6.2 Configuring SNMP V3.................................................................................................................................................18
4.7 Configuring Source Port.......................................................................................................................................................19

VI
4.8 MAC Table....................................................................................................................................................................................19
4.8.1 Adding MAC Table........................................................................................................................................................19
4.8.2 Filtering Port MAC........................................................................................................................................................20
5 PoE Management................................................................................................................................................................................22
5.1 Configuring PoE Settings.....................................................................................................................................................22
5.2 Configuring Long Distance PoE........................................................................................................................................23
5.3 Viewing PoE Event Statistics..............................................................................................................................................23
5.4 Configuring Green PoE .........................................................................................................................................................24
5.5 Configuring Legacy Support..............................................................................................................................................24
5.6 Configuring PD Alive .............................................................................................................................................................25
6 Security....................................................................................................................................................................................................26
6.1 Configuring HTTPS..................................................................................................................................................................26
6.2 Configuring CA Certificate ..................................................................................................................................................26
6.2.1 Installing Device Certificate ....................................................................................................................................26
6.2.2 Installing Trusted CA Certificates .........................................................................................................................27
6.3 Configuring Attack Defense...............................................................................................................................................27
6.3.1 Configuring Firewall....................................................................................................................................................27
6.3.2 Configuring Anti-DoS Attack ..................................................................................................................................28
6.4 Configuring Port Isolation ..................................................................................................................................................29
7 Control Policy .......................................................................................................................................................................................30
7.1 Configuring Port Priority.....................................................................................................................................................30
7.2 Configuring Priority Mapping Table..............................................................................................................................30
7.3 Configuring Queue Scheduling ........................................................................................................................................30
7.4 Configure Port Speed Limit ................................................................................................................................................31
7.5 Configure Storm Control......................................................................................................................................................31
8 Authentication.....................................................................................................................................................................................33
8.1 Configuring 802.1x .................................................................................................................................................................33
8.2 Configuring Radius.................................................................................................................................................................34
Appendix 1 Cybersecurity Recommendations........................................................................................................................35

1
1 Login
Prerequisites
Before login, make sure:
●You have already configured the IP address of the switch. The IP address of VLAN 1 is
192.168.1.110 by default.
●The computer is connected to the network and can ping the switch.
Procedure
Step 1 Enter the IP address (192.168.1.110 by default) of the switch in the address bar of the web
browser, and then press the Enter key.
Step 2 Enter the username and password.
The username and the password are admin and admin123 by default.
Step 3 Click Login.
Figure 1-1 Log in to the web
●Change the password after the first login. The password must consist of 8 to 32
non-blank characters and contain at least two types of characters among upper case,
lower case, number, and special character (excluding ' " ; : &).
●For details on changing the password, see "3.3 Changing Password".

2
2 Quick Configuration
You can view the system information, and configure the switch parameters including ONVIF, IP
address and more. The pages on the manual are for reference only, and might differ from the actual
pages.
2.1 General
Select Quick Config > General, you can view the device name, IP address, subnet mask and default
gateway of the switch.
Figure 2-1 General information
2.2 Port Information
Select Quick Config > Port Info, you can view information including port, type, link status,
speed/duplexing, VLAN, RX usage, TX usage and media type of the switch.

3
Figure 2-2 Port information
Table 2-1 Port information
Parameter Description
Port Displays all ports of the switch.
Type Includes three types: Access, Hybrid, and Trunk.
Link status
Includes two status: Up and Down.
●Up: The port is connected.
●Down: The port is not connected or the connection fails.
Speed/Duplexing
●Online: Displays the port rate and the duplex mode.
●Offline: Displays Down.
VLAN VLAN port.VLAN 1 by default.
RX usage Displays the receiving usage.
TX usage Displays the sending usage.
Media type
Includes two types: Copper and Fiber.
●Copper: RJ-45 port.
●Fiber: Fiber port.
2.3 Onvif
Select Quick Config > Onvif, you can view the port information of the device.

4
Figure 2-3 Onvif information
2.4 IPC and NVR
Select Quick Config > IPC&NVR, you can view the information on the IPC, NVR and other devices
connected to the switch.

5
3 Maintenance
3.1 Configuring System Time
You can view and configure the system date and time zone of the device.
Step 1 Select Maintenance > System Time
Step 2 Configure the system time. There are 2 methods:
●Manually configure the System Time and Time Zone, and then click OK.
●Click Sync PC to sync the device time to the computer time.
Figure 3-1 Configure time
3.2 Viewing Legal Information
Select Maintenance > Legal Info, you can view the Software License Agreement, Privacy Policy
and Open Source Software Notice.
3.3 Changing Password
You can modify the password. The username is admin by default, which cannot be changed.
Step 1 Select Maintenance > Change Password
Step 2 Enter Old Password, New Password and Confirm Password.
The password must consist of 8 to 32 non-blank characters and contain at least two types
of characters among upper case, lower case, number, and special character (excluding ' " ; :
&).
Step 3 Select time that the password expires in the list of Password Expires in.
Step 4 Click OK.

6
Figure 3-2 Change password
3.4 Configuring Firmware
Select Maintenance > Firmware Config, you can restore the device, update system and restart
device.
Restore Factory Default
Click Restore Now to restore all the device parameters to the factory defaults.
Update Software
Click Browse to import the update file, and then click Update Now.
Restart Device
Click Restart Now to restart the device.
Figure 3-3 Firmware configuration

7
3.5 Viewing Device Information
Select Maintenance > Device Info, you can view the information on System, Software, Hardware
and Time.
Figure 3-4 Device information
3.6 Viewing Log Information
You can view log information on the device operations.
Step 1 Select Maintenance > Log.
Step 2 Configure Start Time and End Time.
Step 3 Select Log Type, including Error,Warning and Info.
Step 4 Click Search.

8
Figure 3-5 Log information
Table 3-1 Parameter description
Parameter Description
Backup Tap to back up the searched logs.
Clear Tap to clear all the searched logs.
Encrypt Log Backup Click the checkbox to encrypt the back-up logs.
3.7 Status Monitoring
Select Maintenance > Status Monitoring, and then you can view the CPU usage.
Figure 3-6 Status monitoring
3.8 Viewing Diagnosis
Step 1 Select Maintenance > Diagnosis.
Step 2 Enter the Destination IP, and then select Packet Size and Ping Times.
Step 3 Click Diagnose.

9
Figure 3-7 Diagnosis
3.9 Mirroring
Step 1 Select Maintenance > Mirror.
Step 2 Click Add.
Step 3 In Add Mirroring Grouppage, select Mirroring Group No., Destination Port and TX, RX,
and Both according to the actual situation.
Step 4 Click OK.
Figure 3-8 Add mirroring group

10
4 Network Settings
4.1 configuring Ports
You can configure the port parameters, including speed/duplexing, flow control, and other
parameters. The port parameters will directly affect the working mode of the port. Make
configurations according to the practical requirements.
Step 1 Select Network Settings > Port.
Step 2 Click OK.
Figure 4-1 Port settings
Table 4-1 Port parameters
Parameter Description
Port Displays all ports of the switch.
Description
Enter the description of the port.
The description cannot exceed 64 characters. Only numbers,
letters and the following special characters are allowed: . _ -. The
first character must be a letter and the last character must not be
a special character.
Type Displays the type of the port, includes two types: Ethernet port
and Optical port.
Link status
Includes two status: Up and Down.
●Up: The port is connected.
●Down: The port is not connected or the connection fails.
Speed duplexing status
●Online: Displays the port rate and the duplex mode.
●Offline: Displays Down.

11
Parameter Description
Speed duplexing Set the speed and the duplex mode from Down, Auto, 10M
Half, 10M Full, 100M Half, 100M Full, and 1000M Full.
Flow control
●: Enable the port flow control function.
●: Disable the port flow control function.
RX usage Displays the receiving usage.
TX usage Displays the sending usage.
Details
●View the total RX and total TX of each port. You can refresh
or clear the detailed information of each port.
●View the number of error bytes.
4.2 Configuring VLAN
4.2.1 VLAN Definition
Logically, one LAN (Local Area Network) can be divided into many subsets. Each subset has its own
broadcast area: virtual LAN (VLAN). A VLAN is divided from a LAN on a logical basis rather than on a
physical basis, to realize the isolated broadcast area in the VLAN.
4.2.2 VLAN Function
●Enhance the network performance. The broadcast packets are in the VLAN, which can effectively
control the network broadcast storm, reduce network bandwidth and enhance network
processing ability.
●Enhance the network security. The switches in different VLANs cannot access each other, and the
hosts in different VLAN cannot communicate with each other. They need a router or the
three-layer switch to forward the message.
●Simplify the network management. The host of the same virtual working group is not limited in
one physical area, which can simplify the network management and facilitate to establish
working groups for users in different areas.
4.2.3 Port-based VLAN
The port types include Access, Trunk and Hybrid.
●Access: The port belongs to one VLAN, and is used to connect to the computer port.
●Trunk: The port allows multiple VLANs to pass, to receive and send messages of multiple VLANs,
and is used to connect between the switches.
●Hybrid: The port allows multiple VLANs to pass, to receive and send messages of multiple VLANs,
and is used to connect between the switches, and connect the computer.

12
4.2.4 Adding VLAN
You can add the port to the VLAN. The VLAN is VLAN1 by default.
Step 1 Select Network Settings > VLAN > Add VLAN.
Step 2 Click Add, enter the VLAN ID and Description in the Add VLAN window.
Step 3 Click OK.
VLAN1 cannot be deleted.
Figure 4-2 Add VLAN
Step 4 Click Save.
4.2.5 Configuring Port VLAN
You can configure the port VLAN parameters.
Step 1 Configure the port VLAN parameters.
Step 2 Click OK.

13
Figure 4-3 Configure VLAN
Table 4-2 Port VLAN configuration parameter
Parameter Description
Port Displays all ports of the switch.
Mode Includes three modes: Access, Hybrid, and Trunk.
Default VLAN
Add the port to a VLAN, and all ports belong to VLAN 1 by default.
The range is from 1 to 4094.
After adding the port, the port will display on the Add VLAN tab.
Egress
Displays whether to tag the data that will egress the port.
●UNTAG PVID: If the data flow tag is the same with PVID, the tag
will be peeled.
●Tag All: All data will be tagged.
●Untag All: All data will not be tagged.
Allowed VLAN Configure the allowed VLAN.
4.3 Configuring IGMP Snooping
IGMP Snooping (Internet Group Management Protocol Snooping) is the multicast constraint
mechanism running on the device of layer 2, for managing and controlling the multicast. Through
analyzing the received IGMP packet, the device of layer 2, which runs IGMP Snooping, creates the
mapping between the port and the MAC multicast address, and forwards the multicast data
according to the mapping.
Step 1 Select Network Settings > IGMP Snooping.
Step 2 Click next to IGMP Snooping to enable the function.