Edimax ES-5816PHG User manual



User Manual

ES-5816PHG
Gigabit 16-Port 802.3at PoE Web Smart Switch

FCC Warning
This Equipment has been tested and found to comply with the limits for a Class-A
digital device, pursuant to Part 15 of the FCC rules. These limits are designed to
provide reasonable protection against harmful interference in a residential installation.
This equipment generates, uses, and can radiate radio frequency energy. It may
cause harmful interference to radio communications if the equipment is not installed
and used in accordance with the instructions. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by
turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
¾Reorient or relocate the receiving antenna.
¾Increase the separation between the equipment and receiver.
¾Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected.
¾Consult the dealer or an experienced radio/TV technician for help.
CE Mark Warning
This is a Class-A product. In a domestic environment this product may cause radio
interference in which case the user may be required to take adequate measures.


I

Content
Content………………………………………………………………………………….I
Introduction……………………………………………………………………………..1
Product Overview……………………………………………………………………………….1
General Feature…………………………………………………………………….1
L2 switching………………………………………………………………………………………..1
Quality of Service………………………………………………………………………………… 2
Security…………………………………………………………………………………………… .2
Specification……………………………………………………………………………………..3
Mechanical……………………………………………………………………………………....3
Package Contents……………………………………………………………………………...4
Hardware Description………………………………………………………………….5
Physical Dimensions / Weight………………………………………………………………...5
Front Panel……………………………………………………………………………………...5
LEDs Indicators…………………………………………………………………………………..5
Rear Panel………………………………………………………………………………………6
Hardware Installation…………………………………………………………………………..6
Software Description…………………………………………………………………..7
Login……………………………………………………………………………………………..7
Configuration……………………………………………………………………………………8
System ..…………………………………………………………………….…………….....8
Ports ………….…………………………………………………..…………………………..10
Vlan…………………………………….……………………….…………………………...11
Aggregation…………………………………………………………………………….….12
LACP……………………………………………………………………………….……….13
RSTP………………………………………………………………………………………..14
802.1x ………………………………………………………………………………………16
Snopping………………………………………………………………………….17
Mirrioring…………………………………………………………………………………18
QoS……………………………………………………………………………………….19
Filter..……………………………………………………………………………….…22
Power over Ethernet ………………………………………………………………………...23
Rate Limit…………………………………………………………………………………….24
Storm Control……………………………………………………………………………24
Monitoring…………………………………………………………………………………...26
Statistic Overview……………………………………………………………………… 26

II

Detailed Statistic………………………………………………………………………..26
LACP Status……………………………………………………………………………. 27
RSTP Status……………………………………………………………………………..28
IGMP Status……………………………………………………………………………..30
VeriPHY…………………………………………………………………………………..30
Ping……………………………………………………………………………………....31
Maintenance………………………………………………………………………………...34
Warm Restart…………………………………………………………………………....34
Factory Default………………………………………………………………………….34
Software Upload………………………………………………………………………..34
Configuration File Transfer…………………………………………………………....34
Logout……………………………………………………………………………………35

1

Introduction
Product Overview
This switch is a Web Management Switch equipped with 16-ports
10/100/1000BaseT(X) with 4-port gigabit SFP open slots. It was designed for
easy installation and high performance in an environment where traffic is on
the network and the number of users increases continuously. The compact
rigid desktop size was specifically designed for small to medium workgroups.
It can be installed where space is limited; moreover, it provides smooth
network migration and easy upgrade to network capacity.
In addition, the switch features comprehensive and useful function such as
QoS (Quality of Service), Spanning Tree, VLAN, Port Trunking, Bandwidth
Control, Port Security, SNMP/RMON, IGMP Snooping capability via the
intelligent software. It is suitable for both metro-LAN and office application.
General Features
- 16 Gigabit Ethernet ports with non-blocking wire-speed performance
- 16 tri-speed 10/100/1000 Mbps Gigabit Ethernet Media Access Controllers
(MACs)
- Eight tri-speed ( 10/100/1000 Mbps ) integrated copper transceivers
( PHY’s)
- Sixteen integrated SGMII ports
- Buffer Memory 500K Bytes
- 8,192 IP multicast groups supported
- Jumbo frame support at all speed ( 10/100/1000 Mbps) of up to 9.6K bytes
- Wire-speed automatic learning and CPU-based learning configurable per
port
- Support up to 24 trunks with up to 16 ports in a trunk
Layer-2 Switching
- 16 Giga Ethernet ports with non-blocking wire-speed performance
- 8,192 MAC addresses with wire-speed automatic learning and
CPU-based learning configurable per port
- Rapid Spanning Tree Protocol support ( IEEE std 802.1w)

2

- Multiple Spanning Tree support ( IEEE std 802.1s )
- IGMP, GARP, GMRP, and GVRP support
Quality of Service
- Programmable multi-layer classifier with four QoS classes per port
- Strict priority or weighted round-robin forwarding with guaranteed
bandwidth allocation
- Traffic class assignment based on port
- DSCP ( IPv4 & IPv6) and 802.1p support
- DSCP remarking for both IPv4 & IPv6 packets
- Provide Bridge support with multiple VLAN tags ( Q-in Q)
- Broadcast and multicast storm control
- Full-duplex flow control ( IEEE 802.3x ) and half-duplex back pressure
- Traffic shaping and policing per port in sites
- Link aggregation support based on layer 2-4 information ( IEEE Std
802.3ad)
Security
- Port-based access control support
- 4,096 VLAN support
- VLAN awareness on a per port basis
- Independent and share VLAN learning
- VLAN Q-in Q support (VLAN stacking )
- Source IP filter per port to block unwanted access
- Extensive snooping : BPDU, GARP, ARP, IPMC, IGMP, TCP/UDP
- TCP/UDP filter for CPU copy/redirect, frame snooping and frame
eradication
- DHCP filter to block unwanted DHCP servers on a per-port basis
- Multiple ARP filters for detection of ARP intrusion scans
- Extensive storm control: broadcast, multicast, uni-cast, ICMP and CPU
( ARP, BPDU) traffic control
- Per port CPU based learning option
- CPU mirroring per port and per VLAN

3

Specifications
¾Standard
IEEE 802.3 10BaseT
IEEE 802.3u 100BaseTX
IEEE 802.ab 1000BaseT
IEEE 802.3z 1000BaseSX/LX
IEEE 802.3x Flow Control
IEEE 802.3 Auto Negotiation
IEEE 802.3 Auto-MDI/MDI-X
IEEE 802.1ad Provider Bridge ( Q in Q )
IEEE 802.1x Port-based Network Access Control
IEEE 802.1Q VLAN Tagging
IEEE 802.3ad Link Aggregation
IEEE 802.1d Spanning tree protocol
IEEE 802.1w Rapid Spanning tree protocol
IEEE 802.1p Class of service, Priority Protocols
IEEE 802.3af- 2003 Power over Ethernet
IEEE 802.3at- 2009 Power over Ethernet
¾Number of Port
16-port 10/100/1000BaseT(X) + 4 Gigabit SFP Open Slots
¾LEDs Indicator
Per Port: Link/ Act, 1000M
Per Unit: Power
¾Power Consumption: 130 Watts (Max)
¾Power Input: 100~240V/AC, 50~60HZ
¾Product Dimensions/ Weight
45 × 330 × 440 mm (H × W ×D) / 4.4kg

4

Package Contents
Before you start to install this switch, please verify your package that
contains the following items:
zOne Switch
zOne Power Cord
zOne User Manual
zOne pair Rack-mount kit + 8 Screws

5

Hardware Description
This part primarily presents hardware of the web-smart switch, physical
dimensions and functional overview would be described.
Physical Dimensions/ Weight
45 × 440 × 330 mm (H × W × D) / 4.4KG
Front Panel
The front Panel of the web-smart Switch consists of 16 gigabit RJ-45 ports + 4
gigabit SFP open slot. The LED Indicators are also located on the front panel.
LED Indicators
The LED Indicators present real-time information of systematic operation
status. This table provides description of LED status and the meaning.
Table 1-1 LED Indicators
LED Status Description
Power
On Power on
Off Disconnect from Power Source
Blink Reset button for 3 seconds
Link/ ACT On Link
Flashing Data activating
Off No device is attached
PoE On Port is linked to Power Device
Off No Power Device is connected

Note: The SFP ports are shared with normal RJ-45 ports 1,2,3 and 4. The
RJ-45 can not be used when SFP port link up.
LED Display RJ-45 Port
SFP ports for
optical transceivers

6

Rear Panel
The 3-pronged power plug is placed at the rear panel of the switch right side
shown as below.
Hardware Installation
Set the switch on a large flat space with a power socket close by. The flat
space should be clean, smooth, level and sturdy. Make sure there is enough
clearance around the switch to allow attachment of cables, power cord and
allow air circulation. The last, use twisted pair cable to connect this switch to
your PC then user could start to operate the switch.

7

Software Description
This part instructs user how to set up and manage the switch through the web
user interface. Please follow the description to understand the procedure.
At the first, open the web browser, and go to 192.168.2.1 site then the user will
see the login screen. Key in the password to pass the authentication then
clicks the Apply.The login process is completed and comes out the sign
“Password successfully entered”.
Login
Password: 1234
Figure 1-1

8

After the user login, the right side of website shows all functions as Fig. 1-2.
Figure 1-2
Configuration
System
System Configuration
This page shows system configuration information. User can configure
information as below:

9

Figure 2-1
¾MAC Address: Displays the unique hardware address assigned by
manufacturer (default).
¾S/W Version: Displays the switch’s firmware version.
¾H/W Version: Displays the switch’s Hardware version.
¾DHCP Enabled: Click the box to enable DHCP

10

¾Fallback IP address: Manually assign the IP address that the network is
using. The default IP is 192.168.2.1
¾Fallback Subnet Mask: Assign the subnet mask to the IP address
¾Fallback Gateway: Assign the network gateway for industrial switch. The
default gateway is 0.0.0.0.
¾Management VLAN: ID of a configured VLAN (1-4094) through which you
can manage the switch. By default, all ports on the switch are members of
VLAN 1. However, if the management VLAN is changed, the management
station must be attached to a port belonging to this VLAN.
¾Name: Type in the new user name (The default value is ‘admin’).
¾Password: Type in the new password (The default value is ‘admin’).
¾SNMP Enabled: Enables or disables SNMP on the switch. Supports SNMP
version 1and 2c management clients.
¾SNMP Trap Destination: IP address of the trap manager to receive
notification messages from this switch. Traps indicating status changes are
issued by the switch to specified trap managers. You must specify trap
managers so that key events are reported by this switch to your
management station.
¾SNMP Read Community: A community string that acts like a password and
permits access to the SNMP database on this switch. Authorized
management stations are only able to retrieve MIB objects.
¾SNMP Trap Community: Community string sent with the notification
operation.
Ports
Port configuration ensures access to a switch port based on MAC address,
limits the total number of devices from using a switch port and protects
against MAC flooding attacks.
Port Configuration
In Port Configuration, you can set and view the operation mode for each port.
¾Enable Jumbo Frames:This switch provides more efficient throughput for
large sequential data transfers by supporting jumbo frames on Gigabit
Ethernet ports up to 9216 bytes. Compared to standard Ethernet frames
that run only up to 1.5 KB, using jumbo frames significantly reduces the
per-packet overhead required to process protocol encapsulation fields.

11

¾Power Saving Mode:Adjusts the power provided to ports based on the
length of the cable used to connect to other devices. Only sufficient power is
used to maintain connection requirements.
¾Mode: allow user to manually set the port speed such as Auto, 10 half, 10
Full, 100 Half, 100 Full, 1000 Full or Disabled. User may press Apply button
to complete the configuration procedure.
Figure 2-2
Vlan
A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast
domain, which would allow you to isolate network traffic, so only the members
of the same VLAN will receive traffic from the ones of the same VLAN.
Basically, creating a VLAN from a switch is logically equivalent of reconnecting
a group of network devices to another Layer 2 switch. However, all the network
devices are still plugged into the same switch physically.
Port Segmentation (VLAN) Configuration
¾VLAN ID: ID of configured VLAN (1-4094, no leading zeroes).
¾VLAN Configuration List: Lists all the current VLAN groups created for this
system. Up to 64 VLAN groups can be defined. VLAN 1 is the default
untagged VLAN.

12

Figure 2-3
Aggregation
Port trunk allows multiple links to be bundled together and act as a single
physical link for increased throughput. It provides load balancing, and
redundancy of links in a switched inter-network. Actually, the link does not
have an inherent total bandwidth equal to the sum of its component physical
links. Traffic in a trunk is distributed across an individual link within the trunk in
a deterministic method that called a hash algorithm. The hash algorithm
automatically applies load balancing to the ports in the trunk. A port failure
within the trunk group causes the network traffic to be directed to the remaining
ports. Load balancing is maintained whenever a link in a trunk is lost or
returned to service.
Aggregation / Trunking Configuration
To assign a port to a trunk, click the required trunk number, then click Apply.
Figure 2-4

13

LACP
IEEE 802.3ad Link Aggregation Control Protocol (LACP) increases bandwidth
by automatically aggregating several physical links together as a logical trunk
and providing load balancing and fault tolerance for uplink connections.
LACP Port Configuration
¾Port: The port number.
¾Enabled: Enables LACP on the associated port.
¾Key Value: Configures a port's LACP administration key. The port
administrative key must be set to the same value for ports that belong to the
same link aggregation group (LAG). If this administrative key is not set when
an LAG is formed (i.e., it has the null value of 0), this key will automatically
be set to the same value as that used by the LAG.
Figure 2-5

14

RSTP
IEEE 802.1w Rapid Spanning tree protocol (LACP) provides a loop-free
network and redundant links to the core network with rapid convergence to
ensure faster recovery from failed links, enhancing overall network stability
and reliability.
RSTP System Configuration
¾System Priority: This parameter configures the spanning tree priority
globally for this switch. The device with the highest priority becomes the
STP root device. However, if all devices have the same priority, the device
with the lowest MAC address will then become the root device. Number
between 0 - 61440 in increments of 4096. Therefore, there are 16 distinct
values.
¾Hello Time: Interval (in seconds) at which the root device transmits a
configuration message (BPDU frame). Number between 1-10 (default is 2).
¾Max Age – The maximum time (in seconds) a device can wait without
receiving a configuration message before attempting to reconfigure. That
also means the maximum life time for a BPDU frame. Number between 6-40
(default is 20).
¾Forward Delay: The maximum time (in seconds) the root device will wait
before changing states (i.e., discarding to learning to forwarding). Number
between 4 – 30 (default is 15).
¾Force Version: Set and show the RSTP protocol to use. Normal - use RSTP,
Compatible - compatible with STP.
Figure 2-6-1

15

RSTP Port Configuration
¾Port: The port ID. It cannot be changed. Aggregations mean any configured
trunk group.
¾Enabled: Click on the tick-box to enable/disable the RSTP protocol for the
port.
¾Edge: Expect the port to be an edge port (linking to an end station) or a link
to another STP device.
¾Path Cost: This parameter is used by the STP to determine the best path
between devices. Therefore, lower values should be assigned to ports
attached to faster media, and higher values assigned to ports with slower
media. Set the RSTP pathcost on the port. Number between 0 - 200000000.
0 means auto generated pathcost.
802.1X Configuration
IEEE802.1X provides a security standard for network access control, specially
in Wi-Fi wireless networks. 802.1x holds a network port disconnected until
authentication is completed. The switch uses Extensible Autentication Protocol
over LANS to exchange authentication protocol client identity with the client,

16

and forward it to another remote RADIUS authentication server to verify
access rights. The EAP packet from the RADIUS server also contain the
authentication method to be used. The client can reject the authentication
method and request another, depending on the configuration of the client
software and the RADIUS server. Depending on the authenticated results, the
port is either made available to the user, or the user is denied access to the
network.
The RADIUS servers make the network a lot easier to manage for the
administrator by gathering and storing the user lists.
By default, 802.1x is disabled. To use EAP for security, select enabled and set
the 802.1X Global Settings for the Radius Server and applicable authentication
information.
RADIUS server IP: The IPADDRESS OF THE EXTERNALRadius Server, you
need to specify an RADIUS server to enable 802.1s authentication.
IGMP Snooping
IGMP Snooping is the process of listening to IGMP network traffic. IGMP
Snooping, as implied by the name, is a feature that allows a layer 2 switch to
“listen in” on the IGMP conversation between hosts and routers by processing
the layer3 IGMP packets sent in a multicast network.
When IGMP Snooping is enabled in a switch it analyzes all IGMP packets