Hirschmann MACH 4000 Series User manual

Basic - L3P
Release 4.0 11/07
Technical Support
[email protected]
User Manual
Basic Configuration
Industrial ETHERNET (Gigabit) Switch
Power MICE, MACH 4000

The naming of copyrighted trademarks in this manual, even when not specially indicated, should
not be taken to mean that these names may be considered as free in the sense of the trademark
and tradename protection law and hence that they may be freely used by anyone.
© 2007 Hirschmann Automation and Control GmbH
Manuals and software are protected by copyright. All rights reserved. The copying, reproduction,
translation, conversion into any electronic medium or machine scannable form is not permitted,
either in whole or in part. An exception is the preparation of a backup copy of the software for
your own use. For devices with embedded software, the end-user license agreement on the en-
closed CD applies.
The performance features described here are binding only if they have been expressly guaran-
teed in the contract. This publication has been created by Hirschmann Automation and Control
GmbH according to the best of our knowledge. Hirschmann reserves the right to change the con-
tents of this manual without prior notice. Hirschmann can give no guarantee in respect of the
correctness or accuracy of the details in this publication.
Hirschmann can accept no responsibility for damages, resulting from the use of the network
components or the associated operating software. In addition, we refer to the conditions of use
specified in the license contract.
Printed in Germany
Hirschmann Automation and Control GmbH
Stuttgarter Str. 45-51
72654 Neckartenzlingen
Germany
Tel.: [phone]
Rel. 4.0-01-1107 – 27.11.07

Content
User Manual - Industrial Protocols
Release 4.0 11/07 3
Content
Content 3
About this Manual 9
Key 11
Introduction 13
1 Access to the user interfaces 15
1.1 System Monitor 16
1.2 Command Line Interface 18
1.3 Web-based Interface 21
2 Entering the IP Parameters 25
2.1 IP Parameter Basics 27
2.1.1 IP address (version 4) 27
2.1.2 Network mask 28
2.2 Entering IP parameters via CLI 32
2.3 Entering the IP Parameters via HiDiscovery 35
2.4 Loading the system configuration from the ACA 38
2.5 System configuration via BOOTP 40
2.6 System configuration via DHCP 45
2.7 System configuration via DHCP Option 82 48
2.8 System configuration via the Web-based interface 49
2.9 Faulty device replacement 51
3 Loading/saving settings 53
3.1 Loading settings 54
3.1.1 Loading from the local non-volatile memory 55
3.1.2 Loading from the AutoConfiguration Adapter 55
3.1.3 Loading from a file 56
3.1.4 Resetting the configuration to the state on delivery 58

Content
4User Manual - Industrial Protocols
Release 4.0 11/07
3.2 Saving settings 59
3.2.1 Saving locally (and on the ACA) 59
3.2.2 Saving in a file on URL 60
3.2.3 Saving in a binary file on the PC 61
3.2.4 Saving as a script on the PC 61
4 Loading software updates 63
4.1 Loading the software from the ACA 65
4.1.1 Selecting the software to be loaded 66
4.1.2 Starting the software 67
4.1.3 Performing a cold start 67
4.2 Loading the software from the tftp server 68
4.3 Loading the software via file selection 70
5 Configuring the ports 71
6 Protection from unauthorized access 75
6.1 Password for SNMP access 76
6.1.1 Description of password for SNMP access 76
6.1.2 Entering the password for SNMP access 77
6.2 Telnet/Web/SSH access 81
6.2.1 Description of Telnet access 81
6.2.2 Description of Web access 81
6.2.3 Description of SSH access 82
6.2.4 Enabling/disabling Telnet/Web/SSH access 83
6.3 Disabling the HiDiscovery function 84
6.3.1 Description of the HiDiscovery protocol 84
6.3.2 Enabling/disabling the HiDiscovery function 84
6.4 Port access control 85
6.4.1 Port access control 85
6.4.2 Defining port access control 86
6.5 Port authentication according to 802.1X 88
6.5.1 Description of port authentication according to 802.1X 88
6.5.2 Authentication process 89
6.5.3 Preparing the Switch for the
802.1X port authentication 89
6.5.4 Setting 802.1X 90

Content
User Manual - Industrial Protocols
Release 4.0 11/07 5
6.6 Access Control Lists (ACL). 91
6.6.1 Description of prioritizing with ACLs 92
6.6.2 Description of IP-based ACLs. 93
6.6.3 Description of MAC-based ACLs 94
6.6.4 Configuring IP ACLs 95
6.6.5 Configuring MAC ACLs 97
6.6.6 Configuring priorities with IP ACLs 98
6.6.7 Specifying the sequence of the rules 100
7 Synchronizing the system time in the network 101
7.1 Entering the time 102
7.2 SNTP 104
7.2.1 Description of SNTP 104
7.2.2 Preparing the SNTP coordination 105
7.2.3 Configuring SNTP 106
7.3 Precision Time Protocol 110
7.3.1 Description of PTP functions 110
7.3.2 Preparing the PTP configuration 114
7.3.3 Configuring PTP 115
7.4 Interaction of PTP and SNTP 118
8 Network load control 121
8.1 Direct packet distribution 122
8.1.1 Store-and-forward 122
8.1.2 Multi-address capability 122
8.1.3 Aging of learned addresses 123
8.1.4 Entering static address entries 124
8.1.5 Disabling the direct packet distribution 125
8.2 Multicast application 126
8.2.1 Description of the Multicast application 126
8.2.2 Example of a Multicast application 127
8.2.3 Description of IGMP Snooping 128
8.2.4 Description of GMRP 128
8.2.5 Setting up the Multicast application 130
8.3 Rate Limiter 135
8.3.1 Description of the Rate Limiter 135
8.3.2 Rate Limiter settings 135

Content
6User Manual - Industrial Protocols
Release 4.0 11/07
8.4 QoS/Priority 137
8.4.1 Description of Prioritization 137
8.4.2 VLAN tagging 138
8.4.3 IP ToS / DiffServ 140
8.4.4 Management prioritizing 143
8.4.5 Handling of received priority information 143
8.4.6 Handling of traffic classes 144
8.4.7 Setting prioritization 146
8.5 Flow control 152
8.5.1 Description of flow control 152
8.5.2 Setting the flow control 154
8.6 VLANs 155
8.6.1 Description of VLANs 155
8.6.2 Configuring VLANs 158
8.6.3 Example of a simple VLAN 161
9 Operation diagnosis 169
9.1 Sending traps 170
9.1.1 SNMP trap listing 171
9.1.2 SNMP traps when booting 172
9.1.3 Configuring traps 173
9.2 Monitoring the device status 175
9.2.1 Configuring the device status 176
9.2.2 Displaying the device status 176
9.3 Out-of-band signaling 178
9.3.1 Controlling the signal contact 179
9.3.2 Monitoring correct operation via the signal contact 180
9.3.3 Monitoring the device status via the signal contact 181
9.4 Port status indication 182
9.5 Event counter at port level 183
9.6 Displaying the SFP status 185
9.7 TP cable diagnosis 186
9.8 Topology discovery 187
9.8.1 Description of topology discovery 187
9.8.2 Displaying the topology discovery 188
9.9 Detecting IP address conflicts 191

Content
User Manual - Industrial Protocols
Release 4.0 11/07 7
9.9.1 Description of IP address conflicts 191
9.9.2 Configuring ACD 192
9.9.3 Displaying ACD 192
9.10 Reports 194
9.11 Monitoring port traffic (port mirroring) 196
A Setting up configuration environment 199
A.1 Setting up DHCP/BOOTP server 200
A.2 Setting up DHCP Server Option 82 206
A.3 tftp server for software updates 210
A.3.1 Setting up the tftp process 211
A.3.2 Software access rights 214
A.4 Preparing access via SSH 215
A.4.1 Generating a key 215
A.4.2 Uploading the key 216
A.4.3 Access via SSH 217
B General information 221
B.1 Management Information Base (MIB) 222
B.2 Abbreviations used 225
B.3 List of RFC's 226
B.4 Based specifications and standards 228
B.5 Technical Data 229
B.6 Copyright of integrated software 230
B.6.1 Bouncy Castle Crypto APIs (Java) 230
B.6.2 LVL7 Systems, Inc. 231
B.7 Reader´s comments 232
C Index 235
D Further support 239

Content
8User Manual - Industrial Protocols
Release 4.0 11/07

About this Manual
Basic - L3P
Release 4.0 11/07 1
About this Manual
The “Basic Configuration” user manual contains all the information you need
to start operating the switch. It takes you step by step from the first startup
operation through to the basic settings for operation in your environment.
The following thematic sequence has proven itself in practice:
XSet up device access for operation by entering the IP parameters
XCheck the status of the software and update it if necessary
XLoad/store the configuration
XConfigure the ports
XSet up protection from unauthorized access
XOptimize the data transmission with network load control
XSynchronize system time in the network
XFunction diagnosis
The “Installation” user manual contains a device description, safety instruc-
tions, a description of the display, and all the other information that you need
to install the device before you begin with the configuration of the device.
The “Redundancy Configuration” user manual contains all the information
you need to select a suitable redundancy procedure and configure it.
The “Industry Protocols” user manual describes how the Switch is connected
by means of a communication protocol commonly used in the industry, such
as EtherNet/IP and PROFINET.
The “Routing Configuration” user manual contains all the information you
need to start operating the routing function. It takes you step by step from
a small router application through to the router configuration of a complex
network.
The manual enables you to configure your router by following the examples.

About this Manual
2Basic - L3P
Release 4.0 11/07
The "Web-based Interface" reference manual contains detailed information
on using the Web interface to operate the individual functions of the switch.
The "Command Line Interface" reference manual contains detailed informa-
tion on using the Command Line Interface to operate the individual functions
of the switch.
The Network Management Software HiVision provides you with additional
options for smooth configuration and monitoring:
XEvent logbook.
XConfiguration of „System Location“ and „System Name“.
XConfiguration of the network address range and SNMP parameters.
XSaving the configuration on the Switch.
XSimultaneous configuration of multiple Switches.
XConfiguration of the port display color red for a connection error.

Key
Basic - L3P
Release 4.0 11/07 3
Key
The designations used in this manual have the following meanings:
Symbols used:
XList
Work step
Subheading
Link Indicates a cross-reference with a stored link
Note: A note emphasizes an important fact or draws your
attention to a dependency.
Courier ASCII representation in user interface
Execution in the Web-based Interface user interface
Execution in the Command Line Interface user interface
Router
Switch
Bridge
Hub
A random computer
Configuration Computer

Key
4Basic - L3P
Release 4.0 11/07
Server
PLC -
Programmable logic
controller
I/O -
Robot

Introduction
Basic - L3P
Release 4.0 11/07 5
Introduction
The switch has been developed for practical application in a harsh industrial
environment. Accordingly, the installation process has been kept simple.
Thanks to the selected default settings, you only have to enter a few settings
before starting to operate the switch.

Introduction
6Basic - L3P
Release 4.0 11/07

Access to the user interfaces
Basic - L3P
Release 4.0 11/07 7
1 Access to the user interfaces
The switch has three user interfaces, which you can access via different in-
terfaces:
XSystem monitor via the V.24 interface (out-of-band)
XCommand Line Interface (CLI) via the V.24 connection (out-of-band) and
Telnet (in-band)
XWeb-based interface via Ethernet (in-band).

Access to the user interfaces
8
1.1 System Monitor
Basic - L3P
Release 4.0 11/07
1.1 System Monitor
The system monitor enables you to
Xselect the software to be loaded
Xperform a software update
Xstart the selected software
Xshut down the system monitor
Xdelete the configuration saved and
Xdisplay the boot code information.
Opening the system monitor
Use the terminal cable (see accessories) to connect
– the V.24 socket (RJ11) to
– a terminal or a COM port of a PC with terminal emulation based on
VT100
(for the physical connection, see the "Installation" user manual).
Start the terminal program on the PC and set up a connection with the
switch.
When you boot the Switch, the message "Press <1> to enter System
Monitor 1" appears on the terminal.
Speed 9,600 Baud
Data 8 bit
Parity none
Stopbit 1 bit
Handshake off
Table 1: Data transfer parameters

Access to the user interfaces
Basic - L3P
Release 4.0 11/07
1.1 System Monitor
9
Figure 1: Screen display during the boot process
Press the <1> key within one second to start system monitor 1.
Figure 2: System monitor 1 screen display
Select a menu item by entering the number.
To leave a submenu and return to the main menu of system monitor 1,
press the <ESC> key.
< PowerMICE MS4128-5 (Boot) Release: 1.00 Build: 2005-09-17 15:36 >
Press <1> to enter System Monitor 1 ...
1
System Monitor
(Selected OS: L3P-01.0.00-K16 (2005-10-31 19:32))
1 Select Boot Operating System
2 Update Operating System
3 Start Selected Operating System
4 End (reset and reboot)
5 Erase main configuration file
sysMon1>

Access to the user interfaces
10
1.2 Command Line Interface
Basic - L3P
Release 4.0 11/07
1.2 Command Line Interface
The Command Line Interface enables you to use all the functions of the
switch via a local or remote connection.
The Command Line Interface provides IT specialists with a familiar environ-
ment for configuring IT devices.
The script compatibility of the Command Line Interface enables you, among
other things, to feed multiple devices with the same configuration data.
You will find a detailed description of the Command Line Interface in the
"Command Line Interface" reference manual.
Note: To facilitate making entries, CLI gives you the option of abbreviating
keywords. Type in the beginning of a keyword. When you press the tab key,
CLI completes the keyword.
Opening the Command Line Interface
Connect the switch to a terminal or to the COM port of a PC using ter-
minal emulation based on VT100 and press any key (see on page 8
"Opening the system monitor") or
call up the Command Line Interface via Telnet.
A window for entering the user name appears on the screen.
Up to five users can access the Command Line Interface.

Access to the user interfaces
Basic - L3P
Release 4.0 11/07
1.2 Command Line Interface
11
Figure 3: Logging in to the Command Line Interface program
Enter a user name. The default setting for the user name is admin.
Press the Enter key.
Enter the password. The default setting for the password is private.
Press the Enter key.
You can change the user name and the password later in the Com-
mand Line Interface.
Please note that these entries are case-sensitive.
The start screen appears.
Copyright (c) 2004-2005 Hirschmann Automation and Control GmbH
All rights reserved
PowerMICE Release L3P-01.0.00-K16
(Build date 2005-10-31 19:32)
System Name: PowerMICE
Mgmt-IP : 149.218.112.105
1.Router-IP: 0.0.0.0
Base-MAC : 00:80:63:51:74:00
System Time: 2005-11-01 16:00:59
User:

Access to the user interfaces
12
1.2 Command Line Interface
Basic - L3P
Release 4.0 11/07
Figure 4: CLI screen after login
NOTE: Enter '?' for Command Help. Command help displays all options
that are valid for the 'normal' and 'no' command forms. For
the syntax of a particular command form, please consult the
documentation.
(Hirschmann PowerMICE) >