Hirschmann MS30, Power MICE, MACH 4000, OCTOPUS User manual

Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05
Technical Support
[email protected]
User Manual
Basic Configuration
Industrial ETHERNET Gigabit Switch
RS20/RS30, MS20/MS30, Power MICE, MACH 4000, OCTOPUS

The naming of copyrighted trademarks in this manual, even when not specially indicated, should
not be taken to mean that these names may be considered as free in the sense of the trademark
and tradename protection law and hence that they may be freely used by anyone.
© 2005 Hirschmann Automation and Control GmbH
Manuals and software are protected by copyright. All rights reserved. The copying, reproduction,
translation, conversion into any electronic medium or machine scannable form is not permitted,
either in whole or in part. An exception is the preparation of a backup copy of the software for
your own use.
The performance features described here are binding only if they have been expressly
guaranteed in the contract. This publication has been created by Hirschmann Automation and
Control GmbH according to the best of our knowledge. Hirschmann reserves the right to change
the contents of this manual without prior notice. Hirschmann can give no guarantee in respect
of the correctness or accuracy of the details in this publication.
Hirschmann can accept no responsibility for damages, resulting from the use of the network
components or the associated operating software. In addition, we refer to the conditions of use
specified in the license contract.
Printed in Germany (4.11.05)
Hirschmann Automation and Control GmbH
Stuttgarter Straße 45-51
72654 Neckartenzlingen
Tel. [phone]-0505

Contents
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05 3
Contents
About this Manual 9
Key 11
Introduction 13
1Access to the user interfaces 15
1.1 System monitor 16
1.2 Command Line Interface 19
1.3 Web based Interface 22
2Entering the IP parameters 25
2.1 Basics IP parameter 27
2.1.1 IP address (version 4) 27
2.1.2 Network mask 28
2.1.3 Example of how the network mask is used 30
2.2 Entering the IP parameters via CLI 32
2.3 Entering the IP parameters via HiDiscovery 35
2.4 Loading the system configuration from the ACA 37
2.5 System configuration via BOOTP 39
2.6 System configuration via DHCP 43
2.7 System Configuration via DHCP Option 82 46
2.8 System configuration via the Web-based Interface 47
2.9 Faulty Device Replacement 49

Contents
4Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05
3Loading/saving settings 51
3.1 Loading settings 52
3.1.1 Loading from the local non-volatile memory 53
3.1.2 Loading from the AutoConfiguration Adapter 53
3.1.3 Loading from a file 54
3.1.4 Resetting the configuration to the state on delivery 56
3.2 Saving settings 57
3.2.1 Saving Locally (and on the ACA) 57
3.2.2 Saving into a file 58
4Loading Software Updates 59
4.1 Loading the Software from the ACA 60
4.1.1 Swapping the software available 60
4.1.2 Starting the software 62
4.1.3 Performing a cold start 62
4.2 Loading the Software from the tftp Server 63
4.3 Loading Software via HTTP 65
5Configuring ports 67
6Protection from unauthorized access 69
6.1 Password for SNMP access 70
6.1.1 Description Password for SNMP access 70
6.1.2 Entering password for SNMP access 71
6.2 Setting Telnet/Web access 75
6.2.1 Description Telnet/Web access 75
6.2.2 Enabling/disabling Telnet/Web access 76
6.3 Disabling HiDiscovery function 77
6.3.1 Description HiDiscovery protocol 77
6.3.2 Disabling HiDiscovery function 78
6.4 Port access control 79
6.4.1 Description port access control 79
6.4.2 Defining port access control 80

Contents
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05 5
7Synchronizing the System Time of the Network 83
7.1 Entering the Time 84
7.2 SNTP 86
7.2.1 Descripton SNTP 86
7.2.2 Preparing the SNTP configuration 87
7.2.3 Configuring SNTP 88
7.3 Precison Time Protocol 91
7.3.1 Funtion description PTP 91
7.3.2 Preparing the PTP configuration 94
7.3.3 Configuring PTP 95
7.4 Interaction PTP and SNTP 99
8Traffic control 101
8.1 Directed frame forwarding 102
8.1.1 Store-and-forward 102
8.1.2 Multi-address capability 102
8.1.3 Aging of learned addresses 103
8.1.4 Entering static address entries 104
8.2 Multicast application 106
8.2.1 Description multicast application 106
8.2.2 Example of a multicast application 107
8.2.3 Description IGMP snooping 108
8.2.4 Setting multicast applications 108
8.3 Broadcast Limiter 111
8.3.1 Description Broadcast Limiter 111
8.3.2 Setting Broadcast Limiter 111
8.4 Prioritization 112
8.4.1 Description Prioritization 112
8.4.2 Strict Priority 113
8.4.3 Tagging 113
8.4.4 Setting Prioritization 115
8.5 Flow control 116
8.5.1 Description Flow control 116
8.5.2 Setting flow control 117

Contents
6Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05
8.6 VLANs 118
8.6.1 Description VLANs 118
8.6.2 Configuring VLANs 120
8.6.3 Setting up VLANs 122
8.6.4 Displaying the VLAN configuration 123
8.6.5 Deleting the VLAN settings 123
8.6.6 Example of a simple VLAN 123
9Operation Diagnostics 131
9.1 Sending traps 132
9.1.1 SNMP trap listing 133
9.1.2 SNMP traps when booting 134
9.1.3 Configuring traps 135
9.2 Out-of-band signaling 137
9.2.1 Manual setting the signal contact 138
9.2.2 Monitoring correct operation via the signal contact 139
9.3 Port status indication 141
9.4 Event counter on port level 143
9.5 Displaying the SFP Status 145
9.6 Topology discovery 146
9.6.1 Description Topology discovery 146
9.6.2 Displaying the topology discovery 148
9.7 Reports 150
9.8 Monitoring port traffic (port mirroring) 151
ASetting up DHCP Server and TFTP 153
A.1 Setting up DHCP/BOOTP Server 154
A.2 Setting up DHCP Server Option 82 160
A.3 tftp server for software updates 165
A.3.1 Setting up the tftp process 166
A.3.2 Software access rights 169

Contents
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05 7
BGeneral Information 171
B.1 Hirschmann Competence 172
B.2 FAQ 173
B.3 Management Information BASE MIB 174
B.4 Used abbreviations 177
B.5 List of RFC's 178
B.6 Based IEEE standards 180
B.7 Technical Data 181
B.8 Copyright of integrated software 182
B.8.1 Bouncy Castle Crypto APIs (Java) 182
B.8.2 LVL7 Systems, Inc. 182
B.9 Reader's comments 183
B.10 Index 185

Contents
8Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05

About this Manual
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05 9
About this Manual
The “Basic Configuration” user manual contains all the information you need
to start operating the switch. It takes you step by step from the first startup
operation through to the basic settings for operation in your environment.
The following thematic sequence has proven itself in practice:
DSet up device access for operation by entering the IP parameters
DCheck the status of the software and update it if necessary
DLoad/Save the configuration
DConfigure the ports
DSet up protection from unauthorized access
DOptimize the data transmission with network load control
DSynchronize system time in the network
DFunction diagnosis
The “Installation” user manual contains a device description, safety instructions,
a description of the display, and all the other information that you need to install
the device before you begin with the configuration of the device.
The “Redundancy Configuration” user manual contains all the information
you need to select a suitable redundancy procedure and configure it.
You will find detailed descriptions of how to operate the individual functions in
the “Web-based Interface” and “Command Line Interface” reference manuals
If you use Network Management Software HiVision you have further
opportunities to:
Dhave an event logbook.
Dconfigure the „System Location“ and „System Name“.
Dconfigure the network address range and SNMP parameters.
Dsave the configuration on the Switch.
Dsimultaneous configuration of several Switches.
Dconfigure the relevant ports to be displayed red if there is no link state.

About this Manual
10 Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05

Key
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05 11
Key
The designations used in this manual have the following meanings:
DList
VWork step
USubheading
Indicates a cross-reference with a stored link.
Note: A note emphasizes an important fact or draws your attention to
adependency.
Courier font ASCII representation in user interface
Symbols used:
Execution in the Web-based Interface user interface
Execution in the Command Line Interface user interface
Router
Switch
Bridge

Key
12 Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05
Hub
A random computer
Configuration computer
Server

Introduction
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05 13
Introduction
The Switch has been developed for practical application in a harsh industrial
environment. Accordingly, the installation process has been kept simple.
Thanks to the selected default settings, you only have to enter a few settings
before starting to operate the Switch.

Introduction
14 Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05

Access to the user interfaces
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05 15
1 Access to the user interfaces
The Switch has three user interfaces, which you can access via different
interfaces:
DSystem monitor via the V.24 interface (out-of-band)
DCommand Line Interface (CLI) via the V.24 connection (out-of-band) and
Telnet (in-band)
DWeb-based interface via Ethernet (in-band)

Access to the user interfaces
16
1.1 System monitor
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05
1.1 System monitor
The system monitor enables you to
Dselect the boot operating software,
Dupdate the operating software,
Dstart the selected operating software,
Dend the system monitor,
Derase the saved configuration and
Dshow the bootcode information.
UOpening the system monitor
VUsing a terminal cable (see accessories) connect the
– V.24 RJ11 socket to
– either a terminal or a COM port of a PC with terminal emulation
according to VT 100
(For the physical connection refer to the “Installation user manual“.).
VStart the terminal program on the PC, and establish a connection with
the Switch.
While booting the Switch the message „Press <1> to enter System
Monitor 1“ appears on the terminal.
Speed 9.600 Baud
Data 8 bit
Parity none
Stopbit 1 bit
Handshake off
Table 1: Data transfer parameters

Access to the user interfaces
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05
1.1 System monitor
17
Fig. 1: Screenshot during the boot process
VPress within one second the <1> key to start system monitor 1.
< PowerMICE MS4128-5 (Boot) Release: 1.00 Build: 2005-09-17 15:36 >
Press <1> to enter System Monitor 1 ...
1

Access to the user interfaces
18
1.1 System monitor
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05
Fig. 2: System monitor 1 screen display
VSelect the desired menu by entering the number.
VTo leave a sub menu and return to the main menu of system
monitor 1, press <ESC>.
System Monitor
(Selected OS: L3P-01.0.00-K16 (2005-10-31 19:32))
1 Select Boot Operating System
2 Update Operating System
3 Start Selected Operating System
4 End (reset and reboot)
5 Erase main configuration file
sysMon1>

Access to the user interfaces
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05
1.2 Command Line Interface
19
1.2 Command Line Interface
The Command Line Interface allows you to use all device functions via a local
or a remote connection.
The command line interface provides IT specialists with a familiar environ-
ment for configuring IT devices.
The script ability of the Command Line Interfaces allows to feed several
devices with identical configuration data.
For a detailed description of the Command Line Interface, see the Reference
Guide „Command Line Interface“.
The Command Line Interface can be accessed via
Dthe V.24 (out-of-band) port or
DTelnet (in-band).
Note: To facilitate making entries, the CLI offers the option of abreviating
keywords. Type in the first letters of the keyword. If you now press the Tab
key, the CLI will complete the keyword, i.e. add the remaining letters for you.
UOpening the Command Line Interface
VConnect the Switch via the V.24 interface to a terminal or to a COM
port of a PC with terminal emulation according to VT 100 and press
any key (see “Opening the system monitor” on page 16) or start the
Command Line Interface via Telnet.
A window in which you are asked to enter your username appears on
the screen.
A maximum of five users are permitted to access the Command Line
Interface.

Access to the user interfaces
20
1.2 Command Line Interface
Layer 2 Enhanced with Layer 2 Professional
Release 1.0 10/05
Fig. 3: Logging in to the Command Line Interface program
VEnter a username. The state on delivery value for the username is
admin. Press the Enter key.
VEnter the password. The state on delivery value for the password is
private. Press the Enter key.
You can change the username and the password later in the Com-
mand Line Interface.
Note that these entries are case-sensitive.
The start screen then appears.
Copyright (c) 2004-2005 Hirschmann Automation and Control GmbH
All rights reserved
PowerMICE Release L3P-01.0.00-K16
(Build date 2005-10-31 19:32)
System Name: PowerMICE
Mgmt-IP : 149.218.112.105
1.Router-IP: 0.0.0.0
Base-MAC : 00:80:63:51:74:00
System Time: 2005-11-01 16:00:59
User: