Hirschmann Power MICE User manual

Basic - L3P
Release 3.1 06/07
Technical Support
[email protected]
User Manual
Basic Configuration
Industrial ETHERNET Gigabit Switch
Power MICE, MACH 4000

The naming of copyrighted trademarks in this manual, even when not specially indicated, should
not be taken to mean that these names may be considered as free in the sense of the trademark
and tradename protection law and hence that they may be freely used by anyone.
© 2007 Hirschmann Automation and Control GmbH
Manuals and software are protected by copyright. All rights reserved. The copying, reproduction,
translation, conversion into any electronic medium or machine scannable form is not permitted,
either in whole or in part. An exception is the preparation of a backup copy of the software for
your own use. For devices with embedded software, the end-user license agreement on the
enclosed CD applies.
The performance features described here are binding only if they have been expressly
guaranteed in the contract. This publication has been created by Hirschmann Automation and
Control GmbH according to the best of our knowledge. Hirschmann reserves the right to change
the contents of this manual without prior notice. Hirschmann can give no guarantee in respect
of the correctness or accuracy of the details in this publication.
Hirschmann can accept no responsibility for damages, resulting from the use of the network
components or the associated operating software. In addition, we refer to the conditions of use
specified in the license contract.
Printed in Germany (9.7.07)
Hirschmann Automation and Control GmbH
Stuttgarter Straße 45-51
72654 Neckartenzlingen
Tel. [phone]-0607

Contents
Basic - L3P
Release 3.1 06/07 3
Contents
Contents 3
About this Manual 9
Key 11
Introduction 13
1 Access to the user interfaces 15
1.1 System monitor 16
1.2 Command Line Interface 19
1.3 Web based Interface 22
2 Entering the IP parameters 25
2.1 Basics IP parameter 27
2.1.1 IP address (version 4) 27
2.1.2 Network mask 28
2.1.3 Example of how the network mask is used 30
2.2 Entering the IP parameters via CLI 32
2.3 Entering the IP parameters via HiDiscovery 35
2.4 Loading the system configuration from the ACA 37
2.5 System configuration via BOOTP 39
2.6 System configuration via DHCP 43
2.7 System Configuration via DHCP Option 82 46
2.8 System configuration via the Web-based Interface 47
2.9 Faulty Device Replacement 49

Contents
4Basic - L3P
Release 3.1 06/07
3 Loading/saving settings 51
3.1 Loading settings 52
3.1.1 Loading from the local non-volatile memory 53
3.1.2 Loading from the AutoConfiguration Adapter 53
3.1.3 Loading from a file 54
3.1.4 Resetting the configuration to the state on delivery 56
3.2 Saving settings 57
3.2.1 Saving Locally (and on the ACA) 57
3.2.2 Saving into a file on URL 58
3.2.3 Saving into a binary file on the PC 59
3.2.4 Saving as script on the PC 59
4 Loading Software Updates 61
4.1 Loading the Software from the ACA 63
4.1.1 Swapping the software available 63
4.1.2 Starting the software 65
4.1.3 Performing a cold start 65
4.2 Loading the Software from the tftp Server 66
4.3 Loading Software via file selector 68
5 Configuring ports 69
6 Protection from unauthorized access 73
6.1 Password for SNMP access 74
6.1.1 Description Password for SNMP access 74
6.1.2 Entering password for SNMP access 75
6.2 Setting Telnet/Web/SSH access 79
6.2.1 Description Telnet/Web access 79
6.2.2 Description Web access 79
6.2.3 Description of SSH access 80
6.2.4 Enabling/disabling Telnet/Web/SSH access 81
6.3 Disabling HiDiscovery function 82
6.3.1 Description HiDiscovery protocol 82
6.3.2 Disabling HiDiscovery function 83
6.4 Port access control 84
6.4.1 Description port access control 84
6.4.2 Defining port access control 85

Contents
Basic - L3P
Release 3.1 06/07 5
6.5 Port Authentication 87
6.5.1 Description Port-Based Network Access Control (802.1X) 87
6.5.2 Authentication process 88
6.5.3 Preparing the switch for the 802.1X port authentication 88
6.5.4 Setting 802.1X 89
6.6 Access Control Lists (ACL) 90
6.6.1 Description of IP-based ACLs 91
6.6.2 Description of MAC-based ACLs 92
6.6.3 Configuring IP ACLs 94
6.6.4 Configuring MAC ACLs 95
6.6.5 Configuring priorities with IP ACLs 97
6.6.6 Specifying the sequence of the rules 100
7 Synchronizing the System Time of the Network 103
7.1 Entering the Time 104
7.2 SNTP 106
7.2.1 Descripton SNTP 106
7.2.2 Preparing the SNTP configuration 107
7.2.3 Configuring SNTP 108
7.3 Precison Time Protocol 111
7.3.1 Funtion description PTP 111
7.3.2 Preparing the PTP configuration 114
7.3.3 Configuring PTP 115
7.4 Interaction PTP and SNTP 118
8 Traffic control 121
8.1 Directed frame forwarding 122
8.1.1 Store-and-forward 122
8.1.2 Multi-address capability 122
8.1.3 Aging of learned addresses 123
8.1.4 Entering static address entries 124
8.1.5 Disabling the specific packet distribution 125
8.2 Multicast application 126
8.2.1 Description multicast application 126
8.2.2 Example of a multicast application 127
8.2.3 Description IGMP snooping 128
8.2.4 Description GMRP 129
8.2.5 Setting multicast applications 129

Contents
6Basic - L3P
Release 3.1 06/07
8.3 Rate Limiter 133
8.3.1 Description Rate Limiter 133
8.3.2 Setting Rate Limiter for MACH 4000 and Power MICE 133
8.4 Prioritization 135
8.4.1 Description Prioritization 135
8.4.2 Tagging 136
8.4.3 IP ToS / DiffServ 139
8.4.4 Handling of received priority information 142
8.4.5 Handling of priority classes 142
8.4.6 Setting Prioritization 144
8.5 Flow control 149
8.5.1 Description Flow control 149
8.5.2 Setting flow control 150
8.6 VLANs 151
8.6.1 Description VLANs 151
8.6.2 Configuring VLANs 154
8.6.3 Setting up VLANs 156
8.6.4 Displaying the VLAN configuration 157
8.6.5 Deleting the VLAN settings 157
8.6.6 Example of a simple VLAN 158
9 Operation Diagnostics 165
9.1 Sending traps 166
9.1.1 SNMP trap listing 167
9.1.2 SNMP traps when booting 168
9.1.3 Configuring traps 168
9.2 Monitoring Device Status 171
9.3 Out-of-band signaling 174
9.3.1 Manual setting the signal contact 175
9.3.2 Monitoring correct operation via the signal contact 176
9.3.3 Monitoring the Device Status with a signal contact 177
9.4 Port status indication 178
9.5 Event counter on port level 180
9.6 Displaying the SFP Status 182
9.7 TP cable diagnosis 183

Contents
Basic - L3P
Release 3.1 06/07 7
9.8 Topology discovery 184
9.8.1 Description Topology discovery 184
9.8.2 Displaying the topology discovery 186
9.9 IP Address Conflict Detection 188
9.9.1 Description of IP address conflicts 188
9.9.2 Configuring ACD 189
9.9.3 Displaying ACD 189
9.10 Reports 191
9.11 Monitoring port traffic (port mirroring) 193
Apendix A:Setting up the configuration environment 195
A.1 Setting up DHCP/BOOTP Server 196
A.2 Setting up DHCP Server Option 82 202
A.3 tftp server for software updates 207
A.3.1 Setting up the tftp process 208
A.3.2 Software access rights 211
A.4 Preparing for access via SSH 212
A.4.1 Creating a key 212
A.4.2 Uploading the key 214
A.4.3 Access via SSH 215
Appendix B:General Information 217
B.1 Hirschmann Competence 218
B.2 FAQ 219
B.3 Management Information BASE MIB 220
B.4 Used abbreviations 223
B.5 List of RFC's 224
B.6 Based IEEE standards 226
B.7 Technical Data 227
B.8 Copyright of integrated software 228
B.8.1 Bouncy Castle Crypto APIs (Java) 228
B.8.2 LVL7 Systems, Inc. 228
B.9 Reader's comments 229

Contents
8Basic - L3P
Release 3.1 06/07
Appendix C:Index 231

About this Manual
Basic - L3P
Release 3.1 06/07 9
About this Manual
The “Basic Configuration” user manual contains all the information you need
to start operating the switch. It takes you step by step from the first startup
operation through to the basic settings for operation in your environment.
The following thematic sequence has proven itself in practice:
DSet up device access for operation by entering the IP parameters
DCheck the status of the software and update it if necessary
DLoad/Save the configuration
DConfigure the ports
DSet up protection from unauthorized access
DOptimize the data transmission with network load control
DSynchronize system time in the network
DFunction diagnosis
The “Installation” user manual contains a device description, safety instructions,
a description of the display, and all the other information that you need to install
the device before you begin with the configuration of the device.
The “Redundancy Configuration” user manual contains all the information
you need to select a suitable redundancy procedure and configure it.
The “Industrial Protocols” user manual describes how the Switch is
connected by means of a communication protocol commonly used in the
industry, such as EtherNet/IP or PROFINET.
The “Routing Configuration” user manual contains all the information you
need to start operating the routing function. It takes you step by step from
asmall router application through to the router configuration of a complex
network.
The manual enables you to configure your router by following the examples.

About this Manual
10 Basic - L3P
Release 3.1 06/07
You will find detailed descriptions of how to operate the individual functions in
the “Web-based Interface” and “Command Line Interface” reference manuals.
If you use Network Management Software HiVision you have further
opportunities to:
Dhave an event logbook.
Dconfigure the „System Location“ and „System Name“.
Dconfigure the network address range and SNMP parameters.
Dsave the configuration on the Switch.
Dsimultaneous configuration of several Switches.
Dconfigure the relevant ports to be displayed red if there is no link state.

Key
Basic - L3P
Release 3.1 06/07 11
Key
The designations used in this manual have the following meanings:
DList
VWork step
USubheading
Indicates a cross-reference with a stored link.
Note: A note emphasizes an important fact or draws your attention to
adependency.
Courier font ASCII representation in user interface
Symbols used:
Execution in the Web-based Interface user interface
Execution in the Command Line Interface user interface
Router
Switch
Bridge

Key
12 Basic - L3P
Release 3.1 06/07
Hub
A random computer
Configuration computer
Server

Introduction
Basic - L3P
Release 3.1 06/07 13
Introduction
The Switch has been developed for practical application in a harsh industrial
environment. Accordingly, the installation process has been kept simple.
Thanks to the selected default settings, you only have to enter a few settings
before starting to operate the Switch.

Introduction
14 Basic - L3P
Release 3.1 06/07

Access to the user interfaces
Basic - L3P
Release 3.1 06/07 15
1 Access to the user interfaces
The Switch has three user interfaces, which you can access via different
interfaces:
DSystem monitor via the V.24 interface (out-of-band)
DCommand Line Interface (CLI) via the V.24 connection (out-of-band) and
Telnet (in-band)
DWeb-based interface via Ethernet (in-band)

Access to the user interfaces
16
1.1 System monitor
Basic - L3P
Release 3.1 06/07
1.1 System monitor
The system monitor enables you to
Dselect the boot operating software,
Dupdate the operating software,
Dstart the selected operating software,
Dend the system monitor,
Derase the saved configuration and
Dshow the bootcode information.
UOpening the system monitor
VUsing a terminal cable (see accessories) connect the
– V.24 RJ11 socket to
– either a terminal or a COM port of a PC with terminal emulation
according to VT 100
(For the physical connection refer to the “Installation user manual“.).
VStart the terminal program on the PC, and establish a connection with
the Switch.
While booting the Switch the message „Press <1> to enter System
Monitor 1“ appears on the terminal.
Speed 9.600 Baud
Data 8 bit
Parity none
Stopbit 1 bit
Handshake off
Table 1: Data transfer parameters

Access to the user interfaces
Basic - L3P
Release 3.1 06/07
1.1 System monitor
17
Fig. 1: Screenshot during the boot process
VPress within one second the <1> key to start system monitor 1.
< PowerMICE MS4128-5 (Boot) Release: 1.00 Build: 2005-09-17 15:36 >
Press <1> to enter System Monitor 1 ...
1

Access to the user interfaces
18
1.1 System monitor
Basic - L3P
Release 3.1 06/07
Fig. 2: System monitor 1 screen display
VSelect the desired menu by entering the number.
VTo leave a sub menu and return to the main menu of system
monitor 1, press <ESC>.
System Monitor
(Selected OS: L3P-01.0.00-K16 (2005-10-31 19:32))
1 Select Boot Operating System
2 Update Operating System
3 Start Selected Operating System
4 End (reset and reboot)
5 Erase main configuration file
sysMon1>

Access to the user interfaces
Basic - L3P
Release 3.1 06/07
1.2 Command Line Interface
19
1.2 Command Line Interface
The Command Line Interface allows you to use all device functions via a local
or a remote connection.
The command line interface provides IT specialists with a familiar environ-
ment for configuring IT devices.
The script ability of the Command Line Interfaces allows to feed several
devices with identical configuration data.
For a detailed description of the Command Line Interface, see the Reference
Guide „Command Line Interface“.
The Command Line Interface can be accessed via
Dthe V.24 (out-of-band) port or
DTelnet (in-band),
DSSH (in-band).
Note: To facilitate making entries, the CLI offers the option of abreviating
keywords. Type in the first letters of the keyword. If you now press the Tab
key, the CLI will complete the keyword, i.e. add the remaining letters for you.
UOpening the Command Line Interface
VConnect the Switch via the V.24 interface to a terminal or to a COM
port of a PC with terminal emulation according to VT 100 and press
any key (see “Opening the system monitor” on page 16) or start the
Command Line Interface via Telnet.
A window in which you are asked to enter your username appears on
the screen.
A maximum of five users are permitted to access the Command Line
Interface.

Access to the user interfaces
20
1.2 Command Line Interface
Basic - L3P
Release 3.1 06/07
Fig. 3: Logging in to the Command Line Interface program
VEnter a username. The state on delivery value for the username is
admin. Press the Enter key.
VEnter the password. The state on delivery value for the password is
private. Press the Enter key.
You can change the username and the password later in the Com-
mand Line Interface.
Note that these entries are case-sensitive.
The start screen then appears.
Copyright (c) 2004-2005 Hirschmann Automation and Control GmbH
All rights reserved
PowerMICE Release L3P-01.0.00-K16
(Build date 2005-10-31 19:32)
System Name: PowerMICE
Mgmt-IP : 149.218.112.105
1.Router-IP: 0.0.0.0
Base-MAC : 00:80:63:51:74:00
System Time: 2005-11-01 16:00:59
User: