Hirschmann MACH 4000 Series User manual

RM Web
Release 6.0 07/2010
Technical Support
[email protected]
Reference Manual
Web-based Interface
Industrial ETHERNET (Gigabit) Switch
PowerMICE, MACH 1040, MACH 4000

The naming of copyrighted trademarks in this manual, even when not specially indicated, should
not be taken to mean that these names may be considered as free in the sense of the trademark
and tradename protection law and hence that they may be freely used by anyone.
© 2010Hirschmann Automation and Control GmbH
Manuals and software are protected by copyright. All rights reserved. The copying, reproduction,
translation, conversion into any electronic medium or machine scannable form is not permitted,
either in whole or in part. An exception is the preparation of a backup copy of the software for
your own use. For devices with embedded software, the end-user license agreement on the
enclosed CD applies.
The performance features described here are binding only if they have been expressly agreed
when the contract was made. This document was produced by Hirschmann Automation and
Control GmbH according to the best of the company's knowledge. Hirschmann reserves the right
to change the contents of this document without prior notice. Hirschmann can give no guarantee
in respect of the correctness or accuracy of the information in this document.
Hirschmann can accept no responsibility for damages, resulting from the use of the network
components or the associated operating software. In addition, we refer to the conditions of use
specified in the license contract.
You can get the latest version of this manual on the Internet at the Hirschmann product site
(www.hirschmann-ac.de).
Printed in Germany
Hirschmann Automation and Control GmbH
Stuttgarter Str. 45-51
72654 Neckartenzlingen
Germany
Tel.: [phone]
Rel. 6.0 1-01-07/2010 – 14.7.10

Contents
About this Manual 9
Key 11
Opening the Web-based Interface 13
1 Basic Settings 17
1.1 System 18
1.2 Network 24
1.3 Software 26
1.3.1 View the software versions present on the device 26
1.3.2 TFTP Software Update 27
1.3.3 HTTP Software Update 27
1.3.4 Automatic software update by ACA 28
1.4 Port Configuration 29
1.5 Power over ETHERNET 31
1.6 Loading/Saving the Configuration 33
1.6.1 Loading the configuration 34
1.6.2 Saving the Configuration 34
1.6.3 URL 35
1.6.4 Deleting a configuration 35
1.6.5 Using the AutoConfiguration Adapter (ACA) 36
1.6.6 Canceling a configuration change 38
1.7 Restart 39
2 Security 41
2.1 Password / SNMPv3 access 42
2.2 SNMPv1/v2 Access Settings 45
2.3 Telnet/Web/SSH Access 48
2.3.1 Description of Telnet Access 49
2.3.2 Description of Web Access 49
2.3.3 Description of SSH Access 50
2.4 Restricted Management Access 51
2.5 Port Security 54

Contents
4RM Web
Release 6.0 07/2010
2.6 IEEE 802.1X Port Authentication 57
2.6.1 IEEE 802.1X Global 57
2.6.2 IEEE 802.1X Port Configuration 59
2.6.3 IEEE 802.1X Port Statistics 62
2.6.4 RADIUS Server Settings for IEEE 802.1X 64
3Time 67
3.1 SNTP configuration 69
3.2 PTP (IEEE 1588) 73
3.2.1 PTP Global (MS20/MS30, PowerMICE, MACH 104,
MACH 1040) 74
3.2.2 PTP Version 1 (MS20/MS30, PowerMICE,
MACH 104, MACH 1040) 78
3.2.3 PTP Version 2 (BC) (MS20/MS30, PowerMICE,
MACH 104, MACH 1040) 80
3.2.4 PTP Version 2 (TC) (MS20/MS30, PowerMICE) 85
4 Switching 89
4.1 Switching Global 90
4.2 Filters for MAC addresses 94
4.3 Rate Limiter 96
4.4 Multicasts 98
4.4.1 IGMP (Internet Group Management Protocol) 98
4.4.2 GMRP (GARP Multicast Registration Protocol) 105
4.5 VLAN 108
4.5.1 VLAN Global 108
4.5.2 Current VLAN 111
4.5.3 VLAN Static 113
4.5.4 VLAN Port 115
5 QoS/Priority 119
5.1 Global 120
5.2 Port Configuration 122
5.2.1 Entering the port priority 123
5.2.2 Selecting the trust mode 123
5.2.3 Displaying the untrusted traffic class 124
5.2.4 Shaping rate 125
5.3 802.1D/p mapping 126
5.4 IP DSCP mapping 128

Contents
RM Web L3E
Release 6.0 07/2010 5
5.5 Queue Management 130
5.5.1 Strict Priority 131
5.5.2 Weighted Fair Queuing 131
5.5.3 Maximum bandwidth 132
6 Routing 133
6.1 Routing Global 134
6.2 Configuring Router Interfaces 135
6.2.1 Configuration 135
6.2.2 Configuring secondary addresses 138
6.3 ARP 139
6.3.1 Setting ARP parameters 140
6.3.2 ARP statistics display 141
6.3.3 ARP table display 141
6.3.4 Editing the ARP table 142
6.4 Router Discovery Configuration 144
6.5 RIP 145
6.5.1 Configuration 145
6.5.2 Route distribution 147
6.5.3 Statistics 148
6.6 Routing table 150
6.6.1 Current 150
6.6.2 Static 151
6.6.3 Preferences 152
6.7 Tracking 154
6.7.1 Configuration 154
6.7.2 Applications 156
7 Redundancy 157
7.1 Link Aggregation 158
7.2 Ring Redundancy 161
7.2.1 Configuring the HIPER-Ring 163
7.2.2 Configuring the MRP-Ring 167
7.3 Sub-Ring 170
7.3.1 Sub-Ring configuration 171
7.3.2 Sub-Ring - New Entry 174
7.4 Ring/Network Coupling 176
7.4.1 Preparing a Ring/Network coupling 176
7.5 Spanning Tree 183

Contents
6RM Web
Release 6.0 07/2010
7.5.1 Global 185
7.5.2 MSTP (Multiple Spanning Tree) 192
7.5.3 Port 198
7.6 VRRP/HiVRRP 208
7.6.1 VRRP/HiVRRP configuration 208
7.6.2 HiVRRP domains 213
7.6.3 Statistics 214
7.6.4 Tracking 216
8 Advanced 219
8.1 DHCP Relay Agent 220
8.2 DHCP Server 222
8.2.1 Global 222
8.2.2 Pool 224
8.2.3 Lease Table 228
8.3 Industrial Protocols 230
8.3.1 PROFINET IO 230
8.3.2 EtherNet/IP 232
8.4 Command Line 233
9 Diagnostics 235
9.1 Syslog 236
9.2 Event Log 241
9.3 Ports 242
9.3.1 Statistics table 242
9.3.2 Utilization 243
9.3.3 SFP modules 245
9.3.4 TP Cable Diagnosis 246
9.4 Configuration Check 248
9.5 Topology Discovery 250
9.6 Port Mirroring 252
9.7 Device Status 254
9.8 Signal contact 257
9.8.1 Manual setting 257
9.8.2 Function monitoring 257
9.8.3 Device status 259
9.8.4 Configuring traps 259
9.9 Alarms (Traps) 261

Contents
RM Web L3E
Release 6.0 07/2010 7
9.10 Report 264
9.11 IP address conflict detection 266
9.12 Self Test 268
A Appendix 269
B Readers’ Comments 278
C Index 281
D Further Support 285

Contents
8RM Web
Release 6.0 07/2010

About this Manual
RM Web L3E
Release 6.0 07/2010 9
About this Manual
The "Web-based Interface" reference manual contains detailed information
on using the Web interface to operate the individual functions of the device.
The "Command Line Interface" reference manual contains detailed
information on using the Command Line Interface to operate the individual
functions of the device.
The “Installation” user manual contains a device description, safety
instructions, a description of the display, and the other information that you
need to install the device.
The “Basic Configuration” user manual contains the information you need to
start operating the device. It takes you step by step from the first startup
operation through to the basic settings for operation in your environment.
The “Industry Protocols” user manual describes how the device is connected
by means of a communication protocol commonly used in the industry, such
as EtherNet/IP or PROFINET IO.
The “Routing Configuration” user manual contains all the information you
need to start operating the routing function. It takes you step by step from
a small router application through to the router configuration of a complex
network.
The manual enables you to configure your router by following the examples.

About this Manual
10 RM Web
Release 6.0 07/2010
The Network Management Software HiVision/Industrial HiVision provides
you with additional options for smooth configuration and monitoring:
XConfiguration of multiple devices simultaneously.
XGraphical interface with network layouts.
XAuto-topology discovery.
XEvent log.
XEvent handling.
XClient / Server structure.
XBrowser interface
XActiveX control for SCADA integration
XSNMP/OPC gateway

Key
RM Web L3E
Release 6.0 07/2010 11
Key
The designations used in this manual have the following meanings:
Symbols used:
XList
Work step
Subheading
Link Indicates a cross-reference with a stored link
Note: A note emphasizes an important fact or draws your
attention to a dependency.
Courier ASCII representation in user interface
WLAN access point
Router with firewall
Switch with firewall
Router
Switch
Bridge

Key
12 RM Web
Release 6.0 07/2010
Hub
A random computer
Configuration Computer
Server
PLC -
Programmable logic
controller
I/O -
Robot

Opening the Web-based Interface
RM Web L3E
Release 6.0 07/2010 13
Opening the Web-based Interface
To open the Web-based interface, you need a Web browser (a program that
can read hypertext), for example Mozilla Firefox version 1 or later, or
Microsoft Internet Explorer version 6 or later.
Note: The Web-based interface uses Java software 6 (“Java™ Runtime
Environment Version 1.6.x”).
Install the software from the enclosed CD-ROM. To do this, you go to
“Additional Software”, select Java Runtime Environment and click on
“Installation”.
Figure 1: Installing Java
Start your Web browser.
Check that you have activated JavaScript and Java in your browser
settings.
Establish the connection by entering the IP address of the device which
you want to administer via the Web-based management in the address
field of the Web browser. Enter the address in the following form:
http://xxx.xxx.xxx.xxx

Opening the Web-based Interface
14 RM Web
Release 6.0 07/2010
The login window appears on the screen.
Figure 2: Login window
Select the desired language.
In the drop-down menu "Login", you select
– user, to have read access, or
– admin, to have read and write access
to the device.
The password “public”, with which you have read access for the login
"user", is preset in the password field. If you wish to have write access to
the device, use the login "admin", select the contents of the password field
and overwrite it with the password “private” (default setting).
Click on OK.
The Web site of the device appears on the screen.

Opening the Web-based Interface
RM Web L3E
Release 6.0 07/2010 15
Note: The changes you make in the dialogs will be copied to the device when
you click “Set”. Click “Reload” to update the display.
To save any changes made so that they will be retained after a power cycle
or reboot of the device use the save option on the "Load/Save" dialog (see
on page 33 “Loading/Saving the Configuration“)
Note: You can block your access to the device by entering an incorrect
configuration.
Activating the function “Cancel configuration change” in the “Load/Save”
dialog enables you to return automatically to the last configuration after a set
time period has elapsed. This gives you back your access to the device.
Figure 3: Website of the device with speech-bubble help

Opening the Web-based Interface
16 RM Web
Release 6.0 07/2010
The menu section displays the menu items. By placing the mouse pointer in
the menu section and clicking the alternate mouse button you can use “Back”
to return to a menu item you have already selected, or “Forward” to jump to
a menu item you have already selected.

Basic Settings
RM Web L3E
Release 6.0 07/2010 17
1 Basic Settings
The Basic Settings menu contains the dialogs, displays and tables for the
basic configuration:
XSystem
XNetwork
XSoftware
XPort configuration
XPower over Ethernet
XLoad/Save
XRestart

Basic Settings
18
1.1 System
RM Web
Release 6.0 07/2010
1.1 System
The “System“ submenu in the basic settings menu is structured as follows:
XDevice Status
XSystem data
XDevice view
XReloading data
Figure 4: "System" Submenu
Device Status
This section of the website provides information on the device status and
the alarm states the device has detected.

Basic Settings
RM Web L3E
Release 6.0 07/2010
1.1 System
19
Figure 5: Device status and display of detected alarms
1 - Symbol indicates the Device Status
2 - Cause of the oldest existing alarm detected
3 - Time of the oldest existing alarm detected
System Data
This area of the website displays the system parameters of the device.
Here you can change
– the system name,
– the location description,
– the name of the contact person for this device,
– the availability of the media modules (see fig. 6)
– the temperature threshold values.
132

Basic Settings
20
1.1 System
RM Web
Release 6.0 07/2010
Name Meaning
Name System name of this device
Location Location of this device
Contact The contact for this device
Basic module Hardware version of the device
Media module 1 Hardware version of media module 1
Media module 2 Hardware version of media module 2
Media module 3 Hardware version of media module 3
Media module 4 Hardware version of media module 4
Media module 5 Hardware version of media module 5
Media module 6 Hardware version of media module 6
Media module 7 Hardware version of media module 7
Power supply (P1/P2) Status of power units (P1/P2)
Power supply 3-1/3-2 Status of power units 3-1/3-2
Power supply 4-1/4-2 Status of power units 4-1/4-2
Fan Status of fans
Uptime Time that has elapsed since this device was last restarted.
Temperature Temperature of the device. Lower/upper temperature
threshold values. If the temperature goes outside this range,
the device generates an alarm.
Table 1: System Data