Hirschmann PowerMICE User manual

UM Basic Configuration L3P
Release 7.1 12/2011
Technical Support
[email protected]
User Manual
Basic Configuration
Industrial ETHERNET (Gigabit) Switch
PowerMICE, MACH 1040, MACH 4000

The naming of copyrighted trademarks in this manual, even when not specially indicated, should
not be taken to mean that these names may be considered as free in the sense of the trademark
and tradename protection law and hence that they may be freely used by anyone.
© 2011 Hirschmann Automation and Control GmbH
Manuals and software are protected by copyright. All rights reserved. The copying, reproduction,
translation, conversion into any electronic medium or machine scannable form is not permitted,
either in whole or in part. An exception is the preparation of a backup copy of the software for
your own use. For devices with embedded software, the end-user license agreement on the
enclosed CD applies.
The performance features described here are binding only if they have been expressly agreed
when the contract was made. This document was produced by Hirschmann Automation and
Control GmbH according to the best of the company's knowledge. Hirschmann reserves the right
to change the contents of this document without prior notice. Hirschmann can give no guarantee
in respect of the correctness or accuracy of the information in this document.
Hirschmann can accept no responsibility for damages, resulting from the use of the network
components or the associated operating software. In addition, we refer to the conditions of use
specified in the license contract.
You can get the latest version of this manual on the Internet at the Hirschmann product site
(www.beldensolutions.com).
Printed in Germany
Hirschmann Automation and Control GmbH
Stuttgarter Str. 45-51
72654 Neckartenzlingen
Germany
Tel.: [phone]
Rel. 2011 12/2011 - 13.12.11

Contents
UM Basic Configuration L3P
Release 7.1 12/2011 3
Contents
About this Manual 9
Key 11
Introduction 13
1 Access to the user interfaces 15
1.1 System Monitor 16
1.2 Command Line Interface 18
1.3 Web-based Interface 21
2 Entering the IP Parameters 25
2.1 IP Parameter Basics 27
2.1.1 IP address (version 4) 27
2.1.2 Netmask 28
2.1.3 Classless Inter-Domain Routing 31
2.2 Entering IP parameters via CLI 33
2.3 Entering the IP Parameters via HiDiscovery 36
2.4 Loading the system configuration from the ACA 39
2.5 System configuration via BOOTP 41
2.6 System Configuration via DHCP 46
2.7 System Configuration via DHCP Option 82 49
2.8 Web-based IP Configuration 50
2.9 Faulty Device Replacement 53
3 Loading/saving settings 55
3.1 Loading settings 56
3.1.1 Loading from the local non-volatile memory 57
3.1.2 Loading from a file 58
3.1.3 Resetting the configuration to the state on delivery 60
3.1.4 Loading from the AutoConfiguration Adapter 61
3.1.5 Using the offline configurator 62
3.2 Saving settings 64

Contents
4UM Basic Configuration L3P
Release 7.1 12/2011
3.2.1 Saving locally (and on the ACA) 64
3.2.2 Saving in a binary file or a script file on a URL 66
3.2.3 Saving to a binary file on the PC 67
3.2.4 Saving as a script on the PC 68
3.2.5 Saving as an offline configuration file on the PC 68
4 Loading Software Updates 69
4.1 Loading the Software manually from the ACA 71
4.1.1 Selecting the software to be loaded 72
4.1.2 Starting the software 74
4.1.3 Performing a cold start 74
4.2 Automatic software update by ACA 75
4.3 Loading the software from the tftp server 77
4.4 Loading the Software via File Selection 79
5 Configuring the Ports 81
6 Assistance in the Protection from Unauthorized
Access 87
6.1 Protecting the device 88
6.2 Password for SNMP access 89
6.2.1 Description of password for SNMP access 89
6.2.2 Entering the password for SNMP access 90
6.3 Telnet/internet/SSH access 94
6.4 Restricted Management Access 99
6.5 HiDiscovery Access 101
6.5.1 Description of the HiDiscovery Protocol 101
6.5.2 Enabling/disabling the HiDiscovery function 101
6.6 Port access control 102
6.6.1 Description of the port access control 102
6.6.2 Application Example for Port Access Control 103
6.7 Port Authentication IEEE 802.1X 106
6.7.1 Description of Port Authentication according to
IEEE 802.1X 106
6.7.2 Authentication Process according to IEEE 802.1X 107
6.7.3 Preparing the Device for the
IEEE 802.1X Port Authentication 107
6.7.4 IEEE 802.1X Settings 108
6.8 Access Control Lists (ACL) 109

Contents
UM Basic Configuration L3P
Release 7.1 12/2011 5
6.8.1 Description of prioritizing with ACLs 110
6.8.2 Description of IP-based ACLs 111
6.8.3 Description of MAC-based ACLs 112
6.8.4 Configuring IP ACLs 114
6.8.5 Configuring MAC ACLs 116
6.8.6 Configuring Priorities with IP ACLs 117
6.8.7 Specifying the Sequence of the Rules 119
7 Synchronizing the System Time in the Network 121
7.1 Entering the Time 122
7.2 SNTP 125
7.2.1 Description of SNTP 125
7.2.2 Preparing the SNTP Configuration 126
7.2.3 Configuring SNTP 127
7.3 Precision Time Protocol 131
7.3.1 Description of PTP Functions 131
7.3.2 Preparing the PTP Configuration 137
7.3.3 Application Example 139
7.4 Interaction of PTP and SNTP 145
8 Network Load Control 147
8.1 Direct Packet Distribution 148
8.1.1 Store-and-forward 148
8.1.2 Multi-Address Capability 149
8.1.3 Aging of Learned Addresses 149
8.1.4 Entering Static Addresses 150
8.1.5 Disabling the Direct Packet Distribution 152
8.2 Multicast Application 153
8.2.1 Description of the Multicast Application 153
8.2.2 Example of a Multicast Application 154
8.2.3 Description of IGMP Snooping 155
8.2.4 Setting IGMP Snooping 156
8.2.5 Description of GMRP 162
8.2.6 Setting GMRP 163
8.3 Rate Limiter 165
8.3.1 Description of the Rate Limiter 165
8.3.2 Load limiter settings (PowerMICE and MACH 4000) 166
8.3.3 Load limiter settings 166
8.4 QoS/Priority 168
8.4.1 Description of Prioritization 168
8.4.2 VLAN tagging 169
8.4.3 IP ToS / DiffServ 171

Contents
6UM Basic Configuration L3P
Release 7.1 12/2011
8.4.4 Management prioritization 174
8.4.5 Handling of Received Priority Information 175
8.4.6 Handling of Traffic Classes 175
8.4.7 Setting prioritization 178
8.5 Flow Control 184
8.5.1 Description of Flow Control 184
8.5.2 Setting the Flow Control 186
8.6 VLANs 187
8.6.1 VLAN Description 187
8.6.2 Examples of VLANs 188
8.6.3 Double VLAN Tagging 203
9 Operation Diagnosis 209
9.1 Sending Traps 210
9.1.1 List of SNMP traps 211
9.1.2 SNMP Traps during Boot 212
9.1.3 Configuring Traps 213
9.2 Monitoring the Device Status 215
9.2.1 Configuring the Device Status 216
9.2.2 Displaying the Device Status 217
9.3 Out-of-band Signaling 218
9.3.1 Controlling the Signal Contact 219
9.3.2 Monitoring the Device Status via the Signal Contact 219
9.3.3 Monitoring the Device Functions via the Signal
Contact 220
9.3.4 Monitoring the Fan 222
9.4 Port Status Indication 224
9.5 Event Counter at Port Level 226
9.5.1 Detecting Non-matching Duplex Modes 228
9.6 Displaying the SFP Status 231
9.7 TP Cable Diagnosis 232
9.8 Topology Discovery 233
9.8.1 Description of Topology-Detection 233
9.8.2 Displaying the Topology Discovery Results 235
9.9 Detecting IP Address Conflicts 236
9.9.1 Description of IP Address Conflicts 236
9.9.2 Configuring ACD 237
9.9.3 Displaying ACD 237
9.10 Detecting Loops 238
9.11 Reports 239

Contents
UM Basic Configuration L3P
Release 7.1 12/2011 7
9.12 Monitoring Data Traffic at Ports (Port Mirroring) 241
9.13 Syslog 244
9.14 Event Log 247
10 EtherNet/IP 249
10.1 Integration into a Control System 251
10.2 EtherNet/IP Parameters 255
10.2.1 Identity Object 255
10.2.2 TCP/IP Interface Object 256
10.2.3 Ethernet Link Object 258
10.2.4 Ethernet Switch Agent Object 261
10.2.5 RSTP Bridge Object 264
10.2.6 RSTP Port Object 266
10.2.7 I/O Data 268
10.2.8 Assignment of the Ethernet Link Object Instances 269
10.2.9 Supported Services 270
A Setting up the Configuration Environment 271
A.1 Setting up a DHCP/BOOTP Server 272
A.2 Setting up a DHCP Server with Option 82 278
A.3 TFTP Server for Software Updates 282
A.3.1 Setting up the tftp Process 283
A.3.2 Software Access Rights 286
A.4 Preparing access via SSH 287
A.4.1 Generating a key 287
A.4.2 Uploading the key 289
A.4.3 Access through an SSH 290
B General Information 293
B.1 Management Information Base (MIB) 294
B.2 Abbreviations used 297
B.3 Technical Data 298
B.4 Readers’ Comments 299
C Index 301
D Further Support 305

Contents
8UM Basic Configuration L3P
Release 7.1 12/2011

About this Manual
UM Basic Configuration L3P
Release 7.1 12/2011 9
About this Manual
The “Basic Configuration” user manual contains the information you need to
start operating the device. It takes you step by step from the first startup
operation through to the basic settings for operation in your environment.
The following thematic sequence has proven itself in practice:
Set up device access for operation by entering the IP parameters
Check the status of the software and update it if necessary
Load/store any existing configuration
Configure the ports
Set up protection from unauthorized access
Optimize the data transmission with network load control
Synchronize system time in the network
Perform an operation diagnosis
Store the newly created configuration in the non-volatile memory.
The “Installation” user manual contains a device description, safety
instructions, a description of the display, and the other information that you
need to install the device.
The “Redundancy Configuration User Manual” document contains the
information you require to select the suitable redundancy procedure and
configure it.
The “Industry Protocols” user manual describes how the device is connected
by means of a communication protocol commonly used in the industry, such
as EtherNet/IP and PROFINET IO.

About this Manual
10 UM Basic Configuration L3P
Release 7.1 12/2011
The “Routing Configuration User Manual” document contains the information
you need to start operating the routing function. It takes you step-by-step
from a small router application through to the router configuration of a
complex network.
The manual enables you to configure your router by following the examples.
The “GUI” reference manual contains detailed information on using the
graphical interface to operate the individual functions of the device.
The “Command Line Interface” Reference Manual contains detailed
information on using the Command Line Interface to operate the individual
functions of the device.
The Industrial HiVision Network Management Software provides you with
additional options for smooth configuration and monitoring:
Simultaneous configuration of multiple devices
Graphic interface with network layout
Auto-topology discovery
Event log
Event handling
Client/server structure
Browser interface
ActiveX control for SCADA integration
SNMP/OPC gateway.
Maintenance
Hirschmann are continually working on improving and developing their
software. You should regularly check whether there is a new version of
the software that provides you with additional benefits. You will find
software information and downloads on the product pages of the
Hirschmann website.

Key
UM Basic Configuration L3P
Release 7.1 12/2011 11
Key
The designations used in this manual have the following meanings:
Symbols used:
List
Work step
Subheading
Link Cross-reference with link
Note: A note emphasizes an important fact or draws your attention to a dependency.
Courier ASCII representation in user interface
Execution in the Graphical User Interface (Web-based Interface user interface)
Execution in the Command Line Interface user interface
WLAN access point
Router with firewall
Switch with firewall
Router
Switch

Key
12 UM Basic Configuration L3P
Release 7.1 12/2011
Bridge
Hub
A random computer
Configuration Computer
Server
PLC -
Programmable logic
controller
I/O -
Robot

Introduction
UM Basic Configuration L3P
Release 7.1 12/2011 13
Introduction
The device has been developed for use in a harsh industrial environment.
Accordingly, the installation process has been kept simple. Thanks to the
selected default settings, you only have to enter a few settings before starting
to operate the device.
Note: The changes you make in the dialogs are copied into the volatile
memory of the device when you click on "Set".
To save the changes permanently, select the saving location in the Basic
Settings :Load/Save dialog box and click on "Save".

Introduction
14 UM Basic Configuration L3P
Release 7.1 12/2011

Access to the user interfaces
UM Basic Configuration L3P
Release 7.1 12/2011 15
1 Access to the user interfaces
The device has 3 user interfaces, which you can access via different
interfaces:
System monitor via the V.24 interface (out-of-band)
Command Line Interface (CLI) via the V.24 connection (out-of-band) as
well as Telnet or SSH (in-band)
Web-based interface via Ethernet (in-band).

Access to the user interfaces
16
1.1 System Monitor
UM Basic Configuration L3P
Release 7.1 12/2011
1.1 System Monitor
The system monitor enables you to
select the software to be loaded
perform a software update
start the selected software
shut down the system monitor
delete the configuration saved and
display the boot code information.
Opening the system monitor
Use the terminal cable (see accessories) to connect
– the V.24 socket (RJ11) to
– a terminal or a COM port of a PC with terminal emulation based on
VT100
(for the physical connection, see the "Installation" user manual).
Start the terminal program on the PC and set up a connection with the
device.
When you boot the device, the message
"Press <1> to enter System Monitor 1"
appears on the terminal.
Speed 9,600 Baud
Data 8 bit
Parity None
Stopbit 1 bit
Handshake Off
Table 1: Data transfer parameters

Access to the user interfaces
UM Basic Configuration L3P
Release 7.1 12/2011
1.1 System Monitor
17
Figure 1: Screen display during the boot process
Press the <1> key within one second to start system monitor 1.
Figure 2: System monitor 1 screen display
Select a menu item by entering the number.
To leave a submenu and return to the main menu of system monitor 1,
press the <ESC> key.
< Device Name (Boot) Release: 1.00 Build: 2005-09-17 15:36 >
Press <1> to enter System Monitor 1 ...
1
System Monitor
(Selected OS: L3P-06.0.00 (2010-09-09 09:09))
1 Select Boot Operating System
2 Update Operating System
3 Start Selected Operating System
4 End (reset and reboot)
5 Erase main configuration file
sysMon1>

Access to the user interfaces
18
1.2 Command Line Interface
UM Basic Configuration L3P
Release 7.1 12/2011
1.2 Command Line Interface
The Command Line Interface enables you to use the functions of the device
via a local or remote connection.
The Command Line Interface provides IT specialists with a familiar
environment for configuring IT devices.
The script compatibility of the Command Line Interface enables you, among
other things, to feed multiple devices with the same configuration data, to
create and use partial configurations, or to compare 2 configurations using 2
script files.
You will find a detailed description of the Command Line Interface in the
“Command Line Interface” reference manual.
You can access the Command Line Interface via
the V.24 port (out-of-band)
Telnet (in-band)
SSH (in-band)
Note: To facilitate making entries, CLI gives you the option of abbreviating
keywords. Type in the beginning of a keyword. When you press the tab key,
CLI completes the keyword.

Access to the user interfaces
UM Basic Configuration L3P
Release 7.1 12/2011
1.2 Command Line Interface
19
Opening the Command Line Interface
Connect the device to a terminal or to a “COM” port of a PC using
terminal emulation based on VT100, and press any key (see on
page 16 “Opening the system monitor”) or
call up the Command Line Interface via Telnet.
A window for entering the user name appears on the screen.
Up to 5 users can access the Command Line Interface.
Figure 3: Logging in to the Command Line Interface program
Enter a user name. The default setting for the user name is admin .
Press the Enter key.
Enter the password. The default setting for the password is private .
Press the Enter key.
You can change the user name and the password later in the
Command Line Interface.
Please note that these entries are case-sensitive.
The start screen appears.
Copyright (c) 2004-2010 Hirschmann Automation and Control GmbH
All rights reserved
PowerMICE Release L3P-06.0.00
(Build date 2010-09-09 12:13)
System Name: PowerMICE
Mgmt-IP : 10.0.1.105
1.Router-IP: 0.0.0.0
Base-MAC : 00:80:63:51:74:00
System Time: 2010-09-09 13:14:15
User:

Access to the user interfaces
20
1.2 Command Line Interface
UM Basic Configuration L3P
Release 7.1 12/2011
Figure 4: CLI screen after login
NOTE: Enter '?' for Command Help. Command help displays all options
that are valid for the 'normal' and 'no' command forms. For
the syntax of a particular command form, please consult the
documentation.
(Hirschmann Product) >