Intellinet 503501 User manual

INDUSTRIAL
GIGABIT
MANAGED
ETHERNET
SWITCH
USER
MANUAL
MODELS
503501,
503518,
503525
INT-503501/503518/503525-UM-0408-01
Model shown: 503501

INTRODUCTION
Thank you for purchasing the INTELLINET NETWORK SOLUTIONS
™
Industrial Gigabit
Managed Ethernet Switch:
• Model 503501: 6-port 10/100Base-TX + 2-port 10/100/1000Base-TX, IP30 industrial standard
• Model 503518: 6-port 10/100Base-TX + 2-port 1000Base-LX (SC) Single-Mode, IP30
industrial standard
• Model 503525: 6-port 10/100Base-TX + 2-port 1000Base-SX (SC) Multi-Mode, IP30
industrial standard
Specically developed for industrial Ethernet applications, this series of switches uses a one-
piece, formed-aluminum case to provide rugged, acid-corrosion-proof and heat-resistant
protection. The terminal block and ventilation holes are placed on the bottom side of each unit
to reduce the chance of damage due to dust and moisture. And the compact, space-saving
design is a benet throughout the product’s life — from inventory storage and transportation to
installation.
To meet industrial power-redundancy requirements, the Industrial Gigabit Managed Ethernet
Switch is equipped with dual DC power inputs and an AC-DC power adapter jack. Plus, a built-
in relay contact can be used to set up a warning system for power failure. The relay output
function will form a short circuit when power fails, and will automatically form an open circuit
when port link or power input resumes. That way, the rail switch informs your maintenance
engineers of the problems, and you can take action to prevent network downtime.
The exible network management system is easy to use and manage, and it’s designed to
increase business productivity by reliably supporting business applications. It features a Web-
based GUI and supports SNMP, RMON, Port Mirroring, VLAN, QoS and more!
The detailed instructions in this user manual help make installation of the switch reasonably
quick and simple, so you’ll also soon be enjoying the benets of these additional features:
• Auto-sensing RJ-45 ports automatically detect optimal network speeds
• All RJ-45 ports with Auto MDI-X and NWay auto-negotiation support
• Supports SNMP V1, V2C, V3
• LACP Link Aggregation
• IGMP Snooping for multicast ltering
• GVRP VLAN Registration Protocol
• Supports per-port egress/ingress rate control
• Supports 802.1X EAP and RADIUS authentication
• Port security via MAC addresses
• DHCP Server, DHCP Client
• Supports 2,048 MAC address entries
• 128 kBytes buffer memory
• LEDs for power, link/activity, full/half duplex
• Provides true non-blocking switching performance
• Supports IEEE 802.3x ow control on full duplex and back pressure on half duplex
• Store-and-forward switching architecture
• Full/half duplex operation
• DIN rail kit, or wall-mounting ears for 3-way installation
• Terminal block to provide dual power inputs with reverse polarity protection
• Lifetime Warranty
NOTE: Some full and partial screen images have been modied to t the format of this user
manual.
3
INTRODUCTION

TABLE OF CONTENTS
HARDWARE ....................................................................................................5
DIN-Rail Installation ..................................................................................5
Wall-Mount Installation..............................................................................5
Front-Panel Ports & Indicators..................................................................5
Bottom-Panel Connectors ........................................................................6
WEB MANAGEMENT & CONFIGURATION ...................................................6
Basic Settings ...........................................................................................7
Port Conguration.....................................................................................9
Redundancy ............................................................................................10
VLAN.......................................................................................................13
Trafc Prioritization .................................................................................14
IGMP Snooping.......................................................................................15
SNMP Conguration ...............................................................................16
Security ...................................................................................................17
Warning...................................................................................................19
Monitoring .............................................................................................. 20
Save Conguration .................................................................................21
CLI MANAGEMENT & CONFIGURATION....................................................21
CLI Command Sets................................................................................ 23
APPENDIX A................................................................................................. 35
SPECIFICATIONS......................................................................................... 36
section page
4
CONTENTS

HARDWARE
DIN-Rail Installation
1. Angle the switch’s
mounting clamp
relative to the DIN
rail (near right) so
that the DIN rail is
positioned under
the upper lip of the
clamp and behind
the metal springs.
2. Push the switch
toward the DIN rail
until the spring on the mounting clamp clicks in place on the rail (above right).
Wall-Mount Installation
1. Remove the DIN rail mounting
clamp from the back panel of
the switch.
2. Attach the wall-mount panel to
the switch using the six included
screws.
3. With the wall-mount panel
securely connected to the
back of the switch, attach
the switch to a wall or other
suitably sturdy vertical surface.
Front-Panel Ports & Indicators
DIN rail
Mounting
clamp
Switch
Spring
Wall-mount panel
Switch
Mounting clamp
5
HARDWARE
Model 503501 Model 503525
Model 503518
3 23
5
9
4
6
77
8
3
2
1
44
5 5
66
7
9
8
9
8

1 Gigabit Ethernet ports
2 Gigabit ber ports
3 LEDs for:
• PWR 1-3 (lighted indicates a power link to a DC power module [PWR 1 & 2] or the DC power
jack [PWR 3])
• R.M, or ring master (lighted indicates this unit is serving as the master switch in a ring)
• Ring (blinking slowly indicates the ring has only a single link; blinking rapidly indicates the
ring is activated and operating normally)
• Fault (lighted indicates a fault has occurred)
4 LEDs for Gigabit Ethernet/ber ports (lighted LNK indicates the port is linked; lighted ACT
indicates data is being transmitted)
5 Console port
6 Reset button (push in 3 seconds to reset the switch; 5 seconds to reset to factory defaults)
7 10/100Base-TX Ethernet ports
8 LEDs for Ethernet ports (lighted indicates the port is linked)
9 LEDs for Ethernet ports (lighted indicates the port is linked and operating in full duplex mode)
Bottom-Panel Connectors
The terminal block on the bottom of the switch — featuring
dual DC power inputs — and an AC/DC power adapter jack
are provided for power redundancy and reverse-polarity
protection. Connections (L-R): GND, V1+ and V1– (PWR 1),
Relay Output (1 A / 24 V DC), V2+ and V2– (PWR 2).
To the right of the block is the PWR 3 jack (12–45 V DC).
WEB MANAGEMENT & CONFIGURATION
Inside the CPU of the Industrial Gigabit Managed Ethernet Switch, an embedded HTML Web
site resides in ash memory. It contains advanced management features and allows you to
manage the switch from anywhere on the network through a standard browser, such as Microsoft
Internet Explorer. The Web-based management supports Internet Explorer 5.0 and is based on
Java Applets, with the intent of reducing network bandwidth consumption, enhancing access
speed and presenting an easy viewing screen. NOTE: By default, IE5.0 (or a later version) does
not allow Java Applets to open sockets. The browser setting needs to be explicitly modied in
order to enable Java Applets to use network ports.
Default Values
IP address: 192.168.10.1
Subnet mask: 255.255.255.0
Default gateway: 192.168.10.254
Username: admin
Password: admin
System Login Procedure
1. Launch Internet Explorer (IE).
2. In the Address eld of IE, enter http:// followed by the IP address of the switch. Press “Enter.”
3. When the login screen appears, enter the username and password (both “admin”) in their
respective elds.
4. Click “OK” to display the Main Interface screen of the Web-based management system.
GND V1+ V1– Relay V2+ V2–
12–48 V DC
power jack
6
WEB MANAGEMENT & CONFIGURATION

The Main Interface screen introduces the main menu in the form of a left-side navigation column,
with each section folder — Basic Settings, Port Conguration, Redundancy, VLAN and so on —
opening to present sub-categories (as listed throughout the rest of this manual) that provide
details and conguration options for that particular part of the Web-based management system.
Basic Settings
Switch Settings
System Name: You can assign a name for the switch here (max. 64 characters).
System Description: Displays a description of the switch.
System Location: You can identify the physical location of the switch here (max. 64 characters).
System Contact: Enter the name of a contact person or organization.
Firmware Version: Displays the switch’s rmware version.
Kernel Version: Displays the kernel software version.
MAC Address: Displays the unique hardware address assigned by the manufacturer (default).
Admin Password
For added security, these elds let you make changes.
User Name: Enter a new username (default is “admin”).
New Password: Enter a new password (default is
“admin”).
Conrm Password: Re-enter the new password. As on
all screens where applicable, click “Apply” to effect
any changes made since the most recent screen
refresh or system/device reboot.
IP Conguration
On this screen, you can congure the IP settings and the DHCP
Client function.
DHCP Client: Enable or disable the DHCP Client function using
the drop-down menu. When the function’s enabled, the switch
will be assigned the IP address from the network DHCP server,
replacing the default IP address. After clicking “Apply,” a pop-up
window displays to declare when DHCP Client is enabling.
IP Address: Assign the IP address the network is using. If DHCP
Client is enabled, it’s not necessary to assign the IP address:
The network DHCP server will assign the IP address for the
switch and display it. The default IP is 192.168.10.1.
Subnet Mask: Assign the subnet mask of the IP address. If DHCP
Client is enabled, you do not need to assign the subnet mask.
Gateway: Assign the network gateway for the switch. The default gateway is 192.168.10.254.
DNS1: Assign the primary DNS IP address.
DNS2: Assign the secondary DNS IP address.
Click “Apply” to effect any changes.
SNTP Conguration
On this screen, the SNTP (Simple Network Time Protocol) settings allow you to synchronize
clocks within your network/system.
SNTP Client: Enable or disable the SNTP function to get the time from the SNTP server.
Daylight Saving Time: Enable or disable the Daylight Saving Time (DST) function. When DST
is enabled, the DST period needs to be congured.
7
WEB MANAGEMENT & CONFIGURATION

UTC Time Zone: Set the switch’s local
time zone. Appendix A at the back of
this manual lists the various local
time zones for your reference.
SNTP Server IP Address: Set the SNTP
server IP address.
Daylight Saving Period: Set the DST
beginning and ending dates. NOTE:
Both change each year.
Daylight Saving Offset: Set the offset
time.
Click “Apply” to effect any changes.
DHCP Server
By enabling the DHCP Server function, the switch system will become a DHCP server.
DHCP Server: Enable or disable the DHCP Server function. By enabling the switch, it becomes
the DHCP server on your local network.
Start IP Address: In a dynamic IP assigned range,
the low IP address is the beginning of the dynamic
IP assigned range. For example: If the dynamic IP
assigned range is 192.168.1.100 to 192.168.1.200,
then 192.168.1.100 will be the Start IP Address.
End IP Address: In a dynamic IP assigned range,
the high IP address is the end of the dynamic IP
assigned range. For example: If the dynamic IP
assigned range is 192.168.1.100 to 192.168.1.200,
then 192.168.1.200 will be the End IP Address.
Subnet Mask: This is the dynamic IP assigned range
subnet mask.
Gateway: This is the gateway in your network.
DNS: This is the Domain Name Server IP address in your network.
Lease Time (Hour): This is the point at which the system will reset the assigned dynamic IP to
ensure the IP address is in use.
Client Entries — When the DHCP Server function
is activated (“Enable”), the system will collect the
DHCP client information and display it here.
Port and IP Bindings — You can assign the
specic IP address that’s in the assigned
dynamic IP range to a specic port. When the
device is connecting to the port and asks for
dynamic IP assigning, the system will assign
the IP address that has been assigned before
in the connected device.
Click “Apply” to effect any changes.
8
WEB MANAGEMENT & CONFIGURATION

Backup & Restore
You can save current EEPROM (electrically erasable
programmable read-only memory) values from the switch
to the TFTP (Trivial File Transfer Protocol) server, then
go to the TFTP restore conguration page to restore the
EEPROM values.
TFTP Server IP Address: Enter the address.
Restore File Name: Enter the le name.
Restore: Click to restore the conguration.
Backup File Name: Enter the le name.
Backup: Click to back up the conguration.
Upgrade Firmware
This screen allows you to update the switch rmware.
Before updating, make sure that you have your TFTP
(Trivial File Transfer Protocol) server ready and that the
rmware image is on the TFTP server.
Auto Provision
This screen allows you to update the switch
rmware automatically. You can put the
rmware or a conguration le on the TFTP
(Trivial File Transfer Protocol) server and,
when you reboot the switch, it will upgrade
automatically. Before updating, make sure
that you have your TFTP server ready and
that the rmware image and conguration
le are on the TFTP server. Click “Apply” to
effect any changes.
Factory Default
Reset: Click to reset all congurations to the default values.
NOTE: Select “Keep current IP address setting?” and “Keep
current username & password?” to prevent these values from
reverting to factory defaults.
System Reboot
Reboot: Click to restart the switch.
Port Conguration
Port Control
This screen presents conguration options for the state, speed/duplex, ow control and security
of each port.
Port No: Identies each port: 1–6 represent the 10/100Base-TX Ethernet ports; G1–2 represent
the Gigabit Ethernet ports.
State: Enable or disable the port.
9
WEB MANAGEMENT & CONFIGURATION

Speed/Duplex: Set the mode to
“Auto-Negotiation,” “100 Full,”
“100 Half,” “10 Full” or “10 Half.”
Flow Control: Enable or disable.
Choose “Enable” to avoid packet
loss when trafc is congested.
Security: Enable or disable port security.
Click “Apply” to effect any changes.
Port Status
This screen presents the current settings
established for each port in Port Control,
plus the current status of port activity.
Rate Limiting
This screen lets you limit trafc on all ports, including broadcast, multicast and ooded unicast.
You can also set parameters for Ingress or Egress to limit trafc received or transmitted.
Ingress Limit Frame
Type: Mode options in
the drop-down menu
are “All,” “Broadcast
only,” ”Broadcast/
Multicast” and
“Broadcast/Multicast/
Flooded Unicast.”
Ingress: Received
trafc speed.
Egress: Transmitted
trafc speed.
Click “Apply” to effect any changes.
Port Trunk
Setting — This screen allows you to establish a port trunk
by designating Ports 1–6 (only Port 1 shown) and/or G1–2.
Group ID: Select a port to join to a trunk group.
Type: Options are “Static” or “802.3ad LACP (Link
Aggregation Control Protocol)” to increase bandwidth by
combining several physical ports into a logical link.
Click “Apply” to effect any changes.
Status — This screen simply presents the current status of any
port trunk conguration(s) established in Port Trunk – Setting
(above), with up to four trunks possible.
Redundancy
Ring
With a recovery time of less than 10 ms, the Ring feature is able to reduce damage caused by
unexpected network topology changes. The Ring function presents three application options:
Ring, Coupling Ring and Dual Homing.
Ring: Select to enable.
10
WEB MANAGEMENT & CONFIGURATION

Ring Master: There should be one and only one ring master in a ring. However, if there are two
or more switches that have Ring Master set to “Enable,” the switch with the lowest MAC address
will be the actual ring master and others will serve as backup masters.
1st Ring Port: This is the primary port when this switch is the ring master.
2nd Ring Port: This is the backup port when this switch is the ring master.
Coupling Ring: Select to enable. Coupling Ring can be used to divide a big ring into two smaller
rings to avoid affecting all switches when network topology changes. It’s a good application
for connecting two rings.
Coupling Port: Link to the coupling port of the switch in another ring. The Coupling Ring feature
needs four switches to build an active and a backup link. Designate a port as a coupling port:
The coupled four ports of four switches will operate in active/backup mode.
Control Port: Link to the control port of the switch in the same ring. A control port is used to
transmit control signals.
Dual Homing: Select to enable, which connects the ring to normal switches through two RSTP
links (like a backbone switch). The two links work as an active/backup mode, and connect
each ring to the normal switches in RSTP mode.
NOTE: It’s recommended that you don’t set a single switch as both a ring master and a coupling
ring due to the heavy load.
Click “Apply” to effect any changes.
RSTP
The Rapid Spanning Tree Protocol (RSTP) evolved from the Spanning Tree Protocol, providing
faster spanning tree convergence after a topology change. The system supports STP, and will
auto-detect the connected device that is running the STP or RSTP protocol.
Setting — On this screen, enable/disable the RSTP function and set parameters for each port.
RSTP Mode: RSTP needs to be enabled or disabled before conguring the related parameters.
Priority (0–61440): This is a value used to identify the root bridge. The bridge with the lowest
value has the highest priority and is selected as the root. If the value changes, the switch
needs to be re-booted. NOTE: The value must be a multiple of 4,096 according to the
protocol standard rule.
Max Age (6–40): This is the number of seconds a bridge waits without receiving any STP
conguration messages before attempting a reconguration. Enter a value from 6 to 40.
Hello Time (1–10): This is the time that controls when the switch sends out a BPDU packet to
check the RSTP current status. Enter a value from 1 to 10.
11
WEB MANAGEMENT & CONFIGURATION

Forward Delay Time (4–30):
This is the amount of time
a port waits before changing
from its Rapid Spanning
Tree Protocol learning and
listening states to the
forwarding state. Enter a
value from 4 to 30.
Path Cost (1–200000000):
This is the cost of the path
to the other bridge from
this transmitting bridge at
the specied port. Enter a
number 1 to 200000000.
Priority (0–240): Decide which
port should be blocked by
priority in LAN, and enter a
number up to 240. NOTE:
The value of priority must
be a multiple of 16.
Admin P2P: Some of the
rapid-state transactions
that are possible within
RSTP depend on whether 1) the port concerned can only be connected to exactly one other
bridge (i.e., it’s served by a point-to-point LAN segment), or 2) it can be connected to two or
more bridges (i.e., it’s served by a shared medium LAN segment). This function allows the
P2P status of the link to be manipulated administratively. “True” means P2P enabling; “False”
means P2P disabling; “Auto” is the third option.
Admin Edge: This determines if a port is directly connected to end stations; if so, it can’t create
a bridging loop in the network. To congure the port as an edge port, set the port to “True.”
Admin Non STP: This indicates whether or not the port includes the STP mathematic calculation.
“True” doesn’t include the STP mathematic calculation; “False” does.
NOTE: Use this rule to congure Max Age, Hello Time and Forward Delay Time:
2 x (Forward Delay Time value –1) ≥ Max Age value ≥ 2 x (Hello Time value +1)
Click “Apply” to set the congurations or effect any changes.
Information —
This screen
displays current
RSTP root
bridge and port
congurations
and settings.
12
WEB MANAGEMENT & CONFIGURATION

VLAN
A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast domain, allowing
you to isolate network trafc. Only the members of the VLAN will receive trafc from other
members of the same VLAN. Basically, creating a VLAN from a switch is logically equivalent
to reconnecting a group of network devices to another Layer 2 switch; however, all the network
devices are still physically plugged into the same switch.
The Industrial Gigabit Managed Ethernet Switch supports port-based and 802.1Q (tag-based)
VLAN. The default conguration of the VLAN operation mode is set at “802.1Q.”
VLAN Conguration — 802.1Q
Tag-based VLAN is an IEEE 802.1Q
specication standard that makes it possible
to create a VLAN across devices from
different switch vendors. IEEE 802.1Q VLAN
uses a technique to insert a “tag” into the
Ethernet frames. The tag contains a VLAN
identier (VID) that denotes the VLAN numbers.
You can create a tag-based VLAN and enable
or disable GVRP — GARP (Generic Attribute
Registration Protocol) VLAN Registration
Protocol. If you enable 802.1Q VLAN, all ports
on the switch will belong to a default VLAN
(with a VID of 1). The default VLAN can’t be
deleted, but a total of 256 VLAN groups can
be congured.
GVRP allows automatic VLAN conguration
between the switch and nodes. If the switch is
connected to a device with GVRP enabled,
you can send a GVRP request by using the
VID of a VLAN dened on the switch: The
switch will automatically add that device to the existing VLAN.
VLAN Operation Mode: Drop-down options are “Disable,” “Port Based” and “802.1Q.”
GVRP Mode: Enable/disable the GVRP function.
Management VLAN ID: By entering the VIDs of selected devices, this can provide a network
administrator a secure VLAN for managing the switch, as only these devices would be able
to access the switch.
Link Type: There are three options in the drop-down menu.
• “Access Link” is for a single switch only, and lets you group ports by setting the same VID.
• “Trunk Link” is an extended application of Access Link, allowing you to group ports by
setting the same VID for two or more switches.
• “Hybrid Link” means both Access Link and Trunk Link are available.
Untagged VID: Set the port default VLAN ID for untagged devices that connect to the port. The
range is 1 to 4094.
Tagged VIDs: Set the tagged VIDs to carry different VLAN frames to another switch.
Click “Apply” to set the congurations or effect any changes.
VLAN Conguration — Port-Based
Packets can travel only among members of the same VLAN group: All unselected ports are
treated as belonging to another single VLAN. With “Port Based” selected as the Operation
Mode, VLAN-tagging is ignored.
13
WEB MANAGEMENT & CONFIGURATION

Add: Click to display the VLAN “add” screen (see
below).
Edit: Edit an existing VLAN conguration.
Delete: Delete an existing VLAN.
Help: Click to show the help le.
Group Name: This is the VLAN name.
VLAN ID: Specify/enter the VLAN ID.
Add: Select a port you want to be joined to the ....
VLAN group.
Remove: Remove a port from the VLAN group.
Apply: Click to set the congurations.
Help: Click to show the help le.
Trafc Prioritization
Trafc Prioritization features three modes: Port-Based, CoS/802.1p and ToS/DSCP. With the
Trafc Prioritization function, you can classify the trafc into four classes for different network
applications. This series of switches also supports four priority levels: high, middle, low and
lowest.
QoS Policy: This presents two options for selection.
• “Use an 8,4,2,1 weighted fair queuing scheme” means the output queues will follow an
8:4:2:1 ratio-formula to transmit packets from the highest to lowest queue. For example: 8
high-queue packets, 4 middle-queue packets, 2 low-queue packets and the one lowest-
14
WEB MANAGEMENT & CONFIGURATION

queue packet are transmitted.
• “Use a strict priority scheme” means the packets in a higher queue will be transmitted rst
until the higher queue is empty.
Priority Type: In addition to “Disable,” the drop-down menu offers the following options.
• “Port-based” means the output priority is determined by the ingress port.
• “CoS only” means the output priority is determined by CoS only.
• “ToS only” means the output priority is determined by ToS only.
• “CoS rst” means the output priority is determined by CoS and ToS, but CoS rst.
• “ToS rst” means the output priority is determined by CoS and ToS, but ToS rst.
Port-based Priority: Assign a priority queue — “High,” “Middle,” “Low” or “Lowest” — to a port.
CoS/802.1p: CoS (Class of Service, also known as 802.1p) denotes the eight levels of output
priority of a packet (0–7).
CoS Port Default: When an ingress packet doesn’t have a VLAN tag, a default priority value is
considered and determined by the ingress port.
ToS/DSCP: ToS (Type of Service) is a eld in the IP header of a packet. This ToS eld is also
used by Differentiated Services and is called the Diff Serv Code Point (DSCP). The output
priority of a packet (0–63) can be determined in this eld.
Click “Apply” to set the congurations or effect any changes.
IGMP Snooping
IGMP (Internet Group Management Protocol) is used by IP hosts to register their dynamic
multicast group membership. IGMP has three versions: IGMP v1, v2 and v3 (refer to RFC 1112,
2236 and 3376). IGMP Snooping improves the performance of networks that carry multicast
trafc. It provides the ability to prune multicast
trafc so that it travels only to those end
destinations requiring that trafc, thus reducing
the amount of trafc on the Ethernet LAN.
IGMP Snooping: Enable/disable the function.
IGMP Query Mode: The switch either will act
as an IGMP querier or not. There should be
only one IGMP querier in an IGMP
application. “Auto” means that the querier is
the switch with lowest IP address.
15
WEB MANAGEMENT & CONFIGURATION

IGMP Snooping Table: Shows the current IP multicast list.
Apply: Click to set the congurations.
Help: Click to show the help le.
SNMP Conguration
SNMP (Simple Network Management Protocol) is the protocol developed to manage nodes
(servers, workstations, routers, switches and hubs, etc.) on an IP network. SNMP enables
network administrators to manage network performance, nd and solve network problems,
and plan for network growth. Network management systems learn of problems by receiving
traps or change notices from network devices implementing SNMP.
SNMP — Agent Setting
SNMP Agent Version: Three SNMP versions are
supported and presented as two options in the
menu: “SNMPV1/V2c” and “SNMP V3.” The
former uses a community string match for
authentication, meaning that SNMP servers
access objects with read-only or read/write
permissions (with the community string default
set as public/private). SNMP V3 requires an
authentication level of MD5 or DES to encrypt
data to enhance data security.
SNMP V1/V2c Community: These settings should
be congured for SNMP V1/V2c. Four sets of
“Community String/Privilege” are supported, with
each string a maximum of 32 characters. An
empty eld removes this string.
SNMP V3 User: If SNMP V3 is selected as the
agent version, these elds should be lled in for
authentication (“Username” is required), each with
a maximum of 16 characters. “Auth Password”
is encrypted by MD5; “Privacy Password” is
encrypted by DES. Eight sets of “SNMPv3 User” are supported. When “SNMP V3” is selected,
you can:
• Input the SNMPv3 username only.
• Input the SNMPv3 username and auth password.
• Input the SNMPv3 username, auth password and privacy password (which can be different
from the auth password).
To remove a current user prole, input the SNMPv3 username you want to remove and click
“Remove.”
Current SNMPv3 User Prole: Shows all the SNMPv3 user proles.
Click “Apply” to set the congurations or effect any changes.
SNMP — Trap Setting
A trap manager is a management station that receives traps, which are system alerts generated
by the switch. If no trap manager is dened, no traps will be issued. Create a trap manager by
entering the IP address of the station and a community string. To dene a management station
as a trap manager, enter the SNMP community strings and select the SNMP version.
Server IP: Enter the server IP address to receive traps
Community: This is the community for authentication.
Trap Version: Select either “V1” or “V2c.”
16
WEB MANAGEMENT & CONFIGURATION

Add: Click to add a trap server prole.
Remove: Click to remove a highlighted
trap server prole.
Help: Click to show the help le.
Security
Five useful submenus are available to enhance the security
of the Industrial Gigabit Managed Ethernet Switch: IP Security,
Port Security, MAC Blacklist, MAC Address Aging and 802.1x.
IP Security
Only the IPs in the Secure IP List can be used to manage the
switch through the selected management mode.
IP Security Mode: Enable/disable the IP Security function.
Enable WEB Management: Select to enable.
Enable Telnet Management: Select to enable.
Enable SNMP Management: Select to enable.
Apply: Click to set the congurations.
Help: Click to show the help le.
Port Security
The Port Security screen lets you add static MAC addresses to
the hardware forwarding database. If Port Security is enabled on
the Port Control screen, only the frames with MAC addresses in
this list will be forwarded; otherwise, they’ll be discarded.
MAC Address: Enter a MAC address for a specic port.
Port No.: Select a port on the switch.
Add: Add an entry once a MAC address has been entered and
a port has been selected.
Delete: Delete a selected entry.
Help: Click to show the help le.
MAC Blacklist
The MAC Blacklist screen lets you eliminate the trafc forwarding to
specic MAC addresses in the list. Any frames forwarded to MAC
addresses in this list will be discarded and, thus, the target device will
never receive any frame.
MAC Address: Enter a MAC address to add to MAC Blacklist.
Add: Add an entry once a MAC address has been entered.
Delete: Delete a selected entry.
Help: Click to show the help le.
17
WEB MANAGEMENT & CONFIGURATION

MAC Address Aging
This screen offers two options: You can set “MAC Address Table Aging Time” so that when the
entered time expires any unused MAC addresses will be cleared from the MAC list; or you can
select “Auto Flush MAC Address Table When Ports Link Down” to clear the list.
MAC Address Table Aging Time: (0–3825): Enter a number (of seconds) to set the timer as
described above.
Auto Flush MAC Address Table When Ports
Link Down: Select to enable the function as
it’s described above.
Apply: Click to set the congurations.
Help: Click to show the help le.
802.1x
802.1x makes use of the physical access characteristics of IEEE 802 LAN infrastructures for
authentication and authorization purposes. Two screens present conguration options: RADIUS
Server and Port Authorize Mode.
RADIUS Server — On this screen, both primary (RADIUS Server Setting panel) and secondary
(Advanced Setting panel) 802.1x settings are established.
802.1x Protocol: Enable/disable the function.
RADIUS Server IP: Enter the IP address of the
authentication server.
Server Port: Enter the UDP port number used by the
authentication server for authentication.
Account Port: Enter the UDP destination port for
accounting requests to the specied RADIUS Server.
Shared Key: Enter a key shared between this switch and
the authentication server.
NAS, Identier: Enter a string used to identify this switch.
Quiet Period: Set the time interval between authentication
failure and the start of a new authentication attempt.
Tx Period: Set the time that the switch can wait for a
response to an EAP request/identity frame from the
client before resending the request.
Supplicant Timeout: Set the period of time the switch
waits for a supplicant response to an EAP request.
Server Timeout: Set the period of time the switch waits for
a RADIUS server response to an authentication request.
Max Requests: Set the maximum number of times to retry sending packets to the supplicant.
Re-Auth Period: Set the period of time after which clients connected must be re-authenticated.
Apply: Click to set the congurations.
Help: Click to show the help le.
Port Authorize Mode — On this screen, you can establish the status of each port.
Port Authorize Mode: Select one of four options.
• “Reject” forces this port to be unauthorized.
• “Accept” forces this port to be authorized.
• “Authorize” means the port’s state is determined
by the outcome of the 802.1x authentication.
• “Disable” means the port won’t participate in 802.1x.
Apply: Click to set the congurations.
Help: Click to show the help le.
18
WEB MANAGEMENT & CONFIGURATION

Warning
This function is very important for managing the switch — with system alarms (SYSLOG, e-mail)
or fault alarms — as it helps you monitor the switch status on a remote site. When events occur,
the warning message will be sent to your appointed server or e-mail, or show as a lighted Fault
LED on the switch’s front panel.
Fault Alarm
Any time a fault occurs on a port marked for Fault Alarm, the Fault
LED on the front panel will light and an electronic relay will be sent.
Power Failure: Select PWR 1 and/or PWR 2 to monitor linkage to
the DC power modules.
Port Link Down/Broken: Select Port(s) 1–8 to monitor as desired.
Apply: Click to set the congurations.
Help: Click to show the help le.
System Alarm
System Alarm offers two warning modes: SYSLOG and E-mail (SMTP).
System Warning - SYSLOG Setting — SYSLOG is a protocol for transmitting event notication
messages across networks.
SYSLOG Mode: Select one of four options.
• “Disable” turns the function off.
• “Client Only” logs notications in a local system.
• “Server Only” logs notications on a remote
SYSLOG server.
• “Both” logs event notication messages locally and remotely.
SYSLOG Server IP Address: Enter the appropriate address.
Apply: Click to set the congurations.
Help: Click to show the help le.
System Warning - SMTP Setting — Simple Mail Transfer Protocol (SMTP) is a protocol for
e-mail transmission across the Internet.
E-mail Alert: Enable/disable the transmission of
warning events by e-mail.
Sender E-mail Address: Enter the SMTP server
IP address.
Mail Subject: Enter the subject of the e-mail.
Authentication: Fill in the three elds for
verication.
Recipient E-mail Address: Enter as many as six
appropriate addresses.
Apply: Click to set the congurations.
Help: Click to show the help le.
19
WEB MANAGEMENT & CONFIGURATION

System Warning - Event Selection — SYSLOG and SMTP (e-mail) are the two warning
methods supported by the system. Check the corresponding boxes to enable the system event
warning method. NOTE: These options can’t be selected when SYSLOG or SMTP is disabled.
System Cold Start: Sends an
alert of a system restart.
Power Status: Sends an alert
of a power up or down.
SNMP Authentication Failure:
Sends an alert of an SNMP
authentication failure.
Ring Topology Change: Sends
an alert when the Ring
topology changes.
Port Event: Select “Disable,”
“Link Up,” “Link Down” or
“Link Up & Link Down.”
Apply: Click to set the
congurations.
Help: Click to show the help le.
Monitoring
MAC Address Table
Serving as a ltering database, this list supports queries by the
forwarding function as to whether or not a frame received by a given
port with a given destination MAC address is to be forwarded
through a given potential transmission port.
Port No.: This will show all the MAC addresses mapping to the
selected port.
Clear MAC Table: Click to clear all MAC addresses in the table.
Help: Click to show the help le.
Port Statistics
This screen displays common statistics and counters for all ports on the switch.
Type: This shows port
speed and media
type.
Link: This shows port
link status.
State: This shows ports
enabled or disabled.
TX Good Packet: This
shows the number of
good packets sent by
this port.
TX Bad Packet: This shows the number of bad packets sent by this port.
RX Good Packet: This shows the number of good packets received by this port.
RX Bad Packet: This shows the number of bad packets received by this port.
TX Abort Packet: This shows the number of packets aborted by this port.
Packet Collision: This shows the number of times a collision has been detected by this port.
Clear: Click to clear all counters.
Help: Click to show the help le.
20
WEB MANAGEMENT & CONFIGURATION