Intellinet 561426 User manual

INT-561426_UM-1218_REV-5.01
24-Port Gigabit Ethernet
PoE+ Web-Managed Switch
with 4 Gigabit Combo
Base-T/SFP Ports
User Manual
Model 561426
intellinetnetwork.com

2
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports
User Manual
TABLE OF CONTENTS
INTRODUCTION ..........................................................................................................................4
PRODUCT OVERVIEW ...............................................................................................................4
FEATURES..................................................................................................................................4
SPECIFICATIONS.......................................................................................................................4
EXTERNAL COMPONENT DESCRIPTION ....................................................................................5
FRONT PANEL ........................................................................................................................5
REAR PANEL ...........................................................................................................................6
PACKAGE CONTENTS ...............................................................................................................6
INSTALLING AND CONNECTING THE SWITCH .............................................................................6
DESKTOP INSTALLATION ..........................................................................................................6
RACKMOUNT INSTALLATION IN 19” CABINET ..........................................................................7
POWER ON THE SWITCH ..........................................................................................................7
CONNECTION TO THE SWITCH....................................................................................................7
CONNECTING TO COMPUTER ..................................................................................................7
HOW TO LOG IN TO THE SWITCH ..............................................................................................8
SAVING THE CONFIGURATION ....................................................................................................9
SWITCH CONFIGURATION ..........................................................................................................9
HOME.......................................................................................................................................9
PORT CONFIGURATION .........................................................................................................9
QUICK SETUP..........................................................................................................................10
PORT SETTINGS.......................................................................................................................10
BASIC CONFIG ....................................................................................................................10
PORT AGGREGATION...........................................................................................................12
PORT MIRRORING................................................................................................................13
PORT SPEED LIMIT ................................................................................................................13
BROADCAST STORM ............................................................................................................14
PORT ISOLATION..................................................................................................................15
VLAN ......................................................................................................................................15
NEW VLAN ...........................................................................................................................16
TRUNK PORT SETTINGS ........................................................................................................16
HYBRID PORT SETTINGS .......................................................................................................17
FAULT/SAFETY.........................................................................................................................20
ANTI ATTACK........................................................................................................................20
CHANNEL DETECTION .........................................................................................................24
ACL......................................................................................................................................25
802.1X .................................................................................................................................27
POE ........................................................................................................................................28
POE CONFIG .......................................................................................................................28
POE PORT CONFIG ..................................................................................................................................................................30
POE DELAY CONFIG ............................................................................................................31
STP .........................................................................................................................................31

3
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports User Manual
MSTP REGION......................................................................................................................33
STP BRIDGE..........................................................................................................................34
DHCP RELAY ...........................................................................................................................35
DHCP RELAY ........................................................................................................................36
OPTION82............................................................................................................................36
DHCP SERVER.........................................................................................................................37
ENABLE CONFIG..................................................................................................................37
POOL CONFIG.....................................................................................................................37
OPTION CONFIG .................................................................................................................37
BIND CONFIG ......................................................................................................................38
DNS CONFIG .......................................................................................................................38
TERMINAL ACCESS CONTROLLER ACCESS-CONTROL SYSTEM (TACACS+) ............................38
RADIUS ...................................................................................................................................40
RADIUS GENERAL CONFIG ..................................................................................................40
RADIUS SERVER CONFIG .....................................................................................................40
AAA AUTHENTICATION ...........................................................................................................41
LOGIN AUTHENTICATION .....................................................................................................41
ENABLE AUTHENTICATION....................................................................................................42
DOT1X AUTHENTICATION.....................................................................................................42
QOS – QUALITY OF SERVICE...................................................................................................42
QUEUE CONFIG ...................................................................................................................43
QUEUE MAPPING.................................................................................................................43
ADDRESS TABLE ......................................................................................................................44
MAC MANAGEMENT............................................................................................................44
MAC STUDY AND AGING .....................................................................................................45
MAC FILTER..........................................................................................................................45
SNMP......................................................................................................................................46
SNMP CONFIG.....................................................................................................................46
RMON CONFIG....................................................................................................................48
LACP ......................................................................................................................................51
LACP SETTING......................................................................................................................51
LACP DISPLAY......................................................................................................................52
SYSTEM CONFIG.....................................................................................................................52
SYSTEM SETTINGS ................................................................................................................52
SYSTEM UPDATE ...................................................................................................................54
CONFIGURATION MANAGEMENT ........................................................................................55
CONFIG SAVE......................................................................................................................56
USER ACCOUNTS.................................................................................................................56
INFORMATION COLLECT......................................................................................................57
ADDITIONAL INFORMATION......................................................................................................58

4
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports
User Manual
INTRODUCTION
Thank you for purchasing the Intellinet Network Solutions 24-Port Gigabit Ethernet PoE+ Web-Managed
Switch with 4 Gigabit Combo Base-T/SFP Ports. Before you install and use this product, read this manual
carefully for a full understanding of its functions.
PRODUCT OVERVIEW
This switch provides seamless network connections. It integrates 1000 Mbps Gigabit Ethernet, 100 Mbps Fast
Ethernet and 10 Mbps Ethernet network capabilities in a highly exible package. Each of the 24 10/100/1000
Mbps Auto-Negotiation RJ45 ports support Auto MDI/MDIX function. The switch is a high-performance
upgrade from your old network to a 1000 Mbps Gigabit network. It is essential in solving network
bottlenecks that frequently develop as more advanced computer users and newer applications demand
greater network resources. For ecient management, the switch is equipped with a remote Web interface.
The switch can be programmed for advanced management functions such as Port Management, Link
Aggregation, VLAN, Spanning Tree, Multicast, QoS, Security, Access Control, MAC Address Table, Diagnostics,
RMON and Maintenance. Its PoE ports can automatically detect and supply power to IEEE802.3at-compliant
Powered Devices (PD) such as Wireless Access Points, network cameras or Voice over IP phones.
FEATURES
• Provides power and data connection for up to 24 PoE network devices
• Saves installation costs by delivering data and power over existing network cables
• IEEE 802.3at/af-compliant RJ45 PoE/PoE+ output ports
• PoE power budget of 370 watts
• Power output up to 30 watts per port
• Supports SNMP management
• Four small form-factor pluggable GBIC module slots (SFP)
• Supports VLAN (tag-based and port-based)
• Provides IEEE 802.1x port-based security
• Supports link aggregation (trunking)
• Supports port mirroring
• Broadcast storm control
• Supports QoS
• LEDs for power, link/activity and PoE
• Includes 19” rackmount brackets
SPECIFICATIONS
Standards
• IEEE 802.1p (Trac Prioritization)
• IEEE 802.1q (VLAN Tagging)
• IEEE 802.1w (Rapid Spanning Tree Protocol)
• IEEE 802.3ad (Link Aggregation)
• IEEE 802.3 (10Base-T Ethernet)
• IEEE 802.3ab (Twisted Pair Gigabit Ethernet)
• IEEE 802.3ad (Link Aggregation Control Protocol LACP)
• IEEE 802.3af (Power over Ethernet 802.3at Type 1)
• IEEE 802.3at (Power over Ethernet 802.3at Type 2)
• IEEE 802.3u (100Base-TX Fast Ethernet)
• IEEE 802.3x (ow control, for full duplex mode)

5
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports User Manual
Power
• Input: 90 – 240 V AC, 50 – 60 Hz
• Power consumption: 431.7 watts (maximum)
Environmental
• Metal housing
• Dimensions: 330 (L) x 440 (W) x 44 (H) [mm] / 12.99 (L) x 17.32 (W) x 1.73 (H) [in]
• Weight: 4.7 kg (10.4 lbs.)
• Operating temperature: 0 – 45°C (32 – 113°F)
• Operating humidity: 10 – 90% RH, non-condensing
• Storage temperature: -40 – 70°C (-40 – 158°F)
EXTERNAL COMPONENT DESCRIPTION
FRONT PANEL
The front panel of the switch consists of 24 10/100/1000 Mbps RJ-45 ports, four SFP ports, one Console port,
one Reset button and a series of LED indicators as shown below.
10/100/1000 Mbps RJ-45 ports (1 – 24):
Designed to connect to the device with a bandwidth of 10 Mbps, 100 Mbps or 1000 Mbps. Each has a
corresponding 10/100/1000 Mbps LED.
Combo ports (25 – 28S, 25 – 28T):
For the installation of up to four SFP modules; oers four SFP receiver slots, which are shared with four
related RJ45 ports (25 – 28T).
Console port (Console):
Designed to connect with the serial port of a computer or terminal for monitoring and conguring
the switch.
Reset button (Reset):
To restore the system factory default settings, press the reset button for ve seconds while the device is
powered on.
LED indicators:
The LED indicators will allow you to monitor, diagnose and troubleshoot any potential problem with the
switch, its connection or attached devices.
The following chart shows the LED indicators of the switch along with explanation of each indicator.
LED COLOR STATUS STATUS DESCRIPTION
Power Red On Power On
O Power O
LINK/ACT/
Speed
(1 – 24)
10/100 Mbps:
Amber
On A device is connected to the port
O No device is connected to the port
1000 Mbps:
Green Flashing Sending or receiving data
SFP
(25S – 28S) Green
On A device is connected to the port
O No device is connected to the port
Flashing Sending or receiving data

6
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports
User Manual
LED COLOR STATUS STATUS DESCRIPTION
POE Yellow
On An IEEE 802.3af/at-compliant powered device (PD) is connected to the port, and the PoE
switch supplies power successfully.
O No powered device is connected to the port.
Flashing There may be a short circuit or PoE power overload. Disconnect the device from this
port immediately.
SYS Green Flashing The system is starting, or the system has started successfully.
REAR PANEL
AC Power Connector:
Power is supplied through an external AC power adapter. It supports AC 100-240V, 50/60Hz.
Grounding Terminal:
Ground the switch through the PE cable on the AC cord or with a separate ground wire.
PACKAGE CONTENTS
Before installing the switch, make sure that the following items are enclosed. If any part is missing or
damaged, contact your Intellinet Network Solutions agent immediately.
• 24-Port Gigabit Ethernet PoE+ Web-Managed Switch with 4 Gigabit Combo Base-T/SFP Ports
• Quick Instruction Guide
• Power cable
• 19”mounting brackets
• Rubber feet
INSTALLING AND CONNECTING THE SWITCH
This chapter describes how to install the switch and make connections to it. The following steps will help
prevent damage to the device and maintain proper security:
• Place the switch on a stable surface or desktop to minimize the chances of it falling.
• Make sure the switch works in the proper AC input range and matches the voltage labeled on the switch.
• To prevent electrocution, do not open the switch’s chassis, even if it fails to receive power.
• Make sure that there is proper heat dissipation from and adequate ventilation around the switch.
• Make sure the surface on which the switch is placed can support the weight of the switch and
its accessories.
DESKTOP INSTALLATION
When installing the switch on a desktop (if not in a rack), attach the enclosed rubber feet to the bottom
corners of it to minimize vibration. Allow adequate space for ventilation between the device and the objects
around it.
Desktop Installation

7
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports User Manual
RACKMOUNT INSTALLATION IN 19” CABINET
The switch can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet
with other equipment. To install the switch, follow these steps:
Attach the mounting brackets on the switch’s side panels (one on each side) and secure them with the
screws provided.
Use the screws provided with the equipment rack to mount the switch on the rack and tighten it.
POWER ON THE SWITCH
The switch is powered on by connecting it to an outlet using the AC 100-240V 50/60Hz internal high-
performance power supply.
AC Electrical Outlet:
It is recommended to use a single-phase, three-wire receptacle with a neutral outlet or multifunctional
professional receptacle. Be sure to connect the metal ground connector to the grounding source on the
outlet.
AC Power Cord Connection:
Connect the AC power connector on the back panel of the switch to an external receptacle with the included
power cord, and then check that the power indicator is ON. When it is ON, the corresponding LED
is illuminated.
CONNECTION TO THE SWITCH
CONNECTING TO COMPUTER
Use standard Cat5e/6 Ethernet cables (UTP/STP) to connect the switch to end nodes as described below.
Switch ports will automatically adjust to the characteristics (MDI/MDI-X, speed, duplex) of the device to
which they are connected.
The LNK/ACT/Speed LEDs for each port are illuminated when the link is available.
!

8
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports
User Manual
HOW TO LOG IN TO THE SWITCH
As the switch provides Web-based management login, congure your computer’s IP address manually to log
on to the switch. The default settings of the switch are shown below.
Parameter Default Value
Default IP address 192.168.2.1
Default Username admin
Default Password 1234
Log on to the conguration window of the switch through following steps:
1. Connect the switch with the computer NIC interface.
2. Power on the switch.
3. Check whether the IP address of the computer is within this network segment: 192.168.2.xxx (“xxx”
range is 2-254); for example, 192.168.2.100.
Open the browser, and go to the URL http://192.168.2.1 to access the switch login window, as shown below.
Enter the Username and Password (the factory default Username is admin and the Password is 1234), and
then click“LOGIN” to log in to the switch conguration window as below.

9
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports User Manual
SAVING THE CONFIGURATION
The Intellinet Network Solutions 24‐Port Gigabit Ethernet PoE+ Web Managed Switch provides a myriad of
conguration options, many of which are designed for experienced network administrators and aren’t easy
to congure. It would be a real shame if all the conguration data was lost after a power failure or after the
switch was restarted. In order to make the conguration permanent, it needs to be saved. Here is how:
SWITCH CONFIGURATION
This chapter describes how to use the web‐based management interface (Web UI) for this switch.
HOME
PORT CONFIGURATION
A green square indicates the port link is up at Gigabit speeds. A red square indicates that a PoE device is
connected. A gray square indicates the port link is down.
PORT INFORMATION, EQUIPMENT CONFIGURATION AND PORT STATISTICS
This section provides real‐time information about the ports, basic settings and trac statistics.
Item Description
Port Information
Displays the port number. The nomenclature is as follows:
Gi = Gigabit Ethernet
0/ = Switch 0 (which means this device)
1 – 24 = Port number. Ports 25 through 28 are SFP module slots
Description Optional description for the port, as entered in the basic port conguration
Input Flow (bps) Inbound trac rate, measured in “bits per second”
Output Flow (bps) Outbound trac rate, measured in“bits per second”
Open State
ON = Port is activated in the basic port conguration and will accept
connections from networking devices
OFF = Port is deactivated in basic port conguration
Status Connect: A networking device is connected to the port and has an active link
Disconnect: No device is connected to the port
VLAN If the port belongs to a VLAN, its ID is displayed here; ID 1 = default.
Trunk Port Yes = The port is part of an LACP trunking group
No = The port is not part of an LACP trunking group
This tab displays information about various functions and provides a short‐cut that allows direct
conguration of that part of the switch settings.

10
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports
User Manual
QUICK SETUP
This switch provides a setting that oers direct access to some of the core functions of the device, namely
VLAN, trunking, device IP address and admin password. Even though the function is called“Quickly Set,”
there is no need to rush. Take as much time as you like with the conguration. Refer to subsequent sections
in this user guide for additional information about the individual functions.
PORT SETTINGS
BASIC CONFIG
Item Description
VLAN ID VLAN number
VLAN Name VLAN mark
Management IP Manage the IP address of the VLAN
Device Name Switch name
Management VLAN Switch’s management in use of the VLAN

11
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports User Manual
Item Description
Port description Optional description for the port. A maximum of 80 characters can be provided. No special
characters or spaces are allowed.
Port speed
10M: Forces a connection to be made at 10 Mbps.
100M: Forces a connection to be made at 100 Mbps.
1000M: Forces a connection to be made at 1000 Mbps.
Auto: The switch and connected device negotiate the best possible connection speed.
Flow control
IEEE 802.3x ow control is the process of managing the rate of data transmission between
two nodes (i.e., the switch and a connected network client) to prevent a fast sender from
overwhelming a slow receiver. It provides a mechanism for the receiver to control the
transmission speed, so that the receiving node is not overwhelmed with data from the
transmitting node. That sounds like it is a good thing, and it is. So why is the option by default
set to“disabled”? The short answer is because you normally don’t need it and because it can,
in very rare instances, have a negative impact on the overall performance in your network. The
TCP protocol already provides its own ow control mechanism, allowing a sender to throttle
back the speed if the receiver is having problems keeping up.
Port status ON: Activates the port.
OFF: Disables the port. No connections to it can be made.
Working mode
This parameter controls the duplex mode. In a full-duplex system, both parties can
communicate to the other simultaneously. An example of a full-duplex device is a telephone;
the parties at both ends of a call can speak and be heard by the other party simultaneously.
In networking terms, full duplex allows receiving and transmitting of data at the same time,
whereas half duplex does not. If the telephone is an example for full duplex, then a push-to-
talk CB radio or“walkie-talkie” represents half duplex. The switch can either receive or send
data, but it can never happen simultaneously. Unless you have a specic reason not to do so,
this should be left in “Auto” mode.
Cross line order
Auto MDI-X automatically detects the required cable-connection type and congures the
connection appropriately, removing the need for crossover cables to interconnect switches
or for connecting PCs peer-to-peer. As long as it is enabled on either end of a link, either type
of cable can be used. For auto MDI-X to operate correctly, the data rate on the interface and
duplex setting must be set to“auto.”When two auto MDI-X ports are connected together, which
is normal for modern products, the algorithm resolution time is typically < 500 ms. However, a
~1.4 second asynchronous timer is used to resolve the extremely rare case (with a probability
of less than 1 in 5×1021) of a loop where each end keeps switching. If you don’t understand
any of this, simply leave this value on“Auto.”
Access the parameters related to each of the 24 ports. The screen is divided into two sections. The upper
section displays an image of the 24 ports of the Intellinet Network Solutions switch. In order to make
changes to a port, simply click to select it.
Create a selection of multiple ports at once:

12
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports
User Manual
Once one port or multiple ports are selected, make changes to the port settings.
The screen also shows a table that lists all 24 ports along with their parameters. The “mega frame”value
refers to jumbo frames, which are Ethernet frames with more than 1500 bytes of payload Dene the size of
the jumbo frames in the section SYSTEM -> SYSTEM CONFIG.
Clicking the pencil allows editing the port settings, exactly the same way as directly selecting the
port(s) as shown on the previous page.
PORT AGGREGATION
Port aggregation is a method of using multiple Ethernet ports in parallel to increase throughput beyond
what a single connection could sustain and to provide redundancy in case one of the links should fail. As this
is essentially a grouping of ports into one logical unit, we call them Link Aggregation Groups, or “LAG”
for short.
This page is used to set up LAGs. Create up to eight dierent LAGs; each can have up to eight member ports.
Each LAG can be given a custom name, and you must select the ports for the LAG. The example below shows
an LAG group set up with two member ports.

13
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports User Manual
Item Description
Aggregate port number This is the link aggregation group (LAG) number
Select the port to join the aggregate port Select the member ports that belong to this LAG
PORT MIRRORING
Port mirroring is the ability of a network switch to send a
copy of network packets seen on a switch port or ports to a
network-monitoring device connected to another switch port
(i.e., a computer equipped with a packet snier utility). The
switch provides up to four groups for port-mirroring settings.
The example below shows setting up one mirror group where
all trac occurring on ports 4, 5 and 6 is being mirrored to
port 3.
PORT SPEED LIMIT
This feature allows you to limit the data rates for a particular port on the Intellinet Network Solutions switch.
When the data rate exceeds user-congured values, the switch drops packets immediately. Rate limiting is
congured for two types of transmissions, which are ingress and egress. Ingress trac is received on any
given port (incoming, inbound, download or input speed), whereas egress trac is trac sent out (outgoing,
outbound, upload or output speed) to another network client.

14
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports
User Manual
The switch allows controlling the available bandwidth for each port individually. The speed is measured in
kbps, which stands for kilobits per second. The default is 1 million, which is the equivalent of 1 Gigabit per
second. Values entered must be multiples of “16”(e.g., 16, 32, 48, …, 512, …., 1024, etc.).
BROADCAST STORM
Storm Control prevents LAN interfaces from being disrupted by a broadcast storm. A broadcast storm occurs
when broadcast packets ood the subnet, creating excessive trac and degrading network performance.
Errors in the protocol-stack implementation or in the network conguration can cause a broadcast storm.
The Intellinet Network Solutions switch allows conguring maximum allowed pps rates for three dierent
types of packets. It’s possible to set all 24 ports to the same value or provide individual values.
Item Description
Port number 1 - 24v Select individual ports or a range of ports.
Broadcast limit Enter the maximum pps (packets per second) for broadcast packets.
Multicast limit Enter the maximum pps (packets per second) for multicast packets.
Unicast limit Enter the maximum pps (packets per second) for unicast packets.

15
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports User Manual
PORT ISOLATION
The port isolation function allows you to congure your Intellinet Network Solutions switch to prevent PCs
on dierent ports from communicating with each other without conguring a VLAN.
Item Description
Source Port Select the port you wish to isolate.
Isolation Port Select the port(s) to which packets from the source port can be forwarded. More than
one port can be selected here.
VLAN
A virtual LAN (VLAN) is any broadcast domain that is partitioned and isolated in a computer network at
the datalink layer (OSI layer 2). VLANs are datalink layer (OSI layer 2) constructs, analogous to IP subnets,
which are network-layer (OSI layer 3) constructs. VLANs can be used to partition a local network into several
distinctive segments.
VLAN technology provides the following advantages:
1. Broadcast trac does not cross into dierent VLANs, which reduces bandwidth utilization and
improves network performance.
2. Security in your LAN can be improved, since packets in dierent VLANs cannot communicate with each
other directly.
3. With VLAN, clients can be allocated to dierent working groups, and users from the same group do not
have to be within the same physical area, which makes network maintenance much easier and more
exible.
VLAN technology knows three types of ports — access, trunk and hybrid ports.
1. Access Ports (untagged)
a. Access ports are designed to tag any incoming packet with the VLAN ID the port has been
assigned to.

16
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports
User Manual
b. Tagged VLAN packets arriving at the access port are dropped by the switch.
c. As far as the switch is concerned, any port that isn’t dened as a trunk or hybrid port is considered
an access port.
2. Trunk Ports (tagged)
a. Trunk ports are designed to lter out packets that have either no VLAN tag or VLAN tags that are
not on the allowed VLAN ID list.
b. Trunk ports do not remove any existing VLAN tags from incoming packets.
c. Trunk ports do not add a VLAN tag to any incoming untagged packet.
d. Trunk ports are ideal for switch-to-switch connections or for devices that have the ability to tag
packets by themselves such as VoIP phones.
3. Hybrid Ports
a. These are a combination of access and trunk ports.
b. Hybrid ports will tag any incoming packet that has no VLAN ID with the VLAN ID the port has been
assigned to.
c. Hybrid ports will also act as trunk ports for packets that have a VLAN tag.
NEW VLAN
Item Description
VLAN ID Type in the ID for the new VLAN. This value cannot be“1”nor any ID already
setup on the switch.
VLAN Name Provide a descriptive name for the VLAN (e.g., “VOICE”).
Choose to join the VLAN port Select all the ports you wish to be a part of this VLAN. Note that these ports
will act as access ports. They will add the VLAN ID to any untagged packet
and reject any incoming packets that have a VLAN tag.
Note: VLAN ID 1 is the default VLAN, which cannot be removed. However, access ports that are assigned to
another VLAN will be automatically removed from VLAN 1. The screen shot below shows what the setup
looks like after the above VLAN has been added:
TRUNK PORT SETTINGS
A trunk port transmits tagged packets and is used to connect dierent switches with one another.

17
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports User Manual
Item Description
Native VLAN ID The native VLAN ID is the untagged VLAN on an IEEE 802.1q trunked port. The
native VLAN and management VLAN (see SYSTEM->SYSTEM CONFIG) can be the
same, but in terms of security, it is better that they are not. If a switch receives
an untagged frame on a trunk port, it is assumed to be part of the Native VLAN
that is designated on the switch trunk port.
Allowing VLAN Enter the IDs of all VLANs that you wish the trunk port to forward. All other
tagged packets will be dropped.
Note that any value you enter here must rst be dened as a VLAN in the
previous VLAN settings page.
HYBRID PORT SETTINGS
A Hybrid port is a combination of a trunk and an access port.

18
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports
User Manual
Item Description
Native VLAN ID See previous trunk port section.
VLAN TAG VLAN ID that is added to any untagged packet arriving at the port. Note: Though the
web interface may say otherwise, you cannot enter multiple IDs or ranges of IDs.
Allowed VLAN IDS Enter the IDs of all VLANs that you wish the hybrid port to forward. All other tagged
packets will be dropped.
Port Description The name of the port as dened in HOME section of this manual
Add TAG VLAN VLAN ID that is added to untagged VLAN packets.
Allowed TAG VLAN Tagged VLAN packets that are allowed to pass through, all other tagged packets will
be dropped.
Setup Example
This section provides a real-life example and the corresponding setup of the Intellinet Network Solutions
switch, or in this case, switches.
• There are three VLANs in the network
• VLAN ID 100 – Internal data network with access to Internet
• VLAN ID 200 – VoIP network
• VLAN ID 300 – Guest network provides Internet access, but nothing else
• LAN Switch #1:
• Port 2: VoIP phone using VLAN ID 200, PC connected to back of phone
• Port 6: VoIP phone using VLAN ID 200
• Port 8: PC
• Port 10: Wireless access point for internal network and access to Internet
• Port 12: Guest wireless access point provides Internet access only
• Port 16: Connection to LAN switch #2

19
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports User Manual
• LAN Switch #2:
• Port 1: Connection to LAN switch #1
• Port 2: Mail Server
• Port 3: File Server
• Port 4: VoIP Gateway / PBX
• Port 8: Internet gateway, rewall, modem
Set up LAN Switch #1:
Trunk port settings:
Port 6: VoIP phone. This phone tags all packets by itself. The switch does not need to tag the packets.
Port 16: Connection to LAN switch #2. This port passes on all trac for VLAN IDs 100, 200 and 300. All other
trac will be dropped.
Hybrid port settings:
Port 2 is a special case because two networking devices are connected—the VoIP phone and a PC, which is
connected to the back of the phone. The VoIP phone tags the packets itself, and the switch must let them go
through, just like a normal trunk port would. However, the PC connected to it cannot tag the packets by itself
and therefore must rely on the Intellinet Network Solutions switch to do so.
The switch adds the VLAN ID 100 to all packets that are not tagged as VLAN ID 200. Port number two acts as
an untagged port (VLAN ID 100) and tagged port (VLAN ID 200) at the same time, hence the name hybrid.
Set up LAN Switch #2:
VLAN ID 1 (default VLAN) only contains ports that are not otherwise assigned.

20
24-Port Gigabit Ethernet PoE+ Web-Managed Switch with
4 Gigabit Combo Base-T/SFP Ports
User Manual
FAULT/SAFETY
In the navigation bar, select“Fault/Safety”to set options for Anti Attack,Channel Detection, ACL
and 802.1x.
ANTI ATTACK
DHCP SNOOPING
DHCP snooping is a security technology built into the operating system of a capable network switch that
drops DHCP trac determined to be unacceptable. The fundamental use for DHCP snooping is to prevent
unauthorized (rogue) DHCP servers oering IP addresses to DHCP clients.
COMMAND USAGE
Network trac may be disrupted when malicious DHCP messages are received from an outside source.
DHCP snooping is used to lter DHCP messages received on a non-secure interface from outside the
network or rewall. When DHCP snooping is enabled globally and enabled on a VLAN interface, DHCP
messages received on an untrusted interface from a device not listed in the DHCP snooping table will
be dropped.
Table entries are only learned for trusted interfaces. An entry is added or removed dynamically to the DHCP
snooping table when a client receives or releases an IP address from a DHCP server. Each entry includes a
MAC address, IP address, lease time, VLAN identier and port identier. When DHCP snooping is enabled,
DHCP messages entering an untrusted interface are ltered based upon dynamic entries learned via DHCP
snooping.