Interlogix NS3503-16P-4C User manual

NS3503-16P-4C User
Manual
P/N 1073221 • REV A • ISS 08SEP16

Copyright © 2016 United Technologies Corporation,
Interlogix is part of UTC Climate, Controls & Security, a unit of United Technologies
Corporation. All rights reserved.
Trademarks and
patents Trade names used in this document may be trademarks or registered trademarks of the manufacturers or vendors of the respective products.
Manufacturer Interlogix
2955 Red Hill Avenue, Costa Mesa, CA 92626-5923, USA
Authorized EU manufacturing representative:
UTC Fire & Security B.V.
Kelvinstraat 7, 6003 DH Weert, The Netherlands
Certification
FCC compliance Class A
: This equipment has been tested and found to comply with the limits for a Class A
digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio frequency
energy and, if not installed and used in accordance with the instruction manual, may cause
harmful interference to radio communications. Operation of this equipment in a residential
area is likely to cause harmful interference in which case the user will be required to correct
the interference at his own expense.
FCC conditions This device complies with Part 15 of the FCC Rules. Operation is subject to the following
two conditions:
(1) This device may not cause harmful interference.
(2) This Device must accept any interference received, including interference that may
cause undesired operation.
ACMA
compliance Notice! This is a Class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures.
Canada This Class A digital apparatus complies with CAN ICES-003 (A)/NMB-3 (A).
Cet appareil numérique de la classe A est conforme à la norme CAN ICES-003 (A)/NMB-3
(A).
European Union
directives This product and - if applicable - the supplied accessories too are marked with "CE" and
comply therefore with th
e applicable harmonized European standards listed under the EMC
Directive 2014/30/EU, the RoHS Directive 2011/65/EU.
2012/19/EU (WEEE directive):
Products marked with this symbol cannot be disposed of as
unsorted municipal waste in the European Union. For proper recycling, return this product
to your local supplier upon the purchase of equivalent new equipment, or dispose of it at
designated collection points. For more information see: www.recyclethis.info.
2013/56/EU (battery directive): This product
contains a battery that cannot be disposed of
as unsorted municipal waste in the European Union. See the product documentation for
specific battery information. The battery is marked with this symbol, which may include
lettering to indicate cadmium (Cd), lead (Pb), or mercury (Hg). For proper recycling, return
the battery to your supplier or to a designated collection point. For more information
see: www.recyclethis.info.
Contact
information For contact information, see www.interlogix.com

1
NS3503-16P-4C User Manual
CONTENTS
NS3503-16P-4C User Manual........................................................................................1
1. INTRODUCTION.........................................................................................................9
1.1 Packet Contents..............................................................................................................................9
1.2 Product Description........................................................................................................................9
A New Generation Ultra PoE Managed Switch with Advanced L2/L4 Switching and Security..9
60 W of Power over 4-pair UTP.............................................................................................. 10
Built-in Unique PoE Functions for Powered Devices Management........................................ 10
Intelligent Powered Device Alive Check...................................................................................11
Scheduled Power Recycling ....................................................................................................11
PoE Schedule for Energy Saving.............................................................................................11
PoE Usage Monitoring............................................................................................................ 12
Environment-friendly, Smart Fan Design for Silent Operation................................................ 12
IPv6/IPv4 Dual Stack Management ........................................................................................ 12
Robust Layer 2 Features......................................................................................................... 12
Efficient Traffic Control............................................................................................................ 13
Powerful Security .................................................................................................................... 13
Advanced Network Security.................................................................................................... 13
Friendly and Secure Management.......................................................................................... 13
Flexibility and Long-distance Extension Solution.................................................................... 13
1.3 How to Use This Manual.............................................................................................................. 14
1.4 Product Features.......................................................................................................................... 14
Physical Port ........................................................................................................................... 14
Power over Ethernet ............................................................................................................... 14
Layer 2 Features..................................................................................................................... 15
Quality of Service.................................................................................................................... 15
Multicast.................................................................................................................................. 15
Security ................................................................................................................................... 16
Management ........................................................................................................................... 16
1.5 Product Specifications ................................................................................................................ 17
NS3503-16P-4C...................................................................................................................... 17
2. INSTALLATION.........................................................................................................21
2.1 Hardware Description.................................................................................................................. 21

NS3503-16P-4C User Manual 2
2.1.1 Switch Front Panel ............................................................................................................... 21
2.1.2 LED Indications..................................................................................................................... 22
2.1.3 Switch Rear Panel................................................................................................................ 23
2.2 Installing the Switch..................................................................................................................... 24
2.2.1 Desktop Installation .............................................................................................................. 24
2.2.2 Rack Mounting...................................................................................................................... 25
2.2.3 Installing the SFP transceiver............................................................................................... 26
3. SWITCH MANAGEMENT .........................................................................................29
3.1 Requirements ............................................................................................................................... 29
3.2 Management Access Overview................................................................................................... 29
3.3 Administration Console............................................................................................................... 30
3.4 Web Management......................................................................................................................... 31
3.5 SNMP-based Network Management........................................................................................... 32
3.6 IFS Smart Discovery Utility......................................................................................................... 33
4. WEB CONFIGURATION...........................................................................................35
4.1 Main Web Page............................................................................................................................. 37
4.1.1 Save Button.......................................................................................................................... 38
4.1.2 Configuration Manager......................................................................................................... 39
4.1.2.1 Saving Configuration................................................................................................... 40
4.2 System........................................................................................................................................... 41
4.2.1 System Information............................................................................................................... 41
4.2.2 IP Configurations.................................................................................................................. 42
4.2.3 IPv6 Configuration................................................................................................................ 44
4.2.4 User Configuration................................................................................................................ 45
4.2.5 Time Settings........................................................................................................................ 47
4.2.5.1 System Time ............................................................................................................... 47
4.2.5.2 SNTP Server Settings................................................................................................. 49
4.2.6 Log Management.................................................................................................................. 50
4.2.6.1 Local Log..................................................................................................................... 51
4.2.6.2 Local Log..................................................................................................................... 51
4.2.6.3 Remote Syslog............................................................................................................ 53
4.2.6.4 Log Message............................................................................................................... 54
4.2.7 SNMP Management ............................................................................................................. 56

3
NS3503-16P-4C User Manual
4.2.7.1 SNMP Overview.......................................................................................................... 56
4.2.7.2 SNMP System Information.......................................................................................... 57
4.2.7.3 SNMP View................................................................................................................. 58
4.2.7.4 SNMPAccess Group .................................................................................................. 59
4.2.7.5 SNMP Community....................................................................................................... 61
4.2.7.6 SNMP User ................................................................................................................. 62
4.2.7.7 SNMPv1, 2 Notification Recipients............................................................................. 64
4.2.7.8 SNMPv3 Notification Recipients ................................................................................. 65
4.2.7.9 SNMP Engine ID......................................................................................................... 66
4.2.7.10 SNMP Remote Engine ID ......................................................................................... 67
4.3 Port Management......................................................................................................................... 68
4.3.1 Port Configuration................................................................................................................. 69
4.3.2 Port Counters........................................................................................................................ 70
4.3.3 Bandwidth Utilization ............................................................................................................ 74
4.3.4 Port Mirroring........................................................................................................................ 75
4.3.5 Jumbo Frame........................................................................................................................ 77
4.3.6 Port Error Disabled Configuration......................................................................................... 79
4.3.7 Port Error Disabled............................................................................................................... 81
4.3.8 Protected Ports..................................................................................................................... 81
4.4 Link Aggregation.......................................................................................................................... 84
4.4.1 LAG Setting .......................................................................................................................... 86
4.4.2 LAG Management ................................................................................................................ 87
4.4.3 LAG Port Setting................................................................................................................... 88
4.4.4 LACP Setting........................................................................................................................ 90
4.4.5 LACP Port Setting................................................................................................................. 91
4.4.6 LAG Status............................................................................................................................ 92
4.5 VLAN.............................................................................................................................................. 94
4.5.1 VLAN Overview .................................................................................................................... 94
4.5.2 IEEE 802.1Q VLAN .............................................................................................................. 95
4.5.3 Management VLAN .............................................................................................................. 98
4.5.4 Create VLAN......................................................................................................................... 99
4.5.5 Interface Settings................................................................................................................ 100
4.5.6 Port to VLAN....................................................................................................................... 104
4.5.7 Port VLAN Membership...................................................................................................... 105
4.5.8 Protocol VLAN Group Setting............................................................................................. 105
4.5.9 Protocol VLAN Port Setting................................................................................................ 107
4.5.10 GVRP Setting ................................................................................................................... 109
4.5.11 GVRP Port Setting.............................................................................................................111

NS3503-16P-4C User Manual 4
4.5.12 GVRP VLAN ......................................................................................................................112
4.5.13 GVRP Statistics .................................................................................................................113
4.5.14 VLAN setting example:......................................................................................................114
4.5.14.1 Two separate 802.1Q VLANs...................................................................................114
4.5.14.2 VLAN Trunking between two 802.1Q aware switches.............................................117
4.6 Spanning Tree Protocol............................................................................................................. 120
4.6.1 Theory................................................................................................................................. 120
4.6.2 STP Global Settings ........................................................................................................... 127
4.6.3 STP Port Setting................................................................................................................. 128
4.6.4 CIST Instance Setting......................................................................................................... 131
4.6.5 CIST Port Setting................................................................................................................ 133
4.6.6 MST Instance Configuration............................................................................................... 135
4.6.7 MST Port Setting ................................................................................................................ 136
4.6.8 STP Statistics...................................................................................................................... 138
4.7 Multicast...................................................................................................................................... 139
4.7.1 Properties ........................................................................................................................... 139
4.7.2 IGMP Snooping .................................................................................................................. 140
4.7.2.1 IGMP Setting............................................................................................................. 144
4.7.2.2 IGMP Querier Setting................................................................................................ 146
4.7.2.3 IGMP Static Group.................................................................................................... 147
4.7.2.4 IGMP Group Table .................................................................................................... 148
4.7.2.5 IGMP Router Setting................................................................................................. 148
4.7.2.6 IGMP Router Table.................................................................................................... 150
4.7.2.7 IGMP Forward All...................................................................................................... 151
4.7.3 IGMP Snooping Statics....................................................................................................... 152
4.7.4 MLD Snooping.................................................................................................................... 153
4.7.4.1 MLD Setting .............................................................................................................. 153
4.7.4.2 MLD Static Group...................................................................................................... 155
4.7.4.3 MLD Group Table...................................................................................................... 156
4.7.4.4 MLD Router Setting................................................................................................... 157
4.7.4.5 MLD Router Table..................................................................................................... 158
4.7.4.6 MLD Forward All........................................................................................................ 159
4.7.5 MLD Snooping Statics ........................................................................................................ 160
4.7.6 Multicast Throttling Setting ................................................................................................. 162
4.7.7 Multicast Filter..................................................................................................................... 163
4.7.7.1 Multicast Profile Setting............................................................................................. 164
4.7.7.2 IGMP Filter Setting.................................................................................................... 165
4.7.7.3 MLD Filter Setting ..................................................................................................... 166

5
NS3503-16P-4C User Manual
4.8 Quality of Service....................................................................................................................... 167
4.8.1 Understanding QoS............................................................................................................ 167
4.8.2 General............................................................................................................................... 168
4.8.2.1 QoS Properties.......................................................................................................... 168
4.8.2.2 QoS Port Settings ..................................................................................................... 169
4.8.2.3 Queue Settings ......................................................................................................... 170
4.8.2.4 CoS Mapping ............................................................................................................ 172
4.8.2.5 DSCP Mapping ......................................................................................................... 173
4.8.2.6 IP Precedence Mapping............................................................................................ 175
4.8.3 QoS Basic Mode................................................................................................................. 177
4.8.3.1 Global Settings.......................................................................................................... 177
4.8.3.2 Port Settings.............................................................................................................. 178
4.8.4 Rate Limit............................................................................................................................ 179
4.8.4.1 Ingress Bandwidth Control........................................................................................ 179
4.8.4.2 Egress Bandwidth Control ........................................................................................ 180
4.8.4.3 Egress Queue ........................................................................................................... 181
4.8.5 Voice VLAN......................................................................................................................... 182
4.5.8.1 Introduction to Voice VLAN....................................................................................... 182
4.8.5.2 Properties.................................................................................................................. 182
4.8.5.3 Telephony OUI MAC Setting..................................................................................... 184
4.8.5.4 Telephony OUI Port Setting ...................................................................................... 185
4.9 Security....................................................................................................................................... 187
4.9.1 802.1X ................................................................................................................................ 187
4.9.1.1 Understanding IEEE 802.1X Port-based Authentication........................................... 188
4.9.1.2 802.1X Setting........................................................................................................... 191
4.9.1.3 802.1X Port Setting................................................................................................... 192
4.9.1.4 Guest VLAN Setting.................................................................................................. 194
4.9.1.5 Authenticated Host.................................................................................................... 195
4.9.2 RADIUS Server................................................................................................................... 196
4.9.3 TACACS+ Server................................................................................................................ 199
4.9.4 AAA..................................................................................................................................... 201
4.9.4.1 Login List................................................................................................................... 202
4.9.4.2 Enable List ................................................................................................................ 203
4.9.5 Access ................................................................................................................................ 204
4.9.5.1 Telnet......................................................................................................................... 204
4.9.5.2 SSH........................................................................................................................... 205
4.9.5.3 HTTP......................................................................................................................... 207
4.9.5.4 HTTPs....................................................................................................................... 208
4.9.6 Management Access Method ............................................................................................. 209

NS3503-16P-4C User Manual 6
4.9.6.1 Profile Rules.............................................................................................................. 209
4.9.6.2 Access Rules..............................................................................................................211
4.9.7 DHCP Snooping ..................................................................................................................211
4.9.7.1 DHCP Snooping Overview.........................................................................................211
4.9.7.2 Global Setting............................................................................................................ 213
4.9.7.3 DHCP Snooping VLAN Setting................................................................................. 214
4.9.7.4 Port Setting ............................................................................................................... 215
4.9.7.5 Statistics.................................................................................................................... 217
4.9.7.6 Database Agent......................................................................................................... 218
4.9.7.7 Rate Limit.................................................................................................................. 220
4.9.7.8 Option82 Global Setting............................................................................................ 220
4.9.7.9 Option82 Port Setting................................................................................................ 222
4.9.7.10 Option82 Circuit-ID Setting..................................................................................... 223
4.9.8 Dynamic ARP Inspection.................................................................................................... 224
4.9.8.1 Global Setting............................................................................................................ 224
4.9.8.2 VLAN Setting............................................................................................................. 225
4.9.8.3 Port Setting ............................................................................................................... 226
4.9.8.4 Statistics.................................................................................................................... 228
4.9.8.5 Rate Limit.................................................................................................................. 229
4.9.9 IP Source Guard................................................................................................................. 230
4.9.9.1 Port Settings.............................................................................................................. 230
4.9.9.2 Binding Table............................................................................................................. 232
4.9.10 Port Security..................................................................................................................... 233
4.9.11 DoS................................................................................................................................... 235
4.9.11.1 Global DoS Setting.................................................................................................. 235
4.9.11.2 DoS Port Setting...................................................................................................... 238
4.9.12 Storm Control.................................................................................................................... 239
4.9.12.1 Global Setting.......................................................................................................... 239
4.9.12.2 Port Setting ............................................................................................................. 240
4.10 ACL............................................................................................................................................ 241
4.10.1 MAC-based ACL............................................................................................................... 242
4.10.2 MAC-based ACE .............................................................................................................. 243
4.10.3 IPv4-based ACL................................................................................................................ 245
4.10.4 IPv4-based ACE ............................................................................................................... 246
4.10.5 IPv6-based ACL................................................................................................................ 251
4.10.6 IPv6-based ACE ............................................................................................................... 252
4.10.7 ACL Binding...................................................................................................................... 257
4.11 MAC Address Table.................................................................................................................. 258

7
NS3503-16P-4C User Manual
4.11.1 Static MAC Setting............................................................................................................ 258
4.11.2 MAC Filtering .................................................................................................................... 259
4.11.3 Dynamic Address Setting.................................................................................................. 260
4.11.4 Dynamic Learned.............................................................................................................. 261
4.12 LLDP.......................................................................................................................................... 263
4.12.1 Link Layer Discovery Protocol.......................................................................................... 263
4.12.2 LLDP Global Setting......................................................................................................... 263
4.12.3 LLDP Port Setting............................................................................................................. 265
4.12.4 LLDP Local Device........................................................................................................... 268
4.12.5 LLDP Remove Device ...................................................................................................... 269
4.12.6 MED Network Policy......................................................................................................... 270
4.12.7 MED Port Setting.............................................................................................................. 273
4.12.8 LLDP Overloading ............................................................................................................ 276
4.12.9 LLDP Statistics.................................................................................................................. 278
4.13 Diagnostics............................................................................................................................... 279
4.13.1 Cable Diagnostics............................................................................................................. 280
4.13.2 Ping................................................................................................................................... 281
4.13.3 Ping Test........................................................................................................................... 281
4.13.4 IPv6 Ping Test................................................................................................................... 282
4.13.5 Trace Router..................................................................................................................... 283
4.14 RMON ........................................................................................................................................ 284
4.14.1 RMON Statistics................................................................................................................ 285
4.14.2 RMON Event..................................................................................................................... 286
4.14.3 RMON Event Log ............................................................................................................. 288
4.14.4 RMON Alarm..................................................................................................................... 289
4.14.5 RMON History................................................................................................................... 291
4.14.6 RMON History Log ........................................................................................................... 292
4.15 Power over Ethernet ................................................................................................................ 293
4.15.1 Power over Ethernet Powered Device ............................................................................. 294
4.15.3 Power over Ethernet Configuration .................................................................................. 295
4.15.4 PoE Status........................................................................................................................ 298
4.15.5 PoE Schedule................................................................................................................... 299
4.15.6 PoE Alive Check Configuration......................................................................................... 302
4.16 Maintenance ............................................................................................................................. 303
4.16.1 Factory Default ................................................................................................................. 304
4.16.2 Reboot Switch................................................................................................................... 304
4.16.3 Backup Manager .............................................................................................................. 305

NS3503-16P-4C User Manual 8
4.16.4 Upgrade Manager............................................................................................................. 306
4.16.5 Dual Image ....................................................................................................................... 307
5. SWITCH OPERATION............................................................................................309
5.1 Address Table............................................................................................................................. 309
5.2 Learning...................................................................................................................................... 309
5.3 Forwarding & Filtering............................................................................................................... 309
5.4 Store-and-Forward..................................................................................................................... 309
5.5 Auto-Negotiation ........................................................................................................................ 310
6. TROUBLESHOOTING............................................................................................ 311
APPENDIX A Switch's RJ45 Pin Assignments........................................................313
A.1 1000Mbps, 1000BASE-T............................................................................................................ 313
A.2 10/100Mbps, 10/100BASE-TX ................................................................................................... 313

9
NS3503-16P-4C User Manual
1. INTRODUCTION
Thank you for purchasing IFS NS3503-16P-4C Managed Switch, which comes with multiple Gigabit
Ethernet copper and SFP fiber optic connectibility and robust layer 2 and layer 4 features. The
description of this model is shown below:
NS3503-16P-4C 16-Port 10/100/1000T UltraPoE + 4-Port Gigabit TP/SFP Combo Managed
Switch
“Managed Switch” is used as an alternative name in this user’s manual.
1.1 Packet Contents
Open the box of the Managed Switch and carefully unpack it. The box should contain the following items:
Item Model Name
NS3503-16P-4C
The Managed Switch 1
Quick Installation Guide CD
RS-232 to RJ45 Console Cable 1
Rubber Feet 4
Two Rack-mounting Brackets with
Attachment Screws 2
Power Cord 1
SFP Dust Caps 4
If any item is found missing or damaged, please contact your local reseller for replacement.
1.2 Product Description
A New Generation Ultra PoE Managed Switch with Advanced L2/L4 Switching and
Security
IFS NS3503-16P-4C is a cost-optimized, 1U, Gigabit Ultra PoE Managed Switch featuring IFS intelligent
PoE functions to improve the availability of critical business applications. It provides IPv6/IPv4 dual stack
management and built-in L2/L4 Gigabit switching engine along with 10/100/1000BASE-T ports
featuring 60-watt Ultra PoE and 4 additional Gigabit TP/SFP combo ports. With a total power budget of
up to 400 watts for different kinds of PoE applications, respectively. The NS3503-16P-4C provides a
quick, safe and cost-effective Ultra PoE network solution for small businesses and enterprises users.

NS3503-16P-4C User Manual 10
60 W of Power over 4-pair UTP
IFS NS3503-16P-4C Ultra PoE solution adopts the IEEE 802.3at/af standard. Instead of delivering
power over 2-pair twisted UTP – be it end-span (Pin 1,2,3 and 6) or mid-span (Pin 4,5,7 and 8) – it
provides the capability to source up to 60 watts of power by using all the four pairs of standard Cat5e/6
Ethernet cabling. In the new 4-pair system, two PSE controllers will be used to power both the data pairs
and the spare pairs. It can offer more PoE applications, such as:
PoE PTZ speed dome
Other network devices that need higher PoE power to work normally
Thin-client
AIO (All-in-One) touch PC
Remote digital signage display
Built-in Unique PoE Functions for Powered Devices Management
As it is the managed PoE switch for surveillance, wireless and VoIP networks, IFS NS3503-16P-4C
features the following special PoE management functions:
PD alive check
Scheduled power recycling
PoE schedule
PoE usage monitoring

11
NS3503-16P-4C User Manual
Intelligent Powered Device Alive Check
IFS NS3503-16P-4C can be configured to monitor connected PD (Powered Device) status in real time
via ping action. Once the PD stops working and responding, IFS NS3503-16P-4C will resume the PoE
port power and bring the PD back to work. It will greatly enhance the network reliability through the PoE
port resetting the PD’s power source and reducing administrator management burden.
Scheduled Power Recycling
IFS NS3503-16P-4C allows each of the connected PoE IP cameras or PoE wireless access points to
reboot at a specified time each week. Therefore, it will reduce the chance of IP camera or AP crash
resulting from buffer overflow.
PoE Schedule for Energy Saving
Under the trend of energy saving worldwide and contributing to environmental protection, IFS
NS3503-16P-4C can effectively control the power supply as well as giving high watt power. The “PoE
schedule” function helps you to enable or disable PoE power feeding for each PoE port during specified
time intervals and it is a powerful function to help SMBs or Enterprises save power and money. It also
increases security by powering off PDs that should not be in use during non-business hours.

NS3503-16P-4C User Manual 12
PoE Usage Monitoring
Via the power usage chart in the web management interface, IFS NS3503-16P-4C enables the
administrator to monitor the status ofpower usage of the connected PDs in real time. Thus, it greatly
enhances the management efficiency of the facilities.
Environment-friendly, Smart Fan Design for Silent Operation
IFS NS3503-16P-4C features a desktop-sized metal housing, a low noise design and an effective
ventilation system. It supports the smart fan technology that automatically controls the speed of the
built-in fan to reduce noise and maintain the temperature of the PoE switch for optimal power output
capability. IFS NS3503-16P-4C is able to operate reliably, stably and quietly in any environment without
affecting its performance.
IPv6/IPv4 Dual Stack Management
Supporting both IPv6 and IPv4 protocols, IFS NS3503-16P-4C helps the SMBs to step in the IPv6 era
with the lowest investment as its network facilities need not be replaced or overhauled if the IPv6 FTTx
edge network is set up.
Robust Layer 2 Features
IFS NS3503-16P-4C can be programmed for advanced switch management functions such as dynamic
port link aggregation, 802.1Q VLAN and Q-in-Q VLAN, Multiple Spanning Tree Protocol (MSTP), loop
and BPDU guard, IGMP snooping, and MLD snooping. Via the link aggregation, the NS3503-16P-4C
allows the operation of a high-speed trunk to combine with multiple ports, and supports fail-over as well.
Also, the Link Layer Discovery Protocol (LLDP)is the Layer 2 protocol included to help discover basic
information about neighboring devices on the local broadcast domain.

13
NS3503-16P-4C User Manual
Efficient Traffic Control
IFS NS3503-16P-4C is loaded with robust QoS features and powerful traffic management to enhance
services to business-class data, voice and video solutions. The functionality includes
broadcast/multicast storm control, per port bandwidth control, IP DSCP QoS priority and remarking. It
guarantees the best performance for VoIP and video stream transmission, and empowers the
enterprises to take full advantage of the limited network resources.
Powerful Security
IFS NS3503-16P-4C offers comprehensive IPv4/IPv6 Layer 2 to Layer 4 Access Control List (ACL) for
enforcing security to the edge. It can be used to restrict network access by denying packets based on
source and destination IP address, TCP/UDP ports or defined typical network applications. Its protection
mechanism also comprises of 802.1X port-based user and device authentication, which can be
deployed with RADIUS to ensure the port level security and block illegal users. With the protected port
function, communication between edge ports can be prevented to guarantee user privacy. Furthermore,
Port security function limits the number of network devices on a given port.
Advanced Network Security
IFS NS3503-16P-4C also provides DHCP snooping, IP source guard and dynamic ARP inspection
functions to prevent IP snooping from attack and discard ARP packets with invalid MAC address. The
network administrators can now construct highly-secure corporate networks with considerably less time
and effort than before.
Friendly and Secure Management
For efficient management, IFS NS3503-16P-4C is equipped with web, Telnet and SNMP management
interfaces. With the built-in web-based management interface, IFS NS3503-16P-4C offers an
easy-to-use, platform-independent management and configuration facility. By supporting the standard
SNMP, the switch can be managed via any standard management software. For text-based
management, the switch can be accessed via Telnet. Moreover, IFS NS3503-16P-4C offers secure
remote management by supporting SSH,SSL and SNMP v3 connections which encrypt the packet
content at each session.
Flexibility and Long-distance Extension Solution
The four mini-GBIC slots built in IFS NS3503-16P-4C support SFP auto-detection and dual speed as it
features 100BASE-FX and 1000BASE-SX/LX SFP (Small Form-factor Pluggable) fiber transceivers to
uplink to a backbone switch and monitoring center in long distance. The distance can be extended from
550 meters to 2 kilometers (multi-mode fiber) and up to above 10/20/30/40/50/70 kilometers
(single-mode fiber or WDM fiber). They are well suited for applications within the enterprise data centers
and distributions.

NS3503-16P-4C User Manual 14
1.3 How to Use This Manual
This User Manual is structured as follows:
Section 2, INSTALLATION The section explains the functions of the Switch and how to
physically install the Managed Switch.
Section 3, SWITCH MANAGEMENT The section contains the information about the software function of
the Managed Switch.
Section 4, WEB CONFIGURATION The section explains how to manage the Managed Switch via Web
interface.
Section 5, SWITCH OPERATION The chapter explains how to do the switch operation of the Managed
Switch.
Section 6, TROUBLESHOOTING The chapter explains how to troubleshoot the Managed Switch.
Appendix A The section contains cable information of the Managed Switch.
1.4 Product Features
Physical Port
10/100/1000BASE-T Gigabit RJ45 copper ports with IEEE 802.3at/af/Ultra PoE injector
4 100/1000BASE-X mini-GBIC/SFP slots, compatible with 100BASE-FX SFP
RJ45 console interface for switch basic management and setup
Power over Ethernet
Complies with IEEE 802.3at Power over Ethernet Plus, end-span/mid-span PSE
Backward compatible with IEEE 802.3af Power over Ethernet
IEEE 802.3af/IEEE 802.3at/Ultra PoE devices powered
Supports PoE power up to 60 watts for each ultra PoE port
Auto detects powered device (PD)
Circuit protection prevents power interference between ports
Remote power feeding up to 100 meters
PoE management
−Total PoE power budget control
−Per port PoE function enable/disable
−PoE port power feeding priority
−Per PoE port power limitation
−PD classification detection
−PD alive check
−PoE schedule

15
NS3503-16P-4C User Manual
Layer 2 Features
Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control
(full-duplex)
High performance Store and Forward architecture, broadcast storm control, and runt/CRC filtering
that eliminates erroneous packets to optimize the network bandwidth
Supports VLAN
- IEEE 802.1Q tagged VLAN
- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)
- Protocol VLAN
- Voice VLAN
- Private VLAN
- Management VLAN
- GVRP
Supports Spanning Tree Protocol
- STP (Spanning Tree Protocol)
- RSTP (Rapid Spanning Tree Protocol)
- MSTP (Multiple Spanning Tree Protocol)
- STP BPDU Guard, BPDU filtering and BPDU forwarding
Supports Link Aggregation
−IEEE 802.3ad Link Aggregation Control Protocol (LACP)
−Cisco ether-channel (static trunk)
Provides port mirror (many-to-1)
Loop protection to avoid broadcast loops
Quality of Service
Ingress and egress rate limit per port bandwidth control
Storm control support
−Broadcast/Unknown unicast/Unknown multicast
Traffic classification
- IEEE 802.1p CoS
- TOS/DSCP/IP precedence of IPv4/IPv6 packets
Strict priority and Weighted Round Robin (WRR) CoS policies
Multicast
Supports IPv4 IGMP snooping v2 and v3
Supports IPv6 MLD snooping v1, v2
IGMP querier mode support
IGMP snooping port filtering

NS3503-16P-4C User Manual 16
MLD snooping port filtering
Security
Authentication
−IEEE 802.1X port-based network access authentication
−Built-in RADIUS client to cooperate with the RADIUS servers
−RADIUS/TACACS+ login user access authentication
Access control list
−IPv4/IPv6 IP-based ACL
−MAC-based ACL
MAC security
−Static MAC
−MAC filtering
Port security for source MAC address entries filtering
DHCP snooping to filter distrusted DHCP messages
Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
IP source guard prevents IP spoofing attacks
DoS attack prevention
SSH/SSL
Management
IPv4 and IPv6 dual stack management
Switch management interface
- Web switch management
- Telnet command line interface
- SNMP v1, v2c and v3
- SSH and SSL secure access
User privilege levels control
Built-in Trivial File Transfer Protocol (TFTP) client
BOOTP and DHCP for IP address assignment
System maintenance
- Firmware upload/download via HTTP/TFTP
- Configuration upload/download through web interface
- Dual images
- Hardware reset button for system reboot or reset to factory default
SNTP Network Time Protocol
Cable diagnostics
Link Layer Discovery Protocol (LLDP) and LLDP-MED
SNMP trap for interface link up and link down notification
Event message logging to remote Syslog server

17
NS3503-16P-4C User Manual
Four RMON groups (history, statistics, alarms and events)
IFS smart discovery utility
Smart fan with speed control
1.5 Product Specifications
NS3503-16P-4C
Hardware Specifications
Copper Ports 20 x 10/100/1000BASE-T RJ45 auto-MDI/MDI-X port
SFP/mini-GBIC Slots 4 x 100/1000BASE-X SFP interface shared with port-17 to port-20
Supports 100/1000Mbps dual mode and DDM
PoE Injector Port 16 ports with 802.3at/af/Ultra PoE injector function with port-1 to port-16
Switch Architecture Store-and-Forward
Switch Fabric 40Gbps/non-blocking
Switch Throughput@64Bytes 29.7Mpps
Address Table 8K entries
Shared Data Buffer 4.1 megabits
Flow Control IEEE 802.3x pause frame for full-duplex
Back pressure for half-duplex
Jumbo Frame 10K bytes
Reset Button < 5 sec: System reboot
> 5 sec: Factory default
LED PWR, SYS, LNK/ACT, PoE-in-use, 1000, FAN1, FAN2, PoE PWR
Power Requirements 100~240V AC, 50/60 Hz, auto-sensing
Dimensions (W x D x H) 440 x 300 x 44.5 mm, 1U height
ESD Protection Contact Discharge 4KV DC
Air Discharge 8KV DC
Enclosure Metal
Weight 4479 g
Power Consumption/Dissipation 500 watts (max.)/1706 BTU
Fan 3 x smart fan
PoE Standard IEEE 802.3af/802.3at/Ultra PoE PSE
PoE Power Supply Type End-span/Mid-span/UPoE
PoE Power Output Per port 54V DC, 60 watts (max.)
Power Pin Assignment End-span: 1/2(-), 3/6(+)
Mid-span: 4/5(+), 7/8(-)

NS3503-16P-4C User Manual 18
UPoE: 1/2(-), 3/6(+),4/5(+), 7/8(-)
PoE Power Budget 400 watts (max.)
PoE Ability PD @ 15 watts 16 units
PoE Ability PD @ 30 watts 13 units
PoE Ability PD @ 60 watts 6 units
Layer 2 Functions
Port Mirroring TX/RX/both
Many-to-1 monitor
VLAN
802.1Q tagged-based VLAN
Up to 256 VLAN groups, out of 4094 VLAN IDs
802.1ad Q-in-Q tunneling
Voice VLAN
Protocol VLAN
Private VLAN (Protected port)
GVRP
Link Aggregation IEEE 802.3ad LACP and static trunk
Supports 4 groups of 4-port trunk
Spanning Tree Protocol IEEE 802.1D Spanning Tree Protocol (STP) IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
IGMP Snooping IGMP (v2/v3) snooping IGMP querier
Up to 256 multicast groups
MLD Snooping MLD (v1/v2) snooping, up to 256 multicast groups
Access Control List IPv4/IPv6 IP-based ACL/MAC-based ACL
QoS
8 mapping IDs to 8 level priority queues
- Port number
- 802.1p priority
- 802.1Q VLAN tag
- DSCP field in IP packet
Traffic classification based, strict priority and WRR
Security
IEEE 802.1X port-based authentication
Built-in RADIUS client to cooperate with RADIUS server
RADIUS/TACACS+ user access authentication
IP-MAC port binding
MAC filtering
Static MAC address
DHCP Snooping and DHCP Option82
STP BPDU guard, BPDU filtering and BPDU forwarding
DoS attack prevention