Interlogix NS3562-8P-2S User manual

NS3562-8P-2S User Manual
P/N 1073225-EN • REV B • ISS 01MAR19

Copyright
©
2019 United Technologies Corporation.
Interlogix is part of UTC
Climate, Controls & Security, a unit of United Technologies
Corporation
. All rights reserved.
Trademarks an
d patents
Trade names used in this document may be trademarks or registered trademarks of the
manufacturers or vendors of the respective products.
Manufacturer
Interlogix
2955 Red Hill Avenue, Costa Mesa, CA 92626
-5923, USA
Authorized EU manufacturing r
epresentative:
UTC Fire & Security B.V.
Kelvinstraat 7, 6003 DH Weert, The Netherlands
Version
This document applies to
NS3562-8P-2S.
FCC compliance
This device complies with part 15 of the FCC Rules. Operati
on is subject to the following
two conditions: (1) This device may not cause harmful interference, and (2) this device
must accept any interference received, including interference that may cause undesired
operation.
FCC compliance
Class A:
This equipment has been tested and found to comply with the limits for a Class
A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference when the equipment is
operated in a commercial
environment. This equipment generates, uses, and can radiate
radio frequency energy and, if not installed and used in accordance with the instruction
manual, may cause harmful interference to radio communications. Operation of this
equipment in a resident
ial area is likely to cause harmful interference in which case the
user will be required to correct the interference at his own expense.
Canada
This Class A digital apparatus complies with CAN ICES
-003 (A)/NMB-3 (A).
Cet appareil numérique de la classe
A est conforme à la norme CAN ICES-003
(A)/NMB
-3 (A).
ACMA compliance
Notice!
This is a Class A product. In a domestic environment this product may cause
radio interference in which case the user may be required to take adequate measures.
Certification
EU directives
This product and
- if applicable - the supplied accessories too are marked with "CE" and
comply therefore with the applicable harmonized European standards listed under the
EMC Directive 2014/30/EU, the RoHS Directive 2011/65/EU.
2012/19
/EU (WEEE directive): Products marked with this symbol cannot be disposed of
as unsorted municipal waste in the European Union. For proper recycling, return this
product to your local supplier upon the purchase of equivalent new equipment, or
disp
ose of it at designated collection points. For more information see:
www.recyclethis.info.
Product warnings and
disclaimers
THESE PRODUCTS ARE INTENDED FOR SALE TO AND INSTALLATION BY
QUALIFIED PROFESSIONALS. UTC FIRE & SECURITY CANNOT PROVIDE ANY
ASSURA
NCE THAT ANY PERSON OR ENTITY BUYING ITS PRODUCTS,
INCLUDING ANY “AUTHORIZED DEALER” OR “AUTHORIZED RESELLER”, IS
PROPERLY TRAINED OR EXPERIENCED TO CORRECTLY INSTALL FIRE AND
SECURITY RELATED PRODUCTS
.
For more information on warranty disclaimers and prod
uct safety information, please
check
www.firesecurityproducts.com/policy/product-warning/ or scan the following code:
Contact information and
manuals
For contact information go to:
www.interlogix.com or www.firesecurityproducts.com.
To get translati
ons for this and other product manuals go to:
www.firesecurityproducts.com
.

NS3562-8P-2S User Manual 1
Content
Important information 3
Chapter 1 Introduction 4
Package contents4
Product description 4
Product features 8
Product specifications 11
Chapter 2 Installation 16
Hardware description 16
Installing the industrial managed switch 20
Cabling 22
Chapter 3 Switch management 28
Requirements 28
Management access overview 28
Web management 29
SNMP-based network management 30
Smart discovery utility 30
Chapter 4 Web configuration 32
Main web page 33
System 37
Port management 57
Link aggregation 69
VLAN 77
Spanning Tree Protocol (STP) 99
Multicast 112
Quality of Service (QoS) 130
Security 139
Access Control Lists (ACL) 174
MAC address table 185
LLDP 187
Diagnostics 198
RMON 202
Power over Ethernet (PoE) 209
Maintenance 217
Chapter 5 Switch operation 221
Address table 221
Learning 221
Forwarding and filtering 221
Store-and-forward 221
Auto-negotiation 222

2 NS3562-8P-2S User Manual
Chapter 6 PoE overview 223
What is PoE? 223
PoE system architecture 223
Chapter 7 Troubleshooting 225
Appendix A Networking connection 226
Glossary 228

NS3562-8P-2S User Manual 3
Important information
Limitation of liability
To the maximum extent permitted by applicable law, in no event will UTCFS be liable
for any lost profits or business opportunities, loss of use, business interruption, loss of
data, or any other indirect, special, incidental, or consequential damages under any
theory of liability, whether based in contract, tort, negligence, product liability, or
otherwise. Because some jurisdictions do not allow the exclusion or limitation of liability
for consequential or incidental damages the preceding limitation may not apply to you.
In any event the total liability of UTCFS shall not exceed the purchase price of the
product. The foregoing limitation will apply to the maximum extent permitted by
applicable law, regardless of whether UTCFS has been advised of the possibility of
such damages and regardless of whether any remedy fails of its essential purpose.
Installation in accordance with this manual, applicable codes, and the instructions of the
authority having jurisdiction is mandatory.
While every precaution has been taken during the preparation of this manual to ensure
the accuracy of its contents, UTCFS assumes no responsibility for errors or omissions.
Advisory messages
Advisory messages alert you to conditions or practices that can cause unwanted
results. The advisory messages used in this document are shown and described below.
WARNING: Warning messages advise you of hazards that could result in injury or loss
of life. They tell you which actions to take or to avoid in order to prevent the injury or
loss of life.
Caution: Caution messages advise you of possible equipment damage. They tell you
which actions to take or to avoid in order to prevent damage.
Note: Note messages advise you of the possible loss of time or effort. They describe
how to avoid the loss. Notes are also used to point out important information that you
should read.

4 NS3562-8P-2S User Manual
Chapter 1
Introduction
The description of the IFS NS3562-8P-2S model is as follows:
Industrial L2+ 8-port 10/100/1000T 802.3at PoE+
+ 2-port 100/1000X SFP wall-mount managed switch
Unless specified, the term “industrial managed switch” mentioned in this user manual
refers to the NS3562-8P-2S.
Package contents
Open the box of the industrial managed switch and carefully unpack it. The box should
contain the following items:
The industrial managed switch × 1
Quick installation guide × 1
3-pin terminal block connector × 1
DIN rail kit × 1
Wall mounting kit × 1
Magnet kit × 1
SFP dust-proof cap × 2
RJ45 dust-proof cap × 8
If any of these are missing or damaged, contact your dealer immediately. If possible,
retain the carton including the original packing materials for repacking the product in
case there is a need to return it to us for repair.
Product description
Easily deployed and expanded network
Designed to be installed in a wall enclosure or simply mounted on a wall in any
convenient location, this innovative, wall-mount industrial managed Gigabit Ethernet

Chapter 1: Introduction
NS3562-8P-2S User Manual 5
switch offers IPv6/IPv4 dual stack management, intelligent Layer 2 management
functions, and a user-friendly interface. The IFS managed series is able to operate
reliably, stably, and quietly in any environment without affecting its performance.
Featuring ultra networking speed and an operating temperature ranging from -40 to
75°C in a compact but rugged IP30 metal housing, the IFS managed series is an ideal
solution to meeting the demand for the following network applications:
• Building/Home automation network
• Internet of things (IoT)
• IP surveillance
• Wireless LAN
Innovative wall-mount installation
The IFS managed series is specially designed to be installed in a narrow environment,
such as wall enclosure or electric weak box. The compact, flat, and wall-mounted
design fits easily in any space-limited location. It adopts the user-friendly “Front Access”
design, making the installing, cable wiring, LED monitoring, and maintenance of the
wall-mount managed switch placed in an enclosure convenient for technicians. The IFS
managed series can be installed by fixed wall mounting, magnetic wall mounting, or
DIN rail, thereby making its usability more flexible.
IPv6/IPv4 dual stack
Supporting both IPv6 and IPv4 protocols, the industrial managed switch helps SMBs to
step into the IPv6 era with a low investment as its network facilities need not be
replaced or overhauled with the setup of IPv6 FTTx edge networks.
Robust layer 2 features
The industrial managed switch can be programmed for advanced switch management
functions such as dynamic port link aggregation, 802.1Q VLAN and Q-in-Q VLAN,
Multiple Spanning Tree Protocol (MSTP), Loop and BPDU Guard, and IGMP / MLD
snooping. The industrial managed switch allows the operation of a high-speed trunk
combining multiple ports such as a 16 Gbps fat pipe, and also supports fail-over. Also,
the Link Layer Discovery Protocol (LLDP) is the Layer 2 protocol included to help
discover basic information about neighboring devices on the local broadcast domain.

Chapter 1: Introduction
6 NS3562-8P-2S User Manual
Efficient traffic control
The IFS managed series is loaded with robust QoS features and powerful traffic
management to enhance services to business-class data, voice, and video solutions.
The functionality includes broadcast / multicast storm control, per port bandwidth
control, IP DSCP QoS priority, and remarking. It guarantees the best performance for
VoIP and video stream transmission, and empowers enterprises to take full advantage
of limited network resources.
Powerful security
The industrial switches offer comprehensive layer 2 to layer 4 access control list (ACL)
for enforcing security to the edge. It can be used to restrict to network access by
denying packets based on source and destination IP address, TCP/UDP port number,
or defined typical network applications. Its protection mechanism also comprises
802.1X port-based user and device authentication, which can be deployed with
RADIUS to ensure the port level security and block illegal users. With the Protected
Port function, communication between edge ports can be prevented to guarantee user
privacy. Furthermore, the Port Security function allows limiting the number of network
devices on a given port.
Efficient management
For efficient management, the industrial managed switches are equipped with console,
web, and SNMP management interfaces. With the built-in web-based management
interface, the managed industrial switch offers an easy-to-use, platform-independent
management and configuration facility. It supports standard Simple Network
Management Protocol (SNMP) and can be managed by any management software. For
text-based management mode, the indutrial managed switch can be accessed via
Telnet and the console port. Moreover, the industrial managed switches offer secure
management remotely by supporting SSH, SSL, and SNMP v3 connections where the
packet content can be encrypted at each session.
Built-in unique PoE functions for powered devices management
As a managed PoE switch for surveillance, wireless, and VoIP networks, the IFS PoE
managed series features special PoE management functions:
• PD alive check
• Scheduled power recycling
• PoE schedule
• PoE usage monitoring
Intelligent powered device alive check
The industrial managed switch can be configured to monitor connected PD status in
real time via a ping action. After the PD stops working and responding, the industrial
managed switch resumes the PoE port power and puts the PD back to work. The
industrial managed switch greatly enhances the network reliability through the PoE port
resetting the PD’s power source and reducing the administrator management burden.

Chapter 1: Introduction
NS3562-8P-2S User Manual 7
Scheduled power recycling
The IFS PoE managed series allows each of the connected PoE IP cameras or PoE
wireless access points to reboot at a specific time each week. This reduces the chance
of an IP camera or AP crash resulting from buffer overflow.
PoE schedule for energy saving
Under the trend of energy saving worldwide and contributing to environmental
protection, the industrial managed switch can effectively control the power supply in
addition to its capability of provideing high Watt power. The “PoE schedule” function
helps you to enable or disable PoE power feeding for each PoE port during specified
time intervals, and is a powerful function to help SMBs or enterprises save power and
money. It also increases security by powering off PDs that should not be in use during
non-business hours.

Chapter 1: Introduction
8 NS3562-8P-2S User Manual
PoE usage monitoring
Via the power usage chart in the web management interface, the IFS PoE managed
series enables the administrator to monitor the status of the power usage of the
connected PDs in real time. Thus, it greatly enhances the management efficiency of the
facilities..
Intelligent SFP diagnostic mechanism
The industrial managed switch series supports a SFP-DDM (Digital Diagnostic Monitor)
function that can easily monitor real-time parameters of the SFP transceivers, such as
optical output power, optical input power, temperature, laser bias current, and
transceiver supply voltage.
Flexible and extendable solution
The industrial managed switch features 100BASE-FX and 1000BASE-SX/LX SFP
(Small Form-factor Pluggable) fiber-optic modules, meaning the administrator now can
flexibly choose the suitable SFP transceiver according to the transmission distance or
the transmission speed required to extend the network efficiently.
Product features
Physical port
• 10/100/1000BASE-T gigabit RJ45 copper
• 100/1000BASE-X mini-GBIC/SFP slots
Power over Ethernet
• Complies with IEEE 802.3at High Power over Ethernet end-span/mid-span PSE.
• Complies with IEEE 802.3af Power over Ethernet end-span PSE.
• IEEE 802.3af/IEEE 802.3at devices powered.
• Supports PoE power up to 36 W for each PoE port.

Chapter 1: Introduction
NS3562-8P-2S User Manual 9
• Auto detects powered device (PD).
• Circuit protection prevents power interference between ports.
• Remote power feeding up to 100 meters.
• PoE management:
• Total PoE power budget control
• Per port PoE function enable/disable
• PoE port power feeding priority
• Per PoE port power limitation
• PD classification detection
• Intelligent PoE features:
• PD alive check
• PoE schedule
Layer 2 features
• High performance of Store-and-Forward architecture and runt/CRC filtering
eliminates erroneous packets to optimize the network bandwidth.
Storm control support:
• Broadcast / Multicast / Unknown-Unicast
Supports VLAN
• IEEE 802.1Q tagged VLAN
• Provider bridging (VLAN Q-in-Q) support (IEEE 802.1ad)
• Private VLAN
• Protocol-based VLAN
• MAC-based VLAN
• Voice VLAN
• Management VLAN
• GVRP
Supports STP
• STP, IEEE 802.1D Spanning Tree Protocol
• RSTP, IEEE 802.1w Rapid Spanning Tree Protocol
• MSTP, IEEE 802.1s Multiple Spanning Tree Protocol, spanning tree by VLAN
• BPDU Guard
Supports link aggregation
• IEEE 802.3ad Link Aggregation Control Protocol (LACP)

Chapter 1: Introduction
10 NS3562-8P-2S User Manual
• Cisco ether-channel (static trunk)
• Provides port mirror (many-to-1)
• Loop protection to avoid broadcast loops
Quality of Service
• Ingress shaper and egress rate limit per port bandwidth control
• Storm control support
- Broadcast/unknown unicast/unknown multicast
• Traffic classification:
- IEEE 802.1p CoS
- TOS / DSCP / IP Precedence of IPv4/IPv6 packets
• Strict priority and Weighted Round Robin (WRR) CoS policies
Multicast
• Supports IGMP snooping v1, v2, and v3
• Supports MLD snooping v1 and v2
• Querier mode support
• IGMP snooping port filtering
• MLD snooping port filtering
Security
• Authentication
−IEEE 802.1x Port-Based / MAC-Based network access authentication
−Built-in RADIUS client to co-operate with the RADIUS servers
−TACACS+ login users access authentication
−RADIUS / TACACS+ users access authentication
• Access Control List (ACL)
−IP-based ACL
−MAC-based ACL
• Source MAC / IP address binding
• DHCP snooping to filter distrusted DHCP messages
• Dynamic ARP inspection discards ARP packets with invalid MAC addresses to IP
address binding.
• IP source guard prevents IP spoofing attacks.
• Auto DoS rule to defend against DoS attacks.
• IP address access management to prevent unauthorized intruders.

Chapter 1: Introduction
NS3562-8P-2S User Manual 11
Management
• IPv4 and IPv6 dual stack management
• Switch management interfaces:
• −Console / Telnet Command Line Interface
• −Web switch management
• −SNMP v1 and v2c switch management
• −SSH / SSL and SNMP v3 secure access
• Built-in Trivial File Transfer Protocol (TFTP) client
• System maintenance
• - Firmware upload/download via HTTP / TFTP
• - Dual images
• - Reset button for system reboot or reset to factory default
• Four RMON groups (history, statistics, alarms, and events)
• BOOTP and DHCP for IP address assignment
• User privilege levels control
• Link Layer Discovery Protocol (LLDP) and LLDP-MED
• Smart discovery utility for deploy management
• SNMP trap for interface Link Up and Link Down notification
• Smart fan with speed control
• Cable diagnostics
• Event message logging to remote Syslog server
Product specifications
Hardware Specifi
cations
Copper
Ports
Eight
10/100/1000BASE-T RJ45 auto-MDI/MDI-X ports
SFP
+ Slots
Two
100/1000BASE- X SFP interfaces
Supports 100/1000Mbps dual mode and DDM
PoE Injector Ports
Eight
ports with 802.3at/af PoE injector function (Port-1 to Port-8)
Swit
ch Architecture
Store
-and-Forward
Switch
Fabric
2
0 Gbps / non-blocking
Throughput
14.8
Mpps @ 64 bytes
Address Table
8
K entries
Share
d Data Buffer
4
.1 Mbits

Chapter 1: Introduction
12 NS3562-8P-2S User Manual
Flow Control
IEEE 802.3x
pause frame for full-duplex
Back pressure for
half-duplex
Jumbo
Frame
10
Kb
Reset Button
< 5 seconds: System reboot
>
5 seconds: Factory Default
Enclosure
Metal
Installation
DIN rail kit
, wall-mount, and magnetic wall mount
Dimensions (W×
D×H)
178
× 25 × 134 mm
Weight
640
g
Connector
Removable
3-pin terminal block for power input
-
Pin 1/2 for Power (Pin 1: V+ / Pin 2: V-)
-
Pin 3 for earth ground
DC power jack with 2.0 mm central pole
LED
System:
Power (Green)
P
oE Ports:
PoE-in-Use (Orange)
LNK/ACT (Green)
LAN Port
:
100 LNK/ACT (Orange)
1000 LNK/ACT (Green)
Power Requirement
48~56 VDC, 5A (max.) terminal block power input
48~56 DC, 5A (max.) DC jack power input
Note
: These two power input interfaces don’t support the power redundant
feature.
Power
Consumption
Max 210 W / 716 BTU
ESD Protection
Contact discharge:
6K VDC
Air discharge: 8K VDC
Power Over Ethernet

Chapter 1: Introduction
NS3562-8P-2S User Manual 13
PoE Standard
IEEE 802.3af/IEEE 802.3at Power over Ethernet/PSE
PoE Power Supply Type
End
-span
PoE Power Output
IEEE 802.3af Standard
-
Per port 48~56 VDC (depending on the power supply), max. 15.4 W
IEEE 802.3at Standard
-
Per port 50~56 VDC (depending on the power supply), max. 36 W
Power Pin Assignment
1/2(+), 3/6(
-)
PoE Power Budget
200
W (depending on power input)
Max. number of Class 2 PDs
8
Max. number of Class 3 PDs
8
Max. n
umber of Class 4 PDs
7
Layer 2
Functions
Basic Management Interfaces
Telnet; Web browser; SNMP v1, v2c
Up to 256 VLAN groups, out of 4094 VLAN IDs
802.1ad Q
-in-Q tunneling (VLAN stacking)
Voice VLAN
Protocol VLAN
Private VLAN (Protected port)
GVRP
Manag
ement VLAN
Secure Management
Interfaces
SSH, SSL, SNMP v3
Port Mirroring
TX / RX / both
1
-to-1 monitor
VLAN
802.1Q tagged
-based VLAN
Up to 256 VLAN groups, out of 4094 VLAN IDs
802.1ad Q
-in-Q tunneling (VLAN stacking)
Voice VLAN
Protocol VLAN
Private
VLAN (Protected port)
GVRP
Management VLAN
Link Aggregation
IEEE 802.3ad LACP
/static trunk
Four
groups with four ports per trunk
QoS
Traffic classification based,
strict priority and WRR
8
-level priority for switching
–
Port number
–
802.1p priority
–
802.1Q VLAN tag
–
DSCP/ToS field in IP packet
IGMP Snooping
IGMP (v1/v2
/v3) snooping, up to 256 multicast groups

Chapter 1: Introduction
14 NS3562-8P-2S User Manual
IGMP querier mode support
MLD Snooping
MLD (v1/v2)
snooping, up to 255 multicast groups
MLD
querier mode support
Access Control List
IP
-based ACL / MAC-based ACL
Bandwidth Control
Ingress/egress limit p
er port bandwidth control
Standards Conformance
Regulation Compliance
FCC Part 15 Class A, CE
Stability Testing
IEC60068
-2-32 (free fall)
IEC60068
-2-27 (shock)
IEC60068
-2-6 (vibration)
St
andards Compliance
IEEE 802.3 10BASE
-T
IEEE 802.3u 100BASE
-TX/100BASE-FX
IEEE 802.3z Gigabit SX/LX
IEEE 802.3ab Gigabit 1000BASE
-T
IEEE 802.3x Flow Control and Back Pressure
IEEE 802.3ad Port Trunk with LACP
IEEE 802.1D Spanning Tree Protocol
IEEE 802.1w
Rapid Spanning Tree Protocol
IEEE 802.1s Multiple Spanning Tree Protocol
IEEE 802.1p Class of Service
IEEE 802.1Q VLAN Tagging
IEEE 802.1x Port Authentication Network Control
IEEE 802.1ab LLDP
RFC 768 UDP
RFC 793 TFTP
RFC 791 IP
RFC 792 ICMP
RFC 2068 HTTP
RFC 1112 IGMP version 1
RFC 2236 IGMP version 2
RFC 3376 IGMP version 3
RFC 2710 MLD version 1
FRC 3810 MLD version 2
SNMP MIBs
RFC 1213 MIB
-II
RFC 1215 Generic Traps
RFC 1493 Bridge MIB
RFC 2674 Bridge MIB Extensions
RFC 2737 Entity MIB (version 2)
RFC 2
819 RMON (1, 2, 3, 9)
RFC 2863 Interface Group MIB
RFC 3635 Ethernet
-like MIB
Environment
Operating
Temperature:
-40 to 75°C

Chapter 1: Introduction
NS3562-8P-2S User Manual 15
Relative Humidity: 5 to 95% (non-condensing)
Storage
Temperature:
-40 to 75°C
Relative Humidity:
5 to 95% (non-condensing)

16 NS3562-8P-2S User Manual
Chapter 2
Installation
This section describes the hardware features of the industrial managed switch. For
easier management and control of the industrial managed switch, familiarize yourself
with its display indicators and ports. Front panel illustrations in this chapter display the
unit LED indicators. Before connecting any network device to the industrial managed
switch, please read this chapter completely.
Hardware description
The industrial managed switch provides three different running speeds – 10Mbps,
100Mbps, and 1000Mbps, and automatically distinguishes the speed of the incoming
connection.

Chapter 2: Installation
NS3562-8P-2S User Manual 17
Physical dimensions
Dimensions (W x D x H): 178 x 25 x 134 mm

Chapter 2: Installation
18 NS3562-8P-2S User Manual
Front panel
Gigabit TP interface
10/100/1000BASE-T copper, RJ45 twisted-pair: Up to 100 meters.
SFP slot
100/1000BASE-X mini-GBIC slot, SFP (Small-form Factor Pluggable) transceiver
module: From 550 meters to 2 km (multi-mode fiber) and to 10/20/30/40/50/70/120
kilometers (single-mode fiber).
AC/DC power receptacle
The industrial managed switch features a strong dual power input system (terminal
block and DC jack) incorporated into customer’s automation network to enhance
system reliability and uptime.
3-pin Terminal Block DC Jack
Power Input Range
48~56 VDC 48~56 VDC
To install the 3-pin terminal block connector on the wall-mount managed switch:
1. Insert the positive DC power wire into V+, negative DC power wire into V-, and the
grounding wire into Ground.