KTI Networks KGS-1064-HP User manual

-1-
KGS-1064-HP
Web Management Interface
User,s Manual
Software Rev.1.0 or up
DOC.170505

-2-
TRADEMARKS
Ethernet is a registered trademark of Xerox Corp.
Vitesse Switch Software. Copyright (c) 2002-2009
Vitesse Semiconductor Corporation "Vitesse". All Rights Reserved.
Unpublished rights reserved under the copyright laws of the United States of America, other countries and
international treaties. Permission to use, copy, store and modify, the software and its source code is granted.
Permission to integrate into other products, disclose, transmit and distribute the software in an absolute
machine readable format (e.g. HEX file) is also granted. The software may only be used in products utilizing
the Vitesse switch products.
(C) 2016 KTI Networks Inc. All rights reserved. No part of this documentation may be reproduced in any form
or by any means or used to make any directive work (such as translation or transformation) without permission
from KTI Networks Inc.

-3-
KTI Networks Inc. reserves the right to revise this documentation and to make changes in content from time to
time without obligation on the part of KTI Networks Inc. to provide notification of such revision or change.
For more information, contact:
15F-7, No. 79, Sec. 1, Hsin-Tai-Wu RD
His-chih, New Taipei City, Taiwan
Fax: [phone]
E-mail: [email protected].tw
URL: http://www.ktinet.com.tw/

-4-
Table of Contents
1. Web Management.....................................................................................................................................11
1.1 Start Browser Software and Making Connection ............................................................11
1.2 Login to the Switch Unit..................................................................................................12
1.3 Main Management Menu................................................................................................14
2. Configuration............................................................................................................................................17
2.1 System...........................................................................................................................17
2.1.1 Information..................................................................................................................17
2.1.2 IP ................................................................................................................................18
2.1.2.1 Management VID (MVID) Operation Rules...............................................................19
2.1.3 IPv6.............................................................................................................................19
2.1.4 NTP.............................................................................................................................21
2.1.5 Time............................................................................................................................22
2.1.6 Log..............................................................................................................................24
2.2 Power Reduction............................................................................................................25
2.2.1 EEE.............................................................................................................................25
2.3 Thermal Protection.........................................................................................................27
2.4 Ports ..............................................................................................................................28
2.5 Security..........................................................................................................................30
2.5.1 Switch .........................................................................................................................30
2.5.1.1 Users........................................................................................................................30
2.5.1.2 Privilege Level..........................................................................................................32
2.5.1.3 Auth Method.............................................................................................................34
2.5.1.4 SSH..........................................................................................................................35
2.5.1.5 HTTPS.....................................................................................................................36
2.5.1.6 Access Management................................................................................................37
2.5.1.7 SNMP.......................................................................................................................38
2.5.1.7.1 System..................................................................................................................38
2.5.1.7.2 Communities .........................................................................................................41
2.5.1.7.3 Users.....................................................................................................................42
2.5.1.7.4 Groups ..................................................................................................................43
2.5.1.7.5 Views ....................................................................................................................44

-5-
2.5.1.7.6 Access...................................................................................................................45
2.5.1.8 RMON......................................................................................................................47
2.5.1.8.1 Statistics................................................................................................................47
2.5.1.8.2 History...................................................................................................................48
2.5.1.8.3 Alarm.....................................................................................................................49
2.5.1.8.4 Event.....................................................................................................................51
2.5.2 Network.......................................................................................................................52
2.5.2.1 Limit Control.............................................................................................................52
2.5.2.2 NAS..........................................................................................................................55
2.5.2.3 ACL..........................................................................................................................64
2.5.2.3.1 Ports......................................................................................................................64
2.5.2.3.2 Rate Limits............................................................................................................66
2.5.2.3.3 Access Control List................................................................................................67
2.5.2.4 DHCP.......................................................................................................................69
2.5.2.4.1 Snooping...............................................................................................................69
2.5.2.4.2 Relay.....................................................................................................................70
2.5.2.5 IP Source Guard.......................................................................................................71
2.5.2.5.1 Configuration.........................................................................................................71
2.5.2.5.2 Static Table...........................................................................................................72
2.5.2.6 ARP Inspection.........................................................................................................73
2.5.2.6.1 Configuration.........................................................................................................73
2.5.2.6.2 Static Table...........................................................................................................74
2.5.3 AAA.............................................................................................................................75
2.6 Aggregation....................................................................................................................77
2.6.1 Static...........................................................................................................................77
2.6.2 LACP...........................................................................................................................78
2.7 Loop Protection..............................................................................................................79
2.8 Spanning Tree................................................................................................................80
2.8.1 Bridge Settings............................................................................................................81
2.8.2 MSTI Mapping.............................................................................................................83
2.8.3 MSTI Priorities.............................................................................................................84
2.8.4 CIST Ports...................................................................................................................85

-6-
2.8.5 MSTI Ports..................................................................................................................87
2.9 MVR...............................................................................................................................89
2.10 IPMC............................................................................................................................92
2.10.1 IGMP Snooping.........................................................................................................92
2.10.1.1 Basic Configuration ................................................................................................92
2.10.1.2 VLAN Configuration................................................................................................94
2.10.1.3 Port Group Filtering................................................................................................96
2.10.2 MLD Snooping ..........................................................................................................96
2.10.2.1 Basic Configuration ................................................................................................96
2.10.2.2 VLAN Configuration................................................................................................98
2.10.2.3 Port Group Filtering................................................................................................99
2.11 LLDP..........................................................................................................................101
2.11.1 LLDP.......................................................................................................................101
2.11.2 LLDP-MED..............................................................................................................103
2.12 PoE............................................................................................................................109
2.12.1 PoE Redundancy Support.......................................................................................111
2.13 MAC Table.................................................................................................................113
2.14 VLANs........................................................................................................................114
2.14.1 Abbreviation............................................................................................................114
2.14.2 VLAN Membership..................................................................................................115
2.14.3 Ports........................................................................................................................117
2.15 Private VLANs............................................................................................................120
2.15.1 PVLAN Membership................................................................................................120
2.15.2 Port Isolation...........................................................................................................121
2.16 Voice VLAN................................................................................................................122
2.16.1 Configuration...........................................................................................................122
2.16.2 OUI..........................................................................................................................124
2.17 QoS............................................................................................................................125
2.17.1 Port Classification....................................................................................................125
2.17.2 Port Policing............................................................................................................127
2.17.3 Scheduler................................................................................................................128
2.17.4 Shaping...................................................................................................................128

-7-
2.17.5 Tag Remarking........................................................................................................131
2.17.6 Port DSCP...............................................................................................................133
2.17.7 DSCP-Based QoS...................................................................................................135
2.17.8 DSCP Translation....................................................................................................138
2.17.9 DSCP Classification ................................................................................................141
2.17.10 QoS Control List....................................................................................................142
2.17.11 Storm Control........................................................................................................144
2.18 Mirroring.....................................................................................................................145
2.19 UPnP..........................................................................................................................146
2.20 sFlow..........................................................................................................................147
2.21 Multi Ring...................................................................................................................149
2.22 OPA (Optical Power Alarm) Configuration..................................................................152
2.23 ALS (Auto Laser Shutdown) Configuration.................................................................153
3. Monitor ....................................................................................................................................................154
3.1 System.........................................................................................................................155
3.1.1 Information................................................................................................................155
3.1.2 CPU Load..................................................................................................................156
3.1.3 Log............................................................................................................................157
3.1.4 Detailed Log..............................................................................................................158
3.2 Thermal Protection.......................................................................................................158
3.3 Ports ............................................................................................................................159
3.3.1 State..........................................................................................................................159
3.3.2 Traffic Overview ........................................................................................................160
3.3.3 QoS Statistics............................................................................................................160
3.3.4 QCL Status................................................................................................................161
3.3.5 Detailed Statistics......................................................................................................162
3.4 Security........................................................................................................................164
3.4.1 Access Management Statistics..................................................................................164
3.4.2 Network.....................................................................................................................164
3.4.2.1 Port Security...........................................................................................................164
3.4.2.1.1 Switch..................................................................................................................165
3.4.2.1.2 Port .....................................................................................................................166

-8-
3.4.2.2 NAS........................................................................................................................167
3.4.2.2.1 Switch..................................................................................................................167
3.4.2.2.2 Port .....................................................................................................................168
3.4.2.3 ACL Status.............................................................................................................168
3.4.2.4 DHCP.....................................................................................................................170
3.4.2.4.1 Snooping Statistics..............................................................................................170
3.4.2.4.2 Relay...................................................................................................................171
3.4.2.5 ARP Inspection.......................................................................................................172
3.4.2.6 IP Source Guard.....................................................................................................172
3.4.3 AAA...........................................................................................................................173
3.4.3.1 RADIUS Overview..................................................................................................173
3.4.3.2 RADIUS Details......................................................................................................174
3.4.4 Switch-RMON ...........................................................................................................178
3.4.4.1 Statistics.................................................................................................................178
3.4.4.2 History....................................................................................................................179
3.4.4.3 Alarm......................................................................................................................180
3.4.4.4 Event......................................................................................................................180
3.5 LACP............................................................................................................................182
3.5.1 System Status...........................................................................................................182
3.5.2 Port Status ................................................................................................................182
3.5.3 Port Statistics............................................................................................................183
3.6 Loop Protection............................................................................................................184
3.7 Spanning Tree..............................................................................................................185
3.7.1 Bridge Status.............................................................................................................185
3.7.2 Port Status ................................................................................................................185
3.7.3 Port Statistics............................................................................................................186
3.8 MVR.............................................................................................................................187
3.8.1 Statistics....................................................................................................................187
3.8.2 MVR Channel Groups ...............................................................................................187
3.8.3 MVR SFM Information...............................................................................................188
3.9 IPMC............................................................................................................................189
3.9.1 IGMP Snooping.........................................................................................................189

-9-
3.9.1.1 Status.....................................................................................................................189
3.9.1.2 Groups Information.................................................................................................190
3.9.1.3 IPv4 SFM Information.............................................................................................190
3.9.2 MLD Snooping ..........................................................................................................191
3.9.2.1 Status.....................................................................................................................191
3.9.2.2 Groups Information.................................................................................................192
3.9.2.3 IPv6 SFM Information.............................................................................................192
3.10 LLDP..........................................................................................................................193
3.10.1 Neighbours..............................................................................................................193
3.10.2 LLDP-MED Neighbours...........................................................................................194
3.10.3 PoE.........................................................................................................................197
3.10.4 EEE.........................................................................................................................198
3.10.5 Port Statistics..........................................................................................................199
3.11 PoE............................................................................................................................201
3.12 MAC Table.................................................................................................................203
3.13 VLANs........................................................................................................................204
3.13.1 VLAN Membership..................................................................................................204
3.13.2 VLAN Ports .............................................................................................................205
3.14 sFlow..........................................................................................................................207
3.15 Multi Ring Status........................................................................................................209
3.16 Relay Alarm Status.....................................................................................................210
4. Diagnostics .............................................................................................................................................211
4.1 Ping & Ping6 ................................................................................................................211
4.2 VeriPHY.......................................................................................................................213
4.3 SFP DDM.....................................................................................................................215
5. Maintenance............................................................................................................................................216
5.1 Restart Device..............................................................................................................216
5.2 Factory Defaults...........................................................................................................217
5.3 Software.......................................................................................................................217
5.3.1 Upload.......................................................................................................................217
5.3.2 Image Select.............................................................................................................218

-10-
5.4 Configuration................................................................................................................219
5.4.1 Save..........................................................................................................................219
5.4.2 Upload.......................................................................................................................220
Glossary ......................................................................................................................................................221

-11-
1. Web Management
The switch features an http server which can serve the management requests coming from any web browser
software over TCP/IP network.
Web Browser
Compatible web browser software with JAVA script support
Microsoft Internet Explorer 4.0 or later
Set IP Address for the System Unit
Before the switch can be managed from web browser software, make sure a unique IP address is configured for
the switch.
1.1 Start Browser Software and Making Connection
Start your browser software and enter the IP address of the switch unit to which you want to connect. The IP
address is used as URL for the browser software to search the device.
URL: http://xxx.xxx.xxx.xxx/
Factory default IP address: 192.168.0.2
Factory default username: admin
Factory default password: 
Note: no password with factory defaults

-12-
1.2 Login to the Switch Unit
When browser software connects to the switch unit successfully, a Login screen is provided for you to login to
the device as the left display below:
“Port State Overview”page is displayed after a successful login.
[Logout] button and [Show Help] button
Check this box to refresh the page automatically. Automatic refresh occurs every 3
seconds.

-13-
Click to refresh the current page.
Port state icons are:
Status Description
RJ-45 port disabled
RJ-45 port link down
RJ-45 port link up
SFP port disabled
SFP port link down
SFP port link in 1G full duplex
SFP port link in 100M full duplex
The switch can accept more than one successful management connection simultaneously.

-14-
1.3 Main Management Menu
Main Menu:
Sub-menus:
Configuration
System Switch information, IP configuration, SNTP setting, and Password setting
Power Reduction EEE power saving configuration
Thermal Protection Thermal protection is used to protect the chip from getting overheated.
Ports Port operation related configuration, frame size, and power saving control
Security Switch & UI authentication configuration, Port access security control
Aggregation Static and LACP port link aggregation related configuration
Loop Protection Configuration for port loop detection and protection
Spanning Tree STP bridge, MSTI and CIST configuration
MVR MVR feature enables multicast traffic forwarding on the Multicast VLANs.
IPMC IGMP and MLD Snooping
LLDP LLDP configuration
PoE Power over Ethernet configuration and power management for PSE ports

-15-
MAC Table MAC address learning settings and static MAC address port configuration
VLANs VLAN groups and VLAN port-related configuration
Private VLANs PVLAN groups and port isolation configuration
Voice VLAN The Voice VLAN feature enables voice traffic forwarding on the Voice VLAN,
QoS QoS port ingress, egress and QCL configuration, Port rate control, QCL wizard
Mirroring Port mirroring settings
UPnP Configuration for UPnP (Universal Plug and Play) feature
sFlow sFlow is an industry standard technology for monitoring switched networks.
Multi Ring Configuration for ring connections between switches
OPA Optical Power Alarm function
ALS Auto Laser Shutdown function (Hardware Ver.E up)
Monitor
System System information and system log information
Thermal Protection Display port temperature and status
Ports Port link status, traffic statistics, QoS statistics
Security Switch & UI authentication, Port access security status
LACP LACP system and port status
Loop Protection Display port configuration and status for loop protection
Spanning Tree Bridge status, Port status and RSTP/STP/MSTP statistics
MVR Display IGMP and MLD snooping status and counters
IPMC IGMP Snooping & MLR snooping groups learned, Router ports, Statistics
LLDP LLDP neighbors information, Port statistics
PoE Display PoE status for all PSE ports
MAC Table Display of MAC address table
VLANs Display VLAN membership and VLAN port status
sFlow Display sFlow receiver status and port sample counters
Multi Ring Status Display all ring group status and port configuration status
Relay Alarm Status Display status of all alarm sources for alarm relay output
Diagnostics
Ping ICMP ping utility
Ping6 Ping utility for IPv6 devices
VeriPHY Copper cable diagnostics for all copper ports
SFP DDM SFP DDM information
Maintenance

-16-
Restart Device Command to reboot the switch
Factory Defaults Command to restore the switch with factory default settings
Software Command to update the switch firmware
Configuration Command to save or upload the system configuration

-17-
2. Configuration
2.1 System
2.1.1 Information
Configuration Description
System Contact The textual identification of the contact person for this managed node, together with
information on how to contact this person. The allowed string length is 0to 255, and
the allowed content is the ASCII characters from 32 to 126.
System Name An administratively assigned name for this managed node. By convention, this is the
node's fully-qualified domain name. A domain name is a text string drawn from the
alphabet (A-Za-z), digits (0-9), minus sign (-). No space characters are permitted as
part of a name. The first character must be an alpha character. And the first or last
character must not be a minus sign. The allowed string length is 0to 255.
System Location The physical location of this node(e.g., telephone closet, 3rd floor). The allowed
string length is 0to 255, and the allowed content is the ASCII characters from 32 to
126.
Save Click to save the changes.
Reset Click to undo any changes made locally and revert to previously saved values.
Note:
1. It is suggested to give each switch unit a system name as an alternative unique identification beside IP
address.
2. The system Name, Contact, and Location settings are also used as SNMP MIBs.

-18-
2.1.2 IP
Configuration Description
DHCP Client Enable the DHCP client by checking this box.
IP Address Provide the IP address of this switch unit.
IP Mask Provide the IP mask of this switch unit.
IP Router Provide the IP address of the default router for this switch unit.
VLAN ID Provide the managed VLAN ID. The allowed range is 1 through 4095.
This setting is also called MVID (Management VID) as abbreviation.
DNS Server Provide the IP address of the DNS Server in dotted decimal notation.
DNS Proxy When DNS proxy is enabled, DUT will relay DNS requests to the current configured
DNS server on DUT, and reply as a DNS resolver to the client device on the network.
Save Click to save the changes.
Reset Click to undo any changes made locally and revert to previously saved values.
Renew Click to renew DHCP. This button is only available if DHCP is enabled.
Note:
1. If DHCP fails and the configured IP address is zero, DHCP will retry. If DHCP fails and the configured IP
address is non-zero, DHCP will stop and the configured IP settings will be used. The DHCP client will
announce the configured System Name as hostname to provide DNS lookup.
2. The IP addresses should be in dotted decimal notation.

-19-
2.1.2.1 Management VID (MVID) Operation Rules
The MVID setting restricts the ports that are allowed to communicate with the embedded system processor.
The allowed ports are limited in the member ports of the VLAN with MVID. The table below lists the
conditions that a management frame can reach the system process and the replied frame type sent by the system
processor. Refer to Section 2.14 for more configuration information of VLAN.
Management
Ingress port type
Management
incoming packet type
Conditions for acceptance
by the processor
Replied packets sent
by the processor
Unaware
Untagged
PVID = MVID
Untagged
C-port
Untagged
PVID = MVID
Untagged
C-tag tagged
VID = MVID
Untagged
S-port
Untagged
PVID = MVID
Untagged
S-tag tagged
VID = MVID
Untagged
S-custom-port
Untagged
PVID = MVID
Untagged
S-custom-tag tagged
VID = MVID
Untagged
2.1.3 IPv6
Configuration Description
Auto Configuration DHCP Client Enable IPv6 auto-configuration by checking this box. If system cannot
obtain the stateless address in time, the configured IPv6 settings will be used. The
router may delay responding to a router solicitation for a few seconds, the total time
needed to complete auto-configuration can be significantly longer. Enable the DHCP
client by checking this box.
Address Provide the IPv6 address of this switch. IPv6 address is in 128-bit records represented
as eight fields of up to four hexadecimal digits with a colon separating each field (:).
For example, 'fe80::215:c5ff:fe03:4dc7'. The symbol '::' is a special syntax that can be
used as a shorthand way of representing multiple 16-bit groups of contiguous zeros;
but it can appear only once. It can also represent a legally valid IPv4 address. For

-20-
example, '::192.1.2.34'.
Prefix Provide the IPv6 Prefix of this switch. The allowed range is 1 to 128.
Router Provide the IPv6 gateway address of this switch. IPv6 address is in 128-bit records
represented as eight fields of up to four hexadecimal digits with a colon separating
each field (:). For example, 'fe80::215:c5ff:fe03:4dc7'. The symbol '::' is a special
syntax that can be used as a shorthand way of representing multiple 16-bit groups of
contiguous zeros; but it can appear only once. It can also represent a legally valid
IPv4 address. . For example, '::192.1.2.34'.
Save Click to save the changes.
Reset Click to undo any changes made locally and revert to previously saved values.
Renew Click to renew IPv6 AUTOCONF. This button is only available if IPv6 AUTOCONF
is enabled.