Moxa Technologies PT-G7828 User manual

PT-G7828/G7728 User’s Manual
Edition 1.0, December 2017
www.moxa.com/product
© 2017 Moxa Inc. All rights reserved.
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 User’s Manual
The software described in this manual is furnished under a license agreement and may be used only in accordance with
the terms of that agreement.
Copyright Notice
© 2017 Moxa Inc. All rights reserved.
Trademarks
The MOXA logo is a registered trademark of Moxa Inc.
All other trademarks or registered marks in this manual belong to their respective manufacturers.
Disclaimer
Information in this document is subject to change without notice and does not represent a commitment on the part of
Moxa.
Moxa provides this document as is, without warranty of any kind, either expressed or implied, including, but not limited
to, its particular purpose. Moxa reserves the right to make improvements and/or changes to this manual, or to the
products and/or the programs described in this manual, at any time.
Information provided in this manual is intended to be accurate and reliable. However, Moxa assumes no responsibility for
its use, or for any infringements on the rights of third parties that may result from its use.
This product might include unintentional technical or typographical errors. Changes are periodically made to the
information herein to correct such errors, and these changes are incorporated into new editions of the publication.
Technical Support Contact Information
www.moxa.com/support
Moxa Americas
Toll
-free: 1-888-669-2872
Tel:
[phone]
Fax:
[phone]
Moxa China (Shanghai office)
Toll
-free: 800-820-5036
Tel:
[phone]
Fax:
[phone]
Moxa Europe
Tel:
[phone]
Fax:
[phone]
Moxa Asia
-Pacific
Tel:
[phone]
Fax:
[phone]
Moxa India
Tel:
[phone]
Fax:
[phone]
www.ipc2u.ru
www.moxa.pro

Table of Contents
1. About this Manual ............................................................................................................................. 1-1
2. Getting Started.................................................................................................................................. 2-1
USB Console Configuration (115200, None, 8, 1, VT100) .........................................................................2-2
Configuration by Command Line Interface (CLI) .....................................................................................2-4
Configuration by Web Console ..............................................................................................................2-6
Disabling Telnet and Browser Access..................................................................................................... 2-7
3. Featured Functions ........................................................................................................................... 3-1
Home ................................................................................................................................................3-2
System Settings .................................................................................................................................3-2
System Information.....................................................................................................................3-2
Module Information .....................................................................................................................3-3
User Account ..............................................................................................................................3-4
Password Login Policy .................................................................................................................. 3-6
Network .....................................................................................................................................3-6
Date and Time ............................................................................................................................3-9
IEEE 1588 ................................................................................................................................ 3-10
Warning Notification .................................................................................................................. 3-17
MAC Address Table.................................................................................................................... 3-24
System Files ............................................................................................................................. 3-25
Restart..................................................................................................................................... 3-28
Factory Default ......................................................................................................................... 3-28
PoE (PoE Models Only) ...................................................................................................................... 3-29
PoE Settings ............................................................................................................................. 3-29
VLAN............................................................................................................................................... 3-39
The Virtual LAN (VLAN) Concept.................................................................................................. 3-39
Sample Applications of VLANs Using Moxa Switches....................................................................... 3-41
Configuring a Virtual LAN ........................................................................................................... 3-42
VLAN Name Setting ................................................................................................................... 3-44
QinQ Settings ........................................................................................................................... 3-44
VLAN Table............................................................................................................................... 3-44
Port ................................................................................................................................................ 3-45
Port Settings............................................................................................................................. 3-45
Port Status ............................................................................................................................... 3-46
Link Aggregation ....................................................................................................................... 3-47
Link-Swap Fast Recovery ........................................................................................................... 3-49
RSTP Grouping ................................................................................................................................. 3-49
Multicast.......................................................................................................................................... 3-50
The Concept of Multicast Filtering ................................................................................................ 3-50
IGMP Snooping ......................................................................................................................... 3-53
IGMP Snooping Setting .............................................................................................................. 3-54
IGMP Group Status .................................................................................................................... 3-55
Stream Table ............................................................................................................................ 3-55
Static Multicast Address ............................................................................................................. 3-56
GMRP....................................................................................................................................... 3-57
Multicast Filtering Behavior......................................................................................................... 3-57
QoS ................................................................................................................................................ 3-58
The Traffic Prioritization Concept ................................................................................................. 3-58
Configuring Traffic Prioritization .................................................................................................. 3-60
CoS Classification ...................................................................................................................... 3-60
Priority Mapping ........................................................................................................................ 3-61
DSCP Mapping .......................................................................................................................... 3-62
Rate Limiting ............................................................................................................................ 3-62
Security........................................................................................................................................... 3-64
Management Interface ............................................................................................................... 3-64
Trusted Access.......................................................................................................................... 3-66
SSL Certificate Management ....................................................................................................... 3-67
SSH Key Management................................................................................................................ 3-67
Authentication .......................................................................................................................... 3-67
Port Security............................................................................................................................. 3-74
Port Access Control Table ........................................................................................................... 3-77
Loop Protection ......................................................................................................................... 3-77
Access Control List .................................................................................................................... 3-77
DHCP .............................................................................................................................................. 3-84
IP-Port Binding.......................................................................................................................... 3-84
DHCP Relay Agent ..................................................................................................................... 3-84
SNMP .............................................................................................................................................. 3-87
SNMP Read/Write Settings.......................................................................................................... 3-88
Trap Settings ............................................................................................................................ 3-89
www.ipc2u.ru
www.moxa.pro

Industrial Protocols ........................................................................................................................... 3-93
Diagnostics ...................................................................................................................................... 3-93
LLDP........................................................................................................................................ 3-93
Ping......................................................................................................................................... 3-94
Port Mirroring ........................................................................................................................... 3-94
Monitoring ....................................................................................................................................... 3-95
CPU/Memory Utilization.............................................................................................................. 3-95
Statistics .................................................................................................................................. 3-96
Fiber Digital Diagnostics Monitoring (Fiber Check) ......................................................................... 3-97
Event Log................................................................................................................................. 3-99
Tracking Function ...................................................................................................................... 3-99
Substation ..................................................................................................................................... 3-105
IEC 61850 QoS ....................................................................................................................... 3-105
GOOSE Check ......................................................................................................................... 3-105
MMS server ............................................................................................................................ 3-107
A. MIB Groups ....................................................................................................................................... A-1
www.ipc2u.ru
www.moxa.pro

1
1. About this Manual
Thank you for purchasing a Moxa managed Ethernet switch. Read this user’s manual to learn how to connect
your Moxa switch to Ethernet-enabled devices used for industrial applications.
A synopsis of chapters 2 and 3 are given below:
Chapter 2: Getting Started
In this chapter, we explain the initial installation process for a Moxa switch. Moxa switches provide three
interfaces to access the configuration settings: USB console interface, command line interface, and web
console interface.
Chapter 3: Featured Functions
In this chapter, we explain how to access a Moxa switch’s various configuration, monitoring, and
management functions. The functions can be accessed by USB console, Telnet console, and web console
(web browser). We describe how to configure the switch functions via web console, which provides the most
user-friendly way to configure a Moxa switch.
www.ipc2u.ru
www.moxa.pro

2
2. Getting Started
In this chapter, we explain how to install a Moxa switch for the first time. There are three ways to access the
Moxa switch’s configuration settings: USB console, command line interface, or web-based interface. If you do
not know the Moxa switch’s IP address, you can open the USB console by connecting the Moxa switch to a PC’s
USB port with a USB cable. You can open the Telnet or web-based console over an Ethernet LAN or over the
Internet.
The following topics are covered in this chapter:

USB Console Configuration (115200, None, 8, 1, VT100)

Configuration by Command Line Interface (CLI)

Configuration by Web Console

Disabling Telnet and Browser Access
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Getting Started
2-2
USB Console Configuration (115200, None, 8, 1,
VT100)
NOTE
A
Moxa switch allows multi-session connections (up to 6) by connecting to the web console and another
console (serial or Telnet) at the same time.
NOTE
We recommend
using PComm Terminal Emulator when opening the USB console. This software can be
downloaded free of charge from the Moxa website.
Before running PComm Terminal Emulator, first install the USB console driver on your PC and then connect the
Moxa switch’s USB console port to your PC’s USB port with a USB cable.
After installing PComm Terminal Emulator, open the Moxa switch’s USB console as follows:
1. From the Windows desktop, click Start

Moxa

PComm Lite Ver1.6

Terminal Emulator.
2. Select Open under the Port Manager menu to open a new connection.
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Getting Started
2-3
3. The Property window should open. On the Communication Parameter tab for Ports, select the COM
port that is being used for the console connection. Set the other fields as follows: 115200 for Baud Rate,
8 for Data Bits, None for Parity, and 1 for Stop Bits.
4. On the Terminal tab, select VT100 for Terminal Type, and then click OK to continue.
5. In the terminal window, the Moxa switch will prompt you to select a terminal type. Enter 1 to select
ansi/vt100 and then press Enter.
6. The USB console will prompt you to log in. Press Enter and select admin or user. Use the down arrow key
on your keyboard to select the Password field and enter a password if desired. This password will be
required to access any of the consoles (web, serial, Telnet).
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Getting Started
2-4
NOTE
By default, the
password assigned to the Moxa switch is moxa. Be sure to
change the default password after
you first
log in to help keep your system secure.
7. The Main Menu of the Moxa switch’s USB console should appear. (In PComm Terminal Emulator, you can
adjust the font by selecting Font… from the Edit menu.)
8. Use the following keys on your keyboard to navigate the Moxa switch’s USB console:
Key Function
Up, down, right, left arrow keys, Tab
Move the onscreen cursor
Enter Display and select options
Space Toggle options
Esc Previous menu
Configuration by Command Line Interface (CLI)
Opening the Moxa switch’s Telnet or web console over a network requires that the PC host and Moxa switch are
on the same logical subnet. You may need to adjust your PC host’s IP address and subnet mask. By default, the
Moxa switch’s IP address is 192.168.127.253 and the Moxa switch’s subnet mask is 255.255.255.0 (referred to
as a Class B network). Your PC’s IP address must be set to 192.168.xxx.xxx if the subnet mask is 255.255.0.0,
or to 192.168.127.xxx if the subnet mask is 255.255.255.0.
NOTE
To connect to the Moxa switch’s Telnet or web console, your PC host and the Moxa switch must be on the same
logical subnet.
NOTE
When connecting to the Moxa switch’s Telnet or web console, first connect one of the Moxa switch’s Ethernet
ports to your Ethernet LAN,
or directly to your PC’s Ethernet port. You may use either a straight-
through or
cross
-over Ethernet cable.
NOTE
The Moxa switch’s default IP address is 192.168.127.253.
After making sure that the Moxa switch is connected to the same LAN and logical subnet as your PC, open the
Moxa switch’s Telnet console as follows:
1. Click Start

Run from the Windows Start menu and then Telnet to the Moxa switch’s IP address from the
Windows Run window. You may also issue the Telnet command from a DOS prompt.
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Getting Started
2-5
2. In the terminal window, the Telnet console will prompt you to select a terminal type. Type 1 to choose
ansi/vt100, and then press Enter.
3. The Telnet console will prompt you to log in. Press Enter and then select admin or user. Use the down
arrow key on your keyboard to select the Password field and enter a password if desired. This password
will be required to access any of the consoles (web, serial, Telnet). If you do not wish to create a password,
leave the Password field blank and press Enter.
4. The Main Menu of the Moxa switch’s Telnet console should appear.
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Getting Started
2-6
5. Use the following keys on your keyboard to navigate the Moxa switch’s Telnet console:
Key Function
Up, down, right, left arrow keys, Tab Move the onscreen cursor
Enter Display and select options
Space Toggle options
Esc Previous menu
NOTE
The Telnet console looks and operates in precisely the same manner as the
USB console.
Configuration by Web Console
The Moxa switch’s web console is a convenient platform for modifying the configuration and accessing the
built-in monitoring and network management functions. You can open the Moxa switch’s web console using a
standard web browser, such as Internet Explorer.
NOTE
When connecting
to the Moxa switch’s Telnet or web console, your PC host and the Moxa switch must be on
the same logical subnet.
NOTE
If the Moxa switch is configured for other VLAN settings, you must make sure your PC host is on the
management
VLAN.
NOTE
When connecting to the Moxa switch’s Telnet or web console, first connect one of the Moxa switch’s Ethernet
ports to your Ethernet LAN, or directly to your PC’s Ethernet port. You may use either a straight
-
through or
cross
-over Ethernet cable.
NOTE
The Moxa switch’s default IP address is 192.168.127.253.
After making sure that the Moxa switch is connected to the same LAN and logical subnet as your PC, open the
Moxa switch’s web console as follows:
1. Connect your web browser to the Moxa switch’s IP address by entering it in the Address or URL field.
2. The Moxa switch’s web console will open, and you will be prompted to log in. Select the login account
(admin or user) and enter the Password. This password will be required to access any of the consoles (web,
serial, Telnet). If you do not wish to create a password, leave the Password field blank and press Enter.
NOTE
By default, the
password assigned to the Moxa switch is moxa. Be sure to
change the default password after
you first
log in to help keep your system secure.
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Getting Started
2-7
3. After logging in, you may need to wait a few moments for the web console to appear. Use the folders in the
left navigation panel to navigate between different pages of configuration options.
Disabling Telnet and Browser Access
If you are connecting the Moxa switch to a public network but do not intend to manage it over the network, we
suggest disabling both the Telnet and web consoles. This is done from the USB console by navigating to
System Identification under Basic Settings

System Information. Disable or enable the Telnet
Console and Web Configuration as shown below:
www.ipc2u.ru
www.moxa.pro

3
3. Featured Functions
In this chapter, we explain how to access the Moxa switch’s various configuration, monitoring, and
management functions. These functions can be accessed by USB console, Telnet console, or web console. The
USB console can be used if you do not know the Moxa switch’s IP address. To access the USB console, connect
switch’s USB port to your PC’s COM port. The Telnet and web consoles can be opened over an Ethernet LAN or
the Internet.
The web console is the most user-friendly interface for configuring a Moxa switch. In this chapter, we use the
web console interface to introduce the console functions. There are only a few differences between the web
console, USB console, and Telnet console.
The following topics are covered in this chapter:

Home

System Settings
System Information
User Account
Password Login Policy
Network
Date and Time
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Featured Functions
3-2
Home
The Home page shows the summary of the Moxa switch information including System Information,
Redundancy Protocol, Event Log, and Device virtualization panel. By showing the switch's information and
event log, the operators can easily understand the system and port link status at a glance.
System Settings
The System Settings section includes the most common settings required by administrators to maintain and
control a Moxa switch.
System Information
Define System Information items to make it easier to identify different switches that are connected to your
network.
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Featured Functions
3-3
Switch Name
Setting Description Factory Default
Max. 30 characters This option is useful for differentiating between the roles or
applications of different units. Example: Factory Switch 1.
none
NOTE
The Switch Name field follows
the PROFINET I/O naming rule. The name can only include any of these
character
s, a-z/A-Z/0-9/-/., and the name cannot start with port-xyz or port-xyz-abcde where
xyzabcde=0...9 or is in the form n.n.n.n where n=0...9
Switch Location
Setting Description Factory Default
Max. 255 characters
This option is useful for differentiating between the locations of
different switches. Example: production line 1.
Switch Location
Switch Description
Setting Description Factory Default
Max. 30 characters This option
is useful for recording a more detailed description of
the unit.
Switch Model name
Contact Information
Setting Description Factory Default
Max. 30 characters This option is useful for providing information about who is
responsible for maintaining this unit and how to contact this
person.
None
Web Login Message
Setting Description Factory Default
Max. 240 characters This option is useful as it shows a message when a user’s
login
is successful
Switch Location
Login Authentication Failure Message
Setting Description Factory Default
Max. 240 characters This option is useful
as it shows a message when a user’s login
has failed
Switch Location
Module Information
This page displays the model name and serial number information of the device, including main chassis, line
module, and power module. Below is an example of the information that will be displayed.
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Featured Functions
3-4
User Account
The Moxa switch supports the management of accounts, including establishing, activating, modifying, disabling,
and removing accounts. There are two levels of configuration access: admin and user. Accounts with admin
authority have read/write access of all configuration parameters, whereas accounts with user authority only
have read access to view configuration items.
NOTE
1.
In order to maintain a higher level of security, we strongly suggest that you change the password after
you
first log in.
2.
By default, the admin user account cannot be deleted or disabled.
Active
Setting Description Factory Default
Checked This account can access the switch’s configuration settings. Checked
Unchecked This account cannot access the switch’s configuration settings.
Authority
Setting Description Factory Default
admin This account has read/write access of all configuration
parameters.
admin
user This account can only view configuration parameters.
Creating a New Account
Click Create, type in the user name and password, and assign an authority to the new account. Click Apply to
add the account to the Account List table.
Setting Description Factory Default
User Name
(Max. of 30 characters)
User Name None
Password Password for the user account.
(between 4 and 16 characters)
None
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Featured Functions
3-5
Modifying an Existing Account
Select an existing account from the Account List table, modify the account details, and then click Apply to save
the changes.
Deleting an Existing Account
Select an account from the Account List table and then click Delete to delete the account.
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Featured Functions
3-6
Password Login Policy
In order to prevent hackers from cracking the password, Moxa switches allow users to configure a password for
their account and lock the account in the event that the wrong password is entered. The account password
policy requires passwords to be of a minimum length and complexity with a strength check. If Account Login
Failure Lockout is enabled, you will need to configure the Retry Failure Threshold and Lockout Time
parameters. If the number of login attempts exceeds the Retry Failure Threshold, users will need to wait the
number of minutes configured in Lockout Time before trying again.
Network
Network configuration allows users to configure both IPv4 and IPv6 parameters for management access over
the network. The Moxa switch supports both IPv4 and IPv6, and can be managed through either of these
address types.
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Featured Functions
3-7
IP Settings
The IPv4 settings include the switch’s IP address and subnet mask, as well as the IP address of the default
gateway. In addition, input cells are provided for the IP addresses of a 1st and 2nd DNS server.
The IPv6 settings include two distinct address types—Link-Local Unicast addresses and Global Unicast
addresses. A Link-Local address makes the switch accessible over IPv6 for all devices attached to the same
local subnet. To connect to a larger network with multiple segments, the switch must be configured with a
Global Unicast address.
Get IP From
Setting Description Factory Default
DHCP The Moxa switch’s IP address
will be assigned automatically by
the network’s DHCP server.
Manual
BOOTP
The Moxa switch’s IP address will be assigned automatically by
the network’s BootP server.
Manual The Moxa switch’s IP address must be set manually.
IP Address
Setting Description Factory Default
IP address for the Moxa
switch
Assigns the Moxa switch’s IP address on a TCP/IP network. 192.168.127.253
Subnet Mask
Setting Description Factory Default
Subnet mask for the
Moxa switch
Identifies the type of network the Moxa
switch is connected to
(e.g., 255.255.0.0 for a Class B network, or 255.255.255.0 for
a Class C network).
24(255.255.255.0)
Default Gateway
Setting
Description
Factory Default
IP address for gateway
Specifies the IP address of the router that connects
the LAN to
an outside network.
None
www.ipc2u.ru
www.moxa.pro

PT-G7828/G7728 Featured Functions
3-8
DNS Server IP Addresses
Setting Description Factory Default
1st DNS Server Specifies the IP address of the DNS server used by your
network. After specifying the DNS server’s IP address, you can
use the Moxa switch’s URL (e.g., www.PT.company.com) to
open the web console instead of entering the IP address.
None
2nd DNS Server Specifies the IP address of the secondary DNS server used by
your network. The Moxa switch will use the secondary DNS
server if the first DNS server fails to connect.
None
IPv6 Global Unicast Address Prefix (Prefix Length: 64 bits) Default Gateway
Setting Description Factory Default
Global Unicast Address
Prefix
The prefix value must be formatted according to the RFC 2373
“IPv6 Addressing Architecture,” using 8 colon-separated 16-
bit
hexadecimal values. One double colon may be used in the
address to indicate the appropriate number of zeros required to
fill the undefined fields.
None
IPv6 Global Unicast Address
Setting Description Factory Default
None
Displays the IPv6 Global Unicast address. The network portion
of the Global Unicast address can be configured by specifying
the Global Unicast Prefix and using an EUI-64 interface ID in
the low order 64 bits. The host portion of the Global Unicast
address is automatically generated using the modified EUI-64
form of the interface identifier (Switch’s MAC address).
None
IPv6 Link-Local Address
Setting Description Factory Default
None The network portion of the Link-
Local address is FE80 and the
host portion of the Link-Local address is automatically
generated using the modified EUI-64 form of the interface
identifier (Switch’s MAC address).
None
IPv6 Neighbor Cache
The IPv6 neighbor cache includes the neighboring node’s IPv6 address, the corresponding Link-Layer address,
and the current state of the entry.
NOTE
The
IPv6 feature only works on the PT-G7728.
www.ipc2u.ru
www.moxa.pro