Omnitron Systems Technology RuggedNet GPoE+/Mi User manual

RuggedNet®GPoE+/Mi
4 and 8-Port PoE/PoE+ Fiber Switches
USER MANUAL
Firmware Release 2.1

Page 2
Table of Contents
1.0 Overview..........................................................................................................................5
1.1 New Features...................................................................................................................... 5
2.0 Port Structure..................................................................................................................5
2.1 Overview............................................................................................................................. 5
2.1.1 Serial Console Port ............................................................................................................................... 5
2.1.2 RJ-45 PoE, SFP and Fixed-Fiber Ports ................................................................................................ 6
2.1.3 Reset Button............................................................................................................................................ 6
2.2 ConguringDIP-switches .............................................................................................. 6
2.2.1 SW1 and SW2: Mode of Operation ........................................................................................................ 7
2.2.2 SW3 and SW4: Fiber Redundancy......................................................................................................... 9
2.2.3 SW5: MAC Learning - “MAC Learning/Off”........................................................................................... 10
2.2.4 SW6: Pause - “Pause Off/On” ............................................................................................................... 10
2.2.5 SW7: L2CP - “L2CP Tunnel/Discard” .................................................................................................... 10
2.2.6 SW8: PSE Reset - “Off/PoE Reset”...................................................................................................... 11
3.0 ApplyDCPower............................................................................................................11
4.0 Connect Cables.............................................................................................................12
5.0 Verify Operation............................................................................................................13
6.0 CommandLineInterface(CLI).....................................................................................15
6.1 CLICommands................................................................................................................. 17
6.1.1 Authentication, Authorization and Accounting (AAA)............................................................................. 18
6.1.2 Access Control List (ACL)...................................................................................................................... 23
6.1.3 BandwidthProle(BWP) ....................................................................................................................... 25
6.1.4 Cable Test (CABLETEST) ..................................................................................................................... 29
6.1.5 Contact (CONTACT).............................................................................................................................. 30
6.1.6 Class of Service (COS).......................................................................................................................... 32
6.1.7 File Directory (DIR)................................................................................................................................ 35
6.1.8 Ethertype (ETHERTYPE) ...................................................................................................................... 36
6.1.9 Load Firmware (FWLOAD).................................................................................................................... 37
6.1.10 IP (IP)..................................................................................................................................................... 38
6.1.11 Link Layer Discovery Protocol (LLDP)................................................................................................... 40
6.1.12 Physical Location (LOCATION) ............................................................................................................. 44
6.1.13 Link Redundancy (LR)........................................................................................................................... 46
6.1.14 MAC Table (MACTABLE)....................................................................................................................... 47
6.1.15 Module Settings (MODULE) .................................................................................................................. 49
6.1.16 Ping (PING) ........................................................................................................................................... 52
6.1.17 Port Attribute (PORT)............................................................................................................................. 53
6.1.18 Port Access (PORTACCESS)................................................................................................................ 56
6.1.19 Port Statistics (PORTSTAT)................................................................................................................... 57
6.1.20 Protocol (PROTOCOL) .......................................................................................................................... 58
6.1.21 Power Sourcing Equipment (PSE)......................................................................................................... 59
6.1.22 Restart (RESTART) ............................................................................................................................... 62
6.1.23 Restore to Factory Defaults (RESTORE) .............................................................................................. 63
6.1.24 IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) ............................................................................ 64
6.1.25 Save (SAVE).......................................................................................................................................... 67
6.1.26 Create and Run a Script File (SCRIPT)................................................................................................. 68
6.1.27 Firmware Update using Serial Console (SERUPDATE) ........................................................................ 69

Page 3
6.1.28 SFP (SFP) ............................................................................................................................................. 71
6.1.29 DisplaytheCommonCongurationParameters(SHOWCONFIG)....................................................... 73
6.1.30 Simple Network Management Protocol (SNMP).................................................................................... 74
6.1.31 Simple Network Time Protocol (SNTP).................................................................................................. 75
6.1.32 Entry Screen Message Display (SPLASH)............................................................................................ 76
6.1.33 Secure Shell (SSH)................................................................................................................................ 77
6.1.34 DIP-SwitchConguration(SWITCH)..................................................................................................... 79
6.1.35 VLANInterfaceConguration(SWITCHPORT) .................................................................................... 80
6.1.36 SyslogServerConguration(SYSLOG)................................................................................................ 82
6.1.37 Time (TIME)........................................................................................................................................... 84
6.1.38 SNMP Trap Host (TRAPHOST)............................................................................................................. 85
6.1.39 SNMP Traps (TRAPS) ........................................................................................................................... 86
6.1.40 UserConguration(USER) ................................................................................................................... 88
6.1.41 Firmware Version (VER) ........................................................................................................................ 90
6.1.42 VLAN Table (VLAN) ............................................................................................................................... 91
6.1.43 Zone (ZONE) ......................................................................................................................................... 92
7.0 WebInterface ................................................................................................................93
7.1 Overview........................................................................................................................... 93
7.1.1 Login...................................................................................................................................................... 93
7.1.2 Status Screens ...................................................................................................................................... 94
7.1.2.1 Module Overview ................................................................................................................... 94
7.1.2.2 Module Information ................................................................................................................ 96
7.1.2.3 Port Statistic Overview........................................................................................................... 97
7.1.2.4 Port Statistics Detailed........................................................................................................... 98
7.1.2.5 SFP Port Info ....................................................................................................................... 100
7.1.3 HardwareCongurationScreens......................................................................................................... 103
7.1.3.1 DIP Switch ........................................................................................................................... 103
7.1.3.2 Port / Interface Overview ..................................................................................................... 105
7.1.3.3 Port / Interface Detailed ....................................................................................................... 107
7.1.3.4 I/O Pins ................................................................................................................................ 110
7.1.4 Service Management........................................................................................................................... 112
7.1.4.1 Module ................................................................................................................................. 112
7.1.4.2 IPConguration ................................................................................................................... 114
7.1.4.3 SNMP................................................................................................................................... 116
7.1.4.4 Time and Date...................................................................................................................... 119
7.1.4.5 NTP / SNTP ......................................................................................................................... 120
7.1.4.6 LLDP .................................................................................................................................... 121
7.1.5 Service Activation ................................................................................................................................ 125
7.1.5.1 VLANConguration ............................................................................................................. 125
7.1.5.2 VLAN Interface..................................................................................................................... 127
7.1.5.3 Rate Limiting & Shaping ...................................................................................................... 129
7.1.5.4 CoS / QoS............................................................................................................................ 135
7.1.5.5 Protection............................................................................................................................. 137
7.1.6 Security................................................................................................................................................ 141
7.1.6.1 Authenticate, Authorize, Account (AAA)............................................................................... 141
7.1.6.2 Access Control List (ACL).................................................................................................... 146
7.1.6.3 Secure Shell (SSH).............................................................................................................. 147
7.1.6.4 User ..................................................................................................................................... 149
7.1.7 Maintenance ........................................................................................................................................ 153
7.1.7.1 Firmware Upgrade ............................................................................................................... 153
7.1.7.2 Module Maintenance............................................................................................................ 155
7.1.7.3 Browser Settings.................................................................................................................. 156
7.1.7.4 Syslog .................................................................................................................................. 158
7.1.7.5 SNMP Traps Screen ............................................................................................................ 160
7.1.7.6 Splash Screen...................................................................................................................... 162

Page 4
8.0 Specications .............................................................................................................164
9.0 Appendix A: Firmware Update ..................................................................................165
9.1 Overview......................................................................................................................... 165
9.2 SaveCurrentSettings ................................................................................................... 165
9.3 CopytheFilestoYourHardDrive................................................................................ 165
9.5 UpdatetheGPoE+/Mi .................................................................................................... 165
9.5.1 Updating the Firmware Using FTP ...................................................................................................... 165
9.5.2 Updating the Firmware Using the Web Interface................................................................................. 167
10.0 WarrantyandCopyright.............................................................................................170
11.0 CustomerSupportInformation .................................................................................171

Page 5
1.0 OVERVIEW
The RuggedNet GPoE+/Mi is a industrial ruggedized and temperature-hardened managed Ethernet switch
that features one or two 1000BASE-X Gigabit ber ports and four or eight 10/100/1000BASE-T RJ-45
Power Sourcing Power-over-Ethernet (PoE and PoE+) ports.
The GPoE+/Mi functions can be congured using easily accessible DIP-switches or using Web, Telnet,
SSH or Serial Console management interfaces.
Web, Telnet and SSH management access is available through any Ethernet port on the GPoE+/Mi.
The GPoE+/Mi is Power Sourcing Equipment (PSE) that provides up to 30W PoE+ (IEEE 802.3at) per
RJ-45 port and supports frame sizes up to 10,240 bytes.
The GPoE+/Mi automatically negotiates and delivers the power level required by its Powered Device
(PD) partner. When negotiating to PoE (IEEE 802.3af) it delivers up to 15.4 Watts per RJ-45 port. When
negotiating to PoE+ (IEEE 802.3at) it delivers up to 30 Watts per RJ-45 port.
1.1 NEWFEATURES
Firmware release 2.1 adds SNMP v1/v2c support as well as SNMP alarm notication. New CLI commands
include snmp, traps and traphosts. New web screens were added for the conguration of SNMP parameters.
NetOutlook® supports 2.1 features with IP discovery and alarm reporting.
2.0 PORTSTRUCTURE
2.1 OVERVIEW
The front of the GPoE+/Mi provides access to the management (serial console), RJ-45 PoE, SFP or Fixed-
Fiber ports. The SFP ports support 1000BASE-X SFP ber and 10/100/1000BASE-T copper transceivers.
Front Panel Layout
2.1.1 Serial Console Port
To congure the GPoE+/Mi using the serial port, attach a DB-9 serial (RS-232) equipped computer with
terminal emulation software such as Procomm or Putty to the serial port on the GPoE+/Mi using a RJ-45
to DB-9 serial cable (not included).

Page 6
The port is a standard RS-232 asynchronous serial interface. The serial ports is congured for 57,600bps,
1 stop, 8 data, parity none. The serial adapter cable pin-outs are illustrated below.
Standard RJ-45 to DB-9 serial cable pin-out
2.1.2 RJ-45PoE,SFPandFixed-FiberPorts
The RJ-45 PoE Ethernet port supports 10BASE-T, 100BASE-TX and 1000BASE-T protocols, auto-
negotiation, auto MDI/MDI-X crossover and can be manually forced to a specic speed and duplex mode.
The SFP interfaces support SERDES 1000BASE-X ber transceivers and SGMII 10/100/1000BASE-T
copper transceivers. The SFP interfaces operate in auto-negotiation and support full duplex operation.
Fixed-ber 1000BASE-X connectors are available with multimode (MM) dual ber, single-mode (SM)
dual ber and single-mode single-ber (SF) options. They support ST, SC and LC connectors.
2.1.3 ResetButton
A reset button is available on the front of the switch to restore the switch to factory default values. Press
and hold the reset button for more than 5 seconds to restore the switch to factory default values.
2.2 CONFIGURINGDIP-SWITCHES
DIP-switches are located on the top of the RuggedNet GPoE+/Mi. The DIP-switches are used to congure
modes of operation, networking features and PoE reset. Any change in the DIP-switches will immediately
take effect.
DIP-switch Bank Locations

Page 7
The table below provides a description of each DIP-switch position and function.
Switch Position Function
SW1 & SW2 LEFT Mode of Operation (See Section 2.2.1)
RIGHT
SW3 & SW4 LEFT Fiber Redundancy (See Section 2.2.2)
RIGHT
SW5 LEFT MAC Learning (factory default)
RIGHT OFF - MAC Learning Disabled
SW6 LEFT Pause OFF - Pause Disabled (factory default)
RIGHT ON - Pause Enabled
SW7 LEFT L2CP Tunnel (factory default)
RIGHT L2CP Tunnel Discard
SW8 LEFT OFF - PoE Reset Disabled (factory default)
RIGHT PoE Reset
DIP-switch Denitions
2.2.1 SW1andSW2:ModeofOperation
The GPoE+/Mi supports Switch, Directed Switch and Dual Device modes.
The modes are described with MAC learning enabled. When MAC learning is disabled, unicast packets
are forwarded to all ports.
SW1 SW2 1 Fiber Port 2 Fiber Ports
Function
LEFT LEFT Switch Mode (factory default) Switch Mode (factory default)
LEFT RIGHT Directed Switch Mode Directed Switch Mode
RIGHT LEFT Reserved Dual Device Mode - Switch Mode
RIGHT RIGHT Reserved Dual Device Mode - Directed Switch Mode
Modes of Operation
Switch Mode
When congured for Switch Mode (factory default), the module operates as a standard layer 2 switch. Data
ow will follow MAC address mapping.
Directed Switch Mode
When an 4-Port model is congured for Directed Switch Mode, trafc from Ports P1 - P4 is only forwarded
to the ber uplink port F1, preventing the broadcast trafc from ooding other network ports. Incoming
trafc from F1 follows MAC address mapping.
When an 8-Port model is congured for Directed Switch Mode, trafc from Ports P1 - P8 is only forwarded
to the ber uplink port F1, preventing the broadcast trafc from ooding other network ports. Incoming
trafc from F1 follows MAC address mapping.

Page 8
Directed Switch Mode Single Fiber Port
Models with two ber ports follow the same RJ-45 data ow as above, with the addition of ber port F2
also being forwarded to the ber uplink port F1.
Directed Switch Mode Dual Fiber Port
Two ber ports models can be congured for Directed Switch Mode and Fiber Redundancy (per DIP-switches
3 and 4). Trafc is forwarded to both the primary (F1) and secondary (F2) ber ports. The secondary port
will block all trafc while the primary port is active. When the primary port goes down, the secondary
port will be active and all trafc will be forwarded out the secondary port (F2).
Directed Switch Mode with Fiber Redundancy

Page 9
Dual Device Mode
Dual Device Mode is only supported on GPoE+/Mi with two ber ports.
When congured for Dual Device Mode, the GPoE+/Mi is congured as two logically independent Layer
2 switches. On the 4-Port models, ber port F1 is associated with RJ-45 Ports P1 - P2 and ber port F2 is
associated with RJ-45 Ports P3 - P4. On the 8-Port models, ber port F1 is associated with RJ-45 Ports P1
- P4 and ber port F2 is associated with RJ-45 Ports P5 - P8. Data ow will follow MAC address mapping.
Dual Device Mode
On the 4-Port models congured for Dual Device Mode and Directed Switch Mode, the trafc from Ports
1 - 2 is only forwarded to ber port F1 and Ports 3 - 4 are only forwarded to ber port F2. On the 8-Port
models congured for Dual Device Mode and Directed Switch Mode, the trafc from Ports 1 - 4 is only
forwarded to ber port F1 and Ports 5 - 8 are only forwarded to ber port F2. This prevents broadcast
trafc from ooding other network ports. Incoming trafc from F1 and F2 follows MAC address mapping.
Dual Device with Directed Switch Mode
2.2.2 SW3andSW4:FiberRedundancy
SW3 and SW4 are valid on models with two ber ports.
The modes are described with MAC learning enabled. When MAC learning is disabled, the GPoE+/Mi
will send data to all ports.

Page 10
SW3 SW4 1 Fiber Port 2 Fiber Ports
Function
LEFT LEFT Reserved Switch Mode (factory default)
LEFT RIGHT Reserved Switch Mode (factory default)
RIGHT LEFT Reserved Fiber Redundancy Mode - no return to primary (F1)
RIGHT RIGHT Reserved Fiber Redundancy Mode - return to primary (F1)
Fiber Redundancy
Fiber redundancy is only supported on GPoE+/Mi models with two ber ports.
When congured for Fiber Redundancy Mode no return to primary, the ber ports operate as redundant
links. A fault on the primary ber port F1, will cause a fail over to the secondary ber port F2 within
50msec. F1 will become the secondary port once the port has been restored because “no return to primary”
has been selected.
Redundant Fiber with Switch Mode
When congured for Fiber Redundancy Mode return to primary, a fault on the primary ber port F1, will
cause a fail over to the secondary ber port F2 within 50msec. The module will return to the primary ber
port F1 after the ber link has been restored for 6 seconds.
2.2.3 SW5:MACLearning-“MACLearning/Off”
When this DIP-switch is in the MAC Learning position (factory default), all ports on the module will learn
the source MAC address of each received packet and store the address so packets destined for the stored
addresses can be forwarded to the appropriate port on the module. When the DIP-switch is in the OFF
position, learning is turned off and all received unicast packets are forwarded to all ports.
2.2.4 SW6:Pause-“PauseOff/On”
Setting the DIP-switch to the Pause Off position (factory default) congures the module to advertise no
Pause capability on all ports. Pause congures the ow control functionality for the module, including
pause mode advertisement and pause functionality.
Setting this DIP-switch to the ON position congures the module to advertise Symmetrical and Asymmetrical
Pause capability to all ports.
2.2.5 SW7:L2CP-“L2CPTunnel/Discard”
When this DIP-switch is in the L2CP Tunnel position (factory default), all L2CP frames are tunneled through
the module. When this DIP-switch is in the Discard position, all L2CP frames are discarded.

Page 11
2.2.6 SW8:PSEReset-“Off/PoEReset”
The GPoE+/Mi can be congured to disable (reset) the PoE output power for 5 seconds after a loss of
receive link on any ber port. This feature is typically used to allow a PD to re-initialize after a failure on
the incoming ber.
When this DIP-switch is in the OFF position (factory default), PoE output power does not reset on ber
link loss. When this DIP-switch is in the PoE Reset position, the module will disable PoE output power
for 5 seconds following a loss of receive link on any ber port.
When ber redundancy is enabled, the loss of ber link on either F1 or F2 will not cause the PD to be re-
initialized even though the PSE Reset is enabled. The PD will be re-initialized on a loss of receive link
on both ber ports.
When Dual Device Mode is enabled, the loss of ber link will re-initialize the PDs associated with the that
ber port. On the 4-Port models, RJ-45 ports 1 - 2 will drop PoE power when a loss of receive link on F1
is detected and RJ-45 ports 3 - 4 will drop PoE power when a loss of receive link on F2 is detected. On
the 8-Port models, RJ-45 ports 1 - 4 will drop PoE power when a loss of receive link on F1 is detected and
RJ-45 ports 5 - 8 will drop PoE power when a loss of receive link on F2 is detected.
The PoE Reset function is also available through the web management. See Section 7.1.3.2 Port / Interface
Overview.
3.0 APPLYDCPOWER
Power source should be available within 5 ft. of the chassis. The over current protection for connection
with centralized DC shall be provided in the building installation, and shall be a UL listed circuit breaker
rated 20 Amps, and installed per the National Electrical Code, ANSI/NFPA-70.
For PoE, the 4-Port model requires 46 to 57VDC @ 2.72 Amp max rated power and the 8-Port model
requires 46 to 57VDC @ 5.2 Amp max rated power. For PoE+, this equipment requires 52 to 57VDC.
Appropriate overloading protection should be provided on the DC power source outlets utilized.
WARNING: OnlyaDC power source that complies with
safety extra low voltage (SELV) requirements can be
connected to the DC-input power supply.
WARNING REGARDING EARTHING GROUND:
o
o
o
o
This equipment shall be connected to the DC supply
system earthing electrode conductor or to a bonding
jumper from an earthing terminal bar or bus to which the
DC supply system earthing electrode is connected.
This equipment shall be located in the same immediate
area (such as adjacent cabinets) as any other equipment
that has a connection between the earthed conductor of
the same DC supply circuit and the earthing conductor,
and also the point of earthing of the DC system. The DC
system shall not be earthed elsewhere.
The DC supply source is to be located within the same
premises as this equipment.
There shall be no switching or disconnecting devices in
the earthed circuit conductor between the DC source and
the earthing electrode conductor.
Locate the DC circuit breaker of the external power source, and switch the circuit breaker to the OFF position.
Prepare a power cable using a three conductor insulated wire (not supplied) with a 14 AWG gauge minimum.
Cut the power cable to the length required.

Page 12
Strip approximately 3/8 of an inch of insulation from the power cable wires.
Connect the power cables to the GPoE+/Mi by fastening the stripped ends to the DC power connector.
WARNING: Note the wire colors used in making the positive, negative and ground connections. Use the
same color assignment for the connection at the circuit breaker.
Connect the power wires to the circuit breaker and switch the circuit breaker ON. If any units are installed,
their Power LED should indicate the presence of power.
Installation of the equipment should be such that the air ow in the front, back, side and top vents of the
chassis are not compromised or restricted.
Depending on the model number of the module, a second power source is available (as shown). Use the
same power supply installation procedure for the second power supply.
Rear View with DC Power Connector
NEVER ATTEMPT TO OPEN THE CHASSIS OR
SERVICE THE POWER SUPPLY. OPENING THE
CHASSIS MAY CAUSE SERIOUS INJURYOR DEATH.
THERE ARE NO USER REPLACEABLE OR
SERVICEABLE PARTS IN THIS UNIT.
WARNING!!!
4.0 CONNECTCABLES
a. When using SFP models, insert the SFP ber transceiver into the SFP receptacle on the front of the
module (see the SFP Data Sheet 091-17000-001 for supported Gigabit transceivers).
NOTE: The release latch of the SFP ber transceiver must be in the closed (up) position before
insertion.
b. Connect an appropriate multimode or single-mode ber cable to the ber port on the front of the module.
It is important to ensure that the transmit (TX) is attached to the receive side of the transceiver at the
other end and the receive (RX) is attached to the transmit side. When using single-ber (SF) models,
the TX wavelength must match the RX wavelength at the other end and the RX wavelength must match
the TX wavelength at the other end.
c. Connect the Ethernet 10/100/1000 RJ-45 port using a Category 5 or better cable to an external 10BASE-T,
100BASE-TX or 1000BASE-T Ethernet device.
RJ-45 Pinout Alternative A
1 Vport Positive
2 Vport Positive
3 Vport Negative
6 Vport Negative
Voltage Polarity of Alternative A PoE Power

Page 13
d. An alarm relay is available to detect a user congured event. The three contacts closure pins can be
congured for normally open (pin 1 and 2) or normally closed (pin 3 and 2) operation. The relay
contacts support 110VDC/125VAC Maximum Voltage at a maximum current of up to 2 amps. Use the
supplied connector to attach the wire to the external alarm. Use 16 - 24 AWG wire.
e. An alarm input is available for detecting external events such as door open or closed (pin 4 and 5).
The alarm input provides 3.3VDC to detect an external open or shorted condition. Use the supplied
connector to attach the wire to the external alarm. Use 16 - 24 AWG wire.
5.0 VERIFYOPERATION
Verify the GPoE+/Mi is operational by viewing the LED indicators.
Power
LEDIndicators
Legend Indicator Description
Pwr
OFF Unit not powered
Green - ON Unit powered
Green - Blinking at 1Hz Indicates reset button has been pressed for more than 5 seconds and the
module is being restored to factory default values
Power LED Indicators
Fiber Ports
LEDIndicators-FixedFiberModels
Legend Indicator Description
1000
OFF No link
Green - ON Port linked at 1000Mbps
Green - Blinking at 10Hz Port data activity at 1000Mbps
Green - Blinking at 1Hz Port linked at 1000Mbps and in redundant standby mode
Amber - Blinking at 1Hz Port linked at 1000Mbps and receiving Auto Negotiation Remote Fault
Fiber LED Indicators - Fixed Fiber Models
Fiber Ports
LEDIndicators-SFPModels
Legend Indicator Description
100
OFF No link
Green - ON Port linked at 100Mbps
Green - Blinking at 10Hz Port data activity at 100Mbps
Green - Blinking at 1Hz Port linked at 100Mbps and in redundant standby mode
Amber - Blinking at 1Hz Port linked at 100Mbps and receiving Far End Fault Indicator
1000
OFF No link
Green - ON Port linked at 1000Mbps
Green - Blinking at 10Hz Port data activity at 1000Mbps
Green - Blinking at 1Hz Port linked at 1000Mbps and in redundant standby mode
Amber - Blinking at 1Hz Port linked at 1000Mbps and receiving Auto Negotiation Remote Fault
Fiber LED Indicator
NOTE: 10M and 100M operation is only supported using copper SFP transceivers. When negotiated to 10M, both the
100 and 1000 LEDs will be ON (blinking).

Page 14
RJ-45Ports
LEDIndicators
Legend Indicator Description
100
OFF No link
Green - ON Port linked at 100Mbps
Green - Blinking at 10Hz Port data activity at 100Mbps
Amber -ON Port linked at 100Mbps Half-duplex
Amber - Blinking at 10Hz Port data activity at 100Mbps Half-duplex
1000
OFF No link
Green - ON Port linked at 1000Mbps
Green - Blinking at 10Hz Port data activity at 1000Mbps
Amber -ON Port linked at 1000Mbps Half-duplex
Amber - Blinking at 10Hz Port data activity at 1000Mbps Half-duplex
10
(100+1000)
OFF No link
Green - ON Port linked at 10Mbps
Green - Blinking at 10Hz Port data activity at 10Mbps
Amber -ON Port linked at 10Mbps Half-duplex
Amber - Blinking at 10Hz Port data activity at 10Mbps Half-duplex
PoE/PSE
Green - ON Port PSE is active
Amber - ON Port PSE error/inactive
Amber - Blinking at 1Hz Port PSE inactive due to resistance too low (< 15k W) or short circuit
detected
Amber - Blinking at 10Hz Port PSE inactive due to resistance too high (33k to 500k W)
OFF Port PSE inactive
RJ-45 LED Indicators
NOTE: The PSE LED may turn Amber (ON) when a non-PD device is connected to the port.

Page 15
6.0 COMMANDLINEINTERFACE(CLI)
To access the Command Line Interface, connect to the serial console port on the front of the module per
Section 2.2.
Each module is congured with the following defaults:
IP
IP 1 Address 192.168.1.220
IP 1 Subnet Mask 255.255.255.0
IP 1 Gateway 192.168.1.1
Protocols
IP enabled
TELNET enabled
FTP disabled
DHCP Client disabled
Flow Control disabled
Passwords
Serial public (username: admin)
FTP public (username: admin)
Telnet public (username: admin)
SNMPv1/v2c
Read public
Write private
SNMPv1/v2c agent enabled
User 1 type admin
User 1 name admin
User 1 password public
General SNMP Parameters
SNMP trap type SNMPv2c
SNMP UDP Trap Port Number 162
The GPoE+/Mi supports a common password per user account for the Serial port, Telnet, FTP and SSH.
The password is congured using the user command. Passwords for SNMPv1 are congured using the
snmp command.
It is highly recommended that the passwords be changed in order to prevent unauthorized access to the
module.

Page 16
Once accessed, the Password Entry screen will be displayed. Type the username and password. Press
<ENTER>.
Omnitron Systems Technology, Inc. GPoE+/Mi
Copyright 2017-2018 OST, Inc.
-----------------------------------------------------------------------------
Omnitron Systems Technology Technical Support: [phone]
38 Tesla Sales/Products: [phone]
Irvine, CA 92618 On the web at: www.omnitron-systems.com
-----------------------------------------------------------------------------
IP address 192.168.1.220
MAC 00-06-87-02-87-50
Serial number 00720087
GPoE+/Mi login:
The 4-Port GPoE+/Mi is used to show all menu examples in the following sections.

Page 17
6.1 CLICOMMANDS
The commands are presented in alphabetical order and are not meant as a conguration guide. Each
command has an explanation and conguration example.
Enter ?or help to view the options.
>
CLI Command summary
For more help on a specic command, type the <command> -h
Command Description
? command summary (same as help command)
aaa authentication, authorization, accounting conguration
acl access control list conguration for management access
bwp bandwidth prole conguration
cabletest cable test for a copper port
contact contact closure status
cos class of service conguration
dir directory of the existing les
ethertype ethertype tag identication conguration
exit exit the CLI session
fwload rmware load conguration
h command summary (same as help command)
help command summary
ip internet protocol conguration
lldp link layer discovery protocol (LLDP) conguration
location location conguration
lr link redundancy conguration
mactable mac table status
module module global conguration
ping ping conguration
port port attribute conguration
portaccess port access conguration
portstat port statistic conguration
protocol protocol conguration
pse power source equipment (PSE) conguration
restart restart module
restore restore module defaults
rstp rapid spanning tree conguration
save save conguration changes into permanent memory
script create and execute script les
serupdate upload rmware update via the serial port
sfp small form pluggable port information
showcong show basic conguration information status
snmp simple network management protocol user conguration
sntp simple network time protocol conguration
splash splash screen warning message conguration
ssh secure shell conguration
switch physical switch conguration
switchport vlan interface conguration
syslog system log message conguration
traphost snmp trap host conguration
traps snmp trap conguration
time time of day conguration
user user conguration
ver version status
vlan vlan conguration
x exit the CLI session
zone time zone list
>

Page 18
Keyboard shortcuts are displayed with the menu of module commands.
CLI keyboard shortcuts:
Ctrl+A move the cursor to the beginning of the line
Ctrl+B move the cursor backward one character
Ctrl+D delete the character at the cursor
Ctrl+E move the cursor to the end of the line
Ctrl+F move the cursor forward one character
Ctrl+K erase characters from the cursor to the end of the line
Ctrl+L redisplay the current line on the console
Ctrl+N or down arrow, display the next command in the commands history buffer
Ctrl+P or up arrow, display the previous command in the commands history buffer
Ctrl+R starts a new line with the same command previously shown
Ctrl+U delete the whole line
Ctrl+W delete the word to the left of the cursor
Ctrl+X erase character from the cursor to the beginning of the line
Esc+F move the cursor forward one word, skipping white space
Esc+B move the cursor backward one word, skipping white space
Backspace remove the character to the left of the cursor
Delete remove the character to the right of the cursor
>
6.1.1 Authentication,AuthorizationandAccounting(AAA)
The module supports Authentication, Authorization and Accounting (AAA), Remote Authentication Dial-In
User Service (RADIUS), Terminal Access Controller Access-Control System Plus (TACACS+) and Port
Based Network Access Control (802.1X).
AAA is a framework for controlling access to computer resources, enforcing policies, auditing usage and
providing the information necessary to bill for services. AAA congures the client type method for console,
FTP, SSH, Telnet interfaces and the authentication method TACACS+, RADIUS, local, or none.
Remote Authentication Dial-In User Service (RADIUS) is a client/server system that secures networks
against unauthorized access. When a user tries to access a specic module, the RADIUS server is contacted
for validation of a correct user name and password.
The user receives one of the following responses from the RADIUS server:
ACCEPT - The user is authenticated.
REJECT - The user is not authenticated and is prompted to reenter the username and password, or
access is denied.
CHALLENGE - A challenge is issued by the RADIUS server and is attempting to collect additional
information from the user including username and password.
CHANGE PASSWORD - A request is issued by the RADIUS server asking the user to select a new
password.
RADIUS is a stateless protocol using UDP, running on Port 1812 between the Client and the Server. A
shared secret key is used to encrypt passwords and exchange responses between the client and the server.
Terminal Access Controller Access-Control System Plus (TACACS+) is a connection oriented Authentication,
Authorization, and Accounting (AAA) protocol. TACACS+ is used to authenticate, authorize, and for
accounting of TCP connections.

Page 19
TACACS+ implements the following functions:
Authentication is the action of determining the identication of the user (or entity). It also provides
complete control of the authentication process through login and password dialog, challenge and
response, and messaging support.
Authorization is the action of determining what a user is allowed to do and provides ne-grained control
over user capabilities for the duration of the user’s session.
Accounting is the action of recording what a user is doing, and/or has done and collects and sends
information used for billing, auditing, and reporting to the TACACS+ daemon.
When a user attempts to log in to a device the control passes to the TACACS+ server which provides the
challenge and the user provides the response. This is typically user name, password, and other challenge
questions. The information passed between the module and the TACACS+ server is encrypted based upon
the TACACS+ protocol specication,
The module will eventually receive one of the following responses from the TACACS+ server during the
authentication phase:
ACCEPT - The user is authenticated and service may begin. If the module is congured to require
authorization, authorization begins.
REJECT - The user has failed to authenticate. The user may be denied further access, or will be prompted
to retry the login sequence depending upon how the TACACS+ server is congured.
ERROR - An error occurred at some time during the authentication. If an ERROR response is received,
the module will typically try to use an alternative method for authenticating the user.
CONTINUE - The user is prompted for additional authentication information.
Once the Authentication phase is complete, the Authorization phase begins (if congured on the module).
The module again contacts the TACACS+ server and it returns an ACCEPT or RETURN authorization
response. If an ACCEPT response is returned, the response contains attributes that are used to direct the
services that the user can access.
Port Based Network Access Control is dened in IEEE 802.1X. It uses EAPoL (Ethernet Authentication
Protocol over LAN) to communicate between the Supplicant (Client), Authenticator (XM5) and
Authentication Server.
The Supplicant, or Client, is connected to a port that needs to be authenticated via the EAP Server. EAP
Start Frames are sent from the Supplicant to the Authenticator.
The Authenticator, or switch, requests information from the Supplicant and strips the EAP information
from the EAP Ethernet frame and places that information into a RADIUS frame and transmits the frames
towards the EAP RADIUS server. The Authenticator also passes information from the EAP Server to
the Supplicant in the reverse process.
The EAP Server receives the EAP requests and proceeds with the Challenge-Response sequence and
nally allows or denies access to the port.

Page 20
The aaa command provides the ability to congure AAA, RADIUS, TACACS+ and 802.1X parameters.
To congure AAA, use the aaa option from the CLI prompt. A list of options is displayed when the aaa -h
command is entered.
> aaa -h
Description:
aaa - authentication, authorization, accounting conguration
Syntax:
aaa [-h]
aaa -s
aaa {-dis|-ena} {aaa|guestvlan|radius|tacacs+|802.1x}
aaa -ty tacacs+ [-host ipHostList] [-key aKey] [-l4 a1,a3] [-to toVal]
aaa -ty radius [-host ipHostList] [-key aKey] [-l4 a1,a3] [-tran rNum]
[-to toVal]
aaa -ty 802.1x -p pNum [-ptype pMode] [-auth aTime] [-retry rTime]
[-vid gVid] [-dis|-ena guestvlan] [-xmode xModeSel]
aaa -meth authList
Switches:
-auth 802.1X reauthorize time in sec, [aTime]: {0..65535}, dt 3600
a value of zero indicates that reauthorization is not required
-dis disable function: {aaa|guestvlan|radius|tacacs+|802.1x}
-ena enable function: {aaa|guestvlan|radius|tacacs+|802.1x}
[aaa] authentication, authorization, accounting, dt disabled
[guestvlan] 802.1X guest vlan authentication, dt disabled
[radius] radius protocol, dt disabled
[tacacs+] TACACS+ protocol, dt disabled
[802.1x] port based access control (802.1X), dt disabled
-h display help information
-host server ip host list, [ipHostList]: {host1,..,hostn}
-key server key, [aKey], dt not dened
-l4 layer 4 port number list, [a1,a3]
[a1] authentication/authorization port number: {1..65535}
[a3] accounting port number: {1..65535}
-meth authentication method, [authList]: {local,none,tacacs+,radius}
-p physical port list, [pList]: {1..n|all}
-ptype port authentication mode, [pMode]: {auto|mac|on|off}, dt on
[auto] standard 802.1X authentication on a port
[mac] 802.1X MAC bypass authentication on a port
[on] port is always authorized, 802.1X disabled
[off] port is always unauthorized
-retry 802.1X EAP retry time in sec, [rTime]: {1..60}, dt 30
-s show current conguration
-to server timeout before error declared in sec, [toVal]: {1..60}, dt 60
-tran RADIUS server request retry count, [rNum]: {0..10}, dt 2
-ty conguration type: {radius|tacacs+|802.1x}
-vid guest VLAN ID assignment, [gVid]: {1..4095}
-xmode 802.1X mode, [xModeSel]: {discard|peer|tunnel}
[discard] 802.1X is disabled, 802.1X frames are discarded
[peer] 802.1X is enabled and protocol is operating
[tunnel] 802.1X is disabled, 802.1X frames are tunneled
>
The options available using the aaa command are shown below.
The -auth switch congures the 802.1X reauthorization timer. A zero value disables the timer.
The -dis switch disables one of the following functions:
aaa disables authentication, authorization, and accounting, default is disabled.
guestvlan disables guest VLAN access, default is disabled.