Ruijie Networks RG-IS2700G Series User manual

Ruijie RG-IS2700G Series Switches
Web-Based Configuration Guide, Release 10.4(3b16)T29

Copyright Statement
Ruijie Networks©2018
Ruijie Networks reserves all copyrights of this document. Any reproduction, excerption, backup, modification,
transmission, translation or commercial use of this document or any portion of this document, in any form or by any means,
without the prior written consent of Ruijie Networks is prohibited.
Exemption Statement
This document is provided “as is”. The contents of this document are subject to change without any notice. Please obtain
the latest information through the Ruijie Networks website. Ruijie Networks endeavors to ensure content accuracy and will
not shoulder any responsibility for losses and damages caused due to content omissions, inaccuracies or errors.

Preface
Thank you for using our products.
Audience
This manual is intended for:
Network engineers
Technical support and servicing engineers
Network administrators
Obtaining Technical
Assistance
Ruijie Networks Website: https://www.ruijienetworks.com/
Technical Support Website: https://ruijienetworks.com/support
Case Portal: http://caseportal.ruijienetworks.com
Community: http://community.ruijienetworks.com
Technical Support Email: [email protected]
Skype: [email protected]
Related Documents
Documents
Description
Command Reference
Describes the related configuration commands, including command modes,
parameter descriptions, usage guides, and related examples.
Hardware Installation and Reference
Guide
Describes the functional and physical features and provides the device
installation steps, hardware troubleshooting, module technical specifications,
and specifications and usage guidelines for cables and connectors.
Conventions
This manual uses the following conventions:
Convention
Description

boldface font
Commands, command options, and keywords are in boldface.
italic font
Arguments for which you supply values are in italics.
[ ]
Elements in square brackets are optional.
{ x | y | z }
Alternative keywords are grouped in braces and separated by vertical bars.
[ x | y | z ]
Optional alternative keywords are grouped in brackets and separated by
vertical bars.
Symbols
Means reader take note. Notes contain helpful suggestions or references.
Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of
data.

Configuration Guide Smart Web Configuration
1-1
1 Smart Web Configuration
1.1 Overview
Web-based management allows you to manage switches, routers, and other network devices through browsers such as
the Internet Explorer (IE).
Web-based management involves the Web server and Web client. The Web server, integrated into a device, is used to
receive and process requests from the client (for reading Web files or executing commands), and return processing
results to the client. The Web client is usually a Web browser, such as IE.
1.2 Configuration Environment Requirements
1.2.1 Client Requirements
An administrator can log in to the Web-based management page of a switch from the Web browser of the Web client,
to manage the switch. The client refers to a PC or some other mobile terminals such as laptops or iPads.
Google Chrome, Firefox, IE9.0, IE11.0, and some IE kernel-based browsers (such as Maxthon) are supported.
Exceptions such as garble or format error may occur if an unsupported browser is used.
It is recommended to set the resolution to 1024 x 768, 1280 x 1024, or 1440 x 960. If other resolutions are used, the
page font and format may not be aligned, the UI is unaesthetic, or other exceptions may occur.
1.2.2 Server Requirements
The Web service needs to be enabled on the switch.
Login authentication information for Web-based management needs to be configured for the switch.
A management IP address needs to be configured for the switch.
1.3 Starting the Web Service
The Web service is enabled by default. You can enter 192.168.1.1 in the browser and press Enter to access the Web
service. For details about the CLI configuration, see section 1.12 "Typical Configuration Examples".
Default Username/Password
Permission Description
admin/admin
Super administrator, having all permissions
guest/guest
Guest permission. A user with the guest permission is allowed to access the home
page of the system and view the system status by default.

Configuration Guide Smart Web Configuration
1-2
1.4 Logging In to Web Management Platform
Enter the management IP address of a device in the address bar of the browser, for example, http://192.168.1.1, and
press Enter. A page shown in the figure below is displayed.
Figure 1-1 Login Page
Enter the username and password and click LOGIN. After you are authenticated, the home page of the Web management
platform is displayed, as shown in the figure below.
Figure 1-2 Home Page of Web Management Platform

Configuration Guide Smart Web Configuration
1-3
1.5 Conventions
1.5.1 Icons and Buttons on the GUI
Icon/Button
Description
Edit icon. Click this icon to edit the currently selected record.
Delete icon
Status switch icon
Optional port, indicating that the port is available. Click it or select it to switch the port state to
"selected".
Non-optional port
Selected port
Aggregated port. The number illustrated indicates the aggregate port ID.
Trunk port, displayed on the panel on the VLAN and VLAN Set pages.
Save button. Click it to save the input information.
Save button in the editing state. Click it to save the edited input information.
Exit the editing state to refresh the panel and discard the input.
Batch processing operations on ports on the panel. They are located in the lower right corner
of the panel. Note: These operations are displayed only when a panel supports multiple
choices.
Mandatory item. An input box marked with this symbol indicates a mandatory item.
Binding
Note
Warning
1.5.2 System Operations
Figure 1-3 Panel Diagram
Panel description: A panel indicates a switch and the port layout on the panel is consistent with that on the switch. The
status displayed on the panel indicates the current port status of the device. Likewise, operations on the panel are actually
performed on the device.

Configuration Guide Smart Web Configuration
1-4
Panel operations: Click a port on the panel or hold and drag the mouse to select multiple ports to switch the port state to
selected. You can configure a selected port, for example, add the port description and configure port mirror and port rate
limited.
Port description: A port can have multiple states. As shown in the figure below, Port 7 and Port 8 can be member ports of
an aggregate port and non-optional ports at the same time. Aggregate Port 1 is also a trunk port in the figure below. The
selection of an aggregate port indicates that all members of the aggregate port are selected, except on the port
management/aggregate port page. In general, when the mouse is moved over a non-optional port or aggregate port,
information about the port is displayed in 1 or 2 seconds.
Figure 1-4 Panel Diagram
1.6 Home Page
Choose Index to access the home page of the system, as shown in the figure below.
Figure 1-5 Home Page
Configuration description:
Port information: The Port information tab page displays the port information list of the device. Enter the port number or
port description in the input box and click Search to search for required port information. You can click the Port, Input
flow, or Output flow table header to sort the port list by column. If Real-time refresh flow is selected, the traffic data in
the port list is updated at intervals. Click Check traffic trends. The traffic trend of the port is displayed and the Flow trend
tab page is displayed.

Configuration Guide Smart Web Configuration
1-5
Flow trend: Click Check traffic trends in the port list or click a port on the device panel to view the traffic trends of the
port, as shown in the figure below.
Figure 1-6 Flow Trends
Device configuration: The Device configuration tab page displays the current overall configurations of the device. You
can click More settings to access the specific configuration page, as shown in the figure below.
Figure 1-7 Device Configuration
1.7 Quick Configuration
Choose Quick configuration to access the Quick configuration page. This page is displayed when a device is
configured for the first time.

Configuration Guide Smart Web Configuration
1-6
Figure 1-8 Quick Configuration
On the Quick configuration page, select Ring network or Star network based on the actual network type.
Configuration description:
Quick configuration can be used only when a device is configured for the first time. It is unavailable when a device has
been configured. You need to restore the factory settings, restart the device, and then use quick configuration.
Different configuration wizards are displayed for different network types.
Figure 1-9 Selecting a Network Type
The configuration of a ring network access device includes the VLAN settings, Ethernet ring protection switching (ERPS)
settings, Simple Network Management Protocol (SNMP) settings, and time synchronization settings, as shown in the
figure below.

Configuration Guide Smart Web Configuration
1-7
Figure 1-10 Configuring a Ring Network Access Device
A management VLAN is used for the switch management. An IP address and default gateway need to be configured for
the management VLAN. After configuration, you need to access the management IP address to manage the switch. Port
GI0/1 is the management port by default.
A data VLAN is used for devices in the user data communication network, such as the front-end PC or camera. Data
VLANs differ from management VLANs, but they can use the same VLAN ID.
In the ERPS configuration, set an ID of the VLAN that needs ERPS and select two ports for connecting to the ERPS ring
network.
The SNMP service is disabled by default. You can enable it and configure the trap host and SNMP password (community
attributes).
The time synchronization function is enabled by default. You need to configure the IP address of the NTP server to
synchronize the system time. The NTP server can be deployed on the upper-level core switch/router or on the server. If a
device is capable of accessing the Internet, the public NTP server on the Internet can be used.
The configuration of a star network access device includes the VLAN settings, upper connector settings, SNMP settings,
and time synchronization settings, as shown in the figure below.

Configuration Guide Smart Web Configuration
1-8
Figure 1-11 Configuring a Star Network Access Device
Step 1, Step 3, and Step 4 are the same as those for configuring a ring network access network.
In Step 2, you need to configure an uplink port, that is, the port for connecting to the upper-level switch. The selected
uplink port will be set as a trunk port.
After the management IP address is changed and saved, the page will be suspended and gives no response.
Change the IP address of the client to ensure that it is in the same network segment as the management IP address,
and then use the changed IP address to access the Web management system of the device.
1.8 Port Management
1.8.1 Basic Settings
Choose Port management > Basic settings to access the Port Basic Settings page.

Configuration Guide Smart Web Configuration
1-9
Figure 1-12 Port Basic Settings
Configuration description:
Port basic settings: Select a required port, set the port status, port rate, and work mode. The value no modify indicates
that original configuration is retained. During batch setting, you can modify one or several items in batches by setting other
items to no modify.
Batch port description setting: Click Batch editing. A dialog box shown in the figure below is displayed.
Figure 1-13 Batch Port Editing

Configuration Guide Smart Web Configuration
1-10
Enter port description in text boxes and click set for the configurations to take effect.
When multiple ports are selected, Port description becomes unavailable. To set port descriptions in batches, click
Batch editing and enter port descriptions in the displayed dialog box. If you clear the text boxes and then click set,
the descriptions of all ports on the device will be cleared.
1.8.2 Aggregate Port
Choose Port management > Aggregate port to access the Aggregate port page.
Figure 1-14 Aggregate Port
Configuration description:
Creating an aggregate port: Enter an aggregate port number, select member ports, and then click Add. An adding
success message is displayed, indicating that the aggregate port is created. The aggregate port is displayed on the panel
after successful creation.
Editing an aggregate port: Aggregate ports displayed on the panel are non-optional. To edit an aggregate port, click the
edit icon in the operation column in Port aggregation list. Member ports of the aggregate port are selected. Click a
member port to deselect it and then click Save editing to save the modification.
Deleting an aggregate port: To delete an aggregate port, click the delete icon in the operation column in Port
aggregation list. A message is displayed, asking you whether to delete the aggregate port. Click Yes to delete the
aggregate port. After deletion, the deleted aggregate port becomes an optional port on the panel.
ARP-enabled ports, ARP-spoofing-enabled ports on important devices, ports with the MAC VLAN function enabled,
and monitoring ports in port mirror cannot be aggregated and are displayed as non-optional ports on the panel. If you
move the mouse over an non-optional port, a message is displayed, indicating that these functions are enabled on
the port and cannot be selected.

Configuration Guide Smart Web Configuration
1-11
1.8.3 Port Mirroring
Choose Port management > Port Mirroring to access the Port Mirroring page.
Figure 1-15 Port Mirroring
Configuration description:
The Port Mirroring page is editable initially because the SmartWeb allows only one mirroring port. There are two panels
on this page. The upper panel allows you to select a source port (mirrored port, multiple choices are supported) while the
lower panel allows you to select only one destination port (mirroring port). After selecting or changing ports on the panel,
click save. A setting success message is displayed.
The panel displays the status of current aggregate ports, which are editable. If you change a port and want to discard
the change, click refresh to restore the configuration status of current aggregate ports on the panel.
Members of an aggregate port cannot be used as the destination port or source port, and the destination port cannot
be the same as the source port.
1.8.4 Port Rate Limiting
Choose Port management > Port rate limiting to access the Port rate limiting page.

Configuration Guide Smart Web Configuration
1-12
Figure 1-16 Port Rate Limiting
Configuration description:
Select a port on which the rate limit needs to be configured (multiple ports can be selected for batch rate limit configuration)
on the panel, move the slider below the panel to adjust the input and output limits (the rate limit value is displayed on the
right side of the slider). A selected port is not rate limited if the slider is moved rightmost. Click Save. A setting success
message is displayed. The rate limits configured for the ports are displayed in Port speed limit list. Select a port on the
panel. The slider slides to the relevant position and the specific rate limit value is displayed. You can change and save the
value.
Aggregate ports cannot be rate limited.
1.8.5 ERPS Settings
Choose Port management > ERPS setting to access the ERPS setting page and configure an ERPS network.

Configuration Guide Smart Web Configuration
1-13
Figure 1-17 ERPS Setting
Configuration description:
Global ERPS is disabled by default. After global ERPS is enabled, you can create multiple ERPS rings. Only simple ERPS
rings can be configured in this system while intersecting rings and tangent rings are not supported. Enter a VLAN ID and
select two ports for an ERPS ring. Only one blocking port needs to and can be specified for each ERPS ring. The device
on which the blocking port exists is configured as a Ring Protection Link (RPL) owner and the selected port is configured
as an RPL port.
1.8.6 Optical Module
Choose Port management > Optical Module to access the Optical Module page. On this page, you can view
information about an optical module, including the temperature, voltage, receive optical power, and transmit optical power,
and whether the optical module works in the normal state.
Figure 1-18 Optical Module

Configuration Guide Smart Web Configuration
1-14
1.9 VLAN
1.9.1 VLAN
Choose VLAN to access the VLAN page. The VLAN page contains the VLAN Set and Trunk Set tab pages.
VLAN Set
Figure 1-19 VLAN Set
Configuration description:
Creating a VLAN: To create a VLAN, enter the VLAN ID. Other information is optional. Click Create VLAN. A creation
success message is displayed and the created VLAN is displayed in the VLAN list.
Editing a VLAN: Click the edit icon in the last column of the VLAN list. Information about the VLAN is displayed. Edit the
information and click Save editing. An editing success message is displayed.
Deleting a VLAN: Click the delete icon in the last column of the VLAN list. A message is displayed, asking you whether to
delete the VLAN. Click Yes. A VLAN deletion success message is deleted, indicating that the VLAN is deleted. VLAN 1 is
the default VLAN and cannot be deleted.
VLAN 1 is the default management VLAN. It can be modified but cannot be deleted. When changing the IP address
of VLAN 1, ensure that the new IP address is reachable. After change, the SmartWeb redirects to the login page, on
which you need to log in again. If the page direction fails and a message is displayed, indicating the page cannot be
found, the configured IP address may be unreachable. In this case, check the network connection.
Trunk Set
Figure 1-20 Trunk Set
Configuration description:
Creating a trunk port: Select a port on the panel, and enter the native VLAN and permitted VLANs (for example, 3–5, 8,
10), and click Add Trunk. A creation success message is displayed. The created trunk port is displayed in the trunk list.

Configuration Guide Smart Web Configuration
1-15
Editing a trunk port: Click the edit icon in the Operation column of the trunk list. Information about the trunk port is
displayed. Edit the information and click Save editing. An editing success message is displayed.
Deleting a trunk port: Click the edit icon in the Operation column of the trunk list. A message is displayed, asking you
whether to delete the trunk port. Click Yes. A deletion success message is displayed.
1.10 Fault/Security
1.10.1 Anti-attack
Choose Fault/Security > Anti-attack to access the Anti-attack page. The Anti-attack page contains four tab pages:
Anti-attack of ARP, Anti-attack of MAC, Anti-attack of DHCP, and Anti-attack of DOS/flow.
Anti-attack of ARP
Figure 1-21 Preventing ARP Cheating
Configuration description:
Defense status: Click the status switch icon. After the ARP attack defense function is enabled, the defense settings are
displayed on the page, which contains the Prevent ARP cheating and ARP static binding tab pages. After the ARP
attack defense function is disabled, the defense settings are hidden and only the defense status is displayed.
Prevent ARP cheating: ARP spoofing prevention checks the source IP address of an ARP packet on the port, to
determine whether the IP address matches the configured IP address of important equipment. If yes, the system discards
the packet to prevent the user client from receiving incorrect ARP responses. Therefore, the IP address for packet filtering
on the port need to be set. Set Equipment IP, select the port for filtering packets that matches the configured equipment
IP address, and click Add. The added equipment IP address and the port for filtering are displayed in the list. Click the edit
icon in the list to edit Equipment IP and Filter IP port. Click the delete icon. A message is displayed, asking you whether
to delete the equipment IP. Click Yes to delete the IP address.

Configuration Guide Smart Web Configuration
1-16
ARP static binding
Figure 1-22 ARP Static Binding
Configuration description:
Add static binding: Manually enter an IP address and an MAC address and click Bind. The added static binding is
displayed in the list.
Editing static binding: Click the edit icon in the list. The IP address and MAC address are displayed in the input boxes.
Modify the IP address and MAC address and click Bind to save the modification.
Deleting static binding: Click the delete icon in the list. A message is displayed, asking you whether to delete the IP+MAC
binding. Click Yes to delete the binding.
Anti-attack of MAC
Figure 1-23 Limiting Port MAC Number
Configuration description:
Limit port MAC number: Select a required port and configure the limited number of MAC addresses, to limit the
maximum number of MAC addresses that can be learnt by the selected port.