TFortis PSW-2G4F-Ex Instruction sheet

Configuration Manual
PSW-2G4F
PSW-2G4F-Ex
PSW-2G+
PSW-2G6F+ (PSW-2G6F+M)
PSW-2G8F+
PSW-2G4F-UPS
PSW-1G4F
PSW-1G4F-UPS
PSW-2G2F+UPS
SWU-16 (SWU-16M)
Multifunction Gigabit Managed Switches
for IP Video Surveillance Systems
Manual Version 10
Firmware version 0.2.2
© Fort-Telecom, Perm
2017

Contents
Designations.................................................................................................................................................4
1 Introduction................................................................................................................................................5
2 Switch features.............................................................................................................................................6
3 Light indication...........................................................................................................................................7
4 Reset and restart buttons...........................................................................................................................8
5 Switch management..................................................................................................................................9
5.1 Management interfaces.................................................................................................................9
5.2 What you need to know before connection....................................................................................9
5.3 Management by means of the Web interface...............................................................................10
5.3.1 First connection to the switch .........................................................................................10
5.3.2 Network settings ............................................................................................................12
5.3.3 Configuring user accounts..............................................................................................13
5.3.4 Device description..........................................................................................................14
5.3.5 Telnet setting.................................................................................................................14
5.3.6 SNTP setting..................................................................................................................15
5.3.7 Web interface language setting......................................................................................16
5.3.8 Port settings...................................................................................................................17
5.3.9 Port status......................................................................................................................18
5.3.9.1 Firmware update of the SFP module..................................................................19
5.3.10 Configuring the Event List ............................................................................................20
5.3.11 Configurating Syslog....................................................................................................22
5.3.11.1 Syslog message list.........................................................................................25
5.3.12 Configuring SMTP ..........................................................................................................26
5.3.12.1 Example of configuration with a dedicated mail server on the local network................27
5.3.12.2. Example of setting with an external mail server......................................................30
5.3.13 Configuring the dry contacts .............................................................................................32
5.3.14 Configuring VLAN 802.1q ..............................................................................................33
5.3.14.1 Example of VLAN configuration...........................................................................34
5.3.15 Configuring Port Based VLAN..........................................................................................36
5.3.16 Configuring VLAN Trunking............................................................................................37
5.3.17 Configuring QoS (Quality of Service).................................................................................37
5.3.17.1 General settings .................................................................................................. 38
5.3.17.2 Speed limit.........................................................................................................39
5.3.16.3 Configuring Class of Service ................................................................................40
5.3.17.4 Configuring Type of Service.................................................................................41
5.3.18 Configuring STP and RSTP ..............................................................................................42
5.3.19 Configuring IGMP...........................................................................................................44
5.3.20 Configuring SNMP..........................................................................................................47
5.3.20.1 Configuring SNMP v1.........................................................................................47
5.3.20.2 Configuring SNMP v3.........................................................................................48
5.3.21 MAC address filtering......................................................................................................49
5.3.21.1 List of blocked MAC addresses.............................................................................50
5.3.22 Set up Camera Comfort Start.............................................................................................51
5.3.23 Camera Hanging Control settings.......................................................................................52
5.3.24 Link Aggregation ............................................................................................................53
5.3.25 Port Mirroring.................................................................................................................54
5.3.26 Events broadcasting to Teleport integration units .................................................................55
5.3.27 Cable Tester....................................................................................................................57
5.3.28 Remote Ping...................................................................................................................58
5.3.29 Switch statistics...............................................................................................................59
5.3.29.1 Port Statistics......................................................................................................59
5.3.29.2 PoE Status..........................................................................................................60
5.3.29.3 ARP Table .........................................................................................................61
5.3.29.4 MAC Table........................................................................................................61
5.3.29.5 DNS Table.........................................................................................................61
5.3.29.6 System log .........................................................................................................62
5.3.30 Firmware Update.............................................................................................................62

5.3.31 Save and restore settings...................................................................................................63
5.3.31.1 Save settings to file .............................................................................................64
5.3.31.2. Restore settings from the file................................................................................64
5.3.31.3 Editing configuration file .....................................................................................65
5.3.32 Reset to factory settings....................................................................................................72
5.3.33 Reboot ...........................................................................................................................72
5.3.34 Optional expansion board .................................................................................................73
5.3.34.1 Digital inputs ................................................................................................... 73
5.3.34.2 Relay outputs..................................................................................................74
5.3.34.3 Logic...............................................................................................................74
5.3.34.4 RS485 output..................................................................................................75
5.3.34.5 Connecting electricity meters...........................................................................76
5.4 Management via Telnet...............................................................................................................78
5.4.1 Example of setting..........................................................................................................80
5.4.2 Description of Telnet commands ....................................................................................82
5.4.3 The config group...............................................................................................................84
5.4.3.1 Network settings (config ipif).................................................................................84
5.4.3.2 Configuring ports (config ports)..............................................................................84
5.4.3.3 Configuring multicast (IGMP Snooping)..................................................................85
5.4.3.4 Configuring STP/RSTP .........................................................................................86
5.4.3.5 Configuring SNMP...............................................................................................87
5.4.3.6 Configuring Syslog ...............................................................................................88
5.4.3.7 Configuring VLAN...............................................................................................88
5.4.3.8 Configuring SNTP................................................................................................ 89
5.4.3.9 Setting the comfort start function for the cameras......................................................89
5.4.3.10 Setting protection from hanging ............................................................................89
5.4.3.11 Configuring dry contacts (digital inputs).................................................................90
5.4.3.12 Configuring TFTP............................................................................................... 91
5.4.3.13 Configuring events..............................................................................................91
5.4.3.14 Configuring user accounts....................................................................................92
5.4.3.15 Configuring QoS.................................................................................................93
5.4.3.17 Configuring MAC address filtering........................................................................ 94
5.4.3.18 Configuring inputs of the expansion board.............................................................. 95
5.4.3.19 Configuring outputs of the expansion board............................................................95
5.4.3.20 Configuring RS485 .............................................................................................96
5.4.3.21 Configuring channel aggregation...........................................................................97
5.4.3.22 Configuring port mirroring ................................................................................... 98
5.4.4 Show group......................................................................................................................98
5.4.4.1 View switch information........................................................................................99
5.4.4.2 Viewing switch settings....................................................................................... 101
5.4.5 Firmware update using TFTP............................................................................................107
5.4.6 Saving and loading configuration and log via TFTP .............................................................108
5.4.6.1 Saving configuration ........................................................................................... 109
5.4.6.2 Restoring configuration .......................................................................................109
5.4.6.3 Saving system log...............................................................................................109
5.4.7 Saving settings................................................................................................................109
5.4.8 Reboot...........................................................................................................................110
5.4.9 Exit the management mode...............................................................................................110
5.4.10 Diagnostic functions ......................................................................................................110
5.4.10.1 Ping utility .......................................................................................................110
5.4.10.2 Cable tester ......................................................................................................111
5.5 Management via USB console ..................................................................................................113
6 Technical support ..................................................................................................................................115

Designations
The following designations are used in this manual:
Designation
Meaning
WARNING sign
Basic Settings → Network
Settings
Italics are used to show the path to the Web page in
case of configuration using the Web interface
DEFAULT
Bold type is used to highlight an important
parameter, value, button name, etc.
#IPADDRESS=[192.168.0.1]
Courier New font is used to highlight parameters in
the setting file
<VALUE>
Angle brackets are replaced with the variable value
in the console command
config syslog state <STATE>
Console commands are in bold and italics
config syslog state enable
The output of control commands is in italics

1 Introduction
This manual describes the setting and administration process of TFortis PSW
and SWU managed switches. For many protocols, configuration is based on specific
examples.
All switches are similar in terms of the configuration process. Therefore we
will consider the managed switch PSW-2G4F as the basic device in this manual.
Differences for other series switches will be specified additionally.
This manual describes Web-based and telnet-based configuration process.

2 Switch features
TFortis PSW switches are all-weather managed PoE (or PoE+)
industrial Ethernet switches for IP video surveillance systems.
TFortis SWU switches are managed Ethernet switches for 19’’ 1U
rack mounting.
Supported functions and protocols:
Integrated Web interface
Telnet
SNMP v1, v3
control of camera hanging
preliminary heating of the camera housings
cable tester
redundancy protocols STP(IEEE 802.1d), RSTP(IEEE 802.1w)
Port Based VLAN
Static VLAN (IEEE 802.1q)
Flow Control (IEEE 802.3x)
Quality of Service (802.1p) (CoS, ToS(DSCP) )
IGMP Snooping v2 multicast management
SNTP
SMTP
Syslog
system log
DNS
remote Ping function
event notification settings
firmware update using TFTP
MAC filtering

3 Light indication
TFortis PSW switches have 2 LED indicators to show the operating mode of
the switch processor: DEFAULT and CPU. (Figure 1.1, Table 1.1) (Descriptions and
functions of other light indicators are available in Operating Manual, Section 2.7,
Configuration and control elements).
Figure 1.1 DEFAULT and CPU indicators –PSW switch
Figure 1.2 DEFAULT and CPU indicators –SWU switch
Table 1.1 Purpose of indicators
Indicator status
Device status
CPU indicator flashing
slowly (at 1 Hz)
Normal operation
DEFAULT indicator on
The device is not configured, with factory-default
settings.
CPU indicator flashing
rapidly (at 10 Hz)
Indication of camera hanging (or there is no link on the
video camera port or the camera does not respond to
Ping), or indication of dry contacts active status.
CPU and Default
indicators flashing in sync
Hardware or software fault is detected. Contact
technical support.

4 Reset and restart buttons
TFortis PSW switches have 2 hard buttons to restore factory default settings
and to restart the device. Location of the buttons is shown in Figure 1.1.
To restart the switch, press CPU button shortly.
To restore factory settings, press DEFAULT button and hold it down for about
30 seconds. DEFAULT indicator should set ON at this point.
TFortis SWU switches have one hard RESET button.
To restart the switch, press the RESET button and hold it down for 3-5
seconds.
To restore default settings, press the RESET button and hold it down for 30
seconds.

5 Switch management
5.1 Management interfaces
PSW and SWU switches have the following options of remote management:
Web interface, Telnet, SNMP. It is also possible to manage the switch using a local
USB console.
Web interface contains a full set of managed parameters with a detailed
explanation and a short summary. The switch interface is available in Russian and in
English. Connection to the switch is possible using a standard Web browser.
Telnet is an alternative way of device configuring using a console application,
such as Microsoft Telnet, PuTTY, Hyper Terminal or others.
Management by means of SNMP is currently implemented in the test version
and not all commands are supported in full. SNMP is recommended for monitoring
rather that management of the switch.
Management by means of the USB console has the same console interface as
Telnet interface.
5.2 What you need to know before connection
Attention!
TFortis PSW switches have an integrated PoE injector on Fast Ethernet ports. It
means that 48~55 V voltage can be supplied to these ports.
Before connecting the IP cameras, make sure that PSW port parameters
correspond to the camera parameters.
Before connecting network devices that do not support PoE (such as a
computer or laptop) to the Fast Ethernet port, disconnect the PoE on this
port by removing the jumpers. For more information about PoE hardware
configuration, see Operating Manual, Section 2.3.
Attention!
Power supply elements are under high voltage. It is strictly forbidden to
touch conducting elements of the power supply unit under voltage.

5.3 Management by means of the Web interface
5.3.1 First connection to the switch
When switched on for the first time, the switch has the following default
settings:
IP address: 192.168.0.1
Subnet mask: 255.255.255.0
Login/password not set
Management VLAN 1
DHCP client off
STP off
Telnet on
SNMP off
Before connecting, make sure that the network card of the computer is on the
same subnet as the switch (192.168.0. *).
Start the Web browser and enter the IP address of the switch in the address bar
(Figure 5.3.1.1). Figure 5.3.1.1 Connection to the switch
After connection, main Web interface page should display (Figure 5.3.1.2).
Figure 5.3.1.2 Web interface

The Web interface can be divided into 4 frames shown in Figure 5.3.1.2:
1 –side menu that provides access to various groups of settings
2 –main frame containing the group of settings
3 –help for these settings
4 –header with link status and PoE on the ports (automatically updated every
10 seconds)
Note: by default, access to Web interface is available without login and password. It
is recommended to restrict access in the future by setting login and password. In this
case each subsequent connection to the switch will be accompanied by a standard
authentication dialog box.

5.3.2 Network settings
Basic Settings → Network Settings
This section describes the basic network settings of the switch.
Figure 5.3.2.1 Network settings
MAC –the physical address of the device used to identify the device in the
network. It is not recommended to change the MAC address otherwise than in
extreme cases, since it ensures uniqueness of the switch. The last 2 bytes of the
factory MAC address are the serial number of the device. The factory MAC address
is printed on the label and placed on the enclosure and on the circuit board of the
switch.
IP –the network address of the device. When working within the same subnet,
it is necessary to ensure the uniqueness of the network address.
Mask –the subnet mask.
Gateway –gateway network address. If the gateway is not used, leave the
default value: 255.255.255.255
DNS –network address of the DNS resolver. It is used in some functions to
convert the host name to its network address. If not used, leave the default value:
255.255.255.255
DHCP Mode –selecting the operating mode of the DHCP protocol:
1. Disable –DHCP disabled. The switch uses static network settings (IP,
Mask, Gateway and others).
2. Client –DHCP mode enabled. The switch receives network settings
automatically using broadcast request to the DHCP server.

5.3.3 Configuring user accounts
Basic Settings → User Accounts
This section contains the settings of user accounts.
Figure 5.3.3.1 List of users
By default, the only account is the administrator account with an unset user
name and password. It means access to Web interface and Telnet is available without
authentication.
To restrict access, it is necessary to create at least one user with Admin rights
and one or more users with User rights, if necessary.
Access rights are separated by selecting the Access Right field.
Figure 5.3.3.2 Configuring user name and password
The user with Admin rights has maximum authorities.
A user with User rights has limited authorities, cannot change settings and has
access to switch statistics and diagnostic tools (Ping, Virtual Cable Tester).
If setting was successful, the message "Parameters accepted" will be displayed
and it will be necessary to log in using the login and password.
If an error message is displayed, enter the parameters again.
Note 1: These fields are mandatory. The maximum length is 20 characters. Input
language is English.
Note 2: The fields are case sensitive, i.e. there is a difference between "Admin" and
"admin".
Note 3: Up to 4 accounts are supported.

5.3.4 Device description
Basic Settings → Device Description
Figure 5.3.4.1 Device description
Device Name –device name
Device Location –device location
Service Company –contact information of the service company or responsible
person
These fields are optional and only serve to simplify the identification of the
switch. The maximum length of entries is 64 characters in English and 32 characters
in Russian.
5.3.5 Telnet setting
Basic Settings → Telnet
Figure 5.3.5.1 Enabling Telnet and TFTP
Telnet –protocol used for remote management of network equipment based on
port 23 TCP protocol.
By default, Telnet is enabled. If necessary, it may be disabled.
The login and password for Telnet access are the same as for the Web interface
access.
Option Echo is an option of Telnet protocol enabled by default.
In addition, the switch firmware may be upgraded using Telnet, in this case the

switch uses TFTP protocol.
Since TFTP protocol is not secure, it is disabled by default. If necessary, it is
possible to enable it, or change the standard UDP port (69) for another one.
For more details on configuring with Telnet, see Section 5.4.
5.3.6 SNTP setting
Basic Settings → SNTP
Figure 5.3.6.1 SNTP setting
SNTP (Simple Network Time Protocol) is the protocol by which the switch
synchronizes its internal clock with an external time server.
The switch does not contain a built-in real-time clock, so it is necessary to use
SNTP protocol to get information about the current time. The use of SNTP protocol
is not mandatory and the main functions of the switch are not connected with SNTP.
However, to simplify administration, the switch supports the recording of the event
log in the "black box" and sending syslog and e-mail messages about the events to
the network administrator. With SNTP protocol enabled, these messages will include
a time stamp, which can be helpful for the administrator servicing the network.
Settings:
State —state
Server IP address –IP address of SNTP server
Server Name –domain name of SNTP server. If both IP address and domain
name of the server are set, IP address will prevail
Time Zone –time zone (difference from UTC)
Period –time period of synchronization with the server (in minutes)
Synchronize –forced synchronization of time (to check the settings)

5.3.7 Web interface language setting
Basic Settings → Language
Figure 5.3.7.1 Language selection
The Web interface of the switch supports 2 languages: Russian and English.
The default language is English. You may change it to Russian, if necessary. To do
that, make sure there are no problems with text encodings in the browser.
Web interface of the switch uses UTF-8 encoding.

5.3.8 Port settings
Ports → Port Settings
Figure 5.3.8.1 Port settings
The following port parameters can be set:
1. State –Port status. The port can be forced to switch off, if it is not used. In this
case, the port will not transfer data and the port link will not come up.
2. Speed/Duplex –Speed/Duplex. By default, the auto negotiation mode is set
which automatically adjusts the speed and duplex mode. Speed and duplex can
be set manually, however in this case it is important to make sure that the
remote side will accept such settings. For Gigabit Ethernet ports, control of
port status and speed is not available.
3. Flow Control –control of data flow (IEEE 802.3x)
4. PoE –Power over Ethernet. For some switch models, it is possible to manage
PoE only using option A (protocol PoE). To manage PoE using option B
(Passive PoE), it is necessary to move the corresponding jumpers on the board.
To configure PoE using jumpers, see Operating Manual, Section 2.7,
Configuration and control elements.
5. SFP Link Mode –the operating mode of SFP (optical) port link.
Forced –forcing the link to come up when an optical signal is detected
(Default mode)
Auto –automatic mode, recommended when connecting to third-party
equipment

5.3.9 Port status
Ports → Port Status
Figure 5.3.9.1 Port status
The following port parameters are available:
1. State –port state: on/off/blocked (with RSTP protocol off)
2. Link –Link status
3. Speed/Duplex –Speed/Duplex
4. Flow Control –control of data flow (IEEE 802.3x)
5. PoE –Power over Ethernet.
6. SFP –Additional information about connected SFP modules Information from
the internal memory of the SFP module is displayed, which is security-
programmed by the manufacturer. The "Detail" button becomes active when
the module is connected.
Warning: this information is indicated by the SFP module manufacturer.
However, since this information is optional, the manufacturer may not provide
it or provide inaccurate or incorrect information. Therefore, this information
should be seen as
additional, rather than
primary.
Figure 5.3.9.2 Information from SFP module

5.3.9.1 Firmware update of the SFP module
The switches provide for SFP modules flashing. It may be necessary when
using third-party modules in the switches of some vendors (such as CISCO, HP).
Figure 5.3.9.3 SFP module flashing interface
Firmware Dump –saves the current firmware of the SFP module to a file.
When flashing, it is strongly recommended to dump the old firmware in order to have
the ability to rollback, i.e. return to the old version.
Preloaded Firmware Download –a list of preloaded firmware for modules
with the wavelengths of 1550 and 1310 nm. This list contains the latest firmware at
the time of the switch firmware release.
Custom Firmware Download –download a third party firmware file.
Warning: the possibility of reprogramming depends also on the SFP
module type. There are modules whose memory only works in read-only
mode. Such modules cannot be reprogrammed.

5.3.10 Configuring the Event List
Events → Event List
The PSW switch has a wide range of capabilities to ensure convenient network
administration and network functionality. A key feature of the switch is the ability to
provide instant administrator notifications about the events through various tools,
such as Syslog, SMTP (e-mail) or SNMP Trap.
The switch may be adjusted to respond only to certain events to which an
appropriate level of significance is assigned (only for the Syslog protocol). Levels
range from 0 to 7, where 0 is the highest level of significance.
The following range of levels is generally accepted:
(0) Emergency: the system is inoperable
(1) Alert: the system requires immediate intervention
(2) Critical: the state of the system is critical
(3) Error: error messages
(4) Warning: warnings about possible problems
(5) Notice: messages of normal, but important events
(6) Informational: information messages
(7) Debug: debugging messages
Such separation of events significance levels allows to process the events
differently on the server side. For example, messages about level 6 and 7 events can
simply be recorded in the event log, while messages about level 0-3 events will be
shown to the operator.
The settings are divided into subgroups by the following categories:
Port.link –change the status of the link
Port.PoE –change the status of PoE
STP/RSTP –change STP/RSTP topology
Autorestart.Link –the link is lost with the Auto Restart function active
Autorestart.Ping –the remote device did not respond to PING with the Auto
Restart function active
Autorestart.Speed –activity on the port fell below the preset value with the
Auto Restart function active
System –change the system state (restart, update, reset to factory settings, etc.)
UPS –changes in the operation of the UPS (only in the version with the UPS)
Inputs/Outputs –event from the access control system (dry contacts and
tamper sensor)
MAC Filtering –an attempt was made to access the switch from a MAC