Waters Network Systems ProSwitch FlexPort- 2600M User manual

12
INSTALLATION GUIDE
AND
OPERATING MANUAL
ProSwitch®FlexPort- 2600M
Managed Modular Copper and Fiber Switch
CORPORATE HEADQUARTERS MANUFACTURING/CUSTOMER SERVICE
5001 American Blvd. W., Suite 605 945 37th Avenue, NW
Bloomington, MN 55437 Rochester, MN 55901
Phone: [phone] Phone: [phone]
Phone: [phone] Phone: [phone]
Web site: http://www.watersnet.com

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 2
TABLE OF CONTENTS
1.0 SPECIFICATIONS...................................................................................................1
2.0 PACKAGE CONTENTS - PROSWITCH®- 2600M ..................................................3
2.1 Product Description............................................................................................3
2.2 Uplink Modules...................................................................................................3
3.0 INSTALLATION OF THE PROSWITCH®- 2600M..................................................3
3.1 Location of the ProSwitch®- 2600M....................................................................3
3.2 Rack Mounting the ProSwitch®- 2600M.............................................................4
3.3 Powering the 2600M ..........................................................................................4
3.4 The Modules ......................................................................................................4
3.5 Connecting the ProSwitch®– 2600M.................................................................5
3.6 Status of LEDs ...................................................................................................6
4.0 MANAGING THE SWITCH......................................................................................6
5.0 CONSOLE MANAGEMENT INTERFACE (CMI).....................................................9
6.0 WEB MANAGEMENT............................................................................................26
6.1 System Configuration Page..............................................................................27
6.2 PORT CONFIGURATION......................................................................................28
6.3 Spanning Tree..................................................................................................31
6.4 Dynamic MAC Address Table..........................................................................32
6.5 Static MAC Address Table...............................................................................33
6.6 MAC Security Configuration.............................................................................34
6.7 Port-based VLANs............................................................................................35
6.8 802.1Q VLAN Configuration.............................................................................36
6.9 Static 802.1Q VLAN.........................................................................................37
6.10 802.1Q VLAN Table.........................................................................................39
6.11 802.1x Configuration........................................................................................39
6.12 Protected Port Configuration............................................................................41
6.13 Trunking ...........................................................................................................42
6.14 Mirror Settings..................................................................................................43
6.15 QoS Settings....................................................................................................44
6.16 Ingress/Egress Rate Control............................................................................45
6.17 Storm Control...................................................................................................46
6.18 SNMP...............................................................................................................47
6.19 IGMP................................................................................................................48
6.20 Statistics...........................................................................................................48
6.21 Maintenance Tools...........................................................................................49
6.22 Telnet and SNMP.............................................................................................49
6.23 Software Update and Backup...........................................................................50
7.0 TROUBLESHOOTING...........................................................................................51
7.1 Before Calling for Assistance...........................................................................51
7.2 Return Material Authorization (RMA) Procedure..............................................52
7.3 Shipping and Packaging Information ...............................................................52
7.4 Warranty...........................................................................................................53

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 1
1.0 Specifications
OPERATIONAL CHARACTERISTICS:
MAC Address Table: Up to 8K
Switching Mode: Store-and-forward
Memory Buffer Size: 2 MB
Filtering/Forwarding Rate Performance
10Mbps: 14,880 pps
100Mbps: 148,800 pps
1000Mbps: 1,488,000 pps
MANAGEMENT OPTIONS:
Web Based, SNMP, Console and Telnet
DHCP Client
SNMP Agent Version 1:
MIB-II (RFC1213)
Bridge MIB (RFC1493)
Etherlike MIB
Private MIB
RMON:
RMON MIB (RFC1757, Group 1, 2, 3, 9)
VLAN:
Tag and port-based/802.1Q
GVRP support
4094 VLAN support/ 256 VLAN groups maximum
Port Trunking: 3 groups
Port Mirroring
IGMP snooping function
Port access control: 802.1x authentication
QoS:
4 priority queues per port/Port-based/Tag-based
Security:
Static MAC address
Spanning Tree
Software Update:
TFTP protocol and Xmodem
LED INDICATORS:
Power/Link/Activity/HDX/FDX
System LED Power
NETWORK STANDARDS:
IEEE 802.3
IEEE 802.3u
IEEE 802.3z
IEEE 802.3ab
IEEE 802.3x
IEEE 802.1P/Q
IEEE 802.1D
IEEE 802.1x

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 2
EMI/SAFETY COMPLIANCE:
FCC Part 15 Class A, CE
COPPER CABLE CONNECTORS:
Twisted Pair
Shielded RJ45
FIBER CABLE CONNECTORS:
MM FX port: 50/125um, 62.5/125mm
MM FX port: 50/125um, 62.5/125mm
SM FX port: 9/125um
MM SX/LX port: 50/125um, 62.5/125mm
SM SX/LX port: 9/125um, 62.5/125mm
SC or ST connectors
FIBER DISTANCE:
100Mbps Fiber
MM: 2km; SM: 20km
1000Mbps Fiber
MM: 220m; SM: 10km
MANAGEMENT CONSOLE CABLE CONNECTOR:
DB9 male, accepts industry standard null-modem cable
POWER SUPPLY:
Input Voltage: 100-240VAC/50/60Hz
Power Consumption: 25 watts
OPERATING ENVIRONMENT:
Ambient Temperature: 32° to 122°F (0° to 50°C)
Storage: -13° to 158°F (-25° to 70°C)
Ambient relative humidity: 10% to 95% (non-condensing)
MECHANICAL:
Enclosure: Rugged high-strength sheet metal suitable for stand-alone or rack-mounting
Cooling Method: Fan cooled
PHYSICAL CHARACTERISTICS:
Dimensions:
17.25” W x 10” D x 1.75” H (440mm x 254mm x 44mm)
Weight:
Switch Chassis: 6.12 lbs (2.8 kg)
Copper Module: 0.41 lbs (18.4 kg)
Fiber Module: 0.59 lbs (.27 kg)
GIG Module: 0.11 lbs (.05 kg)
WARRANTY:
Limited Lifetime

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 3
2.0 Package Contents - ProSwitch®- 2600M
ProSwitch®- 2600M
AC power cord
Two rack-mount kits and screws
Console cable
Installation manual
2.1 Product Description
The ProSwitch®-2600M is a high performance 10/100/1000Mbps auto-negotiation switch
with SNMP/RMON web-based management capability. From a departmental backbone
managing lower-level switches, hubs and workstations to high-speed switch-to-switch and
switch-to-server links, the 2600M delivers outstanding performance in every environment.
With IGMP and VLAN functions, the 2600M ensures maximum bandwidth by reducing
multicast transmissions and distributing data over the most efficient media and pathway.
With Quality of Service (QoS) support, the 2600M provides the capability to prioritize
certain tasks on the network. This is particularly useful for sending voice or video over a
switched network. The modular design of the 2600M provides increased flexibility so you
can customize up to 26 usable ports to meet your network requirements.
2.2 Uplink Modules
The following module configurations are available for the 2600M.
2600-8TX 8-port 10/100Base-TX module with RJ45 connectors
2600-8FXSC 8-port 100Base-FX MM fiber module with SC connectors
2600-8FXST 8-port 100Base-FX MM fiber module with ST connectors
2600-
8SMSC-20 8-port 100Base-FX SM (20km) fiber module with SC connectors
2600-1GigTX 1-port 1000Base-TX with RJ45 connector
2600-1GigSX 1-port 1000Base-SX MM fiber module with SC connector
2600-
1GigLX-10 1-port 1000Base-LX SM (10km) fiber module with SC connector
Table 2.1 – Uplink Modules
3.0 Installation of the ProSwitch®- 2600M
This section provides instructions for installing the ProSwitch®- 2600M
3.1 Location of the ProSwitch®- 2600M
The 2600M can be place on a flat surface (your desk, shelf or table) or mounted onto a
rack. As you consider the location for the 2600M, consider the following connection issues:
The switch is accessible and the cables can be connected easily to the switch.
The cables connected to the switch are away from sources of electrical interference
such as radio, computer monitor, and light fixtures.
There is sufficient space surrounding the switch to allow for proper ventilation (the
switch may not function according to specifications beyond the temperature range of 0
to 50 degrees C).

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 4
3.2 Rack Mounting the ProSwitch®- 2600M
1. Use the brackets and screws supplied in the rack mounting kit.
2. Use a cross-head screwdriver to attach the brackets to the side
of the intelligent Switch.
3. Position the 2600M on the rack by lining up the holes in the
brackets with the appropriate holes on the rack, and then use the supplied screws to
mount the hub onto the standard EIA 19-inch rack.
3.3 Powering the 2600M
The 2600M switch is equipped with a universal power supply that accepts AC input
voltages from 100 to 240VAC and 50 to 60 Hz.
To supply power to your switch:
1. Plug the connector of the power cord into the power port on the rear panel of your
switch.
2. Plug the other end of the power cord into an AC wall outlet.
Note: Network cable segments can be connected or disconnected from the switch while the
power is on, without interrupting the operation of the switch.
3.4 The Modules
Warning: Before installing a module into the 2600M, you must disconnect the switch from
the main power supply. The 2600M does not support the hot-swap function. The switch
and the modules can be damaged if you do not turn off the power to the switch.
Handling Modules
The module can be easily damaged by electrostatic discharge. To prevent damage, please
observe the following:
Do not remove modules from their packaging until you are ready for installation.
Do not touch any of the pins, connections or components on the modules.
Handle the modules on the edges and front panel.
Always wear an anti-static wristband connected to a suitable grounding point.
Always store or transport modules in appropriate anti-static packaging.
Module Installation
1. Ensure that the switch is disconnected from the main power supply and that you are
wearing an anti-static wristband connected to a suitable grounding point.
2. Place the switch on a flat surface.
3. Loosen the screws of the cover on the module slot. Do not remove any other screws
from the switch.
4. Keep the blank module cover and screws in a safe place. If you remove the module at
any time, you must replace the blank module cover to prevent dust and debris from
entering the switch and to aid the circulation of cooling air.
5. Follow the rails on both sides of the module slot to slide the module in slowly.
6. Push the module firmly to ensure connection with the module and the connector in the
switch.
7. Tighten the screws to firmly connect the module to the switch.
8. Power ON the switch.

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 5
Connecting Modules
1. Turn off the switch.
2. Remove the protective plastic covers from the fiber connectors on the module.
3. Plug the connector on the fiber cable into the fiber socket on the module.
4. Connect the other end of the fiber optic segment to an appropriate device fitted with a
100Mbps adapter.
5. Power on the switch.
6. Check the LED indicators on the front of the switch to ensure that the module is
operating correctly.
Removing Modules
1. Ensure that the power supply and the backbone connection cables are disconnected
from the switch.
2. Place the switch on a flat surface. Loosen the screws of the module. Do not remove any
other screws from the switch.
3. If you are not installing another module immediately, you must replace the blank module
cover to ensure that dust and debris do not enter the switch, as well as to aid circulation
of cooling air.
4. Install the blank module cover.
5. Power ON the switch.
Note: Installation instructions for the modules apply to modules on the front and rear side
of the switch.
3.5 Connecting the ProSwitch®– 2600M
Any of the modules for the 2600M can be used to:
Connect the switch to the backbone of your network
Connect the switch to a classroom/workgroup hub or switch
Connect the switch to a server or workstation
The 2600M switch has been designed to support all standard Ethernet media types within a
single switch unit. The various media types supported along with the corresponding IEEE
802.3 and 802.3u standards and connector types are as follows:
Fiber:
IEEE Standard Media Type Max. Distance Connector Type
100Base-FX MM fiber 2km (6,562 ft) SC or ST
100Base-FX SM fiber 20kim (65,620ft) SC
1000Base-SX MM fiber 550m (1,804 ft) SC
1000Base-LX SM fiber 10km (32,810 ft) SC
Copper:
10Base-T CAT3 or 5 100m (328 ft) RJ45
100Base-TX CAT5 or 5E 100m (328 ft) RJ45
1000Base-TX CAT5 or 5E 100M (328 ft) RJ45
Note: Since dual-speed ports are auto-sensing for both 10 and 100Mbps, it is
recommended that high quality CAT5E or better cables (which work for both 10Mbps and
100Mbps) be used whenever possible in order to provide flexibility in a mixed-speed

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 6
network. Because the switch supports auto MDI/MDI-X detection, normal straight through
cables for both workstation connection and hub or switch connection can be used. All ports
are auto MDI/MDI-X, so you can use any of the ports to connect a port on another hub or
switch with straight through or crossover cables
3.6 Status of LEDs
LED STATU
S CONDITION
Power ON Switch is receiving power.
ON Port has established a valid link.
Link / Act
Flashing Data packets received or sent.
ON The connection is full duplex.
OFF The connection if half duplex.
FDX / Col
Flashing Packet collisions occurring for half duplex
connection.
Table 3.1 – LEDs
The Link/Act LED is green. The speed display on the TX module is Green for 100Mbps
and Yellow for 10Mbps. If 100Base-FX ports are installed, the operation speed must be set
to 100Mbps and the operation mode must be set to full duplex. The 100Base-FX ports will
not work if they are set to 10Mbps, half duplex or Auto.
4.0 Managing the Switch
The 2600M switch can be managed by the following interfaces:
Console Interface (CLI) via the console port.
Remote Console Management via a network connection.
Telnet
SNMP Network Management Station.
The following is a brief list of tasks that can be performed via the management functions
along with an explanation of the function:
VLAN (Virtual Local Area Network)
Configuration of VLANs divides the switch into several broadcast domains to prevent
network traffic between user groups. The 2600M supports 802.1Q tag-based and port-
based VLANs. Users in the same VLAN can transfer data to each other. Network traffic
will be blocked if users are in different VLANs. Use of VLANs can make the network more
efficient by limiting heavy traffic to a VLAN instead of the entire network.
Trunking
If two switches are cascaded together, there could be a bottleneck at the cascading
connection. Additional cables could reduce the bottleneck problem. However, additional
cables can cause the switch to become unstable because of looping. The trunking function

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 7
treats additional cables as one connection between them. Traffic looping will not occur
between these cables and switches will be more stable with a bigger bandwidth between
them.
The 2600M supports the trunking function.
Enable trunk function.
Assign ports to a trunk. For example, assign Port 1, 2, 3 for Trunk 1.
Redundant Application
The trunk connection supports redundant function. If a trunk cable is broken, the traffic
going through that cable will be transferred to another trunk cable automatically. For
example, if a user on Port 6 is assigned to Port 1 in a Trunk and the Port 1 connection
breaks, Port 2 will take over the traffic for Port 6 automatically.
Spanning Tree Protocol
Spanning tree is a protocol used to prevent network loops. If a network loop occurs, it will
cause switches in the network to become unstable because the traffic will begin to loop in
the network. If a network loop occurs, the spanning tree protocol will block one connection
in the loop automatically.
Note: If a network connection is changed, there will be a 30 second delay. Because there
could be more than one switch in the network, you can configure this function to work for
your network.
Port Mirror
This switch operates in store-and-forward algorithm, so it is not possible to monitor network
traffic from another connection port. But the port mirror function could copy packets from a
monitored port to another port for network monitoring. This switch also provides DA/SA
filtering function for monitoring the traffic to/from a user.
QoS
QoS provides a configuration to set priorities for packets. For real-time network traffic (like
video or audio), a higher priority is required. With the definition of packet priority, there
could be eight levels of priority (from 0 to 7). The 2600M provides four priority level queues
on each port. It can be configured for port-based or 802.1p tag-based. You can define the
mapping (0 to 7) to the four priority queues.
Static MAC ID in ARL table
The switch learns the MAC address from user’s packets and keeps these MAD addresses
in the ARL table for store-and-forward table lookup operation. These MAC addresses will
be deleted from ARL table after some time if users do not send packets to the switch. This
operation is called aging and the time is called aging time. It is normally five minutes, but
you can change the time. If you want to keep MAC addresses in the ARL table for a port,
you can assign MAC addresses to the ARL table. These MAC IDs are called static MAC
addresses.
The 2600M supports static MAC address assignments. The static MAC address
assignment limits the MAC addresses than can be used or rejected on the assigned port
when using the port security function. For example, assigning the MAC address “00-00-01-
11-22-33” to Port 5 will keep this MAC ID alive on Port 5 but will also limit this MAC address
to work on Port 5 only or reject it from Port 5. It depends on the port security mode setting.

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 8
There is a MAC Security Configuration function for port security. If it set to the Accept
mode, only the static MAC addresses can access the network through the assigned port.
The other MAC addresses will be denied network access through that port. This function
can be used for port binding security.
IEEE 802.1x Port Security Function
If the 802.1x function is enabled, the switch will act as an authenticator for users accessing
the network through the switch. A RADIUS server is required for authentication. Users will
be prompted for username and password before being granted network access. If the
RADIUS server authenticates the login, the switch will enable the port for network access.
This function is very useful for network security to prevent illegal users from accessing the
network through the switch.
This switch supports MD5, TLS and PEAP authentication types.
Rate Control
This function can limit the burst traffic rate for physical ports. The traffic could be ingress
traffic or egress traffic. This function can protect the network bandwidth usage by users.
IP Multicast with IGMP Snooping
IP multicast function can forward packets to a group of users connected on different ports.
The user group is learned by the switch from the packets from the IGMP active router with
IGMP snooping function. It is often used for video applications.
Protected Port
This function can protect a port from communicating with other ports. If these ports are in
the same VLAN, this protection is still valid. For example, Ports 1, 2, 3 and 4 are marked
as protected ports. Ports 1, 2, 3 and 4 cannot communicate with each other, but they can
communicate with the other ports. This is for port isolation though they are in the same
VLAN.
Software Backup/Update
The 2600 switch supports backup and update functions for its internal software and network
configuration. It can be done one of the following ways:
From Console during the boot up process: Xmodem protocol and by terminal program
for boot code and run-time code updating.
From Console/Telnet when running: Use TFTP protocol with TFTP server for run-time
code and configuration backup/update.
From Web Browser: Use HTTP protocol for run-time code and configuration backup.

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 9
5.0 Console Management Interface (CMI)
You can manage the 2600M locally by connecting a personal computer or workstation with
terminal emulation software, to the serial port of the 2600M. The appropriate cable is
included with your switch. This management method is ideal when:
The network is unreliable.
The switch has not been assigned an IP address.
The network manager does not have direct network connection.
Equipment Required
Null modem cable, 9 position D-Sub, female to female.
Computer with function RS-232C port (COMx)
Terminal emulation program (HyperTerminal in Windows, Minicom in Linux or any other
emulation software).
To use the Hyper Terminal Program with Windows, follow these instructions.
Hardware setup
1. Connect the console port on the switch to the COM port on the PC using console cable
included with your switch.
Using HyperTerminal
1. Load the HyperTerminal program from the Start menu. Select Programs –
Accessories – Communications – HyperTerminal.
2. If the connection file has not been created, follow the instructions on the screen to
create a new connection named "2600M" (or something similar).
3. Select the COM1 port in the connect using field.
4. Set COM port parameters:
a. "Bits per second: 38400
b. Data Bits: 8
c. Parity Check: None
d. Stop Bit: 1
e. Flow Control: None
5. Select OK.
6. Power on the switch
7. The login screen will be displayed on your screen once the initialization is complete.

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 10
8. The initialization screen will look similar to this example:
Figure 5.1 – Boot up screen
Logging into the Switch
1. Press Enter.
2. Enter the username and password. The default username is admin and the default
password is 123456.
3. After logging into the switch, a prompt will be displayed. You can use the help or ?to
display a list of commands.
Booting Program Version 1.05.00, built at 14:44:03, Jul 29 2005
RAM: 0x00000000-0x00800000, 0x0000cc78-0x007f3000 available
FLASH: 0x05800000 - 0x05900000, 16 blocks of 0x00010000 bytes each.
==> enter ^C to abort booting within 3 seconds
Start to run system initialization task
[System Configuration]
Company Name :
Model Name : Intelligent Switch
MAC Address : 00:00:01:23:45:67
Firmware Version: 3.02.02 < Mar 13 2006 15:13:36 >
Press <ENTER> key to start.
UCD-SNMP version 4.1.2

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 11
The following table lists the CLI commands and descriptions.
Command Description Syntax
Help Commands (use ? to display Help Commands)
help Help commands
set Set commands
show Show commands
default Restore to factory default setting
del Del commands
find Find commands
whoami Display current login user name
reset Reset system
ping Ping a specified host with IP address
backup Backup run-time firmware of
configuration
Upgrade Upgrade run-time firmware or
configuration file
exit Logout
logout Logout
Set Command (enter Set at the prompt to use the sub commands listed below)
help Help commands
? Help commands
1qvlan Set 802.1q VLAN configuration
enable
disable
ingressfilter - Set ingress filter
enable or disable
create - create new 802.1q VLAN
with specified VLAN ID and VLAN
name
modify - Modify the setting of a
802.1q VLAN
pvid – Set the port VLAN ID of
the specified port
mgrpvid – set the port VLAN ID
of the management port
priority – set the priority for tag of
specified port
mode – set the VLAN mode
Set 1qvlan
Additional information:
The enable and disable sub-commands are used to enable/disable 802.1Q VLAN function
of the switch.
The ingressfilter sub-command is used to enable/disable VLAN filtering executed at
ingress port.
Enable: The VLAN filtering function will be executed when a packet is received at the
ingress port. If the ingress port is in the same VLAN of the received packet, this packet will
go to forwarding stage. Otherwise, the packet will be discarded by VLAN filtering at ingress
port.

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 12
Command Description Syntax
Disable: The VLAN filtering function will be executed when the packet is forwarded to the
egress port.
The create sub-command is used to create a static 802.1Q VLAN. For example, “set
1qvlan create 20 ABC” will create a static 802.1Q VLAN with ID 20 and name “ABC”.
The modify sub-command is used to modify a static 802.1Q VLAN setting.
The syntax is: set 1qvlan modify
Syntax: set 1qvlan modify [+|-] [port#] VLANID [1:<tagged>|0:<untagged>
Examples: set 1qvlan +1+5-7 2 1
Description: Add port 1,5 to VLAN 2 as tagged port and remove port 7 from VLAN 2
The pvid sub-command is used to set Port VLAN ID. The Port VLAN ID is used as the
VLAN ID for tag adding when untagged packet is translated to tagged packet. For
example, “set 1qvlan pvid 3 10” will set the PVID of Port 3 as 10.
The mgrpvid sub-command is used to select the VLAN group that is allowed to
management the switch. Only the users in the selected VLAN can manage the switch by
Http, Telnet and SNMP. For example, set 1qvlan mgrpvid 5 will allow the users in the
VLAN with VLAN ID 5 to manage the switch remotely.
The priority sub-command is used to set port priority for tag adding when untagged packet
is translated to tagged packet. For example, set 1qvlan priority 3 2 will set the port priority
of Port 3 as 2. The priority information in tag will be filled with 2 when the untagged packet
coming to Port 3 is translated to tagged packet.
The mode sub-command is used to select the VLAN mode for 802.1Q VLAN operation.
There are three modes for VLAN function –SVL (Shared VLAN), IVL (Individual VLAN) and
SVL/IVL.
Syntax: set 1qvlan mode [0:SVL|1:IVL]
Examples: set 1qvlan mode 0
Description: set current vlan mode as SVL
0: SVL mode
1: IVL mode
2: SVL/IVL mode
SVL mode – the switch will do packet forwarding according to its MAC address directly. It
is the normal VLAN operation of switch.
IVL mode – the switch will do packet forwarding according to its MAC address and VLAN ID
both. It can be used for special VLAN applications.
SVL/IVL mode – its operation is the same as IVL mode but for untagged port is used as the
uplink port in MDU/MTU application.
For most VLAN applications, SVL mode is suggested.
admin Set administrator name and password set admin
age Set age time of the switch
0 = disable aging operation; 1~65535; set age [time}

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 13
Command Description Syntax
default is 300
Additional information: Disable aging is different from static MAC ID in ARL table. The
connection port is fixed for a static MAC ID, but the connection port could be changed for a
MAC ID with no aging.
arl Add a static MAC address in the ARL
table Set ARL [xx-xx-xx-xx-xx-xx] [port#]
Additional Information: Set ARL 00-00-01-11-22-33 5 will add a static MAC ID 00-00-01-
11-22-33 to port 5 and this MAC ID will never be aged out from port 5.
Note: Because the static MAC address is fixed on the assigned port by the switch, the
static MAC address can access network through the assigned port only. It will fail to access
the network through other ports of the switch.
automode Set auto negotiation or auto detect
mode of the port set automode
When a port is forced to some special setting instead of full auto-negotiation, this command
can be used. There are two modes: an (autonegotiation) and ad (auto detection)
an mode – if the auto function of a port is disabled in the port configuration, the switch will
disable its auto-negotiation function; the auto-MDIX function of the port is also disabled.
That is the real force-mode setting of the port.
ad mode – if the auto. function of a port is disabled in port configuration, the switch will not
disable its auto-negotiation function but just modify its auto-negotiation attribute for the
speed/duplex mode setting; the Auto-MDIX function of the port is still enabled.
Application: If the connected device is auto-negotiation enabled and you want to force the
speed of the connection (for example, 10M/Half), select ad mode. If the connected device
is in forced mode (for example, 10M/Half) and auto-negotiation is disabled, use an mode
and set the port to the same configuration as the device in the port configuration function.
You can select an mode or ad mode depending on your applications. For most connection
cases, ad mode is suggested. For 100FX connection, it is recommended to use an mode
and disable Auto. Set the port to 100/Full.
dot1x Set 802.1x configuration
enable – set 802.1x to enable
eisable – set 802.1x to disable
authmode – set 802.1x auth
mode of a specified port
authport – set authenticate port
of radius server
quiettime – set 802.1x quiet
timeout period
re_au – set 802.1x re-
authentication
reauthcnt – set 802.1x re-
authentication max count
reauthtime – set 802.1x re-
authentication timeout period
reqcnt – set 802.1x max request
count
rspi – set radius server address
shkey – set 802.1x shared key
Ex: set dot1x enable

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 14
Command Description Syntax
supptime – set 802.1x supplicant
timeout period
svrtime – set 802.1x server
timeout period
transparent – set 802.1x as
transparent mode
txtime – set 802.1x TX timeout period
Additional information:
Enable is used to enable the 802.1x authentication function.
Disable is used to disable the 802.1x function.
Authmode is used to set the authentication mode for a physical port. The syntax is:
set dot1x authmode [port#] [auto|fa|fu|no]
auto: the authentication mode of the port depending on the authentication result of the port
fa: (force-authenticated): will force the port always being authentication successful in
802.1x process and the real authentication result will be ignored.
fu: (force-unauthenticated): will force the port always being authentication the is
unsuccessful in 802.1x process and the real authentication result will be ignored.
none: 802.1x function will not be executed on the port, i.e. disabled on the port.
Authport is used to set the handshaking port number between the switch and RADIUS
server. It could be different for different RADIUS servers.
Quiettime is used to set the quiet time value between the switch and the user before next
authentication process when authentication fails.
Re_au is used to enable the re-authentication function of the switch. When the re-
authentication time is up, the switch will start the re-authentication process.
Reauthcnt is used to set max count for re-authentication request in the re-authentication
process. If the max count is met, it will become un-authentication state. The valid value is
1~10.
Reauthtime is used to set the timeout period of the re-authentication process.
Reqcnt is used to set max request timeout count between the switch and RADIUS server
before authentication fails. The valid value is 1~10.
Rsip is used to set the IP address of RADIUS server.
Shkey is used to set the security key between the switch and RADIUS server.
Supptime is used to set the timeout value between the switch and users (called “supplicant”
in 802.1x) after first identification. The valid value is 0~65535.
Svrtime is used to set the request timeout value between the switch and RADIUS server.
The valid value is 0~65535.
Transparent is used to set the operation of 802.1x function to transparent mode. In this
mode, the switch will only forward the 802.1x packets.
Txtime is used to set the timeout value for the identification request from the switch to
users. The request will be re-tried until the reauthcnt is met. After that, an authentication
fail message will be sent. The valid value is 0~65535.
Note: This switch supports MD5, TLS and PEAP authentication types.
guest Set name and password for guest
gvrp Enable or disable GVRP protocol set gvrp [1|2] <1=enable;
2=disable>
http Enable or disable HTTP protocol set http enable [or disable]

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 15
Command Description Syntax
idle Set idle time for console
Default is 10 minutes set idle [time] 30~3600 seconds
igmp Set IGMP configuration set igmp [enable or disable}
loopback Set loopback detection of port
Enable loopback detection on port
Disable loopback detection on port
Release ports that loopback detected
set loopback
[enable|disable|release]
mirror Set mirror configuration
set mirror ingress div x: every x
packets, capture one for mirror. For
example, “set mirror ingress div 10”
will capture one packet from every ten
packets from ingress traffic.
set mirror ingress mode xx : mirror
all packets or mirror packets with
some DA or SA only. For example,
“set mirror ingress mode all” will
mirror all packets.
set mirror ingress mac xx-xx-xx-xx-
xx-xx : if the mirror mode is for the
packets with some DA/SA, users can
assign the DA/SA with this command.
set mirror ingress monitor xx,xx,xx
:set the monitored ports. For
example, “set mirror ingress monitor
1, 2, 5” will mirror the ingress traffic
from port 1, 2 and 5. (Note: If the
monitored traffic exceeds the
maximum bandwidth of the capture
port, flow control function will work on
these monitored ports.)
set mirror egress command
This command is used to configure
the mirror operation for egress traffic.
Its syntax is similar to the mirror
operation for ingress traffic. Please
refer to “set mirror ingress command”.
set mirror port command
This command is used to set the
capture port for mirror operation. For
example, “set mirror port 3” will
capture the mirror traffic to Port 3.
set mirror ? (or set mirror help)
will display sub commands for
mirror
set mirror enable
set mirror disable
set mirror ingress
div - Set mirror ingress/egress
[div=%d]
mode - Set mirror ingress/egress
[mode=ALL/SA/DA]
mac - Set mirror ingress/egress
[mac=xx-xx-xx-xx-xx-xx]
monitor - Set mirror
ingress/egress [monitor=xx,xx,xx]
set mirror ingress
net Set network IP configuration
This command is used to configure IP
settings for the switch.
This switch supports static IP setting
or dynamic DHCP IP assignment. If
DHCP function is enabled, the switch
will try to obtain the IP configuration
from the DHCP server. If a DHCP
server is not found, the switch will use
its default IP configuration. You can
set net
[dhcp]
[ip]
[netmask]
[gateway]

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 16
Command Description Syntax
check the IP configuration from the
DHCP server by “show net”
command.
For static IP setting, you can set the
IP configuration of the switch with ip,
netmask and gateway commands.
For example, “set net ip
192.168.1.250 netmask
255.255.255.0 gateway
192.168.1.154” will set these
parameters as the IP address
configuration of the switch. After the
command, you can use “show net” to
verify the setting.
port Set switch port configuration
This command is used to change the
connection configuration of ports.
Users can configure the following
items for each port:
name of port with “name” sub
command
enable/disable a port with “admin”
sub command
operation speed of a port with
“speed” sub command
duplex mode of a port with
“duplex” sub command
flow control function of a port with
“flowctrl” sub command
For exampe, “set port 1 name YYY
admin enable speed 10 duplex half”
command will enable Port 1 and set it
to 10Mbps/Half Duplex and name it
as “YYY”.
Note: For 100FX port, the port setting
is allowed for 100/Full (100Mbps, Full
duplex) only.
name - Set port # name [string]
admin - Set port # admin
[enable|disable]
speed - Set port # speed
[auto|10|100|1000]
duplex - Set port # duplex
[full|half]
flowctrl. - Set port # flowctrl
[ON|OFF]
protect Set protected port setting
This command can set protection
enabled/disabled for each connection
port. If a port is set as protected, it
cannot communicate with other
protected ports. But, it still can
communicate with other unprotected
ports if they are in the same VLAN.
For example, Port 1, 2 and 3 are set
as protected ports. Port 1, 2 and 3
cannot communicate with each other,
but they can communicate with other
unprotected ports – e.g. Port 4 ,5 and
6. This function is often used to
enable - Set protect enable
disable - Set protect disable
port - Set protect port [port#] [1|0]

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 17
Command Description Syntax
isolated ports in the same VLAN.
pvlan Set members of port-based VLAN
groups
Note: If a port does not belong to any
VLAN, that port will be isolated from
other ports – including the internal
management interface of the switch
set pvlan [1:enable|0:disable]
set pvlan name [vlan#] [vlan
name] – Ex. Set pvlan name 1
vlan_1 - sets the name of VLAN 1
as vlan_1
set pvlan [+/-][port#][vlan#] – Ex.
Set pvlan +1+2+3+4+5-7 1 – add
ports 1, 2, 3, 4 and 5 to VLAN1
and remove port 7 form VLAN1
qos Set QoS configuration
The switch supports four priority
queues on each port – P0, P1, P2
and P3. Both port-based priority and
802.1P tag priority are supported.
This command can be used to
configure the QoS setting of the
switch.
set qos enable command
This command is used to enable
QoS operation.
set qos disable command
This command is used to disable
QoS operation.
set qos priority command
This command is used to
configure port-based priority. All
packets coming from high priority
ports will always be forwarded to
the highest priority queue P3. All
packets coming from a low
priority port will always be
forwarded to the lowest priority
queue P0. For example, “set qos
priority 3 high” command will set
Port 3 as a high priority port.
set qos dot1p command
This sub-command is used to
enable/disable the 802.1P QoS
operation for each connection
port. For example, “set qos
dot1p 3 on” will enable the
802.1P QoS operation at Port 3.
If a tagged packet comes to Port
3, it will be forwarded with the
priority setting in its tag.
set qos mapping command
This command is used to map the
802.1P priority 0~7 to the four
priority queues. For example,
“set qos mapping 3 1” command
will map the 802.1P tag priority 3
to priority queue P1 and packets
with tag priority 3 will be
forwarded to priority queue P1 of
egress port.
rate control Set rate control configuration
This command is used to set the
maximum traffic rate to/from
connection ports of the switch.
set ratecontrol drop
[0:disable|1:enable]
Set packets drop for ingress limit
set ratecontrol [ingress|egress]

WATERS NETWORK SYSTEMS™ ProSwitch®- 2600M, User’s Manual, 02/07 Page 18
Command Description Syntax
[port#] [N:0-240]
Set port 1 ingress rate control
with 10; Example: set ratecontrol
ingress 1 10
Description: Set port 1 ingress
rate control with 10*64K=640K
No Limit of rate control, with N=0.
Rate = N*64 Kb, with N=1~28.
Rate = (N-27)*1Mb, with
N=29~127.
Rate = (N-115)*8Mb, with
N=128~240 (only for Gigabit
port).
set ratecontrol drop [0|1]
This subcommand is used to
enable/disable the packet
dropping operation when ingress
traffic exceeds the maximum
ingress rate. If it is set to
“disable”, flow control operation
will be used instead of packet
dropping when traffic rate is
exceeded.
set ratecontrol [ingress|egress]
[port#] [0-240]: This
subcommand is used to set the
maximum traffic rate for
ingress/egress traffic through
connection ports of the switch.
The rate control could be from
64Kbps to 1000Mbps.
N=0: rate control is disable, rate =
No Limit.
N=1~28: rate = Nx64Kbps, for
64K, 128K, …, 1792Kbps rate
control
N=29~127: rate = (N-27)x1Mbps,
for 2M, 3M, …, 100Mbps rate
control
N=128~240: rate = (N-
115)x8Mbps, for 104M, 112M, …,
1000Mbps
Note: N=128~240 is for Port 25,
26 gigabit ports only.
security Set port security
This command is used to set the
security mode for static MAC address
of connection ports.
Please refer to “set arl” command for
static address setting. Or, you can
set static address from the “Dynamic
set security
Set security [port#] [mode#]
Example: Set security 1 1
Description: Set Security mode of
port 1 to Accept mode for Static
MAC addresses.
mode 0 = No Security