Weidmüller Substation IE-SW-SL26M-24TX-2GC User manual

Industrial Ethernet IEC-61850-3 Switches
Manual
for
IE-SW-SL26M-24TX-2GC
of
SubstationLine
Second Edition, September 2022

Industrial Ethernet managed Switches
Manual
The software described in this manual is furnished under a license agreement and may be used only in
accordance with the terms of that agreement.
Copyright Notice
Copyright ©2016 Weidmüller Interface GmbH & Co. KG
All rights reserved.
Reproduction without permission is prohibited.
Disclaimer
Information in this document is subject to change without notice and does not represent a
commitment on the part of Weidmüller.
Weidmüller provides this document as is, without warranty of any kind, either expressed or implied,
including, but not limited to, its particular purpose. Weidmüller reserves the right to make
improvements and/or changes to this manual, or to the products and/or the programs described in
this manual, at any time.
Information provided in this manual is intended to be accurate and reliable. However, Weidmüller
assumes no responsibility for its use, or for any infringements on the rights of third parties that may
result from its use.
This product might include unintentional technical or typographical errors. Changes are periodically
made to the information herein to correct such errors, and these changes are incorporated into new
editions of the publication.
Contact Information
Weidmüller Interface GmbH & Co. KG
Postfach 3030
32760 Detmold
Klingenbergstraße 26
32758 Detmold
Germany
Phone [phone]
Fax [phone]
E-Mail [e-mail]
Internet www.weidmueller.com

User Manual Managed Switches
1
Table of Contents
1. About this Manual.............................................................................................6
2. Getting Started..................................................................................................6
2.1 Hardware features..................................................................................................................6
2.2 Software features...................................................................................................................7
3. Web Management..............................................................................................8
3.1 Accessing the Web interface via HTTP................................................................................8
3.2 Accessing the Web interface via HTTPS ...........................................................................10
3.3 Basic Settings ......................................................................................................................10
3.3.1 Device Description.........................................................................................................10
3.3.2 IP Configuration .............................................................................................................11
3.3.3 IP Status.........................................................................................................................14
3.3.4 Access Management .....................................................................................................16
3.3.4.1 Login Methods .......................................................................................................16
3.3.4.2 Authentication Methods .........................................................................................17
3.3.4.3 Access Security .....................................................................................................19
3.3.4.4 Access Statistics....................................................................................................21
3.3.5 Users..............................................................................................................................21
3.3.5.1 Configuration..........................................................................................................21
3.3.5.2 Privilege Levels......................................................................................................22
3.3.6 Time Setting...................................................................................................................24
3.3.7 LLDP Function ...............................................................................................................26
3.3.7.1 Overview................................................................................................................26
3.3.7.2 Configuration..........................................................................................................27
3.3.7.3 Neighbors...............................................................................................................29
3.3.7.4 Port Statistics.........................................................................................................30
3.3.8 Industrial Protocols ........................................................................................................31
3.3.8.1 Modbus TCP..........................................................................................................32
3.3.8.2 Ethernet/IP.............................................................................................................32
3.3.8.3 Profinet...................................................................................................................32
3.3.9 Backup & Restore..........................................................................................................33
3.3.10 Upgrade Firmware.......................................................................................................34
3.4 Port Settings.........................................................................................................................34
3.4.1 Port Configuration..........................................................................................................34
3.4.2 Port Trunking .................................................................................................................37
3.4.2.1 Aggregation Mode .................................................................................................37
3.4.2.2 LACP Port Settings................................................................................................39
3.4.2.3 LACP System Status .............................................................................................41
3.4.2.4 LACP Port Status...................................................................................................42

User Manual Managed Switches
2
3.4.2.5 LACP Statistics......................................................................................................43
3.4.2.6 Aggregation Status ................................................................................................43
3.4.3 Loop Protection..............................................................................................................44
3.4.3.1 Configuration..........................................................................................................44
3.4.3.2 Status.....................................................................................................................46
3.5 DHCP Server/Relay ..............................................................................................................46
3.5.1 DHCP Server .................................................................................................................47
3.5.1.1 DHCP Server Mode Configuration.........................................................................47
3.5.1.2 DHCP Server Pool Configuration ..........................................................................47
3.5.1.3 DHCP Server Excluded IP Configuration ..............................................................48
3.5.1.4 DHCP Server Statistics..........................................................................................49
3.5.1.5 DHCP Server Binding IP........................................................................................50
3.5.1.6 DHCP Server Declined IP......................................................................................50
3.5.1.7 DHCP Server IP Port Binding................................................................................51
3.5.2 DHCP Relay Agent (Option 82).....................................................................................52
3.5.2.1 DHCP Relay Configuration....................................................................................52
3.5.2.2 DHCP Relay Statistics...........................................................................................53
3.5.3 DHCP Snooping.............................................................................................................54
3.5.3.1 DHCP Snooping Configuration..............................................................................54
3.5.3.2 DHCP Snooping Table ..........................................................................................56
3.5.3.3 DHCP Snooping Detailed Statistics.......................................................................56
3.6 Redundancy..........................................................................................................................57
3.6.1 Introduction to Communication Redundancy.................................................................57
3.6.2 The O-Ring Concept......................................................................................................58
3.6.2.1 Topology Setup for “O-Ring” ..................................................................................58
3.6.2.2 Ring Coupling Configuration..................................................................................59
3.6.2.3 Dual Homing Configuration....................................................................................60
3.6.2.4 Configuring “O-Ring”..............................................................................................60
3.6.3 Media Redundancy Protocol (MRP) ..............................................................................62
3.6.4 The O-Chain Concept....................................................................................................63
3.6.5 STP / RSTP / MSTP.......................................................................................................66
3.6.5.1 The STP / RSTP Concept......................................................................................66
3.6.5.2 How STP Works.....................................................................................................68
3.6.5.3 Configuring STP / RSTP / MSTP –Bridge Settings ..............................................71
3.6.5.4 MSTI Mapping........................................................................................................74
3.6.5.5 MSTI Priorities .......................................................................................................75
3.6.5.6 CIST Ports .............................................................................................................76
3.6.5.7 MSTI Ports.............................................................................................................78
3.6.5.8 Bridge Status .........................................................................................................79
3.6.5.9 Port Status.............................................................................................................80
3.6.5.10 Port Statistics.......................................................................................................81
3.6.6 Fast Recovery................................................................................................................82
3.7 Virtual LAN............................................................................................................................83
3.7.1 The Virtual LAN (VLAN) Concept ..................................................................................83

User Manual Managed Switches
3
3.7.2 Configuring Virtual LAN .................................................................................................85
3.7.2.1 VLAN Membership.................................................................................................85
3.7.2.2 VLAN Membership Status .....................................................................................90
3.7.2.3 VLAN Port Status...................................................................................................90
3.7.2.4 Private VLAN Membership ....................................................................................92
3.7.2.5 Private VLAN Port Isolation...................................................................................93
3.7.2.6 GVRP Configuration ..............................................................................................93
3.7.2.7 GVRP Port Configuration.......................................................................................94
3.8 SNMP.....................................................................................................................................95
3.8.1 SNMP System................................................................................................................95
3.8.2 SNMP Trap ....................................................................................................................97
3.8.3 SNMP Community Configuration.................................................................................100
3.8.4 SNMP Users Configuration..........................................................................................100
3.8.5 SNMP Groups Configuration .......................................................................................102
3.8.6 SNMP View Configuration ...........................................................................................103
3.8.7 SNMP Access Configuration........................................................................................104
3.9 RMON ..................................................................................................................................105
3.9.1 RMON Statistics Configuration....................................................................................105
3.9.2 RMON History Configuration .......................................................................................106
3.9.3 RMON Alarm Configuration.........................................................................................107
3.9.4 RMON Event Configuration .........................................................................................109
3.9.5 RMON Statistics Status ...............................................................................................110
3.9.6 RMON History Status...................................................................................................111
3.9.7 RMON Alarm Status ....................................................................................................112
3.9.8 RMON Event Status.....................................................................................................113
3.10 Traffic Prioritization .........................................................................................................114
3.10.1 Storm Control.............................................................................................................116
3.10.2 Port Classification......................................................................................................117
3.10.3 Port Tag Remarking...................................................................................................119
3.10.4 Port DSCP..................................................................................................................120
3.10.5 Port Policing...............................................................................................................122
3.10.6 Queue Policing...........................................................................................................124
3.10.7 Port Scheduler ...........................................................................................................125
3.10.8 Port Shaper................................................................................................................128
3.10.9 DSCP-Based QoS .....................................................................................................129
3.10.10 DSCP Translation ....................................................................................................130
3.10.11 DSCP Classification.................................................................................................131
3.10.12 QoS Control List.......................................................................................................132
3.10.13 QoS Statistics ..........................................................................................................136
3.10.14 QCL Status ..............................................................................................................137
3.11 Multicast............................................................................................................................138
3.11.1 The Concept of Multicast Filtering .............................................................................138
3.11.2 IGMP Snooping Basic Configuration .........................................................................141
3.11.3 IGMP Snooping VLAN Configuration.........................................................................143

User Manual Managed Switches
4
3.11.4 IGMP Snooping Status ..............................................................................................145
3.11.5 IGMP Snooping Group Information ...........................................................................146
3.11.6 IGMP SFM Information..............................................................................................146
3.11.7 IGMP Snooping Port Group Filtering.........................................................................147
3.11.8 IPMC Profile Configurations.......................................................................................148
3.11.9 IPMC Profile Address Configuration..........................................................................149
3.12 Security.............................................................................................................................150
3.12.1 Device Binding...........................................................................................................152
3.12.1.1 Alias IP Address ................................................................................................153
3.12.1.2 Alive Check........................................................................................................154
3.12.1.3 DDOS Prevention ..............................................................................................156
3.12.1.4 Device Description.............................................................................................158
3.12.1.5 Stream Check....................................................................................................159
3.12.2 IP Source Guard........................................................................................................160
3.12.2.1 Static IP Source Guard Table............................................................................161
3.12.2.2 Dynamic IP Source Guard Table.......................................................................162
3.12.3 Access Control List (ACL)..........................................................................................162
3.12.3.1 ACL Ports Configuration....................................................................................163
3.12.3.2 ACL Rate Limiter Configuration.........................................................................164
3.12.3.3 ACL Configuration .............................................................................................165
3.12.3.4 ACL Status.........................................................................................................177
3.12.4 Authentication, Authorization and Accounting (AAA) ................................................178
3.12.4.1 RADIUS Server Configuration...........................................................................178
3.12.4.2 TACACS+ Server Configuration........................................................................181
3.12.4.3 RADIUS Overview .............................................................................................182
3.12.4.4 RADIUS Details .................................................................................................183
3.12.5 Network Access Server (802.1X)...............................................................................184
3.12.5.1 Network Access Server (NAS) Configuration....................................................184
3.12.5.2 Network Access Server (NAS) Switch Status....................................................191
3.12.5.3 Network Access Server (NAS) Statistics...........................................................192
3.12.6 Port Security ..............................................................................................................192
3.12.6.1 Port Limit Control...............................................................................................192
3.12.6.2 Port Security Status...........................................................................................195
3.12.6.3 Port Status.........................................................................................................197
3.13 Warning/Event Settings...................................................................................................197
3.13.1 Configuring Relay Warnings......................................................................................198
3.13.2 Configuring Email Warning ........................................................................................199
3.13.2.1 Event Selection..................................................................................................199
3.13.2.2 Email Settings....................................................................................................200
3.13.3 SYSLOG Setting........................................................................................................201
3.14 Monitoring and Diag ........................................................................................................202
3.14.1 MAC Address Table Configuration ............................................................................202
3.14.2 MAC Address Table Status........................................................................................204
3.14.3 Port Statistics Overview.............................................................................................205

User Manual Managed Switches
5
3.14.4 Detailed Port Statistics...............................................................................................206
3.14.5 Port Monitoring...........................................................................................................207
3.14.6 System Log Information.............................................................................................210
3.14.7 VeriPHY Cable Diagnostics.......................................................................................211
3.14.8 SFP Monitor...............................................................................................................212
3.14.9 SFP Type...................................................................................................................213
3.14.10 Ping and Ping6.........................................................................................................213
3.15 PTP Synchronization .......................................................................................................214
3.15.1 PTP Clock Configuration............................................................................................214
3.15.2 PTP Clock Status.......................................................................................................217
3.16 Save/Manage Configuration............................................................................................217
3.17 Factory Default.................................................................................................................218
3.18 System Reboot.................................................................................................................219
3.19 License Information.........................................................................................................219
A. Downloads (Software and Documentation)................................................220
B. Modbus Register Table................................................................................221

User Manual Managed Switches
6
1. About this Manual
Thank you for purchasing a Weidmüller managed Industrial Ethernet switch. Read this user’s manual
to learn how to connect your Weidmüller switch to Ethernet-enabled devices used for industrial
applications.
The following chapters are covered in this user manual:
Getting Started
This chapter summarizes the main hardware and software features of the
IE-SW-SL26M-24TX-2GC Switch. The information related with the Installation of the Switch
(Front / Rear side elements description and Connections) is described in the Hardware
Installation Guide delivered with every device and available in our online catalogue.
Web Management
There are three ways to access the Weidmüller switch’s configuration settings: serial console,
Telnet console, or web console. The Web console is the most user-friendly way for configuring
and monitoring and is fully described in this chapter.
The description of the Command Line Interface (CLI) Management using serial console or Telnet
console has its own specific manual (User Manual Command Line Interface for Substation Line
Switches) that is also available in our online catalogue.
2. Getting Started
The IE-SW-SL26M-24TX-2GC Switch is specially designed to operate in harsh environments like
Substations thanks to its IEC 61850-3 and IEEE 1613 compliance. The product comes with an IP30
rugged case, redundant power supply, alarm relay and wide operating temperature range from -40 to
85ºC. There are two variants of the Switch (HV and LV) to meet any power supply requirement.
2.1 Hardware features
•24 x 10/100Base-T(X) ports
•2 x 10/100/1000Base-T(X) or 100/1000BaseSFP
•RS232 interface with RJ45 connector for console access
•Redundant power supply; two product variants with different power input range
o24 to 72 Vdc (Low Voltage model)
o100 to 370Vdc and 100 to 240Vac (High Voltage model)
•Alarm relay contact
•Operating temperature from -40 to 85ºC
•IEC 61850-3 and IEEE 1613 compliance

User Manual Managed Switches
7
2.2 Software features
•Management
oWeb-interface (HTTP / HTTPS)
oSNMP v1/v2c/v3
oTelnet console
oCommand Line Interface (CLI)
oUpload of a configuration file via web-interface
•Network redundancy
oSpanning Tree Protocol (STP)
oRapid Spanning Tree Protocol (RSTP)
oMultiple Spanning Tree Protocol (MSTP)
oMedia Redundancy Protocol (MRP; Client only)
oO-Ring (optimized protocol for ring topologies; recovery time < 10ms)
oO-Chain (allows multiple redundant network topologies; recovery time < 10ms)
oLink Aggregation Control Protocol (LACP)
oFast Recovery
•IP-address management
oStatic
oDHCP-Client
oDHCP-Server (port based, pool based)
oDHCP Option 82
oDHCP-Relay
•Time synchronization management
oSNTP
oPTPv2
•Monitoring functions
oSNMP v1/v2c/v3
oLink Layer Discovery Protocol (LLDP)
oPort mirroring
oPort statistics
oPort monitoring
oRMON
oSyslog
oEvent based warning (via e.mail / via output relay / via SNMP trap)
oEthernet cable diagnosis on RJ-45 ports
•Network traffic filter
oQuality of Service (QoS)
oClass of Service (CoS) according to IEEE 802.1p
oType of Service (ToS) / Differentiated Services Code Point (DSCP)
oPort / Tag based VLAN
oIGMP v2/v3
oMulticast VLAN Registration (MVR)
oTraffic Rate Limiting
•Security functions
oVLAN segmentation
oEnable / Disable ports
oTACACS+ and RADIUS User Authentication
oAccess Control (port based via IEEE 802.1X)
oAccess Control List (IP based / MAC based)
oLoop protection
oManagement access security via privilege level configuration for different user roles

User Manual Managed Switches
8
3. Web Management
In this chapter, we explain how to access the Weidmüller Switch’s through the Web console as well
as all the configuration, monitoring, and administration functions available when using this interface.
3.1 Accessing the Web interface via HTTP
The Ethernet Switch’s web browser interface provides a convenient way to modify the switch's
configuration and access the built-in monitoring and network administration functions. The
recommended web browser is Microsoft Internet Explorer 8.0 or higher with JVM (Java Virtual
Machine) installed.
NOTE: To use the Switch's management and monitoring functions from a PC host
connected to the same LAN as the switch, you must make sure that the PC host and the
Switch are on the same logical subnet.
NOTE: If the Weidmüller switch is configured for other VLAN settings, you must make
sure your PC host is on the management VLAN.
NOTE: Before accessing the Switch’s web browser interface, first connect one of its
RJ45 Ethernet ports to your Ethernet LAN, or directly to your PC's Ethernet card (NIC).
You can establish a connection with either a straight-through or cross-over Ethernet
cable.
NOTE: The Weidmüller switch’s default IP address is 192.168.1.110.
The default username / password are admin /Detmold
After making sure that the Weidmüller switch is connected to the same LAN and logical subnet as
your PC, open the switch’s web console as follows:
Open your web browser and type the Switch’s IP address in the Address or URL field. Press Enter
to establish the connection.
The web login page will open. Enter the default user name “admin” and password “Detmold”, and
then click OK to continue.

User Manual Managed Switches
9
After logging in, the main general information of the switch is shown including, among others, System
Name, Software version, MAC address and Serial number. It is also displayed the front side of the
switch (showing the active ports) in the up navigation panel.
In this home page is also available the button Enable location alert. When pressing it, the front
LEDs starts to flash and an acoustic signal is heard (periodic change of the output relay). When
clicking Disable location alert, the LEDs will stop flashing and the output relay will remain in its
original position.
Use the menu tree in the left navigation panel to open the function pages to access each of Ethernet
Switch's functions.
NOTE: The pages of the Web interface include a Help button that describes the
parameters and functions that can be programmed or monitored in each web page.
NOTE: After changing any parameter / function in a web page the button Apply
activates the change but does not save it. The changes have to be saved using the
Save/Manage Configuration option of the menu.
NOTE: The pages of the Web interface include also a Reset button closed to the Apply
one. If the user modifies any parameter of a web page but still has not applied the
changes, the Reset button can be used to recover the previous default values of the
page. Once the button Apply is pressed, the default values of the page are the new ones.

User Manual Managed Switches
10
3.2 Accessing the Web interface via HTTPS
To secure your HTTP access, the Weidmüller switch supports HTTPS to encrypt all HTTP traffic.
Perform the following steps to access the Weidmüller switch web browser interface via HTTPS/SSL.
Open Internet Explorer and enter https://<Switch´s IP address> in the address field. Press Enter to
establish the connection.
Warning messages will pop out to warn the user that the security certificate was issued by a
company they have not chosen to trust.
Select “Continue to this website”to enter the Weidmüller switch´s web browser interface and
access the web browser interface secured via HTTPS.
3.3 Basic Settings
The Basic Settings section includes the most common settings required by administrators to
maintain and control a Weidmüller switch.
3.3.1 Device Description
The device description items are displayed at the top of the web page. You can configure the System
Identification items to make it easier to identify different switches that are connected to your network.

User Manual Managed Switches
11
System Name
Setting
Description
Factory
Default
Max. 255
characters
This option is useful for recording a name of the unit. A
text string consisting of alphabets (A-Z, a-z), digits (0-9),
and minus sign (-). Space is not allowed to be part of the
name. The first character must be an alpha character.
And the first or last character must not be a minus sign.
NOTE: If Profinet protocol is enabled, the user cannot
modify this field from the web interface as the System
Name is controlled via Profinet.
Name of type
System Description
Setting
Description
Factory
Default
Max. 255
characters
This option is useful for recording a more detailed
description of the unit.
Description of
type
System Location
Setting
Description
Factory
Default
Max. 255
characters
This option is useful for differentiating between the
locations of different units. Example: Bay 1. The allowed
content is the ASCII characters from 32 to 126.
None
System contact
Setting
Description
Factory
Default
Max. 255
characters
This option is useful for providing information about who
is responsible for maintaining this unit and how to
contact this person. The allowed content is the ASCII
characters from 32 to 126.
None
3.3.2 IP Configuration
The IP settings allow the user to set manually the IP parameters or by means of a DHCP server (for
both IPv4 and IPv6).

User Manual Managed Switches
12
See a brief explanation of each configuration item below.
IPv4 Setting
DHCPv4
Setting
Description
Factory
Default
Disabled
The Weidmüller switch’s IP address must be set
manually.
Disabled
Enabled
The Weidmüller switch’s IP address will be assigned
automatically by the network’s DHCPv4 server. The
DHCPv4 client will announce the configured System
Name as hostname to provide DNS lookup.
Fallback Timeout
Setting
Description
Factory
Default
Number between
0 and
4294967295 sec
The number of seconds for trying to obtain a DHCP
lease. After this period expires, a configured IPv4
address will be used as IPv4 interface address. A
value of zero disables the fallback mechanism, such
that DHCP will keep retrying until a valid lease is
obtained.
0
Current Lease
Setting
Description
Factory
Default
No setting
(display)
For DHCPv4 interface with an active lease, this column
shows the current interface address, as provided by
the DHCPv4 server.
None

User Manual Managed Switches
13
IP Address
Setting
Description
Factory
Default
IPv4 address for
the Weidmüller
Switch
Assigns the Weidmüller Switch´s IPv4 address on a
TCP/IP network. If DHCP is enabled, this field
configures the fallback address. The field may be left
blank if IPv4 operation on the interface is not desired -
or no DHCP fallback address is desired.
192.168.1.110
Subnet Mask
Setting
Description
Factory
Default
Subnet mask for
the Weidmüller
Switch
The IPv4 network mask, in number of bits (prefix
length). Valid values are between 0 and 30 bits for an
IPv4 address. If DHCP is enabled, this field configures
the fallback address network mask. The field may be
left blank if IPv4 operation on the interface is not
desired - or no DHCP fallback address is desired.
24
Gateway
Setting
Description
Factory
Default
IP address for the
gateway
The IP address of the router that connects the LAN to
an outside network.
192.168.1.254
IPv6 Setting
DHCPv6
Setting
Description
Factory
Default
Disabled
The Weidmüller switch’s IP address must be set
manually.
Disabled
Enabled
The Weidmüller switch’s IP address will be assigned
automatically by the network’s DHCPv6 server.
Rapid Commit
Setting
Description
Factory
Default
Disabled
DHCPv6 Rapid Commit option disabled.
Disabled
Enabled
The DHCPv6 client terminates the waiting process as
soon as a Reply message with Rapid Commitment
option is received.
Current Lease
Setting
Description
Factory
Default
No setting
For DHCPv6 interface with an active lease, this column
shows the current interface address, as provided by
None

User Manual Managed Switches
14
(display)
the DHCPv6 server.
IP Address
Setting
Description
Factory
Default
IPv6 address for
the Weidmüller
Switch
Assigns the Weidmüller Switch´s IPv6 address on a
TCP/IP network. An IPv6 address is in 128-bit records
represented as eight fields of up to four hexadecimal
digits with a colon separating each field (:). For
example, fe80::215:c5ff:fe03:4dc7. The symbol :: is a
special syntax that can be used as a shorthand way of
representing multiple 16-bit groups of contiguous
zeros; but it can appear only once.
System accepts the valid IPv6 unicast address only,
except IPv4-Compatible address and IPv4-Mapped
address.
This field may be left blank if IPv6 operation on the
interface is not desired.
None
Mask Length
Setting
Description
Factory
Default
Subnet mask for
the Weidmüller
Switch
The IPv6 network mask, in number of bits (prefix
length). Valid values are between 1 and 128 bits for an
IPv6 address.
This field may be left blank if IPv6 operation on the
interface is not desired.
None
Management VLAN
VLAN ID
Setting
Description
Factory
Default
Number between
1 and 4095
Identifier for the Management VLAN.
1
3.3.3 IP Status
This page displays the status of the IP protocol layer. The status is defined by the IP interfaces, the IP
routes and the neighbor cache (ARP cache) status.

User Manual Managed Switches
15
The tables displays the following information:
IP Interfaces
Interface
The name of the interface.
Type
The address type of the entry. This may be LINK, IPv4 or IPv6.
Address
The current address of the interface (of the given type).
Status
The status flags of the interface (and/or address).
IP Routes
Network
The destination IP network or host address of this route.
Gateway
The gateway address of this route.
Status
The status flags of the route.
Neighbor Cache
IP Address
The IP address of the entry.
Link Address
The Link (MAC) address for which a binding to the IP address given
exists.

User Manual Managed Switches
16
3.3.4 Access Management
3.3.4.1 Login Methods
The Login Methods page allows the user to restrict the remote management of the switch. It is
possible to block any specific kind of management (eg: web or telnet).
SSH
Setting
Description
Factory
Default
Enabled or
Disabled
Enable or disable SSH mode operation.
Enabled
Telnet
Setting
Description
Factory
Default
Enabled or
Disabled
Enable or disable Telnet access.
Disabled
Web Interface Access
Setting
Description
Factory
Default
Only HTTP
HTTPS mode operation disabled and web access
only HTTP.
HTTP/HTTPS
Only HTTPS
HTTP mode operation disabled and web access only
HTTPS.
HTTP/HTTPS
HTTP and HTTPS mode operation enabled.
HTTPS with HTTP
auto-redirect
Automatically redirects web browser to an HTTPS
connection.

User Manual Managed Switches
17
Certificate Maintain
Setting
Description
Factory
Default
None
No operation of certificate maintenance.
None
Delete
Delete the current certificate.
Upload
Upload a certificate PEM file through a web browser
or URL. A pass phrase has to be entered if the
uploading certificate is protected by a specific
passphrase.
Generate
Generate a new self-signed RSA certificate.
The Certificate Status field displays the current status of certificate on the switch. The possible
status are:
•Switch secure HTTP certificate is presented.
•Switch secure HTTP certificate is not presented.
•Switch secure HTTP certificate is generating ...
3.3.4.2 Authentication Methods
The Authentication Methods option allows the administrator to configure how a user is authenticated
when he logs into the switch via one of the management client interfaces.

User Manual Managed Switches
18
Authentication Method Configuration
For each client type (console, telnet, ssh and http) the method to authenticate the user can be
programmed:
Setting
Description
Factory
Default
no
Authentication is disabled and login is not possible.
local
local
Use the local user database on the switch for
authentication.
radius
Use remote RADIUS server for authentication.
tacacs
Use remote TACACS+ server for authentication.
When a method involving a remote server is selected (“radius”or “tacacs”), an additional method can
be programmed as backup. Up to three different authentication methods can be programmed and
each one is tried from left to right until a user is either accepted or rejected.
NOTE: If a remote server is used for primary authentication, it is recommended to
configure secondary authentication as “local”. This will enable the management client to
login via the local user database if none of the configured authenticated servers are
alive.
Command Authorization Method Configuration
The command authorization method section allows the administrator to limit the CLI commands
available to a user. For each client type (console, telnet and ssh) the following parameters can be
programmed:
Method
Setting
Description
Factory
Default
no
Command authorization is disabled. User is granted
access to CLI commands according to his privilege
level.
no
tacacs
Use remote TACACS+ server(s) for command
authorization. If all remote servers are offline, the user
is granted access to CLI commands according to his
privilege level.
Cmd Lvl
Setting
Description
Factory
Default
0 to 15
Authorize all commands with a privilege level higher
than or equal to this level.
0