WoMaster DS410F User manual

COVER
DS410F
Industrial 10-port Full Gigabit L2 Managed Fiber/Ethernet Switch
Nov.23.2018 V.1.0
WOM ASIA Co., Ltd
1F., No.185-3, Kewang Rd., Longtan Dist., Taoyuan 325, Taiwan

2
WoMaster
DS410F Industrial 10-port Full Gigabit L2 Managed Fiber/Ethernet Switch
User Manual
Copyright Notice
© WoMaster. All rights reserved.
About This Manual
This user manual is intended to guide a professional installer to install and to configure the DS410F switch.
It includes procedures to assist you in avoiding unforeseen problems.
NOTE:
Only qualified and trained personnel should be involved with installation, inspection, and repairs of this
switch.
Disclaimer
WoMaster reserves the right to make changes to this Manual or to the product hardware at any time without notice.
Information provided here is intended to be accurate and reliable. However, it might not cover all details and
variations in the equipment and does not claim to provide for every possible contingency met in the process of
installation, operation, or maintenance. Should further information be required or should particular problem arise
which are not covered sufficiently for the user’s purposes, the matter should be referred to WoMaster. Users must be
aware that updates and amendments will be made from time to time to add new information and/or correct possible
unintentional technical or typographical mistakes. It is the user’s responsibility to determine whether there have
been any such updates or amendments of the Manual. WoMaster assumes no responsibility for its use by the third
parties.
WoMaster Online Technical Services
At WoMaster, you can use the online service forms to request the support. The submitted forms are stored in server
for WoMaster team member to assign tasks and monitor the status of your service. Please feel free to write
to [e-mail] if you encounter any problems.

3
TABLE OF CONTENTS
COVER.......................................................................................................................................................................1
TABLE OF CONTENTS .................................................................................................................................................3
1.INTRODUCTION .....................................................................................................................................................5
1.1 OVERVIEW ......................................................................................................................................................5
1.2 MAJOR FEATURES ...........................................................................................................................................6
2. HARDWARE INSTALLATION....................................................................................................................................7
2.1HARDWARE DIMENSION..................................................................................................................................7
2.2WIRING THE POWER INPUTS............................................................................................................................9
2.3WIRING THE ALARM REL AY OUTPUT (DO)......................................................................................................10
2.4WIRING THE DIGITAL INPUT (DI) ....................................................................................................................11
2.5CONNECTING THE GROUDING SCREW ...........................................................................................................12
2.6 DIN RAIL MOUNTING .................................................................................................................................... 12
3. DEVICE INTERFACE MANAGEMENT .....................................................................................................................13
3.1 CONFIGURATION ..........................................................................................................................................22
3.1.1 SYSTEM .................................................................................................................................................22
3.1.2 GREEN ETHERNET.................................................................................................................................. 28
3.1.3 THERMAL PROTECTION .........................................................................................................................30
3.1.4 PORTS ...................................................................................................................................................31
3.1.5 SECURITY ..............................................................................................................................................33
3.1.6 AGGREGATION......................................................................................................................................63
3.1.7 LOOP PROTECTION................................................................................................................................67
3.1.8 SPANNING TREE ....................................................................................................................................68
3.1.9 IPMC ..................................................................................................................................................... 71
3.1.10 LLDP .................................................................................................................................................... 73
3.1.11 MAC TABLE .........................................................................................................................................75
3.1.12 VLAN ...................................................................................................................................................77
3.1.13 PRIVATE VLANS...................................................................................................................................82
3.1.14 QoS .....................................................................................................................................................83
3.1.14.1 QOS CLASSIFICATION .......................................................................................................................................84
3.1.14.2 POLICERS ........................................................................................................................................................84
3.1.14.3 SHAPERS.........................................................................................................................................................84
3.1.14.4 SCHEDULINGALGORITHM ................................................................................................................................84
3.1.14.5 WEIGHTED RANDOM EARLY DETECTION(WRED) ................................................................................................84
3.1.14.6 STORM POLICING ............................................................................................................................................85

4
3.1.14.7 INGRESS MAP..................................................................................................................................................85
3.1.14.8 EGRESS MAP ...................................................................................................................................................85
3.1.15 MIRRORING ...................................................................................................................................... 113
3.2 MONITOR ...................................................................................................................................................116
3.2.1 SYSTEM ............................................................................................................................................... 116
3.2.2 GREEN ETHERNET................................................................................................................................ 123
3.2.3 THERMAL PROTECTION ....................................................................................................................... 124
3.2.4 PORTS ................................................................................................................................................. 125
3.2.5 SECURITY ............................................................................................................................................130
3.2.6 AGGREGATION....................................................................................................................................131
3.2.7 LOOP PROTECTION.............................................................................................................................. 132
3.2.8 SPANNING TREE .................................................................................................................................. 133
3.2.9 IPMC ................................................................................................................................................... 137
3.2.10 LLDP ..................................................................................................................................................139
3.2.11 MAC ADDRESS .................................................................................................................................. 145
3.2.12 VLANS ...............................................................................................................................................146
3.3 DIAGNOSTICS.............................................................................................................................................. 149
3.3.1 PING (IPv4)..........................................................................................................................................149
3.3.2 TRACEROUTE (IPv4).............................................................................................................................151
3.3.3 VeryPHY..............................................................................................................................................153
3.4 MAINTANANCE ........................................................................................................................................... 153
3.4.1 RESTART.............................................................................................................................................. 154
3.4.2 FACTORY DEFAULT .............................................................................................................................. 154
3.4.3 SOFTWARE..........................................................................................................................................155
3.4.4 CONFIGURATION ................................................................................................................................156
3.5 FRONT PANEL.............................................................................................................................................. 159

5
1. INTRODUCTION
1.1 OVERVIEW
DS410F/DS410 series is designed for industrial environments requiring high quality fiber communication such as
industrial automation, road traffic control, etc. DS410F provides 10-port full-gigabit Ethernet including 6-port SFP,
2-port SFP/RJ45 combo and 2-port RJ45 (up to 8-port SFP); while DS410 provides 6-port RJ45, 2-port SFP/RJ45 combo
and 2-port SFP for multi-port Giga copper requirement. Full Gigabit capability and rugged industrial design ensures
system high performance and reliability in harsh environments, that has excellent heat dissipation design for
operating in -40~75oC environments. For convenient traffic control and zero packet loss data transmission,
DS410F/DS410 offer contemporary management and security functions. For the best traffic control, the switch
management side features have been utilized: LACP, VLAN, QinQ, QoS, IGMP snooping v2,and etc.
In order to uplink connection, the DS410F provides 2 RJ45/SFP Gigabit Ethernet combo ports that can prioritize
stream, such as video and also optimize VoIP. Gigabit Ethernet combo ports provides high speed uplink connection to
higher level backbone switches with Ring Network Redundancy technology ensures the reliability of high-quality
video transfer. High flexibility of cable types and distances for system integrators and DDM (Digital Diagnostic
Monitoring) type SFP transceivers also equipped the switch for diagnosing transmission problem through
maintenance and debugging of the signal quality.
WoMaster managed switch is designed to provide faster, secure, and more stable network. One advantage that
makes it a powerful switch is that it supports network redundancy protocols/technologies such as Rapid Spanning
Tree Protocol (RSTP).IEC 61000-6-2 / 61000-6-4 Heavy Industrial EMC certified design, rugged enclosure and
-40~75°C wide operating temperature range, - all these features guarantee stable performance of the switch for
surveillance data transmission under vibration and shock in rolling stocks, traffic control systems and other harsh
environments.
This managed switch also can be smartly configured by WoMaster advanced management utility, Web Browser,
SNMP, Telnet and RS-232 local console with its command like interface.
Excellent security features also provided, such as DHCP client, DHCP server with IP and MAC binding, 802.1X Port
Based Network Access Control, SSH for Telnet security, IP Access table, port security and many other security features.
All of these features in order to ensure the secure data communication.
The IP31-design aluminum case further strengthens the ability in harsh industrial environment. The event warning is
notified to the network administrator via e-mail, system log, or by relay output. The Industrial Managed Gigabit
Ethernet Switch has also passed CE/ FCC certifications to help ensure safe and reliable data transmission for industrial
applications.

6
1.2 MAJOR FEATURES
Below are the major features of DS410F Series Switch:
- 10-port Full Gigabit Ethernet, including 6 100/1000M SFP ports, 2 100/1000M SFP/RJ45 combo ports,
and 2 RJ45 ports
- High flexibility of cable types and distances for system integrators
- DDM function for high quality fiber connectivity monitoring
- 4K MAC address table
- Stores and forwards with non-blocking switch fabric
- Advanced Management Features: Flow Control, Port Trunk/802.3ad LACP, VLAN, Private VLAN, Shared VLAN,
Class of Service, Traffic Prioritize, Rate Control, Port Mirror, IGMP Snooping v2, Port classification, Port policing,
Port scheduler, Port shaping, QoS control list, WRED, Port Security, ACL, Loop Protection.
- Advanced Security System: IEEE 802.1X/RADIUS, Management IP, Management VLAN, SSL
- Redundancy Technology: Rapid Spanning Tree Protocol (RSTP)
- Various configuration paths, including Web GUI, CLI, and SNMP
- LLDP topology control
- 10~60V wide power range design with redundant
- power input NEMA-TS2 compliance for wayside traffic control assemblies
- Excellent heat dissipation design for operating in -40~75 ﾟC environments
- High level EMC protection exceeding traffic control and heavy industrial standards’ requirements
- IEC 61000-6-2/4 Heavy Industrial Environment
- EN50121-4 railway trackside EMC Compliance
- IP31 ingress protection

7
2. HARDWARE INSTALLATION
This chapter introduces hardware, and contains information on installation and configuration procedures.
2.1 HARDWARE DIMENSION
Dimensions of DS410F/DS410: 65 x 155 x 120 (W x H x D) / without DIN Rail Clip

8
Front Panel Layout
Below is the front panel from DS410F Series switches, for DS410F is included 6 ports 100/1000M SFP, 2 ports
100/1000M SFP/RJ45 Combo, 2 ports 10/100/1000M RJ45, and for DS410, it is included 6 ports 10/100/1000M SFP, 2
ports 100/1000M SFP/RJ45 Combo, 2 ports 100/1000M RJ45, System LED, USB for configuration/firmware
management, RJ-45 diagnostic console, 2 x 4-pin terminal block connector (4 pin for power inputs, 2 pin for digital
input and 2 pin for alarm relay output) and 1 chassis grounding screw. On the rear side of switch there is DIN rail clip
attached.
DS410F/DS410

9
2.2 WIRING THE POWER INPUTS
Power Input port in the switch provides 2 sets of power input connections (P1 and P2) on the terminal block. x
On the picture below is the power connector.
Wiring the Power Input
1. Insert the positive and negative wires into the V+ and V- contact on the terminal block connector.
2. Tighten the wire-clamp screws to prevent the power wires from being loosened.
3. Connect the power wires to suitable AC/DC Switching type power supply. The input DC voltage should be in
the range of 10VDC to DC 60V DC.
WARNING: T
urn off AC power input source before connecting the Power to the terminal block
connectors, for safety purpose. Don not turn-on the source of AC/DC power before all of the
connections were well established.

10
2.3 WIRING THE ALARM RELAY OUTPUT (DO)
The relay output contacts are located on the front panel of the switch. The relay output consists of the 2-pin
terminal block connector that used to detect user-configured events. The two wires attached to the fault contacts
form a close circuit when a user-configured event is triggered. If a user-configured event does not occur, the fault
circuit remains opened. The fault conditions such as power failure, Ethernet port link break or other pre-defined
events which can be configured in the switch. Screw the DO wire tightly after digital output wire is connected.
NOTE: The relay contact only supports 0.5 A current, DC 24V. Do not apply voltage and current higher
than the specifications.

11
2.4 WIRING THE DIGITAL INPUT (DI)
The Digital Input accepts one external DC type signal input that consists of two contacts on the terminal block
connector on the switch’s top panel. And can be configured to send alert message through Ethernet when the signal
is changed. The signal may trigger and generated by external power switch, such as door open trigger switch for
control cabinet. The switch’s Digital Input accepts DC signal and can receive Digital High Level input DC 11V~30V and
Digital Low Level input DC 0V~10V.
Here are the steps to wire the Digital Input:
STEP 1: Insert the negative and positive wires into the -/+ terminals, respectively.
STEP 2: To keep the wires from pulling loose, tighten the wire-clamp screws on the front of the terminal block
connector.
STEP 3: Insert the terminal block connector prongs into the terminal block receptor, which is located on the switch’s
top panel.

12
2.5 CONNECTING THE GROUDING SCREW
Grounding screw is located on the front side of the switch. Grounding Screw helps limit the effects of noise due to
electromagnetic interference (EMI) such as lighting or surge protection. Run the ground connection from the ground
screw to the grounding surface prior to connecting devices. And tighten and wire to chassis grounding for better
durability.
2.6 DIN RAIL MOUNTING
The EN50022 DIN-Rail plate should already attached at the back panel of the switch screwed tightly. If you need to
reattach the DIN-Rail attachment plate to the switch, make sure the plate is situated towards the top, as shown by the
following figures.
To mount the switch on DIN Rail track, do the following instruction:
1. Insert the top side of DIN Rail track into the slot of DIN Rail clip.
2. Lightly clip the bottom of DIN-Rail to the track and make sure it attached well.
3. To remove the switch from the track, reverse the steps.

13
3. DEVICE INTERFACE MANAGEMENT
To access the management interface, WoMaster has several ways access mode through a network; they are web
management and console management. Web interface management is the most common way and the easiest way
to manage a network, through web interface management, a switch interface offering status information and a
subset of switch commands through a standard web browser. If the network is down, another alternative to access
the management interface can be used. The alternative way is by using console and telnet management which is
offer configuration way through CLI Interface. WoMaster also provide excellent alternative by configure the switch
via RS232 console cable if user doesn’t attach user admin PC to the network, or if user loses network connection to
Managed Switch. This manual describes the procedures for Web Interface and how to configure and monitor the
managed switch only. For the CLI management interface please refers to the CLI Command User Manual.
PREPARATION FOR WEB INTERFACE MANAGEMENT
WoMaster provides Web interface management that allows user through standard web-browser such as Microsoft
Internet Explorer, or Mozilla, or Google Chrome, to access and configure the switch management on the network.
1. Plug the DC power to the switch and connect switch to computer.
2. Make sure that the switch default IP address is 192.168.10.1.
3. Check that PC has an IP address on the same subnet as the switch. For example, the PC and the switch
are on the same subnet if they both have addresses that start 192.168.1.x (Ex: 192.168.10.2). The subnet
mask is 255.255.255.0.
4. Open command prompt and ping 192.168.10.1 to verify that the switch is reachable.
5. Launch the web browser (Internet Explorer or Mozilla Firefox or Google Chrome) on the PC.
6. Type http://192.168.10.1 (or the IP address of the switch). And then press Enter and a pop up login page
will appear.
7. Type user name and the password. Default user name: admin and password: admin. Then click Login.

14
PREPARATION FOR SERIAL CONSOLE
Attach RJ-45 to RS-232 DB-9 console cable to PC’s COM port; connect RJ45 connector to the Console port of the
WoMaster Managed Switch.
1. Go to Start -> Program -> Accessories -> Communication -> Hyper Terminal
2. Give a name to the new console connection.
3. Choose the COM name
4. Select correct serial settings. The serial settings of WoMaster Managed switches are as below:
Baud Rate: 115200 / Parity: None / Data Bit: 8 / Stop Bit: 1
5. After connected, switch login screen can be seen.
6. Login the switch. The default username: admin; password: admin.
SSH (Secure Shell)
WoMaster managed SWITCH also supports SSH console. User can remotely connect to the switch by command line
interface. The SSH connection can secure all the configuration commands user sent to the switch.
SSH is a client/server architecture while the switch is the SSH server. When user wants to make SSH connection with
the switch, user should download the SSH client tool first.
SSH Client
There are many free, sharewares, trials or charged SSH clients user can find on the internet, e.g., PuTTY is a free and
popular Telnet/SSH client. We’ll use this tool to demonstrate how to login by SSH. (PuTTY copyright 1997-2016
Simon Tatham).
Download PuTTY: http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
1. Open SSH Client/PuTTY

15
In the Session configuration, choose the Serial protocol then enter the Serial line and Speed. For the serial
line, please check the device manager to make sure the serial line name. The speed should be 115200. Then
click on Open to start the SSH session console.
2. After it user can see the CLI command screen is pop-up
3. Type the Switch Login name and its Password. The default settings are admin / admin.
4. All the commands user sees in Putty are the same as the CLI commands user sees via RS232 console.
The next chapter will introduce in detail how to use command line to configure some features in the switch.

16
For either type of connection, access to the command line interface is generally referred to as an EXEC session. There
are some different command modes. Each command mode has its own access ability, available command lines and
uses different command lines to enter and exit.
Privileged EXEC mode: In this mode, the system allows User to view current configuration, reset default, reload
SWITCH, show system information, save configuration and enter the global configuration mode. Type exit to leave
and press ? to see the command list.
# ?
clear Clear
configure Enter configuration mode
copy Copy from source to destination
delete Delete one file in flash: file system
dir Directory of all files in flash: file system
disable Turn off privileged commands
do To run exec commands in the configuration mode
dot1x IEEE Standard for port-based Network Access Control
enable Turn on privileged commands
exit Exit from EXEC mode
firmware Firmware upgrade/swap
help Description of the interactive help system
ip IPv4 commands
logout Exit from EXEC mode
more Display file
no Delete trace hunt string
ping Send ICMP echo messages
platform Platform configuration
reload Reload system.
send Send a message to other tty lines
show Display statistics counters.
terminal Set terminal line parameters
time System time
traceroute Send IP Traceroute messages
veriphy VeriPHY keyword

17
Global Configuration Mode: Type configure terminal in privileged EXEC mode. Then User can enter the Global
Configuration mode. In Global Configuration mode, User can configure all the features that the system provides. Type
exit to leave and press ? to see the command list.
The command lists of global configuration mode.
# configure terminal
(config)# ?
aaa Authentication, Authorization and Accounting
access Access management
access-list Access list
aggregation Aggregation mode
banner Define a banner
default Set a command to its defaults
do To run exec commands in the configuration mode
dot1x IEEE Standard for port-based Network Access Control
enable Modify enable password parameters
end Go back to EXEC mode
exit Exit from current mode
green-ethernet Green Ethernet (Power reduction)
help Description of the interactive help system
hostname Set system's network name
interface Select an interface to configure
ip IPv4 configurations
lacp LACP settings
line Configure a terminal line
lldp LLDP configurations.
logging System logging message
loop-protect Loop protection configuration
mac MAC table entries/configuration
monitor Monitoring different system events
no Negate a command or set its defaults
password Specify the password for the administrator
port-security This command is obsolete.
privilege Command privilege parameters
prompt Set prompt
qos
radius-server Configure RADIUS
relay-output Relay output configuration
snmp-server Set SNMP server's configurations
spanning-tree Spanning Tree protocol
svl Shared VLAN Learning
thermal-protect Thermal protection configurations.
time System time
vlan VLAN commands
(config)#

18
Interface Configuration: Many features are enabled for a particular interface. The Interface commands enable or
modify the operation of an interface. In this mode, a physical port is set up for a specific logical connection operation.
The Interface Configuration mode provides access to the router interface configuration commands.
This section has three interface configuration, Port interface, LLAG interface, and VLAN interface. For Port interface,
type interface IFNAME in global configuration mode. Then User can enter the interface configuration mode. In this
mode, User can configure port settings. In port interface, the name of Gigabit Ethernet port 1 is GigabitEthernet 1/1,
GigabitEthernet 1/2 and so on. Type exit to leave current level and press ? to see the command list. The command
lists of the global configuration mode.
(config)# interface ?
* All switches or All ports
GigabitEthernet 1 Gigabit Ethernet Port
llag Local link aggregation interface configuration
vlan VLAN interface configurations
(config)# interface GigabitEthernet ?
<port_type_list> Port list in 1/1-10
(config)# interface * / GigabitEthernet 1/1
(config-if)# ?
access-list Access list
aggregation Create an aggregation
description Description of the interface
do To run exec commands in the configuration mode
dot1x IEEE Standard for port-based Network Access Control
duplex Interface duplex
end Go back to EXEC mode
excessive-restart Restart backoff algorithm after 16 collisions (No
excessive-restart means discard frame after 16
collisions)
exit Exit from current mode
flowcontrol Traffic flow control.
frame-length-check Drop frames with mismatch between EtherType/Length
field and actually payload size.
green-ethernet Green Ethernet (Power reduction)
help Description of the interactive help system
ip Interface Internet Protocol configuration commands
lacp Enable LACP on this interface
lldp LLDP configurations.
loop-protect Loop protection configuration on port
mac MAC keyword
media-type Media type.
mtu Maximum transmission unit
no Set to default value.
port-security Enable/disable port security per interface.
priority-flowcontrol Priority Flow Control (802.1Qbb)
pvlan Private VLAN
qos Quality of Service
shutdown Shutdown of the interface.
spanning-tree Spanning Tree protocol
speed Configures interface speed. If you use 10, 100, or
1000 keywords with the auto keyword the port will
only advertise the specified speeds.
switchport Set VLAN switching mode characteristics
thermal-protect Thermal group for the interface.

19
The second section is LLAG/VLAN interface, pressinterface LLAG (LLAG-ID)/VLAN (VLAN-ID) in global configuration
mode. User can then enter the interface configuration mode. In this mode, User can configure the settings for the
specific LLAG/VL AN . To leave this interface mode type exit. Press ? to see the available command list.
The command lists of the LLAG/ VLAN interface configuration mode.
The table below presents the summary of the 5 command modes:
COMMAND MODE MAIN FUNCTION PROMPT
Privileged EXEC In this mode, the system allows User to view current
configuration, reset default, reload switch, show
system information, save configuration…and enter
global configuration mode.
#
Global Configuration
In global configuration mode, User can configure all the
features that the system provides User
(config)#
Port Interface Configuration In this mode, User can configure port related settings. (config-if)#
LLAG / VLAN Interface
Configuration
In this mode, User can configure settings for specific
LLAG/VLAN.
(config-if)#
Here are some useful commands for User to see these available commands. Save User time in typing and avoid
typing error. Press ?to see all the available commands in this mode. It helps User to see the next command User
can/should type as well.
#LLAG
(config)# interface llag ?
1-5 ID of LLAG interface
(config)# interface llag 1
(config-llag)# ?
do To run exec commands in the configuration mode
end Go back to EXEC mode
exit Exit from current mode
help Description of the interactive help system
lacp
no
#VLAN
(config)# interface vlan ?
<vlan_list> List of VLAN interface numbers
(config)# interface vlan 1
(config-if-vlan)# ?
do To run exec commands in the configuration mode
end Go back to EXEC mode
exit Exit from current mode
help Description of the interactive help system
ip IPv4 configuration
no Negate a command or set its defaults

20
(Character)? To see all the available commands starts from this character.
The tab key helps User to input the command quicker. If there is only one available command in the next, clicking on
tab key can help to finish typing soon.
Ctrl+C To stop executing the unfinished command.
Ctrl+Q To show all of the command in the current mode.
Ctrl+Z To exit configuration mode.
Alert message when multiple users want to configure the switch. If the administrator is in configuration mode, then
the Web users can’t change the settings. This managed switch allows only one administrator to configure the switch
at a time.
(config)# a?
aaa Authentication, Authorization and Accounting
access Access management
access-list Access list
aggregation Aggregation mode
# co (tab)
configure copy
(config)# interface ?
* All switches or All ports
GigabitEthernet 1 Gigabit Ethernet Port
llag Local link aggregation interface configuration
vlan VLAN interface configurations