Interlogix NS3550-8T-2S User Manual Manual de usuario

IFS NS3550-8T-2S User Manual P/N 1072687 • REV B • ISS 24JUN14

User’s Manual of NS3550-8T-2S 10 6.10 Link Aggregation Control Protocol Command...

User’s Manual of NS3550-8T-2S 100 Tagged packets are forwarded according to the VID contained within the tag. Tagged packets are also assigned a PVI

User’s Manual of NS3550-8T-2S 101 The page includes the following fields: Object Description  Mode Display the current VLAN mode used by this Ma

User’s Manual of NS3550-8T-2S 102 The Industrial Managed Switch supports multiple VLAN tags and can therefore be used in MAN applications as a prov

103 VLAN Port Configuration The VLAN Port Configuration screen in Figure 4-6-2 appears. Figure 4-6-2 : VLAN Port Configuration Page Screenshot The

User’s Manual of NS3550-8T-2S 104 25. Q-in-Q Mode Sets the Managed Switch to QinQ mode, and allows the QinQ tunnel port to be configured. The defaul

User’s Manual of NS3550-8T-2S 105 4.6.5 VLAN Membership  Adding Static Members to VLANs (VLAN Index) Use the VLAN Static Table to configure port m

User’s Manual of NS3550-8T-2S 106 4.6.6 VLAN Membership Status This page provides an overview of membership status for VLAN users. The VLAN Members

User’s Manual of NS3550-8T-2S 107 4.6.7 VLAN Port Status This page provides VLAN Port Staus. The VLAN Port Status screen in Figure 4-6-5 appears. F

User’s Manual of NS3550-8T-2S 108 Private VLANs are based on the source port mask, and there are no connections to VLANs. This means that VLAN IDs a

109 4.6.9 Port Isolation Overview When a VLAN is configured to be a private VLAN, communication between ports within that VLAN can be prevented. Two

User’s Manual of NS3550-8T-2S 11 QoS DSCP Classification Mode ...

User’s Manual of NS3550-8T-2S 110 Figure 4-6-7: Port Isolation Configuration Page Screenshot The page includes the following fields: Object Descri

User’s Manual of NS3550-8T-2S 111 4.6.10 VLAN setting example: - Separate VLAN - 802.1Q VLAN Trunk - Port Isolate 4.6.10.1 Two separate 802.1Q VLAN

User’s Manual of NS3550-8T-2S 112 For this example, just set VLAN Group 1 as default VLAN, but only focus on VLAN 2 and VLAN 3 traffic flow Setup s

User’s Manual of NS3550-8T-2S 113 Figure 4-6-10: Port 1-Port 6 VLAN Configuration

114 4.6.10.2 VLAN Trunking between two 802.1Q aware Switch In most cases, it is used for “Uplink” to other switches. VLANs are separated at differe

User’s Manual of NS3550-8T-2S 115 5. Specify Port-8 to be the 802.1Q VLAN Trunk port, and the Trunking port must be a Tagged port while egress. The

116 4.6.10.3 Port Isolate The diagram shows how the Managed Switch handles isolate and promiscuous ports, and the each PCs are not able to access eac

User’s Manual of NS3550-8T-2S 117 Figure 4-6-17: MAC-based VLAN Membership Configuration Page Screenshot The page includes the following fields: O

User’s Manual of NS3550-8T-2S 118 4.6.12 MAC-based VLAN Status This page shows MAC-based VLAN entries configured by various MAC-based VLAN users. Th

User’s Manual of NS3550-8T-2S 119 4.6.13 Protocol-based VLAN This page allows you to add new protocols to Group Name (unique for each Group) mapping

User’s Manual of NS3550-8T-2S 12 IPMC Filtering...

User’s Manual of NS3550-8T-2S 120 : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Auto-refr

121 4.6.14 Protocol-based VLAN Mambership This page allows you to map an already configured Group Name to a VLAN for the switch. The Group Name to VL

User’s Manual of NS3550-8T-2S 122 established and duplicated links are blocked automatically. The reactivation of the blocked links (at the time of

User’s Manual of NS3550-8T-2S 123 Figure 4-7-1: STP Port State Transitions You can modify each port state by using management software. When you en

User’s Manual of NS3550-8T-2S 124 port and ensures that the BPDU is discarded when its age exceeds the value of the maximum age timer. Forward Del

125 User-Changeable STA Parameters The switch’s factory default setting should cover the majority of installations. However, it is advisable to keep

User’s Manual of NS3550-8T-2S 126 Figure 4-7-2: Before Applying the STA Rules For this example, only the default STP values are used. Figure 4-7-

User’s Manual of NS3550-8T-2S 127 default to ensure that the link between switch B and switch C is the blocked link. 4.7.2 STP System Configuration

128 The page includes the following fields: Basic Settings Object Description  Protocol Version The STP protocol version setting. Valid values are

User’s Manual of NS3550-8T-2S 129 Figure 4-7-5: STP Bridge Status Page Screenshot The page includes the following fields: Object Description  MS

User’s Manual of NS3550-8T-2S 13 MEP Link Trace Configuration...

130 4.7.4 CIST Port Configuration This page allows the user to inspect the current STP CIST port configurations, and possibly change them as well. T

User’s Manual of NS3550-8T-2S 131  Restricted Role If enabled, causes the port not to be selected as Root Port for the CIST or any MSTI, even if i

132 Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. By default, the system automati

User’s Manual of NS3550-8T-2S 133 4.7.5 MSTI Priorities This page allows the user to inspect the current STP MSTI bridge instance priority configura

134 4.7.6 MSTI Configuration This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change t

135 The page includes the following fields: Configuration Identification Object Description  Configuration Name The name identifiying the VLAN to

136 4.7.7 MSTI Ports Configuration This page allows the user to inspect the current STP MSTI port configurations, and possibly change them as well. A

User’s Manual of NS3550-8T-2S 137  Port The switch port number of the corresponding STP CIST (and MSTI) port.  Path Cost The Configuration All w

User’s Manual of NS3550-8T-2S 138 Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds

139 4.8 Multicast 4.8.1 IGMP Snooping The Internet Group Management Protocol (IGMP) lets host and routers share information about multicast groups me

User’s Manual of NS3550-8T-2S 14 A.2 10/100Mbps, 10/100Base-TX...

User’s Manual of NS3550-8T-2S 140 Figure 4-8-2: Multicast Flooding Figure 4-8-3: IGMP Snooping Multicast Stream Control IGMP Versions 1 and 2 Mu

User’s Manual of NS3550-8T-2S 141 IGMP Message Format Octets 0 8 16 31 Type Response T

User’s Manual of NS3550-8T-2S 142 than one router/switch on the LAN performing IP multicasting, one of these devices is elected “querier” and assume

User’s Manual of NS3550-8T-2S 143 4.8.2 IGMP Snooping Configuration This page provides IGMP Snooping related configuration. The IGMP Snooping Config

User’s Manual of NS3550-8T-2S 144 : Click to undo any changes made locally and revert to previously saved values. 4.8.3 IGMP Snooping VLAN Configu

User’s Manual of NS3550-8T-2S 145 : Click to undo any changes made locally and revert to previously saved values.

146 4.8.4 IGMP Snooping Port Group Filtering In certain switch applications, the administrator may want to control the multicast services that are av

147 4.8.5 IGMP Snooping Status This page provides IGMP Snooping status. The IGMP Snooping Status screen in Figure 4-8-8 appears. Figure 4-8-8: IGMP

User’s Manual of NS3550-8T-2S 148 Figure 4-8-9: IGMP Snooping Groups Information Page Screenshot The page includes the following fields: Object D

149 4.8.7 IGMPv3 Information Entries in the IGMP SFM Information Table are shown on this page. The IGMP SFM (Souce-Filtered Multicast) Information Ta

User’s Manual of NS3550-8T-2S 15 1. INTRODUCTION IFS NS3550-8T-2S Industrial 8-Port 10/100/1000T + 2-Port 100/1000X SFP Managed Switch (-40~75 Degr

User’s Manual of NS3550-8T-2S 150 Figure 4-8-11: MLD Snooping Configuration Page Screenshot The page includes the following fields: Object Descri

User’s Manual of NS3550-8T-2S 151 4.8.9 MLD Snooping VLAN Configuration Each page shows up to 99 entries from the VLAN table, default being 20, sele

152 4.8.10 MLD Snooping Port Group Filtering In certain switch applications, the administrator may want to control the multicast services that are av

153 4.8.11 MLD Snooping Status This page provides MLD Snooping status. The IGMP Snooping Status screen in Figure 4-8-14 appears. Figure 4-8-14: MLD

User’s Manual of NS3550-8T-2S 154 Figure 4-8-15: MLD Snooping Groups Information Page Screenshot The page includes the following fields: Object D

155 4.8.13 MLDv2 Information Entries in the MLD SFM Information Table are shown on this page. The MLD SFM (Souce-Filtered Multicast) Information Tabl

User’s Manual of NS3550-8T-2S 156 Figure 4-8-17: MVR Configuration Page Screenshot The page includes the following fields: Object Description 

User’s Manual of NS3550-8T-2S 157  Port Role Configure an MVR port of the designated MVR VLAN as one of the following roles.  Inactive: The desi

User’s Manual of NS3550-8T-2S 158 4.8.16 MVR Groups Information Entries in the MVR Group Table are shown on this page. The MVR Group Table is sorted

User’s Manual of NS3550-8T-2S 159 4.8.17 MVR SFM Information Entries in the MVR SFM Information Table are shown on this page. The MVR SFM (Source-Fi

User’s Manual of NS3550-8T-2S 16 1.2 Product Description IFS NS3550-8T-2S is an Industrial 10-Port Full Gigabit Managed Ethernet Switch specially de

160 4.9 Quality of Service 4.9.1 Understand QOS Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establi

User’s Manual of NS3550-8T-2S 161 Figure 4-9-1: QoS Ingress Port Policers Page Screenshot The page includes the following fields: Object Descript

162 4.9.3 Port Classification This page allows you to configure the basic QoS Ingress Classification settings for all switch ports. The Port Classifi

User’s Manual of NS3550-8T-2S 163 4.9.3.1 QoS Ingress Port Tag Classification The clasification modes for tagged frames are configured on this pag

164 The page includes the following fields: Object Description  Tag Classification Controls the classification mode for tagged frames on this port

User’s Manual of NS3550-8T-2S 165 Figure 4-9-5: QoS Egress Port Shapers Page Screenshot The page includes the following fields: Object Descriptio

166 4.9.5.1 QoS Egress Port Schedule and Shapers The Port Scheduler and Shapers for a specific port are configured on this page. The QoS Egress Port

User’s Manual of NS3550-8T-2S 167 : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Click t

User’s Manual of NS3550-8T-2S 168 The page includes the following fields: Object Description  Mode Controls the tag remarking mode for this port.

169 4.9.7 Port DSCP This page allows you to configure the basic QoS Port DSCP Configuration settings for all switch ports. The Port DSCP screen in Fi

User’s Manual of NS3550-8T-2S 17 Flexibility and Extension Solution The two mini-GBIC slots built in the NS3550-8T-2S support Dual-Speed, 100Base-

User’s Manual of NS3550-8T-2S 170  Egress The Configuration All with available options will assign to whole ports. Port Egress Rewriting can be on

171 4.9.8 DSCP-Based QoS This page allows you to configure the basic QoS DSCP based QoS Ingress Classification settings for all switches. The DSCP-Ba

User’s Manual of NS3550-8T-2S 172 : Click to undo any changes made locally and revert to previously saved values. 4.9.9 DSCP Translation This page

User’s Manual of NS3550-8T-2S 173  Classify  Translate The Configuration All with available values will assign to whole DSCP values. DSCP at Ing

User’s Manual of NS3550-8T-2S 174 4.9.10 DSCP Classification This page allows you to map DSCP value to a QoS Class and DPL value. The DSCP Classific

User’s Manual of NS3550-8T-2S 175 Figure 4-9-13: QoS Control List Configuration Page Screenshot The page includes the following fields: Object Des

176 4.9.11.1 QoS Control Entry Configuration The QCE Configuration screen in Figure 4-9-14 appears. Figure 4-9-14: QCE Configuration Page Screensh

User’s Manual of NS3550-8T-2S 177 0x00 to 0xFF or 'Any', the default value is 'Any'  Control Address Valid Control Address can

User’s Manual of NS3550-8T-2S 178  QCE# Indicates the index of QCE. 31. Frame Type Indicates the type of frame to look for incomming frames. Poss

179 4.9.13 Storm Control Configuration Storm control for the switch is configured on this page. There is a unicast storm rate control, multicast st

User’s Manual of NS3550-8T-2S 18 1.4 Product Features  Physical Port  8-Port 10/100/1000Base-T RJ-45 copper  2 100/1000Base-X mini-GBIC/SFP sl

180 4.9.14 QoS Statistics This page provides statistics for the different queues for all switch ports. The QoS Statistics screen in Figure 4-9-17 a

181 4.9.15 Voice VLAN Configuration The Voice VLAN feature enables voice traffic forwarding on the Voice VLAN, then the switch can classify and sch

User’s Manual of NS3550-8T-2S 182 automatically.  Forced: Forced join to Voice VLAN.  All means all ports will have one specific setting. 35. P

183 4.9.16 Voice VLAN OUI Table Configure VOICE VLAN OUI table on this page. The maximum entry number is 16. Modifying the OUI table will restart aut

User’s Manual of NS3550-8T-2S 184 4.10.1 Access Control List Status This page shows the ACL status by different ACL users. Each row describes the AC

185 4.10.2 Access Control List Configuration This page shows the Access Control List (ACL), which is made up of the ACEs defined on this switch. Each

User’s Manual of NS3550-8T-2S 186 Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.

187 4.10.3 ACE Configuration Configure an ACE (Access Control Entry) on this page. An ACE consists of several parameters. These parameters vary accor

User’s Manual of NS3550-8T-2S 188  Action Specify the action to take with a frame that hits this ACE. Permit: The frame that hits this ACE is gr

189  MAC Parameters Object Description  SMAC Filter (Only displayed when the frame type is Ethernet Type or ARP.) Specify the source MAC filter

User’s Manual of NS3550-8T-2S 19  Traffic classification: - IEEE 802.1p CoS - IP TOS / DSCP / IP Precedence - IP TCP/UDP port number - Typical

User’s Manual of NS3550-8T-2S 190 Address field that appears. Network: Target IP filter is set to Network. Specify the target IP address and targe

User’s Manual of NS3550-8T-2S 191  IP Option Specify the options flag setting for this ACE. No: IPv4 frames where the options flag is set must not

User’s Manual of NS3550-8T-2S 192 status is "don't-care"). Specific: If you want to filter a specific TCP/UDP destination filter wi

User’s Manual of NS3550-8T-2S 193 Figure 4-10-4: ACL Ports Configuration Page Screenshot

194 The page includes the following fields: Object Description  Port The logical port for the settings contained in the same row.  Policy ID Sel

User’s Manual of NS3550-8T-2S 195 Figure 4-10-5: ACL Rate Limiter Configuration Page Screenshot The page includes the following fields: Object De

User’s Manual of NS3550-8T-2S 196 4.11 Authentication This section is to control the access of the Managed Switch, includes the user access and mana

User’s Manual of NS3550-8T-2S 197 4.11.1 Understanding IEEE 802.1X Port-Based Authentication The IEEE 802.1X standard defines a client-server-based

198  Device Roles With 802.1X port-based authentication, the devices in the network have specific roles as shown below. Figure 4-11-1  Client—

User’s Manual of NS3550-8T-2S 199 If 802.1X is not enabled or supported on the network access device, any EAPOL frames from the client are dropped.

User’s Manual of NS3550-8T-2S 2 Copyright © 2014 United Technologies Corporation Interlogix is part of UTC Building & Industrial Systems, a uni

User’s Manual of NS3550-8T-2S 20  NTP (Network Time Protocol)  Link Layer Discovery Protocol (LLDP) Protocol  Cable Diagnostic technology prov

User’s Manual of NS3550-8T-2S 200 Figure 4-11-3: Authentication Method Configuration Page Screenshot The page includes the following fields: Objec

201 4.11.3 Network Access Server Configuration This page allows you to configure the IEEE 802.1X and MAC-based authentication system and port setting

202 The page includes the following fields: System Configuration Object Description  Mode Indicates if NAS is globally enabled or disabled on the

User’s Manual of NS3550-8T-2S 203 QoS Class is enabled for that port. When unchecked, RADIUS-server assigned QoS Class is disabled for all ports. 

User’s Manual of NS3550-8T-2S 204 responses between the supplicant and the authentication server. Frames sent between the supplicant and the switch

User’s Manual of NS3550-8T-2S 205 EAPOL Response Identity frame sent by the supplicant. An exception to this is when no supplicants are attached. In

User’s Manual of NS3550-8T-2S 206 arriving on the port will be classified and switched on the RADIUS-assigned VLAN ID. If (re-)authentication fails

User’s Manual of NS3550-8T-2S 207  Authorized: The port is in Force Authorized or a single-supplicant mode and the supplicant is authorized.  Un

User’s Manual of NS3550-8T-2S 208 client for MAC-based authentication.  Last ID The user name (supplicant identity) carried in the most recently r

User’s Manual of NS3550-8T-2S 209 These supplicant frame counters are available for the following administrative states: Force Authorized Force Unau

User’s Manual of NS3550-8T-2S 21 1.5 Product Specifications Model Name NS3550-8T-2S Hardware Specification Copper Ports 8 10/ 100/1000Base-T

User’s Manual of NS3550-8T-2S 210 server has communication with the switch. MAC-based: Counts all Access Challenges received from the backend serv

User’s Manual of NS3550-8T-2S 211 Version dot1xAuthLastEapolFrameVersion 802.1X-based: The protocol version number carried in the most recently rece

User’s Manual of NS3550-8T-2S 212 • MAC-based Auth.X Click to clear both the port counters and all of the attached client's counters. The "

User’s Manual of NS3550-8T-2S 213 4.11.6 Authentication Server Configuration This page allows you to configure the Authentication Servers. The Authe

User’s Manual of NS3550-8T-2S 214 RADIUS servers are using the UDP protocol, which is unreliable by design. In order to cope with lost frames, the t

User’s Manual of NS3550-8T-2S 215  Secret The secret - up to 29 characters long - shared between the TACACS+ Authentication Server and the switch.

User’s Manual of NS3550-8T-2S 216 4.11.7 RADIUS Overview This page provides an overview of the status of the RADIUS servers configurable on the Auth

User’s Manual of NS3550-8T-2S 217 and the RADIUS module is ready to accept accounting attempts.  Dead (X seconds left): Accounting attempts were m

218 4.11.8 RADIUS Details This page provides detailed statistics for a particular RADIUS server. The RADIUS Authentication/Accounting for Server Over

User’s Manual of NS3550-8T-2S 219 Rx Malformed Access Responses radiusAuthClientExtMalformedAccessResponses The number of malformed RADIUS Access-Re

User’s Manual of NS3550-8T-2S 22 - 802.1Q VLAN tag - DSCP/TOS field in IP Packet IGMP Snooping IGMP (v1/v2/V3) Snooping, up to 255 multicast Groups

User’s Manual of NS3550-8T-2S 220 State - Shows the state of the server. It takes one of the following values: Disabled: The selected server is di

221 RADIUS Accounting Servers The statistics map closely to those specified in RFC4670 - RADIUS Accounting Client MIB. Use the server select box to s

User’s Manual of NS3550-8T-2S 222 IP Address - IP address and UDP port for the accounting server in question. State - Shows the state of the serv

223 4.11.9 Windows Platform RADIUS Server Configuration Setup the RADIUS server and assign the client IP address to the Managed switch. In this case,

224 2. Add New RADIUS Cleint on the Windows 2003 server Figure 4-11-11: Windows Server – Add New RADIUS Client Setting 3. Assign the client IP add

User’s Manual of NS3550-8T-2S 225 Figure 4-11-13: Windows Server RADIUS Server Setting

User’s Manual of NS3550-8T-2S 226 5. Configure ports attribute of 802.1X, the same as “802.1X Port Configuration”. Figure 4-11-14: 802.1x Port Con

User’s Manual of NS3550-8T-2S 227 7. Enter ” Active Directory Users and Computers”, create legal user data, the next, right-click a user what you cr

User’s Manual of NS3550-8T-2S 228 4.11.10 802.1X Client Configuration Windows XP is originally 802.1X support. As to other operating systems (window

229 4. Select “Authentication” tab. 5. Select “Enable network access control using IEEE 802.1X” to enable 802.1x authentication. 6. Select “MD-5

23 2. INSTALLATION 2.1 Hardware Description The Industrial Managed Switch provides three different running speeds – 10Mbps, 100Mbps and 1000Mbps in t

User’s Manual of NS3550-8T-2S 230 Figure 4-11-21

User’s Manual of NS3550-8T-2S 231 4.12 Security This section is to control the access of the Industrial Managed Switch, including the user access an

User’s Manual of NS3550-8T-2S 232 The page includes the following fields: System Configuration Object Description  Mode Indicates if Limit Contro

User’s Manual of NS3550-8T-2S 233  State This column shows the current state of the port as seen from the Limit Control's point of view. The

234 4.12.2 Access Management Configure access management table on this page. The maximum entry number is 16. If the application's type match any

User’s Manual of NS3550-8T-2S 235 Figure 4-12-3: Access Management Statistics Overview Page Screenshot The page includes the following fields: Obj

236 4.12.4 HTTPs Configure HTTPS on this page. The HTTPS Configuration screen in Figure 4-12-4 appears. Figure 4-12-4: HTTPS Configuration Screen P

237 4.12.5 SSH Configure SSH on this page. This page shows the Port Security status. Port Security is a module with no direct configuration. Configur

238 4.12.6 Port Security Status This page shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes

User’s Manual of NS3550-8T-2S 239 letter (see Abbr) has enabled port security.  State Shows the current state of the port. It can take one of four

24 2.1.2 Front Panel Figure 2-1 shows the front panel of Industrial Managed Switch. Figure 2-1: NS3550-8T-2S Switch Front Panel

240 4.12.7 Port Security Detail This page shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct confi

User’s Manual of NS3550-8T-2S 241 Figure 4-12-8: DHCP Snooping Configuration Screen Page Screenshot The page includes the following fields: Object

242 Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.12.9 DHCP Snooping Statistics

User’s Manual of NS3550-8T-2S 243 Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Clic

244 4.12.10 IP Source Guard Configuration IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filteri

User’s Manual of NS3550-8T-2S 245 4.12.11 IP Source Guard Static Table This page provides Static IP Source Guard Table. The Static IP Source Guard T

246 4.12.12 ARP Inspection ARP Inspection is a secure feature. Several types of attacks can be launched against a host or devices connected to Layer

247 Buttons : Click to translate all dynamic entries to static entries. : Click to save changes. : Click to undo any changes made locally and revert

User’s Manual of NS3550-8T-2S 248 4.13 MAC Address Table Switching of frames is based upon the DMAC address contained in the frame. The Managed Swit

249 The page includes the following fields: Aging Configuration By default, dynamic entries are removed from the MAC table after 300 seconds. This re

25 Reset Button On the left of the front panel, the reset button is designed for rebooting the Industrial Managed Switch without turning off and o

250 Buttons : Click to add a new entry. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.1

251 The page includes the following fields: Object Description  Type Indicates whether the entry is a static or dynamic entry.  VLAN The VLAN ID

User’s Manual of NS3550-8T-2S 252  IP Address User IP address of the entry. Buttons Auto-refresh : Check this box to refresh the page automatical

253 4.13.4 Dynamic IP Source Guard Table Entries in the Dynamic IP Source Guard Table are shown on this page. The Dynamic IP Source Guard Table is so

User’s Manual of NS3550-8T-2S 254 4.14.2 LLDP Configuration This page allows the user to inspect and configure the current LLDP port settings. The L

255 The page includes the following fields: LLDP Parameters Object Description  Tx Interval The switch is periodically transmitting LLDP frames to

User’s Manual of NS3550-8T-2S 256 received from neighbour devices. If at least one port has CDP awareness enabled all CDP frames are terminated by t

User’s Manual of NS3550-8T-2S 257 4.14.3 LLDP-MED Configuration This page allows you to configure the LLDP-MED. The LLDP-MED Configuration screen in

User’s Manual of NS3550-8T-2S 258 Object Description  Latitude Latitude SHOULD be normalized to within 0-90 degrees with a maximum of 4 digits. I

User’s Manual of NS3550-8T-2S 259  Name Name (residence and office occupant) - Example: Flemming Jahn  Zip code Postal/zip code - Example: 2791

User’s Manual of NS3550-8T-2S 26  Per SFP Interface LED Color Function Light Indicates the link through that port is successfully established. L

User’s Manual of NS3550-8T-2S 260  Application Type Intended use of the application types: Voice - for use by dedicated IP Telephony handsets and

User’s Manual of NS3550-8T-2S 261 : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.

262 4.14.4 LLDP-MED Neighbor This page provides a status overview for all LLDP-MED neighbors. The displayed table contains a row for each port on w

User’s Manual of NS3550-8T-2S 263 products that have IP media capabilities however may or may not be associated with a particular end user. Capabili

User’s Manual of NS3550-8T-2S 264  Priority Priority is the Layer 2 priority to be used for the specified application type.One of eight priority l

User’s Manual of NS3550-8T-2S 265 Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Clic

User’s Manual of NS3550-8T-2S 266 4.14.6 Port Statistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Global

267 Local Counters The displayed table contains a row for each port. The columns hold the following information: Object Description  Local Port

268 4.14.7 LLDP Neighbours EEE Information By using EEE power savings can be achieved at the expense of traffic latency. This latency occurs due to t

User’s Manual of NS3550-8T-2S 269 4.15 Diagnostics This section provide the Physical layer and IP layer network diagnostics tools for troubleshoot.

User’s Manual of NS3550-8T-2S 27 2.2 Installing Industrial Managed Switch This section describes how to install your Industrial Managed Switch and m

270 4.15.1 Ping This page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues. After you press “Start”, 5 ICMP packets are

271 4.15.2 IPv6 Ping This page allows you to issue ICMPv6 PING packets to troubleshoot IPv6 connectivity issues. After you press “Start”, 5 ICMPv6 pa

272 4.15.3 Remote IP Ping Test This page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues on special port. After you pr

User’s Manual of NS3550-8T-2S 273 10 and 100 Mbps ports will be linked down while running cable diagnostic. Therefore, running cable diagnastic on a

User’s Manual of NS3550-8T-2S 274 4.16 Loop Protection This page allows the user to inspect the current Loop Protection configurations, and possibly

User’s Manual of NS3550-8T-2S 275  Tx Mode Controls whether or not the port is actively generating loop protection PDU's, or whether or not i

276 4.17 RMON RMON is the most important expansion of the standard SNMP. RMON is a set of MIB definitions, used to define standard network monitor fu

User’s Manual of NS3550-8T-2S 277  OutQLen: The length of the output packet queue (in packets). 53. Sample Type The method of sampling the selecte

User’s Manual of NS3550-8T-2S 278  Value The value of the statistic during the last sampling period.  Startup The alarm that may be sent when t

User’s Manual of NS3550-8T-2S 279 : Click to refresh the page immediately. : Updates the table starting from the first entry in the Alarm Table, i.e

28 2.2.2 DIN-Rail Mounting This section describes how to install the Industrial Managed Switch. There are two methods to install the Industrial Mana

User’s Manual of NS3550-8T-2S 280 4.17.5 RMON Event Details This page provides an overview of RMON event entries; screen in Figure 4-17-5 appears.

281 4.17.6 RMON Event Status This page provides an overview of RMON Event table entries.Each page shows up to 99 entries from the Event table, defaul

282 4.17.7 RMON History Configuration Configure RMON History table on this page. The entry index key is ID; screen in Figure 4-17-7 appears. Figure

283 4.17.8 RMON History Details This page provides details of RMON history entries; screen in Figure 4-17-8 appears. Figure 4-17-8: RMON history det

User’s Manual of NS3550-8T-2S 284 : Click to refresh the page immediately. 4.17.9 RMON History Status This page provides an overview of RMON Histo

User’s Manual of NS3550-8T-2S 285 : Click to refresh the page immediately. : Updates the table starting from the first entry in the Alarm Table, i.e

286 4.17.10 RMON Statistics Configuration Configure RMON Statistics table on this page. The entry index key is ID; screen in Figure 4-17-10 appears.

287 4.17.11 RMON Statistics Details This page provides details of a specific RMON statistics entry; screen in Figure 4-17-11 appears. Figure 4-17-11

User’s Manual of NS3550-8T-2S 288  65~127 The total number of packets (including bad packets) received that were between 65 to 127 octets in lengt

User’s Manual of NS3550-8T-2S 289 4.18 Precision Time Protocol 4.18.1 PTP Configuration This section allows the user to configure and inspect the cu

User’s Manual of NS3550-8T-2S 29 Step 3: Check the DIN-Rail is tightly on the track. Please refer to following procedures to remove the Industrial

User’s Manual of NS3550-8T-2S 290 Figure 4-18-2: PTP Clock configuration page screenshot The page includes the following fields: Object Descriptio

User’s Manual of NS3550-8T-2S 291 4.18.2 PTP Status This section allows the user to inspect the current Precision Time Protocol (PTP) clock settings

User’s Manual of NS3550-8T-2S 292 4.19 Ring ITU-T G.8032 Ethernet Ring protection switching (ERPS) is a link layer protocol applied on Ethernet l

User’s Manual of NS3550-8T-2S 293 Figure 4-19-1: MEP configuration page screenshot The page includes the following fields: Object Description 

User’s Manual of NS3550-8T-2S 294 Figure 4-19-2: Detail MEP configuration page screenshot The page includes the following fields: Instance Data:

User’s Manual of NS3550-8T-2S 295 IEEE String: This is defined by IEEE. 'Domain Name' can be max. 8 char. 'MEG id' can be max. 8

User’s Manual of NS3550-8T-2S 296 periods - see 'cLOC'. * Fault Cause cPeriod is declared if a CCM PDU has been received with different pe

User’s Manual of NS3550-8T-2S 297  Delete This box is used to mark an ERPS for deletion in next Save operation.  Port 0 This will create a Port

User’s Manual of NS3550-8T-2S 298 4.19.4 Ethernet Ring Protocol Switch Configuration This page allows the user to inspect and configure the current

User’s Manual of NS3550-8T-2S 299  Hold Off Time The timing value to be used to make persistent check on Signal Fail before switching. The range

User’s Manual of NS3550-8T-2S 3 TABLE OF CONTENTS 1. INTRODUCTION...

User’s Manual of NS3550-8T-2S 30 2.2.3 Wall Mount Plate Mounting To install the Industrial Managed Switch on the wall. Please follow the instruction

User’s Manual of NS3550-8T-2S 300 Buttons : Click to save changes. Auto-refresh : Check this box to refresh the page automatically. Automatic refr

User’s Manual of NS3550-8T-2S 301 4.19.5 Ring Wizard This page allows the user to configure the ERPS by wizard; screen in Figure 4-19-4 appears. Fi

User’s Manual of NS3550-8T-2S 302 4.19.6 Ring Wizard Example: Figure 4-19-6: Ring Example Diagram The above topology often occurs on using ERPS pr

User’s Manual of NS3550-8T-2S 303 Set ERPS Configuration on Switch 2 Connect PC to switch 2 directly; don’t connect to port 1 & 2 Logging on

User’s Manual of NS3550-8T-2S 304 5. COMMAND LINE INTERFACE 5.1 Accessing the CLI When accessing the management interface for the Industrial Mana

User’s Manual of NS3550-8T-2S 305 6. COMMAND LINE MODE The CLI groups all the commands in appropriate modes according to the nature of the command.

306 6.1 System Command System Configuration Description: Show system configuration. Syntax: System Configuration [all] [<port_list>] Parame

307 Example: To display system log information: NS3550-8T-2S:/>System log configuration System Log Configuration: ========================= Sy

User’s Manual of NS3550-8T-2S 308 NS3550-8T-2S:/>System name : NS3550-8T-2S System Contact Description: Set or show the system contact. S

User’s Manual of NS3550-8T-2S 309 System Log Level Description: Show or set the system log level. It uses to determine what kind of message will se

31 2.3 Wiring the Power Inputs The 6-contacts terminal block connector on the top panel of Industrial Managed Switch is used for two DC redundant pow

310 System Timezone Description: Set or show the system timezone offset. Syntax: System Timezone [<offset>] Parameters: <offset>: Time

311 Example: To show system log: NS3550-8T-2S:/>system log lookup Number of entries: Info : 2 Warning: 0 Error : 0 All : 2 ID Level

User’s Manual of NS3550-8T-2S 312 Syntax: IP Configuration Example: Show IP configuration: NS3550-8T-2S:/>ip configuration IP Configuration:

313 Parameters: <ip_addr> : IP address (a.b.c.d), default: Show IP address <ip_mask> : IP subnet mask (a.b.c.d), default: Show IP mask

User’s Manual of NS3550-8T-2S 314 Syntax: IP DNS_Proxy [enable|disable] Parameters: enable : Enable DNS Proxy disable: Disable DNS Proxy Default S

User’s Manual of NS3550-8T-2S 315 NS3550-8T-2S:/>ip ipv6 setup 2001::0002 64 2100::0001 IPv6 Ping Description: Ping IPv6 address (ICMPv6 echo).

User’s Manual of NS3550-8T-2S 316 Default Setting: disable

317 Example: Enable NTP mode: NS3550-8T-2S:/>ip ntp mode enable IP NTP Server Add Description: Add NTP server entry. Syntax: IP NTP Server Add

318 Example: To add IPv6 NTP server: NS3550-8T-2S:/>ip ntp server ipv6 add 1 2001:7b8:3:2c::123 IP NTP Server Delete Description: Delete NTP se

User’s Manual of NS3550-8T-2S 319 6.3 Port Management Command Port Configuration Description: Show port configuration. Syntax: Port Configuration

User’s Manual of NS3550-8T-2S 32 All 10/100/1000Base-T ports come with Auto-Negotiation capability. They automatically support 1000Base-T, 100Base-T

User’s Manual of NS3550-8T-2S 320 Parameters: <port_list>: Port list or 'all', default: All ports enable : Enable flow control d

User’s Manual of NS3550-8T-2S 321 disable: Disable all power control actiphy: Enable ActiPHY power control dynamic: Enable Dynamic power control De

User’s Manual of NS3550-8T-2S 322 <port_list>: Port list or 'all', default: All ports Port SFP Description: Show SFP port informat

User’s Manual of NS3550-8T-2S 323 6.4 MAC Address Table Command MAC Configuration Description: Show MAC address table configuration. Syntax: MAC Co

User’s Manual of NS3550-8T-2S 324 Example: Delete Mac address 00-30-4F-01-01-02 in vid1 NS3550-8T-2S:/>mac delete 00-30-4f-01-01-02 1 MAC Loo

User’s Manual of NS3550-8T-2S 325 MAC Dump Description: Show sorted list of MAC address entries. Syntax: MAC Dump [<mac_max>] [<mac_addr&g

326 6.5 VLAN Configuration Command VLAN Configuration Description: Show VLAN configuration. Syntax: VLAN Configuration [<port_list>] Paramete

User’s Manual of NS3550-8T-2S 327 all : Allow tagged and untagged frames tagged : Allow tagged frames only (default: Show accepted frame

328 Example: Set VLAN mode in port base NS3550-8T-2S:/>vlan mode portbased VLAN Link Type Description: Set or show the port VLAN link type.

329 Parameters: <port_list>: Port list or 'all', default: All ports disable : Disable Q-in-Q VLAN Mode man : Q-in-Q MAN P

33 2.5.1 Installing the SFP Transceiver The sections describe how to insert an SFP transceiver into an SFP slot. The SFP transceivers are hot-plugg

330 Syntax: VLAN Add <vid>|<name> [<port_list>] Parameters: <vid>|<name>: VLAN ID (1-4095) or VLAN Name <port_list&

User’s Manual of NS3550-8T-2S 331 VLAN Forbidden Lookup Description: Lookup VLAN Forbidden port entry. Syntax: VLAN Forbidden Lookup [<vid>]

332 Parameters: <name>: VLAN name - Maximum of 32 characters. VLAN Name can only contain alphabets or numbers. VLAN name should contain atleast

333 Example: To show VLAN Name table NS3550-8T-2S:/>vlan name lookup VLAN NAME vid ------------------------------- ---

User’s Manual of NS3550-8T-2S 334 NS3550-8T-2S:/> pvlan configuration Private VLAN Configuration: =========================== Port Isolation

User’s Manual of NS3550-8T-2S 335 Parameters: <pvlan_id>: Private VLAN ID, default: Show all PVLANs. The allowed range for a Private VLAN ID i

336 Syntax: Security Switch Users Add <user_name> <password> <privilege_level> Parameters: <user_name> : A string iden

User’s Manual of NS3550-8T-2S 337 Ports 5 10 1 10 Private_VLANs 5 10 5 10 Protocol_based_V

User’s Manual of NS3550-8T-2S 338 Security Switch Auth Method Description: Set or show Auth method. (default: Show Auth method). Syntax: Security

User’s Manual of NS3550-8T-2S 339 Enable SSH function. NS3550-8T-2S:/>security switch ssh mode enable Security Switch HTTPs Configuration Des

User’s Manual of NS3550-8T-2S 34 S25-2MLC-2 SFP, LC Connector, Multi Mode, 10/100 Fast Ethernet, 2 fiber,1310nm/1310nm, 2km, Hardened -40~75°C S2

User’s Manual of NS3550-8T-2S 340 Security Switch Access Configuration Description: Show access management configuration. Syntax: Security Switch

User’s Manual of NS3550-8T-2S 341 Security Switch Access Mode Description: Set or show the access management mode. Syntax: Security Switch Access M

User’s Manual of NS3550-8T-2S 342 telnet : Indicates that the host can access the switch from TELNET/SSH Example: Add access managemen

User’s Manual of NS3550-8T-2S 343 Show access management statistics. NS3550-8T-2S:/>security switch access statistics Access Management Statis

344 Security Switch SNMP Configuration Description: Show SNMP configuration. Syntax: Security Switch SNMP Configuration Security Switch SNMP Mode

345 Parameters: 1 : SNMP version 1 2c: SNMP version 2c 3 : SNMP version 3 (default: Show SNMP version) Default Setting: 2c Example: Set SNMP in

346 Security Switch SNMP Write Community Description: Set or show the community string for SNMP write access. Syntax: Security Switch SNMP Write Com

347 Example: Enable SNMP trap mode. NS3550-8T-2S:/>security switch snmp trap mode enable Security Switch SNMP Trap Version Description: Set o

348 Default Setting: public Example: Set private value for SNMP trap community. NS3550-8T-2S:/>security switch snmp trap community private S

User’s Manual of NS3550-8T-2S 349 NS3550-8T-2S:/>security switch snmp trap authentication failure disable Security Switch SNMP Trap Link-up Des

User’s Manual of NS3550-8T-2S 35 Figure 2-6: Pull Out the SFP Transceiver Module Never pull out the module without pulling the lever or the push

User’s Manual of NS3550-8T-2S 350 Security Switch SNMP Trap Inform Retry Times Description: Set or show the SNMP trap inform retry times. Syntax: S

User’s Manual of NS3550-8T-2S 351 <security_name>: A string representing the security name for a principal (default: Show SNMP trap security n

352 Example: Set the SNMP trap security name NS3550-8T-2S:/>security switch snmp trap security name 12345678 Security Switch SNMP Engine ID Des

353 Example: Add SNMPv3 community entry. NS3550-8T-2S:/>security switch snmp community add public 192.168.0.20 255.255.255.0 Security Switch

User’s Manual of NS3550-8T-2S 354 The allowed string length is (8-40), and the allowed content is ASCII characters from 33 to 126

355 Syntax: Security Switch SNMP User Delete <index> Parameters: <index>: entry index (1-64) Example: Delete SNMPv3 user entry NS3550-

User’s Manual of NS3550-8T-2S 356 (1-32), and the allowed content is ASCII characters from 33 to 126 <group_name> : A string identifying th

357 Security Switch SNMP Group Delete Description: Delete SNMPv3 group entry. Syntax: Security Switch SNMP Group Delete <index> Parameters: &

User’s Manual of NS3550-8T-2S 358 Syntax: Security Switch SNMP View Delete <index> Parameters: <index>: entry index (1-64) Example:

User’s Manual of NS3550-8T-2S 359 Security Switch SNMP Access Delete Description: Delete SNMPv3 access entry. Syntax: Security Switch SNMP Access

36 3. SWITCH MANAGEMENT This chapter explains the methods that you can use to configure management access to the Industrial Managed Switch. It descri

User’s Manual of NS3550-8T-2S 360 6 ---- No users 0 7 ---- No users 0 8 ---- No users 0 9

User’s Manual of NS3550-8T-2S 361 Security Network Limit Mode Description: Set or show global enabledness. Syntax: Security Network Limit Mode [ena

User’s Manual of NS3550-8T-2S 362 Security Network Limit Port [<port_list>] [enable|disable] Parameters: <port_list>: Port list or &apo

User’s Manual of NS3550-8T-2S 363 Reopen one or more ports whose limit is exceeded and shut down. Syntax: Security Network Limit Reopen [<port_l

User’s Manual of NS3550-8T-2S 364 NS3550-8T-2S:/>security network nas mode enable Security Network NAS State Description: Set or show the port

User’s Manual of NS3550-8T-2S 365 disable: Disable RADIUS-assigned VLAN either globally or on one or more ports (default: Show current RADIUS-assign

366 Example: Set the time between EAPOL retransmissions for 100sec. NS3550-8T-2S:/>security network nas eapoltimeout 100 Security Network NAS

User’s Manual of NS3550-8T-2S 367 Enable NAS RADIUS QoS NS3550-8T-2S:/>security network nas radius_qos enable Security Network NAS RADIUS_VLA

User’s Manual of NS3550-8T-2S 368 Syntax: Security Network NAS Authenticate [<port_list>] [now] Parameters: <port_list>: Port list or &

User’s Manual of NS3550-8T-2S 369

User’s Manual of NS3550-8T-2S 37 3.2 Management Access Overview The Industrial Managed Switch gives you the flexibility to access and manage it usin

370 Parameters: <port_list> : Port list or 'all', default: All ports permit : Permit forwarding (default) deny : De

User’s Manual of NS3550-8T-2S 371 If the ACE ID parameter <ace_id> is specified and an entry with this ACE ID already exists, the ACE will be

User’s Manual of NS3550-8T-2S 372 Example: Delete ACE 1 NS3550-8T-2S:/>security network acl delete 1 Security Network ACL Lookup Description:

User’s Manual of NS3550-8T-2S 373 Example: Show DHCP relay configuration. NS3550-8T-2S:/>security network dhcp relay configuration DHCP Relay

User’s Manual of NS3550-8T-2S 374 Parameters: enable : Enable DHCP relay agent information option mode disable: Disable DHCP relay agent information

375 Example: Enable DHCP relay agent information option mode. NS3550-8T-2S:/>security network dhcp relay information mode enable Security Net

User’s Manual of NS3550-8T-2S 376 and only allowed reply packets from trusted ports. disable: Disable DHCP snooping mode (default: Show flow DHCP sn

User’s Manual of NS3550-8T-2S 377 Security Network IP Source Guard Configuration Description: Show IP source guard configuration. Syntax: Security

378 Example: Enable IP source guard mode NS3550-8T-2S:/>security network ip source guard mode enable Security Network IP Source Guard Port Mo

User’s Manual of NS3550-8T-2S 379 Add IP source guard static entry. NS3550-8T-2S:/>security network ip source guard entry 1 add 1 192.168.0.20

38 3.3 Remote Telnet The Remote Telnet is an IP-based command line user interface for performing system administration such as displaying statistics

User’s Manual of NS3550-8T-2S 380 disable : Disable ARP Inspection port (default: Show ARP Inspection port mode) Default Setting: Disable Example:

User’s Manual of NS3550-8T-2S 381 Server Timeout : 15 seconds Server Dead Time : 300 seconds RADIUS Authentication Server Configuration: =======

382 Parameters: <timeout>: Server response timeout (3-3600 seconds) (default: Show server timeout configuration) Default Setting: 15 Example:

User’s Manual of NS3550-8T-2S 383 Parameters: The server index (1-5) (default: Show RADIUS accounting server configuration) enable : Enable R

384 Example: Set RADIUS accounting server configuration. NS3550-8T-2S:/>security acct_radius 1 enable 192.168.0.20 12345678 1813 Security AAA

User’s Manual of NS3550-8T-2S 385 STP Configuration: ================== Protocol Version: MSTP Max Age : 20 Forward Delay : 15 Tx Hold Co

User’s Manual of NS3550-8T-2S 386 STP MaxAge Description: Set or show the bridge instance maximum age. Syntax: STP MaxAge [<max_age>] Parame

User’s Manual of NS3550-8T-2S 387 Syntax: STP bpduFilter [enable|disable] Parameters: enable|disable: enable or disable BPDU Filtering for Edge por

388 Default Setting: Disable Example: Set edge port BPDU filtering NS3550-8T-2S:/>stp bpdufilter enable STP BPDU Guard Description: Set or sh

389 Default Setting: Disable Example: Set STP recovery value in 30 sec. NS3550-8T-2S:/>stp recovery 30 STP Status Description: Show STP Bridg

39 3.4 Web Management The Industrial Managed Switch offers management features that allow users to manage the Industrial Managed Switch from anywhere

User’s Manual of NS3550-8T-2S 390 Syntax: STP Msti Map [<msti>] [clear] Parameters: <msti>: STP bridge instance no (0-7, CIST=0, MSTI1=

User’s Manual of NS3550-8T-2S 391 Example: Enable STP function on port1 NS3550-8T-2S:/>stp port mode 1 enable STP Port Edge Description: Set

User’s Manual of NS3550-8T-2S 392 Default: auto Example: Disable STP P2P function on port1 NS3550-8T-2S:/>stp port p2p 1 disable STP Port R

393 Parameters: <port_list>: Port list or 'all', default: All ports enable : Enable MSTP restricted TCN disable : Disable MSTP

User’s Manual of NS3550-8T-2S 394 Set the STP mCheck (Migration Check) variable for port 1. NS3550-8T-2S:/>stp port mcheck 1 STP MSTI Port Co

395 Parameters: <msti> : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...) <port_list>: Port list or 'all', default: All p

User’s Manual of NS3550-8T-2S 396 <port_list>: Port list or 'all', default: All ports <aggr_id> : Aggregation ID Example:

397 Syntax: Aggr Delete <aggr_id> Parameters: <aggr_id>: Aggregation ID Example: Delete Group2 NS3550-8T-2S:/>aggr delete 2 Aggr

398 Default Setting: SMAC : Enabled DMAC : Disabled IP : Enabled Port : Enabled Example: Disable SMAC mode NS3550-8T-2S:/>Aggr mode s

User’s Manual of NS3550-8T-2S 399 Syntax: LACP Key [<port_list>] [<key>] Parameters: <port_list>: Port list or 'all',

User’s Manual of NS3550-8T-2S 4 4.2.22 System Reboot ...

40 3.5 SNMP-Based Network Management You can use an external SNMP-based application to configure and manage the Industrial Managed Switch, such as

User’s Manual of NS3550-8T-2S 400 LACP Statistics [<port_list>] [clear] Parameters: <port_list>: Port list or 'all', default:

User’s Manual of NS3550-8T-2S 401 6.11 LLDP Command LLDP Configuration Description: Show LLDP configuration. Syntax: LLDP Configuration [<port_l

User’s Manual of NS3550-8T-2S 402 port_descr : Description of the port sysm_name : System name sys_descr : Description of the system s

User’s Manual of NS3550-8T-2S 403 Syntax: LLDP Delay [<delay>] Parameters: <delay>: LLDP transmission delay (1-8192) Default Setting:

User’s Manual of NS3550-8T-2S 404 Example: Set LLDP reinit delay value in 3 NS3550-8T-2S:/>lldp reinit 3 LLDP Statistics Description: Show L

User’s Manual of NS3550-8T-2S 405 Location Coordinates : Latitude - 0.0000 North Longitude

User’s Manual of NS3550-8T-2S 406 Delete the selected policy. Syntax: LLDPMED policy delete [<policy_list>] Parameters: <policy_list>:

User’s Manual of NS3550-8T-2S 407 LLDPMED Coordinates Description: Set or show LLDP-MED Location. Syntax: LLDPMED Coordinates [latitude|longitude|

408 Parameters: wgs84|nad83_navd88|nad83_mllw: wgs84 : WGS84 nad83_navd88 : NAD83_NAVD88 nad83_mllw : NAD83_MLLW lldpmed Coordinate datum L

409 6.13 EEE Command EEE Configuration Description: Show eee configuration. Syntax: EEE Configuration [<port_list>] Parameters: <port_list

41 4. WEB CONFIGURATION This section introduces the configuration and functions of the Web-based management. About Web-based Management The Industria

410 6.14 Thermal Command Thermal Priority Temperature Description: Set or show the temperature at which the ports shall be shut down. Syntax: Therma

User’s Manual of NS3550-8T-2S 411 8 47 C 9 47 C 10 47 C Thermal Configuration Description: Show thermal_protect configuration. Syntax:

412 QoS Port Classification DPL Description: Set or show the default Drop Precedence Level. Syntax: QoS Port Classification DPL [<port_list>]

User’s Manual of NS3550-8T-2S 413 QoS Port Classification Tag [<port_list>] [enable|disable] Parameters: <port_list>: Port list or &apo

User’s Manual of NS3550-8T-2S 414 (default: Show port policer mode) Default Setting: disable Example: Enable QoS port policer NS3550-8T-2S:/>

User’s Manual of NS3550-8T-2S 415 strict

416 Example: Set the port schedule mode in weighted mode NS3550-8T-2S:/>qos Port Scheduler Mode 1-10 weighted QoS Port Scheduler Weight Descr

User’s Manual of NS3550-8T-2S 417 Syntax: QoS Port QueueShaper Excess [<port_list>] [<queue_list>] [enable|disable] Parameters: <po

418 Example: Enable the port queue excess bandwidth mode. NS3550-8T-2S:/>qos Port QueueShaper Excess 1-10 0-7 enable QoS Port Shaper Mode Des

User’s Manual of NS3550-8T-2S 419 Example: Set the port tag remarking mode in mapped. NS3550-8T-2S:/>qos Port TagRemarking Mode 1-10 mapped

42  Logging on the Industrial Managed Switch 1. Use Internet Explorer 7.0 or above Web browser and enter the factory-default IP address to access

420 Syntax: QoS Port TagRemarking Map [<port_list>] [<class_list>] [<dpl_list>] [<pcp>] [<dei>] Parameters: <port_l

421 QoS Port DSCP Classification Description: Set or show DSCP classification based on QoS class and DP level. This enables per port to map new DSCP

User’s Manual of NS3550-8T-2S 422 QoS DSCP Translation Description: Set or show global ingress DSCP translation table. If port DSCP translation is e

User’s Manual of NS3550-8T-2S 423 QoS Storm Unicast Description: Set or show the unicast storm rate limiter. Syntax: QoS Storm Unicast [enable|disa

424 QoS Storm Multicast Description: Set or show the multicast storm rate limiter. Syntax: QoS Storm Multicast [enable|disable] [<packet_rate>

425 Parameters: <qce_id> : QCE ID (1-256), default: Next available ID <qce_id_next> : Next QCE ID: "next_id (1-256) o

User’s Manual of NS3550-8T-2S 426 NS3550-8T-2S:/> QoS Storm multicast enable 2 QoS QCL Status Description: Show QCL status. This can be used to

427 Parameters: combined|static|voice_vlan|conflicts: combined : Shows the combined status static : Shows the static user configured

428 6.16 Mirror Command Mirror Configuration Description: Show mirror configuration. Syntax: Mirror Configuration [<port_list>] Parameters: &

429 6.17 Configuration Command Configuration Save Description: Save configuration to TFTP server. Syntax: Config Save <ip_server> <file_nam

User’s Manual of NS3550-8T-2S 43 1. It is recommended to use Internet Explore 7.0 or above to access Industrial Managed Switch. 2. The changed I

430 6.18 Firmware Command Firmware Load Description: Load new firmware from TFTP server. Syntax: Firmware Load <ip_addr_string> <file_name&

User’s Manual of NS3550-8T-2S 431 UPnP Mode Description: Set or show the UPnP mode. Syntax: UPnP Mode [enable|disable] Parameters: enable : Enable

432 Example: Set value 1000 for UPnP Advertising Duration. NS3550-8T-2S:/>upnp advertising duration 1000 6.20 MVR Command MVR Configuration Des

User’s Manual of NS3550-8T-2S 433 disable : Disable MVR mode (default: Show MVR mode) Default Setting: disable Example: Enable MVR mode. N

User’s Manual of NS3550-8T-2S 434 Default Setting: receive Example: Set source type for MVR port type of port 1. NS3550-8T-2S:/>mvr port type

435 Example: Enable MVR port state about immediate leave for port 1. NS3550-8T-2S:/>mvr immediate leave 1 enable 6.21 Voice VLAN Command Voic

User’s Manual of NS3550-8T-2S 436 Parameters: enable : Enable Voice VLAN mode. disable: Disable Voice VLAN mode (default: Show flow Voice VLAN mode

437 Example: Enable the Voice VLAN mode. NS3550-8T-2S:/>voice vlan mode enable Voice VLAN ID Description: Set or show Voice VLAN ID. Syntax:

438 Example: Set Voice VLAN age time in 100sec. NS3550-8T-2S:/>voice valn agetime 100 Voice VLAN Traffic Class Description: Set or show Voice

439 Example: Add Voice VLAN OUI entry. NS3550-8T-2S:/>voice vlan oui add 00-11-22 test Voice VLAN OUI Delete Description: Delete Voice VLAN O

User’s Manual of NS3550-8T-2S 44 4.1 Main Web Page The Industrial Managed Switch provides a Web-based browser interface for configuring and managing

440 Voice VLAN OUI Lookup Description: Clear Voice VLAN OUI entry. Modify OUI table will restart auto detect OUI process. Syntax: Voice VLAN OUI Cle

User’s Manual of NS3550-8T-2S 441 6.22 Loop Protect Command Loop Protect Configuration Description: Show Loop Protection configuration. Syntax: Loo

442 Parameters: enable : Enable Loop Protection disable: Disable Loop Protection Default Setting: enable Loop Protect Transmit Description: Set or

443 Loop Protect Port Configuration Description: Show Loop Protection port configuration. Syntax: Loop Protect Port Configuration [<port_list>

User’s Manual of NS3550-8T-2S 444 Default Setting: disable Example: Enable IGMP snooping NS3550-8T-2S:/>ipmc mode igmp enable IPMC Flooding D

User’s Manual of NS3550-8T-2S 445 Default Setting: disable Example: Enable IGMP Proxy NS3550-8T-2S:/>ipmc proxy igmp enable IPMC State Des

User’s Manual of NS3550-8T-2S 446 igmp: IPMC for IPv4 IGMP <port_list>: Port list or 'all', default: All ports enable : Enable MLD f

User’s Manual of NS3550-8T-2S 447 mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP <port_list>: Port list or 'all', default: All por

User’s Manual of NS3550-8T-2S 448 NS3550-8T-2S:/>ipmc version igmp 1 IPMC SSM Description: Show SSM related information for IPMC. Syntax: IPMC

User’s Manual of NS3550-8T-2S 449 Syntax: IPMC Parameter QRI [mld|igmp] [<vid>] [ipmc_param_qri] Parameters: mld|igmp : mld : IPMC for I

45 Main Menu Using the onboard web agent, you can define system parameters, manage and control the Industrial Managed Switch, and all its ports, or

User’s Manual of NS3550-8T-2S 450 VCL Macvlan Add <mac_addr> <vid> [<port_list>] Parameters: <mac_addr> : MAC address (xx-x

User’s Manual of NS3550-8T-2S 451 Add VCL protocol-based VLAN LLC protocol to group mapping. Syntax: VCL ProtoVlan Protocol Add Llc <dsap> &l

User’s Manual of NS3550-8T-2S 452 <group_id> : Protocol group ID VCL Protocol-based VLAN Configuration Description: Show VCL protocol-based

User’s Manual of NS3550-8T-2S 453

454 Default Setting: disable SMTP Auth_user Description: Set or show SMTP authentication user name configure. Syntax: SMTP Auth_user [<auth_user

455 Parameters: <mailfrom_text>: SMTP E-mail From address Default Setting: disable SMTP Mailsubject Description: Set or show SMTP e-mail subje

User’s Manual of NS3550-8T-2S 456 6.26 Ethernet Virtual Connections Command EVC Configuration Description: Show EVC configuration. Syntax: EVC Conf

User’s Manual of NS3550-8T-2S 457 EVC Policer Description: Set or show EVC bandwidth profile. Syntax: EVC Policer [<policer_id>] [enable|di

User’s Manual of NS3550-8T-2S 458 EVC Status Description: Show EVC Status. Syntax: EVC Status [<evc_id>] Parameters: <evc_id>: EVC I

User’s Manual of NS3550-8T-2S 459 evc : EVC keyword <evc_id> : EVC ID (1-128) or 'none' pop : Pop keyword <

User’s Manual of NS3550-8T-2S 46 4.2 System Use the System menu items to display and configure basic administrative details of the Industrial Manage

User’s Manual of NS3550-8T-2S 460 6.27 Ethernet Protection Switching Command EPS Create Description: EPS create. Syntax: EPS create [<inst&g

User’s Manual of NS3550-8T-2S 461 Get protection state. Syntax: EPS state [<inst>] Parameters: <inst>: Instance number 6.28 M

User’s Manual of NS3550-8T-2S 462 MEP Continuity Check Configuration Description: MEP Continuity Check configuration 'prio' is the prior

User’s Manual of NS3550-8T-2S 463 'cflow' is the client flow instance - up to 10 possible client flows (EVC). Syntax: MEP client config [

User’s Manual of NS3550-8T-2S 464 <mac_addr> : MAC address ('xx-xx-xx-xx-xx-xx' or 'xx.xx.xx.xx.xx.xx' or 'xxxxxxx

User’s Manual of NS3550-8T-2S 465 enable|disable: enable/disable MEP Test Signal Configuration Description: MEP Test Signal configuration 'se

User’s Manual of NS3550-8T-2S 466 MEP Link Trace state get. Syntax: MEP lt state [<inst>] Parameters: <inst> : Instance number

User’s Manual of NS3550-8T-2S 467 6.29 Ethernet Ring Protection Switching Command ERPS Command Description: Invoking an administrative command for

User’s Manual of NS3550-8T-2S 468 Syntax: Erps reversion [revertive|nonrevertive] <group-id> Parameters: revertive|nonrevertive: specifying r

User’s Manual of NS3550-8T-2S 469 Parameters: <rpl_port>: RPL Block <group-id>: protection group id 1 - 64 ERPS RPL Owner Description:

User’s Manual of NS3550-8T-2S 47 4.2.1 System Information The System Info page provides information for the current device information. System Info

User’s Manual of NS3550-8T-2S 470 ERPS Guard-timeout Description: configuring guard timeout for a protection group guard timeout should be configure

User’s Manual of NS3550-8T-2S 471 Syntax: Erps configuration [<group-id>] [statistics|clear] Parameters: <group-id> : protection

User’s Manual of NS3550-8T-2S 472 In a unicast Slave only clock you also need configure which master clocks to request Announce and Syn

User’s Manual of NS3550-8T-2S 473 PTP CurrentDS Description: Show PTP clock Current Data set. Syntax: PTP CurrentDS <clockinst> Parameters:

User’s Manual of NS3550-8T-2S 474 Syntax: PTP PortDataSet <clockinst> [<port_list>] [<announceintv>] [<announceto>] [<sy

User’s Manual of NS3550-8T-2S 475 <ap_enable>: true: Enable the 'P' component in regulator false: Disable the 'P' com

User’s Manual of NS3550-8T-2S 476 PTP MasterTableUnicast Description: Show the Unicast master table of the slaves that have requested unicast commun

User’s Manual of NS3550-8T-2S 477 PTP OnePpsAction Description: Show [and clear] One PPS statistics. Syntax: PTP OnePpsAction [<one_pps_clear>

478 7. SWITCH OPERATION 7.1 Address Table The Industrial Managed Switch is implemented with an address table. This address table composed of many ent

User’s Manual of NS3550-8T-2S 479 7.5 Auto-Negotiation The STP ports on the Industrial Managed Switch have built-in “Auto-negotiation”. This technol

User’s Manual of NS3550-8T-2S 48 Figure 4-2-2: IP Configuration Page Screenshot The current column is used to show the active IP configuration. Ob

480 8. TROUBLE SHOOTING This chapter contains information to help you solve problems. If the Industrial Managed Switch is not functioning properly, m

481  While IP Address be changed or forgotten admin password – To reset the IP address to the default IP Address “192.168.0.100” or reset the pas

User’s Manual of NS3550-8T-2S 482 APPENDEX A A.1 Switch's Data RJ-45 Pin Assignments - 1000Mbps, 1000Base-T Implicit implementation of

483 The standard cable, RJ-45 pin assignment The standard RJ-45 receptacle/connector There are 8 wires on a standard UTP/STP cable and each wire

User’s Manual of NS3550-8T-2S 484 APPENDEX B : GLOSSARY A ACE ACE is an acronym for Access Control Entry. It describes access permission associat

User’s Manual of NS3550-8T-2S 485 ARP ARP is an acronym for Address Resolution Protocol. It is a protocol that used to convert an IP address into

User’s Manual of NS3550-8T-2S 486 DHCP Relay is used to forward and to transfer DHCP messages between the clients and the server when they are not o

User’s Manual of NS3550-8T-2S 487 HTTP HTTP is an acronym for Hypertext Transfer Protocol. It is a protocol that used to transfer or convey inform

User’s Manual of NS3550-8T-2S 488 IP IP is an acronym for Internet Protocol. It is a protocol used for communicating data across a internet networ

User’s Manual of NS3550-8T-2S 489 MEP is an acronym for Maintenance Entity Endpoint and is an endpoint in a Maintenance Entity Group (ITU-T Y.1731).

User’s Manual of NS3550-8T-2S 49 Figure 4-2-3: IPv6 Configuration Page Screenshot The page includes the following fields: Object Description  A

User’s Manual of NS3550-8T-2S 490 Optional TLVs. A LLDP frame contains multiple TLVs For some TLVs it is configurable if the switch shall includ

User’s Manual of NS3550-8T-2S 491 PPPoE PPPoE is an acronym for Point-to-Point Protocol over Ethernet. It is a network protocol for encapsulating

User’s Manual of NS3550-8T-2S 492 RSTP and obsoletes STP, while at the same time being backwards-compatible with STP. S SAMBA Samba is a progra

User’s Manual of NS3550-8T-2S 493 Switch ID Switch IDs (1-16) are used to uniquely identify the switches within a stack. The Switch ID of each switc

User’s Manual of NS3550-8T-2S 494 UDP is an acronym for User Datagram Protocol. It is a communications protocol that uses the Internet Protocol (IP)

User’s Manual of NS3550-8T-2S 495 standard, and was intended as an intermediate measure to take the place of WEP while 802.11i was prepared. WPA is

User’s Manual of NS3550-8T-2S 5 4.8.14 MVR...

User’s Manual of NS3550-8T-2S 50 The page includes the following fields: Object Description  User Name The name identifies the user.  Privilege

User’s Manual of NS3550-8T-2S 51 Figure 4-2-6: User Configuration Page Screenshot After changing the default password, if you forget the passwor

User’s Manual of NS3550-8T-2S 52 Figure 4-2-7: Privilege Levels Configuration Page Screenshot

53 The page includes the following fields: Object Description  Group Name The name identifies the privilege group. In most cases, a privilege leve

54 4.2.6 NTP Configuration Configuring NTP on this page. NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks

User’s Manual of NS3550-8T-2S 55 Figure 4-2-9: UPnP Configuration Page Screenshot The page includes the following fields: Object Description  Mo

User’s Manual of NS3550-8T-2S 56 Figure 4-2-10: UPnP Devices shows on Windows My Network Places 4.2.8 DHCP Relay Configuring DHCP Relay on this pa

User’s Manual of NS3550-8T-2S 57 Figure 4-2-11: DHCP Relay Configuration Page Screenshot The page includes the following fields: Object Description

User’s Manual of NS3550-8T-2S 58  Receive Missing Circuit ID The number of packets received with the Circuit ID option missing.  Receive Missing

59 4.2.10 CPU Load This page displays the CPU load, using a SVG graph. The load is measured as averaged over the last 100ms, 1sec and 10 seconds inte

User’s Manual of NS3550-8T-2S 6 4.14.5 Neighbor ...

60 4.2.11 System Log The switch system log information is provided here. The System Log screen in Figure 4-2-14 appears. Figure 4-2-14: System Log P

User’s Manual of NS3550-8T-2S 61 Figure 4-2-15: Detailed Log Page Screenshot The page includes the following fields: Object Description  ID The

62 4.2.13 Remote Syslog Configure remote syslog on this page. The Remote Syslog screen in Figure 4-2-16 appears. Figure 4-2-16: Remote Syslog Page S

63 4.2.14 SMTP Configuration Configure SMTP Configuration on this page. The SMTP Configuration screen in Figure 4-2-17 appears. Figure 4-2-17: SMTP

64 Buttons : Click to test SMTP server address. : Click to save changes. : Click to undo any changes made locally and revert to previously saved valu

User’s Manual of NS3550-8T-2S 65 : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.2.16 We

User’s Manual of NS3550-8T-2S 66 Figure 4-2-21: TFTP Firmware Update Page Screenshot The page includes the following fields: Object Description 

User’s Manual of NS3550-8T-2S 67 configuration including syntax descriptions is included in the file. The file may then be modified using an editor

68 4.2.19 Configuration Upload This function allows backup and reload the current configuration of the Industrial Managed Switch to the local managem

69 4.2.20 Image Select This function provides dual image deposit in the Industrial Managed Switch, user can select any one of the image as Active ima

User’s Manual of NS3550-8T-2S 7 IPv6 Ping ...

User’s Manual of NS3550-8T-2S 70 Figure 4-2-30: Image Select Page Screenshot Figure 4-2-31: Image Select Page Screenshot After the system reboo

71 4.2.21 Factory Default You can reset the configuration of the stack switch on this page. Only the IP configuration is retained. The new configurat

72 4.2.22 System Reboot The Reboot page enables the device to be rebooted from a remote location. Once the Reboot button is pressed, user will re-acc

User’s Manual of NS3550-8T-2S 73 4.2.23 Daylight Saving The Reboot page enables the device to be rebooted from a remote location. Once the Reboot bu

User’s Manual of NS3550-8T-2S 74  Week (End Time Setting) Select the ending week number.  Day (End Time Setting) Select the ending day.  Month

User’s Manual of NS3550-8T-2S 75 4.3 Simple Network Management Protocol 4.3.1 SNMP Overview The Simple Network Management Protocol (SNMP) is an appl

User’s Manual of NS3550-8T-2S 76 Figure 4-3-1: SNMP System Configuration Page Screenshot The SNMP System Configuration page includes the following

User’s Manual of NS3550-8T-2S 77 Object Description 10. Trap Mode Indicates the SNMP trap mode operation. Possible modes are:  Enabled: Enable

78 4.3.3 SNMP System Information The switch system information is provided here. The SNMP System Information screen in Figure 4-3-2 appears. Figure

79 4.3.4 SNMPv3 Configuration 4.3.4.1 SNMPv3 Communities Configure SNMPv3 communities table on this page. The entry index key is Community. The SNMPv

User’s Manual of NS3550-8T-2S 8 Security Switch Access Mode...

80 4.3.4.2 SNMPv3 Users Configure SNMPv3 users table on this page. The entry index keys are Engine ID and User Name. The SNMPv3 Users screen in Figur

81 4.3.4.3 SNMPv3 Groups Configure SNMPv3 groups table on this page. The entry index keys are Security Model and Security Name. The SNMPv3 Groups scr

User’s Manual of NS3550-8T-2S 82 to 126.  View Type Indicates the view type that this entry should belong to. Possible view type are:  include

83 Buttons : Click to add a new access entry. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values

User’s Manual of NS3550-8T-2S 84  Configured Link Speed Select any available link speed for the given switch port. Draw the menu bar to select the

User’s Manual of NS3550-8T-2S 85 Figure 4-4-2: Port Statistics Overview Page Screenshot The displayed counters are: Object Description  Port The

86 4.4.3 Port Statistics Detail This page provides detailed traffic statistics for a specific switch port. Use the port select box to select which sw

87 Receive and Transmit Size Counters The number of received and transmitted (good and bad) packets split into categories based on their respective f

User’s Manual of NS3550-8T-2S 88 Figure 4-4-4: SFP Module Information for Switch Page Screenshot The page includes the following fields: Object De

89 4.4.5 Port Mirror Configure port Mirroring on this page. This function provide to monitoring network traffic that forwards a copy of each incoming

User’s Manual of NS3550-8T-2S 9 Security Network ACL Rate ...

90  Mirror Port Configuration The Port Mirror screen in Figure 4-4-6 appears. Figure 4-4-6: Mirror Configuration Page Screenshot The page includes

91 4.5 Link Aggregation Port Aggregation optimizes port usage by linking a group of ports together to form a single Link Aggregated Groups (LAGs). Po

User’s Manual of NS3550-8T-2S 92  Source MAC  Destination MAC  Source and destination IPv4 address.  Source and destination TCP/UDP ports fo

93 Static Aggregation Group Configuration The Aggregation Group Configuration screen in Figure 4-5-3 appears. Figure 4-5-3: Aggregation Group Config

User’s Manual of NS3550-8T-2S 94 4.5.2 LACP Configuration Link Aggregation Control Protocol (LACP) - LACP LAG negotiate Aggregated Port links with o

User’s Manual of NS3550-8T-2S 95 : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.5.3 LAC

User’s Manual of NS3550-8T-2S 96 Figure 4-5-6: LACP Status Page Screenshot The page includes the following fields: Object Description  Port The

User’s Manual of NS3550-8T-2S 97 Figure 4-5-7: LACP Statistics Page Screenshot The page includes the following fields: Object Description  Port

User’s Manual of NS3550-8T-2S 98 4.6 VLAN 4.6.1 VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a lo

User’s Manual of NS3550-8T-2S 99 IEEE 802.1Q Standard IEEE 802.1Q (tagged) VLAN are implemented on the Switch. 802.1Q VLAN require tagging, whic