48‐PORTGIGABITETHERNETPOE+LAYER2+MANAGED
SWITCHWITH10GBEUPLINK
USERMANUAL
Model561112
TableofContents
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|2
FCCWarning
ThisEquipmenthasbeentestedandfoundtocomplywiththelimitsforaClass‐Adigitaldevice,
pursuanttoPart15oftheFCCrules.Theselimitsaredesignedtoprovidereasonableprotection
againstharmfulinterferenceinaresidentialinstallation.Thisequipmentgenerates,uses,andcan
radiateradiofrequencyenergy.Itmaycauseharmfulinterferencetoradiocommunicationsifthe
equipmentisnotinstalledandusedinaccordancewiththeinstructions.However,thereisno
guaranteethatinterferencewillnotoccurinaparticularinstallation.Ifthisequipmentdoescause
harmfulinterferencetoradioortelevisionreception,whichcanbedeterminedbyturningthe
equipmentoffandon,theuserisencouragedtotrytocorrecttheinterferencebyoneormoreofthe
followingmeasures:
Reorientorrelocatethereceivingantenna.
Increasetheseparationbetweentheequipmentandreceiver.
Connecttheequipmentintoanoutletonacircuitdifferentfromthattowhichthereceiveris
connected.
Consultthedealeroranexperiencedradio/TVtechnicianforhelp.
CEMarkWarning
ThisisaClass‐Bproduct.Inadomesticenvironmentthisproductmaycauseradiointerferencein
whichcasetheusermayberequiredtotakeadequatemeasures.
TableofContents
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|3
Table of Contents
BeforeStarting................................................................................................................................................9
IntendedReaders......................................................................................................................................10
IconsforNote,Caution,andWarning......................................................................................................10
ProductPackageContents........................................................................................................................11
Chapter1:ProductOverview....................................................................................................................12
1.1.ProductBriefDescription..................................................................................................................13
1.2.ProductSpecification.........................................................................................................................14
1.3.HardwareDescription........................................................................................................................17
1.4.HardwareInstallation........................................................................................................................19
Chapter2:PreparingforManagement.....................................................................................................20
2.1.PreparationforWebInterface...........................................................................................................21
Chapter3:WebManagement...................................................................................................................23
3.1.WebManagement‐Configure..........................................................................................................24
3.1.1.Configuration‐System...............................................................................................................26
3.1.1.1.System‐Information...........................................................................................................26
3.1.1.2.System‐IP............................................................................................................................27
3.1.1.3.System‐NTP........................................................................................................................31
3.1.1.4.System‐Time.......................................................................................................................32
3.1.1.5.System‐Log.........................................................................................................................34
3.1.2.Configuration‐GreenEthernet..................................................................................................35
3.1.2.1.GreenEthernet‐LED...........................................................................................................35
3.1.2.2.GreenEthernet‐PortPowerSavings..................................................................................37
3.1.3.Configuration‐Ports...................................................................................................................39
3.1.4.Configuration‐DHCP..................................................................................................................41
3.1.4.1.DHCP‐Server.......................................................................................................................41
3.1.4.1.1.DHCP‐Server‐Mode...................................................................................................41
3.1.4.1.2.DHCP‐Server‐ExcludedIP..........................................................................................43
3.1.4.1.3.DHCP‐Server‐Pool.....................................................................................................44
3.1.4.2.DHCP‐Snooping..................................................................................................................46
3.1.4.3.DHCP‐Relay.........................................................................................................................47
3.1.5.Configuration‐Security..............................................................................................................49
3.1.5.1.Security‐Switch‐Users......................................................................................................49
3.1.5.2.Security‐Switch‐PrivilegeLevel........................................................................................51
3.1.5.3.Security‐Switch‐AuthenticationMethod.........................................................................53
TableofContents
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|4
3.1.5.4.Security‐Switch‐SSH.........................................................................................................54
3.1.5.5.Security‐Switch‐HTTPS.....................................................................................................55
3.1.5.6.Security‐Switch‐AccessManagement..............................................................................56
3.1.5.7.Security‐Switch‐SNMP.....................................................................................................58
3.1.5.7.1.Security‐Switch‐SNMP‐System...............................................................................58
3.1.5.7.2.Security‐Switch‐SNMP‐Community........................................................................62
3.1.5.7.3.Security‐Switch‐SNMP‐User....................................................................................63
3.1.5.7.4.Security‐Switch‐SNMP‐Groups...............................................................................65
3.1.5.7.5.Security‐Switch‐SNMP‐Views.................................................................................66
3.1.5.7.6.Security‐Switch‐SNMP‐Access................................................................................67
3.1.5.8.Security‐Switch‐RMON....................................................................................................67
3.1.5.8.1.Security‐Switch‐RMON‐Statistics............................................................................68
3.1.5.8.2.Security‐Switch‐RMON‐History..............................................................................69
3.1.5.8.3.Security‐Switch‐RMON‐Alarm................................................................................70
3.1.5.8.4.Security‐Switch‐RMON‐Event.................................................................................72
3.1.5.9.Security‐Network‐LimitControl.......................................................................................73
3.1.5.10.Security‐Network‐NAS(NetworkAccessServer)..........................................................77
3.1.5.11.Security‐Network‐ACL....................................................................................................90
3.1.5.11.1.Security‐Network‐ACL‐Ports.................................................................................90
3.1.5.11.2.Security‐Network‐ACL‐RateLimiter......................................................................92
3.1.5.11.3.Security‐Network‐ACL‐AccessControlList...........................................................93
3.1.5.12.Security‐Network‐IPSourceGuard..............................................................................110
3.1.5.12.1.Security‐Network‐IPSourceGuard‐Configuration.............................................110
3.1.5.12.2.Security‐Network‐IPSourceGuard‐StaticTable.................................................111
3.1.5.13.Security‐Network‐ARPInspection...............................................................................112
3.1.5.13.1.Security‐Network‐ARPInspection‐Configuration..............................................112
3.1.5.13.2.Security‐Network‐ARPInspection‐StaticTable..................................................113
3.1.5.14.Security‐AAA..................................................................................................................114
3.1.6.Configuration‐Aggregation.....................................................................................................118
3.1.6.1.Aggregation‐Static............................................................................................................118
3.1.6.2.Aggregation‐LACP............................................................................................................120
3.1.7.Configuration‐LoopProtection...............................................................................................123
3.1.8.Configuration‐SpanningTree..................................................................................................125
3.1.8.1.SpanningTree‐BridgeSettings.........................................................................................125
3.1.8.2.SpanningTree‐MSTIMapping.........................................................................................127
3.1.8.3.SpanningTree‐MSTIPriorities.........................................................................................129
TableofContents
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|5
3.1.8.4.SpanningTree‐CISTPorts.................................................................................................130
3.1.8.5.SpanningTree‐MSTIPorts................................................................................................133
3.1.9.Configuration‐IPMCProfile.....................................................................................................135
3.1.9.1.IPMCProfile‐ProfileTable................................................................................................135
3.1.9.2.IPMCProfile‐AddressEntry.............................................................................................137
3.1.10.Configuration‐MVR...............................................................................................................138
3.1.11.Configuration‐IPMC...............................................................................................................142
3.1.11.1.IPMC‐IGMPSnooping....................................................................................................142
3.1.11.1.1.IPMC‐IGMPSnooping‐BasicConfiguration..........................................................142
3.1.11.1.2.IPMC‐IGMPSnooping‐VLANConfiguration..........................................................144
3.1.11.1.3.IPMC‐IGMPSnooping‐PortGroupFiltering.........................................................146
3.1.11.2.IPMC‐MLDSnooping......................................................................................................147
3.1.11.2.1.IPMC‐MLDSnooping‐BasicConfiguration............................................................147
3.1.11.2.2.IPMC‐MLDSnooping‐VLANConfiguration...........................................................149
3.1.11.2.3.IPMC‐MLDSnooping‐PortGroupFiltering...........................................................151
3.1.12.Configuration‐LLDP...............................................................................................................152
3.1.12.1.LLDP‐LLDP.......................................................................................................................152
3.1.12.2.LLDP‐LLDP‐MED..............................................................................................................155
3.1.13.Configuration‐PoE.................................................................................................................163
3.1.14.Configuration‐MACTable......................................................................................................166
3.1.15.Configuration‐VLANs.............................................................................................................168
3.1.15.1.VLANs‐VLANMembership.............................................................................................168
3.1.15.2.VLANs‐Ports...................................................................................................................170
3.1.16.Configuration‐PrivateVLAN..................................................................................................172
3.1.16.1.PrivateVLAN‐PortIsolation.......................................................................................172
3.1.17.Configuration‐VCL.................................................................................................................173
3.1.17.1.VCL‐MAC‐basedVLAN....................................................................................................173
3.1.17.2.VCL‐Port‐basedVLAN.....................................................................................................175
3.1.17.2.1.VCL‐Port‐basedVLAN‐ProtocoltoGroup.............................................................175
3.1.17.2.2.VCL‐Port‐basedVLAN‐GrouptoVLAN..................................................................177
3.1.17.3.VCL‐IPSubnet‐basedVLAN............................................................................................178
3.1.18.Configuration‐VoiceVLAN....................................................................................................180
3.1.18.1.VoiceVLAN‐Configuration.............................................................................................180
3.1.18.2.VoiceVLAN‐OUI.............................................................................................................183
3.1.19.Configuration‐QoS.................................................................................................................184
3.1.19.1.QoS‐PortClassification..................................................................................................184
TableofContents
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|6
3.1.19.2.QoS‐PortPolicing...........................................................................................................186
3.1.19.3.QoS‐PortScheduler........................................................................................................187
3.1.19.4.QoS‐PortShaping...........................................................................................................192
3.1.19.5.QoS‐PortTagRemarking................................................................................................197
3.1.19.6.QoS‐PortDSCP...............................................................................................................200
3.1.19.7.QoS‐DSCP‐BasedQoS.....................................................................................................202
3.1.19.8.QoS‐DSCPTranslation....................................................................................................203
3.1.19.9.QoS‐DSCPClassification.................................................................................................204
3.1.19.10.QoS‐StormControl.......................................................................................................205
3.1.19.11.QoS‐WRED....................................................................................................................206
3.1.20.Configuration‐Mirroring.......................................................................................................208
3.1.21.Configuration‐UPnP..............................................................................................................210
3.1.22.Configuration‐GVRP..............................................................................................................211
3.1.22.1.GVRP‐GlobalConfig.......................................................................................................211
3.1.22.2.GVRP‐PortConfig...........................................................................................................212
3.1.23.Configuration‐sFlow..............................................................................................................213
3.2.WebManagement‐Monitor...........................................................................................................216
3.2.1.Monitor‐System......................................................................................................................216
3.2.1.1.System‐Information.........................................................................................................216
3.2.1.2.System‐CPULoad.............................................................................................................218
3.2.1.3.System‐IPStatus...............................................................................................................219
3.2.1.4.System‐Log.......................................................................................................................221
3.2.1.5.System‐DetailedLog........................................................................................................222
3.2.2.Monitor‐GreenEthernet.........................................................................................................223
3.2.2.1.GreenEthernet‐PortPowerSavingsStatus.....................................................................223
3.2.3.Monitor‐Ports..........................................................................................................................224
3.2.3.1.Ports‐State........................................................................................................................224
3.2.3.2.Ports‐TrafficOverview.....................................................................................................225
3.2.3.3.Ports‐QoSStatistics..........................................................................................................227
3.2.3.4.Ports‐DetailedStatistics...................................................................................................228
3.2.4.Monitor‐DHCP.........................................................................................................................231
3.2.4.1.DHCP‐Server.....................................................................................................................231
3.2.4.1.1.DHCP‐Server‐Statistics............................................................................................231
3.2.4.1.2.DHCP‐Server‐Binding..............................................................................................233
3.2.4.1.3.DHCP‐Server‐DeclinedIP........................................................................................234
3.2.4.2.DHCP‐SnoopingTable......................................................................................................235
TableofContents
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|7
3.2.4.3.DHCP‐RelayStatistics.......................................................................................................237
3.2.4.4.DHCP‐DetailedStatistics..................................................................................................239
3.2.5.Monitor‐Security.....................................................................................................................242
3.2.5.1.Security‐AccessManagementStatistics..........................................................................242
3.2.5.2.Security‐Network.............................................................................................................243
3.2.5.2.1.Security‐Network‐PortSecurity‐Switch................................................................243
3.2.5.2.2.Security‐Network‐PortSecurity‐Port....................................................................246
3.2.5.2.3.Security‐Network‐NAS‐Switch..............................................................................247
3.2.5.2.4.Security‐Network‐NAS‐Port..................................................................................249
3.2.5.2.5.Security‐Network‐ACLStatus..................................................................................254
3.2.5.2.6.Security‐Network‐ARPInspection..........................................................................256
3.2.5.3.Security‐Network.............................................................................................................260
3.2.5.3.1.Security‐AAA‐RADIUSOverview.............................................................................260
3.2.5.3.2.Security‐AAA‐RADIUSDetails.................................................................................262
3.2.5.4.Security‐Switch‐RMON..................................................................................................266
3.2.5.4.1.Security‐Switch‐RMON‐Statistics..........................................................................266
3.2.5.4.2.Security‐Switch‐RMON‐History............................................................................269
3.2.5.4.3.Security‐Switch‐RMON‐Alarm..............................................................................271
3.2.5.4.4.Security‐Switch‐RMON‐Events..............................................................................273
3.2.6.Monitor‐LACP..........................................................................................................................275
3.2.6.1.LACP‐SystemStatus.........................................................................................................275
3.2.6.2.LACP‐PortStatus..............................................................................................................276
3.2.6.3.LACP‐PortStatistics..........................................................................................................278
3.2.7.Monitor‐LoopProtection........................................................................................................279
3.2.8.Monitor‐SpanningTree...........................................................................................................280
3.2.8.1.SpanningTree‐BridgeStatus............................................................................................280
3.2.8.2.SpanningTree‐PortStatus...............................................................................................281
3.2.8.3.SpanningTree‐PortStatistics...........................................................................................282
3.2.9.Monitor‐MVR..........................................................................................................................283
3.2.9.1.MVR‐Statistics..................................................................................................................283
3.2.9.2.MVR‐MVRChannelGroups.............................................................................................284
3.2.9.3.MVR‐MVRSFMInformation............................................................................................286
3.2.10.Monitor‐IPMC.......................................................................................................................288
3.2.10.1.IPMC‐IGMPSnooping....................................................................................................288
3.2.10.1.1.IPMC‐IGMPSnooping‐Status................................................................................288
3.2.10.1.2.IPMC‐IGMPSnooping‐GroupsInformation..........................................................290
TableofContents
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|8
3.2.10.1.3.IPMC‐IGMPSnooping‐IPv4SFMInformation......................................................292
3.2.10.2.IPMC‐MLDSnooping......................................................................................................294
3.2.10.2.1.IPMC‐MLDSnooping‐Status..................................................................................294
3.2.10.2.2.IPMC‐MLDSnooping‐GroupsInformation...........................................................296
3.2.10.2.3.IPMC‐MLDSnooping‐IPv6GroupInformation.....................................................297
3.2.11.Monitor‐LLDP........................................................................................................................299
3.2.11.1.LLDP‐Neighbours............................................................................................................299
3.2.11.2.LLDP‐LLDP‐MEDNeighbours..........................................................................................301
3.2.11.3.LLDP‐PoE.........................................................................................................................305
3.2.11.4.LLDP‐EEE.........................................................................................................................307
3.2.11.5.LLDP‐PortStatistics........................................................................................................309
3.2.12.Monitor‐PoE..........................................................................................................................311
3.2.13.Monitor‐MACTable...............................................................................................................314
3.2.14.Monitor‐VLANs.....................................................................................................................317
3.2.14.1.VLANs‐VLANMembership.............................................................................................317
3.2.14.2.VLANs‐VLANPorts.........................................................................................................319
3.2.15.Monitor‐sFlow.......................................................................................................................321
3.3.WebManagement‐Diagnostics.....................................................................................................323
3.3.1.Diagnostics‐Ping......................................................................................................................323
3.3.2.Diagnostics‐Ping6....................................................................................................................325
3.3.3.Diagnostics‐VeriPHY................................................................................................................326
3.4.WebManagement‐Maintenance..................................................................................................328
3.4.1.Maintenance‐RestartDevice..................................................................................................328
3.4.2.Maintenance‐FactoryDefaults...............................................................................................329
3.4.3.Maintenance‐SoftwareUpload..............................................................................................330
3.4.3.Maintenance‐Configuration....................................................................................................331
3.4.3.1.Configuration‐Save...........................................................................................................331
3.4.3.2.Configuration‐Load..........................................................................................................332
AppendixA:ProductSafety........................................................................................................................333
AppendixB:IPConfigurationforYourPC..................................................................................................334
AppendixC:Glossary..................................................................................................................................338
BeforeYouBegin
Thissectioncontainsintroductoryinformation,whichincludes:
IntendedReaders
IconsforNote,Caution,andWarning
ProductPackageContents
BeforeStarting
IntendedReaders
Thismanualprovidesinformationregardingtoalltheaspectsandfunctionsneededtoinstall,
configure,use,andmaintaintheproductyou’vepurchased.
Thismanualisintendedfortechnicianswhoarefamiliarwithin‐depthconceptsofnetworking
managementandterminologies.
IconsforNote,Caution,andWarning
Toinstall,configure,use,andmaintainthisproductproperly,pleasepayattentionwhenyousee
theseiconsinthismanual:
ANoteiconindicatesimportantinformationwhichwillguideyoutousethis
productproperly.
ACautioniconindicateseitherapotentialforhardwaredamageordataloss,
includinginformationthatwillguideyoutoavoidthesesituations.
AWarningiconindicatespotentialsforpropertydamageandpersonalinjury.
BeforeStarting
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|11
ProductPackageContents
Beforestartinginstallthisproduct,pleasecheckandverifythecontentsoftheproductpackage,
whichshouldincludethefollowingitems:
OneNetworkSwitch
OnePowerCord
OneUserManualCD
OnepairRack‐mountkit+8Screws
Note:Ifanyitemlistedinthistableaboveismissingordamaged,pleasecontactyourdistributoror
retailerassoonaspossible.
Chapter1:
ProductOverview
InProductOverview:
Thissectionwillgiveyouanoverviewofthisproduct,includingitsfeaturefunctionsand
hardware/softwarespecifications.
ProductBriefDescription
ProductSpecification
HardwareDescription
HardwareInstallation
Chapter1:ProductOverview
ProductBriefDescription
1.1.ProductBriefDescription
Introduction
Theswitchis48‐port10/100/1000Base‐T+2×10GigabitSFP+PortsRack‐mountL2+Full
ManagementNetworkSwitchthatisdesignedformediumorlargenetworkenvironmentto
strengthenitsnetworkconnection.Theswitchsupports136Gnon‐blockingswitchfabric,the48
gigabitportsand2uplink10Gportscantransmitandreceivedatatrafficwithoutanylost.TheEEE
featurereducesthepowerconsumptionwhenthereisnotrafficforwardingevenportisstill
connected.TheswitchalsosupportsLayer2+fullmanagementsoftwarefeatures.Thesefeaturesare
powerfultoprovidenetworkcontrol,management,monitorandsecurityfeaturerequests.Including
rack‐mountbrackets,the19"sizefitsintoyourrackenvironment.Itisasuperbchoicetoboostyour
networkwithbetterperformanceandefficiency.
210GigabitSFP+OpenSlots
Theswitchequipswith210GSFP+openslotsastheuplinkports,the10Guplinkdesignprovidesan
excellentsolutionforexpandingyournetworkfrom1Gto10G.By10Gspeed,thisproductprovides
highflexibilityandhighbandwidthconnectivitytoanother10GswitchortheServers,Workstations
andotherattacheddeviceswhichsupport10Ginterfaces.Theusercanalsoaggregatethe10Gports
asTrunkgrouptoenlargethebandwidth.
FullLayer2ManagementFeatures
TheswitchincludesfullLayer2+Managementfeatures.Thesoftwaresetincludesupto4K802.1Q
VLANandadvancedProtocolVLAN,PrivateVLAN,MVR…features.Thereare8physicalqueues
QualityofService,IPv4/v6Multicastfiltering,RapidSpanningTreeprotocoltoavoidnetworkloop,
MultipleSpanningTreeProtocoltointegrateVLANandSpanningTree,LACP,LLDP;sFlow,port
mirroring,cablediagnosticandadvancedNetworkSecurityfeatures.ItalsoprovidesConsoleCLIfor
outofbandmanagementandSNMP,WebGUIforinbandManagement.
Chapter1:ProductOverview
ProductSpecification
1.2.ProductSpecification
Interface
10/100/1000BaseRJ45Ports48
10GUplinkSFP+Slot2
ConsolePortforCLIManagement1
SystemPerformance
PacketBuffer64Mb
MACAddressTableSize64K
SwitchingCapacity136Gbps
PoEFeatures
IEEE802.3af/at IEEE802.3af/at
NumberofPSEPorts48
Max.PowerConsumption500W
External/InternalPowerInternalPower
PowerFeedingDetectingCapabilityonPD
PDAliveCheck
PDClassification
PowerManagement
(per‐port)
Enable/DisablePoEPerPort
PrioritySettingPerPort
PowerLevelSettingPerPort
OverloadingProtection
L2Features
Auto‐negotiation
AutoMDI/MDIX
FlowControl(duplex)802.3x(Full)
Back‐Pressure(Half)
SpanningTree
IEEE802.1D(STP)
IEEE802.1w(RSTP)
IEEE802.1s(MSTP)
VLAN
VLANGroup 4K
TaggedBased
Port‐based
LinkAggregation
IEEE802.3adwithLACP
StaticTrunk
Max.LACPLinkAggregationGroup26
IGMPSnooping
IGMPSnoopingv1/v2/v3
IPv6MLDSnooping
Querier,ImmediateLeave
StormControl(Broadcast/Multi‐cast/Un‐knownUnicast)
JumboFrameSupport10K
Chapter1:ProductOverview
ProductSpecification
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|15
QoSFeatures
Numberofpriorityqueue8queues/port
RateLimitingIngressYes,1KBps/1pps
EgressYes,1KBps/1pps
DiffServ(RFC2474Remarking)
Scheduling(WRR,Strict,Hybrid)
CoSIEEE802.1p
IPToSprecedence,IPDSCP
Security
ManagementSystemUserName/PasswordProtection
UserPrivilegeSetuserprivilegeupto15Level
PortSecurity(MAC‐based)
IEEE802.1xPort‐basedAccessControl
ACL(L2/L3/L4)
IPSourceGuard
RADIUS(Authentication,Authorization,Accounting)
TACACS+
HTTP&SSL(SecureWeb)
SSHv2.0(SecuredTelnetSession)
MAC/IPFilter
Management
CommandLineInterface(CLI)
WebBasedManagement
Telnet
AccessManagementFilteringSNMP/WEB/SSH/TELNET
FirmwareUpgradeviaHTTP
DualFirmwareImages
ConfigurationDownload/Upload
SNMP(v1/v2c/v3)
RMON(1,2,3,&9groups)
DHCP(Client/Relay/Option82/Snooping)
SystemEvent/ErrorLog
NTP/LLDP
CableDiagnostics
IPv6Configuration
PortMirroringOnetoOneorManytoOne
Mechanical
PowerInput100~240VAC
Dimension(H*W*D)44*440*331mm
LEDLink,PoE,SFP+
OperatingTemperature0~45°C
OperatingHumidity5~90%(non‐condensing)
Weight4.8KG
Certification CE,FCCClassB
Chapter1:ProductOverview
ProductSpecification
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|16
Standard
IEEE802.3–10BaseT
IEEE802.3u‐100BaseTX
IEEE802.3ab‐1000BaseT
IEEE802.3ae10GBaseSX/LX
IEEE802.3afPoweroverEthernet(PoE)
IEEE802.3atPoweroverEthernet(PoE+)
IEEE802.3az‐EnergyEfficientEthernet(EEE)
IEEE802.3x‐FlowControl
IEEE802.1Q‐VLAN
IEEE802.1v‐ProtocolVLAN
IEEE802.1p‐ClassofService
IEEE802.1D‐SpanningTree
IEEE802.1w‐RapidSpanningTree
IEEE802.1s‐MultipleSpanningTree
IEEE802.3ad‐LinkAggregationControlProtocol(LACP)
IEEE802.1AB‐LLDP(LinkLayerDiscoveryProtocol)
IEEE802.1X‐AccessControl
Chapter1:ProductOverview
HardwareDescription
1.3.HardwareDescription
ThissectionmainlydescribesthehardwareofFull‐ManagementPoEswitchandgivesaphysicaland
functionaloverviewonthecertainswitch.
FrontPanel
Thefrontpaneloftheswitchconsistsof4810/100/1000Base‐TXRJ‐45portsand210GigabitSFP+
ports.TheLEDsarealsolocatedonthefrontpanel.
LEDIndicators
TheLEDIndicatorspresentreal‐timeinformationofsystematicoperationstatus.Eachoftheswitch’s
RJ45porthastwoLEDs,thegreenLEDindicatesRJ45connectionstatus/datalink,andtheamberLED
indicatesifthatportisprovidingelectricalpower.
Also,port49andport50(SFP+Ports)hastheirownLEDsthatindicatedatalinkstatusasshownin
thefigurebelow:
LEDColor/StatusDescriptionNo.ofLEDs
10/100/1000MGreenOnLinkUp1~48
GreenBlinking DataActivating
PoEAmberOn PDisconnected 1~48
SFP+
GreenOn FiberConnected 49~50
GreenBlinkingReceiving/Transmitting
Data49~50
Chapter1:ProductOverview
ProductSpecification
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|18
RearPanel
TherearpaneloftheFull‐ManagementPoEswitchcontains2ventilationfans,apowerswitch,and
anIEC60320plugforpowersupply.
Chapter1:ProductOverview
HardwareInstallation
1.4.HardwareInstallation
ToinstalltheFull‐ManagementPoEswitch,pleaseplaceitonalargeflatsurfacewithapowersocket
closeby.Thissurfaceshouldbeclean,smooth,andlevel.Also,pleasemakesurethatthereisenough
spacearoundtheFull‐ManagementPoEswitchforRJ45cable,powercordandventilation.
Ifyou’reinstallingthisFull‐ManagementPoEswitchona19‐inchrack,pleasemakesuretousethe
rack‐mountkit(Lbrackets)andscrewscomewiththeproductpackage.Allscrewsmustbefastened
sotherack‐mountkitandyourproductaretightlyconjoinedbeforeinstallingitonyour19‐inchrack.
EthernetcableRequest
Thewiringcabletypesareasbelow:
10Base‐T:2‐pairUTP/STPCAT.3,4,5cable,EIA/TIA‐568100‐ohm(Max.100m)
100Base‐TX:2‐pairUTP/STPCAT.5cable,EIA/TIA‐568100‐ohm(Max.100m)
1000Base‐T:4‐pairUTP/STPCAT.5cable,EIA/TIA‐568100‐ohm(Max.100m)
PoE:Todeliverypowerproperly,itisrecommendedtouseCAT5eandCAT6cable.Ethernet
cablesofhigherqualitiescanreducethepowerlostduringtransmission.
SFPInstallation
WhileinstalltheSFPtransceiver,makesuretheSFPtypeofthe2endsisthesameandthe
transmissiondistance,wavelength,fibercablecanmeetyourrequest.Itissuggestedtopurchasethe
SFPtransceiverwiththeswitchprovidertoavoidanyincompatibleissue.
ThewaytoconnecttheSFPtransceiveristoPluginSFPfibertransceiverfist.TheSFPtransceiverhas
2plugforfibercable,oneisTX(transmit),theotherisRX(receive).Cross‐connectthetransmit
channelateachendtothereceivechannelattheoppositeend.
Formoreinformationregardingtotheproductsafetyandmaintenanceguide,pleasereferto
AppendixA:ProductSafety.
Chapter2:
PreparingforManagement
InPreparingforManagement:
Thissectionwillguideyourhowtomanagethisproductviamanagementwebpage.
PreparationforWebInterface
Chapter2:PreparingforManagement
PreparationforWebInterface
2.1.PreparationforWebInterface
Themanagementwebpageallowsyoutouseawebbrowser(suchasMicrosoftIE,GoogleChrome,
orMozillaFirefox)toconfigureandmonitortheswitchfromanywhereonthenetwork.
Beforeusingthewebinterfacetomanageyourswitch,pleaseverifythatyourswitchandyourPCare
onthesamenetwork.PleasefollowthestepsdownbelowtoconfigureyourPCproperly:
1. Verifythatthenetworkinterfacecard(NIC)ofyourPCisoperationalandproperlyinstalled,and
thatyouroperatingsystemsupportsTCP/IPprotocol.
2. ConnectyourPCwiththeswitchviaanRJ45cable.
3. ThedefaultIPaddressoftheswitchis192.168.2.1.TheswitchandyourPCshouldlocatewithin
thesameIPSubnet.ChangeyourPC'sIPaddressto192.168.2.X,whereXcanbeanynumber
from2to254.PleasemakesurethattheIPaddressyou’veassignedtoyourPCcannotbethe
samewiththeswitch.
4. Launchthewebbrowser(IE,Firefox,orChrome)onyourPC.
5. Type192.168.2.1(ortheIPaddressoftheswitch)inthewebbrowser’sURLfield,andpress
Enter.
Chapter2:PreparingforManagement
PreparationforWebInterface
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|22
6. Thewebbrowserwillpromptyoutosignin.Thedefaultusername/passwordforthe
configurationwebpageisadmin/1234.
Formoreinformation,pleasereferto
AppendixB:IPConfigurationforYourPC.
Chapter3:
WebManagement
InWebManagement:
AsmentionedinChapter2.2.PreparationforWebInterface,Thisswitchprovidesa
web‐basedmanagementinterface.Youcanmakeallsettingsandmonitorsystemstatus
withthismanagementwebpage.
Configuration/Monitoroptionsincludedinthemanagementwebpagecanbedivided
intothefollowing4categories,whichwillbediscussedindetailinthischapter:
WebManagement‐Configure
WebManagement‐Monitor
WebManagement‐Diagnostic
WebManagement‐Maintenance
Chapter3:WebManagement
WebManagement‐Configure
3.1.WebManagement‐Configure
Inhereyoucanaccessalltheconfigurationoptionsoftheswitch.Theconfigurationoptionshere
include:
System:Hereyoucanconfigurebasicsystemsettingssuchassysteminformation,switchIP,NTP,
systemtimeandlog.
GreenEthernet:YoucanenableEEE(EnergyEfficientEthernet)functiononeachportoradjust
LEDflashingintensitytoconserveandsavepowerusedbytheswitch.
Ports:Youcanviewtheconnectionstatusofalltheportsontheswitch,aswellassetport
connectionspeed,flowcontrol,maximumframelength,andpowercontrolmode.
DHCP:HereyoucansetDHCPsnoopingandDHCPrelay,aswellasIPsettings.
Security:TheSecurityoptionallowsyoutomakesettingsthatsecuresboththeswitchitselfor
yournetwork.
Aggregation:Aggregationallowsyoutocombinemultiplephysicalportsintoalogicalport,thus
allowsthetransmittingspeedexceedingthelimitofasingleport.
LoopProtection:Anetworkloopmightcausebroadcaststormandparalyzeyourentire
network.Youcanenableloopprotectionfunctionheretopreventnetworkloop.
SpanningTree:SpanningTreeProtocolisanetworkdesignedtoensurealoop‐freenetwork
andprovideredundantlinksthatserveasautomaticbackuppathsifanactivelinkfails.This
switchsupportsSTP,RSTP(RapidSTP),andMSTP(MultipleSTP).
IPMCProfile:IPMCstandsforIPMulti‐Cast.TheIPMCprofileisusedtodeploytheaccess
controlonIPmulticaststreams.Itisallowedtocreateatmaximum64Profileswithat
maximum128correspondingrulesforeach.
MVR:MVRstandsforMultipleVLANRegistration,aprotocolthatallowssharingmulticastVLAN
informationandconfiguringitdynamicallywhenneeded.
IPMC:HereyoucansetIGMPsnooping(forIPv4)orMLDsnooping(forIPv6).Theseprotocols
canreducethenetworkloadingwhilerunningband‐widthdemandingapplicationssuchas
streamingvideosbyeliminatingexcessivedatatransmitting.
LLDP:LLDPstandsforLinkLayerDiscoveryProtocol,aprotocolthatallowstheswitchto
advertiseitsidentity,capabilities,andneighborsonthenetwork.
PoE:Hereyoucanenable/disablethePoEfunctiononeachportorassignthepower(inWatt)
foreachport.
MACTable:Whenanetworkdeviceisconnectedtotheswitch,theswitchwillkeepitsMAC
addressontheMACtable.Thissectionprovidessettingsfortheswitch’sMACaddresstable.
Chapter3:WebManagement
WebManagement‐Configure
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|25
VLANs:VLANstandsforVirtualLAN,whichallowsyoutoseparateportsintodifferentVLAN
groups.OnlymemberofthesameVLANgroupcantransmit/receivepacketsamongeachother,
whileotherportsindifferentVLANgroupcan’t.Hereyoucansetport‐basedVLAN.
PrivateVLANs:Alsoknownasportisolation.OnlythesamememberintheprivateVLANcan
communicatewitheachother.
VCL:HereyoucansetMAC‐basedVLAN,Protocol‐basedVLAN,andIPSubnet‐basedVLAN.
VoiceVLAN:VoiceVLANisaspecificVLANforvoicecommunication(suchasVoIPphones)that
canensurethetransmissionpriorityofvoicetrafficandvoicequality.
QoS:QoSstandsforQualityofService,whichallowsyoutocontrolthenetworkpriority(which
packetgetstopprioritytotransmitandwhichgetslowpriority)viaIEEE802.1porDSCP.
Mirroring:Forpurposessuchasnetworkdiagnostics,youcandirectpackets
transmitted/receivedto/fromaport(ormultipleports)toadesignatedport.
UPnP:UPnPstandsforUniversalPlugandPlay,aprotocolthatallowsallthedevicesonthe
samenetworkcandiscovereachotherandestablishingnetworkservicessuchasdatasharing.
YoucansetUPnPhereinthismanagementpage.
GVRP:GVRPstandsforGARPVLANRegistrationProtocol,aprotocolthatfacilitatescontrolof
virtuallocalareanetworks(VLANs)withinalargernetwork.
sFlow:sFlowisanindustrystandardtechnologyformonitoringswitchednetworksthrough
randomsamplingofpacketsonswitchportsandtime‐basedsamplingofportcounters.The
sampledpacketswillbesenttothedesignatedsFlowreceiver(host)forsystemadministrator
foranalysis.
Chapter3:WebManagement
System‐Information
3.1.1.Configuration‐System
3.1.1.1.System‐Information
Theswitchsysteminformationisprovidedhere.
SystemContact
Thetextualidentificationofthecontactpersonforthismanagednode,togetherwithinformationon
howtocontactthisperson.Theallowedstringlengthis0to255,andtheallowedcontentistheASCII
charactersfrom32to126.
SystemName
Youcaninputanassignednameforthisswitch.Byconvention,thisistheswitch'sfully‐qualified
domainname.Adomainnameisatextstringdrawnfromthealphabet(A‐Z&a‐z),digits(0‐9),minus
sign(‐).Nospacecharactersarepermittedaspartofaname.Thefirstcharactermustbeanalpha
character.Andthefirstorlastcharactermustnotbeaminussign.Theallowedstringlengthis0to
255.
SystemLocation
Thephysicallocationofthisnode(e.g.,telephonecloset,3rdfloor).Theallowedstringlengthis0to
255,andtheallowedcontentistheASCIIcharactersfrom32to126.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
System‐IPv6
3.1.1.2.System‐IP
ConfigureIPbasicsettings,controlIPinterfacesandIProutes.
Themaximumnumberofinterfacessupportedis128andthemaximumnumberofroutesis32.
BasicSettings
Mode
ConfigurewhethertheIPstackshouldactasaHostoraRouter.InHostmode,IPtrafficbetween
interfaceswillnotberouted.InRoutermodetrafficisroutedbetweenallinterfaces.
DNSServer
ThissettingcontrolstheDNSnameresolutiondonebytheswitch.Thefollowingmodesare
supported:
FromanyDHCPinterfaces:ThefirstDNSserverofferedfromaDHCPleasetoaDHCP‐enabled
interfacewillbeused.
NoDNSserver:NoDNSserverwillbeused.
Configured:ExplicitlyprovidetheIPaddressoftheDNSServerindotteddecimalnotation.
FromthisDHCPinterface:SpecifyfromwhichDHCP‐enabledinterfaceaprovidedDNSserver
shouldbepreferred.
DNSProxy
WhenDNSproxyisenabled,systemwillrelayDNSrequeststothecurrentlyconfiguredDNSserver,
andreplyasaDNSresolvertotheclientdevicesonthenetwork.
Chapter3:WebManagement
WebManagement‐Configure
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|28
IPInterfaces
Delete
SelectthisoptiontodeleteanexistingIPinterface.
VLAN
TheVLANassociatedwiththeIPinterface.OnlyportsinthisVLANwillbeabletoaccesstheIP
interface.Thisfieldisonlyavailableforinputwhencreatingannewinterface.
IPv4DHCPEnabled
EnabletheDHCPclientbycheckingthisbox.Ifthisoptionisenabled,thesystemwillconfigurethe
IPv4addressandmaskoftheinterfaceusingtheDHCPprotocol.TheDHCPclientwillannouncethe
configuredSystemNameashostnametoprovideDNSlookup.
IPv4DHCPFallbackTimeout
ThenumberofsecondsfortryingtoobtainaDHCPlease.Afterthisperiodexpires,aconfiguredIPv4
addresswillbeusedasIPv4interfaceaddress.Avalueofzerodisablesthefallbackmechanism,such
thatDHCPwillkeepretryinguntilavalidleaseisobtained.Legalvaluesare0to4294967295seconds.
IPv4DHCPCurrentLease
ForDHCPinterfaceswithanactivelease,thiscolumnshowthecurrentinterfaceaddress,asprovided
bytheDHCPserver.
IPv4Address
TheIPv4addressoftheinterfaceindotteddecimalnotation.
IfDHCPisenabled,thisfieldconfiguresthefallbackaddress.ThefieldmaybeleftblankifIPv4
operationontheinterfaceisnotdesired‐ornoDHCPfallbackaddressisdesired.
IPv4Mask
TheIPv4networkmask,innumberofbits(prefixlength).Validvaluesarebetween0and30bitsfora
IPv4address.
IfDHCPisenabled,thisfieldconfiguresthefallbackaddressnetworkmask.Thefieldmaybeleft
blankifIPv4operationontheinterfaceisnotdesired‐ornoDHCPfallbackaddressisdesired.
IPv6Address
TheIPv6addressoftheinterface.AIPv6addressisin128‐bitrecordsrepresentedaseightfieldsof
uptofourhexadecimaldigitswithacolonseparatingeachfield(:).Forexample,
fe80::215:c5ff:fe03:4dc7.Thesymbol::isaspecialsyntaxthatcanbeusedasashorthandwayof
representingmultiple16‐bitgroupsofcontiguouszeros;butitcanappearonlyonce.
Chapter3:WebManagement
WebManagement‐Configure
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|29
SystemacceptsthevalidIPv6unicastaddressonly,exceptIPv4‐Compatibleaddressand
IPv4‐Mappedaddress.
ThefieldmaybeleftblankifIPv6operationontheinterfaceisnotdesired.
IPv6Mask
TheIPv6networkmask,innumberofbits(prefixlength).Validvaluesarebetween1and128bitsfor
aIPv6address.
ThefieldmaybeleftblankifIPv6operationontheinterfaceisnotdesired.
IPRoutes
Delete
SelectthisoptiontodeleteanexistingIProute.
Network
ThedestinationIPnetworkorhostaddressofthisroute.Validformatisdotteddecimalnotationora
validIPv6notation.Adefaultroutecanusethevalue0.0.0.0orIPv6::notation.
MaskLength
ThedestinationIPnetworkorhostmask,innumberofbits(prefixlength).Itdefineshowmuchofa
networkaddressthatmustmatch,inordertoqualifyforthisroute.Validvaluesarebetween0and
32bitsrespectively128forIPv6routes.Onlyadefaultroutewillhaveamasklengthof0(asitwill
matchanything).
Gateway
TheIPaddressoftheIPgateway.ValidformatisdotteddecimalnotationoravalidIPv6notation.
GatewayandNetworkmustbeofthesametype.
NextHopVLAN(OnlyforIPv6)
TheVLANID(VID)ofthespecificIPv6interfaceassociatedwiththegateway.
ThegivenVIDrangesfrom1to4094andwillbeeffectiveonlywhenthecorrespondingIPv6interface
isvalid.
IftheIPv6gatewayaddressislink‐local,itmustspecifythenexthopVLANforthegateway.
IftheIPv6gatewayaddressisnotlink‐local,systemignoresthenexthopVLANforthegateway.
Buttons
AddInterface:ClicktoaddanewIPinterface.Amaximumof128interfacesissupported.
AddRoute:ClicktoaddanewIProute.Amaximumof32routesissupported.
Save:Clicktosavechanges.
Chapter3:WebManagement
WebManagement‐Configure
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|30
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
System‐NTP
3.1.1.3.System‐NTP
NTPstandsforNetworkTimeProtocol,whichallowsswitchtoperformclocksynchronizationwith
theNTPserver.
Mode
YoucanenableordisableNTPfunctiononthisswitch:
Enabled:EnableNTPclientmode.
Disabled:DisableNTPclientmode.
Server1~5
ProvidetheIPv4orIPv6addressofaNTPserver.IPv6addressisin128‐bitrecordsrepresentedas
eightfieldsofuptofourhexadecimaldigitswithacolonseparatingeachfield(:).Forexample,
'fe80::215:c5ff:fe03:4dc7'.Thesymbol'::'isaspecialsyntaxthatcanbeusedasashorthandwayof
representingmultiple16‐bitgroupsofcontiguouszeros;butitcanappearonlyonce.Itcanalso
representalegallyvalidIPv4address.Forexample,'::192.1.2.34'.
Also,youcanjustinputNTPserver’sURLhereaswell.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
System‐Time
3.1.1.4.System‐Time
ThispageallowsyoutoconfiguretheTimeZoneanddaylightsavingtime.
TimeZoneConfiguration
TimeZone:ListsvariousTimeZonesworldwide.SelectappropriateTimeZonefromthedrop
downandclickSavetoset.
Acronym:Usercansettheacronymofthetimezone.ThisisaUserconfigurableacronymto
identifythetimezone.Youcanuseupto16alphanumericcharactersandpunctuationssuch
as“‐”,“_”,and“.”.
DaylightSavingTimeConfiguration
Whenenabled,theswitchwillsettheclockforwardorbackwardaccordingtotheconfigurationsset
belowforadefinedDaylightSavingTimeduration.
Disable:DisabletheDaylightSavingTimeconfiguration.Thisisthedefaultsetting.
Recurring:Theconfigurationofthedaylightsavingtimedurationwillbeappliedeveryyear.
Non‐Recurring:Theconfigurationofthedaylightsavingtimedurationwillbeappliedonly
once.
Chapter3:WebManagement
System‐Time
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|33
Starttimesettings
Week‐Selectthestartingweeknumber.
Day‐Selectthestartingday.
Month‐Selectthestartingmonth.
Hours‐Selectthestartinghour.
Minutes‐Selectthestartingminute.
Endtimesettings
Week‐Selecttheendingweeknumber.
Day‐Selecttheendingday.
Month‐Selecttheendingmonth.
Hours‐Selecttheendinghour.
Minutes‐Selecttheendingminute.
Offsetsettings
Offset‐EnterthenumberofminutestoaddduringDaylightSavingTime.(Range:1to1440)
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
System‐Log
3.1.1.5.System‐Log
ConfigureSystemLogonthispage.
ServerMode
Whenenabled,thesystemlogmessagewillbesentouttothesystemlogserveryousethere.The
systemlogprotocolisbasedonUDPcommunicationandreceivedonUDPport514andthesystem
logserverwillnotsendacknowledgmentsbacksendersinceUDPisaconnectionlessprotocolandit
doesnotprovideacknowledgments.Thesystemlogpacketwillalwayssendoutevenifthesystem
logserverdoesnotexist.Possiblemodesare:
Enabled:Enableservermodeoperation.
Disabled:Disableservermodeoperation.
ServerAddress
IndicatestheIPv4hostaddressofsystemlogserver.IftheswitchprovideDNSfeature,italsocanbe
ahostname.
SystemlogLevel
Indicateswhatkindofmessagewillsendtosystemlogserver.Possiblemodesare:
Info:Sendinformation,warningsanderrors.
Warning:Sendwarningsanderrors.
Error:Senderrors.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
GreenEthernet‐LED
3.1.2.Configuration‐GreenEthernet
3.1.2.1.GreenEthernet‐LED
StatusLED
ThesystemstatusLEDshowswhetherthesystemisrunning.TheLEDisgreenwhensystemis
runningandnoerrorsaredetected.IferrorshasbeendetectedthestatusLEDwillindicatethisby
blinkingred
FrontEthernetPortLEDs
ThefrontEthernetportshaveadualcolorLEDsperport.TheportLEDsisplacedinablock(1‐high
forSFPs,2‐highforRJ45s)totheleftoftheports.
Apushbuttonanda4‐hightowerofLEDsisplacednexttothefrontEthernetportLEDs.The
pushbuttonselectsbetweenfourdifferentportLEDmodes,indicatedbythe4‐highLEDmodetower.
After30secondstheLEDmodefallsbacktomodeA.
TheportLEDmodesarenamedAthroughDandshowsthefollowing
PortLEDIndicationmodeD:
Green(1000Mbit):Solid=Link,Blink=Activity
Orange(10/100Mbit):Solid=Link,Blink=Activity
PortLEDIndicationmodeC:
Green:Solid=FullDuplexOff=Nolink
Orange:Solid=HalfDuplex,Blink:Collisions
PortLEDIndicationmodeB:
Green:Solid=Link,Blink=Activity
Orange:Solid=Portdisabledbymanagement,Blink=Errorsreceived
PortLEDIndicationmodeA:
Powersavemode‐LEDsareoff.
Chapter3:WebManagement
GreenEthernet‐LED
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|36
LEDsIntensity
TheLEDspowerconsumptioncanbereducedbyloweringtheLEDsintensity.LEDsintensitycouldfor
examplebeloweredduringnighttime,ortheycouldbeturncompletelyoff.Itispossibleto
configure24differenthoursoftheday,atwheretheLEDsintensityshouldbeset.
StartTime
ThetimeatwhichtheLEDsintensityshallbesettothecorrespondingintensity.
EndTime
ThetimeatwhichtheLEDsintensityshallbesettoanewintensity.Ifnointensityisspecifiedforthe
nexthour,theintensityissettodefaultintensity.
Intensity
TheLEDsintensity(100%=Fullpower,0%=LEDoff).
Maintenance
MaintenanceTime
Whenanetworkadministratordoesmaintenanceoftheswitch(e.g.addingormovingusers)he
mightwanttohavefullLEDintensityduringthemaintenanceperiod.Thereforeitispossibleto
specifythattheLEDsshallusefullintensityaspecificperiodoftime.MaintenanceTimeisthe
numberofsecondsthattheLEDswillhavefullintensityaftereitheraporthaschangedlinkstate,or
theLEDpushbuttonhasbeenpushed.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
GreenEthernet‐PortPowerSavings
3.1.2.2.GreenEthernet‐PortPowerSavings
EEEisapowersavingoptionthatreducesthepowerusagewhenthereislowornotrafficutilization.
EEEworksbypoweringdowncircuitswhenthereisnotraffic.Whenaportgetsdatatobe
transmittedallcircuitsarepoweredup.Thetimeittakestopowerupthecircuitsisnamedwakeup
time.Thedefaultwakeuptimeis17usfor1Gbitlinksand30usforotherlinkspeeds.EEEdevices
mustagreeuponthevalueofthewakeuptimeinordertomakesurethatboththereceivingand
transmittingdevicehasallcircuitspoweredupwhentrafficistransmitted.Thedevicescanexchange
wakeuptimeinformationusingtheLLDPprotocol.
EEEworksforportsinauto‐negotiationmode,wheretheportisnegotiatedtoeither1Gor100Mbit
fullduplexmode.
ForportsthatarenotEEE‐capablethecorrespondingEEEcheckboxesaregrayedoutandthus
impossibletoenableEEEfor.
Whenaportispowereddownforsavingpower,outgoingtrafficisstoredinabufferuntiltheportis
poweredupagain.Becausetherearesomeoverheadinturningtheportdownandup,morepower
canbesavedifthetrafficcanbebufferedupuntilalargeburstoftrafficcanbetransmitted.
Bufferingtrafficwillgivesomelatencyinthetraffic.
Chapter3:WebManagement
GreenEthernet‐LED
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|38
PortConfiguration
Port
Theswitchportnumberofthelogicalport.
ActiPHY
Linkdownpowersavingsenabled.
ActiPHYworksbyloweringthepowerforaportwhenthereisnolink.Theportispowerupforshort
momentinordertodetermineifcableisinserted.
PerfectReach
Cablelengthpowersavingsenabled.
PerfectReachworksbydeterminingthecablelengthandloweringthepowerforportswithshort
cables.
EEE
ControlswhetherEEEisenabledforthisswitchport.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
Configuration‐Ports
3.1.3.Configuration‐Ports
Thispagedisplayscurrentportconfigurations.Portscanalsobeconfiguredhere.
Theportsettingsrelatetothecurrentlyselectedstackunit,asreflectedbythepageheader.
Port
Thisisthelogicalportnumberforthisrow.
Link
Thecurrentlinkstateisdisplayedgraphically.Greenindicatesthelinkisupandredthatitisdown.
CurrentLinkSpeed
Thecurrentlinkspeedoftheport.
ConfiguredLinkSpeed
Selectsanyavailablelinkspeedforthegivenswitchport.Onlyspeedssupportedbythespecificport
isshown.Possiblespeedsare:
Disabled‐Disablestheswitchportoperation.
Auto‐Cuportautonegotiatingspeedwiththelinkpartnerandselectsthehighestspeedthat
iscompatiblewiththelinkpartner.
10MbpsHDX‐Forcesthecuportin10Mbpshalfduplexmode.
10MbpsFDX‐Forcesthecuportin10Mbpsfullduplexmode.
100MbpsHDX‐Forcesthecuportin100Mbpshalfduplexmode.
100MbpsFDX‐Forcesthecuportin100Mbpsfullduplexmode.
1GbpsFDX‐Forcesthecuportin1Gbpsfullduplexmode.
FlowControl
WhenAutoSpeedisselectedonaport,thissectionindicatestheflowcontrolcapabilitythatis
advertisedtothelinkpartner.
Whenafixed‐speedsettingisselected,thatiswhatisused.TheCurrentRxcolumnindicateswhether
pauseframesontheportareobeyed,andtheCurrentTxcolumnindicateswhetherpauseframeson
theportaretransmitted.TheRxandTxsettingsaredeterminedbytheresultofthelast
Chapter3:WebManagement
Configuration‐Ports
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|40
Auto‐Negotiation.
Checktheconfiguredcolumntouseflowcontrol.ThissettingisrelatedtothesettingforConfigured
LinkSpeed.
MaximumFrameSize
Enterthemaximumframesizeallowedfortheswitchport,includingFCS.
ExcessiveCollisionMode
Configureporttransmitcollisionbehavior.
Discard:Discardframeafter16collisions(default).
Restart:Restartbackoffalgorithmafter16collisions.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Refresh:Clicktorefreshthepage.Anychangesmadelocallywillbeundone.
Chapter3:WebManagement
DHCP‐Server‐Mode
3.1.4.Configuration‐DHCP
3.1.4.1.DHCP‐Server
3.1.4.1.1.DHCP‐Server‐Mode
ThispageconfiguresglobalmodeandVLANmodetoenable/disableDHCPserverpersystemand
perVLAN.
GlobalMode
Configureoperationmodetoenable/disableDHCPserverpersystem.
Mode
Configuretheoperationmodepersystem.Possiblemodesare:
Enabled:EnableDHCPserverpersystem.
Disabled:DisableDHCPserverpresystem.
VLANMode
Configureoperationmodetoenable/disableDHCPserverperVLAN.
VLANRange
IndicatetheVLANrangeinwhichDHCPserverisenabledordisabled.ThefirstVLANIDmustbe
smallerthanorequaltothesecondVLANID.BUT,iftheVLANrangecontainsonly1VLANID,then
youcanjustinputitintoeitheroneofthefirstandsecondVLANIDorboth.
Ontheotherhand,ifyouwanttodisableexistedVLANrange,thenyoucanfollowthesteps.
1. Press“AddVLANRange”toaddanewVLANrange.
2. InputtheVLANrangethatyouwanttodisable.
3. ChooseModetobeDisabled.
4. Press“Save”toapplythechange.
Then,youwillseethedisabledVLANrangeisremovedfromtheDHCPServermodeconfiguration
page.
Chapter3:WebManagement
DHCP‐Server‐Mode
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|42
Mode
IndicatethetheoperationmodeperVLAN.Possiblemodesare:
Enabled:EnableDHCPserverperVLAN.
Disabled:DisableDHCPserverpreVLAN.
Buttons
AddVLANRange:ClicktoaddanewVLANrange.
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
DHCP‐Server‐ExcludedIP
3.1.4.1.2.DHCP‐Server‐ExcludedIP
ThispageconfiguresexcludedIPaddresses.DHCPserverwillnotallocatetheseexcludedIP
addressestoDHCPclient.
ExcludedIPAddress
ConfigureexcludedIPaddresses.
IPRange
DefinetheIPrangetobeexcludedIPaddresses.ThefirstexcludedIPmustbesmallerthanor
equaltothesecondexcludedIP.BUT,iftheIPrangecontainsonly1excludedIP,thenyoucanjust
inputittoeitheroneofthefirstandsecondexcludedIPorboth.
Buttons
AddIPRange:ClicktoaddanewexcludedIPrange.
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
DHCP‐Server‐Pool
3.1.4.1.3.DHCP‐Server‐Pool
ThispagemanagesDHCPpools.AccordingtotheDHCPpool,DHCPserverwillallocateIPaddress
anddeliverconfigurationparameterstoDHCPclient.
PoolSetting
Addordeletepools.
Addingapoolandgivinganameistocreateanewpoolwith"default"configuration.Ifyouwant
toconfigureallsettingsincludingtype,IPsubnetmaskandleasetime,youcanclickthepoolname
togointotheconfigurationpage.
Name
Configurethepoolnamethatacceptsallprintablecharacters,exceptwhitespace.Ifyouwantto
configurethedetailsettings,youcanclickthepoolnametogointotheconfigurationpage.
Type
Displaywhichtypeofthepoolis.
Network:thepooldefinesapoolofIPaddressestoservicemorethanoneDHCPclient.
Host:thepoolservicesforaspecificDHCPclientidentifiedbyclientidentifierorhardware
address.
If"‐"isdisplayed,itmeansnotdefined.
IP
DisplaynetworknumberoftheDHCPaddresspool.
If"‐"isdisplayed,itmeansnotdefined.
SubnetMask
DisplaysubnetmaskoftheDHCPaddresspool.
If"‐"isdisplayed,itmeansnotdefined.
Chapter3:WebManagement
DHCP‐Server‐Pool
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|45
LeaseTime
Displayleasetimeofthepool.
Buttons
AddNewPool:ClicktoaddanewDHCPpool.
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
DHCP‐Snooping
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|46
3.1.4.2.DHCP‐Snooping
ConfigureDHCPSnoopingonthispage.
SnoopingMode
IndicatestheDHCPsnoopingmodeoperation.Possiblemodesare:
Enabled:EnableDHCPsnoopingmodeoperation.WhenDHCPsnoopingmodeoperationis
enabled,theDHCPrequestmessageswillbeforwardedtotrustedportsandonlyallowreply
packetsfromtrustedports.
Disabled:DisableDHCPsnoopingmodeoperation.
PortModeConfiguration
IndicatestheDHCPsnoopingportmode.Possibleportmodesare:
Trusted:ConfigurestheportastrustedsourceoftheDHCPmessages.
Untrusted:ConfigurestheportasuntrustedsourceoftheDHCPmessages.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
DHCP‐Relay
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|47
3.1.4.3.DHCP‐Relay
ADHCPrelayagentisusedtoforwardandtotransferDHCPmessagesbetweentheclientsandthe
serverwhentheyarenotinthesamesubnetdomain.ItstorestheincominginterfaceIPaddressin
theGIADDRfieldoftheDHCPpacket.TheDHCPservercanusethevalueofGIADDRfieldto
determinetheassignedsubnet.Forsuchcondition,pleasemakesuretheswitchconfigurationof
VLANinterfaceIPaddressandPVID(PortVLANID)correctly.
RelayMode
IndicatestheDHCPrelaymodeoperation.
Possiblemodesare:
Enabled:EnableDHCPrelaymodeoperation.WhenDHCPrelaymodeoperationisenabled,
theagentforwardsandtransfersDHCPmessagesbetweentheclientsandtheserverwhen
theyarenotinthesamesubnetdomain.AndtheDHCPbroadcastmessagewon'tbeflooded
forsecurityconsiderations.
Disabled:DisableDHCPrelaymodeoperation.
RelayServer
IndicatestheDHCPrelayserverIPaddress.
RelayInformationMode
IndicatestheDHCPrelayinformationmodeoptionoperation.Theoption82circuitIDformatas
"[vlan_id][module_id][port_no]".ThefirstfourcharactersrepresenttheVLANID,thefifthandsixth
charactersarethemoduleID(instandalonedeviceitalwaysequal0,instackabledeviceitmeans
switchID),andthelasttwocharactersaretheportnumber.Forexample,"00030108"meansthe
DHCPmessagereceiveformVLANID3,switchID1,portNo8.Andtheoption82remoteIDvalueis
equaltheswitchMACaddress.
Possiblemodesare:
Enabled:EnableDHCPrelayinformationmodeoperation.WhenDHCPrelayinformation
modeoperationisenabled,theagentinsertsspecificinformation(option82)intoaDHCP
messagewhenforwardingtoDHCPserverandremovesitfromaDHCPmessagewhen
transferringtoDHCPclient.ItonlyworkswhenDHCPrelayoperationmodeisenabled.
Chapter3:WebManagement
DHCP‐Relay
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|48
Disabled:DisableDHCPrelayinformationmodeoperation.
RelayInformationPolicy
IndicatestheDHCPrelayinformationoptionpolicy.WhenDHCPrelayinformationmodeoperationis
enabled,iftheagentreceivesaDHCPmessagethatalreadycontainsrelayagentinformationitwill
enforcethepolicy.The'Replace'policyisinvalidwhenrelayinformationmodeisdisabled.Possible
policiesare:
Replace:ReplacetheoriginalrelayinformationwhenaDHCPmessagethatalreadycontainsit
isreceived.
Keep:KeeptheoriginalrelayinformationwhenaDHCPmessagethatalreadycontainsitis
received.
Drop:DropthepackagewhenaDHCPmessagethatalreadycontainsrelayinformationis
received.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
Security‐Switch‐Users
3.1.5.Configuration‐Security
Thissectionprovidessettingsregardingtotheswitch’ssecurityfunctions.Settingsprovided
herecanbedividedinto3categories:
Switch:Hereyoucanmakesecuritysettingsregardingtotheswitchitself.
Network:Providingsecuritysettingsregardingtothenetwork.
AAA:HereyoucansetRADIUSandTACACS+authenticationsettings.
3.1.5.1.Security‐Switch‐Users
Thispageprovidesanoverviewofthecurrentusers.Currentlytheonlywaytologinasanotheruser
onthewebserveristocloseandreopenthebrowser.
UserName
Thenameoftheuser.Youcanalsoclickonthelinktoconfigureuseraccount.
PrivilegeLevel
Theprivilegeleveloftheuser.Theallowedrangeis1to15.Iftheprivilegelevelvalueis15,itcan
accessallgroups,i.e.thatisgrantedthefullycontrolofthedevice.Butothersvalueneedtoreferto
eachgroupprivilegelevel.User'sprivilegeshouldbesameorgreaterthanthegroupprivilegelevel
tohavetheaccessofthatgroup.Bydefaultsetting,mostgroupprivilegeslevel5hastheread‐only
accessandprivilegelevel10hastheread‐writeaccess.Andthesystemmaintenance(software
upload,factorydefaultsandetc.)needuserprivilegelevel15.Generally,theprivilegelevel15canbe
usedforanadministratoraccount,privilegelevel10forastandarduseraccountandprivilegelevel5
foraguestaccount.
Buttons
AddNewUser:Clicktoaddanewuser.
Chapter3:WebManagement
Security‐Switch‐Users
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|50
Thispageconfiguresauser.
UserName
Astringidentifyingtheusernamethatthisentryshouldbelongto.Theallowedstringlengthis1to
31.Thevalidusernameisacombinationofletters,numbersandunderscores.
Password
Thepasswordoftheuser.Theallowedstringlengthis0to31.
PrivilegeLevel
Theprivilegeleveloftheuser.Theallowedrangeis1to15.Iftheprivilegelevelvalueis15,itcan
accessallgroups,i.e.thatisgrantedthefullycontrolofthedevice.Butothersvalueneedtoreferto
eachgroupprivilegelevel.User'sprivilegeshouldbesameorgreaterthanthegroupprivilegelevel
tohavetheaccessofthatgroup.
Bydefaultsetting,mostgroupsprivilegelevel5hastheread‐onlyaccessandprivilegelevel10has
theread‐writeaccess.Andthesystemmaintenance(softwareupload,factorydefaultsandetc.)need
userprivilegelevel15.Generally,theprivilegelevel15canbeusedforanadministratoraccount,
privilegelevel10forastandarduseraccountandprivilegelevel5foraguestaccount.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Cancel:ClicktoundoanychangesmadelocallyandreturntotheUsers.
DeleteUser:Deletethecurrentuser.Pleasenotethatthedefaultuser(admin)cannotbe
deleted.
Chapter3:WebManagement
Security‐Switch‐PrivilegeLevel
3.1.5.2.Security‐Switch‐PrivilegeLevel
Thispageprovidesanoverviewoftheprivilegelevels.
GroupName
Thenameidentifyingtheprivilegegroup.Inmostcases,aprivilegelevelgroupconsistsofasingle
module(e.g.LACP,RSTPorQoS),butafewofthemcontainsmorethanone.Thefollowing
descriptiondefinestheseprivilegelevelgroupsindetails:
System:Contact,Name,Location,Timezone,DaylightSavingTime,Log.
Security:Authentication,SystemAccessManagement,Port(containsDot1xport,MACbased
andtheMACAddressLimit),ACL,HTTPS,SSH,ARPInspection,IPsourceguard.
IP:Everythingexcept'ping'.
Port:Everythingexcept'VeriPHY'.
Diagnostics:'ping'and'VeriPHY'.
Maintenance:CLI‐SystemReboot,SystemRestoreDefault,SystemPassword,Configuration
Save,ConfigurationLoadandFirmwareLoad.Web‐Users,PrivilegeLevelsandeverythingin
Maintenance.
Debug:OnlypresentinCLI.
Chapter3:WebManagement
Security‐Switch‐PrivilegeLevel
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|52
PrivilegeLevels
EverygrouphasanauthorizationPrivilegelevelforthefollowingsubgroups:configurationread‐only,
configuration/executeread‐write,status/statisticsread‐only,status/statisticsread‐write(e.g.for
clearingofstatistics).UserPrivilegeshouldbesameorgreaterthantheauthorizationPrivilegelevel
tohavetheaccesstothatgroup.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
Security‐Switch‐AuthenticationMethod
3.1.5.3.Security‐Switch‐AuthenticationMethod
Thispageallowsyoutoconfigurehowauserisauthenticatedwhenhelogsintothestackviaoneof
themanagementclientinterfaces.
Client
Themanagementclientforwhichtheconfigurationbelowapplies.
AuthenticationMethod
AuthenticationMethodcanbesettooneofthefollowingvalues:
None:authenticationisdisabledandloginisnotpossible.
Local:usethelocaluserdatabaseonthestackforauthentication.
RADIUS:usearemoteRADIUSserverforauthentication.
TACACS+:usearemoteTAC ACS+serverforauthentication.
Fallback
Enablefallbacktolocalauthenticationbycheckingthisbox.
Ifnoneoftheconfiguredauthenticationserversarealive,thelocaluserdatabaseisusedfor
authentication.
ThisisonlypossibleiftheAuthenticationMethodissettoavalueotherthan'none'or'local'.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
Security‐Switch‐SSH
3.1.5.4.Security‐Switch‐SSH
ConfigureSSHonthispage.
Mode
IndicatestheSSHmodeoperation.Possiblemodesare:
Enabled:EnableSSHmodeoperation.
Disabled:DisableSSHmodeoperation.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
Security‐Switch‐HTTPS
3.1.5.5.Security‐Switch‐HTTPS
ConfigureHTTPSonthispage.
Mode
IndicatestheHTTPSmodeoperation.WhenthecurrentconnectionisHTTPS,toapplyHTTPS
disabledmodeoperationwillautomaticallyredirectwebbrowsertoanHTTPconnection.Possible
modesare:
Enabled:EnableHTTPSmodeoperation.
Disabled:DisableHTTPSmodeoperation.
AutomaticRedirect
IndicatestheHTTPSredirectmodeoperation.AutomaticallyredirectswebbrowsertoanHTTPS
connectionwhenbothHTTPSmodeandAutomaticRedirectareenabled.Possiblemodesare:
Enabled:EnableHTTPSredirectmodeoperation.
Disabled:DisableHTTPSredirectmodeoperation.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
Security‐Switch‐AccessManagement
3.1.5.6.Security‐Switch‐AccessManagement
Configureaccessmanagementtableonthispage.Themaximumnumberofentriesis16.Ifthe
application'stypematchanyoneoftheaccessmanagemententries,itwillallowaccesstothe
switch.
Mode
Indicatestheaccessmanagementmodeoperation.Possiblemodesare:
Enabled:Enableaccessmanagementmodeoperation.
Disabled:Disableaccessmanagementmodeoperation.
Delete
Checktodeletetheentry.Itwillbedeletedduringthenextsave.
StartIPaddress
IndicatesthestartIPaddressfortheaccessmanagemententry.
EndIPaddress
IndicatestheendIPaddressfortheaccessmanagemententry.
HTTP/HTTPS
IndicatesthatthehostcanaccesstheswitchfromHTTP/HTTPSinterfaceifthehostIPaddress
matchestheIPaddressrangeprovidedintheentry.
SNMP
IndicatesthatthehostcanaccesstheswitchfromSNMPinterfaceifthehostIPaddressmatchesthe
IPaddressrangeprovidedintheentry.
TELNET/SSH
IndicatesthatthehostcanaccesstheswitchfromTELNET/SSHinterfaceifthehostIPaddress
matchestheIPaddressrangeprovidedintheentry.
Buttons
AddNewEntry:Clicktoaddanewaccessmanagemententry.
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
Security‐Switch‐PrivilegeLevel
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|57
Chapter3:WebManagement
Security‐Switch‐SNMP‐System
3.1.5.7.Security‐Switch‐SNMP
3.1.5.7.1.Security‐Switch‐SNMP‐System
ConfigureSNMPonthispage.
Mode
IndicatestheSNMPmodeoperation.Possiblemodesare:
Enabled:EnableSNMPmodeoperation.
Disabled:DisableSNMPmodeoperation.
Version
IndicatestheSNMPsupportedversion.Possibleversionsare:
SNMPv1:SetSNMPsupportedversion1.
SNMPv2c:SetSNMPsupportedversion2c.
SNMPv3:SetSNMPsupportedversion3.
ReadCommunity
IndicatesthecommunityreadaccessstringtopermitaccesstoSNMPagent.Theallowedstring
lengthis0to255,andtheallowedcontentistheASCIIcharactersfrom33to126.
ThefieldisapplicableonlywhenSNMPversionisSNMPv1orSNMPv2c.IfSNMPversionis
SNMPv3,thecommunitystringwillbeassociatedwithSNMPv3communitiestable.Itprovides
moreflexibilitytoconfiguresecuritynamethanaSNMPv1orSNMPv2ccommunitystring.In
additiontocommunitystring,aparticularrangeofsourceaddressescanbeusedtorestrictsource
subnet.
WriteCommunity
IndicatesthecommunitywriteaccessstringtopermitaccesstoSNMPagent.Theallowedstring
lengthis0to255,andtheallowedcontentistheASCIIcharactersfrom33to126.
ThefieldisapplicableonlywhenSNMPversionisSNMPv1orSNMPv2c.IfSNMPversionis
SNMPv3,thecommunitystringwillbeassociatedwithSNMPv3communitiestable.Itprovides
moreflexibilitytoconfiguresecuritynamethanaSNMPv1orSNMPv2ccommunitystring.In
additiontocommunitystring,aparticularrangeofsourceaddressescanbeusedtorestrictsource
subnet.
Chapter3:WebManagement
Security‐Switch‐SNMP‐System
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|59
EngineID
IndicatestheSNMPv3engineID.Thestringmustcontainanevennumber(inhexadecimalformat)
withnumberofdigitsbetween10and64,butall‐zerosandall‐'F'sarenotallowed.Changeofthe
EngineIDwillclearalloriginallocalusers.
SNMPTrapConfiguration
ConfigureSNMPtraponthispage.
TrapMode
IndicatestheSNMPtrapmodeoperation.Possiblemodesare:
Enabled:EnableSNMPtrapmodeoperation.
Disabled:DisableSNMPtrapmodeoperation.
TrapVersion
IndicatestheSNMPtrapsupportedversion.Possibleversionsare:
SNMPv1:SetSNMPtrapsupportedversion1.
SNMPv2c:SetSNMPtrapsupportedversion2c.
SNMPv3:SetSNMPtrapsupportedversion3.
TrapCommunity
IndicatesthecommunityaccessstringwhensendingSNMPtrappacket.Theallowedstringlength
is0to255,andtheallowedcontentisASCIIcharactersfrom33to126.
TrapDestinationAddress
IndicatestheSNMPtrapdestinationaddress.ItallowavalidIPaddressindotteddecimalnotation
('x.y.z.w').
Anditalsoallowavalidhostname.Avalidhostnameisastringdrawnfromthealphabet(A‐Za‐z),
digits(0‐9),dot(.),dash(‐).Spacesarenotallowed,thefirstcharactermustbeanalphacharacter,
andthefirstandlastcharactersmustnotbeadotoradash.
Chapter3:WebManagement
Security‐Switch‐SNMP‐System
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|60
TrapDestinationIPv6Address
IndicatestheSNMPtrapdestinationIPv6address.IPv6addressisin128‐bitrecordsrepresentedas
eightfieldsofuptofourhexadecimaldigitswithacolonseparatingeachfield(:).Forexample,
'fe80::215:c5ff:fe03:4dc7'.Thesymbol'::'isaspecialsyntaxthatcanbeusedasashorthandway
ofrepresentingmultiple16‐bitgroupsofcontiguouszeros;butitcanappearonlyonce.Itcanalso
representalegallyvalidIPv4address.Forexample,'::192.1.2.34'.
TrapAuthenticationFailure
IndicatesthattheSNMPentityispermittedtogenerateauthenticationfailuretraps.Possible
modesare:
Enabled:EnableSNMPtrapauthenticationfailure.
Disabled:DisableSNMPtrapauthenticationfailure.
TrapLink‐upandLink‐down
IndicatestheSNMPtraplink‐upandlink‐downmodeoperation.Possiblemodesare:
Enabled:EnableSNMPtraplink‐upandlink‐downmodeoperation.
Disabled:DisableSNMPtraplink‐upandlink‐downmodeoperation.
TrapInformMode
IndicatestheSNMPtrapinformmodeoperation.Possiblemodesare:
Enabled:EnableSNMPtrapinformmodeoperation.
Disabled:DisableSNMPtrapinformmodeoperation.
TrapInformTimeout(seconds)
IndicatestheSNMPtrapinformtimeout.Theallowedrangeis0to2147.
TrapInformRetryTimes
IndicatestheSNMPtrapinformretrytimes.Theallowedrangeis0to255.
TrapProbeSecurityEngineID
IndicatestheSNMPtrapprobesecurityengineIDmodeofoperation.Possiblevaluesare:
Enabled:EnableSNMPtrapprobesecurityengineIDmodeofoperation.
Disabled:DisableSNMPtrapprobesecurityengineIDmodeofoperation.
TrapSecurityEngineID
IndicatestheSNMPtrapsecurityengineID.SNMPv3sendstrapsandinformsusingUSMfor
authenticationandprivacy.AuniqueengineIDforthesetrapsandinformsisneeded.When"Trap
ProbeSecurityEngineID"isenabled,theIDwillbeprobedautomatically.Otherwise,theID
specifiedinthisfieldisused.Thestringmustcontainanevennumber(inhexadecimalformat)with
numberofdigitsbetween10and64,butall‐zerosandall‐'F'sarenotallowed.
TrapSecurityName
Chapter3:WebManagement
Security‐Switch‐SNMP‐System
Intelinet48‐PortGigabitEthernetPoE+Layer2+ManagedSwitchUserManual|61
IndicatestheSNMPtrapsecurityname.SNMPv3trapsandinformsusingUSMforauthentication
andprivacy.Auniquesecuritynameisneededwhentrapsandinformsareenabled.
Buttons
Save:Clicktosavechanges.
Reset:Clicktoundoanychangesmadelocallyandreverttopreviouslysavedvalues.
Chapter3:WebManagement
Security‐Switch‐SNMP‐Community
3.1.5.7.2.Security‐Switch‐SNMP‐Community
ConfigureSNMPv3communitytableonthispage.TheentryindexkeyisCommunity.
Delete
Checktodeletetheentry.Itwillbedeletedduringthenextsave.
Community
IndicatesthecommunityaccessstringtopermitaccesstoSNMPv3agent.Theallowedstring
lengthis1to32,andtheallowedcontentisASCIIcharactersfrom33to126.Thecommunitystring
willbetreatedassecuritynameandmapaSNMPv1orSNMPv2ccommunitystring.
SourceIP
IndicatestheSNMPaccesssourceaddress.Aparticularrangeofsourceaddressescan