Intellinet 561167 User Manual
Displayed below is the user manual for 561167 by Intellinet which is a product in the Network Switches category. This manual has pages.
Related Manuals
8‐PortDesktopGigabitWeb‐SmartPoE+
Switchwith2SFPPorts
UserManual
Model561167
INT‐561167‐UM‐1216‐1
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
2
1 TABLEOFCONTENTS
2ProductIntroduction.........................................................................................................................4
2.1ProductOverview..............................................................................................................................4
2.2Features.............................................................................................................................................4
2.3Specifications.....................................................................................................................................5
2.4ExternalComponentDescription.....................................................................................................6
2.4.1FrontPanel............................................................................................................................................6
2.4.2RearPanel..............................................................................................................................................8
2.5PackageContents..............................................................................................................................8
3InstallingandConnectingtheSwitch...............................................................................................9
3.1DesktopInstallation...........................................................................................................................9
3.2Rack‐mountableInstallationin19‐inchCabinet..............................................................................9
3.3PowerontheSwitch.......................................................................................................................10
4ConnectiontotheSwitch................................................................................................................11
4.1ConnectingComputer.....................................................................................................................11
4.2HowtoLogintotheSwitch............................................................................................................11
5SavingtheConfiguration.................................................................................................................13
6SwitchConfiguration.......................................................................................................................14
6.1Home................................................................................................................................................14
6.1.1PortInformation..................................................................................................................................14
6.1.2PortInformation,EquipmentConfigurationandPortStatistics.........................................................14
6.2QuickSetup......................................................................................................................................16
6.3PortSettings....................................................................................................................................17
6.3.1BasicConfig..........................................................................................................................................17
6.3.2PortAggregation....................................................................................................................................1
6.3.3PortMirroring........................................................................................................................................2
6.3.4Portspeedlimit.....................................................................................................................................3
6.3.5Broadcaststorm....................................................................................................................................4
6.3.6Portisolation.........................................................................................................................................5
6.4VLAN...................................................................................................................................................8
6.4.1TrunkPortSettings..............................................................................................................................10
6.4.2HybridPortSettings.............................................................................................................................11
6.4.3SetupExample***..............................................................................................................................12
6.5Fault/Safety......................................................................................................................................15
6.5.1AntiAttack...........................................................................................................................................15
6.5.2ChannelDetection...............................................................................................................................22
6.5.3ACLAccessControlList........................................................................................................................24
6.6PoE...................................................................................................................................................27
6.6.1PoEConfig............................................................................................................................................27
6.6.2PoEPortConfig....................................................................................................................................28
6.6.3PoEDelayConfig..................................................................................................................................30
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
3
6.7SpanningTreeProtocol(STP).........................................................................................................31
6.7.1MSTPRegion........................................................................................................................................34
6.7.2MSTPBridge........................................................................................................................................35
6.8DHCPRelayAgent............................................................................................................................37
6.8.1DHCPRelay..........................................................................................................................................37
6.8.2Option82..............................................................................................................................................37
6.9DHCPServer.....................................................................................................................................39
6.9.1DHCPConfig.........................................................................................................................................39
6.10IGMPSnooping................................................................................................................................41
6.10.1IGMPConfig.........................................................................................................................................42
6.10.2IGMPFilterPolicyConfig.....................................................................................................................44
6.11TerminalAccessControllerAccess‐ControlSystem(TACACS+)....................................................45
6.12Radius...............................................................................................................................................47
6.12.1RadiusGeneralConfig.........................................................................................................................47
6.12.2RadiusServerConfig............................................................................................................................48
6.13AAA...................................................................................................................................................49
6.13.1EnableConfig.......................................................................................................................................49
6.13.2RegionConfig.......................................................................................................................................49
6.14QoS–QualityofService..................................................................................................................50
6.14.1QoSRules.............................................................................................................................................50
6.14.2QueueConfig.......................................................................................................................................51
6.14.3QueueMapping...................................................................................................................................52
6.15AddressTable..................................................................................................................................53
6.15.1AddressTableConfig...........................................................................................................................53
6.16SNMP................................................................................................................................................55
6.16.1SNMPConfig........................................................................................................................................55
6.16.2RMONConfig.......................................................................................................................................60
6.17System..............................................................................................................................................64
6.17.1SystemConfig......................................................................................................................................64
6.17.2SystemUpdate....................................................................................................................................68
6.17.3ConfigurationManagement................................................................................................................69
6.17.4ConfigSave..........................................................................................................................................70
6.17.5AdministratorSettings.........................................................................................................................70
6.17.6InformationCollect..............................................................................................................................71
7Warranty.........................................................................................................................................72
8Copyright.........................................................................................................................................73
9FederalCommunicationCommissionInterferenceStatement.....................................................74
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
4
2 PRODUCTINTRODUCTION
CongratulationsonyourpurchaseoftheIntellinet8‐PortWeb‐ManagedGigabitEthernetSwitch.Beforeyou
installandusethisproduct,readthismanualcarefullytounderstanditsfunctions.
2.1 PRODUCTOVERVIEW
TheIntellinet8‐PortGigabitEthernetPoE+Web‐ManagedSwitchwith2SFPPortsprovidesseamlessnetwork
connections.Itintegrates1000MbpsGigabitEthernet,100MbpsFastEthernetand10MbpsEthernetnetwork
capabilitiesinahighlyflexiblepackage.Eachofthe810/100/1000MbpsAuto‐NegotiationRJ45portssupports
AutoMDI/MDIXfunction.Theswitchisahigh‐performanceupgradefromyouroldnetworktoa1000Mbps
Gigabitnetwork.Itsolvesnetworkbottlenecksthatfrequentlydevelopasmoreadvancedcomputerusersand
newerapplicationsdemandgreaternetworkresources.Forefficientmanagement,theswitchisequippedwith
aremoteWebinterface.UserscanprogramtheswitchforadvancedmanagementfunctionssuchasPort
Management,LinkAggregation,VLAN,SpanningTree,Multicast,QoS,Security,AccessControl,MACAddress
Table,Diagnostics,RMONandmore.
2.2 FEATURES
Eight10/100/1000Mbpsauto‐sensingportsautomaticallydetectoptimalnetworkspeeds
Twosmallform‐factorpluggableGBICmoduleslots(SFP)
Foruseondesktopormountedinstandard19"rack
IEEE802.3at/af‐compliantRJ45PoE/PoE+outputports
SupportsIEEE802.3atandIEEE802.3af‐compliantPoEdevices(wirelessaccesspoints,VoIPphones,IP
cameras)
PoEpowerbudgetof140watts
SNMPV1,V2C,V3withRMONgroups1,2,3&9
SupportsVLAN(tag‐basedandport‐based)
ProvidesIEEE802.1xport‐basedsecurity
Supportslinkaggregation(trunking
)
Supportsportmirroring
Supportsjumboframesupto9kBytes
SupportsRapidSpanningTree/SpanningTreeprotocol
Broadcaststormcontrolwithmulticastpacketratesettings
SupportstwotypesofQoS:port‐basedandDSCP
LEDsforpower,link/activity,connectionspeed
High‐efficiencyfandeliversquiet,reliablecooling
Includes
19"rackmountbrackets
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
5
2.3 SPECIFICATIONS
Standards
•IEEE802.1d(SpanningTreeProtocol)
•IEEE802.1p(TrafficPrioritization)
•IEEE802.1q(VLANTagging)
•IEEE802.1s(MultipleSpanningTreeProtocol)
•IEEE802.1w(RapidSpanningTreeProtocol)
•IEEE802.3ad(LinkAggregation)
•IEEE802.3(10Base‐TEthernet)
•IEEE802.3ab(TwistedPairGigabitEthernet)
•IEEE802.3ad(LinkAggregationControlProtocolLACP)
•IEEE802.3af(PoweroverEthernet802.3atType1)
•IEEE802.3at(PoweroverEthernet802.3atType2)
•IEEE802.3az(EnergyEfficientEthernetEEE)
•IEEE802.3u(100Base‐TXFastEthernet)
•IEEE802.3x(flowcontrol,forfullduplexmode)
Power
•Input:100–240VAC,50–60Hz
Environmental
•Metalhousing
•Dimensions:280(L)x180(W)x44(H)[mm]/11.02(L)x7.09(W)x1.73(H)[in.]
•Weight:1.6kg(3.5lbs.)
•Operatingtemperature:0–45°C(32–113°F)
•Operatinghumidity:10–90%RH,non‐condensing
•Storagetemperature:‐10–70°C(14–158°F)
PackageContents
•8‐PortGigabitEthernetPoE+Web‐ManagedSwitchwith2SFPPorts
•19"rackmountbrackets
•Powercable
•Instructions
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
6
2.4 EXTERNALCOMPONENTDESCRIPTION
2.4.1 FrontPanel
Thefrontpaneloftheswitchconsistsof810/100/1000MbpsRJ‐45ports,twoSFPports,oneconsoleport,
oneResetbuttonandaseriesofLEDindicatorsasshownbelow.
10/100/1000MbpsRJ‐45ports(1~8):
Connecttoadevicewithabandwidthof10Mbps,100Mbpsor1000Mbps;eachhasacorresponding
10/100/1000MbpsLED.
SFPports(SFP1,SFP2):
InstallSFPmodulesandconnecttothedevicewithabandwidthof1000Mbps;allportshaveacorresponding
1000MbpsLED.
Consoleport(Console):
Connectswiththeserialportofacomputerorterminaltomonitorandconfiguretheswitch.
Resetbutton(Reset):
Restoresthesystemtofactorydefaultsettings;holdtheresetbuttonforfivesecondswhilethedevicepowers
itselfon.
LEDindicators:
Enabletheadministratortomonitor,diagnoseandtroubleshootanypotentialproblemwiththeswitch,its
connectionorattacheddevices.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
7
ThefollowingchartprovidesanexplanationofeachLEDindicatorontheswitch.
LEDCOLORSTATUSSTATUS DESCRIPTION
PWR Green
OnPower On
OffPower Off
Link/Act
(1-8)
10/100M:
Orange
OnA device is connected to the port.
OffNo device is connected to the port.
1000M:
GreenFlashingSending or receiving data.
PoE Green
On
APoweredDevice(PD)isconnectedtotheport,andpowerisbeing
provided.
Off
NoPDisconnectedtothecorrespondingportorpowerisnotbeing
suppliedtoit.
Flashing
PoEoverloadorshortcircuit–disconnectthePDrightaway.
Max1
(1‐4Ports)
Green
On
PoweroutputtothePDshasreachedthemaximumpowerbudget
of≥55W.NopowermaybesuppliedifadditionalPDsare
connected.
Off
ThepowerofalltheconnectedPoEportsis<55W,ornoPDis
connectedtothecorrespondingport.
Flashing
ThepoweroutputtoPDshasexceededthemaximumpower
budgetof70W.
Max2
(5‐8Ports)
Green
On
ThepoweroutputtoPDshasreachedthemaximumpowerbudge
of≥55W.NopowermaybesuppliedifadditionalPDsare
connected.
Off
ThepowerofalltheconnectedPoEportsis<55W,ornoPD
connectedtothecorrespondingport.
Flashing
ThepoweroutputtoPDshasexceededthemaximumpower
budgetof≥70W.
SFP1
SFP2
Green
On Adeviceisconnectedtotheport.
Off Adeviceisdisconnectedtotheport.
Flashing Sendingorreceivingdata.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
8
2.4.2 RearPanel
ACPowerConnector:
PowerissuppliedthroughanexternalACpoweradapter;itsupportsAC100‐240V,50/60Hz.
GroundingTerminal:
GroundstheswitchthroughthePEcableontheACcordorwithaseparategroundwire.
2.5 P
ACKAGE
C
ONTENTS
Beforeinstallingtheswitch,makesurethatthefollowingitemsareenclosed.Ifanypartismissingor
damaged,contactyourIntellinetagentimmediately.
8‐PortGigabitEthernetPoE+Web‐ManagedSwitchwith2SFPPorts
Fourrubberfeet,twomountingearsandeightsscrews
OneACpowercord
OneQuickInstallationGuide
InstallationCDwithUserManual
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
9
3 INSTALLINGANDCONNECTINGTHESWITCH
ThischapterdescribeshowtoinstallyourWeb‐ManagedGigabitEthernetSwitchandmakeconnectionstoit.
Thefollowingstepswillhelppreventdamagetothedeviceandmaintainpropersecurity:
Placetheswitchonastablesurfaceordesktoptominimizethechancesofitfalling.
MakesuretheswitchworksintheproperACinputrangeandmatchesthevoltagelabeledonthe
switch.
Topreventelectrocution,donotopentheswitch’schassis,evenifitfailstoreceivepower.
Makesurethatthereisproperheatdissipationfromandadequateventilationaroundtheswitch.
Makesurethesurfaceonwhichtheswitchisplacedcansupporttheweightoftheswitchandits
accessories.
3.1 DESKTOPINSTALLATION
Wheninstallingtheswitchonadesktop(ifnotinarack),attachtheenclosedrubberfeettothebottom
cornersofittominimizevibration.Allowadequatespaceforventilationbetweenthedeviceandtheobjects
aroundit.
3.2 RACK‐MOUNTABLEINSTALLATIONIN19‐INCHCABINET
TheswitchcanbemountedinanEIAstandard‐sized,19‐inchrack,whichcanbeplacedinawiringclosetwith
otherequipment.Toinstalltheswitch,followthesesteps:
Attachthemountingbracketsontheswitch’ssidepanels(oneoneachside)andsecurethemwiththescrews
provided.
Figure5‐BracketInstallation
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
10
Usethescrewsprovidedwiththeequipmentracktomounttheswitchontherackandtightenit.
Figure6‐RackInstallation
3.3 POWERONTHESWITCH
ConnecttheswitchtoanoutletusingtheAC100‐240V50/60Hzinternalhigh‐performancepowersupply.
ACElectricalOutlet:
Intellinetrecommendstheuseofasingle‐phase,three‐wirereceptaclewithaneutraloutletormultifunctional
professionalreceptacle.Besuretoconnectthemetalgroundconnectortothegroundingsourceontheoutlet.
ACPowerCordConnection:
ConnecttheACpowerconnectoronthebackpaneloftheswitchtoanexternalreceptaclewiththeincluded
powercord.ThencheckthatthepowerindicatorisON.WhenitisON,thecorrespondingLEDisilluminated.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
11
4 CONNECTIONTOTHESWITCH
4.1 CONNECTINGCOMPUTER
UsestandardCat5/5eEthernetcables(UTP/STP)toconnecttheswitchtoendnodesasdescribedbelow.
Switchportswillautomaticallyadjusttothecharacteristics(MDI/MDI‐X,speed,duplex)ofthedevicetowhich
theyareconnected.
Figure7‐PCConnect
TheLNK/ACT/SpeedLEDsforeachportareilluminatedwhenthelinkisavailable.
4.2 HOWTOLOGINTOTHESWITCH
AstheswitchprovidesWeb‐basedmanagementlogin,configureyourcomputer’sIPaddressmanuallytolog
ontotheswitch.Thedefaultsettingsoftheswitchareshownbelow.
Parameter DefaultValue
DefaultIPaddress 192.168.2.1
DefaultUsername admin
DefaultPassword 1234
Logontotheconfigurationwindowoftheswitchthroughfollowingsteps:
1. ConnecttheswitchwiththecomputerNICinterface.
2. Powerontheswitch.
3. CheckwhethertheIPaddressofthecomputeriswithinthisnetworksegment:192.168.2.xxx(“xxx”
rangeis2‐254);forexample,192.168.2.100.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
12
Openthebrowser,andgototheURLhttp://192.168.2.1.Theswitchloginwindowappears,asshownbelow.
EntertheUsernameandPassword(thefactorydefaultUsernameisadminandthePasswordis1234),and
thenclick“LOGIN”tologintotheswitchconfigurationwindowasbelow.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
13
5 SAVINGTHECONFIGURATION
TheIntellinet8‐PortGigabitEthernetPoE+Web‐ManagedSwitchprovidesamyriadofconfigurationoptions,
manyofwhicharedesignedforexperiencednetworkadministratorsandaren’teasytoconfigure.Itwouldbe
arealshameifalltheconfigurationdatawaslostafterapowerfailureoraftertheswitchwasrestarted.In
ordertomaketheconfigurationpermanent,itneedstobesaved.
Hereishow:
Ifyoudonotperformthisfunction,yourisklosingallthesettingsaftertheswitchrestarts.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
14
6 SWITCHCONFIGURATION
Thischapterdescribeshowtousetheweb‐basedmanagementinterface(WebUI)forthisswitch.
6.1 HOME
6.1.1 PortInformation
AgreensquareindicatestheportlinkisupatGigabitspeeds.Anambersquareindicatesalinkspeedof100
Mbps.Agraysquaresindicatetheportlinkisdown,andaPoEconnectionisindicatedbythecolorred.
6.1.2 PortInformation,EquipmentConfigurationandPortStatistics
Thissectionprovidesreal‐timeinformationabouttheports,basicsettingsandtrafficstatistics.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
15
Item Description
PortInformation Displaystheportnumber.Thenomenclatureisasfollows:
Gi=GigabitEthernet
0/=Switch0(whichmeansthisdevice)
1‐10=Portnumber.Ports9and10areSFPmoduleslots.
Description Optionaldescriptionfortheport,asenteredinthebasicportconfiguration.
InputFlow(bps) Inboundtrafficrate,measuredin"bitspersecond.”
OutputFlow(bps) Outboundtrafficrate,measuredin"bitspersecond.”
OpenState ON=Portisactivatedinthebasicportconfigurationandwillacceptconnections
fromnetworkingdevices.
OFF=Portisdeactivatedinbasicportconfiguration.
Status Connect:Anetworkingdeviceisconnectedtotheportandhasanactivelink.
Disconnect:Nodeviceisconnectedtotheport.
VLAN IftheportbelongstoaVLAN,itsIDisdisplayedhere.ID1=default.
TrunkPort Yes=TheportispartofanLACPtrunkinggroup.
No=TheportisnotpartofanLACPtrunkinggroup.
Thistabdisplaysinformationaboutvariousfunctionsandprovidesashort‐cutthatallowsdirectconfiguration
ofthatpartoftheswitchsettings.
Thistabdisplaysreal‐timeinformationaboutthedatapacketsforeachport.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
16
6.2 QUICKSETUP
TheIntellinet8‐PortGigabitEthernetPoE+Web‐ManagedSwitchprovidesasettingthatoffersdirectaccessto
someofthecorefunctionsofthedevice,namelyVLAN,trunking,deviceIPaddressandadminpassword.Even
thoughthefunctioniscalled“QuicklySet,”thereisnoneedtorush.Takeasmuchtimeasyoulikewiththe
configuration.
Refertosubsequentsectionsinthisuserguideforadditionalinformationabouttheindividualfunctions.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
17
6.3 PORTSETTINGS
6.3.1 BasicConfig
Accesstheparametersrelatedtoeachofthe10ports.Thescreenisdividedintotwosections.Theupper
sectiondisplaysanimageofthe10portsoftheIntellinetswitch.Inordertomakechangestoaport,simply
clicktoselectit.
Createaselectionofmultipleportsatonce:
Onceoneportormultipleportsareselected,makechangestotheportsettings.
Item Description
Portdescription Optionaldescriptionfortheport.Amaximumof80characterscanbeprovided.No
specialcharactersorspacesareallowed.
PortSpeed 10M:Forceaconnectiontobemadeat10Mbps.
100M:Forceaconnectiontobemadeat100Mbps.
1000M:Forceaconnectiontobemadeat1000Mbps.
Auto:Theswitchandconnecteddevicenegotiatethebestpossibleconnectionspeed.
FlowControl IEEE802.3xflowcontrolistheprocessofmanagingtherateofdatatransmission
betweentwonodes(i.e.,theswitchandaconnectednetworkclient)topreventafast
senderfromoverwhelmingaslowreceiver.Itprovidesamechanismforthereceiver
tocontrolthetransmissionspeedsothatthereceivingnodeisnotoverwhelmedwith
datafromthetransmittingnode.Thatsoundslikeit'sagoodthing,anditis.Sowhyis
theoptionbydefaultsetto“disabled"?Theshortanswerisbecauseyounormally
don’tneeditandbecauseitcan,inveryrareinstances,haveanegativeimpactonthe
overallperformanceinyournetwork.TheTCPprotocolalreadyprovidesitsownflow
controlmechanism,allowingasendertothrottlebackthespeedifthereceiveris
havingproblemskeepingup.
Status ON:Activatetheport.
OFF:Disablestheport.Noconnectionstoitcanbemade.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
18
Item Description
DuplexMode Thisparametercontrolstheduplexmode.Inafull‐duplexsystem,bothpartiescan
communicatetotheothersimultaneously.Anexampleofafull‐duplexdeviceisa
telephone;thepartiesatbothendsofacallcanspeakandbeheardbytheotherparty
simultaneously.Innetworkingterms,fullduplexallowsuserstoreceiveandtransmit
dataatthesametime,whereashalfduplexdoesnot.Ifthetelephoneisanexample
forfullduplex,thenapush‐to‐talkCBradioor"walkie‐talkie"representshalfduplex.
Theswitchcaneitherreceiveorsenddata,butitcanneverhappensimultaneously.
Unlessyouhaveaspecificreasonnottodoso,thisshouldbeleftin“Auto”mode.
CableType
Detection
AutoMDI‐Xautomaticallydetectstherequiredcable‐connectiontypeandconfigures
theconnectionappropriately,removingtheneedforcrossovercablestointerconnect
switchesorforconnectingPCspeer‐to‐peer.Aslongasitisenabledoneitherendofa
link,eithertypeofcablecanbeused.ForautoMDI‐Xtooperatecorrectly,thedata
rateontheinterfaceandduplexsettingmustbesetto"auto."WhentwoautoMDI‐X
portsareconnectedtogether,whichisnormalformodernproducts,thealgorithm
resolutiontimeistypically<500ms.However,a~1.4secondasynchronoustimeris
usedtoresolvetheextremelyrarecase(withaprobabilityoflessthan1in5×1021)ofa
loopwhereeachendkeepsswitching.Ifyoudon’tunderstandanyofthis,simplyleave
thisvalueon“Auto.”
Thescreenalsoshowsatablethatlistsall10portsalongwiththeirparameters.The“megaframe”valuerefers
tojumboframes,whichareEthernetframeswithmorethan1500bytesofpayload.Definethesizeofthe
jumboframesinthesectionSYSTEM‐>SYSTEMCONFIG.
Clickingthepencilallowstheadministratortoedittheportsettings,exactlythesamewayas
directlyselectingtheport(s)asshownonthepreviouspage.
6.3.2 PortAggregation
PortaggregationisamethodofusingmultipleEthernetportsinparalleltoincreasethroughputbeyondwhata
singleconnectioncouldsustainandtoprovideredundancyincaseoneofthelinksshouldfail.Asthisis
essentiallyagroupingofportsintoonelogicalunit,wecallthemLinkAggregationGroups,or“LAG”forshort.
ThispageisusedtosetupLAGs.CreateuptoeightdifferentLAGs;eachcanhaveuptoeightmemberports.
EachLAGcanbegivenacustomname,andyoumustselecttheportsfortheLAG.Theexamplebelowshowsa
LAGgroupsetupwithfourmemberports.
Item Description
Aggregateportnumber Thisisthelinkaggregationgroup(LAG)number
Pleaseselecttheporttojointheaggregateport SelectthememberportsthatbelongtothisLAG
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
2
6.3.3 PortMirroring
Portmirroringistheabilityofa
networkswitchtosendacopyof
networkpacketsseenonaswitch
portorportstoanetwork‐
monitoringdeviceconnectedto
anotherswitchport(i.e.,a
computerequippedwithapacket
snifferutility).TheIntellinet8‐
PortGigabitEthernetPoE+Web‐
ManagedSwitchprovidesupto
fourgroupsforport‐mirroring
settings.
Theexamplebelowshowsthesetupofonemirrorgroupwherealltrafficoccurringonport1ismirroredto
port6.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
3
6.3.4 Portspeedlimit
ThisfeatureallowstheusertolimitthedataratesforaparticularportontheIntellinet8‐PortGigabitEthernet
PoE+Web‐ManagedSwitch.Whenthedatarateexceedsuser‐configuredvalues,theIntellinetswitchdrops
packetsimmediately.Ratelimitingisconfiguredfortwotypesoftransmissions,whichareingressandegress.
Ingresstrafficisreceivedonanygivenport(incoming,inbound,downloadorinputspeed),whereasegress
trafficissentout(outgoing,outbound,uploadoroutputspeed)toanothernetworkclient.
TheIntellinetswitchallowstheusertocontroltheavailablebandwidthforeachportindividually.Thespeedis
measuredinkbps,whichstandsforkilobitspersecond.Thedefaultis1million,whichistheequivalentof1
Gigabitpersecond.Valuesenteredmustbemultiplesof“16”(e.g.,16,32,48,…,512,….,1024,etc.).
Item Description
Portnumber1‐10 Selectindividualportsorarangeofports.
Inputspeedlimit(multipleof16) Providetheingressrateinkbps.
Outputspeedlimit(multipleof16) Providetheegressrateinkbps.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
4
6.3.5 Broadcaststorm
StormcontrolpreventsabroadcaststormfromdisruptingLANinterfaces.Abroadcaststormoccurswhen
broadcastpacketsfloodthesubnet,creatingexcessivetrafficanddegradingnetworkperformance.Errorsin
theprotocol‐stackimplementationorinthenetworkconfigurationcancauseabroadcaststorm.TheIntellinet
switchallowstheusertoconfigurethemaximumallowedpackets‐per‐second(pps)ratesforthreedifferent
typesofpackets.It'spossibletosetall10portstothesamevalueorprovideindividualvalues.
Item Description
Portnumber1‐52 Selectindividualportsorarangeofports.
Broadcastlimit Enterthemaximumppsforbroadcastpackets.
Multicastlimit Enterthemaximumppsformulticastpackets.
Unicastlimit Enterthemaximumppsforunicastpackets.
MulticastType Definewhethertoapplythestormfilteronlytomulticastpacketswith
unknowndestinationMACaddressesortobothknownandunknown
destinations.
UnicastType Definewhethertoapplythestormfilteronlytounicastpacketswith
unknowndestinationMACaddressesortobothknownandunknown
destinations.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
5
6.3.6 Portisolation
TheportisolationfunctionallowsanadministratortoconfiguretheIntellinetswitchinawaythatpreventsPCs
ondifferentportsfromcommunicatingwitheachotherbutwithoutconfiguringaVLAN.
Item Description
SourcePort Selecttheportyouwishtoisolate.
IsolationPort Selecttheport(s)towhichpacketsfromthesourceportcanbe
forwarded.Morethanoneportcanbeselectedhere.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
6
6.3.6.1 ConfigurationExample***:
1. ThreePCs,oneNAS,andonerouterareconnected
totheIntellinetswitch.
2. PC1isconnectedtoPort1.
3. PC2isconnectedtoPort2.
4. PC3isconnectedtoPort3.
5. TheNASisconnectedtoPort4.
6. TherouterisconnectedtoPort5.
7. PC1canaccesstheNASandtherouter.
8. PC2andPC3canonlyaccesstherouter.
PC1onport1:
PC2onport2:
PC3onport3:
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
7
NASonPort4:
RouteronPort5:
Whencompleted,theconfigurationwilllooklikethis.Tobetterunderstandwhatishappening,ithelpsto
considertheisolatedportsastheportswithwhichthesourceportscancommunicate.
***Screenshotstakenfrom16‐PortGigabitEthernetPoE+Web‐ManagedSwitchwith2SFPPorts,model
561341.Thesetupofthe8‐portversionisidentical.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
8
6.4 VLAN
AvirtualLAN(VLAN)isanybroadcastdomainthatispartitionedandisolatedinacomputernetworkatthe
datalinklayer(OSIlayer2).VLANsaredatalinklayer(OSIlayer2)constructsthatareanalogoustoIPsubnets,
whicharenetwork‐layer(OSIlayer3)constructs.VLANscanbeusedtopartitionalocalnetworkintoseveral
distinctivesegments.
VLANtechnologyprovidesthefollowingadvantages:
1. BroadcasttrafficdoesnotcrossintodifferentVLANs,whichreducesbandwidthutilizationand
improvesnetworkperformance.
2. SecurityinyourLANcanbeimproved,sincepacketsindifferentVLANscannotcommunicatewith
eachotherdirectly.
3. WithVLAN,clientscanbeallocatedtodifferentworkinggroups,andusersfromthesamegroupdo
nothavetobewithinthesamephysicalarea,whichmakesnetworkmaintenancemucheasierand
moreflexible.
VLANtechnologyknowsthreetypesofports—access,trunkandhybridports.
1. AccessPorts(untagged)
a. AccessportsaredesignedtotaganyincomingpacketwiththeVLANIDtheporthasbeen
assignedto.
b. TheswitchdropstaggedVLANpacketsthatarriveattheaccessport.
c. AsfarastheIntellinetswitchisconcerned,anyportthatisn’tdefinedasatrunkorhybrid
portisconsideredanaccessport.
2. TrunkPorts(tagged)
a. TrunkportsaredesignedtofilteroutpacketsthathaveeithernoVLANtagorVLANtagsthat
arenotontheallowedVLANIDlist.
b. TrunkportsdonotremoveanyexistingVLANtagsfromincomingpackets.
c. TrunkportsdonotaddaVLANtagtoanyincominguntaggedpacket.
d. Trunkportsareidealforswitch‐to‐switchconnectionsorfordevicesthathavetheabilityto
tagpacketsbythemselvessuchasVoIPphones.
3. HybridPorts
a. Theseareacombinationofaccessandtrunkports.
b. HybridportswilltaganyincomingpacketthathasnoVLANIDwiththeVLANIDtheporthas
beenassignedto.
c. HybridportswillalsoactastrunkportsforpacketsthathaveaVLANtag.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
9
NewVLAN:
Item Description
VLANID TypeintheIDforthenewVLAN.Thisvaluecannotbe“1”noranyID
alreadysetupontheswitch.
VLANName ProvideadescriptivenamefortheVLAN(e.g.,“VOICE”).
ChoosetojointheVLANport SelectalltheportsyouwishtobeapartofthisVLAN.Notethatthese
portswillactasaccessports.TheywilladdtheVLANIDtoanyuntagged
packetandrejectanyincomingpacketsthathaveaVLANtag.
Note:VLANID1isthedefaultVLAN,whichcannotberemoved.However,accessportsthatareassignedto
anotherVLANwillbeautomaticallyremovedfromVLAN1.Thescreenshotbelowshowswhatthesetuplooks
likeaftertheaboveVLANhasbeenadded:
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
10
6.4.1 TrunkPortSettings
Atrunkporttransmitstaggedpacketsandisusedtoconnectdifferentswitcheswithoneanother.
NewTrunk‐Port:
Item Description
NativeVLANID ThenativeVLANIDistheuntaggedVLANonanIEEE802.1qtrunkedport.
ThenativeVLANandmanagementVLAN(seeSYSTEM‐>SYSTEMCONFIG)
canbethesame,butintermsofsecurity,itisbetterthattheyaren't.Ifa
switchreceivesanuntaggedframeonatrunkport,itisassumedtobe
partoftheNativeVLANthatisdesignatedontheswitchtrunkport.
AllowingVLAN EntertheIDsofallVLANsthatyouwishthetrunkporttoforward.All
othertaggedpacketswillbedropped.
NotethatanyvalueyouenterheremustfirstbedefinedasaVLANinthe
previousVLANsettingspage.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
11
6.4.2 HybridPortSettings
AHybridportisacombinationofatrunkandanaccessport.
Item Description
NativeVLANID Seeprevioustrunkportsection.
VLANTAG VLANIDthatisaddedtoanyuntaggedpacketarrivingattheport.Note:
YoucannotentermultipleIDsorrangesofIDs.Whilethewebinterface
mayshowthis,itisincorrect.
AllowedVLANIDS EntertheIDsofallVLANsthatyouwishthehybridporttoforward.All
othertaggedpacketswillbedropped.
PortDescription Thenameoftheportasdefinedinsection6.3.1.
AddTAGVLAN VLANIDthatisaddedtountaggedVLANpackets.
AllowedTAGVLAN TaggedVLANpacketsthatareallowedtopassthrough;allothertagged
packetswillbedropped.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
12
6.4.3 SetupExample***
Thissectionprovidesareal‐lifeexampleandthecorrespondingsetupoftheIntellinetswitch,orinthiscase,
switches.
TherearethreeVLANsinthenetwork
o VLANID100–InternaldatanetworkwithaccesstoInternet
o VLANID200–VoIPnetwork
o VLANID300–GuestnetworkprovidesInternetaccess,butnothingelse
LANSwitch#1:
o Port2:VoIPphoneusingVLANID200,PCconnectedtobackofphone
o Port6:VoIPphoneusingVLANID200
o Port8:PC
o Port10:WirelessaccesspointforinternalnetworkandaccesstoInternet
o Port12:GuestwirelessaccesspointprovidesInternetaccessonly
o Port16:ConnectiontoLANswitch#2
LANSwitch#2:
o Port1:ConnectiontoLANswitch#1
o Port2:MailServer
o Port3:FileServer
o Port4:VoIPGateway/PBX
o Port8:Internetgateway,firewall,modem
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
13
6.4.3.1 SetupLANSwitch#1:
***Screenshotstakenfrom16‐PortGigabitEthernetPoE+Web‐ManagedSwitchwith2SFPPorts,model
561341.Thesetupofthe8‐portversionisidentical.
Trunkportsettings:
Port6:VoIPphone.Thisphonetagsallpacketsbyitself.Theswitchdoesnotneedtotagthepackets.
Port16:ConnectiontoLANswitch#2.ThisportpassesonalltrafficforVLANIDs100,200and300.Allother
trafficwillbedropped.
Hybridportsettings:
Port2isaspecialcasebecausetwonetworkingdevicesareconnected‐‐theVoIPphoneandaPC,whichis
connectedtothebackofthephone.TheVoIPphonetagsthepacketsitself,andtheswitchmustletthemgo
through,justlikeanormaltrunkportwould.However,thePCconnectedtoitcannottagthepacketsbyitself
andthereforemustrelyontheIntellinetswitchtodoso.
TheIntellinetswitchaddstheVLANID100toallpacketsthatarenottaggedasVLANID200.Port2actsasan
untaggedport(VLANID100)andtaggedport(VLANID200)atthesametime,hencethenamehybrid.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
14
6.4.3.2 SetupLANSwitch#2:
VLANID1(defaultVLAN)onlycontainsportsthatarenototherwiseassigned.
***Screenshotstakenfrom16‐PortGigabitEthernetPoE+Web‐ManagedSwitchwith2SFPPorts,model
561341.Thesetupofthe8‐portversionisidentical.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
15
6.5 F
AULT
/S
AFETY
6.5.1 AntiAttack
6.5.1.1 DHCPSnooping
DHCPsnoopingisasecuritytechnologybuiltintotheoperatingsystemofacapablenetworkswitchthatdrops
DHCPtrafficdeterminedtobeunacceptable.ThefundamentaluseforDHCPsnoopingistoprevent
unauthorized(rogue)DHCPserversfromofferingIPaddressestoDHCPclients.
CommandUsage
NetworktrafficmaybedisruptedwhenmaliciousDHCPmessagesarereceivedfromanoutsidesource.DHCP
snoopingisusedtofilterDHCPmessagesreceivedonanon‐secureinterfacefromoutsidethenetworkor
firewall.WhenDHCPsnoopingisenabledgloballyonaVLANinterface,DHCPmessageswillbedroppedifthey
arereceivedfromadevicethatisnotlistedintheDHCPsnoopingtableorthatusesanuntrustedinterface.
Tableentriesareonlylearnedfortrustedinterfaces.AnentryisaddedorremoveddynamicallytotheDHCP
snoopingtablewhenaclientreceivesorreleasesanIPaddressfromaDHCPserver.EachentryincludesaMAC
address,IPaddress,leasetime,VLANidentifierandportidentifier.
WhenDHCPsnoopingisenabled,DHCPmessagesenteringanuntrustedinterfacearefilteredbasedupon
dynamicentrieslearnedviaDHCPsnooping.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
16
Item Description
NativeProtectionStatus Closed:AllDHCPrelatedtrafficwillpassthroughtheIntellinetswitch
withoutanyinterference.
Open:ActivatesDHCPsnooping;DHCPtrafficisnowsubjecttocertain
rules.
DHCPTrustedPort Thesearetrustedportsonyournetwork,whichareunderyourdirect
administrativecontrol.Switches,routersandserversinthenetworkare
typicallyconnectedtotheseports.DHCPtrafficfromtrustedportsis
consideredsafe.
ProhibitDHCPForAddress Anyportbeyondthefirewalloroutsidethenetworkisuntrusted.DHCP
trafficfromtrustedportsisconsideredunsafe.DHCPresponsepacketson
theseportswillbedropped,thuspreventingapossibleman‐in‐the‐middle
attack.
Item Description
SourceMACVerify DHCPsnoopingMACaddressVerifyensuresthattheIntellinetswitch
verifiesthatthesourceMACaddressandtheclienthardwareaddress
matchinDHCPpacketsthatarereceivedonuntrustedports.
SourceMACVerifyEnable ChecktoactivateMACaddressverification.
MACAddress TypeintheMACaddress(formatxx:xx:xx:xx:xx:xx).
Verify/NoVerify Verify:AddsMACaddresstotheconfiguration.
NoVerify:RemovespreviouslyenteredMACaddressfromconfiguration.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
17
EnableOption82support.
ClientOption82enabledtrustmode.
Option82AgentCircuitID(suboption1)
Item Description
CircuitName CircuitID,anASCIIstringthatidentifiestheinterfaceonwhichtheclient
DHCPpacketisreceived.
VLANID SpecifytheOption82foraspecificVLANID(use1fordefaultVLAN).
Option82AgentRemoteID(suboption2)
Item Description
RemoteName RemoteID,anASCIIstringassignedbytheDHCPrelayagentthatsecurely
identifiestheclient.
VLANID SpecifytheOption82foraspecificVLANID(use1fordefaultVLAN).
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
18
WhenDHCPsnoopingisenabled,theleaseinformationfromtheswitchingdeviceisusedtocreatetheDHCP
snoopingdatabase,alsoknownastheDHCPsnoopingbindingtable.ThetableshowstheIP‐MACbinding,as
wellastheleasetimefortheIPaddress,typeofbinding,VLANnameandinterfaceforeachhost.The
informationinthistableisgatheredduringrun‐timeasclientsjointhenetworkandrequestIPaddressesvia
DHCP.Whentheswitchreboots,theinformationislost,exceptforstaticbindings.
Item Description
MACAddress MACaddressforstaticentry.
VLANID SpecifytheVLANIDforthestaticentry.
PortNumber Selecttheport(1–10)forthestaticentry.
DHCPSnooping
BindingTable
Containsrun‐timeinformationofconnectedDHCPclients,includingtheirMAC
address,theportnumbertowhichtheyareconnected,theIPaddresstheyhave
beengiven,etc.
Item Description
DHCPSnoopingVLAN VLANtowhichyouwanttoapplyDHCPsnooping.
ServerIPAddress DHCPserverIPaddress.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
19
6.5.1.2 DoS
Adenial‐of‐service(DoS)attackisanattempttomakeamachineornetworkresourceunavailabletoits
intendeduserssuchastemporarilyorindefinitelyinterruptingorsuspendingservicesofahostconnectedto
theInternet.TheIntellinetswitchhasintegratedmechanismstocounterpossibleDoSattackslikelandattacks
orillegalTCP/IPpackets.Thereareconfigurationoptions.Yousimplyactivateordeactivatethisfeature.
6.5.1.3 IPSourceGuard
IPSourceGuardisasecurityfeaturethatrestrictsIPtrafficonuntrustedLayer2portsbyfilteringtrafficbased
ontheDHCPsnoopingbindingtable(seesection6.5.1.1)ormanuallyconfiguredIPsourcebindings.Equipped
withthisfeature,theIntellinetswitchhelpstopreventIPspoofingattacks.AnIPspoofingattackiswhenahost
triestospoof(fake)andusetheIPaddressofanotherhostinordertointercepttrafficboundforthathost.
IfyouenableIPSourceGuardforaportinitially,allIPtrafficontheprotectedportisblockedexceptforDHCP
packets.AfteraclientreceivesanIPaddressfromtheDHCPserver,alltrafficwiththatIPsourceaddressis
permittedfromthatclient.InsteadofaDHCPserver,it'spossibletoprovidestaticIPsourcebinding,whichis
called“newsecurityport”ontheIntellinetswitchwebadminUI.
Item Description
PleaseselecttheIPsourceto
protecttheport:
Selecttheport(orports)thatyouwishtoprotectbyIPSourceGuard.The
exampleaboveshowsthatIPSourceGuardisenabledforport4.Note
thatIPSourceGuardisn’tsupportedonTrunkoraggregatedports.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
20
Item Description
VLANID SpecifytheVLANIDforthestaticentry.Leave1forthedefaultVLAN.
SourceIPAddress SpecifytheIPaddressoftheclientforthestaticentry.
SourceMACAddress SpecifytheMACaddressoftheclientforthestaticentry.
Ports Selecttheporttowhichtheclientisconnected(port14intheexampleabove).
Youcanonlyselectoneport.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
21
6.5.1.4 IPMACPortBinding
TheIntellinet8‐PortGigabitEthernetPoE+Web‐ManagedSwitchfeaturesIPMACPortBinding.Thispowerful
authenticationfunctionensurescorrectnessofhardware(MACaddress),software/user(IPaddress)and
location(Connectedport)fordevicesconnectedtothenetwork.Thisfeatureensurestheyallarelegalsources
topreventthedataleakagefromhackersfakingthelegalnetworkdevices.
(screenshotstakenfrom16‐portversion)
Item Description
BindingEnable ChecktoactivateIPMacportbinding.
Scanning Clicktoscanforconnectednetworkclients.
Binding SelecttheclientsyouwishtoaddtotheIPMacportbindingtable,thenclickon
“Binding.”
ApplicationList Allcurrent,staticIP‐MAC‐portbindingentriesarelistedhere.Notethatthis
informationwillbelostaftertheswitchisrestarted.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
22
6.5.2 ChannelDetection
TheIntellinetswitchisequippedwithasetofnetworktoolsthatcanaidthenetworkadministratorin
troubleshootingproblems.
6.5.2.1 Ping
Item Description
DestinationIPaddress IPaddressyouwishtoping.
TimeoutPeriod Definethemaximumallowedresponsetime(s)beforetheresponseisconsidered
tohavetimed‐out.
Repeatnumber DefinehowmanypingrequestsyouwanttheIntellinetswitchtosendtothe
destinationIPaddress.
6.5.2.2 Tracert
Item Description
DestinationIPaddress IPaddressyouwishtorunatracertfor.
TimeoutPeriod Definethemaximumallowedresponsetime(s)beforetheresponseisconsidered
tohavetimed‐out.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
23
6.5.2.3 CableTest
Thecabletestutilityallowsanadministratortoperformaquickcheckoftheconnectedcables.
Item Description
SelectPort Selectoneofthe10ports,andthenclickon“Starttest.”
TestResults Displaystheresultsofthecabletest.Notethatifyoutestaporttowhichnocable
isconnected,thetestreturnsthevalue“circuitbreaker,”becausewhynot?
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
24
6.5.3 ACLAccessControlList
ACEisanacronymforAccessControlEntry.ItdescribesaccesspermissionassociatedwithaparticularACEID.
TherearethreeACEframetypes–EthernetType,ARPandIPv4–andtwoACEactions–permitanddeny.The
ACEalsocontainsmanydetailed,different‐parameteroptionsthatareavailableforindividualapplication.
ACLisanacronymforAccessControlList,atableofACEsthatcontainaccesscontrolentries,whichspecify
individualusersorgroupswhoarepermittedordeniedaccesstospecifictrafficobjectssuchasaprocessora
program.EachaccessibletrafficobjectcontainsanidentifiertoitsACL.Theprivilegesdeterminewhether
therearespecifictrafficobjectaccessrights.
ACLimplementationscanbequitecomplex(e.g.,whentheACEsareprioritizedforvarioussituations).In
networking,theACLreferstoalistofserviceportsornetworkservicesthatareavailableonahostorserver,
eachwithalistofhostsorserverswhoarepermittedordeniedaccesstotheservice.ACLcangenerallybe
configuredtocontrolinboundtraffic,andinthiscontext,theyaresimilartofirewalls.
6.5.3.1 Timetables
Thissectionallowsyoutosetupatimeframe.ThistimeframecanbeappliedtoACLrulestoeitherallowor
denyaccess.Thetimetabledoesnotdirectlyspecifywhetheraccessisdeniedorallowed.Rather,itissimplya
waytocreateaneasilyaccessibletimeframethatcanbeappliedtoACLrules.Theexamplebelowshowsthe
setupofatimetablecalled“WorkingHours.”NotethattheIntellinetswitchmustbesetupwithaproper
systemtime(seesectionSystemConfig).
Item Description
NewTimetableName Provideadescriptivenameforthetimetable.
TimeInterval Specifythedaysoftheweekandstartandendtime.Clickonthe toadd
additionaltimeframes.Click“Save”tosavethetimetable.
Timetableslist Drop‐downlistcontainsalltimetablespreviouslysetup.
Timeweek Selectedweekdaysfortheselectedtimetable.
TimeInterval Timeintervalforselectedtimetable.
Operation
Editselectedtimetable
Deledselectedtimetable
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
25
6.5.3.2 ACL
Thissectiondescribeshowtosetuptheactualaccesscontrollist(ACL).TheACLconnectsIPaddressandport
informationwithatimetable(seesection6.5.3.1)andanactiontoeitherallowordenyaccesstothenetwork
throughtheswitch.TheexamplebelowcreatesanACL,whichallowsaccesstothenetworkforanycomputer
Item Description
ACLNumber EachACLrulegetsanumber.Selecttheonefromthedrop‐downlistforwhich
youwanttocreatethisACE(AccessControlEntry).
Action Definewhetherthisrulegrantsaccess(“allow”)tothenetwork,orprohibitsit
(“deny”).
SRC/DESTIPAddress SpecifythesourceanddestinationIPaddressforthisACE.Youcanprovidea
singleIPaddress(e.g.,192.168.2.100)oraspecificnetwork(e.g.,255.255.255.0).
SRC/DESTPort ThisoptionisonlyvisibleiftheACEiscreatedforTCPorUDP.Itwillnotshowfor
IPACLs(seenextparameter).Youcanprovideasingleportorarangeofports.
ProtocolMatching IP:TheACEisappliedtopacketsbasedontheirsourceand/ordestinationIP
address.
TCP/UDP:TheACEisappliedtopacketsbasedontheirsourceand/ordestination
IPaddressandtheportnumberfortheselectedprotocol.
Time IfyouwanttolimittheACEtoaspecifictimetable(seesection6.5.3.1),selectit
fromthedrop‐downlist.
Example1–Disallowaccesstothenetworkforanycomputeroutsideoftheworkinghours.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
26
Example2–DisallowaccesstothenetworkforanindividualIPaddressduringtheworkinghours.
6.5.3.3 ApplyACL
ThisfunctionallowsanadministratortolinkanACLtooneormoreofthe10availableswitchports.
SelecttheportsandACLlist,andclick“Save”inordertoactivate.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
27
6.6 POE
TheIntellinet8‐PortGigabitEthernetPoE+Web‐ManagedSwitchwith2SFPPortsisequippedwith
sophisticatedPoE‐monitoringandconfigurationoptions.
6.6.1 PoEConfig
6.6.1.1 Management
Item Description
Workingstatus Displaysthevalue“On‐line,”indicatingthatthePoEfunctionisworkingproperly.
Ratedtotalpower ThisnumberrepresentsthemaximumavailablePoEpowerforallconnectedPoE
devices.
PowerOutput ThisvaluerepresentsthetotalpowerdrawofallconnectedPoEdevices.
AlarmPower TheIntellinetswitchcanalertthenetworkadministratorviaSNMPmessagesifa
certainPoEpowerdrawvaluehasbeenreached.Thisthresholdcanbeconfigured
underthealarm‐notice.
VoltageLevel Displaysthecurrentoutputvoltage.
Alarm‐Notification Definethealarmnoticevalue,which,whenexceeded,causestheswitchtosend
outSNMPtrapmessages.
Alarm‐Notification EnabletoreceiveSNMPtrapsifthethresholdlevelhasbeenexceeded.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
28
6.6.1.2 TemperatureDistribution
ThisfunctionmonitorsthetemperatureofthetwoPoEchipsintheIntellinetswitchandsendsoutSNMPtrap
messagesifathresholdyousetwillbeexceeded.
Click inordertoeditthetemperaturethresholdofthePoEchip.NotethatinorderfortheIntellinetPoE
switchtosendourSNMPtraps,SNMPmustbeactivatedandconfigured.
6.6.2 PoEPortConfig
ThissectiondescribeshowtoedittheparametersofindividualPoEports.
Uponopeningtheconfigurationscreen,anoverviewofthePoEportsandtheirstatusesappears.Clickon
inordertomodifyindividualports.Clickon inordertomodifytheparametersforallports
onthecurrentpage(1‐8)atthesametime.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
29
Item Description
PortID DisplaystheIDoftheportyouareeditingor“CurPageAllports”ifyouareediting
allportsonthecurrentpage.
PortMode ActivateordeactivatePoEsupport.
PortPriority Youcanchoosefromthreevalues:low,midandhigh.Theprioritycanbeusedto
definewhichportwon’tbereceivingpowerintheeventthatthemaximumPoE
powerhasbeenexceeded.
Example:It'spossibletosetthevalueto"high"forportswithsecuritycameras
connectedtothem.Thisensuresthatthesecameraswillalwaysbesuppliedwith
power,evenifthetotalpowerdrawontheIntellinetswitchexceedsthe
maximumavailablePoEpower.Portsthataresettolowormidwillbe
disconnectedfirst–inthatorder.
DetectionMode SomegoodadviceistoleavethisAT&AF.YoucanenableAF‐onlymode,ifyour
olderIEEE802.3afPoEdevicesarenotabletocommunicatewiththeIntellinetPoE
switch.
MaximumPower Definethemaximumoutputpoweravailablefortheport(s)inrangefrom1to36
watts.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
30
6.6.3 PoEDelayConfig
ThisfunctionallowsanadministratortoprogramastartupsequenceforyourPoE‐compliantdevicesand
eliminatepotentialproblemscausedbytheincreasedpowerdrawatstartup.Thesequentialpower‐up
guaranteesasmoothstartupprocedureforallconnectednetworkingdevices(i.e.,yourPoE‐enablednetwork
cameras).
Item Description
Port
Restart
Time
Thisfunctionisnotdirectlylinkedtotheportdelaytime,butinveryspecialcircumstances,it
canbeuseful.Ifenabled,youcaninstructthePoEswitchtocutpowertotheport(s)aftera
giventimehaspassed.
Example1–RestartthePoEdeviceonceperweek:
Example2–RestartthePoEdeviceonceevery2.5days:
Attention:
youcannotsettheexacttimeatwhichtherestartoccurs.Itiscontrolledbywhenthefeature
wasactivatedorwhentheswitchhasperformedarestart.Becarefulusingthisfeature.
PortDelay
Time
Definehowlongtheswitchwillhavetowaitbeforeitactivatestheport(s)afterasystem
restart.Enterthedelayvalueinseconds.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
31
6.7 SPANNINGTREEPROTOCOL(STP)
TheSpanningTreeProtocolcanbeusedtodetectanddisablenetworkloopsandtoprovidebackuplinks
betweenswitches,bridgesorrouters.Thisallowstheswitchtointeractwithotherbridgingdevicesinyour
networktoensurethatonlyonerouteexistsbetweenanytwostationsonthenetwork.Italsoprovidesbackup
links,whichautomaticallytakeoverwhenaprimarylinkgoesdown.Thespanningtreealgorithmssupported
bythisswitchincludetheseversions:
STP–SpanningTreeProtocol(IEEE802.1D)
RSTP–RapidSpanningTreeProtocol(IEEE802.1w)
MSTP–MultipleSpanningTreeProtocol(IEEE802.1s)
TheIEEE802.1DSpanningTreeProtocolandIEEE802.1wRapidSpanningTreeProtocolallowfortheblocking
oflinksbetweenswitchesthatformloopswithinthenetwork.Whenmultiplelinksbetweenswitchesare
detected,aprimarylinkisestablished.Duplicatedlinksareblockedfromuseandbecomestandbylinks.The
protocolallowstheduplicatelinkstobeusedintheeventofafailureoftheprimarylink.OncetheSpanning
TreeProtocolisconfiguredandenabled,primarylinksareestablished,andduplicatedlinksareblocked
automatically.Thereactivationoftheblockedlinks(atthetimeofaprimarylinkfailure)isalsoaccomplished
automaticallywithoutoperatorintervention.Thisautomaticnetworkreconfigurationprovidesmaximum
uptimetonetworkusers.However,theconceptsoftheSpanningTreeAlgorithmandprotocolarea
complicatedandcomplexsubjectandmustbefullyresearchedandunderstood.Itispossibletocauseserious
degradationtonetworkperformanceiftheSpanningTreeisincorrectlyconfigured.Pleasereadthefollowing
beforemakinganychangesfromthedefaultvalues.
TheSwitchSTPperformsthefollowingfunctions:
Createsasinglespanningtreefromanycombinationofswitchingorbridgingelements.
Createsmultiplespanningtrees–fromanycombinationofportscontainedwithinasingleswitchin
userspecifiedgroups.
Automaticallyreconfiguresthespanningtreetocompensateforthefailure,additionorremovalof
anyelementinthetree.
Reconfiguresthespanningtreewithoutoperatorintervention.
BridgeProtocolDataUnits
ForSTPtoarriveatastablenetworktopology,thefollowinginformationisused:
Theuniqueswitchidentifier
Thepathcosttotherootassociatedwitheachswitchport
Theportidentifier
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
32
STPcommunicatesbetweenswitchesonthenetworkusingBridgeProtocolDataUnits(BPDUs).EachBPDU
containsthefollowinginformation:
Theuniqueidentifieroftheswitchthatthetransmittingswitchcurrentlybelievesistherootswitch
Thepathcosttotherootfromthetransmittingport
Theportidentifierofthetransmittingport
TheswitchsendsBPDUstocommunicateandconstructthespanning‐treetopology.Allswitchesconnectedto
theLANonwhichthepacketistransmittedwillreceivetheBPDU.TheswitchdoesnotdirectlyforwardBPDUs,
butthereceivingswitchusestheinformationintheframetocalculateaBPDU,and,ifthetopologychanges,
initiatesaBPDUtransmission.
ThecommunicationbetweenswitchesviaBPDUsresultsinthefollowing:
Oneswitchiselectedastherootswitch
Theshortestdistancetotherootswitchiscalculatedforeachswitch
Adesignatedswitchisselected.Thisistheswitchclosesttotherootswitchthroughwhichpackets
willbeforwardedtotheroot.
Aportforeachswitchisselected.Thisistheportprovidingthebestpathfromtheswitchtotheroot
switch.
PortsincludedintheSTPareselected.
CreatingaStableSTPTopology
IfallswitcheshaveSTPenabledwithdefaultsettings,theswitchwiththelowestMACaddressinthenetwork
willbecometherootswitch.Byincreasingthepriority(loweringtheprioritynumber)ofthebestswitch,STP
canbeforcedtoselectthebestswitchastherootswitch.WhenSTPisenabledusingthedefaultparameters,
thepathbetweensourceanddestinationstationsinaswitchednetworkmightnotbeideal.Forinstance,
connectinghigher‐speedlinkstoaportthathasahighernumberthanthecurrentrootportcancausearoot‐
portchange.
STPPortStates
BPDUstakesometimetopassthroughanetwork.Thispropagationdelaycanresultintopologychanges
whereaportthattransitioneddirectlyfromaBlockingstatetoaForwardingstatecouldcreatetemporary
dataloops.Portsmustwaitfornewnetworktopologyinformationtopropagatethroughoutthenetwork
beforestartingtoforwardpackets.TheymustalsowaitforthepacketlifetimetoexpireforBPDUpacketsthat
wereforwardedbasedontheoldtopology.Theforwarddelaytimerisusedtoallowthenetworktopologyto
stabilizeafteratopologychange.Inaddition,STPspecifiesaseriesofstatesaportmusttransitionthroughto
furtherensurethatastablenetworktopologyiscreatedafteratopologychange.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
33
EachportonaswitchusingSTPexistsisinoneofthefollowingfivestates:
Blocking–theportisblockedfromforwardingorreceivingpackets
Listening–theportiswaitingtoreceiveBPDUpacketsthatmaytelltheporttogobacktothe
blockingstate
Learning–theportisaddingaddressestoitsforwardingdatabase,butnotyetforwardingpackets
Forwarding–theportisforwardingpackets
Disabled–theportonlyrespondstonetworkmanagementmessagesandmustreturntotheblocking
statefirst
Aporttransitionsfromonestatetoanotherasfollows:
Frominitialization(switchboot)toblocking
Fromblockingtolisteningortodisabled
Fromlisteningtolearningortodisabled
Fromlearningtoforwardingortodisabled
Fromforwardingtodisabled
Fromdisabledtoblocking
It'spossibletomodifyeachportstatebyusingmanagementsoftware.WhenyouenableSTP,everyporton
everyswitchinthenetworkgoesthroughtheblockingstateandthentransitionsthroughthestatesof
listeningandlearningatpowerup.Ifproperlyconfigured,eachportstabilizestotheforwardingorblocking
state.Nopackets(exceptBPDUs)areforwardedfromorreceivedbySTPenabledports,untiltheforwarding
stateisenabledforthatport.
TheSwitchallowsfortwolevelsofoperation:theswitchlevelandtheportlevel.Theswitchlevelformsa
spanningtreeconsistingoflinksbetweenoneormoreswitches.Theportlevelconstructsaspanningtree
consistingofgroupsofoneormoreports.TheSTPoperatesinmuchthesamewayforbothlevels.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
34
6.7.1 MSTPRegion
Item Description
MSTPRegionConfiguration EachswitchrunningMSTinthenetworkhasasingleMSTconfigurationthat
consistsofthesetwoattributes:
1. Regionname
a. Analphanumericconfigurationname
2. RevisionLevel
InstanceMapping Atablethatassociateseachofthepotential4096VLANIDstoagiven
instance.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
35
6.7.2 MSTPBridge
Item Description
InstancePriority Prioritycanbeconfiguredforaspecifiedinstance.
InstanceID SelecttheinstanceIDforwhichyouwanttodefineapriority.
Priority SelecttheprioritylevelfortheinstanceID.
Enable Enable/disableSTP.
Mode STP–SpanningTreeProtocol(IEEE802.1D)
RSTP–RapidSpanningTreeProtocol(IEEE802.1w)
MSTP–MultipleSpanningTreeProtocol(IEEE802.1s)
Hello‐Time ThehellotimeristhetimeintervalbetweeneachBridgeProtocolDataUnit(BPDU)that
issentonaport.Thedefaulthellotimeris2seconds.AdjusttheSpanningTreeProtocol
(STP)hellotimertoanyvaluebetween1and10seconds.
ForwardDelay Theforwarddelaytimeristhetimeintervalthatisspentinthelisteningandlearning
state.Thedefaultforwarddelaytimeris10seconds.SettheSpanningTreeProtocol
(STP)forwarddelaytimertoanyvaluebetween4and30seconds.
MAXAge ThemaxagetimercontrolsthemaximumlengthoftimeintervalthatanSTPswitch
portsavesitsconfigurationBridgeProtocolDataUnit(BPDU)information.Thedefault
maxagetimeris10seconds.Adjustthemaxagetimertoanyvaluebetween6and40
seconds.
MAXHops ForMultipleSpanningTreeProtocol(MSTP),configurethemaximumnumberofhopsa
BPDUcanbeforwardedintheMSTPregion.Thedefaultvalueis10.Possiblevalues
rangefrom1to40.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
36
Item Description
Instance SelecttheinstanceID.
PortFast ThetimetheSpanningTreeProtocol(STP)takestotransitionportsovertotheforwarding
statecancauseproblemslikedelayswhenclientcomputersconnecttoswitches.Port‐fast
solvestheproblembyeffectivelypreventingtheimplementationofSTPonthatport.
AutoEdge Bydefault,“auto‐edge”isenabledonallports.ThiswilllookforBPDUsfor3secondsand,
ifnonearefound,willbeginforwardingpackets,andtheportissetas“edge.”Ifthereare
BPDUs,theportissetas“non‐edge.”
BDPUGuard BPDUguarddisablestheportuponBPDUreceptionifport‐fastisenabledontheport.This
effectivelydeniesdevicesconnectedtotheseportsfromparticipatinginthedesignedSTP,
thusprotectingyourdata‐centercore.
BPDUFilter EnablingBPDUfilteringforaportstopssendingorreceivingBPDUonthisinterface;thisis
thesameasdisablingspanningtreeontheinterface.Itisariskychoice,unlessyouaresure
thatnoswitchcaneverbeconnectedtothisport.
TCGuard Incertainsituations,itmaybedesirabletopreventportsfrompropagatingtopology
changestotherestofthenetwork.Thismaybethecasewhenthenetworkisnotundera
singleadministrativecontrolanditisbeneficialtopreventdevicesexternaltothecoreof
thenetworkfromcausingMAC‐addressflushinginthecore.Enablethisbyconfiguring
TopologyChangeGuard(TCGuard)ontheport.
Priority Ifaloopoccursinthenetwork,MSTPusestheportpriorityparameterwhenitselectsan
interfacetoputintotheforwardingstate.Assignhigherpriorityvalues(lowernumbers)to
interfacesthatyouwantselectedfirstandlowerpriorityvalues(highernumbers)thatyou
wantselectedlast.Ifallinterfaceshavethesamepriorityvalue,MSTPputstheportwith
thelowestinterfacenumberintheforwardingstateandblockstheotherports.
PathCost TheMSTPpathcostdefaultvalueisderivedfromthemediaspeedofaninterface.Ifaloop
occurs,MSTPusescostwhenselectinganinterfacetoputintheforwardingstate.Assign
lowercostvaluestointerfacesthatyouwantselectedfirstandhighercostvaluesthatyou
wantselectedlast.Ifallinterfaceshavethesamecostvalue,MSTPputstheinterfacewith
thelowestinterfacenumberintheforwardingstateandblockstheotherinterfaces.
PointtoPoint AdminPoint‐to‐PointLink‐‐SpecifywhetherthisportisconnectedtoasharedLANsegment
(value“off”)orapoint‐to‐pointLANsegment(value“on”).Apoint‐to‐pointLANsegmentis
connectedtoexactlyoneotherbridge(normallywithadirectcablebetweenthem).Only
point‐to‐pointlinksandedgeportscanrapidlytransitiontotheforwardingstate.
Ifyousetthisvalueto“auto,”theswitchautomaticallydetectswhethertheportis
connectedtoasharedlinkorapoint‐to‐pointlink.
Rootguard Root‐guardensuresthatanunintendedswitchdoesnotbecomeanewrootbridge.Root
guardallowsthedevicetoparticipateinSTPaslongasthedevicedoesnottrytobecome
theroot.Ifrootguardblockstheport,subsequentrecoveryisautomatic.Recoveryoccurs
assoonastheoffendingdeviceceasestosendsuperiorBPDUs.
TCIgnore Ignoretechnologychange(TC)onoroff.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
37
6.8 DHCPRELAYAGENT
ADHCPclientisanInternethostusingDHCPtoobtainconfigurationparameterssuchasanIPaddress.ADHCP
relayagentisanyhostthatforwardsDHCPpacketsbetweenclientsandservers.Relayagentsareusedto
forwardrequestsandrepliesbetweenclientsandserverswhentheyarenotonthesamephysicalsubnet.The
Intellinetswitchcanfulfilltheroleofsucharelayagent.
6.8.1 DHCPRelay
Item Description
DHCPrelayenable EnableordisableDHCPrelay.
DHCPOPTIONtrustfieldenable: Whenenabled,theclientthatreceivestheDHCPmessagewith
option82informationwillforwardit;otherwise,itwillbediscarded.
DHCPServerIP ProvidetheIPaddressoftheDHCPserver,andclick“add.”
6.8.2 Option82
6.8.2.1 CircuitControl
Item Description
CircuitControl ProvidethecircuitIDnumber.Possiblevaluesrangefrom3to63.
VLANID TypeintheVLANID.Usevalue1forthedefaultVLAN..
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
38
6.8.2.2 ProxyRemote
Item Description
ProxyRemote ASCIIRemoteIDstring,upto63characters.
VLANID TypeintheVLANID.Usevalue1forthedefaultVLAN.
6.8.2.3 IPAddress
Item Description
IPAddress IPaddressofDHCPserver.
VLANID TypeintheVLANID.Usevalue1forthedefaultVLAN.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
39
6.9 DHCPSERVER
TheDynamicHostConfigurationProtocol(DHCP)isa
standardizednetworkprotocolusedonInternetProtocol
(IP)networksfordynamicallydistributingnetwork
configurationparameterssuchasIPaddressesfor
interfacesandservices.AtypicalDHCPserverisarouter
oraWindowsserver.TheIntellinet8‐PortGigabit
EthernetWeb‐ManagedSwitchcanalsofulfilltheroleof
aDHCPserver.
6.9.1 DHCPConfig
6.9.1.1 EnableConfig
Setthisoptionto“Open”inordertoactivatetheDHCPserverfunction.Notethatwhen
youwanttousetheDHCPServerfunction,youcannotusetheDHCPrelayfeature(see
section6.8 DHCPRelayAgent)atthesametime.
6.9.1.2 PoolConfig
Item Description
PoolID IdentifiesthedynamicaddresspoolfromwhichtheDHCPrequestsareserved.
Domain Ifyouareonadomainnetwork,thedomainnameshouldgohere.
NetworkIP ThisisthefirstIPaddressofthesubnetendingin“.0”.Itcan’tbeassignedtoanactual
networkclient.
NetworkMask Providethenetworkmaskofchoiceforyournetwork.
StartIP DefinethelowestIPaddressoftheIPaddresspool.
EndIP DefinethehighestIPaddressoftheIPaddresspool.
LeaseTime DefineshowlongtheclientisallowedtokeeptheIPaddress.Whenthetimehaselapsed,
theswitchwillissueanewIPaddresstotheclient.
Note:TheDHCPIPaddressrangemustbeinthesamerangeastheIntellinetswitch'sLANIPrange(e.g.,
192.168.2.xxx).
6.9.1.3 OptionConfig
ThispageallowsmodificationoftheDHCPoptions,asstatedinRFC2132.Theexamplebelowshowshowto
specifyaspecificNTPserver.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
40
Item Description
PoolID IdentifiesthedynamicaddresspoolfromwhichtheDHCPrequestsareserved.
Code Possiblevaluesare–to255.ThesearethecodesortagsperRFC2132.
CodeValueType
Selecttheappropriatevalue(i.e.,selectIPifyouenteranIPaddressinthecodevalue
fieldbelow).
CodeValue Providethevalueforthetag(code)youselected.
6.9.1.4 BindConfig
ThispagedisplaysallclientsthathaveobtainedanIPaddressfromtheIntellinetswitch.Clickon tosetthe
leasetimetoexpired,whichforcestheconnectedclienttoobtainanewIPaddressinstantly.
6.9.1.5 GatewayConfig
Onthispage,providetheGatewayIPaddressthatyouwishtoprovidetotheDHCPclients.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
41
6.9.1.6 DNSConfig
Onthispage,providetheDNSIPaddress(es)thatyouwishtoprovidetoDHCPclients.
6.10 IGMP
S
NOOPING
TheInternetGroupManagementProtocol(IGMP)letshostsandroutersshareinformationaboutmulticast
groupmemberships.IGMPsnoopingisaswitchfeaturethatmonitorstheexchangeofIGMPmessagesand
copiesthemtotheCPUforfutureprocessing.TheoverallpurposeofIGMPSnoopingistolimittheforwarding
ofmulticastframestoonlyportsthatareamemberofthemulticastgroup.
Computersandnetworkdevicesthatwanttoreceivemulticasttransmissionsneedtoinformnearbyrouters
thattheywillbecomemembersofamulticastgroup.TheInternetGroupManagementProtocol(IGMP)isused
tocommunicatethisinformation.IGMPisalsousedtoperiodicallycheckthemulticastgroupformembers
thatarenolongeractive.Inthecasewherethereismorethanonemulticastrouteronasubnetwork,one
routeriselectedasthe"queried."Thisrouterthenkeepstrackofthemembershipofthemulticastgroupsthat
haveactivemembers.TheinformationreceivedfromIGMPisthenusedtodetermineifmulticastpackets
shouldbeforwardedtoagivensubnetworkornot.UsingIGMP,theroutercanchecktoseeifthereisatleast
onememberofamulticastgrouponagivensubnetwork.Iftherearenomembersonasubnetwork,packets
willnotbeforwardedtothatsubnetwork.
MulticastService
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
42
6.10.1 IGMPConfig
6.10.1.1 IGMPConfigOptions
Item Description
OpenIGMPSnooping ActivatetoenableIPMPsnooping.
Forwardingmode SelecttheforwardingmodetobeeitherIP‐basedorMAC‐based.
Filteringmode EnableordisableIGMPfiltering.
Querymode EnableordisabletheMLDquerierfunction.
Queryinterval EnableMLDsnooping(MulticastListenerDiscovery)forIPv6.
Unknowgroupsuppression Flood:Unknownmulticastdataisflooded.
Drop:Unknownmulticastdataisdropped.
Defaultpolicy: Setthedefaultpolicytoeither“Allow”or“Refush”(Chinesefor“Refuse”).
Queryresponsetime Definethetimeinseconds.
Queryresponseinterval Definetheintervalin1/10thofasecond.
Multicastagingtime Definethemulticastagingtimeinseconds.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
43
6.10.1.2 IGMPPortConfig
Item Description
Maximummulticastnumber Typeinthemulticastnumberfrom1‐254.
Policy Assignapolicy(strategy).
6.10.1.3 IGMPLANConfig
Item Description
VLAN SelecttheVLANIDforwhichyouwishtoenableIGMPsnooping.
IGMPSnoopingVLAN ClicktoenableIGMPSnoopingfortheaboveVLANID.
IGMPSnoopingLeaveQuery SetIGMPsnoopingfast‐leave.
IGMPSnoopingDyanmicLearn DynamicallylearntheIPmulticastgroupsthroughIGMPsnooping.
IGMPSnoopingQuerier Innetworks/VLANsdonothavearouterthatcantakeonthemulticast
routerroleandprovidethemrouter(staticmulticastrouter)discoveryon
theswitches,turnontheIGMPsnoopingquerierfeature.
Querierversion Definesthequerierversion.2=IGMPv2,3=IGMPv3.
QuerierIP Snoopingquerieronaninterfacewhenthereisnomulticastrouterinthe
VLANtogeneratequeries.
QuerierMax‐Responsetime Definethetimeinseconds.
QuerierResponseInterval Definethetimeinseconds.
Queriertimeout Definethetimeinseconds.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
44
6.10.2 IGMPFilterPolicyConfig
Item Description
Createanewstrategy Selectthisifyouwishtosetupanewstrategy.
Selecttheexistingstrategy Selectthisinordertoeditastrategypreviouslysetup.
Defaultpolicy Settoeitheralloworrefuse.
MulticastIPaddress IPv4addressesthatarereservedforIPmulticastingandregisteredwith
theInternetAssignedNumbersAuthority(IANA).Forexample224.0.0.1=
allhostsonthesamenetworksegment;224.0.0.13=Protocol
IndependentMulticast(PIM)Version2.Possiblevaluesrangefrom
224.0.0.0through239.255.255.255.
Mask Providethenetworkmask.
Mode Settoeitheralloworrefuse.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
45
6.11 TERMINALACCESSCONTROLLERACCESS‐CONTROLSYSTEM(TACACS+)
TerminalAccessControllerAccess‐ControlSystem(TACACS,usually
pronouncedlike"tack‐axe")referstoafamilyofrelatedprotocolsthathandle
remoteauthenticationandrelatedservicesfornetworkedaccesscontrol
throughacentralizedserver.TheoriginalTACACSprotocol,whichdatesbackto1984,wasusedfor
communicatingwithanauthenticationserver,commoninolderUNIXnetworks;itspawnedrelatedprotocols.
TerminalAccessControllerAccess‐ControlSystemPlus(TACACS+)isaprotocolreleasedasanopenstandard
beginningin1993.AlthoughderivedfromTACACS,TACACS+isaseparateprotocolthathandles
authentication,authorizationandaccounting(AAA)services.ComparedtotheopenstandardRADIUS
authentication(section6.12Radius),TACACS+encryptstheentirepayloadwhereasRADIUSonlyencrypts
passwords.
Item Description
GlobalConfig Globalparametersthatcanbeoverwrittenbyport‐specificconfiguration.
Servertimeout TheglobaltimeoutintervaldetermineshowlongtheIntellinetswitchwaitsfor
responsesfromTACACS+serversbeforedeclaringatimeoutfailure.
Serverretry
count
SpecifiesthenumberofretryattemptsthatwillbemadetoestablishaTransmission
ControlProtocol(TCP)connectionbetweenaTACACS+clientandtheTACACS+server.
Thedefaultvalueis3.
Conversation/
Connect
Thisparameterdefineshowmanyconnectionstherewillbebetweenrouterdaemon.
Only:“single‐connection"
Thedaemonmustsupportsingle‐connectionmodeforthistobeeffective;otherwise,
theconnectionbetweenthenetworkaccessserverandthedaemonwilllockuporyou
willreceivespuriouserrors.
Keytype 0:Keyvalueincleartextformat
7:Keyvalueistype‐7encrypted.
Key Typeinthekeyvalue.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
46
Item Description
PortConfig Globalparametersthatcanbeoverwrittenbyport‐specificconfiguration.
ServerIP IPAddressfortheTACSACS+server.
Authenticationport DefinetheTCPportnumberoftheTACSACS+serverconnection.
Servertimeout ThetimeoutintervaldetermineshowlongtheIntellinetswitchwaitsforresponses
fromaspecificTACACS+serverbeforedeclaringatimeoutfailure.Ifleftempty,the
globalservertimeoutvaluewillbeused;otherwise,theservertimeouttakes
precedence.
Keytype 0:Keyvalueincleartextformat
7:Keyvalueistype‐7encrypted.
Key Keyvalue.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
47
6.12 RADIUS
RemoteAuthenticationDial‐InUserService(RADIUS)isanetworkingprotocol
thatprovidescentralizedAuthentication,AuthorizationandAccounting(AAA
orTripleA)managementforuserswhoconnectanduseanetworkservice.
RADIUSisaclient/serverprotocolthatrunsintheapplicationlayerandcanuseeitherTCPorUDPastransport.
Networkaccessservers,thegatewaysthatcontrolaccesstoanetwork,usuallycontainaRADIUSclient
componentthatcommunicateswiththeRADIUSserver.RADIUSisoftentheback‐endofchoicefor802.1X
authenticationaswell.TheRADIUSserverisusuallyabackgroundprocessrunningonaUNIXorMicrosoft
Windowsserver.
6.12.1 RadiusGeneralConfig
Item Description
Serverrepeatnumber Specifiesthenumberofretryattemptsthatwillbemadetoestablisha
connectionbetweenaRADIUSclientandtheRADIUSserver.Thedefaultvalue
is3.
Servertimeout ThetimeoutintervaldetermineshowlongtheIntellinetswitchwaitsfor
responsesfromRADIUSserverbeforedeclaringatimeoutfailure.
Serverquiettime IftheIntellinetswitchisunabletoauthenticatetheclient,itwillwaita
specifiedamountoftimebeforetryingagain.Theamountoftimeisspecified
withthequiet‐periodparameter.Enteredinminutes;max.1440minutes(24
hours).
Dead‐criteriaretrycount SetthenumberoftimesthattheIntellinetswitchdoesnotreceiveavalid
responsefromtheRADIUSserverbeforetheserverisconsideredunavailable.
Dead‐criteriatimeout SetthetimeinsecondsduringwhichtheIntellinetswitchdoesnotneedto
receiveavalidresponsefromtheRADIUSserver.Therangeisfrom1to120
seconds.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
48
6.12.2 RadiusServerConfig
Item Description
Serveraddress TypeintheaddressoftheRADIUSserver.
Chargingport TypetheaccountingportnumberontheRADIUSserver’shostcomputer.
Thedefaultportnumberis1813.
Authenticationport TypetheaccountingportnumberontheRADIUSserver’shostcomputer.
Thedefaultportnumberis1812.
Key Thekeyparameterintheradius‐servercommandisusedtoencryptRADIUS
packetsbeforetheyaresentoverthenetwork.Thevalueforthekey
parameterontheIntellinetswitchdeviceshouldmatchtheoneconfigured
ontheRADIUSserver.Thedefaultvalueis“radius”.
Activedetection EnablesordisablesactivedetectionofRADIUSserver.
Testname Theusernameforactivedetection.
Idletime TheintervaltimeforRADIUSsecurityserversendmessageonaccessible
state.Thedefaultvalueis60minutes.Possiblevaluesrangefrom0to1440
minutes(24hours).
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
49
6.13 AAA
Authentication,authorizationandaccounting(AAA)isasystemfortrackinguseractivitiesonanIP‐based
networkandcontrollingtheiraccesstonetworkresources.AAAisoftenimplementedasadedicatedserver.
6.13.1 EnableConfig
EnableordisableAAA.
6.13.2 RegionConfig
Item Description
DomainnameTypeinthenameoftheISPdomain.AnInternetserviceprovider(ISP)domainisagroup
ofuserswhobelongtothesameISP.Forausernameintheformatofuserid@isp‐name
oruserid.isp‐name,theisp‐namefollowingthe"@"or“.”characteristheISPdomain
name.Theaccessdeviceusesuseridastheusernameforauthentication,andisp‐name
asthedomainname.
StatusSettoeither“block”or“active.”Bydefault,anISPdomainisintheactivestate,which
meansthatalltheusersinthedomainareallowedtorequestnetworkservice.
Verifythatthe
user…
Verifythattheuseriscarryingthedomainname.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
50
6.14 QOS–QUALITYOFSERVICE
QualityofService(QoS)isanadvancedtrafficprioritizationfeaturethatallowsanadministratortoestablish
controlovernetworktraffic.QoSenablesyoutoassignvariousgradesofnetworkservicetodifferenttypesof
trafficsuchasmulti‐media,video,protocol‐specific,timecritical,andfile‐backuptraffic.QoSreduces
bandwidthlimitations,delay,loss,andjitter.Italsoprovidesincreasedreliabilityfordeliveryofyourdataand
allowsyoutoprioritizecertainapplicationsacrossyournetwork.Youcandefineexactlyhowyouwantthe
switchtotreatselectedapplicationsandtypesoftraffic.
YoucanuseQoSonyoursystemtocontrolawidevarietyofnetworktrafficby:
• Classifyingtrafficbasedonpacketattributes.
• Assigningprioritiestotraffic(forexample,tosethigherprioritiestotime‐criticalorbusiness‐critical
applications).
• Applyingsecuritypolicythroughtrafficfiltering.
• ProvidingpredictablethroughputformultimediaapplicationssuchasvideoconferencingorVoiceoverIP
byminimizingdelayandjitter.
• Improvingperformanceforspecifictypesoftrafficandpreservingperformanceastheamountoftraffic
grows.
• Reducingtheneedtoconstantlyaddbandwidthtothenetwork.
• Managingnetworkcongestion.
6.14.1 QoSRules
Despitethename“Remark”or“QoSMulti‐Label,"thissectionactuallyallowsyoutocreateyourQualityof
Servicerules.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
51
Item Description
RuleIndex Keyintherulenumber.
Operationtype Setto“Equal”or“Alwaysmatch.”
Valuetype Thisvaluedefinesthekindofvalueyouintendtousefor
theQoSrule.
Value Keyinthevaluethatcorrespondstothevaluetypeyouselectedabove.
CoSmapping CoSstandsforClassofService.Thereareeightvaluestochoosefrom.
Priorityremark AsanalternativetoCoS
mapping,youcandefinethe
priorityvaluehere,values0–
7.
Chooseporttoconfig SelecttheportorportsfortheQoSrule.Selectallportsifyouwanttheruleto
applytowhicheverportthedevicesareconnected.
6.14.2 QueueConfig
Inthissection,youdefinewhichpriorityalgorithmyouwishtheIntellinetswitchtoutilize.
Item Description
Queuemode SP=StrictPriority,RR=RoundRobin,WRR=WeightedRoundRobinandWFQ=
WeightedFairQueuing.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
52
6.14.3 QueueMapping
6.14.3.1 CoS‐Queue‐Map
ThispageallowsthenetworkadministratortoclassifyCoSsettingstotrafficqueues.TheserverIDrepresents
theCoS(ClassofServer)ID.
6.14.3.2 DSCP‐CoS‐Map
ThisallowsnetworkmanagerstodeterminetheoutputqueuethatisassignedforaspecificDSCPfield.The
serverIDrepresentstheDSCPfieldID,andtheQUEUEIDislistedastheserverlistonthescreen.
6.14.3.3 Port‐CoS‐Map
ThispageallowsthenetworkadministratortoclassifyCoSsettingstothe10physicalportsontheIntellinet
switch.TheserverIDrepresentstheCoS(ClassofServer)ID.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
53
6.15 ADDRESSTABLE
ToswitchdatapacketsbetweenLANportsefficiently,theIntellinetswitchmaintainsanaddresstable.When
theswitchreceivesaframe,itassociatesthemediaaccesscontrol(MAC)addressofthesendingnetwork
devicewiththeLANportonwhichitwasreceived.Indoingso,theswitchdrasticallycutsdownon
unnecessarynetworktrafficbecause,insteadoffloodingallLANportsofthesameVLANwiththeinformation,
itonlysendsittotheportwheretherecipientisconnected.
6.15.1 AddressTableConfig
6.15.1.1 MACAdd&Delete
Thescreenisdividedintothreesections.
Section1(“clearMacaddrlist”)allowsyoutocleartheMACaddresstable.
Section2canbeusedtomanuallyenteraVLAN–MACAddress–Portpairing.
Section3displaysallMACaddressesthatarecurrentlyintheMACaddresstable.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
54
6.15.1.2 MACstudy&aging
ThissectionallowsthenetworkadministratortospecifythemaximumamountofMACaddressesthatcanbe
learnedperport.YoucanconfigureamaximumnumberofsecureMACaddressesforeachport.Thedefault
interfacemaximumis8191addresses.Interfacemaximumscannotexceedthedevicemaximum,whichisalso
8191.
Item Description
Ports Selectoneormultipleports,forwhichyouwanttodefinetheMACaddres
studylimit
MACaddressstudylimit KeyinthemaximumMACaddresslimitfortheselectedport(s).
TheIntellinetswitchalsoprovidesamechanismtoadjusttheagingtimeforstoredMACaddresses.Theaging
timecontrolshowlongtheswitchstorestheMACaddressintheMACaddresstable.Everytimeaclientsends
orreceivestraffic,theagingtimefortheclient’sMACaddressisreset.IfthereisnotrafficforaMACaddress
inatimeframethatexceedsthetimedefinedintheagingtime,theMACaddressisremovedfromtheMAC
addresstable.Thedefaultagingtimeis300seconds.Settingthevalueto“0”disablestheagingtime
mechanism,whichmeansthataMACaddressthathasbeenlearnedoncewillbekeptintheMACaddress
tableuntiltheswitchisreset.ButsincetheIntellinetswitchhasonlyafiniteamountofspacetoholdMAC
addresses,itisrecommendedtokeeptheagingtimeatoraroundthedefaultvalue.
6.15.1.3 MACFilter
Withthisfeature,thenetworkadministratorcanpreventaccesstothenetworkforselectedMACaddresses
andVLANIDs(1=defaultVLAN).
Item Description
MACAddress TypeintheMACaddressthatyouwanttoblock.
MACaddressstudylimit TypeintheVLANIDifapplicable.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
55
6.16 SNMP
SimpleNetworkManagementProtocol(SNMP)isanOSILayer7(ApplicationLayer)designedspecificallyfor
managingandmonitoringnetworkdevices.SNMPenablesnetworkmanagementstationstoreadandmodify
thesettingsofgateways,routers,switchesandothernetworkdevices.UseSNMPtoconfiguresystemfeatures
forproperoperation,monitorperformanceanddetectpotentialproblemsintheswitch,switchgroupor
network.
6.16.1 SNMPConfig
ActivateordeactivateSNMP.
6.16.1.1 CommunityConfig
Item Description
Communityname SNMPCommunitystring.TheSNMPread‐onlycommunitystringislikea
password.ItissentalongwitheachSNMPGet‐Requestandallows(ordenies)
accesstodevice.
Accessauthority Settoread‐onlyorread‐write.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
56
6.16.1.2 GroupConfig
TheIntellinetswitchusesaview‐basedaccesscontrolmodelthatallowsthenetworkadministratorto
configuretheaccessprivilegesgrantedtoagroup.
Item Description
Groupname Provideagroupname.
Securitylevel Selectthedesiredsecuritylevel.
Readview
Readandwriteview
Notifyview
Assignthedesiredview(aviewmustbecreatedfirst‐seeSNMPViewConfig).
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
57
6.16.1.3 UserConfig
ThissectiondescribeshowtosetupSNMPusersandassignthemtoanSNMPgroup.
Item Description
Username Provideagroupname.
Securitylevel Selectthedesiredsecuritylevel.
Groupname Provideagroupname.
Authenticationmode Selectthefunctionofchoice.
Authenticationpassword Keyinthepassword.
Encryptionmode SelecteitherAESorDEStoencryptthepassword.
Encryptedpassword Keyintheencryptedpassword.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
58
6.16.1.4 TrapConfig
Item Description
DestinationIPAddress TheIPaddressoftheSNMPmanager(TRAPviewer)
Addresstype IPv4(andperhapslaterIPv6willbesupported)
Securityname Whenusingsecuritymodev3,youcanselectauserfromadropdown
list.ThatuserwascreatedintheSNMPuserconfig.
UDPportnumber PortforSimpleNetworkManagementProtocolTrap(SNMPTRAP).
Securitymode Selectthesecuritymode(V1,V2orV3).
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
59
6.16.1.5 ViewConfig
SNMPv3definestheconceptofMIBviewsinRFC3415,View‐basedAccessControlModel(VACM)forSNMP.
MIBviewsprovideanagentwithbettercontroloverwhocanaccessspecificbranchesandobjectswithinits
MIBtree.AviewconsistsofanameandacollectionofSNMPobjectidentifiers,whichareeitherexplicitly
includedorexcluded.Oncedefined,aviewisthenassignedtoanSNMPgroup‐seeSNMPGroupConfig.
Onceaviewhasbeencreated,createarulefortheview.
Item Description
Rule Alsoreferredtoasthe'"Type."Specifieswhethertoincludeorexcludetheview
subtreeorfamilyofsubtreesfromtheMIBview.
MIBsubtreeOID EnteranOIDstringforthesubtreetoincludeorexcludefromtheview.OIDstring
is256charactersinlength.Forexample,thesystemsubtreeisspecifiedbytheOID
string.1.3.6.1.2.1.1.
Subtreemask ProvidetheOIDmaskhere.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
60
6.16.2 RMONConfig
RemoteMonitoring(RMON)isastandardmonitoringspecificationthatenablesvariousnetworkmonitorsand
consolesystemstoexchangenetwork‐monitoringdata.RMONisthemostimportantexpansionoftheSNMP
standard.RMONisasetofMIBdefinitionsthatisusedtodefinestandardnetworkmonitorfunctionsand
interfaces,enablingcommunicationbetweenSNMPmanagementterminalsandremotemonitors.RMON
providesahighlyefficientmethodtomonitoractionsinsidethesubnets.
MIDofRMONconsistsof10groups.TheIntellinet8‐PortGigabitEthernetPoE+Web‐ManagedSwitch
supportsthemostfrequentlyusedgroups1,2,3and9:
Statistics:CollectsEthernet,FastEthernet,andGigabitEthernetstatisticsonaninterface.
History:CollectsahistorygroupofstatisticsonEthernet,FastEthernet,andGigabitEthernet
interfacesforaspecifiedpollinginterval.
Alarm:Monitorsaspecificmanagementinformationbase(MIB)objectforaspecifiedinterval,
triggersanalarmataspecifiedvalue(risingthreshold)andresetsthealarmatanothervalue(falling
threshold).Alarmscanbeusedwithevents;thealarmtriggersanevent,whichcangeneratealog
entryoranSNMPtrap.
Event:Determinestheactiontotakewhenaneventistriggeredbyanalarm.Theactioncanbeto
generatealogentryoranSNMPtrap.
RMONisspecifiedaspartoftheManagementInformationBase(MIB)inRFC1757asanextensionofthe
SimpleNetworkManagementProtocol(SNMP).
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
61
6.16.2.1 StatisticsGroup
Item Description
Index Specifythehistorytableindexnumber.
Interfacename SelectoneoftheeighteenGigabitportsfromthedrop‐downlist.
Owner Optionalfieldthatallowsthenetworkadministratortoenterthenameofthe
owneroftheStatisticsRMONgroup.
6.16.2.2 HistoryGroup
Item Description
Index Specifythehistorytableindexnumber.
Interfacename SelectoneoftheeighteenGigabitportsfromthedrop‐downlist.
Maximumnumberof
samples
Thisisthenumberofsamples("buckets")tokeepbeforetheyareoverwritten.
Sampleperiod Thenumberofsecondsineachpollingcycle.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
62
6.16.2.3 AlarmGroup
Item Description
Index Specifythealarmtableindexnumber.
Statictable SpecifytheMIBvariablethatismonitoredbythealarmentry.
Statisticalgroupindex Thisisthenumberofsamples("buckets")tokeepbeforetheyareoverwritten.
Samplingtime
interval
Thenumberofsecondsineachpollingcycle.
Sampletype Thisisthemethodofsamplingtheselectedvariableandcalculatingthevaluetobe
comparedagainstthethresholds.
Owner Optionalfieldthatallowsthenetworkadministratortoenterthenameofthe
owneroftheAlarmRMONgroup.
Thealarmthreshold
limit
Thisistherisingthresholdnumberthattriggersthealarm.Thisvalueranges
between0and2147483647.
Eventsexceeding
threshold
Theeventnumbertotriggerwhentherisingthresholdexceedsitslimit.
Alarmthresholdlimit Thisisthefallingthresholdnumberthatresetsthealarm.Thisvalueranges
between0and2147483647.
Eventsbelow
thresholdlimit
Theeventnumbertotriggerwhenthefallingthresholdexceedsitslimit.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
63
6.16.2.4 EventGroup
Item Description
Index Specifytheeventtableindexnumber.
Description Adescriptivenameoftheevent.
Owner Optionalfieldthatallowsthenetworkadministratortoenterthenameofthe
owneroftheEventRMONgroup.
Action Settoeither"Log"togeneratealogentryor"Trap"togenerateatrapmessage.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
64
6.17 SYSTEM
6.17.1 SystemConfig
6.17.1.1 SystemSettings
Item Description
VLAN ThedefaultVLANIDoftheswitch("1:bydefault).
IP TheLANIPaddressoftheswitch.ThedefaultIPaddressis"192.168.2.1".
Mask Thedefaultnetworkmaskis255.255.255.0.
DefaultGateway TheoptionaldefaultgatewayisonlyneededwhenyourequireInternetaccessfor
theIntellinetswitch(e.g.,inordertoobtaintimeinformationfromanNTPserver).
Jumboframe HereyoucanspecifythemaximumframesizesupportedbytheIntellinetswitch.
Themaximumis9216(kB).
DNSServer TheoptionalDNSserverisonlyneededwhenyourequireInternetaccessforthe
Intellinetswitch(e.g.,inordertoobtaintimeinformationfromanNTPserver).
Logintimeout ThisparameterappliestothewebadministratorUI.Bydefault,userswillbe
automaticallyloggedoutafter30minutesofinactivity.
IPv6address OptionalIPv6addressfortheIntellinetswitch.
Devicename DevicenamefortheIntellinetswitch.
Deviceposition,
contactsandcontact
information
OptionaladditionalinformationyoucanprovidefortheIntellinetswitch.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
65
Index Specifythehistorytableindexnumber.
Settime ClickinordertosetthetimefortheIntellinetswitchmanually.
[]NTPServer ActivatethisoptionifyouwanttheIntellinetswitchtoobtainthesystemtimefrom
aNTPserver.Forthattowork,besuretoprovideapropergatewayandDNS
serveraddress.
6.17.1.2 SystemRestart
Click"Restart"inordertohavetheIntellinetswitchperformasystemrestart.
6.17.1.3 Password
Onthisscreen,youcanchangetheadministratorpassword.Thedefaultpasswordis"1234".
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
66
6.17.1.4 EEEEnable
Energy‐EfficientEthernet(EEE)isasetofenhancementstothetwisted‐pairandbackplaneEthernetfamilyof
computernetworkingstandardsthatallowforlesspowerconsumptionduringperiodsoflowdataactivity.
Theintentionwastoreducepowerconsumptionby50%ormorewhileretainingfullcompatibilitywith
existingequipment.TheInstituteofElectricalandElectronicsEngineers(IEEE),throughtheIEEE802.3aztask
forcedevelopedthestandard.EEEisapowersavingoptionthatreducesthepowerusagewhenthereislow
ornotrafficutilization.Whenthereisnotraffic,EEEpowersdowncircuits.
Whenaportispowereddowntosavepower,theoutgoingtrafficisstoredinabufferuntiltheportis
poweredupagain.Usingthistechnique,morepowercanbesavedifthetrafficcanbebufferedupuntila
largeburstoftrafficcanbetransmitted.Keepinmindthatbufferingtrafficwillgivesomelatencyinthe
traffic.
ShouldyouencounterproblemsrelatedtoEEE(e.g.,relatedtoautonegotiation),youcandisableEEE
supportandtheIntellinetswitchwillnolongeruseit.
6.17.1.5 SSHLogin
ActivateSSHsupportbysettingtheSSHCONFIGto"OPEN".
6.17.1.6 TelnetLogin
ActivateTelnetsupportbysettingtheTELNETCONFIGto"OPEN".
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
67
6.17.1.7 SystemLog
TheIntellinetswitchhastheabilitytocreateahistorylogofimportantevents.Theselogscanbestored
eitherintheswitchesownmemoryoronaremoteSyslogserver.Inordertoutilizetheloggingservice,you
mustfirstenableit.
Index Specifythehistorytableindexnumber.
Logswitch SelectoneoftheeighteenGigabitportfromthedrop‐downlist.
ServerIP ProvidetheIPaddressoftheSyslogserver.NotethattheSyslogservermustbeset
toUDPport514.
Sendloglevel DefinetheamountofdetailyouwishtheIntellinetswitchtolog.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
68
6.17.2 SystemUpdate
Intellinetmayreleaseanewfirmwareforthisswitchtoprovidenewfunctionsand,perhaps,bugfixes.Youcan
installthenewfirmwareonthisscreen.Shouldanewfirmwarebemadeavailable,itwillbeavailableat
http://intellinet‐network.com/search?q=561167.
Howtoinstallthenewfirmware:
1. Downloadthefirmwarefromthewebsite
2. IfthefirmwareisacompressedfilesuchasRAR,7ZorZIP,youneedtouncompressthefilefirst
beforeitcanbeinstalledontheIntellinetswitch.
3. Thecorrectfileextensionforthefirmwareis".bix".
4. Click"Browse"andselectthe".bix"filefromyourcomputer'sHDD.
5. Click"StartUpgrade."
6. ConfirmyourdecisionbyclickingOK.Theupgradewillnowbegin.
7. Hopethattherewon'tbeapoweroutageduringthenext3minutes.
Notethatifyoustillseethemessageaboveafter5minutes,openanewbrowserwindowandre‐connectto
theIPaddressoftheIntellinetswitch(default=http://192.168.2.1).
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
69
6.17.3 ConfigurationManagement
6.17.3.1 ConfigExportandImport
ThisfunctionallowsanadministratortobackupandrestoretheconfigurationdataoftheIntellinetswitch.
Index Specifythehistorytableindexnumber.
ShowCurrentConfig Showsthecurrentswitchconfigurationinapop‐upwindow.
ExportConfig Savesthecurrentconfigurationdatatoafileonyourcomputer'sHDD.
backup Whenafilenameisprovided(seebelow),clickthisbuttontocreateabackupof
theconfiguration,whichtheIntellinetswitchwillkeepinitsmemory.Theconfig‐
restorefunctionprovidesaccesstothesebackupsandletsyourestorethem,
deletethem,renamethemorsavethemtoyourcomputer'sHDD.
Filename Filenameforbackup,e.g.,backup.
Importconfiguration Inordertouploadapreviouslysavedconfiguration,activatethisoption,andthen
clickon"Browse"andselectthecorrect".conf"fromyourcomputer'sHDD.Click
the"ImportConfiguration"buttontobegin.
6.17.3.2 ConfigRestore
Theconfigrestorefunctionprovidesaccesstobackupsthatwerecreatedpreviouslyandletsyourestore
them,deletethem,renamethemorsavethemtoyourcomputer'sHDD.
6.17.3.3 FactoryReset
Thisfeatureallowsanadministratortorestoreallsettingstothefactorydefaultvalues.Ifyoumanagedtolock
yourselfoutfromconfiguringtheswitchandhavelostaccesstothewebadmininterface,youcanreinstate
thefactorydefaultsettingsbypressingtheresetbuttononthefrontoftheswitchfor20seconds.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
70
6.17.4 ConfigSave
TheIntellinet8‐PortGigabitEthernetPoE+Web‐ManagedSwitchprovidesamyriadofconfigurationoptions,
manyofwhicharedesignedforexperiencednetworkadministratorsandaren’teasytoconfigure.Itwouldbe
arealshameifalltheconfigurationdatawaslostafterapowerfailureoraftertheswitchwasrestarted.In
ordertomaketheconfigurationpermanent,itneedstobesaved.
6.17.5 AdministratorSettings
Youcancreatenewuseraccountsandmodifyexistingonesonthispage.Auseraccountthatdoesnothave
administratorrightcanonlymonitorthemainstatusinformationoftheIntellinetswitchbutcannotmakeany
changestotheconfiguration.
Index Specifythehistorytableindexnumber.
Username Whencreatinganewaccount,typeinthenewusername.Ifeditingan
existingaccount,thefieldwillberead‐only.
Newpassword Typeinthenewpassword.
Confirmnewpassword Repeatthenewpassword.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
71
6.17.6 InformationCollect
Clickonthe buttontocreateafilethatcontainstheconfigurationdataoftheIntellinetswitch.Aftera
fewseconds,youwillbeaskedtoopenorsavethefile(orwhateverwebbrowserdefaultactionforunknown
filesisinplaceonyoursystem).Thisinformationcanbeusefulwhenitcomestotroubleshootingtechnical
problems.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
72
7 WARRANTY
Deutsch‐ GarantieinformationenfindenSiehierunterintellinetnetwork.com/warranty.
English‐Forwarrantyinformation,gotointellinetnetwork.com/warranty.
Español‐Sideseaobtenerinformaciónsobrelagarantía,visiteintellinetnetwork.com/warranty.
Français‐Pourconsulterlesinformationssurlagarantie,rendezvousàl’adresse
intellinetnetwork.com/warranty.
Italiano‐Perinformazionisullagaranzia,accedereaintellinetnetwork.com/warranty.
Polski‐Informacjedotyczącegwarancjiznajdująsięnastronieintellinetnetwork.com/warranty.
México‐PólizadeGarantíaIntellinet—DatosdelimportadoryresponsableanteelconsumidorICIntracom
México,S.A.P.I.deC.V.•Av.InterceptorPoniente#73,Col.ParqueIndustrialLaJoya,CuautitlanIzcalli,Estado
deMéxico,C.P.54730,México.•Tel.(55)1500‐4500
Lapresentegarantíacubrelossiguientesproductoscontracualquierdefectodefabricaciónensusmateriales
ymanodeobra.
A.GarantizamoscámarasIPyproductosconpartesmóvilespor3años.
B.Garantizamoslosdemásproductospor5años(productossinpartesmóviles),bajolassiguientes
condiciones:
1.Todoslosproductosaqueserefiereestagarantía,amparasucambiofísico,sinningúncargoparael
consumidor.
2.Elcomercializadornotienetalleresdeservicio,debidoaquelosproductosquesegarantizannocuentan
conreparaciones,nirefacciones,yaquesugarantíaesdecambiofísico.
3.Lagarantíacubreexclusivamenteaquellaspartes,equipososub‐ensamblesquehayansidoinstaladasde
fábricaynoincluyeenningúncasoelequipoadicionalocualesquieraquehayansidoadicionadosalmismo
porelusuarioodistribuidor.
Parahacerefectivaestagarantíabastaráconpresentarelproductoaldistribuidoreneldomiciliodondeue
adquiridooeneldomiciliodeICIntracomMéxico,S.A.P.I.deC.V.,juntoconlosaccesorioscontenidosnsu
empaque,acompañadodesupólizadebidamentellenadayselladaporlacasavendedoraindispensableel
selloyfechadecompra)dondeloadquirió,obien,lafacturaoticketdecompraoriginaldondesemencione
claramenteelmodelo,numerodeserie(cuandoaplique)yfechadeadquisición.Estagarantíanoesválidaen
lossiguientescasos:Sielproductosehubiesetilizadoencondicionesdistintasalasnormales;sielproductono
hasidooperadoconformealosinstructivosdeuso;osielproductohasidoalteradootratadodeserreparado
porelconsumidoroterceraspersonas.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
73
8 COPYRIGHT
Copyright©2016ICIntracom.Allrightsreserved.Nopartofthispublicationmaybereproduced,transmitted,
transcribed,storedinaretrievalsystem,ortranslatedintoanylanguageorcomputerlanguage,inanyformor
byanymeans,electronic,mechanical,magnetic,optical,chemical,manualorotherwise,withouttheprior
writtenpermissionofthiscompany
Thiscompanymakesnorepresentationsorwarranties,eitherexpressedorimplied,withrespecttothe
contentshereofandspecificallydisclaimsanywarranties,merchantabilityorfitnessforanyparticularpurpose.
Anysoftwaredescribedinthismanualissoldorlicensed"asis".Shouldtheprogramsprovedefective
followingtheirpurchase,thebuyer(andnotthiscompany,itsdistributor,oritsdealer)assumestheentirecost
ofallnecessaryservicing,repair,andanyincidentalorconsequentialdamagesresultingfromanydefectinthe
software.Further,thiscompanyreservestherighttorevisethispublicationandtomakechangesfromtimeto
timeinthecontentsthereofwithoutobligationtonotifyanypersonofsuchrevisionorchanges.
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
74
9 FEDERALCOMMUNICATIONCOMMISSIONINTERFERENCE
STATEMENT
ThisequipmenthasbeentestedandfoundtocomplywiththelimitsforaClassBdigitaldevice,pursuanttoPart15ofFCC
Rules.Theselimitsaredesignedtoprovidereasonableprotectionagainstharmfulinterferenceinaresidentialinstallation.
Thisequipmentgenerates,uses,andcanradiateradiofrequencyenergyand,ifnotinstalledandusedinaccordancewith
theinstructions,maycauseharmfulinterferencetoradiocommunications.However,thereisnoguaranteethat
interferencewillnotoccurinaparticularinstallation.Ifthisequipmentdoescauseharmfulinterferencetoradioor
televisionreception,whichcanbedeterminedbyturningtheequipmentoffandon,theuserisencouragedtotryto
correcttheinterferencebyoneormoreofthefollowingmeasures:
1.Reorientorrelocatethereceivingantenna.
2.Increasetheseparationbetweentheequipmentandreceiver.
3.Connecttheequipmentintoanoutletonacircuitdifferentfromthattowhichthereceiverisconnected.
4.Consultthedealeroranexperiencedradiotechnicianforhelp.
FCCCaution
Thisdeviceanditsantennamustnotbeco‐locatedoroperatinginconjunctionwithanyotherantennaortransmitter.This
devicecomplieswithPart15oftheFCCRules.Operationissubjecttothefollowingtwoconditions:(1)thisdevicemaynot
causeharmfulinterference,and(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethatmay
causeundesiredoperation.Anychangesormodificationsnotexpresslyapprovedbythepartyresponsibleforcompliance
couldvoidtheauthoritytooperateequipment.
FCCRadiationExposureStatement:
ThisequipmentcomplieswithFCCradiationexposurelimitssetforthforanuncontrolledenvironment.Thisequipment
shouldbeinstalledandoperatedwithminimumdistance20cmbetweentheradiator&yourbody.
Safety
Thisequipmentisdesignedwiththeutmostcareforthesafetyofthosewhoinstallanduseit.However,specialattention
mustbepaidtothedangersofelectricshockandstaticelectricitywhenworkingwithelectricalequipment.Allguidelines
ofthisandofthecomputermanufacturemustthereforebeallowedatalltimestoensurethesafeuseoftheequipment.
EUCountriesIntendedforUse
TheETSIversionofthisdeviceisintendedforhomeandofficeuseinAustria,Belgium,Bulgaria,Cyprus,Czech,Denmark,
Estonia,Finland,France,Germany,Greece,Hungary,Ireland,Italy,Latvia,Lithuania,Luxembourg,Malta,Netherlands,
Poland,Portugal,Romania,Slovakia,Slovenia,Spain,Sweden,Turkey,andUnitedKingdom.TheETSIversionofthisdevice
isalsoauthorizedforuseinEFTAmemberstates:Iceland,Liechtenstein,Norway,andSwitzerland.
EUCountriesNotIntendedforUse
None
8‐PortDesktopGigabitWeb‐SmartPoE+Switchwith2SFPPorts
75
intellinetnetworkcom
©ICIntracom.Allrightsreserved.
IntellinetisatrademarkofICIntracom,registeredintheU.S.andothercountries.