Interlogix NS3502-8P-2S User Manual Uživatelský manuál

IFS NS3502-8P-2S User Manual P/N 1072687 • REV A • ISS 23OCT13

IFS NS3502-8P-2S User Manual 10 VLAN Name Add ...

IFS NS3502-8P-2S User Manual 100 4.4.5 SFP Information You can check the physical or operational status of an SFP module via the SFP Module Inform

IFS NS3502-8P-2S User Manual 101 4.4.6 Port Mirror Configure port Mirroring on this page. This function provide to monitoring network traffic tha

IFS NS3502-8P-2S User Manual 102 Mirror Port Configuration The Port Mirror screen in Figure 4-4-7 appears. Figure 4-4-7: Mirror Configuration pag

IFS NS3502-8P-2S User Manual 103 Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.

IFS NS3502-8P-2S User Manual 104 4.5 Link Aggregation Port Aggregation optimizes port usage by linking a group of ports together to form a single

IFS NS3502-8P-2S User Manual 105 The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Par

IFS NS3502-8P-2S User Manual 106 member ports. Any quantity of link aggregation s may be configured for the device (only limited by the quantity o

IFS NS3502-8P-2S User Manual 107 4.5.1 Static Aggregation This page is used to configure the Aggregation hash mode and the aggregation group. The

IFS NS3502-8P-2S User Manual 108 Figure 4-5-3: Aggregation Group Configuration page screenshot The page includes the following fields: .Object

IFS NS3502-8P-2S User Manual 109 4.5.2 LACP Configuration Link Aggregation Control Protocol (LACP) - LACP LAG negotiate Aggregated Port links with

IFS NS3502-8P-2S User Manual 11 Security Switch SNMP Trap Version ... 396

IFS NS3502-8P-2S User Manual 110 can participate in the same aggregation group, while ports with different keys cannot. The default setting is “Au

IFS NS3502-8P-2S User Manual 111 : Click to refresh the page immediately. Auto-refresh : Check this box to enable an automatic refresh of the pag

IFS NS3502-8P-2S User Manual 112 Buttons : Click to refresh the page immediately. Auto-refresh : Check this box to enable an automatic refresh of

IFS NS3502-8P-2S User Manual 113 4.6 VLAN 4.6.1 VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a

IFS NS3502-8P-2S User Manual 114  MAC-based VLAN Status Displays MAC-based VLAN entries  Protocol-based VLAN Configures the protocol-based VL

IFS NS3502-8P-2S User Manual 115 VLAN can also provide a level of security to your network. IEEE 802.1Q VLAN will only deliver packets between sta

IFS NS3502-8P-2S User Manual 116 Adding an IEEE802.1Q Tag Dest. Addr. Src. Addr. Length/E. type Data Old CRC Dest. Addr. Src. Addr. E. type

IFS NS3502-8P-2S User Manual 117 Before enabling VLANs for the switch, you must first assign each port to the VLAN group(s) in which it will parti

IFS NS3502-8P-2S User Manual 118 Figure 4-6-1: VLAN Basic Information page screenshot The page includes the following fields: Object Descriptio

IFS NS3502-8P-2S User Manual 119 Every port on an 802.1Q compliant switch can be configured as tagged or untagged. • Tagged: Ports with tagging e

IFS NS3502-8P-2S User Manual 12 Security Network NAS State ...

IFS NS3502-8P-2S User Manual 120 The Managed Switch supports multiple VLAN tags and can therefore be used in MAN applications as a provider brid

IFS NS3502-8P-2S User Manual 121 VLAN Port Configuration The VLAN Port Configuration screen in Figure 4-6-2 appears. Figure 4-6-2: VLAN Port Conf

IFS NS3502-8P-2S User Manual 122 - Untag: outgoing frames without VLAN-Tagged. - Tagged: outgoing frames with VLAN-Tagged. • Q-in-Q Mode Set

IFS NS3502-8P-2S User Manual 123 4.6.5 VLAN Membership  Adding Static Members to VLANs (VLAN Index) Use the VLAN Static Table to configure port

IFS NS3502-8P-2S User Manual 124 switch units, but with no port members. A VLAN without any port members on any stack unit will be deleted when yo

IFS NS3502-8P-2S User Manual 125 (selection shall be allowed by a Combo Box). When ALL VLAN Users is selected, it shall show this information for

IFS NS3502-8P-2S User Manual 126 4.6.7 VLAN Port Status This page provides VLAN Port Status. The VLAN Port Status screen in Figure 4-6-5 appears.

IFS NS3502-8P-2S User Manual 127 packet's behavior at the egress side. • Conflicts Shows status of Conflicts whether exists or Not. When a V

IFS NS3502-8P-2S User Manual 128 Private VLANs are based on the source port mask, and there are no connections to VLANs. This means that VLAN IDs

IFS NS3502-8P-2S User Manual 129 4.6.9 Port Isolation Overview When a VLAN is configured to be a private VLAN, communication between ports within

IFS NS3502-8P-2S User Manual 13 Security AAA Configuration ...

IFS NS3502-8P-2S User Manual 130 VLAN table. This reduces the ports to which forwarding can be done to just the promiscuous ports within the priva

IFS NS3502-8P-2S User Manual 131 members of the VLAN receive traffic from the same VLAN members. The screen in Figure 4-6-8 appears and Table 4-6-

IFS NS3502-8P-2S User Manual 132  Untagged packet entering VLAN 3 1. While [PC-4] transmit an untagged packet enters Port-4, the switch will ta

IFS NS3502-8P-2S User Manual 133 Port-1, Port-2 and Port-3 : PVID=2 Port-4, Port-5 and Port-6 : PVID=3 Port-7~Port-24: PVID=1 5. Enable VLAN Tag

IFS NS3502-8P-2S User Manual 134 Setup steps 1. Create VLAN Group Set VLAN Group 1 = Default-VLAN with VID (VLAN ID) =1 Add two VLANs – VLAN 2 a

IFS NS3502-8P-2S User Manual 135 4. Assign the VLAN Trunk Port to be the member of each VLAN – which wants to be aggregated. At this sample, add

IFS NS3502-8P-2S User Manual 136 Setup steps 1. Assign Port Mode Set Port-1~Port-4 in Isolate port. Set Port5 and Port-6 in Promiscuous port. Th

IFS NS3502-8P-2S User Manual 137 Figure 4-6-16: Private VLAN port setting 4.6.11 MAC-based VLAN The MAC-based VLAN entries can be configured here

IFS NS3502-8P-2S User Manual 138 4.6.12 MAC-based VLAN Status This page shows MAC-based VLAN entries configured by various MAC-based VLAN users. T

IFS NS3502-8P-2S User Manual 139 4.6.13 Protocol-based VLAN This page allows you to add new protocols to Group Name (unique for each Group), mappi

IFS NS3502-8P-2S User Manual 14 Aggregation Mode ...

IFS NS3502-8P-2S User Manual 140 3. For SNAP: Valid value in this case also is comprised of two different sub-values. a.OUI: OUI (Organizationa

IFS NS3502-8P-2S User Manual 141 Figure 4-6-20: Group Name to VLAN Mapping Table page screenshot The page includes the following fields: Object

IFS NS3502-8P-2S User Manual 142 4.7 Spanning Tree Protocol 4.7.1 Theory The Spanning Tree protocol can be used to detect and disable network loop

IFS NS3502-8P-2S User Manual 143  The path cost to the root from the transmitting port  The port identifier of the transmitting port The switc

IFS NS3502-8P-2S User Manual 144  Disabled – the port only responds to network management messages and must return to the blocking state first A

IFS NS3502-8P-2S User Manual 145 2. STP Parameters STP Operation Levels The Switch allows for two levels of operation: the switch level and the po

IFS NS3502-8P-2S User Manual 146 The following are the user-configurable STP parameters for the port or port group level: Variable Description D

IFS NS3502-8P-2S User Manual 147 Forward Delay Timer – The Forward Delay can be from 4 to 30 seconds. This is the time any port on the Switch spen

IFS NS3502-8P-2S User Manual 148 Figure 4-7-5: Before Applying the STA Rules In this example, only the default STP values are used. Figure 4-7-

IFS NS3502-8P-2S User Manual 149 The switch with the lowest Bridge ID (switch C) was elected the root bridge, and the ports were selected to give

IFS NS3502-8P-2S User Manual 15 PoE Maximum Power ...

IFS NS3502-8P-2S User Manual 150 The page includes the following fields: Basic Settings Object Description • Protocol Version The STP protocol v

IFS NS3502-8P-2S User Manual 151 error-disabled state, and will be removed from the active topology. • Port Error Recovery Control whether a port

IFS NS3502-8P-2S User Manual 152 • Bridge ID The Bridge ID of this Bridge instance. • Root ID The Bridge ID of the currently elected root bridge

IFS NS3502-8P-2S User Manual 153 • STP Enabled Controls whether RSTP is enabled on this switch port. • Path Cost Controls the path cost incurred

IFS NS3502-8P-2S User Manual 154 the administrator or the physical link state of the attached LANs transits frequently. • BPDU Guard If enabled,

IFS NS3502-8P-2S User Manual 155 Port Type Link Type IEEE 802.1w-2001 Ethernet Half Duplex Full Duplex Trunk 2,000,000 1,000,000 500,

IFS NS3502-8P-2S User Manual 156 4.7.5 MSTI Priorities This page allows the user to inspect the current STP MSTI bridge instance priority configur

IFS NS3502-8P-2S User Manual 157 4.7.6 MSTI Configuration This page allows the user to inspect the current STP MSTI bridge instance priority confi

IFS NS3502-8P-2S User Manual 158 VLAN-to-MSTI mapping configuration in order to share spanning trees for MSTI's. (Intra-region). The name is

IFS NS3502-8P-2S User Manual 159 MSTI Port Configuration Object Description • Select MSTI Select the bridge instance and set more detail configu

IFS NS3502-8P-2S User Manual 16 QoS DSCP Map ...

IFS NS3502-8P-2S User Manual 160 ports. Valid values are in the range 1 to 200000000. • Priority Controls the port priority. This can be used to

IFS NS3502-8P-2S User Manual 161 • State The current STP port state of the CIST port. The port state can be one of the following values: Disabled

IFS NS3502-8P-2S User Manual 162 • Discarded Unknown The number of unknown Spanning Tree BPDU's received (and discarded) on the port. • Dis

IFS NS3502-8P-2S User Manual 163 4.8 Multicast 4.8.1 IGMP Snooping The Internet Group Management Protocol (IGMP) lets host and routers share inf

IFS NS3502-8P-2S User Manual 164 Figure 4-8-1: Multicast Service Figure 4-8-2: Multicast flooding

IFS NS3502-8P-2S User Manual 165 Figure 4-8-3: IGMP Snooping multicast stream control IGMP Versions 1 and 2 Multicast groups allow members to joi

IFS NS3502-8P-2S User Manual 166 The Time-to-Live (TTL) field of query messages is set to 1 so that the queries will not be forwarded to other sub

IFS NS3502-8P-2S User Manual 167 4.8.2 IGMP Snooping Configuration This page provides IGMP Snooping related configuration. The IGMP Snooping Confi

IFS NS3502-8P-2S User Manual 168 whole aggregation will act as a router port. • Fast Leave Enable the fast leave on the port. • Throtting Enable

IFS NS3502-8P-2S User Manual 169 255; default robustness variable value is 2. • QI Query Interval. The Query Interval is the interval between Gen

IFS NS3502-8P-2S User Manual 17 6.23 Voice VLAN Command ...

IFS NS3502-8P-2S User Manual 170 join report is forwarded as normal. If a requested multicast group is denied, the IGMP join report is dropped.

IFS NS3502-8P-2S User Manual 171 Figure 4-8-8: IGMP Snooping Status page screenshot The page includes the following fields: Object Description

IFS NS3502-8P-2S User Manual 172 4.8.6 IGMP Group Information Entries in the IGMP Group Table are shown on this page. The IGMP Group Table is sort

IFS NS3502-8P-2S User Manual 173 4.8.7 IGMPv3 Information Entries in the IGMP SSM Information Table are shown on this page. The IGMP SSM Informati

IFS NS3502-8P-2S User Manual 174 4.8.8 MLD Snooping Configuration This page provides MLD Snooping related configuration. The MLD Snooping Configu

IFS NS3502-8P-2S User Manual 175 • Router Port Specify which ports act as router ports. A router port is a port on the Ethernet switch that leads

IFS NS3502-8P-2S User Manual 176 • MLD Querier Enable the MLD Querier in the VLAN. • RV Robustness Variable. The Robustness Variable allows tuni

IFS NS3502-8P-2S User Manual 177 4.8.10 MLD Snooping Port Group Filtering In certain switch applications, the administrator may want to control th

IFS NS3502-8P-2S User Manual 178 4.8.11 MLD Snooping Status This page provides MLD Snooping status. The IGMP Snooping Status screen in Figure 4-8-

IFS NS3502-8P-2S User Manual 179 : Clears all Statistics counters. Auto-refresh : Check this box to enable an automatic refresh of the page at

IFS NS3502-8P-2S User Manual 18 VCL Protocol-based VLAN Add LLC ... 536

IFS NS3502-8P-2S User Manual 180 4.8.13 MLDv2 Information Entries in the MLD SSM Information Table are shown on this page. The MLD SSM Information

IFS NS3502-8P-2S User Manual 181 4.8.14 MVR In multicast VLAN networks, subscribers to a multicast group can exist in more than one VLAN. If the

IFS NS3502-8P-2S User Manual 182 • Immediate Leave Enable the fast leave on the port. Buttons : Click to save changes. : Click to undo any chang

IFS NS3502-8P-2S User Manual 183 4.8.16 MVR Groups Information Entries in the MVR Group Table are shown on this page. The MVR Group Table is sorte

IFS NS3502-8P-2S User Manual 184 4.9 Quality of Service 4.9.1 Understand QOS Quality of Service (QoS) is an advanced traffic prioritization f

IFS NS3502-8P-2S User Manual 185 To implement QoS on your network, you need to carry out the following actions: 1. Define a service level to dete

IFS NS3502-8P-2S User Manual 186 : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.9.3

IFS NS3502-8P-2S User Manual 187 Click on the mode in order to configure the mode and/or mapping. For more detail information, please refer to cha

IFS NS3502-8P-2S User Manual 188 Figure 4-9-3: QoS Ingress Port Tag Classification page screenshot The page includes the following fields: Objec

IFS NS3502-8P-2S User Manual 189 : Click to undo any changes made locally and revert to previously saved values. : Return to the previous page.

IFS NS3502-8P-2S User Manual 19 1. INTRODUTION The IFS 8-Port 10/100/1000Mbps PoE Plus + 2 100/1000X SFP Managed Ethernet Switch NS3502-8P-2S is m

IFS NS3502-8P-2S User Manual 190 Figure 4-9-5: QoS Egress Port Shapers page screenshot The page includes the following fields: Object Descripti

IFS NS3502-8P-2S User Manual 191 Figure 4-9-6: QoS Egress Port Schedule and Shapers page screenshot The page includes the following fields: Obje

IFS NS3502-8P-2S User Manual 192 This value is restricted to 100-1000000 when the "Unit" is "kbps", and it is restricted to 1-

IFS NS3502-8P-2S User Manual 193 4.9.6.1 QoS Egress Port Tag Remarking The QoS Egress Port Tag Remarking for a specific port is configured on this

IFS NS3502-8P-2S User Manual 194 Figure 4-9-9: QoS Port DSCP Configuration page screenshot The page includes the following fields: Object Descr

IFS NS3502-8P-2S User Manual 195 remarked with remapped DSCP value. Buttons : Click to save changes. : Click to undo any changes made locally and

IFS NS3502-8P-2S User Manual 196 Figure 4-9-10: DSCP-Based QoS Ingress Classification page screenshot The page includes the following fields:

IFS NS3502-8P-2S User Manual 197 Object Description • DSCP Maximum number of supported DSCP values is 64. • Trust Click to check if the DSCP va

IFS NS3502-8P-2S User Manual 198

IFS NS3502-8P-2S User Manual 199 Figure 4-9-11: DSCP Translation page screenshot The page includes the following fields: Object Description •

IFS NS3502-8P-2S User Manual 2 Copyright © 2013 United Technologies Corporation Interlogix is part of UTC Climate Controls & Security, a unit

IFS NS3502-8P-2S User Manual 20 High-Performance, Cost-effective Gigabit solution for backbone of SMB The IFS NS3502-8P-2S is the Layer 2 Managed

IFS NS3502-8P-2S User Manual 200 4.9.10 DSCP Classification This page allows you to map DSCP value to a QoS Class and DPL value. The DSCP Classifi

IFS NS3502-8P-2S User Manual 201 4.9.11 QoS Control List This page shows the QoS Control List (QCL), which is made up of the QCEs. Each row desc

IFS NS3502-8P-2S User Manual 202 • Conflict Displays QCE status. It may happen that resources required to add a QCE may not available, in that ca

IFS NS3502-8P-2S User Manual 203 Figure 4-9-14: QCE Configuration page screenshot The page includes the following fields: Object Description •

IFS NS3502-8P-2S User Manual 204 4. SNAP 5. IPv4 6. IPv6 Note: all frame types are explained below. • Any Allow all types of frames. • Ethern

IFS NS3502-8P-2S User Manual 205 • Action Configuration Class QoS Class: "class (0-7)", default- basic classification DP Valid DP Lev

IFS NS3502-8P-2S User Manual 206 SNAP: Only (SNAP) frames are allowed. IPv4: The QCE will match only IPV4 frames. IPv6: The QCE will match onl

IFS NS3502-8P-2S User Manual 207 Figure 4-9-16: Storm Control Configuration page screenshot The page includes the following fields: Object Descr

IFS NS3502-8P-2S User Manual 208 Figure 4-9-17; Queuing Counters page screenshot The page includes the following fields: Object Description •

IFS NS3502-8P-2S User Manual 209 Figure 4-9-18: Voice VLAN Configuration page screenshot The page includes the following fields: Object Descrip

IFS NS3502-8P-2S User Manual 21 Powerful Security IFS NS3502-8P-2S offers comprehensive Layer 2 to Layer 4 Access Control List (ACL) for enforcing

IFS NS3502-8P-2S User Manual 210 • Traffic Class Indicates the Voice VLAN traffic class. All traffic on Voice VLAN will apply this class. • Port

IFS NS3502-8P-2S User Manual 211 Figure 4-9-19: Voice VLAN OUI Table page screenshot The page includes the following fields: Object Description

IFS NS3502-8P-2S User Manual 212 Each accessible traffic object contains an identifier to its ACL. The privileges determine whether there are spec

IFS NS3502-8P-2S User Manual 213 ARP: The ACE will match ARP/RARP frames. IPv4: The ACE will match all IPv4 frames. IPv4/ICMP: The ACE will ma

IFS NS3502-8P-2S User Manual 214 The Access Control List Configuration screen in Figure 4-10-2 appears. Figure 4-10-2: Access Control List Config

IFS NS3502-8P-2S User Manual 215 Disabled: Frames matching the ACE are not logged. Please note that the System Log memory size and logging rate

IFS NS3502-8P-2S User Manual 216 Figure 4-10-3: ACE Configuration page screenshot The page includes the following fields: Object Description •

IFS NS3502-8P-2S User Manual 217 won't match the ACE with ethernet type. • Action Specify the action to take with a frame that hits this ACE

IFS NS3502-8P-2S User Manual 218 UC: Frame must be unicast. Specific: If you want to filter a specific destination MAC address with this ACE, ch

IFS NS3502-8P-2S User Manual 219 Any: No ARP/RARP OP flag is specified. (OP is "don't-care".) Request: Frame must have ARP Reques

IFS NS3502-8P-2S User Manual 22 1.3 How to Use This Manual This User Manual is structured as follows: Section 2, INSTALLATION The section explains

IFS NS3502-8P-2S User Manual 220 length (PLN) settings. 0: ARP/RARP frames where the HLN is equal to Ethernet (0x06) and the (PLN) is equal to I

IFS NS3502-8P-2S User Manual 221 Non-zero: IPv4 frames with a Time-to-Live field greater than zero must be able to match this entry. Any: Any va

IFS NS3502-8P-2S User Manual 222 enter a specific DIP mask in dotted decimal notation.  ICMP Parameters Object Description • ICMP Type Filt

IFS NS3502-8P-2S User Manual 223 • TCP/UDP Source Range When "Range" is selected for the TCP/UDP source filter, you can enter a specifi

IFS NS3502-8P-2S User Manual 224 this entry. Any: Any value is allowed ("don't-care"). • TCP PSH Specify the TCP "Push Func

IFS NS3502-8P-2S User Manual 225 : Click to undo any changes made locally and revert to previously saved values. : Return to the previous page.

IFS NS3502-8P-2S User Manual 226 Disabled: Frames received on the port are not mirrored. The default value is "Disabled". • Logging S

IFS NS3502-8P-2S User Manual 227 Figure 4-10-5: ACL Rate Limiter Configuration page screenshot The page includes the following fields: Object D

IFS NS3502-8P-2S User Manual 228 4.11 Authentication This section is to control the access of the Managed Switch, includes the user access and man

IFS NS3502-8P-2S User Manual 229 involved in this authentication, and therefore, MAC-based Authentication has nothing to do with the 802.1X standa

IFS NS3502-8P-2S User Manual 23 1.4 Product Features  Physical Port NS3502-8P-2S  8-Port 10/100/1000Base-T Gigabit Ethernet RJ-45 with I

IFS NS3502-8P-2S User Manual 230  Device Roles With 802.1X port-based authentication, the devices in the network have specific roles as shown be

IFS NS3502-8P-2S User Manual 231 client and the authentication server, requesting identity information from the client, verifying that information

IFS NS3502-8P-2S User Manual 232 Figure 4-11-2: EAP message exchange  Ports in Authorized and Unauthorized States The switch port state determi

IFS NS3502-8P-2S User Manual 233 4.11.2 Authentication Configuration This page allows you to configure how a user is authenticated when he logs

IFS NS3502-8P-2S User Manual 234 4.11.3 Network Access Server Configuration This page allows you to configure the IEEE 802.1X and MAC-based auth

IFS NS3502-8P-2S User Manual 235 Figure 4-11-4: Network Access Server Configuration page screenshot The page includes the following fields: Syst

IFS NS3502-8P-2S User Manual 236 RADIUS server configuration has changed. It does not involve communication between the switch and the client, and

IFS NS3502-8P-2S User Manual 237 denies the client access or because the RADIUS server request times out (according to the timeout specified on th

IFS NS3502-8P-2S User Manual 238 globally enable/disable Guest VLAN functionality. When checked, the individual ports' ditto setting determin

IFS NS3502-8P-2S User Manual 239 network access without authentication.  Force Unauthorized In this mode, the switch will send one EAPOL Failu

IFS NS3502-8P-2S User Manual 24 - TOS / DSCP / IP Precedence of IPv4/IPv6 packets - IP TCP/UDP port number - Typical network application Stri

IFS NS3502-8P-2S User Manual 240 the next backend authentication server request from the switch. This scenario will loop forever. Therefore, the s

IFS NS3502-8P-2S User Manual 241 secured in the MAC table using the Port Security module. In Multi 802.1X it is not possible to use the multicast

IFS NS3502-8P-2S User Manual 242 MAC-based authentication over 802.1X-based authentication is that the clients don't need special supplicant

IFS NS3502-8P-2S User Manual 243 VLAN ID will be changed to this VLAN ID, the port will be set to be a member of that VLAN ID, and the port will b

IFS NS3502-8P-2S User Manual 244 into the Guest VLAN according to the rules outlined below. This option is only available for EAPOL-based modes, i

IFS NS3502-8P-2S User Manual 245 Link Down: NAS is globally enabled, but there is no link on the port. Authorized: The port is in Force Authorized

IFS NS3502-8P-2S User Manual 246 4.11.4 Network Access Overview This page provides an overview of the current NAS port states for the selected swi

IFS NS3502-8P-2S User Manual 247 "(RADIUS-assigned)" is appended to the VLAN ID. Read more about RADIUS-assigned VLANs here. If the port

IFS NS3502-8P-2S User Manual 248 If the VLAN ID is assigned by the RADIUS server, "(RADIUS-assigned)" is appended to the VLAN ID. Read m

IFS NS3502-8P-2S User Manual 249 switch. Rx Logoff dot1xAuthEapolLogoffFramesRx The number of valid EAPOL Logoff frames that have been received

IFS NS3502-8P-2S User Manual 25 Firmware upload/download via HTTP / TFTP DHCP Relay DHCP Option82 User Privilege levels control NTP (N

IFS NS3502-8P-2S User Manual 250 MAC-based Auth. Direction Name IEEE Name Description Rx Access Challenges dot1xAuthBackendAccessChallenges 8

IFS NS3502-8P-2S User Manual 251 indication. Indicates that the supplicant/client has successfully authenticated to the backend server. Rx Auth.

IFS NS3502-8P-2S User Manual 252 • Last Supplicant/Client Info Information about the last supplicant/client that attempted to authenticate. This

IFS NS3502-8P-2S User Manual 253 Attached MAC Address Object Description • Identity Shows the identity of the supplicant, as received in the Re

IFS NS3502-8P-2S User Manual 254 Click to clear the counters for the selected port. : This button is available in the following modes: • Multi 802

IFS NS3502-8P-2S User Manual 255 4.11.6 Authentication Server Configuration This page allows you to configure the Authentication Servers. The Auth

IFS NS3502-8P-2S User Manual 256 These setting are common for all of the Authentication Servers. Object Description • Timeout The Timeout, which

IFS NS3502-8P-2S User Manual 257 RADIUS Authentication Server and the switch. RADIUS Accounting Server Configuration The table has one row for ea

IFS NS3502-8P-2S User Manual 258 : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.11.7

IFS NS3502-8P-2S User Manual 259 Disabled: The server is disabled. Not Ready: The server is enabled, but IP communication is not yet up and runnin

IFS NS3502-8P-2S User Manual 26 1.5 Product Specification Product NS3502-8P-2S Hardware Specification Copper Ports 8 10/ 100/1000Base-T RJ

IFS NS3502-8P-2S User Manual 260 4.11.8 RADIUS Details This page provides detailed statistics for a particular RADIUS server. The RADIUS Authent

IFS NS3502-8P-2S User Manual 261 Direction Name RFC4668 Name Description Rx Access Accepts radiusAuthClientExtAccessAccepts The number of RADIU

IFS NS3502-8P-2S User Manual 262 s on the authentication port and dropped for some other reason. Rx Packets Dropped radiusAuthClientExtPacketsDr

IFS NS3502-8P-2S User Manual 263 retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retr

IFS NS3502-8P-2S User Manual 264 been round-trip communication with the server yet. RADIUS Accounting Servers The statistics map closely to those

IFS NS3502-8P-2S User Manual 265 Rx Packets Dropped radiusAccClientExtPacketsDropped The number of RADIUS packets that were received from the ser

IFS NS3502-8P-2S User Manual 266 well as a timeout. • Other Info This section contains information about the state of the server and the latest r

IFS NS3502-8P-2S User Manual 267 : Click to refresh the page immediately. : Clears the counters for the selected server. The "Pending Request

IFS NS3502-8P-2S User Manual 268 Figure 4-11-11: Windows Server – add new RADIUS client setting 3. Assign the client IP address to the Managed

IFS NS3502-8P-2S User Manual 269 4. The shared secret key should be as same as the key configured on the Managed Switch. Figure 4-11-13: Windows

IFS NS3502-8P-2S User Manual 27 Basic Management Interfaces Console, Telnet, Web Browser, SNMPv1, v2c Secure Management Interface SSH, SSL, SNMP v

IFS NS3502-8P-2S User Manual 270 5. Configure ports attribute of 802.1X, the same as “802.1X Port Configuration”. Figure 4-11-14: 802.1x Port Co

IFS NS3502-8P-2S User Manual 271 5. Enter ” Active Directory Users and Computers”, create legal user data, the next, right-click a user what you

IFS NS3502-8P-2S User Manual 272 able to access the RADIUS server. 4.11.10 802.1X Client Configuration Windows XP is originally 802.1X support.

IFS NS3502-8P-2S User Manual 273 6. Select “MD-5 Challenge” from the drop-down list box for EAP type. Figure 4-11-19 7. Click “OK”. 8. When

IFS NS3502-8P-2S User Manual 274 9. Enter the user name, password and the logon domain that your account belongs. 10. Click “OK” to complete t

IFS NS3502-8P-2S User Manual 275 4.12 Security This section is to control the access of the Managed Switch, includes the user access and managemen

IFS NS3502-8P-2S User Manual 276 Figure 4-12-1: Port Limit Control Configuration Overview page screenshot The page includes the following fields

IFS NS3502-8P-2S User Manual 277 use the functionality. The Aging Period can be set to a number between 10 and 10,000,000 seconds. To understand w

IFS NS3502-8P-2S User Manual 278 • Action If Limit is reached, the switch can take one of the following actions: None: Do not allow more than L

IFS NS3502-8P-2S User Manual 279 : Click to refresh the page. Note that non-committed changes will be lost. : Click to save changes. : Click to un

IFS NS3502-8P-2S User Manual 28 SNMP MIBs RFC-1213 MIB-II IF-MIB RFC-1493 Bridge MIB RFC-1643 Ethernet MIB RFC-2863 Interface MIB RFC-2665 Ether-L

IFS NS3502-8P-2S User Manual 280 interface that the host IP address matched the entry. Buttons : Click to add a new access management entry. : Cl

IFS NS3502-8P-2S User Manual 281 4.12.4 HTTPs Configure HTTPS on this page. The HTTPS Configuration screen in Figure 4-12-4 appears. Figure 4-1

IFS NS3502-8P-2S User Manual 282 The status page is divided into two sections - one with a legend of user modules and one with the actual port sta

IFS NS3502-8P-2S User Manual 283 Figure 4-12-6: Port Security Status screen page screenshot The page includes the following fields: User Module

IFS NS3502-8P-2S User Manual 284 • Users Each of the user modules has a column that shows whether that module has enabled Port Security or not. A

IFS NS3502-8P-2S User Manual 285 block it. For a MAC address to be set in the forwarding state, all enabled user modules must unanimously agree on

IFS NS3502-8P-2S User Manual 286 4.12.8 DHCP Snooping DHCP Snooping is used to block intruder on the untrusted ports of DUT when it tries to inter

IFS NS3502-8P-2S User Manual 287 Untrusted: Configures the port as untrusted sources of the DHCP message. Buttons : Click to save changes. : Clic

IFS NS3502-8P-2S User Manual 288 and transmitted. • Rx and Tx Decline The number of decline (option 53 with value 4) packets received and transmi

IFS NS3502-8P-2S User Manual 289 Figure 4-12-10: IP Source Guard Configuration screen page screenshot The page includes the following fields: Ob

IFS NS3502-8P-2S User Manual 29 2. INSTALLATION This section describes the hardware features and installation of the Managed Switch on the desktop

IFS NS3502-8P-2S User Manual 290 : Click to undo any changes made locally and revert to previously saved values. 4.12.11 IP Source Guard Static Ta

IFS NS3502-8P-2S User Manual 291 Figure 4-12-12: ARP Inspection Configuration screen page screenshot The page includes the following fields: Obj

IFS NS3502-8P-2S User Manual 292 4.12.13 ARP Inspection Static Table This page provides Static ARP Inspection Table. The Static ARP Inspection Tab

IFS NS3502-8P-2S User Manual 293 4.13 Address Table Switching of frames is based upon the DMAC address contained in the frame. The Managed Switch

IFS NS3502-8P-2S User Manual 294 Aging Configuration By default, dynamic entries are removed from the MAC table after 300 seconds. This removal is

IFS NS3502-8P-2S User Manual 295 • Port Members Checkmarks indicate which ports are members of the entry. Check or uncheck as needed to modify th

IFS NS3502-8P-2S User Manual 296 the beginning of the MAC Table. The first displayed will be the one with the lowest VLAN ID and the lowest MAC ad

IFS NS3502-8P-2S User Manual 297 Figure 4-13-3: Dynamic ARP Inspection Table screenshot Navigating the ARP Inspection Table Each page shows up t

IFS NS3502-8P-2S User Manual 298 4.13.4 Dynamic IP Source Guard Table Entries in the Dynamic IP Source Guard Table are shown on this page. The D

IFS NS3502-8P-2S User Manual 299 Buttons Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. : Refresh

IFS NS3502-8P-2S User Manual 3 TABLE OF CONTENTS IFS NS3502-8P-2S User Manual ...

IFS NS3502-8P-2S User Manual 30 Reset Button Pressed and Released Function < 5 sec: System reboot Reboot the Managed Switch > 10 sec: Fa

IFS NS3502-8P-2S User Manual 300 4.14 LLDP 4.14.1 Link Layer Discovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic i

IFS NS3502-8P-2S User Manual 301 The page includes the following fields: LLDP Parameters Object Description • Tx Interval The switch is periodic

IFS NS3502-8P-2S User Manual 302 • Port The switch port number of the logical LLDP port. • Mode Select LLDP mode. Rx only The switch will not

IFS NS3502-8P-2S User Manual 303 4.14.3 LLDPMED Configuration This page allows you to configure the LLDP-MED. The LLDPMED Configuration screen in

IFS NS3502-8P-2S User Manual 304 Initially, a Network Connectivity Device will only transmit LLDP TLVs in an LLDPDU. Only after an LLDP-MED Endpoi

IFS NS3502-8P-2S User Manual 305 datum specified. Floors: Representing altitude in a form more relevant in buildings which have different floor-to

IFS NS3502-8P-2S User Manual 306 • Street suffix Street suffix - Example: Ave, Platz • House no. House number - Example: 21 • House no. suffix

IFS NS3502-8P-2S User Manual 307 Policies are only intended for use with applications that have specific 'real-time’ network policy requireme

IFS NS3502-8P-2S User Manual 308 service for guest users and visitors with their own IP Telephony handsets and other similar appliances supporting

IFS NS3502-8P-2S User Manual 309 application type. L2 Priority may specify one of eight priority levels (0 through 7), as defined by IEEE 802.1D-2

IFS NS3502-8P-2S User Manual 31 Per 10/100/1000Mbps port LED Color Function PoE In-Use Orange Lights to indicate the port is providing 52VDC in-

IFS NS3502-8P-2S User Manual 310 Figure 4-14-3: LLDP-MED Neighbor Information page screenshot The page includes the following fields: Fast start

IFS NS3502-8P-2S User Manual 311 of TIA-1057 applicable to Generic Endpoints (Class I), and any LLDP-MED Endpoint Device claiming compliance as a

IFS NS3502-8P-2S User Manual 312 L2 switch support, inventory management • LLDP-MED Capabilities LLDP-MED Capabilities describes the neighbor uni

IFS NS3502-8P-2S User Manual 313 • Policy Policy Unknown: The network policy for the specified application type is currently unknown. Defined: Th

IFS NS3502-8P-2S User Manual 314 Object Description • Local Port The port on which the LLDP frame was received. • Chassis ID The Chassis ID is

IFS NS3502-8P-2S User Manual 315 4.14.6 Port Statistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Globa

IFS NS3502-8P-2S User Manual 316 Object Description • Local Port The port on which LLDP frames are received or transmitted. • Tx Frames The num

IFS NS3502-8P-2S User Manual 317 use LLDP to exchange information about their respective tx and rx "wakeup time ", as a way to agree upo

IFS NS3502-8P-2S User Manual 318 • Resolved Tx Tw The resolved Tx Tw for this link. Note : NOT the link partner The resolved value that is the ac

IFS NS3502-8P-2S User Manual 319 4.15 Network Diagnostics This section provide the Physical layer and IP layer network diagnostics tools for troub

IFS NS3502-8P-2S User Manual 32 Power Notice: The device is a power-required device, it means, it will not work till it is powered. If your networ

IFS NS3502-8P-2S User Manual 320 Figure 4-15-1: ICMP Ping page screenshot The page includes the following fields: Object Description • IP Addr

IFS NS3502-8P-2S User Manual 321 Object Description • IPv6 Address The destination IPv6 Address. • Ping Size The payload size of the ICMPv6 pac

IFS NS3502-8P-2S User Manual 322 • Ping Size The payload size of the ICMP packet. Values range from 8 bytes to 1400 bytes. • Result Display the

IFS NS3502-8P-2S User Manual 323 • Cable Status Port: Port number. Pair: The status of the cable pair. Length: The length (in meters) of the cabl

IFS NS3502-8P-2S User Manual 324 4.16 Power over Ethernet (NS3502-8P-2S) Providing up to 8 PoE, in-line power interface, the NS3502-8P-2S PoE Swit

IFS NS3502-8P-2S User Manual 325 3~12 watts PoE Splitter PoE Splitter split the PoE 56V DC over the Ethernet cable into 5/12V DC power output. It

IFS NS3502-8P-2S User Manual 326 1 Optional 0.44 to 3.84 Watts Very low power 2 Optional 3.84 to 6.49 Watts Low power 3 Optional 6.49 to 12.95 Wat

IFS NS3502-8P-2S User Manual 327 Ethernet Port Configuration This section allows the user to inspect and configure the current PoE port setting,

IFS NS3502-8P-2S User Manual 328 The page includes the following fields: Object Description • System PoE Admin Mode Allows user enable or disabl

IFS NS3502-8P-2S User Manual 329 The PD is classified based on power. The classification of the PD is the maximum power that the PD will draw acro

IFS NS3502-8P-2S User Manual 33 2.2 Install the Switch This section describes how to install your Managed Switch and make connections to the Manag

IFS NS3502-8P-2S User Manual 330 Profile4 • AF/AT Mode Allows user to select 802.3at or 802.3af compatibility mode. The default value is 802.3at

IFS NS3502-8P-2S User Manual 331 4.16.4 PoE Status This page allows the user to inspect the total power consumption, total power reserved and curr

IFS NS3502-8P-2S User Manual 332 • Priority The Priority shows the port's priority configured by the user. • Port Status The Port Status sh

IFS NS3502-8P-2S User Manual 333 The page includes the following fields: Object Description • Profile Set the schedule profile mode. Possible po

IFS NS3502-8P-2S User Manual 334 4.16.6 LLDP PoE Neighbors This page provides a status overview for all LLDP PoE neighbors. The displayed table co

IFS NS3502-8P-2S User Manual 335 4.16.7 PD Alive-check NS3502-8P-2S PoE switch can be configured to monitor connected PD’s status in real-time via

IFS NS3502-8P-2S User Manual 336  Reboot & Alarm: It means system will reset the PoE port and issue an alarm message via Syslog, SMTP. 

IFS NS3502-8P-2S User Manual 337 5. COMMAND LINE INTERFACE 5.1 Accessing the CLI When accessing the management interface for the switch over a d

IFS NS3502-8P-2S User Manual 338 Configure IP address The IFS Managed Switch is shipped with default IP address as following. IP Address: 192.16

IFS NS3502-8P-2S User Manual 339 Figure 5-3: Set IP address screen 4. Repeat Step 1 to check if the IP address is changed. If the IP address is

IFS NS3502-8P-2S User Manual 34 Step5: Supply power to the Managed Switch. Connect one end of the power cable to the Managed Switch. Connect the p

IFS NS3502-8P-2S User Manual 340 5.2 Telnet Login The Managed Switch also supports telnet for remote management. The switch asks for user name and

IFS NS3502-8P-2S User Manual 341 6. Command Line Mode The CLI groups all the commands in appropriate modes according to the nature of the command.

IFS NS3502-8P-2S User Manual 342 Syntax: System Configuration [all] [<port_list>] Parameters: all : Show all switch configuration,

IFS NS3502-8P-2S User Manual 343 System Log Server Address : System Log Level : Info NS3502-8P-2S:/> System Version Description:

IFS NS3502-8P-2S User Manual 344 System Log Server Mode : Disabled System Name Description: Set or show the system name. Syntax: Syste

IFS NS3502-8P-2S User Manual 345 Example: To set device contact: NS3502-8P-2S:/>System contact NS3502-8P-2S-Test System Log Server Addre

IFS NS3502-8P-2S User Manual 346 empty Example: To set device location: NS3502-8P-2S:/>System location CM-LAB System Log Level Descripti

IFS NS3502-8P-2S User Manual 347 Default Setting: 0 Example: To set timezone: NS3502-8P-2S:/>system timezone 0 System Log Lookup Descrip

IFS NS3502-8P-2S User Manual 348 System Reboot Description: Reboot the system. Syntax: System Reboot Example: To reboot device without changin

IFS NS3502-8P-2S User Manual 349 6.2 IP Command IP Configuration Description: Show IP configuration. Syntax: IP Configuration Example: Show

IFS NS3502-8P-2S User Manual 35 Figure 2-6: Mounting NS3502-8P-2S in a Rack Step6: Proceeds with the steps 4 and steps 5 of session 2.2.1 Deskt

IFS NS3502-8P-2S User Manual 350 Parameters: enable : Enable or renew DHCP client disable: Disable DHCP client Default Setting: Disable Example:

IFS NS3502-8P-2S User Manual 351 IP Ping Description: Ping IP address (ICMP echo). Syntax: IP Ping <ip_addr_string> [<ping_length>]

IFS NS3502-8P-2S User Manual 352 IP DNS Proxy Description: Set or show the IP DNS Proxy mode. Syntax: IP DNS_Proxy [enable|disable] Parameters:

IFS NS3502-8P-2S User Manual 353 IPv6 Setup Description: Set or show the IPv6 setup. Syntax: IP IPv6 Setup [<ipv6_addr>] [<ipv6_prefix&

IFS NS3502-8P-2S User Manual 354 Syntax: IP IPv6 Ping6 <ipv6_addr> [<ping_length>] Parameters: <ipv6_addr> : IPv6 host addres

IFS NS3502-8P-2S User Manual 355 1 pool.ntp.org 2 europe.pool.ntp.org 3 north-america.pool.ntp.org 4 asia.pool.ntp.org 5 ocean

IFS NS3502-8P-2S User Manual 356 To add NTP server: NS3502-8P-2S:/>ip ntp server add 1 60.249.136.151 IP NTP Server IPv6 Add Description: Add

IFS NS3502-8P-2S User Manual 357 6.3 Port Management Command Port Configuration Description: Show port configuration. Syntax: Port Configuratio

IFS NS3502-8P-2S User Manual 358 Syntax: Port Mode [<port_list>] [auto|10hdx|10fdx|100hdx|100fdx|1000fdx] Parameters: <port_list>: P

IFS NS3502-8P-2S User Manual 359 NS3502-8P-2S:/>port flow control 1 enable Port State Description: Set or show the port administrative state.

IFS NS3502-8P-2S User Manual 36 Gigabit SFP Transceiver modules IFS Model SFP Description S30-1SLC/A-10 SFP, LC Connector, Single Mode, Gigabi

IFS NS3502-8P-2S User Manual 360 NS3502-8P-2S:/>port maxframe 1 2048 Port Power Description: Set or show the port PHY power mode. Syntax: Port

IFS NS3502-8P-2S User Manual 361 Example: NS3502-8P-2S:/>port excessive 1 restart Port Statistics Description: Show port statistics. Synta

IFS NS3502-8P-2S User Manual 362 Port SFP Description: Show SFP port information. Syntax: Port SFP [<port_list>] Parameters: <port_list

IFS NS3502-8P-2S User Manual 363 6.4 MAC Address Table Command MAC Configuration Description: Show MAC address table configuration. Syntax: MAC C

IFS NS3502-8P-2S User Manual 364 Syntax: MAC Add <mac_addr> <port_list> [<vid>] Parameters: <mac_addr> : MAC address (xx

IFS NS3502-8P-2S User Manual 365 <vid> : VLAN ID (1-4095), default: 1 Example: Lookup state of Mac address 00-30-4f-a6-34-9d NS3502

IFS NS3502-8P-2S User Manual 366 (default: Show learn mode) Default Setting: Auto Example: Set secure learning mode in port1 NS3502-8P-2S:/&

IFS NS3502-8P-2S User Manual 367 Syntax: MAC Statistics [<port_list>] Parameters: <port_list>: Port list or 'all', (defa

IFS NS3502-8P-2S User Manual 368 Show VLAN configuration. Syntax: VLAN Configuration [<port_list>] Parameters: <port_list>: Port lis

IFS NS3502-8P-2S User Manual 369 <vid>|none : Port VLAN ID (1-4095) or 'none', (default: Show port VLAN ID) Default Setting: 1

IFS NS3502-8P-2S User Manual 37 It recommends using IFS SFPs on the Managed Switch. If you insert a SFP transceiver that is not supported, the Ma

IFS NS3502-8P-2S User Manual 370 Parameters: <port_list>: Port list or 'all', default: All ports enable : Enable VLAN ingress

IFS NS3502-8P-2S User Manual 371 Syntax: VLAN LinkType [<port_list>] [untagged|tagged] Parameters: <port_list>: Port list or 'a

IFS NS3502-8P-2S User Manual 372 Set or show out layer VLAN tag ether type in Q-in-Q VLAN mode. Syntax: VLAN Ethtype [<port_list>] [man|dot

IFS NS3502-8P-2S User Manual 373 VLAN Forbidden Add Description: Add or modify VLAN entry in forbidden table. Syntax: VLAN Forbidden Add <vid&

IFS NS3502-8P-2S User Manual 374 Example: Forbidden delete VLAN10 NS3502-8P-2S:/>vlan forbidden delete 10 VLAN Forbidden Lookup Descript

IFS NS3502-8P-2S User Manual 375 all : Shows all VLANs configuration (default: combined VLAN Users configuration) Example: Show VLAN

IFS NS3502-8P-2S User Manual 376 <name>: VLAN name - Maximum of 32 characters. VLAN Name can only contain alphabets or numbers. VLAN name sh

IFS NS3502-8P-2S User Manual 377 Parameters: <port_list>: Port list or 'all', default: All ports combined : combined VLAN U

IFS NS3502-8P-2S User Manual 378 PVLAN Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: Al

IFS NS3502-8P-2S User Manual 379 <pvlan_id> : Private VLAN ID. The allowed range for a Private VLAN ID is the same as the switch port number

IFS NS3502-8P-2S User Manual 38 Figure 2-8: Pull out the SFP transceiver Never pull out the module without pull the handle or the push bolts on

IFS NS3502-8P-2S User Manual 380 NS3502-8P-2S:/>pvlan lookup PVLAN ID Ports -------- ----- 1 1-10 PVLAN Isolate Description: Set o

IFS NS3502-8P-2S User Manual 381 Default Setting: User Name Privilege admin 15 Example: Show users configuration NS3502-8P-2S:/>security

IFS NS3502-8P-2S User Manual 382 Delete users entry. Syntax: Security Switch Users Delete <user_name> Parameters: <user_name>: A str

IFS NS3502-8P-2S User Manual 383 LACP 5 10 5 10 LLDP 5 10 5 10 LLDP_MED

IFS NS3502-8P-2S User Manual 384 NS3502-8P-2S:/>security switch privilege level group mvr 15 15 15 15 Security Switch Privilege Level Current

IFS NS3502-8P-2S User Manual 385 Set or show Auth method. (default: Show Auth method). Syntax: Security Switch Auth Method [console|telnet|ssh|we

IFS NS3502-8P-2S User Manual 386 SSH Configuration: ================== SSH Mode : Enable Security Switch SSH Mode Description: Set or show the

IFS NS3502-8P-2S User Manual 387 HTTPS Configuration: ==================== HTTPS Mode : Enable HTTPS Redirect Mode : Disabled Security

IFS NS3502-8P-2S User Manual 388 (default: Show HTTPs redirect mode) Default Setting: disable Example: Enable HTTPs redirect function. NS350

IFS NS3502-8P-2S User Manual 389 (default: Show access management mode) Default Setting: disable Example: Enable access management function.

IFS NS3502-8P-2S User Manual 39 3. SWITCH MANAGEMENT This chapter explains the methods that you can use to configure management access to the Mana

IFS NS3502-8P-2S User Manual 390 Syntax: Security Switch Access Mode [enable|disable] Parameters: Enable: Enable access management Disable: Disab

IFS NS3502-8P-2S User Manual 391 Add access management IPv6 entry, default: Add all supported protocols. Syntax: Security Switch Access Ipv6 Add

IFS NS3502-8P-2S User Manual 392 Example: Delete access management ID 1 NS3502-8P-2S:/>security switch access delete 1 Security Switch A

IFS NS3502-8P-2S User Manual 393 Parameters: clear: Clear access management statistics Example: Show access management statistics. NS3502-8P

IFS NS3502-8P-2S User Manual 394 disable: Disable SNMP (default: Show SNMP mode) Default Setting: enable Example: Disable SNMP mode. NS3502-

IFS NS3502-8P-2S User Manual 395 Parameters: <community>: Community string. Use 'clear' or "" to clear the string (defa

IFS NS3502-8P-2S User Manual 396 Security Switch SNMP Trap Mode [enable|disable] Parameters: enable : Enable SNMP traps disable: Disable SNMP tra

IFS NS3502-8P-2S User Manual 397 Syntax: Security Switch SNMP Trap Community [<community>] Parameters: <community>: Community string

IFS NS3502-8P-2S User Manual 398 Parameters: <ipv6_addr>: IPv6 address is in 128-bit records represented as eight fields of up to four hexad

IFS NS3502-8P-2S User Manual 399 Syntax: Security Switch SNMP Trap Link-up [enable|disable] Parameters: enable : Enable SNMP trap link-up and li

IFS NS3502-8P-2S User Manual 4 4.2.6 NTP Configuration ...

IFS NS3502-8P-2S User Manual 40 3.2 Management Access Overview The Managed Switch gives you the flexibility to access and manage it using any or a

IFS NS3502-8P-2S User Manual 400 Security Switch SNMP Trap Inform Timeout Description: Set or show the SNMP trap inform timeout (usecs). Syntax:

IFS NS3502-8P-2S User Manual 401 Security Switch SNMP Trap Probe Security Engine ID Description: Show SNMP trap security engine ID probe mode. Sy

IFS NS3502-8P-2S User Manual 402 Security Switch SNMP Trap Security Name Description: Set or show SNMP trap security name. Syntax: Security Switc

IFS NS3502-8P-2S User Manual 403 Add or modify SNMPv3 community entry. The entry index key is <community>. Syntax: Security Switch SNMP Com

IFS NS3502-8P-2S User Manual 404 Security Switch SNMP Community Lookup [<index>] Parameters: <index>: entry index (1-64) Example:

IFS NS3502-8P-2S User Manual 405 des : An optional flag to indicate that this user using DES privacy protocol privacy protocol should b

IFS NS3502-8P-2S User Manual 406 <engineid> : Engine ID, the format may not be all zeros or all 'ff'H and is restricted to 5 -

IFS NS3502-8P-2S User Manual 407 Security Switch SNMP Group Add Description: Add or modify SNMPv3 group entry. The entry index key are <securit

IFS NS3502-8P-2S User Manual 408 Security Switch SNMP Group Lookup Description: Lookup SNMPv3 group entry. Syntax: Security Switch SNMP Group Lo

IFS NS3502-8P-2S User Manual 409 <oid_subtree>: The OID defining the root of the subtree to add to the named view Example: Add SNMPv3 vie

IFS NS3502-8P-2S User Manual 41 3.3 Administration Console The administration console is an internal, character-oriented, and command line user i

IFS NS3502-8P-2S User Manual 410 1 default_view included .1 2 snmpv3_viwe included .1

IFS NS3502-8P-2S User Manual 411 Security Switch SNMP Access Delete Description: Delete SNMPv3 access entry. Syntax: Security Switch SNMP Acces

IFS NS3502-8P-2S User Manual 412 Security Network Psec Switch Description: Show Port Security status. Syntax: Security Network Psec Switch [<p

IFS NS3502-8P-2S User Manual 413 Parameters: <port_list>: Port list or 'all', default: All ports Example: Show MAC address l

IFS NS3502-8P-2S User Manual 414 Port Mode Limit Action ---- -------- ----- --------------- 1 Disabled 4 None 2

IFS NS3502-8P-2S User Manual 415 Syntax: Security Network Limit Aging [enable|disable] Parameters: enable : Enable aging disable : Disable aging

IFS NS3502-8P-2S User Manual 416 Syntax: Security Network Limit Port [<port_list>] [enable|disable] Parameters: <port_list>: Port lis

IFS NS3502-8P-2S User Manual 417 Security Network Limit Action Description: Set or show the action involved with exceeding the limit. Syntax: Se

IFS NS3502-8P-2S User Manual 418 Security Network NAS Configuration Description: Show 802.1X configuration. Syntax: Security Network NAS Confi

IFS NS3502-8P-2S User Manual 419 Security Network NAS Mode Description: Set or show the global NAS enable. Syntax: Security Network NAS Mode [enab

IFS NS3502-8P-2S User Manual 42 Figure 3-2: Terminal parameter settings You can change these settings, if desired, after you log on. This managem

IFS NS3502-8P-2S User Manual 420 Example: Show the port 1 security state. NS3502-8P-2S:/>security network nas state 1 Port Admin State

IFS NS3502-8P-2S User Manual 421 Parameters: global : Select the global RADIUS-assigned VLAN setting <port_list>: Select the per-port R

IFS NS3502-8P-2S User Manual 422 Time in seconds between check for activity on successfully authenticated MAC addresses. Syntax: Security Network

IFS NS3502-8P-2S User Manual 423 Set or show either global enabledness (use the global keyword) or per-port enabledness of RADIUS-assigned QoS. S

IFS NS3502-8P-2S User Manual 424 Example: Enable NAS RADIUS VLAN NS3502-8P-2S:/>security network nas radius_vlan enable Security Network N

IFS NS3502-8P-2S User Manual 425 Enable NAS guest VLAN NS3502-8P-2S:/>security network nas guest_vlan enable Security Network NAS Authentic

IFS NS3502-8P-2S User Manual 426 Rx Total: 0 Tx Total: 0 Rx Response/Id:

IFS NS3502-8P-2S User Manual 427 Parameters: <port_list> : Port list or 'all', default: All ports permit : Permit forwar

IFS NS3502-8P-2S User Manual 428 Set ACL policy 2 for port 1 NS3502-8P-2S:/>security network acl policy 1 2 Security Network ACL Rate Descr

IFS NS3502-8P-2S User Manual 429 If the Port keyword is used, the rule applies to the specified port only. If the Policy keyword is used, the rule

IFS NS3502-8P-2S User Manual 43 You can then use your Web browser to list and manage the Managed Switch configuration parameters from one central

IFS NS3502-8P-2S User Manual 430 udp : UDP keyword <sport> : Source UDP/TCP port range (0-65535) or 'any' <dpor

IFS NS3502-8P-2S User Manual 431 Example: Lookup ACE 1 NS3502-8P-2S:/>security network acl lookup 1 Security Network ACL Clear Descriptio

IFS NS3502-8P-2S User Manual 432 Security Network DHCP Relay Configuration Description: Show DHCP relay configuration. Syntax: Security Network

IFS NS3502-8P-2S User Manual 433 Example: Enable DHCP relay mode NS3502-8P-2S:/>security network dhcp relay mode enable Security Network

IFS NS3502-8P-2S User Manual 434 Default Setting: disable Example: Enable DHCP relay agent information option mode. NS3502-8P-2S:/>securit

IFS NS3502-8P-2S User Manual 435 Syntax: Security Network DHCP Relay Statistics [clear] Parameters: clear: Clear DHCP relay statistics Example:

IFS NS3502-8P-2S User Manual 436 NS3502-8P-2S:/>security network dhcp snooping mode enable Security Network DHCP Snooping Port Mode Descripti

IFS NS3502-8P-2S User Manual 437 Port 1 Statistics: -------------------- Rx Discover: 0 Tx Discover:

IFS NS3502-8P-2S User Manual 438 Syntax: Security Network IP Source Guard Mode [enable|disable] Parameters: enable : Enable IP Source Guard disa

IFS NS3502-8P-2S User Manual 439 Security Network IP Source Guard Limit Description: Set or show the IP Source Guard port limitation for dynamic e

IFS NS3502-8P-2S User Manual 44 Figure 3-5: SNMP management

IFS NS3502-8P-2S User Manual 440 Security Network IP Source Guard Status Description: Show IP source guard static and dynamic entries. Syntax: S

IFS NS3502-8P-2S User Manual 441 Default Setting: disable Example: Enable ARP inspection mode NS3502-8P-2S:/>security network arp inspect

IFS NS3502-8P-2S User Manual 442 Parameters: <port_list> : Port list or 'all', default: All ports add : Add new port ARP inspe

IFS NS3502-8P-2S User Manual 443 NS3502-8P-2S:/>security aaa configuration AAA Configuration: ================== Server Timeout : 15 se

IFS NS3502-8P-2S User Manual 444 5 Disabled 1813 TACACS+ Authentication Server Configura

IFS NS3502-8P-2S User Manual 445 Security AAA Deadtime Description: Set or show server dead time. Syntax: Security AAA Deadtime [<dead_time&g

IFS NS3502-8P-2S User Manual 446 Quotes in the secret are not allowed. <server_port> : Server UDP port. Use 0 to use the

IFS NS3502-8P-2S User Manual 447 Syntax: Security AAA TACACS+ [<server_index>] [enable|disable] [<ip_addr_string>] [<secret>] [&

IFS NS3502-8P-2S User Manual 448 6.8 Spanning Tree Protocol Command STP Configuration Description: Show STP configuration. Syntax: STP Configur

IFS NS3502-8P-2S User Manual 449 Example: Set the STP Bridge protocol version. NS3502-8P-2S:/> stp version rstp STP Tx Hold Description:

IFS NS3502-8P-2S User Manual 45 4. WEB CONFIGURATION This section introduces the configuration and functions of the Web-Based management. About We

IFS NS3502-8P-2S User Manual 450 Example: Set STP maximum hops in 25 NS3502-8P-2S:/>stp maxhops 25 STP MaxAge Description: Set or show th

IFS NS3502-8P-2S User Manual 451 NS3502-8P-2S:/>stp fwddelay 25 STP CName Description: Set or Show MSTP configuration name and revision. Syn

IFS NS3502-8P-2S User Manual 452 NS3502-8P-2S:/>stp bpdufilter enable STP BPDU Guard Description: Set or show edge port BPDU Guard. Syntax:

IFS NS3502-8P-2S User Manual 453 STP Status Description: Show STP Bridge status. Syntax: STP Status [<msti>] [<port_list>] Paramet

IFS NS3502-8P-2S User Manual 454 STP MSTI Priority Description: Set or show the bridge instance priority. Syntax: STP Msti Priority [<msti>

IFS NS3502-8P-2S User Manual 455 Syntax: STP Msti Add <msti> <vid> Parameters: <msti>: STP bridge instance no (0-7, CIST=0, MS

IFS NS3502-8P-2S User Manual 456 Parameters: <port_list>: Port list or 'all'. Port zero means aggregations. Enable : Enable M

IFS NS3502-8P-2S User Manual 457 Syntax: STP Port AutoEdge [<port_list>] [enable|disable] Parameters: <port_list>: Port list or &apos

IFS NS3502-8P-2S User Manual 458 STP Port RestrictedRole Description: Set or show the MSTP restrictedRole port parameter. Syntax: STP Port Restri

IFS NS3502-8P-2S User Manual 459 STP Port bpduGuard Description: Set or show the bpduGuard port parameter. Syntax: STP Port bpduGuard [<port

IFS NS3502-8P-2S User Manual 46  Logging on the switch 1. Use Internet Explorer 7.0 or above Web browser. Enter the factory-default IP address

IFS NS3502-8P-2S User Manual 460 STP Port Check Description: Set the STP check (Migration Check) variable for ports. Syntax: STP Port Check [&l

IFS NS3502-8P-2S User Manual 461 Parameters: <Msti> : STP bridge instance no (0-7, CIST=0, MSTI1=1,) <Port_list>: Port list or &ap

IFS NS3502-8P-2S User Manual 462 Aggr Configuration Aggregation Add Description: Add or modify link aggregation. Syntax: Aggr Add <port_list

IFS NS3502-8P-2S User Manual 463 Aggr Lookup [<aggr_id>] Parameters: <aggr_id>: Aggregation ID Aggregation Mode Description: Set or

IFS NS3502-8P-2S User Manual 464 Syntax: LACP Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', def

IFS NS3502-8P-2S User Manual 465 Example: Enable LACP for port1~4 NS3502-8P-2S:/>lacp mode 1-4 enable LACP Key Description: Set or show

IFS NS3502-8P-2S User Manual 466 Default Setting: active Example: Set passive for port1~4 NS3502-8P-2S:/>lacp role 1-4 passive LACP Stat

IFS NS3502-8P-2S User Manual 467 <port_list>: Port list or 'all', default: All ports clear : Clear LACP statistics Example:

IFS NS3502-8P-2S User Manual 468 6.11 LLDP Command LLDP Configuration Description: Show LLDP configuration. Syntax: LLDP Configuration [<port_

IFS NS3502-8P-2S User Manual 469 LLDP Mode Description: Set or show LLDP mode. Syntax: LLDP Mode [<port_list>] [enable|disable|rx|tx] Para

IFS NS3502-8P-2S User Manual 47 Figure 4-1-3: Default main page Now, you can use the Web management interface to continue the switch management

IFS NS3502-8P-2S User Manual 470 disable : Disable TLV (default: Show optional TLV's configuration) Default Setting: Description of the p

IFS NS3502-8P-2S User Manual 471 Parameters: <hold>: LLDP hold value (2-10) Default Setting: 3 Example: Set LLDP hold value in 10 NS35

IFS NS3502-8P-2S User Manual 472 Example: Set LLDP reinit delay value in 3 NS3502-8P-2S:/>lldp reinit 3 LLDP Statistics Description: Show

IFS NS3502-8P-2S User Manual 473 LLDP Info Description: Show LLDP neighbor device information. Syntax: LLDP Info [<port_list>] Parameters

IFS NS3502-8P-2S User Manual 474 1 none 2 none 3 none 4 none LLDPMED Civic Description: Set or show LLDP-MED

IFS NS3502-8P-2S User Manual 475 p_o_box : Post office box (P.O. Box) additional_code : Addtional code (default: Show Ci

IFS NS3502-8P-2S User Manual 476 LLDPMED policy add [voice|voice_signaling|guest_voice|guest_voice_signaling|softphone_voice|video_conferencing|st

IFS NS3502-8P-2S User Manual 477 LLDPMED Port Policy Description: Set or show LLDP-MED port polcies. Syntax: LLDPMED port policies [<port_lis

IFS NS3502-8P-2S User Manual 478 LLDPMED Datum Description: Set or show LLDP-MED Coordinates map datum. Syntax: LLDPMED Datum [wgs84|nad83_navd8

IFS NS3502-8P-2S User Manual 479 6.13 EEE Command EEE Configuration Description: Show eee configuration. Syntax: EEE Configuration [<port_list

IFS NS3502-8P-2S User Manual 48 4.1 Main Web Page The IFS Managed Switch provides a Web-based browser interface for configuring and managing it. T

IFS NS3502-8P-2S User Manual 480 Default Setting: Disabled Example: Enable EEE mode for port1~4 NS3502-8P-2S:/>eee mode enable 1-4 EEE

IFS NS3502-8P-2S User Manual 481 6.14 Power over Ethernet Command PoE Configuration Description: Show PoE configuration. Syntax: PoE Configuratio

IFS NS3502-8P-2S User Manual 482 <port_list>: Port list or 'all', default: All ports enable : Enables PoE disable : Disable

IFS NS3502-8P-2S User Manual 483 Set low priority for port1~4 NS3502-8P-2S:/>poe priority 1-4 low PoE Management Mode Description: Show / S

IFS NS3502-8P-2S User Manual 484 Parameters: <port_list> : Port list or 'all', default: All ports <alloc_power>: PoE maixim

IFS NS3502-8P-2S User Manual 485 6.15 Thermal Command Thermal Priority Temperature Description: Set or show the temperature at which the ports s

IFS NS3502-8P-2S User Manual 486 0 Example: Set thermal port priority in 2 NS3502-8P-2S:/> Thermal port_prio 2 Thermal Status Descriptio

IFS NS3502-8P-2S User Manual 487 6.16 LED Power Command LED Power Timers Description: Set or show the time and intensity for the LEDs. Syntax: le

IFS NS3502-8P-2S User Manual 488 Parameters: <maintenance_time> : Time in seconds (0-65535) that the LEDs shall be turned on, when

IFS NS3502-8P-2S User Manual 489 Syntax: QoS Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', defa

IFS NS3502-8P-2S User Manual 49 can setup the Managed Switch by select the functions those listed in the Main Function. The screen in Figure 4-1-5

IFS NS3502-8P-2S User Manual 490 0 Example: Set the default Drop Precedence Level in 1 for port1 NS3502-8P-2S:/>qos Port Classification dp

IFS NS3502-8P-2S User Manual 491 0 Example: Set the default DEI for an untagged frame in 1 for port1. NS3502-8P-2S:/>qos Port Classificati

IFS NS3502-8P-2S User Manual 492 QoS Port Classification Map [<port_list>] [<pcp_list>] [<dei_list>] [<class>] [<dpl>

IFS NS3502-8P-2S User Manual 493 <port_list>: Port list or 'all', default: All ports enable : Enable port policer disable :

IFS NS3502-8P-2S User Manual 494 Parameters: <port_list>: Port list or 'all', default: All ports kbps : Unit is kilo bits per se

IFS NS3502-8P-2S User Manual 495 Set or show the port scheduler weight. Syntax: QoS Port Scheduler Weight [<port_list>] [<queue_list>

IFS NS3502-8P-2S User Manual 496 Parameters: <port_list> : Port list or 'all', default: All ports <queue_list>: Queue list

IFS NS3502-8P-2S User Manual 497 Set or show the port shaper mode. Syntax: QoS Port Shaper Mode [<port_list>] [enable|disable] Parameters:

IFS NS3502-8P-2S User Manual 498 QoS Port TagRemarking Mode Description: Set or show the port tag remarking mode. Syntax: QoS Port TagRemarking M

IFS NS3502-8P-2S User Manual 499 QoS Port TagRemarking DEI Description: Set or show the default DEI. This value is used when port tag remarking

IFS NS3502-8P-2S User Manual 5 4.5.5 LACP Port Statistics ...

IFS NS3502-8P-2S User Manual 50 4.2 System Use the System menu items to display and configure basic administrative details of the Managed Switch.

IFS NS3502-8P-2S User Manual 500 QoS Port DSCP Translation Description: Set or show DSCP ingress translation mode. If translation is enabled for a

IFS NS3502-8P-2S User Manual 501 none Example: Set DSCP classification based on QoS class and DP level in zero NS3502-8P-2S:/> QoS Port DS

IFS NS3502-8P-2S User Manual 502 DSCP value used to map QoS class and DPL is either translated DSCP value or incoming frame DSCP value. Syntax: Q

IFS NS3502-8P-2S User Manual 503 disable : Set DSCP as un-trusted DSCP (default: Show DSCP Trust status) Default Setting: disable QoS DSCP C

IFS NS3502-8P-2S User Manual 504 QoS Storm Unicast Description: Set or show the unicast storm rate limiter. Syntax: QoS Storm Unicast [enable|d

IFS NS3502-8P-2S User Manual 505 NS3502-8P-2S:/> QoS Storm multicast enable 2 QoS QCL Add Description: Add or modify QoS Control Entry (QCE).

IFS NS3502-8P-2S User Manual 506 ipv4 : IPv4 keyowrd <protocol> : IP protocol number: (0-255, TCP or UDP) or 'any&apo

IFS NS3502-8P-2S User Manual 507 Parameters: <qce_id>: QCE ID (1-256), default: Next available ID Default Setting: disable Example: En

IFS NS3502-8P-2S User Manual 508 conflicts : Shows all conflict status (default : Shows the combined status) Default Setting: disabl

IFS NS3502-8P-2S User Manual 509 Example: Set port 2 for the mirror port. NS3502-8P-2S:/>mirror port 2 Mirror Mode Description: Set or sho

IFS NS3502-8P-2S User Manual 51 4.2.1 System Information The System Info page provides information for the current device information. System I

IFS NS3502-8P-2S User Manual 510 6.19 Configuration Command Configuration Save Description: Save configuration to TFTP server. Syntax: Config Sav

IFS NS3502-8P-2S User Manual 511 6.20 Firmware Command Firmware Load Description: Load new firmware from TFTP server. Syntax: Firmware Load <i

IFS NS3502-8P-2S User Manual 512 6.21 UPnP Command UPnP Configuration Description: Show UPnP configuration. Syntax: UPnP Configuration Example:

IFS NS3502-8P-2S User Manual 513 UPnP TTL Description: Set or show the TTL value of the IP header in SSDP messages. Syntax: UPnP TTL [<ttl>

IFS NS3502-8P-2S User Manual 514 Syntax: MVR Configuration Example: Show the MVR configuration. NS3502-8P-2S:/>mvr configuration MVR Con

IFS NS3502-8P-2S User Manual 515 MVR Mode Description: Set or show the MVR mode. Syntax: MVR Mode [enable|disable] Parameters: enable : En

IFS NS3502-8P-2S User Manual 516 MVR Multicast VLAN Description: Set or show MVR multicast VLAN ID. Syntax: MVR Multicast VLAN [<vid>] Par

IFS NS3502-8P-2S User Manual 517 MVR Immediate Leave Description: Set or show MVR port state about immediate leave. Syntax: MVR Immediate Leave [

IFS NS3502-8P-2S User Manual 518 Voice VLAN Age Time(seconds) : 86400 Voice VLAN Traffic Class : 7 Voice VLAN OUI Table: ================

IFS NS3502-8P-2S User Manual 519 Syntax: Voice VLAN Mode [enable|disable] Parameters: enable : Enable Voice VLAN mode. disable: Disable Voice VLA

IFS NS3502-8P-2S User Manual 52 Buttons Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. : Click

IFS NS3502-8P-2S User Manual 520 Syntax: Voice VLAN Agetime [<age_time>] Parameters: <age_time>: MAC address age time (10-10000000) d

IFS NS3502-8P-2S User Manual 521 Voice VLAN OUI Add <oui_addr> [<description>] Parameters: <oui_addr> : OUI address (xx-xx-xx

IFS NS3502-8P-2S User Manual 522 NS3502-8P-2S:/>voice vlan oui clear Voice VLAN OUI Lookup Description: Clear Voice VLAN OUI entry. Modify OU

IFS NS3502-8P-2S User Manual 523 Voice VLAN Security Description: Set or show the Voice VLAN port security mode. When the function is enabled, a

IFS NS3502-8P-2S User Manual 524 IPMC Mode Description: Set or show the IPMC snooping mode. Syntax: IPMC Mode [mld|igmp] [enable|disable] Param

IFS NS3502-8P-2S User Manual 525 Example: Enable IGMP flooding NS3502-8P-2S:/>ipmc flooding igmp enable IPMC Leave Proxy Description: Se

IFS NS3502-8P-2S User Manual 526 mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP enable : Enable IPMC Proxy disable: Disable IPMC Proxy (default:

IFS NS3502-8P-2S User Manual 527 IPMC Querier Description: Set or show the IPMC snooping querier mode for VLAN. Syntax: IPMC Querier [mld|igmp] [

IFS NS3502-8P-2S User Manual 528 Example: Enable IGMP fast leave for all port NS3502-8P-2S:/>ipmc fastleave igmp 1-10 enable IPMC Thrott

IFS NS3502-8P-2S User Manual 529 mld|igmp : mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP <port_list>: Port list or 'all', de

IFS NS3502-8P-2S User Manual 53 • DNS Server Provide the IP address of the DNS Server in dotted decimal notation. • DNS Proxy When DNS proxy is

IFS NS3502-8P-2S User Manual 530 igmp: IPMC for IPv4 IGMP <vid> : VLAN ID (1-4095) or 'any', default: Show all VLANs Example:

IFS NS3502-8P-2S User Manual 531 Example: Show VLAN 1 IPMC Versions. NS3502-8P-2S:/>ipmc version igmp 1 IPMC SSM Description: Show SSM rel

IFS NS3502-8P-2S User Manual 532 IPMC Parameter QI Description: Set or show the IPMC Query Interval. Syntax: IPMC Parameter QI [mld|igmp] [<vi

IFS NS3502-8P-2S User Manual 533 IPMC Parameter LLQI Description: Set or show the IPMC Last Listener Query Interval. Syntax: IPMC Parameter LLQI

IFS NS3502-8P-2S User Manual 534 6.25 VLAN Control List Command VCL MAC-based VLAN Configuration Description: Show VCL MAC-based VLAN configurat

IFS NS3502-8P-2S User Manual 535 Example: Delete 00-11-22-33-44-55-66 in MAC-based VLAN list NS3502-8P-2S:/> vcl macvlan del 00-11-22-33-44

IFS NS3502-8P-2S User Manual 536 <pid> : PID value (0x0-0xFFFF). If OUI is 00-00-00, valid range of PID is from 0x0600-0x

IFS NS3502-8P-2S User Manual 537 VCL Protocol-based VLAN Delete LLC Description: Delete VCL protocol-based VLAN LLC protocol to group mapping. Syn

IFS NS3502-8P-2S User Manual 538 7. SWITCH OPERATION 7.1 Address Table The Switch is implemented with an address table. This address table compose

IFS NS3502-8P-2S User Manual 539 7.5 Auto-Negotiation The STP ports on the Switch have built-in "Auto-negotiation". This technology auto

IFS NS3502-8P-2S User Manual 54 • Address Provide the IPv6 address of this switch. IPv6 address is in 128-bit records represented as eight fields

IFS NS3502-8P-2S User Manual 540 8. POWER OVER ETHERNET OVERVIEW What is PoE? Based on the global standard IEEE 802.3af, PoE is a technology for

IFS NS3502-8P-2S User Manual 541 Figure 8-1 - Power Supplied over the Spare Pins The data pairs are used. Since Ethernet pairs are transformer co

IFS NS3502-8P-2S User Manual 542 References: IEEE Std 802.3af-2003 (Amendment to IEEE Std 802.3-2002, including IEEE Std 802.3ae-2002), 2003 Page

IFS NS3502-8P-2S User Manual 543 Line Detection Before power is applied, safety dictates that it must first be ensured that a valid PD is connecte

IFS NS3502-8P-2S User Manual 544 Power Disconnection Scenarios The IEEE 802.3af standard requires that devices powered over Ethernet be disconnec

IFS NS3502-8P-2S User Manual 545 9. TROUBLE SHOOTING This chapter contains information to help you solve problems. If the Ethernet Switch is not f

IFS NS3502-8P-2S User Manual 546 3. Replace the power cord if the cord is inserted correctly; check that the AC power source is working by connec

IFS NS3502-8P-2S User Manual 547 APPENDEX A A.1 Switch's RJ-45 Pin Assignments 1000Mbps, 1000Base T Contact MDI MDI-X 1 BI_DA+ BI_DB+ 2

IFS NS3502-8P-2S User Manual 548 The standard RJ-45 receptacle/connector There are 8 wires on a standard UTP/STP cable and each wire is color-co

IFS NS3502-8P-2S User Manual 549 APPENDEX B: GLOSSARY A ACE ACE is an acronym for Access Control Entry. It describes access permission associa

IFS NS3502-8P-2S User Manual 55 Figure 4-2-4: Users Configuration page screenshot The page includes the following fields: Object Description •

IFS NS3502-8P-2S User Manual 550 Port copy, etc.) for each ingress port. They will though only apply if the frame gets past the ACE matching witho

IFS NS3502-8P-2S User Manual 551 C CC CC is an acronym for Continuity Check. It is a MEP functionality that is able to detect loss of continui

IFS NS3502-8P-2S User Manual 552 Therefore, IP address pool management is done by the server and not by a human network administrator. Dynamic add

IFS NS3502-8P-2S User Manual 553 DoS is an acronym for Denial of Service. In a denial-of-service (DoS) attack, an attacker attempts to prevent leg

IFS NS3502-8P-2S User Manual 554 HTTP HTTP is an acronym for Hypertext Transfer Protocol. It is a protocol that used to transfer or convey infor

IFS NS3502-8P-2S User Manual 555 IEEE 802.1X is an IEEE standard for port-based Network Access Control. It provides authentication to devices atta

IFS NS3502-8P-2S User Manual 556 remain unused. There is a rather substantial movement to adopt a new version of the Internet Protocol, IPv6, whic

IFS NS3502-8P-2S User Manual 557 M MAC Table Switching of frames is based upon the DMAC address contained in the frame. The switch builds up a

IFS NS3502-8P-2S User Manual 558 The main reason for using MVR is to save bandwidth by preventing duplicate multicast streams being sent in the co

IFS NS3502-8P-2S User Manual 559 It is a protocol described in ITU-T Y.1731 used to implement carrier ethernet functionality. MEP functionality li

IFS NS3502-8P-2S User Manual 56 : Click to undo any changes made locally and revert to previously saved values. : Click to undo any changes made l

IFS NS3502-8P-2S User Manual 560 PoE is an acronym for Power over Ethernet. Power over Ethernet is used to transmit electrical power, to remote

IFS NS3502-8P-2S User Manual 561 QCE is an acronym for QoS Control Entry. It describes QoS class associated with a particular QCE ID. There are

IFS NS3502-8P-2S User Manual 562 RDI is an acronym for Remote Defect Indication. It is a OAM functionallity that is used by a MEP to indicate defe

IFS NS3502-8P-2S User Manual 563 The SubNetwork Access Protocol (SNAP) is a mechanism for multiplexing, on networks using IEEE 802.2 LLC, more pro

IFS NS3502-8P-2S User Manual 564 Switch ID Switch IDs (1-16) are used to uniquely identify the switches within a stack. The Switch ID of each swit

IFS NS3502-8P-2S User Manual 565 TELNET enables the client to control the server and communicate with other servers on the network. To start a Tel

IFS NS3502-8P-2S User Manual 566 Common network applications that use UDP include the Domain Name System (DNS), streaming media applications such

IFS NS3502-8P-2S User Manual 567 WEP WEP is an acronym for Wired Equivalent Privacy. WEP is a deprecated algorithm to secure IEEE 802.11 wireless

IFS NS3502-8P-2S User Manual 568 WPS is an acronym for Wi-Fi Protected Setup. It is a standard for easy and secure establishment of a wireless hom

IFS NS3502-8P-2S User Manual 57 4.2.5 Privilege Levels This page provides an overview of the privilege levels. After setup completed, please press

IFS NS3502-8P-2S User Manual 58 The page includes the following fields: Object Description • Group Name The name identifying the privilege grou

IFS NS3502-8P-2S User Manual 59 4.2.6 NTP Configuration Configure NTP on this page. NTP is an acronym for Network Time Protocol, a network protoco

IFS NS3502-8P-2S User Manual 6 4.8.11 MLD Snooping Status ...

IFS NS3502-8P-2S User Manual 60 Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4

IFS NS3502-8P-2S User Manual 61 The page includes the following fields: Object Description • Mode Indicates the UPnP operation mode. Possible mo

IFS NS3502-8P-2S User Manual 62 Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.

IFS NS3502-8P-2S User Manual 63 The Circuit ID sub-option is supposed to include information specific to which circuit the request came in on. T

IFS NS3502-8P-2S User Manual 64 specific information (option82) into a DHCP message when forwarding to DHCP server and remove it from a DHCP messa

IFS NS3502-8P-2S User Manual 65 • Transmit to Server The packets number that relayed from client to server. • Transmit Error The packets number

IFS NS3502-8P-2S User Manual 66 4.2.10 CPU Load This page displays the CPU load, using a SVG graph. The load is measured as averaged over the last

IFS NS3502-8P-2S User Manual 67 4.2.11 System Log The switch system log information is provided here. The System Log screen in Figure 4-2-14 appea

IFS NS3502-8P-2S User Manual 68 : Updates the system log entries, ending at the last entry currently displayed. : Updates the system log entries,

IFS NS3502-8P-2S User Manual 69 4.2.13 Remote Syslog Configure remote syslog on this page. The Remote Syslog screen in Figure 4-2-16 appears. Fig

IFS NS3502-8P-2S User Manual 7 4.11.7 RADIUS Overview ...

IFS NS3502-8P-2S User Manual 70 4.2.14 SMTP Configuration Configure SMTP Configuration on this page. The SMTP Configuration screen in Figure 4-2-

IFS NS3502-8P-2S User Manual 71 • E-mail From It is for you to input who send this mail. • E-mail Subject It is for you to input mail subject. •

IFS NS3502-8P-2S User Manual 72 The page includes the following fields: Object Description • Time The time at which the LEDs intensity shall be

IFS NS3502-8P-2S User Manual 73 The EEE Power Reduction screen in Figure 4-2-19 appears. Figure 4-2-19: EEE Configuration page screenshot The pa

IFS NS3502-8P-2S User Manual 74 Figure 4-2-20: Thermal Protection Configuration page screenshot The page includes the following fields: Object

IFS NS3502-8P-2S User Manual 75 4.2.18 Web Firmware Upgrade This page facilitates an update of the firmware controlling the switch. The Web Firmwa

IFS NS3502-8P-2S User Manual 76 4.2.19 TFTP Firmware Upgrade The Firmware Upgrade page provides the functions to allow a user to update the Mana

IFS NS3502-8P-2S User Manual 77 Figure 4-2-24: Configuration Save page screenshot You can save/view or load the switch configuration. The config

IFS NS3502-8P-2S User Manual 78 Figure 4-2-25: File Download screen 2. Chose the file save path in management workstation. Figure 4-2-26: Fil

IFS NS3502-8P-2S User Manual 79 4.2.21 Configuration Upload This function allows backup and reload the current configuration of the Managed Switch

IFS NS3502-8P-2S User Manual 8 4.16.3 Port Configuration ...

IFS NS3502-8P-2S User Manual 80 4.2.22 Factory Default You can reset the configuration of the stack switch on this page. Only the IP configuratio

IFS NS3502-8P-2S User Manual 81 4.2.23 System Reboot The Reboot page enables the device to be rebooted from a remote location. Once the Reboot b

IFS NS3502-8P-2S User Manual 82 4.3 Simple Network Management Protocol 4.3.1 SNMP Overview The Simple Network Management Protocol (SNMP) is an app

IFS NS3502-8P-2S User Manual 83 Use the SNMP Menu to display or configure the Managed Switch's SNMP function. This section has the following

IFS NS3502-8P-2S User Manual 84 allowed content is the ASCII characters from 33 to 126. The field only suits to SNMPv1 and SNMPv2c. SNMPv3 is usin

IFS NS3502-8P-2S User Manual 85 SNMP v2c: Set SNMP trap supported version 2c. SNMP v3: Set SNMP trap supported version 3. • Trap Community Indi

IFS NS3502-8P-2S User Manual 86 4.3.3 SNMP System Information The switch system information is provided here. The SNMP System Information screen

IFS NS3502-8P-2S User Manual 87 4.3.4 SNMPv3 Configuration 4.3.4.1 SNMPv3 Communities Configure SNMPv3 communities table on this page. The entry

IFS NS3502-8P-2S User Manual 88 4.3.4.2 SNMPv3 Users Configure SNMPv3 users table on this page. The entry index keys are Engine ID and User Name.

IFS NS3502-8P-2S User Manual 89 • Authentication Password A string identifying the authentication pass phrase. For MD5 authentication protocol, t

IFS NS3502-8P-2S User Manual 9 IP NTP Mode ...

IFS NS3502-8P-2S User Manual 90 4.3.4.3 SNMPv3 Groups Configure SNMPv3 groups table on this page. The entry index keys are Security Model and Secu

IFS NS3502-8P-2S User Manual 91 4.3.4.4 SNMPv3 Views Configure SNMPv3 views table on this page. The entry index keys are View Name and OID Subtree

IFS NS3502-8P-2S User Manual 92 4.3.4.5 SNMPv3 Access Configure SNMPv3 accesses table on this page. The entry index keys are Group Name, Security

IFS NS3502-8P-2S User Manual 93 Buttons : Click to add a new access entry. : Click to save changes. : Click to undo any changes made locally and

IFS NS3502-8P-2S User Manual 94 4.4 Port Management Use the Port Menu to display or configure the Managed Switch's ports. This section has th

IFS NS3502-8P-2S User Manual 95 • Configured Link Speed Select any available link speed for the given switch port. Draw the menu bar to select th

IFS NS3502-8P-2S User Manual 96 : Click to refresh the page. Any changes made locally will be undone. 4.4.2 Port Statistics Overview This page

IFS NS3502-8P-2S User Manual 97 4.4.3 Port Thermal Protection Status This page allows the user to inspect status information related to thermal

IFS NS3502-8P-2S User Manual 98 Figure 4-4-4: Detailed Port Statistics Port 1 page screenshot The page includes the following fields: Receive To

IFS NS3502-8P-2S User Manual 99 Receive and Transmit Queue Counters The number of received and transmitted packets per input and output queue. R