Reference Manual

Web-based Interface
Industrial ETHERNET (Gigabit) Switch
RS20/RS30/RS40, MS20/MS30, OCTOPUS

RM Web L2E Technical Support

Release 7.0 05/2011 [email protected]
The naming of copyrighted trademarks in this manual, even when not specially indicated, should
not be taken to mean that these names may be considered as free in the sense of the trademark
and tradename protection law and hence that they may be freely used by anyone.

© 2011 Hirschmann Automation and Control GmbH

Manuals and software are protected by copyright. All rights reserved. The copying, reproduction,
translation, conversion into any electronic medium or machine scannable form is not permitted,
either in whole or in part. An exception is the preparation of a backup copy of the software for
your own use. For devices with embedded software, the end-user license agreement on the
enclosed CD applies.

The performance features described here are binding only if they have been expressly agreed
when the contract was made. This document was produced by Hirschmann Automation and
Control GmbH according to the best of the company's knowledge. Hirschmann reserves the right
to change the contents of this document without prior notice. Hirschmann can give no guarantee
in respect of the correctness or accuracy of the information in this document.

Hirschmann can accept no responsibility for damages, resulting from the use of the network
components or the associated operating software. In addition, we refer to the conditions of use
specified in the license contract.

You can get the latest version of this manual on the Internet at the Hirschmann product site
(www.beldensolutions.com).

Printed in Germany
Hirschmann Automation and Control GmbH
Stuttgarter Str. 45-51
72654 Neckartenzlingen
Germany
Tel.: +49 1805 141538

Rel. 7.0 1-01-05/2011– 19.5.11

Contents

About this Manual 7

Key 9

Opening the Web-based Interface 11

1 Basic Settings 15
1.1 System 16
1.2 Network 21
1.3 Software 23
1.3.1 View the software versions present on the device 23
1.3.2 TFTP Software Update 24
1.3.3 HTTP Software Update 24
1.3.4 Automatic software update by ACA 25
1.4 Port Configuration 26
1.5 Power over ETHERNET 28
1.6 Loading/Saving the Configuration 31
1.6.1 Loading a Configuration 32
1.6.2 Saving the Configuration 32
1.6.3 URL 33
1.6.4 Deleting a configuration 34
1.6.5 Using the AutoConfiguration Adapter (ACA) 34
1.6.6 Canceling a configuration change 36
1.7 Restart 37

2 Security 39
2.1 Password / SNMPv3 access 40
2.2 SNMPv1/v2 Access Settings 43
2.3 Telnet/Web Access 46
2.3.1 Description of Telnet Access 47
2.3.2 Description of Web Access 47
2.4 Port Security 48

3 Time 51
Contents

3.1 SNTP configuration 53

3.2 PTP (IEEE 1588) 57
3.2.1 PTP Global (MS20/MS30, PowerMICE, MACH 104,
MACH 1040) 60
3.2.2 PTP Version 1 (MS20/MS30, PowerMICE,
MACH 104, MACH 1040) 64
3.2.3 PTP Version 2 (BC) (MS20/MS30, PowerMICE,
MACH 104, MACH 1040) 66
3.2.4 PTP Version 2 (TC) (MS20/MS30, PowerMICE,
MACH 104, MACH 1040) 72

4 Switching 79
4.1 Switching Global 80
4.2 Filters for MAC addresses 84
4.3 Rate Limiter 86
4.3.1 Rate Limiter settings 86
4.4 Multicasts 89
4.4.1 IGMP (Internet Group Management Protocol) 89
4.5 VLAN 97
4.5.1 VLAN Global 97
4.5.2 Current VLAN 100
4.5.3 VLAN Static 102
4.5.4 VLAN Port 105

5 QoS/Priority 107
5.1 Global 108
5.2 Port Configuration 111
5.2.1 Entering the port priority 112
5.3 802.1D/p mapping 113
5.4 IP DSCP mapping 115

6 Redundancy 117
6.1 Ring Redundancy 118
6.1.1 Configuring the HIPER-Ring 120
6.1.2 Configuring the MRP-Ring 124
6.2 Ring/Network Coupling 127
6.2.1 Preparing a Ring/Network Coupling 127
6.3 Spanning Tree 134

RM Web L2E
4 Release 7.0 05/2011
Contents

6.3.1 Global 136

6.3.2 Port 142

7 Diagnostics 153
7.1 Syslog 154
7.2 Trap Log 159
7.3 Ports 160
7.3.1 Statistics table 160
7.3.2 Network Load 161
7.3.3 SFP modules 162
7.4 Topology Discovery 164
7.4.1 LLDP Information from Neighbor Devices 164
7.5 Port Mirroring 166
7.6 Device Status 168
7.7 Signal contact 171
7.7.1 Manual Setting 171
7.7.2 Function monitoring 171
7.7.3 Device status 173
7.7.4 Trap Configuration 173
7.8 Alarms (Traps) 175
7.9 Report 178
7.9.1 180
7.9.2 Event Log 180
7.10 IP address conflict detection 181
7.11 Self Test 183
7.12 Service Mode 184
7.12.1 Activating the service mode 185
7.12.2 Deactivating the service mode 186

8 Advanced 189
8.1 DHCP Relay Agent 190
8.2 Industrial Protocols 192
8.2.1 PROFINET IO 192
8.2.2 EtherNet/IP 194
8.3 Command Line 195

A Appendix 197

RM Web L2E
Release 7.0 05/2011 5
Contents

A.1 Technical Data 198

A.2 List of RFCs 199
A.3 Underlying IEEE Standards 201
A.4 Underlying IEC Norms 202
A.5 Literature references 203
A.6 Copyright of Integrated Software 204
A.6.1 Bouncy Castle Crypto APIs (Java) 204
A.6.2 Broadcom Corporation 205

B Index 207

C Readers’ Comments 210

D Further Support 213

RM Web L2E
6 Release 7.0 05/2011
About this Manual

About this Manual

The “Web-based Interface” reference manual contains detailed information

on using the Web interface to operate the individual functions of the device.

The “Command Line Interface” Reference Manual contains detailed

information on using the Command Line Interface to operate the individual
functions of the device.

The “Installation” user manual contains a device description, safety

instructions, a description of the display, and the other information that you
need to install the device.

The “Basic Configuration” user manual contains the information you need to
start operating the device. It takes you step by step from the first startup
operation through to the basic settings for operation in your environment.

The “Redundancy Configuration” user manual contains the information you

need to select a suitable redundancy procedure and configure that
procedure.

The “Industry Protocols” user manual describes how the device is connected
by means of a communication protocol commonly used in the industry, such
as EtherNet/IP or PROFINET IO.

RM Web L2E
Release 7.0 05/2011 7
About this Manual

The HiVision Network Management Software provides you with additional

options for smooth configuration and monitoring:
 Simultaneous configuration of multiple devices
 Graphic interface with network layout
 Auto-topology recognition
 Event log
 Event handling
 Client/server structure
 Browser interface
 ActiveX control for SCADA integration
 SNMP/OPC gateway.

RM Web L2E
8 Release 7.0 05/2011
Key

Key

The designations used in this manual have the following meanings:

 List
 Work step
 Subheading
Link Cross-reference with link
Note: A note emphasizes an important fact or draws your attention to a dependency.
Courier ASCII representation in user interface

Symbols used:

WLAN access point

Router with firewall

Switch with firewall

Router

Switch

Bridge

RM Web L2E
Release 7.0 05/2011 9
Key

Hub

A random computer

Configuration Computer

Server

PLC -
Programmable logic
controller

I/O -
Robot

RM Web L2E
10 Release 7.0 05/2011
Opening the Web-based Interface

Opening the Web-based Interface

To open the Web-based interface, you need a Web browser (a program that
can read hypertext), for example Mozilla Firefox version 1 or later, or
Microsoft Internet Explorer version 6 or later.

Note: The Web-based interface uses Java software 6 (“Java™ Runtime

Environment Version 1.6.x”).
Install the software from the enclosed CD-ROM. To do this, you go to
“Additional Software”, select Java Runtime Environment and click on
“Installation”.

Figure 1: Installing Java

 Start your Web browser.

 Make sure that you have activated JavaScript and Java in the security
settings of your browser.
 Establish the connection by entering the IP address of the device which
you want to administer via the Web-based management in the address
field of the Web browser. Enter the address in the following form:
http://xxx.xxx.xxx.xxx

RM Web L2E
Release 7.0 05/2011 11
Opening the Web-based Interface

The login window appears on the screen.

Figure 2: Login window

 Click on OK.

The website of the device appears on the screen.

Note: The changes you make in the dialogs will be copied to the device when
you click “Set”. Click “Reload” to update the display.
To save any changes made so that they will be retained after a power cycle
or reboot of the device use the save option on the "Load/Save" dialog (see
page 31 “Loading/Saving the Configuration“)

RM Web L2E
12 Release 7.0 05/2011
Opening the Web-based Interface

Note: If you enter an incorrect configuration, you may block access to your
device. 
Activating the function “Cancel configuration change” in the “Load/Save”
dialog enables you to return automatically to the last configuration after a set
time period has elapsed. This gives you back your access to the device.

Figure 3: Website of the device with speech-bubble help

RM Web L2E
Release 7.0 05/2011 13
Opening the Web-based Interface

The menu section displays the menu items. By placing the mouse pointer in
the menu section and clicking the alternate mouse button you can use “Back”
to return to a menu item you have already selected, or “Forward” to jump to
a menu item you have already selected.

RM Web L2E
14 Release 7.0 05/2011
Basic Settings

1 Basic Settings

The Basic Settings menu contains the dialogs, displays and tables for the
basic configuration:
 System
 Network
 Software
 Port Configuration
 Power over Ethernet
 Load/Save
 Restart

RM Web L2E
Release 7.0 05/2011 15
Basic Settings 1.1 System

1.1 System

The “System“ submenu in the basic settings menu is structured as follows:

 Device Status
 System data
 Device view
 Reloading data

Figure 4: "System" Submenu

 Device Status
This section of the website provides information on the device status and
the alarm states the device has detected.

RM Web L2E
16 Release 7.0 05/2011
Basic Settings 1.1 System

1 2 3

Figure 5: Device status and display of detected alarms

1 - Symbol indicates the Device Status
2 - Cause of the oldest existing alarm detected
3 - Time of the oldest existing alarm detected

 System Data
This area of the Web-based interface displays the system parameters of
the device. Here you can change the following settings:
– the system name,
– the location description,
– the name of the contact person for this device,
– the availability of the media modules (see fig. 6)
– the temperature threshold values.

Name Meaning
Name System name of this device
Location Location of this device
Contact The contact for this device
Basic module Hardware version of the device
Media module 1 Hardware version of media module 1
Media module 2 Hardware version of media module 2
Media module 3 Hardware version of media module 3
Media module 4 Hardware version of media module 4
Media module 5 Hardware version of media module 5
Media module 6 Hardware version of media module 6
Media module 7 Hardware version of media module 7
Power supply (P1/P2) Status of power units (P1/P2)
Uptime Time that has elapsed since this device was last restarted.
Temperature Temperature of the device. Lower/upper temperature
threshold values. If the temperature goes outside this range,
the device generates an alarm.

Table 1: System Data

RM Web L2E
Release 7.0 05/2011 17
Basic Settings 1.1 System

1 2 3

Figure 6: Availability of the media modules

1 - Module present
2 - Empty slot
3 - Module was removed. Click this check mark to define this slot as an
empty slot.

 Device View
The device view shows the device with the current configuration. The
status of the individual ports is indicated by one of the symbols listed
below. You will get a full description of the port's status by positioning the
mouse pointer over the port's symbol.

RM Web L2E
18 Release 7.0 05/2011
Basic Settings 1.1 System

Figure 7: Device View

Meaning of the symbols:

The port (10, 100 Mbit/s, 1, 10 Gbit/s) is enabled 

and the connection is OK.

The port is disabled by the management 

and it has a connection.

The port is disabled by the management 

and it has no connection.

The port is in autonegotiation mode.

The port is in HDX mode.

The port (100 MBit/s) is in the discarding mode of a redundancy

protocol, e.g. Spanning Tree or HIPER-Ring.

The port is in routing mode (100 Mbit/s).

 Updating
This area of the website at the bottom left displays the countdown time
until the applet requests the current data of this dialog again. Clicking the
"Reload" button calls the current dialog information immediately.
The applet polls the current data of the device automatically every
100 seconds.

RM Web L2E
Release 7.0 05/2011 19
Basic Settings 1.1 System

Figure 8: Time until update

RM Web L2E
20 Release 7.0 05/2011
Basic Settings 1.2 Network

1.2 Network

With the Basic settings:Network dialog you define the source from
which the device gets its IP parameters after starting, and you assign the IP
parameters and VLAN ID and configure the HiDiscovery access.

Figure 9: Network parameters dialog

 Under “Mode”, you enter where the device gets its IP parameters:
 In the BOOTP mode, the configuration is via a BOOTP or DHCP
server on the basis of the MAC address of the device (see on page 31
“Loading/Saving the Configuration“).
 In the DHCP mode, the configuration is via a DHCP server on the
basis of the MAC address or the name of the device (see on page 31
“Loading/Saving the Configuration“).
 In the local mode the net parameters in the device memory are used.

RM Web L2E
Release 7.0 05/2011 21
Basic Settings 1.2 Network

 Enter the parameters on the right according to the selected mode.

 You enter the name applicable to the DHCP protocol in the “Name” line in
the system dialog of the Web-based interface.

 The “VLAN” frame enables you to assign a VLAN to the management

CPU of the device. If you enter 0 here as the VLAN ID (not included in the
VLAN standard version), the management CPU will then be accessible
from all VLANs.

 The HiDiscovery protocol allows you to allocate an IP address to the

device on the basis of its MAC address. Activate the HiDiscovery protocol
if you want to allocate an IP address to the device from your PC with the
enclosed HiDiscovery software (state on delivery: operation “on”, access
“read-write”).

Note: When you change the network mode from ”Local“ to ”BOOTP“ or
”DHCP“, the server will assign a new IP address to the device. If the server
does not respond, the IP address will be set to 0.0.0.0, and the BOOTP/
DHCP process will try to obtain an IP address again.

RM Web L2E
22 Release 7.0 05/2011
Basic Settings 1.3 Software

1.3 Software

The software dialog enables you to display the software versions in the
device and to carry out a software update of the device via file selection, tftp
or AutoConfiguration Adapter (ACA).

Figure 10: Software dialog

1.3.1 View the software versions present on the

device
You can view:

RM Web L2E
Release 7.0 05/2011 23
Basic Settings 1.3 Software

 Stored Version 
The software version stored in the flash memory.
 Running Version 
The currently loaded software version.

1.3.2 TFTP Software Update

For a tftp update you need a tftp server on which the software to be loaded
is stored.
The URL identifies the path to the software stored on the tftp server. The URL
is in the format 
tftp://IP address of the tftp server/path name/file name 
(e.g. tftp://192.168.1.1/device/device.bin).
Click "tftp Update" to load the software from the tftp server to the device. 
To start the new software after loading, cold start the device (see on page 37
“Restart“).

1.3.3 HTTP Software Update

For an HTTP software update (via a file selection window), the device
software must be on a data carrier that you can access from your
workstation.
 In the file selection frame, click on “...”.
 In the file selection window, select the device software (name type: *.bin,
e.g. device.bin) and click on “Open”.
 Click on “Update” to transfer the software to the device.
The end of the update is indicated by one of the following messages:
 Update completed successfully.
 Update failed. Reason: incorrect file.
 Update failed. Reason: error when saving.

RM Web L2E
24 Release 7.0 05/2011
Basic Settings 1.3 Software

 File not found (reason: file name not found or does not exist).
 Connection error (reason: path without file name).
 After the update is completed successfully, you activate the new software: 
Select the Basic settings: Restart dialog and perform a cold start.
In a cold start, the device reloads the software from the non-volatile
memory, restarts, and performs a self-test.
 In your browser, click on “Reload” so that you can access the device again
after it is booted.

1.3.4 Automatic software update by ACA

The device also allows you to perform an automatic software update using
the ACA. You will find the relevant details in the document “Basic
Configuration User”, chapter “Automatic Software Update by ACA”.

RM Web L2E
Release 7.0 05/2011 25
Basic Settings 1.4 Port Configuration

1.4 Port Configuration

This configuration table allows you to configure each port of the device and
also display each port‘s current mode of operation (link state, bit rate (speed)
and duplex mode).

 In the “Name” column, you can enter a name for every port.
 In the “Ports on” column, you can switch on the port by selecting it here.
 In the “Propagate connection error” column, you can specify that a link
alarm will be forwarded to the device status and/or the the signal contact
is to be opened.
 In the “Automatic Configuration” column, you can activate the automatic
selection of the the operating mode (Autonegotiation) and the automatic
assigning of the connections (Auto cable crossing) of a TP port by
selecting the appropriate field. After the autonegotiation has been
switched on, it takes a few seconds for the operating mode to be set.
 In the “Manual Configuration” column, you can set the operating mode for
this port. The choice of operating modes depends on the media module.
The possible operating modes are:
– 10 Mbit/s half duplex (HDX)
– 10 Mbit/s full duplex (FDX)
– 100 Mbit/s half duplex (HDX)
– 100 Mbit/s full duplex (FDX)
– 1000 Mbit/s half duplex (HDX)
– 1000 Mbit/s full duplex (FDX)
– 10 Gbit/s full duplex (FDX)
 The “Link/Current Operating Mode” column displays the current operating
mode and thereby also an existing connection.
 In the “Cable Crossing (Auto. Conf. off)” column, you assign the
connections of a TP port, if “Automatic Configuration” is deactivated for
this port. The possible settings are:
– enable: the device swaps the send and receive line pairs of the
TP cable for this port (MDIX).
– disable: the device does not swap the send and receive line pairs of
the TP cable for this port (MDI).
– unsupported: the port does not support this function (optical port,
TP SFP port).
 In the “Flow Control” column, you checkmark this port to specify that flow
control is active here. You also activate the global “Flow Control” switch
(see on page 80 “Switching Global“).

RM Web L2E
26 Release 7.0 05/2011
Basic Settings 1.4 Port Configuration

Note: The active automatic configuration has priority over the manual
configuration.

Note: When you are using a redundancy function, you deactivate the flow
control on the participating ports. Default setting: flow control deactivated
globally and activated on all ports. 
If the flow control and the redundancy function are active at the same time,
the redundancy may not work as intended.

Note: The following settings are required for the ring ports in a HIPER-Ring:

Port Type Bit Rate Autonegotiation  Port Setting Duplex

(Automatic Configuration) Mode
Optical all off on full
TX 100 Mbit/s off on full
TX 1000 Mbit/s on on -

Table 2: Port Settings for Ring Ports

When you switch the DIP switch for the ring ports, the device sets the
required settings for the ring ports in the configuration table. The port, which
has been switched from a ring port to a normal port, is given the settings
Autonegotiation (automatic configuration) on and Port on. The settings
remain changeable for all ports.

RM Web L2E
Release 7.0 05/2011 27
Basic Settings 1.5 Power over ETHERNET

1.5 Power over ETHERNET

Note: The following devices are equipped with Power over Ethernet (PoE)
ports:
 RS20/30
 MS20/30
 PowerMICE
 Octopus
You will learn in this section how these devices operate.

Devices with Power over ETHERNET (PoE) media modules or PoE ports
enable you to supply current to terminal devices such as IP phones via the
twisted-pair cable. PoE media modules and PoE ports support Power over
ETHERNET in accordance with IEEE 802.3af. 
The Power over ETHERNET function is activated globally and at all PoE-
capable ports on delivery.

Nominal power for MS20/30, MACH 1000 and PowerMICE: 

The device provides the nominal power for the sum of all PoE ports plus a
surplus. Because the PoE media module gets its PoE voltage externally, the
device does not know the possible nominal power. 
The device therefore assumes a “nominal power” of 60 Watt per PoE media
module for now.

Nominal power for OCTOPUS 8M-PoE: 

The device provides the nominal power for the sum of all PoE ports plus a
surplus. Because the device gets its PoE voltage externally, the device does
not know the possible nominal power. 
The device therefore assumes a “nominal power” of 15 Watt per PoE port for
now.

RM Web L2E
28 Release 7.0 05/2011
Basic Settings 1.5 Power over ETHERNET

Frame "Operation":
 With “Function On/Off” you turn the PoE on or off.

Frame "Configuration":
 „Verschicke Trap" bietet Ihnen die Möglichkeit, das Gerät zu veranlassen,
in folgenden Fällen einen Trap zu senden:
– beim Überschreiten/Unterschreiten der Leistungsschwelle.
– beim Ein-/Ausschalten der PoE-Versorgungsspannung an
mindestens einem Port.
 In „Threshold“ (Leistungsschwelle) geben Sie die Leistungsschwelle an,
bei deren Überschreiten/Unterschreiten das Gerät ein Trap sendet,
sofern „Verschicke Trap" eingeschaltet ist. Die Leistungsschwelle geben
Sie in Prozent der abgegebenen Leistung zur nominalen Leistung ein.
 "Nominale Leistung" zeigt die Leistung an, die das Gerät nominal für alle
PoE-Ports zusammen zur Verfügung stellt.
 „Reservierte Leistung“ zeigt an, wieviel Leistung das Gerät allen
angeschlossenen PoE-Geräten zusammen auf Grund ihrer
Klassifizierung maximal zur Verfügung stellt.
 "Abgegebene Leistung" zeigt an, wie groß der momentane
Leistungsbedarf an allen PoE-Ports ist.
 With “Send Trap” you can get the device to send a trap in the following
cases:
– If a value exceeds/falls below the performance threshold.
– If the PoE supply voltage is switched on/off at at least one port.
 Enter the power threshold in “Threshold”. When this value is exceeded/
not achieved, the device will send a trap, provided that “Send Trap” is
enabled. For the power threshold you enter the power yielded as a
percentage of the nominal power.
 “Nominal Power” displays the power that the device nominally provides
for all PoE ports together.
 “Reserved Power” displays the maximum power that the device provides
to all the connected PoE devices together on the basis of their
classification.
 “Delivered Power” shows how large the current power requirement is at
all PoE ports.
The difference between the "nominal" and "reserved" power indicates how
much power is still available to the free PoE+ ports.

Port Table:
The table only shows ports that support PoE.
 In the “POE on” column, you can enable/disable PoE at this port.

RM Web L2E
Release 7.0 05/2011 29
Basic Settings 1.5 Power over ETHERNET

 The “Status” column indicates the PoE status of the port.

 The “Class” column shows the class of the connected device:
Class: Maximum power delivered
0: 15.4 W = state on delivery
1: 4.0 W
2: 7.0 W
3: 15.4 W
4: Reserved, treat as class 0
 The column „Consumption [W]“ displays the current power delivered at
the respective port.
 The “Name” column indicates the name of the port, see
Basic settings:Port configuration.

Figure 11: Power over Ethernet dialog

RM Web L2E
30 Release 7.0 05/2011
Basic Settings 1.6 Loading/Saving the Configuration

1.6 Loading/Saving the

Configuration

With this dialog you can:

 load a configuration,
 save a configuration,
 enter a URL,
 restore the delivery configuration,
 use the ACA for configuring,
 cancel a configuration change.

Figure 12: Load/Save dialog

RM Web L2E
Release 7.0 05/2011 31
Basic Settings 1.6 Loading/Saving the Configuration

1.6.1 Loading a Configuration

In the “Load” frame, you have the option to

 load a configuration saved on the device,

 load a configuration stored under the specified URL,
 load a configuration stored on the specified URL and save it on the
device,
 load a configuration saved on the PC in binary format.

If you change the current configuration (for example, by switching a port off),
the Web-based interface changes the “load/save” symbol in the navigation
tree from a disk symbol to a yellow triangle. After saving the configuration,
the Web-based interface displays the “load/save” symbol as a disk again.

1.6.2 Saving the Configuration

In the “Save” frame, you have the option to

 save the current configuration on the device,

 save the current configuration in binary form in a file under the specified
URL,
 save the current configuration in binary form on the PC,
 save the current configuration for the offline configurator on the PC in
XML format.

Note: The loading process started by DHCP/BOOTP (see “Network“ on

page 21) shows the selection of “from URL & save local” in the “Load” frame.
If you get an error message when saving a configuration, this could be due
to an active loading process. DHCP/BOOTP only finishes a loading process
when a valid configuration has been loaded. If DHCP/BOOTP does not find
a valid configuration, finish the loading process by loading the local
configuration from the device in the “Load” frame.

RM Web L2E
32 Release 7.0 05/2011
Basic Settings 1.6 Loading/Saving the Configuration

If you change the current configuration (for example, by switching a port off),
the Web-based interface changes the “load/save” symbol in the navigation
tree from a disk symbol to a yellow triangle. After saving the configuration,
the Web-based interface displays the “load/save” symbol as a disk again.

After you have successfully saved the configuration on the device, the device
sends an alarm (trap) hmConfigurationSavedTrap together with the
information about the AutoConfiguration Adapter (ACA), if one is connected.
When you change the configuration for the first time after saving it, the device
sends a trap hmConfigurationChangedTrap.

 Saving configuration for the offline configurator

 In the Web-based interface, select the Basic Settings:Load/
Save menu item.

Figure 13: Saving Configuration Dialog - On the PC (ocf)

 To save the current configuration for the offline configurator as an XML

configuration file on the PC, check with a click of the mouse the "on the
PC (ocf)" field in the "Save" frame and click on the "Save" button.
 Select the desired path in the "Save" window, on which the device is
to save your configuration file. Specify the desired name in the "File
name" field. The device saves your configuration in a file with the .ocf
(offline configurator) extension.

1.6.3 URL
The URL identifies the path to the tftp server on which the configuration file
is to be stored. The URL is in the format: tftp://IP address of the tftp server/
path name/file name (e.g. tftp://192.168.1.100/device/
config.dat).

RM Web L2E
Release 7.0 05/2011 33
Basic Settings 1.6 Loading/Saving the Configuration

Note: The configuration file includes all configuration data, including the
passwords for accessing the device. Therefore, pay attention to the access
rights on the tftp server.

1.6.4 Deleting a configuration

In the "Delete" frame, you have the option to

 Reset the current configuration to the state on delivery. The configuration

saved on the device is retained.
 Reset the device to the state on delivery. In this case, the device deletes
its configuration in the volatile memory as well as in the non-volatile
memory. This includes the IP address. The device will be reachable again
over the network after it has obtained a new IP address, e.g., via DHCP
or the V.24 interface.

1.6.5 Using the AutoConfiguration Adapter (ACA)

The ACAs are devices for saving the configuration data of a device. An ACA
enables the configuration data to be transferred easily by means of a
substitute device of the same type.

Note: If you replace a device with DIP switches, check that the DIP switch
settings to be sure that they are the same.

RM Web L2E
34 Release 7.0 05/2011
Basic Settings 1.6 Loading/Saving the Configuration

 Storing the current configuration data in the ACA:

You have the option of transferring the current device configuration,
including the SNMP password, to the ACA and the flash memory by using
the “to device” option in the “Save” frame .

 Transferring the configuration data from the ACA:

When you restart with the ACA connected, the device adopts the
configuration data of the ACA and saves it permanently in the flash
memory. If the connected ACA does not contain any valid data, for
example, if the delivery state is unchanged, the device loads the data from
the flash memory.

Note: Before loading the configuration data from the ACA, the device
compares the password in the device with the password in the ACA
configuration data.

The device loads the configuration data if

 the admin password matches or
 there is no password saved locally or
 the local password is the original default password or
 no configuration is saved locally.

Status Meaning
notPresent No ACA present
ok The configuration data from the ACA and the device
match.
removed The ACA was removed after booting.
notInSync - The configuration data of the ACA and the device do
not match, or only one file existsa,
or 
- no configuration file is present on the ACA or on the
deviceb.
outOfMemory The local configuration data is too extensive to be
stored on the ACA.
wrongMachine The configuration data in the ACA originate from a
different device type and cannot be read or converted.
checksumErr The configuration data are damaged.

Table 3: ACA status

RM Web L2E
Release 7.0 05/2011 35
Basic Settings 1.6 Loading/Saving the Configuration

a
In cases like this the ACA status is the same as the "ACA not in sync“
status which sends "Not OK“ to the signal contacts and the device status. 
b
In this case the ACA status ("notInSync") differs from the "ACA not in
sync" status which sends “OK” to the signal contacts and the device
status.

1.6.6 Canceling a configuration change

 Function
If the function is activated and the connection to the device is interrupted
for longer than the time specified in the field “Period to undo while
connection is lost [s]”, the device then loads the last configuration saved.

 Activate the function before you configure the device so that you will
then be reconnected if an incorrect configuration interrupts your
connection to the device.

 Enter the “Period to undo while the connection is lost [s]” in seconds. 
Possible values: 10-600 seconds.
Default setting: 600 seconds.

Note: Deactivate the function after you have successfully saved the
configuration. In this way you prevent the device from reloading the
configuration after you close the web interface.

Note: If you access the device cia ssh, additionally note the TCP
connection timeouts for the canceling of a configuration change.

 Watchdog IP address
“Watchdog IP address” shows you the IP address of the PC from which
you have activated the (watchdog) function. The device monitors the link
to the PC with this IP address, checking for interruptions.

RM Web L2E
36 Release 7.0 05/2011
Basic Settings 1.7 Restart

1.7 Restart

This dialog provides you with the following functions:

 initiate a cold start of the device. The device reloads the software from the
non-volatile memory, restarts, and performs a self-test.
Reload the website in your browser to reaccess the device after
restarting.
 initiate a warm start of the device. In this case the device checks the
software in the volatile memory and restarts. If a warm start is not
possible, the device automatically performs a cold start.
 reset the entries with the status “learned” in the filter table (MAC address
table).
 reset the ARP table. 
The device maintains an ARP table internally. 
If, for example, you assign a new IP address to a computer and
subsequently cannot set up a connection to the device, you then reset the
ARP table.
 reset the port counters.
 delete the log file.

Note: During the restart, the device temporarily does not transfer any data,
and it cannot be accessed via the Web-based interface or other management
systems such as HiVision.

RM Web L2E
Release 7.0 05/2011 37
Basic Settings 1.7 Restart

Figure 14: Restart Dialog

RM Web L2E
38 Release 7.0 05/2011
Security 1.7 Restart

2 Security

The “Security” menu contains the dialogs, displays and tables for configuring
the security settings:
 Password/SNMPv3 access
 SNMPv1/v2 access
 Telnet/Web access
 Port security

RM Web L2E
Release 7.0 05/2011 39
Security 2.1 Password / SNMPv3 access

2.1 Password / SNMPv3 access

This dialog gives you the option of changing the read and read/write
passwords for access to the device via the Web-based interface, via the CLI,
and via SNMPv3 (SNMP version 3). 
Set different passwords for the read password and the read/write password
so that a user that only has read access (user name “user”) does not know,
or cannot guess, the password for read/write access (user name “admin”). 
If you set identical passwords, when you attempt to write this data the device
reports a general error.

The Web-based interface and the user interface (CLI) use the same
passwords as SNMPv3 for the users “admin” and “user”.

Note: Passwords are case-sensitive.

 Select “Modify read-only password (user)” to enter the read password.

 Enter the new read password in the “New password” line and repeat your
entry in the “Please retype” line.
 Select “Modify read-write password (admin)” to enter the read/write
password.
 Enter the read/write password and repeat your entry.

RM Web L2E
40 Release 7.0 05/2011
Security 2.1 Password / SNMPv3 access

Figure 15: Password/SNMP Access

Note: If you do not know a password with “read/write” access, you will not
have write access to the device.

Note: For security reasons, the device does not display the passwords.
Make a note of every change. You cannot access the device without a valid
password.

Note: For security reasons, SNMPv3 encrypts the password. With the
“SNMPv1” or “SNMPv2” setting in the dialog Security:SNMPv1/v2
access, the device transfers the password unencrypted, so that this can
also be read.

Note: Use between 5 and 32 characters for the password in SNMPv3, since
many applications do not accept shorter passwords.

RM Web L2E
Release 7.0 05/2011 41
Security 2.1 Password / SNMPv3 access

You can block access via a Web browser or Telnet client in a separate dialog
(see on page 46 “Telnet/Web Access“).

Access at IP address level is restricted in a separate dialog (see on page 43

“SNMPv1/v2 Access Settings“).

RM Web L2E
42 Release 7.0 05/2011
Security 2.2 SNMPv1/v2 Access Settings

2.2 SNMPv1/v2 Access Settings

With this dialog you can select access via SNMPv1 or SNMPv2. In the state
on delivery, both protocols are activated.
You can thus manage the device with HiVision and communicate with earlier
versions of SNMP.

Note: To be able to read and/or change the data in this dialog, log in to the
Web-based interface with the user name “admin” and the relevant password.

 In the “Index” column, the device displays the access restriction‘s

sequential number.
 In the “Password” column, you enter the password with which a
management station may access the device via SNMPv1/v2 from the
specified address range.

Note: Passwords are case-sensitive.

 In the “IP Address” column, you enter the IP address which may access
the device. No entry in this field, or the entry “0.0.0.0”, allows access to
this device from computers with any IP address. In this case, the only
access protection is the password.
 In the “IP Mask” column, much the same as with netmasks, you have the
option of selecting a group of IP addresses.
Example: 
255.255.255.255: a single IP address 
255.255.255.240 with IP address = 172.168.23.20: 
the IP addresses 172.168.23.16 to 172.168.23.31.

RM Web L2E
Release 7.0 05/2011 43
Security 2.2 SNMPv1/v2 Access Settings

Binary notation of the mask 255.255.255.240:

1111 1111 1111 1111 1111 1111 1111 0000
mask bits
Binary notation of the IP address 172.168.23.20:
1010 1100 1010 1000 0001 0111 0001 0100

The binary representation of the mask with the IP address yields

an address range of:
1010 1100 1010 1000 0001 0111 0001 0000 bis
1010 1100 1010 1000 0001 0111 0001 1111
i.e.: 172.168.23.16 to 172.168.23.31

 In the “Access Mode” column, you specify whether this computer can
access the device with the read password (access mode “readOnly”) or
with the read/write password (access mode “readWrite”).

Note: The password for the “readOnly” access mode is the same as the
SNMPv3 password for read access. 
The password for the “readWrite” access mode is the same as the
SNMPv3 password for read/write access. 
If you are changing one of the passwords, manually set the
corresponding password for SNMPv3 to the same value (see on
page 40 “Password / SNMPv3 access“). This way you ensure that you
can also access with the same password via SNMPv3.

 You can activate/deactivate this table entry in the “Active” column.

Note: If you have not activated any row, the device does not apply any
access restriction with regard to the IP addresses.

 With “Create entry” you create a new row in the table.

 With “Delete entry” you delete selected rows in the table.

Note: The device prevents deleting or changing the row with the password
currently in use.

RM Web L2E
44 Release 7.0 05/2011
Security 2.2 SNMPv1/v2 Access Settings

Figure 16: SNMPv1/v2 Access Dialog

RM Web L2E
Release 7.0 05/2011 45
Security 2.3 Telnet/Web Access

2.3 Telnet/Web Access

This dialog allows you to switch off the Telnet server and the Web server on
the device.

Figure 17: Telnet/Web Access dialog

RM Web L2E
46 Release 7.0 05/2011
Security 2.3 Telnet/Web Access

2.3.1 Description of Telnet Access

The Telnet server of the device allows you to configure the device using the
Command Line Interface (in-band). You can deactivate the Telnet server to
inactivate Telnet access to the device.
The server is activated in its state on delivery. 
After the Telnet server has been deactivated, you will no longer be able to
access the device via a new Telnet connection. If a Telnet connection already
exists, it is retained.

Note: The Command Line Interface (out-of-band) and the

Security:Telnet/Web access dialog in the Web-based interface allow
you to reactivate the Telnet server.

2.3.2 Description of Web Access

The device's Web server allows you to configure the device by using the
Web-based interface. You can deactivate the Web server to prevent Web
access to the device. 
The server is activated in its state on delivery.

After the Web server has been switched off, it is no longer possible to log in
via a Web browser. The login in the open browser window remains active.

Note: The Command Line Interface allows you to reactivate the Web server.

RM Web L2E
Release 7.0 05/2011 47
Security 2.4 Port Security

2.4 Port Security

The device allows you to configure each port to help prevent unauthorized
access. Depending on your selection, the device checks the MAC address or
the IP address of the connected device.

In the “Configuration” frame, you set whether the port security works with
MAC or with IP addresses.
Name Meaning
MAC-Based Port Security Check source MAC address of the received data packet.
IP-Based Port Security IP-Based Port Security internally relies on MAC-Based Port
Security. 
Principle of operation: 
When you configure the function, the device translates the
entered source IP address into the respective MAC address. In
operation, it checks the source MAC address of the received
data packet against the internally stored MAC address.

Table 4: Configuration of port security globally for all ports

Set the individual parameters for each port in the port table.
Name Meaning
Module.Port Port identification using module and port numbers of the device, 
e.g. 2.1 for port one of module two.
Port Status enabled: Port is switched on and transmitting.
disabled: Port is switched off and not transmitting.
The port is switched on if 
- an authorized address accesses the port 
or 
- an unauthorized address attempts to access the port and
trapOnly or none is selected under “Action”.
The port is switched off if 
- an unauthorized address attempts to access the port and
portDisable is selected under “Action”.

Table 5: Configuration of port security for a single port

RM Web L2E
48 Release 7.0 05/2011
Security 2.4 Port Security

Name Meaning
Allowed MAC Addresses MAC addresses of the devices with which you allow data exchange
at this port.
The Web-based interface allows you to enter up to 50 MAC
addresses, each separated by a space. After each MAC address
you can enter a slash followed by a number identifying an address
area. This number, between 2 and 47, indicates the number of
relevant bits. Example:
00:80:63:01:02:00/40 stands for 
00:80:63:01:02:00 to 00:80:63:01:02:FF
or
00:80:63:00:00:00/24 stands for
00:80:63:00:00:00 to 00:80:63:FF:FF:FF
If there is no entry, any number of devices can communicate via this
port.
Current MAC Address Shows the MAC address of the device from which the port last
received data. The Web-based interface allows you to copy an entry
from the “Current MAC Address” column into the “Allowed MAC
Addresses” column by dragging and dropping with the mouse
button.
Allowed IP Addresses IP addresses of the devices with which you allow data exchange at
this port.
The Web-based interface allows you to enter up to 10 IP addresses,
each separated by a space.
If there is no entry, any number of devices can communicate via this
port.
Action Action performed by the device after an unauthorized access:
– none: no action
– trapOnly: send alarm
– portDisable: disable the port with the corresponding entry in
the port configuration table (see on page 26 “Port
Configuration“) and send an alarm.

Table 5: Configuration of port security for a single port

Note: This entry in the port configuration table is part of the configuration
(see on page 31 “Loading/Saving the Configuration“) and is saved together
with the configuration.

Note: Prerequisites for the device to be able to send an alarm (trap) (see on
page 175 “Alarms (Traps)“):
– You have entered at least one recipient
– You have selected at least one recipient in the “Active” column
– In the “Selection” frame, you have selected “Port Security”.

RM Web L2E
Release 7.0 05/2011 49
Security 2.4 Port Security

Figure 18: Port Security dialog

Note: The IP port security operates internally on layer 2. The device

internally translates an allowed IP address into an allowed MAC address
when you enter the IP address. An ARP request is used for this.
Prerequisites for the IP-based port security:
– The device with the allowed IP address supports ARP,
– The device is accessible during the configuration of IP port security,
– The MAC address to which the IP address is assigned is unique and
remains unchanged after the IP address is entered.
If you have entered a router interface as the allowed IP address, all the
packets sent from this interface are considered allowed, since they contain
the same MAC source address.
If a connected device sends packets with the allowed IP address but a
different MAC address, the Switch denies this data traffic. If you replace the
device with the allowed IP address with a different one having the same IP
address, enter the IP address in the Switch again so that the Switch can learn
the new MAC address.

RM Web L2E
50 Release 7.0 05/2011
Time 2.4 Port Security

3 Time

With this dialog you can enter time-related settings independently of the time
synchronization protocol selected.

 The “System Time (UTC)” displays the time with reference to Universal
Time Coordinated. 
The time displayed is the same worldwide. Local time differences are not
taken into account.

 The ”system time” uses "System Time (UTC)", allowing for the local time
difference from "System Time (UTC)". 
“System time” = “System Time (UTC)” + “local offset”.

 “Time source” displays the source of the following time data. The device
automatically selects the source with the greatest accuracy. 
Possible sources are: local, ptp and sntp. The source is initially
local. 
If PTP is activated and the device receives a valid PTP frame, it sets its
time source to ptp. If SNTP is activated and if the device receives a valid
SNTP packet, the device sets its time source to sntp. The device gives
the PTP time source priority over SNTP

 With “Set time from PC”, the device takes the PC time as the system time
and calculates the system time (UTC) using the local time difference. 
“System Time (UTC)” = “system time” - “local offset”

 The “local offset” is for displaying/entering the time difference between the
local time and the “System Time (UTC)”.

 With ”Set offset from PC“, the device determines the time zone on your
PC and uses it to calculate the local time difference.

Note: When setting the time in zones with summer and winter times, make
an adjustment for the local offset, if applicable. The device can also get the
SNTP server IP address and the local offset from a DHCP server.

RM Web L2E
Release 7.0 05/2011 51
Time 2.4 Port Security

Interaction of PTP and SNTP

According to PTP (IEEE 1588) and SNTP, both protocols can exist in parallel
in the same network. However, since both protocols affect the system time of
the device, situations may occur in which the two protocols compete with
each other.
The PTP reference clock gets its time either via SNTP or from its own clock.
All other clocks favor the PTP time as the source.

Figure 19: Time Dialog:Basic Settings

RM Web L2E
52 Release 7.0 05/2011
Time 3.1 SNTP configuration

3.1 SNTP configuration

The Simple Network Time Protocol (SNTP) enables you to synchronize the
system time in your network. 
The device supports the SNTP client and the SNTP server function.
The SNTP server makes the UTC (Universal Time Coordinated) available.
UTC is the time relating to the coordinated world time measurement. The
time displayed is the same worldwide. Local time differences are not taken
into account.
SNTP uses the same packet format as NTP. In this way, an SNTP client can
receive the time from an SNTP server as well as from an NTP server.

Note: For accurate system time distribution with cascaded SNTP servers
and clients, use only network components (routers, switches, hubs) in the
signal path between the SNTP server and the SNTP client which forward
SNTP packets with a minimized delay.

Parameter Meaning Possible Values Default Setting

Operation Switches the SNTP function on and On, Off Off
off globally.

Table 6: Switches SNTP on and off globally

Parameter Meaning Possible Values Default Setting

SNTP Status Displays conditions such as “Server - -
cannot be reached”.

Table 7: SNTP Status

RM Web L2E
Release 7.0 05/2011 53
Time 3.1 SNTP configuration

Parameter Meaning Possible Values Default

Setting
Client Status Switches the SNTP client On/Off. On, Off On
External server IP address of the SNTP server from which the Valid IPv4 address 0.0.0.0
address device periodically requests the system time.
Redundant IP address of the SNTP server from which the Valid IPv4 address 0.0.0.0
server address device periodically requests the system time if
it does not receive a response to a request
from the “External server address” within 0.5
seconds.
Server Request Time interval at which the device requests 1 s - 3,600 s 30 s
Interval SNTP packets
Accept SNTP Specifies whether the device accepts the On, Off On
Broadcasts system time from SNTP Broadcast/Multicast
packets that it receives.
Threshold for The device changes the time as soon as the 0 - 2.147.483.647 0
obtaining the deviation from the server time is above this (231-1)
UTC [ms] threshold in milliseconds. This reduces the
frequency of time changes.
Disable client Enable/disable further time synchronizations On, Off Off
after successful once the client, after its activation, has
synchronization synchronized its time with the server.

Table 8: SNTP Client Configuration

Note: If you have enabled PTP at the same time, the SNTP client first
collects 60 time stamps before it deactivates itself. The device thus
determines the drift compensation for its PTP clock. With the preset server
request interval, this takes about half an hour.

Note: If you are receiving the system time from an external/redundant server
address, switch off the reception of SNTP Broadcasts (see “Accept SNTP
Broadcasts”). You thus ensure that the device only takes the time from a
defined SNTP server.

RM Web L2E
54 Release 7.0 05/2011
Time 3.1 SNTP configuration

Parameter Meaning Possible Default

Values Setting
Server status Switches the SNTP server On/Off. On, Off On
Anycast destination IP address, to which the SNTP server of the Valid IPv4 0.0.0.0
address device sends the SNTP packets (see address
table 10).
VLAN ID VLANs to which the device periodically 1
sends SNTP packets.
Anycast send interval Time interval at which the device sends 1 - 3.600 120
SNTP packets.
Disable server at local Enables/disables the SNTP server function if On, Off Off
time source the status of the time source is local (see
Time Dialog).

Table 9: SNTP Server Configuration

IP destination address Send SNTP packet to

0.0.0.0 Nobody
Unicast address (0.0.0.1 - 223.255.255.254) Unicast address
Multicast address (224.0.0.0 - 239.255.255.254), Multicast address
especially 224.0.1.1 (NTP address)
255.255.255.255 Broadcast address

Table 10: Destination address classes for SNTP and NTP packets

RM Web L2E
Release 7.0 05/2011 55
Time 3.1 SNTP configuration

Figure 20: SNTP Dialog

RM Web L2E
56 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

3.2 PTP (IEEE 1588)

Precise time management is required for running time-critical applications via

a LAN.
The IEEE 1588 standard with the Precision Time Protocol (PTP) describes a
procedure that determines the best master clock in a LAN and thus enables
precise synchronization of the clocks in this LAN.

Devices without PTP hardware support, which only have ports absent a
time stamp unit, support the PTP simple mode. This mode gives a less
accurate division of time.
With these devices
 enable/disable the PTP function in the PTP Dialog,
 select PTP mode in the PTP Dialog.
– Select v1-simple-mode if the reference clock uses PTP Version 1.
– Select v2-simple-mode, if the reference clock uses PTP Version 2.

Note: In the simple mode a device synchronizes itself with PTP messages
received. This mode provides a precision comparable to SNTP absent other
functions, such as PTP management or runtime measuring. 
If you want to transport PTP time accurately through your network, only use
devices with PTP hardware support on the transport paths.

Devices with PTP hardware support, which have ports with a time stamp
unit, support other modes subject to the version of the time stamp unit.
 MS20, MS30 and PowerMICE devices with the modules
– MM3-4TX1-RT
– MM3-2FXM2/2TX1-RT
– MM3-2FXS2/2TX1-RT
– MM3-2FLM4/2TX1-RT

RM Web L2E
Release 7.0 05/2011 57
Time 3.2 PTP (IEEE 1588)

support the modes

– v1-boundary-clock
– v1-simple-mode
– v2-boundary-clock-twostep, only with the network protocol
UDP/IPv4 and the runtime measurement E2E

 MS20, MS30 and PowerMICE devices with the modules

– MM23
– MM33
support the modes:
– v1-boundary-clock
– v1-simple-mode
– v2-boundary-clock-onestep
– v2-boundary-clock-twostep
– v2-transparent-clock
– v2-simple-mode

 MACH 104 and MACH 1040 devices support the modes

– v1-boundary-clock
– v1-simple-mode
– v2-boundary-clock-twostep
– v2-transparent-clock
– v2-simple-mode

The following sections relate exclusively to devices with PTP hardware

support.

RM Web L2E
58 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

Figure 21: PTP Global Dialog

RM Web L2E
Release 7.0 05/2011 59
Time 3.2 PTP (IEEE 1588)

3.2.1 PTP Global (MS20/MS30, PowerMICE,

MACH 104, MACH 1040)
The table below helps you to select the PTP version and the PTP mode.

Version Mode Reference clock Device with PTP messages

used timestamp
Version 1 v1-simple-mode Version 1 No —
v1-boundary-clock Version 1 Yes Process
Version 2 v2-simple-mode Version 2 No —
v2-boundary- Version 2 Yes Process
clock-onestep

Note: For the MS20,

MS30 and PowerMICE
devices with MM23 or
MM33 modules, (see
on page 57 “PTP
(IEEE 1588)“).
v2-boundary- Version 2 Yes Process
clock-twostep
v2-transparent- Version 2 Yes Forward
clock

Table 11: Selecting the PTP version and the PTP mode

The PTP modes

 v1-boundary-clock
 v2-boundary-clock-onestep1
 v2-boundary-clock-twostep
 v2-transparent-clock
enable you to optimize time division accuracy.

1. For the MS20, MS30 and PowerMICE devices with MM23 or MM33
modules, (see on page 57 “PTP (IEEE 1588)“.)

RM Web L2E
60 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

You use these dialogs for this purpose

 Version 1
 Version 2 (Boundary Clock, BC)
 Version 2 (Transparent Clock, TC)

The PTP modes

 v1-simple-mode
 v2-simple-mode
allow you to use the plug-and-play start-up.

Parameter Meaning Possible Values Default Setting

Function on/off Enable/disable the PTP function On,  Off
Off

Table 12: Function IEEE 1588/PTP

RM Web L2E
Release 7.0 05/2011 61
Time 3.2 PTP (IEEE 1588)

Parameter Meaning Possible Values Default Setting

PTP version/ Version and mode of the local clock. v1-boundary-
mode Boundary Clock function based on v1-boundary- clock
IEEE1588-2002 (PTPv1). clock
For the MS20, MS30 and PowerMICE
devices with realtime modules and for
MACH 104 and MACH 1040, (see on
page 57 “PTP (IEEE 1588)“).
Support for PTPv1 without special v1-simple-mode
hardware. The device synchronizes itself
with PTPv1 messages received. This
mode does not provide any other
functions, such as PTP management or
runtime measuring.
Select this mode if the device only has
ports absent a time stamp unit.
Boundary Clock function based on IEEE v2-boundary-
1588-2008 (PTPv2). clock-onestep
The one-step mode determines the
precise PTP time with 1 message.
For the MS20, MS30 and PowerMICE
devices with MM23 or MM33 modules,
(see on page 57 “PTP (IEEE 1588)“).
Boundary Clock function based on IEEE v2-boundary-
1588-2008 (PTPv2). clock-twostep
The two-step mode determines the
precise PTP time with 2 messages.
Transparent Clock function based on v2-transparent-
IEEE 1588-2008 (PTPv2). clock
Here, the MS20, MS30 and PowerMICE
devices with MM23 or MM33 modules
use only the one-step mode.
Here, the MACH 104 and MACH 1040
devices use only the two-step mode.
They support a receive rate of 8 frames/s
max.
Support for PTPv2 without special v2-simple-mode
hardware. The device synchronizes itself
with PTPv2 messages received. This
mode does not provide any other
functions, such as PTP management or
runtime measuring.
Select this mode if the device only has
ports absent a time stamp unit.

Table 13: IEEE 1588/PTP Configuration

RM Web L2E
62 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

Parameter Meaning Possible Values Default Setting

Bottom Bottom PTP synchronization threshold, 0-999.999.999 30
Synchronizati specified in nanoseconds. If the result of
on Threshold (reference time - local time) is lower than
[ns] the value of the bottom PTP
synchronization threshold, then the local
clock is deemed as synchronous with the
reference clock.
Top Top PTP synchronization threshold, 31-1.000.000.000 5.000
synchronizati specified in nanoseconds. If the result of
on threshold (reference time - local time) is greater
[ns] than the value of the top PTP
synchronization threshold, then the local
clock is deemed as not being
synchronous with the reference clock.

Table 13: IEEE 1588/PTP Configuration

Parameter Meaning Possible Values Default Setting

Is synchronized Local clock synchronized with true, false -
reference clock; compare Bottom
synchronization threshold
and Top synchronization
threshold.
Max Offset Total deviation of the local clock -
absolute [ns] from the reference clock in
nanoseconds since the local clock
was last reset. The local clock is
reset with “Reinitialize” in this dialog
or by resetting the device.

Table 14: IEEE 1588/PTP status

RM Web L2E
Release 7.0 05/2011 63
Time 3.2 PTP (IEEE 1588)

3.2.2 PTP Version 1 (MS20/MS30, PowerMICE,

MACH 104, MACH 1040)
You select the PTP version you will use in the Time:PTP:Global dialog.

 PTP Version 1, Global Settings

Parameter Meaning Possible Values Default Setting

Sync Interval Period for sending synchronization - sec-1 sec-2
messages.  - sec-2
Entered in seconds. - sec-8
- sec-16
- sec-64
Subdomain Name of the PTP subdomain to 1 to 16 ASCII _DFLT
name which the local clock belongs. characters, hex value
0x21 (!) through 0x7e
(~)
Preferred Defines the local clock as the true false
Master preferred master. If PTP does not false
find another preferred master, then
the local clock is used as the
grandmaster clock. If PTP finds
other preferred masters, then PTP
determines which of the preferred
masters is used as the grandmaster
clock.

Table 15: Function IEEE 1588/PTPv1

Parameter Meaning Possible Values Default Setting

Offset to Master Deviation of the local clock from the
[ns] reference clock in nanoseconds.
Runtime to Single signal runtime between the
Master [ns] local device and reference clock in
nanoseconds.
Grandmaster MAC address of the grandmaster
UUID clock (Unique Universal Identifier).
Parent UUID MAC address of the master clock
with which the local time is directly
synchronized.
Clock Stratum Qualification of the local clock.
Clock Identifier Clock properties (e.g. accuracy,
epoch, etc.).

Table 16: Status IEEE 1588/PTPv1

RM Web L2E
64 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

Note: PTPv1 uses as the device UUID 48 bits which are identical to the
MAC address of the particular device.

 PTP Version 1, Port Settings

Parameter Meaning Possible Values Default Setting

Module Module number 
for modular devices, otherwise 1.
Port Port to which this entry applies.
The table remains empty if the
device does not support the PTP
mode selected
PTP on Port sends/receives PTP on on
synchronization messages
Port blocks PTP synchronization off
messages.
PTP Burst on 2 to 8 synchronization runs take on off
place during the synchronization
interval. This enables faster
synchronization with a
correspondingly higher network
load.
One synchronization run is off
performed in a synchronization
interval.
PTP Status Port is in the initialization phase. initializing
Port is in the faulty mode. Error in faulty
the PTP protocol.
PTP function is switched off at this disabled
port.
Port has not received any listening
information and is waiting for
synchronization messages.
Port is in PTP pre-master mode. pre-master
Port is in PTP master mode. master
Port is in PTP passive mode. passive
Port is in PTP uncalibrated mode. uncalibrated
Port is in PTP slave mode. slave

Table 17: Port dialog version 1

RM Web L2E
Release 7.0 05/2011 65
Time 3.2 PTP (IEEE 1588)

3.2.3 PTP Version 2 (BC) (MS20/MS30,

PowerMICE, MACH 104, MACH 1040)
PTP version 2 provides considerably more settings. These support 
- faster reconfiguration of the PTP network than in PTP version 1
- greater precision in some environments.

You select the PTP version you will use in the Time:PTP:Global dialog.

 Global

Parameter Meaning Possible Values Default Setting

Priority 1 The clock with the lowest priority 1 0-255 128
becomes the reference clock
(grandmaster).
Priority 2 If all the relevant values for selecting 0-255 128
the reference clock are the same for
multiple devices, the clock with the
lowest priority 2 is selected as the
reference clock (grandmaster).
Domain number Assignment of the clock to a PTPv2 0-255 0
domain. Only clocks with the same
domain are synchronized.

Table 18: Function IEEE 1588/PTPv2 BC

RM Web L2E
66 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

Parameter Meaning Possible Values Default Setting

Two-Step Displays the device's clock mode
Selection v2-boundary-clock- Off
onestep in the PTP Global
Dialog
Selection v2-boundary-clock- On
twostep in the PTP Global
Dialog
Number of BCs Number of boundary clocks
to Grandmaster between this device and the PTP
reference clock.
Offset to Master Deviation of the local clock from the
[ns] reference clock in nanoseconds.
Runtime to Single signal runtime (end-to-end)
Master [ns] between the local device and
reference clock in nanoseconds. 
Prerequisite: The slave port's
runtime mechanism is set to E2E.

Table 19: IEEE 1588/PTPv2 BC Status

Parameter Meaning Possible Values Default Setting

Clock Identifier Own device UUID (unique
identification number)
Parent Port Port UUID of the direct master
Identifier
Grandmaster Device UUID of the reference clock
Identifier

Table 20: PTP Clock Identifier

Note: PTPv2 uses as the device UUID 64 bits, consisting of the device's
MAC address, between whose No. 3 and No. 4 bytes the values ff and fe
are added. 
A port UUID consists of the device UUID followed by a 16-bit port ID. 
The device displays UUIDs as a byte sequence in hexadecimal notation.

RM Web L2E
Release 7.0 05/2011 67
Time 3.2 PTP (IEEE 1588)

Parameter Meaning Possible Values Default Setting

Priority 1 Current reference clock's priority 1
display.
Priority 2 Current reference clock's priority 2
display.
Class Class of the reference clock
Precision Estimated accuracy with regard to
the UTC, indicated by the reference
clock (the Grandmaster).
Variance Variance as described in the IEEE
1588-2008 standard

Table 21: Grandmaster (reference clock)

Parameter Meaning Possible Values Default Setting

Time Source Selection of the source for own atomicClock internalOsci
clock. gps llator
terrestrialRadio
ptp
ntp
handset
other
internalOscillat
or
UTC Offset [s] Current difference between the PTP -2,147,483,648 to 34
time scale (see below) and the UTC. 2,147,483,647
UTC Offset Specifies whether value of UTC Yes, No No
Valid offset is valid or not.
Time Traceable The device gets the time from a Yes, No
primary UTC reference, e.g. from an
NTP server.
Frequency The device gets the frequency from Yes, No
Traceable a primary UTC reference, e.g. NTP
server, GPS.
PTP Time Scale The device uses the PTP time scale. Yes, No
According to IEEE 1588, the PTP
time scale is the TAI atomic time
started on 01.01.1970. In contrast to
UTC, TAI does not use leap
seconds. On 01.01.2011, the
difference between UTC and TAI
was +34 seconds.

Table 22: Local Time Properties

RM Web L2E
68 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

 Port

Parameter Meaning Possible Values Default Setting

Port Port to which this entry applies.
If the device does not support the
PTP mode selected, the table is
empty.
PTP on Port sends/receives PTP on on
synchronization messages
Port blocks PTP synchronization off
messages.
PTP Status Port is in the initialization phase. initializing
Port is in the faulty mode. Error in the faulty
PTP protocol.
PTP function is switched off at this disabled
port.
Port has not received any listening
information and is waiting for
synchronization messages.
Port is in PTP pre-master mode. pre-master
Port is in PTP master mode. master
Port is in PTP uncalibrated mode. uncalibrated
Port is in PTP passive mode. passive
Port is in PTP slave mode. slave
Sync Interval [s] Interval in seconds for the 0,5; 1; 2 1
synchronization messages

Table 23: Port Dialog Version 2(BC)

RM Web L2E
Release 7.0 05/2011 69
Time 3.2 PTP (IEEE 1588)

Parameter Meaning Possible Values Default Setting

Runtime Mechanism for measuring the
Measuring message runtime.
Mechanism Enter the same mechanism for the
PTP device connected to this port.
A PTP slave port measures the E2E (end-to-end):
runtime of the entire transmission
path to the master. The device
displays the measured value in the
PTP:Version 2(BC):Global
dialog (see on page 66 “Global“).
The device measures the runtime to P2P (peer-to-peer)
all the PTP devices connected. If a
reconfiguration is performed, this
mechanism eliminates the need to
determine the runtime again,
provided all these devices support
P2P.
The MS20, MS30 and PowerMICE
devices with MM23 or MM33
modules, as well as the MACH 104
and MACH 1040 devices support
these mechanisms.
No runtime determination. Disabled Disabled

P2P Runtime Measured P2P (peer-to-peer)

runtime.
Prerequisite: 
You have selected the P2P runtime
measuring mechanism.
P2P Runtime Interval for peer-to-peer runtime
Measuring measurements at this port.
Interval Prerequisite: 
You have selected the P2P runtime
measuring mechanism on the
device itself and on the PTP device
connected.
Network Transport protocol for PTP 802.3 Ethernet, UDP/IPv4
Protocol messages. UDP/IPv4
Announce Message interval for PTP topology 1, 2, 4, 8, 16 2
Interval discovery (selection of the reference
clock).
Select the same value for all devices
within a PTP domain.

Table 23: Port Dialog Version 2(BC)

RM Web L2E
70 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

Parameter Meaning Possible Values Default Setting

Announce Announce interval timeout for PTP 2-10 3
Timeout topology discovery in number of
announce intervals.
The standard settings of announce
interval = 2 (2 per second) and
announce timeout = 3 result in a
timeout of 3 x 2 seconds = 6
seconds.
Select the same value for all devices
within a PTP domain.
E2E Runtime Displays in seconds the interval for 8
Measuring E2E (end-to-end) runtime
Interval measurements at this port. This is a
device variable and is assigned to
ports with PTP slave status by the
master connected. If the port itself is
the master, then the device assigns
the port the value 8 (state on
delivery).
V1 Hardware Some devices from other auto, on, off auto
Compatibility manufacturers require PTP
messages of specific length.
If the UDP/IPv4 network protocol is
selected and the function is active,
the device extends the PTP
messages.
Asymmetry Correction of the runtime asymmetry
in ns. A runtime measurement value
of x ns corrupted by asymmetrical
transmission values corresponds to
an asymmetry of x·2 ns

Table 23: Port Dialog Version 2(BC)

RM Web L2E
Release 7.0 05/2011 71
Time 3.2 PTP (IEEE 1588)

Parameter Meaning Possible Values Default Setting

VLAN The VLAN ID with which the device none, 0 - 4042 none
sends PTP frames to this port.

Note:
 Also take the port's VLAN
setting (see on page 102 “VLAN
Static“) into account here, in
particular whether the VLAN
exists and if the port is a tagged
or untagged member in the
VLAN.
 none: The device always
sends PTP frames absent a
VLAN tag, even if the port is a
tagged member of the VLAN.
 You can select VLANs that
you have already set up using of
the table row drop-down list.
VLAN Priority The VLAN priority (Layer 2, 0 - 7 0
IEEE 802.1p) with which the device
sends PTP frames to this port. 
If you have set the VLAN ID to none,
the device ignores the VLAN priority.

Table 23: Port Dialog Version 2(BC)

3.2.4 PTP Version 2 (TC) (MS20/MS30,

PowerMICE, MACH 104, MACH 1040)
In strongly cascaded networks in particular, the transparent clock (TC)
introduced in PTP Version 2 provides a noticeable increase in precision. 
The combination with the P2P runtime mechanism (simultaneous runtime
measurement at all ports) enables “seamless” reconfiguration.

For the MS20, MS30 and PowerMICE devices with MM23 or MM33
modules:
The following settings enable you to also use the TC for Unicast PTP
messages:
– Selecting the E2E mechanism

RM Web L2E
72 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

– Syntonize disabled
– PTP Management disabled.

You select the PTP version you will use in the Time:PTP:Global dialog.

RM Web L2E
Release 7.0 05/2011 73
Time 3.2 PTP (IEEE 1588)

 PTP Version 2 (TC), Global Settings

Parameter Meaning Possible Values Default Setting

Runtime Mechanism for measuring the
Measuring message runtime.
Mechanism Enter the same mechanism for the
PTP device connected to this port.
A PTP slave port measures the E2E (end-to-end):
runtime of the entire transmission
path to the master. The device
displays the measured value in the
PTP:Version 2(BC):Global
dialog (see on page 66 “Global“).
The device itself measures the P2P (peer-to-peer)
runtime to all the PTP devices
connected. If a reconfiguration is
performed, this eliminates the need
to determine the runtime again.
For the MACH 104 and MACH E2E Optimized
1040 devices: (end-to-end,
Such as E2E with the following optimized)
characteristics:
 The device only transmits
the PTP slaves' delay queries to
the master, even though these
queries are multicast frames. 
In this way, the device relieves
the other clients from
unnecessary multicast queries.
 With changes in the PTP
master-slave topology, the
device relearns the port for the
PTP master as soon as it has
received a frame from another
PTP master.
 If the device does not
recognize a PTP master, it also
floods delay queries received in
the E2E Optimized mode.
For the MACH 104 and Disabled
MACH 1040 devices:
The device does not allow runtime
measurement, i.e., it discards
frames received, which are used for
measuring runtime.
Primary Assignment of the clock to a PTPv2 0-225 0
Domain domain.

Table 24: Function IEEE 1588 / PTPv2 TC

RM Web L2E
74 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

Parameter Meaning Possible Values Default Setting

Network Network protocol for P2P and UDP/IPv4, UDP/IPv4
Protocol management messages. IEEE 802.3
Syntonize Synchronize frequency. On, Off For the MS20, MS30
and PowerMICE
devices: Off
For the MACH 104 and
MACH 1040 devices:
On
Synchronizin The device synchronizes its local On, Off Off
g local time time with the time received via the
PTP. 
Prerequisite: The Syntonize setting
is activated.
PTP Activate/deactivate PTP On, Off Off
Management management.
To reduce the load on the device,
deactivate PTP Management and
Syntonize
- at high synchronization rates and 
- in Unicast mode.
Multi Domain TC corrects messages from all On Off
Mode domains.
TC only corrects messages from the Off
primary domain.

Table 24: Function IEEE 1588 / PTPv2 TC

RM Web L2E
Release 7.0 05/2011 75
Time 3.2 PTP (IEEE 1588)

Parameter Meaning Possible Values Default Setting

VLAN The VLAN ID with which the device none, 0 - 4042 none
sends its own frames (like PTP
Management frames or P2P
frames) to this port.

Note:
 Also take the port's VLAN
setting (see on page 102 “VLAN
Static“) into account here, in
particular whether the VLAN
exists and if the the port is a
tagged or untagged member in
the VLAN.
 none: The device always
sends PTP frames absent a
VLAN tag, even if the port is a
tagged member of the VLAN.
 You can select VLANs that
you have already set up using of
the table row drop-down list.
VLAN Priority The VLAN priority (Layer 2, 0 - 7 0
IEEE 802.1p) with which the device
sends tagged PTP frames. 
If you have set the VLAN ID to
none, the device ignores the VLAN
priority.

Table 24: Function IEEE 1588 / PTPv2 TC

Parameter Meaning Possible Values Default Setting

Clock Identifier
Device UUID of the TC (transparent
clock)
Current master When the Syntonize function is
enabled, the master's port UUID,
with which the device synchronizes
its frequency, is displayed. 
A value consisting of zeros means
that:
 the Syntonize function is
deactivated or
 the device has not found a
master

Table 25: Status IEEE 1588 / PTPv2 TC

RM Web L2E
76 Release 7.0 05/2011
Time 3.2 PTP (IEEE 1588)

Note: PTPv2 uses as the device UUID 64 bits, consisting of the device's
MAC address, between whose No. 3 and No. 4 bytes the values ff and fe
are added. 
A port UUID consists of the device UUID followed by a 16-bit port ID. 
The device displays UUIDs as a byte sequence in hexadecimal notation.

 PTP Version 2 (TC), Port Settings

Parameter Meaning Possible Values Default Setting

Module Module number 
for modular devices, otherwise 1.
Port Port to which this entry applies.
If the device does not support the
PTP mode selected, the table is
empty.
PTP on Port sends/receives PTP on on
synchronization messages
Port blocks PTP synchronization off
messages. The device does not
process any PTP messages it
receives at this port.
P2P Runtime Interval for peer-to-peer runtime
Measuring measurements at this port.
Interval Prerequisite: 
You have selected the P2P runtime
measuring mechanism on the
device itself and on the PTP device
connected.
P2P Runtime Measured P2P (peer-to-peer)
runtime.
Prerequisite: 
You have selected the P2P runtime
measuring mechanism.
Asymmetry Correction of the runtime
asymmetry in ns. A runtime
measurement value of x ns
corrupted by asymmetrical
transmission values corresponds to
an asymmetry of x·2 ns

Table 26: Port Dialog Version 2(TC)

RM Web L2E
Release 7.0 05/2011 77
Time 3.2 PTP (IEEE 1588)

RM Web L2E
78 Release 7.0 05/2011
Switching 3.2 PTP (IEEE 1588)

4 Switching

The switching menu contains the dialogs, displays and tables for configuring
the switching settings:

 Switching Global
 Filters for MAC Addresses
 Rate Limiter
 Multicasts
 VLAN

RM Web L2E
Release 7.0 05/2011 79
Switching 4.1 Switching Global

4.1 Switching Global

Variable Meaning Possible Values Default Setting

MAC address Display the MAC address of the device
(read only)
Aging Time (s) Enter the Aging Time in seconds for 15-3.825 30
dynamic MAC address entries.
In connection with the router redundancy,
select a time ≥ 30 s.
Flow control Activate/deactivate the flow control On, Off Off

Table 27: Switching:Global dialog

Note: When you are using a redundancy function, you deactivate the flow
control on the participating ports. Default setting: flow control deactivated
globally and activated on all ports. 
If the flow control and the redundancy function are active at the same time,
the redundancy may not work as intended.

RM Web L2E
80 Release 7.0 05/2011
Switching 4.1 Switching Global

Variable Meaning Possible Values Default Setting

Learning Activate/deactivate the learning of MAC On, Off On
addresses source addresses.
Frame size Set the maximum packet size (frame size) 1522, 1632 1522
in bytes.
Activate Enable/disable whether the device On, Off Off
Address detects whether it has repeatedly learned
Relearn the same MAC source addresses at
Detection different ports. This process very probably
indicates a loop situation in the network. 
If the device detects this process, it
creates an entry in the log file and sends
an alarm (trap).
Address Number of MAC addresses that are 1 - 1,024 1
Relearn learned at different ports within a checking
Threshold interval, so that if this number is
exceeded, the device sees this as a
relevant event. The interval for this check
is a few seconds.
Activate Duplex Enable/disable whether the device reports On, Off On
Mismatch a duplex problem at a port for specific
Detection error events. This means that the duplex
mode of the port might not match that of
the remote port. If the device detects a
potential non-match, it creates an entry in
the event log and sends an alarm (trap).
To detect potential non-matches, the
device evaluates the error counters of the
port after the connection is set up, in the
context of the port settings (see table 29).

Table 28: Switching:Global dialog

The following table lists the duplex operating modes for TX ports together
with the possible error events. The terms in the table mean:
 Collisions: In half-duplex mode, collisions mean normal operation.
 Duplex problem: Duplex modes do not match.
 EMI: Electromagnetic interference.
 Network extension: The network extension too great, or too many hubs
are cascaded.

RM Web L2E
Release 7.0 05/2011 81
Switching 4.1 Switching Global

 Collisions, late collisions: In full-duplex mode, the port does not count
collisions or late collisions.
 CRC error: The device only evaluates these errors as duplex mismatches
in the manual full duplex mode.

No. Autonegotiati Current Detected error Evaluation of Possible causes

on duplex events (≥ 10) duplex
mode situation by
device
1 On Half duplex None OK
2 On Half duplex Collisions OK
3 On Half duplex Late collisions Duplex problem Duplex problem, EMI,
detected network extension
4 On Half duplex CRC error OK EMI
5 On Full duplex None OK
6 On Full duplex Collisions OK EMI
7 On Full duplex Late collisions OK EMI
8 On Full duplex CRC error OK EMI
9 Off Half duplex None OK
10 Off Half duplex Collisions OK
11 Off Half duplex Late collisions Duplex problem Duplex problem, EMI,
detected network extension
12 Off Half duplex CRC error OK EMI
13 Off Full duplex None OK
14 Off Full duplex Collisions OK EMI
15 Off Full duplex Late collisions OK EMI
16 Off Full duplex CRC error Duplex problem Duplex problem, EMI
detected

Table 29: Evaluation of non-matching of the duplex mode

RM Web L2E
82 Release 7.0 05/2011
Switching 4.1 Switching Global

Figure 22: Dialog Switching Global

RM Web L2E
Release 7.0 05/2011 83
Switching 4.2 Filters for MAC addresses

4.2 Filters for MAC addresses

The filter table for MAC addresses is used to display and edit filters. Each row
represents one filter. Filters specify the way in which data packets are sent.
They are set automatically by the device (learned status) or manually. Data
packets whose destination address is entered in the table are sent from the
receiving port to the ports marked in the table. Data packets whose
destination address is not in the table are sent from the receiving port to all
other ports. The following conditions are possible:
 learned: The filter was created automatically by the device.
 invalid: With this status you delete a manually created filter.
 permanent: The filter is stored permanently in the device or on the URL
(see on page 31 “Loading/Saving the Configuration“).
 igmp: The filter was created by IGMP Snooping.

In the “Create” dialog (see buttons below), you can create new filters.

Figure 23: Filter Table dialog

RM Web L2E
84 Release 7.0 05/2011
Switching 4.2 Filters for MAC addresses

Note: For Unicast addresses, the device allows you to include one or no
ports in a filter entry. Do not include any ports if you want to create a discard
filter entry.

Note: The filter table allows you to create up to 100 filter entries for Multicast
addresses.

RM Web L2E
Release 7.0 05/2011 85
Switching 4.3 Rate Limiter

4.3 Rate Limiter

To ensure reliable operation at a high level of traffic, the device allows you to
limit the rate of traffic at the ports.

Entering a limit rate for each port determines the amount of traffic the device
is permitted to transmit and receive.

If the traffic at this port exceeds the maximum rate entered, then the device
suppresses the overload at this port.

A global setting enables/disables the rate limiter function at all ports.

Note: The limiter functions only work on Layer 2 and are used to limit the
effect of storms by frame types that the Switch floods (typically broadcasts).
In doing so, the limiter function disregards the protocol information of higher
layers, such as IP or TCP. This can affect on TCP traffic, for example.
You can minimize these effects by:
 limiting the limiter function to particular frame types (e.g. to broadcasts,
multicasts and unicasts with unlearned destination addresses) and
receiving unicasts with destination addresses established by the
limitation,
 using the output limiter function instead of the input limiter function
because the former works slightly better together with the TCP flow
control due to switch-internal buffering.
 increasing the aging time for learned unicast addresses.

4.3.1 Rate Limiter settings

 "Ingress Limiter (kbit/s)" allows you to enable or disable the input limiting
function for all ports.

RM Web L2E
86 Release 7.0 05/2011
Switching 4.3 Rate Limiter

 "Egress Limiter (Pkt/s)" allows you to enable or disable the broadcast

output limiter function at all ports.
 "Egress Limiter (kbit/s)" allows you to enable or disable the output limiter
function for all packet types at all ports.

Setting options per port:

 "Inbound Packet Types" allows you to select the packet type for which the
limit is to apply:
 All, limits the total inbound data volume at this port.
 BC, limits the broadcast packets received at this port.
 BC + MC, limits broadcast packets and multicast packets received at
this port.
 BC + MC + uUC, limits broadcast packets, multicast packets, and
unknown unicast packets received at this port.
 Inbound Limiter Rate for the inbound packet type selected:
 = 0, no inbound limit at this port.
 > 0, maximum inbound traffic rate in kbit/s that can be received at this
port.
 Outbound Limiter Rate for broadcast packets:
 = 0, no rate limit for outbound broadcast packets at this port.
 > 0, maximum number of outbound broadcasts per second that can be
sent at this port.
 Outbound Limiter Rate for the entire data stream:
 = 0, no rate limit for outbound data stream at this port.
 > 0, maximum outbound traffic rate in kbit/s sent at this port.

RM Web L2E
Release 7.0 05/2011 87
Switching 4.3 Rate Limiter

Figure 24: Rate Limiter Dialog

RM Web L2E
88 Release 7.0 05/2011
Switching 4.4 Multicasts

4.4 Multicasts

4.4.1 IGMP (Internet Group Management Protocol)

With this dialog you can
 activate/deactivate the IGMP function globally,
 configure the IGMP protocol globally and per port.

Figure 25: IGMP Snooping dialog

 Operation
In this frame you can:

RM Web L2E
Release 7.0 05/2011 89
Switching 4.4 Multicasts

 activate/deactivate the IGMP Snooping protocol.

Parameter Meaning Value Range Default Setting

Function Activate/deactivate IGMP Snooping On, Off Off
globally for the device.
If IGMP Snooping is switched off, then:
 the device does not evaluate
Query and Report packets
received, and
 it sends (floods) data packets
received to all ports with a
multicast address as the
destination address.

Table 30: IGMP Snooping, global function

 IGMP Querier and IGMP Settings

With these frames you can enter global settings for the IGMP settings and
the IGMP Querier function.
Prerequisite: The IGMP Snooping function is activated globally.

RM Web L2E
90 Release 7.0 05/2011
Switching 4.4 Multicasts

Parameter Meaning Value Range Default Setting

IGMP Querier
IGMP Querier Switch query function on/off on/off off
enabled
Protocol Version Select IGMP version 1, 2 or 3. 1, 2, 3 2
Send Interval Enter the interval at which the switch 2-3.599 sa 125 s
sends query packets.
All IGMP-capable terminal devices
respond to a query with a report
message.
IGMP settings
Current querier IP
Display the IP address of the router/
address switch that has the query function.
Max. Response Enter the time within which the Protocol Version  10 s
Time multicast group members are to - 1, 2: 1-25 s
respond to a query. - 3: 1-3.598 sa
The multicast group members select a
random value within the response time
for their response to prevent all
multicast group members from
responding to the query at the same
time.
Group Membership Enter the period for which a dynamic 3-3.600 sa 260 s
Interval multicast group remains entered in the
device if it does not receive any report
messages.

Table 31: IGMP querier and IGMP settings 

(a) Note the connection between the parameters Max. Response Time,
Send Interval and Group Membership Interval (see table 32)

The parameters
– Max. Response Time,
– Send Interval and
– Group Membership Interval
have a relationship to one another:
Max. Response Time < Send Interval < Group Membership Interval.
If you enter values that contradict this relationship, the device then
replaces these values with a default value or with the last valid values.

RM Web L2E
Release 7.0 05/2011 91
Switching 4.4 Multicasts

Parameter Protocol Value range Default setting

Version
Max. Response Time, 1, 2 1-25 seconds 10 seconds
3 1-3,598 seconds
Send Interval 1, 2, 3 2-3,599 seconds 125 seconds
Group Membership Interval 1, 2, 3 3-3,600 seconds 260 seconds

Table 32: Value range for

- Max. Response Time
- Send Interval
- Group Membership Interval

For “Send Interval” and “Max. Response Time”,

– select a large value if you want to reduce the load on your network and
can accept the resulting longer switching times,
– select a small value if you require short switching times and can accept
the resulting network load.

 Multicasts
In this frame you specify how the device transmits packets with
 unknown MAC/IP multicast addresses not learned with IGMP
Snooping
 known MAC/IP multicast addresses learned with IGMP Snooping.

Prerequisite: The IGMP Snooping function is activated globally.

RM Web L2E
92 Release 7.0 05/2011
Switching 4.4 Multicasts

Parameter Meaning Value range Default setting

Unknown Multicasts
 Send to Query Ports:  Send to Query Send to All
The device sends the packets Ports, Send to Ports
with an unknown MAC/IP All Ports,
Multicast address to all query Discard
ports.
 Send to All Ports: 
The device sends the packets
with an unknown MAC/IP
Multicast address to all ports.
 Discard: 
The device discards all packets
with an unknown MAC/IP
Multicast address.
Known Multicasts
 Send to query and Send to query Send to
registered ports:  and registered registered ports
The device sends the packets ports, send to
with a known MAC/IP Multicast registered
address to all query ports and ports
to registered ports.
The advantage of this is that it
works in many applications
without any additional
configuration. 
Application: 
“Flood and Prune” routing in
PIM-DM.
 Send to registered ports: 
The device sends the packets
with a known MAC/IP Multicast
address to registered ports.
The advantage of this setting is
that it uses the available
bandwidth optimally through
direct distribution. It requires
additional port settings. 
Application: 
Routing protocol PIM-SM.

Table 33: Known and unknown Multicasts

Note: The way in which unlearned Multicast addresses are handled 

also applies to the reserved addresses from the “Local Network Control
Block” (224.0.0.0 - 224.0.0.255). This can have an effect on higher-level
routing protocols.

RM Web L2E
Release 7.0 05/2011 93
Switching 4.4 Multicasts

 Settings per Port (Table)

With this configuration table you can enter port-related IGMP settings.

RM Web L2E
94 Release 7.0 05/2011
Switching 4.4 Multicasts

Parameter Meaning Value range Default setting

Port Module and port numbers to which this - -
entry applies.
IGMP Snooping on Switch IGMP on/off for each port.  on, off on
Switching IGMP off at a port prevents
registration for this port.
Prerequisite: In the
Switching:Multicasts:IGMP
dialog, IGMP is enabled.
IGMP Forward All Switch the IGMP Snooping function on, off off
“Forward All” on/off. 
With the IGMP Forward All setting,
the device sends to this port all data
packets with a Multicast address in the
destination address field.
Prerequisite: In the
Switching:Multicasts:IGMP
dialog, IGMP is enabled.

Note: If a number of routers are

connected to a subnetwork, you must
use IGMP version 1 so that all the
routers receive all the IGMP reports.

Note: If you use IGMP version 1 in a

subnetwork, then you must also use
IGMP version 1 in the entire network.
IGMP Automatic Displays which ports the device has yes, no -
Query Port learned as query ports if automatic is
selected in “Static Query Port”.
Prerequisite: The IGMP Snooping
function is activated globally.
Static Query Port The device sends IGMP report enable, disable
messages to the ports at which it disable,
receives IGMP queries (default automatic
setting). This column allows you to also
send IGMP report messages to: other
selected ports (enable) or connected
Hirschmann devices (automatic).
Prerequisite: The IGMP Snooping
function is activated globally.
Learned Query Shows at which ports the device has yes, no -
Port received IGMP queries if “disable” is
selected in “Static Query Port”.
Prerequisite: The IGMP Snooping
function is activated globally.

Table 34: Settings per port

RM Web L2E
Release 7.0 05/2011 95
Switching 4.4 Multicasts

Note: If the device is incorporated into a HIPER-Ring, you can use the
following settings to quickly reconfigure the network for data packets with
registered Multicast destination addresses after the ring is switched:
 Switch on the IGMP Snooping on the ring ports and globally, and
 activate “IGMP Forward All” per port on the ring ports.

RM Web L2E
96 Release 7.0 05/2011
Switching 4.5 VLAN

4.5 VLAN

VLAN contains dialogs and attributes for configuring and monitoring the
VLAN function in accordance with the IEEE 802.1Q standard.

4.5.1 VLAN Global

With this dialog you can:
 display VLAN parameters
 activate/deactivate the VLAN 0 transparent mode
 configure and display the learning mode
 reset the device's VLAN settings to the original defaults.

Parameter Meaning
Biggest VLAN ID Displays the biggest possible VLAN ID (see on page 102 “VLAN
Static“)
Max. Number of Displays the maximum number of VLANs (see on page 102 “VLAN
VLANs Static“).
VLANs Configured Displays the number of VLANs configured (see on page 102 “VLAN
Static“).

Table 35: VLAN Displays

Note: The device provides the VLAN with the ID 1. The VLAN with ID 1 is
always present.

RM Web L2E
Release 7.0 05/2011 97
Switching 4.5 VLAN

Parameter Meaning Value range Default setting

VLAN 0 When the VLAN 0 Transparent Mode On, Off Off
Transparent Mode is activated, the device accepts a
VLAN ID of 0 in the packet when it
receives it, regardless of the setting for
the port VLAN ID in the dialog (see on
page 105 “VLAN Port“). 
Activate “VLAN 0 Transparent Mode”
to transmit packets with a priority TAG
without VLAN membership, i.e. with a
VLAN ID of 0.

Table 36: VLAN settings

Note: If you are using the GOOSE protocol in accordance with IEC61850-8-
1, then you activate the “VLAN 0 transparent mode”. In this way, the
prioritizing information remains in the data packet in accordance with
IEEE802.1D/p when the device forwards the data packet.
This also applies to other protocols that use this prioritizing in accordance
with IEEE 802.1D/p, but do not require any VLANs according to
IEEE 802.1Q.

Note: When using the “Transparent Mode” in this way, note the following:
 For RS20/RS30/RS40, MS20/MS30, RSR20/RSR30, MACH 100,
MACH 1000 and OCTOPUS:
In “Transparent mode”, the devices ignore the port VLAN ID set. Set the
VLAN membership of the ports of VLAN 1 to U (Untagged) or T (Tagged),
(see on page 102 “VLAN Static“).

RM Web L2E
98 Release 7.0 05/2011
Switching 4.5 VLAN

Parameter Meaning Value Range Default Setting

Mode Selecting the VLAN Mode. Independent Independent
"Independent VLAN" subdivides the VLAN,  VLAN
forwarding database (see on page 84 “Filters Shared VLAN
for MAC addresses“) virtually into one
independent forwarding database per VLAN.
The device cannot assign data packets with a
destination address in another VLAN and it
floods them to all the ports of the VLAN.
Application area: Setting up identical
networks that use the same MAC addresses.
"Shared VLAN" uses the same forwarding
database for all VLANs (see on page 84
“Filters for MAC addresses“). The device
cannot assign data packets with a destination
address in another VLAN and only forwards
them to the destination port if the receiving
port is also a member of the destination port
VLAN group. 
Application area: In the case of overlapping
groups, the device can distribute directly
across VLANs, as long as the ports involved
belong to a VLAN that can be reached. 
Changes to the mode are only applied after a
warm start (see on page 37 “Restart“) is
performed on the device, and the changes
are then displayed in the line below under
“Status”.
Status Displays the current status. After the device Independent
(see on page 37 “Restart“) receives a warm VLAN, 
start, it applies the “Mode” setting to the Shared VLAN
status line.

Table 37: Settings and displays in the “Learning” frame

RM Web L2E
Release 7.0 05/2011 99
Switching 4.5 VLAN

Figure 26: VLAN Global dialog

4.5.2 Current VLAN

This dialog gives you the option of displaying the current VLAN parameters

The Current VLAN table shows all

 manually configured VLANs
 VLANs configured via redundancy mechanisms
The Current VLAN Table is only used for display purposes. You can make
changes to the entries in the VLAN:Static dialog (see on page 102 “VLAN
Static“).

RM Web L2E
100 Release 7.0 05/2011
Switching 4.5 VLAN

Parameter Meaning Value range

VLAN ID Displays the ID of the VLAN.
Status Displays the VLAN status. other: This entry solely appears for
VLAN 1. The system provides VLAN 1.
VLAN 1 is always present.
permanent: A static entry made by you.
This entry is kept when the device is
restarted.
dynamic: This VLAN was created
dynamically via GVRP.
Time created Operating time (see “System
Data“) at which the VLAN was
created.
Ports x.x VLAN membership of the - Currently not a member
relevant port and handling of T Member of VLAN; send data packets with
the VLAN tag. tag.
U Member of the VLAN; send data packets
without tag (untagged).
F Membership forbidden, so no entry
possible via GVRP either.

Table 38: Current VLAN

Figure 27: Current VLAN dialog

RM Web L2E
Release 7.0 05/2011 101
Switching 4.5 VLAN

4.5.3 VLAN Static

With this dialog you can:
 Create VLANs
 Assign names to VLANs
 Assign ports to VLANs and configure them
 Delete VLANs

Parameter Meaning Possible Values Default Setting

VLAN ID Displays the ID of up to 255 1-4.042
VLANs that are simultaneously
possible.
Name Enter the name of your choice Maximum 32 characters VLAN 1: default
for this VLAN.
Status Displays the VLAN status. active: Entry is active
activated 
notInService: Entry is
deactivated
Ports x.x Select the membership of the -: currently not a VLAN 1: U, 
ports to the VLANs. member (GVRP new VLANs: -
allowed). 
T: Member of the VLAN;
send data packets with
tag (tagged). 
U: Member of the VLAN;
send data packets
without tag (untagged). 
F: Membership
forbidden, so no entry
possible via GVRP
either.

Table 39: VLAN Static dialog

RM Web L2E
102 Release 7.0 05/2011
Switching 4.5 VLAN

Figure 28: VLAN Static Dialog

Note: When configuring the VLAN, ensure that the management station still
has access to the device after the VLAN configuration is saved.
You achieve this by connecting the management station to a port that is a
member in VLAN 1. The device transmits the data of the management
station in VLAN 1.

Note: The device automatically creates VLANs for MRP rings. The MRP ring
function prevents the deletion of these VLANs.

Note: Note the tagging settings for ports (see table 40) that are part of a
redundant Ring or the Ring/network coupling.

RM Web L2E
Release 7.0 05/2011 103
Switching 4.5 VLAN

Redundancy VLAN membership

HIPER-Ring VLAN 1 U
MRP-Ring any
Ring/Network coupling VLAN 1 U

Table 40: Required VLAN settings for ports that are part of redundant Rings or Ring/
Network coupling.

Note: In a redundant ring with VLANs, you should only operate devices
whose software version supports VLANs:
 RS2 xx/xx (from rel. 7.00)
 RS2-16M
 RS20, RS30, RS40 (with software variants L2E, L2P)
 MICE (from rel. 3.0)
 PowerMICE
 MS20, MS30
 RSR20, RSR30
 MACH 100
 MACH 1000
 MACH 4000
 MACH 3000 (from Rel. 3.3),
 OCTOPUS

RM Web L2E
104 Release 7.0 05/2011
Switching 4.5 VLAN

4.5.4 VLAN Port

With this dialog you can:
 assign ports to VLANs
 define the Acceptable Frame Type
 activate/deactivate Ingress Filtering

Parameter Meaning Possible Default Setting

Values
Module Module of the device on which the port
is located.
Port Port to which this entry applies.
Port VLAN ID Specifies which VLAN the port assigns All allowed 1
a received, untagged data packet to. VLAN IDs
Acceptable Frame Specifies whether the port can also - admitAll admitAll
Types receive untagged data packets. -
admitOnlyVla
nTagged
Ingress Filtering Specifies whether the port evaluates on, off off
the received tags.

Table 41: VLAN Port dialog

Note: Note the following:

 HIPER-Ring
Select the port VLAN ID 1 for the ring ports and deactivate “Ingress
Filtering”.
 MRP-Ring
– If the MRP-Ring configuration (see on page 124 “Configuring the
MRP-Ring“) is not assigned to a VLAN, select the port VLAN ID 1.
– If the MRP-Ring configuration (see on page 124 “Configuring the
MRP-Ring“) is assigned to a VLAN, the device automatically performs
the VLAN configuration for this port.
 Network/Ring coupling
Select the VLAN ID 1 for the coupling and partner coupling ports and
deactivate “Ingress Filtering”.

RM Web L2E
Release 7.0 05/2011 105
Switching 4.5 VLAN

Figure 29: VLAN Port dialog

RM Web L2E
106 Release 7.0 05/2011
QoS/Priority 4.5 VLAN

5 QoS/Priority

The device enables you to set

 how it evaluates the QoS/prioritizing information of incoming data
packets:
– VLAN priority based on IEEE 802.1Q/ 802.1D (Layer 2)
– Type of Service (ToS) or DiffServ (DSCP) for IP packets (Layer 3)
,
 which QoS/prioritizing information it writes to outgoing data packets (e.g.
priority for management packets, port priority).

The QoS/Priority menu contains the dialogs, displays and tables for
configuring the QoS/priority settings:
 Global
 Port configuration
 IEEE 802.1D/p mapping
 IP DSCP mapping

RM Web L2E
Release 7.0 05/2011 107
QoS/Priority 5.1 Global

5.1 Global

With this dialog you can:

 enter the VLAN priority for management packets in the range 0 to 7
(default setting: 0). 
In order for you to have full access to the management of the device, even
when there is a high network load, the device enables you to prioritize
management packets. 
In prioritizing management packets (SNMP, Telnet, etc.), the device
sends the management packets with priority information.
Note the assignment of the VLAN priority to the traffic class (see table 45).
 enter the IP-DSCP value for management packets in the range 0 to 63
(default setting: 0 (be/cs0)). 
In order for you to have full access to the management of the device, even
when there is a high network load, the device enables you to prioritize
management packets. 
In prioritizing management packets (SNMP, Telnet, etc.), the device
sends the management packets with priority information. 
Note the assignment of the IP-DSCP value to the traffic class (see
table 46).

Note: Certain DSCP values have DSCP names, such as be/cs0 to cs7
(class selector) or af11 to af43 (assured forwarding) and ef (expedited
forwarding).

 display the maximum number of queues possible per port. 

The device supports 4 (8 for MACH 4000, MACH 104, MACH 1040 and
PowerMICE) priority queues (traffic classes in compliance with IEEE
802.1D).
 select the trust mode globally. You use this to specify how the device
handles received data packets that contain priority information.
 “untrusted”: 
The device ignores the priority information in the packet and always
assigns the packets the port priority of the receiving port.

RM Web L2E
108 Release 7.0 05/2011
QoS/Priority 5.1 Global

 “trustDot1p”: 
The device prioritizes received packets that contain VLAN tag
information according to this information (assigning them to a traffic
class - see “802.1D/p mapping“). 
The device prioritizes received packets that do not contain any tag
information (assigning them to a traffic class - see “Entering the port
priority“) according to the port priority of the receiving port .
 “trustIpDscp”: 
The device prioritizes received IP packets (assigning them to a traffic
class - see “IP DSCP mapping“) according to their DSCP value. 
The device prioritizes received packets that are not IP packets
(assigning them to a traffic class - see “Entering the port priority“)
according to the port priority of the receiving port .
For received IP packets:
The device also performs VLAN priority remarking. 
In VLAN priority remarking, the device modifies the VLAN priority of
the IP packets if the packets are to be sent with a VLAN tag (see on
page 102 “VLAN Static“).
Based on the traffic class to which the IP packet was assigned (see
above), the device assigns the new VLAN priority to the IP packet in
accordance with table 42. 
Example: A received IP packet with a DSCP value of 32 (cs4) is
assigned to traffic class 2 (default setting). The packet was received at
a port with port priority 2. Based on table 42, the VLAN priority is set
to 4.

Note: Changing the global setting for „Trust Mode“ and clicking “Set“ will set
all ports‘ settings at once. You can then modifiy each port's settings
individually. 
Changing the global setting again will overwrite the individual port settings.

RM Web L2E
Release 7.0 05/2011 109
QoS/Priority 5.1 Global

Traffic class New VLAN priority New VLAN priority

when receiving port  when receiving port 
has an even port priority has an odd port priority
0 0 1
1 2 3

Table 42: VLAN priority remarking

2 4 5
3 6 7

Figure 30: Global dialog

RM Web L2E
110 Release 7.0 05/2011
QoS/Priority 5.2 Port Configuration

5.2 Port Configuration

This dialog allows you to configure the ports. You can:

 assign a port priority to a port.

Parameter Meaning
Module Module of the device on which the port is located.
Port Port to which this entry applies.
Port priority Enter the port priority.

Table 43: Port configuration table

Figure 31: Port configuration dialog

RM Web L2E
Release 7.0 05/2011 111
QoS/Priority 5.2 Port Configuration

5.2.1 Entering the port priority

 Double-click a cell in the “Port priority” column and enter the priority (0-7).
According to the priority entered, the device assigns the data packets that
it receives at this port to a traffic class (see table 44).
Prerequisite: 
Setting in the dialog Global: Trust Mode: untrusted(see on
page 108 “Global“) or 
Setting in the dialog Global: Trust Mode: trustDot1p(see on
page 108 “Global“) and the data packets do not contain a VLAN tag or 
Setting in the dialog Global: Trust Mode: trustIpDscp(see on
page 108 “Global“) and the data packets are not IP packets.

Port priority Traffic class (default setting) IEEE 802.1D traffic type
0 1 Best effort (default)
1 0 Background
2 0 Standard
3 1 Excellent effort (business critical)
4 2 Controlled load (streaming multimedia)
5 2 Video, < 100 ms of latency and jitter
6 3 Voice, < 10 ms of latency and jitter
7 3 Network control reserved traffic

Table 44: Assigning the port priority to the 4 traffic classes

RM Web L2E
112 Release 7.0 05/2011
QoS/Priority 5.3 802.1D/p mapping

5.3 802.1D/p mapping

The 802.1D/p mapping dialog allows you to assign a traffic class to every
VLAN priority.

Figure 32: 802.1D/p Mapping dialog

 Enter the desired value from 0 to 3 in the Traffic Class field for every
VLAN priority.

RM Web L2E
Release 7.0 05/2011 113
QoS/Priority 5.3 802.1D/p mapping

Port priority Traffic class (default setting) IEEE 802.1D traffic type
0 1 Best effort (default)
1 0 Background
2 0 Standard
3 1 Excellent effort (business critical)
4 2 Controlled load (streaming multimedia)
5 2 Video, < 100 ms of latency and jitter
6 3 Voice, < 10 ms of latency and jitter
7 3 Network control reserved traffic

Table 45: Assigning the VLAN priority to the 4 traffic classes

Note: Network protocols and redundancy mechanisms use the highest traffic
class 3. Therefore, select other traffic classes for application data.

RM Web L2E
114 Release 7.0 05/2011
QoS/Priority 5.4 IP DSCP mapping

5.4 IP DSCP mapping

The IP DSCP mapping table allows you to assign a traffic class to every
DSCP value.

 Enter the desired value from 0 to 3 in the Traffic Class field for every
DSCP value (0-63).

Figure 33: IP DSCP mapping table

The different DSCP values get the device to employ a different forwarding
behavior, namely Per-Hop Behavior (PHB). 
PHB classes:
 Class Selector (CS0-CS7): For reasons of compatibility to TOS/IP
Precedence
 Expedited Forwarding (EF): Premium service.
Reduced delay, jitter + packet loss (RFC 2598)

RM Web L2E
Release 7.0 05/2011 115
QoS/Priority 5.4 IP DSCP mapping

 Assured Forwarding (AF): Provides a differentiated schema for handling

different data traffic (RFC 2597).
 Default Forwarding/Best Effort: No particular prioritizing.

DSCP value DSCP name Traffic class

(default setting)
0 Best Effort /CS0 1
1-7 1
8 CS1 0
9,11,13,15 0
10,12,14 AF11,AF12,AF13 0
16 CS2 0
17,19,21,23 0
18,20,22 AF21,AF22,AF23 0
24 CS3 1
25,27,29,31 1
26,28,30 AF31,AF32,AF33 1
32 CS4 2
33,35,37,39 2
34,36,38 AF41,AF42,AF43 2
40 CS5 2
41,42,43,44,45,47 2
46 EF 2
48 CS6 3
49-55 3
56 CS7 3
57-63 3

Table 46: Mapping the DSCP values onto the traffic classes

RM Web L2E
116 Release 7.0 05/2011
Redundancy 5.4 IP DSCP mapping

6 Redundancy

Under Redundancy you will find the dialogs and views for configuring and
monitoring the redundancy functions:
 Ring Redundancy
 Ring/Network coupling
 Spanning Tree

Note: The “Redundancy Configuration” user manual contains extensive

information you need to select a suitable redundancy procedure and
configure that procedure.

RM Web L2E
Release 7.0 05/2011 117
Redundancy 6.1 Ring Redundancy

6.1 Ring Redundancy

The concept of the Ring Redundancy enables the construction of high-

availability, ring-shaped network structures.
If a section is down, the ring structure of a
 HIPER-(HIGH PERFORMANCE REDUNDANCY) Ring with up to 50
devices typically transforms back to a line structure within 80 ms (possible
settings: standard/accelerated).
 MRP (Media Redundancy Protocol) Ring (IEC 62439) of up to 50 devices
typically transforms back to a line structure within 80 ms (adjustable to
max. 200 ms/500 ms).
With the aid of a device's Ring Manager (RM) function you can close both
ends of a backbone in a line-type configuration to form a redundant ring.
 Within a HIPER-Ring, you can use any combination of the following
devices:
– RS2-./.
– RS2-16M
– RS2-4R
– RS20, RS30, RS40
– RSR20, RSR30
– OCTOPUS
– MICE
– MS20, MS30
– PowerMICE
– MACH 100
– MACH 1000
– MACH 3000
– MACH 4000
 Within an MRP-Ring, you can use devices that support the MRP protocol
based on IEC62439.
 Within a Fast HIPER-Ring, you can use any combination of the following
devices:
– RSR20, RSR30
– MACH 1000

Depending on the device model, the Ring Redundancy dialog allows you to:
 Select one of the available Ring Redundancy versions, or change it.
 Display an overview of the current Ring Redundancy configuration.

RM Web L2E
118 Release 7.0 05/2011
Redundancy 6.1 Ring Redundancy

 Create new Ring Redundancies.

 Configure existing Ring Redundancies.
 Enable/disable the Ring Manager function.
 Receive Ring information.
 Delete the Ring Redundancy.

Note: Only one Ring Redundancy method can be enabled on one device at
any one time. When changing to another Ring Redundancy method,
deactivate the function for the time being.

Parameter Meaning
Version Select the Ring Redundancy version you want to use: 
HIPER-Ring
MRP
Default setting is HIPER-Ring
Ring port No. In a ring, every device has 2 neighbors. Define 2 ports as ring ports to which the
neighboring devices are connected.
Module Module identifier of the ports used as ring ports
Port Port identifier of the ports used as ring ports
Operation Value depends on the Ring Redundancy version used. Described in the
following sections for the corresponding Ring Redundancy version.

Table 47: Ring Redundancy basic configuration

RM Web L2E
Release 7.0 05/2011 119
Redundancy 6.1 Ring Redundancy

6.1.1 Configuring the HIPER-Ring

For the ring ports, select the following basic settings in the Basic
Settings:Port Configuration dialog:

Port Type Bit Rate Autonegotiation  Port Setting Duplex

(Automatic Configuration) Mode
Optical all off on full
TX 100 Mbit/s off on full
TX 1000 Mbit/s on on -

Table 48: Port Settings for Ring Ports

Note: Configure all the devices of the HIPER-Ring individually. Before you
connect the redundant line, you must complete the configuration of all the
devices of the HIPER-Ring. You thus avoid loops during the configuration
phase.

Note: As an alternative to using software to configure the HIPER-Ring, with

devices RS20/30/40 and MS20/30 you can also use DIP switches to enter a
number of settings on the devices. You can also use a DIP switch to enter a
setting for whether the configuration via DIP switch or the configuration via
software has priority. The state on delivery is “Software Configuration”. You
will find details on the DIP switches in the “Installation” user manual.

Parameter Meaning
Ring port X.X operation Display in “Operation” field:
active: This port is switched on and has a link.
inactive: This port is switched off or it has no link.
Ring Manager Status Status information, no input possible: 
Active (redundant line): The redundant line was closed
because a data line or a network component within the ring failed. 
Inactive: The redundant ring is open, and all data lines and
network components are working.

Table 49: HIPER-Ring configuration

RM Web L2E
120 Release 7.0 05/2011
Redundancy 6.1 Ring Redundancy

Parameter Meaning
Ring Recovery The settings in the ”Ring Recovery“ frame are only effective for
devices that are ring managers.
In the ring manager, select the desired value for the test packet
timeout for which the ring manager waits after sending a test
packet before it evaluates the test packet as lost.
 Standard: test packet timeout 480 ms
 Accelerated: test packet timeout 280 ms

Note: The settings are especially meaningful if at least one line in

the ring consists of a 1,000 MBit/s twisted pair line. The
reconfiguration time after connection interruption existing due to
the reaction characteristic of 1,000 MBit/s twisted pair ports can
thus be accelerated considerably.
Information If the device is a ring manager: The displays in this frame mean: 
“Redundancy working”: When a component of the ring is down, the
redundant line takes over its function.
“Configuration failure”: You have configured the function
incorrectly, or there is no ring port connection.

Table 49: HIPER-Ring configuration

RM Web L2E
Release 7.0 05/2011 121
Redundancy 6.1 Ring Redundancy

Figure 34: Selecting ring redundancy, entering ring ports, enabling/disabling ring
manager and selecting ring recovery.

Note: Deactivate the Spanning Tree protocol (STP) for the ports connected
to the redundant ring, because the Spanning Tree and the Ring Redundancy
work with different reaction times (Redundancy:Spanning Tree:Port).
If you used the DIP switch to activate the HIPER-Ring function, STP is
automatically switched off.

Note: If you have configured VLANs, note the VLAN configuration of the ring
ports.
In the configuration of the HIPER-Ring, you select for the ring ports
– VLAN ID 1 and
– VLAN membership Untagged in the static VLAN table.

RM Web L2E
122 Release 7.0 05/2011
Redundancy 6.1 Ring Redundancy

Note: When activating the HIPER-Ring function via software or DIP

switches, the device sets the corresponding settings for the pre-defined ring
ports in the configuration table (transmission rate and mode). If you switch off
the HIPER-Ring function, the ports, which are changed back into normal
ports, keep the ring port settings. Independently of the DIP switch setting, you
can still change the port settings via the software.

RM Web L2E
Release 7.0 05/2011 123
Redundancy 6.1 Ring Redundancy

6.1.2 Configuring the MRP-Ring

To configure an MRP-Ring, you set up the network to meet your demands.
For the ring ports, select the following basic settings in the Basic
Settings:Port Configuration dialog:

Port Type Bit Rate Autonegotiation  Port Setting Duplex

(Automatic Configuration) Mode
Optical all off on full
TX 100 Mbit/s off on full
TX 1000 Mbit/s on on -

Table 50: Port Settings for Ring Ports

Note: Configure all the devices of the MRP-Ring individually. Before you
connect the redundant line, you must have completed the configuration of all
the devices of the MRP-Ring. You thus avoid loops during the configuration
phase.

Parameter Meaning
Ring port X.X Display in “Operation” field:
operation forwarding: This port is switched on and has a link.
blocked: This port is blocked and has a link.
disabled: This port is switched off.
not connected: This port has no link.
Ring Manager Deactivate the advanced mode if a device in the ring does not support the
Configuration advanced mode for fast switching times. Otherwise you activate the advanced
mode.

Note: All Hirschmann devices that support the MRP-Ring also support the
advanced mode.
Operation When you have configured all the parameters for the MRP-Ring, you switch the
operation on with this setting. When you have configured all the devices in the
MRP-Ring, you close the redundant line.

Table 51: MRP-Ring configuration

RM Web L2E
124 Release 7.0 05/2011
Redundancy 6.1 Ring Redundancy

Parameter Meaning
Ring Recovery For the device for which you have activated the ring manager, select the value
200 ms if the stability of the ring meets the requirements for your network.
Otherwise select 500 ms.
Note: Settings in the “Ring Recovery” frame are only effective for devices that
are ring managers.
VLAN ID If you have configured VLANs, you select 
VLAN ID 0 here if you do not want to assign the MRP-Ring configuration to a
VLAN. Note the VLAN configuration of the ring ports: Select for VLAN ID 1 and
VLAN membership U in the static VLAN table for the ring ports.
VLAN ID > 0 if you want to assign the MRP-Ring configuration to this VLAN.
Select this VLAN ID in the MRP-Ring configuration for all devices in this MRP-
Ring. Note the VLAN configuration of the ring ports: For all ring ports in this
MRP-Ring, select this corresponding VLAN ID and the VLAN membership T in
the static VLAN table.
Information If the device is a ring manager: The displays in this frame mean: 
“Redundancy working”: When a component of the ring is down, the redundant
line takes over its function.
“Configuration failure”: You have configured the function incorrectly, or there is
no ring port connection.

Table 51: MRP-Ring configuration

Figure 35: Selecting MRP-Ring version, entering ring ports and enabling/disabling
ring manager

RM Web L2E
Release 7.0 05/2011 125
Redundancy 6.1 Ring Redundancy

Note: For all devices in an MRP-Ring, activate the MRP compatibility in the
Redundancy:Spanning Tree:Global dialog if you want to use RSTP in
the MRP-Ring. If this is not possible, perhaps because individual devices do
not support the MRP compatibility, you deactivate the Spanning Tree
protocol at the ports connected to the MRP-Ring. Spanning Tree and Ring
Redundancy affect each other.

Note: If you combine RSTP with an MRP-Ring, you must give the devices in
the MRP-Ring a better (i.e. numerically lower) RSTP bridge priority than the
devices in the connected RSTP network. You thus help avoid a connection
interruption for devices outside the Ring.

RM Web L2E
126 Release 7.0 05/2011
Redundancy 6.2 Ring/Network Coupling

6.2 Ring/Network Coupling

With this dialog you can:

 display an overview of the existing Ring/Network coupling,
 configure a Ring/Network coupling,
 switch a Ring/Network coupling on/off,
 create a new Ring/Network coupling, and
 Delete Ring/Network couplings

6.2.1 Preparing a Ring/Network Coupling

 STAND-BY switch
All devices have a STAND-BY switch, with which you can define the role
of the device within a Ring/Network coupling.
Depending on the device type, this switch is a DIP switch on the devices,
or else it is exclusively a software setting (Redundancy:Ring/Network
Coupling dialog). By setting this switch, you define whether the device
has the main coupling or the redundant coupling role within a Ring/
Network coupling. You will find details on the DIP switches in the
“Installation” user manual.

Note: Depending on the model, the devices have a DIP switch, with which
you can choose between the software configuration and the DIP switch
configuration. When you set the DIP switches so that the software
configuration is selected, the DIP switches are effectively deactivated.

RM Web L2E
Release 7.0 05/2011 127
Redundancy 6.2 Ring/Network Coupling

Device type STAND-BY switch type

RS2-./. DIP switch
RS2-16M DIP switch
RS20/RS30/RS40 Selectable: DIP switch and software setting
MS20/MS30 Selectable: DIP switch and software setting

Table 52: Overview of the STAND-BY switch types

Depending on the device and model, set the STAND-BY switch in

accordance with the following table:

Device with Choice of main coupling or redundant coupling

DIP switch On “STAND-BY” DIP switch
DIP switch/software switch According to the option selected 
option - on “STAND-BY” DIP switch or in the 
- Redundancy:Ring/Network Coupling dialog, by making
selection in “Select configuration”.
Note: These devices have a DIP switch, with which you can choose
between the software configuration and the DIP switch
configuration. You can find details on the DIP switches in the User
Manual Installation.
Software switch In the Redundancy:Ring/Network Coupling dialog

Table 53: Setting the STAND-BY switch

RM Web L2E
128 Release 7.0 05/2011
Redundancy 6.2 Ring/Network Coupling

Figure 36: Software configuration of the STAND-BY switch

Depending on the STAND-BY DIP switch position, the dialog displays

those configurations that are not possible as grayed-out. If you want to
select one of these grayed-out configurations, change the STAND-BY
DIP switch on the device to the other position.

One-Switch coupling
On the device set the 'STAND BY' dip switch to the ON position or use the
software configuration to assign the redundancy function to it.
Two-Switch coupling
Assign the device in the redundant line the DIP switch setting “STAND-
BY”, or use the software configuration to assign the redundancy function
to it.

Note: For reasons of redundancy reliability, do not use Rapid Spanning

Tree and Ring/Network Coupling in combination.

RM Web L2E
Release 7.0 05/2011 129
Redundancy 6.2 Ring/Network Coupling

 Ring/Network Coupling dialog

Parameter Meaning
Selecting the Depending on your local conditions, select “One-Switch coupling”,
configuration “Two-Switch coupling, Slave”, “Two-Switch coupling, Master”, “Two-
Switch coupling with control line, Slave” or “Two-Switch coupling with
control line, Master”. These options are presented as buttons from left
to right.
Depending on the device type (see table 52), you make this setting:
– only using DIP switches
– only using software
– using DIP switch and software
You will find details on the DIP switches on the devices in the
“Installation” user manual.
– For devices configured only using DIP switches, you use these
switches to make the settings. In this case, the buttons in the dialog
are only for display purposes.
– For devices without DIP switches, you only use the software to
make settings. You can select the configuration using the buttons.
– For devices that can be configured using DIP switches and
software, you can activate or deactivate the DIP switches. If you
have activated the DIP switches, you cannot overwrite the DIP
switch settings using the software - settings that cannot be selected
using the software are grayed-out in the dialog.
To configure using the software, select the relevant Ring/Network
coupling constellation by pressing the corresponding button.
Coupling port This is the port to which you have connected a redundant connection. 
Note: Configure the coupling port and the ring ports, if there are any
ring ports, on different ports. 
Note: To avoid continuous loops, the device sets the port status of the
coupling port to “off” if you switch off the function or change the
configuration while the connections are operating at these ports.
Port mode - active You have switched the port on. 
- stand-by The port is in stand-by mode.
Port state - active: You have switched the port on. 
- stand-by: The port is in stand-by mode. 
- not connected: You have not connected the port.
Partner coupling port This is the port at which the partner has made its connection. It is only
possible and necessary to enter a port if “One-Switch coupling” is being
set up.
Note: Configure the partner coupling port and the ring ports, if there are
any ring ports, on different ports.
IP address If you have selected “Two-Switch coupling”, the device displays the IP
address of the partner here, once you have already started operating
the partner in the network.
Control port This is the port to which you connect the control line.

Table 54: Ring/Network Coupling dialog

RM Web L2E
130 Release 7.0 05/2011
Redundancy 6.2 Ring/Network Coupling

Parameter Meaning
Operation Here you switch the Ring/Network coupling for this device on or off
Information If the device is a ring manager: The displays in this frame mean: 
“Redundancy working”: When a component of the ring is down, the
redundant line takes over its function.
“Configuration failure”: You have configured the function incorrectly, or
there is no ring port connection.
Redundancy Mode With the “Redundant Ring/Network Coupling” setting, either the main
line or the redundant line is active. Both lines are never active
simultaneously. 
With the “Extended Redundancy” setting, the main line and the
redundant line are simultaneously active if a problem is detected in the
connection line between the devices in the connected (i.e., the remote)
network. During the reconfiguration period, package duplications may
possibly occur. Therefore, only select this setting if your application
detects package duplications.
Coupling Mode Here you define whether the constellation you are configuring is a
coupling of redundancy rings (HIPER-Ring, MRP-Ring), or network
segments.

Table 54: Ring/Network Coupling dialog

The following tables show the selection options and default settings for
the ports used in the Ring/Network coupling.

Device Partner coupling port Coupling port

RS2-./. Not possible Not possible
RS2-16M All ports (default setting: port 2) All ports (default setting: port 1)
RS20, RS30, All ports (default setting: port 1.3) All ports (default setting: port 1.4)
RS40
OCTOPUS All ports (default setting: port 1.3) All ports (default setting: port 1.4)
MICE All ports (default setting: port 1.3) All ports (default setting: port 1.4)
PowerMICE All ports (default setting: port 1.3) All ports (default setting: port 1.4)
MS20 All ports (default setting: port 1.3) All ports (default setting: port 1.4)
MS30 All ports (default setting: port 2.3) All ports (default setting: port 2.4)
RSR20/30 All ports (default setting: port 1.3) All ports (default setting: port 1.4)
MACH 100 All ports (default setting: port 1.3) All ports (default setting: port 1.4)
MACH 1000 All ports (default setting: port 1.3) All ports (default setting: port 1.4)
MACH 3000 All ports All ports
MACH 4000 All ports (default setting: port 1.3) All ports (default setting: port 1.4)

Table 55: Port assignment for one-Switch coupling

RM Web L2E
Release 7.0 05/2011 131
Redundancy 6.2 Ring/Network Coupling

Device Coupling port

RS2-./. Not possible
RS2-16M Adjustable for all ports (default setting: port 1)
RS20, RS30, RS40 Adjustable for all ports (default setting: port 1.4)
OCTOPUS Adjustable for all ports (default setting: port 1.4)
MICE Adjustable for all ports (default setting: port 1.4)
PowerMICE Adjustable for all ports (default setting: port 1.4)
MS20 Adjustable for all ports (default setting: port 1.4)
MS30 Adjustable for all ports (default setting: port 2.4)
RSR20/30 Adjustable for all ports (default setting: port 1.4)
MACH 100 Adjustable for all ports (default setting: port 1.4)
MACH 1000 Adjustable for all ports (default setting: port 1.4)
MACH 3000 Adjustable for all ports
MACH 4000 Adjustable for all ports (default setting: port 1.4)

Table 56: Port assignment for the redundant coupling (two-Switch coupling)

Device Coupling port Control port

RS2-./. Port 1 Stand-by port (can only be combined
with RS2-../.. )
RS2-16M Adjustable for all ports  Adjustable for all ports 
(default setting: port 1) (default setting: port 2)
RS20, RS30, Adjustable for all ports  Adjustable for all ports 
RS40 (default setting: port 1.4) (default setting: port 1.3)
OCTOPUS Adjustable for all ports  Adjustable for all ports 
(default setting: port 1.4) (default setting: port 1.3)
MICE Adjustable for all ports  Adjustable for all ports 
(default setting: port 1.4) (default setting: port 1.3)
PowerMICE Adjustable for all ports  Adjustable for all ports 
(default setting: port 1.4) (default setting: port 1.3)
MS20 Adjustable for all ports  Adjustable for all ports 
(default setting: port 1.4) (default setting: port 1.3)
MS30 Adjustable for all ports  Adjustable for all ports 
(default setting: port 2.4) (default setting: port 2.3)
RSR20/RSR30 Adjustable for all ports  Adjustable for all ports 
(default setting: port 1.4) (default setting: port 1.3)
MACH 100 Adjustable for all ports  Adjustable for all ports 
(default setting: port 1.4) (default setting: port 1.3)
MACH 1000 Adjustable for all ports  Adjustable for all ports 
(default setting: port 1.4) (default setting: port 1.3)
MACH 3000 Adjustable for all ports Adjustable for all ports
MACH 4000 Adjustable for all ports  Adjustable for all ports 
(default setting: port 1.4) (default setting: port 1.3)

Table 57: Port assignment for the redundant coupling (two-Switch coupling with
control line)

RM Web L2E
132 Release 7.0 05/2011
Redundancy 6.2 Ring/Network Coupling

Note: For the coupling ports, select the following settings in the Basic
Settings:Port Configuration dialog:
– Port: on
– Automatic configuration (autonegotiation): 
on for twisted-pair connections
– Manual configuration: 100 Mbit/s FDX, 1 Gbit/s FDX or 10 Gbit/s FDX
for glass fiber connections, depending on the port’s capabilities

Note: If you have configured VLANS, note the VLAN configuration of the
coupling and partner coupling ports.
In the Ring/Network Coupling configuration, select for the coupling and
partner coupling ports
– VLAN ID 1 and “Ingress Filtering” disabled in the port table and
– VLAN membership U in the static VLAN table.

Note: If you are operating the Ring Manager and two-Switch coupling
functions at the same time, there is the possibility of creating a loop.

Note: The Ring/Network coupling operates with test packets (Layer 2

frames). The devices subscribed always send their test packets VLAN-
tagged, including the VLAN ID 1 and the highest VLAN priority 7. This also
applies if the send port is an untagged member in VLAN 1.

RM Web L2E
Release 7.0 05/2011 133
Redundancy 6.3 Spanning Tree

6.3 Spanning Tree

Under Spanning Tree you will find the dialogs and views for configuring and
monitoring of the Spanning Tree function according to the IEEE 802.1Q-
2005 standard, Rapid Spanning Tree (RSTP).

Note: The Spanning Tree Protocol is a protocol for MAC bridges. For this
reason, the following description uses the term bridge for Switch.

Introduction

Local networks are getting bigger and bigger. This applies to both the
geographical expansion and the number of network participants. Therefore,
it is advantageous to use multiple bridges, for example:
 to reduce the network load in sub-areas,
 to set up redundant connections and
 to overcome distance limitations.

However, using multiple bridges with multiple redundant connections

between the subnetworks can lead to loops and thus loss of communication
across of the network. In order to help avoid this, you can use Spanning Tree.
Spanning Tree enables loop-free switching through the systematic
deactivation of redundant connections. Redundancy enables the systematic
reactivation of individual connections as needed.

Rapid Spanning Tree Protocol (RSTP)

RSTP is a further development of the Spanning Tree Protocol (STP) and is

compatible with it. If a connection or a bridge becomes inoperable, the STP
required a maximum of 30 seconds to reconfigure. This is no longer
acceptable in time-sensitive applications. RSTP achieves average
reconfiguration times of less than a second. When you use RSTP in a ring
topology with 10 to 20 devices, you can even achieve reconfiguration times
in the order of milliseconds.

RM Web L2E
134 Release 7.0 05/2011
Redundancy 6.3 Spanning Tree

Note: RSTP reduces a layer 2 network topology with redundant paths into a
tree structure (Spanning Tree) that does not contain any more redundant
paths. One of the Switches takes over the role of the root bridge here. The
maximum number of devices permitted in an active branch (from the root
bridge to the tip of the branch) is specified by the variable Max Age for the
current root bridge. The preset value for Max Age is 20, which can be
increased up to 40.
If the device working as the root is inoperable and another device takes over
its function, the Max Age setting of the new root bridge determines the
maximum number of devices allowed in a branch.

Note: You have the option of coupling RSTP network segments to an MRP-
Ring. For this, you activate the MRP compatibility. This enables you to
operate RSTP via an MRP-Ring. 
If the root bridge is within the MRP-Ring, the devices in the MRP-Ring count
as a single device when calculating the length of the branch. A device that is
connected to a random Ring bridge receives such RSTP information as if it
were directly connected to the root bridge.

Note: The RSTP standard dictates that all the devices within a network work
with the (Rapid) Spanning Tree Algorithm. If STP and RSTP are used at the
same time, the advantages of faster reconfiguration with RSTP are lost in the
network segments that are operated in combination. 
A device that only supports RSTP works together with MSTP devices by not
assigning an MST region to itself, but rather the CST (Common Spanning
Tree).

Note: By changing the IEEE 802.1D-2004 standard for RSTP, the Standards
Commission reduced the maximum value for the “Hello Time” from 10 s to
2 s. When you update the Switch software from a release before 5.0 to
release 5.0 or higher, the new software release automatically reduces the
locally entered “Hello Time” values that are greater than 2 s to 2 s. 
If the device is not the RSTP root, “Hello Time” values greater than 2 s can
remain valid, depending on the software release of the root device.

RM Web L2E
Release 7.0 05/2011 135
Redundancy 6.3 Spanning Tree

Note: The following text uses the term Spanning Tree (STP) to describe
settings or behavior that applies to STP, RSTP or MSTP.

6.3.1 Global
With this dialog you can:
 switch the Rapid Spanning Tree Protocol on/off,
 display bridge-related information on the Spanning Tree Protocol,
 configure bridge-related parameters of the Spanning Tree Protocol,
 set bridge-related additional functions,
 display the parameters of the root bridge and
 display bridge-related topology information.

Note: Rapid Spanning Tree is activated on the device by default, and it

automatically begins to resolve the existing topology into a tree structure. If
you have deactivated RSTP on individual devices, you avoid loops during the
configuration phase.

The following tables show the selection options and default settings, and
information on the global Spanning Tress settings for the bridge.

Parameter Meaning Possible Values Default Setting

Frame Switches the Spanning Tree function for On,  On
„Function“ this device “On” or “Off”.  Off
If you switch off the Spanning Tree for a
device globally, the device floods the
Spanning Tree packets received like
normal Multicast packets to the ports.
Thus the device behaves transparently
with regard to Spanning Tree packets.

Table 58: Global Spanning Tree settings, basic function

RM Web L2E
136 Release 7.0 05/2011
Redundancy 6.3 Spanning Tree

In the “Protocol Configuration / Information” frame you can configure the

following values and read information.

Parameter Meaning Possible Values Default Setting

Column Information and configuration
„Bridge“ parameters of the local device
Bridge ID The local Bridge ID, made up of the local
(read only)priority and its own MAC address.
The format is 
ppppp / mm mm mm mm mm mm, 
with: ppppp: priority (decimal) and
mm: the respective byte of the MAC
address (hexadecimal).
Priority Sets the local bridge priority.  0 ≤ n*4096 ≤  32,768
The bridge priority and its own MAC 61440
address make up this separate Bridge
ID. The device with the best (numerically
lowest) priority assumes the role of the
root bridge. Define the root device by
assigning the device the best priority in the
Bridge ID among all the devices in the
network. 
Enter the value as a multiple of 4,096.
Hello Time Sets the Hello Time.  1-2 2
The local Hello Time is the time in
seconds between the sending of two
configuration messages (Hello packets).
If the local device has the root function, the
other devices in the entire network take
over this value. Otherwise the local device
uses the value of the root bridge in the
“Root” column on the right.

Table 59: Global Spanning Tree settings, local bridge parameters

RM Web L2E
Release 7.0 05/2011 137
Redundancy 6.3 Spanning Tree

Parameter Meaning Possible Values Default Setting

Forward Sets the Forward Delay parameter.  4 - 30 s 15 s
Delay In the previous STP protocol, the Forward See the note
Delay parameter was used to delay the following this table.
status change between the statuses
disabled, discarding, learning,
forwarding. Since the introduction of
RSTP, this parameter has a subordinate
role, because the RSTP bridges negotiate
the status change without any specified
delay.
If the local device is the root, the other
devices in the entire network take over this
value. Otherwise the local device uses the
value of the root bridge in the “Root”
column on the right.
Max Age Sets the Max Age parameter.  6 - 40 s 20 s
In the previous STP protocol, the Max Age See the note
parameter was used to specify the validity following this table.
of STP BPDUs in seconds. For RSTP,
Max Age signifies the maximum
permissible branch length (number of
devices to the root bridge).
If the local device is the root, the other
devices in the entire network take over this
value. Otherwise the local device uses the
value of the root bridge in the “Root”
column on the right.
Tx Hold Sets the Hx Hold Count parameter.  1 - 40  10
Count If the device sends a BPDU, it increments (based on RSTP
a counter at this port. When the counter standard: 1 - 10)
reaches the value of the Tx Hold Count,
the port stops sending any more BPDUs. 
The counter is decremented by 1 every
second. The device sends a maximum of
1 new BPDU in the following second.

Table 59: Global Spanning Tree settings, local bridge parameters

RM Web L2E
138 Release 7.0 05/2011
Redundancy 6.3 Spanning Tree

Parameter Meaning Possible Values Default Setting

MRP Switches the MRP compatibility on/off.  On,  Off
compatibilit MRP compatibility enables RSTP to be Off
y used within an MRP-Ring and when
coupling RSTP segments to an MRP-
Ring. The prerequisite is that all devices in
the MRP-Ring must support MRP
compatibility.
Note:
If you combine RSTP with an MRP-Ring,
you must give the devices in the MRP-
Ring a better (i.e. numerically lower) RSTP
bridge priority than the devices in the
connected RSTP network. You thus help
avoid a connection interruption for devices
outside the Ring.
BPDU Switches the BPDU Guard function on/off.  On,  Off
Guard If BPDU Guard is switched on, the device Off
automatically activates the function for
edge ports (with the setting “Admin Edge
Port” true). 
When such a port receives any STP-
BPDU, the device sets the port status
“BPDU Guard Effect” to true and the
transmission status of the port to
discarding(see table 64).
Thus the device helps protect your
network at terminal device ports from
incorrect configurations or attacks with
STP-BPDUs that try to change the
topology.

Table 59: Global Spanning Tree settings, local bridge parameters

Note: The parameters Forward Delay and Max Age have the following
relationship:
Forward Delay ≥ (Max Age/2) + 1
If you enter values that contradict this relationship, the device then replaces
these values with the last valid values or the default value.

RM Web L2E
Release 7.0 05/2011 139
Redundancy 6.3 Spanning Tree

Parameter Meaning Possible Values Default

Setting
Column Information on the device that is currently
„Root“ the root bridge
Bridge ID The Bridge ID of the current root bridge.
The format is 
ppppp / mm mm mm mm mm mm, 
with: ppppp: priority (decimal) and mm: the
respective byte of the MAC address (hexadecimal).
Priority The Priority of the current root bridge. 0 ≤ n*4096 ≤  32768
61440
Hello Time The Hello Time of the current root bridge. 1-2 2
Forward The Forward Delay of the current root bridge. 4 - 30 s 30 s
Delay
Max Age The Max Age of the current root bridge. 6 - 40 s 20 s

Table 60: Global Spanning Tree settings, root bridge information

Parameter Meaning Value range

Column „Topology“ Spanning Tree topology information
Bridge is root If the local device is currently the root bridge, Selected, not
the device displays this box as selected, and selected.
otherwise as empty.
Root Port The port of the device from which the current Valid port ID or 0.
path leads to the root bridge. 0: the local
bridge is the root.
Root path costs Path costs from the root port of the device to 0-200,000,000
the current root bridge of the entire layer 2
network. 0: the local bridge is the root.
Topology changes Counts how often the device has put a port
into the Forwarding status via Spanning
Tree since it was started.
Time since last change Time since the last topology change.

Table 61: Global Spanning Tree settings, topology information

RM Web L2E
140 Release 7.0 05/2011
Redundancy 6.3 Spanning Tree

If you have activated the “MRP Compatibility” function, the device displays
the “Information” frame with additional information on MRP compatibility:

Parameter Meaning Possible Values Default Setting

Information If you have activated the MRP Message with bridge -
compatibility (RSTP over MRP) and one of ID or empty.
the participating devices has detected a
configuration problem, the device displays
“Conflict with bridge pppp /
mm mm mm mm mm”. During normal
operation, this field is empty.

Table 62: Global Spanning Tree settings, Information frame

Figure 37: Dialog Spanning Tree, Global

RM Web L2E
Release 7.0 05/2011 141
Redundancy 6.3 Spanning Tree

6.3.2 Port

Note: Deactivate the Spanning Tree protocol for the ports connected to a
HIPER-Ring, Fast HIPER-Ring, or Ring/Network coupling, because
Spanning Tree and Ring Redundancy or Ring/Network coupling affect each
other. 
Activate the MRP compatibility in an MRP-Ring if you want to use RSTP and
MRP in combination.
If you combine RSTP with an MRP-Ring, you must give the devices in the
MRP-Ring a better (i.e. numerically lower) RSTP bridge priority than the
devices in the connected RSTP network. You thus help avoid a connection
interruption for devices outside the Ring.

RM Web L2E
142 Release 7.0 05/2011
Redundancy 6.3 Spanning Tree

If you are using the device in a Multiple Spanning Tree (MSTP) environment,
the device only participates in the Common Spanning Tree (CST) instance.
This chapter of the manual also uses the term Global MST instance to
describe this general case.

Parameter Meaning Possible Values Default

Setting
Tab „CIST“ Port configuration and information
on the global MSTI (IST) and the
CST.
Module.Port Port identification using module and
port numbers of the device, 
e.g. 2.1 for port one of module two.
STP active Here you can switch Spanning Tree On, Off On
on or off for this port. If Spanning
Tree is activated globally and
switched off at one port, this port
does not send STP-BPDUs and
drops any STP-BPDUs received.

Note: If you want to use other

layer 2 redundancy protocols such
as HIPER-Ring or Ring/Network
coupling in parallel with Spanning
Tree, make sure you switch off the
ports participating in these protocols
in this dialog for Spanning Tree.
Otherwise the redundancy may not
operate as intended or loops can
result.
Port status (read Displays the STP port status with discarding, learning, -
only) regard to the global MSTI (IST). forwarding, disabled,
manualForwarding,
notParticipate
Port Role (read Displays the STP port role with root, alternate, -
only) regard to the global MSTI (IST). designated, backup,
master, disabled

Table 63: Port-related STP settings and displays, CIST

RM Web L2E
Release 7.0 05/2011 143
Redundancy 6.3 Spanning Tree

Parameter Meaning Possible Values Default

Setting
Port path costs Enter the path costs with regard to 0 - 200,000,000 0
the global MSTI (IST) to indicate (automati
preference for redundant paths. If cally)
the value is 0, the Switch
automatically calculates the path
costs for the global MSTI (IST)
depending on the transmission rate.
Port priority Here you enter the port priority (the 16 ≤ n·16 ≤ 240 128
four highest bits of the port ID) with
regard to the global MSTI (IST) as a
decimal number of the highest byte
of the port ID.
Received bridge Displays the remote bridge ID from Bridge identification  -
ID (read only) which this port last received an STP- (format ppppp /
BPDU.a mm mm mm mm mm mm)
Received port Displays the port ID at the remote Port ID,  -
ID (read only) bridge from which this port last format pn nn, 
received an STP-BPDU.a with p: port priority / 16, 
nnn: port No., (both
hexadecimal)
Received path Displays the path costs of the 0-200,000,000 -
costs (read only) remote bridge from its root port to
the CIST root bridge.a
Admin Edge Activate this setting only if a terminal active (box selected),  inactiv
Port device is connected to the port. inactive (box empty) e
Then the port immediately
transitions to the forwarding status
after a link is set up, without first
going through the STP statuses. If
the port still receives an STP-BPDU,
the device blocks the port and
clarifies the port‘s STP port role. In
the process, the port can switch to a
different status, e.g. forwarding,
discarding, learning. 
Deactivate the setting when the port
is connected to a bridge. After a link
is set up, the port then goes through
the STP statuses first before taking
on the forwarding status, if
applicable. 
This setting applies to all MSTIs.

Table 63: Port-related STP settings and displays, CIST

RM Web L2E
144 Release 7.0 05/2011
Redundancy 6.3 Spanning Tree

Parameter Meaning Possible Values Default

Setting
Auto Edge Port The device only considers the Auto active (box selected),  active
Edge Port setting when the Admin inactive (box empty)
Edge Port parameter is deactivated. 
If Auto Edge Port is active, after a
link is set up the device sets the port
to the forwarding status after
1.5 · Hello Time (in the default
setting 3 s). 
If Auto Edge Port is deactivated, the
device waits for the Max Age
instead (in the default setting 20 s). 
This setting applies to all MSTIs.
Oper Edge Port The device sets “Oper Edge Port” true, false -
(read only) condition to true if no STP-BPDUs
have been received, i.e., a terminal
device is connected. It sets the state
to false if STP-BPDUs have been
received, i.e., a bridge is connected. 
This condition applies to all MSTIs.
Actual point-to- The device sets the “Actual point-to- true, false
point (read only) point” condition to true if this port
has a full duplex condition to an STP The device determines this
device. Otherwise it sets the condition from the duplex
condition to false (e.g. if a hub is mode: 
connected).  FDX: true
The point-to-point connection HDX: false
makes a direct connection between
2 RSTP devices. The direct,
decentralized communication
between the two bridges results in a
short reconfiguration time. 
This condition applies to all MSTIs.

Table 63: Port-related STP settings and displays, CIST

a
– These columns show you more detailed information than that available
up to now: 
For designated ports, the device displays the information for the STP-
BPDU last received by the port. This helps with the diagnosis of possible
STP problems in the network. 
For the port roles alternative, back-up, master and root, in the stationary

RM Web L2E
Release 7.0 05/2011 145
Redundancy 6.3 Spanning Tree

condition (static topology), this information is identically to the designated

information. 
If a port has no link, or if it has not received any STP-BDPUs for the
current MSTI, the device displays the values that the port would send as
a designated port.

Figure 38: Multiple Spanning Tree dialog, Port, CIST tab

RM Web L2E
146 Release 7.0 05/2011
Redundancy 6.3 Spanning Tree

Parameter Meaning Possible Values Default

Setting
Tab „Guards“ Protective settings for the ports.
Module.Port Port identification using module and port
numbers of the device, 
e.g. 2.1 for port one of module two.
Root Guard The “Root Guard” setting is only relevant for active (box inactiv
ports with the STP role designated.  selected),  e
If such a port receives an STP-BPDU with inactive (box
better path information on the root than what empty)
the device knows, the device discards the
BPDU and sets the port status to
discarding instead of assigning the port the
STP port role root.
Thus the device helps protect your network
from attacks with STP-BPDUs that try to
change the topology, and from incorrect
configurations.
If there are no STP-BPDUs with better path
information about the root, the device resets
the port's transmission status according to the
port role.

Note: The “Root Guard” and “Loop Guard”

settings are mutually exclusive. If you activate
one setting when the other is already active,
the device switches off the other one.

Table 64: Port-related STP settings and displays, guards

RM Web L2E
Release 7.0 05/2011 147
Redundancy 6.3 Spanning Tree

Parameter Meaning Possible Values Default

Setting
TCN Guard If the "TCN Guard" setting is active (TCN: active (box inactiv
Topology Change Notification) the port ignores selected),  e
the topology change flag in the STP-BPDUs inactive (box
received, which is reporting a topology empty)
change.
Thus the device helps protect your network
from attacks with STP-BPDUs that try to
change the topology.
If the “TCN Guard” setting is inactive, the
device follows the protocol in reacting to the
STP-BPDUs received: It deletes its address
table and forwards the TCN information.

Note: If the BPDU received contains other

information apart from the topology change
flag, which causes a topology change, the
device processes it even if the TCN guard is
activated. Example: The device receives
better path information for the root than that
already known.

Table 64: Port-related STP settings and displays, guards

RM Web L2E
148 Release 7.0 05/2011
Redundancy 6.3 Spanning Tree

Parameter Meaning Possible Values Default

Setting
Loop Guard The “Loop Guard” setting is only meaningful active (box inactiv
for ports with the STP role alternate, selected),  e
backup or root. If the “Loop Guard” setting is inactive (box
active and the port has not received any STP- empty)
BPDUs for a while, the device sets the port to
the discarding condition (port sends no
more data). 
The device also sets the port to what is known
as the “loop inconsistent status” and displays
this in the “Loop Status” column. 
The device prevents a potential loop if no more
STP-BPDUs are received if, for example, you
switch STP off on the remote device, or the link
only becomes inoperable in the receiving
direction. 
When the port receives BPDUs again, the
device resets the loop status of the port to
false, and the transmission status of the port
according to the port role. 
If the “Loop Guard” setting is inactive,
however, the device sets the port to the
forwarding status when STP-BPDUs have
not been received.

Note: The “Root Guard” and “Loop Guard”

settings are mutually exclusive. If you activate
one setting when the other is already active,
the device switches off the other one.
Loop Status Display the status of the Loop Status.  true, false -
(read only) The device sets the loop status of the port to
true if the “Loop Guard” setting is active at
the port and the port is not receiving any more
STP-BPDUs. 
Here the device leaves the port in the
discarding transmission status, to help
prevent a potential loop. 
When the port receives STP-BPDUs again,
the device resets the loop status to false.
Transitions to Counts how often the device has set the port 0 - 4,294,967,295 0
Loop Status to the loop status (“Loop Status” column (232-1)
(read only) true).

Table 64: Port-related STP settings and displays, guards

RM Web L2E
Release 7.0 05/2011 149
Redundancy 6.3 Spanning Tree

Parameter Meaning Possible Values Default

Setting
Transitions from Counts how often the device has set the port 0 - 4,294,967,295 0
Loop Status out of the loop status (“Loop Status” column (232-1)
true).
BPDU Guard The “BPDU Guard Effect” status is only true, false -
Effect (read only) relevant for edge ports (ports with the “Admin
Edge Port” status true), and only if the
“BPDU Guard” global function is active (see
table 59). 
When such a port receives any random STP-
BPDU, the device sets the port's “BPDU Guard
Effect” status to true and its transmission
status to discarding.
Thus the device helps protect your network at
terminal device ports from incorrect
configurations or attacks with STP-BPDUs that
try to change the topology.
To return the port to a normal transmitting
status from the locked status, break and
reconnect the link, or switch the “Admin Edge
Port” port setting off and on again.

Table 64: Port-related STP settings and displays, guards

RM Web L2E
150 Release 7.0 05/2011
Redundancy 6.3 Spanning Tree

Figure 39: Multiple Spanning Tree dialog, Port, Guards tab

RM Web L2E
Release 7.0 05/2011 151
Redundancy 6.3 Spanning Tree

RM Web L2E
152 Release 7.0 05/2011
Diagnostics 6.3 Spanning Tree

7 Diagnostics

The diagnosis menu contains the following tables and dialogs:

 Syslog
 Trap Log
 Ports (statistics, utilization, SFP modules)
 Topology Discovery
 Port Mirroring
 Device Status
 Signal Contact
 Alarms (Traps)
 Report (log file, system information)
 IP Address Conflict Detection
 Self Test
 Service Mode

In service situations, they provide the technician with the necessary

information for diagnosis.

RM Web L2E
Release 7.0 05/2011 153
Diagnostics 7.1 Syslog

7.1 Syslog

The “Syslog” dialog enables you to additionally send to one or more syslog
servers, the events that the device writes to its event log. You can switch the
function on or off, and you can manage a list of up to 8 syslog server entries.
You also have the option to specify that the device informs various syslog
servers, depending on the minimum “level to report” of the event.
Additionally, you can also send the SNMP requests to the device as events
to one or more syslog servers. Here you have the option of treating GET and
SET requests separately, and of assigning a “level to report” to the requests
to be logged.

Note: You will find the actual events that the device has logged in the “Trap
Log” dialog (see on page 159 “Trap Log“) and in the log file (see on page 180
“Event Log“).
The device evaluates SNMP requests as events if you have activated “Log
SNMP Set/Get Request” (see table 66).

RM Web L2E
154 Release 7.0 05/2011
Diagnostics 7.1 Syslog

Parameter Meaning Possible Values Default

Setting
Frame Switches the syslog function for this On,  Off
„Function“ device “On” or “Off” Off
Frame „SNMP Settings for sending SNMP requests to
Logging“ the device as events to the list of syslog
servers.
Log SNMP  Creates events for the syslog for SNMP active,  inactive
Get Requests. Get requests with the specified “level to inactive
report”.
Level to Report (for Specifies the level for which the device debug, notice
logs of SNMP Get creates the event “SNMP Get Request informational,
Requests) received” for the list of the syslog notice, warning,
servers. error, critical,
alert, emergency

Table 65: Syslog and SNMP Logging settings

Log SNMP  Creates events for the syslog for SNMP active,  inactive
Set Requests. Set requests with the specified “level to inactive
report”.
Level to Report (for Specifies the level for which the device debug, notice
logs of SNMP Set creates the event “SNMP Set Request informational,
Requests) received” for the list of the syslog notice, warning,
servers. error, critical,
alert, emergency

RM Web L2E
Release 7.0 05/2011 155
Diagnostics 7.1 Syslog

Parameter Meaning Possible Values Default

Setting
Syslog server
entries
Index Sequential number of the syslog server 1-8 -
entry in the table. 
When you delete an entry, this leaves a
gap in the numbering. When you create
a new entry, the device fills the first gap.
IP address Address of a syslog server to which the Valid IPv4 address 0.0.0.0
device sends its log entries.
Port UDP port at which your syslog server 1 - 65.535 514
receives entries.
Minimum level to Minimum level to report for an event for debug, critical
report the device to sent a log entry for it to this informational,
syslog server. notice, warning,
error, critical,
alert, emergency
Active Activate or deactivate the current active (box active
syslog server entry in the table. selected), inactive
(box empty)

Table 66: Syslog server entries

Parameter Meaning Possible Values Default

Setting
Buttons
“Set” button Click on “Write” to temporarily save the -
data.

Note: If you have entered an IP

address different to 0.0.0.0 for a newly
created syslog server entry, after the
entry is written the device activates it
automatically. Click on “Load” for the
device to update the display.
“Create” button Creates a new syslog server entry in -
the list.
“Remove” button Deletes the selected syslog server -
entry/entries from the list.

Table 67: Syslog entries, buttons

RM Web L2E
156 Release 7.0 05/2011
Diagnostics 7.1 Syslog

Note: When you activate the logging of SNMP requests, the device sends
these as events with the preset level to report notice to the list of syslog
servers. The preset minimum level to report for a syslog server entry is
critical.
To send SNMP requests to a syslog server, you have a number of options to
change the default settings. Select the ones that meet your requirements
best.
 Set the level to report for which the device creates SNMP requests as
events to warning or error and change the minimum level to report for
a syslog entry for one or more syslog servers to the same value. 
You also have the option of creating a separate syslog server entry for
this.
 Only set the level to report for SNMP requests to critical or higher.
The device then sends SNMP requests as events with the level to report
critical or higher to the syslog servers.
 Only set the minimum level to report for one or more syslog server entries
to notice or lower. Then it may happen that the device sends a large
number of events to the syslog servers.

RM Web L2E
Release 7.0 05/2011 157
Diagnostics 7.1 Syslog

Figure 40: Syslog dialog

RM Web L2E
158 Release 7.0 05/2011
Diagnostics 7.2 Trap Log

7.2 Trap Log

The table lists the logged events with a time stamp. 

The “Reload” button allows you to update the content of the trap log, and with
the “Delete” button you delete the content of the trap log.

Figure 41: Trap log table

You have the option to also send the logged events to one or more syslog
servers (see on page 154 “Syslog“).

RM Web L2E
Release 7.0 05/2011 159
Diagnostics 7.3 Ports

7.3 Ports

The port menu contains displays and tables for the individual ports:
 Statistics table
 Utilization
 SFP Modules

7.3.1 Statistics table

This table shows you the contents of various event counters. In the Restart
menu item, you can reset all the event counters to zero using "Warm start",
"Cold start" or "Reset port counter". 
The packet counters add up the events sent and the events received.

Figure 42: Port statistics table

RM Web L2E
160 Release 7.0 05/2011
Diagnostics 7.3 Ports

7.3.2 Network Load

This table displays the network load of the individual ports. 
In the “Upper Threshold [%]” column you enter the top threshold value for
network load. If this threshold value is exceeded, the device sets a check
mark in the “Alarm” field. 
In the “Upper Threshold [%]” column you enter the lower threshold value for
network load. If this threshold value is not met, the device removes the check
mark previously set.

Figure 43: Network Load Dialog

RM Web L2E
Release 7.0 05/2011 161
Diagnostics 7.3 Ports

7.3.3 SFP modules

The SFP status display enables you to look at the current SFP module
connections and their properties. The properties include:

Parameter Meaning
Module Module of the device on which the port is located.
Port Port to which this entry applies.
Module Type Type of SFP module, e.g. M-SFP-SX/LC.
Supported Shows whether the media module supports the SFP module.
Temperature in ° C Shows the SFP's operating temperature.
Transmission Power in Shows the transmission power in mW.
mW
Receive power in mW Shows the receive power in mW.
Transmission power in Shows the transmission power in dBm.
dBm
Receive power in dBm Shows the receive power in dBm.
Receive Power Status Shows the power level of the signal received.
– good receive power
– limited receive power
– insufficient receive power

Table 68: SFP Modules Dialog

RM Web L2E
162 Release 7.0 05/2011
Diagnostics 7.3 Ports

Figure 44: SFP Modules dialog

RM Web L2E
Release 7.0 05/2011 163
Diagnostics 7.4 Topology Discovery

7.4 Topology Discovery

This dialog enables you to activate/deactivate the function for Topology

Recognition (LLDP) and to display the LLDP information received in the form
of a table.

7.4.1 LLDP Information from Neighbor Devices

The card index "LLDP" tab's table shows you the LLDP information about
neighboring devices collected. This information enables the network
management station to display the structure of your network.
The "Show LLDP entries exclusively" option enables you to reduce the
number of table entries. In this case, the topology table hides entries from
devices without active LLDP support.

RM Web L2E
164 Release 7.0 05/2011
Diagnostics 7.4 Topology Discovery

Figure 45: Topology Recognition

If several devices are connected to one port, for example via a hub, the table
will contain one line for each connected device.

When devices both with and without an active topology discovery function
are connected to a port, the topology table hides the devices without active
topology discovery.

When only devices without active topology recognition are connected to a

port, the table will contain one line for this port to represent all devices. This
line contains the number of connected devices.
You can find the MAC addresses of devices, which the topology table hides
for clarity's sake, in the address table (FDB), (see on page 84 “Filters for
MAC addresses“).

RM Web L2E
Release 7.0 05/2011 165
Diagnostics 7.5 Port Mirroring

7.5 Port Mirroring

The port mirroring function enables you to review the data traffic at up to
8 ports of the device for diagnostic purposes. The device additionally
forwards (mirrors) the data for these ports to another port. This process is
also called port mirroring. 
The ports to be reviewed are known as source ports. The port to which the
data to be reviewed is copied is called the destination port. You can only use
physical ports as source or destination ports.
In port mirroring, the device copies valid incoming and outgoing data packets
of the source port to the destination port. The device does not affect the data
traffic at the source ports during port mirroring. 
A management tool connected at the destination port, e.g. an RMON probe,
can thus monitor the data traffic of the source ports in the sending and
receiving directions.
The destination port forwards all data to be sent.
On the devices PowerMICE, MACH 104, MACH 1040 and MACH 4000, the
destination port blocks received data, on all other devices, the destinations
port also forwards received data.

 Select the source ports whose data traffic you want to review from the list
of physical ports by checkmarking the relevant boxes. 
You can select a maximum of 8 source ports. Ports that cannot be
selected are displayed as inactive by the device, e.g. the port currently
being used as the destination port, or if you have already selected 8 ports.
Default setting: no source ports.
 Select the destination port to which you have connected your
management tool from the list element in the “Destination Port” frame. 
The device does not display ports that cannot be selected in the list, e.g.
the ports currently being used as source ports. Default setting: port 0.0
(no destination port).
 Select “On” in the “Function” frame to switch on the function. Default
setting: “Off”.

The “Reset configuration” button in the dialog allows you to reset all the port
mirroring settings of the device to the state on delivery.

RM Web L2E
166 Release 7.0 05/2011
Diagnostics 7.5 Port Mirroring

Note: When port mirroring is active, the specified destination port is used
solely for reviewing, and does not participate in the normal data traffic.

Figure 46: Dialog Port Mirroring

RM Web L2E
Release 7.0 05/2011 167
Diagnostics 7.6 Device Status

7.6 Device Status

The device status provides an overview of the overall condition of the device.
Many process visualization systems record the device status for a device in
order to present its condition in graphic form.

Figure 47: Device State dialog (for PowerMICE)

 In the "Monitoring" field, you select the events you want to monitor.
 To monitor the temperature, you set the temperature thresholds in the
Basics:System dialog at the end of the system data.

RM Web L2E
168 Release 7.0 05/2011
Diagnostics 7.6 Device Status

The events which can be selected are:

Name Meaning
Power supply ... Monitor/ignore supply voltage(s).
Temperature Monitor/ignore temperature thresholds set (see on page 16 “System“) for
temperatures that are too high/too low
Module removal Monitor/ignore the removal of a module (for modular devices).
ACA removal Monitor/ignore the removal of the ACA.
ACA not in sync Monitor/ignore the non-matching of the configuration in the device and on
the ACAa
Connection error Monitor/ignore the link status (Ok or inoperable) of at least one port.
The reporting of the link status can be masked for each port by the
management (see on page 26 “Port Configuration“). Link status is not
monitored in the state on delivery.
Ring Redundancy Monitor/ignore the ring redundancy (for the HIPER-Ring, only in ring
manager operation).
On delivery, ring redundancy is not monitored.

Note: If the device is a normal ring member and not a ring manager, it
doesn't report anything for the HIPER-Ring; for the Fast HIPER-Ring and
for MRP it only reports detected errors in the local configuration.
Ring/Network Monitor/ignore the redundant coupling operation. 
coupling On delivery, no monitoring of the redundant coupling is set.
For two-Switch coupling with control line, the slave additionally reports
the following conditions: 
– Incorrect link status of the control line 
– Partner device is also a slave (in standby mode).

Note: In two-Switch coupling, both Switches must have found their

respective partners.

Table 69: Device Status

a. The configurations are non-matching if only one file exists or the two files do not have the
same content.

 Select "Generate Trap" in the "Trap Configuration" field to activate the

sending of a trap if the device state changes.

RM Web L2E
Release 7.0 05/2011 169
Diagnostics 7.6 Device Status

Note: With a non-redundant voltage supply, the device reports the absence
of a supply voltage. If you do not want this message to be displayed, feed the
supply voltage over both inputs or switch off the monitoring (see on page 171
“Signal contact“).

RM Web L2E
170 Release 7.0 05/2011
Diagnostics 7.7 Signal contact

7.7 Signal contact

The signal contacts are used for

 controlling external devices by manually setting the signal contacts,
 monitoring the functions of the device,
 reporting the device state of the device.

7.7.1 Manual Setting

 Select the "Signal Contact 1" or "Signal Contact 2" card index (for devices
with two signal contacts).
 Select the “Manual Setting” mode in the “Signal Contact Mode” field. This
mode enables you to control this signal contact remotely.
 Select “Open” in the “Manual Setting” field to open the contact.
 Select “Closed” in the “Manual Setting” field to close the contact.

Application options:
 Simulation of an error during SPS error monitoring.
 Remote control of a device via SNMP, such as switching on a camera.

7.7.2 Function monitoring

 Select the tab “Signal contact 1” or “Signal contact 2” (for devices with two
signal contacts).

RM Web L2E
Release 7.0 05/2011 171
Diagnostics 7.7 Signal contact

 In the “Mode Signal contact” box, you select the “Monitoring correct
operation” mode. In this mode, the signal contacts monitor the functions
of the device, thus enabling remote diagnosis.
A break in contact is reported via the potential-free signal contact (relay
contact, closed circuit).
 Loss of the supply voltage 1/2 (either of the external voltage supply or of
the internal voltage).1 Select “Monitor” for the respective power supply if
the signal contact shall report the loss of the power supply voltage, or of
the internal voltage that is generated from the external power supply.
 One of the temperature thresholds has been exceeded (see on page 17
“System Data“). Select “Monitor” for the temperature if the signal contact
should report an impermissible temperature.
 Removing a module. Select “Monitor” for removing modules if the signal
contact is to report the removal of a module (for modular devices).
 The removal of the ACA. Select “Monitor” for ACA removal if the signal
contact is to report the removal of an ACA (for devices which support the
ACA).
 Non-matching of the configuration in the device and on the ACA2. Select
“Monitor” ACA not in sync if the signal contact is to report the non-
matching of the configuration (for devices which support ACA).
 The inoperable link status of at least one port. The reporting of the link
status can be masked via the management for each port in the device.
Link status is not monitored in the state on delivery. Select “Monitor” for
bad connections if the signal contact is to report an inoperative link status
for at least one port.
 If the device is part of a redundant ring: the elimination of the reserve
redundancy (i.e. the redundancy function did actually switch on), (see on
page 118 “Ring Redundancy“). Select “Monitor” for the ring redundancy if
the signal contact is to report the elimination of the reserve redundancy in
the redundant ring. 
Default setting: no monitoring.

1. You can install additional power supplies in a MACH4000 device, which

the device reports as P3-1, P3-2, P4-1 and P4-2 in its user interfaces. You
will find details on the power supplies in the document Installation Guide.
2. The configurations are non-matching if only one file exists or the two files
do not have the same content.

RM Web L2E
172 Release 7.0 05/2011
Diagnostics 7.7 Signal contact

Note: If the device is a normal ring member and not a ring manager, it
doesn't report anything for the HIPER-Ring; for the Fast HIPER-Ring
and for MRP it only reports detected errors in the local configuration.

 The elimination of the reserve redundancy for the ring/network coupling

(i.e. the redundancy function did actually switch on). Select “Monitor” for
the ring/network coupling if the signal contact is to report the elimination
of the reserve redundancy for the ring/network coupling (see on page 127
“Preparing a Ring/Network Coupling“). 
Default setting: no monitoring.

Note: In two-Switch coupling, both Switches must have found their

respective partners.

7.7.3 Device status

 Select the tab page “Alarm 1” or “Alarm 2” (for devices with two signal
contacts).
 In the “Mode Signal Contact” field, you select the “Device status” mode.
In this mode, the signal contact monitors the device status (see on
page 168 “Device Status“) and thereby offers remote diagnosis. 
The device status “Error detected” (see on page 168 “Device Status“) is
reported by means of a break in the contact via the potential-free signal
contact (relay contact, closed circuit).

7.7.4 Trap Configuration

 Select Generate Trap, if the device is to create a trap as soon as the
position of a signal contact changes when function monitoring is active.

RM Web L2E
Release 7.0 05/2011 173
Diagnostics 7.7 Signal contact

Figure 48: Signal Contact Dialog

The Signal Contact dialog has a card index ("Signal Contact 1") for devices
with a signal contact.
The Signal Contact dialog has two card indexes ("Signal Contact 1" and
"Signal Contact 2") for devices with two signal contacts.

RM Web L2E
174 Release 7.0 05/2011
Diagnostics 7.8 Alarms (Traps)

7.8 Alarms (Traps)

This dialog allows you to determine which events trigger an alarm (trap) and
where these alarms should be sent.

 Select "Create entry“.

 In the "Address“ column, enter the IP address of the management station
to which the traps should be sent.
 In the "Enabled“ column, you mark the entries which should be taken into
account when traps are sent.
 In the column "Password", enter the community name that the device
uses to identify itself as the trap's source.
 In the "Selection“ frame, select the trap categories from which you want
to send traps.

RM Web L2E
Release 7.0 05/2011 175
Diagnostics 7.8 Alarms (Traps)

The events which can be selected are:

Name Meaning
Authentication The device has rejected an unauthorized access attempt (see on page 43
“SNMPv1/v2 Access Settings“).
Link Up/Down At one port of the device, the link to another device has been established/
interrupted.
Spanning Tree The topology of the Rapid Spanning Tree has changed.
Chassis Summarizes the following events: 
– The status of a supply voltage has changed (see the System dialog).
– The status of the signal contact has changed.
To take this event into account, you activate “Create trap when status
changes” in the Diagnostics:Signal Contact 1/2 dialog.
- The AutoConfiguration Adapter (ACA), has been added or removed.
- The configuration on the AutoConfiguration Adapter(ACA) does not match
that in the device. 
– The temperature thresholds have been exceeded/not reached.
– The receiver power status of a port with an SFP module has changed (see
dialog Diagnostics:Ports:SFP Modules).
– The configuration has been successfully saved in the device and in the
AutoConfiguration Adapter (ACA), if present.
– The configuration has been changed for the first time after being saved in
the device.
Redundancy The redundancy status of the ring redundancy (redundant line active/
inactive) or (for devices that support redundant ring/network coupling) the
redundant ring/network coupling (redundancy exists) has changed.
Port security On one port a data packet has been received from an unauthorized terminal
device (see the Port Security dialog).

Table 70: Trap categories

RM Web L2E
176 Release 7.0 05/2011
Diagnostics 7.8 Alarms (Traps)

Figure 49: Alarms Dialog

RM Web L2E
Release 7.0 05/2011 177
Diagnostics 7.9 Report

7.9 Report

The following reports are available for the diagnostics:

 System Information (see on page 180 ““). 
The System Information is an HTML file with system-relevant data. The
device displays the system information in an own dialog.
 Event Log (see on page 180 “Event Log“). 
The Event Log is an HTML file in which the device writes important
device-internal events. The device displays the event log in an own
dialog.

Note: You have the option to also send the logged events to one or more
syslog servers (see on page 154 “Syslog“).

The following buttons are available:

 Download Switch-Dump. 
This button allows you to download system information as files in a ZIP
archive (see table 71).
 Select the directory in which you want to save the switch dump.
 Click “Save”.
The device creates the file name of the switch dumps automatically in the
format <IP address>_<system name>.zip, e.g. for a device of the type
PowerMICE: “10.0.1.112_PowerMICE-517A80.zip”.

 Download JAR File. 

This button allows you to download the applet of the Web-based interface
as a JAR file. Afterwards you have the option to start the applet outside a
browser. 
This enables you to administer the device even when you have
deactivated its Web server for security reasons.
 Select the directory in which you want to save the applet.
 Click “Save”.

RM Web L2E
178 Release 7.0 05/2011
Diagnostics 7.9 Report

The device creates the file name of the applet automatically in the format
<device type><software variant><software version)>_<software revision
of applet>.jar, e.g. for a device of type PowerMICE with software variant
L3P: “pmL3P06000_00.jar”.

File Name Format Comments

Log file event_log.html HTML
System information systemInfo.html HTML
Trap log traplog.txt Text
Internal memory extract for dump.hmd Binary
the manufacturer to improve
the product
Exception log exception_log.html HTML
Output of CLI commandsa: clicommands.txt Text
– show running-configb
– show port all
– show sysinfo
– show mac-address-table
– show mac-filter-table 
igmpsnooping

Table 71: Files in switch dump archive 

a: Prerequisite: a Telnet connection is available. 
b: Prerequisite: you are logged in as a user with write access.

RM Web L2E
Release 7.0 05/2011 179
Diagnostics 7.9 Report

Figure 50: Report dialog

7.9.1
The System Information is an HTML file with system-relevant data.

7.9.2 Event Log

The Event Log is an HTML file in which the device writes important device-
internal events.

RM Web L2E
180 Release 7.0 05/2011
Diagnostics 7.10 IP address conflict detection

7.10 IP address conflict detection

This dialog allows you to detect address conflicts the device is having with its
own IP address and rectify them (Address Conflict Detection, ACD).

 Select IP address conflict detection on/off under “Status” or select the

mode (see table 72).

Mode Meaning
enable Enables active and passive detection.
disable Disables the function
activeDetectionOnly Enables active detection only. After connecting to a network or after an
IP address has been configured, the device immediately checks whether
its IP address already exists within the network.
If the IP address already exists, the device will return to the previous
configuration, if possible, and make another attempt after 15 seconds.
The device therefore avoids to participate in the network traffic with a
duplicate IP address.
passiveOnly Enables passive detection only. The device listens passively on the
network to determine whether its IP address already exists. If it detects a
duplicate IP address, it will initially defend its address by employing the
ACD mechanism and sending out gratuitous ARPs. If the remote device
does not disconnect from the network, the management interface of the
local device will then disconnect from the network. Every 15 seconds, it
will poll the network to determine if there is still an address conflict. If there
isn't, it will connect back to the network.

Table 72: Possible address conflict operation modes

 In the table the device logs IP address conflicts with its 

IP address.
For each conflict the device logs:
 the time
 the conflicting IP address
 the MAC address of the device with which the IP address conflicted.
For each IP address, the device logs a line with the last conflict that
occurred.
 You can delete this table by restarting the device.

RM Web L2E
Release 7.0 05/2011 181
Diagnostics 7.10 IP address conflict detection

Figure 51: IP Address Conflict Detection dialog

RM Web L2E
182 Release 7.0 05/2011
Diagnostics 7.11 Self Test

7.11 Self Test

With this dialog you can:

 activate/deactivate the RAM test for a cold start of the device.
Deactivating the RAM test reduces the boot-up time for a cold start of the
device.
 allow or disable a restart due to an undefined software or hardware state.

Figure 52: Self-test dialog

RM Web L2E
Release 7.0 05/2011 183
Diagnostics 7.12 Service Mode

7.12 Service Mode

The following devices support the service mode:

RS20/RS30/RS40 and MS20/MS30.

The service mode enables you to divide the device into 2 transmission areas.
You can thus, for example, perform test or service configurations in the field
area of a network while the ongoing operation continues in the backbone
area.

The device specifies the two transmission areas via the HIPER-Ring ports:
transmission area 1 only includes the HIPER-Ring ports of the device, while
all other ports belong to transmission area 2. When the service mode is
activated, the device creates a new VLAN in which all the ports of
transmission area 2 are members. You use the redundant supply voltage
(see below) to activate the service mode. You can view the configuration of
the newly created VLAN in the dialogs under Switching/VLAN, but the device
does not allow these entries to be changed, in order to keep the service
configuration.
By generating the VLAN, the device
 resets the port VLAN IDs for all the ports of this VLAN to the new VLAN ID
 deactivates GVRP at all ports of this VLAN. The device prevents GVRP
from dynamically changing the service mode port settings as a result.
 activates “Ingress Filtering” at all ports of this VLAN. As a consequence,
the device only transmits packets when the input and output ports belong
to this VLAN.

RM Web L2E
184 Release 7.0 05/2011
Diagnostics 7.12 Service Mode

7.12.1 Activating the service mode

Prerequisites:
– HIPER-Ring ports are defined (HIPER-Ring or MRP-Ring).
– The supply voltage is redundant at P1 and P2.

Note: If there is no redundant voltage when activating the service mode (by
clicking on “Set” - see below), the switch immediately creates the 2 switching
areas. Depending on the settings already entered, this may interrupt your
communication to the switch.

 Select the Diagnostics:Service Mode dialog.

 Activate “Mode”.
 Enter a number other than 0 or 1 in the “VLAN” field. Enter a VLAN ID for
a new VLAN in order to keep the settings for existing VLANs.
 Click “Set”. The device outputs the following system message:

 If you have verified that your communication with the Switch will not be
interrupted, click “OK” to activate the service mode.
The device will indicate in all dialogs that the service mode is activated.

RM Web L2E
Release 7.0 05/2011 185
Diagnostics 7.12 Service Mode

Figure 53: Service Mode dialog - mode activated

 Deactivate the redundant supply voltage.

The service mode is now activated, which the device indicates with a
checkmark in the “Status” field.

Note: Deactivate the service mode (see below) when saving the device
configuration (dialog: Basics:Load/Save:Save:On the Switch).

7.12.2 Deactivating the service mode

 Reactivate the redundant voltage.

RM Web L2E
186 Release 7.0 05/2011
Diagnostics 7.12 Service Mode

The service mode is now deactivated.

 Select the Diagnostics:Service Mode dialog.
 Deactivate “Mode”.
 Click “Set” to deactivate the service mode so that the device will no longer
switch to the service mode if the redundant voltage supply is lost.

Note: After the service mode is deactivated, the device takes on its previous
settings again.

Figure 54: Service Mode dialog - mode deactivated

RM Web L2E
Release 7.0 05/2011 187
Diagnostics 7.12 Service Mode

RM Web L2E
188 Release 7.0 05/2011
Advanced 7.12 Service Mode

8 Advanced

The menu contains the dialogs, displays and tables for:

 DHCP Relay Agent
 Industry Protocols
 Command Line

RM Web L2E
Release 7.0 05/2011 189
Advanced 8.1 DHCP Relay Agent

8.1 DHCP Relay Agent

This dialog allows you to configure the DHCP relay agent.

 Enter the DHCP server IP address.

If one DHCP server is not available, you can enter up to 3 additional
DHCP server IP addresses so that the device can change to another
DHCP server.

 With Option 82, a DHCP relay agent which receives a DHCP request
adds an “Option 82” field to the request, as long as the request received
does not already have such a field.
When the function is switched off, the device will forward attached “Option
82” fields, but it will not add any on. Under “Type”, you specify the format
in which the device recognition of this device is entered in the “Option 82”
field by the DHCP relay agent.
The options are:
– IP address
– MAC Address (state on delivery)
– System name (client ID)
– Other (freely definable ID, which you can specify in the following rows).
“Remote ID entry for DHCP server” shows you the value which you enter
when configuring your DHCP server. “Type display” shows the device
recognition in the selected form.
 The “Circuit ID” column in the table shows you the value that you enter
when configuring your DHCP server. In addition to the port number, the
“Circuit ID” also includes the ID of the VLAN that the DHCP relay received
the DHCP query from.

Note: The VLAN ID is located in the circuit ID's 4th and 5th octet. The
circuit ID displayed applies to untagged frames. If the DHCP relay
receives a VLAN-tagged frame, then the circuit ID that it sends to the
DHCP server can deviate from the one displayed.

Example of a configuration of your DHCP server:

Type: mac
Remote ID entry for DHCP server: 00 06 00 80 63 00 06 1E
Circuit ID: B3 06 00 00 01 00 01 01

RM Web L2E
190 Release 7.0 05/2011
Advanced 8.1 DHCP Relay Agent

This results in the entry for the “Hardware address” in the DHCP server:
B306000001000101000600806300061E

 In the “Option 82 on” column in the table, you can switch this function on/
off for each port.

 In the "Hirschmann Device" column, you check the ports to which a

Hirschmann device is connected.

Figure 55: DHCP Relay Agent dialog

RM Web L2E
Release 7.0 05/2011 191
Advanced 8.2 Industrial Protocols

8.2 Industrial Protocols

The “Industry Protocols” menu allows you to

 configure the PROFINET IO protocol as well as
 the EtherNet/IP protocol.

Detailed information on industrial protocols and PLC configuration is

contained in the User Manual "Industrial Protocols“.

8.2.1 PROFINET IO
This dialog allows you to configure the PROFINET IO protocol. To integrate
this in a control system, perform the following steps.

General settings:
 In the Basic Settings:Network dialog, check whether Local is
selected in the “Mode” frame (see on page 21 “Network“).
 In the Switching:VLAN:Global dialog, check whether “VLAN 0
Transparent Mode” is selected (see on page 97 “VLAN Global“).

Note: Preclude a combination of the VLAN 0 Transparent mode and the

use of MSTP (Multiple Spanning Tree).

 Configure the alarm settings and the threshold values for the alarms you
want to monitor (see on page 168 “Device Status“).

Global PROFINET IO settings:

 Switch on the function by checking “ProfinetIO”.
 Click on “Download GSDML File” to load the GSDML file onto your PC.

RM Web L2E
192 Release 7.0 05/2011
Advanced 8.2 Industrial Protocols

PROFINET IO port settings:

 Select the port for which you want to set the DCP mode in detail, and in
the column DCP Mode, select
– none: 
The device sends the DCP frames received. However, the CPU does
not process them; it continues to generate DPC frames. The port does
not send out any DCP frames that were received at another port.
– ingress:
The device sends the DCP frames received. The CPU processes the
DCP frames received from this port, but does not generate any. The
port does not send out any DCP frames that were received at another
port.
– egress:
The device sends the DCP frames received. The CPU ignores frames
received from this port and generates them as needed.
– both:
The device sends the DCP frames received. The CPU processes
frames received and generates them as needed.
The default setting is both.

Note: If you connect 2 switches which are to be located in separate DCP

domains, change the DCP mode of the ports involved to none or to
ingress on both switches. This ensures that neither of the switches
receives or forwards DCP frames.

 Select the port for which you want to set its PHY module to the fast start
mode, and select from the following in the Fast Start Up column:
- disable, to set the normal start mode, 
- enable, to set the fast start mode.

Note: The setting enable only becomes effective if the automatic

configuration of the port (Autoneg) is switched off (see on page 26
“Port Configuration“).

The default setting is disable. If a port does not support the fast start
mode, the device will show unsupported in this column.

Settings for the PLC:

 Configure the PLC as described in the “Industry Protocols” user manual.

RM Web L2E
Release 7.0 05/2011 193
Advanced 8.2 Industrial Protocols

8.2.2 EtherNet/IP
This dialog allows you to activate the EtherNet/IP protocol. To integrate this
in a control system, perform the following steps.

General settings:
 In the Switching:Multicast:IGMP dialog, check whether IGMP is
activated (see on page 89 “IGMP (Internet Group Management
Protocol)“).

EtherNet/IP settings:
 Activate the function in the “EtherNet/IP” frame; the default setting is off.
 Click on “Download EDS File” to load the EDS file onto your PC.

Settings for the PLC:

 Configure the PLC as described in the “Industry Protocols” user manual.

RM Web L2E
194 Release 7.0 05/2011
Advanced 8.3 Command Line

8.3 Command Line

This window enables you to access the Command Line Interface (CLI) using
the Web interface.

You will find detailed information on CLI in the “Command Line Interface”
reference manual.

RM Web L2E
Release 7.0 05/2011 195
Advanced 8.3 Command Line

RM Web L2E
196 Release 7.0 05/2011
Appendix 8.3 Command Line

A Appendix

RM Web L2E
Release 7.0 05/2011 197
Appendix A.1 Technical Data

A.1 Technical Data

Switching
Size of MAC address table 8,000 (16,000 for PowerMICE and
(incl. static filters) MACH 4000)
Max. number of statically configured MAC 100
address filters
Max. number of MAC address filters learnable 512
via GMRP/IGMP Snooping
Max. length of over-long packets (from rel. 1,632 bytes
03.0.00)

VLAN
VLAN ID 1 to 4,042
Number of VLANs max. 255 simultaneously per device 
max. 255 simultaneously per port
Number of VLANs in GMRP in VLAN 1 max. 255 simultaneously per device 
max. 255 simultaneously per port

RM Web L2E
198 Release 7.0 05/2011
Appendix A.2 List of RFCs

A.2 List of RFCs

RFC 768 (UDP)

RFC 783 (TFTP)
RFC 791 (IP)
RFC 792 (ICMP)
RFC 793 (TCP)
RFC 826 (ARP)
RFC 854 (Telnet)
RFC 855 (Telnet Option)
RFC 951 (BOOTP)
RFC 1112 (IGMPv1)
RFC 1157 (SNMPv1)
RFC 1155 (SMIv1)
RFC 1212 (Concise MIB Definitions)
RFC 1213 (MIB2)
RFC 1493 (Dot1d)
RFC 1542 (BOOTP-Extensions)
RFC 1643 (Ethernet-like -MIB)
RFC 1757 (RMON)
RFC 1769 (SNTP)
RFC 1867 (Form-Based File Upload in HTML)
RFC 1901 (Community based SNMP v2)
RFC 1905 (Protocol Operations for SNMP v2)
RFC 1906 (Transport Mappings for SNMP v2)
RFC 1907 (Management Information Base for SNMP v2)
RFC 1908 (Coexistence between SNMP v1 and SNMP v2)
RFC 1945 (HTTP/1.0)
RFC 2068 (HTTP/1.1 protocol as updated by draft-ietf-http-v11-spec-rev-03)
RFC 2131 (DHCP)
RFC 2132 (DHCP-Options)
RFC 2233 (The Interfaces Group MIB using SMI v2)
RFC 2236 (IGMPv2)
RFC 2246 (The TLS Protocol, Version 1.0)
RFC 2271 (SNMP Framework MIB)
RFC 2346 (AES Ciphersuites for Transport Layer Security)
RFC 2365 (Administratively Scoped Boundaries)
RFC 2474 (Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6
Headers)
RFC 2475 (An Architecture for Differentiated Service)
RFC 2570 (Introduction to SNMP v3)

RM Web L2E
Release 7.0 05/2011 199
Appendix A.2 List of RFCs

RFC 2571 (Architecture for Describing SNMP Management Frameworks)

RFC 2572 (Message Processing and Dispatching for SNMP)
RFC 2573 (SNMP v3 Applications)
RFC 2574 (User Based Security Model for SNMP v3)
RFC 2575 (View Based Access Control Model for SNMP)
RFC 2576 (Coexistence between SNMP v1, v2 & v3)
RFC 2578 (SMI v2)
RFC 2579 (Textual Conventions for SMI v2)
RFC 2580 (Conformance statements for SMI v2)
RFC 2613 (SMON)
RFC 2618 (RADIUS Authentication Client MIB)
RFC 2620 (RADIUS Accounting MIB)
RFC 2674 (Dot1p/Q)
RFC 2818 (HTTP over TLS)
RFC 2851 (Internet Addresses MIB)
RFC 2865 (RADIUS Client)
RFC 2866 (RADIUS Accounting)
RFC 2868 (RADIUS Attributes for Tunnel Protocol Support)
RFC 2869 (RADIUS Extensions)
RFC 2869bis (RADIUS support for EAP)
RFC 2933 (IGMP MIB)
RFC 3164 (The BSD Syslog Protocol)
RFC 3376 (IGMPv3)

RM Web L2E
200 Release 7.0 05/2011
Appendix A.3 Underlying IEEE Standards

A.3 Underlying IEEE Standards

IEEE 802.1AB Topology Discovery (LLDP)

IEEE 802.1af Power over Ethernet
IEEE 802.1D-1998,  Media access control (MAC) bridges (includes IEEE 802.1p Priority
IEEE 802.1D-2004 and Dynamic Multicast Filtering, GARP, GMRP)
IEEE 802.1Q-2005 Spanning Tree (STP), Rapid Spanning Tree (RSTP), 
Multiple Spanning Tree (MSTP)
IEEE 802.1X Port Authentication
IEEE 802.3-2002 Ethernet
IEEE 802.3ac VLAN Tagging
IEEE 802.3x Flow Control

RM Web L2E
Release 7.0 05/2011 201
Appendix A.4 Underlying IEC Norms

A.4 Underlying IEC Norms

IEC 62439 High availability automation networks; especially: Chap. 5, 

MRP – Media Redundancy Protocol based on a ring topology

RM Web L2E
202 Release 7.0 05/2011
Appendix A.5 Literature references

A.5 Literature references

 “TCP/IP Illustrated”, Vol. 1

W.R. Stevens
Addison Wesley 1994
ISBN 0-201-63346-9

 Hirschmann “Installation” user manual

 Hirschmann “Basic Configuration” user manual

 Hirschmann “Redundancy Configuration” user manual

 Hirschmann “Routing Configuration” user manual

 Hirschmann “Web-based Interface” reference guide

 Hirschmann “Command Line Interface” reference guide

RM Web L2E
Release 7.0 05/2011 203
Appendix A.6 Copyright of Integrated Software

A.6 Copyright of Integrated

Software

A.6.1 Bouncy Castle Crypto APIs (Java)

The Legion Of The Bouncy Castle
Copyright (c) 2000 - 2004 The Legion Of The Bouncy Castle 
(http://www.bouncycastle.org)

Permission is hereby granted, free of charge, to any person obtaining a copy

of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights to
use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
of the Software, and to permit persons to whom the Software is furnished to
do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY

KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF
CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
DEALINGS IN THE SOFTWARE.

RM Web L2E
204 Release 7.0 05/2011
Appendix A.6 Copyright of Integrated Software

A.6.2 Broadcom Corporation

(c) Copyright 1999-2007 Broadcom Corporation. All Rights Reserved.

RM Web L2E
Release 7.0 05/2011 205
Appendix A.6 Copyright of Integrated Software

RM Web L2E
206 Release 7.0 05/2011
Index A.6 Copyright of Integrated Software

B Index

8 F
802.1D/p mapping 113 FAQ 213
Filters for MAC addresses 84
A Firmware update 23
ACA 31, 176, 176 Forward Delay 138, 140
Accept SNTP Broadcasts 54
Acceptable Frame Types 105 G
Access with Web-based interface, password General 15
40 Grandmaster 68
ACD 181
Address Conflict Detection 181 H
Advanced 189 Hello Time 137, 140
AF 116 HIPER-Ring 7, 104, 117
Aging Time 80 HIPER-Ring (source for alarms) 176
Alarm 175 HiVision 8
Assured Forwarding 116
Auto Configuration Adapter, 176 I
IGMP Querier 90
B IGMP settings 90
BPDU Guard 139 IGMP-Snooping 90
Broadcast Limiter Settings 86 Independent VLAN 99
Industry Protocols 192
C Industry protocols 7
Cable crossing 26 Ingress Filtering 105
Class Selector 115 IP DSCP mapping 107, 115
CLI 195 IP-DSCP value 108
CLI access, password 40
Clock 57 J
Cold start (after software update) 24 Java Runtime Environment 11
Coldstart 37 JavaScript 11
Command Line Interface 195
Configuring the HIPER-Ring 120 L
Configuring the MRP-Ring 124 Link State (Port) 26
Current VLAN Dialog 100 LLDP 164
Login 12
D
Device status 168 M
DHCP Option 82 190 Max Age 138, 140
DHCP Relay Agent 190 Media module (for modular devices) 17
Diagnose 153 Message URL http://
DiffServ 107 www.beldensolutions.com 213, 213
DIP switch 120 Message URL http://www.hicomcenter.com
DSCP 107 213, 213
MRP 7, 117
E Multicasts 89
EF 115
EtherNet/IP 194 N
Event Log 180 Network Load 161
Expedited Forwarding 115 Network load 134

RM Web L2E
Release 7.0 05/2011 207
Index A.6 Copyright of Integrated Software

Network Management Station 164 Report 178

NTP 53 Request Interval (SNTP) 54, 54
Restart 37
O Restore default settings 31
One-Switch coupling 129 Restore state on delivery 31
Option 82 190 RFC 199
Ring 118
P Ring Manager 118
Password 41 Ring Redundancy 117
Password for access with Web-based Ring Redundancy basic configuration 119
interface 40 Ring structure 118
Password for CLI access 40 Ring/Network Coupling 7, 117, 127
Password for SNMPv3 access 40 Ring/Network coupling 104, 117, 169
Per-Hop-Behavior (PHB) 115 Ring/Network coupling (source for alarms)
Port configuration 26, 111 176
Port configuration (QoS/priority) 111 Ringport 120
Port Mirroring 166 RM Function 118
Port priority 111, 112 RMON probe 166
Port security (IP-/MAC-based) 48 Root bridge 135
Port security (source for alarms) 49 RSTP 134
Port State (Link) 26
Port Statistics 160 S
Port VLAN ID 105 Security 39
Ports 160 Self-test 183
Power over ETHERNET 28 Service Mode 184
Precedence 115 Set 12
Precision Time Protocol 57 SFP Module 162
Priority queue 108 SFP Module (source for alarms) 176
PROFINET IO 7, 192 SFP Status Display 162
PROFINET IO (DCP mode per port) 193 Shared VLAN 99
PROFINET IO; PHY Fast Startup pro Port Signal contact 171
193 Signal contact (source for alarm) 176
PTP 57 SNMP logging 154
SNMPv1/v2 access settings 43
Q SNMPv3 access, password 40
QoS/Priority 107 SNTP 53
SNTP Broadcasts 54
R SNTP client 53
RAM test 183 SNTP server 53
Rapid Spanning Tree 134 Software update 23
Rapid Spanning Tree Port Protocol 142 Spanning Tree 134
Rate Limiter 86 Statistics table 160
Rate Limiter Settings 86 STP 134
Reboot 37 Supply voltage 176
Receive Power Status 162 Switching 79
Receiver power status (source for alarms) Switching Global Dialog 80
176 Symbol 9
Redundancy 7, 117 Syslog 154
Redundancy functions 117 System Information 180
Redundancy Manager 118 System Time 54
Redundant connections 134
Redundant Coupling 104 T
Redundant coupling 104, 117, 169 Technical questions 213
Reference Clock 68 Telnet Access 46

RM Web L2E
208 Release 7.0 05/2011
Index A.6 Copyright of Integrated Software

Temperature (device) 17
Temperature (SFPs) 162
Time 51
Time Management 57
Time Stamp Unit 57
Topology 164
ToS 107
Training courses 213
Trap 175
Trap Log 159
Trust mode 108
TrustDot1p (global trust mode) 109
TrustIpDscp 109
TrustIpDscp (global trust mode) 109
Two-switch coupling 129
Two-Switch coupling with control line 129
TX Hold Count 138
Type of Service 107

U
Untrusted (global trust mode) 108

V
VLAN 97
VLAN (HIPER-Ring settings) 122
VLAN and GOOSE Protocol 98
VLAN and redundancy rings 105
VLAN Global dialog 97
VLAN ID (network parameter of the device)
21
VLAN Mapping 107
VLAN Mode 99
VLAN Port dialog 105
VLAN priority 107
VLAN priority 108
VLAN Static dialog 102

W
Web Access 46
Web-based interface 11
Web-based management 11
Website 12

RM Web L2E
Release 7.0 05/2011 209
Readers’ Comments A.6 Copyright of Integrated Software

C Readers’ Comments

What is your opinion of this manual? We are always striving to provide as

comprehensive a description of our product as possible, as well as important
information that will ensure trouble-free operation. Your comments and
suggestions help us to further improve the quality of our documentation.

Your assessment of this manual:

Very good Good Satisfactory Mediocre Poor

Precise description O O O O O
Readability O O O O O
Understandability O O O O O
Examples O O O O O
Structure O O O O O
Completeness O O O O O
Graphics O O O O O
Drawings O O O O O
Tables O O O O O

Did you discover any errors in this manual? 

If so, on what page?

RM Web L2E
210 Release 7.0 05/2011
Readers’ Comments A.6 Copyright of Integrated Software

Suggestions for improvement and additional information:

General comments:

Sender:

Company / Department: 

Name / Telephone number: 

Street: 

Zip code / City: 

E-mail:

Date / Signature: 

Dear User,
Please fill out and return this page
 as a fax to the number +49 (0)7127/14-1600 or
 by mail to
Hirschmann Automation and Control GmbH
Department AED
Stuttgarter Str. 45-51
72654 Neckartenzlingen

RM Web L2E
Release 7.0 05/2011 211
Readers’ Comments A.6 Copyright of Integrated Software

RM Web L2E
212 Release 7.0 05/2011
Further Support A.6 Copyright of Integrated Software

D Further Support

 Technical Questions and Training Courses

In the event of technical queries, please contact your local Hirschmann
distributor or Hirschmann office.
You can find the addresses of our distributors on the Internet: 
www.beldensolutions.com.

Our support line is also at your disposal:

 Tel. +49 1805 14-1538
 Fax +49 7127 14-1551

Answers to Frequently Asked Questions can be found on the Hirschmann

internet site (www.beldensolutions.com) at the end of the product sites in
the FAQ category. 
The current training courses to technology and products can be found
under http://www.hicomcenter.com.

 Hirschmann Competence Center

In the long term, excellent products alone do not guarantee a successful
customer relationship. Only comprehensive service makes a difference
worldwide. In the current global competition scenario, the Hirschmann
Competence Center is ahead of its competitors on three counts with its
complete range of innovative services:
 Consulting incorporates comprehensive technical advice, from system
evaluation through network planning to project planing.
 Training offers you an introduction to the basics, product briefing and
user training with certification.
 Support ranges from the first installation through the standby service
to maintenance concepts.

With the Hirschmann Competence Center, you have decided against

making any compromises. Our client-customized package leaves you
free to choose the service components you want to use.
Internet: 
http://www.hicomcenter.com.

RM Web L2E
Release 7.0 05/2011 213