O-Ring IES-3082GC-manual-V1-0930

IES-3082GC
Industrial Managed Ethernet Switch
User Manual
Version 1.0
Mar, 2013
ORing Industrial Networking Corp. www.oring-networking.com0

IES-3082GC User Manual
COPYRIGHT NOTICE
Copyright © 2010 ORing Industrial Networking Corp.
All rights reserved.
No part of this publication may be reproduced in any form without the prior written consent of
ORing Industrial Networking Corp.
TRADEMARKS
is a registered trademark of ORing Industrial Networking Corp.

All other trademarks belong to their respective owners.
REGULATORY COMPLIANCE STATEMENT

Product(s) associated with this publication complies/comply with all applicable regulations.
Please refer to the Technical Specifications section for more details.
WARRANTY
ORing warrants that all ORing products are free from defects in material and workmanship for
a specified warranty period from the invoice date (5 years for most products). ORing will repair
or replace products found by ORing to be defective within this warranty period, with shipment
expenses apportioned by ORing and the distributor. This warranty does not cover product
modifications or repairs done by persons other than ORing-approved personnel, and this
warranty does not apply to ORing products that are misused, abused, improperly installed, or
damaged by accidents.
Please refer to the Technical Specifications section for the actual warranty period(s) of the
product(s) associated with this publication.
DISCLAIMER
Information in this publication is intended to be accurate. ORing shall not be responsible for its
use or infringements on third-parties as a result of its use. There may occasionally be
unintentional errors on this publication. ORing reserves the right to revise the contents of this
publication without notice.
CONTACT INFORMATION
ORing Industrial Networking Corp.
3F., NO.542-2, Jhongjheng Rd., Sindian District, New Taipei City 23145, Taiwan, R.O.C.
Tel: + 886 2 2218 1066 // Fax: + 886 2 22181014
Website: www.oring-networking.com
Technical Support
E-mail: [email protected]
Sales Contact
E-mail: [email protected] (Headquarters) [email protected] (China)
ORing Industrial Networking Corp. 1

Table of Content
Getting to Know Your Switch ........................................................................ 5
1.1 About the IES-3082GC Managed Industrial Switch................................................ 5
1.2 Software Features ................................................................................................ 5
1.3 Hardware Features ............................................................................................... 7
Hardware Installation ..................................................................................... 8

2.1 DIN-rail Installation ............................................................................................... 8
2.2 Wall Mounting ....................................................................................................... 9
Hardware Overview ...................................................................................... 11

3.1 Front Panel ......................................................................................................... 11
3.2 Front Panel LEDs ............................................................................................... 12
3.3 Top Panel ........................................................................................................... 12
3.4 Rear Panel ......................................................................................................... 13
Cables ........................................................................................................... 14
4.1 Ethernet Cables .................................................................................................. 14
4.1.1 100BASE-TX/10BASE-T Pin Assignments ...................................................... 14
4.2 SFP .................................................................................................................... 15
4.3 Console Cable .................................................................................................... 16
WEB Management ........................................................................................ 17

5.1 Configuration by Web Browser ............................................................................ 17
5.1.1 About Web-based Management...................................................................... 17
5.1.3 Front Panel Configuration ............................................................................... 19
5.1.4 Basic Setting .................................................................................................. 20
5.1.4.1 Switch Setting ........................................................................................ 20
5.1.4.2 Admin Password .................................................................................... 20
5.1.4.3 IP Setting ............................................................................................... 21
5.1.4.4 Time Setting ........................................................................................... 22
5.1.4.5 LLDP...................................................................................................... 24
5.1.4.6 Modbus TCP .......................................................................................... 25
5.1.4.7 Auto Provision ........................................................................................ 25
5.1.4.8 Backup & Restore .................................................................................. 26
5.1.4.9 Upgrade Firmware ................................................................................. 27
5.1.1 Redundancy ................................................................................................... 27
5.1.1.1 MRP ...................................................................................................... 27

5.1.1.2 O-Ring ................................................................................................... 28
5.1.1.3 Oen-Ring ............................................................................................... 30
5.1.1.4 O-Chain ................................................................................................. 31
5.1.1.5 RSTP – Repeater ................................................................................... 32
5.1.1.6 Fast Recovery ........................................................................................ 32
5.1.1.7 RSTP ..................................................................................................... 33
5.1.1.8 MSTP..................................................................................................... 36
5.1.2 Multicast ......................................................................................................... 40
5.1.2.1 IGMP Snooping ...................................................................................... 40
5.1.2.2 MVR ...................................................................................................... 41
5.1.2.3 Static Multicast Filtering .......................................................................... 41
5.1.3 Port Setting .................................................................................................... 42
5.1.3.1 Port Control ............................................................................................ 42
5.1.3.2 Port Status ............................................................................................. 43
5.1.3.3 Port Alias................................................................................................ 43
5.1.3.4 Rate Limit............................................................................................... 43
5.1.3.5 Port Trunking.......................................................................................... 44
5.1.3.6 Loop Guard ............................................................................................ 46
5.1.4 VLAN ............................................................................................................. 46
5.1.4.1 VLAN Setting- IEEE 802.1Q ................................................................... 47
5.1.4.2 VLAN Setting – Port Based .................................................................... 48
5.1.5 Traffic Prioritization ......................................................................................... 49
5.1.5.1 QoS Policy ............................................................................................. 49
5.1.5.2 Port-base Priority ................................................................................... 50
5.1.5.3 COS/802.1p ........................................................................................... 51
5.1.5.4 TOS/DSCP............................................................................................. 52
5.1.6 DHCP Server.................................................................................................. 52
5.1.6.1 Basic Setting .......................................................................................... 52
5.1.6.2 DHCP Server – Client List ...................................................................... 53
5.1.6.3 DHCP Server – Port and IP Bindings ...................................................... 53
5.1.6.4 DHCP Server –DHCP Relay Agent ......................................................... 54
5.1.7 SNMP............................................................................................................. 55
5.1.7.1 SNMP – Agent Setting ............................................................................ 55
5.1.7.2 SNMP –Trap Setting............................................................................... 56
5.1.7.3 SNMPV3 ................................................................................................ 57
5.1.8 Security .......................................................................................................... 58

5.1.8.1 Management Security ............................................................................ 59

5.1.8.2 Static MAC Forwarding ........................................................................... 59
5.1.8.3 MAC Blacklist ......................................................................................... 60
5.1.8.4 802.1x .................................................................................................... 61
5.1.8.5 IP Guard ................................................................................................ 63
5.1.9 Warning .......................................................................................................... 66
5.1.10 Monitor and Diag ........................................................................................ 68
5.1.10.1 System Event Log .................................................................................. 68
5.1.10.2 MAC Address Table ................................................................................ 69
5.1.10.3 Port Overview ........................................................................................ 70
5.1.10.4 Port Counters ......................................................................................... 70
5.1.10.5 Port Monitoring....................................................................................... 73
5.1.10.6 Traffic Monitor ........................................................................................ 74
5.1.10.7 SFP Monitor ........................................................................................... 74
5.1.10.8 Ping ....................................................................................................... 75
5.1.11 Save Configuration ..................................................................................... 75
5.1.12 Factory Default ........................................................................................... 75
5.1.13 System Reboot........................................................................................... 76
Command Line Interface Management ...................................................... 77

6.1 About CLI Management .................................................................................. 77
6.2 Command Set List—System Command Set .................................................... 82
6.3 Command Set List—Port Command Set ......................................................... 84
6.4 Command Set List—Trunk Command Set....................................................... 86
6.5 Command Set List—VLAN Command Set ...................................................... 87
6.6 Command Set List—Spanning Tree Command Set ......................................... 89
6.7 Command Set List—QoS Command Set ........................................................ 90
6.8 Command Set List—IGMP Command Set....................................................... 91
6.9 Command Set List—MAC/Filter Table Command Set ...................................... 91
6.10 Command Set List—SNMP Command Set ..................................................... 92
6.11 Command Set List—Port Mirroring Command Set .......................................... 93
6.12 Command Set List—802.1x Command Set ..................................................... 94
6.13 Command Set List—TFTP Command Set....................................................... 95
6.14 Command Set List—SYSLOG, SMTP, EVENT Command Set ......................... 96
6.15 Command Set List—SNTP Command Set ...................................................... 98
6.16 Command Set List—O-Ring Command Set .................................................... 99

Getting to Know Your Switch

1.1 About the IES-3082GC Managed Industrial
Switch
The IES-3082GC is a powerful managed industrial switch designed for extreme temperatures,
dusty environments and high humidity. With 8 X 10/100Base-T(X) and 2 x Gigabit combo ports,
the IES-3082GC can be managed via web browsers, TELNET, Console or other third-party
SNMP software as well as ORing’s proprietary management utility Open-Vision. The
user-friendly and powerful interface of Open-Vision allows you to easily configure and monitor
multiple switches at the same time.
1.2 Software Features

 Supports O-Ring (Recovery time < 10ms over 250 units connection)
 Supports Ring Coupling, Dual Homing over O-Ring
 Supports SNMPv1/v2/v3 & RMON & Port base/802.1Q VLAN Network Management
 Event notification by email, SNMP trap, and relay output
 Web-based ,Telnet, Console (CLI) configuration
 Enable/disable ports, MAC based port security
 Port-based network access control (802.1x)
 Supports VLAN (802.1Q ) to segregate and secure network traffic
 Radius centralized password management
 SNMPv3 encrypted authentication and access security
 RSTP (802.1w)
 Quality of Service (802.1p) for real-time traffic
 VLAN (802.1Q) with double tagging and GVRP supported
 IGMP snooping for multicast filtering
 Port configuration, status, statistics, mirroring, security
 Remote monitoring (RMON)

1.3 Hardware Features
 Dual DC power inputs
o
 Wide operating temperature: -40 to 70 C
o
 Storage temperature: -40 to 85 C
 Operating humidity: 5% to 95%, non-condensing
 Casing: IP-30
 10/100Base-T(X) Ethernet port
 10/100/1000Base-T(X) Gigabit Ethernet port (in combo ports)
 100/1000Base-X on SFP port (in combo ports)
 Console port
 Dimensions (W x D x H): 74.3 mm (W) x 109.2 mm (D) x 153.6 mm (H)

Hardware Installation
2.1 DIN-rail Installation
Each switch comes with a DIN-rail kit which can be installed on the rear panel. With the
DIN-rail kit, the switch can be fixed on a DIN-rail. Installing the switch on the DIN-rail is easy.
First, screw the Din-rail kit onto the back of the switch, right in the middle of the back panel.
Then slide the switch onto a DIN-rail from the Din-rail kit and make sure the switch clicks into
the rail firmly.
Din-rail Kit Measurement

2.2 Wall Mounting

Besides Din-Rail, the switch can be fixed to the wall via a wall mount panel, which can be
found in the package.
Wall-Mount Kit Measurement
To mount the switch onto the wall, follow the steps:

1. Screw the two pieces of wall-mount kits onto both ends of the rear panel of the switch. A
total of six screws are required, as shown below.

2. Use the switch, with wall mount plates attached, as a guide to mark the correct locations of
the four screws.
3. Insert four screw heads through the large parts of the keyhole-shaped apertures, and then
slide the switch downwards. Tighten the four screws for added stability.
Note: Instead of screwing the screws in all the way, leave about 2 mm to allow room for sliding
the wall mount panel between the wall and the screws.

Hardware Overview
3.1 Front Panel
IES-3082GC comes with the following ports on the front panel:
Port Description
10/100 RJ-45 fast 8 10/100Base-T(X) RJ-45 fast Ethernet ports support
Ethernet ports auto-negotiation.
Default Setting:
Speed: auto
Duplex: auto
Flow control: disable
Gigabit RJ-45 ports 2x 10/100/1000Base-T(X) Gigabit ports (in combo ports)

SFP ports 2x 100/1000Base-X on SFP port (in combo ports)
Console Use RS-232 to RJ-45 cable to manage switch.
Reset Push reset button 2 to 3 seconds to reset the switch.
Push reset button 5 seconds to return the switch to factory
setting.
1. LED for PWR.

2. LED for PWR1.
3. LED for PWR2.
4. LED for R.M (Ring master).
5. LED for Ring.
6. LED for Fault Relay.
7. Console port (RJ-45).
8. Reset button.
9. 10/100Base-T(X) Ethernet ports.
10. LED indicating the speed of
Ethernet ports
11. LED indicating the link status of
Ethernet ports
12. 1000 COMBO ports with SFP
13. LED for SFP ports link/act status.

3.2 Front Panel LEDs

LED Color Status Description
PWR Green On DC power on
PW1 Green On DC power module 1 activated.

PW2 Green On DC power module 2 activated.
R.M Green On O-Ring Master.
On O-Ring enabled.
Ring structure is broken (i.e.
Ring Green Slowly blinking part of the ring is
disconnected)
Fast blinking Ring disabled
Faulty relay (power failure or
Fault Amber On
port malfunctioning)
10/100Base-T(X) Fast Ethernet ports
On Port link up.
LNK / ACT Green
Blinking Data transmitted.
Full Duplex Amber On Port works under full duplex.
Gigabit Ethernet ports
On Port link up.
ACT Green
LNK Amber On Port link up.
SFP ports
On Port link up.
LNK / ACT Green
3.3 Top Panel

Below are the top panel components of IES-3082GC series:
1. Terminal block
2. Ground wire

3.4 Rear Panel

On the rear panel of the switch sit three sets of screw holes. The two sets placed in
triangular patterns on both ends of the rear panel are used for wall-mounting (red boxes in the
figure below) and the set of four holes in the middle are used for Din-rail installation (blue box
in the figure below).

Cables
4.1 Ethernet Cables
The IES-3082GC switch has standard Ethernet ports. According to the link type, the switch
uses CAT 3, 4, 5,5e UTP cables to connect to any other network devices (PCs, servers,
switches, routers, or hubs). Please refer to the following table for cable specifications.
Cable Types and Specifications
Cable Type Max. Length Connector
10BASE-T Cat.3, 4, 5 100-ohm UTP 100 m (328 ft) RJ-45

100BASE-TX Cat.5 100-ohm UTP UTP 100 m (328 ft) RJ-45
1000BASE-TX Cat.5/Cat.5e 100-ohm UTP UTP 100 m (328ft) RJ-45
4.1.1 100BASE-TX/10BASE-T Pin Assignments

With 1000/100BASE-TX/10BASE-T cables, pins 1 and 2 are used for transmitting data, and
pins 3 and 6 are used for receiving data.
10/100 Base-T RJ-45 Pin Assignments:

Pin Number Assignment
1 BI_DA+
2 BI_DA-
3 BI_DB+
4 BI_DC+
5 BI_DC-
6 BI_DB-
7 BI_DD+
8 BI_DD-
The IES-3082GC series switches support auto MDI/MDI-X operation. You can use a cable to
connect the switch to a PC. The table below shows the 10BASE-T/ 100BASE-TX MDI and
MDI-X port pin outs.

10/100 Base-T MDI/MDI-X Pin Assignments:
Pin Number MDI port MDI-X port

1 TD+(transmit) RD+(receive)
2 TD-(transmit) RD-(receive)
3 RD+(receive) TD+(transmit)
4 Not used Not used
5 Not used Not used
6 RD-(receive) TD-(transmit)
7 Not used Not used
8 Not used Not used
1000 Base-T MDI/MDI-X Pin Assignments:
Pin Number MDI port MDI-X port

1 BI_DA+ BI_DB+
2 BI_DA- BI_DB-
3 BI_DB+ BI_DA+
4 BI_DC+ BI_DD+
5 BI_DC- BI_DD-
6 BI_DB- BI_DA-
7 BI_DD+ BI_DC+
8 BI_DD- BI_DC-
Note: “+” and “-” signs represent the polarity of the wires that make up each wire pair.
4.2 SFP
The switch comes with fiber optical ports that can connect to other devices using SFP modules.
The fiber optical ports are in multi-mode (0 to 550M, 850 nm with 50/125 µm, 62.5/125 µm fiber)
and single-mode with LC connectors. Please remember that the TX port of Switch A should be
connected to the RX port of Switch B.
Switch A Switch B
Fiber cord

4.3 Console Cable

The IES-3082GC switch can be managed via console ports using a RS-232 cable which can
be found in the package. You can connect the port to a PC via the RS-232 cable with a DB-9
female connector. The DB-9 female connector of the RS-232 cable should be connected the
PC while the other end of the cable (RJ-45 connector) should be connected to the console port
of the switch.
PC pin out (male) assignment RS-232 with DB9 female connector DB9 to RJ 45
Pin #2 RD Pin #2 TD Pin #2
Pin #3 TD Pin #3 RD Pin #3
Pin #5 GD Pin #5 GD Pin #5

WEB Management
5.1 Configuration by Web Browser

This section introduces the configuration by Web browser.
5.1.1 About Web-based Management

The switch can be controlled via a built-in web server which supports Internet Explorer
(Internet Explorer 5.0 or above versions) and other Web browsers such as Chrome. Therefore,
you can manage and configure the switch easily and remotely. You can also upgrade firmware
via a web browser. The Web management function not only reduces network bandwidth
consumption, but also enhances access speed and provides a user-friendly viewing screen.
Note: By default, IE5.0 or later version does not allow Java Applets to open sockets. You need to explicitly modify the
browser setting in order to enable Java Applets to use network ports.
Preparing for Web Management

You can access the management page of the switch via the following default values:
IP Address: 192.168.10.1
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.10.254
User Name: admin
Password: admin
System Login
1. Launch the Internet Explorer.
2. Type http:// and the IP address of the switch. Press Enter.

1. A login screen appears.

2. Type in the username and password. The default username and password is admin.
3. Click Enter or OK button, the management Web page appears.
After logging in, you will see the screen below. On the right hand side of the management
interface shows links to various settings. You can click on the links to access the configuration
pages of different functions.

Click on the System Information on the right hand column will display the detailed information
of the system, shown as below.
The system information will display the configuration of the basic setting / switch setting pages.
When clicking Enable Location Alert, PWR1, PWR2 and PWR3 LEDs on the switch will start
to flash together. When you click Disable Location Alert, the LEDs will stop flashing.
5.1.3 Front Panel Configuration

Click Front Panel to show the front panel configuration of the switch or click Close to close the
page.

5.1.4 Basic Setting

Basic Settings allow you to configure the basic functions of the switch.
5.1.4.1 Switch Setting
Label Description
System Name Assigns the name of switch. The maximum length is 64 bytes
System Description Description of the device
System Location Assigns physical switch location. The maximum length is 64 bytes
System Contact Information of the contact person or organization
5.1.4.2 Admin Password

This page allows you to configure the system password required to access the web pages or
log in from CLI.
Label Description
User name The user name for operating the switch (default is admin)
New Password The new system password (default is admin)
Confirm password Re-type the new password
Apply Click to save changes

5.1.4.3 IP Setting
You can configure IP information of the switch in this page.
Label Description
DHCP Client Enables or disables the DHCP client function. When DHCP client
function is enabled, the switch will be assigned with an IP address
by the network DHCP server. The default IP address will be
replaced by the IP address assigned by the DHCP server. After
clicking Apply, a popup dialog appears to inform when the DHCP
client is enabled. The current IP will lose and you should find the
new IP on the DHCP server.
IP Address Assigns the IP address that the network is using. If DHCP client
function is enabled, you do not need to assign the IP address.
The network DHCP server will assign the IP address to the switch
and it will be displayed in this column. The default IP is
192.168.10.1.
Subnet Mask Assigns the subnet mask of the IP address. If DHCP client
function is enabled, you do not need to assign the subnet mask
Gateway Assigns the network gateway for the switch. The default gateway
is 192.168.10.254
DNS1 Assigns the primary DNS IP address
DNS2 Assigns the secondary DNS IP address
Apply Click to activate the configurations

5.1.4.4 Time Setting

This page includes configurations of SNTP and system clock.
System Clock
Label Description
System Clock This field shows the current system timer. The time stamp could
be assigned manually or by a SNTP server.
System Date Specifies the year, month and day of system clock
(YYYY/MM/DD). Year: 2006-2015. Month: Jan-Dec. Day:1-31(28)
System Time Specifies the hour, minute and second of system clock
(hh:mm:ss). Hour:0-24, Minute:0-59, Second:0-59
SNTP
The SNTP (Simple Network Time Protocol) settings allow you to synchronize switch clocks in
the Internet.

Label Description
SNTP Client Enables or disables SNTP function to retrieve the time from the
SNTP server.
Daylight Saving Time Enables or disables daylight saving time function. When daylight
saving time is enabled, you need to configure the daylight saving
time period.
UTC Time zone Sets the switch location time zone. The following table lists
different location time zones for your reference.
Local Time Zone Conversion from UTC Time at 12:00 UTC
November Time Zone - 1 hour 11 am

Oscar Time Zone -2 hours 10 am
ADT - Atlantic Daylight -3 hours 9 am
AST - Atlantic Standard
-4 hours 8 am
EDT - Eastern Daylight
EST - Eastern Standard
-5 hours 7 am
CDT - Central Daylight
CST - Central Standard
-6 hours 6 am
MDT - Mountain Daylight
MST - Mountain Standard
-7 hours 5 am
PDT - Pacific Daylight
PST - Pacific Standard
-8 hours 4 am
ADT - Alaskan Daylight
ALA - Alaskan Standard -9 hours 3 am
HAW - Hawaiian Standard -10 hours 2 am
Nome, Alaska -11 hours 1 am
CET - Central European
FWT - French Winter
MET - Middle European +1 hour 1 pm
MEWT - Middle European Winter
SWT - Swedish Winter
EET - Eastern European, USSR Zone 1 +2 hours 2 pm
BT - Baghdad, USSR Zone 2 +3 hours 3 pm
ZP4 - USSR Zone 3 +4 hours 4 pm
WAST - West Australian Standard +7 hours 7 pm
CCT - China Coast, USSR Zone 7 +8 hours 8 pm
JST - Japan Standard, USSR Zone 8 +9 hours 9 pm
EAST - East Australian Standard GST
+10 hours 10 pm
Guam Standard, USSR Zone 9
IDLE - International Date Line
+12 hours Midnight
NZST - New Zealand Standard

NZT - New Zealand

Label Description
SNTP Sever IP
Sets SNTP server IP address.
Address
Daylight Saving Sets up the start and end time of daylight saving. Both will be
Period different each year.
Daylight Saving
Sets up the offset time
Offset
Switch Timer Displays current time of the switch
PTP Client
The Precision Time Protocol (PTP) is a time-transfer protocol defined in the IEEE 1588-2002
standard that allows precise synchronization of networks (e.g., Ethernet). Accuracy within the
nanosecond range can be achieved with this protocol when using hardware generated
timestamps.
Label Description
PTP Client Enables or disables PTP Client
5.1.4.5 LLDP
LLDP (Link Layer Discovery Protocol) function allows the switch to advertise its information to
other nodes on the network and store the information it discovers.

Label Description
LLDP Protocol Enables or disables LLDP function
LLDP Interval The interval of resend LLDP (by default at 30 seconds)
Apply Click to set the configurations
Help Shows help file
Neighbor info table Shows neighbor device infomation
5.1.4.6 Modbus TCP

This page shows Modbus TCP support of the switch. (For more information regarding Modbus,
please visit http://www.modbus.org/)
Label Description
Mode Enables or disables Modbus TCP function
5.1.4.7 Auto Provision

This page allows you to update switch firmware automatically. You can put firmware or
configuration files on a TFTP server. When you reboot the switch, it will upgrade automatically.
Before updating, make sure you have your TFTP server ready and the firmware image and
configuration file are on the TFTP server.

5.1.4.8 Backup & Restore

You can save current EEPROM value from the switch to a TFTP server, then go to the TFTP
restore configuration page to restore the EEPROM value.

Label Description
TFTP Server IP Address Types in TFTP server IP
Restore File Name Types in the file name
Restore Click to restore the configurations
Form Local PC User can select the file from a local PC instead of a TFTP
server
Restore File Name Types in the file name
Restore Click to restore the configurations
Backup Click to back up the configurations
To Local PC User can download config file to the switch without using a
TFTP server
5.1.4.9 Upgrade Firmware

This page allows you to update the firmware of the switch. Before updating, make sure you
have your TFTP server ready and the firmware image is on the TFTP server.
5.1.1 Redundancy
5.1.1.1 MRP
MRP (Media Redundancy Protocol) Ring (IEC 62439) can support up to 50 devices and will
enable a back-up link in 80ms (adjustable to max. 200ms/500ms).

Label Description
Enable Enables MRP function
Manager Every MRP topology needs a MRP manager. One MRP
topology can only have a Manager. If two or more switches are
set to be Manager, the MRP topology will fail.
React on Link Change Faster mode. Enabling this function will cause MRP topology to
(Advanced mode) converge more rapidly. This function only can be set in MRP
manager switch.
st
1 Ring Port Chooses the port which connects to the MRP ring
2nd Ring Port Chooses the port which connects to the MRP ring
Force Speed / Duplex By default, Port Speed/Duplex is in auto-negotiation mode.
for 100BASE-TX Enabling this function will automatically change the
Speed/Duplex of MRP Ring ports to Full mode.(this function is
used in combination with Hirschmann Switch MRP as
Hirschmann Switch MRP Ring port speed/duplex is always in
Full mode).
5.1.1.2 O-Ring
O-Ring is ORing's proprietary redundant ring technology, with recovery time of less than 10
milliseconds and up to 250 nodes. It can reduce unexpected damage caused by network
topology changes. O-Ring supports three Ring topologies: O-Ring, Coupling Ring and Dual
Homing.

Label Description
Enable Ring Check to enable Ring
Enable Ring Master Only one ring master is allowed in a ring. However, if more
than one switches are set to enable Ring Master, the switch
with the lowest MAC address will be the active ring master and
the others will be backup masters.
1st Ring Port The primary port when the switch is ring master
2nd Ring Port The backup port when the switch is ring master
Enable Couple Ring Check to enable Coupling Ring. Coupling Ring can divide a
big ring into two smaller rings to avoid network topology
changes affecting all switches. It is a good method for
connecting two rings.
Coupling Port Ports for connecting multiple rings. A coupling ring needs four
switches to build an active and a backup link.
Links formed by the coupling ports will run in active/backup
mode.
Control Port Links to the control port of the switch in the same ring. Control
ports are used to transmit control signals.
Enable Dual Homing Check to enable Dual Homing. When Dual Homing is
enabled, the ring will be connected to normal switches through
two RSTP links (ex: backbone Switch). The two links work in
active/backup mode, and connect each ring to the normal
switches in RSTP mode.
Apply Click to activate the configurations.

Note: due to heavy loading, setting one switch as ring master and coupling ring at the same
time is not recommended.
5.1.1.3 Oen-Ring
Open-Ring technology can be applied to enable ORing’s switches to work with other vendors’
proprietary rings.
Label Description
Enable Enables Open-Ring function
Vender Chooses the vendors that you want to join to their ring
st
1 Ring Port Chooses the port which connects to the ring
2nd Ring Port Chooses the port which connects to the ring
The application of Open-Ring is shown as below.

5.1.1.4 O-Chain
O-Chain is ORing’s revolutionary network redundancy technology which enhances network
redundancy for any backbone networks, providing ease-of-use and maximum fault-recovery
swiftness, flexibility, compatibility, and cost-effectiveness in a set of network redundancy
topologies. The self-healing Ethernet technology designed for distributed and complex
industrial networks enables the network to recover in less than 10ms for up to 250 switches if
at any time a segment of the chain fails.
O-Chain allows multiple redundant rings of different redundancy protocols to join and function
together as a large and the most robust network topologies. It can create multiple redundant
networks beyond the limitations of current redundant ring technologies.

Label Description
Enable Checks to enable O-Chain function
st
nd
Edge Port An O-Chain topology must begin with edge ports. The ports with a
smaller switch MAC address will serve as the backup link and RM
LED will light up.
5.1.1.5 RSTP – Repeater

RSTP-Repeater is a simple function which can directly pass RSTP BPDU packets. With this
function, the devices will act as two RSTP devices connected.
Label Description
Enable Checks to enable RSTP-Repeater
1st Ring Port Chooses the port which connects to the RSTP
nd
2 Ring Port Chooses the port which connects to the RSTP
Edge Port Only the edge device (connects to RSTP device) needs to specify
an edge port. The user must specify the edge port according to
the network topology.
5.1.1.6 Fast Recovery

Fast recovery mode can be set to connect multiple ports to one or more switches. The
IES-3082GC with fast recovery mode will provide redundant links. Fast recovery mode
supports 10 priorities. Only the first priority will be the active port, and the other ports with
different priorities will be backup ports.
Label Description
Active Activates fast recovery mode
port Ports can be set to 10 priorities. Only the port with the highest
priority will be the active port. 1st Priority is the highest.
5.1.1.7 RSTP
The Rapid Spanning Tree Protocol (RSTP) is an evolution of the Spanning Tree Protocol. It
provides faster spanning tree convergence after a network topology is changed. The system
also supports STP and will automatically detect the connected devices running STP or RSTP
protocols.
RSTP setting
You can enable/disable RSTP function, and set parameters for each port.

Label Description
RSTP mode You must enable or disable RSTP function before configuring
related parameters
Priority (0-61440) A value used to identify the root bridge. The bridge with the
lowest value has the highest priority and is selected as the
root. If the value changes, you must reboot the switch. The
value must be multiple of 4096 according to the protocol
standard rule.
Max Age Time (6-40) The number of seconds a bridge waits without receiving
spanning tree protocol configuration messages before
attempting a reconfiguration. Enter a value between 6 through
40.
Hello Time (1-10) The time that controls switch sends out the BPDU packet to
check RSTP current status. Enter a value between 1 through
10.
Forwarding Delay Time The number of seconds a port waits before changing from its
(4-30) Rapid Spanning-Tree Protocol learning and listening states to

the forwarding state. Enter a value between 4 through 30.
Apply Click to set the configurations
NOTE: Follow the rule to configure the MAX Age, Hello Time, and Forward Delay Time.
2 x (Forward Delay Time value –1) > = Max Age value >= 2 x (Hello Time value +1)
The following tablet shows RSTP algorithm results.

Label Description
Path Cost The cost of the path to the other bridge. The range of valid values is 1 to
(1-200000000) 200000000.
Port Priority Configures the priority of the ports to be blocked in the LAN. The range of
(0-240) valid values is 0 to 240. The value of priority must be the multiple of 16
Admin P2P Some of the rapid state transactions that are possible within RSTP are
dependent upon whether the port concerned can only be connected to
exactly one other bridge (i.e. It is served by a point-to-point LAN segment),
or it can be connected to two or more bridges (i.e. It is served by a shared
medium LAN segment). This function allows the P2P status of the link to be
manipulated administratively. True means P2P enabling. False means P2P
disabling.
Admin Edge The port is directly connected to end stations, and it cannot create bridging
loop in the network. To configure the port as an edge port, set the port to
True.
Admin Non The port includes the STP mathematic calculation. True does not include

STP STP mathematic calculation. False includes the STP mathematic

calculation.
5.1.1.8 MSTP
Multiple Spanning Tree Protocol (MSTP) is a standard protocol base on IEEE 802.1s. The
function allows several VLANs to be mapped to a reduced number of spanning tree instances
because most networks only need a few logical topologies. It supports load balancing scheme
and the CPU is sparer than PVST (Cisco proprietary technology).

Label Description
MSTP Enable You must enable or disable MSTP function before configuring
related parameters.
Force Version The parameter can be used to force a VLAN bridge that supports
RSTP to operate in an STP-compatible manner.
Configuration Name The same MST region must have the same MST configuration
name.
Revision Level The same MST region must have the same revision level.
(0-65535)
Priority (0-61440) A value used to identify the root bridge. The bridge with the lowest
value has the highest priority and is selected as the root. If the
value changes, you must reboot the switch. The value must be
multiple of 4096 according to the protocol standard rule.
Max Age Time(6-40) The number of seconds a bridge waits without receiving
spanning-tree protocol configuration messages before attempting
a reconfiguration. Enter a value between 6 through 40.
Hello Time (1-10) Follow the rule below to configure the MAX Age, Hello Time, and
Forward Delay Time for the switch which sends out BPDU
packets to check RSTP current status. Enter a value between 1
through 10.
2 x (Forward Delay Time value –1) ≥ Max Age value ≥ 2 x (Hello Time value
+1)
Forwarding Delay The number of seconds a port waits before changing from its
Time (4-30) rapid spanning-tree protocol learning and listening states to the
forwarding state. Enter a value between 4 through 30.
Max Hops (1-40) This parameter is additional to those specified for RSTP. A single
value applies to all spanning trees within an MST region (the
CIST and all MSTIs) for which the bridge is the regional root.

Label Description
Port No. Selects the port you want to configure
Priority (0-240) Configures the priority of the ports to be blocked in the LAN. Enter
a number 0 through 240. The value of priority must be the multiple
of 16
Path Cost The cost of the path to the other bridge. Enter a number 1 through
(1-200000000) 200000000.
Admin P2P Some of the rapid state transactions that are possible within
RSTP are dependent upon whether the port concerned can only
be connected to exactly one other bridge (i.e. It is served by a
point-to-point LAN segment), or it can be connected to two or
more bridges (i.e. It is served by a shared medium LAN segment).
This function allows the P2P status of the link to be manipulated
administratively. True means P2P enabling. False means P2P
disabling.
Admin Edge Label
Admin Non STP Label

Label Description
Instance Sets the instance from 1 to 15
State Enables or disables the instance
VLANs Sets which VLAN will belong which instance
Proprietary (0-61440) A value used to identify the root bridge. The bridge with the lowest
value has the highest priority and is selected as the root. If the
value changes, you must reboot the switch. The value must be
multiple of 4096 according to the protocol standard rule.
Label Description
Instance Sets the instance’s information except CIST
Port Selects the port you want to configure
Priority (0-240) Configures the priority of the ports to be blocked in the LAN. Enter
a number 0 through 240. The value of priority must be the multiple
of 16
Path Cost The cost of the path to the other bridge. Enter a number 1 through
(1-200000000) 200000000.
Apply Click to set the configurations.

5.1.2 Multicast
5.1.2.1 IGMP Snooping
Internet Group Management Protocol (IGMP) is used by IP hosts to register their dynamic
multicast group membership. IGMP has 3 versions, IGMP v1, v2 and v3. Please refer to RFC
1112, 2236 and 3376. IGMP snooping improves the performance of networks that carry
multicast traffic. It provides the ability to prune multicast traffic so that it travels only to those
end destinations that require that traffic and reduces the amount of traffic on the Ethernet
LAN.
Label Description
IGMP Snooping Table Shows current IP multicast list
IGMP Protocol Enables or disables IGMP snooping
IGMP Query Mode Configures the switch to be the IGMP querier. There must be
one and only one IGMP querier in an IGMP application. Auto
means the querier is the one with a lower IP address.

5.1.2.2 MVR
MVR allows different VLAN users to receive VLAN Multicast packets in MVR mode.
Label Description
MVR Mode Enables or disables MVR mode
MVR VLAN Sets MVR VLAN
TYPE Sets port type to inactive, Receiver, or Source
Immediate Leave Enables or disables immediate leave
5.1.2.3 Static Multicast Filtering

Static multicast filtering is the system by which end stations only receive multicast traffic if they
register to join specific multicast groups. With multicast filtering, network devices only forward
multicast traffic to the ports that are connected to registered end stations.

Label Description
IP Address Assigns a multicast group IP address in the range of 224.0.0.0
~ 239.255.255.255
Member Ports Tick the check box beside the port number to include them as
the member ports in the specific multicast group IP address.
Add Shows current IP multicast list
Delete Deletes an entry from table
Help Shows help file.
5.1.3 Port Setting

5.1.3.1 Port Control
The function allows you to set the state, speed/duplex, flow control, and security of the port.
Label Description
Port NO. Port number for individual settings
State Enables or disables the port
Speed/Duplex You can set the value to AutoNegotiation, 100-full, 100-half,
10-full, or 10-half.
Flow Control Supports symmetric and asymmetric modes to avoid packet loss
when congestion occurred
Security Enabling port security will disable MAC address learning in this

port. Thus only the frames with MAC addresses in the port
security list will be forwarded, otherwise will be discarded.
Auto Detect 100/1000 Automatically detects SFP port’s SFP module speed (100M /
1000M)
5.1.3.2 Port Status

The following page provides the status information of the current port.
5.1.3.3 Port Alias

Users can define the name of each port and manage each port easily in this page.
5.1.3.4 Rate Limit

This function allows you to limit traffic of all ports, including broadcast, multicast and flooded
unicast. You can also set ingress or egress parameters to limit receiving or transmitting
bandwidth.

Label Description
Ingress Limit Frame Available values include all, Broadcast only,
Type Broadcast/Multicast and Broadcast/Multicast/Flooded
Unicast
Ingress Traffic received at the switch port
Egress Traffic transmitted from the port
5.1.3.5 Port Trunking

You can select static trunk or 802.3ad LACP to combine several physical links with a logical
link to increase the bandwidth.

Label Description
Group ID Selects the ports to join a trunk group
Type Supports static trunk and 802.3ad LACP
Work Port Selects the number of active ports in dynamic group (LACP).
The default value is the maximum number of the group. If the
number is not the maximum number of ports, the other inactive
ports in dynamic group will be suspended (no traffic). Once the
active port is broken, the suspended port will be active
automatically.
Port Trunk – Status

Label Description
Group Key Trunk Group number
Port Member Show Group port info
5.1.3.6 Loop Guard

This feature prevents loop attack. When receiving loop packets, the port will be disabled
automatically, preventing the loop attack from affecting other network devices.
Label Description
Active Enables or disables loop guard
Port Status Shows port work status
5.1.4 VLAN
A Virtual LAN (VLAN) is logical network grouping that limits the broadcast domain, which
allows you to isolate network traffic. Only the members of the VLAN will receive traffic from the
same members of the VLAN. Basically, creating a VLAN from a switch is logically equivalent of
reconnecting a group of network devices to another Layer 2 switch. However, all the network
devices are still plugged into the same switch physically. The IES-3082GC switch supports
port-based and 802.1Q (tagged-based) VLAN. The default configuration of VLAN operation
mode is at 802.1Q.

5.1.4.1 VLAN Setting- IEEE 802.1Q

Tagged-based VLAN is an IEEE 802.1Q specification standard that can create a VLAN with
devices provided by different switch vendors. IEEE 802.1Q VLAN will insert a “tag” which
contains a VLAN Identifier (VID) for indicating VLAN numbers into the Ethernet frames.
You can create Tag-based VLAN and enable or disable GVRP protocol. You can configure up
to 256 VLAN groups. When enabling 802.1Q VLAN, all ports on the switch will belong to
default VLAN whose VID is 1. The default VLAN cannot be deleted.
GVRP allows automatic VLAN configuration between the switch and nodes. If the switch is
connected to a device with GVRP enabled, you can send a GVRP request by using the VID of
a VLAN defined on the switch; the switch will automatically add that device to the existing
VLAN.
Label Description
VLAN Operation Mode Configures VLAN operation mode. Available values inlcude
disable, Port Base, and 802.1Q.
GVRP Mode Enables or disables GVRP function
Management VLAN ID Management VLAN enables the network administrator to

manage the switch in a secure VLAN environment. Only the
devices in the management VLAN can access the switch.
Port Selects the ports to be configured
Link type There are three link types:

Access Link: single switch only, allowing you to group ports
by setting the same VID.
Trunk Link: extended application of Access Link, allowing

you to group ports by applying the same VID to 2 or more

switches.
Hybrid Link: Both Access Link and Trunk Link are available.
Hybrid (QinQ) Link: enables QinQ mode, allowing you to
insert one more VLAN tags in an original VLAN frame.
Untagged VID Sets the port to default VLAN ID for untagged devices
connected to the port. The range is 1 to 4094.
Tagged VIDs Sets the tagged VIDs to carry different VLAN frames to other
switch
5.1.4.2 VLAN Setting – Port Based

Packets can only be transmitted to members of the same VLAN group. Note all unselected
ports are treated as belonging to another single VLAN. If the port-based VLAN is enabled, the
VLAN-tagging is ignored.
Label Description
Add Click to enter VLAN Add interface
Edit Edits existing VLAN
Delete Deletes existing VLAN

Label Description
Group Name VLAN name.
VLAN ID Specifies the VLAN ID
Add Selects ports to join the VLAN group
Remove Removes ports from the VLAN group
Apply Click to set the configurations.
5.1.5 Traffic Prioritization

Traffic prioritization includes three modes: port base, 802.1p/COS, and TOS/DSCP. The
function enables you to classify the traffic into four classes for differential network applications.
5.1.5.1 QoS Policy

Label Description
QOS Mode  Port-base: output priority is determined by ingress port.
 COS only: output priority is determined by COS only.
 TOS only: output priority is determined by TOS only.
 COS first: output priority is determined by COS and
TOS, but COS first.
 TOS first: output priority is determined by COS and
TOS, but TOS first.
QOS policy  Using the 8,4,2,1 weight fair queue scheme: the
output queues will transmit packets from the highest to
lowest queue with a 8:4:2:1 ratio. For example: 8 high
queue packets, 4 middle queue packets, 2 low queue
packets, and one lowest queue packet are transmitted in
one turn.
 Use the strict priority scheme: always transmit packets
in higher queue first until higher queue is empty.
Help Shows help file.
5.1.5.2 Port-base Priority
Port base Priority Assigns ports with a priority queue. 4 priority queues can be
assigned: High, Middle, Low, and Lowest.

5.1.5.3 COS/802.1p
COS/802.1p Known as 802.1p, CoS (Class of Service) will prioritize the

output of a packet by the setting in 802.1Q VLAN tag. The
priority value ranges from 0 to 7. CoS value maps to 4 priority
queues: High, Middle, Low, and Lowest.
COS Port Default When an ingress packet has no VLAN tag, a default priority
value is considered and determined by ingress port.

5.1.5.4 TOS/DSCP
TOS/DSCP ToS (Type of Service) is a field in the IP header of a packet.

This ToS field is also used by Differentiated Services and is
thus called Differentiated Services Code Point (DSCP). The
output priority of a packet can be determined by this field and
the priority value ranges from 0 to 63. DSCP value maps to 4
priority queues: High, Middle, Low, and Lowest.
5.1.6 DHCP Server

5.1.6.1 Basic Setting
The system provides DHCP server function
which enables a switch to be a DHCP server
when enabled.

Label Description
DHCP Server Enables or disables the DHCP server function. When enabled, the
switch will be the DHCP server on your local network.
Start IP Address The dynamic assignment range of IP addresses. The start IP address
will be the smallest value. For example, if the dynamic range is from
192.168.1.100 to 192.168.1.200, 192.168.1.100 will be the start IP
address.
End IP Address The dynamic assignment range of IP addresses. The end IP address
will be the largest value. For example: if the dynamic range is from
192.168.1.100 to 192.168.1.200, 192.168.1.200 will be the end IP
address
Subnet Mask Subnet mask for the dynamic assignment range of IP addresses
Gateway Gateway in your network
DNS The domain name server IP address in your network
Lease Time The period that system will reset the assigned dynamic IP to ensure
(Hour) the IP address is in use
5.1.6.2 DHCP Server – Client List

When the DHCP server function is activated, the system will collect the DHCP client
information and display here.
5.1.6.3 DHCP Server – Port and IP Bindings

You can assign a specific IP
address in the dynamic
assignment range to a specific
port. When the device is
connected to the port and asks
for dynamic IP assigning, the
system will assign the IP
address that has been assigned
before to the connected device.

5.1.6.4 DHCP Server –DHCP Relay Agent

The DHCP relay agent relays DHCP messages between clients and servers on different
subnet domains. DHCP relay agent use Option 82 to insert specific information into a request
that is being forwarded to a DHCP server, and removes the specific information from a reply
packet according to Option 82 when forwarding server DHCP packets to a DHCP client.
Label Description
DHCP Relay Enables or disables DHCP relay agent
DHCP Server IP Specifies IP address and VID of DHCP server. Keep 0.0.0.0 means the
Address and VID server is inactive.
DHCP Option 82 Provides a identifier for the remote server. Four types are supported:
Remote ID IP, MAC, Client-ID, and Other.

DHCP Option 82 Encodes an agent-local identifier of the circuit from which a DHCP
Circuit-ID Table client-to-server packet is received. It is intended for use by agents in

relaying DHCP responses back to the proper circuit.
5.1.7 SNMP
Simple Network Management Protocol (SNMP) is the protocol developed to manage nodes
(servers, workstations, routers, switches and hubs etc.) on an IP network. SNMP enables
network administrators to manage network performance, find and solve network problems, and
plan for network growth. Network management systems learn of problems by receiving traps
or change notices from network devices implementing SNMP.
5.1.7.1 SNMP – Agent Setting

You can set SNMP agent related information via Agent Setting.
Label Description
SNMP agent Version Three SNMP versions are supported: SNMP V1/SNMP V2c, and
SNMP V3. SNMP V1/SNMP V2c agent uses a community string
match for authentication, meaning SNMP servers access objects
with read-only or read/write permissions in line with the default
community string (public or private). SNMP V3 requires an
authentication level of MD5 or DES to encrypt data to enhance
data security.
SNMP V1/V2c SNMP community should be set for SNMP V1/V2c. Four sets of

Community community string/privilege are supported. Each community string

can support up to 32 characters. Leave the setting to empty to
remove this community string.
5.1.7.2 SNMP –Trap Setting

A trap manager is a management station that receives traps. Traps are system alerts
generated by the switch. If no trap manager is defined, no traps will be issued. You can create
a trap manager by entering the IP address of the station and a community string. You can
define management stations as trap manager by entering a SNMP community string and
selecting the SNMP version.
Label Description
Server IP The server IP address to receive traps
Community Community strings for authentication
Trap Version Supported trap versions
Add Adds a trap server profile
Remove Removes a trap server profile

5.1.7.3 SNMPV3

Label Description
Context Table Configures SNMP v3. Assigns the context name of a context
table. Click Apply to change the context name.
User Table User ID: sets up the user name.

Authentication Password: sets up the authentication
password.
Privacy Password: sets up the private password
Click Add to add context name.
Click Remove to remove unwanted context name
Group Table Configure SNMP v3 group table:

Security Name (User ID): assigns the user name that you
have set up in user table
Group Name: sets up the group name
Click Add to add context name
Access Table Configure SNMP v3 access table.

Context Prefix: sets up the context name
Group Name: sets up the group
Security Level: selects the access level
Context Match Rule: selects the context match rule
Read View Name: sets up the read view
Write View Name: sets up the write view
Notify View Name: sets up the notify view
MIBview Table Configures MIB view table

ViewName: sets up the name
Sub-Oid Tree: fills the Sub OID
Type: selects Excluded or Included
5.1.8 Security
You can enhance security of switch via the following settings: IP security, port security, MAC
blacklist, and MAC address assigning and 802.1x protocol.

5.1.8.1 Management Security

Only the IP address in the secure IP list can manage the switch through your defined
management mode (WEB, Telnet, SNMP).
Label Description
IP security MODE Enables and disables the IP security function
Enable WEB Checks to enable WEB management
Management
Enable Telnet Checks to enable Telnet management
Management
Enable SNMP Checks to enable MPSN management.
Management
5.1.8.2 Static MAC Forwarding

Static MAC forwarding adds static MAC addresses to hardware forwarding database. If port
security is enabled on the Port Control page, only the frames with MAC addresses in this list
will be forwarded, otherwise will be discarded.

Label Description
MAC Address Inputs MAC address to a specific port
Port NO. Selects ports
Add Adds an entry of MAC address and port information
Delete Deletes entry
5.1.8.3 MAC Blacklist

MAC blacklist can stop traffic from being forwarded to specific MAC addresses in the list. Any
frames forwarded to the MAC addresses in this list will be discarded. Thus the target device
will not receive any frame.

Label Description
MAC Address Inputs MAC address to MAC blacklist
Port NO. Selects ports
Add Adds an entry to blacklist table
Delete Deletes entry
5.1.8.4 802.1x
802.1x - Radius Server
802.1x uses the physical access characteristics of the IEEE802 LAN infrastructure to authorize
devices attached to a LAN port. Please refer to IEEE 802.1X - Port Based Network Access
Control for more information.

Label Description
802.1x Protocol Enables or disables 802.1X Radius server
Radius Server IP Shows the IP address of the authentication server
Server port Configures UDP port number used by the authentication server for
authentication
Account port Configures UDP destination port for accounting requests to the
specified Radius server
Shared Key Key shared between this switch and authentication server
NAS, Identifier String used to identify this switch.
Quiet Period Configures the time interval between authentication failure and the
start of a new authentication attempt
Tx Period Configures the time that the switch can wait for response to an EAP
request/identity frame from the client before resending the request
Supplicant Timeout Configures the period of time the switch waits for a supplicant
response to an EAP request
Server Timeout Configures the period of time the switch waits for a Radius server
response to an authentication request.
Max Requests Configures the maximum number of times to retry sending packets
to the supplicant.
Re-Auth Period Configures the period of time after which clients connected must be
re-authenticated.
802.1x Port Authorization Setting

Label Description
Port Authorized Mode Reject: force this port to be unauthorized.
Accept: force this port to be authorized.
Authorize: the state of this port is determined by the outcome
of the 802.1x authentication.
Disable: this port will not participate in 802.1x
802.1x Port Authorization State
5.1.8.5 IP Guard
IP Guard – Port Setting
This page allows you to configure port configuration of IP Guard. IP Guard is an intelligent and
easy-to-use function for IP security. It protects the network from unknown IP (IPs which are not
in the allowed list) attack. The illegal IP traffic will be blocked.

Label Description
Mode Disabled: IP Guard is disabled
Monitor: IP Guard is disabled, but IP traffic will be monitored
constantly.
Security: IP Guard is enabled and illegal IP traffic will be
blocked.
IP Guard – Allow List

This page allows you to configure the IP Guard allowed list. IP traffic will be blocked if it is not
in allowed list.
Label Description
IP IP address of the allowed entry
MAC MAC address of the allowed entry
Port Port number of the allowed entry
Status If you suspect some allowed IP traffic to be abnormal, you can

block the traffic in this field.
Active: allow the IP traffic.
Suspend: block the IP traffic.
Delete If you want to delete the entry, please check this box and apply
it.

IP Guard – Super-IP List

This page allows you to configure the IP Guard Super-IP list. Super-IP entry has a special
priority; the IP has no limitation on MAC address and port binding. Any IP traffic is allowed as
long as the IP is in the Super-IP list.
IP Guard – Monitor List
Label Description
IP IP address of an entry.
MAC MAC address of an entry
Port Port number of an entry
Time Logged time
Add to Allow List If you want to allow the IP traffic, please check this box and
apply it.

5.1.9 Warning
Warning function is very important for managing switches. You can manage a switch by
SYSLOG, email, and fault relay. It helps you to monitor switch status on a remote site. When
events occur, a warning message will be sent to your appointed server via email or the faulty
relay function.
System alarm supports two warning mode, SYSLOG and email. You can monitor switches for
selected system events.
Warning – Fault Relay Alarm

When any selected event happens, the Fault LED on the switch panel will light up and the
electric relay will send out signals at the same time.
System Warning – SYSLOG Setting

SYSLOG is a protocol to transmit event notification messages across networks. Please refer to
RFC 3164 - The BSD SYSLOG Protocol for more information.

Label Description
SYSLOG Mode Disable: disables SYSLOG.
Client Only: logs to a local system
Server Only: logs to a remote SYSLOG server
Both: logs to both the local and remote servers
SYSLOG Server IP IP address of the remote SYSLOG server
Address
System Warning – SMTP Setting

SMTP (Simple Mail Transfer Protocol) is a protocol for transmitting e-mails across the Internet.
Please refer to RFC 821 - Simple Mail Transfer Protocol for more information.
Label Description
E-mail Alert Enables or disables system to send out warning e-mail during
an event
SMTP Server IP Address Configures mail server IP address
Mail Subject Subject of the mail
Sender Configures the email account for send the alert
Authentication Username: authorized username
Password: authorized password
Confirm Password: re-enter password

Recipient E-mail Address The recipient's email address. Up to six recipients are
supported in a mail.
System Warning – Event Selection

SYSLOG and SMTP are the two warning methods supported by the system. Check the
corresponding box to enable the warning you want. Please note that the checkbox cannot be
checked when SYSLOG or SMTP is disabled.
Label Description
Device cold start When the device executes cold start, the system will issue a
log event.
Device warm start When the device executes warm start, the system will issue a
log event.
Authentication Failure Alerts when SNMP authentication fails
O-Ring topology change Alerts when O-Ring topology changes
Port Event Available values include: Disable, Link Up, Link Down, and
Link Up & Link Down
5.1.10 Monitor and Diag

5.1.10.1 System Event Log
If system log client is enabled, the system event log will be shown in this table.

Label Description
Page Selects LOG page
Reload Renews to show the newest event logs
Clear Clear log
5.1.10.2 MAC Address Table

A MAC address table (Filtering
Database) supports queries by the
forwarding process, as to whether a
frame received by a given port with a
given destination MAC address is to be
forwarded through a given potential
transmission port.

Label Description
Port NO. : Shows all MAC addresses mapped to a selected port in the
table
Flush MAC Table Clears all MAC addresses in the table
MAC Address Aging Time Assigns aging time; the value MUST be multiple of 15.
Auto Flush Table When When enabled, the switch will flush MAC table when port link
Ports Link Down is down.
MAC Address Auto Enables or disables MAC learning function
Learning
5.1.10.3 Port Overview
Label Description
Type Shows port speed and media type
Link Shows port link status
State Shows ports enabled or disabled
TX GOOD Packet The number of good packets sent by this port
TX Bad Packet The number of bad packets sent by this port
RX GOOD Packet The number of good packets received by this port
RX Bad Packet The number of bad packets received by this port
TX Abort Packet The number of packets aborted by this port
Packet Collision The number of times a collision detected by this port
Clear Clears all counters
5.1.10.4 Port Counters

This page shows statistic counters for the port. The Clear button will reset all counters to zero.

Label Description
The lower 32-bits of the 64-bit InGoodOctets counter. The sum of
InGoodOctetsLo lengths of all good Ethernet frames received, that is frames that
are not bad frames.
The upper 32-bits of the 64-bit InGoodOctets counter. The sum of
InGoodOctetsHi lengths of all good Ethernet frames received, that is frames that
are not bad frames.
InBadOctets The sum of lengths of all bad Ethernet frames received.
The number of frames transmitted with a invalid FCS. Whenever
a frame is modified during transmission(e.g., to add or remove a
OutFCSErr tag) the frames's original FCS is inspected before a new FCS is
added to a modified frame. If the original FCS is invalid, the new
FCS is made invalid too and this counter is incremented.
The number of good frames received that have a Unicast
InUnicasts
destination MAC address.
The total number of successfully transmitted frames that
experienced no collisions bu are delayed because the medium
Deferred
was busy during the first attempt. This counter is applicable in
half-duplex only.
The number of good frames received that have a Broadcast
InBroadcasts
The number of good frames received that have a Multicast
InMulticasts
destnation MAC address.

Total frames received (and/or transmitted) with a length of exactly

Octets64
64 octes, include those with errors.
Total frames received (and/or transmitted) with a length of
Octets127
between 65 and 127 octes in clusive, including those with error.
Octets255
Octets511
Octets1023
OctetsMax between 1024 and MaxSize octes in clusive, including those with
error.
The lower 32-bit of the 64-bit OutOctets counter. The sum of
OutOctetsLo
lengths of all Ethernet frames sent from this MAC.
The upper 32-bit of the 64-bit OutOctets counter. The sum of
OutOctetsHi
lengths of all Ethernet frames sent from this MAC.
The number of frames sent that have an Unicast destination MAC
OutUnicasts
address.
The number frames dropped in the transmit MAC because the
frame experienced 16 consecutive collisions. This counter is
Excessive
applicable in half-duplex only and only of DiscardExcessive is
one.
The number of good frames sent that have a Broadcast
OutBroadcasts
Single experienced exactly one collision. This counter is applicable in
half-duplex only.
OutPause The number of good Flow Control frames sent.
InPause The number of good Flow Control frames received.
Multiple experienced more than one collision. This counter is applicable in
half-duplex only.
Total frames received with a length of less than 64 octets but with
Undersize
a valid FCS.
Fragments Total frames received with a length of more than 64 octets and

with a invalid FCS.

Total frames received with a length of more than MaxSize octets
Oversize
but with a valid FCS.
Total frames received with a length of more than MaxSize octets
Jabber
but with an invalid FCS.
InMACRcvErr Total frames received with an RxErr signal from the PHY.
Total frames received with a CRC error not counted in Fragments,
InFCSErr
Jabber or RxErr.
The number of collision events seen by MAC not including those
Collisions conted in Single, Multiple, Excessive or Late. This counter is
applicable in half-duplex only.
The number of times a collision is detected later than 512
Late bits-times into the transmission of a frame. This counter is
applicable in half-duplex only.
5.1.10.5 Port Monitoring

Port monitoring function supports TX (egress) only, RX (ingress) only, and both TX/RX
monitoring. TX monitoring sends any data that egress out checked TX source ports to a
selected TX destination port as well. RX monitoring sends any data that ingress in checked RX
source ports out to a selected RX destination port as well as sending the frame where it
normally would have gone. Note that keep all source ports unchecked in order to disable port
monitoring.
Label Description
Destination Port The port will receive a copied frame from source port for monitoring
purpose.
Source Port The port will be monitored. Check in the boxes to configure TX or RX to
be monitored.

TX The frames sent to the switch port

RX The frames receive at the switch port
Clear Clear all marked blank (disable the function)
5.1.10.6 Traffic Monitor

The function allows you to monitor switch traffic. If traffic is too large, the switch will sent
SYSLOG events or SMTP mails.
Label Description
Monitored –Counter Selects monitor type
Time-Interval Sets interval time
Increasing – Quantity Sets alarm quantity
Event Alarm Selects alarm function (SYSLOG or SMTP)
5.1.10.7 SFP Monitor

SFP modules with DDM (Digital Diagnostic Monitoring) function can measure the temperature
of the apparatus, helping you monitor the status of connection and detect errors immediately.
You can manage and set up event alarms through DDM Web interface.

Label Description
Warning Temperature Sets warning temperature
Event Alarm Selects warning method (SYSLOG or SMTP)
5.1.10.8 Ping
This page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues.
Label Description
IP Address Enter the IP address you want to detect
Active Click to send ICMP packets
5.1.11 Save Configuration

If any configuration is changed, you should click Save to save current configuration data to the
permanent flash memory. Otherwise, the current configuration will be lost when power is off or
system is reset.
Label Description
Save Saves all configurations
5.1.12 Factory Default

Reset the switch to default configurations. Click Reset to reset all configurations to the default
value. You can select Keep current IP address setting and Keep current username &
password to keep current IP and username and password.
5.1.13 System Reboot

You can reset the stack switch on this page. After reset, the system will boot normally as if you
have powered on the devices.

Command Line Interface Management

6.1 About CLI Management
Besides Web-based management, the switch also supports CLI management. You can use
console or telnet to manage the switch by CLI.
CLI Management by RS-232 Serial Console (9600, 8, none, 1, none)

Before configuring RS-232 serial console, connect the RS-232 port of the switch to your PC
Com port using a RJ45 to DB9-F cable.
Follow the steps below to access the console via RS-232 serial cable.
Step 1. On Windows desktop, click on Start -> Programs -> Accessories ->
Communications -> Hyper Terminal

Step 2. Input a name for new connection
Step 3. Select a COM port in the drop-down list

Step 4. A pop-up window that indicates COM port properties appears, including bits per
second, data bits, parity, stop bits, and flow control.
Step 5. The console login screen will appear. Use the keyboard to enter the Username and
Password (same as the password for Web browsers), then press Enter.
CLI Management by Telnet

Users can use TELNET to configure the switches. The default value is as below:
IP Address: 192.168.10.1
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.10.254
User Name: admin
Password: admin
Follow the steps below to access the console via Telnet.

Step 1. Telnet to the IP address of the switch from the Run window by inputting commands (or
from the MS-DOS prompt) as below.
Step 2. The Login screen will appear. Use the keyboard to enter the Username and Password
(same as the password for Web browser), and then press Enter.

Commands Level
Modes Access Method Prompt Exit Method About This Model
User EXEC Begin a session switch> Enter logout or The user command
with your switch. quit. available at the level of
user is the subset of
those available at the
privileged level.
Use this mode to
• Enter menu mode.
• Display system
information.
Privileged Enter the enable switch# Enter disable to The privileged
EXEC command while in exit. command is advance
user EXEC mode mode
Privileged this mode to
• Display advance
function status
• Save configures
Global Enter the configure switch(c To exit to Use this mode to
configuration command while in onfig)# privileged configure parameters
privileged EXEC EXEC mode, that apply to your
mode enter exit or switch as a whole
end
VLAN Enter the vlan switch(v To exit to user Use this mode to
database database lan)# EXEC mode, configure
command while in enter exit. VLAN-specific
privileged parameters.
EXEC mode
Interface Enter the interface switch(c To exit to global Use this mode to
configuration command (with a onfig-if) configuration configure parameters
specific interface) # mode, for the switch and
while in global enter exit. Ethernet ports
configuration mode To exist
privileged
EXEC mode or
end.

Symbol of Command Level

Mode Symbol of Command Level
User EXEC E
Privileged EXEC P
Global configuration G
VLAN database V
Interface configuration I
6.2 Command Set List—System Command Set

Commands Level Description Example
show config E Show switch configuration switch>show config

show terminal P Show console information switch#show terminal
write memory P Save your configuration into switch#write memory
permanent memory (flash rom)
system name G Configure system name switch(config)#system
[System Name] name xxx
system location G Set switch system location string switch(config)#system
[System Location] location xxx
system description G Set switch system description switch(config)#system
[System string description xxx
Description]
system contact G Set switch system contact window switch(config)#system
[System Contact] string contact xxx
show system-info E Show system information switch>show system-info
ip address G Configure the IP address of switch switch(config)#ip address
[Ip-address] 192.168.1.1 255.255.255.0
[Subnet-mask] 192.168.1.254
[Gateway]
ip dhcp G Enable DHCP client function of switch(config)#ip dhcp
switch
show ip P Show IP information of switch switch#show ip
no ip dhcp G Disable DHCP client function of switch(config)#no ip dhcp
switch
reload G Halt and perform a cold restart switch(config)#reload
default G Restore to default Switch(config)#default

admin username G Changes a login username. switch(config)#admin

[Username] (maximum 10 words) username xxxxxx
admin password G Specifies a password switch(config)#admin
[Password] (maximum 10 words) password xxxxxx
show admin P Show administrator information switch#show admin
dhcpserver enable G Enable DHCP Server switch(config)#dhcpserver
enable
dhcpserver lowip G Configure low IP address for IP switch(config)# dhcpserver
[Low IP] pool lowip 192.168.1.1
dhcpserver highip G Configure high IP address for IP switch(config)# dhcpserver
[High IP] pool highip 192.168.1.50
dhcpserver G Configure subnet mask for DHCP switch(config)#dhcpserver
subnetmask clients subnetmask 255.255.255.0
[Subnet mask]
dhcpserver gateway G Configure gateway for DHCP switch(config)#dhcpserver
[Gateway] clients gateway 192.168.1.254
dhcpserver dnsip G Configure DNS IP for DHCP clients switch(config)# dhcpserver
[DNS IP] dnsip 192.168.1.1
dhcpserver G Configure lease time (in hour) switch(config)#dhcpserver
leasetime leasetime 1
[Hours]
dhcpserver I Set static IP for DHCP clients by switch(config)#interface
ipbinding port fastEthernet 2
[IP address] switch(config-if)#dhcpserver
ipbinding 192.168.1.1
show dhcpserver P Show configuration of DHCP server switch#show dhcpserver
configuration configuration
show dhcpserver P Show client entries of DHCP server switch#show dhcpserver
clients clinets
show dhcpserver P Show IP-Binding information of switch#show dhcpserver
ip-binding DHCP server ip-binding
no dhcpserver G Disable DHCP server function switch(config)#no
dhcpserver
security enable G Enable IP security function switch(config)#security
enable
security http G Enable IP security of HTTP server switch(config)#security http

security telnet G Enable IP security of telnet server switch(config)#security

telnet
security ip G Set the IP security list switch(config)#security ip 1
[Index(1..10)] [IP 192.168.1.55
Address]
show security P Show the information of IP security switch#show security
no security G Disable IP security function switch(config)#no security
no security http G Disable IP security of HTTP server switch(config)#no security

http
no security telnet G Disable IP security of telnet server switch(config)#no security
telnet
6.3 Command Set List—Port Command Set

interface G Choose the port for modification. switch(config)#interface
fastEthernet fastEthernet 2
[Portid]
duplex I Use the duplex configuration switch(config)#interface
[full | half] command to specify the duplex fastEthernet 2
mode of operation for Fast switch(config-if)#duplex full
Ethernet.
speed I Use the speed configuration switch(config)#interface
[10|100|1000|auto] command to specify the speed fastEthernet 2
mode of operation for Fast switch(config-if)#speed 100
Ethernet., the speed can’t be set to
1000 if the port isn’t a giga port..
flowcontrol mode I Use the flowcontrol configuration switch(config)#interface
[Symmetric|Asymm command on Ethernet ports to fastEthernet 2
etric] control traffic rates during switch(config-if)#flowcontrol
congestion. mode Asymmetric
no flowcontrol I Disable flow control of interface switch(config-if)#no
flowcontrol
security enable I Enable security of interface switch(config)#interface
fastEthernet 2
switch(config-if)#security

enable
no security I Disable security of interface switch(config)#interface

fastEthernet 2
switch(config-if)#no security
bandwidth type all I Set interface ingress limit frame switch(config)#interface
type to “accept all frame” fastEthernet 2
switch(config-if)#bandwidth
type all
bandwidth type I Set interface ingress limit frame switch(config)#interface
broadcast-multicast type to “accept broadcast, fastEthernet 2
-flooded-unicast multicast, and flooded unicast switch(config-if)#bandwidth
frame” type
broadcast-multicast-flooded
-unicast
broadcast-multicast type to “accept broadcast and fastEthernet 2
multicast frame” switch(config-if)#bandwidth
type broadcast-multicast
broadcast-only type to “only accept broadcast fastEthernet 2
frame” switch(config-if)#bandwidth
type broadcast-only
bandwidth in I Set interface input bandwidth. Rate switch(config)#interface
[Value] Range is from 100 kbps to 102400 fastEthernet 2
kbps or to 256000 kbps for giga switch(config-if)#bandwidth
ports, in 100
and zero means no limit.
bandwidth out I Set interface output bandwidth. switch(config)#interface
[Value] Rate Range is from 100 kbps to fastEthernet 2
102400 kbps or to 256000 kbps for switch(config-if)#bandwidth
giga ports, out 100
and zero means no limit.
show bandwidth I Show interfaces bandwidth control switch(config)#interface
fastEthernet 2
switch(config-if)#show
bandwidth

state I Use the state interface switch(config)#interface

[Enable | Disable] configuration command to specify fastEthernet 2
the state mode of operation for switch(config-if)#state
Ethernet ports. Use the disable Disable
form of this command to disable the
port.
show interface I show interface configuration status switch(config)#interface

configuration fastEthernet 2
interface configuration
show interface I show interface actual status switch(config)#interface
status fastEthernet 2
interface status
show interface I show interface statistic counter switch(config)#interface
accounting fastEthernet 2
interface
accounting
no accounting I Clear interface accounting switch(config)#interface
information fastEthernet 2
switch(config-if)#no
accounting
6.4 Command Set List—Trunk Command Set

aggregator priority G Set port group system priority switch(config)#aggregator
[1to65535] priority 22
aggregator G Set activity port switch(config)#aggregator
activityport activityport 2
[Port Numbers]
aggregator group G Assign a trunk group with LACP switch(config)#aggregator
[GroupID] [Port-list] active. group 1 1-4 lacp workp 2
lacp [GroupID] :1to3 or

workp [Port-list]:Member port list, This switch(config)#aggregator

[Workport] parameter could be a port group 2 1,4,3 lacp workp 3
range(ex.1-4) or a port list separate
by a comma(ex.2, 3, 6)
[Workport]: The amount of work
ports, this value could not be less
than zero or be large than the
amount of member ports.
aggregator group G Assign a static trunk group. switch(config)#aggregator
[GroupID] [Port-list] [GroupID] :1to3 group 1 2-4 nolacp
nolacp [Port-list]:Member port list, This or
parameter could be a port switch(config)#aggreator
range(ex.1-4) or a port list separate group 1 3,1,2 nolacp
by a comma(ex.2, 3, 6)
show aggregator P Show the information of trunk group switch#show aggregator
no aggregator lacp G Disable the LACP function of trunk switch(config)#no aggreator

[GroupID] group lacp 1
no aggregator G Remove a trunk group switch(config)#no aggreator
group group 2
[GroupID]
6.5 Command Set List—VLAN Command Set

vlan database P Enter VLAN configure mode switch#vlan database
vlan V To set switch VLAN mode. switch(vlan)# vlanmode
[8021q | gvrp] 802.1q
or
switch(vlan)# vlanmode gvrp
no vlan V Disable vlan group(by VID) switch(vlan)#no vlan 2
[VID]
no gvrp V Disable GVRP switch(vlan)#no gvrp
IEEE 802.1Q VLAN
vlan 8021q port V Assign a access link for VLAN by switch(vlan)#vlan 802.1q
[PortNumber] port, if the port belong to a trunk port 3 access-link untag 33
access-link untag group, this command can’t be

[UntaggedVID] applied.
vlan 8021q port V Assign a trunk link for VLAN by switch(vlan)#vlan 8021q
[PortNumber] port, if the port belong to a trunk port 3 trunk-link tag 2,3,6,99
trunk-link tag group, this command can’t be or
[TaggedVID List] applied. switch(vlan)#vlan 8021q
port 3 trunk-link tag 3-20
vlan 8021q port V Assign a hybrid link for VLAN by switch(vlan)# vlan 8021q
[PortNumber] port, if the port belong to a trunk port 3 hybrid-link untag 4 tag
hybrid-link untag group, this command can’t be 3,6,8
[UntaggedVID] applied. or
tag switch(vlan)# vlan 8021q
[TaggedVID List] port 3 hybrid-link untag 5 tag
6-8
vlan 8021q V Assign a access link for VLAN by switch(vlan)#vlan 8021q
aggreator trunk group aggreator 3 access-link
[TrunkID] untag 33
access-link untag
[UntaggedVID]
vlan 8021q V Assign a trunk link for VLAN by switch(vlan)#vlan 8021q
aggreator trunk group aggreator 3 trunk-link tag
[TrunkID] 2,3,6,99
trunk-link tag or
[TaggedVID List] switch(vlan)#vlan 8021q
aggreator 3 trunk-link tag
3-20
vlan 8021q V Assign a hybrid link for VLAN by switch(vlan)# vlan 8021q
aggreator trunk group aggreator 3 hybrid-link untag
[PortNumber] 4 tag 3,6,8
hybrid-link untag or
[UntaggedVID] switch(vlan)# vlan 8021q
tag aggreator 3 hybrid-link untag
[TaggedVID List] 5 tag 6-8
show vlan [VID] V Show VLAN information switch(vlan)#show vlan 23
or
show vlan

6.6 Command Set List—Spanning Tree Command Set

spanning-tree G Enable spanning tree switch(config)#spanning-tre
enable e enable
spanning-tree G Configure spanning tree priority switch(config)#spanning-tre
priority [0to61440] parameter e priority 32767
spanning-tree G Use the spanning-tree max-age switch(config)#
max-age [seconds] global configuration command to spanning-tree max-age 15
change the interval between
messages the spanning tree
receives from the root switch. If a
switch does not receive a bridge
protocol data unit (BPDU) message
from the root switch within this
interval, it recomputed the
Spanning Tree Protocol (STP)
topology.
spanning-tree G Use the spanning-tree hello-time switch(config)#spanning-tre
hello-time [seconds] global configuration command to e hello-time 3
specify the interval between hello
bridge protocol data units (BPDUs).
spanning-tree G Use the spanning-tree forward-time switch(config)#

forward-time global configuration command to spanning-tree forward-time
[seconds] set the forwarding-time for the 20
specified spanning-tree instances.
The forwarding time determines
how long each of the listening and
learning states last before the port
begins forwarding.
stp-path-cost I Use the spanning-tree cost switch(config)#interface
[1to200000000] interface configuration command to fastEthernet 2
set the path cost for Spanning Tree switch(config-if)#stp-path-co
Protocol (STP) calculations. In the st 20
event of a loop, spanning tree
considers the path cost when
selecting an interface to place into

the forwarding state.

stp-path-priority I Use the spanning-tree port-priority switch(config)#interface
[Port Priority] interface configuration command to fastEthernet 2
configure a port priority that switch(config-if)#
is used when two switches tie for stp-path-priority 127
position as the root switch.
stp-admin-p2p I Admin P2P of STP priority on this switch(config)#interface
[Auto|True|False] interface. fastEthernet 2
switch(config-if)#
stp-admin-p2p Auto
stp-admin-edge I Admin Edge of STP priority on this switch(config)#interface
[True|False] interface. fastEthernet 2
switch(config-if)#
stp-admin-edge True
stp-admin-non-stp I Admin NonSTP of STP priority on switch(config)#interface
[True|False] this interface. fastEthernet 2
switch(config-if)#
stp-admin-non-stp False
Show spanning-tree E Display a summary of the switch>show spanning-tree
spanning-tree states.
no spanning-tree G Disable spanning-tree. switch(config)#no
spanning-tree
6.7 Command Set List—QoS Command Set

qos policy G Select QOS policy scheduling switch(config)#qos policy
[weighted-fair|strict] weighted-fair
qos prioritytype G Setting of QOS priority type switch(config)#qos
[port-based|cos-onl prioritytype
y|tos-only|cos-first|t
os-first]
qos priority G Configure Port-based Priority switch(config)#qos priority
portbased portbased 1 low
[Port]
[lowest|low|middle|

high]
qos priority cos G Configure COS Priority switch(config)#qos priority

[Priority][lowest|low cos 22 middle
|middle|high]
qos priority tos G Configure TOS Priority switch(config)#qos priority
[Priority][lowest|low tos 3 high
|middle|high]
show qos P Display the information of QoS switch>show qos
configuration
no qos G Disable QoS function switch(config)#no qos
6.8 Command Set List—IGMP Command Set

igmp enable G Enable IGMP snooping function switch(config)#igmp enable
Igmp-query auto G Set IGMP query to auto mode switch(config)#Igmp-query
auto
Igmp-query force G Set IGMP query to force mode switch(config)#Igmp-query
force
show igmp P Displays the details of an IGMP switch#show igmp
configuration configuration. configuration
show igmp multi P Displays the details of an IGMP switch#show igmp multi
snooping entries.
no igmp G Disable IGMP snooping function switch(config)#no igmp
no igmp-query G Disable IGMP query switch#no igmp-query
6.9 Command Set List—MAC/Filter Table Command Set

mac-address-table I Configure MAC address table of switch(config)#interface
static hwaddr interface (static). fastEthernet 2
[MAC] switch(config-if)#mac-addre
ss-table static hwaddr
000012345678
mac-address-table G Configure MAC address table(filter) switch(config)#mac-address
filter hwaddr -table filter hwaddr

[MAC] 000012348678
show P Show all MAC address table switch#show
mac-address-table mac-address-table
show P Show static MAC address table switch#show
mac-address-table mac-address-table static
static
show P Show filter MAC address table. switch#show
mac-address-table mac-address-table filter
filter
no I Remove an entry of MAC address switch(config)#interface
mac-address-table table of interface (static) fastEthernet 2
static hwaddr switch(config-if)#no
[MAC] mac-address-table static
hwaddr 000012345678
no G Remove an entry of MAC address switch(config)#no
mac-address-table table (filter) mac-address-table filter
filter hwaddr hwaddr 000012348678
[MAC]
no G Remove dynamic entry of MAC switch(config)#no
mac-address-table address table mac-address-table
6.10 Command Set List—SNMP Command Set

snmp agent-mode G Select the agent mode of SNMP switch(config)#snmp
[v1v2c | v3] agent-mode v1v2c
snmp-server host G Configure SNMP server host switch(config)#snmp-server
[IP address] information and community string host 192.168.10.50
community community public
[Community-string] trap-version v1
trap-version (remove)
[v1|v2c] Switch(config)#
no snmp-server host
192.168.10.50
snmp G Configure the community string switch(config)#snmp
community-strings right community-strings public

[Community-string] right RO
right or
[RO|RW] switch(config)#snmp
community-strings public
right RW
snmp snmpv3-user G Configure the userprofile for switch(config)#snmp
[User Name] SNMPV3 agent. Privacy password snmpv3-user test01
password could be empty. password AuthPW PrivPW
[Authentication
Password] [Privacy
Password]
show snmp P Show SNMP configuration switch#show snmp
show snmp-server P Show specified trap server switch#show snmp-server
information
no snmp G Remove the specified community. switch(config)#no snmp
community-strings community-strings public
[Community]
no snmp G Remove specified user of SNMPv3 switch(config)# no snmp
snmpv3-user agent. Privacy password could be snmpv3-user test01
[User Name] empty. password AuthPW PrivPW
password
[Authentication
Password] [Privacy
Password]
no snmp-server G Remove the SNMP server host. switch(config)#no
host snmp-server 192.168.10.50
[Host-address]
6.11 Command Set List—Port Mirroring Command Set

monitor rx G Set RX destination port of monitor switch(config)#monitor rx
function
monitor tx G Set TX destination port of monitor switch(config)#monitor tx
function
show monitor P Show port monitor information switch#show monitor

monitor I Configure source port of monitor switch(config)#interface

[RX|TX|Both] function fastEthernet 2
switch(config-if)#monitor RX
show monitor I Show port monitor information switch(config)#interface
fastEthernet 2
monitor
no monitor I Disable source port of monitor switch(config)#interface
function fastEthernet 2
switch(config-if)#no monitor
6.12 Command Set List—802.1x Command Set

8021x enable G Use the 802.1x global configuration switch(config)# 8021x
command to enable 802.1x enable
protocols.
8021x system G Use the 802.1x system radious IP switch(config)# 8021x
radiousip global configuration command to system radiousip
[IP address] change the radious server IP. 192.168.1.1
8021x system G Use the 802.1x system server port switch(config)# 8021x
serverport global configuration command to system serverport 1815
[port ID] change the radious server port
8021x system G Use the 802.1x system account switch(config)# 8021x

accountport port global configuration command system accountport 1816
[port ID] to change the accounting port
8021x system G Use the 802.1x system share key switch(config)# 8021x
sharekey global configuration command to system sharekey 123456
[ID] change the shared key value.
8021x system nasid G Use the 802.1x system nasid global switch(config)# 8021x
[words] configuration command to change system nasid test1
the NAS ID

8021x misc G Use the 802.1x misc quiet period switch(config)# 8021x misc
quietperiod global configuration command to quietperiod 10
[sec.] specify the quiet period value of the
switch.
8021x misc txperiod G Use the 802.1x misc TX period switch(config)# 8021x misc
[sec.] global configuration command to txperiod 5
set the TX period.
8021x misc G Use the 802.1x misc supp timeout switch(config)# 8021x misc
supportimeout global configuration command to supportimeout 20
[sec.] set the supplicant timeout.
8021x misc G Use the 802.1x misc server timeout switch(config)#8021x misc
servertimeout [sec.] global configuration command to servertimeout 20
set the server timeout.
8021x misc G Use the 802.1x misc max request switch(config)# 8021x misc
maxrequest global configuration command to maxrequest 3
[number] set the MAX requests.
8021x misc G Use the 802.1x misc reauth period switch(config)# 8021x misc
reauthperiod [sec.] global configuration command to reauthperiod 3000
set the reauth period.
8021x portstate I Use the 802.1x port state interface switch(config)#interface

[disable | reject | configuration command to set the fastethernet 3
accept | authorize] state of the selected port. switch(config-if)#8021x
portstate accept
show 8021x E Display a summary of the 802.1x switch>show 8021x
properties and also the port sates.
no 8021x G Disable 802.1x function switch(config)#no 8021x
6.13 Command Set List—TFTP Command Set

Commands Level Description Defaults Example
backup G Save configuration to TFTP and switch(config)#backup

flash:backup_cfg need to specify the IP of TFTP flash:backup_cfg

server and the file name of image.
restore G Get configuration from TFTP server switch(config)#restore
flash:restore_cfg and need to specify the IP of TFTP flash:restore_cfg
upgrade G Upgrade firmware by TFTP and switch(config)#upgrade
flash:upgrade_fw need to specify the IP of TFTP lash:upgrade_fw
6.14 Command Set List—SYSLOG, SMTP, EVENT Command

Set
systemlog ip G Set System log server IP address. switch(config)# systemlog ip
[IP address] 192.168.1.100
systemlog mode G Specified the log mode switch(config)# systemlog

[client|server|both] mode both
show systemlog E Display system log. Switch>show systemlog

show systemlog P Show system log client & server switch#show systemlog
information
no systemlog G Disable systemlog functon switch(config)#no systemlog
smtp enable G Enable SMTP function switch(config)#smtp enable
smtp serverip G Configure SMTP server IP switch(config)#smtp
[IP address] serverip 192.168.1.5
smtp authentication G Enable SMTP authentication switch(config)#smtp
authentication
smtp account G Configure authentication account switch(config)#smtp
[account] account User
smtp password G Configure authentication password switch(config)#smtp
[password] password
smtp rcptemail G Configure Rcpt e-mail Address switch(config)#smtp
[Index] [Email rcptemail 1 [email protected]
address]
show smtp P Show the information of SMTP switch#show smtp
no smtp G Disable SMTP function switch(config)#no smtp
event G Set cold start event type switch(config)#event

device-cold-start device-cold-start both

[Systemlog|SMTP|B
oth]
event G Set Authentication failure event switch(config)#event
authentication-failur type authentication-failure both
e
[Systemlog|SMTP|B
oth]
event G Set s ring topology changed event switch(config)#event
O-Ring-topology-ch type ring-topology-change both
ange
[Systemlog|SMTP|B
oth]
event systemlog I Set port event for system log switch(config)#interface
[Link-UP|Link-Down| fastethernet 3
Both] switch(config-if)#event
systemlog both
event smtp I Set port event for SMTP switch(config)#interface
[Link-UP|Link-Down| fastethernet 3
Both] switch(config-if)#event smtp
both
show event P Show event selection switch#show event
no event G Disable cold start event type switch(config)#no event
device-cold-start device-cold-start
no event G Disable Authentication failure event switch(config)#no event
authentication-failur typ authentication-failure
e
no event G Disable O-Ring topology changed switch(config)#no event
O-Ring-topology-ch event type ring-topology-change
ange
no event systemlog I Disable port event for system log switch(config)#interface
fastethernet 3
switch(config-if)#no event
systemlog
no event smpt I Disable port event for SMTP switch(config)#interface
fastethernet 3

switch(config-if)#no event
smtp
show systemlog P Show system log client & server switch#show systemlog
information
6.15 Command Set List—SNTP Command Set

sntp enable G Enable SNTP function switch(config)#sntp enable
sntp daylight G Enable daylight saving time, if switch(config)#sntp daylight

SNTP function is inactive, this
command can’t be applied.
sntp daylight-period G Set period of daylight saving time, if switch(config)# sntp
[Start time] [End SNTP function is inactive, this daylight-period
time] command can’t be applied. 20060101-01:01
Parameter format: 20060202-01-01
[yyyymmdd-hh:mm]
sntp daylight-offset G Set offset of daylight saving time, if switch(config)#sntp
[Minute] SNTP function is inactive, this daylight-offset 3
command can’t be applied.
sntp ip G Set SNTP server IP, if SNTP switch(config)#sntp ip
[IP] function is inactive, this command 192.169.1.1
can’t be applied.
sntp timezone G Set timezone index, use “show sntp switch(config)#sntp
[Timezone] timzezone” command to get more timezone 22
information of index number
show sntp P Show SNTP information switch#show sntp
show sntp timezone P Show index number of time zone switch#show sntp timezone
list
no sntp G Disable SNTP function switch(config)#no sntp
no sntp daylight G Disable daylight saving time switch(config)#no sntp
daylight

6.16 Command Set List—O-Ring Command Set

Ring enable G Enable O-Ring switch(config)# ring enable
Ring master G Enable ring master switch(config)# ring master
Ring couplering G Enable couple ring switch(config)# ring
couplering
Ring dualhoming G Enable dual homing switch(config)# ring
dualhoming
Ring ringport G Configure 1st/2nd Ring Port switch(config)# ring ringport
[1st Ring Port] [2nd 78
Ring Port]
Ring couplingport G Configure Coupling Port switch(config)# ring
[Coupling Port] couplingport 1
Ring controlport G Configure Control Port switch(config)# ring
[Control Port] controlport 2
Ring homingport G Configure Dual Homing Port switch(config)# ring
[Dual Homing Port] homingport 3
show Ring P Show the information of O-Ring switch#show ring
no Ring G Disable O-Ring switch(config)#no ring
no Ring master G Disable ring master switch(config)# no ring
master
no Ring couplering G Disable couple ring switch(config)# no ring
couplering
no Ring dualhoming G Disable dual homing switch(config)# no ring
dualhoming

Technical Specifications
ORing Switch Model IES-3082GC
Physical Ports
10/100 Base-T(X) Ports in RJ45

8
Auto MDI/MDIX
Gigabit Combo Ports with
10/100/1000Base-T(X) and 2
100/1000Base-X SFP port
Technology
IEEE 802.3 for 10Base-T
IEEE 802.3u for 100Base-TX and 100Base-FX
IEEE 802.3z for 1000Base-X
IEEE 802.3ab for 1000Base-T
IEEE 802.3x for Flow control
IEEE 802.3ad for LACP (Link Aggregation Control Protocol )
Ethernet Standards IEEE 802.1D for STP (Spanning Tree Protocol)
IEEE 802.1p for COS (Class of Service)
IEEE 802.1Q for VLAN Tagging
IEEE 802.1w for RSTP (Rapid Spanning Tree Protocol)
IEEE 802.1s for MSTP (Multiple Spanning Tree Protocol)
IEEE 802.1x for Authentication
IEEE 802.1AB for LLDP (Link Layer Discovery Protocol)
MAC Table 8192 MAC addresses
Priority Queues 4
Processing Store-and-Forward
Switching latency: 7 us
Switching bandwidth: 5.6Gbps
Switch Properties Max. Number of Available VLANs: 4096
IGMP multicast groups: 1024
Port rate limiting: User Define
Enable/disable ports, MAC based port security
Port based network access control (802.1x)
VLAN (802.1Q ) to segregate and secure network traffic
Security Features
Supports Q-in-Q VLAN for performance & security to expand the VLAN space
Radius centralized password management
SNMP v1/v2c/v3 encrypted authentication and access security
STP/RSTP/MSTP (IEEE 802.1D/w/s)
Redundant Ring (O-Ring) with recovery time less than 10ms over 250 units
TOS/Diffserv supported
Quality of Service (802.1p) for real-time traffic
VLAN (802.1Q) with VLAN tagging and GVRP supported
IGMP Snooping for multicast filtering
Software Features Port configuration, status, statistics, monitoring, security
SNTP for synchronizing of clocks over network
Support PTP Client (Precision Time Protocol) clock synchronization
DHCP Server / Client support
Port Trunk support
MVR (Multicast VLAN Registration) support
Modbus TCP
O-Ring
Open-Ring
Network Redundancy O-Chain
MRP
STP/RSTP/MSTP
Relay output for fault event alarming
Warning / Monitoring System Syslog server / client to record and view events
Include SMTP for event warning notification via email
Event selection support

DDM Function Voltage / Current / Temperature
RS-232 Serial Console Port RS-232 in RJ45 connector with console cable. 9600bps, 8, N, 1
LED indicators
Power Green : Power LED x 3
O-Ring Indicator Green : Indicate system operated in O-Ring mode
R.M. indicator Green : Indicate system operated in O-Ring Master mode
Fault indicator Amber : Indicate unexpected event occurred
10/100Base-T(X) RJ45 Port Indicator Green for port Link/Act. Amber for Duplex/Collision
10/100/1000Base-T(X) RJ45 Port

Green for Link/Act. Amber for 100Mbps indicator
Indicator
100/1000Base-X Fiber Port Indicator Green for port Link/Act.
Fault contact
Relay Relay output to carry capacity of 1A at 24VDC
Power
Redundant Input Power Dual DC inputs. 12~48VDC on 6-pin screw type terminal block
Overload Current Protection Present
Reverse polarity protection Present
Physical Characteristic
Enclosure IP-30
Dimension (W x D x H) 74.3(W) x 109.2(D) x 153.6(H)mm (2.93 x 4.30 x 6.05 inches)
Environmental
Storage Temperature -40 to 85oC (-40 to 185oF)
Operating Temperature -40 to 70oC (-40 to 158oF)
Operating Humidity 5% to 95% Non-condensing
Regulatory approvals
EMI FCC Part 15, CISPR (EN55022) class A, EN50155 (EN50121-3-2, EN55011, EN50121-4)
EN61000-4-2 (ESD), EN61000-4-3 (RS), EN61000-4-4 (EFT), EN61000-4-5 (Surge), EN61000-4-6 (CS),
EMS
EN61000-4-8, EN61000-4-11
Shock IEC60068-2-27
Free Fall IEC60068-2-32
Vibration IEC60068-2-6
Safety EN60950-1
Warranty 5 years

O-Ring IES-3082GC-manual-V1-0930

Uploaded by

Copyright:

Available Formats

O-Ring IES-3082GC-manual-V1-0930

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

O-Ring IES-3082GC-manual-V1-0930

Uploaded by

Copyright:

Available Formats

IES-3082GC

Industrial Managed Ethernet Switch

ORing Industrial Networking Corp. www.oring-networking.com0

is a registered trademark of ORing Industrial Networking Corp.

REGULATORY COMPLIANCE STATEMENT

ORing Industrial Networking Corp. 1

Hardware Installation ..................................................................................... 8

Hardware Overview ...................................................................................... 11

WEB Management ........................................................................................ 17

5.1.1.1 MRP ...................................................................................................... 27

ORing Industrial Networking Corp. 3

5.1.8.1 Management Security ............................................................................ 59

Command Line Interface Management ...................................................... 77

ORing Industrial Networking Corp. 4

Getting to Know Your Switch

1.2 Software Features

ORing Industrial Networking Corp. 5

ORing Industrial Networking Corp. 7

Din-rail Kit Measurement

ORing Industrial Networking Corp. 8

2.2 Wall Mounting

Wall-Mount Kit Measurement

To mount the switch onto the wall, follow the steps:

ORing Industrial Networking Corp. 9

ORing Industrial Networking Corp. 10

Gigabit RJ-45 ports 2x 10/100/1000Base-T(X) Gigabit ports (in combo ports)

1. LED for PWR.

ORing Industrial Networking Corp. 11

3.2 Front Panel LEDs

PW1 Green On DC power module 1 activated.

3.3 Top Panel

ORing Industrial Networking Corp. 12

3.4 Rear Panel

ORing Industrial Networking Corp. 13

Cable Types and Specifications

Cable Type Max. Length Connector

10BASE-T Cat.3, 4, 5 100-ohm UTP 100 m (328 ft) RJ-45

4.1.1 100BASE-TX/10BASE-T Pin Assignments

10/100 Base-T RJ-45 Pin Assignments:

ORing Industrial Networking Corp. 14

10/100 Base-T MDI/MDI-X Pin Assignments:

Pin Number MDI port MDI-X port

1000 Base-T MDI/MDI-X Pin Assignments:

Pin Number MDI port MDI-X port

ORing Industrial Networking Corp. 15

4.3 Console Cable

ORing Industrial Networking Corp. 16

5.1 Configuration by Web Browser

5.1.1 About Web-based Management

browser setting in order to enable Java Applets to use network ports.

Preparing for Web Management

ORing Industrial Networking Corp. 17

1. A login screen appears.

ORing Industrial Networking Corp. 18

5.1.3 Front Panel Configuration

ORing Industrial Networking Corp. 19

5.1.4 Basic Setting

5.1.4.1 Switch Setting

5.1.4.2 Admin Password