Product information | Comnet CNGE3FE7MS4 System information

INSTALLATION AND OPERATION MANUAL

CNGE3FE7MS4

ELECTRICAL SUBSTATION-RATED

MANAGED ETHERNET SWITCH WITH (7) 10/100T(X)

+ (3) CONFIGURABLE 10/100/1000T(X)/100/1000FX PORTS

The ComNet ™ CNGE3FE7MS4 is a substation-rated and industrially hardened fully managed layer 2 gigabit Ethernet switch. Fully compliant with the requirements of IEC

61850-3, IEEE 1613 Class 2, UL 508 Class 1/ Division 2 (Groups A, B, C, & D for hazardous environments), EN50155, and NEMA TS-1/ TS-2, it is designed for deployment in environments where high levels of electromagnetic noise and interference

(EMI) and severe voltage transients and surges are routinely encountered, such as electrical utility substations and switchyards, heavy manufacturing facilities, trackside and roadside electronic equipment, and other difficult out-of-plant applications.

Providing (7) 10/100 BASE-TX ports, the (3) 10/100/1000TX or 100/1000BASE-FX user-configurable combo gigabit uplink ports support conventional CAT-5e/CAT-6 copper or optical transmission media by selection of the appropriate ComNet SFP module. Featuring an internal/self-contained 85-264 VAC/88-373 VDC power supply, the CNGE3FE7MS4 is DIN-rail or wall-mountable, and is ideal for mission-critical applications where very high levels of reliability and network availability are of the utmost importance. Utilizing exclusive ComNet C-Ring technology, the fastest recovery redundant ring available, network recovery time of <10 ms is provided for protection from network faults or temporary interruptions. ComChain permits additional redundant network rings of different redundancy protocols to function together as a larger and more robust network topology. eConsole, a Windows-based utility, is included for centralized/remote management and configuration of all functions of the CNGE3FE7MS4.

Rev. 4.30.14


Contents

Regulatory Compliance Statement 6

Warranty 6

Disclaimer 6

Safety Information 6

Overview 7

Introduction 7

Software Features 8

Hardware Features

Safety Indications

9

9

Hardware Installation

Installing Switch on DIN-Rail

Mount Series on DIN-Rail

Wall Mounting Installation

Mounting the CNGE3FE7MS4 on a Wall

10

10

11

12

12

Hardware Overview

Front Panel

13

13

Front Panel LEDs 15

Wiring 16

Grounding 16

Fault Relay

Redundant Power Inputs

Rear Panel

16

16

17

Cables 18

Ethernet Cables 18

100BASE-T(X) Pin Assignments 18

SFP 20

Console Port Cable 20

WEB Management

Configuration by Web Browser

About Web-based Management

22

22

22

CNGE3FE7MS4

TECH SUPPORT: 1.888.678.9427

INS_CNGE3FE7MS4_REV– Rev. 4.30.14 PAGE 2

INSTALLATION AND OPERATION MANUAL CNGE3FE7MS4

TECH SUPPORT: 1.888.678.9427

Preparing for Web Management

System Login

Main Interface

System Information

System Information

Enable Location Alert

Basic setting

Switch Setting

Admin & Password

IP Setting

Time Setting

26

27

PTP Client 29

LLDP 29

Auto Provision

Backup & Restore

Upgrade Firmware

30

31

31

24

25

25

25

23

23

24

24

24

Redundancy 32

DHCP Server 32

DHCP Server – Setting

DHCP Server – Client List

32

33

DHCP Server – Port and IP bindings

DHCP Server –DHCP Relay Agent

33

34

Port Setting

Port Control

35

35

Port Status

Rate Limit

Port Trunk

Port Trunk – Setting

Port Trunk – Status

C-Ring 38

Legacy Ring 40

COM-Ring 41

C-RSTP 42

36

36

37

37

38



RSTP 43

RSTP setting 43

MSTP 46

Multicast 50

Static Multicast Filtering 51

VLAN 52

VLAN Setting - IEEE 802.1Q

VLAN Setting – Port Based

52

54

SNMP 56

SNMP – Agent Setting

SNMPV3

SNMP –Trap Setting

Traffic Prioritization

56

57

58

59

QoS policy

Port-base priority

59

60

COS/802.1p 61

TOS/DSCP 62

Security 63

Management Security 63

Static MAC Forwarding 64

MAC Blacklist 65

802.1x 66

802.1x - Radius Server

802.1x-Port Authorized Mode

66

68


TACACS+

69

69

Warning 70

Monitor and Diag 73

MAC Address Table 73

Port Overview

Port Monitoring

SFP Monitor

74

75

76

CNGE3FE7MS4

TECH SUPPORT: 1.888.678.9427



System Event Log

Save Configuration

Factory Default

System Reboot

Command Line Interface Management

About CLI Management

CLI Management by Telnet

Commands Level

Symbol of Command Level

Commands Set List—System Commands Set

Commands Set List—Port Commands Set

Commands Set List—Trunk command set

Commands Set List—VLAN command set

Commands Set List—Spanning Tree command set

Commands Set List—QoS command set

Commands Set List—IGMP command set

Commands Set List—MAC/Filter Table command set

Commands Set List—SNMP command set

Commands Set List—Port Mirroring command set

Commands Set List—802.1x command set

Commands Set List—TFTP command set

95

96

Commands Set List—SYSLOG, SMTP, EVENT command set 96

Commands Set List—SNTP command set

Commands Set List — C-Ring command set

92

93

94

98

99

87

88

89

83

83

85

90

91

78

78

81

82

Technical Specifications 100

76

77

77

77

CNGE3FE7MS4

TECH SUPPORT: 1.888.678.9427



Regulatory Compliance Statement

Product(s) associated with this publication complies/comply with all applicable regulations. Please refer to the Technical Specifications section for more details.

Warranty

ComNet warrants that all ComNet products are free from defects in material and workmanship for a specified warranty period from the invoice date for the life of the installation. ComNet will repair or replace products found by ComNet to be defective within this warranty period, with shipment expenses apportioned by ComNet and the distributor. This warranty does not cover product modifications or repairs done by persons other than ComNet-approved personnel, and this warranty does not apply to ComNet products that are misused, abused, improperly installed, or damaged by accidents.

Please refer to the Technical Specifications section for the actual warranty period(s) of the product(s) associated with this publication.

Disclaimer

Information in this publication is intended to be accurate. ComNet shall not be responsible for its use or infringements on third-parties as a result of its use. There may occasionally be unintentional errors on this publication. ComNet reserves the right to revise the contents of this publication without notice.

Safety Information

» Only ComNet service personnel can service the equipment. Please contact ComNet Technical

Support.

» The equipment should be installed in locations with controlled access, or other means of security, and controlled by persons of authority.

TECH SUPPORT: 1.888.678.9427



Overview

Introduction

The CNGE3FE7MS4 is a powerful managed industrial Ethernet switch containing many unique features. These switches can work under a wide temperature range, dusty environment and humid condition.

WEB-based, TELNET, Console port or other third-party SNMP software can manage the

CNGE3FE7MS4 as well. The switch can be managed by a useful utility called eConsole. eConsole is powerful network management software. With its user-friendly and powerful interface, multiple switches can be easily configured at the same time, and switches’ statuses monitored.

TECH SUPPORT: 1.888.678.9427



Software Features

» World’s fastest Redundant Ethernet Ring: C-Ring (Recovery time <10ms over 250 units connection)

» Supports Ring Coupling, Dual Homing over C-Ring

» Supports SNMPv1/v2/v3 & RMON & Port base/802.1Q VLAN Network Management

» Event notification by Email, SNMP trap and Relay Output

» Web-based, Telnet, Console, CLI configuration

» Enable/disable ports, MAC based port security

» Port based network access control (802.1x)

» VLAN (802.1Q) to segregate and secure network traffic

» Radius centralized password management

» SNMPv3 encrypted authentication and access security

» RSTP (802.1w)

» Quality of Service (802.1p) for real-time traffic

» VLAN (802.1Q) with double tagging and GVRP supported

» IGMP Snooping for multicast filtering

» Port configuration, status, statistics, mirroring, security

» Remote Monitoring (RMON)

TECH SUPPORT: 1.888.678.9427



Hardware Features

» Two Redundant power inputs (85 to 264 VAC / 88 to 373 VDC)

» Wide Operating Temperature Range: -40 to +85ºC

» Storage Temperature Range: -40 to +85ºC

» Operating Humidity: 5% to 95%, non-condensing

» Casing: Aluminum

» 10/100BASE-T(X) Ethernet port

» 10/100/1000BASE-T(X) Gigabit Ethernet port (combo)

» 100/1000BASE-X on SFP port (combo)

» Console Port

» Dimensions (W × D × H): 96.4 × 148.5 × 154 mm

CNGE3FE7MS4

Safety Indications

Only ComNet service personnel can service the equipment. Please contact ComNet Technical

Support if your unit requires service.

The equipment should be installed in locations with controlled access, or other means of security, and controlled by persons of authority.

TECH SUPPORT: 1.888.678.9427



Hardware Installation

Installing Switch on DIN-Rail

CNGE3FE7MS4

Metal Spring

Each switch has a Din-Rail kit on the rear panel. The DIN-Rail kit affixes the switch to the DIN-Rail.

It is easy to install the switch on the Din-Rail:

TECH SUPPORT: 1.888.678.9427



Mount Series on DIN-Rail

Step 1: Tilt the switch and mount the metal spring to DIN-Rail.

CNGE3FE7MS4

Step 2: Push the switch toward the DIN-Rail until you hear the spring snap into place

.

TECH SUPPORT: 1.888.678.9427



Wall Mounting Installation

Each switch has another installation method for users to install the switch. A wall mount kit can be found in the package. The following steps show how to mount the switch on the wall:

Mounting the CNGE3FE7MS4 on a Wall

Step 1: Remove Din-Rail kit if it is attached to the switch.

Step 2: Use the 6 included screws to attach the wall mount panel as shown in the diagram below.

In order to prevent switches from being damaged, use only the screws included with the mounting kit for the CNGE3FE7MS4 switch.

TECH SUPPORT: 1.888.678.9427



Hardware Overview

Front Panel

The following table describes the labels on the CNGE3FE7MS4.

Port

10/100 RJ-45 fast

Ethernet ports

Description

7 10/100BASE-T(X) RJ-45 fast Ethernet ports support autonegotiation.

Default Setting :

Speed: auto

Duplex: auto

Flow control : disable

Gigabit RJ-45 ports 3 10/100/1000BASE-T(X) Gigabit ports (combo ports)

SFP ports 3 100/1000BASE-X on SFP port (combo)

Console Use RS-232 to RJ-45 connecter to manage switch.

CNGE3FE7MS4

TECH SUPPORT: 1.888.678.9427


L

L

L

L

L

L

L

L

L

L

L

L

L

L

L

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0


1

2

12

3

4

5

1. 100Base FX/1000Base X combo ports

2. LNK/ACT LED for Gigabit LAN ports

3. LNK status LED for Ethernet LAN ports

4. Ethernet LAN ports

5. ACT status LED for LAN ports

6. Power LED

7. PW1 LED

8. PW2 LED

9. R.M status LED

10. Ring status LED

11. Fault indicator

12. Console port

13. Fault relay

14. PWR 1 terminals

15. PWR 2 terminals

CNGE3FE7MS4

8

9

6

7

10

11

13

14

15

TECH SUPPORT: 1.888.678.9427

CNGE3FE7MS4



Front Panel LEDs

LED

PWR

PW1

PW2

R.M

Ring

Fault

Color

Green

Green

Green

Green

Green

Amber

10/100BASE-T(X) Fast Ethernet ports

LNK / ACT Green

Full Duplex Amber

Gigabit Ethernet ports

On

Blinking

On

ACT Green On

Blinking

On LNK

SFP ports

Amber

LNK / ACT Green On

Blinking

Status

On

On

On

On

On

Slowly blinking

Fast blinking

On

CNGE3FE7MS4

Description

AC/DC power ready

AC/DC power module 1 activated.

AC/DC power module 2 activated.

C-Ring Master.

C-Ring enabled.

C-Ring topology has fault

C-Ring works normally.

Fault relay. Power failure or Port down/fail.

Port link up.

Data transmitted.

Port works under full duplex.

Port link up.

Data transmitted.

Port link up.

Port link up.

Data transmitted.

TECH SUPPORT: 1.888.678.9427



Wiring

WARNING – Do not disconnect modules or wires unless power has been switched off or the area is known to be non-hazardous. The devices may only be connected to the supply voltage shown on the type plate.

1. Be sure to disconnect the power cord before installing and/or wiring your switches.

2. Calculate the maximum possible current in each power wire and common wire. Observe all electrical codes dictating the maximum current allowable for each wire size.

3. If the current goes above the maximum ratings, the wiring could overheat, causing serious damage to your equipment.

4. Use separate paths to route wiring for power and devices. If power wiring and device wiring paths must cross, make sure the wires are perpendicular at the intersection point.

5. Do not run signal or communications wiring and power wiring through the same wire conduit. To avoid interference, wires with different signal characteristics should be routed separately.

6. You can use the type of signal transmitted through a wire to determine which wires should be kept separate. The rule of thumb is that wiring sharing similar electrical characteristics can be bundled together

7. You should separate input wiring from output wiring

8. It is advised to label the wiring to all devices in the system

Grounding

Grounding and wire routing help limit the effects of noise due to electromagnetic interference

(EMI). Run the ground connection from the ground screw on the power module to the grounding surface prior to connecting devices.

Fault Relay

FAIL

OPEN

FAIL

CLOSE

The switch provides fail open and fail close options for you to form relay circuits based on your needs. If you want the relay device to start operating at power failure, attach the two wires to COM and fail close to form a close circuit, vice versa. The relay contact of the 2-pin terminal block connector will respond to user-configured events according to the wiring.

Redundant Power Inputs

V-/N V+/L

The switch has two sets of power inputs, power input 1 and power input 2, which sit on the front panel along with LAN ports. Follow the steps below to wire redundant power inputs.

Step 1: Insert the negative/positive wires into the V-/V+ terminals, respectively.

Step 2: To keep the wires from pulling loose, use a small flat-blade screwdriver to tighten the wire-clamp screws on the front of the terminal block connector.

TECH SUPPORT: 1.888.678.9427



Rear Panel

The components in the rear of CNGE3FE7MS4 are shown as below:

1. Screw holes for wall mount kit.

2. DIN-Rail kit

CNGE3FE7MS4

1

2

1

TECH SUPPORT: 1.888.678.9427



Cables

Ethernet Cables

The CNGE3FE7MS4 switch has standard Ethernet ports. According to the link type, the switches use CAT 3, 4, 5, 5e UTP cables to connect to any other network device (PCs, servers, switches, routers, or hubs). Please refer to the following table for cable specifications.

Cable

10BASE-T

100BASE-TX

1000BASE-TX

Type Max. Length

CAT3, CAT4, CAT5 100Ω UTP 100m (328ft)

CAT5 100Ω UTP UTP 100m (328ft)

CAT5/CAT5-e 100Ω UTP UTP 100m (328ft)

Connector

RJ-45

RJ-45

RJ-45

Cable Types and Specifications

10/100/1000BASE-T(X) Pin Assignments

With 10/100BASE-T(X) cable, pins 1 and 2 are used for transmitting data, and pins 3 and 6 are used for receiving data.

6

7

4

5

8

2

3

Pin Number

1

Assignment

TD+

TD-

RD+

Not used

Not used

RD-

Not used

Not used

10/100BASE-TX RJ-45 Pin Assignments

TECH SUPPORT: 1.888.678.9427



6

7

4

5

8

2

3

Pin Number Assignment

1 BI_DA+

BI_DA-

BI_DB+

BI_DC+

BI_DC-

BI_DB-

BI_DD+

BI_DD-

1000 BASE-T RJ-45 Pin Assignments

The CNGE3FE7MS4 switch will support auto MDI/MDI-X operation. You can use a straight-through cable to connect a PC to the switch. The table below shows the 10BASE-T/ 100BASE-TX MDI and

MDI-X port pin outs.

6

7

4

5

8

2

3

Pin Number MDI port

1 TD+(transmit)

MDI-X port

RD+(receive)

TD-(transmit)

RD+(receive)

RD-(receive)

TD+(transmit)

Not used

Not used

RD-(receive)

Not used

Not used

Not used

Not used

TD-(transmit)

Not used

Not used

10/100 BASE-TX MDI/MDI-X pins assignment

Pin Number MDI port

6

7

4

5

8

1

2

3

BI_DA+

BI_DA-

BI_DB+

BI_DC+

BI_DC-

BI_DB-

BI_DD+

BI_DD-

MDI-X port

BI_DB+

BI_DB-

BI_DA+

BI_DD+

BI_DD-

BI_DA-

BI_DC+

BI_DC-

1000 BASE-T MDI/MDI-X pin assignment

Note: “+” and “-” signs represent the polarity of the wires that make up each wire pair.

TECH SUPPORT: 1.888.678.9427



SFP

The switch has fiber optic ports with SFP connectors. The fiber optical ports are available with multi-mode and single-mode fiber with various distance and connector types. Please remember that the TX port of Switch A should be connected to the RX port of Switch B.

Switch-A Switch-B

Console Port Cable

CNGE3FE7MS4 switches can be managed by the console port. The DB-9 to RJ-45 cable can be found in the package. You can connect them to the PC via a RS-232 cable with DB-9 female connector and the other end (RJ-45 connector) connects to console port of switch.

PC pin out (male) assignment

Pin #2 RD

Pin #3 TD

Pin #5 GD

RS-232 with

DB9 female connector

Pin #2 TD

Pin #3 RD

Pin #5 GD

DB9 to RJ 45

Pin #2

Pin #3

Pin #5

TECH SUPPORT: 1.888.678.9427



5 1

CNGE3FE7MS4

1

9

DB9 Male

6

5

6 9

DB9 Female

Pin Male Connector Female Connector

1 Received Line Signal Detect (Received by DTE

Device)

Received Line Signal Detect (Transmitted from

DCE Device)

2 Received Data (Received by DTE Device) Transmitted Data (Transmitted from DCE Device)

3 Transmitted Data (Transmitted from DTE Device) Received Data (Received by DCE Device)

4 DTE Ready (Transmitted from DTE Device)

5 Signal Ground

DTE Ready (Received by DCE Device)

Signal Ground

6 DCE Ready (Received by DTE Device) DCE Ready (Transmitted from DCE Device)

7 Request to Send (Transmitted from DTE Device) Clear to Send (Received by DCE Device)

8 Clear to Send (Received by DTE Device)

9 Ring Indicator (Received by DTE Device)

Request to Send (Transmitted from DCE Device)

Ring Indicator (Transmitted from DCE Device)

TECH SUPPORT: 1.888.678.9427



WEB Management

Attention: While installing and upgrading firmware, please remove physical loop connection first.

DO NOT power off equipment while the firmware is upgrading!

Configuration by Web Browser

This section details configuration through the Web browser.

About Web-based Management

An embedded HTML web site resides in the flash memory on the CPU board. It contains advanced management features and allows you to manage the switch from anywhere on the network through a standard web browser such as Microsoft Internet Explorer.

The Web-Based Management function supports Internet Explorer 5.0 or later. It is based on Java

Applets with an aim to reduce network bandwidth consumption, enhance access speed and present an easy viewing screen.

Note: By default, IE5.0 or later version does not allow Java Applets to open sockets. You need to explicitly modify the browser setting in order to enable Java Applets to use network ports.

TECH SUPPORT: 1.888.678.9427



Preparing for Web Management

The default value is as below:

IP Address: 192.168.10.1

Subnet Mask: 255.255.255.0

Default Gateway: 192.168.10.254

User Name: admin

Password: admin

System Login

1. Launch Internet Explorer.

2. Type http://192.168.10.1 and the IP address of the switch. Press Enter.

CNGE3FE7MS4

3. The login screen appears.

4. Enter username and password. The default username and password is admin.

5. Select Enter or OK button, then the main interface of the Web-based management appears.

TECH SUPPORT: 1.888.678.9427

Login screen



Main Interface

CNGE3FE7MS4

System Information

Main interface

System Information interface

System Information

The system information will display the configuration of Basic Setting/Switch Setting page.

Enable Location Alert

Select Enable Location Alert and observe that the PWR1, PWR2 and FAULT LEDs of the switch will start to flash together. Select Disable Location Alert and the LEDs will stop flashing.

TECH SUPPORT: 1.888.678.9427



Basic setting

Switch Setting

CNGE3FE7MS4

Switch setting interface

Label

System Name

Description

Assign the name of switch. The maximum length is 64 bytes

System Description Display the description of switch.

System Location Assign the switch physical location. The maximum length is 64 bytes

System Contact Enter the name of contact person or organization

Admin & Password

This page allows you to configure the system password required to access the web pages.

Admin Password interface

Label

User name

Description

Key in the new username (The default is admin)

New Password Key in the new password (The default is admin)

Confirm password Re-type the new password.

Apply Select Apply to activate the configurations.

TECH SUPPORT: 1.888.678.9427



IP Setting

You can configure the IP Settings and DHCP client function through IP configuration.

Label

DHCP Client

IP Address

Subnet Mask

Gateway

DNS1

DNS2

Apply

IP Configuration interface

Description

To enable or disable the DHCP client function. When DHCP client function is enabling, the switch will be assigned the IP address from the network DHCP server. The default IP address will be replaced by the IP address that the DHCP server has assigned.

After selecting Apply button, a popup dialog shows up to inform when the DHCP client is enabling. The current IP will lose and you should find a new IP on the DHCP server.

Assign the IP address that the network is using. If the DHCP client function is enabled, you do not need to assign the IP address. The network DHCP server will assign the IP address for the switch and it will be display in this column. The default IP is 192.168.10.1

Assign the subnet mask of the IP address. If DHCP client function is enabling, you do not need to assign the subnet mask

Assign the network gateway for the switch. The default gateway is

192.168.10.254

Assign the primary DNS IP address

Assign the secondary DNS IP address

Select Apply to activate the configurations.

TECH SUPPORT: 1.888.678.9427



Time Setting

The SNTP (Simple Network Time Protocol) settings allow you to synchronize switch clocks from the Internet.

SNTP Configuration interface

Label

SNTP Client

Description

Enable or disable SNTP function to get the time from the SNTP server.

Daylight Saving Time Enable or disable daylight saving time function. When daylight saving time is enabling, you need to configure the daylight saving time period.

UTC Time zone Set the switch location time zone. The following table lists the different location time zone for your reference.

Label

Daylight Saving Time

Daylight Saving Period

Daylight Saving Offset

Description

Disable or Enable DST Time Adjustment.

Set up the Daylight Saving beginning time and Daylight

Saving ending time. Both will be different each year.

Set up the offset time.

Select Apply to activate the configurations you set in this screen.

TECH SUPPORT: 1.888.678.9427



Local Time Zone

November Time Zone

Oscar Time Zone

ADT - Atlantic Daylight

AST - Atlantic Standard

EDT - Eastern Daylight

EST - Eastern Standard

CDT - Central Daylight

CST - Central Standard

MDT - Mountain Daylight

MST - Mountain Standard

PDT - Pacific Daylight

PST - Pacific Standard

ADT - Alaskan Daylight

ALA - Alaskan Standard

HAW - Hawaiian Standard

Nome, Alaska

CET - Central European

FWT - French Winter

MET - Middle European

MEWT - Middle European Winter

SWT - Swedish Winter

EET - Eastern European, USSR Zone 1

BT - Baghdad, USSR Zone 2

ZP4 - USSR Zone 3

ZP5 - USSR Zone 4

ZP6 - USSR Zone 5

WAST - West Australian Standard

CCT - China Coast, USSR Zone 7

JST - Japan Standard, USSR Zone 8

EAST - East Australian Standard GST

Guam Standard, USSR Zone 9

IDLE - International Date Line

NZST - New Zealand Standard

NZT - New Zealand

+2 hours

+3 hours

+4 hours

+5 hours

+6 hours

+7 hours

+8 hours

+9 hours

+10 hours

+12 hours

Conversion from UTC Time at 12:00 UTC

- 1 hour 11 am

-2 hours

-3 hours

-4 hours

10 am

9 am

8 am

-5 hours 7 am

-6 hours

-7 hours

6 am

5 am

-8 hours

-9 hours

-10 hours

-11 hours

+1 hour

4 am

3 am

2 am

1 am

1 pm

2 pm

3 pm

4 pm

5 pm

6 pm

7 pm

8 pm

9 pm

10 pm

Midnight

TECH SUPPORT: 1.888.678.9427



PTP Client

The Precision Time Protocol (PTP) is a time-transfer protocol defined in the IEEE 1588-2002 standard that allows precise synchronization of networks (e.g., Ethernet). Accuracy within the nanosecond range can be achieved with this protocol when using hardware-generated timestamps.

Label

PTP Client

Description

Enable / Disable PTP Client

LLDP

LLDP (Link Layer Discovery Protocol) function allows the switch to advertise its information to other nodes on the network and store the information it discovers.

Label

LLDP Protocol

LLDP Interval

Apply

Help

LLDP configuration interface

Description

Enable or Disable LLDP function.

The interval of resend LLDP (by default at 30 seconds)

Select Apply to set the configurations.

Show help file.

TECH SUPPORT: 1.888.678.9427



Auto Provision

Auto Provision allows you to automatically update the switch firmware. You can put the firmware or configuration file on TFTP server. When you reboot the switch, it will upgrade automatically. Before updating, make sure you have your TFTP server ready and the firmware image and configuration file is on the TFTP server.

Auto Provision interface

TECH SUPPORT: 1.888.678.9427



Backup & Restore

You can save current EEPROM value from the switch to TFTP server, then go to the TFTP restore configuration page to restore the EEPROM value.

Backup & Restore interface

Label Description

TFTP Server IP Address Fill in the TFTP server IP

Restore File Name

Restore

Fill the file name.

Select Restore to restore the configurations.

Form Local PC

Restore File Name

Restore

Backup

To Local PC

User can select file restore, not need TFTP server .

Fill in the file name.

Select Restore to restore the configurations.

Select Backup to backup the configurations.

User can download config file to switch. Not needing the

TFTP server

Upgrade Firmware

Upgrade Firmware allows you to update the switch firmware. Before updating, make sure you have your TFTP server ready and the firmware image is on the TFTP server.

Update Firmware interface

TECH SUPPORT: 1.888.678.9427



Redundancy

DHCP Server

DHCP Server – Setting

The system provides with DHCP server function. Enable the DHCP server function and the switch system will be a DHCP server.

DHCP Server Configuration interface

Label

DHCP Server

Description

Enable or Disable the DHCP Server function. Enable – the switch will be the DHCP server on your local network

Start IP Address The dynamic IP assignment range. Low IP address is the beginning of the dynamic IP assignments range. For example: dynamic IP assignment range is from 192.168.1.100 to 192.168.1.200. 192.168.1.100 will be the Start IP address.

End IP Address The dynamic IP assignment range. High IP address is the end of the dynamic IP assignments range. For example: dynamic IP assignment range is from 192.168.1.100 to 192.168.1.200. 192.168.1.200 will be the

End IP address

Subnet Mask

Gateway

The dynamic IP assignment range subnet mask

The gateway in your network.

DNS Domain Name Server IP Address in your network.

Lease Time (Hour)It is the period that system will reset the assigned dynamic IP to ensure the IP address is in use.

Apply Select Apply to set the configurations.

TECH SUPPORT: 1.888.678.9427



DHCP Server – Client List

When the DHCP server function is activated, the system will collect the DHCP client information and display in here.

DHCP Server Client Entries interface

DHCP Server – Port and IP bindings

You can assign the specific IP address that is in the assigned dynamic IP range to the specific port. When the device connects to the port and asks for dynamic IP assigning, the system will assign the IP address that has been assigned before in the connected device.

DHCP Server Port and IP Binding interface

TECH SUPPORT: 1.888.678.9427



DHCP Server –DHCP Relay Agent

The DHCP relay agent relays DHCP messages between clients and servers for DHCP on different subnet domains. DHCP relay agent use Option 82 to insert specific information into a request that is being forwarded to a DHCP server and, according to Option 82, to remove the specific information from a reply packet when forwarding server DHCP packets to a DHCP client.

Label

DHCP Relay

DHCP Server IP

Address and VID

DHCP Option 82

Remote ID

Description

Enable/Disable DHCP Relay Agent.

Specify the IP address and VID of DHCP server. “0.0.0.0” means server is inactive.

“Option 82 Remote ID” provides an identifier for the remote server.

There are 4 types supported: IP, MAC, Client-ID, and Other.

DHCP Option 82

Circuit-ID Table

Apply

“Option 82 Circuit-ID” encodes an agent-local identifier of the circuit from which a DHCP client-to-server packet was received. It is intended for use by agents in relaying DHCP responses back to the proper circuit.


TECH SUPPORT: 1.888.678.9427



Port Setting

Port Control

Set the state, speed/duplex, flow control, and security of the port.

CNGE3FE7MS4

Port Control interface

Label

Port No.

State

Speed/Duplex

Flow Control

Description

Port number for setting.

Enable/Disable the port.

Set Auto-negotiation, 100-full, 100-half, 10-full or 10-half mode.

Security

Support symmetric and asymmetric mode to avoid packet loss when congestion occurred.

Enabling port security will disable MAC address learning in this port. Only the frames with MAC addresses in the port security list will be forwarded, otherwise the frames will be discarded.

Auto Detect 100/1000 Auto Detect SFP port SFP Module speed (100/1000Mbps)


TECH SUPPORT: 1.888.678.9427



Port Status

The following information provides the current port status information.

CNGE3FE7MS4

Port Status interface

Rate Limit

Limit the traffic of all ports, including broadcast, multicast and flooded unicast. You can also set Ingress or Egress to limit traffic received or transmitted bandwidth.

Rate Limit interface

Label

Ingress Limit Frame

Type

Ingress

Egress

Apply

Description

Set the mode of the Ingress port from:

All, Broadcast Only, Broadcast/Multicast or Broadcast/Multicast/

Flooded Unicast

The switch port received traffic. For no limit, set to zero (0).

The switch port transmitted traffic. For no limit, set to zero (0).


TECH SUPPORT: 1.888.678.9427



Port Trunk

Port Trunk – Setting

You can select static trunk or 802.3ad LACP to combine several physical links with a logical link to increase the bandwidth.

Label

Group ID

Type

Work Port

Apply

Port Trunk - Setting interface

Description

Select port to join a trunk group.

Support static trunk and 802.3ad LACP

Select the number of active ports in dynamic group (LACP).

The default value of works ports is maximum number of the group. If the number is not maximum number of ports, the other inactive ports in dynamic group will be suspended (no traffic). Once the active port is broken, the suspended port will be active automatically.


TECH SUPPORT: 1.888.678.9427



Port Trunk – Status

CNGE3FE7MS4

Port Trunk - Status interface

Label

Group ID

Trunk Member

Description

Trunk Group number

Show Group port info

C-Ring

C-Ring is the most powerful Redundant Ring in the world. The recovery time is less than 10ms.

It can reduce unexpected damage caused by a network topology change. C-Ring supports three Ring topologies: C-Ring, Coupling Ring and Dual Homing.

TECH SUPPORT: 1.888.678.9427

C-Ring interface



Label

Enable Ring

Enable Ring Master

Description

Mark to enable Ring.

There should be only one Ring Master in a ring. If there are two or more switches that set Ring Master to enable, the switch with the lowest MAC address will be the actual Ring Master and others will be Backup Masters.

1st Ring Port

2nd Ring Port

The primary port, when this switch is Ring Master.

The backup port, when this switch is Ring Master.

Enable Coupling Ring Mark to enable the Coupling Ring. Coupling Ring can be used to divide a big ring into two smaller rings to avoid affecting all switches when network topology changes. It is a good application for connecting two Rings.

Coupling Port Link to Coupling Port of the switch in another ring. Coupling

Ring need four switch to build an active and a backup link.

Set a port as coupling port. The coupled four ports of four switches will be run at active/backup mode.

Control Port Link to Control Port of the switch in the same ring. Control Port used to transmit control signals.

Enable Dual Homing Mark to enable Dual Homing. By selecting Dual Homing mode,

ComRing will be connected to normal switches through two

RSTP links (ex: backbone Switch). The two links work as active/ backup mode, and connect each ComRing to the normal switches in RSTP mode.


Note: ComNet does not recommend setting one switch as a Ring Master and a Coupling Ring at the same time due to heavy load.

TECH SUPPORT: 1.888.678.9427



Legacy Ring

CNGE3FE7MS4

Legacy Ring interface

Legacy ring provides support for the switch to be used in an existing ring of ComNet X-Ring enabled switches.

X-Ring provides a faster redundant recovery than Spanning Tree topology. The action is similar to STP or RSTP, but the algorithms between them are not the same. In the X-Ring topology, every switch should be enabled with X-Ring or Legacy Ring function and two ports should be assigned as the member ports in the ring. Only one switch in the X-Ring group would be set as the master switch that one of its two member ports would be blocked, called backup port, and another port is called working port. Other switches in the X-Ring group are called working switches and their two member ports are called working ports. When the failure of network connection occurs, the backup port of the master switch (Ring Master) will automatically become a working port to recover from the failure.

The switch supports the function and interface for setting the switch as the ring master or not. The ring master can negotiate and place command to other switches in the X-Ring group. If there are

2 or more switches in master mode, the software will select the switch with lowest MAC address number as the ring master. The X-Ring master ring mode can be enabled by setting the Legacy

Ring configuration interface. Also, the user can identify whether the switch is the ring master by checking the R.M. LED indicator on the front panel of the switch.

Label

Legacy Ring

Master

1st Ring Port

2nd Ring Port

Save

Refresh

Description

To enable the Legacy Ring (X-Ring) function, tick the checkbox beside the Legacy Ring label. If this checkbox is not ticked, all the ring functions are unavailable.

Select Enable for this switch to be the ring master or Disable for this switch to be a working switch.

The primary port, when this switch is Ring Master. Select a port to assign from the pull down selection menu.

The backup port, used when this switch is Ring Master and the primary port fails. Select a port to assign from the pull down selection menu.

Select to save changes.

Select to refresh the page immediately.

TECH SUPPORT: 1.888.678.9427



COM-Ring

You can add ComNet switches into a network constructed by another ring technology and enable COM-Ring to cooperate with another vendor’s managed switch.

Label

Enable

Vendor

1st Ring Port

2nd Ring Port

ComRing interface

Description

Enable the COM-Ring function

Select the vendor whose ring you want to join

Select the port that connects to the ring

Select the port that connects to the ring

The application of COM-Ring is shown as below.

ComNet Switch

Other Vendor’s

Switch

Other Vendor’s

Switch

ComNet Switch

ComNet Switch

COM-Ring connection

Other Vendor’s

Switch

TECH SUPPORT: 1.888.678.9427



C-RSTP

C-RSTP is proprietary redundant ring technology invented by ComNet. Different from standard

STP/RSTP, the recovery time of C-RSTP is <10ms and supports more nodes of connection in a ring topology.

C-RSTP interface

The application of C-RSTP is shown as below.

PLC CNGE3FE7MS4 CNGE3FE7MS4

IPC CNGE3FE7MS4

CNGE3FE7MS4 CNGE3FE7MS4

CNGE3FE7MS4

C-RSTP connection

CNGE3FE7MS4 Server

TECH SUPPORT: 1.888.678.9427



RSTP

The Rapid Spanning Tree Protocol (RSTP) is an evolution of the Spanning Tree Protocol. It provides faster spanning tree convergence after a topology change. The system also supports

STP and the system will auto detect the connected device that is running STP or RSTP protocol.

RSTP setting

You can enable/disable RSTP function, and set parameters for each port.

RSTP Setting interface

Label

RSTP mode

Priority (0-61440)

Max Age Time(6-40)

Hello Time (1-10)

Forwarding Delay Time

(4-30)

Apply

Description

You must enable or disable the RSTP function before configuring the related parameters.

A value used to identify the root bridge. The bridge with the lowest value has the highest priority and is selected as the root. If the value changes, You must restart the switch. The value must be a multiple of 4096 according to the protocol standard rule.

The number of seconds a bridge waits without receiving

Spanning-tree Protocol configuration messages before attempting a reconfiguration. Enter a value from 6 through 40.

The time that controls switch sends out the BPDU packet to check RSTP current status. Enter a value from 1 through 10.

The number of seconds a port waits before changing from its Rapid Spanning-Tree Protocol learning and listening states to the forwarding state. Enter a value from 4 through 30.


NOTE: Follow the rule to configure the MAX Age, Hello Time, and Forward Delay Time.

2 × (Forward Delay Time value –1) ≥ Max Age value ≥ 2 × (Hello Time value +1)

TECH SUPPORT: 1.888.678.9427



View the RSTP algorithm results at this table

CNGE3FE7MS4

TECH SUPPORT: 1.888.678.9427



Label Description

Path Cost (1-200000000) The cost of the path to the other bridge from this transmitting bridge at the specified port. Enter a number 1 through

200,000,000.

Port Priority (0-240) Decide that port should be blocked by priority in LAN. Enter a numerical value that is a multiple of 16, 0 through 240.

Admin P2P Some of the rapid state transactions that are possible within

RSTP are dependent upon whether the port concerned can only be connected to exactly one other bridge (i.e. It is served by a point-to-point LAN segment), or it can be connected to two or more bridges (i.e. It is served by a shared medium LAN segment). This function allows the P2P status of the link to be manipulated administratively. True means P2P enabling. False means P2P disabling.

Admin Edge

Admin Non STP

Apply

The port directly connected to end stations, and it cannot create bridging loop in the network. To configure the port as an edge port, set the port to True.

The port includes the STP mathematic calculation. True is not including STP mathematic calculation. False is including the

STP mathematic calculation.


TECH SUPPORT: 1.888.678.9427



MSTP

Multiple Spanning Tree Protocol (MSTP) is a standard protocol base on IEEE 802.1s. The function is that several VLANs can be mapped to a reduced number of spanning tree instances because most networks do not need more than a few logical topologies. It supports loadbalancing schemes and the CPU is sparer than PVST (Cisco proprietary technology).

MSTP Setting interface

TECH SUPPORT: 1.888.678.9427



Label

MSTP Enable

Description

Enable/disable MSTP function to configure the related parameters.

Force Version

Revision Level

(0-65535)

The Force Version parameter can be used to force a VLAN Bridge that supports RSTP to operate in an STP-compatible manner.

Configuration Name The same MST Region must have the same MST configuration name.

The same MST Region must have the same revision level.

Priority (0-61440)

Max Age Time(6-40) Time, in seconds, a bridge will wait to receive Spanningtree Protocol configuration messages before attempting a reconfiguration. Enter a value 6 through 40.

Hello Time (1-10)

A value used to identify the root bridge. The bridge with the lowest value has the highest priority and is selected as the root. If the value changes, you must reboot the switch. The value must be a multiple of 4096 according to the protocol standard rule.

Follow the rule below to configure the MAX Age, Hello Time, and Forward Delay Time a controlled switch sends out the BPDU packet to check RSTP current status.

Enter a value between 1 through 10.

2 x (Forward Delay Time value –1) ≥ Max Age value ≥ 2 x (Hello

Time value +1)

Forwarding Delay

Time (4-30)

Max Hops (1-40)

Apply

Time, in seconds, a port will wait before changing from its Rapid

Spanning-Tree Protocol learning and listening states to the forwarding state. Enter a value 4 through 30.

This parameter is additional to those specified for RSTP. A single value applies to all Spanning Trees within an MST Region (the

CIST and all MSTIs) for that the Bridge is the Regional Root.


TECH SUPPORT: 1.888.678.9427



Label

Port No.

Priority (0-240)

Path Cost

(1-200000000)

Admin P2P

Admin Edge

Admin Non STP

Apply

MSTP Port interface

Description

Select the port that you want to configure.

Select which port should be blocked by priority in LAN.

Enter a multiple of 16, 0 through 240.

The cost of the path to the other bridge from this transmitting bridge at the specified port. Enter a number 1 through

200000000.

Some of the rapid state transactions that are possible within RSTP are dependent upon whether the port in question can only be connected to exactly one other bridge (i.e. It is served by a pointto-point LAN segment), or whether it can be connected to two or more bridges (i.e. It is served by a shared medium LAN segment).

This function allows the P2P status of the link to be manipulated administratively.

True - P2P enabled.

False - P2P disabled.

Label

Label


TECH SUPPORT: 1.888.678.9427



MSTP Instance interface

Label

Instance

State

VLANs

Description

Set the instance from 1 to 15

Enable or disable the instance

Set that VLAN will belong that instance

Proprietary (0-61440) A value used to identify the root bridge. The bridge with the lowest value has the highest priority and is selected as the root. If the value changes, You must reboot the switch. The value must be a multiple of 4096 according to the protocol standard rule.


Label

Instance

Port

Priority (0-240)

Path Cost

(1-200000000)

Apply

MSTP Instance Port interface

Description

Set the instance’s information except CIST

Select the port that you want to configure.

Decide that port should be blocked by priority in LAN. Enter a multiple of 16, 0 through 240.

The cost of the path to the other bridge from this transmitting bridge at the specified port. Enter a number 1 through

200000000.


TECH SUPPORT: 1.888.678.9427



Multicast

IGMP Snooping

Internet Group Management Protocol (IGMP) is used by IP hosts to register their dynamic multicast group membership. IGMP has 3 versions, IGMP v1, v2 and v3. Please refer to RFC

1112, 2236 and 3376. IGMP Snooping improves the performance of networks that carry multicast traffic. It provides the ability to prune multicast traffic so that it travels only to those end destinations that require that traffic and reduces the amount of traffic on the Ethernet

LAN.

Label

IGMP Snooping Table

IGMP Protocol

IGMP Query

Apply

Help

IGMP Snooping interface

Description

Show current IP multicast list

Enable/Disable IGMP snooping.

Set switch IGMP querier status. There should exist only one

IGMP querier in an IGMP application.

Auto - the querier will be the switch with the lowest IP address.


Show help file.

TECH SUPPORT: 1.888.678.9427



Static Multicast Filtering

Static multicast filtering is the system by that end stations only receive multicast traffic if they register to join specific multicast groups. With multicast filtering, network devices only forward multicast traffic to the ports that are connected to registered end stations.

Label

IP Address

Member Ports

Add

Delete

Help

Multicast Filtering Interface

Description

Assign a multicast group IP address within the range of

224.0.0.0 through 239.255.255.255

Select port numbers to include them as the member ports in the specific multicast group IP address.

Show current IP multicast list

Delete an entry from the table.

Show help file.

TECH SUPPORT: 1.888.678.9427



VLAN

A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast domain that allows you to isolate network traffic. Only the members of the VLAN will receive traffic from the same members of VLAN. Basically, creating a VLAN from a switch is the logical equivalent of reconnecting a group of network devices to another Layer 2 switch. However, all the network devices are still physically plugged into the same switch.

The switch supports port-based and 802.1Q (tagged-based) VLAN. The default configuration of VLAN operation mode is “802.1Q”.

VLAN Setting - IEEE 802.1Q

Tagged-based VLAN is an IEEE 802.1Q specification standard, and it is possible to create a

VLAN across devices from different switch vendors. IEEE 802.1Q VLAN uses a technique to insert a “tag” into the Ethernet frames. The Tag contains a VLAN Identifier (VID) that indicates the VLAN numbers.

You can create Tag-based VLAN, and enable or disable GVRP protocol. There are 256 VLAN groups to provide configure. Enable 802.1Q VLAN, the all ports on the switch belong to default

VLAN, VID is 1. The default VLAN cannot be deleted.

GVRP allows automatic VLAN configuration between the switch and nodes. If the switch is connected to a device with GVRP enabled, you can send a GVRP request by using the VID of a

VLAN defined on the switch; the switch will automatically add that device to the existing VLAN.

TECH SUPPORT: 1.888.678.9427

VLAN Configuration – 802.1Q interface



Label Description

VLAN Operation Mode Select VLAN Operation Mode: Disable, Port Base, 802.1Q

GVRP Mode

Port

Link type

Enable/Disable GVRP function.

Management VLAN ID Management VLAN can provide network administrator a secure VLAN to management Switch. Only the devices in the management VLAN can access the switch.

Select the port to configure.

Select Link Type from the following options:

Access Link: Single switch only, allows grouping of ports by setting the same VID.

Trunk Link: Extended application of Access Link, allows grouping of ports by setting the same VID with 2 or more switches.

Hybrid Link: Both Access Link and Trunk Link are available.

Hybrid(QinQ) Link: Allows one more VLAN tag in a original

VLAN frame.

Untagged VID

Tagged VIDs

Apply

Set the port default VLAN ID for untagged devices that connect to the port. The range is 1 to 4094.

Set the tagged VIDs to carry different VLAN frames to other switch.


TECH SUPPORT: 1.888.678.9427



VLAN Setting – Port Based

Traffic is forwarded to the member ports of the same vlan group. vlan port based startup, set in the same group of the port, can be a normal transmission packet, without restricting the types of packets.

VLAN Configuration – Port Base interface-1

The following table describes the labels in this screen.

Label

Add

Edit

Delete

Help

Description

Click “add” to enter VLAN add interface.

Edit exist VLAN

Delete exist VLAN

Show help file.

TECH SUPPORT: 1.888.678.9427



VLAN Configuration – Port Base interface-2

The following table describes the labels in this screen.

Label

Group Name

VLAN ID

Add

Remove

Apply

Help

Description

VLAN name.

Specify the VLAN ID

Select port to join the VLAN group.

Remove port of the VLAN group

Click “Apply” to activate the configurations.

Show help file.

TECH SUPPORT: 1.888.678.9427



SNMP

Simple Network Management Protocol (SNMP) is the protocol developed to manage nodes

(servers, workstations, routers, switches and hubs etc.) on an IP network. SNMP enables network administrators to manage network performance, find and solve network problems, and plan for network growth. Network management systems learn of problems by receiving traps or change notices from network devices implementing SNMP.

SNMP – Agent Setting

You can set SNMP agent related information by Agent Setting Function.

Label

SNMP agent

Version

SNMP V1/V2c

Community

Apply

Help

SNMP – Agent setting interface

Description

Three SNMP versions are supported such as SNMP V1/SNMP V2c, and

SNMP V3. SNMP V1/SNMP V2c agent uses a community string match for authentication, that means SNMP servers access objects with read-only or read/write permissions with the community default string public/private. SNMP V3 requires an authentication level of MD5 or

DES to encrypt data to enhance data security.

SNMP Community should be set for SNMP V1/V2c. Four sets of

“Community String/Privilege” are supported. Each Community String is maximum 32 characters. Keep empty to remove this Community string.


Show help file.

TECH SUPPORT: 1.888.678.9427



SNMPV3

CNGE3FE7MS4

Label Description

Context Table Configure SNMP v3 context table. Assign the context name of context table. Select Apply to change context name

User Table

Group Table

Configure SNMP v3 user table.

User ID: set up the user name.

Authentication Password: set up the authentication password.

Privacy Password: set up the private password.

Select Add to add context name.

Select Remove to remove unwanted context name.

Configure SNMP v3 group table.

Security Name (User ID): assign the user name that you have set up in user table.

Group Name: set up the group name.



Access Table Configure SNMP v3 access table.

Context Prefix: set up the context name.

Group Name: set up the group.

Security Level: select the access level.

Context Match Rule: select the context match rule.

Read View Name: set up the read view.

Write View Name: set up the write view.

Notify View Name: set up the notify view.



MIBview Table Configure MIB view table.

ViewName: set up the name.

Sub-Oid Tree: fill the Sub OID.

Type: select the type – exclude or included.



Help Show help file.

TECH SUPPORT: 1.888.678.9427



SNMP –Trap Setting

A trap manager is a management station that receives traps, the system alerts generated by the switch. If no trap manager is defined, no traps will be issued. Create a trap manager by entering the IP address of the station and a community string. To define management stations as a trap manager and enter SNMP community strings and select the SNMP version.

Label

Server IP

Community

Trap Version

Add

Remove

Help

SNMP –Trap Setting interface

Description

The server IP address to receive Trap

Community for authentication

Trap Version supports V1 and V2c and V3

Add trap server profile.

Remove trap server profile.

Show help file.

TECH SUPPORT: 1.888.678.9427



Traffic Prioritization

Traffic Prioritization includes 3 modes: port base, 802.1p/COS, and TOS/DSCP. By traffic prioritization function, you can classify the traffic into four classes for differential network application. IGS-3044GP(GC) series support 4 priority queues.

QoS policy

Traffic Prioritization interface

Label Description

QoS Mode Port-base: the output priority is determined by ingress port.

COS only: the output priority is determined by COS only.

TOS only: the output priority is determined by TOS only.

COS first: the output priority is determined by COS and TOS, but COS first.

TOS first: the output priority is determined by COS and TOS, but TOS first.

QoS policy Using the 8,4,2,1 weight fair queue scheme: the output queues will follow

8:4:2:1 ratio to transmit packets from the highest to lowest queue.

For example: 8 high queue packets, 4 middle queue packets, 2 low queue packets, and the one lowest queue packets are transmitted in one turn.

Use the strict priority scheme: always the packets in higher queue will be transmitted first until higher queue is empty.

Apply

Help


Show help file.

TECH SUPPORT: 1.888.678.9427



Port-base priority

Priority

Apply

Help

Port-based Priority interface

Assign Port with one of four available priority queues:

High, Middle, Low, and Lowest.


Show help file.

CNGE3FE7MS4

TECH SUPPORT: 1.888.678.9427



COS/802.1p

CNGE3FE7MS4

COS/802.1p interface

COS/802.1p

COS (Class Of Service) is also known as 802.1p. It describes that the output priority of a packet is determined by the user priority field in

802.1Q VLAN tag. The priority value is supported 0to7.COS value map to 4 priority queues: High, Middle, Low, and Lowest.

COS Port Default When an ingress packet has no VLAN tag, a default priority value is considered and determined by ingress port.

Apply

Help


Show help file.

TECH SUPPORT: 1.888.678.9427



TOS/DSCP

CNGE3FE7MS4

TOS/DSCP interface

TOS/DSCP TOS (Type of Service) is a field in the IP header of a packet. This TOS field is also used by Differentiated Services and is called the Differentiated

Services Code Point (DSCP). This field can determine the output priority of a packet and the priority value is supported 0to63. DSCP value map to

4 priority queues: High, Middle, Low, and Lowest.

Apply

Help


Show help file.

TECH SUPPORT: 1.888.678.9427



Security

Five useful functions can enhance security of switch: IP Security, Port Security, MAC Blacklist, and MAC address Aging and 802.1x protocol.

Management Security

Only IP in the Secure IP List can manage the switch through your defined management mode.

(WEB, Telnet, SNMP)

Label

IP security MODE

Enable WEB Management

Enable Telnet Management

Enable SNMP Management

Apply

Help

IP Security interface

Description

Enable/Disable the IP security function.

Mark the blank to enable WEB Management.

Mark the blank to enable Telnet Management.

Mark the blank to enable MPSN Management.


Show help file.

TECH SUPPORT: 1.888.678.9427



Static MAC Forwarding

Static MAC Forwarding is to add static MAC addresses to hardware forwarding database. If port security is enabled at Port Control page, only the frames with MAC addresses in this list will be forwarded, otherwise will be discarded.

Label

MAC Address

Port NO.

Add

Delete

Help

Port Security interface

Description

Input MAC Address to a specific port.

Select port of switch.

Add an entry of MAC and port information.

Delete the entry.

Show help file.

TECH SUPPORT: 1.888.678.9427



MAC Blacklist

MAC Blacklist can eliminate the traffic forwarding to specific MAC addresses in list. Any frames forwarding to MAC addresses in this list will be discarded. Thus the target device will never receive any frame.

Label

MAC Address

Port NO.

Add

Delete

Help

MAC Blacklist interface

Description

Input MAC Address to add to MAC Blacklist.

Select port of switch.

Add an entry to Blacklist table.

Delete the entry.

Show help file.

TECH SUPPORT: 1.888.678.9427



802.1x

802.1x - Radius Server

802.1x makes the use of the physical access characteristics of IEEE802 LAN infrastructures in order to provide a authenticated and authorized devices attached to a LAN port. Please refer to IEEE 802.1X - Port Based Network Access Control.

802.1x Radius Server interface

Label

Radius Server Setting

Description

802.1x Portocol

Radius Server IP

Server port

Enable or Disable 802.1X Radius Server function

The IP address of the authentication server.

Account port

Set the UDP port number used by the authentication server to authenticate.

Set the UDP destination port for accounting requests to the specified Radius Server.

Shared Key

NAS, Identifier

Advanced Setting

Quiet Period

A key shared between this switch and authentication server.

A string used to identify this switch.

Tx Period

Set the time interval between authentication failure and the start of a new authentication attempt.

Set the time that the switch can wait for response to an EAP request/identity frame from the client before resending the request.

TECH SUPPORT: 1.888.678.9427



Supplicant Timeout Set the period of time the switch waits for a supplicant response to an EAP request.

Server Timeout Set the period of time the switch waits for a Radius server response to an authentication request.

Max Requests

Re-Auth Period

Set the maximum number of times to retry sending packets to the supplicant.

Set the period of time after that clients connected must be re-authenticated.

Apply

Help


Show help file.

TECH SUPPORT: 1.888.678.9427




Set the 802.1x authorized mode of each port.

CNGE3FE7MS4

802.1x Port Authorize interface

Label

Port Authorized

Mode

Apply

Help

Description

Reject: force this port to be unauthorized.

Accept: force this port to be authorized.

Authorize: the state of this port was determined by the outcome of the 802.1x authentication.

Disable: this port will not participate in 802.1x.


Show help file.

INS_CNGE3FE7MS4_REV–

TECH SUPPORT: 1.888.678.9427



Show 802.1x port authorized state.

TACACS+

802.1x Port Authorize State interface

CNGE3FE7MS4

TECH SUPPORT: 1.888.678.9427



Warning

Warning: function is very important for managing the switch. You can manage the switch by

SYSLOG, E-MAIL, and Fault Relay. It helps monitor the switch status on remote site. When events occur, the warning message will be sent to your appointed server, E-MAIL, or relay fault to switch panel.

System alarm supports two warning modes: 1. SYSLOG. 2. E-MAIL. You can monitor the switch through selected system events.

Warning – Fault Relay Alarm

When any selected fault event happens, the Fault LED in switch panel will light and the electric relay will signal at the same time.

System Warning – SYSLOG Setting

The SYSLOG is a protocol to transmit event notification messages across networks. Please refer to RFC 3164 - The BSD SYSLOG Protocol

System Warning – SYSLOG Setting interface

Label

SYSLOG Mode

Description

Disable: disable SYSLOG.

Client Only: log to local system.

Server Only: log to a remote SYSLOG server.

Both: log to both of local and remote server.

SYSLOG Server IP Address The remote SYSLOG Server IP address.



TECH SUPPORT: 1.888.678.9427



System Warning – SMTP Setting

The SMTP is Short for Simple Mail Transfer Protocol. It is a protocol for e-mail transmission across the Internet. Please refer to RFC 821 - Simple Mail Transfer Protocol.

System Warning – SMTP Setting interface

Label

E-mail Alart

Description

Enable/Disable transmission system warning events by Email.

SMTP Server IP Address Setting up the mail server IP address

Mail Subject The subject line of the Email

Sender

Authentication

Set up the Email account from which to send the alert.

Username: the authentication username.

Password: the authentication password.

Confirm Password: re-enter password.

Recipient E-mail Address The recipient Email address(es). Supports up to 6 recipients.



TECH SUPPORT: 1.888.678.9427



System Warning – Event Selection

SYSLOG and SMTP are the two warning methods that supported by the system. Check the corresponding box to enable system event warning method you wish to choose. Please note that the checkbox cannot be checked when SYSLOG or SMTP is disabled.

System Warning – Event Selection interface

Label

Device cold start

Description

When the device executes cold start, the system will issue a log event.

Device warm start

Authentication Failure Alert when SNMP authentication failure.

ComRing topology change

Alert when ComRing topology changes.

Port Event

When the device executes warm start, the system will issue a log event.

Disable

Link Up

Link Down

Link Up & Link Down

Apply

Help


Show help file.

TECH SUPPORT: 1.888.678.9427



Monitor and Diag

MAC Address Table

Refer to IEEE 802.1 D Sections 7.9. The MAC Address Table, that is Filtering Database, supports queries by the Forwarding Process, as to whether a frame received by a given port with a given destination MAC address is to be forwarded through a given potential transmission port.

MAC Address Table interface

Label

Port NO. :

Description

Show all MAC addresses mapping to a selected port in table.

Flush MAC Table Clear all MAC addresses in table

MAC Address

Aging Time

Assign aging time MUST be multiple of 15.

Auto Flush Table

When Ports Link

Down

Enable this function, when port link down, the switch will Flush

MAC table.

MAC Address

Auto Learning

Apply

Enable or Disable MAC Learning function.


TECH SUPPORT: 1.888.678.9427



Port Overview

Port statistics show several statistics counters for all ports

CNGE3FE7MS4

Label

Type

Link

State

TX GOOD Packet

TX Bad Packet

RX GOOD Packet

RX Bad Packet

TX Abort Packet

Packet Collision

Clear

Help

Port Overview interface

Description

Show port speed and media type.

Show port link status.

Show ports enable or disable.

The number of good packets sent by this port.

The number of bad packets sent by this port.

The number of good packets received by this port.

The number of bad packets received by this port.

The number of packets aborted by this port.

The number of times a collision detected by this port.

Clear all counters.

Show help file.

TECH SUPPORT: 1.888.678.9427



Port Monitoring

Port monitoring function supports TX (egress) only, RX (ingress) only, and both TX/RX monitoring. TX monitoring sends any data that egress out checked TX source ports to a selected TX destination port as well. RX monitoring sends any data that ingress in checked

RX source ports out to a selected RX destination port as well as sending the frame where it normally would have gone. Keep all source ports unchecked in order to disable port monitoring.

Port monitoring interface

Label Description

Destination Port The port will receive a copied frame from the source port for monitoring purposes.

Source Port The port will be monitored. Mark the blank of TX or RX to be monitored.

TX

RX

Apply

Clear

Help

The frames come into switch port.

The frames receive by switch port.


Disable the function by unchecking all ports.

Show help file.

TECH SUPPORT: 1.888.678.9427



SFP Monitor

DDM function, can pass SFP module which supports DDM function, measure the temperature of the apparatus and manage and set up event alarm module through DDM WEB

System Event Log

If system log client is enabled, the system event logs will be shown in this table.

Label

Page

Reload

Clear

Help

TECH SUPPORT: 1.888.678.9427

System event log interface

Description

Select LOG page.

To get the newest event logs and refresh this page.

Clear log.

Show help file.



Save Configuration

If any configuration is changed, visit this screen and save current configuration data to the permanent flash memory. Otherwise, the current configuration will be lost when power is turned off or the system is reset.

Label

Save

Help

System Configuration interface

Description

Save all configurations.

Show help file.

Factory Default

Factory Default interface

Reset switch to default configuration. Select Reset to reset all configurations to the default value. You can select Keep current IP address setting and Keep current username & password to retain current IP and username and password after reset.

System Reboot

System Reboot interface

TECH SUPPORT: 1.888.678.9427



Command Line Interface Management

About CLI Management

Besides WEB-base management, CNGE3FE7MS4 also supports CLI management. You can use console or telnet to management switch by CLI.

CLI Management by RS-232 Serial Console (9600, 8, none, 1, none)

Before Configuring by the RS-232 serial console, use an RJ45 to DB9-F cable to connect the

Switch’s RS-232 Console port to your PCs’ COM port.

Follow the steps below to access the console via RS-232 serial cable.

Step 1. From the Windows desktop, select on Start -> Programs -> Accessories ->

Communications -> Hyper Terminal

TECH SUPPORT: 1.888.678.9427



Step 2. Input a name for new connection

CNGE3FE7MS4

Step 3. Select to use COM port number

TECH SUPPORT: 1.888.678.9427



Step 4. The COM port properties setting, 9600 for Bits per second, 8 for Data bits, None for Parity,

1 for Stop bits and none for Flow control.

Step 5. The Console login screen will appear. Use the keyboard to enter the Username and

Password (same as for accessing via Web Browser), and then press Enter.

TECH SUPPORT: 1.888.678.9427



CLI Management by Telnet.

Users can use telnet to configure the switches.

The default value is as below:

IP Address: 192.168.10.1

Subnet Mask: 255.255.255.0

Default Gateway: 192.168.10.254

User Name: admin

Password: admin

Follow the steps below to access the console via Telnet.

Step 1. Telnet to the IP address of the switch from the Windows Run command (or from the

MS-DOS prompt).

Step 2. The Login screen will appear. Use the keyboard to enter the Username and Password

(same as for accessing via Web Browser), and then press Enter.

TECH SUPPORT: 1.888.678.9427



Commands Level

Modes

User EXEC

Privileged

EXEC

Global configuration

VLAN database

Interface configuration

Access Method Prompt Exit Method About This Model

Begin a session with your switch.

Enter the enable command while in user EXEC mode.

switch> switch#

Enter logout or

quit.

The user command available at the level of user is the subset of those available at the privileged level.

Use this mode to

• Enter menu mode.

• Display system information.

Enter disable to exit.

The privileged command is advance mode

Privileged this mode to

• Display advance function status

• save configures

Enter the configure command while in privileged

EXEC mode.

Enter the vlan database command while in privileged

EXEC mode.

switch(config)#To exit to

Enter the interface command (with a specific interface) while in global configuration mode switch(configif)# privileged

EXEC mode, enter exit or end switch(vlan)# To exit to user

EXEC mode, enter exit.

To exit to global configuration mode, enter exit.

To exist privileged

EXEC mode or end.

Use this mode to configure parameters that apply to your

Switch as a whole.

Use this mode to configure

VLAN-specific parameters.

Use this mode to configure parameters for the switch and

Ethernet ports.

TECH SUPPORT: 1.888.678.9427



Symbol of Command Level.

Mode

User EXEC

Privileged EXEC

Global configuration

VLAN database

Interface configuration I

V

P

G

Symbol of Command Level

E

Commands Set List—System Commands Set

CNGE3FE7MS4

Commands show config show terminal write memory system name

[System Name] system location

[System Location] system description

[System Description] system contact

[System Contact] show system-info ip address

[Ip-address] [Subnetmask] [Gateway] ip dhcp show ip no ip dhcp reload default admin username

[Username] admin password

[Password]

Level Description

E Show switch configuration

P Show console information

P Save your configuration into permanent memory (flash rom)

G Configure system name

Example switch>show config switch#show terminal switch#write memory switch(config)#system name xxx

G Set switch system location string switch(config)#system location xxx

G Set switch system description string

G Set switch system contact window string

E Show system information

G Configure the IP address of switch switch(config)#system description xxx switch(config)#system contact xxx switch>show system-info switch(config)#ip address 192.168.1.1

255.255.255.0 192.168.1.254

G Enable DHCP client function of switch

P Show IP information of switch

G Disable DHCP client function of switch switch(config)#ip dhcp switch#show ip switch(config)#no ip dhcp

G Halt and perform a cold restart switch(config)#reload

G Restore to default Switch(config)#default switch(config)#admin username xxxxxx G Changes a login username.

(maximum 10 words)

G Specifies a password

(maximum 10 words) switch(config)#admin password xxxxxx

TECH SUPPORT: 1.888.678.9427


INSTALLATION AND OPERATION MANUAL CNGE3FE7MS4 show admin dhcpserver enable dhcpserver lowip

[Low IP] dhcpserver highip

[High IP] dhcpserver subnetmask

[Subnet mask] dhcpserver gateway

[Gateway] dhcpserver dnsip

[DNS IP] dhcpserver leasetime

[Hours] dhcpserver ipbinding

[IP address] show dhcpserver configuration show dhcpserver clients show dhcpserver ip-binding no dhcpserver security enable security http security telnet security ip

[Index(1..10)] [IP Address] show security no security no security http no security telnet

P Show administrator information switch#show admin

G Enable DHCP Server switch(config)#dhcpserver enable

G Configure low IP address for IP pool

G Configure high IP address for IP pool switch(config)# dhcpserver lowip

192.168.1.1

switch(config)# dhcpserver highip

192.168.1.50

G Configure subnet mask for DHCP clients switch(config)#dhcpserver subnetmask

255.255.255.0

G Configure gateway for DHCP clients

G Configure DNS IP for DHCP clients

G Configure lease time (in hour) switch(config)#dhcpserver gateway

192.168.1.254

switch(config)# dhcpserver dnsip

192.168.1.1

switch(config)#dhcpserver leasetime 1

I Set static IP for DHCP clients by port switch(config)#interface fastEthernet 2 switch(config-if)#dhcpserver ipbinding

192.168.1.1

switch#show dhcpserver configuration P Show configuration of DHCP server

P Show client entries of DHCP server switch#show dhcpserver clinets

P Show IP-Binding information of

DHCP server switch#show dhcpserver ip-binding

G Disable DHCP server function switch(config)#no dhcpserver

G Enable IP security function switch(config)#security enable

G Enable IP security of HTTP server switch(config)#security http

G Enable IP security of telnet server switch(config)#security telnet

G Set the IP security list

P Show the information of IP security

G Disable IP security function switch(config)#security ip 1

192.168.1.55

switch#show security switch(config)#no security

G Disable IP security of HTTP serverswitch(config)#no security http

G Disable IP security of telnet server switch(config)#no security telnet

TECH SUPPORT: 1.888.678.9427



Commands Set List—Port Commands Set

Commands interface fastEthernet

[Portid] duplex

[full | half] speed

[10|100|1000|auto] flowcontrol mode

[Symmetric|Asymmetric] no flowcontrol security enable no security bandwidth type all bandwidth type broadcast-multicastflooded-unicast bandwidth type broadcast-multicast bandwidth type broadcast-only bandwidth in

[Value]

Level Description Example

G Choose the port for modification. switch(config)#interface fastEthernet 2

I Use the duplex configuration command to specify the duplex mode of operation for Fast

Ethernet.

I Use the speed configuration command to specify the speed mode of operation for Fast

Ethernet., the speed can’t be set to 1000 if the port isn’t a giga port..

switch(config)#interface fastEthernet 2 switch(config-if)#duplex full switch(config)#interface fastEthernet 2 switch(config-if)#speed 100

I Use the flowcontrol configuration command on Ethernet ports to control traffic rates during congestion.

switch(config)#interface fastEthernet 2 switch(config-if)#flowcontrol mode

Asymmetric

I Disable flow control of interface switch(config-if)#no flowcontrol

I

I Enable security of interface

Disable security of interface

I Set interface ingress limit frame type to “accept all frame”

I Set interface ingress limit frame type to “accept broadcast, multicast, and flooded unicast frame”

I Set interface ingress limit frame type to “accept broadcast and multicast frame”

I Set interface ingress limit frame type to “only accept broadcast frame” switch(config)#interface fastEthernet 2 switch(config-if)#security enable switch(config)#interface fastEthernet 2 switch(config-if)#no security switch(config)#interface fastEthernet 2 switch(config-if)#bandwidth type all switch(config)#interface fastEthernet 2 switch(config-if)#bandwidth type broadcast-multicast-flooded-unicast switch(config)#interface fastEthernet 2 switch(config-if)#bandwidth type broadcast-multicast switch(config)#interface fastEthernet 2 switch(config-if)#bandwidth type broadcast-only

I Set interface input bandwidth.

Rate Range is from 100 kbps to

102400 kbps or to 256000 kbps for giga ports, and zero means no limit.

switch(config)#interface fastEthernet 2 switch(config-if)#bandwidth in 100

TECH SUPPORT: 1.888.678.9427


INSTALLATION AND OPERATION MANUAL bandwidth out

[Value] show bandwidth state

[Enable | Disable] show interface configuration show interface status show interface accounting no accounting

CNGE3FE7MS4

I

I Set interface output bandwidth.

Rate Range is from 100 kbps to

102400 kbps or to 256000 kbps for giga ports, and zero means no limit.

I Show interfaces bandwidth control

I show interface configuration status show interface actual status switch(config)#interface fastEthernet 2 switch(config-if)#bandwidth out 100 switch(config)#interface fastEthernet 2 switch(config-if)#show bandwidth

I Use the state interface configuration command to specify the state mode of operation for

Ethernet ports. Use the disable form of this command to disable the port.

switch(config)#interface fastEthernet 2 switch(config-if)#state Disable switch(config)#interface fastEthernet

2 switch(config-if)#show interface configuration switch(config)#interface fastEthernet 2 switch(config-if)#show interface status

I show interface statistic counter switch(config)#interface fastEthernet

2 switch(config-if)#show interface accounting

I Clear interface accounting information switch(config)#interface fastEthernet 2 switch(config-if)#no accounting

TECH SUPPORT: 1.888.678.9427



Commands Set List—Trunk command set

Commands aggregator priority

[1to65535] aggregator activityport

[Port Numbers] aggregator group

[GroupID] [Port-list] lacp workp

[Workport] aggregator group

[GroupID] [Port-list] nolacp show aggregator no aggregator lacp

[GroupID] no aggregator group

[GroupID]

Level Description

G Set port group system priority

G Set activity port

Example switch(config)#aggregator priority 22 switch(config)#aggregator activityport

2

G Assign a trunk group with LACP active.

[GroupID] :1to3

[Port-list]:Member port list,

This parameter could be a port range(ex.1-4) or a port list separate

1,4,3 lacp workp 3 by a comma(ex.2, 3, 6)

[Workport]: The amount of work ports, this value could not be less than zero or be large than the amount of member ports.

switch(config)#aggregator group 1 1-4 lacp workp 2 or switch(config)#aggregator group 2

G Assign a static trunk group.

[GroupID] :1to3

[Port-list]:Member port list,

This parameter could be a port switch(config)#aggregator group 1 2-4 nolacp or switch(config)#aggreator group 1 3,1,2 range(ex.1-4) or a port list separate by a comma(ex.2, 3, 6) nolacp

P Show the information of trunk group switch#show aggregator

G Disable the LACP function of trunk group switch(config)#no aggreator lacp 1

G Remove a trunk group switch(config)#no aggreator group 2

TECH SUPPORT: 1.888.678.9427



Commands Set List—VLAN command set

Commands vlan database vlan

[8021q | gvrp] no vlan

[VID] no gvrp

IEEE 802.1Q VLAN vlan 8021q port

[PortNumber] access-link untag

[UntaggedVID] vlan 8021q port

[PortNumber] trunk-link tag

[TaggedVID List] vlan 8021q port

[PortNumber] hybrid-link untag

[UntaggedVID] tag

[TaggedVID List] vlan 8021q aggreator

[TrunkID] access-link untag

[UntaggedVID] vlan 8021q aggreator

[TrunkID] trunk-link tag

[TaggedVID List] vlan 8021q aggreator

[PortNumber] hybrid-link untag

[UntaggedVID] tag

[TaggedVID List] show vlan [VID] or show vlan

Level Description

P

V

Enter VLAN configure mode

To set switch VLAN mode.

V Disable vlan group (by VID)

V Disable GVRP

Example switch#vlan database switch(vlan)# vlanmode 802.1q

or switch(vlan)# vlanmode gvrp switch(vlan)#no vlan 2 switch(vlan)#no gvrp

V Assign a access link for VLAN by port, if the port belong to a trunk group, this command can’t be applied.

switch(vlan)#vlan 802.1q port 3 accesslink untag 33

V Assign a trunk link for VLAN by port, if the port belong to a trunk group, this command can’t be applied.

switch(vlan)#vlan 8021q port 3 trunklink tag 2,3,6,99 or switch(vlan)#vlan 8021q port 3 trunklink tag 3-20

V Assign a hybrid link for VLAN by port, if the port belong to a trunk group, this command can’t be applied.

switch(vlan)# vlan 8021q port 3 hybridlink untag 4 tag 3,6,8 or switch(vlan)# vlan 8021q port 3 hybridlink untag 5 tag 6-8

V Assign a access link for VLAN by trunk group switch(vlan)#vlan 8021q aggreator 3 access-link untag 33

V

V

Assign a trunk link for VLAN by trunk group

V Assign a hybrid link for VLAN by trunk group

Show VLAN information switch(vlan)#vlan 8021q aggreator 3 trunk-link tag 2,3,6,99 or switch(vlan)#vlan 8021q aggreator 3 trunk-link tag 3-20 switch(vlan)# vlan 8021q aggreator 3 hybrid-link untag 4 tag 3,6,8 or switch(vlan)# vlan 8021q aggreator 3 hybrid-link untag 5 tag 6-8 switch(vlan)#show vlan 23

TECH SUPPORT: 1.888.678.9427



Commands Set List—Spanning Tree command set

Commands spanning-tree enable spanning-tree priority

[0to61440] spanning-tree max-age

[seconds] spanning-tree hellotime [seconds] spanning-tree forwardtime [seconds] stp-path-cost

[1to200000000] stp-path-priority

[Port Priority]

Level Description

G Enable spanning tree

Example switch(config)#spanning-tree enable

G Configure spanning tree priority parameter

G Use the spanning-tree hello-time global configuration command to specify the interval between hello bridge protocol data units

(BPDUs).

switch(config)#spanning-tree priority

32767

G Use the spanning-tree max-age global configuration command to change the interval between messages the spanning tree receives from the root switch.

If a switch does not receive a bridge protocol data unit (BPDU) message from the root switch within this interval, it recomputed the Spanning Tree Protocol (STP) topology.

switch(config)# spanning-tree max-age

15 switch(config)#spanning-tree hellotime 3

G Use the spanning-tree forwardtime global configuration command to set the forwardingtime for the specified spanningtree instances. The forwarding time determines how long each of the listening and learning states last before the port begins forwarding.

switch(config)# spanning-tree forwardtime 20

I Use the spanning-tree cost interface configuration command to set the path cost for Spanning

Tree

Protocol (STP) calculations. In the event of a loop, spanning tree considers the path cost when selecting an interface to place into the forwarding state.

switch(config)#interface fastEthernet 2 switch(config-if)#stp-path-cost 20

I Use the spanning-tree portpriority interface configuration command to configure a port priority that is used when two switches tie for position as the root switch.

switch(config)#interface fastEthernet 2 switch(config-if)# stp-path-priority 127

TECH SUPPORT: 1.888.678.9427


INSTALLATION AND OPERATION MANUAL CNGE3FE7MS4 stp-admin-p2p

[Auto|True|False] stp-admin-edge

[True|False] stp-admin-non-stp

[True|False]

Show spanning-tree no spanning-tree

I Admin P2P of STP priority on this interface.

I Admin NonSTP of STP priority on this interface.

switch(config)#interface fastEthernet 2 switch(config-if)# stp-admin-p2p Auto

I Admin Edge of STP priority on this interface.

switch(config)#interface fastEthernet 2 switch(config-if)# stp-admin-edge True switch(config)#interface fastEthernet 2 switch(config-if)# stp-admin-non-stp

False

E Display a summary of the spanning-tree states.

G Disable spanning-tree.

switch>show spanning-tree switch(config)#no spanning-tree

Commands Set List—QoS command set

Commands qos policy

[weighted-fair|strict] qos prioritytype

[port-based|cos-only|tosonly|cos-first|tos-first] qos priority portbased

[Port]

[lowest|low|middle|high] qos priority cos [Priority]

[lowest|low|middle|high] qos priority tos [Priority]

[lowest|low|middle|high] show qos no qos

Level Description

G Select QOS policy scheduling

G

G

G

G

P

Setting of QOS priority type

Configure Port-based Priority

Configure COS Priority

Configure TOS Priority

Display the information of QoS configuration

G Disable QoS function

Example switch(config)#qos policy weightedfair switch(config)#qos prioritytype switch(config)#qos priority portbased

1 low switch(config)#qos priority cos 22 middle switch(config)#qos priority tos 3 high switch>show qos switch(config)#no qos

TECH SUPPORT: 1.888.678.9427



Commands Set List—IGMP command set

Commands igmp enable

Igmp-query auto


G Enable IGMP snooping function switch(config)#igmp enable

G Set IGMP query to auto mode switch(config)#Igmp-query auto

Igmp-query force G Set IGMP query to force mode switch(config)#Igmp-query force show igmp configuration P Displays the details of an IGMP configuration.

show igmp multi P Displays the details of an IGMP snooping entries.

no igmp no igmp-query switch#show igmp configuration switch#show igmp multi

G Disable IGMP snooping function switch(config)#no igmp

G Disable IGMP query switch#no igmp-query

TECH SUPPORT: 1.888.678.9427



Commands Set List—MAC/Filter Table command set

Commands mac-address-table static hwaddr

[MAC] mac-address-table filter hwaddr

[MAC]

Level Description

I Configure MAC address table of

G interface (static).

Configure MAC address table(filter)

Example switch(config)#interface fastEthernet 2 switch(config-if)#mac-address-table static hwaddr 000012345678 switch(config)#mac-address-table filter hwaddr 000012348678 show mac-address-table P Show all MAC address table show mac-address-table static switch#show mac-address-table

P Show static MAC address table switch#show mac-address-table static

P Show filter MAC address table.

switch#show mac-address-table filter show mac-address-table filter no mac-address-table static hwaddr

[MAC] no mac-address-table filter hwaddr

[MAC] no mac-address-table

I

G

Remove an entry of MAC address table of interface (static)

Remove dynamic entry of MAC address table switch(config)#interface fastEthernet 2 switch(config-if)#no mac-address-table static hwaddr 000012345678

G Remove an entry of MAC address table (filter) switch(config)#no mac-address-table filter hwaddr 000012348678 switch(config)#no mac-address-table

TECH SUPPORT: 1.888.678.9427



Commands Set List—SNMP command set

Commands snmp agent-mode

[v1v2c | v3] snmp-server host

[IP address] community

[Community-string] trap-version

[v1|v2c] snmp community-strings

[Community-string] right

[RO|RW] snmp snmpv3-user

[User Name] password

[Authentication

Password] [Privacy

Password] show snmp show snmp-server


G Select the agent mode of SNMP switch(config)#snmp agent-mode v1v2c

G Configure SNMP server host information and community string switch(config)#snmp-server host

192.168.10.50 community public trapversion v1

(remove)

Switch(config)# no snmp-server host

192.168.10.50

G Configure the community string right

G Configure the user profile for

SNMPV3 agent. Privacy password could be empty.

switch(config)#snmp communitystrings public right RO or switch(config)#snmp communitystrings public right RW switch(config)#snmp snmpv3-user test01 password AuthPW PrivPW no snmp communitystrings [Community] no snmp snmpv3-user

[User Name] password

[Authentication

Password] [Privacy

Password] no snmp-server host

[Host-address]

P Show SNMP configuration

P Show specified trap server information switch#show snmp switch#show snmp-server

G Remove the specified community. switch(config)#no snmp communitystrings public

G Remove specified user of SNMPv3 agent. Privacy password could be empty.

switch(config)# no snmp snmpv3-user test01 password AuthPW PrivPW

G Remove the SNMP server host.

switch(config)#no snmp-server

192.168.10.50

TECH SUPPORT: 1.888.678.9427



Commands Set List—Port Mirroring command set

Commands monitor rx monitor tx show monitor monitor

[RX|TX|Both] show monitor no monitor


G Set RX destination port of monitor function switch(config)#monitor rx

G Set TX destination port of monitor function switch(config)#monitor tx

P Show port monitor information switch#show monitor

I Configure source port of monitor function switch(config)#interface fastEthernet 2 switch(config-if)#monitor RX

I Show port monitor information switch(config)#interface fastEthernet 2 switch(config-if)#show monitor

I Disable source port of monitor function switch(config)#interface fastEthernet 2 switch(config-if)#no monitor

TECH SUPPORT: 1.888.678.9427



Commands Set List—802.1x command set

Commands

8021x enable

8021x system radiousip

[IP address]

8021x system serverport

[port ID]

8021x system accountport

[port ID]

8021x system sharekey

[ID]

8021x system nasid

[words]

8021x misc quietperiod

[sec.]


G Use the 802.1x global configuration command to enable

802.1x protocols. switch(config)# 8021x enable

G Use the 802.1x system radious IP global configuration command to change the radious server IP.

switch(config)# 8021x system radiousip

192.168.1.1

G Use the 802.1x system server port global configuration command to change the radious server port switch(config)# 8021x system serverport 1815

G Use the 802.1x system account port global configuration command to change the accounting port switch(config)# 8021x system accountport 1816

G Use the 802.1x system share key global configuration command to change the shared key value.

switch(config)# 8021x system sharekey

123456

G Use the 802.1x system nasid global configuration command to change the NAS ID switch(config)# 8021x system nasid test1

G Use the 802.1x misc quiet period global configuration command to specify the quiet period value of the switch.

switch(config)# 8021x misc quietperiod

10

8021x misc txperiod

[sec.]

8021x misc supportimeout [sec.]

8021x misc servertimeout [sec.]

G Use the 802.1x misc TX period global configuration command to set the TX period.

switch(config)# 8021x misc txperiod 5

G Use the 802.1x misc supp timeout global configuration command to set the supplicant timeout.

switch(config)# 8021x misc supportimeout 20

G Use the 802.1x misc server timeout global configuration command to set the server timeout.

switch(config)#8021x misc servertimeout 20

8021x misc maxrequest

[number]

8021x misc reauthperiod [sec.]

G Use the 802.1x misc max request global configuration command to set the MAX requests.

switch(config)# 8021x misc maxrequest

3

G Use the 802.1x misc reauth period global configuration command to set the reauth period.

switch(config)# 8021x misc reauthperiod 3000

TECH SUPPORT: 1.888.678.9427



8021x portstate

[disable | reject | accept | authorize] show 8021x no 8021x

I Use the 802.1x port state interface configuration command to set the state of the selected port.

switch(config)#interface fastethernet 3 switch(config-if)#8021x portstate accept

E Display a summary of the 802.1x properties and also the port sates.

switch>show 8021x

G Disable 802.1x function switch(config)#no 8021x

Commands Set List—TFTP command set

Commands Level Description Example backup flash:backup_cfg G Save configuration to TFTP and need to specify the IP of TFTP server and the file name of image.

switch(config)#backup flash:backup_ cfg restore flash:restore_cfg G Get configuration from TFTP server and need to specify the IP of TFTP server and the file name of image.

upgrade flash:upgrade_ fw

G Upgrade firmware by TFTP and need to specify the IP of TFTP server and the file name of image.

switch(config)#restore flash:restore_cfg switch(config)#upgrade lash:upgrade_ fw

Commands Set List—SYSLOG, SMTP, EVENT command set

Commands systemlog ip

[IP address] systemlog mode

[client|server|both] show systemlog show systemlog no systemlog smtp enable smtp serverip

[IP address] smtp authentication smtp account

[account]


G Set System log server IP address. switch(config)# systemlog ip

192.168.1.100

G Specified the log mode switch(config)# systemlog mode both

E Display system log.

P Show system log client & server information

G

G

G

Disable systemlog functon

Enable SMTP function

Configure SMTP server IP

Switch>show systemlog switch#show systemlog switch(config)#no systemlog switch(config)#smtp enable switch(config)#smtp serverip

192.168.1.5

G Enable SMTP authentication switch(config)#smtp authentication

G Configure authentication account switch(config)#smtp account User

TECH SUPPORT: 1.888.678.9427


INSTALLATION AND OPERATION MANUAL CNGE3FE7MS4 smtp password

[password] smtp rcptemail

[Index] [Email address] show smtp no smtp event device-cold-start

[Systemlog|SMTP|Both] event authenticationfailure

[Systemlog|SMTP|Both] event ComRingtopology-change

[Systemlog|SMTP|Both] event systemlog

[Link-UP|Link-Down|Both] event smtp

[Link-UP|Link-Down|Both] show event no event device-coldstart no event authenticationfailure no event ComRingtopology-change no event systemlog no event smpt show systemlog

G Configure authentication password switch(config)#smtp password

G Configure Rcpt e-mail Address switch(config)#smtp rcptemail 1 Alert@ test.com

P

G

Show the information of SMTP

Disable SMTP function

G Set cold start event type switch#show smtp switch(config)#no smtp

G Set Authentication failure event type switch(config)#event device-cold-start both switch(config)#event authenticationfailure both

G Set s ring topology changed event type switch(config)#event ring-topologychange both

I

I Set port event for system log

Set port event for SMTP switch(config)#interface fastethernet 3 switch(config-if)#event systemlog both switch(config)#interface fastethernet 3 switch(config-if)#event smtp both switch#show event P Show event selection

G Disable cold start event type

G Disable Authentication failure event typ

G Disable ComRing topology changed event type switch(config)#no event device-coldstart switch(config)#no event authenticationfailure switch(config)#no event ring-topologychange

I Disable port event for system log switch(config)#interface fastethernet 3 switch(config-if)#no event systemlog

I Disable port event for SMTP switch(config)#interface fastethernet 3 switch(config-if)#no event smtp

P Show system log client & server information switch#show systemlog

TECH SUPPORT: 1.888.678.9427



Commands Set List—SNTP command set

Commands sntp enable sntp daylight sntp daylight-period

[Start time] [End time] sntp daylight-offset

[Minute] sntp ip

[IP] sntp timezone

[Timezone] show sntp show sntp timezone no sntp no sntp daylight

Level Description

G Enable SNTP function

Example switch(config)#sntp enable

G Enable daylight saving time, if

SNTP function is inactive, this command can’t be applied.

switch(config)#sntp daylight

G Set period of daylight saving time, if SNTP function is inactive, this command can’t be applied.

Parameter format:

[yyyymmdd-hh:mm] switch(config)# sntp daylight-period

20060101-01:01 20060202-01-01

G Set offset of daylight saving time, if SNTP function is inactive, this command can’t be applied. switch(config)#sntp daylight-offset 3

G Set SNTP server IP, if SNTP function is inactive, this command can’t be applied.

switch(config)#sntp ip 192.169.1.1

G Set timezone index, use “show sntp timzezone” command to get more information of index number switch(config)#sntp timezone 22

P Show SNTP information

P Show index number of time zone list

G Disable SNTP function

G Disable daylight saving time switch#show sntp switch#show sntp timezone switch(config)#no sntp switch(config)#no sntp daylight

TECH SUPPORT: 1.888.678.9427



Commands Set List — C-Ring command set

Commands

Ring enable

Ring master

Ring couplering

Ring dualhoming

Ring ringport

[1st Ring Port] [2nd Ring

Port]

Ring couplingport

[Coupling Port]

Ring controlport

[Control Port]

Ring homingport

[Dual Homing Port] show Ring no Ring no Ring master no Ring couplering no Ring dualhoming

Level Description

G Enable C-Ring

G Enable ring master

G Enable couple ring

G Enable dual homing

G Configure 1st/2nd Ring Port

G

G

G

P

G

G

G

G

Configure Coupling Port

Configure Control Port

Configure Dual Homing Port

Show the information of C-Ring

Disable C-Ring

Disable ring master

Disable couple ring

Disable dual homing

Example switch(config)# ring enable switch(config)# ring master switch(config)# ring couplering switch(config)# ring dualhoming switch(config)# ring ringport 7 8 switch(config)# ring couplingport 1 switch(config)# ring controlport 2 switch(config)# ring homingport 3 switch#show ring switch(config)#no ring switch(config)# no ring master switch(config)# no ring couplering switch(config)# no ring dualhoming

TECH SUPPORT: 1.888.678.9427



Technical Specifications

Physical Ports

10/100 BASE-T(X) Ports 7 RJ45, Auto MDI/MDIX

Gigabit Combo Ports 3 with 10/100/1000BASE-T(X) and 100/1000BASE-X SFP port

Technology

Ethernet Standards

MAC Table

Priority Queues

Processing

Switch Properties

Security Features

Software Features

IEEE 802.3 for 10BASE-T

IEEE 802.3u for 100BASE-TX and 100BASE-FX

IEEE 802.3z for 1000BASE-X

IEEE 802.3ab for 1000BASE-T

IEEE 802.3x for Flow control

IEEE 802.3ad for LACP (Link Aggregation Control Protocol )

IEEE 802.1D for STP (Spanning Tree Protocol)

IEEE 802.1p for COS (Class of Service)

IEEE 802.1Q for VLAN Tagging

IEEE 802.1w for RSTP (Rapid Spanning Tree Protocol)

IEEE 802.1s for MSTP (Multiple Spanning Tree Protocol)

IEEE 802.1x for Authentication

IEEE 802.1AB for LLDP (Link Layer Discovery Protocol)

8192 MAC addresses

4

Store-and-Forward

Switching latency: 7 us

Switching bandwidth: 7.4 Gbps

Max. Number of Available VLANs: 4096

IGMP multicast groups: 1024

Port rate limiting: User Define

Enable/disable ports, MAC based port security

Port based network access control (802.1x)

VLAN (802.1Q ) to segregate and secure network traffic

Supports Q-in-Q VLAN for performance & security to expand the VLAN space

Radius centralized password management

SNMP v1/v2c/v3 encrypted authentication and access security

STP/RSTP/MSTP (IEEE 802.1D/w/s)

Redundant Ring (C-Ring) with recovery time < 10ms over 250 units

TOS/Diffserv supported

Quality of Service (802.1p) for real-time traffic

VLAN (802.1Q) with VLAN tagging and GVRP supported

IGMP Snooping for multicast filtering

Port configuration, status, statistics, monitoring, security

SNTP for synchronizing of clocks over network

Support PTP Client (Precision Time Protocol) clock synchronization

DHCP Server / Client support

Port Trunk support

TECH SUPPORT: 1.888.678.9427



Network Redundancy

Warning / Monitoring

System

ComRing

C-Ring

Legacy Ring

C-RSTP

STP

RSTP

MSTP

Relay output for fault event alarming

Syslog server / client to record and view events

Include SMTP for event warning notification via email

Event selection support

RS232 Serial Console Port RS232 in RJ-45 connector with console cable. 9600Bps, 8, N, 1

LED indicators

Power Indicator

C-Ring Indicator

R.M. indicator

Fault indicator

10/100BASE-T(X) RJ45

Port Indicator

Green: Power LED x 3

Green: Indicate system operated in C-Ring mode

Green: Indicate system operated in C-Ring Master mode

Amber: Indicate unexpected event occurred

Green: Link/Act. Amber: Duplex/Collision

10/100/1000BASE-T(X)

RJ45

Port Indicator

Green: Link/Act. Amber: 100Mbps indicator

100/1000BASE-X Fiber

Port Indicator

Fault contact Relay

Green: Link/Act.

Form C relay output to carry capacity of 1A at 24VDC

Power

Redundant Input Power Dual power inputs. 85 to 264 VAC / 88 to 373 VDC on dual 3-pin terminal block

Power Consumption (Typ.) 12 Watts

Overload Current

Protection

Present

Reverse polarity protectionPresent

Physical Characteristic

Enclosure IP-30

Dimension (W × D × H) 96.4 × 148.5 × 154 mm (3.79 × 5.85 × 6.06 in)

Weight

Environmental

1935g / 4.26lb

Storage Temperature -40 to +85º C (-40 to +185º F)

Operating Temperature -40 to +85º C (-40 to +185º F)

Operating Humidity 5% to 95% Non-condensing

TECH SUPPORT: 1.888.678.9427



Regulatory approvals

EMI

EMS

Shock

Free Fall

Vibration

Safety

Power Automation

Warranty

FCC Part 15, CISPR (EN55022) class A , EN50155 (EN50121-3-2, EN55011, EN50121-4)

EN61000-4-2 (ESD)

EN61000-4-3 (RS)

EN61000-4-4 (EFT)

EN61000-4-5 (Surge)

EN61000-4-6 (CS)

EN61000-4-8

EN61000-4-11

IEC60068-2-27

IEC60068-2-32

IEC60068-2-6

EN60950-1

IEC 61850-3, IEEE 1613

Lifetime

TECH SUPPORT: 1.888.678.9427



TECH SUPPORT: 1.888.678.9427


MECHANICAL INSTALLATION INSTRUCTIONS

ComNet Customer Service

Customer Care is ComNet Technology’s global service center, where our professional staff is ready to answer your questions at any time.

Email ComNet Global Service Center: [email protected]

3 CORPORATE DRIVE | DANBURY, CT 06810 | USA

T: 203.796.5300 | F: 203.796.5303 | TECH SUPPORT: 1.888.678.9427 | [email protected]

8 TURNBERRY PARK ROAD | GILDERSOME | MORLEY | LEEDS, UK LS27 7LE

T: +44 (0)113 307 6400 | F: +44 (0)113 253 7462 | [email protected]

© 2014 Communications Networks Corporation. All Rights Reserved. “ComNet” and the “ComNet Logo” are registered trademarks of Communication Networks, LLC.

Product information | Comnet CNGE3FE7MS4 System information

ELECTRICAL SUBSTATION-RATED

MANAGED ETHERNET SWITCH WITH (7) 10/100T(X)

+ (3) CONFIGURABLE 10/100/1000T(X)/100/1000FX PORTS

Contents

Regulatory Compliance Statement

Warranty

Disclaimer

Safety Information

Overview

Introduction

Software Features

Hardware Features

Safety Indications

Hardware Installation

Installing Switch on DIN-Rail

Wall Mounting Installation

Hardware Overview

Front Panel

Front Panel LEDs

Wiring

Rear Panel

Cables

Ethernet Cables

SFP

Console Port Cable

WEB Management

Configuration by Web Browser

Port Setting

Multicast

Command Line Interface Management

About CLI Management

Commands Level

Symbol of Command Level.

Commands Set List—System Commands Set

Commands Set List—Port Commands Set

Commands Set List—Trunk command set

Commands Set List—VLAN command set

Commands Set List—Spanning Tree command set

Commands Set List—QoS command set

Commands Set List—IGMP command set

Commands Set List—MAC/Filter Table command set

Commands Set List—SNMP command set

Commands Set List—Port Mirroring command set

Commands Set List—802.1x command set

Commands Set List—TFTP command set

Commands Set List—SYSLOG, SMTP, EVENT command set

Commands Set List—SNTP command set

Commands Set List — C-Ring command set

Technical Specifications

Related manuals

Comnet

CNFE3DOE2/M

Comnet

CN-NMS

IS5 COMMUNICATIONS

iES24G

Comnet

SFP Modules

Comnet

eConsole