scalance x-300 / x-400 - Industry Support Siemens

scalance x-300 / x-400 - Industry Support Siemens

SCALANCE X-300 / X-400

SIMATIC NET

Industrial Ethernet Switches

SCALANCE X-300 / X-400

Configuration Manual

Configuration using Web

Based Management and

Command Line Interface

12/2015

C79000-G8976-C187-26

Legal information

Warning notice system

This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.

DANGER indicates that death or severe personal injury will result if proper precautions are not taken.

WARNING indicates that death or severe personal injury may result if proper precautions are not taken.

CAUTION indicates that minor personal injury can result if proper precautions are not taken.

NOTICE indicates that property damage can result if proper precautions are not taken.

If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.

Qualified Personnel

The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions.

Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.

Proper use of Siemens products

Note the following:

WARNING

Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.

Trademarks

All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.

Disclaimer of Liability

We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.

Siemens AG

Division Process Industries and Drives

Postfach 48 48

90026 NÜRNBERG

GERMANY

C79000-G8976-C187-26

Ⓟ 11/2015 Subject to change

Copyright © Siemens AG 2006 - 2015.

All rights reserved

Preface

Purpose of the manual

This manual supports you when configuring the SCALANCE X-300 and X-400 Industrial

Ethernet switches. It outlines the technical options provided by a SCALANCE X-300/X-400 and describes how to configure with Web Based Management and the Command Line

Interface.

Validity of this manual

This manual is valid for the following software versions:

● SCALANCE X-300/X408-2 as of firmware version 4.0.3

● SCALANCE X414-3E as of firmware version 3.10.0

● Primary Setup Tool as of version 3.1.0

● SNMP/OPC server as of version 6.2.1

This manual is valid for the following products lines:

● SCALANCE X-300

● SCALANCE X-400

Within the SCALANCE X-300 product line, there are several product groups (see also the product overview in the "Operating Instructions Industrial Ethernet Switches SCALANCE X-

300").

Names of the devices in this configuration manual

The descriptions in this configuration manual always apply to the devices of the

SCALANCE X-300 and SCALANCE X-400 product lines listed under "Validity of the manual" in this configuration manual unless the description relates to a specific device of the product line. In the remainder of the description, the devices are called "IE switches".

SIMATIC NET glossary

Explanations of many of the specialist terms used in this documentation can be found in the

SIMATIC NET glossary.

You will find the SIMATIC NET glossary here:

● SIMATIC NET Manual Collection or product DVD

The DVD ships with certain SIMATIC NET products.

● On the Internet under the following address:

50305045 ( http://support.automation.siemens.com/WW/view/en/50305045 )

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

3

4

Preface

Security information

Siemens provides products and solutions with industrial security functions that support the secure operation of plants, solutions, machines, equipment and/or networks. They are important components in a holistic industrial security concept. With this in mind, Siemens’ products and solutions undergo continuous development. Siemens recommends strongly that you regularly check for product updates.

For the secure operation of Siemens products and solutions, it is necessary to take suitable preventive action (e.g. cell protection concept) and integrate each component into a holistic, state-of-the-art industrial security concept. Third-party products that may be in use should also be considered. For more information about industrial security, visit http://www.siemens.com/industrialsecurity .

To stay informed about product updates as they occur, sign up for a product-specific newsletter. For more information, visit http://support.automation.siemens.com

.

Trademarks

The following and possibly other names not identified by the registered trademark sign

® registered trademarks of Siemens AG:

are

SIMATIC NET, SCALANCE, C-PLUG, OLM

License conditions

Note

Open source software

Read the license conditions for open source software carefully before using the product.

You will find license conditions in the following documents on the supplied data medium:

● DOC_OSS-SCALANCE-X_74.pdf

● DC_LicenseSummaryScalanceX300_76.pdf

● DC_LicenseSummaryScalanceX400_76.pdf

You will find these documents on the product DVD in the following directory: /Open Source

Information

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Table of contents

1

2

3

4

Preface ................................................................................................................................................... 3

Introduction ............................................................................................................................................. 9

1.1

Technical documentation for SCALANCE X-300/X-400 ........................................................... 9

Network management for industrial networks ........................................................................................ 11

2.1

2.2

2.3

2.3.1

2.3.2

2.3.3

2.3.4

Configuration options with a SCALANCE X-300/X-400 .......................................................... 11

Functionality and properties of a SCALANCE X-300/X-400 ................................................... 12

Options of media redundancy ................................................................................................. 18

Media redundancy in ring topologies ...................................................................................... 18

MRP ........................................................................................................................................ 20

MRP multiple rings .................................................................................................................. 23

HRP......................................................................................................................................... 24

Assignment of an IP address ................................................................................................................. 25

3.1

Structure of an IP address ...................................................................................................... 26

3.2

3.3

Initial assignment of an IP address ......................................................................................... 27

Assigning an IP address over the serial interface of the SCALANCE X-400 ......................... 28

3.4

3.5

Assigning addresses with the BOOTP client .......................................................................... 29

Assigning addresses with the DHCP client ............................................................................ 30

3.6

Address assignment with the Primary Setup Tool .................................................................. 31

Configuration using Web Based Management and Command Line Interface ......................................... 33

4.1

4.1.1

4.1.2

4.1.3

4.1.4

4.2

4.2.1

4.2.2

4.2.3

4.2.4

4.2.5

4.2.6

4.2.7

4.2.8

4.2.9

4.2.10

4.2.11

4.3

4.3.1

General information on Web Based Management and Command Line Interface .................. 34

Introduction ............................................................................................................................. 34

The LED simulation of Web Based Management (WBM) ...................................................... 36

Working with Web Based Management .................................................................................. 38

Command Line Interface (CLI) ............................................................................................... 38

The System menu ................................................................................................................... 41

System Configuration.............................................................................................................. 41

System Identification & Maintenance (I&M) ............................................................................ 42

System Restart & Defaults ...................................................................................................... 43

System Save & Load via HTTP .............................................................................................. 46

System Save & Load via TFTP ............................................................................................... 48

System Version Numbers ....................................................................................................... 51

System Passwords & Login Mode .......................................................................................... 52

System Select/Set Button ....................................................................................................... 54

System Event Log Table ......................................................................................................... 55

C-PLUG Information ............................................................................................................... 57

Geographic coordinates .......................................................................................................... 59

The X-300/X-400 menu........................................................................................................... 61

X-300/X-400 Status page ....................................................................................................... 61

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

5

6

Table of contents

4.3.2

4.3.2.1

4.3.2.2

4.3.2.3

4.3.2.4

4.3.2.5

4.3.3

4.3.4

4.4

4.4.1

4.4.2

4.4.3

4.4.3.1

4.4.3.2

4.4.3.3

4.4.3.4

4.4.4

4.4.5

4.4.6

4.4.7

4.4.8

4.4.9

4.4.10

4.4.10.1

4.4.10.2

4.4.10.3

4.4.10.4

4.4.11

4.4.12

4.5

4.5.1

4.5.2

4.5.3

4.5.4

4.5.5

4.5.5.1

4.5.5.2

4.5.6

4.5.6.1

4.5.6.2

4.5.6.3

4.5.7

4.5.7.1

4.5.7.2

4.5.7.3

4.5.7.4

4.5.8

4.5.8.1

4.5.8.2

4.5.8.3

4.5.8.4

Ring Redundancy .................................................................................................................. 65

X-300/X-400 ring redundancy information ............................................................................. 65

X-300/X-400 Ring Configuration ............................................................................................ 69

X-300/X-400 observer ............................................................................................................ 73

X-300/X-400 Standby Mask ................................................................................................... 74

X-300/X-400 Standby Observer ............................................................................................. 78

X-300/X-400 Fault Mask ........................................................................................................ 81

X-300/X-400 Counters ........................................................................................................... 83

The Agent menu..................................................................................................................... 85

Agent Configuration ............................................................................................................... 85

Ping ........................................................................................................................................ 93

SNMP ..................................................................................................................................... 94

Agent SNMP Configuration .................................................................................................... 94

SNMPv1 Trap Configuration .................................................................................................. 97

SNMPv3 Group Configuration ............................................................................................... 99

SNMPv3 Users Configuration .............................................................................................. 102

Agent Timeout Configuration ............................................................................................... 106

Agent Event Configuration ................................................................................................... 107

Agent Digital Input Configuration (SCALANCE X414-3E) ................................................... 111

Agent E-Mail Configuration .................................................................................................. 113

Agent Syslog Configuration ................................................................................................. 115

Agent DHCP Configuration .................................................................................................. 116

Time Config .......................................................................................................................... 117

Agent Time Configuration .................................................................................................... 117

SNTP Client Configuration ................................................................................................... 120

NTP Client Configuration ..................................................................................................... 122

Daylight Saving Time ........................................................................................................... 124

Agent PNIO Configuration ................................................................................................... 127

Management Access Control List ........................................................................................ 128

The Switch menu ................................................................................................................. 133

Switch Configuration ............................................................................................................ 134

Port status ............................................................................................................................ 139

Link Check (SCALANCE X-300/X408-2) ............................................................................. 144

Port Mirroring ....................................................................................................................... 150

Link aggregation................................................................................................................... 152

Link Aggregation .................................................................................................................. 152

LACP Configuration ............................................................................................................. 157

IEEE 802.1x ......................................................................................................................... 158

802.1x RADIUS Configuration ............................................................................................. 158

802.1x port parameters ........................................................................................................ 160

802.1x Port Configuration .................................................................................................... 162

Unicast Filter (ACL) .............................................................................................................. 165

Current Unicast Filter (Access Control List) ......................................................................... 165

Access Control List Learning ............................................................................................... 169

Access Control Port Configuration ....................................................................................... 171

Unknown Unicast Blocking Mask ......................................................................................... 172

Multicast group ..................................................................................................................... 173

Current Multicast Groups ..................................................................................................... 173

GMRP Configuration ............................................................................................................ 178

IGMP Configuration ............................................................................................................. 179

Unknown Unicast Blocking Mask ......................................................................................... 180

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Table of contents

4.6

4.7

4.7.1

4.7.2

4.7.3

4.7.4

4.7.5

4.5.15.2

4.5.15.3

4.5.15.4

4.5.16

4.5.16.1

4.5.16.2

4.5.16.3

4.5.17

4.5.18

4.5.19

4.5.20

4.5.20.1

4.5.20.2

4.5.21

4.5.22

4.5.23

4.5.9

4.5.10

4.5.11

4.5.12

4.5.13

4.5.13.1

4.5.13.2

4.5.13.3

4.5.13.4

4.5.13.5

4.5.14

4.5.14.1

4.5.14.2

4.5.14.3

4.5.15

4.5.15.1

4.5.24

4.5.24.1

4.5.24.2

4.5.24.3

4.5.24.4

4.5.24.5

4.5.25

4.5.26

4.5.27

4.5.27.1

4.5.27.2

4.5.27.3

Broadcast Blocking Mask ..................................................................................................... 181

Fast learning ......................................................................................................................... 182

Load Limits Configuration (SCALANCE X414-3E) ............................................................... 183

Load Limits Rates (SCALANCE X-300/X408-2) ................................................................... 185

VLAN ..................................................................................................................................... 188

Current VLAN Configuration ................................................................................................. 188

VLAN Port Parameters ......................................................................................................... 194

GVRP Configuration ............................................................................................................. 197

VLAN Learning ...................................................................................................................... 198

X-300 VLAN Port Priority Mapping ....................................................................................... 199

STP/RSTP ............................................................................................................................ 201

Spanning Tree Configuration ................................................................................................ 201

Spanning Tree Port Parameters ........................................................................................... 205

Spanning Tree Port Configuration ........................................................................................ 208

MSTP (SCALANCE X-300/X408) ......................................................................................... 211

Multiple Spanning Tree Configuration .................................................................................. 211

CIST Port Parameters........................................................................................................... 215

MSTP Instances Configuration ............................................................................................. 220

Multiple Spanning Tree Port Configuration ........................................................................... 222

QoS ....................................................................................................................................... 226

QoS Configuration ................................................................................................................ 226

CoS to Queue Mapping ........................................................................................................ 228

DSCP to Queue Mapping ..................................................................................................... 229

LLDP Configuration ............................................................................................................... 230

Fiber Monitoring Protocol ...................................................................................................... 231

DCP Configuration ................................................................................................................ 235

DHCP Relay Agent ............................................................................................................... 237

DHCP Relay Agent Configuration ......................................................................................... 237

DHCP Relay Agent Port Configuration ................................................................................. 239

Precision Time Protocol (PTP) complying with IEEE 1588 .................................................. 241

Configuration of the Precision Time Protocol with the WBM ................................................ 248

Configuration of the Precision Time Protocol with the CLI ................................................... 251

Port Diagnostics .................................................................................................................... 253

Cable tester (SCALANCE X-300/X408-2) ............................................................................ 253

POF ports .............................................................................................................................. 254

POF Diagnostics ................................................................................................................... 256

FM Diagnostics ..................................................................................................................... 257

SFP diagnostics .................................................................................................................... 259

Loop Detection ...................................................................................................................... 261

NAT - Network Address Translation ..................................................................................... 268

Statistics ................................................................................................................................ 272

Packet Size Statistic ............................................................................................................. 274

Packet Type Statistic ............................................................................................................ 277

Error Statistic ........................................................................................................................ 279

The PoE menu item .............................................................................................................. 282

The Router menu (SCALANCE X414-3E) ............................................................................ 286

Router Configuration ............................................................................................................. 286

Router Subnets ..................................................................................................................... 288

Current Routes ...................................................................................................................... 290

RIPv2 Configuration .............................................................................................................. 294

RIPv2 Interfaces ................................................................................................................... 295

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

7

8

Table of contents

5

6

7

8

A

B

C

D

E

6.1

6.2

6.3

6.4

4.7.6

4.7.7

4.7.8

4.7.9

4.7.10

4.7.11

4.7.12

4.7.13

4.7.14

4.7.15

4.7.16

OSPFv2 Configuration ......................................................................................................... 300

OSPFv2 Areas ..................................................................................................................... 302

OSPFv2 Area Ranges ......................................................................................................... 305

OSPFv2 Interfaces ............................................................................................................... 307

OSPFv2 Virtual Links ........................................................................................................... 312

OSPFv2 Neighbors .............................................................................................................. 315

OSPFv2 State Database ...................................................................................................... 317

VRRP ................................................................................................................................... 318

VRRP Virtual Routers .......................................................................................................... 318

VRRP Associated IP Addresses .......................................................................................... 322

VRRP Statistics .................................................................................................................... 324

Configuration and diagnostics over SNMP ........................................................................................... 327

PROFINET IO functionality .................................................................................................................. 331

Configuring with PROFINET IO ........................................................................................... 331

Settings in HW Config .......................................................................................................... 338

Access options over PROFINET IO ..................................................................................... 343

Data record 0x802A (PDPortDataReal) ............................................................................... 353

6.5

MRP configuration ............................................................................................................... 358

C-PLUG ............................................................................................................................................... 363

Firmware update .................................................................................................................................. 365

8.1

8.1.1

8.1.2

8.1.3

Firmware update with functional firmware ........................................................................... 365

Firmware update over HTTP/HTTPS ................................................................................... 365

Firmware update over TFTP ................................................................................................ 365

Firmware updates over FTP ................................................................................................ 365

8.2

8.2.1

8.2.2

Firmware update using the boot software with an IE Switch X-400/XR-300 ....................... 366

Firmware update over the serial port ................................................................................... 367

Firmware update over an Ethernet port and FTP ................................................................ 370

Appendix A .......................................................................................................................................... 371

A.1

PC attachment at the serial interface of a SCALANCE X400 .............................................. 371

A.2

PC attachment at the serial interface of a SCALANCE X300 .............................................. 373

Appendix B .......................................................................................................................................... 375

B.1

MIB variables of a SCALANCE X300/X400 ......................................................................... 375

Appendix C .......................................................................................................................................... 383

C.1

Tagging frames .................................................................................................................... 383

Appendix D .......................................................................................................................................... 385

D.1

Error messages of the SCALANCE X300 / X400 ................................................................ 385

Appendix E .......................................................................................................................................... 391

E.1

Using the same configuration on multiple IE switches......................................................... 391

Index ................................................................................................................................................... 409

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Introduction

1

1.1 Technical documentation for SCALANCE X-300/X-400

Content of the Configuration Manual

This manual describes the configuration of IE switches.

You will need to configure IE switches if you want to use functions such as SNMP, Rapid

Spanning Tree, VLAN, routing (SCALANCE X414-3E) or E-mail. The manual also covers the question of firmware updates and the C-PLUG.

Before configuration, the device must be installed and connected up. You will find a description of the necessary steps for this in the Operating Instructions.

The following table shows you which information you will find in which chapter.

Topic

You would like an overview of the documentation of an

IE switch.

You would like to know which functions and configuration options are available with an IE switch.

You would like to know how an IP address is structured and which options you have for assigning an IP address to an IE switch.

You would like to configure an IE switch and require information on the relevant

CLI commands or want to know which pages of Web Based Management you need to edit.

You want to know how to manage an IE switch with SNMP.

You want to know how you can use the options of PROFINET IO for a connected

IE switch.

You would like to know about the options available with the configuration plug C-

PLUG.

You want to update the firmware.

Chapter

Chapter 1

Chapter 2

Chapter 3

Chapter 4

Chapter 5

Chapter 6

Chapter 7

Chapter 8

Content of the Operating Instructions

The "Operating Instructions Industrial Ethernet Switches SCALANCE X-400" and the

"Operating Instructions Industrial Ethernet Switches SCALANCE X-300" contain not only basic information on the topic of switches but also product descriptions of IE switches, media modules and extender modules. The instructions also describe commissioning of IE switches

(installation, wiring, using modules etc.).

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

9

Introduction

1.1 Technical documentation for SCALANCE X-300/X-400

Overview of the technical documentation of the IE Switches X-300 and X-400

The technical documentation of the X-300 product line is divided into hardware and software and can be found in the following documents:

● PH - Configuration Manual (PDF)

The software is described in the configuration manual (PH) for both product lines X-300 and X-400.

● BAK - Compact operating instructions on paper

The hardware of each product group is described in the Compact operating instructions

(BAK).

● BA - Operating Instructions (PDF)

The hardware for all product groups and general information can be found in the

Operating Instructions (BA).

Contents Product group Type of document

PH X-300/X-400

Document identification number

C79000-G89000-C187 Software description

Hardware description

All devices of the X-300 and X-400 product lines

All devices of the X-300 product line

X-300

X-300M

XR-300M

X-300 EEC

XR-300M EEC

X-300 PoE

XR-300M PoE

MM900 (media modules)

SFP (transceivers)

All devices of the X-400 product line

X-400

X-400EM (extender module)

X-400 media modules

BA X-300

BAK X-300

BAK X-300M

BAK XR-300M

BAK X-300 EEC

BAK XR-300M EEC

A5E01113043

A5E00982643

A5E02630801

A5E02661171

A5E02630809

A5E02661176

BAK X-300 PoE

BAK XR-300M PoE

BAK MM900

BAK SFP

Notices leaflet

BA X-400

A5E02630809

A5E02630810

A5E02661178

A5E02630804

A5E02648904

C79000-G8976-C186

BAK X-400

BAK X-400EM

A5E01020054

A5E00367421

BAK X-400 media modules A5E00367420

10

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Network management for industrial networks

2

2.1 Configuration options with a SCALANCE X-300/X-400

Ethernet port

The IE switches can be configured over the switch ports (in-band ports) if an IP address has already been assigned (see section "Assignment of an IP address").

Over the Ethernet interface, you can use the following protocols or services:

● Web Based Management (HTTP- and HTTPS-based)

● TELNET

● SSH

● SNMP

● Traps

● FTP

● TFTP

● E-mail

● Syslog

Note

With the SCALANCE X414-3E, there is also a Fast Ethernet interface available (out-band port) on the CPU module.

RS-232 interface

The IE switches X-400/XR-300 have an RS-232 interface. You can connect a PC or PG to this port with a null modem cable and a terminal program (for example HyperTerminal in

Windows, See also Appendix A). You use this port for the manual assignment of an IP address for the out-band port (SCALANCE X414-3E only) or the in-band port (refer to the

Section "Assignment of an IP address over the serial port"). The entire set of CLI commands is also available.

Note

Access to the IE switch management over the serial port or the Ethernet port of the CPU module is also possible when the network is disrupted (out-of-band management).

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

11

Network management for industrial networks

2.2 Functionality and properties of a SCALANCE X-300/X-400

2.2 Functionality and properties of a SCALANCE X-300/X-400

Integration of existing subnets with 10 Mbps and 100 Mbps

An IE switch automatically detects the following at its twisted pair ports:

● Send and receive wire pairs (autocrossover)

● Data rate (10 Mbps or 100 Mbps)

● Mode (full or half duplex)

This allows you to integrate subnets easily with IE switches over twisted pair.

Note

Even when using straight cables, an illegal loop can occur in the Ethernet network, for example by connecting two ports to an IE switch. Such a loop can lead to network overload and network failures.

Note

If an IE switch is connected to a partner device that does not operate in autonegotiation mode, the port must be set permanently to the parameters of the partner.

If both ends of the connection are not set manually, the duplex mode will not be detected.

The half duplex mode is used and results in poorer performance and collisions.

Gigabit Ethernet ports

These ports are particularly suitable for a high-performance connection between switches and have the following properties:

● Automatic detection of the send and receive cable pairs (autocrossover)

● Data rates 10 Mbps, 100 Mbps, or 1000 Mbps

● Full duplex

Note

For data transmission at 1 Gbps, at least a Cat 5e twisted-pair cable with 4 x 2 wires is necessary. With a four-wire cable (2 x 2 wires), a maximum data transmission rate of 100

Mbps is possible.

12

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Network management for industrial networks

2.2 Functionality and properties of a SCALANCE X-300/X-400

Fast redundancy in the ring

As of firmware version V3.0.0, the IE switches can handle the following redundancy procedures:

● MRP in the ring with a maximum reconfiguration time of 200 ms

● HRP with a maximum reconfiguration time of 300 ms

Redundant coupling of network segments

Rings or linear bus structures made up of IE switches (SCALANCE X-200 or X-300/X-400 or

OSM/ESM) can be linked redundantly with suitable cabling and appropriate configuration.

(See also section "X-400 Standby Mask menu item".)

The maximum failover time is 300 ms.

For more detailed information on redundant coupling of network segments and media redundancy in ring topologies, refer to the operating instructions "Industrial Ethernet

Switches SCALANCE X-400" or "Industrial Ethernet Switches SCALANCE X-300".

Store and Forward

An IE switch calculates the CRC sum of incoming data packets and only forwards data with a valid checksum (store and forward). Bad packets are not forwarded by the switch. Store and forward also allows operation in a network on different links with different transmission rates.

Support of virtual networks (VLAN port-based)

There is no physical difference between a virtual network (VLAN) and a normal LAN. The particular feature of a VLAN is that devices can be assigned to a device group during configuration. Several of these device groups use a network infrastructure that exists only once physically. Several "virtual networks" result on the one physical network. Data exchange and even the transmission of broadcasts takes place only within a VLAN.

The assignment to VLANs is achieved by expanding the frames. Four bytes of additional information are inserted after the destination and source address. For more detailed information on frame tagging, refer to Appendix C.

To be able to integrate end devices and subnets that do not support VLAN in virtual networks, switches can also handle the addition and removal of the VLAN additional information (VLAN tags). IE switches support assignment based on the port over which the devices are connected (port-based VLAN).

● X-400

Up to 62 port-based VLANs and the two predefined VLANs can be configured. VLANs correspond to the IEEE 802.1Q standard.

● X-300

Up to 253 port-based VLANs and the two predefined VLANs can be configured. VLANs correspond to the IEEE 802.1Q standard.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

13

Network management for industrial networks

2.2 Functionality and properties of a SCALANCE X-300/X-400

Spanning Tree

The spanning tree algorithm (STP) allows network structures to be created in which there are several connections between two stations. Spanning Tree permits exactly one path and disables the other (redundant) ports for data traffic. This prevents loops forming in the network. If there is an interruption, an alternative path is found via which the data is sent.

Spanning Tree is defined in the IEEE 802.1D-1998 standard.

Rapid Spanning Tree

The Rapid Spanning Tree Protocol (RSTP) is an expansion of the Spanning Tree Protocol

(STP). RSTP differs from STP essentially in that the devices are already collecting information about alternative routes during normal operation and do not need to gather this information after a disruption has occurred. This means that the reconfiguration time for an

RSTP controlled network can be reduced to a few seconds.

IE switches support both Rapid Spanning Tree and Spanning Tree.

Rapid Spanning Tree is defined in the IEEE 802.1D-2004 standard.

Multiple Spanning Tree

The Multiple Spanning Tree Protocol (MSTP) is a further development of the Rapid

Spanning Tree Protocol. Among other things, MSTP provides the option of operating separate RSTP instances within different VLANs or VLAN groups. This, for example, makes paths available within individual VLANs that the simple Rapid Spanning Tree Protocol would block globally for data traffic.

Multiple Spanning Tree is defined in the IEEE 802.1Q standard.

C-PLUG

The C-PLUG is an exchangeable storage medium on which all configuration information of an IE switch is stored. When you replace an IE switch, you simply need to insert the C-PLUG of the previous device in the new device. The new IE switch then starts up with the configuration of the previous device.

MAC address table

The MAC address table of an IE switch contains information about the port or ports to which a received frame should be forwarded. This table can contain both static entries (inserted by the user) as well as dynamic entries (learned based on the frames received by the IE switch).

14

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Network management for industrial networks

2.2 Functionality and properties of a SCALANCE X-300/X-400

Access Control

Note

In the firmware versions prior to 2.2.0, this property is called "Locked Ports".

If this function is activated for a port, an IE switch only forwards frames received at this port if their source address exists in the address table.

It is possible to have all connected nodes entered in the access control list automatically.

Note

The ring ports cannot be configured with access control enabled

.

Network access protection complying with the standard IEEE 802.1x

Ports can be configured for end devices that support authentication according to IEEE

802.1x. The authentication is made via a RADIUS server that must be reachable over the network.

Mirroring

Mirroring allows the data traffic of a port to be mirrored at another port. The data traffic can then be analyzed at this monitor port without any effects on operation.

E-mail function

An IE switch can be configured so that it sends an E-mail when certain events occur.

Event log table

The event log table logs events that occur during operation with an IE switch. The user can specify which events cause an entry in the table.

Time-of-day synchronization

IE switches allow the system time to be synchronized with external time transmitters. To use this functionality, there must, for example, be a SICLOCK time transmitter or an SNTP server whose frames the IE switch evaluates. Entries in the event log table then have a time stamp that is uniform throughout the system. This allows events to be sorted according to the time of their occurrence throughout the system speeding up the identification of the causes of problems.

Flow control

IE switches support flow control in half and full duplex mode.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

15

Network management for industrial networks

2.2 Functionality and properties of a SCALANCE X-300/X-400

BOOTP/DHCP

IE switches can obtain their IP addresses dynamically from a BOOTP or DHCP server.

As of firmware version 2.0, the DHCP mode can be selected if DHCP is enabled. In the previous firmware versions, DHCP is operated over the MAC address.

Note

If routing functions (SCALANCE X414-3E only) are enabled, DHCP and BOOTP are not in effect.

Note

DHCP and BOOTP only influence the in-band agent IP configuration; the out-band agent IP configuration of the SCALANCE X414-3E can only be set manually.

PROFINET IO

As of firmware version 2.0, operation of the switch as a PROFINET IO device is supported.

TELNET

The command line interface of an IE switch can be controlled with TELNET over a LAN or the Internet.

Note

A maximum of three simultaneous CLI connections (serial (only with an IE Switch X-400) and LAN) are possible.

SSH

The command line interface of an IE switch can be controlled with SSH over a LAN or the

Internet.

Note

A maximum of three simultaneous CLI connections (serial (only with an IE Switch X-400) and LAN) are possible.

SNMPv3

IE switches support SNMPv1, SNMPv2c, and SNMPv3. Among other things, SNMPv3 provides user management at protocol level as well as security functions (for example authentication). The configuration of users and groups for SNMPv3 is possible using Web

Based Management, the Command Line Interface or by direct access to the MIB objects

(only recommended for experts).

16

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Syslog

Network management for industrial networks

2.2 Functionality and properties of a SCALANCE X-300/X-400

Syslog according to RFC 3164 is used for transferring short, unencrypted text messages over UDP in the IP network. This requires a standard Syslog server.

DHCP Option 82

The DHCP relay function allows the IP address initialization of an end device depending on the connected switch port. DHCP Option 82 is supported with this function.

IGMP Snooping and IGMP Querier

IE switches support not only IGMP snooping but also the IGMP querier function. If IGMP

Snooping is enabled, IGMP packets are evaluated and the multicast filter table is updated with this information. If IGMP Query is also enabled, IE switches also send IGMP queries that trigger responses from IGMP-compliant nodes.

Only for SCALANCE X414-3E: Layer 3 functionality (routing)

You can also configure the SCALANCE X414-3E as a router. This allows various IP subnets to be interconnected. You can enter static routes and/or enable RIP/OSPF and VRRP router protocols. Using these standardized protocols, SCALANCE X414-3E can synchronize the configuration with other routers in the network.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

17

Network management for industrial networks

2.3 Options of media redundancy

2.3 Options of media redundancy

There are various options available to increase the network availability of an Industrial

Ethernet network with optical or electrical linear bus topologies:

● Mesh networks

● Parallel connection of transmission paths

● Closing a linear bus topology to form a ring topology

2.3.1 Media redundancy in ring topologies

Structure of a ring topology

Nodes in a ring topology can be external switches and/or the integrated switches of communications modules.

To set up a ring topology with media redundancy, you bring together the two free ends of a linear bus topology in one device. Closing the linear bus topology to form a ring is achieved with two ports (ring ports) of a device in the ring. This device is the redundancy manager. All other devices in the ring are redundancy clients.

Figure 2-1 Devices in a ring topology with media redundancy

The two ring ports of a device are the ports that establish the connection to its two neighboring devices in the ring topology. The ring ports are selected and set in the configuration of the relevant device. In STEP 7 and on the S7 Ethernet CP modules themselves, the ring ports are indicated by an "R" after the port number.

Note

Before physically closing the ring, download the configuration of your STEP 7 project to the individual devices.

18

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Network management for industrial networks

2.3 Options of media redundancy

How media redundancy works in a ring topology

When using media redundancy, the data paths between the individual devices are reconfigured if the ring is interrupted at one point. Following reconfiguration of the topology, the devices can once again be reached in the resulting new topology.

In the redundancy manager, the 2 ring ports are disconnected from each other if the network is uninterrupted. This prevents circulating data frames. In terms of data transmission, the ring topology is a linear bus topology. The redundancy manager monitors the ring topology. It does this by sending test frames both from ring port 1 and ring port 2. The test frames run round the ring in both directions until they arrive at the other ring port of the redundancy manager.

An interruption of the ring can be caused by loss of the connection between two devices or by failure of a device in the ring.

If the test frames of the redundancy manager no longer arrive at the other ring port because of an interruption in the ring, the redundancy manager connects its two ring ports. This substitute path once again restores a functioning connection between all remaining devices in the form of a linear bus topology.

As soon as the interruption is eliminated, the original transmission paths are established again, the two ring ports of the redundancy manager are disconnected and the redundancy clients informed of the change. The redundancy clients then use the new paths to the other devices.

The time between the ring interruption and restoration of a functional linear topology is known as the reconfiguration time.

If the redundancy manager fails, the ring becomes a functional linear bus.

Media redundancy methods

The following media redundancy methods are supported by SIMATIC NET products:

● HRP (High Speed Redundancy Protocol)

Reconfiguration time: 0.3 seconds

● MRP (Media Redundancy Protocol)

Reconfiguration time: 0.2 seconds

The mechanisms of these methods are similar. HRP and MRP cannot be used in the ring at the same time.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

19

Network management for industrial networks

2.3 Options of media redundancy

2.3.2 MRP

The "MRP" method conforms to the Media Redundancy Protocol (MRP) specified in the following standard:

IEC 62439-2 Edition 1.0 (2010-02) Industrial communication networks - High availability automation networks Part 2: Media Redundancy Protocol (MRP)

The reconfiguration time after an interruption of the ring is a maximum of 0.2 seconds.

Requirements

Requirements for problem-free operation with the MRP media redundancy protocol are as follows:

● MRP is supported in ring topologies with up to 50 devices.

Except in PROFINET IO systems, topologies with up to 100 SCALANCE X-200 and

SCALANCE X-300 IE switches were tested successfully.

Exceeding this number of devices can lead to a loss of data traffic.

● The ring in which you want to use MRP may only consist of devices that support this function.

These include, for example, some of the Industrial Ethernet SCALANCE X switches, some of the communications processors (CPs) for SIMATIC S7 and PG/PC or non-

Siemens devices that support this function.

● All devices must be interconnected via their ring ports.

Multimode connections up to 3 km and single mode connections up to 26 km between two SCALANCE X IE switches are possible. At greater distances, the specified reconfiguration time may be longer.

● "MRP" must be activated on all devices in the ring (see section "X-300/X-400 Ring

Configuration (Page 69)").

● The connection settings (transmission medium / duplex) must be set to full duplex and at least 100 Mbps for all ring ports. Otherwise there may be a loss of data traffic.

– STEP 7: Set all the ports involved in the ring to "Automatic settings" in the "Options" tab of the properties dialog.

– WBM: If you configure with Web Based Management, the ring ports are set automatically to autonegotiation.

20

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Topology

Network management for industrial networks

2.3 Options of media redundancy

The following schematic shows a possible topology for devices in a ring with MRP.

Figure 2-2 Example of a ring topology with the MRP media redundancy protocol

The following rules apply to a ring topology with media redundancy using MRP:

● All the devices connected within the ring topology are members of the same redundancy domain.

● One device in the ring is acting as redundancy manager.

● All other devices in the ring are redundancy clients.

Non MRP-compliant devices can be connected to the ring via a SCALANCE X switch or via a PC with a CP 1616.

Configuration

You can configure single MRP rings as follows:

● with Web Based Management, see section "Ring Redundancy (Page 65)"

● with STEP 7, see section "MRP configuration (Page 358)"

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

21

Network management for industrial networks

2.3 Options of media redundancy

Devices which support MRP

The ring topology in which you want to use MRP may only consist of devices that support this function. This applies, for example, to the following devices:

● Industrial Ethernet switches

– SCALANCE X-200 as of firmware version V4.0

– SCALANCE X-200IRT as of firmware version V4.0

– SCALANCE X-300 as of firmware version V3.0

– SCALANCE X-400 as of firmware version V3.0

● Communications processors

– CP 443-1 Advanced (6GK7 443-1GX20-0XE0) as of firmware version V2.0

– CP 343-1 Advanced (6GK7 343-1GX30-0XE0) as of firmware version V1.0

– CP 1616 (6GK1 161-6AA00) as of firmware version V2.2

– CP 1604 (6GK1 160-4AA00) as of firmware version V2.2

● Non-Siemens devices that support MRP

Connection of SCALANCE X-300 modular switches

Note

SCALANCE X-300 - modular devices (M)

Remember that in the modular switches the ring ports are located on MM900 media modules.

22

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

2.3.3

Topology

MRP multiple rings

Network management for industrial networks

2.3 Options of media redundancy

With the MRP multiple rings function, it is possible to control up to 4 MRP rings with one central redundancy manager.

Figure 2-3 MRP multiple rings

Configuration

You can only configure MRP multiple rings using PROFINET, see section "MRP configuration (Page 358)".

Redundancy manager with MRP multiple rings

You can use all devices of the following product lines as the redundancy manager connecting multiple rings:

● SCALANCE X-300 as of firmware version V4.0

● SCALANCE X-400

– SCALANCE X408-2 as of firmware version V4.0

– SCALANCE X414-3E as of firmware version V3.10

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

23

Network management for industrial networks

2.3 Options of media redundancy

2.3.4 HRP

Note

Name change

The acronym for the media redundancy protocol "High Speed Redundancy Protocol" has been changed from HSR to HRP.

This is only a change of name; the functionality has not been modified. HSR and HRP nodes can be operated together in a ring.

The "HRP" media redundancy method allows a reconfiguration time of 0.3 seconds following an interruption in the ring.

Requirements

The following conditions must be met for problem-free operation with HRP:

● HRP is supported in ring topologies with up to 50 devices.

In topologies with SCALANCE X-200 and SCALANCE X-300 IE switches, up to 100 nodes are supported.

Exceeding this number of devices can lead to a loss of data traffic.

● The ring in which you want to use HRP may only consist of devices that support this function. This applies, for example, to the following devices: X-400 IE switches, X-300

IE switches, X-200 IE switches and OSM/ESM.

● All devices must be interconnected via their ring ports.

Multimode connections up to 3 km and single mode connections up to 26 km between two IE switches are possible. At greater distances, the specified reconfiguration time may be longer.

● A device in the ring must be configured as redundancy manager by selecting the "HRP

Manager" setting. You can do this with the button on the front of the device, Web Based

Management, CLI or SNMP.

● On all other devices in the ring, either the "HRP Client" or "Automatic Redundancy

Detection" mode must be activated.

You can do this with Web Based Management, CLI or SNMP.

● In the basic status, the "HRP Client" or "Automatic Redundancy Detection" mode is set as default.

24

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Assignment of an IP address

3

Introduction

An IE switch provides a wide range of functions for settings and diagnostics. To access these functions over the network, the Internet protocol is used.

The Internet protocol has its own address mechanism using IP addresses. As the protocol of layer 3 of the ISO/OSI reference model, the IP protocol is independent of hardware allowing flexible address assignment. In contrast to layer 2 communication (where the MAC address is permanently assigned to a device), this makes it necessary to assign an address to a device explicitly.

This section describes the structure of an IP address and the various options for assigning the address with an IE switch.

IP address types of IE switches

IE switches can have several IP addresses:

● The out-band IP address (SCALANCE X414-3E only) 
is used for administration.

● The in-band agent IP address 
is used for administration.

● Further IP addresses


These IP addresses can only be set for routing purposes (SCALANCE X414-3E only).

They cannot be configured over DHCP but must be assigned using WBM, CLI or SNMP.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

25

Assignment of an IP address

3.1 Structure of an IP address

3.1 Structure of an IP address

Address classes to RFC 1518 and RFC 1519

IP address range

1.x.x.x through 126.x.x.x

128.0.x.x through 191.255.x.x

192.0.0.x through 223.255.255.x

Multicast groups

Reserved for experiments

Max. number of networks

126

16383

2097151

Max. number of hosts/network

16777214

65534

254

Class

A

B

C

D

E

CIDR

/8

/16

/24

An IP address consists of 4 bytes. Each byte is represented in decimal, with a dot separating it from the previous one. This results in the following structure, where XXX stands for a number between 0 and 255:

XXX.XXX.XXX.XXX

The IP address is made up of two parts, the network ID and the host ID. This allows different subnets to be created. Depending on the bytes of the IP address used as the network ID and those used for the host ID, the IP address can be assigned to a specific address class.

Subnet mask

The bits of the host ID can be used to create subnets. The leading bits represent the address of the subnet and the remaining bits the address of the host in the subnet.

A subnet is defined by the subnet mask. The structure of the subnet mask corresponds to that of an IP address. If a "1" is used at a bit position in the subnet mask, the bit belongs to the corresponding position in the IP address of the subnet address, otherwise to the address of the computer.

Example of a class B network:

The standard subnet address for class B networks is 255.255.0.0; in other words, the last two bytes are available for defining a subnet. If 16 subnets must be defined, the 3rd byte of the subnet address must be set to 11110000 (binary notation). In this case, this results in the subnet mask 255.255.240.0.

To find out whether two IP addresses belong to the same subnet, the two IP addresses and the subnet mask are ANDed bit by bit. If both logic operations have the save result, both IP addresses belong to the same subnet, for example, 141.120.246.210 and 141.120.252.108.

Outside the local area network, the distinction between network ID and host ID is of no significance, in this case packets are delivered based on the entire IP address.

Note

In the bit representation of the subnet mask, the "ones" must be set left-justified (there must be no "zeros" between the "ones").

26

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Assignment of an IP address

3.2 Initial assignment of an IP address

3.2 Initial assignment of an IP address

Configuration options

An initial IP address for an IE switch cannot be assigned using Web Based Management or the Command Line Interface over Telnet or SSH because these configuration tools require that an IP address already exists.

The following options are available to assign an IP address to an unconfigured device currently without an IP address:

● CLI over the serial port (IE Switch X-400 only)

● DHCP

● BOOTP

● STEP 7

● NCM PC

● the Primary Setup Tool (only over in-band port)

Note

DHCP is set as default when the module ships or following

Reset to Memory Defaults

.

Reset to Factory Defaults

. If a

DHCP server is available in the local area network, and this responds to the DHCP request of the IE switch, the IP address, subnet mask and gateway are assigned automatically when the module first starts up. DHCP and BOOTP, just like permanently set IP addresses are not deleted by a

Note

With the SCALANCE X414-3E, the IP addresses of the out-band port and the in-band port must belong to different subnets.

Example:

IP address (out-band port): 140.90.45.66

IP address (in-band port): 140.91.23.66

Subnet mask

(out-band port/in band port): 255.255.0.0

With the routing function, the SCALANCE X414-3E can have more than one in-band address. When using the Primary Setup Tool (PST), only one in-band address (the agent IP address) can be assigned. The other addresses must be assigned with WBM, CLI, or SNMP.

Note

The routing function is available only with the SCALANCE X414-3E.

Note

If routing functionality is enabled, no address can be set with DHCP/BOOTP.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

27

Assignment of an IP address

3.3 Assigning an IP address over the serial interface of the SCALANCE X-400

3.3 Assigning an IP address over the serial interface of the SCALANCE

X-400

Connection over null modem cable and login

Follow the steps outlined below to specify the IP address of an IE Switch X-400 over the serial interface:

1. Connect the serial port of the IE Switch X-400 to a PC over a null modem cable.

2. Start a program for terminal emulation, for example the HyperTerminal program available in Windows (settings see Appendix A).

3. Once the connection is established, the message "Login": appears. Enter "admin" (for administrator) assuming you have this access permission and press Return.

4. When prompted for the "Password:" enter your password. Make sure you read the notes below.

5. Enter "AGENT" when the message CLI> appears; you then change to the required submenu. Following this, you can enter the commands for configuring the IP address.

You will find a description of these commands in the next section.

Note

If no new passwords have been assigned (default factory setting), the valid password is

"admin" for the administrator login and "user" for the user login with restricted permissions.

After a successful login over the serial interface, you can enter commands until you log off with the "exit" command. The session is closed automatically if there is no further activity for

5 minutes.

Note

If you lose the password, you can reset an IE Switch X-300/X-400 to the factory settings with the SET/SEL button on the CPU module. To do this, press the SET/SEL button in the basic status display mode A (the LEDs D1 and D2 are off) for 12 seconds. You can cancel the reset procedure by releasing the button before the 12 seconds have elapsed. All settings you made previously are overwritten by the factory defaults. The passwords "admin" and "user" are then valid again.

Commands for the Command Line Interface

The commands provided for the configuration of the IP address by the CLI in the submenu

AGENT are described in the section "Agent Configuration menu item".

For general information on the Command Line Interface, refer to the section "Command Line

Interface (CLI)".

28

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Assignment of an IP address

3.4 Assigning addresses with the BOOTP client

3.4 Assigning addresses with the BOOTP client

How address assignment works

BOOTP (Bootstrap Protocol) is a protocol for the automatic assignment of IP addresses.

This type of address assignment is possible only when there is a BOOTP server in the network.

A node without an IP address (BOOTP client) sends its MAC address with a BOOTP query to all devices (MAC broadcast address FF-FF-FF-FF-FF-FF) on the network. The reply from the server is also sent as a broadcast and contains not only the IP address but also the MAC address of the client. A client that receives such a reply can recognize whether or not the IP address is intended for it based on the MAC address.

BOOTP is based on the UDP protocol and uses UDP port 67 for the BOOTP server and port

68 for the client.

BOOTP with an IE switch

When shipped, DCP (and therefore access over the Primary Setup Tool or NCM) and DHCP are enabled; BOOTP is disabled.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

29

Assignment of an IP address

3.5 Assigning addresses with the DHCP client

3.5 Assigning addresses with the DHCP client

Properties of DHCP

DHCP (Dynamic Host Configuration Protocol) is an expansion of BOOTP; however, there are several important differences compared with BOOTP:

● The use of DHCP is not restricted to the boot phase; DHCP can also be used during normal operation.

● The assigned IP address remains valid only for a particular time known as the lease time.

Once this period has elapsed, the client must either request a new IP address or extend the lease time of the existing IP address.

● There is normally no fixed address assignment; in other words, when a client requests an

IP address again, it normally receives a different address from the previous address. It is, however possible, to configure the DHCP server so that it assigns a fixed address.

Note

As soon as the IP address has been assigned once by a PROFINET IO controller, DHCP automatically deactivates itself and must be reactivated if required.

Note

DHCP uses a mechanism with which the IP address is assigned for only a short time (lease time). If the IE switch does not reach the DHCP server for a new request on expiry of the lease time, the assigned IP address, the subnet mask and the gateway are changed to static entries.

The device therefore remains accessible under the last assigned IP address even without a

DHCP server. This is not the standard behavior of office devices but is necessary for problem-free operation of the plant.

Since the DHCP client also sends a RELEASE to the server, the server can assign this address to a further device so that inconsistencies can occur within the network.

Remedy:

After disabling DHCP, you should therefore either

• change the IP address of the IE switch to an address not assigned by DHCP or

• remove the IP address assigned to the device from the address pool of the DHCP server.

Working with a mixture of dynamic address assignment and statically assigned addresses is not advisable.

30

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Assignment of an IP address

3.6 Address assignment with the Primary Setup Tool

3.6

Introduction

Address assignment with the Primary Setup Tool

The PST (Primary Setup Tool) is capable of assigning such an address to unconfigured devices without an IP address.

Prerequisite

This is only possible when the devices can be reached over Ethernet.

Note

For more detailed information, refer to the Primary Setup Tool configuration manual.

You will find the PST at Siemens Industry Automation and Drives Service & Support on the

Internet under entry ID 19440762 and with the following Link:

Primary Setup Tool (PST) ( http://support.automation.siemens.com/WW/view/en/19440762 )

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

31

Configuration using Web Based Management and

Command Line Interface

Introduction

4

To make the best possible use of the technical possibilities of the IE switches, you can adapt the configuration of the device to the concrete situation in which it is used. There are two ways of configuring an IE switch:

● With the Command Line Interface, you can reach the IE switches over Telnet (assuming there is an Ethernet connection) or over the serial interface (IE Switch X-400 only).

● Web Based Management accesses the configuration of an IE switch using a Web browser. An Ethernet connection to the IE switch is necessary.

Note

Depending on the selected configuration method, the following mechanisms are integrated to prevent unauthorized access to an IE switch:

• CLI over the serial interface (IE Switch X-400 only), TELNET or SSH

Web Based Management

There is an automatic logout after 5 minutes (CLI) or 15 minutes (WBM) or depending on the time configured in the Agent Timeout Configuration menu. A manual logout is also possible with the appropriate button in the user interface. Exiting the browser does does not close the session. If the browser is started again within the timeout, the session continues to be used.

Note

All the configuration changes are adopted in the flash memory after approximately 1 minute or after a warm restart. You should therefore run the "
Restart" command in the command line interface or in Web Based Management before turning off the device. You can then be certain that all the configuration changes have been saved.

Note

To use SNMP Management, RMON, and traps, you require a network management station.

This does not ship with IE switches.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

33

Configuration using Web Based Management and Command Line Interface

4.1 General information on Web Based Management and Command Line Interface

4.1 General information on Web Based Management and Command

Line Interface

4.1.1 Introduction

Note

The screens described in this section apply to both the SCALANCE X-300 and the

SCALANCE X-400. The screens shown here are based on those of the SCALANCE X-400.

Deviations are possible depending on the configuration and device.

Principle of Web Based Management

IE switches have an integrated HTTP server for Web Based Management. If an IE switch is addressed using a Web browser, it returns HTML pages to the client computer depending on the user input.

The user enters the configuration data in the HTML pages sent by the IE switch. The IE switch evaluates this information and generates reply pages dynamically. The great advantage of this method is that apart from a Web browser, no special software is required on the client.

Requirements for Web Based Management

● An IE switch must have an IP address before you can use Web Based Management.

● To use Web Based Management, there must be an Ethernet connection between the IE switch and the client computer.

● Use of a Microsoft Internet Explorer, version 5.5 or higher is recommended.

● All the pages of Web Based Management require JavaScript. You should therefore make sure that Java Script is enabled in your browser settings.

Note

The browser must not be set so that it reloads the page from the server each time the page is accessed. The updating of the dynamic content of the page is ensured by other mechanisms. In the Internet Explorer, you can make the appropriate setting in the button.

Options >

Internet Options > General

menu in the section

Temporary Internet Files

with the Settings

Below the text be selected.

Check for newer versions of stored pages

, the

Automatically

check box must

● Web Based Management is HTTP- or HTTPS-based, so you must also enable access to port 80 or 443 if you have a firewall installed.

34

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.1 General information on Web Based Management and Command Line Interface

Starting Web Based Management and logging on

Note

For security reasons, make sure that you change the original factory-set passwords:

User name "admin" = password "admin"

• User name "user" = password "user".

Figure 4-1 Logon dialog

1. Enter the IP address or the URL of the IE switch in the address box of the Web browser.

If there is a problem-free connection to the IE switch, the logon dialog of Web Based

Management appears as shown above.

2. Enter a user name in the "User name" input box.

The following entries are possible:

– admin: With this user name, you have read and write access.

– user: With this user name, you only have read access.

– The user name stored on a RADIUS server: See sections System Passwords & Login

Mode (Page 52) and 802.1x RADIUS Configuration (Page 158).

3. Enter your password.

4. Click the "Log On" button to start the logon.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

35

Configuration using Web Based Management and Command Line Interface

4.1 General information on Web Based Management and Command Line Interface

4.1.2 The LED simulation of Web Based Management (WBM)

Display of the operating state

Each component of an IE switch has one or more LEDs that provide information on the operating state of the device. Depending on its location, direct access to the IE switch may not always be possible. Web Based Management therefore displays simulated LEDs.

The upper quarter of the screen displays a schematic representation of the IE Switch X-300 or the IE Switch X-400 with the existing modules and corresponding LEDs. The traffic display is not represented realistically (the LEDs do not flash). The meaning of the LED displays is described in the operating instructions "Industrial Ethernet Switches SCALANCE X-300" or operating instructions "Industrial Ethernet Switches SCALANCE X-400".

If you click on the labels above the symbolically displayed modules, you can change the display mode (LEDs DM or D1/D2) of the display in the simulation just as with the button on the device.

Note

The media module extender of the SCALANCE X414-3E is displayed in the simulation only if it has at least one module inserted.

Figure 4-2 SCALANCE X414-3E LED simulation

36

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.1 General information on Web Based Management and Command Line Interface

Figure 4-3 SCALANCE X408-2 LED simulation

Figure 4-4 SCALANCE X308-2 LED simulation

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

37

Configuration using Web Based Management and Command Line Interface

4.1 General information on Web Based Management and Command Line Interface

4.1.3 Working with Web Based Management

Navigation bar

The upper menu bar of WBM contains the following links:

● Console


This link opens a console window in which you can enter CLI commands. You are then connected to the switch over a TELNET connection.

● Support


When you click this link, you open a SIEMENS AG support page. SIEMENS Support is, however, only accessible when your PC has a connection to the Internet.

● Logout

By clicking on this link, you log out from the device.

Updating the display with "Refresh"

Web Based Management pages have a "Refresh" button at the lower edge of the page. Click this button to request up-to-date information from the IE switch for the current page.

Storing entries with "Set Values"

Pages in which you can make configuration settings have a "Set Values" button at the lower edge. Click this button to save the configuration data you have entered on the IE switch.

Note

Changing configuration data is possible only with the "Administrator" login.

4.1.4 Command Line Interface (CLI)

Starting the CLI in a Windows console

Follow the steps outlined below to start the Command Line Interface in a Windows console:

1. Open a Windows console and type in the command telnet followed by the IP address of the IE switch:

C:\>telnet <IP address>

2. Enter your login and password.

Starting the CLI in Web Based Management

Click on the "Console" entry in the upper menu bar of Web Based Management. A Telnet connection opens automatically in which you can log on with your user name and password.

38

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.1 General information on Web Based Management and Command Line Interface

Shortcuts for commands

As an alternative, instead of entering full CLI commands, you can simply enter the first letter or the first few letters and then press the Tab key. The Command Line Interface then displays a command starting with the letter or letters you typed in. If the command displayed is not the command you require, press the Tab key again to display the next command.

Directory structure

Before you can enter a command in the Command Line Interface, you must first open the required menu or submenu. This section lists the commands of each menu in a separate table. The table lists only the commands themselves.

Addressing scheme for the ports of an IE Switch X-400

The following addressing scheme applies to the port labeling of an IE Switch X-400:

● The first number indicates the slot.

● The second number is separated by a period and specifies the port.

For example, the identifier 6.2 means the second port on the sixth slot.

Addressing scheme for the ports of an IE Switch X-300

The following addressing scheme applies to the port labeling of an IE Switch X-300:

● The number relates directly to the port.

The label 2 stands for the second port on the IE Switch X-300.

Symbols for representing CLI commands

CLI commands generally have one or more parameters that are represented in the syntax description as follows:

Example CLI command syntax Use of parameter

< >

[ ]

|

...

Angle brackets

Square brackets

Pipe character

Periods necessary optional alternative

Description

Mandatory parameters are shown in angle brackets.

Note: If mandatory parameters are omitted, most commands output the current value.

Optional parameters are shown in square brackets.

Alternative parameters are shown by the pipe character.

Enter either a or b or value range 1 or value range 2

Value range Value ranges of parameters are indicated by three periods.

<ip address>

[D|A]

<a | b>

<... | ....>

[a | b]

[.... | ...]

<0...255> [0...255]

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

39

Configuration using Web Based Management and Command Line Interface

4.1 General information on Web Based Management and Command Line Interface

CLI command syntax Use of parameter string

Port

Number

MAC

IP mode text

Port name

Description

Text is identified as string. (see example)

Port name

Example

• File name

Geographic coordinates

• Names and designations

Passwords

5.1 for X-400 or 7 for X-300

1 Numeric value

Numeric value

MAC address MAC address

IP address

Modes of a function

IP address

If there is more than one operating mode for a function, this is indicated by the mode parameter.

All available modes can be displayed using the "?" parameter

80:fe:11:f3:4d:d6

192.168.1.1

• D disables the function

Cross-menu commands

You can use the commands in the following table in any menu or submenu.

Table 4- 1 Command Line Interface - CLI\ … >

..

?

Command

/

Description

Changes to the highest menu level.

Moves you one menu level higher.

Displays the commands available in the menu. exit Closes the CLI session. restart Restarts the IE switch

About Displays information on the current menu item.

Comment

Administrator and User

Administrator and User

Administrator and User

Administrator and User

Administrator only

Administrator and User

Help on CLI commands

● You can call up further information with the "?" parameter (if this is necessary and available for a command).

● If no further information is available, the command syntax from the menu overview is displayed.

40

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

4.2

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

The System menu

4.2.1 System Configuration

General device information

This screen appears if you click the

System

folder icon:

Figure 4-5 System Configuration

Current System Time(read-only)

The system time is either set by the user or is synchronized by a time-of-day frame (either

SINEC H1 time frame or SNTP). You can also see when and how it was set:

● (m) The setting was made manually.

● (t) The setting was made using a SIMATIC time-of-day frame, however, it is not synchronized with the time transmitter.

● (s) The setting was made using by SIMATIC time-of-day frame and it is synchronized with the time transmitter.

● (p) The setting was made using the SNTP protocol.

System Up Time (read-only)

The time since the last reboot.

Device Type (read-only)

The type designation of the device.

Device Description (read-only)

The description of the device.

System Contact

Enter the name of a contact person responsible for managing the device in this box.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

41

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

System Location

Enter a location for the device in this box, for example a room number.

System Name

Enter a description of the device in this box.

Syntax of the Command Line Interface

Table 4- 2 System Configuration - CLI\SYSTEM>

Command syscon [string] sysloc [string] sysname [string]

Description

Sets/displays the syscontact MIB variable.

Sets/displays the syslocation MIB variable.

Sets/displays the sysname MIB variable.

Comment

Administrator only.

Administrator only.

Administrator only.

4.2.2 System Identification & Maintenance (I&M)

System Identification & Maintenance

The following screen contains information on device-specific vendor and maintenance data such as the order number, serial number, version numbers etc.

Figure 4-6 System Identification & Maintenance

42

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

I&M 0

Here, you can see the individual parameters for Identification & Maintenance.

I&M 1

Function Tag

Here, you can enter the function tag (plant designation).

Location Tag

Here, you can enter the location tag (location identifier).

Syntax of the Command Line Interface

Table 4- 3 System Identification & Maintenance - CLI\SYSTEM\IM>

Command info function [string] location [string]

Description

Displays information on the

"Identification & Maintenance" menu item.

Specifies the plant designation

(max. 32 characters).

Specifies the location identifier

(max. 32 characters).

Comment

-

Administrator only.

Administrator only.

4.2.3 System Restart & Defaults

Resetting to the defaults

In this screen, there is a button with which you can restart the IE switch and various options for resetting to the IE switch defaults.

Figure 4-7 System Restart and Defaults

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

43

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

Note

Note the following points about restarting an IE switch:

You can only restart the IE switch with administrator privileges.

An IE switch should only be restarted with the buttons of this menu or with the appropriate CLI commands and not by a power cycle on the device.

Any changes you make are only saved on the device after clicking the "Set Value" button on the relevant page of the WBM, saving the configuration data prior to a restart is neither necessary nor possible.

The browser must not be set so that it reloads the page from the server each time the page is accessed. The updating of the dynamic content of the page is ensured by other mechanisms. In the Internet Explorer, you can make the appropriate setting in the

Options > Internet Options > General

menu in the section

Temporary Internet Files

with the Settings button.

Below the text Checkfor newer versions of stored pages must be selected.

, the Automatically check box

Restart System

Click this button to restart the IE Switch. You must confirm the restart in a dialog box. During a restart, the IE switch is reinitialized, the internal firmware is reloaded, and the device runs a self-test. The learned entries in the address table are deleted. You can leave the browser window open while the IE switch restarts.

Restore Memory Defaults and Restart

Click on this button to restore the factory configuration settings with the exception of the following parameters:

● IP addresses (in-band and out-band)

● Subnet masks (in-band and out-band)

● IP address of the default gateway

● DHCP/BOOTP flag

● System name

● System location

● System contact

● Ring redundancy

● Standby functionality

● (R)STP

● PNIO device name (name of station)

An automatic restart is triggered.

44

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

Restore Factory Defaults and Restart

Click this button to restore the factory defaults for the configuration. The protected defaults are also reset. An automatic restart is triggered.

Note

By resetting all the defaults, the IP address is also lost. An IE switch is then only accessible using the Primary Setup Tool or the serial interface (IE Switch X-400 only).

Syntax of the Command Line Interface

Table 4- 4 System Restart & Defaults - CLI>

Command restart

Description

Restarts the IE switch

Comment

Administrator only.


This command can be executed from within all menus.

Table 4- 5 System Restart & Defaults - CLI\SYSTEM>

Command defaults memreset

Description

Restores the factory defaults. The protected settings are also reset. The device is restarted.

Restores the factory defaults. The protected settings are retained. The device is automatically restarted.

Comment

Administrator only.

This command has the same effect as clicking the

WBM.

Restore Factory

Defaults and Restart

button in

Administrator only.

This command has the same effect as clicking the

WBM.

Restore Memory

Defaults and Restart

button in

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

45

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

4.2.4 System Save & Load via HTTP

System Save & Load HTTP

The WBM allows you to store configuration information in an external file on your client PC or to load such data from an external file from the PC to IE switches. You can also load new firmware from a file located on your client PC.

Note

Following a firmware update, delete the cache of the Web browser.

46

Figure 4-8 System Save & Load via HTTP

Configuration File

Name and directory path of the configuration file you want to load to the IE Switch.

Firmware File

Name and directory path of the file from which you want to load the new firmware.

SSL Private Key File

Name and directory path of the file from which you want to load the private SSL key to the device.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

SSL Certificate File

Name and directory path of the file from which you want to load the SSL certificate to the device.

Note

Since the private key and certificate belong together, files are saved only after both the key and certificate have been downloaded. When you load the certificate, it is checked to make sure it matches the loaded key. A restart is required before the new SSL files are adopted.

Only private RSA keys with a maximum length of 128 bytes are accepted, private keys must not be password protected.

An SSL certificate must be PEM coded, its length must not exceed 256 bytes.

How to load data over HTTP / HTTPS

1. In the relevant text box, enter a name and directory path for the file from which you want to take the data.

2. Start loading the relevant file by clicking one of the buttons "Load Firmware and Restart",

"Load Configuration and Restart", "Load Private Key" or "Load Certificate and Restart".

There is an automatic restart after downloading except following "Load Private Key" and the device starts up again with the new data.

How to save data over HTTP / HTTPS

1. Start the save by clicking one of the buttons "Save Configuration", "Save Log Table",

"Save Firmware", "Save Private MIB" or "Save GSDML File".

2. You will be prompted to select a storage location and a name for the file or to accept the proposed file name.

Reusing configuration data

Saving and reading in configuration data reduces the effort if several IE switches have the same configuration and when IP addresses are obtained over DHCP.

Note

Using the same configuration on multiple IE switches

The configuration of an IE switch cannot be loaded on every other IE switch.

You will find a list of compatible devices in the section "Using the same configuration on multiple IE switches (Page 391)".

Save the configuration data on your computer after you have configured an IE switch. As an

alternative, you can save the data on a TFTP server (Page 48).

Download this file to all other IE switches you want to configure.

If individual settings are necessary for specific devices, these must be made online.

The stored configuration data is coded and, as a result, these files cannot be edited with a text editor.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

47

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

4.2.5 System Save & Load via TFTP

Data exchange with a TFTP server

WBM allows you to save configuration information in an external file and to load this information on the IE switch from an external file. You can also save the log information in a file or load new firmware from a file. You can make the entries required for this in the Save &

Load menu.

Figure 4-9 System Save & Load

TFTP Server IP Address

The IP address of the TFTP server with which you want to exchange data.

TFTP Server Port

The port of the TFTP server over which data exchange will be handled. If necessary, you can change the default value 69 to your own requirements.

Configuration File

Name and, if necessary, folder path of the configuration file (maximum 32 characters) that you want to load on the IE switch or where you want to store the current configuration information.

Log Table File

Name and, if necessary, path of the file (maximum of 32 characters) in which you want to save the content of the log table.

48

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

Firmware File

Name and, if necessary, directory path of the file (maximum 32 characters) from which you want to load the new firmware or in which you want to save the current firmware.

SSL Private Key File

Name and directory path of the file from which you want to load the private SSL key to the device. The entry in this box is restricted to a maximum of 32 characters.

SSL Certificate File

Name and directory path of the file from which you want to load the SSL certificate to the device.

The entry in this box is restricted to a maximum of 32 characters.

Note

Since the private key and certificate belong together, files are saved only after both the key and certificate have been downloaded. When you load the certificate, it is checked to make sure it matches the loaded key. A restart is required before the new SSL files are adopted.

Only private RSA keys with a maximum length of 1280 bytes are accepted, private keys must not be password protected.

An SSL certificate must be PEM coded, its length must not exceed 2560 bytes.

How to load or save data over TFTP

1. Enter the IP address of the TFTP server in the "TFTP Server IP Address" text box.

2. Enter a name (maximum of 32 characters) for the file in which you want to save the data or take the data from in the text box.

3. Click on the "Set Values" button before you make any further entries for saving or loading the data.

4. Start the save / load function by clicking the relevant button "Save" or "Load".

After you load the configuration and the SSL certificate, the device restarts with the new data.

Reusing configuration data

Saving and reading in configuration data reduces the effort if several IE switches have the same configuration and when IP addresses are obtained over DHCP.

Note

Using the same configuration on multiple IE switches

The configuration of an IE switch cannot be loaded on every other IE switch.

You will find a list of compatible devices in the section "Using the same configuration on multiple IE switches (Page 391)".

Save the configuration data on a TFTP server after you have configured an IE switch. As an

alternative, you can save the data on your computer (Page 46).

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

49

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

Download this file to all other IE switches you want to configure.

If individual settings are necessary for specific devices, these must be made online.

The stored configuration data is coded and, as a result, these files cannot be edited with a text editor.

Syntax of the Command Line Interface

Table 4- 6 System Save & Load - CLI\SYSTEM\SAVELOAD>

Command server [<ip>[:port]] cfgname <string> cfgsave cfgload logname <string> logsave fwname <string> fwload fwsave keyload certload

Description

Specifies the IP address and, as an option, the port of the TFTP server with which data will be exchanged.

Specifies the name of a file (maximum 32 characters) from which the configuration data will be loaded or in which the configuration data will be saved.

Saves the configuration data in a file on the

TFTP server.

Loads the configuration data from a file on the TFTP server.

Specifies the name of a file (maximum 32 characters) in which the log table is stored.

Saves the log table in a file on the TFTP server.

Specifies the name of a file (maximum 32 characters) from which the firmware is loaded.

Loads the firmware from a file.

Saves the firmware in a file on the TFTP server.

Loads the private SSL key from a file.

Loads an SSL certificate from a file.

Comment

Administrator only.

Default value: 0.0.0.0

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Default value: Not defined.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

50

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

4.2.6 System Version Numbers

Versions of hardware and software

This page shows the versions of the hardware and software with which the IE switch is being operated:

Figure 4-10 System Version Numbers

Firmware

The version of the firmware running on the IE switch.

Boot Software

The version of the boot software is displayed here. The boot software is stored permanently on the IE switch.

FPGA Revision

The FPGA revision used on the IE switch.

Table with entries for the basic device and the modules

The first row of the table indicates the version of the IE switch. The slot column shows the slot on the basic device. If the information relates to the basic device itself, "-" is entered in this column. The Hardware column displays the version and the Order Number column the order number of the IE switch or module.

Syntax of the Command Line Interface

Table 4- 7 System Version Numbers - CLI>

Command info

Description

Along with other information, this command displays the versions of software with which the

IE switch is operated.

Comment

-

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

51

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

Table 4- 8 System Version Numbers - CLI\SYSTEM>

Command version

Description

Displays the firmware, hardware and boot software version of the

IE Switch and provides more detailed information on the basic device and any modules.

Comment

-

4.2.7 System Passwords & Login Mode

Passwords and login mode

Note

Default for the passwords when supplied

Admin password: admin

User password: user

In this dialog, if you are the administrator, you can change the passwords for Admin and

User. The password can be up to a maximum of 16 characters (7-bit ASCII) long.

By selecting a login mode, you also specify which user names can be used for the login.

Note

RADIUS

To be able to use the login mode "RADIUS" or "RADIUS and Local", a RADIUS server must be stored and configured for user authentication. You configure this information in the

"Switch" menu on the "802.1x RADIUS Configuration" page.

52

Figure 4-11 System passwords

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

"Login Mode" list box

The login mode provides the following options:

Local: The login is only possible with the users that exist in the firmware (user and admin).

RADIUS and Local: The login is possible both with the users that exist in the firmware

(user and admin) and via a RADIUS server.

The local user names have priority.

RADIUS: The login is only possible using the login data stored on a RADIUS server. The local user names are disabled.

Save

Save your entries by clicking the "Set Values" button.

Note

RADIUS authentication fails

If the RADIUS server configured as the primary server fails, authentication will initially fail.

The request is only sent to the backup server with the next login attempt.

Syntax of the Command Line Interface

Table 4- 9 System Passwords - CLI\SYSTEM>

Command passwd <admin|user> loginmod [L|B|R]

Description

Sets a new password for "admin" or "user".

Specifies the login mode:

• L

Only user names that exist in the firmware.

B

Both the user names in the firmware and those stored on a RADIUS server (local names have priority).

• R

Only user names that are stored on a

RADIUS server.

Comment

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

53

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

4.2.8 System Select/Set Button

Disabling the Select/Set button

On the IE Switch, the SELECT/SET button is used to

● Change the display mode

● Reset to the factory defaults

● Define the fault mask and the LED display

● Enable/disable the redundancy manager.

You will find a detailed description of the individual functions available with the buttons in the

SCALANCE X-400 operating instructions.

On this page, the functionality of the Select/Set button can be restricted or fully disabled.

This is possible for the following three functionalities:

● Restore Factory Defaults

● Enable/Disable Redundancy Manager

● Set Fault Mask

Figure 4-12 Select/Set Button Configuration

Enable Select/Set Functions

You can enable or disable the individual functions of the button by checking or unchecking the relevant box.

54

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

System Command Line Interface

Table 4- 10 System Configuration - CLI\SYSTEM\SELSET> info defaults

Command rm [E|D] faultmsk

Description

Displays the functionality of the button.

Enables/disables the "Restore Factory Defaults" function of the button.

Enables/disables the "Enable/Disable Redundancy Manager" function of the button.

Enables/disables the "Set Fault Mask" function of the button.

Comment

-

Administrator only.

Administrator only.

Administrator only.

4.2.9 System Event Log Table

Logging events

An IE switch allows you to log events and to display them on the page of the "Log Table" menu. This, for example, allows you to record when an SNMP authentication attempt failed or when the connection status of a port has changed. You can specify which events are logged in the "Agent Event Configuration" menu item. The content of the log table is retained even when the IE switch is turned off.

Figure 4-13 System Event Log Table

The "Restart" column indicates the device restart after which the corresponding event occurred.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

55

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

The "Sys.Up Time" column shows the time since the IE switch was last restarted in the format HH:MM:SS.

Note

When synchronizing the time using NTP or Siclock, the real-time of the entry is entered in the log table, not the time since the last restart.

Refresh

Click on this button to refresh the display.

Clear Log

With this button, you can delete the content of the log table.

Syntax of the Command Line Interface

Table 4- 11 System Event Log Table - CLI\SYSTEM>

Command events <clear> addlog <string>

Description

Shows the content of the log table.

The content of the log table can be deleted with the [clear] parameter.

Inserts a text in the log table. Blanks in the string are also included.

Comment

Only the administrator can delete the log table. The content of the log table is retained even when the IE switch is turned off.

Administrator only.

56

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

4.2.10 C-PLUG Information

Information on the content of the C-PLUG

This menu provides you with detailed information on the C-PLUG. You can also format the

C-PLUG or provide it with new content.

Figure 4-14 C-PLUG Information

The text boxes of this menu are all read-only.

C-PLUG State

The status of the C-PLUG is displayed here. The following are possible:

● ACCEPTED

There is a C-PLUG with a valid and matching content inserted in the IE switch.

● NOT ACCEPTED

Invalid or incompatible content of an inserted C-PLUG. This status is also displayed when the C-PLUG was formatted during operation.

● NOT ACCEPTED, HEADER CRC ERROR

A C-PLUG with bad content is inserted.

● NOT PRESENT

There is no C-PLUG inserted in the IE switch.

C-PLUG Device Group

Indicates the SIMATIC NET product line that previously operated with the C-PLUG.

C-PLUG Device Type

Indicates the device type within the product line that previously operated with the C-PLUG.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

57

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

Configuration Revision

The version of the configuration structure. This information relates to the configuration options supported by the IE switch and has nothing to do with the concrete hardware configuration. This revision information does not therefore change if you add or remove modules or extenders, it can, however, change if you update the firmware.

File System

Displays the type of file system on the C-PLUG.

File System Size

Displays the maximum storage space of the file system on the C-PLUG.

File System Usage

Shows the storage space being utilized in the C-PLUG file system.

C-PLUG Info String

Here, you will see all the additional information about the device that used the C-PLUG during previous operation, for example, order number, type designation, and the versions of the hardware and software.

Modify C-PLUG, Modify

You can only make settings in this box if you are logged in as "Administrator". Here, you decide how you want to change the content of the C-PLUG. The following alternatives are possible:

● Copy internal Configuration to C-PLUG and Restart


The configuration in the internal flash memory of the IE switch is copied to the C-PLUG; this is followed by a restart.

This function is required in the following important use case: The IE switch has started up with a C-PLUG containing a bad configuration or a configuration different from the IE switch. If you have not yet made any configuration changes after starting up the device, you can use this function to overwrite the content of the C-PLUG with the original device configuration.

● Copy default Configuration to C-PLUG and Restart


A configuration with all the factory default values is stored on the C-PLUG. This is followed by a restart in which the IE switch starts up with these default values.

● Clean C-PLUG (Low Level Format, Configuration lost)


Deletes all data on the C-PLUG and starts a low-level formatting function. This is not followed by an automatic restart and the IE switch displays an error. You can clear this error status by restarting or removing the C-PLUG.

Select the necessary entry in the drop-down list and click "Modify, to change the C-PLUG as required.

58

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

Syntax of the Command Line Interface

Table 4- 12 C-PLUG Information - CLI\SYSTEM\C-PLUG> info

Command copyint copydef clean

Description

Displays the current status of the

C-PLUG.

Overwrites the C-PLUG with the content of main memory.

Initializes the C-PLUG with default parameters.

Deletes all the data from the C-

PLUG and runs a low-level formatting function.

The same information is displayed as on the

"X-400 C-PLUG Information page" of the

WBM.

Comment

Administrator only.

Same function as the "Copy internal Configuration to C-PLUG and Restart" command in

WBM.

Administrator only.

Same function as the "Copy default Configuration to C-PLUG and Restart" command in

WBM.

Administrator only.

Same function as the "Clean C-PLUG" command in WBM.

4.2.11 Geographic coordinates

Information on geographic coordinates

In the "Geographic Coordinates" window, you can enter or read out information on the geographic coordinates. To be able to read out the geographic coordinates, the geographic location of the device must be entered correctly once in the geographic coordinates. The parameters of the geographic coordinates (latitude, longitude and the height above the ellipsoid according to WGS84) are entered directly in the "Geographic Coordinates" window.

The geographic coordinates can, for example, be calculated by a GPS receiver. Generally, the geographic coordinates are displayed by these devices directly. Following configuration, the SCALANCE device provides you with this geographic data for management purposes using SNMP private MIBs, Telnet or WEB.

Figure 4-15 Geographic coordinates

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

59

Configuration using Web Based Management and Command Line Interface

4.2 The System menu

Latitude

Here, you enter the value of the northern or southern latitude of the location of the device.

For example, +49° 1´ 31.67" means that the device is located at 49 degrees, 1 minute and

31.67 seconds north.

A southern latitude is indicated by a preceding minus sign.

You can also append the letters N’ (north) or S’ (south) after the numbers (49° 1´ 31.67" N).

Longitude

Here, you enter the value of the eastern or western longitude of the location of the device.

For example, +8° 20´ 58.73" means that the device is located at 8 degrees, 20 minutes and

58.73 seconds east.

A western longitude is indicated by a preceding minus sign.

You can also append the letters O’ or E’ (east) or W’ (west) after the numbers

(8° 20´ 58.73" E).

Height (geographic height)

Here, you enter the value of the geographic height above seal level in meters.

For example, 158 m means that the device is located at a height of 158 m above sea level.

Heights below sea level are indicated by a preceding minus sign.

Entering the geographic coordinates

The values for the geographic coordinates can be entered in the text boxes, for example

● as degrees with minutes and seconds in the formats:

DD°MM.MMM´, DD°MM´SS, DD°MM´SS.SSS

● in degrees in decimal format: DD.DDD°

● with or without a sign or with the letter S; N, E (or O) and W appended

Syntax of the Command Line Interface for the geographic coordinates

Table 4- 13 Geographic coordinates - CLI\SYSTEM\GEO> info lat [string]

Command long [string] height [string]

Description

Displays the current status of the geographic coordinates.

Shows/sets the geographical latitude coordinate.

Shows/sets the geographical longitude coordinate.

Shows/sets the geographical height coordinate.

Comment

-

Administrator only.

Administrator only.

Administrator only.

60

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

4.3

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

The X-300/X-400 menu

4.3.1 X-300/X-400 Status page

Information on the operating status

This screen appears if you click the "X-400" or "X-300" folder icon.

The information in this screen depends on the IE switch. With X-400 IE switches, the screen shows information about the power supply and the error/fault status. With X-300 IE switches, the screen shows additional information about ring redundancy and the standby function.

The text boxes of this screen are read-only.

X-400 Status page

X-300 Status page

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

61

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Redundancy Function

The "Redundancy Function" column shows the role of the device within the ring:

● No Ring Redundancy (off)

The IE switch is operating without redundancy function.

● HRP Client (HRP-Clt)

The IE switch is operating as an HRP client.

● HRP Manager (HRP-Mgr)

The IE switch is operating as an HRP manager.

● MRP Client (MRP-Clt)

The IE switch is operating as an MRP client.

● MRP Manager (MRP-Mgr)

The IE switch is operating as an MRP manager.

RM Status

The "RM Status" column shows whether or not the IE switch is operating as redundancy manager and whether it has opened or closed the ring in this role.

● Passive

The IE switch is operating as redundancy manager and has opened the ring; in other words, the line of switches connected to the ring ports is operating problem free. The passive status is also displayed if the IE switch is not operating as the redundancy manager (RM function disabled).

● Active:

The IE switch is operating as redundancy manager and has closed the ring; in other words, the line of switches connected to the ring ports is interrupted (problem). The redundancy manager connects its ring ports through and restores an uninterrupted linear topology.

● If media redundancy in ring topologies is completely disabled, no ring ports are displayed and the text "Ring Redundancy disabled" is displayed.

Ring Ports

Shows the ports being used as ring ports.

Standby Function

Note

Device with the higher MAC address becomes master

When linking HRP rings redundantly, two devices are always configured as a master/slave pair. This also applies to interrupted HRP rings = linear buses. When operating normally, the device with the higher MAC address adopts the role of master.

This type of assignment is important in particular when a device is replaced. Depending on the MAC addresses, the previous device with the slave function can take over the role of the standby master.

62

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Shows the status of the standby function:

● Master

The device has a connection to the partner device and is operating as master. In normal operation, the standby ports of this device are active.

● Slave

The device has a connection to the partner device and is operating as slave. In normal operation, the standby ports of this device are inactive.

● Disabled

Standby link is disabled. The device is operating neither as master nor slave. The standby ports are working as normal ports without standby function.

● Waiting for Connection...

No connection has yet been established to the partner device. The standby ports are inactive. In this case, either the configuration on the partner device is inconsistent (for example incorrect connection name, standby link disabled) or there is a physical fault (for example device failure, link down).

● Connection Lost

Existing connection to the partner device has been lost. In this case there is either a physical fault (for example, device failure, link down) or the configuration on the partner device was modified (for example different connection name, standby link disabled).

Standby Status

Shows the status of the standby ports:

● Active

The standby ports of this device are active; in other words are enabled for frame traffic.

● Passive

The standby ports of this device are inactive; in other words are disabled for frame traffic.

Standby Ports

Shows the standby ports.

Power Line 1

● Up:

Power supply 1 (line 1) is applied.

● Down:

Power supply 1 is not applied or is below the permitted voltage.

Power Line 2

● Up:

Power supply 2 (line 2) is applied.

● Down:

Power supply 2 is not applied or is below the permitted voltage.

Fault Status

The fault status of the IE switch is shown here. The following table contains examples of possible error messages. If more than one problem has occurred, they are listed in the text

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

63

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu box one above the other. You will find a complete list of the error messages in the section

"Auto-Hotspot".

Error messages

Redundant power line down

Link down on monitored port

More than one RM in ring

Non-recoverable ring error

No Fault

Meaning

The redundant power supply has failed.

The connection to a monitored port is interrupted.

More than one device in the ring has adopted the function of redundancy manager.

These errors cannot be resolved by the redundancy manager. There can, for example, be a loss of redundancy frames sent by the redundancy manager at one end, without there being a link down. An incorrectly configured second redundancy manager in the ring also causes this error message.

In the first case, check the configuration of the ring ports:

Suitable setting for the operating mode (full duplex/half duplex)?

• With fiber-optic cables: Send and receive cables correctly plugged in?

In the second case:

Reconfigure the second redundancy manager in the ring so that this adopts the suitable client role or remove the device from the ring.

The switch has not detected a fault (the signaling contacts have not responded and the fault LED is not lit).

Syntax of the Command Line Interface

Table 4- 14 X-400 Status - CLI\X-400> or

X-300 Status - CLI\X-300>

Command info

Description

Displays the status information for the IE switch.

-

Comment

64

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

4.3.2 Ring Redundancy

4.3.2.1 X-300/X-400 ring redundancy information

Information on ring redundancy

This screen appears if you click the "Ring Redundancy" folder icon.

The screen shows the status of the device related to ring redundancy, standby function and

RM observer. The text boxes on this page are read-only.

Figure 4-16 SCALANCE X-300/X-400 ring redundancy information

The screen contains the following sections and boxes:

"Ring Redundancy Information" section

The table has the following columns:

● Enabled

The "Enabled" column shows whether the configured ring is activated or deactivated.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

65

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

● Admin Role

The "Admin Role" column shows which mode you have configured for the device:

– No Ring Redundancy (off)

The IE switch works without redundancy functionality.

– HRP Client (HRP-Clt)

The IE switch operates as an HRP client.

– HRP Manager (HRP-Mgr)

The IE switch operates as an HRP manager.

– MRP Client (MRP-Clt)

The IE switch operates as an MRP client.

– MRP Manager (MRP-Mgr)

The IE switch operates as an MRP manager.

● Oper Role

The "Oper Role" column shows the mode adopted by the device in the ring:

– No Ring Redundancy (off)

The IE switch works without redundancy functionality.

– HRP Client (HRP-Clt)

The IE switch operates as an HRP client.

– HRP Manager (HRP-Mgr)

The IE switch operates as an HRP manager.

– MRP Client (MRP-Clt)

The IE switch operates as an MRP client.

– MRP Manager (MRP-Mgr)

The IE switch operates as an MRP manager.

● RM Status

The "RM Status" column shows whether or not the IE switch is operating as redundancy manager and whether it has opened or closed the ring in this role.

– Passive:

The IE switch is operating as redundancy manager and has opened the ring; in other words, the line of switches connected to the ring ports is operating problem free. The passive status is also displayed if the IE switch is not operating as the redundancy manager (RM function disabled).

– Active:

The IE switch is operating as redundancy manager and has closed the ring; in other words, the line of switches connected to the ring ports is interrupted (problem). The redundancy manager connects its ring ports through and restores an uninterrupted linear topology.

– If media redundancy in ring topologies is completely disabled, no ring ports are displayed and the text "Ring Redundancy disabled" is displayed.

66

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

● Admin Ring Port 1 and Admin Ring Port 2

The "Admin Ring Port 1" and "Admin Ring Port 2" columns show the ports you have configured as ring ports.

● Oper Ring Port 1 and Oper Ring Port 2

The "Oper Ring Port 1" and "Oper Ring Port 2" columns show the ports being used as ring ports.

"Standby Information" section

● Standby Function

Note

Device with the higher MAC address becomes master

When linking HRP rings redundantly, two devices are always configured as a master/slave pair. This also applies to interrupted HRP rings = linear buses. When operating normally, the device with the higher MAC address adopts the role of master.

This type of assignment is important in particular when a device is replaced. Depending on the MAC addresses, the previous device with the slave function can take over the role of the standby master.

The "Standby Function" display box shows the status of the standby function:

– Master:

The device has a connection to the partner device and is operating as master. In normal operation, the standby ports of this device are active.

– Slave:

The device has a connection to the partner device and is operating as slave. In normal operation, the standby ports of this device are inactive.

– Disabled:

Standby link is disabled. The device is operating neither as master nor slave. The standby ports are working as normal ports without standby function.

– Waiting for Connection

No connection has yet been established to the partner device. The standby ports are inactive. In this case, either the configuration on the partner device is inconsistent (for example incorrect connection name, standby link disabled) or there is a physical fault

(for example device failure, link down).

– Connection Lost:

Existing connection to the partner device has been lost. In this case there is either a physical fault (for example, device failure, link down) or the configuration on the partner device was modified (for example different connection name, standby link disabled).

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

67

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

● Standby Status

The "Standby Status" display box shows the status of the standby ports:

– Active:

The standby ports of this device are active; in other words are enabled for frame traffic.

– Passive:

The standby ports of this device are inactive; in other words are disabled for frame traffic.

● Standby Ports

The "Standby Ports" display box shows the standby ports.

"RM Observer Information" section

● Observer Status

The "Observer Status" display box shows the current status of the observer:

– passive

The observer has not detected any errors.

– active

The observer has detected an errors.

– -

The observer function is disabled.

Syntax of the Command Line Interface

Table 4- 15 X-300 ring redundancy - CLI\X-300\RING>

X-400 ring redundancy - CLI\X-400\RING> info

Command Description

Displays the current ring configuration of the IE switch.

-

Comment

68

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

4.3.2.2

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

X-300/X-400 Ring Configuration

Media Redundancy Protocol (MRP)

The Media Redundancy Protocol (MRP) is available as of firmware V 3.0.0. Automatic

Redundancy Detection (ARD) is the default when the IE switch ships. If you want to use the previous High Speed Redundancy Protocol (HRP), HRP must be configured.

● Reconfiguration time of the frame traffic following a failover in MRP: 200 ms

● Reconfiguration time of the frame traffic following a failover in HRP: 300 ms

Note

For more detailed information, refer to the SCALANCE X-300 or SCALANCE X-400 operating instructions.

Ring configuration of the IE switch

Note

With the SCALANCE X414-3E, configuration using software (CLI or WBM) is possible only when both the DIL switches, R1 and R2, are set to "ON". Otherwise the settings are as described in the operating instructions "Industrial Ethernet Switches SCALANCE X-400", section "DIL switches of the SCALANCE X414-3E".

Note

With SCALANCE X414-3E, the media redundancy in ring topologies and the ring ports can also be set using DIL switches.

The "Ring Configuration" screen appears if you click the "Ring Config" menu item.

Figure 4-17 SCALANCE X-300/X-400 Ring Configuration

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

69

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Redundancy Mode

In the "Redundancy Mode" drop-down list, choose how the role of a device will be specified within the ring:

● Disabled

● Automatic Redundancy Detection (ARD)

Select this setting to configure the redundant mode automatically.

In "Automatic Redundancy Detection" mode, the IE Switch automatically detects whether or not there is a device with the role of "HRP Manager" in the ring. If this is the case, the device adopts the role of "HRP Client".

If no HRP manager is found, all devices with the "Automatic Redundancy Detection" or

"MRP Auto Manager" setting negotiate among themselves to establish which device adopts the role of "MRP Manager". The device with the lowest MAC address will always become "MRP Manager". The other device automatically set themselves to "MRP Client" mode.

● MRP Auto Manager

Devices with the setting "Automatic Redundancy Manager" or "MRP Auto Manager" negotiate among themselves which device will adopt the "MRP Manager" role. The device with the lowest MAC address will always become "MRP Manager". In contrast to the setting "Automatic Redundancy Detection", the devices are not capable of detecting whether or not an HRP manager is in the ring. This means that they never adopt the role of "HRP client".

● MRP Client

Here, you can select the "MRP Client" role.

In a ring in which the devices are configured with MRP, at least one device must be set to one of the modes "Automatic Redundancy Detection" or "MRP Auto Manager". You also have the option of setting the "MRP Client" role for all other devices. If all devices except one are configured as "MRP Client", this one device automatically adopts the role of

"MRP Manager".

Select "MRP Client" mode if you want to operate the device along with components that do not originate from Siemens in the ring.

● HRP Client

Here, you can select the role "HRP Client".

● HRP Manager

Here, you can select the role "HRP Manager". When you configure an HRP ring, one device must be set as HRP manager. All other devices must be configured as HRP clients.

70

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Note

When there is a reset to factory defaults, the redundancy mode Automatic Redundancy

Detection (ARD) is enabled.

The configuration of the ring ports is also reset to the factory-set ports:

X-300: Port 9 and port 10

X-300 EEC: Port 8 and port 9

X304-2: Ports 5 and 6

X308-2M: Port 1 and port 2

XR324-4M: Port 1 and port 2

XR324-12M: Port 1.1 and port 1.2

X408-2: Ports 5.1 and 5.2

X414-3E: Ports 5.1 and 5.2

If other ports were used previously as ring ports, with the appropriate attachment, a previously correctly configured device can cause circulating frames and therefore the failure of the data traffic.

Ring Ports

In the two drop-down lists, select the ports that will be used as ring ports.

Observer Mode

Note

You will find information on the observer function in the section "X-300/X-400 observer

(Page 73)".

The observer monitors malfunctions of the redundancy manager or incorrect configurations of an HRP ring. It is also capable of opening the connected ring if problems are detected

(protection mode).

Using the "Observer Mode" drop-down list, set the functionality of the observer:

● Disable

The observer function is disabled.

● Protection Mode

The observer function operates in protection mode

● Restart Observer

The observer function is reset and the protection mode is enabled again.

Observer Status

The "Observer Status" display box shows the current status of the observer:

● If the observer has not detected a problem, "passive" appears in the display.

● If the observer has detected a problem, "active" appears in the display.

● If the observer function is disabled, a small dash appears in the display.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

71

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Syntax of the Command Line Interface

Table 4- 16 X-300 Ring Configuration - CLI\X-300\RING>

X-400 Ring Configuration - CLI\X-400\RING> info

Command red [mode]

Description

Displays the current ring configuration of the IE switch.

Enables/disables media redundancy in ring topologies.

The following modes are possible:

D

Disables media redundancy in ring topologies.

• HRP

The IE switch is an HRP client.

HRPMGR

The IE switch is an HRP manager.

• MRPCL

The IE switch is an MRP client.

MRP

The IE switch operates with MRP and can become redundancy manager automatically.

• ARD

Automatic Redundancy Detection. ports [<port1> <port2>] Specifies the ring ports. Both ports must be specified. observer [D|R|P] Specifies the observer function:

• D

Disables the observer function.

R

Restarts the observer function.

• P

Enables the observer function.

Comment

-

Administrator only.

Administrator only.

Administrator only.

72

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

4.3.2.3 X-300/X-400 observer

Observer in the HRP ring

The observer function provides additional options for error diagnostics and protection from errors for HRP. This allows malfunctions of the redundancy manager or incorrect configurations of an HRP ring to be monitored. If the observer is enabled (Protection Mode), it is capable of interrupting the connected ring if errors are detected. To do this, the observer changes its status from passive to active and changes a ring port (observer port) to the

"blocking" status. When the error is resolved, the observer enables the port again.

If too many errors occur to quickly one after the other within a certain time, the observer no longer enables its port automatically and it remains permanently in the "active" status. This is signaled by the error LED and the following message text: "Observer stopped recovering because of too many (<number or errors>) repeated errors". From this status, the observer must be reactivated by the user after the errors have been eliminated (Restart Observer).

When setting up a ring with an observer, note the following points:

● The first configured ring port of the HRP manager (blocked port) must be connected directly to the first configured ring port of the observer (observer port).

● On an IE switch, the observer function can be enabled using the Command Line Interface

(CLI) or Web Based Management (WBM).

● The observer and redundancy manager must both have firmware version V2.2 or higher.

Note

To be able to use the observer function, HRP must be activated.

Example of a configuration

SCALANCE X414-3E configured as redundancy manager

Blocked port of the redundancy manager

SCALANCE X414-3E configured as observer

First configured observer port

Figure 4-18 Redundant ring with monitoring of the redundancy manager by an observer

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

73

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Enable or disable

The observer function is optional. As default, this is disabled.

You can configure the Observer function in the "Ring Config" menu.

Error messages

Errors detected by the observer are signaled by an error LED, signaling contact and corresponding message text. This uses the message method configured for the alarm event

"Fault State Change", see section "Agent Event Configuration".

The possible message methods are e-mail, trap and/or event log table entry.

You will find a list with the message texts in Appendix D "Error messages of the SCALANCE

X-300 / X-400".

4.3.2.4 X-300/X-400 Standby Mask

Redundant linking of rings

Apart from media redundancy in ring topologies, as of firmware version 1.2, the IE switches also support the redundant linking of HRP rings (including interrupted HRP rings = linear topology). In the redundant link, two HRP rings are connected together via two Ethernet connections. This is achieved by configuring a master/slave device pair in one ring so that the devices monitor each other over the ring ports and, in the event of a fault, redirect the data traffic from one Ethernet connection (standby port of the master) to another Ethernet connection (standby port of the slave).

For more detailed information on Ethernet cabling and the topological location of master and slave, refer to the "Operating Instructions SCALANCE X-400 Industrial Ethernet Switches".

Note

To use the redundant ring linking function, HRP must be enabled.

74

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Figure 4-19 X-300 Standby Mask

Standby Connection enabled

Here, you decide whether or not the standby function is enabled.

Standby Connection Name

Here, enter the name for the standby connection. The master/slave device pair is defined by this name (both must be in the same ring). This is achieved by entering the same name on two devices in the ring. You can select any name to suit your purposes, however, you can only use the name for one pair of devices in the entire network.

Force Device to Standby Master

If you select this check box, the device is configured as a standby master regardless of its

MAC address. If this check box is not selected for either of the devices for which the standby function is enabled, then assuming that no error has occurred, the device with the higher

MAC address adopts the role of standby master. If the option is selected for both devices or if the "Force Device to Standby Master" property is supported by only one device, the standby master is also selected based on the MAC address. This type of assignment is important in particular when a device is replaced. Depending on the MAC addresses, the previous device with the slave function can take over the role of the standby master.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

75

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Wait for Standby Partner (SCALANCE X-300 only)

● Enabled

A standby connection is enabled only when the standby master and standby slave and their standby partners have established a connection.

This ensures that the redundant connection is really available before communication is started via a standby connection.

● Disabled

A standby connection is enabled even if the standby master has not yet established a connection to the standby slave.

Standby Observer enabled

Enable or disable the function by selecting the check box.

You will find more information on this function in the section X-300/X-400 observer

(Page 73).

Enable Standby Port Monitoring

Note

If the standby observer function is enabled, you can only select one single standby port.

Here, you specify which ports are standby ports. Standby ports are involved in the redirection of data traffic. In there are no problems, only the standby ports of the master are enabled and handle to the data traffic into the connected HRP rings or HRP buses. If the master or the Ethernet connection (link) of one of the standby ports of the master fails, all standby ports of the master will be disabled and the standby ports of the slave enabled. As a result, a functioning Ethernet connection to the connected network segments (HRP rings or

HRP buses) is restored.

Note

If there are links to several rings (more than one port is enabled in "Standby Port

Monitoring"), the standby master and standby slave may only have one Ethernet connection each to one ring. Otherwise circulating frames will result and lead to a loss of data traffic.

Syntax of the Command Line Interface

Table 4- 17 X-400 Standby Mask - CLI\X-400\STANDBY> or

X-300 Standby Mask - CLI\X-300\STANDBY>

Command info standby [E|D]

Description

Displays information on the standby configuration.

Enable/disable standby functionality.

Comment

-

Administrator only.

76

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Command conname [string] stbports [E|D> [ports]] wait [E|D] observer [E|D]

Description

Display/specify the standby connection name.

Enable/disable standby port monitoring.

Specifies whether a standby connection is enabled only after the standby master and the standby slave as well as their standby partners have established a connection.

Enable/disable standby observer monitoring.

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Configuring a redundant link between rings

Follow the steps below to configure redundant linking of HRP rings:

1. Plan which devices of the ring adopt the role of "Standby Master" and which adopt the role of "Standby Slave". You should also plan the ports of the standby Master and standby slave to which the Ethernet connections to the other rings are connected.

With the factory defaults, the device with the highest MAC address adopts the role of

"standby master". If both devices support the "Force Device to Standby Master" function, you can configure a device as the standby Master regardless of its MAC address.

Note

Make sure that the redundant Ethernet connections are not plugged in until configuration is complete. Otherwise circulating frames will result and lead to a loss of data traffic. The same applies to disabling the redundant link.

2. Specify a name for the standby connection and enter this both for the standby master device and standby slave device.

Note

Make sure that the standby connection name (for one pair of devices) is used only once in the network.

3. By selecting the relevant check box under "Enable Standby Port Monitoring", you specify which ports are standby ports both for the standby master and the standby slave.

4. Enable the "Standby Connection enabled" option.

5. Confirm the configuration with "Set Values".

6. Now, you can plug in the redundant Ethernet connections.

Note

Make sure that the redundant Ethernet connections are plugged into the correct ports, in other words, into the configured standby ports. Otherwise circulating frames will result and lead to a loss of data traffic.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

77

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

4.3.2.5 X-300/X-400 Standby Observer

Standby observer

The standby observer is an expansion of the simple redundant ring link. This is a second, independent standby link to master and slave. The full standby-observer link consists of two interconnected master-slave pairs as shown in the following figure:

Figure 4-20 Standby observer link in the HRP ring

Both master-slave pairs make sure independently that only one of the two link paths is enabled at any one time. This prevents circulating frames.

Malfunctions are detected by each device comparing its current status with that of the linked device.

To check whether a link is active, you must, however, query the statuses of both devices of a link; in other words, slave and observer slave.

Enable or disable

The standby observer function is enabled in different ways:

● By device configuration on the "Standby Mask" page of the master or slave.

When the connection is established to the linked device, the observer function starts automatically. This means that it is adequate for the function to be activated on one of the two linked devices.

● On the linked devices "Observer Master" or "Observer Slave", the function is enabled automatically when an observer frame is received.

NOTICE

Number of standby ports

If the standby observer function is enabled, you can only select a single standby port on the

"Standby Mask" page.

78

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Note

Unintentional generation of standby observer instances

If you connect a standby port with the standby observer function enabled, this activates a further standby observer instance on the connected switch. In this way, any number of standby observers can be generated in a topology.

The topology of the network has no influence on the generation of standby observer instances.

Note

Restrictions with a linear bus topology

Note the following about the redundant linking of linear buses with an active standby observer function:

The redundancy is restricted solely to the link paths between the buses. If the bus between the standby master and standby slave or observer master and observer slave is interrupted, the relevant slave remains passive. This means that the communication to the slave and to all devices connected to the slave is interrupted.

Messages relating to the standby observer function

In the status and event messages, "Partner" indicates the device that is located in the same ring. This means that in the figure shown above, the master and slave are partners and the observer master and observer slave are partners. The "Observer" is the linked device in the other ring.

The following status messages can occur:

● "Standby is waiting for <partner / observer>."

The standby observer function was enabled and up to this point in time there was no contact with the partner or observer.

● "Standby <partner / observer> connected to <master / slave> <MAC address> <port number>."

The connection to the partner or observer was established.

● "Standby <partner / observer> lost connection to <master / slave> <MAC address> <port number>."

An existing connection to the partner or observer was interrupted.

● "Standby <partner / observer> conflicts with <active / passive> state."

The state signaled by the partner or observer conflicts with the modules own current active/passive status. The integrity of the network is retained. In extreme situations

(multiple errors), there may be an interruption of the standby link. This error indicates, for example, a connection abort between standby partners or a device failure.

● "Standby <partner's / observer's> state conflict resolved."

The status described above has been resolved, for example after eliminating a fault.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

79

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

● "Standby <partner / observer> conflicts with <master / slave> role."

The function signaled by the partner or observer conflicts with the local master/slave role.

This is the case when both standby devices adopt the same master/slave role in a ring on or when both connected observers adopt roles that are not master/slave roles. The integrity of the network is retained. In extreme situations (multiple errors), there may be an interruption of the standby link. This error indicates, for example, a connection abort between standby partners or a device failure.

● "Standby <partner / observer> conflicts with <master / slave> role resolved."

The status described above has been resolved, for example after eliminating a fault.

● "Standby <partner / observer> conflicts with observer <on / off> configuration."

The configuration signaled by the partner or observer conflicts with the module's own current standby observer setting.

● "Standby <partner / observer> observer configuration conflict resolved."

The status described above has been resolved; the configuration of the partner or observer matches the module's own standby observer setting.

● "Standby slave - at least one standby port has no link."

At least one standby port of the slave has no link.

If a standby port of the corresponding master fails in this status, the slave cannot establish the connection via its standby port.

● "Standby slave - all standby ports linked up."

The status described above has been resolved; all standby ports of the slave have a connection.

The following event messages can occur:

● "Standby observer function <started / stopped>."

The standby observer function was started or stopped.

● "Standby function <started / stopped>."

The standby function was started or stopped.

● "Standby - take on the <master / slave> role."

The master or slave role was adopted.

80

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

4.3.3 X-300/X-400 Fault Mask

Function of the fault mask

With the fault mask, you specify the fault/error states to be monitored by the IE switch and that will trigger the signaling contact. Possible fault/error states are the absence of the power supply, power supply too low, or an interrupted connection or an unexpected connection established to a partner device. If the signaling contact is triggered, this causes the fault LED on the device to light up and, depending on the configuration of the event table, can trigger a trap, an E-mail, or an entry in the log table.

Device-related link monitoring of the ports

An IE switch provides device-related link monitoring. A link-up or link-down also affects the message system if the IE switch was appropriately configured.

Setting the fault mask on the device

The fault mask can also be set by the using the SET/SEL button on the front panel of the IE switch; for more detailed information, refer to the "Operating Instructions SCALANCE X-400

Industrial Ethernet Switches".

Settings in WBM

In WBM, you can set the monitoring of the power supply and the device-related link monitoring. The settings are made in three separate masks:

Figure 4-21 X-400 Fault Mask Power

Enable Power Monitoring

Here, you specify which of the two power supply lines 1 and 2 is monitored. A fault is then indicated by the message system when there is no power on one of the monitored lines (line

1 or line 2) or when the voltage is too low (less than 14 V).

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

81

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

Signal Redundancy Lost by Fault LED (HRP only)

If the check box is selected, a loss of HRP redundancy is indicated by the fault LED of the redundancy manager and signaled by the fault signaling contact. The loss of redundancy of a standby link is indicated by the standby slave with the fault LED and the fault signaling contact. In the factory settings, this function is enabled.

Figure 4-22 X-400-Fault Mask Link Down

Enable Link Down Monitoring

Select the check boxes of the slots / ports whose connection status you want to monitor. If link monitoring is activated, an error is signaled when there is no valid link at this port because, for example, the cable is not plugged in or the connected device is turned off.

An error/fault can be signaled in the following ways depending on the configuration of the IE switch: Signaling contact, fault LED, SNMP trap, E-mail, entry in the log table, syslog.

Figure 4-23 X-400 Fault Mask Link Up

Enable Link Up Monitoring

Select the check boxes of the slots / ports whose connection status you want to monitor. If link monitoring is activated, an error is signaled when there is a valid link at this port because, for example, the cable should not be plugged in.

82

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

An error/fault can be signaled in the following ways depending on the configuration of the IE switch: Signaling contact, fault LED, SNMP trap, E-mail, entry in the log table, syslog.

Syntax of the Command Line Interface

Table 4- 18 X-400 Fault Mask - CLI\X-400> or

X-300 Fault Mask - CLI\X-300>

Command power [<E|D> [lines]

Description

Enables / disables monitoring of the power supply connectors L1 and L2. hrpfled [E|D] Enables/disables the indication of a loss of HRP redundancy by the fault

LED and signaling by the fault signaling contact. linkdown [<E|D> [ports]] Enables / disables link monitoring for the selected ports. If you do not specify any ports, all ports are enabled/disabled. linkup [<E|D> [ports]] Enables / disables link monitoring for the selected ports. If you do not specify any ports, all ports are enabled/disabled.

Comment

Administrator only.

Administrator only.

Administrator only.

If you specify more than one port as parameter, each port must the separated by a blank.

Administrator only.

If you specify more than one port as parameter, each port must the separated by a blank.

4.3.4 X-300/X-400 Counters

Response of the signaling contact and redundancy circuit

Using the counters, you monitor whether and how often problems occurred during operation

(for example how often the signaling contact responded).

Figure 4-24 X-300 Counters

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

83

Configuration using Web Based Management and Command Line Interface

4.3 The X-300/X-400 menu

No. of Signaled Faults

Indicates how often the signaling contact of the IE switch responded.

The counter is reset each time the device is restarted.

No. of Changes to RM Active State

A value is displayed here only when the IE switch operates as HRP manager (see section

"X-300/X-400 ring configuration").

The value indicates how often the HRP manager changed to the active state. This state is adopted when the redundancy manager detects an interruption on the line connected to the ring ports.

The counter is reset each time the device is restarted.

Max. Delay of RM Test Packets[ms]

Here, a value is displayed only when the IE switch operates as HRP manager ("Redundancy

Manager enabled" check box selected).

In redundancy manager mode, an IE switch sends test frames via the ring ports to the connected line of switches and measures the delay of these test frames. The maximum delay that occurs with these test packets is displayed.

No. of Changes to Standby Active State

A value is displayed here when the standby function is enabled (see section "X-300/X-400

Standby Mask").

The value specifies how often the IE switch has changed the standby status from passive to active. This status is adopted when the connection of a standby port of the standby master fails.

The counter is reset each time the device is restarted.

No. of STP/RSTP/MSTP Topology Changes

Shows how often reconfiguration occurred due to the spanning tree mechanism.

Reset Counters

Click this button to reset the counters of the IE switch. A restart, for example due to an interruption of the power supply to the IE switch, causes the counters to be reset.

Syntax of the Command Line Interface

Table 4- 19 X-400 Counters - CLI\X-400> or X-300 Counters - CLI\X-300>

Command counters

Description

Displays the following counter readings:

• Changes to RM active state


Indicates how often the IE switch operating as redundancy manager closed the ring.

Max. delay of RM Test Packets


Indicates the maximum delay of test frames sent by the redundancy manager.

Resets the IE switch counters.

-

Comment

Administrator only. resetc

84

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

4.4

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

The Agent menu

4.4.1

Introduction

Agent Configuration

The "Agent Configuration" screen appears if you click the "Agent" folder icon. This screen provides options for setting the IP address. You can specify whether a IE switch obtains the

IP address dynamically or you can assign a fixed address. You can also activate the options for accessing the IE switch, such as TELNET or RMON.

IP configuration for the SCALANCE X414-3E

Here, you specify the IP configuration for the SCALANCE X414-3E. A distinction is made between the switch ports (In-band column) and the Ethernet port of the switch CPU (Outband column).

Note

The IP addresses of the CPU and the switch ports must belong to different subnets.

IP Address

IP address of the SCALANCE X414-3E or the CPU module. If you change the IP address, you should be automatically guided to the new address. If this does not happen, please enter the new address in the Web browser manually.

Subnet Mask

Here, you enter the subnet mask of the SCALANCE X414-3E or the CPU module.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

85

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Figure 4-25 SCALANCE X414-3E agent configuration

86

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

IP configuration for the SCALANCE X-300/X408-2

Here, you specify the IP configuration for the SCALANCE X-300/X408-2.

Note

On the SCALANCE X-300/X408-2, no CPU Ethernet port (out-band port) can be configured.

You can only configure the switch ports.

Subnet Mask

Enter the subnet mask here.

Figure 4-26 Agent Configuration SCALANCE X300

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

87

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Settings for the IE switch

FTP

Enables / disables the FTP server. FTP can be used to download the firmware. You will find more detailed information on this topic in the section "Firmware update". You can also download or back up the configuration data via FTP.

If an IE switch has an IP address and there is an Ethernet connection to a PC or PG, follow the steps below to download configuration data:

1. Open a console window and type in the command ftp followed by the IP address of the IE switch. Example: ftp 192.168.20.54

2. For the login and password enter the same values as you use for WBM and CLI.

3. Enter the "put" command followed by the name of the firmware file.

Example: put cfgdata.txt

4. Once the file has been loaded, the IE switch closes the FTP connection and restarts.

TELNET

Here, you specify whether or not the IE switch is accessible over TELNET.

SSH

Here, you specify whether or not the IE switch is accessible over SSH.

HTTPS only

Here, you specify whether or not the IE Switch is reachable only over HTTPS. If you do not select this option, it can also be reached with HTTP.

E-mail

This enables / disables the e-mail function of the IE switch. For detailed information on this functionality, refer to the section "Agent E-Mail Configuration menu item".

Syslog

Here, you specify whether or not the IE switch stores log entries on a Syslog server. For detailed information on this functionality, refer to the section "Agent Syslog Configuration menu item".

RMON

An IE switch supports remote monitoring (RMON). Remote Monitoring allows diagnostic data to be collected on the IE switch, prepared and read out using SNMP by a network management station that also supports RMON. This diagnostic data, for example portrelated load trends, allow problems in the network to be detected early and eliminated. The setting for RMON does not influence the statistics functions (see section "Statistics menu").

88

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Management ACL

Note

Note the following when enabling this function: A bad configuration on the "Management

ACL Configuration" page can result in you being unable to access the device. You should therefore configure an access rule that allows access to the management before you enable the function.

By clicking the check box, enable or disable access control to the management of the IE switch.

As default, the function is disabled.

The access rules are managed on the "Management ACL Configuration" page, see section

Management Access Control List (Page 128)

Note

If the function is disabled, there is unrestricted access to the management of the IE switch.

The configured access rules are only taken into account when the function is enabled.

SNTP

Enables / disables synchronization of the IE switch system time over an SNTP server in the network.

Supported version: SNTP V2

SIMATIC Time

Enables / disables synchronization of the IE switch system time using the SIMATIC time protocol.

In this case, synchronization makes use of multicast frames sent to the address 09-00-06-

01-FF-EF.

An IE switch also evaluates SIMATIC time frames when it is logged on to an SNTP server.

NTP

Enables / disables synchronization of the IE switch system time via an NTP server in the network.

Supported version: NTP V3

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

89

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

PTP

Note

This option is available only with switches capable of PTP.

Enables / disables synchronization of the IE switch system time with the PTP time sent out by the master. To achieve this, the IE switch must be operated as a "Transparent Clock" in a

PTP network.

You will find further information on PTP in the sections "Precision Time Protocol (PTP)

complying with IEEE 1588 (Page 241)" and "Configuration of the Precision Time Protocol with the WBM (Page 248)".

Note

Avoiding time jumps

To avoid time jumps, make sure that there is only one time server (SICLOCK time transmitter, (S)NTP server, PTP master) in the network.

If there are several time servers in the network, only activate one time protocol.

DHCP

If you enable this check box, the IE switch browses the network for a DHCP server and configures its IP parameters according to the data supplied by this server. For detailed information on this functionality, refer to the section "Assigning addresses with the DHCP client of the IE switch".

Note

As soon as the IP address has been assigned once by a PROFINET IO controller, DHCP automatically deactivates itself and must be reactivated if required.

BOOTP

If you enable this check box, the IE switch browses the network for a BOOTP server and configures its IP parameters according to the data supplied by this server. For detailed information on this functionality, refer to the section "Assigning addresses with the BOOTP client of the IE switch".

DCP

If you select this option, the device can be accessed and configured via DCP (PST Tool and

STEP 7).

DCP Read Only

If you select this option, the configuration data can only be read via DCP (PST Tool and

STEP 7).

90

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Default Gateway

If you require the IE switch to communicate with devices (diagnostics stations, e-mail servers, etc.) in a different subnet, you will need to enter the IP address of the default gateway here.

Agent VLAN ID

Enter the VLAN-ID of the agent here.

Accessible in all VLANs

If this option is enabled, all agent functions (ping, Telnet, Web interface etc.) are accessible via all VLANs; if it is disabled, the functions are accessible only via the agent VLAN.

ARP to all VLANs

This option is only relevant, it the "Accessible in all VLANs" option is enabled. If this option is enabled, the management agent sends ARP packets to all VLANs. If it is disabled, the management agent only sends ARP packets to the VLAN configured in "Agent VLAN ID".

MAC Address

The MAC address of the IE switch or CPU module.

Syntax of the Command Line Interface

Table 4- 20 Agent Configuration - CLI\AGENT>

Command ip <IP address> subnet <subnet mask>

Description

This specifies in-band IP address for the IE switch. You enter four decimal numbers separated by dots.

Displays the currently set in-band

IP address if no parameter is specified.

Specifies the subnet mask for the in-band ports of the IE switch.

You enter four decimal numbers separated by dots.

Comment

Administrator only.

The IP address must be entered if you want to access an IE switch using a Web browser, TELNET, or

SNMP. The IP address can also be assigned automatically by

BOOTP/DHCP.

Administrator only.

The subnet mask must be entered if you want to access an IE switch using a Web browser, TELNET, or

SNMP.

The IP address can also be assigned automatically by BOOTP/DHCP.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

91

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Command gateway <IP address> vid allvlans bootp [E|D] dhcp [E|D] mail [E|D] ftp [E|D] dcp [D|RO|RW] telnet [E|D] rmon [E|D] macl [E|D] sntp [E|D] siclock ntp [E|D]

Description

Specifies the IP address of the default IP gateway. You enter four decimal numbers separated by dots.

Specifies the agent VLAN ID.

Specifies whether or not the agent functionalities are available via all

VLANs or only via the agent

VLAN.

Enables / disables BOOTP.

Comment

Administrator only.

The IP address must be entered if you want to access a router on the

IE switch and the communication partner does not belong to the same subnet as the IE switch. The gateway must either be in the subnet of the in-band IP address or the outband IP address.

The IP address can also be assigned automatically by BOOTP/DHCP.

Administrator only.

Default value: 1

Administrator only.

Default value: Disabled

Enables / disables DHCP.

Enables/disables E-mail functionality.

Enables / disables FTP.

Enables / disables DCP

D

Disabled

RO

Read-only

RW

Read-write

Administrator only.

Default value: Disabled

Administrator only.

Default value: Enabled.

Administrator only.

Default value: Disabled.

Administrator only.

Default value: Enabled

Administrator only.

Default value: Read Write

Enables / disables TELNET.

Enables / disables remote monitoring.

Enables/disables Management

Access Control List.

Enables / disables SNTP.

Administrator only.

Default value: Enabled.

Administrator only.

Default value: Disabled

Administrator only.

Enables/disables time synchronization with the SIMATIC time protocol.

Enables / disables NTP.

Administrator only.

Default value: Disabled

Administrator only.

Default value: Enabled

Administrator only.

Default value: Disabled

92

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Command ptp [E|D] ping [-c number]

[-s length]

<IP address> ssh [E|D] httpso [E|D] slog [E|D]

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Description

Enables / disables PTP.

Sends a number of packets to the specified IP address. If the parameters for number and length are omitted, an IE switch sends ten packets each with a length of

128 bytes.

Example: ping -c 5 -s 256 192.168.1.1

Five packets with a length of 256 bytes are sent to IP address

192.168.1.1.

Enables / disables SSH.

Specifies whether or no the IE switch is reachable only over

HTTPS (disabled means it is also reachable over HTTP).

Enables / disables Syslog.

Comment

Administrator only.

Default value: Disabled

-

Administrator only.

Default value: Enabled

Administrator only.

Default value: Disabled.

Administrator only.

4.4.2 Ping

Reachability of an address in an IP network

The ping function in Web Based Management has exactly the same function as the terminal function of the same name. It checks whether an address exists in an IP network.

IP address

Enter the IP address of the network device you want to ping to test whether it can be reached.

Repeat

Here, enter the number of data packets to be sent.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

93

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Ping

Click this button to start sending the data packets.

Ping Output

This box shows the output of the ping function.

4.4.3 SNMP

4.4.3.1 Agent SNMP Configuration

How SNMP works

Using SNMP (Simple Network Management Protocol), a Network Management Station can configure and monitor SNMP-compliant nodes, such as an IE switch. To allow this, a management agent is installed in the IE switch with which the management station exchanges data. There are three packet types:

● Read (management station fetches values from an IE switch)

● Write (management station writes values to an IE switch)

● Send events to registered nodes (traps).

The agent sends messages to registered management stations.

SNMPv3 (and SNMPv2) enhancements compared with SNMPv1

SNMPv3 (and SNMPv2) has the following enhancements compared with the original

SNMPv1:

● Management stations can communicate with each other.

● Multi-level security concept (encryption of data, authentication of users) via an SNMP engine ID unique in the network.

● User-defined security settings

Access permissions with SNMP

When using the SNMP protocol, you specify access permissions by means of the community string. A community string contains information about the user name and password in a string. Different community strings are defined for read and write permissions. More complex and more secure authentications are possible only in some SNMPv2 variants and in

SNMPv3.

Note

To preserve security, you should not use the default values public or private.

94

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Configuration of SNMP with an IE switch

The "Agent SNMP Configuration" screen appears if you click the "SNMP" folder icon.

In the SNMP Configuration screen, you make the basic settings for SNMP. Enable the check boxes according to the SNMP functionality you want to use. For detailed settings (traps, groups, users), there are separate menu items in WBM. Here, you can also make the entries even if you have not selected the SNMPv3 enabled option, however the entries do not take effect.

Figure 4-27 Agent SNMP Configuration

SNMP enable

● SNMPv1/v2/v3

Here, you enable / disable SNMPv1, SNMPv2 and SNMPv3 for an IE switch.

● SNMPv3 only

If you select this option, you enable SNMPv3 only; the functionality of SNMPv1 and

SNMPv2 is not available.

SNMPv1/V2c

● Read Only

When this option is selected, you can only read SNMP variables with SNMPv1/v2c.

● Read Community String

Here, you enter the read community string (maximum of 20 characters) for the SNMP protocol.

● Read/Write Community String

Here, you enter the write community string (maximum of 20 characters) for the SNMP protocol.

● Traps

This enables / disables the sending of SNMPv1/v2c traps.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

95

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

SNMPv3

With the introduction of SNMPv3 you can no longer transfer user configurations to other devices without taking special action, e.g. by loading a configuration file or replacing the C-

PLUG.

According to the standard, the SNMPv3 protocol uses a unique SNMP engine ID as an internal identifier for an SNMP agent. This ID must be unique in the network. It is used to authenticate access data of SNMPv3 users and to encrypt it.

Depending on whether you have enabled or disabled the “SNMPv3 User Migration” function, the SNMP engine ID is generated differently.

● User Migration (SCALANCE X-300/X408-2)

– Enabled

If the function is enabled, an SNMP engine ID is generated that can be migrated. You can transfer configured SNMPv3 users to a different device.

If you enable this function and load the configuration of the device on another device, configured SNMPv3 users are retained.

– Disabled

If the function is disabled, a device-specific SNMP engine ID is generated. To generate the ID, the agent MAC address of the device is used. You cannot transfer this SNMP user configuration to other devices.

If you load the configuration of the device on another device, all configured SNMPv3 users are deleted.

Note

When you enable or disable the “SNMPv3 User Migration” function, the configured

SNMPv3 users are always deleted. When you disable the “SNMPv3 User Migration” function, the SNMP engine ID is reset to a device-specific value.

Restriction when using the function

Use the "SNMPv3 User Migration" function only to transfer configured SNMPv3 when replacing a device.

Do not use the function to transfer configured SNMPv3 users to multiple devices. If you load a configuration with created SNMPv3 users on several devices, these devices use the same SNMP engine ID. If you use these devices in the same network, your configuration contradicts the SNMP standard.

Default value

– After an upgrade to the firmware version 4.0.2:

Disabled

– After resetting to the factory defaults:

Enabled

96

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Syntax of the Command Line Interface

Table 4- 21 Agent SNMP Configuration - CLI\AGENT\SNMP>

Command snmp [D|3|A] getcomm [string] setcomm [string] traps [E|D] usermigr [E|D]

Description

Disables / enables SNMP. The meaning of the parameters is as follows:

D

Disables SNMP.

• 3

Enables only SNMPv3.

A

Enables SNMPv1, SNMPv2 and SNMPv3.

Specifies the read community string

(maximum length 20 characters). The default is "public".

Specifies the read/write community string

(maximum length 20 characters). The default is "private".

Enables / disables SNMPv1 traps.

Activates / deactivates the transfer of configured SNMPv3 users by configuration file/ C-PLUG when replacing a device.

Comment

Administrator only.

Default value: SNMPv1, v2 and v3 are enabled.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Only with SCALANCE X-

300/X408-2

Default value:

After an upgrade to the firmware version 4.0.2:

Disabled

• After resetting to the factory defaults:

Enabled

4.4.3.2 SNMPv1 Trap Configuration

SNMP traps for alarm events

If an alarm event occurs, an IE switch can send traps (alarm frames) to up to 10 different

(network management) stations at the same time. Traps are only sent when events as specified in the Agent Event Configuration menu occur (see Section "Agent Event

Configuration").

Note

Traps are sent only when the "Traps" option was selected in "SNMP Configuration".

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

97

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Figure 4-28 SNMPv1 Trap Configuration

IP Address

Here, you enter the addresses of the stations to which an IE switch will send traps.

Enable Trap

Click on the check box next to the IP addresses to enable the sending of traps to the corresponding stations.

Syntax of the Command Line Interface

Table 4- 22 SNMPv1 Trap Configuration - CLI\AGENT\SNMP\TRAPCONF>

Command

Info ip <entry> <ip> state <entry><E|D>

Description

Shows the current trap configuration.

Specifies the IP address of the trap recipient entry (entry between 1 and 10).

Enables/disables the sending of traps to the recipient entry (entry between 1 and 10)

-

Comment

Administrator only.

Default value: 0.0.0.0

Administrator only.

Default value: D

98

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

4.4.3.3 SNMPv3 Group Configuration

Security settings and assigning permissions

SNMP version 3 allows permissions to be assigned at protocol level, authentication, and encryption. The security levels and read/write permissions are assigned according to groups.

The settings automatically apply to every member of a group.

Figure 4-29 SNMPv3 Groups

Group Name

This lists all previously defined group names. When you click on a group name, a new window opens in which you can change the parameter settings of a group.

Auth

A cross in this column indicates that the authentication is enabled for the corresponding group.

Priv

A cross in this column indicates that encryption is enabled for the corresponding group.

Read

A cross in this column indicates that read access is enabled for the corresponding group.

Write

A cross in this column indicates that write access is enabled for the corresponding group.

New Entry

Click on this button to create a new group.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

99

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Configuration of the SNMPv3 groups

When you click on a group name, you open the page for configuring the group properties:

100

Figure 4-30 SNMPv3 Group Configuration

Group Name

The group name is displayed here. This text box is read-only, you can only assign the group name when creating a group and you cannot modify it later.

Security Level

This text box displays the authentication and the encryption. You have the following three options for the security levels:

Security level no Auth / no Priv

Auth

Auth / Priv

Special features

No authentication, no encryption.

Authentication with the MD5 or

SHA algorithm, no encryption.

Authentication with the MD5 or

SHA algorithm, encryption with the DES3 algorithm.

Comment

-

-

-

Read and Write

Here, you enable or disable write access, read access and notification.

Current Entries

By clicking this button, you return to the list of SNMPv3 groups.

New Entry

After clicking this button, the page for creating a new group opens.

Delete

Click on this button to delete a group. If members are already entered in the group, you cannot delete the group nor is it possible to change the security level for the group.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Creating a new group

After clicking the "New Entry" button in the "SNMPv3 Group Configuration" window, the window for creating a new group opens:

Figure 4-31 SNMPv3 Group Configuration II

Group Name

Enter the name of the group here. This name must have at least two characters, the maximum length is 32 characters.

Security Level

Here, you select the security level that will apply to the group.

Read and Write

Here, you specify whether members of the group have read access, write access, or both.

Syntax of the Command Line Interface

Table 4- 23 SNMPv3 Groups - CLI\AGENT\SNMP\GROUP>

Command info add <groupname> [securitylevel]

Description

Displays a list of all SNMPv3 groups.

Adds a new SNMPv3 group. You specify the security level with the following parameter settings:

• NOAUTH

No authentication, no encryption.

AUTH

Authentication with the MD5 or SHA algorithm, no encryption.

• PRIV

Authentication with the MD5 or SHA algorithm, encryption with the DES3 algorithm.

Comment

-

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

101

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Command edit <groupname> <accessrights> delete <groupname> clearall

Description

Sets the access permissions.

The following parameter settings are available for defining write and read access:

-

Permit neither write nor read access.

• RO

Permit read access only.

RW

Permit read and write access.

Deletes the SNMPv3 group with the specified name.

Deletes all SNMPv3 groups from the list.

Comment

Administrator only.

Administrator only.

Administrator only.

4.4.3.4 SNMPv3 Users Configuration

User-specific security settings

The user-based security model works with the concept of the user name; in other words, a user ID is added to every frame. This user name and the applicable security settings are checked by both the sender and recipient. A user is defined by the following settings:

● User name:

A freely selectable name.

● Security name:

Name corresponding to the authentication protocol.

● Authentication Protocol:

Type of authentication protocol.

● Authentication Key:

The private key of the authentication protocol.

● Privacy Protocol:

Type of encryption.

● Privacy Key:

The private password for the encryption.

This page displays the SNMPv3 users. The user name is displayed in the "User Name" column, the name of the group to which the user is assigned is displayed in the "Group" column:

102

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Figure 4-32 SNMPv3 Users

User Name

This lists all previously defined user names. When you click on a user name, a new window opens in which you can change the passwords of a user.

Group

The entries in this column show the group to which a user belongs.

Auth

This column shows the authentication algorithm used for the user.

Priv

This column displays the encryption method used for the user.

New Entry

Click on this button to create a new user.

Configuration of the SNMPv3 users

When you click on a user name, you open the page for user configuration:

Figure 4-33 SNMPv3 Users Configuration

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

103

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

User Name

The user name is displayed here. This box is read-only because the name of a user can no longer be modified once it has been created.

Group Name

This box displays the group to which the user was assigned.

If authentication is necessary for the selected group, select an authentication algorithm and enter the authentication password. If encryption was also selected for the group, enter the encryption password.

Security Level

This box displays the security level (authentication, encryption) that applies to the group. The various security levels are described on page 70.

Authentication Algorithm

You can choose between the MD5 and the SHA algorithm.

Authentication password / Authentication password confirmation

Enter the authentication password in these boxes. The password can be up to a maximum of

32 characters long. You can use all available characters.

Privacy password / Privacy password confirmation

Enter the encryption password in these boxes. The password can be up to a maximum of 32 characters long.

Current Entries

By clicking this button, you return to the list of MAC SNMPv3 users.

New Entry

You can create a new user by clicking the New Entry button and specifying the group name and the group to which the user will belong.

Delete

Click on this button to delete a user.

Creating a new user

After clicking the "New Entry" button in the "SNMPv3 Users Configuration" window, the window for creating a new user opens:

104

Figure 4-34 SNMPv3 Users Configuration II

User Name

Enter the name of the new user here.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Group Name

Here, you select the group to which the new user will belong.

Syntax of the Command Line Interface

Table 4- 24 SNMPv3 Users - CLI\AGENT\SNMP\USER> info

Command add <username>

<groupname>

Adds a new SNMPv3 user to a group.

If authentication is necessary for the group, MD5 is selected as the default algorithm. auth <username><MD5|SHA> Changes the authentication algorithm

(MD5 or SHA) or an SNMPv3 user.

This command can only be used for members of a group for which this authentication is necessary. pass

<username><authentpassword>

[encr.password]

Description

Displays a list of all SNMPv3 users. delete <username> clearall

Changes the passwords of an SNMPv3 user (maximum length 32 characters).

This command can only be used for members of a group for which this authentication is necessary.

The encryption password can only be specified if it is necessary.

Deletes the SNMPv3 user with the specified name.

Deletes all SNMPv3 users from the list.

Comment

-

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

105

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

4.4.4 Agent Timeout Configuration

Setting the timeout

Here, you can set the times after which there is an automatic logout in WBM or CLI.

Figure 4-35 Agent Timeout Configuration

Web Based Management (sec)

Here, you specify the WBM timeout.

Permitted values for the WBM timeout: 60-3600 (seconds)

0 means: There is no automatic logout.

CLI (TELNET, SSH, Serial) (sec)

Here, you specify the CLI timeout.

Permitted values for the CLI timeout: 60-600 seconds

0 means: There is no automatic logout.

Syntax of the Command Line Interface

Table 4- 25 CLI\AGENT\TIMEOUT>

Command info wbmtime clitime

Description

Displays the current timeout settings.

Sets the WBM timeout (in seconds).

Sets the CLI timeout (in seconds).

Comment

-

Administrator only.

Default value: 900

Administrator only.

Default value 300

106

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

4.4.5 Agent Event Configuration

System events of the IE switch

On this page, you specify how an IE switch reacts to system events. By enabling the appropriate check boxes, you specify which events trigger which reactions on the IE switch.

The following options are available:

● The IE switch sends an E-mail.

● The IE switch triggers an SNMP trap.

● The IE switch writes an entry in the log file.

● The IE switch writes an entry to the Syslog server.

Figure 4-36 Agent Event Configuration

You can configure the reaction of the IE switch to the following events:

Cold/Warm Start

The IE Switch was turned on or restarted by the user.

Link Change

A port has failed or data traffic is being handled again over a port that had previously failed.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

107

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Authentication Failure

There was an SNMP access with a bad password or inadequate access rights.

RMON Alarm

An alarm or event has occurred relating to remote monitoring.

Power Change

This event occurs only when the power supply line 1 and line 2 is monitored. It indicates that there was a change to line 1 or line 2.

RM State Change

The redundancy manager has detected an interruption or re-establishment of the ring and has switched the line over or back. To allow an IE switch to operate as redundancy manager, you will need to configure the device appropriately (see section "X-400 Ring

Configuration menu item" or "X-300 Ring Configuration menu item).

Standby State Change

A device with an established standby connection (master or slave) has activated or deactivated the link to the other ring (standby port). The data traffic was redirected from one

Ethernet connection (standby port of the master) to another Ethernet connection (standby port of the slave) (see section "X-400 Standby Mask menu item" or "X-300 Standby Mask menu item").

Fault State Change

The fault status has changed. The fault status can relate to the activated port monitoring, the response of the signaling contact or the power supply monitoring.

STP/RSTP Change

The STP or RSTP topology has changed; in other words, a passive listening event has occurred.

Loop Detection State Change

The status of the loop detection function has changed:

● The device has disabled a port because a loop was detected.

● The device has enabled a port again after a loop was eliminated.

VRRP State Change (SCALANCE X414 only)

The state of the virtual router has changed.

PoE State Change

The status of PoE has changed.

Port Auth State Change

The authentication status of the port has changed.

Fiber Optic Diagnostics

An event occurred relating to port diagnostics.

108

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Signaling Contact Control

With this drop-down list, you can specify how the signaling contact works:

● conventional

Default setting for the signaling contact. An error/fault is displayed by the fault LED and the signaling contact opens. When the error/fault state no longer exists, the fault LED goes off and the signaling contact closes.

● aligned

The way the signaling contact works depends on the error/fault that has occurred. The signaling contact can be opened or closed as required by user actions.

Close Signaling Contact

Select this check box if you want to close the signaling contact.

Note

The setting of the "Close Signaling Contact" check box is only effective if the "aligned" setting was selected in the "Signaling Contact Control" drop-down list.

Syntax of the Command Line Interface

Table 4- 26 Agent Event Configuration - CLI\AGENT\EVENT>

Command info

Description

Shows the current event configuration.

Comment

-

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

109

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Command setec [event] <E|D>

<E|D> <E|D> <E|D>

Description

Specifies how an IE switch reacts to system events.

The following abbreviations are available for the event parameter:

CW

Cold/Warm start

• LC

Link Change

AF

Authentication Failure

• RA

RMON Alarm

PC

Power Change

• RC

RM State Change

SC

Standby State Change

• FC

Fault State Change

RS

STP/RSTP Change

• LD

Loop Detection State Change

PA

Port Auth State Change

• VE

VRRP State Change

(X414 only)

FO

Fiber Optic Diagnostics

If an event is specified, the configured actions are formed for each event.

The four parameters that follow <E> or <D> configure the reactions of the IE switch in the order:

E-mail

Trap

Entry in the log table

Entry on the Syslog server

Example:

• setec LC E D D D

Only sends an E-mail if there is a Link Change.

Comment

Administrator only.

110

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Command scontrol [C|A] sclose [yes|no]

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Description

Selects how the signaling contact works: conventional

An error/fault is displayed by the LED and the signaling contact opens. aligned

The signaling contact can be opened or closed as required regardless of a fault/error.

Switches the signaling contact:

Yes The contact is closed.

No The contact is opened

Comment

Administrator only.

Administrator only.

4.4.6 Agent Digital Input Configuration (SCALANCE X414-3E)

Note

Digital inputs and their associated functions are available only on the SCALANCE X414-3E.

Examples of applications for digital inputs

A SCALANCE X414-3E has eight digital inputs that can be used in a wide variety of ways:

● Example 1, monitoring an OLM in process control without I/O


It is assumed that you have an S7-400 controller without central I/O module, the I/O is connected optically over PROFIBUS OLM. The signaling contact of the OLM can be applied to a digital input of the SCALANCE X414-3E and is available for diagnostics.

If the signaling contacts of an existing OLM are applied to the digital inputs of the

SCALANCE X414-3E, the OLM can be monitored without additional components.

● Example 2, door contact


The door contact of a cabinet is connected with digital inputs of a SCALANCE X414-3E.

By suitably configuring events, it is then possible to monitor any interventions in the cabinet.

Events for changes and the digital inputs

For each individual digital input, you can specify which event is triggered if there is a status change at the input (both rising and falling edges). The following options are available:

● The SCALANCE X414-3E sends an E-mail.

● The SCALANCE X414-3E triggers an SNMP trap.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

111

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

● The SCALANCE X414-3E writes an entry in the log file.

● The SCALANCE X414-3E writes an entry to the Syslog server.

Figure 4-37 Agent Digital Input Configuration

Name

Here, you can assign a meaningful name for each digital input.

Syntax of the Command Line Interface

Table 4- 27 Agent Digital Input Configuration - CLI\AGENT\DIGIN> info showdic

Command Description

Shows the state of the digital inputs of the

SCALANCE X414-3E.

Shows the configuration of the digital inputs of the SCALANCE X414-3E.

-

-

Comment

112

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Command setdic [input] <E|D> <E|D>

<E|D> <E|D> name <1 ... 8> <string>

Description

Sets the event configuration for the digital inputs in the order: E-mail, trap, log table entry, entry on the Syslog server. If no input is specified, the specified configuration relates to all inputs.

Example:

• setdic 5 E D E D

If input 5 is set, the SCALANCE X414-3E sends an E-mail and makes an entry in the log table. No trap is sent and no entry is made on the Syslog server.

Assigns a symbolic name to a digital input. This name can be a maximum of 64 characters long.

Comment

Administrator only.

Administrator only.

4.4.7 Agent E-Mail Configuration

Network monitoring with E-mails

An IE switch provides the option of automatically sending an E-mail if an alarm event occurs

(for example to the network administrator). The E-mail contains the identification of the sending device, a description of the cause of the alarm in plain language, and a time stamp.

This allows centralized network monitoring to be set up for networks with few nodes based on an E-mail system. When an E-mail event message is received, the WBM can be started by the browser using the identification of the sender to read out further diagnostic information.

E-mails can only be sent when

● The E-mail function is activated on the IE switch and the E-mail address of the recipient is configured (see "Agent Configuration menu item").

● The E-mail function is enabled for the relevant event (see 
"Agent Event Configuration" menu item).

● There is an SMTP server in your network that can be reached by the IE switch.

● The IP address of the SMTP server is entered on the IE switch.

Figure 4-38 Agent E-Mail Configuration

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

113

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

E-Mail Address

Here, you enter the E-mail address to which the IE switch sends an E-mail if a fault occurs.

SMTP Server IP Address

Here, you enter the IP address of the SMTP server over which the E-mail is sent.

SMTP Server Port

The IP port over which the mail is sent. If necessary, you can change the default value 25 to your own requirements.

"From" Field

Address of the sender of the E-mail.

Note

Depending on the properties and configuration of the SMTP server, it may be necessary to adapt the "From” box for the E-mails. Check with the administrator of the SMTP server. You can set the "From” box over WBM, CLI, or direct SNMP access.

Syntax of the Command Line Interface

Table 4- 28 Agent E-Mail Configuration - CLI\AGENT\EMAIL>

Command info server [<ip>[:port]] email <E-mail address> from [E-mail address]

Description

Shows the current E-mail configuration.

Specifies the IP address and the port number of the SMTP server.

Specifies the address to which an IE switch sends an E-mail.

This address can be up to a maximum of 50 characters long.

Specifies the sender of E-mails from the IE switch. This address can be up to a maximum of 50 characters long.

Comment

-

Administrator only.

Default value: 0.0.0.0:25

Administrator only.

Default value: Disabled.

Default address: [email protected]

Administrator only.

114

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

4.4.8

Application

Agent Syslog Configuration

Syslog according to RFC 3164 is used for transferring short, unencrypted text messages over UDP in the IP network. This requires a standard Syslog server.

Log book entries can only be sent when

● The Syslog function is enabled on the IE Switch (see section "Agent Configuration")

● The Syslog function is enabled for the relevant event (see 
Agent Event Configuration menu item)

● There is a Syslog server in your network that receives the log entries from the IE switch.

(Since this is a UDP connection, there is no acknowledgment to the IE Switch)

● The IP address of the Syslog server is entered on the IE switch.

Figure 4-39 Agent Syslog Configuration

Syslog Server IP Address

Here, you enter the IP address of the Syslog server on which the log entries will be stored.

Syslog Server Port

The UDP port via which the log entries will be stored on the server.

Syntax of the Command Line Interface

Table 4- 29 Agent Syslog Configuration - CLI\AGENT\SYSLOG>

Command info server [<ip>[:port]]

Description

Shows the current Syslog configuration.

Specifies the IP address and the port number of the Syslog server.

Comment

-

Administrator only.

Default value: 0.0.0.0:514

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

115

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

4.4.9 Agent DHCP Configuration

Setting the DHCP mode

There are several ways of identifying the SCALANCE X408-2 in the configuration of the

DHCP server:

● with the MAC address

● with a freely defined client ID

● with the system name

● with the PROFINET IO device name

Figure 4-40 Agent DHCP Configuration

DHCP Mode

Here, you set the DHCP mode.

Note

If DHCP is not enabled in the Agent Configuration menu item, no mode can be selected and the text "disabled" is displayed.

DHCP Client ID

For the DHCP mode "via Client ID", you can assign an identification string here that is assigned to an IE switch and will be evaluated by the DHCP server.

DHCP Client Config File Request (Op. 66, 67)

Select this option if you want the DHCP client to use options 66 and 67 to download and then enable a configuration file.

Note

If a configuration file is downloaded, this triggers a system restart. Make sure that the option

"DHCP Client Config File Request" is no longer set in this configuration file.

116

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Syntax of the Command Line Interface

Table 4- 30 Agent DHCP Configuration - CLI\AGENT\DHCPCONF>

Command info dhcpmode [mode] clientid [ClientID] cfgreq [E|D]

Description

Shows the current DHCP configuration

Sets the DHCP mode. The possible modes are as follows:

MAC

MAC address

• CLID

Client ID

SYSN device name

• DEVN

PNIO device name

Comment

-

Administrator only.

Specifies the DHCP client ID. This value is used when DHCP via client

ID is set. The client ID can be freely defined.

Enables/disables Config File Request (Opt. 66, 67)

Administrator only.

Administrator only.

4.4.10 Time Config

4.4.10.1 Agent Time Configuration

Time-of-day synchronization in the network

The following protocols are available for time synchronization in the network:

● SNTP (Simple Network Time Protocol)

● NTP (Network Time Protocol)

● SIMATIC Time

● PTP (Precision Time Protocol)

Make the general settings in the "Agent Time Configuration" screen.

SNTP and NTP require further settings that you can make with the menu items "SNTP

Client" and "NTP Client".

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

117

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

118

Figure 4-41 Agent Time Configuration

System Time

This box shows the current system time.

From the identifier following the date and time, you can recognize how the system time was set:

● (p)

The system time was set by the SNTP protocol.

● (n)

The system time was set by the NTP protocol.

● (i)

The system time was set by the PTP protocol.

● (s)

The system time was set by a SIMATIC time-of-day frame and it is synchronized with the time transmitter.

● (t)

The system time was set by a SIMATIC time-of-day frame but it is not synchronized with the time transmitter.

● (m)

The system time is set manually.

You can also set the date and time of day manually. The required input format is as follows: MM/DD/YYYY HH:MM:SS.

If no time-of-day synchronization was possible, the box displays "Date/time not set".

Time Synchronization

This box is read-only and shows when the last time-of-day synchronization took place.

Time Zone

In this box, select the time zone for the location of the IE switch because the SNTP server always sends UTC time. This time is then recalculated and displayed as the local time based on the time zone. There is no standard/daylight-saving time switchover on the IE switch.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Syntax of the Command Line Interface

Table 4- 31 Agent Time Configuration - CLI\AGENT\TIME>

Command time [date][time] timezone [-12 ... 13]

Description

Displays or sets the time on the IE switch.

When the date and time are displayed, you can also see when and how the time was set:

• p

The setting was made by SNTP.

• n

The setting was made by NTP.

• i

The setting was made by PTP.

• t

The setting was made using a

SIMATIC time-of-day frame, however, it is not synchronized with the time transmitter.

• s

The setting was made using by

SIMATIC time-of-day frame and it is synchronized with the time transmitter.

• m

The setting was made manually.

Sets the time difference in hours between the server and system time.

Comment

Administrator only.

Input format:

MM/DD/YYYY HH:MM:SS

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

119

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

4.4.10.2 SNTP Client Configuration

Time-of-day synchronization with SNTP

SNTP (Simple Network Time Protocol) is used for synchronizing the time in the network. The appropriate frames are sent by a server in the network. An IE switch logs on as client with this server as recipient of time-of-day frames.

The "SNTP Client Configuration" screen appears if you click the "SNTP Client" submenu.

Figure 4-42 SNTP Client Configuration

SNTP Mode

You can choose between the following protocol types:

● Poll

If you select this type of protocol, you will need to set the SNTP server IP address.

You can modify the following settings:

SNTP Server Port, Init poll interval, Poll interval, Time Zone Offset.

● Listen

If you select this protocol type, you can also select a time zone offset in addition to the time received from the server.

Note

Time Zone Offset

The time zone offset setting is in the Agent Time Configuration (Page 117) menu.

SNTP Server IP Address

Enter the IP address of the SNTP server whose frames will be used by an IE switch to synchronize the time of day.

SNTP Server Port

Enter the port via which the SNTP server is available.

120

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Init poll interval

Enter the interval at which an IE Switch repeats the initial poll for the system time if this was not successful the first time.

Poll interval

Once the system time has been adopted the first time from the time server, it is updated cyclically with renewed polls to the time server. Specify how often the system time will be updated.

Syntax of the Command Line Interface

Table 4- 32 SNTP Client Configuration - CLI\AGENT\TIME\SNTP>

Command server [<ip>[:port]] sntpmode [mode] initint [1 ... 1000]

Interval [1 ... 1440]

Description

Sets the IP address and optionally the port of the SNTP server.

Specifies the SNTP mode. The possible modes are as follows:

POLL

IE switch queries the time on the

SNTP server

• LISTEN

IE switch waits for SNTP timeof-day frames

Specifies the polling interval in the range from 1 - 10000 ms

Specifies the polling interval in the range from 1 - 1440 s

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

121

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

4.4.10.3 NTP Client Configuration

Time-of-day synchronization with NTP

NTP (Network Time Protocol) is used for synchronizing the time in the network. An IE switch logs on as client with one or more servers as recipient of time-of-day frames. The appropriate frames are then sent by the NTP servers in the network. If you have several servers, NTP compares the received system time and decides which has the highest quality.

The "NTP Client Configuration" screen appears if you click the "NTP Client" submenu.

122

Figure 4-43 NTP Client Configuration

IP Adresse

Enter the IP address of the NTP server to which a client will send frames for synchronizing the time of day.

You can specify up to four different NTP servers.

Auth

Select how the frames will be encrypted.

You have two options: MD5 and SHA.

Key ID

Enter a Key ID for the encryption.

Permitted values for the key ID: 1-65534.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Key

Enter a key for the encryption.

Permitted values for the key: an ASCII string with up to 11 characters or a hexadecimal string with up to 40 characters.

Enable Secure NTP

Enable this function to send encrypted frames.

Poll Interval [sec]

Enter the interval at which the client sends requests to the time server and updates the system time.

Init Poll Interval [ms]

Enter the time after which a client queries the system time with the server following the first connection.

Syntax of the Command Line Interface

Table 4- 33 NTP Client Configuration - CLI\AGENT\TIME\NTP>

Command server <number><IP> initint [1...10000] interval [1...160] secure <Server

No.><KeyID><MD5|SHA><Key> security [E|D]

Description

Specifies the server number and the IP address of the

NTP server.

Specifies the interval for querying the system time after the first connection. Permitted values: 1...10000 ms.

Specifies the interval for querying and updating the system time.

Permitted values: 1...160 s.

Specifies the server number, the key ID, the algorithm and the key for secure transfer of the frames.

Enables / disables NTP security.

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

123

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

4.4.10.4 Daylight Saving Time

Daylight Saving Time Table

On this page, you can control the daylight saving time changeover so that the system time is correctly set for the local time zone.

You can define a rule for the daylight saving time changeover or specify a fixed date.

124

Figure 4-44 Daylight Saving Time Table

The table shows you an overview of the existing entries for the daylight saving time changeover.

As soon as the end date of an entry is exceeded, if a rule is defined, the data for the next changeover is displayed. With fixed entries, the row is deleted.

Nr.

Shows the number of the entry.

If you create a new entry, a new row is created with a unique number.

Year

Shows the year for which the entry was created.

Start

Shows the month, day and time for the start of daylight saving time.

End

Shows the month, day and time for the end of daylight saving time.

Rec

Shows whether or not a rule was defined for the daylight saving time changeover:

● x

A rule was defined for the daylight saving time changeover.

● -

A fixed date was entered for the daylight saving time changeover.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Daylight Saving Time Table New Entry

Click the "New Entry" button on the "Daylight Saving Time Table" page.

Daylight Saving Entry Type

Specify how the daylight saving time changeover is made:

● Recurring

You can define a rule for the daylight saving time changeover.

This setting is suitable for regions in which the daylight saving time always begins or ends on a particular weekday.

● Date

You can define a fixed date for the daylight saving time changeover.

This setting is suitable for regions in which there is no rule governing the daylight saving time changeover.

Settings for "Recurring Entry Configuration"

You can create a rule for the daylight saving time changeover

Start date

Enter the following values for the start of daylight saving time:

● Week of the month

You can select the 1st to 5th or the last week of the month.

● Weekday

● Month

● Time of day in hours

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

125

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

End date

Enter the following values for the end of daylight saving time:

● Week of the month

You can select the 1st to 5th or the last week of the month.

● Weekday

● Month

● Time of day in hours

Settings with "Date Entry Configuration" selected

You can set a fixed date for the start and end of daylight saving time.

Year

Enter the year for the daylight saving time changeover.

Start date

Enter the following values for the start of daylight saving time:

● Month

● Day

● Time of day in hours

End date

Enter the following values for the end of daylight saving time:

● Month

● Day

● Time of day in hours

Syntax of the Command Line Interface

Table 4- 34 Daylight Saving Time Table - CLI\AGENT\TIME\DST>

Command info recurring <start date> <end date>

Description

Shows information about the time zone and the daylight saving time changeover.

Creates an entry of the type "Recurring".

You need to enter the following information for the <start date > and <end date >:

• 1-5 or Last

Weekday

• Month

Hour

Comment

Administrator only

Example: recurring last sunday march

02 last sunday october 03

126

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Command date <yyyy> <start date> <end date> delete <index>

Description

Creates an entry of the type "Date".

For the <start date> and <end date> parameters, enter the month, day and hour in the following form:

• mmddhh

Deletes an entry. The index of the entry to be deleted must be obtained with the "info" command.

Comment

Administrator only

Example: date 2010 040102 100103

Administrator only

4.4.11 Agent PNIO Configuration

Settings for PROFINET IO

Here, the PROFINET IO device name is set as it was assigned for the IE switch during

PROFINET IO hardware configuration with NCM.

Figure 4-45 Agent PROFINET IO Configuration

PNIO AR Status

This box shows the PROFINET IO application relation status; in other words, whether or not the IE switch is connected "online" or "offline" with a PROFINET Controller.

In this context, online means that a connection to a PROFINET IO controller exists, that the controller has downloaded its configuration data to the IE switch and that the device can send status data to the PROFINET IO controller. In this status known as "in data exchange", the parameters set with the PROFINET IO controller cannot be configured on the IE switch.

PNIO Device Name

Here, you enter the PROFINET IO device name (Name of Station) according to the configuration in HW Config.

Clear PNIO Fault State

If the IE switch was integrated in a PROFINET IO environment (with controller) and is then removed from PROFINET IO mode, the fault LED signals that the controller is missing. This fault display can be cleared with this button.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

127

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Syntax of the Command Line Interface

Table 4- 35 Agent PROFINET IO Configuration - CLI\AGENT\PNIOCONF>

Command info devname [string] clear

Description

Shows the current PROFINET IO configuration

Sets the PROFINET IO device name.

Clears a PROFINET IO fault state, if one exists

Comment

-

Administrator only.

Administrator only.

4.4.12 Management Access Control List

The Management Access Control List - an overview

On this page, you can increase the security of IE switch. To specify which host can access the management of your IE switch using which IP address, configure the access rules for individual hosts, subnets or all hosts.

The list of access rules presents this information clearly as shown in the example in the following figure:

Figure 4-46 Management Access Control List - overview

Note

The option "Out-Band Port Enabled" (OBP) is only available for the SCALANCE X414.

Changing pages

Click on the ">>" and "<<" buttons to page backwards and forwards. On the second page, instead of the ports, you will see any link aggregations that have been set up.

128

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Access rules

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

As soon as you have defined an access rule, all other access options are initially blocked if they are not defined in this rule. If you want to allow access by other hosts or services, you will need to define further access rules.

You can define access rules as follows:

● for a host:

Use a host IP address with the subnet mask 255.255.255.255.

● for all hosts of a defined subnet:

Use a valid combination of IP address and subnet mask.

● for all hosts:

Under IP address and subnet mask, enter 0.0.0.0.

If several rules for access by a host match, the more narrowly defined rule "Best Match" takes effect. If, for example, both the access rule for a single host matches as well as the rule for an entire subnet, the host rule is used.

Management ACL Configuration

You can set which host can access the IE switch via which ports and using which services.

Note

Note: A bad configuration may mean that you can no longer access the device. You should therefore configure an access rule allowing you access to the management before you

enable the function on the Agent Configuration (Page 85) page.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

129

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

130

Figure 4-47 Management ACL Configuration (SCALANCE X-400)

Management Allowed Ports

IP Address

Enter the IP address to which the rule applies.

If you use the IP address 0.0.0.0, the settings apply to all IP addresses.

Subnet Mask

Enter the subnet mask.

The subnet mask 255.255.255.255 is for a specific IP address. If you want to allow a subnet, for example a C subnet, enter 255.255.255.0. The subnet mask 0.0.0.0 applies to all subnets.

VLANs Allowed

Enter the number of VLANs from which access is permitted.

You can enter several individual VLANs as well as VLAN ranges separated by commas, e.g.

1,5,10-12.

Out-Band Port Enabled

If you enable the "Out-Band Port Enabled" option, the IP address can access the switch via the out-band port.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Services

If you enable one of the following services, you also enable access using this service:

● SNMP

● TELNET

● HTTP

● HTTPS

● SSH

● FTP

● ICMP

The following service is only available with SCALANCE X300:

● DHCP Relay

If you enable this service, DHCP relay acts as an intermediary between an end device and a DHCP server located in different networks so that the end device can be assigned an IP address.

Note

You will find detailed information on this functionality in the sections "DHCP Relay Agent

Configuration" and "DHCP Relay Agent Port Configuration".

Ports

Enable the ports via which the device may be accessed.

Creating a new entry

Follow the steps below to create a new entry:

1. Click the "New Entry" button on the "Management Access Control List" page.

The "Management ACL Configuration" page appears.

2. Enter the path cost calculation in the first input box.

3. Enter the subnet mask in the second input box.

4. Enter VLANs or VLAN ranges in the third input box.

5. For X414 only:

Enable the "Out-Band Port Enabled" option if you want the IP address to access the switch via the out-band port.

6. Enable the required ports.

7. Enable the required services.

8. To transfer the changed information to the device, click the "Set Values" button.

9. To return to the "Management Access Control List" overview, click the "Current Entries" button.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

131

Configuration using Web Based Management and Command Line Interface

4.4 The Agent menu

Editing an existing entry

Follow the steps below to modify an existing entry:

1. Click on the IP address of the entry you want to modify on the "Management Access

Control List" page.

2. Make the required modifications.

The entries in the "IP Address" and "Subnet Mask" boxes are read-only.

3. To transfer the changed information to the device, click the "Set Values" button.

4. To return to the "Management Access Control List" overview, click the "Current Entries" button.

Deleting an entry

Follow the steps below to delete an existing entry:

1. Click on the IP address of the entry you want to delete on the "Management Access

Control List" page.

The "Management ACL Configuration" page appears.

2. Click the "Delete" button.

the entry is deleted.

Syntax of the Command Line Interface

Table 4- 36 Management Access Control List - CLI\AGENT\MGMNTACL\> info

Command add <IP> <subnet> ports <IP> <subnet> <E|D>

[ports] outband <IP> <subnet>

<E|D> vlans <IP> <subnet> [1-

4094] services <IP> <subnet>

<E|D> [services...] delete <IP> <subnet>

Description

Shows the current settings of the Management Access Control List.

Creates a new entry in the Management

Access Control List.

Specifies the ports via which the device may be accessed.

Applies only to the X414:

Specifies whether or not the IP address can access the switch via the out-band port.

Corresponds to the number of the VLAN in which the device is located.

Specifies that only hosts from the same

VLAN can access the device.

Specifies the protocols that can be used to access the device.

Removes an entry from the Management Access Control List.

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

See also

132

Assigning addresses with the DHCP client (Page 30)

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5

Introduction

The Switch menu

In this menu, you set the parameters for the switch functionality (assign it to layer 2) of the IE switch. This includes the following functions:

● General switch settings such as mirroring, aging, and flow control.

● The filter table for unicast, multicast and broadcast frames.

● The management of multicast groups with IGMP/GMRP.

● The use of the spanning tree protocol.

● Configuration of VLANs and their dynamic configuration with GVRP frames.

● Specifying transfer priorities with CoS to Queue and DSCP to Queue Mapping.

● DCP port filter

● Topology diagnostics with LLDP

● IP address initialization with DHCP relay

● Loop detection

● 1:1 NAT

● Statistics counter for frames per port

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

133

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.1 Switch Configuration

Protocol settings and switch functionality

The "Switch Configuration" screen appears if you click the "Switch" folder icon. In this screen, you specify which functionality is enabled on the IE switch and which protocols will be used for managing data traffic.

Figure 4-48 Switch Configuration

Mirroring and aging

In the upper part of the screen, you can enable or disable the following functions of the IE switch:

Aging Enabled

An IE switch automatically learns the source addresses of the nodes connected to it. This information is used in the IE switch to forward data frames to the nodes specifically involved.

This reduces the network load for the other nodes.

If an IE switch does not receive a frame whose source address matches a learned address within a certain time, it deletes the learned address. This mechanism is known as aging.

Aging prevents frames being forwarded incorrectly, for example when an end device (e.g. a programming device) is connected to a different switch port.

If you select Aging Enabled, an IE switch deletes the learned addresses automatically after a selected time (aging time).

134

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Aging Time [sec]

Enter the time after which the IE switch deletes an address if it has not received frames with the corresponding sender address.

On the SCALANCE X408-2, the default for the aging time is 30 s. You can set the aging time in the range from 15 to 3825 seconds in 15 s steps.

On the SCALANCE X414-3E, the default for the aging time is 40 s. You can set the aging time in the range from 10 to 1000000 seconds as required.

Mirroring Enabled

Mirroring means that the data traffic of a port (mirrored port) of the IE switch is copied to another port (monitor port).

If you select Mirroring Enabled, you can mirror one or more ports to a monitor port.

Passive Listening if you enable Passive Listening, the IE switch also reacts to a reconfiguration without being in (R)STP mode. When an RSTP Topology Change frame is received, the MAC address table is deleted. Spanning tree BPDUs are also forwarded.

Note

In passive listening mode, the IE switch is not compatible with IEEE 802.1d that forbids forwarding of spanning tree BPDUs when not in (R)STP mode.

Note

If the (R)STP function is activated on a switch that is a node in a redundant ring, no spanning tree BPDUs are forwarded via the ring ports. This also applies if the passive listening function is enabled.

In this case, there must be no (R)STP network segments linked via the redundant ring otherwise this would lead to the formation of loops.

Oversize Mode

If you enable Oversize Mode, frames with a size up to 1,632 bytes instead of 1,522 bytes are permitted.

Note

Overlong frames in PRP networks

If you use a SCALANCE X-300 or X-400 IE switch in a PRP network, enable the "Oversize

Mode" option.

In a PRP network, overlong frames with a length of up to 1528 bytes can occur. If you enable the "Oversize Mode" option, overlong frames are forwarded.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

135

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Switch Enabled Protocols

In the central part of the screen, you can enable or disable the following protocols for managing the data traffic:

GMRP

GMRP is an acronym for GARP Multicast Registration Protocol. GARP itself stands for

Generic Attribute Registration Protocol. GMRP is a mechanism for efficient forwarding of multicast frames.

With a GARP Information Declaration (GID), a node can register with the IE switch as recipient for a multicast address. An IE switch sends this registration to its ports in the form of the GARP Information Propagation (GIP) frame. As a result, this address is also known to other switches and they send multicast frames for this address only to ports that have received a registration for this address. This reduces the load caused by multicast frames in the entire network and for nodes that are not registered for a multicast.

If you enable GMRP, GMRP registrations are entered in the multicast filter table for all ports and generated automatically.

If GMRP is not enabled

● an IE switch does not evaluate received GMRP frames.

● an IE switch does not send its own GMRP frames.

IGMP snooping

IGMP is an acronym for Internet Group Management Protocol. It is an enhancement of the

IP protocol and allows the assignment of IP addresses to multicast groups.

An IE switch evaluates IGMP packets from multicast recipients and stores the information obtained in its multicast filter table. Filter entries resulting from IGMP Configuration are indicated as such in the filter table.

If you enable IGMP snooping, IGMP entries are included in the filter table and IGMP packets are forwarded accordingly.

IGMPv1, IGMPv2 and IGMPv3 are supported.

Note

GMRP and IGMP cannot operate at the same time.

GVRP

GVRP is an acronym for GARP VLAN Registration Protocol.

If you enable GVRP, the VLAN to which a port belongs can be set dynamically with GVRP.

Note

GMRP and MSTP cannot be operated at the same time.

136

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

DHCP Option 82

If you enable DHCP option 82, the IE Switch adds an "Option 82" field to DHCP queries before the queries are forwarded to the DHCP server (assuming the received query has such a field). The "Option 82" field contains information about the localization of the new client in the network.

As the device identifier of the IE switch, you can set either the IP address or the MAC address. The device identifier and the addresses of one or more DHCP servers can be configured in the DHCP Relay Agent Configuration menu item.

VLAN 0 Aware Mode (SCALANCE X-300 only)

If you enable VLAN 0 Aware mode, the VLAN tags of frames with VLAN-ID 0 will not be modified or deleted.

This setting only influences ports that are untagged members in VLAN-ID 1.

If the VLAN 0 Aware mode is enabled, you cannot create any VLAN configurations. To change the VLAN-IDs of the ports, you need to disable this option.

Spanning Tree Protocol

In the lower part of the screen, you can enable or disable the following redundancy methods:

STP

STP (Spanning Tree Protocol) is a method with which loops are prevented in redundant network structures.

If you enable STP, you enable the spanning tree functionality.

Typical reconfiguration times with spanning tree are between 20 and 30 seconds.

RSTP

RSTP (Rapid Spanning Tree Protocol) is a further development of the Spanning Tree

Protocol. The aim of RSTP is to achieve a faster reconfiguration time in the seconds range.

If you enable RSTP, you enable the rapid spanning tree functionality.

If a spanning tree frame is detected at a port, this port reverts from RSTP to STP.

MSTP (SCALANCE X-300 and SCALANCE X408 only)

MSTP (Multiple Spanning Tree Protocol) is a further development of the Rapid Spanning

Tree Protocol. The aim of MSTP is to operate independent RSTP instances within different

VLANs on an IE switch.

If you enable MSTP, you enable the multiple spanning tree functionality.

Note

When using (R/M)STP, loops involving duplication of frames or frames being overtaken may occur briefly. If this is not acceptable for your application, use other alternative redundancy methods such as HRP or the slower standard spanning tree.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

137

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Note

If passive listening is enabled, the IE switch forwards (R/M)STP configuration frames transparently even when (R/M)STP is disabled for it. If it recognizes a topology change frame, it reduces the aging time for a limited period so that the node list is updated more quickly.

Once this period has elapsed, the original aging time applies again.

Enhanced Passive Listening Compatibility

If you enable Enhanced Passive Listening Compatibility, TCN (Topology Change

Notifications) frames will be sent via RSTP edge ports. In conjunction with the "Auto Edge

Port" function (section Spanning Tree Port Parameters (Page 205)), this parameter is

necessary to link (R)STP networks with HRP rings. Otherwise no TCN frames will be sent via edge ports; this is, however, necessary for the passive listening function on ring nodes

(refer to the operating instructions of the relevant switch).

RSTP Big Network Support

If you enable RSTP Big Network Support, large RSTP rings with up to 80 bridges are supported.

Syntax of the Command Line Interface

Table 4- 37 Switch Configuration - CLI\SWITCH> info

Command aging [E|D] agetime [seconds] mirror [E|D] plisten [E|D] oversize [E|D] gmrp [E|D] igmp [E|D] gvrp [E|D] opt82 [E|D]

Description

Shows the current settings in the Switch menu.

Enables/disables aging functionality.

-

Comment

Specifies the aging time in seconds.

Administrator only

Default value: Enabled

Administrator only

The default is 30 seconds

(applies to the SCALANCE

X408-2) or 40 seconds (applies to the

SCALANCE X414-3E).

Administrator only

Administrator only

Administrator only

Enables/disables port mirroring.

Enables/disables passive listening.

Enables/disables the oversize mode function.

Enables/disables GMRP functionality for all IE switch ports.

Administrator only

Enables/disables IGMP functionality for all IE switch ports.

Administrator only

Enables/disables GVRP functionality for all IE switch ports.

Administrator only

Enables/disables the DHCP option 82. Administrator only

138

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Command vlan0 [E|D] rstp [D|S|R|M] eplc [E|D] bnsupp[E|D] macl [E|D] blkucast [<E|D> [ports]] blkmcast [<E|D> [ports]] blkbcast [<E|D> [ports]] fastlrn [<E|D> [ports]]

Description

Enables/disables the VLAN 0 Aware mode.

Enables/disables rapid spanning tree functionality for all IE switch ports.

The meaning of the parameters is as follows:

• D

Disables STP/RSTP

S

Enables STP

• R

Enables RSTP

M

Comment

Administrator only

Administrator only

Enables MSTP

Enables/disables enhanced passive listening compatibility.

Administrator only

Enables/disables big network support. Administrator only

Enables/disables the Management ACL function

Administrator only

Display/set Unknown Unicast Blocking

Mask.

Administrator only

Display/set Unknown Multicast Blocking

Mask.

Administrator only

Display/set Broadcast Blocking Mask. Administrator only

Display/set Fast Learning Configuration. Administrator only

4.5.2 Port status

Overview of the configuration of the ports

The "Port Status" screen appears if you click the "Ports" folder icon.

The screen shows the configuration for data transfer for all ports of the IE switch (and, if appropriate, for the ports of the extender).

Figure 4-49 Port status

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

139

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

The eight columns of the table display the following information:

Port

This shows the slot and the port to which the following information relates.

Type

Displays the type of port. This information is important because difference modules and therefore different ports can be used in some slots. The following port types are possible:

● TP 100 TX

● FO 100 FX

● FO 100 LD

● FO 100 LH+

● TP 1000 T

● FO 1000 SX

● FO 1000 LD

● FO 1000 LH

● FO 1000 LH+

Mode

The transmission rate (10, 100 or 1000 Mbps) and the transmission mode (full duplex (FD) or half duplex (HD)).

Negotiation

Indicates whether autonegotiation is enabled or disabled.

Flow Ctrl.

Shows whether flow control is enabled or disabled.

Active

Shows whether or not the port is active (true) or inactive (false). For an inactive port, the communications partner indicates the connection status "Link Down".

Status

Shows whether the port is enabled or disabled. Data traffic is possible only over an enabled port. On the other hand, the communications partner of a port that is turned off indicates the connection status "Link Up".

Note

The "Active" and "Status" states have no influence on the power supply with PoE ports. The configuration of the power supply is separate and is made with the "PoE" menu item.

Link

Status of the link to the network. The following alternatives are possible:

● Up

The port has a valid link to the network, a link integrity signal is being received.

● down

The link is down, for example because the connected device is turned off.

140

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Access Control

Shows whether or not the port is locked for unknown MAC addresses. The following two statuses are possible:

● enabled:

A frame with a source address that is not in the address table of the IE switch is discarded. The IE switch does not enter the source address of the corresponding node in the address table.

● disabled (default):

A frame with a source address that is not in the address table of the IE switch is forwarded. The IE switch adds the source address of the corresponding node to the address table.

Note

"Access Control" is available as of firmware version 2.2 and replaces the former "Lock" function.

Down-Shift

Shows whether down shift is enabled or disabled.

Changing the port configuration

Click on the port name in the "Port" column to open the "Port Configuration" page. You can specify how the data transfer is handled over this port.

Note

Optical ports only work with the full duplex mode and at maximum transmission rate. As a result, the following settings cannot be made for optical ports:

Autonegotiation

Transmission rate

Transmission mode

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

141

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Figure 4-50 Port configuration

Port

Specifies the port and slot whose configuration will be displayed on the page.

Port active

With this check box, you can set the "Link Up" and "Link Down" statuses even for ports that are turned off ("Port enabled" without a check mark). If the check box is selected, the "Link

Up" status is indicated to the communication partner even for a port that is turned off.

Port enabled

Select this check box to enable the port for data traffic. If this check box is not selected, the

"Link Up" status is indicated to the communications partner of this port anyway. The connection status can be changed with the "Port active" check box.

Access Control enabled

If this check box is selected, the IE switch does not learn unicast addresses at this port.

FD Flow Control enabled

Enables / disables flow control for the full duplex mode. Flow control is, however, only effective if the port operates in full duplex mode. If flow control is enabled but not in effect, the set check mark disappears again after the screen is refreshed; it does not, however, need to be set again if flow control comes into effect.

HD Flow Control enabled

Enables / disables flow control for the half duplex mode. Flow control is, however, only effective if the port operates in half duplex mode.

Note

If the port configuration is set (fixed) to ring ports, correct operation of the redundancy function is no longer possible. For correct operation, the ring ports must be in full duplex mode. It is advisable to set the ring ports to autonegotiation.

142

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Note

With various automatic functions, the IE switch prevents or reduces the effect on other ports and priority classes (class of service) if a port is overloaded. This can mean that frames are discarded even when flow control is enabled.

Port overload occurs when the IE switch receives more frames than it can send, for example as the result of different transmission rates.

Down-Shift enabled

This setting is available only with SCALANCE X-300/X408-2 for gigabit ports with twisted pair cabling.

If this option is enabled, the port can lower its performance to 100 Mbps, for example if there are problems with the line.

Variable Distance enabled

This setting is only available if the port is located on a MM992-2VD media module.

If this option is enabled, the port operates in the "Variable Distance" mode (VD). If this option is disabled, the port operates as a standard gigabit port.

Mode

In the Mode list box, you can set the transmission speed and duplexity of the port. If you set the mode to autonegotiation, these parameters are automatically negotiated by the IE switch and the connected end device.

Note

Set the mode to autonegotiation if you want to use autocrossover to the partner port.

Port Name

Here, you can enter a name for the port.

Port Type

The type of port is displayed here. You cannot edit this box because the information is hardware-dependent.

Syntax of the Command Line Interface

Table 4- 38 Port Status - CLI\SWITCH\PORTS> info [ports]

Command cfg [ports] active [ <T|F> [ports] ] status [<E|D> [ports]]

Description

Shows the current settings of the ports (actual status) for data traffic.

Shows the configured settings of the ports (desired status) for data traffic.

Activates (T) or deactivates (F) the specified ports.

Enables/disables the specified port for data traffic.

-

-

Comment

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

143

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Command fd_flow [<E|D> [ports]] hd_flow [<E|D> [ports]] autoneg [<E|D> [ports]] name <port> [string] actrl [<E|D> [ports]] speed [<speed>[ports]] dwnshift [<E|D> [ports]] vd [<E|D>] [ports] vd_info

Description

Enables/disables flow control in full duplex mode.

Enables/disables flow control in half duplex mode.

Enables/disables autonegotiation.

Assigns a name (maximum 64 characters long) for the specified port.

Enables/disables access control.

The "actrl" command replaces the "lock" command as of firmware version 2.2.

Specifies the transmission speed and duplicity of the port:

10H 10 Mbps/half duplex

• 10F 10 Mbps/full duplex

100H 100 Mbps/half duplex

• 100F 100 Mbps/full duplex

Enables/disables down shift for the relevant port.

Enables/disables the "Variable

Distance" (VD) mode for the relevant port.

Shows information about the ports in the "Variable Distance" mode (VD).

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

-

4.5.3 Link Check (SCALANCE X-300/X408-2)

Monitoring optical connections in the ring

On optical connections disturbances are possible in which the optical connection is not completely interrupted, but frames are lost sporadically. Such problems can, for example, be caused by defective optical cables, dirty connectors or device defects.

The redundancy manager of an HRP or MRP ring with optical connections detects a “nonrecoverable ring error” with such a disturbance. The redundancy manager cannot eliminate the disturbance by closing the ring. Closing the ring in this case, would lead to circulating frames.

With the Link Check function, you can monitor the transmission quality of optical sections within an HRP or MRP ring, identify disturbed connections and under certain conditions turn them off. When the disturbed section is turned off, the redundancy manager can close the ring and restore communication.

144

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Requirements

● You can only enable the Link Check function with optical ring ports of an HRP or MRP ring.

● Link Check must be enabled on two neighboring devices (connection partners) within an

HRP or MRP ring.

● The ring ports on which you enable Link Check must be connected.

● With multiple rings, you can only enable Link Check on the first MRP ring instance.

How Link Check works

Behavior with an undisturbed connection

If you enable Link Check on two connected ring ports, the two connection partners exchange

Link Check frames cyclically on these ports. The frames received by one connection partner are sent back to the other.

When the devices receive back the frames they sent from the connection partner, the connection is prepared for Link Check. The connection partners then increase the send frequency of the Link Check test frames and the actual connection monitoring is active.

Behavior with a disturbance

When connection monitoring is enabled, you can see the number of sent and received Link

Check test frames on the “Link Check Status” page. Based on these statistics you can recognize smaller disturbances in which the number of Link Check frames lost in sequence is not enough to turn off the disturbed transmission line.

Only when a port does not correctly receive back several frames it has sent in succession,

Link Check assumes that the connection is disturbed and turns the port off.

A port that was turned off by Link Check must be reset to be able to communicate again. To do this you have 2 options:

● Pull out the connecting cable and plug it in again.

● Reset the function on both connection partners using the “Reset” button. This must be done on both devices within 30 s.

Note

When you use the “Reset” button, loops can form temporarily resulting in a loss of data traffic. The loop is automatically cleared again.

If this is not acceptable for your application, reset Link Check by pulling the cable and plugging it in again.

After resetting Link Check, the function is restarted on the port and the statistics are reset.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

145

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Configuring via a PROFINET IO controller

If MRP is configured via a PROFINET IO controller, you can start the Link Check function for the optical ring ports of the 1st MRP ring instance using WBM or CLI.

When a new configuration is transferred, Link Check is automatically disabled on all ports that were not configured as ring ports of the 1st MRP ring instance.

Note

Events relating to the Link Check function are not reported by PROFINET IO.

Configuration for the monitoring of the connection

The “Link Check Status" screen appears if you click the “Link Check" menu item.

The screen shows the following:

● The ports on which you can enable Link Check

● The current status

● The statistics of sent and received Link Check frames of the monitored connections.

146

Figure 4-51 Link Check Status

The table displays the following information:

Port

Shows the slot and port to which the following information relates.

Link Check Enabled

Shows whether the Link Check function is enabled or disabled.

Link Check Status

Shows the status of the Link Check function. The following statuses are possible:

● disabled

The function is disabled.

● enabled

The function is enabled. The connection partner has not yet confirmed the monitoring.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● running

The function is enabled. The connection monitoring is enabled. The outgoing and incoming test frames are counted and matched up.

● fault

The function is enabled. Link Check has detected a fault on the monitored section and turned off the port.

Frames Out

Shows how many Link Check test frames were sent

Frames In

Shows how many Link Check test frames were received.

Configuration for the monitoring of the connection

Click on the port name in the "Port" column to open the “Link Check Configuration" page.

There you can enable or disable Link Check for this port.

NOTICE

Make sure that the frames used by Link Check for monitoring the optical connections are not supplanted by an overload of high priority frames in the network.

An overload of high priority frames can, for example, be caused by the following:

• Network loops that can cause duplication of the high priority frames

Changing the priority for forwarding frames with SCALANCE X-300

• Feeding in of high priority load such as spanning tree BPDUs in the ring

Note

Enable Link Check on only one of two connection partners This can lead to incorrect behavior.

Note

If Link Check is enabled on all devices of a ring at the same time, and several connections within the ring have problems, this leads to fragmentation of the ring.

1. During commissioning enable the Link Check function for one connection section after the other by enabling Link Check for the two connection partners connected to a line.

2. To ensure an error-free connection, wait 1 min. before you enable Link Check for the next connection.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

147

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Figure 4-52 Link Check Configuration

Port

Specifies the port and slot whose configuration will be displayed on the page.

Link Check

With this check box, you enable or disable the Link Check function for a port.

Frames Out

Shows how many Link Check test frames were sent

Frames In

Shows how many Link Check test frames were received.

Reset

After resetting Link Check, the function is restarted on the port and the statistics are reset.

If you use the “Reset” button, the reset must be performed on both connection partners within 30 s.

Note

When you use the “Reset” button, loops can form temporarily resulting in a loss of data traffic. The loop is automatically cleared again.

If this is not acceptable for your application, reset Link Check by pulling the cable and plugging it in again.

148

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 39 Link Check - CLI\SWITCH\LINKCHK> info

Command linkchk <E|D>

[ports]

Description

Displays the current settings of the ports. -

Enables/disables the Link Check function for the specified ports. reset <all|ports> Resets the Link Check function for all or certain ports.

Administrator only.

Administrator only.

Comment

When you use the “reset” command, loops can form temporarily resulting in a loss of data traffic. The loop is automatically cleared again.

If this is not acceptable for your application, reset Link Check by pulling the cable and plugging it in again.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

149

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.4 Port Mirroring

Information on port mirroring

Data loss due to different data rates

If the maximum data rate of the mirrored port is higher than that of the monitor port, data may be lost. The monitor port then no longer reflects the sequences on the mirrored port.

Restriction

Port mirroring does not return a 1:1 representation of the network traffic. Bad frames, for example, are discarded when they are received and are not forwarded via the mirror port.

Configuration for mirroring ports

The "Mirroring Configuration" screen appears if you click the "Mirroring" menu item.

150

Figure 4-53 Mirroring Configuration

Monitor Barrier Enabled

With this check box, you can restrict communication via the monitor port.

● Enabled

The monitor port is taken out of normal frame switching.

You cannot configure or run diagnostics of the device, for example using WBM or CLI, via the monitor port.

● Disabled

Communication via the monitor port is unrestricted.

You can use WBM, CLI and SNMP via the monitor port.

This option is enabled when the module ships.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Monitor Port

The monitor port is the port to which the data traffic from the mirrored port(s) is copied.

Select the required port from the drop-down list.

Several ports can be mirrored to one monitor port at the same time.

If a protocol analyzer is connected to the monitor port, the data traffic of the mirrored port can be recorded without interrupting the connection at the mirrored port. This means that the data traffic can be investigated without being affected. This is possible only if a free port is available on the IE switch as the monitor port.

Note

A ring port cannot be used as a monitor port.

Mirrored Ports

The mirrored ports are the ports whose data traffic is copied to the monitor port.

You can make the following settings for each port:

● Enable both halves of the box.

The incoming and outgoing data traffic is copied.

● Enable the left half of the box.

Only the incoming data traffic is copied.

● Enable the right half of the box.

Only the outgoing data traffic is copied.

Note

Multiple mirrored ports

Depending on the device type, flooded frames at the monitor port can be sent at different intervals if you have selected more than one port as the mirrored port.

Flooded frames are broadcast frames, unlearned multicast or unlearned unicast frames.

Syntax of the Command Line Interface

Table 4- 40 Mirroring Configuration - CLI\SWITCH\MIRRORING>

Command info

Description

Displays the current settings for port monitoring. mirrport <mode> [ports] Specifies the ports to be monitored (mirrored ports). moniport [<port>] barrier [E|D]

Specifies the monitor port.

Enables/disables the monitor barrier function.

Comment

Administrator only

Administrator only

Administrator only

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

151

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.5 Link aggregation

4.5.5.1 Link Aggregation

Bundling network links for redundancy and higher bandwidth

Link aggregation according to IEEE 802.3ad allows several links between neighboring devices to be bundled to achieve higher bandwidths and protection against failure.

Ports on both partner devices are included in link aggregation and the devices are then connected via these ports. To assign ports (in other words links) correctly to a partner device, the Link Aggregation Control Protocol (LACP) from the IEEE 802.3ad standard is used.

Note

The ports bundled into a link aggregation are considered as virtual ports (for example PLC1) and can be used in CLI commands instead of the individual port numbers.

Procedure for configuring link aggregations

1. First, identify the ports you want to put together to form a link aggregation.

2. Configure the link aggregation on both devices.

3. Then run the cabling.

Note

If you cable aggregated links prior to configuration, it is possible that you will create loops in the network!

Master Port

The master port of a link aggregation is the port that passes on its settings and even its MAC address to the entire link aggregation.

If you do not configure a master port when you create an aggregation, the port with the lowest port number is used as master.

152

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Displaying the configured link aggregations

The menu displays all the configured link aggregations.

Figure 4-54 Current Link Aggregations

Frame Distribution

Sets the type of distribution of packets on the individual links of an aggregation. Due to hardware restrictions, the possible settings differ on a SCALANCE X-300/408 and a

SCALANCE X414.

Port

Shows the virtual port number of this link aggregation. This is assigned internally by the firmware.

Link Aggregation Name

Shows the freely configurable name of the link aggregation. This name can be specified by the user during configuration.

Port Member List

Shows the ports that belong to this aggregation. The meaning is as follows:

● M (black): The port is a member of the aggregation.

● M (blue): The port is a member of the aggregation and is its master port.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

153

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● X (black) The port is a member of the aggregation, but is not currently active.

In this case, port not active means that the port was removed dynamically from the aggregation. The reasons for this may be as follows:

– Ports of the aggregation have different configurations (for example speed)

– The port is not connected with the same device

– The port does not have a link

– The port was not authenticated according to 802.1x

– ...

● X (blue) The port is a member of the aggregation and is its master port and is not active.

Note

On a SCALANCE X414-3E, although the gigabit ports 5.1 and 5.2 can be configured with a Fast Ethernet port in an aggregation, they will never be active along with other Fast

Ethernet ports, even if they are set to Fast Ethernet.

Creating a new link aggregation

Click the New Entry button to create a new link aggregation. The following screen appears:

Figure 4-55 Link Aggregation Configuration

Name

Here, you can specify a symbolic name for the new link aggregation. If you do not enter a name here, it is set automatically by the system.

154

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Slot / Port

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Here, you can add certain ports to the new aggregation. You can only add ports that are not members of another link aggregation.

The meaning is as follows:

● M (black): The port is a member of the aggregation.

● M (blue): The port is a member of the aggregation and is its master port.

Changing a link aggregation

In the Current Link Aggregation overview screen, click on the Port column or Link

Aggregation Name to change the configuration of an existing link aggregation.

Figure 4-56 Static Link Aggregation Configuration

Port

Displays the virtual port number of the aggregation. This is assigned internally by the system and cannot be modified.

Name

Here, you can change the name of the link aggregation.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

155

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Slot / Port

You have the option of adding specific ports to the link aggregation or removing them from it.

You can only modify ports that are not members of another link aggregation.

The meaning is as follows:

● M (black): The port is a member of the aggregation.

● M (blue): The port is a member of the aggregation and is its master port.

Changing the master port

To change the master port, follow the steps below:

1. Click on the original master port (blue M) - the marking disappears. If you want to keep the port in the aggregation, click on it a second time (black M)

2. Click on the new master port until a blue M appears.

Syntax of the Command Line Interface

Current Link Aggregation - CLI\SWITCH\LAG> info

Command frmdistr [mode]

Description

Shows the current settings of the link aggregation group (actual status).

Sets the type of distribution of packets on the individual links of an aggregation.

The following modes exist for X414:

• srcmac source MAC address

• dstmac destination MAC address

• mac source and dest. MAC address

• srcip source IP address

• dstip destination IP address

• ip source and dest. IP address)

The following modes exist for X408/X-300:

• hash source and dest. MAC address hash

• xor source and dest. MAC address Xor add <masterport> Creates a new link aggregation with the specified master port

-

Comment

Administrator only.

Administrator only.

156

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Command Description master <ID> <masterport> Changes the master port of a link aggregation. name <ID> <string> Changes the name of a link aggregation. ports <ID> <option> [ports] Changes the members (ports) of a link aggregation - except for the master port.

The following options are possible:

-

The port is not a member of the link aggregation.

M

The port is a member of the link aggregation. delete <ID> Deletes a link aggregation.

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

4.5.5.2 LACP Configuration

Enabling LACP functionality

The LACP (Link Aggregation Control Protocol) handles the selection of the active ports of a link aggregation. You can enable LACP for every link aggregation.

Figure 4-57 LACP Configuration

Enable LACP

Here, you enable LACP.

If LACP is enabled, the ports send corresponding LACP frames. If the partner device returns

LACP frames, the ports of the link aggregation are enabled.

If LACP is disabled, the ports of the link aggregation are enabled immediately.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

157

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 41 LACP Configuration - CLI\SWITCH\LAG>

Command lacp [<E|D> [IDs]]

Description

Enables/disables LACP for all ports of the specified link aggregation.

Comment

Administrator only.

4.5.6 IEEE 802.1x

4.5.6.1 802.1x RADIUS Configuration

Authentication over an external server

The concept of RADIUS is based on an external authentication server. The IE switch authenticates connected end devices via this server. This allows you to restrict access to the network via the IE switch for end devices.

To do this configure the RADIUS server and specify the authentication method for the ports.

802.1x RADIUS Configuration

The "802.1x RADIUS Configuration" screen appears if you click the "RADIUS Config" folder icon.

158

Figure 4-58 802.1x RADIUS Configuration

In this screen, specify the RADIUS server for the authentication method.

The screen is laid out so that it has each box once for the primary server and once for the backup server. The primary server is queried first. If the primary server cannot be reached, the backup server is queried.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

The screen contains the following boxes:

● IP address

Enter the IP address of the IP address of the server in the "IP address" input box.

● Destination port

Enter the input port on the RADIUS server in the "Destination port" input box.

As default, input port 1812 is set. The range of values is 1 to 65535.

● Shared Secret

Enter your access identifier in the "Shared Secret" input box.

● Confirm Shared Secret

Enter the access identifier again as confirmation in the "Confirm Shared Secret" input box.

● Maximum retransmissions

In the "Maximum retransmissions" input box, enter the maximum number of retransmissions before another configured RADIUS server is queried or the logon counts as having failed.

2 is set as default. The range of values is 1 to 254.

RADIUS Server

You can enter data for two RADIUS servers. The information in the "Backup" column is used if the server defined in the "Primary" column is not available.

RADIUS server for "Login Mode"

The RADIUS server specified here serves at the same time as the authentication server for

the login modes "RADIUS and Local" and "RADIUS", see section System Passwords &

Login Mode (Page 52).

Syntax of the Command Line Interface

Table 4- 42 802.1x RADIUS Configuration - CLI\SWITCH\DOT1X\RADIUS>

Command info server [<ip>[:port]] serverb [<ip>[:port]] secret <string> secretb <string> maxret [number] maxretb [number]

Description

Displays the current RADIUS settings.

Specifies the IP address and port of the primary server.

Comment

-

Administrator only.

Specifies the IP address and port of the backup server.

Specifies the password for the primary server.

Specifies the password for the backup server.

Administrator only.

Administrator only.

Administrator only.

Maximum number of requests to the primary server. Administrator only.

Maximum number of requests to the backup server. Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

159

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.6.2 802.1x port parameters

802.1x port parameters

The "802.1x Port Parameters" screen appears if you click the "Ports" submenu. This shows an overview of the current authentication settings.

160

Figure 4-59 802.1x port parameters

The columns of the table show the following information:

● Port

The "Port" column shows the ports to which the information relates.

● 802.1X Auth

The "802.1x Auth" column shows whether the authentication method "802.1x" is enabled or disabled for the port.

● 802.1X Re-Auth

The "802.1x Re-Auth" column shows whether the authentication using "802.1x" is repeated cyclically (enabled) or not (disabled).

● Mac Auth

The "Mac Auth" column shows whether the authentication method "MAC Authentication" is enabled or disabled for the port.

● Mac Re-Auth

The " Mac Re-Auth" column shows whether authentication using "MAC Authentication" is repeated cyclically (enabled) or not (disabled).

● Vlan Assignment

The "Vlan Assignment" column shows whether VLAN information from the authentication server is adopted for the port (enabled) or discarded (disabled).

You can use this option only with the "MAC Authentication" authentication method.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● Guest Vlan

The "Guest Vlan" column shows whether the "Guest VLAN" option is enabled or disabled for the port.

● Guest Vlan ID

The "Guest Vlan ID" column shows the VLAN-ID configured as the guest VLAN for the port.

Syntax of the Command Line Interface

Table 4- 43 802.1x Port Parameters - CLI\SWITCH\DOT1X\PORTS>

Command info

Description

Displays the current settings of the ports.

Comment

-

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

161

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.6.3 802.1x Port Configuration

802.1x Port Configuration

If you click on a port name in the "Port" column of the "802.1x Port Parameters" page, you open the "802.1x Port Configuration" page:

162

Figure 4-60 802.1x Port Configuration

In this screen, you can configure the authentication methods "802.1x" and "MAC

Authentication" as well as the "Guest VLAN" option for the selected port.

The functions have a hierarchical order. If all three functions are enabled, an attempt is made initially to authenticate the end device using "802.1x". If this authentication is unsuccessful, "MAC Authentication" is started. If this authentication is also unsuccessful, the end device is enabled for communication in the "guest VLAN". "Guest VLAN" can only be used if at least one authentication method is active.

The two authentication methods depend on the end device. If the end device supports EAP

(Extensible Authentication Protocol), it can be authenticated using the "802.1x" method. If the end device does not support EAP, it can be authenticated using "MAC Authentication". In this case, the IE switch adopts the role of the end device and uses the MAC address of the device as the authentication parameter.

The screen contains the following sections and boxes:

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Port

The "Port" display box shows the selected port.

Section "802.1X"

The "802.1x" authentication method works as follows:

An end device that supports EAP sends authentication information to the IE switch. The IE switch forwards the information to the RADIUS server. The authentication server checks the information and allows or denies the end device access to the network.

● 802.1X Authentication

Enable this option if you want end devices to be authenticated with the 802.1x method.

● 802.1X Re-Authentication

Enable this option if you want reauthentication of an already authenticated end device to be repeated cyclically. As default, one hour (3600 s) is set.

Section "MAC Authentication"

The "MAC Authentication" authentication method works as follows:

As soon as the IE switch receives a frame from the end device, the IE switch sends a query to the RADIUS server to allow or deny the end device access to the network.

● MAC Authentication

Enable this option if you want end devices to be authenticated with the MAC

Authentication method.

● MAC Re-Authentication

Enable this option if you want reauthentication of an already authenticated end device to be repeated cyclically. As default, one hour (3600 s) is set.

● VLAN Assignment Allowed

The RADIUS server informs the IE switch of the VLAN to which the end device belongs.

Enable this option if you want the information of the server to be taken into account. The end device then belongs to the corresponding VLAN.

If the option is disabled, VLAN information is discarded.

● Max Allowed Addresses

In the "Max Allowed Addresses" input box, enter how many end devices are allowed to be connected to the port at the same time.

● Actual Allowed Addresses

Shows the number of end devices currently connected to the port.

● Actual Blocked Addresses

Shows the number of currently blocked end devices.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

163

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Section "Guest VLAN"

If an end device cannot be authenticated either with "802.1x" or with "MAC Authentication", the end device can be enabled for communication in a preconfigured guest VLAN.

● Enable Guest VLAN

Enable this option if you want the end device to be enabled in the guest VLAN if authentication fails.

● Guest VlanID

Enter the VLAN-ID of the port in the "Guest VlanID" input box.

● Max Allowed Addresses

In the "Max Allowed Addresses" input box, enter how many end devices are allowed to be connected to the port at the same time.

● Actual Allowed Addresses

Shows the number of end devices currently connected to the port.

Syntax of the Command Line Interface

Table 4- 44 802.1x Port Configuration - CLI\SWITCH\DOT1X\PORTS>

Command auth [<E|D> [ports]] reauth [<E|D> [ports]]

Description

Enables/disables the "802.1x" authentication method for the selected port.

Enables/disables the reauthentication functionality

("802.1x") for the selected port. macauth [<E|D> [ports]] Enables/disables the "MAC Authentication" authentication method for the selected port. macreauth[<E|D> [ports]] Enables/disables the reauthentication functionality

("MAC Authentication") for the selected port.

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only. vlanassgn[<E|D> [ports]] Enables/disables the "VLAN Assignment Allowed" function for the selected port.

Administrator only. guestvlan[<E|D> [ports]] Enables/disables the "Enable Guest VLAN" function for the selected port. gvlanid [<1..4094>

[ports]]

Administrator only.

Shows/sets the Guest VlanID for the selected port. Administrator only. maxaumac [<1..20>

[ports]]

Shows/sets the number of end devices that can be connected to the port the same time.

Administrator only. maxaugu [<1..20>

[ports]]

Shows/sets the number of end devices that can be connected to the port the same time.

Administrator only.

164

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.7 Unicast Filter (ACL)

4.5.7.1 Current Unicast Filter (Access Control List)

Address filtering

This menu displays the current content of the filter table. This table lists the source addresses of unicast address frames. Entries can be made either dynamically when a node sends a frame to a port or statically by the user setting parameters.

Figure 4-61 Current Unicast Filter

Selecting the displayed addresses

Display Selection active

The display is only restricted to selected elements when this check box is selected, otherwise all addresses are displayed.

Start Address

This parameter specifies the address in the filter table starting at which stored MAC addresses are displayed. If nothing is entered here, the display begins at the VLAN ID. If you enter a specific value here, only addresses with a corresponding VLAN ID are displayed.

Valid values for a VLAN ID are between 1 and 4096. If you do not want to make a selection for the VLAN ID, select the "all" entry.

Port

Here, you can restrict the display to addresses of nodes at particular ports. If you select the

"all" entry, addresses at all ports are displayed.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

165

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Status

With this list box, you can restrict the display to addresses that have a particular status.

Possible values for the status are as follows:

● learned (learned addresses)

● static (configured by the user)

● all (learned addresses and configured addresses)

Access Control List

Unicast filters can be used for access control. With the aid of the Access Control function (as of firmware version 2.2 - the function was previously called Lock!) for individual ports (see

"Access Control Port Configuration menu item" or "the Port Status menu"), individual ports can be locked for unknown nodes. If the Access Control function is enabled on a port, packets arriving from unknown MAC addresses are discarded immediately.

Since ports with Access Control enabled cannot learn any MAC addresses, learned addresses on these ports are automatically deleted after Access Control is enabled. To include a device in the list of known nodes, a unicast entry must be created (on the relevant port) for its MAC address.

To enter all connected nodes automatically, there is a function for automatic learning (see section ACL Learning menu item).

Information in the filter table

The four columns of the filter table show the following information:

● VID

The VLAN-ID assigned to this MAC address. If no VLAN-ID is assigned to a MAC address, 1 is displayed here

● MAC Address

The MAC address of the node that an IE switch has learned or the user has configured.

● Status

Shows the status of each address entry. Here, learned means that the specified address was learned as a result of receiving a frame from this node. The static entry means that the address was entered statically by the user. Static addresses are stored permanently; in other words, they are not deleted when the aging time expires or when the switch is restarted. Invalid means that these value are not evaluated by the SCALANCE X408.

These values were entered via Web Based Management without a port number.

● Port

Specifies the slot and port over which the node with the specified address can be reached. Frames received by the IE switch whose destination address matches this address will be forwarded to this port.

166

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Configuring a filter

Clicking on a MAC address with the static

status opens the page for configuring the filters:

Figure 4-62 Static Unicast Configuration

Slot / Port

Select the slot and the port to which the frames with the entered destination address will be forwarded. After clicking on the appropriate box, status information is displayed and has the following meaning:

● M

(Member) Unicast frames are sent over this port.

● –

Unicast frames are not forwarded via this port.

● #

The port is invalid.

● ?

The VLAN configuration contradicts the unicast configuration. This can occur when a destination port was selected in the unicast configuration that does not belong to the

VLAN.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

167

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Creating a new entry

Click on the "New Entry" button to add an entry to the address table. The "Static Unicast

Configuration" page opens in which you can make the necessary entries:

Figure 4-63 Static Unicast Configuration II

VLAN ID

Enter the ID of the VLAN to which the MAC address belongs. If nothing is set, the VLAN ID 1

(default VLAN) is set as the basic setting.

MAC Address

Enter the MAC address you want to add to the address table. This address matches the target address of a received frame.

Slot / Port

Select the slot and the port to which the frames with the entered destination address will be forwarded. After clicking on the appropriate box, "M" appears.

Invalid ports are marked with "#". If a port is marked with "?", the VLAN configuration contradicts the unicast configuration.

Note

You can only specify one port for unicast addresses.

Current Entries

By clicking this button, you return to the list of MAC addresses.

New entry

Click this button to create a new entry in the filter table.

Delete

Click this button to delete the displayed entry from the filter table.

168

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 45 Current Unicast Filter - CLI\SWITCH\UCAST> info

Command find [VLAN-ID]<MAC address> [S|L] [port] add [VLAN-ID]<MAC address> <port> edit [VLAN-ID] <MAC address> <port> delete [VLAN-ID] <MAC address>

Deletes a static entry from the address table.

Description

Shows the content of the address table of an IE switch.

Searches for a MAC address in the address table of an IE switch. You can also see the ports to which a received frame with this (destination) address is sent.

If you do not specify a VLAN-ID, all

VLANs are browsed for the specified

MAC address.

As an option, you can also specify a port. Browsing is then restricted to the specified port.

As a further option, you can also restrict browsing to static and learned entries:

S

Static entries

L

Learned entries

-

-

Comment

Inserts a static entry for a unicast address in the address table.

Administrator only.

Changes an entry in the address table. Administrator only.

Administrator only.

4.5.7.2 Access Control List Learning

Start Learning / Stop Learning

Figure 4-64 Access Control List Learning

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

169

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

With the aid of the automatic learning function, all devices connected to the IE switch can be entered automatically in the Access Control List (see section "Current Unicast-Filter (Access

Control List) menu item)". As long as this function is enabled, all learned unicast addresses are created immediately as static unicast entries. Learning stops only after selecting on Stop

Learning. With this method, learning can take a few minutes or several hours in larger networks before all nodes have really been learned. Only nodes that send packets during the learning phase can be found.

By enabling the Access Control function, the only packets accepted on the relevant ports are those from nodes known on completion of the learning phase (static unicast entries).

Note

If the Access Control function was already active on individual ports prior to the automatic learning phase, no addresses will be learned on these ports. This makes it possible to restrict learning to certain ports. If you do not want a port to learn addresses, simply enable access control on it before enabling learning.

Clear all static unicast addresses

In large networks with lots of nodes, automatic learning may lead to a large number of unwanted static entries. To avoid having to delete these individually, this button can be used to delete all static entries. This function is disabled during automatic learning.

Note

Depending on the number of entries involved, deleting may take some time.

Syntax of the Command Line Interface

Table 4- 46 Access Control List Learning - CLI\SWITCH\UCAST>

Command learning [start|stop] clear

Description

No parameter

Displays the current status of the automatic learning.

• start

Starts automatic learning.

• stop

Stops automatic learning.

Comment

Administrator only.

Deletes all static unicast entries. Administrator only.

170

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.7.3 Access Control Port Configuration

Enabling the Access Control function

By selecting the relevant options, you specify whether or not Access Control is enabled for each individual port. If the function is enabled for a port, packets from unknown MAC addresses are discarded immediately. Only packets from known nodes (see Current Unicast

Filter (Access Control List) menu item) are accepted.

Figure 4-65 Access Control Port Configuration

Syntax of the Command Line Interface

Table 4- 47 Access Control Port Configuration - CLI\SWITCH\UCAST>

Command actrl [<E|D> [ports]]

Description

Enables/Disables the Access

Control function for the specified ports.

If you do not specify any ports,

Access Control is enabled/disabled for all ports.

Comment

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

171

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.7.4 Unknown Unicast Blocking Mask

Disabling the forwarding of unknown unicast frames

In this menu, you can disable the forwarding of unknown unicast frames for individual ports.

Figure 4-66 Unknown Unicast Blocking Mask

Disable Unknown Unicast Forwarding

Here, you specify the ports for which the forwarding of unknown unicast frames will be disabled.

Syntax of the Command Line Interface

Table 4- 48 Unknown Unicast Blocking Mask - CLI\SWITCH\>

Command blkucast [<E|D> [ports]]

Description

Enables/disables the blocking of unicasts on the specified ports.

Comment

Administrator only.

172

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.8 Multicast group

4.5.8.1 Current Multicast Groups

Multicast applications

In the majority of cases, a frame is sent with a unicast address to a particular recipient. If an application sends the same data to several recipients, the amount of data can be reduced by sending the data using one multicast address. For some applications, there are fixed multicast addresses (NTP, IETF1 Audio, IETF1 Video etc.).

Reducing network load

In contrast to the sending of unicast frames, multicast frames produce a higher load for a switch. Generally, multicast frames are sent to all ports of a switch. There are three ways of reducing the load caused by multicast frames:

● Static entry of the addresses in the multicast filter table.

● Dynamic entry of the addresses by listening in on IGMP parameter assignment packets

(IGMP Configuration).

● Active dynamic assignment of addresses with GMRP frames.

The result of all these methods is that multicast frames are sent only to ports for which a corresponding address is entered.

The "Multicast Groups" menu item, shows the multicast frames currently entered in the filter table and their destination ports. The entries can be dynamic (an IE switch has learned them) or static (the user has set them).

Note

If the filter table for a SCALANCE X414-3E contains more than 500 learned entries, the reconfiguration time in redundant networks can be longer than 300 milliseconds with HRP or

200 milliseconds with MRP.

Changing pages

Click on the ">>" or "<<" buttons to page backwards and forwards.

On the second page, instead of the ports, you will see any link aggregations that have been set up.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

173

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Figure 4-67 Current Multicast Groups

Information in the filter table

The four areas of the filter table show the following information:

VID

The VLAN-ID assigned to this MAC address.

MAC Address

The MAC address of the node that the IE switch has learned or the user has configured.

Status

Shows the status of each address entry. The following information is possible:

● static

The address was entered statically by the user. Static addresses are stored permanently; in other words, they are not deleted when the aging time expires or when the switch is restarted.

● IGMP

The destination port for this address was obtained by IGMP Configuration.

● GMRP

The destination port for this address was registered by a received GMRP frame.

Port List

There is a column for each slot. Within a column, the multicast group to which the port belongs is shown:

● M

(Member) Multicast frames are sent via this port.

M (in red)

Multicast is configured in a VLAN that is, however, not configured on the relevant port.

Due to the different VLAN-ID, the multicast cannot be forwarded via this port.

● R

(Registered) Member of the multicast group, registration was by a GMRP frame.

● I

(IGMP) Member of the multicast group, registration was by an IGMP packet.

174

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● –

Not a member of the multicast group, no multicast frames will be sent via this port.

● F

(Forbidden) Not a member of the multicast group. Moreover, this address must not be an address learned dynamically with GMRP or IGMP.

Creating a new entry

Click on the "New Entry" button to add an entry to the address table. The Static Multicast

Configuration page opens in which you can make the necessary entries:

Figure 4-68 Static Multicast Configuration

VLAN ID

Enter the ID of the VLAN to which the MAC address belongs. If nothing is set, the VLAN ID 1 is set as the basic setting.

MAC Address

Enter the MAC address you want to add to the address table.

Slot / Port

Here, select how a port should respond to multicast frames:

● M

Member, multicast frames are sent via this port.

● –

Not a member of the multicast group. No multicast frames are sent via this port.

● F

Forbidden, not a member of the multicast group. Moreover, this address may not be an address learned dynamically with GMRP.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

175

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● #

The port is invalid.

● ?

The port is not a member in the specified VLAN.

Note

For multicast addresses, you can specify more than one port (destination node).

Current Entries

By clicking this button, you return to the list of MAC addresses.

New entry

Click this button to create a new entry in the filter table.

Delete

Click this button to delete the displayed entry from the filter table.

Changing an address entry

Click on a MAC address with the "static" status (underscored in the address list) to open the

"Static Multicast Configuration" page for this address. Make the settings you require and confirm your entries by clicking the "Set Values" button.

176

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 49 Current Multicast Groups - CLI\SWITCH\MCAST> info

Command add <VLAN-ID> <MAC address> [<option>

[ports]] find [VLAN-ID] <MAC address> edit <VLAN-ID> <MAC address> <option> [ports] delete <VLAN-ID> <MAC address>

Description

Shows the content of the address table of an

IE switch.

Inserts a static entry for a multicast address in the address table.

The following abbreviations are available for the <option> parameter:

• –

Not a member of the multicast group. No multicast frames are sent via this port.

• m

Multicast frames are sent via this port.

• f

Not a member of the multicast group.

Moreover, this address may not be an address learned dynamically with GMRP.

Examples:

• add 2 01:02:03:04:05:06 m 5.1-5.2

Assigns the MAC address of the VLAN-

ID 2 and ports 5.1 and 5.2 are members.

• add 3 01:02:03:04:05:06 m

Creates an entry for VLAN-ID 3, all existing ports are members.

-

Comment

Administrator only.

Searches for a MAC address in the address table of an IE switch. You can also see the ports to which a received frame with this

(destination) address is sent.

If you do not specify a VLAN-ID, all VLANs are browsed for the specified MAC address.

Changes an entry in the address table. For the <option> parameter, the same abbreviations area available as for the add command.

-

Administrator only.

Deletes a static entry from the address table. Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

177

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.8.2 GMRP Configuration

Enabling GMRP

By selecting the check box, you specify whether or not GMRP is used for each individual port. If GMRP is disabled for a port, no registrations are made for it and it cannot send

GMRP frames.

Figure 4-69 GMRP Configuration

Syntax of the Command Line Interface

Table 4- 50 GMRP Configuration - CLI\SWITCH\MCAST>

Command gmrpport [<E|D> [ports]]

Description

Enables/Disables GMRP functionality for the specified ports.

If you do not specify any ports,

GMRP is enabled/disabled for all ports.

Comment

Administrator only.

178

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.8.3 IGMP Configuration

Specifying the aging time

In this menu, you can configure the aging time for IGMP Configuration. When the time elapses, entries created by IGMP are deleted from the address table if they are not updated by a new IGMP packet. This applies to all ports; port-specific configuration is not possible in this case.

Figure 4-70 IGMP Configuration

IGMP Snooping Aging Time [sec]

Here, you enter a time in seconds for the aging time.

IGMP Querier

Enable this option if you want the IE switch to send IGMP queries as well.

Syntax of the Command Line Interface

Table 4- 51 IGMP Configuration - CLI\SWITCH\MCAST\IGMP>

Command igmptime [number] igmpqry [E|D]

Description

Specifies the IGMP aging time in seconds. Without parameters, this command displays the

IGMP aging time.

Displays/sets IGMP Query Enable

Comment

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

179

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.8.4 Unknown Unicast Blocking Mask

Blocking the forwarding of unknown multicast frames

In this menu, you can block the forwarding of unknown multicast frames for individual ports.

Figure 4-71 Unknown Unicast Blocking Mask

Disable Unknown Multicast Forwarding

Here, you specify the ports for which the forwarding of unknown multicast frames will be disabled.

Syntax of the Command Line Interface

Table 4- 52 Unknown Multicast Blocking Mask - CLI\SWITCH\>

Command blkbmcast [<E|D> [ports]]

Description

Enables/Disables the blocking of multicasts on the specified ports.

Comment

Administrator only.

180

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.9 Broadcast Blocking Mask

Blocking the forwarding of broadcast frames

In this menu, you can block the forwarding of broadcast frames for individual ports.

Figure 4-72 Broadcast Blocking Mask

Disable Broadcast Forwarding

Here, you specify the ports for which the forwarding of broadcast frames will be disabled.

Note

Some communication protocols work only with the support of broadcast. In these cases, blocking can lead to loss of data communication. Only make entries here when you are sure that you do not need broadcast and explicitly want to avoid it.

Syntax of the Command Line Interface

Table 4- 53 Broadcast Blocking Mask - CLI\SWITCH\>

Command blkbcast [<E|D> [ports]]

Description

Enables/Disables the blocking of broadcasts on the specified ports.

Comment

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

181

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.10 Fast learning

With Fast Learning, the MAC addresses learned dynamically at a port are deleted from the address table immediately as soon as there is a link down at the relevant port, for example by replugging an end device. This means that the switch recognizes whether or not a port assignment is valid more quickly than normally.

Fast Learning is specified for each port individually.

Configuration of the ports

In the dialog shown below, click the relevant check boxes of the ports at which Fast Learning will be enabled.

Figure 4-73 Configuration for "Fast Learning"

Syntax of the Command Line Interface

Table 4- 54 Fast Learning Configuration - CLI\SWITCH\>

Command fastlrn [<E|D> [ports]]

Description

Enables/disables Fast Learning at the relevant port.

Comment

Administrator only.

182

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.11 Load Limits Configuration (SCALANCE X414-3E)

Limiting the number of incoming frames

In this dialog, you can specify the maximum number of frames received by a port per second. Due to hardware considerations, several ports are grouped together in a port block.

The set values (packets [s]) are, however, valid per port. You can specify the category of frame for which the entered limit values will apply:

● Unicast (destination lookup failure)

● Multicast

● Broadcast

Figure 4-74 Load Limits Configuration

Port Blocks

The ports are assigned to the following port blocks; the settings apply to all ports of a port block:

● Port block 1

The ports on slots 6, 7, and 11.

● Port block 2

The ports on slots 9 and 10.

● Port block 3

No module.

● Port block 4

Port 2 on slot 5.

● Port block 5

Port 1 on slot 5.

This column only lists the slots actually being used. The text boxes are read-only.

Unicast (DLF), Multicast, Broadcast

The maximum number of frames per second applies to the frame categories whose check box is selected.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

183

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Packets [s]

The maximum number of frames that a port block receives per second. Packets that exceed this limit value are discarded.

Note

The ring ports send multicast frames at cyclic intervals to detect line breaks. For port blocks that contain ring ports, you should therefore not limit the receipt of multicast frames to ensure that the redundancy manager functions correctly.

Syntax of the Command Line Interface

Table 4- 55 Load Limits Configuration - CLI\SWITCH\LIMITS>

Command info <Blocks> inmode <E|D> <E|D> <E|D>

[blocks] ingress <packets> [blocks]

Description

Shows the current settings for limiting packets. The settings are displayed according to port blocks.

The port blocks are defined as follows:

Port 1 on slot 5

Port 2 on slot 5

The ports on slots 6, 7 and 11.

The ports on slots 9 and 10.

The ports of an installed extender, in other words, the ports of slots 12 and 13 of a twisted pair extender and the ports 12 through 15 of a media module extender.

Specifies the ingress limiting mode for ports. The three entries for E or D are (in this order) for

Unicast (DLF)

• Multicast

Broadcast

The port blocks are defined as for the info command.

Examples:

• inmode E D E 1

Enables unicast and broadcast, disables multicast for port block 1.

• inmode D E D

Disables unicast and broadcast, enables multicast for all port blocks.

Specifies the maximum number of incoming packets processed by the IE switch for each port block.

The port blocks are defined as for the info command.

Comment

If a parameter (blocks) is specified, the CLI only displays the selected values.

Administrator only.

If the parameter (blocks) is not specified, all blocks are changed.

Administrator only.

If the parameter (blocks) is not specified, all blocks are changed.

184

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.12 Load Limits Rates (SCALANCE X-300/X408-2)

Limiting the transfer rate of incoming and outgoing data

The configured load limitation is displayed in this menu (maximum number of frames per second). The set values are valid per port. You can specify the category of frame for which the entered limit values will apply. You can configure by clicking on the relevant entry.

Figure 4-75 Load Limits Rates

Port

Displays the slot and the port to which the information relates. You can change the configuration by clicking on the relevant entry in the "Port" column.

Ingress Limiting Mode

Displays the configured frame types to which the limit values for incoming data relate.

Ingress Limiting Rate

Displays the configured limit values for the transfer rates of the incoming data.

Egress Limiting Rate

Displays the configured limit values for the transfer rates of the outgoing data.

Note

The limits for the outgoing data always relate to all frames.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

185

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Configuring limits

If you click on an entry in the "Port" column, the "Load Limits Rates Configuration" screen opens.

Figure 4-76 Load Limits Rates Configuration

Port

Displays the slot and the port to which the information relates. This field cannot be edited.

Modefor ingress limiting

Here, you can specify the categories of frames to which the selected transfer rate for incoming data relates:

● Unicast (destination lookup failure)

● Multicast

● Broadcast

Rate for ingress limiting

Here, you can select the maximum transfer rate for incoming data from the available values.

If you select "not limited", the "Ingress Limiting Mode" has no effect.

Mode for the egress limiting

Indicates that the transfer rate for outgoing data applies to all frames. This field cannot be edited.

Rate for egress limiting

Here, you can select the maximum transfer rate for outgoing data from the available values.

Note

The ring ports send multicast frames at cyclic intervals to detect line breaks. For ring ports, you should therefore not limit the receipt of multicast frames to ensure that the redundancy manager functions correctly.

186

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 56 Load Limits Configuration - CLI\SWITCH\LIMITS>

Command info [ports] inmode <mode> [ports] ingress <rate> [ports] egress <rate> [ports]

Description

Shows the current settings for limiting packets. The settings are displayed according to ports.

Specifies the ingress limiting mode for ports.

The <mode> parameter can have the following values:

B

Broadcast

• BM

Broadcast, Multicast

BMU

Broadcast, Multicast, Unicast (DLF)

• ALL

All frames

Example:

• inmode B 5.1

Sets the limiting mode for port 5.1 to broadcast.

Specifies the ingress limiting rate for ports.

The <rate> parameter can have the following values:

128k, 256k, 512k

• 1m, 2m, 4m, 8m, 16m, 32m, 64m, 128m,

256m

• k stands for kilobits per second and m for megabits per second.

Example:

• ingress 256k 5.1, 6.2

Sets the ingress limiting rate for ports 5.1 and 6.2 to 256 kilobits per second.

Specifies the egress limiting rate for ports.

The abbreviations for the <rate> parameter are the same as those of the ingress command.

Example:

• egress 2m 5.2, 8.1-8.4

Sets the egress limiting rate for ports 5.2 and 8.1 to 8.4 to 2 megabits per second.

Comment

If a parameter (ports) is specified, the CLI only displays the selected values.

If only the <mode> parameter is specified, the settings are changed for all ports.

If only the <rate> parameter is specified, the settings are changed for all ports.

If only the <rate> parameter is specified, the settings are changed for all ports.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

187

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.13 VLAN

4.5.13.1 Current VLAN Configuration

Network definition regardless of the spatial location of the nodes

A VLAN (virtual LAN) is a network to which nodes can be assigned regardless of their physical location. Multicast and broadcast frames are possible only within the limits set by the logical network structure, such frames cannot be sent into the virtual network. For this reason VLANs are also known as broadcast domains. The particular advantage of VLANs is the reduced network load for the nodes and network segments of other VLANs.

Versions of VLANs

There are various types of VLAN:

● Port-based VLAN (level 2)

● MAC address-based VLAN (level 2)

● IP address–based VLAN (level 3)

An IE switch supports port-based VLAN. This makes it possible to set parameters for the IE switch or to configure it using GVRP frames.

How to configure port-based VLANs

Follow the steps below to configure your VLANs:

1. Specify the nodes for the individual VLANs.

2. Assign the VLAN-ID for each node and each IE switch and specify the device to which there is a connection and over which port the connection is established.

3. Set the following configuration on the IE switch:

– Definition of all VLANs used on this device.

– Specify which VLAN will be supported on which port.

– Specify how the frames will be processed entering and leaving the ports (ingress / egress filter).

– Specify whether frames are sent via the port with or without tagging.

– Decide whether the IE switch will be configured statically or whether it can be configured dynamically with GVRP.

188

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Important rules for VLANs

Make sure you keep to the following rules when configuring and operating your VLANs:

● To achieve switchover times in the ring of 300 ms when using VLANs or multicast groups, all ring ports must be created statically as members in all VLANs and all multicast groups.

● Frames with VLAN-ID "0" (for example only priority-tagged frames) are handled like untagged frames.

● As default, all ports on the IE switch send frames without a VLAN tag to ensure that the end node can receive these frames. This basic setting is necessary since it is not always certain whether a node can interpret tagged frames.

● As default, an IE switch that supports VLANs has the parameter assignment VLAN identifier 1 (default VLAN) at all ports.

Note

The VLAN-ID 500 is reserved for future use and is already configured.

If an end node is connected to a port, outgoing frames should be sent without a tag (static access port). If, however, there is a further switch at this port, the frame should have a tag added (trunk port).

VLANs with the IE switch

The Current VLAN Configuration page shows the current assignment of the ports in terms of

VLAN configuration.

Changing pages

Click on the ">>" or "<<" buttons to page backwards and forwards.

On the second page, instead of the ports, you will see any link aggregations that have been set up.

Figure 4-77 Current VLAN Configuration - page 1

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

189

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

190

Figure 4-78 Current VLAN Configuration - page 2

The four areas of the table show the following information:

VID

The VLAN identifier (VID), a number between 1 and 4094.

Name

This name is assigned when a VLAN is defined. It only provides information and has no effect on the configuration.

If the static status is shown for an entry, you can click on the VID or name to open the Static

VLAN Configuration page. Here, you can configure the individual ports to specify the VLAN to which they belong. The VLAN ID and name can, however, only be specified when you create a new entry and they cannot be modified again afterwards. If you want to change an entry, you must first delete the entry and then create it again with the required change included.

Status

Shows the type of entry in the port filter table. Here, static means that the address was entered as a static address by the user. The entry gvrp means that the configuration was registered by a GVRP frame. This is, however, only possible if GVRP was enabled for the

IE switch.

Port Member List

Shows the VIDs set for the slots or ports. The meaning of the entries is as follows:

● "-"

The port is not a member of the specified VLAN.

● M

(Member) The port is a member of the VLAN, sent frames include a VLAN tag with the

VID specified in the first column.

● R

(Registered) The port is a member of the VLAN, registration was by a GVRP frame.

● U

(Untagged) The port is a member of the VLAN, sent frames do not include a VLAN tag.

U (in red)

This VLAN is not configured as port VLAN. Sent frames do not contain a VLAN tag.

● F

(Forbidden) The port is not a member of the VLAN and it is not possible for the VLAN to be registered dynamically at this port over GVRP.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● G

(Guest VLAN) The port is a member of the guest VLAN. Registration was dynamic using

the "Guest VLAN" authentication, see section "802.1x Port Configuration (Page 162)".

● A

(Authenticated) The port is a member of the VLAN. Registration was dynamic using the

"MAC Authentication" method, see section "802.1x Port Configuration (Page 162)".

With a new definition, all ports have the identifier "-".

Link Aggregation Member List

Shows the settings of the link aggregation. The meaning of the entries is as follows:

● "-"

The port is not a member of the link aggregation.

● M

(Member) The port is a member of the link aggregation.

VLAN configuration

Click the New Entry button to specify how frames are sent via ports when working with a

VLAN. The Static VLAN Configuration page opens in which you can make the necessary entries:

Figure 4-79 Static VLAN Configuration

VLAN ID

Enter the ID of the VLAN here. The VLAN-ID is a number between 1 and 4094.

Name

Here, enter a name for the VLAN. The name has no effect on the configuration.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

191

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

VLAN priority

Here, select a priority to be forced for the VLAN. The selected priority is entered in all incoming frames of this VLAN. The incoming frames are forwarded by the switch according to the selected priority.

If you select "Do not force", the priority of the frame is remains unchanged.

Slot/Port

Here, you can specify how the port responds in relation to the specified VLAN when sending frames. As default, the boxes have "-" entered. By clicking repeatedly, you move from one entry to the next. The meaning of the entries is as follows:

● "-"

The port is not a member of the specified VLAN.

● M

(Member) The port is a member of the VLAN, sent frames include a VLAN tag with the

VID specified in the first row.

● R

(Registered) The port is a member of the VLAN, registration was by a GVRP frame.

● U

(Untagged) The port is a member of the VLAN, sent frames do not include a VLAN tag.

Use U if end devices that do not support VLAN tags are addressed via this port.

● F

(Forbidden) The port is not a member of the VLAN and it is not possible for the VLAN to be registered dynamically at this port over GVRP.

● T

(Trunk Port) The port is automatically a member of all configured VLANs and only sends tagged frames.

Note

If a port is defined as "F" (Forbidden) for a VLAN, this VLAN is blocked if the port is a trunk port. Forbidden has a higher priority than trunk.

Current Entries

By clicking this button, you return to the list of VLANs.

New Entry

Click on this button to make the settings for a new VLAN.

Set Values

Click this button to store the values you have entered in the configuration of the IE switch.

Delete

Click this button to delete the displayed configuration.

192

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

VLAN configuration and authentication

If a port is to be authenticated using the "802.1x" authentication method, you will need to configure a VLAN to which the port will be assigned. If "802.1x" authentication fails and the port is authenticated using "MAC Authentication" or "Guest VLAN", it is defined as "A" or "G".

If a port is authenticated using the "MAC Authentication" method and the "VLAN Assignment

Allowed" option is disabled, no VLAN will be assigned to the port ("-"). In this case, you first need to assign a VLAN.

If a port is authenticated using the "MAC Authentication" method and the "VLAN Assignment

Allowed" option is enabled, the port is defined as "A".

Syntax of the Command Line Interface

Table 4- 57 Current VLAN Configuration - CLI\SWITCH\VLAN> info

Command add <VLAN-ID> [<option>

[ports]]

Description

Shows the currently configured VLANs and their relationship to the ports.

Inserts a new VLAN.

The following abbreviations are available for the <option> parameter.

-

The port is not a member of the VLAN.

• m

The port is a member of the VLAN, frames are sent with a VLAN tag.

• u

The port is a member of the VLAN, frames are sent without a VLAN tag.

• f

The port is not a member of the VLAN and it cannot be configured as belonging to the VLAN dynamically by GVRP.

• t

The port is automatically a member of all configured VLANs and only sends tagged frames.

Examples:

• add 2

Creates an entry with the VLAN-ID 2 and the default name "Vlan 2".

• add 4 m

Creates an entry with the VLAN-ID 4 and the default name "Vlan4". All existing ports are members.

Comment

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

193

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Command edit <VLAN-ID> [<option>

[ports]] name <VLAN-ID>

<name> delete <VLAN-ID>

Description

Changes the membership of ports in a

VLAN.

The abbreviations for the <option> parameter are the same as those of the add command.

Examples:

• edit 3 - 10.1

Removes port 10.1 from the VLAN with ID 3.

Changes the name of a VLAN.

Deletes the VLAN with the specified ID from the configuration of the IE switch.

Comment

Administrator only.

Administrator only.

Administrator only.

4.5.13.2 VLAN Port Parameters

Processing received frames

This page shows the rules according to which an IE switch handles received frames:

194

Figure 4-80 VLAN Port Parameters

The five columns of the table show the following information:

Port

This shows the slot and the port to which the following information relates.

Priority

The CoS priority (Class of Service) used in the VLAN tag. If a frame without a tag is received, a priority can be assigned to it per port. This priority specifies how the frame is further processed compared with other frames.

There are a total of eight priorities with values 0 to 7, where 7 represents the highest priority

(IEEE 802.1p Port Priority). For more detailed information on frame tagging, refer to

Appendix C.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Port VID

If a received frame has no VLAN tag, it has a tag added with the VLAN-ID specified here and is sent out according to the switch rules for the port.

If the VLAN-ID of the port was defined dynamically using the "MAC Authentication" method or "Guest LAN", the "Port VID" is configured automatically.

Acceptable Frames

This specifies how untagged frames are handled. The following alternatives are possible:

● tagged only


The IE switch discards all untagged frames.

● all


The IE switch forwards all frames.

Ingress Filtering

Here, you can see whether the VID of received frames is evaluated (entry enabled) or not

(entry disabled).

Trunk

This specifies whether a port was configured as a trunk port (entry enabled) or not (entry disabled).

Configuration of a port for VLAN

After clicking on one of the entries in the Ports column, you change to the page for configuring the port properties for receipt of frames:

Figure 4-81 VLAN Port Configuration

Port

This read-only box displays the slot and port number to which the information on this page relates.

Port Priority

The priority assigned to untagged frames.

Port VLAN ID

The VLAN ID that is assigned to untagged frames.

If the VLAN ID of the port was defined dynamically with the "MAC Authentication" method or

"Guest VLAN", the "Port VLAN ID" is configured automatically.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

195

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Tagged Frames only

If you activate this option, untagged frames are discarded. Otherwise, the forwarding rules apply according to the configuration.

Ingress Filtering

If you enable this option, the VLAN-ID of received frames decides how they are forwarded:

To use the VLAN-ID of the received frame, the VLAN must have been created on the IE switch and the port must be a member of the VLAN.

Frames with the configured port VLAN-ID are forwarded, frames with a different VLAN-ID are discarded when they are received. Frames without a VLAN-ID are received and forwarded to the port VLAN-ID.

Trunk

If you enable this option, the port is a trunk port. A trunk port is automatically a member of all configured VLANs and only sends tagged frames.

If you disable the option, the VLAN configuration that existed prior to enabling the option is restored.

Syntax of the Command Line Interface

Table 4- 58 VLAN Port Parameters - CLI\SWITCH\VLAN\PORTS>

Command info vid [<VLAN-ID> [ports]] prio [<0...7> [ports]] ingress [<E|D> [ports]] untagged [<E|D> [ports]] trk [<E|D> [ports]]

Description

Displays an overview of the ports and corresponding VLAN settings.

Received frames without a

VLAN tag at the specified ports are given a VLAN tag with the

<VLAN-ID>.

Specifies the priority of ports.

Enables/disables the evaluation of the VID of received frames.

Specifies the processing of frames without a VLAN tag.

When this is enabled, frames are also accepted without a

VLAN tag, otherwise not.

Enables/disables the trunk property.

The trunk port is automatically a member of all configured VLANs and only sends tagged frames.

Comment

-

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

196

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.13.3 GVRP Configuration

Enabling GVRP functionality

With a GVRP frame, an end node or switch can register for a specific VID at a port of the IE switch. You can enable each port for GVRP functionality on the GVRP Configuration page.

Figure 4-82 GVRP Configuration

Enable GVRP

If you select an option, the IE switch allows the registration of a VLAN by GVRP frames at the relevant port. The IE switch can also send GVRP frames via this port.

Syntax of the Command Line Interface

Table 4- 59 GVRP Configuration - CLI\SWITCH\VLAN>

Command gvrpport [<E|D> [ports]]

Description

Enables/disables dynamic registration of VLANs with GVRP for the specified ports.

Comment

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

197

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.13.4 VLAN Learning

Learning MAC addresses in VLANs

On this page, you can configure the "Learn to all VLANs" option for each port.

Figure 4-83 Learn to all VLANs Config Mask

Enable learn to all VLANs

If you enable the option for a port, a MAC address received at the port is automatically learned in all configured VLANs.

Syntax of the Command Line Interface

Table 4- 60 Learn to all VLANs - CLI\SWITCH\VLAN\PORTS>

Command lrnallv [<E|D> [Ports]]

Description

Enables/disables the automatic learning of a MAC address in all configured

VLANs.

Comment

Administrator only.

198

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.13.5 X-300 VLAN Port Priority Mapping

VLAN Port Priority Mapping

This page shows the priority with which a port sends received frames.

Figure 4-84 VLAN Port Priority Mapping

Port

Port to which the following information relates.

Prio 0

Shows the priority with which frames are sent that were received with priority 0.

For port 1, for example, the setting was made so that frames received with priority 0 are sent with priority 1.

The "Prio 1" to "Prio 7" columns are read in exactly the same way.

VLAN Priority Remap Configuration

The "VLAN Priority Remap Configuration" screen appears if you have clicked on a port on the "VLAN Port Priority Mapping" page.

Depending on the priority when receiving, you can change the priority of the frames with which they are sent.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

199

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Figure 4-85 VLAN Priority Remap Configuration

Port

This read-only box displays the port number to which the information on this page relates.

Ingress

Priority with which a frame is received.

Egress

Priority with which a frame will be sent.

Syntax of the Command Line Interface

Table 4- 61 VLAN Port Priority Mapping - CLI\SWITCH\VLAN\PRIO>

Command info remap [port] [<0..7><0..7>]

Description

Shows the priority with which a port sends received frames.

Changes the priority of received frames for sending.

Comment

-

Administrator only.

200

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Command reset vprio <VID> [noforce | <0-7>]

Description

Resets the priority of received frames. The priority when receiving then corresponds to the priority when sending.

Changes the priority of received frames depending on the VLAN to which they belong. The frames are sent with this changed priority.

In the basic status "noforce", the priority of the frames remains unchanged.

Comment

Administrator only.

Administrator only.

4.5.14 STP/RSTP

4.5.14.1 Spanning Tree Configuration

Avoiding loops on redundant connections

The Spanning Tree Protocol (STP) allows network structures to be created in which there are several connections between two stations. STP permits exactly one path and disables the other (redundant) ports for data traffic. This prevents loops forming in the network. If there is an interruption, an alternative path is found via which the data is sent. The functionality of the spanning tree algorithm is based on the exchange of configuration and topology change frames.

Definition of the network topology using the configuration frames

The switches exchange configuration frames with each other known as BPDUs (Bridge

Protocol Data Unit) to calculate the topology. The root bridge is selected and the network topology created using these frames. The root bridge is the bridge that controls the spanning tree algorithm for all involved components. BPDUs also bring about the status change of the bridge ports.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

201

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Rapid Spanning Tree

The Rapid Spanning Tree Protocol is based on the Spanning Tree Protocol. With RSTP, the reconfiguration time was optimized by the devices collecting information about alternative routes during normal problem-free operation. Typical reconfiguration times with spanning tree are between 20 and 30 seconds. With rapid spanning tree, the reconfiguration times are around one second. This was achieved by the following measures:

● Edge Ports

A port defined as an edge port is switched active directly following a link up. If a spanning tree BPDU is received at an edge port, the port loses its role as edge port and it takes part in (R)STP again.

● Point-to-point (direct communication between two neighboring switches)


By directly linking the switches, a status change (reconfiguration of the ports) can be made without any delays.

● Alternate Port (substitute for the root port)

An alternate Port serves as a substitute for the root port. If the connection to the root bridge is lost, the IE switch can establish a connection via the alternate port without the delay caused by reconfiguring a connection.

● Filter table


In Rapid Spanning Tree, ports affected by a reconfiguration are immediately deleted from the filter table. With spanning tree, on the other hand, the point at which a port is deleted is decided by the time when the port was entered in the filter table.

● Reaction to events


Rapid spanning tree reacts to events, for example an aborted connection, without delay.

There is no waiting for timers as in spanning tree.

In principle, therefore with rapid spanning tree, alternatives for many parameters are preconfigured and certain properties of the network structure taken into account to reduce the reconfiguration time.

202

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

(Rapid) Spanning Tree, media redundancy and passive listening

You have the following options to connect an (R)STP segment to an MRP or HRP ring:

● using (R)STP to one device in the ring

You can enable (R)STP at the same time as the media redundancy methods MRP or

HRP on different ports of a device (see figure redundancy").

"Permitted (R)STP connection to ring

A connection to several devices of a ring using (R)STP is not possible. Since the (R)STP

BPDUs are not forwarded via an MRP or HRP ring, this results in circulating frames and the failure of the data traffic (compare redundancy").

"Impermissible (R)STP connection to ring

Permitted (R)STP connection to ring redundancy

Impermissible (R)STP connection to ring redundancy

● using passive listening on various devices in the ring

If you want to link an (R)STP segment to various devices of a MRP or HRP ring, you will need to enable passive listening on all devices of the ring and disable (R)STP. Since passive listening supports the forwarding of (R)STP BPDUs, there are no circulating frames.

Note

(R)STP and passive listening cannot be enabled at the same time on an IE switch.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

203

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Spanning tree configuration with an IE switch

The parameters for the spanning tree protocol are displayed and set in the "Spanning Tree

Configuration" dialog:

204

Figure 4-86 Spanning Tree Configuration

The left-hand side of the page shows the configuration of the IE switch. The right-hand side shows the configuration of the root bridge that can be derived from the spanning tree frames received by an IE switch. The data shown here is therefore read-only. If an IE switch is the root bridge, the information on the left and right matches. The meaning of the parameters is as follows:

Bridge Priority / Root Priority

Which switch becomes the root bridge is decided by the bridge priority. The bridge with the highest priority (in other words, with the lowest value for this parameter) becomes the root bridge. If several switches in a network have the same priority, the switch whose MAC address has the lowest numeric value will become the root bridge. Both parameters, bridge priority and MAC address together form the Bridge Identifier. Since the root bridge manages all path changes, it should be located as centrally as possible due to the delay of the frames.

The value for the bridge priority is a whole multiple of 4096 with a range of values from 0 through 65,535.

Bridge Address / Root Address

The MAC address of the IE switch or root bridge.

Root Port

The port over which the device communicates with the root bridge.

Topology Changes / Last Topology Change

The entry for the IE switch shows the number of reconfiguration actions due to the spanning tree mechanism since the last startup. For the root bridge, the duration is displayed in minutes (m appended after the number) since the last reconfiguration.

Bridge Hello Time / Root Hello Time

Each bridge sends configuration frames (BPDUs) regularly. The interval between two such frames is the Hello time.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Bridge Forward Delay / Root Forward Delay

New configuration data is not used immediately by a bridge but only after the period specified in the Forward Delay parameter. This ensures that operation is only started with the new topology after all the bridges have the required information. The default for this parameter is 15 seconds.

Bridge Max Age / Root Max Age

Bridge Max Age defines the maximum "age" of a received BPDU for it to be accepted as valid by the switch. The default value for this parameter is 20.

Syntax of the Command Line Interface

Table 4- 62 Spanning Tree Configuration - CLI\SWITCH\STP> info

Command bprio [0...61440] hellotm [1 ... 10] fwddelay [4 ... 30] maxage [6 ... 40]

Description

Shows the current spanning tree configuration.

Specifies the bridge priority for the IE switch.

Specifies the interval between two BPDUs in seconds.

Specifies the delay time for the effectiveness of configuration information (specified in seconds).

Maximum age for configuration information.

-

Comment

Administrator only.

Administrator only.

Administrator only.

Default value: 15 s

Administrator only.

Default value: 20 s

4.5.14.2 Spanning Tree Port Parameters

Port-specific parameters

This page displays the current port parameters that were either set by the user or set as a result of the automatic functions of the IE switch.

Figure 4-87 Spanning Tree Port Parameters

The table has the following columns:

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

205

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Port

Specifies the slot and port to which the information relates.

STP Status

Shows whether spanning tree is enabled or disabled for the port.

Priority

If the path calculated by spanning tree is possible over several ports of a switch, the port with the highest priority (in other words the lowest value for this parameter) is selected. A value from 0 through 255 can be specified for the priority; the default is 128.

Admin Path Cost

Shows the value of the path costs to be used.

Calc Path Cost

If the value for Admin Path Cost is > 0, this value is adopted as Calculated Path Cost.

If the value for Admin Path Cost = 0, the value for Calculated Path Cost is calculated automatically. The calculation of the path costs is largely based on the transmission speed.

The higher the achievable transmission speed is, the lower the value for Admin Path Cost should be.

Typical values for path costs with spanning tree:

● 1000 Mbps = 4

● 100 Mbps = 19

● 10 Mbps = 100

Typical values for path costs with rapid spanning tree:

● 1000 Mbps = 20,000

● 100 Mbps = 200,000

● 10 Mbps = 2,000,000

State

Displays the current status of the port. The following statuses are possible:

● disabled


The port only receives and is not involved in the STP configuration.

● blocking


In the blocking mode, BPDUs are received.

● listening


In this status, BPDUs are both received and sent. The port is involved in the spanning tree algorithm.

● learning


Stage prior to the forwarding status, the port is actively learning the topology again (in other words, the node addresses).

● forwarding


Following the reconfiguration time, the port is once again active in the network; it receives and forwards data frames.

FWD Transitions

Specifies the number of transitions from the listening to forwarding status.

206

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Edge

The following entries are possible in this column:

● yes


An edge port is connected to this port.

● no

There is a spanning tree or rapid spanning tree device on this port.

If an edge port is connected, an IE switch can switch over the port more quickly without taking into account spanning tree frames. If a spanning tree frame is received despite this setting, the port automatically changes to the no setting for switches.

P.t.P.

There is a point-to-point link when two RSTP-compliant network components are connected together over this port. There are 2 possible statuses :

● Yes


There is a point-to-point link.

● No


There is not a point-to-point link.

Syntax of the Command Line Interface

Table 4- 63 (Rapid) Spanning Tree Port Parameters - SWITCH\STP\PORTS> info

Command Description

Shows an overview of the ports and the corresponding rapid spanning tree settings.

-

Comment

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

207

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.14.3 Spanning Tree Port Configuration

Configuration of a port for (Rapid) Spanning Tree

Note

(R)STP cannot be enabled on the ring ports and the standby ports.

If you click on a port name in the "Port" column of the "Spanning Tree Port Parameters" page, you open the "Spanning Tree Port Configuration" page:

208

Figure 4-88 Spanning Tree Port Configuration

Port

The "Port" display box shows the selected port.

(R)STP enabled

Enable this check box, if you want the port to use the (rapid) spanning tree protocol.

Admin Edge Port

Enable this option when there is an end device on this port. Otherwise a reconfiguration of the network will be triggered whenever a link to this port is modified.

Auto Edge Port

Enable this option if you want an end device connected to this port to be detected automatically.

This option is useful in conjunction with passive listening because if the main link fails, reconfiguration is faster (see operating instructions of the relevant IE switch).

Priority

Enter a value for the port priority in the "Priority" input box.

Permitted values: 0 to 255

Admin Path Cost

Here, the values for the past costs to be used per port can be set manually.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Calc Path Cost

If the value for Admin Path Cost is > 0, this value is adopted as Calculated Path Cost.

If the value for Admin Path Cost = 0, the value for Calculated Path Cost is calculated automatically. The calculation of the path costs is largely based on the transmission speed.

The higher the achievable transmission speed is, the lower the value for Admin Path Cost should be.

Typical values for path costs with spanning tree:

● 1000 Mbps = 4

● 100 Mbps = 19

● 10 Mbps = 100

Typical values for path costs with rapid spanning tree:

● 1000 Mbps = 20,000

● 100 Mbps = 200,000

● 10 Mbps = 2,000,000

Admin Point to Point Status

There are three possible settings:

● Point to Point Connection and Shared Media Connection are not selected:

Point-to-point is detected automatically. If the port is set to half duplex, a point-to-point link is not assumed.

● Shared Media Connection is selected:


Despite a full duplex connection, a point-to-point link is not assumed.

● Point-to-Point Connection is selected:


Despite a half duplex connection, a point-to-point link is assumed.

Note

Point-to-point means a direct connection between two switches. Shared Media Connection could, for example, be a connection to a hub.

Syntax of the Command Line Interface

Table 4- 64 (Rapid) Spanning Tree Port Configuration - SWITCH\STP\PORTS>

Command stpport [<E|D> [ports]] prio [<0...255> [ports]] pathcost [<0...65535> [ports]]

Description

Enables/disables the spanning tree algorithm for the specified ports.

Specifies the priority of the port.

Specifies the path costs for the port.

Comment

Administrator only.

If you want to specify several ports as parameters, you can separate the port numbers with blanks or hyphens.

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

209

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Command admedge [<T|F> [ports]] autoedge [<T|F> [ports]] ptp [<A|T|F> [ports]]

Description

Specifies whether a

• T

End device or a

F switch is connected to this port that supports

Spanning Tree or Rapid Spanning Tree.

If a (rapid) spanning tree protocol is received, the value F is displayed.

Specifies whether at this port it should be automatically detected whether a

Comment

Administrator only.

• T

End device or a

F switch is connected.

The point-to-point link establishes a direct link between two switches.

In this case, you have the following options:

A

The port recognizes a PtP port based on the duplexity. If the connection is full duplex, it is assumed to be PtP, if it is half duplex, no PtP connection is assumed (shared medium).

• T

Specifies a PtP link, even though half duplex is being used.

F

Specifies that there is no PtP link over the relevant port even with full duplex.

-

210

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.15 MSTP (SCALANCE X-300/X408)

4.5.15.1 Multiple Spanning Tree Configuration

Multiple Spanning Tree

The Multiple Spanning Tree Protocol (MSTP) is a further development of the Rapid

Spanning Tree Protocol (RSTP).

With MSTP, in contrast to RSTP, there is not only one Rapid Spanning Tree established.

With MSTP, several independent Rapid Spanning Tree instances are created for various

VLANs. This allows the traffic from different logical networks to be routed via different paths.

Multiple Spanning Tree configuration with an IE switch

The "Multiple Spanning Tree Configuration" screen opens after you click the "MSTP" folder icon.

In this screen, you can display and set the parameters for the Multiple Spanning Tree

Protocol.

Figure 4-89 Multiple Spanning Tree Configuration

The following boxes relate to the configuration of the device and the root bridge.

The left column relates to the configuration of the device. The right-hand column shows the configuration of the root bridge that can be derived from the spanning tree frames received

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

211

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

212 by the device. For this reason, the data shown here is read-only. If the device is a root bridge, the information on the left and right matches.

● Bridge Priority / Root Priority

Which device becomes the root bridge is decided based on the bridge priority. The bridge with the highest priority becomes the root bridge. The lower the value, the higher the priority.

If several devices have the same priority in a network, the device with the lowest numeric value in the MAC address becomes the root bridge.

Both parameters, bridge priority and MAC address together form the bridge identifier.

Since the root bridge manages all path changes, it should be located as centrally as possible due to the delay of the frames.

Enter the priority of the device in the "Bridge Priority" input box.

The value of the bridge priority is an integral multiple of 4096 with the range of values from 0 to 61440.

The "Root Priority" display box shows the priority of the CIST root bridge.

● Bridge Address / Root Address

The "Bridge Address" display box shows the MAC address of the device.

The "Root Address" display box shows the MAC address of the CIST root bridge.

● Root Port

The "Root Port" display box shows the port via which the device communicates with the

CIST root bridge.

● Root Cost

The "Root Cost" display box shows the path costs from this device to the CIST root bridge.

● Topology Changes / Last Topology Change

The "Topology Changes" display box shows the number of reconfiguration actions due to the spanning tree mechanism since the last startup.

The "Last Topology Change" display box shows the time since the last reconfiguration as follows:

– Seconds: sec unit after the number

– Minutes: min unit after the number

– Hour: hr unit after the number

● Bridge Hello Time [s] / Root Hello Time [s]

Each bridge regularly sends configuration frames (BPDUs).

Enter the interval between two configuration frames in the "Bridge Hello Time" input box.

The default value for this parameter is 2 seconds.

The "Root Hello Time" display box shows the interval between two configuration frames at the root bridge.

● Bridge Forward Delay [s] / Root Forward Delay [s]

New configuration information is not used immediately by a bridge. This ensures that operation is only started according to the new topology when all bridges have the required information.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

In the "Bridge Forward Delay" input box, enter the time before the new information is used.

The default value for this parameter is 15 seconds.

The "Root Forward Delay" display box shows the time until the new information is used at the root bridge.

● Bridge Max Age [s] / Root Max Age [s]

In the "Bridge Max Age" input box, enter the maximum "Age" that a received BPDU can have and be accepted as valid by the device.

The default value for this parameter is 20 seconds.

The "Root Max Age" display box shows the setting of the maximum age for a received

BPDU at the root bridge.

● Bridge Max Hop Count

The "Bridge Max Hop Count" input box is only visible if "MSTP" is enabled on the

"General" page and "MSTP" is set for "Protocol Compatibility".

Enter the number of MSTP nodes that a BPDU can pass through in the "Bridge Max Hop

Count" input box.

If an MSTP BPDU is received that has a hop count higher than the value configured here, it is discarded.

The default value for this parameter is 20.

The following boxes relate to the configuration of the CIST regional root bridge as can be derived from the MSTP frames.

The displayed data is only visible if "MSTP" is enabled on the "General" page and "MSTP" is set for "Protocol Compatibility".

● Regional Root Priority

The "Regional Root Priority" display box shows the priority of the CIST regional root bridge.

● Regional Root Address

The "Regional Root Address" display box shows the MAC address of the CIST regional root bridge.

● Regional Root Cost

The "Regional Root Cost" display box shows the path costs from this device to the CIST regional root bridge.

● Region Name

Enter the name of the MSTP region to which this device belongs in the "Region Name" input box.

As default, the MAC address of the device is entered here.

This value must be the same on all devices that belong to the same MSTP region.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

213

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● Region Version

Enter the version number of the MSTP region in which the device is located in the

"Region Version" input box.

This value must be the same on all devices that belong to the same MSTP region.

● Region Digest

The "Region Digest" display box shows a checksum that can be compared with the configurations of VLANs and MSTP instances of various devices.

Depending on the parameters that can be set on the device for MSTP, a specific checksum results. If several devices have the same checksum, the parameters are set identically.

Note

For devices to belong to the same MSTP region, "Region Name", "Region Version" and

"Region Digest" must be the same.

Syntax of the Command Line Interface

Table 4- 65 Multiple Spanning Tree Configuration - CLI\SWITCH\MSTP> info regvers

Command bprio [0...61440] hellotm [1 ... 10] fwddelay [4 ... 30] maxage [6 ... 40] maxhopcnt [6 ... 40] regname

Description

Shows the current spanning tree configuration.

Specifies the bridge priority for the IE switch.

Specifies the interval between two BPDUs in seconds.

Specifies the delay time for the effectiveness of configuration information (specified in seconds).

Specifies the maximum age for configuration information.

Specifies the number of MSTP nodes that a BPDU can pass through.

Specifies the name of the MSTP region to which the device belongs.

Specifies the version number of the MSTP region in which the device is located.

-

Comment

Administrator only.

Administrator only.

Administrator only.

Default value: 15 s

Administrator only.

Default value: 20 s

Administrator only.

Administrator only.

Administrator only.

214

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.15.2 CIST Port Parameters

Port-specific parameters

The "CIST Port Parameters" screen appears if you click the "CIST Ports" submenu.

With MSTP, CIST (Common and Internal Spanning Tree) is the instance used internally by the switch that, in principle, corresponds to an internal Rapid Spanning Tree.

This screen displays the current port parameters that were either set by the user or set as a result of the automatic functions of the IE switch.

Figure 4-90 CIST Port Parameters

When the page is called, the table displays the current status of the configuration of the port parameters.

The table has the following columns:

● Port

The "Port" column shows the ports to which the information relates.

● STP Status

The "STP Status" column shows whether spanning tree is enabled or disabled for the port.

● Priority

The "Priority" column shows the value of the priority.

If the path calculated by spanning tree is possible over several ports of a switch, the port with the highest priority (in other words the lowest value for the priority) is selected.

A value between 0 and 255 can be entered for the priority. The default value is 128.

If the priorities are the same, the path with the lowest path costs is selected.

● Admin Path Cost

Shows the value of the path costs to be used.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

215

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● Calc Path Cost

If the value for Admin Path Cost is > 0, this value is adopted as Calculated Path Cost.

If the value for Admin Path Cost = 0, the value for Calculated Path Cost is calculated automatically. The calculation of the path costs is largely based on the transmission speed.

The higher the achievable transmission speed is, the lower the value for Admin Path Cost should be.

Typical values for path costs with spanning tree:

– 1000 Mbps = 4

– 100 Mbps = 19

– 10 Mbps = 100

Typical values for path costs with rapid spanning tree:

– 1000 Mbps = 20,000

– 100 Mbps = 200,000

– 10 Mbps = 2,000,000

● State

The "State" column shows the current status of the port.

The following statuses are possible:

– disabled


The port only receives and is not involved in STP, MSTP and RSTP.

– blocking

The port receives BPDUs.

– listening

The port receives and sends BPDUs. The port is involved in the spanning tree algorithm.

– learning


Stage prior to the forwarding status, the port is actively learning the topology; in other words, the node addresses.

– forwarding


Following the reconfiguration time, the port is active again in the network; it receives and forwards data frames.

216

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● Role

The "Role" column specifies which role the port adopts:

– Root

The port has the lowest path costs from the device itself to the CIST regional root bridge.

– Designated

Via this port, a connected network segment reaches the CIST regional root bridge with minimum path costs.

– Alternate

The port is blocked and provides an alternative path to the CIST regional root bridge.

– Backup

The port is blocked and provides an alternative path to a collision domain that is already connected via a different port.

● FWD Transitions

The "FWD Transitions" column shows the number of changes from the listening status to the forwarding status.

● Edge

The "Edge" column shows whether or not an end device is connected to the port.

With an end device, an IE switch can switch over the port faster without taking into account spanning tree frames. If a spanning tree frame is received despite this setting, the port automatically changes to the no status.

– yes


An edge port is connected to this port.

– no

There is a Spanning Tree or Rapid Spanning Tree device at this port.

● P.t.P.

There is a point-to-point link when two RSTP-compliant network components are connected together over this port.

The following statuses are possible:

– Yes


There is a point-to-point link.

– No


There is no a point-to-point link.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

217

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Configuration of a port for Multiple Spanning Tree

If you click on a port name in the "Port" column of the "CIST Port Parameters" page, you open the "Spanning Tree Port Configuration" page.

Figure 4-91 Spanning Tree Port Configuration

The port-specific configuration of the CIST port parameters is also adopted for STP and

RSTP. This configuration is therefore the same in MSTP, RSTP and STP.

You will find the description of the individual page elements and CLI commands in the

section Spanning Tree Port Configuration (Page 208).

Syntax of the Command Line Interface

Table 4- 66 CIST Port Parameters - CLI\SWITCH\MSTP\CISTPORTS> info

Command stpport [<E|D> [ports]] prio [<0..255> [ports]] pathcost [<0..65535> [ports]] admedge [<T|F> [ports]]

Description

Shows an overview of the ports and the corresponding rapid spanning tree settings.

Enables/disables spanning tree for the relevant port.

Specifies the priority of the relevant port.

Specifies the path costs for the relevant port.

Specifies whether an end device or a switch is connected to the relevant port:

T

End device

• F

Switch

-

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

218

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Command autoedge [<T|F> [ports]] ptp [<A|T|F> [ports]]

Description

Specifies that a connected end device or connected switch is detected automatically at the relevant port:

• T

End device

F

Switch

If a (rapid) spanning tree protocol is received, the value "F" is displayed.

The point-to-point link establishes a direct link between two switches.

Specifies whether or not the relevant port is a PtP port:

• A

PtP is detected automatically. With full duplex, a PtP link is assumed, with half duplex no PtP link.

T

Specifies a PtP link, even though half duplex is being used.

• F

Specifies no PtP link if duplex is being used.

Comment

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

219

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.15.3 MSTP Instances Configuration

Multiple Spanning Tree configuration

The "MSTP Instances Configuration" screen appears if you click the "MST Instances" submenu.

In this screen, several VLANs can be managed in a LAN with their own Rapid Spanning

Trees.

220

Figure 4-92 MSTP Instances Configuration

The table has the following columns:

● MSTP Instance ID

The "MSTP Instance ID" display box shows the number of the MSTP instance.

● Root Address

The "Root Address" display box shows the MAC address of the MST instance regional root bridge.

● Root Path Cost

The "Root Path Cost" display box shows the path costs from the device to the MST instance regional root bridge.

● Root Priority

The "Root Priority" display box shows the priority of the MST instance regional root bridge.

● Bridge Priority

The "Bridge Priority" display box shows the priority of the device.

● VLAN ID

The "VLAN ID" display box shows the number of the VLAN.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Creating a new MSTP instance

1. Click the "New Entry" button in the "MSTP Instances Configuration" window.

The "MSTP Instance Configuration" window opens.

Figure 4-93 MSTP Instance Configuration

2. Enter the number of the MSTP instance in the "MSTP Instance ID" input box.

Permitted values: 1 to 16

3. Enter the bridge priority in the "Bridge Priority" input box.

The value for the bridge priority is an integral multiple of 4096 with a range of values from

0 to 61440.

4. Enter the VLAN ID in the "VLAN ID" input box.

Here, you can also specify ranges with Start ID, "-", End ID. Several ranges or IDs are separated by ",".

Permitted values: 1 to 4094

5. To store the settings, click the "Set Values" button.

6. To return from Current Entries to the "MSTP Instances Configuration" screen, click the

"Current Entries" button.

Deleting an MSTP instance

1. In the "MSTP Instances Configuration" window, click on the required ID in the "MSTP

Instance ID" column.

The "MSTP Instances Configuration" window appears.

2. To delete the MSTP instance, click the "Delete" button.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

221

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 67 MSTP Instances Configuration - CLI\SWITCH\MSTP\MSTI>

MSTP Instance Configuration - CLI\SWITCH\MSTP\MSTI>

Command info add <MST ID> <brgPrio>

<vlans (1-4094)> delete <MST ID>

Description

Shows information on the MSTP instances.

Generates and modifies an MSTP instance.

Deletes the MSTP instance.

-

Comment

Administrator only.

Administrator only.

4.5.15.4 Multiple Spanning Tree Port Configuration

(Multiple) Spanning Tree Ports

The "MSTP Ports" screen appears if you click the "MST Ports" submenu.

In this screen, you set the parameters for the ports of the configured Multiple Spanning Tree instances.

222

Figure 4-94 MSTP Ports

The page contains the following box:

● MSTP Instance ID

In the "MSTP Instance ID" drop-down list, select the ID of the MSTP instance.

The table has the following columns:

● Port

The "Port" column shows the ports to which the information relates.

● MSTP Instance ID

The "MSTP Instance ID" column shows the number of the MSTP instance.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● MSTP Status

The "MSTP Status" column shows whether multiple spanning tree is enabled or disabled for the port.

● Priority

The "Priority" column shows the value of the priority.

If the path calculated by spanning tree is possible over several ports of a switch, the port with the highest priority (in other words the lowest value for the priority) is selected.

A value from 0 to 255 can be entered for the priority. The default value is 128.

● Admin Path Cost

The "Admin Path Cost " column, shows the value for the path costs to be used.

● Calc Path Cost

If the value for Admin Path Cost is > 0, this value is adopted as Calculated Path Cost.

If the value for Admin Path Cost = 0, the value for Calculated Path Cost is calculated automatically. The calculation of the path costs is largely based on the transmission speed.

The higher the achievable transmission speed is, the lower the value for Admin Path Cost should be.

Typical values for path costs with spanning tree:

– 1000 Mbps = 4

– 100 Mbps = 19

– 10 Mbps = 100

Typical values for path costs with rapid spanning tree:

– 1000 Mbps = 20,000

– 100 Mbps = 200,000

– 10 Mbps = 2,000,000

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

223

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● State

The "State" column shows the current status of the port.

The following statuses are possible:

– disabled


The port only receives and is not involved in STP, MSTP and RSTP.

– blocking

The port receives BPDUs.

– listening

The port receives and sends BPDUs. The port is involved in the spanning tree algorithm.

– learning


Stage prior to the forwarding status, the port is actively learning the topology; in other words, the node addresses.

– forwarding


Following the reconfiguration time, the port is active again in the network; it receives and forwards data frames.

● Role

The "Role" column specifies which role the port adopts:

The following values are possible:

– Root

The port has the lowest path costs from the device itself to the regional root bridge of the MST instance.

– Designated

Via this port, a connected network segment reaches the MSTI regional root bridge with minimum path costs.

– Alternate

The port is blocked and provides an alternative path to the MSTI regional root bridge.

– Backup

The port is blocked and provides an alternative path to a collision domain that is already connected via a different port.

224

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

(Multiple) Spanning Tree Port Configuration

If you click on a port name in the "Port" column of the "MSTP Ports" page, you open the

"(Multiple) Spanning Tree Port Configuration" page:

Figure 4-95 Multiple Spanning Tree Port Configuration

Port

The "Port" display box shows the selected port.

(R/M)STP enabled

Select this check box if you want the port to use the (multiple) spanning tree protocol.

MSTP Instance ID

The "MSTP Instance ID" display box shows the MSTP instance ID of the selected port.

Priority

Enter a value for the port priority in the "Priority" input box.

Permitted values: 0 to 255

Admin Path Cost

Here, the values for the past costs to be used per port and MST instance can be set manually.

Calculated Path Cost

If the value for Admin Path Cost is > 0, this value is adopted as Calculated Path Cost.

If the value for Admin Path Cost = 0, the value for Calculated Path Cost is calculated automatically. The calculation of the path costs is largely based on the transmission speed.

The higher the achievable transmission speed is, the lower the value for Admin Path Cost should be.

Typical values for path costs with spanning tree:

● 1000 Mbps = 4

● 100 Mbps = 19

● 10 Mbps = 100

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

225

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Typical values for path costs with rapid spanning tree:

● 1000 Mbps = 20,000

● 100 Mbps = 200,000

● 10 Mbps = 2,000,000

Syntax of the Command Line Interface

Table 4- 68 MSTP Ports/Multiple Spanning Tree Port Configuration -

CLI\SWITCH\MSTP\MSTPORTS>

Command info <MST ID>

Description

Shows port information of an MSTP instance.

-

Comment

Specifies the bridge priority of the port. Administrator only. prio <MST ID> <0-240>

<ports> pathcost <MST-ID> <1-

200000000>

Specifies the path costs of the port in an instance.

Administrator only.

4.5.16 QoS

4.5.16.1

QoS

QoS Configuration

Different applications make different demands on networks. For pure file transfer, the overall throughput is decisive, while the individual latency and loss rate is less significant. For realtime communication, for example Voice over IP, on the other hand, latency, jitter and the loss rate are much more important because they directly affect understandability.

Transmission priorities

The X-300/400 IE switches support CoS to Queue and DSCP to Queue Mapping, with which packets from different sources with different priority can be forwarded. To allow downward compatibility with earlier firmware versions, DSCP Mapping is disabled in the default setting.

226

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Overview

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

The content of this page depends on your device.

Figure 4-96 X-300 QoS Configuration

DSCP Mapping

Enables/disables DSCP to Queue Mapping

The following settings exist only for X-300 IE switches:

Broadcast Priority

Specify the priority with which broadcast frames are sent.

Agent Priority

Specify the priority with which agent frames are sent.

Scheduling Mode

● Strict Queueing

As long as there are frames with high priority in the queue, only these high-priority frames are processed.

● Weighted Fair Queueing (SCALANCE X-300 only)

Even if there are frames with high priority in the queue, frames with a lower priority will be processed occasionally.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

227

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 69 QoS Configuration - CLI\SWITCH\QOS>

Command dscpmap [E|D] bcprio [noforce : <0-7>] agentprio [noforce : <0-7>] sched [mode]

Description

Enables/disables DSCP to Queue Mapping.

Specify the priority with which broadcast frames are sent.

Specify the priority with which agent frames are sent.

Specifies the scheduling mode.

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

4.5.16.2

CoS Queue

CoS to Queue Mapping

Here, CoS priorities are assigned to certain traffic queues.

Figure 4-97 CoS to Queue Mapping

CoS

The order of CoS priorities of the incoming packets.

Queue

The traffic-forwarding queue (send priority) that is assigned the CoS priority.

228

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 70 QOS Configuration - CLI\SWITCH\QOS>

Command cos [<0..3> <0..7>]

Description

Assigns CoS priorities to certain traffic queues:

Parameter 1

Queue

• Parameter 2

CoS priority

Comment

Administrator only.

4.5.16.3 DSCP to Queue Mapping

DSCP Queue

Here, DSCP settings are assigned to various traffic queues.

Figure 4-98 DSCP to Queue Mapping

DSCP

The order of DSCP priorities of the incoming packets.

Queue

The traffic-forwarding queue (send priority) that is assigned the DSCP value.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

229

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 71 QoS Configuration - CLI\SWITCH\QOS>

Command dscp [<0..3> <0..63>]

Description

Assigns DSCP settings to certain traffic queues:

Parameter 1

Queue

• Parameter 2

DSCP value

Comment

Administrator only.

4.5.17

Applications

LLDP Configuration

PROFINET uses the LLDP protocol for topology diagnostics. In the default setting, LLDP is enabled for all ports; in other words, LLDP frames are sent and received on all ports. With this function, you have the option of enabling or disabling sending and/or receiving per port.

Figure 4-99 LLDP Configuration

Slot / Port

Here, you select the ports that support reception and/or sending of LLDP frames

:

Rx-only: This port can only receive LLDP frames.

230

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Tx-only: This port can only send LLDP frames.

Tx and Rx: This port can receive and send LLDP frames.

Disabled: This port can neither receive nor send LLDP frames.

Syntax of the Command Line Interface

Table 4- 72 Current Multicast Groups - CLI\SWITCH\LLDP>

Command info lldpport <mode> [ports]

Description

Displays the current LLDP settings.

Changes the LLDP settings for a port. If no port is specified, all ports are changed.

The <mode> parameter can have the following values:

• rx receive only

• tx send only

• e receive and send

• d neither receive nor send

Comment

-

Administrator only.

4.5.18 Fiber Monitoring Protocol

Requirements

● To be able to use the Fiber Monitoring Protocol (FMP), enable LLDP. The FMP information is appended to the LLDP packets.

● You can only use the Fiber Monitoring Protocol (FMP) with transceivers capable of diagnostics. Devices and modules with transceivers capable of diagnostics have the supplement "FM" in the name.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

231

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Monitoring optical links

With FMP, you can monitor optical links.

If you enable FMP on an optical port, diagnostics information is sent via the port. In addition to sending, there is also a check to establish whether information is being received.

Regardless of whether the IE switch receives diagnostics information, it monitors the received power and compares it with selectable power limits.

If you connect two IE switches via optical ports with FMP enabled, they exchange their diagnostics information. This also allows a power loss to be calculated. The power loss is also compared with selectable power limits.

If the value of the received power or the power loss falls below a specified limit, an event is triggered. In "Agent > Event Configuration", you can specify how the IE switch indicates the event. In "X-300 > Fault Mask", you can also specify whether or not an error should be signaled.

Status of the ports

This page shows the current port parameter settings made by the user.

232

Figure 4-100 Fiber Monitoring Protocol Port Status

Port

Shows the available optical ports.

State

FMP enabled or disabled

Rx Power State

● disabled

FMP is disabled.

● ok

The value for the received power of the optical link is OK.

● maintenance required

Check the link.

An event is triggered.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● maintenance demanded

The link needs to be checked.

An event is triggered.

● link down

The connection is interrupted.

Rx Power [dBm]

Shows the current value of the received power.

The value can have a tolerance of +/- 3 dB.

Power loss State

To be able to monitor the power loss of the connection, the port requires a link to another port with FMP enabled.

● disabled

FMP is disabled.

● ok

The value for the power loss of the optical link is OK.

● maintenance required

Check the link.

An event is triggered.

● maintenance demanded

The link needs to be checked.

An event is triggered.

● idle

The port has no connection to another port with FMP enabled.

If no diagnostics information has been received for 5 cycles, the connection counts as being interrupted. A cycle lasts 5 seconds.

Power loss [dB]

Shows the current value of the power loss.

The value can have a tolerance of +/- 3 dB.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

233

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Setting the power limits

If you click on a port name in the "Port" column of the "Fiber Monitoring Protocol Port Status" page, you open the "FMP Port Configuration" page:

234

Figure 4-101 FM Port Configuration

Port

Shows the available optical ports.

Fiber Monitoring Protocol (FMP) enabled

Enable or disable FMP.

Rx Power Maintenance

● Required

Enter the value at which you want to be informed of deterioration of the received power the first time.

● Demanded

Enter the value at which you want to be informed of deterioration of the received power the second time.

Power loss Maintenance

● Required

Enter the value at which you want to be informed about the power loss of the connection the first time.

● Demanded

Enter the value at which you want to be informed about the power loss of the connection the second time.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 73 Fiber Monitoring Protocol - CLI\SWITCH\FMP>

Command info limit [rx | loss] [req | dem] [<port>] [<limit>]

Description

Shows the FMP configuration.

Specifies the limits for the received power and the power loss per port:

• rx

Received power

• loss

Power loss

• req

First notification

• dem

Second notification

• port

Port for which the settings apply

• limit

Value for the limit in 1/10 dBm (received power) or 1/10 dB (power loss) enable <D|E> [<Port>] Enables / disables FMP for the specified port.

Comment

Administrator only

Administrator only

Table 4- 74 Fiber Monitoring - CLI\SWITCH\FM>

Command info

Description

Shows general information about the transceivers, for example model, serial number and current values, e.g. received and transmit power.

Comment

4.5.19

Applications

DCP Configuration

The DCP protocol is used by STEP 7 and the PST Tool for configuration and diagnostics of

IE switches. In the factory settings, DCP is enabled on all ports; in other words, DCP frames are forwarded at all ports. With this option, you can disable the sending of DCP multicast frames per port, for example to prevent individual parts of the network from being configured with the PST Tool or to divide the full network into smaller subnets for configuration and diagnostics.

Note

This function has no influence on the receipt of DCP frames

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

235

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Figure 4-102 DCP Configuration

Here, you select the ports that will support sending of DCP frames:

Rx-only: This port does not send any DCP multicast frames. The DCP communication using unicasts is not filtered.

Tx and Rx: This port sends all DCP frames.

Syntax of the Command Line Interface

Table 4- 75 Current Multicast Groups - CLI\SWITCH\DCP>

Command info dcpport <mode> [ports]

Description

Displays the current DCP settings.

Changes the LLDP settings for a port. If no port is specified, all ports are changed.

The <mode> parameter can have the following values:

• rx

The port receives all DCP frames, but only forwards DCP unicast frames.

• e

The port receives and sends all DCP frames.

Comment

-

Administrator only.

236

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.20 DHCP Relay Agent

4.5.20.1 DHCP Relay Agent Configuration

Assigning an IP address to an end device

The DHCP Relay function intercedes between a DHCP server and an end device connected to a specific port to assign an IP address to this end device. To achieve this the IE switch forwards the port number of the end device along with the DHCP request to the DHCP server.

Specifying the DHCP server IP addresses

You can specify up to 4 DHCP server IP addresses for the DHCP relay agent, see also the

"Switch Configuration" menu item.

For every DHCP server, you can configure the ports and VLANs for which it is responsible,

see "DHCP Relay Agent Port Configuration (Page 239)".

When a DHCP request is received, the IE switch initially checks whether the request matches the port/VLAN configuration of DHCP server 1.

If the request matches, the IE switch forwards the DHCP request and the DHCP server list is not searched through any further.

If the request does not match, the IE switch compares the request with the configurations of

DHCP servers 2, 3 and 4.

If the incoming DHCP request does not match any DHCP server, you have the option of having the request forwarded as a broadcast.

You also have the option of restricting the comparison to reachable DHCP servers.

Note

The DHCP relay agent is only enabled if the "DHCP Option 82" option is enabled in the

"Switch Configuration" menu.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

237

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

238

Figure 4-103 DHCP Relay Agent Configuration

"IP Address"

Enter the addresses of the DHCP servers to which the IE Switch will forward DHCP requests.

VLANs

Enter the number of VLANs in which the port is a member.

You can enter several individual VLANs as well as VLAN ranges separated by commas, e.g.

1,5,10-12.

Relay Agent Remote ID

Here, you can select whether or not the relay agent uses its IP address from the agent configuration or its MAC address as the remote ID.

Additional Server Settings

● Check for Server Reachability

If you enable this option, the reachability of the DHCP server is checked every 30 s. If a server is unreachable, it is ignored when the server list is processed.

● Enable Broadcast Forwarding

If you enable this option, a DHCP request is forwarded as a broadcast if there is no matching entry in the DHCP server list.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 76 DHCP Relay Agent Configuration - CLI\SWITCH\RELAGENT> info

Command server <number>

[IP][VLANs]

Description

Shows the current settings of the DHCP relay agent.

Specifies the IP address and the VLANs of the DHCP server <number>. remoteid [IP|MAC] bcastfwd [E|D]

Specifies the relay agent remote ID

Enables/disables the "Enable Broadcast

Forwarding" function. reachchk [E|D] Enables/disables the "Check for Server

Reachability" function.

-

Comment

Administrator only.

Default value: 0.0.0.0

Administrator only.

Administrator only.

Administrator only.

4.5.20.2 DHCP Relay Agent Port Configuration

DHCP Relay Agent Port Parameters

This page displays the currently configured port-specific parameters of the DHCP relay agent.

Figure 4-104 DHCP Relay Agent Port Parameters

The three columns of the port table show the following information:

Port

Specifies the slot and port to which the information relates. The name of the link aggregation is shown here if link aggregations are configured.

DHCP Server Selection

Indicates which DHCP servers are responsible for this port.

Neighborhood Detection

Shows whether or not detection of neighbors is enabled for this port.

Only Neighbors

Shows whether the DHCP relay agent functions only for direct neighbors on this port.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

239

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Configuration of a port for the DHCP relay agent

If you now click on a port name in the first column of the port table, you open the "DHCP

Relay Agent Port Configuration" page.

Figure 4-105 DHCP Relay Agent Configuration

Port

Specifies the slot and port to which the information relates. The name of the link aggregation is shown here if link aggregations are configured.

DHCP Server Selection

Enable the DHCP servers that will be responsible for the port.

Neighborhood Detection enabled

Enable this option if there should be an attempt to assign DHCP requests to a neighbor before forwarding.

Only detected Neighbors

Enable this option if you only want DHCP requests to be forwarded if they originate from detected neighbors.

Syntax of the Command Line Interface

Table 4- 77 DHCP Relay Agent Port Parameters - CLI\SWITCH\RELAGENT\PORTS> info

Command nbdetect [<E|D> [ports]]

Description

Show all the port parameters of the

DHCP relay agent

Enables/disables the "Neighborhood

Detection enabled" function.

-

Comment

Administrator only.

240

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Command onlynb [<E|D> [ports]] sel [<S1|S2|S3|S4|all> <E|D>

[ports]]

Description

Enables/disables the "Only detected

Neighbors" function.

S1, S2, S3, S4

Enables/disables the DHCP server that will be responsible for the port. all

Enables / disables the DHCP servers

S1 to +S4.

Comment

Administrator only.

Administrator only.

4.5.21

Introduction

Precision Time Protocol (PTP) complying with IEEE 1588

The Precision Time Protocol (PTP) complying with IEEE 1588v2 allows the time-of-day synchronization of devices (time slaves) connected to the ports of a SCALANCE X300.

These devices forward the synchronization frames through the network using the

"Transparent Clock" (TC) mechanism. The connection mechanisms "end-to-end" and "peerto-peer" are supported.

Note

PTP is supported only by the following devices of the SCALANCE X300 product line:

The device X308-2M.

All devices of the X300 EEC product group.

All devices of the XR300 product group.

All devices of the XR300 EEC product group.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

241

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Delay request response mechanism

242

A device in the network takes over the function of the time master (Best Master Clock, BMC) that sets the reference time for all other devices. The master sends synchronization messages cyclically, in the example shown at time t

0

. The time t

1

when this message arrived is stored by the slave. In a second message (follow-up message), the master informs the slave of the exact time t

0

when the synchronization message was sent.

However, with only these two values, neither the deviation of the slave clock nor the message delay time can be calculated. For this reason, the slave then sends a delay request message to the master and stores the time t

2

at which this message was sent. Using a delay response message, the master informs the slave of the time t

3

at which it received this message.

In the following calculations, it is assumed that the transfer of a message from the master to the slave takes exactly the same amount of time as the transfer of a message in the opposite direction. This is the situation on a direct cable connection.

From the calculated values for Δ

Sync

and Δ

DelReq

the difference between the time of receipt and time of sending is obtained:

Δ

Sync

= t

1

- t

0

Δ

DelReq

= t

3

- t

2

If the time of the slave time deviates from the time of the master by the amount Δ t

, these two calculations still do not provide the actual value for the message delay time Δ

D

because the send and receive times are based on different reference systems. The simplest way to calculate the actual message delay time Δ

D

is to take the average value:

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Example

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Δ

D

= (Δ

Sync

+ Δ

DelReq

) / 2

The deviation of the slave clock Δ t

results when Δ

Sync

is reduced by the actual message delay time Δ

D

:

Δ t

= Δ

Sync

- Δ

D

If Δ t

is positive, the clock of the slave is "fast". If Δ t

has a negative value, the clock of slave is

"slow".

At time t

0

= 14 μs, the master sends a sync message that arrives at the slave at time t

1

= 28

μs. The value for Δ

Sync

is calculated from this:

Δ

Sync

= t

1

- t

0

= 28 μs - 14 μs = 14 μs

If the clocks of the master and slave were exactly synchronized, the message delay time would be 14 µs which cannot however be concluded based on this single measurement.

For this reason, the slave sends a delay request message at time t

2

= 40 μs that arrives at the master at time t

3

= 38 μs. The value for Δ

DelReq

is the difference between the time of receipt and time of sending this message:

Δ

DelReq

= t

3

- t

2

= 38 μs - 40 μs = -2 μs

The actual message delay time Δ

D

is the average value of Δ

Sync

and Δ

DelReq

because this eliminates the time deviation of the two device clocks:

Δ

D

= (Δ

Sync

+ Δ

DelReq

) / 2

Δ

D

= (14 μs - 2 μs) / 2 = 6 μs

The deviation of the slave clock is

Δ t

= Δ

Sync

- Δ

D

= 14 μs - 6 μs = 8 μs

The slave clock is therefore "fast" and needs to be corrected by 8 μs.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

243

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Peer delay mechanism

The aim of the peer delay mechanism is to calculate the delay time of a message between two ports of PTP-compliant devices. In contrast to a delay request response message that is transported between the slave and master also over several network nodes, peer delay messages are only exchanged with the relevant neighbor node, hence the name "peer delay".

The delay requester sends a peer delay request message to a neighboring node, the delay responder, and stores the time t

0

at which this message was sent. The delay responder then immediately sends back a peer delay response message. In the correction field of the peer delay response follow-up message, it enters the time difference between the send time t

2

of the peer delay response message and the time t

1

when the peer delay request message was received:

Δ

R

= t

2

- t

1

At the time of receipt t

3

of the peer delay response message, the delay requester then has all the data required to calculate the message delay time to the neighboring node:

Δ

PDelReq

= Δ

PDelRes

= ( t

3

- t

0

- Δ

R

) / 2

To calculate the deviation of a slave clock, sync messages and follow-up messages must be evaluated with the peer delay mechanism as well. The section "Peer-to-peer transparent clock" contains a description of the complete synchronization cycle.

Synchronization regardless of the topology of the network

The calculations shown in the sections above apply only on condition that the message exchange is via a direct connecting cable between the two communications partners.

Normally, however, networks consist of several switches that have to transport the time of day messages between the time master and slave. How the synchronization is acheived via several switches depends on the device category to which a switches are assigned

(boundary clock or transparent clock) and which method is used to calculate the message delay time (delay request response mechanism or peer delay mechanism).

244

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

The mechanism used to handle PTP messages must be configured for each device. Both delay mechanisms cannot be used at the same time in one network section. All the devices within a section must be configured for either the delay request response mechanism or the peer delay mechanism. All the switches involved should support PTP to achieve precise time-of-day synchronization. A switch that does not support PTP cannot guarantee constant message delay times between the master and slave due to queuing.

Boundary clock

This switch adopts the role of slave at one port and synchronizes itself with the time master.

For the other connected devices, it adopts the function of master and sends synchronization frames cyclically to these nodes. In a network with several switches and end devices, the

BMC algorithm handles the task of selecting the most precise clock in the network automatically. A master-slave hierarchy results in which each switch synchronizes itself with the neighboring switch in the direction of the BMC.

Synchronization mechanisms with boundary clocks

If a boundary clock is configured for the delay request response mechanism, it sends delay request messages to the time master and sync and follow-up messages to the slaves.

With the peer delay mechanism, the boundary clock calculates the message delay time to the neighboring device for each port. It synchronizes itself by evaluating the sync and followup messages of the master. The boundary clock allows the synchronization of the slaves by sending sync and follow-up messages.

Transparent clock

A transparent clock does not synchronize itself with a time master but forwards PTP messages between the time master and the slaves to be synchronized. Compared with the boundary clock, the transplant clock allows more precise synchronization because the error in the synchronization of the boundary clock is omitted. With several switches in a row in a linear bus or ring topology, it is therefore preferable to configure these as transparent clocks.

Even when there are topology changes in the network, the transparent clock still provides a more precise synchronization than the boundary clock. Regardless of its position in the topology, the function of the transparent clock is to forward synchronization frames. With a boundary clock, the assignments of master and slave to the individual ports and therefore to the entire synchronization hierarchy change. It can take several seconds before all the devices have resynchronized with the time master.

Synchronization mechanisms with transparent clocks

When calculating the actual message delay times over several network nodes, the time required for processing a message in a transparent clock must also be taken into account.

This means that the transparent clock must calculate the time between receiving a message at the input port and forwarding it at the output port and send this value to the slave. To this end, there is a correction field in the PTP message in which the switches can make appropriate entries. The slave takes this information into account in the calculation of the message delay time.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

245

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

How a transparent clock handles this correction information depends on the delay mechanism that was configured. With the delay request response mechanism, there is an end-to-end transparent clock, with peer delay mechanism, there is a peer-to peer transparent clock.

End-to-end transparent clock

246

In the example shown, the time master sends a synchronization message. The time Δ

TC between receiving this message at the input port and forwarding it at the output port is entered in the correction field of the follow-up message by the transparent clock. The time at which this is sent t

0

is also received by the slave with the follow-up message and it can use this as described above to make the necessary calculations.

If a message on the way to a slave is forwarded by other transparent clocks, each device adds its time Δ

TC

to the content of the correction field of the follow-up message. When the synchronization message arrives at the slave, the correction field contains the sum of all the times required to process the messages in the transparent clocks. The device also handles the delay request messages in the same way.

The slave corrects the message delay time by the value Δ

TC

or, with several transparent clocks, by the sum of all the Δ

TC

values and can synchronize its time of day as described in the section "Delay request response mechanism".

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Peer-to-peer transparent clock

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

With the peer delay mechanism, each device calculates the delay time of a message to the neighboring device for its ports. The transparent clock obtains the message delay time L1 to the master, the slave obtains the value L2 for the message delay time to the transparent clock.

The processing of the synchronization message by the transparent clock takes a time of Δ

TC

.

The transparent clock enters the sum of L1 and Δ

TC

in the correction field of the follow-up message. The slave then adds the content of the correction field to the message delay time

L2 for the input port via which the synchronization message was received. In this way it obtains the delay time of a message between master and slave.

If a message on the way to the slave is forwarded by several transparent clocks, each transparent clock changes the content of the correction field of the follow-up message: The message delay time to the neighbor via which the synchronization message was received, and the time Δ

TC

for processing the message are added to the content of the correction field.

One particular advantage of the peer-to-peer transparent clock is that the message delay times to the neighboring device are also calculated for blocked ports. When the network is reconfigured, this means that the slave has correct message delay times available very quickly.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

247

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.22 Configuration of the Precision Time Protocol with the WBM

IEEE 1588 with SCALANCE devices

Note

The IEEE 1588 menu item is available with the following devices as of firmware version

3.5.0:

• SCALANCE X308-2M

SCALANCE X308-2M PoE

• SCALANCE X302-7EEC

SCALANCE X307-2EEC

• SCALANCE XR324-12M

SCALANCE XR324-4M PoE

• SCALANCE XR324-4M EEC

The synchronization frames are forwarded through the network using to the "transparent clock" mechanism and the correction mechanisms "end to end" and "peer-to-peer" are supported.

The SCALANCE devices operate as a "two-step clock". They support the use both of onestep clocks as well as two-step clocks in the network.

The IEEE 1588v2 standard defines mechanisms with which highly precise time of day synchronization of devices in a network can be achieved. The listed SCALANCE devices also support time-of-day synchronization according to IEEE 1588v2 with appropriate hardware. The IEEE 1588v2 functionality is disabled on these devices when they are supplied and following a "Reset to factory default". To be able to use IEEE 1588v2, enable this function and configure every port that is on the synchronization path as well as ports that are blocked due to redundancy mechanisms. IEEE 1588v2 can also be used with redundancy mechanisms in the ring such as HRP, standby linking of rings, MRP and RSTP.

The following sections describe the configuration options of Web Based Management.

1588 Configuration

On this page, you specify how the device will process PTP messages.

Figure 4-106 1588 Configuration

248

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

1588 Mode

You can make the following settings:

● off

The device does not process any PTP messages. PTP messages are, however, forwarded according to the rules of the switch.

● Transparent Clock

The device adopts the function of a transparent clock and forwards PTP messages to other nodes while at the same time making entries in the correction field of the PTP message.

1588 Transparent Clock Configuration

Figure 4-107 1588 transparent clock

Delay Mechanism

Specify the delay mechanism the device will work with:

● End to End (delay request response mechanism will be used)

● Peer to Peer (peer delay mechanism will be used)

Domain Number

Enter the domain number for the device here. The device ignores PTP messages with a different domain number. A SCALANCE device can only be assigned to one synchronization domain.

Vlan ID

Here, enter the Vlan ID of the device with the "Transparent Clock" function.

Vlan Prio

Enter the priority of the VLAN here.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

249

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

1588 Transparent Clock Port Parameters

Figure 4-108 1588 Transparent Clock Port Parameters

The table shows detailed information about the individual ports:

Port

The port number. With modular devices, the slot number and port number are displayed separated by a dot. If you click on a port number, the corresponding page "1588 Transparent

Clock Port Configuration" is displayed.

Enabled

The port status. The following entries are possible:

● disabled

The port is not involved in PTP.

● enabled

The port processes PTP messages.

Faulty Flag

The error status relating to PTP.

● true

An error occurred.

● false

No error has occurred on this port.

Transport Mechanism

Either "Ethernet" or "UDP IPv4".

250

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

1588 Transparent Clock Port Configuration

You open this page if you click on a port number in the table on the "Transparent Clock Port

Parameters" page.

Figure 4-109 1588 Transparent Clock Port Configuration

Port

The port number. With modular devices, the slot number and port number are displayed separated by a dot.

Transparent Clock enabled

Select this check box one if you want the device to process PTP messages via this port.

Transport Mechanism

Choose how this port will handle PTP message data traffic. You can make different settings for the ports of a device, however, the relevant communications partner must support the selected transport mechanism. The following settings are possible:

● Ethernet

● UDP IPv4

Ports

If you click this button, you change to the "Transport Clock Port Parameters" page.

Previous Port and Next Port

If you click this button, you change directly to the configuration page of the previous or next port without needing to call the "Transparent Clock Port Parameters" page.

4.5.23 Configuration of the Precision Time Protocol with the CLI

CLI\SWITCH\1588>

Command mode [off|TC]

Description

Enables/disables the Precision Time Protocol for the device and specifies how the device will react in terms of PTP: off The device does not process any PTP messages.

TC Transparent clock

Comment

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

251

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

TC

Command Description

Opens the menu for configuring a device as a transparent clock.

Comment

Administrator only.

CLI\SWITCH\1588\TC>

Command delaymec [E2E|P2P] domainnb [number] vlanid [VID] vlanprio [<0..7>]

PORTS

CLI\SWITCH\1588\TC\PORTS>

Command tcport <E|D> [ports]

Description Comment

Specifies the delay mechanism for the device: Administrator only.

E2E End-to-end

(delay request response mechanism will be used).

P2P Peer-to-peer

(peer delay mechanism will be used).

Administrator only. Specifies the identification number for the time domain. Only devices within the domain are synchronized, PTP messages with a different domain number are discarded.

Specifies the VLAN ID.

Specifies the VLAN priority.

Opens the PORTS menu.

Administrator only.

Administrator only.

Administrator only. transmec <IPv4|ETH>

[ports]

Description

Enables/disables the specified ports.

A range of ports is specified with a hyphen.

Several ports are separated by blanks or commas.

Specifies the protocol for transferring the PTP messages. This protocol must also be supported by the communications partner of the port.

IPv4 Internet Protocol (Layer 3)

ETH Ethernet (Layer 2)

Comment

Administrator only.

Administrator only.

252

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.24 Port Diagnostics

4.5.24.1 Cable tester (SCALANCE X-300/X408-2)

Switch cable tester

With this dialog, each individual Ethernet port can run independent fault diagnostics on the cable. This allows short-circuits and cable breaks to be localized.

Note

Please note that this test is permitted only when no data connection is established on the port to be tested.

Figure 4-110 Cable tester

Port

The port to be tested is specified here.

Run Test

This button activates the test.

Pair

Displays the pair of wires in the cable.

Pairs 4-5 and 7-8 are not used with Fast Ethernet.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

253

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Status

Shows the status of the line.

Distance

Displays the distance to the cable end, a cable break or short-circuit.

Syntax of the Command Line Interface

Table 4- 78 Cable Tester - CLI\SWITCH\PORTDIAG\CABLETESTER>

Command runtest [Ports]

Description

Tests the specified ports.

If no port is specified, all are tested.

Comment

Administrator only.

4.5.24.2

Requirement

POF ports

The page for diagnostics of fiber-optic cable only shows correct link power margins when plastic optical fiber (POF) is used. If polymer cladded fiber (PCF) is used, diagnostics is not possible.

You can only use POF diagnostics with transceivers capable of diagnostics. Devices and modules with transceivers capable of diagnostics have the supplement "P" in the name.

Plastic Optical Fiber Management

This page shows the diagnostics data for interfaces with plastic FO cables.

254

Figure 4-111 POF Management

Here, you can see the currently available link power margin as a numerical value for each

POF port.

The link power margin indicates the attenuation on the connection between sender and receiver that can be overcome. The higher the link power margin, the higher the attenuation can be while maintaining a functioning link. If the link power margin sinks, the attenuation

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu has increased, for example due to aging or a defect. The longer the cable being used, the lower the link power margin available.

The diagnostics page shown below appears if you click on one of the displayed ports. It displays information on the available link power margin over time.

Figure 4-112 POF fiber-optic diagnostics

The vertical axis shows the available link power margin in dB. The measured values only have the required accuracy to be able to show the existing link power margin correctly in the range from 0 dB to 6 dB.

The horizontal axis shows the time since the IE switch started up relative to the current time of day and the current date. Date and time information are adopted from the PC on which the

Web browser in use is running.

The diagram itself is divided into the following areas:

● White

There is an adequate link power margin for problem-free operation. When the X-200 IE switch is installed, the link power margin should be in this range.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

255

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

● Yellow

If the link power margin enters this range, maintenance is necessary. The boundary of the yellow area is at a link power margin of 2 dB. To ensure long-term functionality of the system, the maintenance should be performed. If the link power margin is in the yellow area, an event is triggered.

● Orange

If the link power margin enters the orange range, urgent maintenance is necessary. The boundary of the orange area is at a link power margin of 0 dB. If the link power margin is in the orange range, an event is triggered and the FO LED of the relevant port lights up.

4.5.24.3

Requirement

POF Diagnostics

On this page, you run independent error diagnostics for each individual POF port. This test is performed without needing to remove the cable, connect a cable tester or install a loopback module at the other end.

You can only use POF diagnostics with transceivers capable of diagnostics. Devices and modules with transceivers capable of diagnostics have the supplement "P" in the name.

POF Port Diagnostics

256

Port

The POF port to be tested is specified here.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

The following is displayed depending on the selection:

● Name (read only)

The name of the POF port

● Model (read only)

The POF module used

● Serial (read-only)

The serial number of the POF module

The table is structured so that the latest (Current), the lowest (Low) and the highest (High) value is always shown for the following parameters.

Temperature (read only)

The temperature of the port.

Voltage (read only)

The voltage applied to the port.

Current (read only)

The current with which a device connected to this port is supplied.

Rx Power (read only)

The received power of the port.

Tx Power (read only)

The transmit power of the port.

Syntax of the Command Line Interface

Table 4- 79 SFPDIAGNOSTIC - CLI\SWITCH\PORTDIAG\POFDIAG>

Command details [port]

Description

Tests the specified POF port.

Comment

Administrator only.

4.5.24.4

Requirement

FM Diagnostics

On this page, you run independent error diagnostics for each individual port. This test is performed without needing to remove the cable, connect a cable tester or install a loopback module at the other end.

You can only use FMP diagnostics with transceivers capable of diagnostics. Devices and modules with transceivers capable of diagnostics have the supplement "FM" in the name.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

257

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

FM Port Diagnostics

258

Port

The port to be tested is specified here.

The following is displayed depending on the selection:

● Name (read only)

The name of the port

● Model (read only)

The FM transceiver used

● Serial (read-only)

The serial number of the FM transceiver

The table is structured so that the latest (Current), the lowest (Low) and the highest (High) value is always shown for the following parameters.

Temperature (read only)

The temperature of the port.

Voltage (read only)

The voltage applied to the port.

Current (read only)

The current with which a device connected to this port is supplied.

Rx Power (read only)

The received power of the port.

Tx Power (read only)

The transmit power of the port.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 80 SFPDIAGNOSTIC - CLI\SWITCH\PORTDIAG\FMDIAG>

Command details [port]

Description

Tests the specified port.

Comment

Administrator only.

4.5.24.5

Requirement

SFP diagnostics

On this page, you run independent error diagnostics for each individual SFP port. This test is performed without needing to remove the cable, connect a cable tester or install a loopback module at the other end.

You can only use SFP diagnostics with transceivers capable of diagnostics.

SFP Port Diagnostics

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

259

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Port

The SFP port to be tested is specified here.

The following is displayed depending on the selection:

● Name (read only)

The name of the SFP port

● Name (read only)

The name of the SFP transceiver being used

● Revision (read-only)

The hardware version of the SFP transceiver

● Serial (read only)

The serial number of the SFP transceiver

● Nominal Bit Rate (read only)

The nominal bit rate of the SFP port

● Max. Link (read only)

The maximum distance in meters that is possible with this medium.

The table is structured so that the latest (Current), the lowest (Low) and the highest (High) value is always shown for the following parameters.

Temperature (read only)

The temperature of the port.

Voltage (read only)

The voltage applied to the port.

Current (read only)

The current with which a device connected to this port is supplied.

Rx Power (read only)

The received power of the port.

Tx Power (read only)

The transmit power of the port.

Syntax of the Command Line Interface

Table 4- 81 SFPDIAGNOSTIC - CLI\SWITCH\PORTDIAG\SFPDIAG>

Command details [port]

Description

Tests the specified SFP port.

Comment

Administrator only.

260

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.25 Loop Detection

Principle of operation

If the "Loop Detection" function is set for a port, the port sends special test frames, the loop detection frames. If these frames are sent back to the device, there is a Loop.

If the device receives the sent frames again at another port, a Local Loop has occurred. The device itself is part of the loop.

If the device receives the sent frames at the same port, a loop has occurred on other network components, a Remote Loop.

Loops in the network

A loop can, for example, be caused by an incorrect configuration or by plugging in a cable incorrectly. Mechanical damage to cables can also lead to short-circuits and also cause loops.

A loop is an error in the network structure that needs to be eliminated. The loop detection can help to find the errors but does not eliminate them. The loop detection is not suitable for increasing network availability by deliberately including loops.

Enabling the function

Note

Loop detection is only possible at ports that were not configured as ring ports or standby ports.

Enabling the function for the device

To enable the "Loop Detection" function generally for the device, select the "Loop Detection

Enabled" option on the "Loop Detection Config" page. On this page, you can make basic settings that apply to all ports, see section "Loop Detection Configuration".

With this setting, the function is not enabled for all ports. You need to configure the ports individually.

Enabling ports

For the individual ports, you can set the "Loop Detection" function on the "Loop Detection

Port Configuration" page, see section "Loop Detection Port Configuration".

If there is an error, a port can only be blocked to prevent a loop when it is configured as

"Sender".

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

261

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Application example

Figure 4-113 Loop detection with a configured sender

The figure above shows the networking of the enterprise level and automation level via an

MRP/HRP ring. The blocked ports marked red were set to "Disable port".

If a loop occurs in the network at the automation level, the loop is detected as a "Remote

Loop". No loop detection frames are forwarded to the network at the enterprise level or to the end device due to the blocked ports.

If a Local Loop occurs, the port is blocked automatically following a specified number of loop detection frames.

The settings for loop detection are shown in the following sections based on the WBM pages.

262

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Loop Detection Configuration

On this page, make the settings for loop detection that apply to all ports.

Figure 4-114 Configuration for loop detection

Note

Loops can only be detected between devices that forward loop detection frames. Loops via network components whose ports were blocked are not detected.

Loop Detection Enabled

Enable or disable loop detection by clicking the check box.

If loop detection is disabled, the loop detection frames of other devices are forwarded.

VLAN Support Enabled

By clicking the check box, specify for all ports whether or not loop detection frames are sent out for all VLANs configured at the relevant ports.

If VLAN support is disabled, only loop detection frames without a VLAN tag are sent.

Rx Threshold (All Ports)

By entering a number, specify the number of received loop detection frames as of which a loop is assumed.

If a port-specific setting was made, see below, "Variant" is displayed.

Remote Reaction (All Ports)

Specify how the device will react if a remote loop occurs. Select one of the two options from the drop-down list:

● No reaction:

A loop has no effect on the port at which the loop occurs.

● Disable port:

The port at which the loop occurs is blocked.

If you have made a port-specific setting, see below, "Variant" is displayed.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

263

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Local Reaction (All Ports):

Specify how the device will react if a local loop occurs. Select one of the two options from the drop-down list:

● No reaction:

A loop has no effect on the port at which the loop occurs.

● Disable port:

The port is blocked.

If you have made a port-specific setting, see below, "Variant" is displayed.

Loop Detection Port Control

On this page, you can see the specific settings of the individual ports.

Figure 4-115 Loop Detection Port Control

To configure a port, click on the relevant port number in the "Port" column. The "Loop

Detection Port Configuration" page appears.

264

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Loop Detection Port Configuration

Make these specific settings from individual ports on this page.

Figure 4-116 Loop Detection Port Configuration

Note

Test frames create additional network load. We recommend that you only configure individual switches, for example at branch points of the ring, as "Sender" and the others as

"Forwarder".

Port

This box shows the number of the selected port.

Setting

Specify how the port handles loop detection frames. Select one of the following options from the drop-down list:

● Transmitter

Loop detection frames are sent out and forwarded.

● Forwarder

Loop detection frames from other devices are forwarded.

● Blocked

The forwarding of loop detection frames is blocked.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

265

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Rx Threshold

By entering a number, specify the number of received loop detection frames as of which a loop is assumed.

If the port receives more loop detection frames than specified, the port no longer forwards the loop detection frames.

Remote Reaction

Specify how the port will react if a remote loop occurs. Select one of the two options from the drop-down list:

● No reaction:

A loop has no effect on the port.

● Disable port:

The port is blocked.

Local Reaction

Specify how the port will react if a local loop occurs. Select one of the two options from the drop-down list:

● No reaction

A loop has no effect on the port.

● Disable port

The port is blocked.

State

This box shows whether loop detection is enabled or disabled for this port.

Source Port

This box shows the receiver port of the loop detection frame that triggered the last reaction.

Source VLAN

This box shows the VLAN-ID of the loop detection frame that triggered the last reaction.

This is only possible if you have selected "VLAN Support Enabled" on the "Loop Detection

Configuration" page.

"Reset Port" button

After a loop in the network has been eliminated, click this button to reset the port.

Error messages

If the "Loop Detection" function detects a loop, this is signaled by the fault LED, the signaling contact and an appropriate message text. The message texts are displayed using the same signaling method that you configured for the alarm event "Loop Detection State Change",

see section "Agent Event Configuration (Page 107)".

Possible signaling methods are e-mail, trap, entry in the log file or on the syslog server.

266

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

You will find a list of the message texts in Appendix D "Error messages of the SCALANCE

X300 / X400 (Page 385)".

Fault LED and signaling contact

If a loop is detected, fault LED of the device lights up and the signaling contact opens. When the error/fault state no longer exists, the fault LED goes off and the signaling contact closes.

Status messages

The following status messages can occur:

● "Local Loop detected on <port number>. Port disabled."

The device has detected a local loop. The port involved is disabled. A connected partner still sees the status "Link up".

● "Local Loop detected on <port number>. Port disabled for <wait time> seconds."

The device has detected a local loop. The port involved is disabled for a certain time. A connected partner still sees the status "Link up".

● "Remote Loop detected on <port number>. Port disabled."

The device has detected a remote loop. The port involved is disabled. A connected partner still sees the status "Link up".

● "Remote Loop detected on <port number>. Port disabled for <wait time> seconds."

The device has detected a remote loop. The port involved is disabled for a certain time. A connected partner still sees the status "Link up".

● "Local Loop detected on <port number>."

The device has detected a local loop.

● "Remote Loop detected on <port number>."

The device has detected a remote loop.

● "<port number> is enabled again for loop detection."

The "Loop Detection" function was enabled for the port again.

● "<Port number> is enabled again after being disabled by loop detection."

A port that was disabled due to a loop was enabled again.

Syntax of the Command Line Interface

Table 4- 82 Loop Detection Configuration - CLI\SWITCH\LOOPD >

Command info loopd [E | D]

Description

Displays information about the "Loop Detection Configuration".

Enables / disables loop detection.

Comment

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

267

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Command loopdp <port>

[B | F | S]

Description

Defines the behavior of a port for loop detection:

• "Blocked"

"Forwarder"

• "Sender"

Specifies the Rx.Threshold. rxthres <port>

<count> local <port> [N |

D] remote <port>

[N | D] reset <port>

Specifies the reaction to a local loop.

Specifies the reaction to a remote loop.

Reactivates the port if it was deactivated due to a detected loop.

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

4.5.26 NAT - Network Address Translation

Note

The NAT function is available only with SCALANCE X300 and SCALANCE X408.

Network Address Translation (NAT) means the translation of a network address in a router related to a data stream. This does not necessarily only mean the IP address. If nodes with local addresses take over server functions for the outside, not only the IP addresses but also the port numbers will be replaced in the router.

The most common reason for the use of NAT is that the IP addresses of the devices in the local network should not be visible to the outside.

Traditional NAT

With Traditional NAT, connections are only permitted in one direction, originating from the local network. Traditional NAT distinguishes between the methods Basic NAT and NAPT

(Network Address Port Translation).

In Basic NAT, a pool of global/external addresses is kept available for the translation and each internal address is converted to an external address.

With NAPT, the transport identifiers, for example port numbers, are included in the translation. For this reason, this method only requires a single external address for translation.

1:1 NAT with SCALANCE X300/X400

A special variant of NAT that is used with SCALANCE X300/X400 is 1:1 NAT, also known as bidirectional NAT. This variant allows connection establishment in both directions; in other words, also originating from the external network into the local network. The translation of the network addresses is performed using a static table. In this table, you specify 1:1 the global IP address into which a local IP address will be translated and vice versa.

268

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

NAT configuration

Note

The NAT function uses a lot of computing capacity. If you want to use the switch as a NAT device, you should therefore disable as many of the other functions and protocols (RSTP,

HRP/MRP, PTP, etc.) as possible. This results in a higher data throughput for the NAT packets.

Click on the "NAT" folder in the menu tree to go to the "Network Address Translation" window. This window shows the current NAT settings.

Figure 4-117 Network Address Translation

NAT enabled

Enable or disable the NAT function by clicking the check box.

NAT VLAN ID:

In the input box, enter the ID of a configured virtual LAN for the global network attachment.

Global IP Address:

In the input box, enter the global IP address for the dynamic address translation.

Global Subnet Mask:

Enter the global subnet mask in the input box.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

269

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Static NAT table

In the menu tree, the "NAT" folder contains the subsection "Basic NAT". Click this item to go to the static address table.

Figure 4-118 Static NAT table

Creating a new entry

1. Click the "New Entry" button.

The "Basic Network Address Translation Entry" window appears.

2. In the "Local IP" box, enter the local IP address to be translated.

3. In the "Global IP" box, enter the corresponding global IP address.

4. Click the "Set Values" button to save the settings.

Figure 4-119 Creating a NAT entry

Deleting an existing entry

1. Click on an existing IP address in the "Basic Network Address Translation" window.

The "Basic Network Address Translation Entry" window appears.

2. Click the "Delete" button to delete this entry.

270

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

NAT - Network Address Translation

Table 4- 83 CLI\SWITCH\NAT>

Command info nat [<E|D] config <VID> <IP> <subnet>

BASIC

Description

Displays the current NAT settings.

Enables/disables the NAT function.

Specifies the NAT settings VLAN ID, IP address and subnet mask.

Opens the "Basic NAT" menu item.

Comment

Administrator only.

Administrator only.

Administrator only.

Table 4- 84 CLI\SWITCH\NAT\BASIC> info

Command Description

Displays the current NAT entries. add <local IP> <global IP> Creates a new NAT entry. delete <local IP> <global

IP>

Deletes an existing NAT entry.

Comment

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

271

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.27 Statistics

Counting and evaluation of received frames

An IE switch has internal statistics counters with which it counts the number of received frames for each port according to the following criteria:

● Frame length

● Frame type

● Bad frames

This information provides you with an overview of the data traffic and any problems on the network.

272

Figure 4-120 Statistics Throughput

Octets In

Shows the number of received bytes.

Octets Out

Shows the number of sent bytes.

Frames In

Shows the number of received frames.

Frames Out

Shows the number of sent frames.

Utilization

Displays the current port utilization as a percentage (%). If the bus utilization is less than 1%, nothing is displayed. Depending on the frame length (system dependent), the display can deviate by up to 20% since the proportion of pauses between frames increases the shorter the frame.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Max. Utilization

Displays the peak value of port utilization as a percentage (%).

Note

With X300, the Utilization value is calculated from the incoming frames. Only correct frames are relevant.

With X414, the Utilization value is calculated from the incoming and outgoing frames. With the incoming frames, both correct and bad frames are relevant. With the outgoing frames, only correct frames are relevant.

Syntax of the Command Line Interface

Table 4- 85 Statistics Throughput - CLI\SWITCH\STATS> info size [ports] type [ports] clear

Command error [ports]

Description

Shows statistical information on sent and received frames.

Displays information on the length of the sent and received frames.

Displays information on the type of the sent and received frames.

Displays information on bad sent and received frames.

Resets the counters.

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

273

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.27.1 Packet Size Statistic

Received frames sorted by length

The "Packet Size Statistic" page displays how many frames of which size were received at each port.

If you click the "Reset Counters" button, you reset the counters for all ports.

274

Figure 4-121 Packet Size Statistic

If you click on an entry in the Port column, the "Packet Size Statistics graphic" is displayed for the selected port. You then see a configurable graphical representation of the counter value.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Graphic representation of the statistics

This page displays the number of frames received at each port graphically. The display is dependent on the frame length. There is a separate element in the graphic for each of the following ranges:

● 64 bytes

● 65 - 127 bytes

● 128 -255 bytes

● 256 -511 bytes

● 512 -1023 bytes

● 1024 -1518 bytes

Figure 4-122 Packet Size Statistic Graphics

With the check box in the "Packet Size" column, you decide the content of the graphic. The value in the "Packets" column in the graphic is only displayed for a certain range if the appropriate check box is selected. The "Percentage" column shows the packets in a certain length range as a percentage of the total packets for this port. When the percentage is calculated, ranges are included only if their check boxes are selected.

With the "Previous Port" and "Next Port" buttons, you can change to the display of the previous or next port.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

275

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 86 Statistics - CLI\ SWITCH\STATS> size [ports]

Command Description

Shows the number of received frames sorted according to frame length.

Several ports can also be specified.

Example:

• size 5.1, 6.1-7.2

Shows the lengths of the frames received at ports 5.1 and 6.1 to 7.2.

-

Comment

276

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.27.2 Packet Type Statistic

Received frames sorted by type

The "Packet Type Statistic" page displays how many frames of the type "unicast",

"multicast", and "broadcast" were received at each port.

If you click the "Reset Counters" button, you reset the counters for all ports.

Figure 4-123 Packet Type Statistic

If you click on an entry in the Port column, the "Packet Type Statistics graphic" is displayed for the selected port. You then see a configurable graphical representation of the counter value.

Graphic representation of the statistics

This page displays the number of frames received at each port graphically. The display depends on the frame type. There is a separate element in the graphic for each of the following ranges:

● Unicast

● Multicast

● Broadcast

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

277

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Figure 4-124 Packet Type Statistic Graphic

With the check box in the "Packet Type" column, you decide the content of the graphic. The value in the "Packets" column in the graphic is only displayed for a certain frame type if the appropriate check box is selected. The "Percentage" column shows the packets of a certain type as a percentage of the total packets for this port. When the percentage is calculated, frame types are included only if their check boxes are selected.

With the "Previous Port" and "Next Port" buttons, you can change to the display of the previous or next port.

Syntax of the Command Line Interface

Table 4- 87 Statistics - CLI\SWITCH\STATS> type [ports]

Command Description

Shows the number of received frames sorted according to frame type.

Several ports can also be specified.

Example:

• type 5.1, 6.1-7.2

Shows the types of the frames received at ports 5.1 and 6.1 to 7.2.

-

Comment

278

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

4.5.27.3 Error Statistic

Errors in received frames

The "Packet Error Statistic" page shows how many bad frames were received per port. The following error types are distinguished:

● CRC


Packets whose content did not match the CRC checksum.

● Undersize


Packets with a length less than 64 bytes.

● Oversize


Packets with a length greater than 1518 or 1522 bytes for frames with a VLAN tag.

● Fragments


Packets with a length less than 64 bytes and a bad CRC checksum.

● Jabbers


Packets with a length greater than 1518 or 1522 bytes for frames with a VLAN tag and a bad CRC checksum.

● Collisions


Detected collisions.

If you click the "Reset Counters" button, you reset the counters for all ports.

Figure 4-125 Packet Error Statistic

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

279

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

If you click on an entry in the "Port" column, the "Packet Error Statistics graphic" is displayed for the selected port. You then see a configurable graphical representation of the counter value.

Graphic representation of the statistics

This page displays the number of bad frames graphically. The display is dependent on the cause of the error. There is a separate element in the graphic for each of the following causes of error:

● CRC

● Undersize

● Oversize

● Jabbers

● Collisions

280

Figure 4-126 Packet Error Statistic Graphic

With the check box in the "Packet Error" column, you decide the content of the graphic. The value in the "Packets" column in the graphic is only displayed for a certain frame type if the appropriate check box is selected. The "Percentage" column shows the errors of a certain type as a percentage of the total errors for this port. When the percentage is calculated, error types are included only if their check boxes are selected.

With the "Previous Port" and "Next Port" buttons, you can change to the display of the previous or next port.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.5 The Switch menu

Syntax of the Command Line Interface

Table 4- 88 Statistics - CLI\SWITCH\STATS>

Command error [ports]

Description

Shows the number of received frames sorted according to frame errors.

Several ports can also be specified.

Example:

• error 5.1, 6.1-7.2

Shows the bad frames received at ports 5.1 and 6.1 to 7.2.

-

Comment

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

281

Configuration using Web Based Management and Command Line Interface

4.6 The PoE menu item

4.6 The PoE menu item

Settings for Power over Ethernet

SCALANCE devices of the "PoE" version, can supply other PoE-compliant devices with power via an Ethernet cable. For each individual PoE port, you can specify whether or not the power will be supplied via Ethernet. You can also set a priority for each connected powered device (PD). Devices for which a high priority was set, take preference over other devices for the power supply.

The overview page shows information on the power supplied by the SCALANCE device with

PoE and detailed information on each individual PoE port.

282

Figure 4-127 Information on the SCALANCE PoE configuration

The boxes described below provide information about the power that the IE switch supplies with PoE.

● Maximum Power [W] (read-only)

Maximum power that the SCALANCE provides to supply PoE devices.

● Allocated Power [W] (read-only)

Sum of the power reserved by the PoE devices.

● Power in Use [W] (read-only)

Sum of the power being used by the end devices.

● Usage Threshold [%]

As soon as the power being used by the connected devices exceeds this percentage of the maximum power, an event is triggered.

The table contains the following information:

● Port

Shows the configurable PoE ports.

● Enabled

Shows whether the PoE power supply is enabled or disabled for this port.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.6 The PoE menu item

● Priority

Shows the priority of this port taken into account for the power supply.

● Classification

The classification specifies the class of the device. From this, it is possible to recognize the maximum power of the device.

● PoE Status

Shows the current status of the port. The following statuses are possible:

– disabled

The PoE power supply is deactivated for this port.

– delivering Power

The PoE power supply is activated for this port and a device is connected.

– searching

The PoE power supply is activated for this port but there is no device connected.

● Power in Use

Shows the power that the SCALANCE provides at this port.

Making settings for a port

Click on a number in the "Port" column to open the "PoE Port Configuration" page.

Figure 4-128 Detailed information on the power supply of a port

PoE enabled

If the check box is selected, the PoE power supply for this port is enabled.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

283

Configuration using Web Based Management and Command Line Interface

4.6 The PoE menu item

Priority

Specifies the priority of this port for the power supply. The following settings are possible:

● low

● high

● critical

If the same priority is set for two ports, the port with the lower number will be preferred when necessary.

Type

Here, you can enter a string to describe the connected device in greater detail. The maximum length is 64 characters.

Voltage [V] (read-only)

The voltage being applied to this port.

Power [W] (read-only)

This is the power the SCALANCE output at this port.

Current [mA] (read-only)

The current with which a device is supplied from this port.

Manual mode enabled

Enables/disables the manual mode for PoE.

If the manual mode is enabled, you can set the power values for the PoE ports manually.

Allocated Power [mW]

Assigns a port a specific power in mW ("Allocated Power"").

Range of values: 1000 mW - 20000 mW

Cut-Off Power [mW]

Specifies the cut-off power for a port in mW. If the cut-of power is exceeded, the port is disabled.

Range of values: 1000 mW - 20000 mW

Syntax of the Command Line Interface

Table 4- 89 CLI\POE>

Command info [ports] pseusage [percent] status [<E|D> [ports]]

Description

Displays information about PoE for the relevant port.

Sets a value (percentage) for the Usage

Threshold parameter. As soon as the power being used by the connected devices exceeds this percentage of the maximum power, an event is triggered.

If you call this command without parameters, the current value is displayed.

Enables/disables PoE power supply for the specified port.

Comment

-

Administrator only.

Administrator only.

284

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.6 The PoE menu item

Command prio [<LOW|HIGH|CRITICAL>

[ports]] type <port> [string] manmode [<E|D>] apower [<power> [ports]] copower [<power> [ports]] assign [<port>]

Description

Sets the priority for the power supply for the specified port. If no port is specified, the value applies to all ports.

Specifies a string describing the connected device in greater detail. The maximum length is 64 characters.

Enables/disables the "Manual Power Allocation Mode" for a port.

If the "Manual Power Allocation Mode" is enabled, you can set the power values for the PoE ports manually.

Assigns a port a specific power in mW ("Allocated Power").

Range of values: 1000 mW - 20000 mW

Specifies the cut-off power for a port in mW.

If the cut-of power is exceeded, the port is disabled.

Range of values: 1000 mW - 20000 mW

The power that a port currently uses is permanently assigned to the port as "Allocated

Power".

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

285

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

4.7 The Router menu (SCALANCE X414-3E)

Note

The routing function is available only with the SCALANCE X414-3E.

Introduction to the procedure

To set up a SCALANCE X414-3E as a router, first create at least two subnets and assign each subnet to a previously defined VLAN. You can then enter the static routes and/or enable the router protocols RIP or OSPF.

For information on configuring VLANs, refer to the section "Current VLAN Configuration menu item".

4.7.1

Introduction

Router Configuration

The "Router Configuration" screen appears if you click the

Router you can set up the SCALANCE X414-3E as an IPv4 router.

folder icon. In this screen,

To distribute the routing information in the network, you can use the RIPv2 and OSPFv2 protocols that you can select here. You can see the detailed settings for the protocols in the relevant sub-dialogs.

Figure 4-129 Router Configuration

286

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Settings for the SCALANCE X-400

RIP

Enables the "Routing Information Protocol version 2" option (RIP).

Note

The router uses the RIP protocol as soon as at least one interface was configured for RIP.

OSPF

Enables the "Open Shortest Path First protocol version 2" option (OSPF).

Note

The router uses the OSPF protocol as soon as at least one interface for OSPF is configured and a router ID has been specified.

Use Hardware

The SCALANCE X-414 provides the option of high-speed hardware routing. Select this check box if you want to enable hardware routing for the default addresses.

Note

If the default route is entered in the hardware, this reduces the number of subnets that can be reached using routing to 14.

With dynamically learned routes (RIP or OSPF), the routing mechanism automatically removes the default routes from the hardware when necessary.

Syntax of the Command Line Interface

Table 4- 90 Router Configuration - CLI\ROUTER>

Command setrip <E|D> setospf <E|D> defrthw <E|D>

Description

Enables/Disables RIP

Enables/Disables OSPF

Enables/disables hardware routing for default addresses.

Comment

Administrator only.

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

287

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

4.7.2 Router Subnets

Creating subnets

To operate the SCALANCE X414-3E as an IPv4 router, you need to create several (at least two) subnets.

The agent configuration corresponds to the first subnet (see section "Agent menu"). The data can only be modified there.

All other subnets can be created here ("New Entry" button). A subnet always relates to a

VLAN ID that was created previously in the VLAN dialog.

288

Figure 4-130 Router Subnets

VID

VLAN ID of the IP subnet.

IP Address

IP address of the subnet (must be unique).

Subnet Mask

Subnet mask of the IP subnet. The "ones" entered left justified in the bit representation of the subnet mask specify the network ID of the IP address.

Name

Freely selectable name for the subnet. The predefined name of the first subnet that must match the agent configuration is called "Agent Configuration".

Status

Status of the subnet. The following statuses are possible:

● Static

● invalid

A subnet with the "invalid" status indicates a configuration error that must be eliminated.

● RIP

● OSPF

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Creating a new IP subnet

You can create a new subnet by clicking the "New Entry" button in the "Router Subnets" dialog. You make the settings for the subnet in the "Router Subnet Configuration" menu.

Figure 4-131 Router Subnets Configuration

VLAN ID

Here, enter the ID of the VLAN (VID see the section "Current VLAN Configuration menu item") via which packets of this IP subnet will be transmitted (range of values of the ID: 1 to

4094).

Note

The agent VLAN ID must not be used again. All other IDs can be used more than once.

IP Address

Enter the IP address of the IP subnet. IP addresses must not be used more than once.

Note

By appending the "/" character and a number between 1 and 30, the subnet can also be defined at the same time.

Subnet Mask

Here, enter the subnet mask of the IP subnet you are creating. The subnet mask must be made up of a left-justified bit field of ones.

Name

Here, enter the name of the subnet (this has no effect on the functionality).

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

289

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Syntax of the Command Line Interface

Table 4- 91 Subnets - CLI\ROUTER\SUBNETS> info

Command add <VID> <IP> <subnet>

[name]

Description

Displays the current subnets.

Adds a news subnet. The subnet parameter identifies the subnet mask. edit <VID> <IP> [subnet] [name] Modifies a subnet. The subnet parameter identifies the subnet mask. delete <VID> <IP> Deletes a subnet.

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

The "info" CLI command displays a table (analogous to the table in the Web Interface). The

"Status" column is, however, restricted to two characters here (St).

The following statuses are possible (see also Web Interface):

● RI (RIP)

● OS (OSPF)

● st (static)

● ?? (invalid)

4.7.3

Routing table

Current Routes

The routing table is displayed in this dialog. Static routing table entries can also be created here.

A routing table is generally a list of rules according to which received packets will be forwarded. If a packet is waiting for routing, its destination address is compared with the addresses in the routing table. The entry whose address along with the subnet mask matches best (using the longest prefix match method) then describes how the packet will be forwarded.

Entries in the routing table with the "local" status, indicate the configured subnets.

290

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Figure 4-132 Current Routes

Destination

Destination address of this route.

Subnet Mask

Identifies the valid bits of the Destination column. It must consist of left-justified ones.

VID

The VID identifies the VLAN ID via whose IP subnet a packet will be forwarded when the rule is used.

Next IP Address

The next IP address identifies the IP address of the device to be accessed next.

Name

The name does not influence the routing process.

A name can be entered for static routes.

If the route is dynamic, the name is also set to "Dynamic".

Metric

The Metric column displays the distance between router and destination.

Status

The status of a route indicates whether this was generated by the OSPF or RIP protocol as a static route or local.

Static routes are created manually with the "New Entry" button.

Local routes are created automatically when a subnet is created.

HW

The HW (hardware) column identifies the assignment of the route to the hardware. The available options are as follows:

● Yes:

Can be stored in the hardware

● In use:

Is already stored in the hardware

● No:

Must not be stored in the hardware

With static routes, "Yes" or "No" can be set. The routes are stored in the hardware and displayed as "In use" only when they are actually being used.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

291

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Creating a new static route

With the "New Entry" button in the "Current Routes" dialog, you can create a new route.

Routes created in this way are always static.

Figure 4-133 Static Route Configuration

Destination

Here, you enter an IP address to which the routing table entry relates.

Subnet Mask

Enter the subnet mask of the routing entry here. This shows which bits of the address are valid for the routing comparison.

Subnet VLAN ID

The subnet VLAN ID is calculated automatically from the next IP address and is empty in new systems.

Next IP Address

Here, enter the address of the next router to which the packets of this route will be sent. The router must be located in a connected subnet.

Name

Here, you enter the name of the route (this is no effect on the functionality).

Use Hardware

Enable this check box, if you want the route to be written to the hardware. If the option is enabled, the route is written to the hardware the first time a packet is successfully forwarded and can then be used more quickly.

Note

The route can only be written to the hardware when there is still adequate storage space available.

292

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Syntax of the Command Line Interface

Table 4- 92 Current Routes - CLI\ROUTER\ROUTES>

Command info add <IP> <subnet> <nextIP>

[E|D] [name]

Description

Displays the current routes.

Adds a new route.

E|D parameter for enabling/disabling "Use Hardware". edit <IP> [nextIP] [E|D] [name] Modifies a route.

E|D parameter for enabling/disabling "Use Hardware". delete <IP> Deletes a route.

Comment

Administrator only.

Administrator only.

Administrator only.

Administrator only.

The "info" CLI command displays a table (analogous to the table in the Web Interface). The

"Metric" and "Status" columns are, however, restricted to two characters here (Me; St).

The following statuses are possible:

● OS (OSPF)

● RI (RIP)

● st (static)

● lo (local)

● ot (other)

● ?? (invalid)

The following are possible in the "Hardware" column (HW) (see also Web Interface):

● Yes: X (upper case X)

● In use: * (asterisk)

● No: - (minus sign)

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

293

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

4.7.4

Introduction

RIPv2 Configuration

In the "RIPv2 Configuration" dialog, you can set the general parameters of the RIP protocol as well as view certain basic statistics counters.

Note

The settings made here take effect only if RIP is enabled in the "Router Configuration" dialog.

Figure 4-134 RIPv2 Configuration

Border Gateway

Enable this check box only if you operate the router along with original RIPv1 routers. In this case, subnet routes are grouped together in specific classes and so-called supernets are not propagated. This provides you with the greatest possible compatibility with RIPv1 routers.

Query Responses

Number of a special routing queries responded to.

Route Changes

Number of modifications made in the routing table.

Redistribute Routes (Default/Static/OSPF)

Here, you can specify which known routes are forwarded over RIP. You can make different decisions for the route types Default, Static and OSPF.

Note

Please enable this check box only for gateways between different networks (border gateways). Enabling the Default and Static options, in particular, can cause problems (for example, increased load caused by traffic in forwarding loops) if they are enabled at too many points in the network.

294

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Syntax of the Command Line Interface

Table 4- 93 RIPv2 Configuration - CLI\ROUTER\RIP> info

Command rfc1058 <E|D> redistr <E|D> <E|D> <E|D>

Description

Shows the current RIP configuration.

Sets RFC1058 (RIPv1) compatibility.

Enables/disables “redistribute routes”.

Parameter 1 default routes

Parameter 2 static routes

Parameter 3

OSPF routes

-

Comment

Administrator only.

Administrator only.

4.7.5

Introduction

RIPv2 Interfaces

The "RIPv2 Interfaces" dialog displays an overview of all IP subnets in which the RIP protocol is used.

With the "New Entry" button, you can register new subnets for RIP.

Note

Before a subnet can be registered for RIP, it must first be created in the "Router Subnets" menu.

Figure 4-135 RIPv2 Interfaces

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

295

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

296

IP Address

IP address of the RIP-compliant subnet (only identifier for this table). All other subnet parameters such as the subnet mask can be found in the "Router Subnets" dialog.

Send Updates

This column displays how updates will be sent. The following are available:

● no send:

No updates are sent

● RIPv1:

Send RIPv1 updates according to RFC 1058

● RIPv1-compat:

Send RIPv2 updates according to the rules of RFC 1058 as broadcasts

● RIPv2:

Send RIPv2 updates as multicast

● RIPv1 demand and RIPv2 demand:

RIP the packets are sent only as responses to explicit queries.

Use this option only if your router needs to communicate with another router over the

WAN interface.

Receive Updates

This column displays the form in which received RIP packets will be accepted. The following are available:

● no receive:

No packets are accepted.

● RIPv1:

Only packets from RIPv1 routers are accepted.

● RIPv2:

Only packets from RIPv2 routers are received and processed.

● RIPv1/v2:

All variants of the RIP protocol are accepted on this interface.

Default Metric

This column displays the metric assigned to the default route on this interface.

The value 0 indicates that no default route is propagated.

Otherwise the values 1..15 are valid.

Authent. Type

The authentication type is displayed in this column. This can be:

● no authentication

● simple password

● MD5 authentication.

Bad Packets

Counter for received RIP packets that were deleted and therefore ignored.

Bad Routes

Number of routes of valid RIP packets that could not be taken into consideration.

Updates Sent

Number of "Triggered Updates" for this interface

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Creating a new RIPv2 interface

You can create a new interface by clicking the "New Entry" button in the "RIP Interfaces" dialog. This opens the following dialog.

Figure 4-136 RIPv2 Interface Configuration

IP Address

Here, you enter the IP address of the interface on which RIP will be configured. This IP address must already be configured as an IP subnet.

Send-Updates

Here, you select how the RIP updates will be sent. The update packets contain the routing table of the local system. The following are available:

● no send:

Do not send updates

● RIPv1:

Send RIPv1 updates according to the rules of RFC 1058

● RIPv1-compat:

Send RIPv2 updates according to the rules of RFC 1058 as broadcasts

● RIPv2:

Send RIPv2 updates as multicast

● The values "RIPv1 demand" and "RIPv2 demand" are required only for WAN interfaces.

In this case, RIP the packets are sent only as a response to an explicit query.

Note

If there are no RIPv1 devices whatsoever in your network, you should set "RIPv2".

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

297

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Receive-Updates

Here, select the rules according to which received packets will be accepted. The following are available:

● no receive:

Do not receive updates

● RIPv1:

Receive RIPv1 updates

● RIPv2:

Receive RIPv2 updates

● RIPv1/v2:

Receive RIPv1 and RIPv2 updates

Default Metric

Here, you specify the metric with which the default route will be propagated on this interface.

RIP uses the hop metric in which distances are specified as the "number of routers used"

(range of values: 1-15 (0 disables the default route)).

The following applies: The higher value, the longer packets require to their destination.

Authentication Type

Here, select the authentication method of the RIP packets. The following options are available:

● none: no authentication (default)

● simple: authentication with password and confirmation

● MD5: authentication using the Keyed MD5 method (password, confirmation and key ID)

● These methods are simply used to determine the authenticity of a packet; they do not encrypt data.

Key ID

Note

The "Key ID" text box is displayed only if the authentication method was set to MD5.

Enter the key ID here with which the password will be used as the key. Since the key ID is transferred with the protocol, the same key must be stored under the same key ID on all neighboring routers.

Password/Confirmation

Note

The "Password/Confirmation" text box is displayed only if the authentication method was set to MD5 or simple.

If authentication uses a password, a key is required via MD5 that can be entered here.

298

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Syntax of the Command Line Interface

Table 4- 94 RIPv2 Interfaces - CLI\ROUTER\RIP\RIP\IFACE>

Command info add <IP> [SendUpd] [RecvUpd]

[Metric] edit <IP> [SendUpd] [RecvUpd]

[Metric] auth <IP> <authtype> [password] [key-id] delete <IP>

Description

Displays the current interfaces. -

Adds a new interface.

Possible parameters for

SendUpd:

Comment

Administrator only.

• SV1

RIPv1

SV1C

RIPv1 Comp.

• SV1D

RIPv1 Dem.

SV2

RIPv2

• SV2D

RIPv2 Dem.

SNO

No Send

Possible parameters for

RecvUpd:

RV1

RIPv1

• RV2

RIPv2

RV1V2

RIPv1/v2

• RNO

No Receive

Modifies an interface.

Possible parameters for

SendUpd and RecvUpd as for the add command.

Modifies the authentication of an interface.

Possible types:

None

• Simple

MD5 (the "Key-Id" is only required here)

Administrator only.

Administrator only.

Deletes an interface. Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

299

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

4.7.6

Introduction

OSPFv2 Configuration

In the "OSPFv2 Configuration" dialog and its sub-dialogs, you can set the OSPF parameters.

OSPFv2 divides the administrated IPv4 network (autonomous system) into various areas.

Within these areas, the link statuses of all routers are exchanged so that each router has a complete view of the network. This view is maintained in the link state database (LSDB). As a result, each router can determine all routes within the area itself according to the Dijkstra algorithm.

There is no uniform view between the areas. For this reason, exchange of routes is restricted to collective routes that can be determined according to the distant vector algorithm.

300

Figure 4-137 OSPFv2 Configuration

Router ID

Here, you set the address of an OSPF interface. The IP address must be unique.

RFC 1583 compatible

You only require this setting if you are still using old OSPFv2 routers that are not compatible with RFC 2328.

Border Router

Displays the border router status. If the local system is an active member in at least two areas, this is an area border router.

AS Border Router

Enable this option if this router operates as an AS border router; in other words, delivers to several protocol worlds (for example, if you operate an additional RIP network).

New LSA received

Number of link state advertisements that were received. Updates and its own LSAs are not counted.

New LSA configured

Number of different LSAs sent by this local system.

External LSA Maximum

Here, enter the maximum number of external LSAs if you want to limit the external LSDB.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

External LSA Overflow

Indicates whether the maximum number of external LSAs was exceeded.

Exit Interval (sec)

Here, you enter the time in seconds after which the OSPF router will reattempt to come out of the overflow status. 0 means that the OSPF router only attempts to leave the overflow status after restarting (triggered by disable and enable in the main menu of the router).

Redistribute Routes (Default/Static/RIP)

Here, you can specify which known routes are forwarded over OSPF. You make different decisions for the route types Default, Static and RIP.

Note

Please enable this check box only for gateways between different networks (border gateways). Enabling the Default and Static options, in particular, can cause problems (for example, forwarding loops) if they are enabled at too many points in the network.

Syntax of the Command Line Interface

Table 4- 95 OSPFv2 Configuration - CLI\ROUTER\OSPF>

Command info id <IP> rfc1583 <E|D> asbr <E|D> lsamax <number> exitint <sec> redistr <E|D> <E|D> <E|D> ospfdbg [E|D] [debugtype]

Description

Displays the current OSPF configuration.

Sets the router ID (IP address). Administrator only.

Sets the RFC1583 compatibility. Administrator only.

Enables/disables AS border router.

Sets the external LSA maximum.

Sets the external exit interval.

Enables/disables “Redistribute routes”.

• Parameter 1 default routes

Parameter 2 static routes

• Parameter 3

RIP routes

Enables/disables OSPF debug functions.

Enter "ospfdbg ?" for help.

Comment

-

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

301

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

4.7.7

Overview

OSPFv2 Areas

An autonomous system can be divided into smaller areas (see the section OSPFv2

Configuration menu item).

In this dialog, you can monitor the OSPF areas of the router. Apart from configuration parameters, you can also see statistical values.

302

Figure 4-138 OSPFv2 Areas

Area ID

Shows the ID of this area. An area ID consists of 4 numbers each between 0 and 255 and it must be unique.

The area 0.0.0.0 is known as the backbone area.

The LSDB of this area is synchronized for all routers in an area.

Area Type

Shows the type of the area. The following area types are possible:

● Standard

● Stub

● NSSA

● Backbone: The backbone area is highlighted here.

Summary

Indicates whether summary LSAs can be generated for this area. This column is significant only for stub areas. The following entries are possible:

● import: Summary LSAs are sent to this area

● disregard: Summary LSAs are not sent to this area

Metric

Shows the metric of the propagated default route of the stub areas. Nothing is displayed for any other areas.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Updates

Number of routing table calculations

LSA Cnt

Number of LSAs in the LSDB of this area

Area BR

Number of reachable area border routers (ABR) within this area

ASBR

Number of reachable autonomous system border routers (ASBR) in this area.

Creating a new OSPFv2 area

With the "New Entry" button in the "OSPFv2 Areas" dialog, you can create a new area.

Figure 4-139 OSPFv2 Area Configuration

Area ID

Enter the ID of the area here.

Area Type

The following area types exist:

● Standard

● Stub

● NSSA

Note

For the backbone area, the selected area type must be "Normal" and the area ID 0.0.0.0.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

303

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Import Summary

Note

The "Import Summary" check box is displayed only when the "Stub" area type was set.

Enable this option to generate and propagate the summary LSAs in this area. In this case, no default route is necessary for communication within the entire network.

Note

If there is only one border router in this stub area, you do not need to activate this option.

Default Metric

Note

The "Default Metric" text box is displayed only when the "Stub" area type was set.

Here, enter the metric of your default route that will be propagated in the area.

Syntax of the Command Line Interface

Table 4- 96 OSPFv2 Areas - CLI\ROUTER\OSPF\AREAS>

Command info add <areaID> <type> [E|D]

[metric]

Description

Displays the current areas.

Adds a new area.

Possible types:

Standard

• Stub

NSSA

The [E|D] and metric parameters are possible only for a stub area.

• E

Enable importing summary

D

Disable importing summary

Comment

-

Administrator only.

304

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Command edit <areaID> [type] [E|D] [metric] delete <areaID>

Description

Modifies an area.

Possible types:

• Standard

Stub

• NSSA

The [E|D] and metric parameters are possible only for a stub area.

E

Enable importing summary

• D

Disable importing summary

Deletes an area

Comment

Administrator only.

Administrator only.

Example

The command add 0.0.0.3 Stub d 2 generates a stub area "0.0.0.3" for which no summary LSAs are generated. The default route is assigned metric "2".

4.7.8

Overview

OSPFv2 Area Ranges

You can create address ranges in the "Area Ranges" dialog that allow various address ranges to be grouped when propagating. This allows the number of summary LSAs in the areas to be reduced.

Figure 4-140 OSPFv2 Area Ranges

Area ID

Area ID to which the address range relates.

Subnet Address

Address of the network area to be grouped.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

305

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Subnet Mask

Subnet mask of the grouped network area.

Summary

Indicates whether the group address range will be advertised or suppressed.

Creating a new OSPFv2 area range

With the "New Entry" button in the "OSPFv2 Area Ranges" dialog, you can create up to four area ranges for an area.

Figure 4-141 OSPFv2 Area Range Configuration

Area ID

Here, enter the ID of the area for which you want to create an address range.

Subnet Addr.

Here, you enter the address of the network to be grouped.

Subnet Mask

Here, you enter the subnet mask of the network to be grouped.

Advertise

Enable this option to propagate the grouped network.

Syntax of the Command Line Interface

Table 4- 97 OSPFv2 Area Ranges - CLI\ROUTER\OSPF\AREAS\RANGES> info

Command add <AreaID> <SNAddr>

<SNMask> [E|D]

Description

Displays the current area ranges.

Adds a new area range.

• E

Enables advertising summary

D

Disables advertising summary

Comment

-

Administrator only.

306

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Command edit <AreaID> <SNAddr>

<SNMask> <E|D> delete <AreaID> <SNAddr>

<SNMask>

Description

Modifies an area range.

Deletes an area range.

Comment

Administrator only.

Administrator only.

4.7.9

Overview

OSPFv2 Interfaces

In this dialog, you can monitor all the IP interfaces configured for OSPF. Apart from the configuration parameters, some statistical values can also be monitored in the double-page display.

Click on the ">>" or "<<" buttons to page backwards and forwards.

OSPFv2 Interfaces: 1st Page

Figure 4-142 OSPFv2 Interfaces page 1

IP Address

IP address of the configured OSPF interface.

Area ID

Specifies the area that belongs to this interface.

Interface State

Indicates the state of the interface. This can be:

● Down: Nothing is connected to the interface

● Waiting: Starting up and negotiating the interface

● Designated Router: The router has the main responsibility for this network and the network LSA will be created

● Backup D. Router: The router is backup for the designated router

● Other: The interface has started up and the router is neither designated nor backup designated router.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

307

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Designated Router

IP address of the designated router for this interface.

Backup Designated Router

IP address of the backup designated router for this interface.

OSPFv2 Interfaces: 2nd Page

Figure 4-143 OSPFv2 Interfaces page 2

IP Address:

IP address of the interface.

OSPF Status

OSPF status of this interface. The following statuses are possible:

● Enabled: The interface is available for OSPF.

● Disabled: The interface is not available for OSPF.

Metric

Path costs of the router on this interface.

Priority

Priority of the router on this interface. The priority plays a part in the selection of the designated router on the network. The higher the number, the higher the priority.

Trans Delay

Estimated time (in seconds) that a link state update packet requires for transmission. On

LANs, this parameter is normally 1.

Retrans Interval

Specifies the interval after which packets whose receipt was not confirmed in the database synchronization are transferred again.

Hello Interval

Specifies the interval at which Hello packets are sent.

Dead Interval

Specifies the interval after which a router is classified as "no longer existing" if no further

Hello packets are received from it.

308

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Authent. Type

Authentication method selected on this interface. The following are available:

● none: no authentication

● simple: authentication using a password

● MD5: authentication with keyed MD5 method

Events

Number of changes to the interface status.

Creating a new OSPFv2 interface

With the "New Entry" button in the "OSPFv2 Interfaces" dialog, you can configure a new IP interface for OSPF.

Note

Before an interface can be created as an OSPF interface, it must first be created as an IP subnet.

Note

Take particular care when selecting the parameters. A correct neighbor-neighbor relationship is possible only when identical parameters are configured on all routers of an IP subnet.

Otherwise, the impression is that the routers cannot see each other.

Figure 4-144 OSPFv2 Interface Configuration

IP Address

Enter the IP address of the interface you want to configure.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

309

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Area ID

Here, you enter the area ID to which this interface will belong.

Interface enabled

Select this option if you want this interface to be involved in OSPF traffic.

Metric

Path costs of the router on this interface. Default is 1. Enter higher values here for slower networks.

Priority

Enter the router priority here. This only plays a part in the selection of designated router. This parameter can be selected differently on routers within the same IP subnet.

Transit Delay

Here, you enter the expected delay (in seconds) when sending a link update packet. In local area networks, the value 1 is normally selected (range of values: 1 through 3600).

Retransmission Interval

Here, you enter the time (in seconds) after which a packet will be transmitted again if no confirmation was received. In a LAN, the value 5 is normally selected.

Hello Interval

Here, you enter the interval (in seconds) between two Hello packets (range of values: 1 through 65,535).

Router Dead Interval

Here, enter an interval (in seconds) after which a router is shown as "failed" if no further

Hello packets are received from it during this time.

Authentication Type

Select the authentication method of this interface here. You can choose between:

● none: no authentication

● simple: authentication using a password

● MD5: authentication with keyed MD5 method

Key ID

Note

The "Key ID" text box is displayed only if the authentication method was set to MD5. Only then is it possible to use several keys.

Enter the key ID here with which the password will be used as the key. Since the key ID is transferred with the protocol, the same key must be stored under the same key ID on all neighboring routers.

Password/Confirmation

If authentication uses a password, a key is required via MD5 that can be entered here.

310

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Syntax of the Command Line Interface

Table 4- 98 OSPFv2 Interfaces - CLI\ROUTER\OSPF\AREAS\IFACE>

Command info add <IP> <AreaID> [E|D] [priority] edit <IP> [AreaID] [E|D] [priority] timing <IP> [<setting=value>] auth <IP> <authtype> [password] metric <IP> <metric>

Description

Displays the current interfaces.

Adds a new interface.

E

Enable interface

• D

Disable interface

Modifies an interface.

• E

Enable interface

D

Disable interface

Changes the timing settings of an interface.

Possible settings:

TD

Trans. Delay

• RI

Retrans Interval

HI

Hello Interval

• DI

Dead Interval

Modifies the authentication of an interface

Possible types:

None

Simple

MD5

Changes the path costs of an interface

Deletes an interface. delete <IP>

Comment

-

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

311

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

4.7.10

Overview

OSPFv2 Virtual Links

Each area border router (each router connected to two or more areas) must have access to the backbone area for reasons associated with the protocol. If such a router is not connected directly to the backbone area, a virtual link to the backbone area is created.

In this menu, you can monitor this virtual link.

312

Figure 4-145 OSPFv2 Virtual Links

Neighbor Router ID

Router ID of the configured neighbor.

Transit Area ID

Area ID of the area via which the router will have a virtual connection to the neighbor.

Virt. Link State

State of the virtual link. The following states are possible:

● down: The virtual link cannot be used

● point-to-point: The virtual link can be used

Trans Delay

Estimated time (in seconds) that a link state update packet requires for transmission over the virtual link.

Retrans Interval

Interval (in seconds) after which packets whose receipt was not confirmed are transferred again.

Hello Interval

Interval (in seconds) at which Hello packets are sent over the virtual link.

Dead Interval

Interval (in seconds) after which the neighbor router is classified as "failed" if no further Hello packets are received from it.

Authent. Type

Authentication method of the virtual link. The following are available:

● none: no authentication

● simple: authentication using a password

● MD5: authentication with keyed MD5 method

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Events

Number of changes to the interface status.

Creating a new virtual link

With the "New Entry" button in the " OSPFv2 Virtual Links " dialog, you can create a new virtual link.

Note

Remember that when you create a virtual link, both the transit area and the backbone area must already be configured.

A virtual link must be configured identically at both ends.

Figure 4-146 OSPFv2 Virtual Link Configuration

Neighbor Router ID

Here, you enter the router ID of the partner device at the other end of the virtual link.

Transit Area ID

Here, you enter the area ID via which the two partners are connected.

Transit Delay

Here, you enter the expected delay (in seconds) when sending a link update packet (range of values: 1 through 3600).

Retransmission Interval

Here, you enter the time (in seconds) after which a packet will be transmitted again if no confirmation was received (range of values: 1 through 3600).

Hello Interval

Here, you enter the interval (in seconds) between two Hello packets (range of values: 1 through 65,535).

Router Dead Interval

Here, enter an interval (in seconds) after which a neighboring router is shown as "failed" if no further Hello packets are received from it during this time.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

313

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Authentication Type

Select the authentication method of the virtual link here. You can choose between

● none: no authentication

● simple: authentication using a password

● MD5: authentication with keyed MD5 method

Key ID

Note

The "Key ID" text box is displayed only if the authentication method was set to MD5. Only then is it possible to use several keys.

Enter the key ID here with which the password will be used as the key. Since the key ID is transferred with the protocol, the same key must be stored under the same key ID on all neighboring routers.

Password/Confirmation

If authentication uses a password, a key is required via MD5 that can be entered here.

Syntax of the Command Line Interface

Table 4- 99 OSPFv2 Virtual Links - CLI\ROUTER\OSPF\AREAS\VLINKS>

Command info add<RtrID> <AreaID> [<setting=value>] edit <RtrID> <AreaID> [<setting=value>]

Description

Displays the current virtual links. -

Adds a new virtual link.

Possible settings:

TD

Trans. Delay

• RI

Retrans Interval

HI

Hello Interval

• DI

Dead Interval

Modifies a virtual link.

Possible settings:

• TD

Trans. Delay

RI

Retrans Interval

• HI

Hello Interval

DI

Dead Interval

-

-

Comment

314

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Command auth <RtrID> <AreaID>

<authtype> [password]

Delete <RtrID> <AreaID>

Description

Changes the authentication of a virtual link.

Possible types:

None

• Simple

MD5

Deletes a virtual link.

-

-

Comment

Example

The command add 1.1.1.51 0.0.0.2

creates a virtual link to the router with ID "1.1.1.51" via the transit area "0.0.0.2". The remaining parameters are set to the default values.

4.7.11

Overview

OSPFv2 Neighbors

In this dialog, you can monitor the OSPF neighbors. These include the dynamically detected neighbors in the relevant networks and the configured virtual neighbors.

Figure 4-147 Current OSPFv2 Neighbors

Neighbor IP Address

IP address of the neighbor in this network.

Neighbor Router ID

Router ID of the neighbor. The two addresses can match.

Neighbor State

Status of the neighbor. The status can adopt the following values:

● down: The neighbor is not reachable

● attempt and init: Short-lived statuses during initialization

● two-way: Two-way receipt of Hello packets

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

315

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

● exchange start, exchange and loading: Statuses during the exchange of the link state database

● full: Status when the databases are synchronized.

Note

The "full" status is the normal status with a stable neighbor if one of the partners is a designated router or a backup designated router. Otherwise the "two-way" status is the normal stable status.

Transit Area ID

Transit area ID of the neighbor if the neighbor is virtual.

Assoc. Area Type

Status of the area over which the neighbor-neighbor relation is maintained. The following area types are possible:

● Standard

● Stub

● NSSA

Priority

Router priority of the neighbor. This is only significant when selecting the designated router on a network. For virtual neighbors, this information is irrelevant.

Hello Suppr.

Displays suppressed Hello packets to the neighbor. This field normally displays "no".

Retrans Queue

Length of the queue with packets still to be transmitted.

Events

Number of status changes.

Note

The "full" status is the normal status with a stable neighbor if one of the partners is a designated router or a backup designated router. Otherwise the "two-way" status is the normal stable status.

Syntax of the Command Line Interface

Table 4- 100 OSPFv2 Neighbors - CLI\ROUTER\OSPF>

Description

Displays the current neighbors. - neighbrs

Command Comment

316

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

4.7.12

Overview

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

OSPFv2 State Database

The link state database is the central database for managing all links with in an area. It consists of the link state advertisements (LSAs). The most important data of these LSAs is displayed in this dialog.

Figure 4-148 OSPFv2 Link State Database

Area ID

Area ID to which this link state advertisement (LSA) belongs.

LS Type

Type of LSA. This can be:

● Router

● Network

● Summary

● ASBR (Autonomous System Border Router).

Link State ID

Unique ID of the LSA.

Router ID

Router that generated this LSA.

Sequence No.

Sequence number of the LSA. Each time an LSA is renewed, this sequential number is incremented by one.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

317

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Syntax of the Command Line Interface

Table 4- 101 OSPFv2 State Database - CLI\ROUTER\OSPF>

Command lnkstate

Description

Displays the current links state table.

Comment

-

Note

For more detailed information on LSAs, refer to the section on configuration and diagnostics over SNMP.

4.7.13

Introduction

VRRP

In the submenus of the "VRRP" menu, you can set the VRRP parameters.

The VRRP introduces redundancy to the IPv4 network. Various IP routers can take over the routing functionality of another router if the actual router fails. To allow this, several routers in an IP subnet are grouped together to form one virtual router This virtual router is assigned a list of IPv4 addresses for which the relevant master takes on the routing functionality.

4.7.14

Introduction

VRRP Virtual Routers

In this dialog, you can monitor the virtual routers of this system.

With the "New Entry" button, you can create new virtual routers.

A maximum of 32 virtual routers can be configured.

318

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Figure 4-149 VRRP Virtual Routers

VID

VLAN ID of the subnet. The IP addresses set up for this and all subnet parameters can be found in the "Router Subnets" menu.

VRID

The ID of the virtual router is displayed in this column. This assigned ID must be unique for this VLAN. Valid values are 1 through 255.

Primary IP Address

The primary IP address on this VLAN is displayed in this column. The entry 0.0.0.0 means that the smallest address on this VLAN is used. Otherwise all IP addresses configured on this VLAN in the "Router Subnets" menu are valid addresses.

Router State

The current state of the virtual router is displayed in this column. Possible values are:

● Master: This router handles the routing functionality for all assigned IP addresses.

● Backup: Currently, a different router handles the routing functionality is in the "Master" state. The displayed router takes over the redundancy function and is ready to take over if the master fails.

● Disabled: This router was disabled by the administrator. It no longer handles router redundancy.

● Initialize: The virtual router has just been turned on. It will soon change to the "Master" or

"Backup" state.

● Invalid: The configuration of this virtual router is invalid. Please check the configuration.

Master IP Address

The IP address of the router currently handling routing functionality is displayed in this column.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

319

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Predef. Master

This column indicates whether at least one redundant router address belongs to this

IE Switch X-400. In this case, the priority is predefined at 255 and the

IE Switch X-400 immediately changes to the "Master" status when it is turned on.

Priority

The priority of the virtual router is set in this column. Valid values are 1 through 255. 255 is intended for the owner of the redundant router addresses. All other priorities can be distributed freely among the redundant routers. The higher the priority, the earlier the router becomes "Master".

Advert. Interval

This column shows the interval at which the master router sends its advertisement packets.

Preempt

This column indicates whether a router with higher priority will interrupt a different router with lower priority.

Creating or changing a virtual router

With the "New Entry" button in the "VRRP Virtual Routers" dialog, you can create a new virtual router.

320

Figure 4-150 VRRP Virtual Router Configuration

VLAN ID

Here, you enter the VLAN on which the virtual router will be active. Valid values are all IDs of

VLANs that have at least one configured IP subnet.

VR ID

Enter the ID of the virtual router here. This must be unique on the connected LAN.

Virtual MAC Address

The virtual MAC address is derived automatically from the IP of the virtual router and a fixed prefix.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Primary IP Address

Here, you enter the address that will be used as the IP source address as soon as this virtual router changes to the "Master" state.

Note

If you have only configured one IP subnet on this VLAN, no entry is necessary (0.0.0.0). If, on the other hand, you have configured several IP subnets on this VLAN and you want a particular address to be used as the source address for VRRP packets, you should enter this address here. Otherwise, the numerically smallest IP address will be used.

Priority

Enter the priority of this virtual router here. Valid values are 1 through 255. Priority 255 is intended for the owner of the router addresses. All other priorities can be distributed freely among the redundant routers. The higher the priority, the earlier the router becomes

"Master".

Advertisement Interval

Here, you enter the interval in seconds after which a router in the "Master" state repeats the sending of an advertisement packet.

Router enabled

Here, you decide whether the router takes part in the VRRP protocol.

Router is Master

Here, you decide whether the router should be in the "Master" status from the start. In this case, the primary IP address is added immediately to the router addresses.

Preempt lower Priority Master

Here, you decide whether this router can interrupt a different router with lower priority.

Syntax of the Command Line Interface

VRRP - CLI\VRRP\ROUTERS>

Command info add <VID> <VRID> status <VID> <VRID> <E|D> master <VID> <VRID> <E|D> preempt <VID> <VRID> <E|D> primip <VID> <VRID> <IP> priority <VID> <VRID> <0..255> advint <VID> <VRID> <0..255> delete <VID> <VRID>

Description

Displays the current virtual routers.

Adds a new virtual router.

Enables/disables a virtual router

Specifies whether or not the virtual router is master.

Specifies whether higher priority routers can interrupt.

Changes the primary IP address of a virtual router.

Comment

-

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Administrator only.

Changes the priority of a virtual router. Administrator only.

Changes the interval at which a virtual router sends advertisement packets.

Administrator only.

Deletes a virtual router. Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

321

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

4.7.15

Introduction

VRRP Associated IP Addresses

In this menu item, you can view the redundant IP addresses of the virtual routers.

Figure 4-151 VRRP Associated IP Addresses

VID

VLAN ID of the subnet. The IP addresses set up for this and all subnet parameters can be found in the "Router Subnets" menu.

VRID

The ID of the virtual router is displayed in this column. This assigned ID must be unique for this VLAN. Valid values are 1 through 255.

Associated IP Addresses

This column displays the router IP addresses monitored by this virtual router. If a router takes over the role of master, the routing function is taken over by this router for all these IP addresses.

322

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Creating or changing the monitored IP addresses

With the link in the first two columns, you can add, change or delete IP addresses to be monitored.

Figure 4-152 VRRP Associated IP Address Configuration

VLAN ID

Shows the VLAN on which the configured virtual router is located.

VR ID

Shows the ID of this virtual router.

Text box 1:, Text box 2:, Text box 3: Text box 4:

Here, you enter the redundant IP addresses to be monitored in this virtual router.

Syntax of the Command Line Interface

VRRP - CLI\ROUTER\VRRP\ADDR>

Command info add <VID> <VRID> <IP> delete <VID> <VRID> <IP>

Description

Shows the currently monitored

IP addresses.

Comment

-

Adds a new IP address to be monitored.

Administrator only.

Deletes a monitored IP address. Administrator only.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

323

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

4.7.16

Introduction

VRRP Statistics

In this menu, you can view the statistics of the VRRP protocol and all configured virtual routers.

You can reset these statistics to 0 with the "Reset Counters" button.

Figure 4-153 VRRP Statistics

VRID Errors

Shows the number of received VRRP packets containing an unsupported VRID.

Version Errors

Shows the number of received VRRP packets containing an invalid version number.

Checksum Errors

Shows the number of received VRRP packets containing an invalid checksum.

VID

VLAN ID of the subnet. The IP addresses set up for this and all subnet parameters can be found in the "Router Subnets" menu.

VRID

The ID of the virtual router is displayed in this column. This assigned ID must be unique for this VLAN. Valid values are 1 through 255.

324

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Up Time

This column shows the time at which the virtual router went into operation.

Note

The MIB object "vrrpOperVirtualRouterUpTime" represents the time at which the virtual router was turned on. To make the information clearer, the "Up Time" column shows how long the virtual router has been turned on.

More precisely, the "Up Time" column shows the difference between the current sysUpTime and the MIB object.

Became Master

Shows how often this virtual router changed to the "Master" state.

Address Errors

Shows how often a packet was received that contained a bad address list.

Interval Errors

This column shows the number of bad received packets whose advertisement interval no longer matches the locally set value.

Auth Errors

This column shows the number of bad received packets whose authentication type was not type 0. Type 0 is the only acceptable type and means "no authentication".

Note

The "Auth Errors" column is the sum of the MIB objects "vrrpStatsInvalidAthType" and

"vrrpStatsAuthTypeMismatch".

Type Errors

This column shows the number of bad received packets whose VRRP was not set correctly.

Packet Errors

This column shows the number of bad received packets. This includes both packets with an incorrect length as well as packets whose TTL value was incorrect in the IP header.

Note

The "Packet Errors" column is the sum of the MIB objects "vrrpStatsPacketLengthErrors" and "vrrpStatsIpTtlErrors".

Prio 0 received

Displays how many packets with priority 0 were received. Packets with priority 0 are sent when a master router is shut down. These packets allow a fast handover to the relevant backup router.

Prio 0 sent

Displays how many packets with priority 0 were sent. Packets with priority 0 are sent when a master router is shut down. These packets allow a fast handover to the relevant backup router.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

325

Configuration using Web Based Management and Command Line Interface

4.7 The Router menu (SCALANCE X414-3E)

Syntax of the Command Line Interface

VRRP - CLI\ROUTER\VRRP\STAT

Command

About resetc

Description

Displays the VRRP statistics.

Resets the statistics to 0.

Comment

-

Administrator only.

326

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration and diagnostics over SNMP

5

Configuration of an IE switch over SNMP

Using SNMP (Simple Network Management Protocol), a network management station can configure and monitor SNMP-compliant nodes such as an IE switch. To allow this, a management agent is installed on the node with which the management station exchanges data using Get and Set requests. The IE switch supports SNMPvV1, SNMPv2, and

SNMPv3.

The configurable data is stored on the IE switch in a database known as the MIB

(Management Information Base) that is accessed by the management station or Web Based

Management.

SIMATIC NET SNMP OPC Server

The SNMP OPC server makes available the SNMP information from TCP/IP networks on the

IOPC interface with SNMP (Simple Network Management Protocol). With the aid of the

SNMP OPC server, any OPC client systems (such as WinCC) can now access diagnostic and parameter data of SNMP-compliant components.

Figure 5-1 WinCC example of network diagnostics with the SIMATIC NET SNMP OPC server

Non SNMP-compliant components can also be included in the plant visualization using their

IP addresses. This allows, for example not only simple device diagnostics but also detailed information such as redundant network structures or network load distributions of entire

TCP/IP networks to be displayed. With the additional monitoring of this data, device failures can be detected and localized quickly. This increases operational safety and improves plant availability. You configure the devices to be monitored by the SNMP OPC server using

STEP 7 (as an alternative you can use NCM PC).

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

327

Configuration and diagnostics over SNMP

You will find further information on the SNMP OPC server from SIMATIC NET with the following link:

SNMP OPC server ( http://www.automation.siemens.com/mcms/industrialcommunication/en/ie/software/network-management/snmp-opc-server/Pages/snmp-opcserver.aspx

)

SNMP OPC MIB compiler and profile files

The range of information that can be monitored by the devices with the SNMP OPC server depends on the particular device profile. With the integrated MIB compiler, existing profiles can be modified and new device profiles created for any SNMP-compliant device.

The MIB compiler of the SNMP OPC server requires MIB files according to the SMIv1 standard. This means that you require a modified version of the private SMIv2 MIB file of the

IE switch. The SMIv1 MIB of the IE switch and a complete device profile can be downloaded using the following link:

Private MIBs ( http://support.automation.siemens.com/WW/view/en/22015045 ) (Entry ID:

22015045)

Standard MIBs

A distinction is made between standardized MIBs defined in RFCs and private MIBs. Private

MIBs contain product-specific expansions that are not included in standard MIBs.

An IE switch supports the following MIBs:

● RFC 1213: MIB II (all groups except egp and transmission)

● RFC 2233: Interface MIB (conformance group 4, 5, 6, 7, 10, 11, 13)

● RFC 1286, RFC 1493: Bridge MIB (dot1dBase and dot1dStp)

● RFC 1724: RIP Version 2 MIB Extension (SCALANCE X414-3E)

● RFC 1757: RMON MIB (statistics, history, alarm, event)

● RFC 1850: OSPF Version 2 Management Information Base (SCALANCE X414-3E)

● RFC 2665: EtherLike MIB (dot3StatsTable for SMIv2)

● RFC 2674p: P BRIDGE MIB (conformance group 1, 2, 3, 4, 6, 8, 9)

● RFC 2674q: Q BRIDGE MIB (conformance group 1, 3, 4, 6, 7, 8, 5 to some extent)

● RFC 1907: SNMPv2 MIB (conformance group 5, 6, 7, 8, 9)

● RFC 2571: SNMP FRAMEWORK MIB (SNMPv3 MIB: Conformance group 1)

● RFC 2572: SNMP MPD MIB (SNMPv3 MIB: Conformance group 1)

● RFC 2573: SNMP NOTIFICATION MIB

(SNMPv3 MIB: Conformance group 1, 2)

● RFC 2573: SNMP PROXY MIB

● RFC 2573: SNMP TARGET MIB (SNMPv3 MIB: Conformance group 1, 2, 3)

● RFC 2574: SNMP-USER-BASED-SM-MIB

(SNMPv3 MIB: Conformance group 1)

328

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Configuration and diagnostics over SNMP

● RFC 2575: SNMP VIEW-BASED ACM MIB

(SNMPv3 MIB: Conformance group 1)

● RFC 2787: VRRP-MIB (Virtual Router Redundancy Protocol, SCALANCE X414-3E only)

Private MIB

For information on the private MIB of the IE switch, refer to Appendix B of this manual.

Access to the private MIB file of an IE switch

Follow the steps below to access the private MIB file of an IE switch:

1. Open Web Based Management.

2. Select the "System -> Save & Load HTTP" menu item

3. Click on the "Save Private MIB" button.

4. You will be prompted to select a storage location and a name for the file or to accept the proposed file name.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

329

Configuration and diagnostics over SNMP

330

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6

6.1 Configuring with PROFINET IO

Using PROFINET IO

One option for diagnostics, parameter assignment, and generation of alarm messages of the connected IE switch is to use PROFINET IO.

Here, you can see how you can use the options of PROFINET IO for a connected IE switch.

In the example, it is assumed that a PROFINET IO Controller V2 is already configured with a

PROFINET IO chain (see also PROFINET IO System Manual).

Note

STEP 7 V5.4 SP5 or a higher version is required.

Based on the example of a SCALANCE X-400, the following section shows a hardware configuration with a PROFINET IO line.

Figure 6-1 HW Config PROFINET IO station setup

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

331

PROFINET IO functionality

6.1 Configuring with PROFINET IO

Linking IE switches

To include the individual IE switches as PN IO devices, the IE switch must exist in the module catalog under PROFINET IO.

Procedure

If the devices are not yet included in STEP 7, follow the steps below:

1. In the dialog, select HW Config -> Options "Install GSD files".

The following screen appears:

Figure 6-2 Install GSD files

332

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.1 Configuring with PROFINET IO

2. Using the "Browse" function go to the supplied xml file (for example GSDML-Vx.x-

Siemens-002A-SCALANCE_X400-YYYYMMDD.xml - Y, M and D stand for the issue date of the file).

Figure 6-3 HW Config PROFINET IO - inserting a SCALANCE switch

3. Then adopt the file using the "Install" function.

The IE switches are now included in the module catalog (refer to the module catalog in the following figure).

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

333

PROFINET IO functionality

6.1 Configuring with PROFINET IO

4. Take the IE switch you require from the hardware catalog (here, for example, SCALANCE

X408-2 (PROFINET IO > Network Components > SCALANCE X-400 Switches >

SCALANCE X408-2)). Drag the selected SCALANCE to the PROFINET IO system.

Figure 6-4 HW Config PROFINET IO setting global parameters

5. Click on the "(1)SCALANCE" icon so that the slots of the IE switch are displayed in the lower part of the screen. By double-clicking on slot 0, you can set the global parameters of the IE switch (substitute module) as shown in the figure.

6. By double-clicking on a slot, you can view and set its properties.

334

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.1 Configuring with PROFINET IO

7. Click on the slots of the ports to set the port-specific parameters.

Figure 6-5 HW-Config

8. Open the "Object Properties of the SCALANCE X408-2" dialog in HW Config (right-click on the Icon -> Object Properties) and enter the name of the PROFINET IO device. Click

OK to exit the dialog.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

335

PROFINET IO functionality

6.1 Configuring with PROFINET IO

9. Select the Station > Save and Compile menu command.

10.Interconnect the devices over the network and turn on the power supplies of the networked devices.

Figure 6-6 HW Config assigning PROFINET IO device names

336

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.1 Configuring with PROFINET IO

To transfer the name to the SCALANCE X408-2, you require an online connection from the

PG to the PROFINET IO device.

1. You transfer the device name to the SCALANCE X408-2 with PLC > Ethernet > Assign

Device Name.

Figure 6-7 Assigning a device name

If you are using multiple PROFINET IO devices, multiple PROFINET IO devices are also indicated in the "Assign device name" dialog. In this case, you should compare the MAC address of the device with the indicated MAC address and select the correct IO device. You can also check the assignment visually with the "Flashing On/Off" button (all the LEDs of the selected IE switch flash).

1. Click on the "Assign Name" button in the "Assign Device Names" dialog box. The device name is stored permanently on the IE switch. After assigning the name, the device name you assigned appears in the dialog box.

2. Download the hardware configuration to the controller (in this example, the CP 1616).

Select PLC > Download to Module

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

337

PROFINET IO functionality

6.2 Settings in HW Config

6.2 Settings in HW Config

Note

For the IE Switch X-400, the power supply and the C-PLUG interrupt settings are spread over two screens "Power Supply" and "CPU". For the IE Switch X-300, these settings are made in one screen.

Power supply monitoring

Here, you set the parameters of the IE switch relevant to the power supply.

Redundant power supply

● Not monitored

The failure of one of the two power supplies does not cause an alarm.

● Monitored

The failure of one of the two power supplies causes an alarm.

Figure 6-8 Properties - Power supply for an IE Switch X-400

338

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.2 Settings in HW Config

CPU monitoring

Here, you set the parameters of the IE switch relevant to the CPU module.

C-PLUG

● Not monitored

The C-PLUG is not monitored.

● Monitored

A C-PLUG fault causes an alarm.

Figure 6-9 Properties - CPU with an IE Switch X-400

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

339

PROFINET IO functionality

6.2 Settings in HW Config

Power supply monitoring and CPU monitoring for an IE Switch X-300

The same options are available here as described in the earlier part the chapter.

340

Figure 6-10 Properties - power supply and CPU for an IE Switch X-300

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.2 Settings in HW Config

Port-specific settings

Here, you can make the settings for the individual ports of the IE switches.

The following screen shows these settings based on the example of a SCALANCE X408-2.

Figure 6-11 Properties - RJ-45 Gigabit Ethernet

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

341

PROFINET IO functionality

6.2 Settings in HW Config

Figure 6-12 Properties - RJ-45 Gigabit Ethernet port options

Settings made during configuration

The transmission rate of the port can be set to Autonegotiation or fixed, for example, at 100

Mbps full duplex.

Note

If you select a fixed speed and duplexity, you need to set the check mark for "Disable autonegotiation".

342

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.3 Access options over PROFINET IO

6.3 Access options over PROFINET IO

Note

The slot functions X-300 table applies to all IE switches X-300 with the exception of the following devices that have their own tables:

X308-2M slot functions

• Slot functions of the XR-324-12M

Slot functions of the X302-7EEC and X307-2EEC

• Slot functions of the XR324-4M EEC

Slot functions X-300

The IE Switches X-300 have a subslot per switch port in slot 0.

Functions that cannot be assigned uniquely to one port are assigned to the device access point (slot 0).

Slot 0 Subslot 1

• Alarms

Data records (4.5)

Subslot 8001 - 8010

SCALANCE X304-2FE:

Subslot 8001 - 8006

SCALANCE X306-1LD FE:

Subslot 8001 - 8007

SCALANCE X320-1FE:

Subslot 8001 - 8021

SCALANCE X320-3LD:

Subslot 8001 - 8023

• Alarms (IEC)

Data records (IEC)

Device Access Point (DAP)

Interface connection

C-PLUG

Redundant power supply

Switch port 1 - 10 (or 1 - 6, 1 - 7, 1 - 21, 1 - 23)

• Alarm response

Port state

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

343

PROFINET IO functionality

6.3 Access options over PROFINET IO

X308-2M slot functions

the IE switch X308-2M has 3 slots. The fixed slots are assigned to slot 0. The other slots, each with 2 ports, are assigned to slot 1 and slot 2.

Functions that cannot be assigned uniquely to a port are assigned to the Device Access

Point (slot 0).

Slot 0 Subslot 1

Alarms

Data records (4.5)

Device Access Point (DAP)

Interface connection

• C-PLUG

Redundant power supply

Slot 1; slot 2

Subslot 8001 - 8004

Subslot 8001 - 8002

Alarms (IEC)

• Data records (IEC)

Alarms (IEC)

• Data records (IEC)

Switch port 1 - 4

Alarm response

• Port state

Switch port 5 - 6;

Switch port 7 - 8

• Alarm response

Port state

Slot functions of the XR324-12M

The IE Switch XR324-12M has several slots (slot 1 - slot 12) each with 2 ports.

Functions that cannot be specifically assigned to a port are assigned to the device access point (slot 0).

Slot 0 Subslot 1

• Alarms

Data records (4.5)

Slot 1 to slot 12

Subslot 8001 - 8002

• Alarms (IEC)

Data records (IEC)

Device Access Point (DAP)

• Interface connection

C-PLUG

• Redundant power supply

Switch port 1.1 - 12.2

Alarm response

Port state

344

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.3 Access options over PROFINET IO

Slot functions of the X302-7EEC and X307-2EEC

The IE Switch X302-7EEC and X307-2EEC has a subslot per switch in slot 0. Functions that cannot be assigned uniquely to one port are assigned to the device access point (slot 0).

Slot 0 Subslot 1

Alarms

Data records (4.5)

Device Access Point (DAP)

Interface connection

• C-PLUG

Redundant power supply

Subslot 8001 - 8009

Alarms (IEC)

• Data records (IEC)

Switch port 1 - 9

Alarm response

• Port state

Slot functions of the XR324-4M EEC

The IE Switch XR324-4M EEC has several slots. The fixed slots are assigned to slot 0. The other slots each with 2 ports are assigned to slot 1 and slot 4.

Functions that cannot be assigned specifically to one port are assigned to the device access point (slot 0).

Slot 0 Subslot 1

Alarms

• Data records (4.5)

Device Access Point (DAP)

Interface connection

• C-PLUG

Redundant power supply

Slot 1 to slot 4

Subslot 8001-8016

Subslot 8001 - 8002

• Alarms (IEC)

Data records (IEC)

Alarms (IEC)

Data records (IEC)

Switch port 1-16

• Alarm response

Port state

Switch port 1.1 - 4.2

Alarm response

• Port state

Slot functions X-400

The IE Switch X-400 has several slots each with up to four ports. Functions that cannot be assigned uniquely to a port are assigned to the Device Access Point (slot 0) or to the other higher-level modules (CPU and power module).

Slot 0 Subslot 1

Alarms (IEC)

Data records (IEC)

Device Access Point (DAP)

Interface connection

Slot 2 Subslot 1

Alarms 0x200

• Data records 10,12

Power module

Redundant power supply

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

345

PROFINET IO functionality

6.3 Access options over PROFINET IO

Slot 3 (X408)

Slot 4 (X414)

Subslot 1

Slots 5, 6 and 8 (X408)

Slots 5-7, 9-15 (X414)

Subslot

8001-800n

Alarms 0x201, 0x202, 0x203, 0x204

Data records 11,13

• Alarms (IEC)

Data records (IEC)

CPU module

C-PLUG

Switch port 5.1-8.4 (X408)

Switch port 5.1-15.2 (X414)

Alarm response

• Port state

Generating alarms

The user configures exactly the assignment and required properties of the ports. This makes it necessary to match the configuration and installation. If the setting in STEP 7 requires that port 3 is not linked, this must be taken into account during installation. The power fault mask set by STEP 7 is stored retentively and the port fault mask is reset. If you exit DataEX, the settings in the fault mask made by STEP 7 are retained and continue to apply even without

PROFINET operation.

● Influence of the SELECT/SET button during DataEX.

Pressing the button, to set the fault mask has no effect. The port LEDs flashing indicates to the user that there has been no change in the fault mask.

● Effect of other signaling mechanisms during DataEX

The fault mask is displayed as set by STEP 7 both in the Web interface and in CLI.

Changes are not possible. The message "Setting not possible because of PROFINET IO" is displayed.

Structure of the data records

Note

Data records 4 and 5 relate to the IE Switch X-300, data records 10 to 13 to the IE Switch X-

400.

Data record 4:

Access: Read-write,

Structure: typedef struct {

Word BlockType;

Word BlockLength;

Byte BlockVersionHigh:

Byte BlockVersionLow:

DWord Alarm_enable; };

346

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

BlockType:

PROFINET IO functionality

6.3 Access options over PROFINET IO

1: Constant

BlockLength:

6: Constant in device data, designates the length without Type+ Length

BlockVersionHigh:

1: Constant in device data, designates the major version

BlockVersionLow:

1: Constant in device data, designates the minor version

Enable_alarms:

This bit list specifies what is to be monitored. If a bit is set, this alarm source is enabled.

Reserved

Bit 2 - 31

0

C-PLUG Red_power

1: Missing or incorrect C-

PLUG generates alarm

Bit 1 Bit 0

0: No C-PLUG monitoring 0: No monitoring of the redundant power supply

1: Monitoring of the redundant power supply

Data record 5:

Supplies the current alarm setting for this port

Access: Read-only typedef struct {

Word BlockType;

Word BlockLength;

Byte BlockVersionHigh;

Byte BlockVersionLow;

DWord status; };

BlockType:

1: Constant

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

347

PROFINET IO functionality

6.3 Access options over PROFINET IO

BlockLength:

6: Constant in device data, designates the length without Type+ Length

BlockVersionHigh:

1: Constant in device data, designates the major version

BlockVersionLow:

1: Constant in device data, designates the minor version

Status:

Reserved

Bits 8-31

0

C-PLUG_status

Bits 4-7

Information regarding the configuration plug of the network component

0: C-PLUG inserted and ok

1:C-PLUG not inserted

2: C-PLUG inserted but not ok (incorrect type)

3: C-PLUG inserted but not ok (checksum error)

Reserved

Bits 2-3

Fault_line_status

Bit 1

Information regarding the current state of the signaling contact

0: Fault line passive

1: Fault line active

Power line redundancy

Bit 0

This bit provides information about the redundant power supply

0: not redundant

1: redundant

Data record 10 (power supply, parameter assignment)

Access: Read Write,

Structure: typedef struct {

Word BlockType;

Word BlockLength;

Byte BlockVersionHigh:

Byte BlockVersionLow:

DWord Alarm_enable; };

BlockType

1: Constant

348

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

BlockLength

PROFINET IO functionality

6.3 Access options over PROFINET IO

6: Constant in device data, designates the length without Type+ Length

BlockVersionHigh

1: Constant in device data, designates the major version

BlockVersionLow

1: Constant in device data, designates the minor version

Enable_alarms

Reserved

Bits 1-31

0

Red_power

Bit 0

0: No monitoring of the redundant power supply

1: Monitoring of the redundant power supply

Data record 11 (CPU, parameter assignment)

Structure

typedef struct {

Word BlockType;

Word BlockLength;

Byte BlockVersionHigh:

Byte BlockVersionLow:

Word Alarm_Mode;

DWord Alarm_Parameter; };

BlockType

1: Constant

BlockLength

6: Constant in device data, designates the length without Type+ Length

BlockVersionHigh

1: Constant in device data, designates the major version

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

349

PROFINET IO functionality

6.3 Access options over PROFINET IO

BlockVersionLow

1: Constant in device data, designates the minor version

Alarm_Mode

Reserved

Bits 2-31

0

Enhanced_Alarm_Mode

Bit 1

No function

Show_C-PLUG_Error

Bit 0

0: No monitoring of the C-PLUG

1: Missing or incorrect C-PLUG generates an alarm.

Data record 12 (power supply, module status)

Supplies the current alarm setting for this port

Access: Read-only typedef struct {

Word BlockType;

Word BlockLength;

Byte BlockVersionHigh;

Byte BlockVersionLow;

DWord status; };

BlockType

1: Constant

BlockLength

6: Constant in device data, designates the length without Type+ Length

BlockVersionHigh

1: Constant in device data, designates the major version

BlockVersionLow

1: Constant in device data, designates the minor version

350

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Status

PROFINET IO functionality

6.3 Access options over PROFINET IO

Reserved

Bits 2-31

0

Fault_line_status

Bit 1

Information regarding the current state of the signaling contact

0: Fault line passive

1: Fault line active

Power line redundancy

Bit 0

This bit provides information about the redundant power supply

0: not redundant

1: redundant

Data record 13 (CPU, module status)

Structure

typedef struct {

Word BlockType;

Word BlockLength;

Byte BlockVersionHigh;

Byte BlockVersionLow;

DWord PortState; byte PortType; byte reserved; };

BlockType

1: Constant

BlockLength

6: Constant in device data, designates the length without Type+ Length

BlockVersionHigh

1: Constant in device data, designates the major version

BlockVersionLow

1: Constant in device data, designates the minor version

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

351

PROFINET IO functionality

6.3 Access options over PROFINET IO

Status

Reserved

Bits 2-31

0

C-PLUG_status

Bits 0-1

Information regarding the C-PLUG of the network component

0: C-PLUG inserted and OK

1: C-PLUG not inserted

2: C-PLUG inserted but not OK (incorrect type)

3: C-PLUG inserted but not OK (checksum error)

352

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.4 Data record 0x802A (PDPortDataReal)

6.4

Structure

Data record 0x802A (PDPortDataReal)

typdef struct{

Word BlockType;

Word BlockLength;

Byte BlockVersionHigh;

Byte BlockVersionLow;

Word Padding;

Word SlotNumber;

Word SubslotNumber;

Byte LengthOwnPortID;

8 Byte OwnPortID;

Byte NumberOfPeers;

Word Padding;

Byte LengthPeerPortID;

8 Byte PeerPortID;

Byte LengthPeerChassisID;

8 Byte PeerChassisID;

Word Padding;

DWord LineDelay;

6 Byte PeerMACAddress;

Word Padding;

Word MAUType;

Word Padding;

DWord DomainBoundary;

DWord MulticastBoundary;

Word LinkState;

Word Padding;

DWord MediaType;};

BlockType

Constant = 0x020F

BlockLength

Constant, describes the length of the data record without the BlockType and BlockLength fields.

BlockVersionHigh

Constant = 1, designates the major version.

BlockVersionLow

Constant = 0, designates the minor version.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

353

PROFINET IO functionality

6.4 Data record 0x802A (PDPortDataReal)

SlotNumber

Slot number, refer to the section "Access options via PROFINET IO"

SubslotNumber

Subslot number, refer to the section "Access options via PROFINET IO"

LengthOwnPortID

Length of the OwnPortID field in bytes.

OwnPortID

ID of the port used.

NumberOfPeers

Number of neighboring ports.

LengthPeerPortID

Length of the PeerPortID field in bytes.

PeerPortID

ID of the neighboring port.

LengthPeerChassisID

Length of the PeerChassisID field in bytes.

PeerChassisID

ID of the neighboring device.

LineDelay

LineDelay.FormatIndicator = 0

Value (hexadecimal)

0x00000000

0x00000001 – 0x7FFFFFFF

Meaning

Line delay and cable delay unknown.

Line delay in nanoseconds.

354

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.4 Data record 0x802A (PDPortDataReal)

LineDelay.FormatIndicator = 1

Value (hexadecimal)

0x00000000

0x00000001 – 0x7FFFFFFF

Meaning

Reserved

Cable delay in nanoseconds.

PeerMACAddress

MAC address of the neighboring device.

MAUType

Value (hexadecimal)

0x0000 – 0x0004

0x0005

0x0006-0x0009

0x000A

0x000B

0x000C

0x000D

0x000F

0x0010

0x0011

0x0012

0x0013 – 0x0014

0x0015

0x0016

0x0017

0x0018

0x0019

0x001A

0x001B – 0x001C

0x001D

0x001E

0x001F

0x0020 – 0x002D

0x002E

0x002F – 0x0035

0x0036

0x0037 – 0xFFFF

Meaning

Reserved

10BASET

Reserved

10BASETXHD

10BASETXFD

10BASEFLHD

10BASEFLFD

100BASETXHD

100BASETXFD (default)

100BASEFXHD

100BASEFXFD

Reserved

1000BASEXHD

1000BASEXFD

1000BASELXHD

1000BASELXFD

1000BASESXHD

1000BASESXFD

Reserved

1000BASETHD

1000BASETFD

10GigBASEFX

Reserved

100BASELX10

Reserved

100BASEPXFD

Reserved

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

355

PROFINET IO functionality

6.4 Data record 0x802A (PDPortDataReal)

DomainBoundary

Specifies which multicast addresses are blocked.

MulticastBoundary

The individual bits of the DWord variables specify which of the 32 first RT_CLASS_2 multicast addresses (from 01-0E-CF-00-02-00 bis 01-0E-CF-00-02-1F) is blocked.

Bit

0

...

31 1

0

1

0

Value

1

0

Meaning

The multicast MAC address 01-0E-CF-00-02-00 will be blocked.

The multicast MAC address 01-0E-CF-00-02-00 will not be blocked.

The multicast MAC address 01-0E-CF-00-02-xx will be blocked.

The multicast MAC address 01-0E-CF-00-02-xx will not be blocked.

The multicast MAC address 01-0E-CF-00-02-1F will be blocked.

The multicast MAC address 01-0E-CF-00-02-1F will not be blocked.

LinkState

LinkState.Link

Value (hexadecimal)

0x00

0x01

0x02

0x03

0x04

0x05

0x06

0x07

0x08 - 0xFF

LinkState.Port

Value (hexadecimal)

0x00

0x01

0x02

0x03

0x04

0x05

Meaning

Reserved

Up (ready to send packets)

Down

Testing (no user data is transported)

Unknown (status cannot be identified)

Dormant (waits for external action)

Not present

LowerLayerDown

Reserved

Meaning

Unknown

Disabled / discard

Blocked

Port listening enabled

Learn

Forward

356

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.4 Data record 0x802A (PDPortDataReal)

Value (hexadecimal)

0x06

0x07 – 0xFF

Meaning

Interrupted

Reserved

MediaType

Value (hexadecimal)

0x00

0x01

0x02

0x00

0x04 – 0xFFFFFFFF

Meaning

Unknown

Copper cable

Fiber-optic cable

Wireless communication

Reserved

Note

You will find further information on the IEC data record in IEC 61158.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

357

PROFINET IO functionality

6.5 MRP configuration

6.5 MRP configuration

Configuration in STEP 7

To create the configuration in STEP 7, select the parameter group "Media redundancy" on the PROFINET interface.

Set the following parameters for the MRP configuration of the device:

● Domain

● Role

● Ring port

● Diagnostic interrupts

These settings are described below.

Note

Valid MRP configuration

In the MRP configuration in STEP 7, make sure that all devices in the ring have a valid MRP configuration before you close the ring. Otherwise, there may be circulating frames that will cause a failure in the network.

One device in the ring needs to be configured as "redundancy manager and all other devices in the ring as "clients".

Note

Changing the role

If you want to change the MRP role, first open the ring.

Note

Starting up and restarting

The MRP settings remain in effect following a restart of the device or following a power down and hot restart.

Note

Prioritized startup

If you configure MRP in a ring, you cannot use the "prioritized startup" function in PROFINET applications on the devices involved.

If you want to use the "prioritized startup" function, then disable MRP in the configuration.

In the STEP 7 configuration, set the role of the relevant device to "Not a node in the ring".

358

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Domain

Role

PROFINET IO functionality

6.5 MRP configuration

Single MRP rings

If you want to configure a single MRP ring, leave the factory setting "mrpdomain 1" in the

"Domain" drop-down list.

All devices configured in a ring with MRP must belong to the same redundancy domain. A device cannot belong to more than one redundancy domain.

If you leave the setting for "Domain" as the factory set "mrpdomain-1", the defaults for "Role" and "Ring ports" also remain active.

MRP multiple rings

If you configure multiple MRP rings, the nodes of the ring will be assigned to the individual rings with the "Domain" parameter.

Set the same domain for all devices within a ring. Set different domains for different rings.

Devices that do not belong to the same ring must have different domains.

The choice of role depends on the following use cases.

● You want to use MRP in a topology with one ring only with Siemens devices and without monitoring diagnostic interrupts:

Assign all devices to the "mrpdomain-1" domain and the role "Manager (Auto)".

The device that actually takes over the role of redundancy manager, is negotiated by

Siemens devices automatically.

● You want to use MRP in a topology with multiple rings only with Siemens devices and without monitoring diagnostic interrupts (MRP multiple rings):

– Assign the device that connects the rings the role of "Manager".

– For all other devices in the ring topology, select the role of "Client".

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

359

PROFINET IO functionality

6.5 MRP configuration

● You want to use MRP in a ring topology that also includes non-Siemens devices or you want to receive diagnostic interrupts relating to the MRP status from a device (see

"Diagnostic interrupts"):

– Assign precisely one device in the ring the role of "Manager (Auto)".

– For all other devices in the ring topology, select the role of "Client".

● You want to disable MRP:

Select the option "Not node in the ring" if you do not want to operate the device within a ring topology with MRP.

Note

Role after resetting to factory settings

With brand new Siemens devices and those reset to the factory settings the following

MRP role is set:

• CPs:

"Manager (Auto)"

• SCALANCE X-200, SCALANCE XB-200 (PROFINET variants), SCALANCE X-300 and SCALANCE X-400:

"Automatic Redundancy Detection"

If you are operating a non-Siemens device as the redundancy manager in the ring, this may cause loss of the data traffic.

With brand new SCALANCE XB-200 (EtherNet/IP variants), SCALANCE XM-400 and

SCALANCE XR-500 IE switches and those set to the factory settings, MRP is disabled and spanning tree enabled.

Ring port 1 / ring port 2

Here, select the port you want to configure as ring port 1 and ring port 2.

With devices with more than 8 ports, not all ports can be selected as ring port.

The drop-down list shows the selection of possible ports for each device type. If the ports are specified in the factory, the boxes are grayed out.

NOTICE

Ring ports after resetting to factory settings

If you reset to the factory settings, the ring port settings are also reset.

If other ports were used previously as ring ports before resetting, with the appropriate attachment, a previously correctly configured device can cause circulating frames and therefore the failure of the data traffic.

Diagnostic interrupts

Enable the "Diagnostic interrupts" option, if you want diagnostic interrupts relating to the

MRP status on the local CPU to be output.

360

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

PROFINET IO functionality

6.5 MRP configuration

The following diagnostic interrupts can be generated:

● Wiring or port error

Diagnostic interrupts are generated if the following errors occur at the ring ports:

– Connection abort on a ring port

– A neighbor of the ring port does not support MRP.

– A ring port is connected to a non-ring port.

– A ring port is connected to the ring port of another MRP domain.

● Status change active/passive (redundancy manager only)

If the status changes (active/passive) in a ring, a diagnostics interrupt is generated.

Parameter assignment of the redundancy is not set by STEP 7 (redundancy alternatives)

This option only affects switches. Select this option if you want to set the properties for media redundancy using alternative mechanism or tools such as Web based Management

(WBM), CLI or SNMP.

If you enable this option, existing redundancy settings from WBM, CLI or SNMP, are retained and are not overwritten. The parameters in the "MRP configuration" box are then reset and grayed out. The entries then have no meaning.

Special features of the XR-324-12M

Note

PROFINET IO operation of the SCALANCE XR-324-12M

PROFINET IO operation of the SCALANCE XR-324-12M is only possible if there is a media module inserted in slot 1 of this switch. The factory settings for "mrpdomain-1" specify ports

1 and 2 for MRP so that these two ports need to be made available on the switch by inserting a media module.

CAUTION

Default of the ring ports with XR-324-12M in the STEP 7 project

With SCALANCE XR-324-12M, the ring ports are set to the first configured ports in the

STEP 7 configuration of MRP if "mrpdomain 1" is selected.

You should therefore check whether the configured ring ports match the connected ring ports.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

361

PROFINET IO functionality

6.5 MRP configuration

362

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

C-PLUG

Application

7

The C-PLUG is an exchangeable medium for storage of the configuration data of the modular switch and ships with the product. This means that the configuration data remains available if the basic device is replaced.

Note

The C-PLUG must only be removed or inserted when the power supply to the device is turned off.

How it works

Power is supplied by the end device. The C-PLUG retains all data permanently when the power is turned off.

If an empty C-PLUG (factory settings or deleted with the Clean function) is inserted, all the configuration data of an IE switch is saved to it automatically when the device starts up.

Changes to the configuration during operation are saved on the C-PLUG without operator intervention if this is in the

ACCEPTED

status.

Figure 7-1 C-PLUG

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

363

C-PLUG

An IE switch with an "ACCEPTED" C-PLUG inserted uses the configuration data of the C-

PLUG automatically when it starts up. Acceptance is possible only when the data was written by a compatible device type.

This allows a basic device to be replaced quickly and simply. The C-PLUG is taken from the failed component and inserted in the replacement. The first time it is started up, the replacement device has the same configuration as the failed device except for the MAC address set by the vendor.

Note

If an IE switch is replaced, the configuration with media modules and when using a

SCALANCE X414-3E also the settings of the DIL switches and the optional configuration of extender modules must be adopted.

Diagnostics

Inserting a C-PLUG that does not contain the configuration of a compatible device type, accidentally removing the C-PLUG or general malfunctions of the C-PLUG are signaled by the diagnostics mechanisms of the device (LEDs, WEB-based management, SNMP, and

CLI).

Startup behavior

1

2

3

4

5

6

C-PLUG not found empty written with own configuration data written with other configuration data written with configuration data of a different device type defective

IE switch startup with internal configuration (if it exists) or with factory defaults. with internal configuration, immediately copies this automatically to the C-PLUG with C-PLUG configuration with third-party C-PLUG configuration with internal configuration, red LED on power module and log entry with internal configuration, red LED on power module and log entry

In cases 2 and 3, the configuration data on the switch CPU and the C-PLUG is identical. In cases 4 and 5, the configuration data is different and can be synchronized manually. In case

6, you can attempt to reformat the C-PLUG with the clean function. If problems persist, replace the C-PLUG.

Note

In case 4 (replacement) of a SCALANCE X414-3E, the DIL switch settings of the C-PLUG and not the physical switch settings are adopted. A deviation is signaled by the diagnostic options.

364

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Firmware update

8.1 Firmware update with functional firmware

8.1.1 Firmware update over HTTP/HTTPS

Web Based Management or Command Line Interface

For information on a firmware updates using HTTP/HTTPS, refer to the section "System

Save & Load menu item".

8.1.2 Firmware update over TFTP

Web Based Management or Command Line Interface

For information on a firmware updates using TFTP, refer to the section "System Save &

Load menu item".

8

8.1.3 Firmware updates over FTP

Access over the console

If an IE switch has an IP address and there is an Ethernet connection to a PC or PG, follow the steps below to update the firmware:

1. Open a console window and type in the command ftp followed by the IP address of the IE switch.

Example: ftp 192.168.20.54

2. For the login and password enter the same values as you use for WBM and CLI.

3. Enter the "put" command followed by the name of the firmware file.

Example: put v100031.lad

4. Once the file has been loaded, the IE switch closes the FTP connection and restarts.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

365

Firmware update

8.2 Firmware update using the boot software with an IE Switch X-400/XR-300

8.2 Firmware update using the boot software with an IE Switch X-

400/XR-300

Necessity of an update using the boot software

A firmware update using the boot software is necessary when the update cannot be performed using the firmware. Possible reasons for this are bad firmware or a loss of power during the flash operation.

NOTICE

Do not load and update FPGA using boot software XMODEM

Do not load and update FPGA using the boot software, if you use XMODEM.

How to start the bootloader mode

A PC or PG must be connected to the serial interface of the IE Switch X-400/XR-300. Follow the steps below to change to the bootloader mode:

1. Restart the IE switch, for example, by disconnecting and reconnecting the power.

2. While it is restarting, press any key on the PC or PG keyboard.

If there is no functional firmware on the IE Switch X-400/XR-300, the IE Switch X-400/XR-

300 automatically starts in a mode in which it can communicate with the integrated FTP server. This is only possible if the IE Switch X-400/XR-300 has an IP address.

366

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Firmware update

8.2 Firmware update using the boot software with an IE Switch X-400/XR-300

8.2.1

Procedure

Firmware update over the serial port

Follow the steps outlined below to download the firmware over the serial interface of an

IE Switch X-400/XR-300:

1. Connect a PC with a terminal program (for example HyperTerminal) to the serial interface of the IE Switch X-400/XR-300 and start the terminal program. You will find additional information on this topic in Appendix A.

2. Reset the IE Switch X-400/XR-300. Switch to display mode A or display mode D (the device automatically switches to display mode A if the SET/SEL button is not pressed for longer than one minute). Press the SET/SEL button for longer than 12 seconds. Press any key to stop the bootloader during startup. HyperTerminal displays the following message:

Figure 8-1 HyperTerminal

3. Log in to the command line interface of the bootloader with the following information:

Login: siemens

Password: siemens

4. Enter the ldimage command. Hyperterminal then displays the following message:

XMODEM .... waiting for file

ATTENTION: do not switch off till the COMPLETED or FAILED message appears

... CCCCCCC

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

367

Firmware update

8.2 Firmware update using the boot software with an IE Switch X-400/XR-300

5. Select the Transfer > Send File menu command. HyperTerminal opens the following dialog:

Figure 8-2 Send File dialog

368

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Firmware update

8.2 Firmware update using the boot software with an IE Switch X-400/XR-300

6. Enter the name of the file to be loaded and select Xmodem as the protocol. Click on the

Send button to start the upload. A dialog then opens that displays the progress of the upload:

Figure 8-3 Sending a file with Xmodem

7. On completion of the upload, Hyperterminal displays the following message:

FlashWrite .....COMPLETED

Restart the device.

Note

During the upload, do not interrupt the connection between the PC and IE Switch X-

400/XR-300 or turn off the power supply to the IE Switch X-400/XR-300.

If the upload is interrupted by a problem on the signal line, the device will boot with the old firmware the next time it is started up. You will then need to upload the firmware again.

If the firmware is not stored completely on the IE Switch X-400/XR-300 due to a loss of power, the message "Can't load image from flash -> wrong crc" appears after booting.

Once again, you must then upload the firmware again.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

369

Firmware update

8.2 Firmware update using the boot software with an IE Switch X-400/XR-300

8.2.2

Procedure

Firmware update over an Ethernet port and FTP

If the boot function of the IE switch has an IP address and there is an Ethernet connection to a PC or PG, follow the steps below to update the firmware:

Note

If a device is in bootloader mode, the Ethernet connection must be established via port 1 of the device.

1. Open a console window and type in the command ftp followed by the IP address of the IE switch. Example: ftp 192.168.20.54

2. For both the login and password, enter siemens

.

3. Enter the command put followed by the name of the firmware file. Example: put V211005.lad

4. Once the file has been loaded, the IE switch closes the FTP connection and restarts.

Make sure that you wait until the automatic restart is completed.

370

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix A

A

A.1 PC attachment at the serial interface of a SCALANCE X400

HyperTerminal

The HyperTerminal program is available in the Windows 95 / 98 / NT / 2000 / XP operating systems in the "Start > Programs > Accessories" menu. You can use this program for the following tasks:

● Downloading firmware via the serial interface of the IE Switch X-400.

● Entering commands over the Command Line Interface

Procedure

Follow the steps below to connect a PC to the IE Switch X-400:

1. Connect the serial interface of the PC with the serial interface of the IE Switch X-400 with a commercially available null modem cable.

2. Select the File > New Connection menu command in the HyperTerminal program. The

Properties window for a new connection opens.

3. Set the following parameters for the connection:

Bits per second: 115200

Data bits 8

Parity: None

Stop bits: 1

Protocol: None

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

371

Appendix A

A.1 PC attachment at the serial interface of a SCALANCE X400

X-400 pinout (null modem cable)

For connection to the PC, a null modem cable has either a 9-pin or a 24-pin D-sub female connector and a 9-pin D-sub female connector at the other end. The following table shows the pin assignment for both cable variants:

Figure A-1 Pin assignment table

Note

With SIMATIC programming devices, the serial interface may be a 25-pin female connector.

In this case, use a commercially available gender changer (25-pin male to 25-pin male).

372

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix A

A.2 PC attachment at the serial interface of a SCALANCE X300

A.2 PC attachment at the serial interface of a SCALANCE X300

HyperTerminal

The HyperTerminal program is available in the Windows 95 / 98 / NT / 2000 / XP operating systems in the "Start > Programs > Accessories" menu. You can use this program for the following tasks:

● Downloading firmware via the serial interface of the IE Switch XR-300.

● Entering commands over the Command Line Interface

Procedure

Follow the steps below to connect a PC to the IE Switch XR-300:

1. Connect the serial interface of the PC with the serial interface of the IE Switch XR-300 with the supplied connecting cable for the diagnostics port.

2. Select the File > New Connection menu command in the HyperTerminal program. The

Properties window for a new connection opens.

3. Set the following parameters for the connection:

Bits per second: 115200

Data bits 8

Parity: None

Stop bits: 1

Protocol: None

Pinout of the XR-300 (connecting cable for the diagnostics port)

Note

With rack devices (R), the connecting cable for the diagnostic port ships with the product.

A connecting cable for the diagnostics port has a 9-pin D-sub female connector for the PC and an RJ-11 plug at the other end. The following table shows the pinout.

RJ-11 plug

5

6

3

4

Pin number

1

2

Assignment n.c. n.c.

TD (Transmit Data)

SG (Signal Ground)

RD (Receive Data) n.c.

D-sub (9-pin, female)

5

6

3

4

7

Pin number

1

2

Assignment n.c.

RD (Receive Data)

TD (Transmit Data) n.c.

SG (Signal Ground) n.c. n.c.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

373

Appendix A

A.2 PC attachment at the serial interface of a SCALANCE X300

RJ-11 plug

Pin number Assignment

D-sub (9-pin, female)

Pin number

8

9

Assignment n.c. n.c.

374

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix B

B

B.1 MIB variables of a SCALANCE X300/X400

Important variables in the MIB II standard

Below, you will find a list with some of the SNMP variables from the MIB II set for monitoring device status. MIB II describes all the SNMP variables that are usually supported by all

SNMP-compliant devices.

Variables in the System directory

Table B- 1 Variables in the System directory

Variables sysDescr

Access rights

Read only sysObjectID sysUpTime sysContact sysName

Read only

Read only

Read and write

Read and write

Description

A string with up to 256 characters is used.

This value contains a vendor-specific identification of the device.

The address (object identifier) used to access device-specific SNMP variables is output here:

1.3.6.1.4.1.4196.1.1.5.4

If no private OIDs have been declared, the object identifier is [0,0]. Here, the value 0 is set as default.

Time since the last reset (for example, after power up). The value is shown in hundredths of a second.

A contact person can be entered here. (Default: empty string).

Possible value: string with a maximum of 255 characters.

A name for the device can be entered here. (Default: empty string)

Possible value: string with a maximum of 255 characters.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

375

Appendix B

B.1 MIB variables of a SCALANCE X300/X400

Variables sysLocation sysService

Access rights

Read and write

Read only

Description

Here, the location of the device can be entered (default: empty string).

Possible value: string with a maximum of 255 characters.

Shows the functions (services) provided by the component according to the ISO/OSI model.

Level functionality:

• Physical (for example repeater)

Datalink/subnet (for example bridges, switches)

• Internet (for example IP gateways, routers)

End to end (for example IP hosts)

• Applications (for example E-mail servers)

Data type: 32-bit integer.

Variables in the Interface directory

Table B- 2 Variables in the Interface directory

Variables ifNumber

Access rights

Read only ifDescr ifType ifSpeed

Read only

Read only

Read only

Description

The number of different interfaces available in the component.

With a SCALANCE X414-3E, the value 68 is output for this variable (26 physical ports, 42 internal

(virtual) ports.

With a SCALANCE X408-2, the value 17 is output for this variable (8 physical ports, 9 internal (virtual) ports.

With a SCALANCE X-300, the value 21 is output for this variable (10 physical ports, 11 internal

(virtual) ports.

Data type: 32-bit integer

A description of and possibly other information on a port.

Possible value: string with a maximum of 255 characters.

With IE switches, the value ethernet-csmacd(6), gigabitEthernet(117) or fastEther(62) is entered.

Data type: Integer

Data transfer rate of the Ethernet port in bits per second. With IE switches either 10 Mbps, 100

Mbps, or 1000 Mbps is displayed.

Data type: Gauge.

376

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix B

B.1 MIB variables of a SCALANCE X300/X400

Variables ifOperStatus ifLastChange ifInErrors ifOutErrors

Access rights

Read only

Read only

Read only

Read only

Description

The current operating status of the Ethernet port.

The following values are possible:

• up(1)

• down(2)

• testing(3)

• unknown(4)

• dormant(5) [waits for external action]

• notPresent(6)

• lowerLayerDown(7)

The testing(3) status indicates that no user data is transported.

Data type: Integer

Length of time for which the selected port has been operating in the current status. The value is shown in hundredths of a second.

Data type: TimeTicks

Number of received packages that were not forwarded to higher protocol layers because of an error.

Data type: Counter

Number of packages that were not sent because of an error.

Data type: Counter

Port Indexes

With SNMP, you cannot specify port identifiers in the format "Slot.Port". SNMP addresses the ports with interface indexes. To change the settings of a port over SNMP, use the AG index. Changes made using the CLI or WBM, can be seen over SNMP only on the AG interfaces. If traps are used, remember that due to the architecture, the AP interfaces are specified in the SNMP bindings of, for example, link up traps. The following tables show how the interface indexes are assigned to the ports.

Port tables for SCALANCE X-300, X408-2 and X414-3E

● Example of a port table (applies to SCALANCE X-300 / X408-2 / X-414-3E):

The "ifOperStatus.51380225" variable determines the operating state (up, down etc.) of port 1 of the IE switch.

Note

The available number of ports is decided by the device version

Ports are available or not depending on the device version, for example on the device X-306-

1LD FE, there are only 7 ports available.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

377

Appendix B

B.1 MIB variables of a SCALANCE X300/X400

Table B- 3 SCALANCE X-300 port table

34603009/

51380225

34603010/

51380226

34603011/

51380227

34603012/

51380228

34603013/

51380229

34603014/

51380230

34603015/

51380231

34603016/

51380232

34603017/

51380233

34603018/

51380234

34603019/

51380235

34603020/

51380236

34603021/

51380237

34603022/

51380238

34603023/

51380239

34603024/

51380240

34603025/

51380241

Interface

Index AG /

AP

Port Port name

X306-

1LD FE

1

X307-3,

X307-3LD,

X308-2,

X308-2LD,

X308-2LH,

X308-

2LH+,

X310,

X310FE

1

Port

7

Port

8

Port

9

Port

10

Port

11

Port

12

Port

1

Port

2

Port

3

Port

4

Port

5

Port

6

Port

13

Port

14

Port

15

Port

16

Port

17

2

3

4

5

6

7

-

-

-

-

-

-

-

-

-

-

2

3

4

5

6

7

8

9

10

-

-

-

-

-

-

-

X302-

7 EEC,

X307-

2 EEC

1

2

3

4

5

6

7

8

9

-

-

-

-

-

-

-

-

X308-

2M

1

2

3

4

5 / 1.1

6 / 1.2

7 / 2.1

8 / 2.2

-

-

-

-

-

-

-

-

-

X320-

1 FE

9

10

7

8

11

12

13

14

15

16

17

1

4

5

2

3

6

X320-3LD

FE

XR324-

4M

9

10

7

8

11

12

13

14

15

16

17

1

4

5

2

3

6

9

10

7

8

11

12

13

14

15

16

1.1

1

4

5

2

3

6

XR324-

12M

4.1

4.2

5.1

5.2

6.1

6.2

7.1

7.2

8.1

8.2

9.1

1.1

1.2

2.1

2.2

3.1

3.2

378

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix B

B.1 MIB variables of a SCALANCE X300/X400

34603026/

51380242

34603027/

51380243

34603028/

51380244

34603029/

51380245

34603030/

51380246

34603031/

51380247

34603032/

51380248

Interface

Index AG /

AP

Port Port name

X306-

1LD FE

-

X307-3,

X307-3LD,

X308-2,

X308-2LD,

X308-2LH,

X308-

2LH+,

X310,

X310FE

- Port

18

Port

19

Port

20

Port

21

Port

22

Port

23

Port

24

-

-

-

-

-

-

-

-

-

-

-

-

X302-

7 EEC,

X307-

2 EEC

-

-

-

-

-

-

-

X308-

2M

-

-

-

-

-

-

-

X320-

1 FE

18

19

20

21

-

-

-

X320-3LD

FE

XR324-

4M

18

19

20

21

22

23

-

1.2

2.1

2.2

3.1

3.2

4.1

4.2

XR324-

12M

9.2

10.1

10.2

11.1

11.2

12.1

12.2

Table B- 4 Port table for SCALANCE X408-2 and X414-3E

Interface

Index AG / AP

Port

X408-2

34603009 / 51380225

34603010 / 51380226

34603011 / 51380227

34603012 / 51380228

34603013 / 51380229

34603014 / 51380230

34603015 / 51380231

34603016 / 51380232

34603017 / 51380233

34603018 / 51380234

Port 1

Port 2

Port 3

Port 4

Port 5

Port 6

Port 7

Port 8

Port 9

Port 10

5.1

5.2

6.1

6.2

8.1

8.2

8.3

8.4

-

-

Port name

X414-3E without extender with electrical extender

5.1

5.2

5.1

5.2

6.1

6.2

7.1

7.2

6.1

6.2

7.1

7.2

9.1

9.2

9.3

9.4

9.1

9.2

9.3

9.4 with optical extender

5.1

5.2

6.1

6.2

7.1

7.2

9.1

9.2

9.3

9.4

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

379

Appendix B

B.1 MIB variables of a SCALANCE X300/X400

Interface

Index AG / AP

34603019 / 51380235

34603020 / 51380236

34603021 / 51380237

34603022 / 51380238

34603023 / 51380239

34603024 / 51380240

34603025 / 51380241

34603026 / 51380242

34603027 / 51380243

34603028 / 51380244

34603029 / 51380245

34603030 / 51380246

34603031 / 51380247

34603032 / 51380248

34603033 / 51380249

34603034 / 51380250

Port

Port 11

Port 12

Port 13

Port 14

Port 15

Port 16

Port 17

Port 18

Port 19

Port 20

Port 21

Port 22

Port 23

Port 24

Port 25

Port 26

X408-2

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

-

Port name

X414-3E without extender with electrical extender

10.1 10.1

10.2

10.3

10.4

11.1

10.2

10.3

10.4

11.1

11.2

11.3

11.4

-

-

-

-

-

-

-

-

11.2

11.3

11.4

12.1

12.2

12.3

12.4

13.1

13.2

13.3

13.4 with optical extender

10.1

10.2

10.3

10.4

11.1

11.2

11.3

11.4

12.1

12.2

13.1

13.2

14.1

14.2

15.1

15.2

Important private MIB variables of an IE Switch

OID

The private MIB variables of the IE switch have the following object identifier:

380

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix B

B.1 MIB variables of a SCALANCE X300/X400 iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).ad(4196).adProductMibs(1).simaticN

et(1).iScalanceX(5).iScalanceX300X400(4)

Table B- 5 Private MIB variables of an IE switch

Variables snX300X400FaultState snX300X400ReportFaultIndex snX300X400ReportFaultState snX300X400RmMode

Access rights Description

Read only Displays the status of the signaling contact. Possible values:

1

No error

Read only

Read only

Read only

• 2

Error.

Data type: Integer

Errors are assigned an ascending index according to the order in which they occur. This 4-byte variable specifies the index.

Contains the error message belonging to an index.

The redundancy manager mode:

• The IE switch is redundancy manager.

The IE switch is not redundancy manager. snX300X400RmState snX300X400RmStateChanges Read only snX300X400StandbyMode

Read only

Read only

Indicates whether the redundancy manager is active or passive.

Possible values:

The redundancy manager is passive. The IE switch is operating as redundancy manager and has opened the ring; in other words, the line of IE switches connected to it is operating problem-free. The "Passive" status is also shown when the redundancy manager mode is disabled.

• The redundancy manager is active. The IE switch is operating as redundancy manager and has closed the ring; in other words, the line of IE switches connected to it is interrupted (fault). The redundancy manager switches through the connection between the ring ports and thus restores a functioning bus configuration.

Data type: Integer

Indicates how often the redundancy manager was switched to "active".

Data type: Counter

The standby function mode:

The standby function is enabled.

• The standby function is disabled.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

381

Appendix B

B.1 MIB variables of a SCALANCE X300/X400

Variables snX300X400StandbyState snX300X400StandbyStateChan ges snBootStrapVersion snHwVersion snSwVersion snInfoSerialNr snX300X400ReportDigitalInStat e

Read only

Read only snMacAddressBase Read only snX300X400ModuleIdentMLFB Read only snX300X400Power

Supply1State snX300X400Power

Supply2State

Read only

Read only

Read only

Access rights Description

Read only Displays the standby status:

• 1

Device is master and passive.

3

Device is slave and passive

• 5

Device is master and active

7

Device is slave and active

• 257

Device searching for partner for standby connection

300

The standby function is disabled

• Data type: Integer

Read only

Read only

Read only

Indicates how often the standby status was switched active.

Data type: Counter

The firmware version of the bootloader in the format major.minor

.

The hardware version of the system in the format major.minor

.

The software version of the system.

The serial number of the product.

The base MAC address of the IE switch.

The MLFB number of the module.

The status of power supply input 1.

The status of power supply input 2.

Status belonging to the digital input. (SCALANCE

X414-3E)

382

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix C

C

C.1 Tagging frames

Expansion of the Ethernet frames by four bytes

For the functions CoS (Class of Service, frame priority) and port-based VLAN (virtual network), the IEEE 802.1 Q standard defined the expansion of Ethernet frames by adding the VLAN tag.

Note

The VLAN tag increases the permitted total length of an Ethernet frame from 1518 to 1522 bytes. It is necessary to check whether the end nodes on the network can process this length / frame type. If this is not the case, only frames of the standard length may be sent to these nodes.

The additional 4 bytes are located in the header of the data packet between the source address and the Ethernet type / length field:

Figure C-1 Structure of a tagged frame

The additional bytes contain the tag protocol identifier field and the tag control information field.

Tag protocol identifier field

The first two bytes form the Tag Protocol Protocol Identifier field (TPI) and always contain the value 0x8100. This value specifies that the data packet contains VLAN information or priority information.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

383

Appendix C

C.1 Tagging frames

Tag control information field

The 2 bytes of the Tag Control Information field (TCI) contain the following information:

CoS prioritization

The tagged frame has 3 bits for the priority that is also known as Class of Service (CoS). The priority according to IEEE 802.1p is as follows:

CoS bits

000

001

010

011

100

101

110

111

Type of data

Non time-critical data traffic (less then best effort [basic setting])

Normal data traffic (best effort [background])

Reserved (standard)

Reserved ( excellent effort )

Data transfer with max. 100 ms delay

Guaranteed service, interactive multimedia

Guaranteed service, interactive voice transmission

Reserved

The prioritization of the data packets is possible only if there is a queue in the components in which they can buffer data packets with lower priority.

An IE switch has four parallel queues in which the frames with different priorities can be processed. First, the frames with the highest priority ("Strict Priority" method) are processed.

This method ensures that the frames with the highest priority are sent even if there is heavy data traffic.

Canonical format identifier

The TR bit is used as an identifier for a Token Ring encapsulation process.

VLAN–ID

With the remaining 12 bits, up to 4095 VLAN-IDs can be formed (VLAN ID 4095 is not permitted). The following conventions apply:

VLAN-ID

0

1 - 4094

Meaning

The frame contains only priority information (priority tagged frames) and no valid

VLAN identifier.

Valid VLAN identifier, the frame is assigned to a VLAN and can also include priority information.

384

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix D

D

D.1 Error messages of the SCALANCE X300 / X400

Note

If link aggregation is activated, instead of a port number, you can also specify the number of the aggregation (for example AG1).

Messages when an error occurs and following elimination of an error

Table D- 1 Error messages assigned to an error status (error LED)

Message when an error occurs

Link down on <port number>.

Non-recoverable ring error on <port number>.

Other redundancy manager detected ...

MAC <MAC address> on <port number>.

Messages after eliminating the problem

Link up on <port number>.

Ring error on <port number> gone.

Other redundancy manager gone ...

MAC <MAC address> on <port number>.

<HRP> ring manager activated.

<HRP> ring manager enters active state.

Standby device enters active state.

Standby is waiting for <master | slave>.

<HRP> ring manager falls back to client.

<HRP> ring manager falls back to passive state.

Standby device enters passive state.

Standby <partner | observer> lost connection to <master | slave> <MAC address> on <port number>.

Unsupported version <version number> for standby protocol detected.

Second observer detected.

MAC <MAC address> at <port number>.

Standby connection established to <master | slave> <MAC address> on <port number>.

Standby <partner | observer> reconnected to

<master | slave> <MAC address> on <port number>.

Unsupported version <version number> for standby protocol gone.

Second observer gone.

MAC <MAC address> at <port number>.

Observer: RM switches frames on isolated port. Observer: RM stopped switching on isolated port.

Unexpected traffic received on observer <port number>.

Unexpected traffic on observer <port number> gone.

Observer: Timeout for test frames detected on port <port number> while RM signals "passive".

Observer: RM signals active but RM test frames are received on both ring ports.

Observer: RM runs incompatible software version

<version number>.

Observer: RM test frame timeout on both ring ports.

Observer: Timeout for test frames on port <port number> is gone.

Observer: RM signals right state.

Observer: RM's incompatible software version

<version number> gone.

Observer: RM test frames received.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

385

Appendix D

D.1 Error messages of the SCALANCE X300 / X400

Message when an error occurs

Observer stopped recovering because of too many (<number or errors>) repeated errors.

(Observer needs to be restarted (WBM/CLI) manually).

Messages after eliminating the problem

Observer restarted because of user command.

Power down on line <ID of the power supply>.

Internal error: <voltage> V power down.

Power up on line <ID of the power supply>.

Internal error gone: <voltage> V power is back.

Wrong module <module name> on slot <slot number> (ID: <module ID>).

C-PLUG not accepted. See System C-PLUG mask for details.

Wrong module <module name> on slot <slot number> removed.

C-PLUG accepted.

C-PLUG interface unmounted. Restart required. C-PLUG interface mounted.

C-PLUG missing.

Media module for ring <port number> missing.

DIP switch <name of the switch> changed. Restart required.

DIP switch <name of the switch> differs from C-

PLUG. Restart required.

C-PLUG detected.

Media module for ring <port number> detected.

DIP switch <name of switch> set back to original state.

DIP switch <name of the switch> set back to state saved on C-PLUG.

Internal error(s) and/or exception(s) occurred.

Device boot up incomplete.

Internal error(s) and/or exception(s) confirmed.

Device boot up complete.

RM <MAC address> lost.

Media module for standby <port number> missing.

RM <MAC address> detected.

Media module for standby <port number> detected.

PNIO fault - please use STEP 7 for diagnostics. PNIO fault - gone.

PNIO connection established.

Severe module change detected. Restart required.

DIP switch settings manipulated ...

→ Redundancy will be started after next restart.

Authentication status on <port number>:

FAILED! Reason: %s.

Standby <observer | partner> freezes current state <active | passive> because <master | slave> <MAC address> gone.

Default route is stored in hardware.

Non-recoverable error on ring %u: RM receives test frames from only one ring port.

Non-recoverable error on ring %u: Another redundancy manager detected.

Last MRP manager in ring %d won't stop on ring ports <port number> and <port number> (danger of network loops).

Redundancy mode transition not completed !\nis:

\"%s\", should: \"%s\".

Erroneous connected ring line on <port number>

(should <port number>).

PNIO connection terminated.

Severe module change reverted.

DIP switch settings reset ...

→ Redundancy mode will not change after next restart.

Authentication status on <port number>: OK.

Reason: %s.

Unfreeze standby state <active | passive> because partner <MAC address> became visible.

Default route no longer in hardware.

Non-recoverable error gone on ring %u: RM receives test frames from both ring ports.

Non-recoverable error gone on ring %u: Other redundancy manager gone.

MRP ring %d manager may stop now (no danger of network loops anymore).

Redundancy mode transition to \"%s\" completed.

Erroneous connected ring line removed on <port number>.

386

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix D

D.1 Error messages of the SCALANCE X300 / X400

Message when an error occurs

Main power usage threshold exceeded.

Unexpected port assembly. Change device name to %s.

Unknown SFP module on <port number> (vendor: \"%$str\").

SFP module on <port number> is not supported and remains deactivated.

Signaling contact controlled by user configuration.

Local loop detected on <port number>. Port disabled.

Local loop detected on <port number>. Port disabled for <number of> seconds.

Remote loop detected on <port number>. Port disabled.

Remote loop detected on <port number>. Port disabled for <number of> seconds.

Local loop detected on <port number>.

Remote loop detected on <port number>.

Standby <partner | observer> conflicts with <active | passive> state.

Standby <partner | observer> conflicts with observer <on | off> configuration.

Standby <partner | observer> conflicts with <master | slave> role.

Standby slave: At least one port has no link.

FMP-Port <port number>: Maintenance required,

Rx-Power: <received power> [dBm], Power

Loss: <power loss> [dB]

FMP-Port <port number>: Maintenance demanded, Rx-Power: <received power> [dBm], Power

Loss: <power loss> [dB]

POF-Port <port number>: Maintenance required,

Rx-Power: <received power> [dBm], Power Margin: <power margin> [dB]

POF-Port <port number>: Maintenance demanded, Rx-Power: <received power> [dBm], Power

Margin: <power margin> [dB]

Link Check: Broken link on <port number> detected. Port disabled.

Link Check: Multiple partners detected on <port number>.

Messages after eliminating the problem

Main power usage below threshold again.

Port assembly known.

Unknown SFP module on <port number> removed.

Not supported SFP module on <port number> removed.

Signaling contact controlled by error state.

<Port number> is enabled again after being disabled by loop detection.

<Port number> is enabled again after being disabled by loop detection.

<Port number> is enabled again after being disabled by loop detection.

<Port number> is enabled again after being disabled by loop detection.

<port number> is enabled again for loop detection.

<port number> is enabled again for loop detection.

Standby <partner | observer>'s state conflict resolved.

Standby <partner | observer>'s observer configuration conflict resolved.

Standby <partner | observer>'s role conflict resolved.

Standby slave: All ports linked up.

FMP-Port <port number>: OK

FMP-Port <port number>: OK

POF-Port <port number>: OK

POF-Port <port number>: OK

Link Check: Link on <port number> OK. Port enabled.

Link Check: Partner detection reset on <port number>.

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

387

Appendix D

D.1 Error messages of the SCALANCE X300 / X400

Message to inform about an event that occurred

The following messages provide you with information about events that are not directly related to an error status (error LED):

● User entry: <user entry>

● Unknown command <command> for <protocol name> protocol received.

● Device is configured to ring <off | ARD | HRP client | MRP client | HRP manager | MRP manager>.

● Standby function <master | slave>.

● Observer started.

● Observer stopped.

● Observer contacted Redundancy Manager <MAC address>.

● Standby is waiting for <partner | observer>.

● Standby <partner | observer> connected to <master | slave> <MAC address> <port number>.

● Standby <partner | observer> lost connection to <master | slave> <MAC address> <port number>.

● Port <port number> is isolated ring port.

● Port <port number> is static ring port.

● No SMTP connection to mail server.

Server IP address <IP address> TCP port <TCP port number>.

● No SMTP application found.

Server IP address <IP address> TCP port <TCP port number>.

● SMTP (E-Mail) connection aborted. Server IP address <IP address>.

● Unable to send message to syslog server. Please check syslog socket configuration.

● Connected to syslog server.

● SNMP: Authentification failure.

● R)STP: new root bridge detected.

● (R)STP: topology change detected.

● Unable to send E-Mail(s). Please check IP configuration.

● Unable to send trap(s). Please check IP configuration.

● Failure reply code <error code> from SMTP server.

● Restart requested.

● No C-PLUG found. Internal flash memory used.

● An empty C-PLUG was found.

● C-PLUG format request.

● A filled C-PLUG was found.

● A corrupted C-PLUG was found.

388

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix D

D.1 Error messages of the SCALANCE X300 / X400

● C-PLUG removed at runtime.

● C-PLUG plugged in at runtime.

● RMON rising alarm occurred.

● RMON falling alarm occurred.

● Ring redundancy enabled.

● Ring redundancy disabled.

● (R)STP protocol enabled.

● (R)STP protocol disabled.

● Disabled (R)STP because ring redundancy is enabled.

● DIP settings taken from C-PLUG.

RM=<ON|OFF>, STBY=<ON|OFF>, R1=<ON|OFF>, R2=<ON|OFF>

● (R)STP topology change detected while (R)STP is off. Aging time will be reduced to

<time in s> sec for at least <time in s> sec.

● Set aging time back to original value <time in s> sec.

● No connection to SNTP server. Server IP address <IP address>.

● Connected to SNTP server. Server IP address <IP address>.

● Enabled link status monitoring on ring ports.

● Changed port VLAN ID of the ring ports to 1.

● Disabled GVRP because ring redundancy is enabled.

● Disabled GMRP because ring redundancy is enabled.

● Disabled mirroring because monitor port is ring port.

● (Re)enabled ring ports (because disabled by user).

● Disabled port lock on ring ports.

● Warning: ring ports have different static VLAN configuration.

● Warning: ring ports have different VLAN port configuration.

● Warning: ring ports have different static multicast configuration.

● Warning: ring ports have different load limits configuration.

● Enter fault state: port <port number> enabled for link status monitoring and link down.

● Leave fault state: port <port number> disabled for link status monitoring.

● Enter fault state: power line <ID of power supply> enabled for power monitoring and power down.

● Leave fault state: power line <ID of power supply> disabled for power monitoring.

● <CLI | WBM | SSH>: Authentication failure.

● Warning: OSPF consumed too much memory and is shut down.

● Duplicate IP address <IP address> sent from <MAC address>

● IN <number of the digital input> (<name of the input>) <high | low>

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

389

Appendix D

D.1 Error messages of the SCALANCE X300 / X400

● VRRP: Virtual Router <number of the routers> on VLAN <VLAN-ID> transitioned to

<Master | Backup | Disabled | Initialize | Invalid> state.

● PNIO configuration invalid, conflict with standby.

● PNIO configuration invalid, conflict with HRP.

● PNIO configuration invalid, conflict in MRP ring ports: <cause of the conflict>

● PNIO configuration invalid, conflict in alternative redundancy configuration.

● PNIO configuration invalid, conflict detected: <description of the configuration conflict>

● Standby observer function <started | stopped>

● Standby: Take on the <master | slave> role

● Authentication success, Port: <port number> VLAN: <VLAN ID> MAC: <MAC address>

● Authentication failed, Port: <port number> VLAN: <VLAN ID> MAC: <MAC address>

● Authentication for Guest-VLAN, Port: <port number> VLAN: <VLAN ID> MAC: <MAC address>

● PoE Port: <port number> power up, Class: <power class>, allocated power: <reserved power> mW

● PoE Port: <port number> power down

● PoE Port: <port number> enabled

● PoE Port: <port number> disabled due to <reason for turning off>

390

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Appendix E

E.1 Using the same configuration on multiple IE switches

The following list shows the IE switches on which you can use the same configuration.

You can identify your device by the order number.

Device

6GK5 307-3BL00-2AA3

6GK5 307-3BM00-2AA3

Loadable configurations

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

E

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

391

Appendix E

E.1 Using the same configuration on multiple IE switches

Device

6GK5 308-2FL00-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FN00-2AA3

Loadable configurations

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

392

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Device

6GK5 308-2FP00-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0FA00-2AA3

Loadable configurations

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

Appendix E

E.1 Using the same configuration on multiple IE switches

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

393

Appendix E

E.1 Using the same configuration on multiple IE switches

Device

6GK5 307-3BL10-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL10-2AA3

Loadable configurations

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

394

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Device

6GK5 308-2FM10-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP10-2AA3

Loadable configurations

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

Appendix E

E.1 Using the same configuration on multiple IE switches

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

395

Appendix E

E.1 Using the same configuration on multiple IE switches

Device

6GK5 310-0BA10-2AA3

6GK5 310-0FA10-2AA3

6GK5 308-2GG00-2AA2

6GK5 308-2GG00-2CA2

6GK5 308-2QG00-2AA2

Loadable configurations

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 307-3BL00-2AA3

6GK5 307-3BL10-2AA3

6GK5 307-3BM00-2AA3

6GK5 307-3BM10-2AA3

6GK5 308-2FL00-2AA3

6GK5 308-2FL10-2AA3

6GK5 308-2FM00-2AA3

6GK5 308-2FM10-2AA3

6GK5 308-2FN00-2AA3

6GK5 308-2FN10-2AA3

6GK5 308-2FP00-2AA3

6GK5 308-2FP10-2AA3

6GK5 310-0BA00-2AA3

6GK5 310-0BA10-2AA3

6GK5 310-0FA00-2AA3

6GK5 310-0FA10-2AA3

6GK5 308-2GG00-2AA2

6GK5 308-2GG00-2CA2

6GK5 308-2GG00-2AA2

6GK5 308-2GG00-2CA2

6GK5 308-2GG00-2AA2

6GK5 308-2GG00-2CA2

6GK5 308-2QG00-2AA2

396

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Device

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

Loadable configurations

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

Appendix E

E.1 Using the same configuration on multiple IE switches

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

397

Appendix E

E.1 Using the same configuration on multiple IE switches

Device

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

Loadable configurations

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

398

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Device

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

Loadable configurations

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

Appendix E

E.1 Using the same configuration on multiple IE switches

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

399

Appendix E

E.1 Using the same configuration on multiple IE switches

Device

6GK5 324-0GG00-5ER2

6GK5 324-4QG00-1AR2

Loadable configurations

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4QG00-1AR2

6GK5 324-4QG00-1HR2

6GK5 324-4QG00-3AR2

6GK5 324-4QG00-3HR2

6GK5 324-4QG00-1CR2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

400

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Device

6GK5 324-4QG00-1HR2

6GK5 324-4QG00-3AR2

Loadable configurations

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4QG00-1AR2

6GK5 324-4QG00-1HR2

6GK5 324-4QG00-3AR2

6GK5 324-4QG00-3HR2

6GK5 324-4QG00-1CR2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4QG00-1AR2

6GK5 324-4QG00-1HR2

6GK5 324-4QG00-3AR2

6GK5 324-4QG00-3HR2

6GK5 324-4QG00-1CR2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

Appendix E

E.1 Using the same configuration on multiple IE switches

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

401

Appendix E

E.1 Using the same configuration on multiple IE switches

Device

6GK5 324-4QG00-3HR2

6GK5 324-4QG00-1CR2

Loadable configurations

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4QG00-1AR2

6GK5 324-4QG00-1HR2

6GK5 324-4QG00-3AR2

6GK5 324-4QG00-3HR2

6GK5 324-4QG00-1CR2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4QG00-1AR2

6GK5 324-4QG00-1HR2

6GK5 324-4QG00-3AR2

6GK5 324-4QG00-3HR2

6GK5 324-4QG00-1CR2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

402

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Device

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

Loadable configurations

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

Appendix E

E.1 Using the same configuration on multiple IE switches

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

403

Appendix E

E.1 Using the same configuration on multiple IE switches

Device

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

Loadable configurations

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

404

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Device

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 302-7GD00-1EA3

6GK5 302-7GD00-2EA3

Loadable configurations

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 324-0GG00-1AR2

6GK5 324-0GG00-1HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-3HR2

6GK5 324-0GG00-1CR2

6GK5 324-0GG00-1ER2

6GK5 324-0GG00-2ER2

6GK5 324-0GG00-3ER2

6GK5 324-0GG00-4ER2

6GK5 324-0GG00-5ER2

6GK5 324-4GG00-1ER2

6GK5 324-4GG00-1JR2

6GK5 324-4GG00-2ER2

6GK5 324-4GG00-2JR2

6GK5 324-4GG00-3ER2

6GK5 324-4GG00-3JR2

6GK5 324-4GG00-4ER2

6GK5 324-4GG00-4JR2

6GK5 302-7GD00-1EA3

6GK5 302-7GD00-2EA3

6GK5 302-7GD00-1GA3

6GK5 302-7GD00-2GA3

6GK5 302-7GD00-3EA3

6GK5 302-7GD00-4EA3

6GK5 302-7GD00-3GA3

6GK5 302-7GD00-4GA3

6GK5 302-7GD00-1EA3

6GK5 302-7GD00-2EA3

6GK5 302-7GD00-1GA3

6GK5 302-7GD00-2GA3

6GK5 302-7GD00-3EA3

6GK5 302-7GD00-4EA3

6GK5 302-7GD00-3GA3

6GK5 302-7GD00-4GA3

Appendix E

E.1 Using the same configuration on multiple IE switches

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

405

Appendix E

E.1 Using the same configuration on multiple IE switches

Device

6GK5 302-7GD00-1GA3

6GK5 302-7GD00-2GA3

6GK5 302-7GD00-3EA3

6GK5 302-7GD00-4EA3

6GK5 302-7GD00-3GA3

6GK5 302-7GD00-4GA3

Loadable configurations

6GK5 302-7GD00-1EA3

6GK5 302-7GD00-2EA3

6GK5 302-7GD00-1GA3

6GK5 302-7GD00-2GA3

6GK5 302-7GD00-3EA3

6GK5 302-7GD00-4EA3

6GK5 302-7GD00-3GA3

6GK5 302-7GD00-4GA3

6GK5 302-7GD00-1EA3

6GK5 302-7GD00-2EA3

6GK5 302-7GD00-1GA3

6GK5 302-7GD00-2GA3

6GK5 302-7GD00-3EA3

6GK5 302-7GD00-4EA3

6GK5 302-7GD00-3GA3

6GK5 302-7GD00-4GA3

6GK5 302-7GD00-1EA3

6GK5 302-7GD00-2EA3

6GK5 302-7GD00-1GA3

6GK5 302-7GD00-2GA3

6GK5 302-7GD00-3EA3

6GK5 302-7GD00-4EA3

6GK5 302-7GD00-3GA3

6GK5 302-7GD00-4GA3

6GK5 302-7GD00-1EA3

6GK5 302-7GD00-2EA3

6GK5 302-7GD00-1GA3

6GK5 302-7GD00-2GA3

6GK5 302-7GD00-3EA3

6GK5 302-7GD00-4EA3

6GK5 302-7GD00-3GA3

6GK5 302-7GD00-4GA3

6GK5 302-7GD00-1EA3

6GK5 302-7GD00-2EA3

6GK5 302-7GD00-1GA3

6GK5 302-7GD00-2GA3

6GK5 302-7GD00-3EA3

6GK5 302-7GD00-4EA3

6GK5 302-7GD00-3GA3

6GK5 302-7GD00-4GA3

6GK5 302-7GD00-1EA3

6GK5 302-7GD00-2EA3

6GK5 302-7GD00-1GA3

6GK5 302-7GD00-2GA3

6GK5 302-7GD00-3EA3

6GK5 302-7GD00-4EA3

6GK5 302-7GD00-3GA3

6GK5 302-7GD00-4GA3

406

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Device

6GK5 307-2FD00-1EA3

6GK5 307-2FD00-2EA3

6GK5 307-2FD00-1GA3

6GK5 307-2FD00-2GA3

6GK5 307-2FD00-3EA3

6GK5 307-2FD00-4EA3

Loadable configurations

6GK5 307-2FD00-1EA3

6GK5 307-2FD00-2EA3

6GK5 307-2FD00-1GA3

6GK5 307-2FD00-2GA3

6GK5 307-2FD00-3EA3

6GK5 307-2FD00-4EA3

6GK5 307-2FD00-3GA3

6GK5 307-2FD00-4GA3

6GK5 307-2FD00-1EA3

6GK5 307-2FD00-2EA3

6GK5 307-2FD00-1GA3

6GK5 307-2FD00-2GA3

6GK5 307-2FD00-3EA3

6GK5 307-2FD00-4EA3

6GK5 307-2FD00-3GA3

6GK5 307-2FD00-4GA3

6GK5 307-2FD00-1EA3

6GK5 307-2FD00-2EA3

6GK5 307-2FD00-1GA3

6GK5 307-2FD00-2GA3

6GK5 307-2FD00-3EA3

6GK5 307-2FD00-4EA3

6GK5 307-2FD00-3GA3

6GK5 307-2FD00-4GA3

6GK5 307-2FD00-1EA3

6GK5 307-2FD00-2EA3

6GK5 307-2FD00-1GA3

6GK5 307-2FD00-2GA3

6GK5 307-2FD00-3EA3

6GK5 307-2FD00-4EA3

6GK5 307-2FD00-3GA3

6GK5 307-2FD00-4GA3

6GK5 307-2FD00-1EA3

6GK5 307-2FD00-2EA3

6GK5 307-2FD00-1GA3

6GK5 307-2FD00-2GA3

6GK5 307-2FD00-3EA3

6GK5 307-2FD00-4EA3

6GK5 307-2FD00-3GA3

6GK5 307-2FD00-4GA3

6GK5 307-2FD00-1EA3

6GK5 307-2FD00-2EA3

6GK5 307-2FD00-1GA3

6GK5 307-2FD00-2GA3

6GK5 307-2FD00-3EA3

6GK5 307-2FD00-4EA3

6GK5 307-2FD00-3GA3

6GK5 307-2FD00-4GA3

Appendix E

E.1 Using the same configuration on multiple IE switches

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

407

Appendix E

E.1 Using the same configuration on multiple IE switches

Device

6GK5 307-2FD00-3GA3

6GK5 307-2FD00-4GA3

6GK5 414-3FC00-2AA2

6GK5 414-3FC10-2AA2

Loadable configurations

6GK5 307-2FD00-1EA3

6GK5 307-2FD00-2EA3

6GK5 307-2FD00-1GA3

6GK5 307-2FD00-2GA3

6GK5 307-2FD00-3EA3

6GK5 307-2FD00-4EA3

6GK5 307-2FD00-3GA3

6GK5 307-2FD00-4GA3

6GK5 307-2FD00-1EA3

6GK5 307-2FD00-2EA3

6GK5 307-2FD00-1GA3

6GK5 307-2FD00-2GA3

6GK5 307-2FD00-3EA3

6GK5 307-2FD00-4EA3

6GK5 307-2FD00-3GA3

6GK5 307-2FD00-4GA3

6GK5 414-3FC10-2AA2

6GK5 414-3FC00-2AA2

408

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Index

A

Access Control, 15

Address filtering, 165

Aging, 134

Aging time, 135, 179

Alarm events, 113

Authentication, 158, 160

802.1x, 162

Authentication server, 158

Guest VLAN, 162

MAC Authentication, 162

Re-authentication, 162

Autocrossover, 12, 12

Autonegotiation, 140, 342

B

BA - Operating Instructions, 10

BAK - Compact operating instructions, 10

BOOTP, 16, 27, 29, 90

BPDU (Bridge Protocol Data Unit), 201

C

CIST Port Parameters, 215

CLI command, 38

Shortcuts for commands, 39

Symbolic representation, 39

Collisions, 279

CoS (Class of Service), 384

C-PLUG, 14

CRC, 279

D

Data rate, 12

DCP, 90

DCP Read Only, 90

Default gateway, 44, 44

Default Gateway, 91

DHCP, 16, 27, 30, 90

DHCP Option 82, 17

Diagnostics port connecting cable

Pin assignment, 373

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Digital input, 111

DLF (destination lookup failure), 183

E

E-mail function, 15, 88

E-Mail function, 113

Alarm events, 113

Line monitoring, 113

Enhanced Passive Listening Compatibility, 138

Ethernet port, 11

Event log table, 15

F

Fault mask, 81

Filter

Address filtering, 165

Filter configuration, 167

Filter table, 166

Firmware update, 365, 365

Flow control, 15

FMP diagnostics, 257

Forward Delay, 205

Fragments, 279

G

Gigabit Ethernet port, 12

Glossary, 3

GMRP, 136, 178

Guest VLAN, 162

GVRP, 136, 197, 204

H

HRP, 24

HyperTerminal, 28, 371, 373

I

IEEE 1588 time-of-day synchronization (PTP), 241

IEEE 802.1x, 162

IEEE 802.1X, 158

IGMP, 136

IGMP Configuration, 17

409

Index

IGMP Query, 17

In-band port, 27

Interface

Ethernet port, 11

Fast Ethernet port, 11

Gigabit Ethernet port, 12

Out-band port, 11

RS-232 interface, 11

Serial interface, 371, 373

Serial port, 11

IP address, 25, 27, 85

Configuration options, 27

J

Jabbers, 279

L

LACP, 157

Layer 3 functionality

Routing, 17

Routing function, 27

LED simulation, 36

Line monitoring, 113

Link Check, 146

Link Check Configuration, 147

Link Check Status, 146

Login, 28

M

MAC address table, 14

MAC Authentication, 162

MD5, 298

Media redundancy methods, 24, 24

MIB, 327

MIB variable, 375, 380

Private MIB, 329

Standard MIBs, 328

Mirrored Port, 135

Mirroring, 15, 135

Mirrored Port, 135

Monitor Port, 135

Monitor Port, 135

MSTP, 137, 211

Port parameters, 222

MSTP (Multiple Spanning Tree Protocol), 220

MSTP instance, 222, 222

Multicast, 173

Multiple Spanning Tree, 211

410

Multiple Spanning Tree Protocol, 137

N

NCM PC, 27

Network access protection complying with the standard

IEEE 802.1x, 15

NTP, 173

NTP (Network Time Protocol), 122

Null modem cable, 11, 28

Pin assignment, 372

O

Observer, 73

Operating mode

Full duplex, 12, 12, 15

Half duplex, 12, 15

Out-band port, 11, 27

Oversize, 279

Oversize Mode, 135

P

Passive Listening, 135

PH - Configuration Manual, 10

Pin assignment

Diagnostics port connecting cable, 373

Null modem cable, 372

POF diagnostics, 256

Point To Point, 202

Port

In-band port, 27

Link Check, 146

Out-band port, 27

Port configuration, 139, 141

Port configuration, 141

Port diagnostics

FMP diagnostics, 257

POF diagnostics, 256

POF ports, 254

SFP diagnostics, 259

Power supply monitoring, 338

Priority, 206

PROFINET IO, 331

PTP (Precision Time Protocol), 241

R

RADIUS Server, 158

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Rapid Spanning Tree, 137

Redundancy

Redundant coupling, 13

Refresh, 38

Restart, 44

RFC

RFC 1213, 328

RFC 1286, 328

RFC 1518, 26

RFC 1519, 26

RFC 1724, 328

RFC 1757, 328

RFC 1850, 328

RFC 1907, 328

RFC 2233, 328

RFC 2571, 328

RFC 2572, 328

RFC 2573, 328

RFC 2574, 328

RFC 2575, 329

RFC 2665, 328

RFC 2674p, 328

RFC 2674q, 328

RMON, 88

Routing

Layer 3 functionality, 17

Routing function, 27

RSTP, 137

RSTP Big Network Support, 138

S

Set Value, 38

SFP diagnostics, 259

SHA algorithm, 100

SICLOCK, 89

SICLOCK time transmitter, 15

SIMATIC NET glossary, 3

Slot function, 343, 344, 344, 345

SMTP server, 113

SNMP, 94, 327

SNMP trap, 97

SNMPv1, 327

SNMPv2, 327

SNMPv3, 16, 327

SNMPv3 users, 103

SNTP (Simple Network Time Protocol), 120

Spanning Tree, 14, 137

Multiple Spanning Tree, 14, 211, 220

Rapid Spanning Tree, 14, 202

Standby observer, 78

Statistics, 272

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

STEP 7, 27

Store and forward, 13

STP, 137

Subnet mask, 26, 85, 87

SysLog, 17

T

TELNET, 88

TFTP server, 48

Time of day

NTP (Network Time Protocol), 122

SICLOCK, 15, 89

SNTP (Simple Network Time Protocol), 120

System time, 117

Time zone, 118

Time-of-day synchronization, 15, 117

UTC time, 118

Time zone, 118

Time-of-day synchronization, 15

U

Undersize, 279

UTC time, 118

V

VLAN, 13, 188

VLAN tag, 383

VLAN-ID, 384

W

Web Based Management, 34, 365

Index

411

Index

412

SCALANCE X-300 / X-400

Configuration Manual, 12/2015, C79000-G8976-C187-26

Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement