Amcrest AGPS18E16P-AT-190M User Manual

16/24-Port PoE Switch User’s Manual
Version 1.0.3.
Revised September 5th, 2018
Contents
Important Safeguards and Warnings ................................................................ 4
1
2
Overview ......................................................................................................... 5
1.1
Product Introduction ................................................................................. 5
1.2
Product Features ....................................................................................... 5
Device Structure .............................................................................................. 5
2.1
Structure of AGPS26E24P-AT-240M ........................................................... 5
2.1.1
Front Panel .......................................................................................... 5
2.1.2
Rear Panel ........................................................................................... 6
2.2
AGPS18E16P-AT-190M Front Panel ............................................................ 6
3 Log in Switch .................................................................................................... 7
3.1
Switch Login............................................................................................... 7
4 Web Interface .................................................................................................. 8
......................................................................................................................... 8
4.1. Device Info ................................................................................................... 9
4.2. System Config............................................................................................... 9
4.2.1. System Info................................................................................................ 9
4.2.2. Network Configuration ............................................................................ 11
4.2.3. Software Update ..................................................................................... 12
4.2.4. Password Change .................................................................................... 12
4.2.5. Restore Default ....................................................................................... 13
4.2.6. System Reboot ........................................................................................ 13
4.2.7. Log Information ....................................................................................... 14
4.3. Port Management ...................................................................................... 15
4.3.1. Port Configuration ................................................................................... 15
4.3.2. Port Mirroring ......................................................................................... 16
4.3.3. Port Statistics .......................................................................................... 17
4.3.4. Port Speed Limit ...................................................................................... 18
4.3.5. Broadcast Storm Control ......................................................................... 19
2
4.3.6. Long Distance .......................................................................................... 20
4.4. Device Management .................................................................................. 20
4.4.1. Spanning Tree.......................................................................................... 21
4.4.2. VLAN ....................................................................................................... 22
4.4.3. Link Aggregation...................................................................................... 25
4.4.4. QoS Settings ............................................................................................ 25
4.4.4.4. Priority Mode ....................................................................................... 26
4.4.4.5. QoS Based on Port/802.1p/DSCP ......................................................... 27
4.4.4.6. TCP/UDP Port ....................................................................................... 28
4.4.5. Security ................................................................................................... 29
....................................................................................................................... 30
4.4.6. SNMP ...................................................................................................... 31
4.4.7. 802.1X ..................................................................................................... 36
4.4.8. IGMP Snooping ....................................................................................... 39
4.5. PoE ............................................................................................................. 40
4.5.1. PoE Settings............................................................................................. 40
4.5.2. PoE Event Statistics.................................................................................. 42
4.5.3. Green PoE ............................................................................................... 43
Appendix I Technical Specifications ................................................................... 44
FCC Compliance Statement ............................................................................... 45
3
Important Safeguards and Warnings
Please read the following safeguards and warnings carefully before using the product to avoid
damages and losses.
Attention:
Please read the following safeguards and warnings carefully before using the product to avoid damages and
losses.
Note:
⚫ Do not expose the device to liquid, steam or dust. Otherwise it may cause fire or electric shock.
⚫
Do not install the device to direct sunlight or in high temperature areas to avoid damage or fire.
⚫
Do not install the device in humid conditions.
⚫
The device must be installed on solid and flat surface to guarantee safety and stability.
⚫
Do not place the device on any carpet or quilt material.
⚫
Do not block the air vent of the device or any ventilation around the device.
⚫
Do not place any objects on top the device.
⚫
Do not disassemble or provide maintenance to the device without professional assistance.
Special Announcement:
⚫
This manual is for reference only.
⚫
All the designs and software here are subject to change without prior written notice.
⚫
All trademarks and registered trademarks are the properties of their respective owners.
⚫
If there is any uncertainty or controversy, please refer to the final explanation of us.
⚫
Please visit our website for more information.
⚫
The function of the ITE being investigated to IEC 60950-1 is considered not likely to require connection
to an Ethernet network with outside plant routing, including campus environment.
⚫
The installation instructions clearly state that the ITE is to be connected only to PoE networks without
routing to the outside plant.
Applicable Models:
The manual can be applied to the following models:
AGPS18E16P-AT-190M, AGPS26E24P-AT-240M
4
1 Overview
1.1 Product Introduction
This product is a type of managed switch, it provides 16/24*10/100M PoE Ethernet port and 2 uplink Combo
1000M ports, supports layer 2 network management and PoE management functions based on Web, which
helps to realize high speed data forwarding. It can be widely applied in places like security surveillance, network
management and so on.
1.2 Product Features
⚫
Provide web-based layer 2 network management.
⚫
Support 250 meters long distance transmission.
⚫
Support 2*1000M Combo ports.
⚫
Support 16/24*10/100M self-adaptive RJ45 ports.
⚫
Support one Console port.
⚫
Conform to IEEE802.3, IEEE802.3u, IEEE802.3ab/z and IEEE802.3X standards.
⚫
Standard 802.1Q VLAN(Access/Trunk/Hybrid)
⚫
All ports auto adapt to MDI/MDIX mode.
⚫
MAC auto learning and aging, MAC address list capacity is 4K.
⚫
IEEE802.3X full duplex flow control and Backpressure half duplex flow control.
⚫
Support AC 100~240V power supply.
⚫
Conform to IEEE802.3af and IEEE802.3at standards, both port 1 and port 2 support Hi-PoE 60W.
⚫
Support PoE power consumption management.
⚫
Support SNMP V1/V2/V3 network management.
⚫
Support STP/RSTP ring network protocol.
⚫
Support manual aggregation and static LACP.
⚫
Support many-to-one mirroring.
⚫
Support port MAC binding.
⚫
Excellent isolated circuit protection.
⚫
Lightning protection up to level 4.
2 Device Structure
2.1 Structure of AGPS26E24P-AT-240M
2.1.1 Front Panel
Figure 2-1
5
Refer to table 2-1 for the front panel description of PFS4226-24ET-240/360.
SN
Parameter
Note
1
2
RJ45 port
Combo port
3
Reset button
4
5
6
7
8
Console serial port
PoE power usage indicator
Downlink indicator light
Combo port indicator light
System indicator light
9
Power indicator light
Ethernet port, support 10/100M self-adaptation
Ethernet port, support 10/100/1000M self-adaptation,
Fiber port supports 1000M.
Long press the button to reset the device and recover
default configuration.
Device debugging port
Current power consumption display
Current port link status and PoE status.
Combo port indicate link/act
System status.
⚫ When device is booting up, the light is flashing
quickly.
⚫ When device is working properly, the light is flashing
slowly.
Device current power status.
Table 2-1
2.1.2 Rear Panel
3
1 2
Figure 2-2
Refer to table 2-2 for the description of rear panel.
SN
Parameter
Note
1
2
3
Power switch
Power socket
Ground terminal
Control device power on and off
Support AC 100～240 V
Ground wire
Table 2-2
2.2 AGPS18E16P-AT-190M Front Panel
Figure 2-3
Refer to table 2-3 for more details.
6
SN
Parameter
Note
1
2
RJ45 port
Combo port
3
4
5
6
7
8
Reset button
Console serial port
PoE power usage indicator
Downlink indicator light
Combo port indicator light
System indicator light
9
Power indicator light
Ethernet port, support 10/100M self-adaptation
Ethernet port, support 10/100/1000M self-adaptation,
Fiber port supports 1000M.
Long press the button to reset the device.
Device debugging port
Current power consumption display
Current port link status and PoE status.
Combo port indicate link/act
System status.
⚫ When device is booting up, the light is flashing
quickly.
⚫ When device is working properly, the light is flashing
slowly.
Device current power status.
Table 2-3
3 Log in Switch
3.1 Switch Login
To begin configuring the switch you will need to login directly with a laptop or PC. This user interface will allow
you to manage and maintain your switch in a safe easy to use user interface. For a reference of the login screen,
refer to Figure 3-1.
Figure 3-1
7
When logging into your switch, make sure your computer is connected to the same network as the switch. To
login, follow the steps provided below:
1. Modify the IP address and subnet mask of your computer network adapter to 192.168.1.100 and
255.255.255.0 respectively
2. Open Internet Explorer or Safari and put 192.168.1.110 in the address bar.
Note: 192.168.1.110 is the default management address of the switch.
3. Input the username and password in their respective fields and login. If this is your first-time logging
into the switch the default username and password will be admin.
4. Enter the administrator changes password into the new password field and confirm the password and
press Ok to continue.
5. Press Login to log into the web interface.
4 Web Interface
Figure 3-2
As shown in Figure 3-2 the interface for the switch is divided into different sections. These sections include;
Device Info, System Info, and Logout. For more information on the provided sections, refer to the information
below.
8
4.1. Device Info
The device info screen is divided up into WAN and LAN port state displays. These displays show the current
port link state of a connected device as well as the port speed, duplex mode, etc.
4.2. System Config
The system config menu allows you to access and modify a range of different categories related to the overall
performance of the switch. For more information on the features related to this menu, refer to the sections
listed below.
4.2.1. System Info
The system info tab allows you to access a range of different categories related to the overall performance of
the switch.
The system info menu allows you to access three main areas; system information, current time, and CPU usage
for the device. System Info will display the device model of the switch, the MAC address and the current version
of firmware you are running on the switch.
9
The Current Time tab allows you to set the date and time for your unit. To sync the device to the current time
of your PC, click on the Sync PC option. To save your settings, press the Save button. If you do not press the
save button before continuing no information or modifications will be set to the device.
The CPU Usage tab will display the amount of CPU usage in each time by the device. This is averaged in a
percentage from the last five seconds thru the last minute, to the last five minutes.
10
4.2.2. Network Configuration
The network configuration tab allows you to access and set network configurations for your device. It is
recommended to set your device to Static by selecting the Static radio button. This will create a static IP address
for your device. In this section you can also view the current subnet mask, default gateway, and MAC address
related to the device.
11
4.2.3. Software Update
The software upgrade tab is where you will perform firmware upgrades for your device. To perform a firmware
upgrade you will need to locate and download the latest firmware version for your device from our website
(amcrest.com/firmware-subscribe).
Once the file has been downloaded, select Browse on the interface and locate the file you just downloaded.
When the file has been selected, click on the Upgrade button to begin upgrading the firmware for your switch.
Your device may reboot, once the device has finished its upgrade process, log back into the system. The
firmware will be upgraded. You can check your updates by accessing the System Info tab, under Software
Version.
4.2.4. Password Change
The password change tab provides you an opportunity to modify your existing login password for your switch.
12
To change your password, type in current password for your device in the Old Password field. To modify the
password, enter the new password you would like for your device in the New Password field. You will then
need to confirm the new password. To confirm, type the new password in the Confirm Password field and press
the Save button. The new password will be applied to the device.
4.2.5. Restore Default
The restore default tab provides you a means of restoring your switch back to its original factory settings.
To reset your device back to its default settings, press the Default button. The device will reset back to its
factory settings. As a reminder, the default username and password for the device will be admin.
4.2.6. System Reboot
The system reboot tab provides you a means of manually rebooting your device. Unlike the restore default tab,
this option will just reboot your switch. All settings set by the user will still be retained on the system after the
manual reboot process has been completed.
13
To reboot the system, click on the Manual Reboot button located in the Maintain field of the tab. The device
will manually reboot. Once the device has finished the reboot process you will be able to log back into the
system.
4.2.7. Log Information
The log information tab is where you can access retained log information such as, errors, warnings, or other
information pertaining to your system.
To locate logs in this tab, select the start time (date & time) as well as the end time (date & time). From the
Log Type drop-down menu, select which type of log you would like to view. This can be either an error, warning
or info type log or you can select all by selecting the All option. Once your information has been entered, click
on the Search button to begin the search. The table will then display in sequential order the log time of the
event, the user, IP address which type of log you are viewing, as well as a brief description of the event. To clear
the search, click on the Clear button.
14
4.3. Port Management
The port management menu provides the user a means of editing and maintaining their port information as
well as monitoring port performance. For more information on this menu refer to the information provided
below.
4.3.1. Port Configuration
The port configuration menu allows the user to configure basic parameters related to specific ports on the
switch. These parameters include, checking the description of the port, the link state, speed duplex status,
flow control status of each port, as well as the ability to add port description info, enabling/disabling state,
speed, duplex mode and flow control function of each port.
•
•
•
Port: Displays the switch port number
Description: Will add description information for the port.
Enable: Will turn the port on or off.
Status
On
Off
•
Note
Configuration link is in the enabled status
Configuration link is in the disabled status
Speed Duplex Status: Displays the current speed of a specific port.
15
Port
Ethernet port
Fiber port
Current speed
Speed duplex mode
Auto(default)
Auto negotiation mode
10M FULL
10M Full duplex
10M HALF
10M Half duplex
100M FULL
100M Full duplex
100M HALF
100M Half duplex
1000M FULL
1000M Full duplex
1000M-X
1000M Full duplex
Note: Modifying any information in this field will directly affect port communication and performance.
•
Speed Duplex Setting: Provides a means of modifying speed duplex settings for a specific port.
Port
Ethernet port
Fiber port
•
•
Speed mode
Auto（default）
Definition
Port speed duplex mode self-adaptation
10M FULL
10M HALF
Port speed duplex mode 10M full duplex
Port speed duplex mode 10M half-duplex
100M HALF
Port speed duplex mode 100M half-duplex
100M FULL
Port speed duplex mode 100M full duplex
1000M FULL
Port speed duplex mode 1000M full duplex
1000-X
Fiber port is set as 1000M full duplex mode
Flow Control: Shows the status of the flow control for a specific port. As a precaution, this setting will
always be defaulted to On.
Flow Control Setting: Provides a means of turning the flow control on or off.
Note: The port flow control allows the port to synchronize the inbound speed and outbound speed which
reduces the possibility of packet loss. It is recommended to leave this setting on during normal operation.
4.3.2. Port Mirroring
Port mirroring, also called port monitoring, is the process of copying the packet passing through a port or
several ports (source port) to another port (destination port) connected with a monitoring device for packet
analysis. This option is useful for monitoring the network as well as finding possible resolutions for any network
malfunctions that may be present.
16
Name
Mirrored
Packets
Destination port
Source port (Src Port)
Note
Disable（default）
Disables the monitor function
Egress only
Monitor output packets
Ingress only
Monitor input packets
Ingress & Egress
Monitor input/output packets
Monitor port. Please select only one item. The default setup is
disabled.
The port being monitored. Please select one or more item(s).
To begin, select which packets you would like to monitor from the Monitoring Packets drop down menu. Then
select which destination port you would like to enable from the Dest. Port field. For instance, if you select port
1 from the destination port field, port 1 will be monitoring the packets for the selected source ports. Next,
select the source ports you would like to monitor by clicking on the check box next to the port you would like
to enable in the Src Port field. Once you have completed choosing your destination and sources ports, click on
the Save button to save and apply these settings to your switch. If you would like to revert your settings to
default, click on the Refresh button and try again.
4.3.3. Port Statistics
This tab allows the user to monitor port statistics such as the performance of the transmit (inbound) and
received (outbound) packets for each port. The user can also monitor packet loss amounts, CRC errors, etc.
17
Note: If the error packet amount is too large there may be an issue with the port connection. To resolve, check
the cable connection or confirm the opposite port has the same problem or not.
4.3.4. Port Speed Limit
This tab allows the user to track and maintain the transmit and return rate of the information passed (in Mbps).
18
Name
Note
Port
Display port list.
Sets the port outbound rate. The values range from 0 to 63Mbps.
The default setup is 0, there is no speed limit.
Sets the port inbound rate. The value ranges from 0 to 63Mbps. The
default setup is 0, there is no speed limit.
Tx speed
Rx speed
To set the port speeds to the desired ports, make sure to set each port with its respective values and press
the Save button when finished.
4.3.5. Broadcast Storm Control
The broadcast storm control tab allows the user to limit the broadcast flow of each port. The flow is regulated
by a specified threshold which can be modified by the user. The threshold ranges from 1 ~ 63 and relates to the
number of broadcast packets allowed to enter each port over a span of time. This time depends on the
connection speed and is as follows: 10Mbps is 5000 µs , 100Mbps is 500µs, and 1Gbps is 50 µs.
To set the threshold, enter a number you would like to set as a limit for a selected port into the Threshold
field. Next, enable each port you would like to apply on the set threshold. To select all, click the checkbox next
to the Enable field. When you have completed assigning a threshold value to the desired ports, click on the
Save button to save and apply these settings to the system.
19
4.3.6. Long Distance
The long distance tab allows the user to extend the maximum distance of a port from 100m to 250m.
Note: Extending the distance of a specific port will drop the connection speed from 100Mbps to 10 Mbps.
To enable long distance, select a port you wish to extend, if you wish to enable all ports, click on the checkbox
next to the Enable field. Once all ports are selected, click on the Save option to save and apply these settings
to your device.
4.4. Device Management
The device management menu allows the user to set and maintain specific device functions associated with
the switch. For more information on the features provided in this menu, refer to the section provided below.
20
4.4.1. Spanning Tree
Spanning Tree Protocol (STP) is a Layer 2 protocol that runs on bridges and switches. The specification for STP
is IEEE 802.1D. The main purpose of STP is to ensure that you do not create loops when you have redundant
paths in your network. Loops are deadly to a network.
The switch allows the user to configure two separate settings, the STP bridge, and the STP Port.
4.4.1.1. STP Bridge Settings
STP Mode: Sets STP or RTSP mode for the bridge. The default setting will be Disable.
Bridge Priority: The default priority for switches is 32768. When you set the priority with this command, you
force the selection of Switch 15 as the root switch because Switch 15 has the lowest priority.
Hello Time: The time between each bridge protocol data unit (BPDU) that is sent on a port. This time is equal
to 2 seconds (sec) by default, but you can tune the time to be between 1 and 10 sec.
Max Age: A timer that controls the maximum length of time that passes before a bridge port saves its
configuration BPDU information. This time is 20 sec by default, but you can tune the time to be between 6
and 40 sec.
Forward Delay: The time that is spent in the listening and learning state.
When you have finished configuring your STP bridge settings, click on the Save button to save and apply the
settings to the device.
21
4.4.1.2. STP Port Settings
The STP port settings tab allows the user to place STP priorities for specific ports.
Port No: The port number that is being modified.
Priority: The default priority will be 128 but can be modified from 0 ~240.
RPC (Root Path Cost): If the root bridge values are the same, RPC is then compared, the BPDU with the lower
RPC is declared superior.
You can view the status of your specific STP port settings in the provided interface. When you have properly
set your STP port settings, click on the Save button to save and apply the settings to your device.
4.4.2. VLAN
The VLAN tab allows users to set and modify VLAN functions in the device. A VLAN is logically divided on an
organizational basis and will divide the LAN into many subnets.
4.4.2.1. VLAN Function
1)
Enhance network performance. The broadcast packets are in the VLAN, it can effectively control the
network broadcast storm, reduce network bandwidth and enhance network process capability.
2)
Enhance network security. The devices in different VLANs cannot access each other, and the hosts in
different VLAN cannot communicate with each other. They need a router or the three-layer switch to
forward the frame
3)
Simplify the network management. The host of the same virtual working group is not limited in one
physical area; it simplifies the network management and is easy to establish a working group for users in
different areas.
22
4.2.2. VLAN Based on the port
The frames of the switch have tag frames and untag frames. Please refer to the following figure below for tag
position.
Figure 6-1
Untag is the general Ethernet frame. The network adapter of the general PC can recognize the frame and then
communicate.
For tag frame, it adds the 4bytes VLAN information after the source mac address and the destination address.
It is the blue pane(the VLAN tag head) in the above figure. Usually, the network adapter of the general PC
cannot recognize this kind of frame, switch needs to use VLAN tag to distinguish different VLANs, so that
different VLANs cannot communicate with each other. Sometimes, it needs to communicate among different
VLANs. So, there are different port types to allow the VLANs to communicate.
The port has three types:
⚫
Access type port belongs to one VLAN. It is usually to connect to the computer port.
⚫
Trunk type port allows several VLANs to pass and can receive or send out the frame of several VLANs.
Usually it is for the ports of the switch.
⚫
Hybrid type can allow many VLANs to pass and can receive or send out the frame of several VLANs. It is to
connect the switches and for the PCs of users.
When processing the data, the hybrid port and the trunk port are the same. The only difference is when they
are sending data: Hybrid port can send out frame of several VLANs and without a tag, while the Trunk port can
only send out the default VLAN frame without a tag.
Refer to table 6-1 for linkage type and frame processing methods for default VLAN.
Port Type
For frames without Tag
For frames with Tag
Access
Receive the frame and put the
Tag of the default VLAN.
When VLAN ID is the
same as the default
VLAN
ID,
receive
current frame. When
For the frames to be
sent out
Remove Tag and send
out the frame.
23
the VLAN ID is different
from the default VLAN
ID, discard the frame.
Trunk
Hybrid
Put the default VLAN ID, when
the default VLAN ID is in the
accepted list, receive the
frame and put the default
VLAN Tag.
Put the default VLAN ID, when
the default VLAN ID is in the
blocked list, discard the frame.
When the VLAN ID is in
the
accepted
list,
receive the frame.
When the VLAN ID is in
the blocked list, discard
the frame.
Name
Port
Note
Select a port (ports)
Mode
Port
default
VLAN
Egress Tagging
Port type includes: Access/Trunk/Hybrid
Port belonging VLAN
Permitted
VLAN
When VLAN ID is the
same as the default
VLAN ID, and it is on the
accepted list, remove
the tag and send out the
frame.
When VLAN ID is on the
accepted list, send out
the frame. Use “port
hybrid
untagged/tagged
VLAN” to set with Tag
or not when sending
out.
For the outbound frame, there are two tag mode: remove the tag or reserve
the tag.
Permitted VLAN to pass the port.
24
4.4.3. Link Aggregation
The link aggregation tab allows the user to combine multiple Ethernet links into a single logical link between
two networked devices.
The system priority for link aggregation will be default to 1 but can range from (1 ~ 65535). The link aggregation
mode allows you to choose a MAC source to be aggregated, the user can select a MAC source or destination
separately or they can be aggregated together by selecting MAC Src& Dst from the drop-down menu. Press the
Save button to save your settings.
To begin, select which member you would like to add to each specific link group. The interface provides three
link groups. Next, choose the state at which you would like the groups to be in. This can be either as Enabled
or Disabled. The type for the link group can be either static or LACP. It is recommended to use static if possible.
The operation key will be default to 1 but can range from (1~65535). When you have finished configuring your
link aggregation settings, click Submit to complete the process. Press the Save button to save and apply the
settings to your device. If you wish to restore your default settings for this option, click on the Refresh button.
4.4.4. QoS Settings
Quality of Service (QoS) is the ability of the network to forward packets of different services. The evaluation
can be based on different criteria because the network may provide various services. Generally, QoS
performance is measured with respect to bandwidth, delay, jitter, and packet loss ratio during packet
forwarding process.
In traditional no QoS IP network, the device treats all packets as the same and the process policy is first in first
out (FIFO). It allocates the required resources according to the time the packet arrived. All packets share the
network and device resources and for the resources a packet can get are depending on the time it arrives. This
kind of service is called Best-Effort. It uses its max efforts to send out the packet to its destination, but there is
25
no guarantee or assurance about the delay, jitter, and packet loss ration during the packet forwarding process.
The traditional Best-Effort service policy is for the WWW, E-mail service that is not sensitive to the bandwidth
or the delay. But right now, the new arising business are demanding high service level of the IP network. The
user does not just want to merely send out the packet to the destination, he also wants to enjoy better service
during the forwarding process such as there is special network bandwidth, reducing packet loss rate, manage
or avoid the network congestion, adjusting network flows. All of these are requiring the network to have perfect
service capability.
4.4.4.1. Priority Mode
The priority mode tab maps received packet priorities as either high or low. The packet priority setup has three
modes:
Name
First In First Out
(FIFO)
All high before low
Note
The first received packet will be forwarded first. When QoS function is
disabled, device adopts FIFO mode to process the packets.
Device forwards the packets according to the specified priority level.
Weight
robin
Set the weight level to change the packet forwarding percentage in the
high priority and low priority.
round
26
4.4.4.2. QoS Based on Port/802.1p/DSCP
Based on port
When a port is set as the high priority, the received packets are placing in the high priority queue. Each port
can set as the high priority.
Based on 802.1p
802.1p priority is at the 2-layer packet head. It is for the environment where there is no need to analyze the 3rd
head and shall guarantee the QoS in the 2-layer.
Destination
Address
Source
Address
6 bytes
6 bytes
802 . 1 Q
header
TPID
TCI
4 bytes
Lengt
h / Typ
e
Data
FCS ( CRC 32 )
2 bytes
46 ~ 1500 bytes
4 bytes
Figure 6-8
In Figure 6-8, the four-byte 802.1Q tag head includes 2-byte TPID（Tag Protocol Identifier）and 2-byte TCI
（Tag Control Information）. The TPID value is 0x8100. In Figure 6-9, it displays the detailed contents of the
tag head of the 802.1Q, Priority string is the 802.1p priority. The priority is called 802.1p since the priority is
defined in 802.1p specifications.
Byte 1
Byte 2
TPID( Tag protocol identifier )
Byte 3
Byte 4
TCI( Tag control information)
1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 Priority
CFI
VLAN ID
7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0
Figure 6-9
Refer to Table 6-4 for 802.1p priority.
27
Priority Queue
Low priority
queue
High priority
queue
priority（Binary
Key words
802.1p priority（Decimal
802.1p
system）
system）
0
000
best-effort
1
2
001
010
background
spare
3
4
011
100
excellent-effort
controlled-load
5
101
video
6
110
voice
7
111
networkmanagement
Based on the TOS/DS string of the IP packet
Figure 6-10
In Figure 6-10, the ToS string of the IP packet head has 8 bits, RFC2474 redefines the ToS domain of the IP packet
head, it is called (Differentiated Services). DSCP priority uses the first 6-bit (0-5). The value ranges from 0 to 63,
and the last 2-bit (6, 7) are the reserved bit.
Priority Queue
High priority l
queue
Low priority
queue
IP
priority（Decimal
IP
priority（Binary
Key words
system）
system）
46
101110
ef
10
001010
af11
18
26
010010
011010
af21
af31
34
48
56
100010
110000
111000
af41
cs6
cs7
Others
xxxxxx
4.4.4.3. TCP/UDP Port
TCP and UDP adopt 16bit port to recognize the applications. The server usually uses the port to recognize. For
example, the TCP port of the FTP server is the 21, TCP port of each Telnet server is 23, UDP port of each TFTP
server is 69. All TCP/IP service is using the well-known 1-1023 port.
28
The device can process the received packets based on the TCP/UDP port such as FTP, SSH, TELNET, SMTP, and
DNS. Here is to set packet high priority, low priority, or discard. The default setup is FIFO.
4.4.5. Security
MAC (Media Access Control) records the relationship between the MAC address and the port, and port
belonging VLAN information etc.
4.4.5.1. MAC Address List
When the device forwards packets, it searches the MAC address sheet according to the packet destination MAC
address. If the MAC address list includes an item matching the packet destination MAC address, it uses the
output port to forward the packet. If the MAC address has no item matching the packet destination MAC
address, the switch will enable broadcast mode which will forward the packet via the corresponding VLAN
(except the input port).
29
4.4.5.2. Port MAC Binding
This tab allows the user to select which port MACs to bind in the system.
To bind a port MAC click on a connected port and set the binding function so that the current port is only
forward binding to the MAC address. For a more information follow the steps provided below:
(1) From Device Management>Security, go to MAC Address Table interface.
(2) Select Port MAC Binding interface.
(3) Select the port whose connection status is green, and then click Bind button.
4.4.5.3. Port MAC Filtering
The port MAC filtering allows the user to add MAC whitelist options to the device.
30
(1)
(2)
(3)
(4)
From Device Management>Security, go to MAC Address Table interface.
Select Port MAC Filtering interface.
Select Add to add the MAC Whitelist.
Enter the MAC Address into the MAC Address field and click Save
Note: To remove an added port MAC filter, click on the Delete button.
4.4.6. SNMP
SNMP network includes two elements: NMS and Agent.
⚫
⚫
NMS（Network Management System）is the SNMP network administrator. It provides user-friendly
interactive interface. It is suitable for the network administrator to complete the most management work.
Agent is the object to be managed in the SNMP network. It is to receive, process the NMS query message.
In some urgent situation such as the port status has changed, Agent can auto send out the alarm
information to the NMS.
When NMS manages the device, it pays great attention on some parameters such as port status, CPU usage
rate etc. All these parameters together are called the Management Information Base (MIB). These parameters
are called the nodes in the MIB. MIB defines the layers of these nodes and the properties of these objects such
as object name, access rights, data type etc. Each Agent has its own MIB. All managed devices have their own
MIB file and compiling these MIB files on the NMS can generate the MIB of each device. The NMS reads and
writes the nodes of the MIB according to the access rights setup so that it can manage the Agent. Refer to the
following figure for the relationship among NMS, Agent and MIB.
Get/Set requests
NMS
Get/Set responses
and Traps
Agent
31
Figure 6-9
MIB adopts the tree organization, it consists of many nodes. Each node represents one managed object. The
managed object can use a unique number representing the path beginning from the root. This number is called
Object Identifier (OID). Refer to the following figure for detailed information. The managed object B can use a
series number {1.2.1.1} to identify. This is the OID of the managed object.
Root
1
1
2
1
2
1 B
5
2
6
A
Figure 6-20
SNMP provides three basic operations to realize the interactive between the NMS and the Agent:
⚫ Get: NMS uses it to search the value of one or more nodes of the Agent MIB.
⚫ Set: NMS uses it to set the value of one or more nodes of the Agent MIB.
⚫ Trap: NMS uses it to send Trap information to the NMS. The Agent does not require the NMS to send the
responding message and NMS does not respond the Trap information. SNMPv1,SNMPv2 and SNMPv3 all
support Trap operation.
SNMP protocol version
Right now, the Agent supports SNMPv1, SNMPv2 and SNMPv3.
⚫ SNMPv1 adopts community name to certify. The community name is just like a password, it Is to restrict
the communication between the NMS and Agent. If the NMS community name and the managed device
community name are not the same, the NMS and the Agent cannot establish the SNMP connection, which
means the NMS cannot access the Agent and the NMS discards the warning information from the Agent.
⚫ SNMPv2 adopts the community name to certify. SNMPv2c has expand the functions of the SNMPv1. It
provides more operation types and supports more data types, provides abundant error codes and can
accurately distinguish the errors.
⚫ SNMPv3 adopts User-Based Security Model (USM) to certify. The network administrator can set the
authentication and encryption function. The authentication is to check the validity of the message sender
to avoid the illegal access. The encryption is to encrypt the communication messages between the NMS
and the Agent in case there is eavesdrop. The authentication and the encryption function can enhance the
security level between the NMS and the Agent.
Note: Please make sure the NMS and the Agent are using the same SNMP version, otherwise the NMS and
Agent connection may fail.
32
4.4.6.1. SMNP Settings
Name
Read
community
Write
community
Trap address
Trap port
Read-only user
name
Authentication
mode
Authentication
Note
The community name to access the network administrator. The right is read.
The default setup is public.
The community name to access the network administrator. The right is write.
The default setup is private.
It is to specify the server IP address.
It is to set trap destination port.
Set the read-only user name. It is for V3 only.
It is to set authentication mode when the security level is “Authentication no
encryption” or “Authentication and encryption”. The authentication mode
includes MDS and SHA.
It is to set authentication password.
33
password
Encryption
mode
Encryption
password
Read/write
password
When the authentication mode is “authentication and encryption”, it is to set
encryption mode. This series product supports 3DES only.
When the authentication mode is “authentication and encryption”, it is to set
the encryption password.
It is to set read/write user.
SNMP v1/v2 Example
1. Network connection
Refer to Figure 6-23, the NMS connects with the Switch and it shall realize the following requirements.
NMS monitors and manages the Switch via SNMPv1 and SNMPv2c.
Switch can auto send out Trap message to the NMS when there is a malfunction.
192.168.1.3
192.168.1.2
Switch
Agent
NMS
Figure 6-23
2.
1)
2)
3)
Settings
In the navigation bar, from Device> SNMP Settings, system goes to SNMPv1 interface by default.
Select SNMP version as v1 or v2.
SNMP port number is 161, set “Read Community”, “Write Community”, “Trap address” and “Trap Port”.
See Figure 6-24.
Figure 6-24
34
SNMP v3 Example
1. Network connection
Refer to Figure 6-25, the NMS connects with the Switch and it shall realize the following requirements.
⚫ NMS monitors and manages the Switch via SNMPv3.
⚫ Switch can auto send out Trap message to the NMS when there is a malfunction.
⚫ When NMS connects Agent via SNMP, it requires authentication. The authentication mode is MD5, the
authentication password is admin123.
⚫ The SNMP message among the NMS and the Agent shall be encrypted, the encryption mode is DES56, and
the encryption password is admin123.
192.168.1.3
192.168.1.2
Switch
Agent
NMS
Figure 6-25
2. Settings
（1） In the navigation bar, from Device>SNMP Settings, system goes to SNMPv1 interface by default.
（2） Select SNMP version as v3.
（3） SNMP port number is 161, set “Read Community”, “Write Community”, “Trap address” and “Trap Port”.
Trap port is 162.
（4） Input read-only user name as “user”.
（5） Authentication mode is MD5.
（6） Authentication password is “admin123”.
（7） Encryption mode is “CBC-DES”
（8） The encryption password and confirm password is “admin123”.
（9） Input read/write user name as “user1”.
（10） Authentication mode is “MD5”.
（11） Encryption password is “admin123”.
（12） Encryption mode is “CBC-DES”
（13） Encryption password is “admin123”.
（14） Click Save button to save and apply your SNMP settings to the device.
35
4.4.7. 802.1X
The 802.1X tab allows users apply 802.1X authentication protocols to their network connections.
36
802.1x systems include three major parts, the client, the device, and the authentication server.
•
•
•
The client is used as the user terminal which requires LAN access to be authenticated by the LAN
connected device.
The device controls the client access on the LAN. It is typically located between the client and
authentication server that provides LAN access to the user. It implements authentication via interaction
with the server.
The authentication server is used to implement authentication, authorization and billing, generally by
a RADIUS (Remote Authentication Dial-IN Service) server. Authentication servers can verify the validity
of the client according to the client’s authentication information sent on the device end. This informs
the device of its verification results which allow access to the server.
37
4.4.7.1. Port Authorized Status
Ports can be placed in authorized status using the following methods:
•
•
•
Authorized-force: Means that the port is always in authorized status. This allows users to access
the network without authentication.
Unauthorized-force: Means that the port is always in authorized status and does not allow
authentication for this port.
Port based 802.1x: Means that the port’s initial status is authorized, but the port will be switched
to authorize the status if the user’s pass authentication requirements.
802.1X Example:
1. Network Requirement
The client IP is 192.168.1.1/24 and the authentication server IP is 192.168.1.100 and it is required for
all activity on the authentication server to be authorized.
2. Config Steps
(1) Enable the authentication function on the web interface for all ports based on 802.1x authentication.
(2) Configure the address of the authentication server in the Radius Settings tab.
(3) Delete any information that does not pertain to the authentication server IP and click the Add New
Server button.
(4) Add the authentication server information into the required fields and click Save.
38
When your authentication information has been properly entered, press the Save button on the interface
to save your settings to the device. If you want to reset your settings to default, click on the Refresh button.
4.4.8. IGMP Snooping
This tab allows users to establish mapping relations for ports and MAC multicast addresses. This is accomplished
via analysis received from IGMP packets which forward multicast data according to the designated mapping
relation.
IGMP Snooping can only forward information to the needed receivers which can provide the following
advantages:
•
•
•
Reduce broadcast packets in the network which helps to save bandwidth.
Enhances security of multicast information.
Brings convenience for realizing individual billing for each host.
39
Use the radio buttons in the IGMP Snooping and IGMP Leave Packet fields to enable or disable this feature.
After establishing your settings, click on the Save button to save and apply your settings to the device.
4.5. PoE
4.5.1. PoE Settings
Power over Ethernet (PoE) means the device uses the Ethernet port to provide power to the device via an
Ethernet cable. The PoE function realizes the centralized power supplying and easy to backup. The network
terminal just uses one simple network cable without external power source. It complies the IEEE 802.3af and
IEEE 802.3at and adopts the universal recognized power port. It is for the IP camera, IP phone, wireless access
point (wireless AP), portable device recharger, POS, data acquisition etc.
Refer to Figure 7-1 for PoE system. It includes PoE power, Power Sourcing Equipment(PSE), power interface (PI)
and powered device (PD).
40
PD
PI
PI
PoE power
PD
PI
PSE
PD
Figure 7-1
1. PoE power
PoE is to provide power to the whole system.
2. PSE
PSE is to provide power to the PD directly. The PSE supports the functions such as search, detect PD, categorize
PD, and provide power to it, realize power consumption management, check the PD connection and etc.
3. PI
PI refers to the Ethernet interface that has the PoE function. It is called PoE port. It includes FE and GE.
The PoE remote power supplying has two modes:
⚫ Over signal wires—The PSE uses the pairs (1, 2, 3, 6) for transmitting data in a category 3/5 twisted pair
cable to supply DC power while transmitting data to PDs.
⚫ Over spare wires—The PSE uses the pairs (4, 5, 7, 8) not transmitting data in a category 3/5 twisted pair
cable to supply DC power to PDs.
Note: The power supplying mode is dependent on the PD specifications. The selected mode will support PSE
and PD at the same time. If the PSE and the PD power supplying mode are not the same (such as the PSE does
not support the spare wire power supplying, or the PD supports spare wire supplying only), please use
converter to provide power to the PD.
4. PD
PD refers to the device receiving power from the PSE. It includes IP phone, wireless AP, portable recharger, POS,
network camera etc.
When the PD enjoys the power from the PoE device, it can connect to other device to back up the power. Refer
to Table 7-1 for port detailed setup information.
Name
Port
Note
In the panel figure to select the PoE port. The select port(s) will be
displayed in the Selected Ports list at the bottom of the interface.
Enable or disable PoE on the selected ports.
⚫
⚫
Power Status
The system does not supply power to or reserve power for the PD
connected to a PoE port if the PoE port is not enabled with the PoE
function.
You can enable PoE for a PoE port if the PoE port will not result in
PoE power overload; otherwise, you are not allowed to enable PoE
for the PoE port.
By default, PoE is disabled on a PoE port.
Important
PSE power overload—When the total amount of the power
consumption of all ports exceeds the maximum power of PSE, the
system considers the PSE is overloaded.
41
Total
power
consumption
reserved value
It is to set PoE port total power consumption reserved value.
The PoE total power consumption value refers to the total power
consumption for the PD from the all PoE port When the connected PD
power consumption is higher than the PoE total power consumption, it
stops providing power to the PD.
Table 7-1
4.5.2. PoE Event Statistics
The PoE event statistics tab displays the PoE event statistics based on each port’s performance. It will display
any overload, short circuit, limit, DC Disconnect, Server Short Circuit, and Thermal Shutdown that has been
associated with the device.
Name
Overload
Note
Single port boot up power current has exceeded the current threshold.
short circuit Limit
When powering chip sends power to the port, it becomes short-circuit.
42
DC Disconnect
Single port power is off
Server
circuit
The power is short-circuit when the powering chip sends out power.
Thermal
Shutdown
short-
The powering chip temperature is too high resulting from short-circuit or
other reason.
4.5.3. Green PoE
The green PoE tab is used to set energy-saving parameters for the device. It allows for specific PoE ports to be
off in specified periods to save power. When the period is over, the port will automatically resume and provide
PoE power to a connected device.
Name
Note
PoE off time
The single port input current has exceeded its output port current
threshold.
The sending port is short-circuit when the chip is proving power to the
port.
The ports to be selected.
PoE on time
Port
43
Appendix I Technical Specifications
Model
Parameters
AGPS18E16P-AT-190M AGPS18E16P-190M AGPS26E24P-AT-240M AGPS26E24P-AT-360M
Ethernet Port
2*10/100/1000 BaseT、
2*1000 Base-X(Combo
ports)
PoE Power
Consumption
PoE Protocol
2*10/100/1000 Base- 2*10/100/1000 Base- 2*10/100/1000 BaseT、
T、
T、
2*1000 Base2*1000 Base-X(Combo 2*1000 Base-X(Combo
X(Combo ports)
ports)
ports)
16*10/100 Base-T
16*10/100 Base-T
24*10/100 Base-T
24*10/100 Base-T
（PoE power
（PoE power supply）
（PoE power supply） （PoE power supply）
supply）
Port1 and port 2 Port1 and port 2 Port1 and port 2 Port1 and port 2
support Hi-PoE 60W support Hi-PoE 60W support Hi-PoE 60W support Hi-PoE 60W
Each power ≤30W， Each power ≤30W， Each power ≤30W， Each power ≤30W，
Total≤190W
Total≤240W
Total≤240W
Total≤360W
IEEE802.3af、 IEEE802.3at
Switching Capacity
Packet Forwarding
Rate
8.8G
Humidity
10%－90%
5.36Mpps
6.55Mpps
Power
AC 100～240V
Common Mode 4KV
Lightning Protection
Differential Mode 2KV
Working
﹣10℃～55℃
Temperature
Weight
3.54k
Dimension(W×D×H) 440mm x300mm x44mm
System
Username / password: admin/admin
IP Address :192.168.1.110/24
PoE Budget
190W
MAC Table
4K
VLAN
802.1Q Standard VLAN
Spanning Tree
240W
360W
STP
RSTP
Port Aggregation
Static link aggregation
LACP protocol
Mirroring
Support many-to-one port mirroring
DHCP
Support DHCP-Client
Long Distance Mode Support the delivery distance of powering and network data is up to 250m
44
Flow Control
Security Features
Support half-duplex based on back pressure type control;
Support full duplex based on PAUSE frame;
Hardware supports IP+MAC binding based on port;
Support IEEE802.1x port authentication
one-key recovery of default
System Maintenance Support the updated packet upload
Support system logs
Support high and low priority, WRR
QoS
Support 802.1P, DSCP
Support priority according to protocol
Network
Management
PoE Management
WEB(http and https protocol)
Support SNMP V1/V2C/V3
Support PoE power consumption, PoE on/off of IPC configuration, power down when
exceeding the value of overload power
Support PoE event statics
Support Green PoE
Note
⚫ This user’s manual is for reference only.
⚫ Slight difference may be found in user interface.
⚫ All the designs and software here are subject to change without prior written notice.
⚫ All trademarks and registered trademarks are the properties of their respective owners.
⚫ If there is any uncertainty or controversy, please refer to the final explanation of us.
⚫ Please visit our website for more information.
FCC Compliance Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to
part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy
and, if not installed and used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a particular installation. If
this equipment does cause harmful interference to radio or television reception, which can be determined by
turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of
the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Copyright Amcrest© 2018
45
">