Westermo MDI-112-F4G Bedienungsanleitung

1 MDI-118 Series MDI-112 Series User’s Manual Version 1.1 Industrial Managed Ethernet Switch

6 2.2 Wiring Power Inputs DC Power Input Follow below steps to wire the redundant DC power inputs. 1. Insert positive and negative wires into V+ a

96 Queue Scheduling You can select the Queue Scheduling rule as follows: Use a strict priority scheme. Packets with higher priority in the queue will

97 4.7.3 CoS-Queue Mapping This page is to change CoS values to Physical Queue mapping table. Since the switch fabric supports four ph

98 After configuration, press Apply to enable the settings.

99 4.7.5 CLI Commands of the Traffic Prioritization Command Lines of the Traffic Prioritization configuration Feature Command Line QoS Setting Queue

100 COS queue 2 = 3 COS queue 3 = 4 Display – Port Priority Setting (Port Default Priority) Switch# show qos port-priority Port Default Priority :

101 Map CoS 1 to Queue 0 Switch(config)# qos cos-map 1 0 The CoS to queue mapping is set ok. Map CoS 2 to Queue 0 Switch(config)# qos cos-map 2 0 Th

102 Display – DSCO-Queue mapping Switch# show qos dscp-map DSCP to Queue Mapping : (dscp = d1 d2) d2| 0 1 2 3 4 5 6 7 8 9 d1 | -----+---------

103 4.8 Multicast Filtering For multicast filtering, the switch uses IGMP Snooping technology. IGMP (Internet Group Management Protocol

104 4.8.1 IGMP Snooping This page is to enable IGMP Snooping feature, assign IGMP Snooping for specific VLAN, and view IGMP Snooping table from dyna

105 4.8.2 IGMP Query This page allows users to configure IGMP Query feature. Since the switch can only be configured by member ports

7 2.3 Wiring Digital Output The switch provides two digital outputs, also known as Relay Output. The relay contacts are energized (open)

106 4.8.3 Unknown Multicast After enabled IGMP Snooping, the known multicast can be filtered by IGMP Snooping mechanism and forwarded to

107 Disable IGMP Snooping - VLAN Switch(config)# no ip igmp snooping vlan 3 IGMP snooping is disabled on VLAN 3. Display – IGMP Snooping Setting Swit

108 Display Switch# sh ip igmp interface vlan1 enabled: Yes version: IGMPv2 query-interval: 125s query-max-response-time: 10s Switch# show runni

109 4.9 SNMP Simple Network Management Protocol (SNMP) is a protocol used for exchanging management information between network devices and i

110 4.9.2 SNMP V3 Profile SNMP v3 can provide more security functions when the user performs remote management through SNMP protocol

111 functions refer to five Federal Information Processing Standard-approved algorithms for computing a condensed digital representation. The

112 4.9.4 CLI Commands of the SNMP Command Lines of the SNMP configuration Feature Command Line SNMP Community Read Only Community Switch(config)# s

113 4.10 Security The switch provides several security features for you to secure your connection. The features include Port Security and IP Securi

114 The MAC Filter allows user to define the Access Control List for specific MAC address or a group of MAC addresses. Filter ID/Name:

115 Egress Port: Bind the MAC Filter rule to specific front port. Once you finish configuring the ACE settings, click on Add to apply

8 2.4 Wiring Earth Ground To ensure the system will not be damaged by noise or any electrical shock, we suggest you to make exact connecti

116 IP Filter: Type ID/Name when select IP Filter. The ID for IP access list is listed as below of the field. You can also type ACL name in this f

117 Filter ID/Name: The ID or the name for this IP Filter entry. Action: Permit to permit traffic from specified sources and Deny to deny traffic fr

118 Source/Destination Wildcard: This command allows user to define single host or a group of hosts based on the wildcard. Some of the allowance exam

119 Filter Attach (Access Control List) After configured the ACL filter rules, remember associate this filter with the physical ports.

120 System AuthControl: To enable or disable the 802.1x authentication. Authentication Method: Radius is an authentication server that provi

121 Port control: Force Authorized means this port is authorized; the data is free to in/out. Force unauthorized just opposite, the port is

122 Once you finish configuring the settings, click on Apply to apply your configuration. Click Initialize Selected to set the autho

123 4.10.3 CLI Commands of the Security Command Lines of the Security configuration Feature Command Line Port Security Add MAC access list Switch(con

124 mode remark Access list entry comment Add IP Extended access list Switch(config)# ip access-list extended <100-199> Extended IP acc

125 [IFNAME] Egress interface name Switch(config-ext-macl)#permit host 0007.7c11.2233 host 0011.7711.2234 gi25 Note: MAC Rule: Permit/Deny wildca

9 10Base-T: 2-pair UTP/STP Cat. 3, 4, 5 cable, EIA/TIA-568 100-ohm (100m) 100 Base-TX: 2-pair UTP/STP Cat. 5 cable, EIA/TIA-568 100-ohm (100m) 1000 B

126 UDP Rule: Permit/Deny udp Source_IP wildcard Dest_IP wildcard eq Given_Port_Number Egress_Interface ICMP Rule: Permit/Deny icmp Source_IP wildcar

127 authentic-method Switch(config)# dot1x authentic-method local Use the local username database for authentication radius Use the Remote Au

128 4.11 Warning The switch provides several types of Warning features for you to remote monitor the status of end devices or the change of

129 Event Type: Dry Output On Period (Sec): Type the period time to turn on Relay Output. Available range of a period is 0-4294967295 seconds. Off P

130 Event Type: Power Failure Power ID: Select Power 1 or Power 2 you want to monitor. When the power is shut down or broken, the

131 Hold Time (Sec): Waiting time to ping the target device for the duration of remote device boot How to configure: After selecting Ping Fail

132 4.11.2 Event Selection Event Types can be divided into two basic groups: System Events and Port Events. System Events are related to the overall

133 Once you finish configuring the settings, click on Apply to apply your configuration. 4.11.3 SysLog Configuration System Log is usef

134 Both: Both modes can be enabled at the same time. Once you finish configuring the settings, click on Apply to apply your configuratio

135 Field Description SMTP Server IP Address Enter the IP address of the email Server Authentication Click on check box to enable password User Nam

10 2.9 DIN-Rail Mounting Installation The DIN-Rail clip is already attached to the Switch when packaged. If the DIN-Rail clip is not screwed on the

136 Command Lines of the Warning configuration Feature Command Line Relay Output Relay Output Switch(config)# relay 1 dry dry output ping p

137 Switch(config)# no relay 1 (Relay_ID: 1 or 2) <cr> Display Switch# show relay 1 Relay Output Type : Port Link Port : 1, 2, 3, 4, Switch

138 Syslog Configuration Local Mode Switch(config)# log syslog local Server Mode Switch(config)# log syslog remote 192.168.2.200 Both Switch(config)#

139 Username: admin, Password: admin SMTP Email Alert Receipt: Receipt 1: [email protected] Receipt 2: Receipt 3: Receipt 4:

140 4.12 Monitor and Diag The switch provides several types of features for you to monitor the status of the switch or diagnostic for you to check

141 Multicast will appear after you enabled IGMP and the switch learnt IGMP report. Click on Remove to remove the static Unicast/Multicast

142 4.12.3 Port Mirroring Port mirroring (also called port spanning) is a tool that allows you to mirror the traffic from one or more ports onto an

143 Once you finish configuring the settings, click on Apply to apply the settings. 4.12.4 Event Log When System Log Local mode is selected, the sw

144 4.12.5 Topology Discovery The switch supports topology discovery or LLDP (IEEE 802.1AB Link Layer Discovery Protocol) function tha

145 4.12.6 Ping Utility This page provides Ping Utility for users to ping remote device and check whether the device is alive or n

11 2. Lightly push the bottom of DIN-Rail clip into the track. 3. Check if the DIN-Rail clip is tightly attached to the track. 4. To remove t

146 4.12.7 CLI Commands of the Monitor and Diag Command Lines of the Monitor and Diag configuration Feature Command Line MAC Address Table Ageing Ti

147 ---- --------------- ---- ------- -------------------------- 1 0100.5e40.0800 0 fa6 1 0100.5e7f.fffa 0 fa4,fa6 Show MAC

148 Good Octets: 330500 Unicast: 602, Broadcast: 1, Multicast: 2261 Pause: 0, Deferred: 0, Collisions: 0 SingleCollision: 0, Multiple

149 <3>Jan 1 02:50:51 snmpd[101]: Event: Link 5 Down. <4>Jan 1 02:50:53 snmpd[101]: Event: Link 4 Up. Topology Discovery (LLDP) Enable

150 4.13 Device Front Panel Device Front Panel commands allows you to see LED status on the switch. You can see LED and link status of the Power, DO

151 4.14 Save to Flash Save Configuration allows you to save any configuration you just made to the Flash. Powering off the switch without clicking

152 4.15 Logout The switch provides two logout methods. The web connection will be logged out if you don’t input any command after 30 seconds and t

153 5 Appendix 5.1 Pin Assignment of the RS-232 Console Cable The total cable length is 150cm. RJ45 Pin DB9 Pin 1 7 2 9 3 4 4 5 5 1 6 3 7 2 8 8

154 5.2 Private MIB The private MIB can be found in product CD. Compile the private MIB file by your SNMP tool. The private MIB tree is the same

155 5.3 ModBus TCP/IP The Modbus TCP/IP is very similar to Modbus RTU, but transmits data within TCP/IP Data packets. It was developed in 1979 for i

12 2.10 Wall Mounting Installation Follow the steps below to install the switch with the wall mounting plate. 1. To remove the DIN-Rail clip from

156 supports Modbus TCP/IP that it can be polled through Ethernet. Thus the Modbus TCP master can read or write the Modbus registers provided by the

157 calculated value to the actual value it received in the CRC filed. 5.3.3 Exception Response If an error occurs, the slave sends an exception res

158 Word 2 Hi byte = ‘x’ Word 2 Lo byte = ‘\0’ (other words = 0) 0x0010 16 words Product Name = " MDI-118-F2G" Word 0 Hi byte = ‘J’ Word 0

159 Ex: MAC = 01-02-03-04-05-06 Word 0 Hi byte = 0x01 Word 0 Lo byte = 0x02 Word 1 Hi byte = 0x03 Word 1 Lo byte = 0x04 Word 2 Hi byte = 0x05 Word 2

160 0xFFFF: unavailable 0x0411 1 word DI2 0x0000:Off 0x0001:On 0xFFFF: unavailable 0x0412 1 word DO1 0x0000:Off 0x0001:On 0xFFFF: unavailable 0x0413

161 Write to clear Read to return 0x0000 To clear port 17 Word = 0x0001 To clear port 17 and 18 Word = 0x0003 0x0C03 to 0x0FFF 1021 words Reserved ad

162 0x129F 0x0000: off 0x0001: on 0xFFFF: unavailable 0x12A0 to 0x12BF 1 word Default Port VLAN ID 0x0001-0xFFFF 0x12C0 to 0x12DF 1 word Ingress Filt

163 0x0001: fiber 0x0002: none 0xFFFF: unavailable 0x13E0 to 0x13FF 1 word Medium type 0x0000: none 0x0001: 100baseTX 0x0002: 1000baseT 0x0003: 100Ba

164 0x20C0 to 0x20FF 2 words Broadcast 0x2100 to 0x213F 2 words Multicast 0x2140 to 0x217F 2 words Pause 0x2180 to 0x21BF 2 words Undersize 0x21C0 to

165 0x267F 0x2680 to 0x26BF 2 words Collisions 0x26C0 to 0x26FF 2 words SingleCollision 0x2700 to 0x273F 2 words MultipleCollision 0x2740 to 0x277F 2

13 2.11 Safety Warning The Equipment intended for installation in a Restricted Access Location. The warning test is provided in user manual. Belo

166 Word 2 Hi byte = ‘0’ Word 2 Lo byte = ‘\0’ (other words = 0) 0x300A 1 word Ring 0’s Status 0x0000: none 0x0001: disable 0x0002: normal 0x0003: ab

167 Word 0 Lo byte = 0x02 Word 1 Hi byte = 0x03 Word 1 Lo byte = 0x04 Word 2 Hi byte = 0x05 Word 2 Lo byte = 0x06 0x3014 2 word Ring 0’s Blocked Port

168 0x315F 0x3160 to 0x317F Ring 11’s Information 0x3180 to 0x319F Ring 12’s Information 0x31A0 to 0x31BF Ring 13’s Information 0x31C0 to 0x31DF

169 0x33BF 0x33C0 to 0x33DF Ring 30’s Information 0x33E0 to 0x33FF Ring 31’s Information Note: the Modbus TCP/IP client will return 0xFFFF to Modbu

170 5.4 Revision History Edition Date Modifications V1.0 2010/11/9 The first release V1.1 2013/11/12 Add IPv6, Private VLAN, QinQ, Modbus TCP/IP,

171

14 3 Preparation for Management The switches provides both in-band and out-band configuration methods. You can configure the switch via RS232 conso

15 3.2 Preparation for Web Interface The switch provides HTTP Web Interface and Secured HTTPS Web Interface for web management. 3.2.1 Web

2 Copyright Notice Copyright  2013 Westermo Teleindustri AB All rights reserved. Reproduction in any form or by any

16 Click on Enter or OK. The Welcome page of the web-based management interface will then appear. Once you enter the web-based ma

17 3.2.2 Secured Web Interface Web management page also provides secured management HTTPS login. All the configuration commands will be sec

18 3.3.2 SSH (Secure Shell) The switch also support SSH console. You can remotely connect to the switch by command line interface. The SSH connectio

19 2. After click on Open, then you can see the cipher information in the popup screen. Press Yes to accept the Security Alert. 3. After few seco

20 4 Feature Configuration This chapter explains how to configure the software features. There are four ways to access the switch: Serial

21 4.1 Command Line Interface Introduction The Command Line Interface (CLI) is one of the user interfaces to the switch’s embedded so

22 Global Configuration Mode: Type configure terminal in privileged EXEC mode you will then enter global configuration mode. In global conf

23 Available command lists of the global configuration mode. (VLAN) Interface Configuration: Type interface VLAN VLAN-ID in

24 Summary of the 5 command modes. Command Mode Main Function Enter and Exit Method Prompt User EXEC This is the first level of access. User can pin

25 Here are some useful commands to see available commands. It can save time when typing and avoid errors. ? To see all the available commands in

3 Federal Communications Commission (FCC) Statement This equipment has been tested and found to comply with the limits for a Class A digital d

26 4.2 Basic Setting The Basic Setting group provides you to configure switch information, IP address and user name/password of the system. I

27 System Contact: You can specify contact people here. You can type the name, mail address or other information of the administrator. Th

28 Figure 4.2.2.2 Popup alert window for Incorrect username. 4.2.3 IP Configuration This function allows users to configure the switch’s IP address

29 IPv6 Configuration –An IPv6 address is represented as eight groups of four hexadecimal digits, each group representing 16 bits (two octets). The g

30 4.2.4 Time Setting Time Setting source allow user to set the time manually or via a NTP server. Network Time Protocol (NTP) is

31 Switch(config)# clock timezone 01 (GMT-12:00) Eniwetok, Kwajalein 02 (GMT-11:00) Midway Island, Samoa 03 (GMT-10:00) Hawaii 04

32 38 (GMT+03:00) Baghdad 39 (GMT+03:00) Kuwait, Riyadh 40 (GMT+03:00) Moscow, St. Petersburg, Volgograd 41 (GMT+03:00) Nairobi

33 Daylight Saving Time: Set when Enable Daylight Saving Time start and end, during the Daylight Saving Time, the device’s time is

34 4.2.6 DHCP Server You can select to Enable or Disable DHCP Server function. It will assign a new IP address to link partners, and also supports D

35 removing function. You can type in the specified IP and MAC address, then click Add to add a new MAC&IP address binding rule for a specified l

Index 1 Introduction ...2 1.1 Overview ...

36 DHCP Leased Entries: the switch provides an assigned IP address list for user check. It will show the MAC and IP address that was assi

37 Relay policy drop: Drops the option 82 field and do not add any option 82 field. Relay policy keep: Keeps the original option 82 field and forwar

38 the configuration back to the switch. This mode is only provided by Web UI while CLI is not supported. TFTP Server mode: In this mode, the switch

39 Click on Folder icon to select the target file you want to backup/restore. Note that the folders of the path to the target file do not allow

40 There are 2 modes for users to backup/restore the configuration file, Local File mode and TFTP Server mode. Local File mode: In this mode, t

41 Popup message screen to show you that have done the command. Click on OK to close the screen. Then please go to Reboot page to reboot the switch.

42 4.2.11 CLI Commands for Basic Setting Feature Command Line Switch Setting System Name Switch(config)# hostname WORD Network name of this syst

43 Display SWITCH# show administrator Administrator account information name: super password: super IP Configuration IP Address/Mask (192.168.2.8, 25

44 select. IEEE 1588 Switch(config)# ptpd run <cr> preferred-clock Preferred Clock slave Run as slave Display SWITCH# sh ntp

45 Switch(config-dhcp)#default-router 192.168.17.254 Lease time configure Switch(config-dhcp)#lease 300 (300 sec) DHCP Relay Agent Enable DHCP Relay

1 4.15 Logout ... 152 5 Appendix ...

46 Note 1: To backup the latest startup configuration file, you should save current settings to flash first. You can refer to 4.12 to see how to sav

47 4.3 Port Configuration Port Configuration group enables you to enable/disable port state, or configure port auto-negotiation, speed, and du

48 Duplex(10 Half), 100M Full Duplex(100 Full) and 100M Half Duplex(100 Half). Gigabit Ethernet Port: AutoNegotiation, 10M Full Duplex(10 Full

49 Speed/Duplex: Current working status of the port. Flow Control: The state of the flow control. SFP Vendor: Vendor name of the SFP transceiver you

50 the volume in the blank. The volume of the switch is step by 8Kbps. 4.3.4 Storm Control The Storm Control is similar to Rate Control.

51 Packet type: You can assign the Rate for specific packet types based on packet number per second. The packet types of the Ingress

52 Aggregation Setting Trunk Size: The switch can support up to 8 trunk groups. Each trunk group can support up to 8 member ports. Sinc

53 Group ID: Display Trunk id set up in Aggregation Setting. Type: Static or LACP set up in Aggregation Setting. Aggregated: When the LACP links

54 Switch(config)# interface gigabitethernet10  eject port 10 SFP DDM transceiver. Switch(config-if)# sfp ddm eject DDM SFP on Port 10 normally ejec

55 Mdix mode is Disable. Medium mode is Copper. Switch# show sfp ddm show SFP DDM information Port 8 Temperature:N/A Tx power:N/A Rx pow

2 1 Introduction Welcome to Westermo i-line MDI-118/MDI-112 Series User Manual. Following topics are covered in this chapter: 1.1 Overview 1.2 Ma

56 Bandwidth <0-100> Limit in magabits per second (0 is no limit) Switch(config-if)# rate-limit ingress bandwidth 8 Set the ingress rate lim

57 Storm Control Strom Control – Packet Type Switch(config-if)# storm-control broadcast Broadcast packets dlf Destination Lookup Failure

58 Display - Trunk Switch# show trunk group 1 FLAGS: I -> Individual P -> In channel D -> Port Down Trunk Group Gro

59 4.4 Network Redundancy The switch firmware supports standard RSTP, MSTP, Multiple Super Ring, Rapid Dual Homing. Multiple Spanning T

60 RSTP RSTP is the abbreviation of Rapid Spanning Tree Protocol. If a switch has more than one path to a destination, it will lead to message loop

61 Note: The Web GUI allows user select the priority number directly. This is the convenience of the GUI design. When you configure the value through

62 Port Configuration Select the port you want to configure and you will be able to view current settings and status of the port. Path Cost: Enter a

63 4.4.3 STP Information This page allows you to see the information of the root switch and port status. Root Information: You can see root Bridge

64 with IEEE 802.1D STP). While using MSTP, there are some new concepts of network architecture. A switch may belong to different groups, act as r

65 To configure the MSTP setting, the STP Mode of the STP Configuration page should be changed to MSTP mode first. After enabled MSTP mode, then y

3  Jumbo Frame up to 9,216 byte  RSTP/STP, 256 802.1Q VLAN, QoS and up to 6/8 trunk groups  IGMP Snooping, GMRP Rate Control for multicast mess

66 Once you finish your configuration, click on Apply to apply your settings. New MST Instance This page allows mapping the VLAN to Instance and ass

67 4.4.5 MSTP Port Configuration This page allows configure the Port settings. Choose the Instance ID you want to configure. The MSTP enabled and l

68 in blocking state and turn to forwarding state in 4 seconds. Once you finish your configuration, click on Apply to save your settings. 4.4.6 M

69 to connect with a core managed switch easily and conveniently. With RDH technology, you can also couple several Rapid Super Rings or RSTP cloud to

70 all of the switches have the same priority, the switch with the highest MAC address will be selected as Ring Master. Ring Port1: In R

71 ID: Ring ID. Version: which version of this ring, this field could be Rapid Super Ring, Super Ring. Role: This Switch is RM or nonRM

72 1-65535, 32-bit based value range from 1-200,000,000 Switch(config-if)# spanning-tree cost 200000 Port Priority Switch(config-if)# spanning-tree

73 #Port-State Summary Blocking Listening Learning Forwarding Disabled -------- --------- -------- ---------- -------- 0 0

74 default set default to rapid super ring rapid-super-ring rapid super ring super-ring super ring Switch(config-multiple-

75 Ring Info Switch# show multiple-super-ring [Ring ID] [Ring1] Ring1 Current Status : Disabled Role : Disabled Ring Status : Abno

4 2 Hardware Installation This chapter includes hardware introduction, installation and configuration information. Following topics are covered in

76 4.5 VLAN A Virtual LAN (VLAN) is a “logical” grouping of nodes for the purpose of limiting a broadcast domain to specific members of a group wit

77 4.5.3 GVRP Configuration 4.5.4 VLAN Table 4.5.5 CLI Commands of the VLAN 4.5.1 VLAN Port Configuration VLAN Port Configuration allows

78 Following is the modes you can select. None: Remian VLAN setting, no QinQ. 802.1Q Tunnel: The QinQ command applied to the ports which connect to

79 incoming frames belong to the VLAN they claimed or not. Then the port determines if the frames can be processed or not. For example, i

80 4.5.2 VLAN Configuration In this page, you can assign Management VLAN, create the static VLAN, and assign the Egress rule for the mem

81 After created the VLAN, the status of the VLAN will remain in Unused until you add ports to the VLAN. Note: Before you change the managem

82 4.5.3 GVRP configuration GVRP allows users to set-up VLANs automatically rather than manual configuration on every port of every switch

83 4.5.4 VLAN Table This table shows you current settings of your VLAN table, including VLAN ID, Name, Status, and Egress rule of the ports. VLAN I

84 4.5.5 CLI Commands of the VLAN Command Lines of the VLAN port configuration, VLAN configuration and VLAN table display Feature Command Line VLAN

85 Mdix mode is Auto. Medium mode is Copper. Display – Port Egress Rule (Egress rule, IP address, status) Switch# show running-config …… ! interf

5 Figure of MDI-118-F2G Figure of MDI-112-F4G

86 Switch(config-if)# Switch(config-if)# description this is the VLAN 2 Switch(config-if)# no description ->Delete the description. IP address o

87 output errors 0, aborted 0, carrier 0, fifo 0, heartbeat 0, window 0 collisions 0 GVRP configuration GVRP enable/disable Switch(config)# g

88 4.6 Private VLAN The private VLAN helps to resolve the primary VLAN ID shortage, client ports’ isolation and network security issues. The Private

89 None: The VLAN is Not included in Private VLAN. Primary: The VLAN is the Primary VLAN. The member ports can communicate with secondary ports. Iso

90 Port Configuraion PVLAN Port T pe : Normal: The Normal port is None PVLAN ports, it remains its original VLAN setting. Host: The Host type ports

91 4.6.3 Private VLAN Information This page allows you to see the Private VLAN information. 4.6.4 CLI Command of the PVLAN Command Lines of th

92 Feature Command Line Private VLAN Configuration Create VLAN Switch(config)# vlan 2 vlan 2 success Switch(config-vlan)# end End curre

93 primary to secondary (The command is only available for host port.) <2-4094> Primary range VLAN ID of the private VLAN port associa

94 Private VLAN Type Private VLAN Port Information vlan 2 private-vlan primary ! vlan 3 private-vlan isolated ! vlan 4 private-v

95 4.7 Traffic Prioritization Quality of Service (QoS) provides traffic prioritization mechanism and can also help to alleviate congestio