Manual Lancom GS-1224P (page 3 of 71) (English)

680925

Zoom out

Zoom in

1/71

0411

LANCOM Systems GmbH

Adenauerstr. 20/B2

52146 Würselen

Germany

E-Mail: info@lancom.eu

Internet www.lancom.eu

LANCOM GS-1224

LANCOM GS-1224P

. . . c o n n e c t i n g y o u r b u s i n e s s

LANCOM GS-1224

LANCOM GS-1224P

While the information in this manual has been compiled with great care, it may not be deemed an assurance of product

characteristics. LANCOM Systems shall be liable only to the degree specified in the terms of sale and delivery.

The reproduction and distribution of the documentation and software supplied with this product and the use of its contents

is subject to written authorization from LANCOM Systems. We reserve the right to make any alterations that arise as the

result of technical development.

Windows®, Windows Vista™, Windows 7® and Microsoft® are registered trademarks of Microsoft, Corp.

The LANCOM Systems logo, LCOS and the name LANCOM are registered trademarks of LANCOM Systems GmbH. All other

names or descriptions used may be trademarks or registered trademarks of their owners.

Subject to change without notice. No liability for technical errors or omissions.

Products from LANCOM Systems include software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http:/

/www.openssl.org/).

Products from LANCOM Systems include cryptographic software written by Eric Young (eay@cryptsoft.com

Products from LANCOM Systems include software developed by the NetBSD Foundation, Inc. and its contributors.

Products from LANCOM Systems contain the LZMA SDK developed by Igor Pavlov.

LANCOM Systems GmbH

Adenauerstr. 20/B2

52146 Wuerselen

Germany

www.lancom.eu

Wuerselen, Juli 2011

711

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Preface

Preface

Thank you for your confidence in us!

LANCOM Switches are ideally suited to small, medium-sized and performance

networks in business environments.

The LANCOM GS-1224 switch features 24 Gigabit-Ethernet and four combo

ports (TP/SFP), it integrates perfectly into LANCOM's Advanced Routing und

Forwarding and it supports up to 24 active VLANs. It uses bandwidth control

to prioritize the data traffic according to predefined criteria (e.g. voice data or

certain ports).

The LANCOM Switch can be managed with the clearly structured Webconfig

and is supported by the LANCOM Management Tools (LANconfig and

LANmonitor).

Furthermore the LANCOM GS-1224P switch supports Power-over-Ethernet

for connected network devices. The overall power output of 185 Watts from

the PoE supply can be flexibly divided between the ports.

Model variants

This documentation is intended for LANCOM Switch users. The following

models are available:

쮿 The LANCOM GS-1224 without PoE support.

쮿 The LANCOM GS-1224P with PoE support.

Model

restrictions

Passages applying only to certain models are identified either in the text itself

or by a comment in the margin.

Otherwise the documentation refers to all models collectively as the LANCOM

Switch series.

This documentation was created by …

... several members of our staff from a variety of departments in order to

ensure you the best possible support when using your

LANCOM

product.

Should you find any errors, or if you would like to suggest improvements, ple-

ase do not hesitate to send an e-mail directly to:

info@lancom.eu

Our online services www.lancom.eu are available to you around the

clock if you have any questions on the content in this manual, or if you

require any further support. The area 'Support' will help you with

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Preface

many answers to frequently asked questions (FAQs). Furthermore, the

knowledgebase offers you a large reserve of information. The latest

drivers, firmware, utilities and documentation are constantly available

for download.

In addition, LANCOM Support is available. For telephone numbers

and contact addresses for LANCOM Support, please refer to the enc-

losed leaflet or the LANCOM Systems Web site.

Information symbols

Very important instructions. Failure to observe these may result in damage.

Important instruction that should be observed.

Additional information that may be helpful but is not essential.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Contents

Contents

1 Introduction 7

1.1 Key Features in the Device 7

1.2 Just what can your LANCOM Switch do? 8

2 Installation 10

2.1 Package content 10

2.2 System requirements 10

2.3 Status displays and interfaces 10

2.3.1 Connectors, LEDs and buttons on the LANCOM GS-1224

2.3.2 Connectors on the back of the LANCOM GS-1224 12

2.4 Mounting and connecting up the LANCOM Switch 12

2.5 Software installation 13

2.5.1 Starting the software setup 13

2.5.2 Which software should I install? 14

3 Configuring and monitoring the LANCOM Switch 15

3.1 Configuration with WEBconfig 15

3.2 Back up and reload the configuration 16

3.3 Monitoring the LANCOM Switch with LANmonitor 17

3.3.1 Ethernet port status 17

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Contents

4 Operation of Web-based Management 18

4.1 Web Management Home Overview 18

4.2 Configuration 20

4.2.1 System Configuration 20

4.2.2 Port Configuration 23

4.2.3 PoE 24

4.2.4 VLAN Mode Configuration 27

4.2.5 VLAN Group Configuration 30

4.2.6 Aggregation 34

4.2.7 LACP 35

4.2.8 RSTP 36

4.2.9 802.1x Configuration 38

4.2.10 IGMP Snooping 46

4.2.11 Mirror Configuration 47

4.2.12 QoS (Quality of Service) Configuration 48

4.2.13 Filter 51

4.2.14 Rate Limit 52

4.2.15 Storm Control 53

4.2.16 SNMP 54

4.3 Monitoring 56

4.3.1 Detailed Statistics 56

4.3.2 LACP Status 60

4.3.3 RSTP Status 61

4.3.4 IGMP Status 62

4.3.5 Ping Status 63

4.4 Maintenance 64

4.4.1 Warm Restart 64

4.4.2 Factory Default 65

4.4.3 Software Upgrade 65

4.4.4 Configuration File Transfer 65

4.4.5 Logout 66

5 Appendix 67

5.1 Performance data and specification 67

5.2 Connector wiring 69

5.2.1 Ethernet interface 10BASE-T/100BASE-TX/1000BASE-T

5.3 CE-declarations of conformity 69

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 1: Introduction

1 Introduction

The LANCOM GS-1224 is a websmart layer-2 switch with 20 Gigabit ports (for

twisted pair cable – TP) and four Gigabit dual media ports with TP/SFP, which

meets the IEEE 802.3 Gigabit, Fast Ethernet and Ethernet specifications.

The LANCOM Switches can be configured through WEBconfig.

The overall network management is enhanced and the network efficiency is

also improved to accommodate high bandwidths. In addition, the switch fea-

tures comprehensive and useful function such as QoS (Quality of Service),

Spanning Tree, VLAN, Port Trunking, Bandwidth Control, Port Security, SNMP

and IGMP Snooping capability via the intelligent software. It is suitable for

both metro-LAN and office application.

The LANCOM GS-1224P switch also complies with IEEE 802.3af, its advanced

auto-sensing algorithm enables providing power devices (PD) discovery, clas-

sification, current limit, and other necessary functions. It also supports high

safety with short circuit protection and power-out auto-detection to PD.

The 10/100/1000 Mbps TP-Ports are standard Ethernet ports that meets all

IEEE 802.3/u/x/z (Gigabit and Fast Ethernet) specifications.

The 1000 Mbps SFP Fiber transceiver are Gigabit Ethernet ports that fully

complies with all IEEE 802.3z and 1000Base-SX/LX standards. The Single

Fiber WDM (BiDi) transceiver is designed with an optic Wavelength Division

Multiplexing (WDM) technology that transports bi-directional full duplex sig-

nal over a single fiber simultaneously.

1.1 Key Features in the Device

쮿 QoS:

Support Quality of Service by the IEEE 802.1P standard. There are two

priority queue and packet transmission schedule using Weighted Round

Robin (WRR). User-defined weight classification of packet priority can be

based on either VLAN tag on packets or user-defined port priority.

쮿 Spanning Tree:

Support IEEE 802.1D, IEEE 802.1w (RSTP: Rapid Spanning Tree Protocol)

standards.

쮿 VLAN:

Support Port-based VLAN and IEEE 802.1q Tag VLAN. Support 24 active

VLANs and VLAN ID 1~4094.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 1: Introduction

쮿 Port Trunking:

Support static port trunking and port trunking with IEEE 802.3ad LACP.

쮿 Bandwidth Control:

Support ingress and egress per port bandwidth control.

쮿 Power saving:

The switch can detect inactive links and deactivate the power supply for

the corresponding ports

쮿 SNMP:

SNMP agent. In the device, SNMP agent is a client software which is ope-

rating over SNMP protocol used to receive the command from SNMP

manager (server site) and echo the corresponded data, i.e. MIB object.

Besides, SNMP agent will actively issue TRAP information when happe-

ned.

The device supports MIB II (RFC1213), Bridge MIB (RFC1493), Interface

Group MIB (RFC2863).

쮿 IGMP Snooping:

Support IGMP version 2 (RFC 2236): The function IGMP snooping is used

to establish the multicast groups to forward the multicast packet to the

member ports, and, in nature, avoid wasting the bandwidth while IP mul-

ticast packets are running over the network.

1.2 Just what can your LANCOM Switch do?

LANCOM GS-

1224

LANCOM GS-

1224P

Hardware

Supports 20-port 10/100/1000 Mbps TP ports and auto MDIX function

✔✔

4 Gigabit dual media ports(TP/SFP)

✔✔

Hot-Plugging for SFP modules

✔✔

400KB packet buffer

✔✔

Support of Jumbo frames (maximum 9600 bytes)

✔✔

Full-duplex flow control (IEEE 802.3x)

✔✔

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 1: Introduction

Satus LEDs

System: Power

✔✔

TP Port 1-24: LINK/ACT, SPD

✔✔

SFP-Ports 21,22,23,24: LINK/ACT, SPD, SFP

✔✔

PoE support

PoE with 48 V DC power through RJ-45 pin 1, 2, 3, 6.

✔

Powered Device(PD) auto detection and classification.

✔

PoE-PSE status and activity LED indicator.

✔

Management

Concisely the status of port and easily port configuration

✔✔

Per port traffic monitoring counters

✔✔

Port mirror function

✔✔

Static trunk function

✔✔

IEEE 802.1q VLAN

✔✔

DHCP Broadcasting Suppression to avoid network suspended or

crashed

✔✔

Trap event while monitored events happened

✔✔

Default configuration which can be restored to overwrite the current

configuration

✔✔

Types of QoS: IEEE 802.1p Priority and DiffServ DSCP Priority.

✔✔

Rapid Spanning Tree (IEEE 802.1w RSTP)

✔✔

IEEE 802.1X port security on a VLAN

✔✔

SNMP access can be disabled and prevent from illegal SNMP access

✔✔

Bandwidth rating management

✔✔

HTTP for firmware upgrade and config file import/export

✔✔

Remote boot through WEBconfig

✔✔

Options

LANCOM SFP Transceiver:

Item no. 61556 LANCOM SFP-SX-LC1

Item no. 61557 LANCOM SFP-LX-LC1

✔✔

LANCOM GS-

1224

LANCOM GS-

1224P

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 2: Installation

2 Installation

This chapter will assist you to quickly install hardware and software. First,

check the package contents and system requirements. The device can be

installed and configured quickly and easily if all prerequisites are fulfilled.

2.1 Package content

Before beginning with the installation, please check that nothing is missing

from your package. Along with the LANCOM Switch the box should contain

the following accessories:

Should anything be missing, please take up immediate contact to your dealer

or to the address on the delivery note supplied with your device.

2.2 System requirements

Computers that connect to a LANCOM must meet the following minimum

requirements:

쮿 Operating system with TCP/IP support, such as Windows, Linux, BSD Unix,

Apple Mac OS, OS/2.

쮿 Access to the LAN via the TCP/IP protocol.

The LANtools also require a Windows operating system. A web brow-

ser under any operating system provides access to WEBconfig.

2.3 Status displays and interfaces

Meanings of the LEDs

The following section describes the meaning of the LEDs.

LANCOM

GS-1224

LANCOM

GS-1224P

Power cord

✔✔

19’’ adapter (2 pieces) and mounting materials

✔✔

LANCOM data medium (CD/DVD)

✔✔

Printed documentation

✔✔

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 2: Installation

Please be aware that LANmonitor shows far more information about

the status of the LANCOM Switch than the LEDs '→ Monitoring the

LANCOM switch with LANmonitor'.

2.3.1 Connectors, LEDs and buttons on the LANCOM GS-1224

Located on the front of the device are connectors for different cabletypes,

light-emitting diodes (LEDs) that provide information on device status, and

also a button.

쐃

POWER LED

Constant green when power is supplied to the device.

쐇

LINK / ACT LED

Port 1 to 24

쮿 Constant green when the network connection is established to the con-

nected device.

쮿 Blinks during data transfer.

쮿 Off if no network connection can be established to the connected device.

쐋

10/100/1000

Mbps LED

쮿 Constant green when the 1000 Mbps mode is active.

쮿 Constant orange when the 100 Mbps mode is active.

쮿 Off when the 10 Mbps is active.

쐏

SFP (LINK/ACT)

LED

쮿 Constant green when the network connection is established to the con-

nected device.

쮿 Blinks during data transfer.

쮿 Off if no network connection can be established to the connected device.

쐄

Reset

Button to reset the system. If you press the button longer than three seconds,

all settings will be reset to default (factory setting).

The device starts after the reset in an unconfigured mode and all set-

tings will get lost. Therefore you should save the actual configuration

before you reset the device!

쐂

TP connectors

Connectors for twisted-pair cables.

쐆

SFP connec-

tors

Connectors for small form-factor pluggable (SFP) modules.

쐃쐇 쐋

쐏







LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 2: Installation

2.3.2 Connectors on the back of the LANCOM GS-1224

The following connectors are located on the rear of the device.

쐃 Connector for the power supply cable.

2.4 Mounting and connecting up the LANCOM Switch

Installating the LANCOM Switch involves the following steps:

햲 Mounting – The device is designed for mounting in an available 19” unit

in a server cabinet. If necessary fix the rubber pads to the underside of the

device to prevent any scratching to other equipment.

Ensure that the device has sufficient ventilation to prevent damage

from excessive heat build-up.

햳 LAN connection – Connect the network devices to the ports of the LAN-

COM Switch by means of a suitable twisted-pair cable (TP cable). The con-

nectors automatically detect the avalable data transfer speeds and the pin

assignment (autosensing).

Use only standard TP cables of category CAT 5e or better with a maxi-

mum length of 100 m to ensure the best possible transfer of data.

Cross-over cables can be used thanks to the auto-sensing function.

If optical connections are to be used, additional modules can be

purchased as accessories.

햴 Supply power and switch on – Supply power to the device by means of

the IEC power cable.

햵 Ready for operation? – After a brief self-test, the power LED lights up

continuously. Green LAN-LINK LEDs show which LAN connectors are

being used for a connection.

쐃

LANCOM GS-1224

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 2: Installation

2.5 Software installation

The following section describes the installation of the Windows-compatible

system software LANtools, as supplied.

You may skip this section if you use your LANCOM Switch exclusively

with computers running operating systems other than Windows.

2.5.1 Starting the software setup

Place the supplied data medium (CD/DVD) into your drive. The setup program

will start automatically.

If the setup does not start automatically, run AUTORUN.EXE in the

root directory of the data medium.

In Setup, select Install software. The following selection menus will appear

on screen:

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 2: Installation

2.5.2 Which software should I install?

쮿 LANconfig is the Windows configuration program for all LANCOM

devices. LANconfig searches for all LANCOM devices in your network.

You can use this to start the Web-based configuration of a LANCOM

Switch.

쮿 With LANmonitor you can use a Windows computer to monitor all of

your LANCOM devices. This program displays all important status infor-

mation for a LANCOM Switch, such as link status or port PoE state.

쮿 With Documentation you copy the documentation files onto your PC.

Select the appropriate software options and confirm your choice with Next.

The software is installed automatically.

LANCOM GS-1224

쮿 Chapter 3: Configuring and monitoring the LANCOM Switch

3 Configuring and monitoring the LANCOM

Switch

3.1 Configuration with WEBconfig

The configuration is done over a graphical user interfacevia a browser

(WEBconfig). Instructions for configuring the device with WEBconfig are avai-

lable in the chapter "Web-based configuration".

There are two ways of starting the configuration by browser:

쮿 If you know the device's IP address, simply enter this into the address line

in the browser. The password for accessing the device is "admin".

쮿 If you do not have the device's IP number, LANconfig can be used to

search for it. To start LANconfig click on Start 왘 Programs 왘 LANCOM

왘 LANconfig.

LANCOM GS-1224

쮿 Chapter 3: Configuring and monitoring the LANCOM Switch

LANconfig automatically searches for all available devices in your net-

work. Any available LANCOM devices will be displayed in the list, inclu-

ding the LANCOM Switch. Double-click on this entry to start the browser

automatically with the correct IP address.

3.2 Back up and reload the configuration

With this function you can back up or reload you current configuration for

safety reasons. This backup can be uploaded into a new or defective device.

What is the IP address of my LANCOM Switch?

The current IP address of the LANCOM Switch after being switched on depends on the network

constellation.

Networks with DHCP server – In its factory settings, the LANCOM Switch is set for auto DHCP

mode, meaning that it searches for a DHCP server to assign it an IP address, subnet mask and

gateway address. The assigned IP address can only be determined by using the appropriate

tools or via the DHCP server. If the DHCP server is a LANCOM device, the IP address of the LAN-

COM Switch can be read out from the DHCP table. If this is the case, the LANCOM Switch can

be accessed from any network computer that receives its IP address from the same subnetwork.

Network without a DHCP server – If no DHCP server is present in the network, the LANCOM

Switch waits about 5 minutes and then automatically adopts the address "172.23.56.250".

If this is the case, the LANCOM Switch can be accessed from any network computer with its IP

address set to the address range "172.23.56.x".

LANCOM GS-1224

쮿 Chapter 3: Configuring and monitoring the LANCOM Switch

3.3 Monitoring the LANCOM Switch with LANmonitor

The current state of the device and all ports can be monitored using the LEDs

on the front panel. With LANmonitor the devices can be observed from any

workstation without being able to see the LEDs. Besides the status informa-

tion provided by the LEDs the LANmonitor provides further important infor-

mation on the ports.

3.3.1 Ethernet port status

LANmonitor displays the current status of all of the device's Ethernet ports.

This includes monitoring of the state as configured by the admin (config state)

and the actual state (link state) of the port. Each port is displayed with two

colored symbols in LANmonitor:

쮿 The left icon shows the config state:

왏 Gray: The port is deactivated in the configuration

왏 Yellow: The port is activated in the configuration

쮿 The right-hand icon shows the link state:

왏 Gray: No active network device is connected to the port

왏 Green: A network device is connected to the port and active

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4 Operation of Web-based Management

This chapter instructs you how to configure and manage the switch through

the web user interface (WEBconfig). With this facility, you can easily access

and monitor through any one port of the switch all the status of the switch.

The default values of the managed switch are listed in the table below:

Web Smart Switch supports a simplified user management function which

allows only one administrator to configure the switch at one time. Fill in the

IP address in the address row in a browser to start WEBconfig. The default

password is “admin”.

4.1 Web Management Home Overview

After login, System Information will be displayed as the following screenshot

illustrates:

LANCOM GS-1224/

GS-1224P

IP Adress 172.23.56.250

Subnet Mask 255.255.255.0

Default Gateway 172.23.56.254

Password admin

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

The Information of Page Layout

The top part of the information page shows the front panel of the switch. Lin-

ked ports are displayed in green color, and ports without link in black.

The ports for the optional SFP modules show a demonstration of the module,

if it is installed. Ports without installed SFP modules show covered plates.

On the left side, the main menu tree for web management is listed on the

page. According to the function name in bold, all functions can be divided

into three parts: Configuration, Monitoring and Maintenance. The functions

of each folder are described in its corresponded section respectively. When cli-

cking it, the function is performed.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4.2 Configuration

Configuration includes the following functions: System Configuration, Ports

Configuration, VLAN Mode Configuration, VLAN Group Configuration, Aggre-

gation, LACP, RSTP, 802.1X, IGMP Snooping, Mirror, QoS, Filter, Rate Limit,

Storm Control and SNMP.

4.2.1 System Configuration

In the system configuration you can define the basic parameter for the confi-

guration and the operation of the device. The switch supports manual IP

address setting and further address information via DHCP or the manual set-

ting of a fixed IP address.

Parameter:

쮿 System Description:

The simple description of this switch.

쮿 Firmware Version:

The firmware version of this switch.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Hardware Version:

The hardware version of this switch.

쮿 MAC Address:

It is the Ethernet MAC address of the management agent in this switch.

쮿 Serial Number:

The serial number assigned by the manufacturer.

쮿 Active IP Address:

Shows the active IP address of this switch.

쮿 Active Subnet Mask:

Shows the active subnet mask of this switch.

쮿 Active Gateway:

Shows the active gateway of this switch.

쮿 DHCP Server:

Shows the IP address of the DHCP server.

쮿 Lease Time Left:

Show the lease time left of DHCP client.

쮿 Device Name:

Set a special name for this switch. Up to 16 characters are allowed in this

parameter. Any alphanumeric character and zero are acceptable.

Default: no default

쮿 DHCP Enabled:

You can enable the automatic delivery of an IP address and activate

further adress information via DHCP.

Default: enabled

쮿 Fallback IP Address:

Fill in an IP address, which is used by the device, if DHCP is disabled or

the DHCP server is not accessible.

Default: 172.23.56.250

쮿 Fallback Subnet Mask:

Fill in a subnet mask, which is used by the device, if DHCP is disabled or

the DHCP server is not accessible.

Default: 255.255.255.0

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Fallback Gateway:

Fill in a gateway, which is used by the device, if DHCP is disabled or the

DHCP server is not accessible.

Default: 172.23.56.254

쮿 Management VLAN:

Shows the ID of the management VLAN.

쮿 Password:

Set a password for this switch. Up to 16 characters are allowed in this

parameter. Any alphanumeric character is acceptable.

Default: admin

쮿 Inactivity Timeout(secs):

Set the auto-logout timer. The valid value is 0-60 in the unit of minute and

a decimal point is not allowed. The value 0 means auto-logout timer is

disabled.

Default: 0

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4.2.2 Port Configuration

Here you can configure the individual ports.

Parameter:

쮿 Enable Jumbo Frames:

Jumbo frames are not standardized and oversized frames. This function

support jumbo frames of up to 9600 bytes.

Default: disable

쮿 Power Saving Mode:

This function supports Power Saving, to deactivate automatically the

power supply for the ports with inactive links. Select: Enable/ Disable.

Default: enable

쮿 Link:

Shows link status of this port.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Mode:

Set the speed and duplex of the port. If the media is 1Gbps fiber glass,

there are three modes to choose: Auto Speed, 1000 Full and Disable. If

the media is TP, the Speed/Duplex is comprised of the combination of

speed mode, 10/100/1000Mbps and duplex mode, full duplex and half

duplex. The following table summarizes the functions the media supports:

쮿 Flow Control:

You can tick the check box to enable flow control. If flow control is set to

Enable, both parties can send a PAUSE frame to the transmitting device(s)

if the receiving port is too busy to handle. When it is set to Disable, there

will be no flow control in the port. It drops the packet if there is too much

traffic.

Default: Disable

쮿 Flow Control status:

To display the Flow control status.

4.2.3 PoE

LANCOM GS-1224P

only

PoE Status

Displays the information about the PoE status.

Medium NWay Speed Duplex

Twisted Pair ON/OFF 10/100/1000M Full for all, Half for 10/100

1 Gbit-Faser ON/OFF 1000M Full

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Parameter:

왏 Vmain: The voltage supplied by the switch.

왏 Imain: The sum of the current that every port supplies.

왏 Pconsume: The sum of the power that every port supplies.

왏 Power Limit: The maximal power that the switch can supply (Read

Only).

왏 Temperature: The PoE temperature.

왏 Port No: Port number.

왏 Port On: Shows whether the port is supplying the power to the powe-

red device or not.

왏 AC Disconnect Port Off: Port is turned off due to the AC Disconnect

function.

왏 DC Disconnect Port Off: Port is turned off due to the DC Disconnect

function.

왏 Overload Port Off: The switch will stop supplying the power to the port

due to the power required by the powered device that is linked to the

port on the switch exceeding the Class setting of the powered device.

왏 Short Circuit Port Off: The switch will stop supplying the power to the

port if it detects that the powered device linked to the port is short cir-

cuit.

왏 Over Temp. Protection: The PoE will be disabled when the temperature

on chip will rise to 150°C.

왏 Power Management Port Off: Due to total power required by all

powered devices linked to the switch excesses the power limit, so the

switch stops supplying the power to this port after referring to the

information of the priority.

PoE Configuration

In the PoE Port Management the PoE settings can be configured.

The switch complies with IEEE 802.3af protocol and is capable of detec-

ting automatically whether the device linked to the port on the switch is

a PoE capable device or not. The switch also manages the power supple-

ment based on the Class of the powered device, and it will stop supplying

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

the power once the power required by the powered device exceeds the

Class, Short Circuit or over temperature occurs.

쮿 Parameter:

왏 Status: The status is either “Normal” or “Active”. The former means

the port is ready to link and supply the power to the powered device

at any time. The latter means the port is currently supplying power.

왏 State: “Enable” allows power supply while a device is linked to the

port; “Disable” means the port does not support PoE functions.

왏 Priority: Choices are "Normal", "Low" and "High". The former being

the default choice. In case the power required by all linked devices

exceeds the maximum available power, the switch will cut power to

the devices with the lowest priority. If ports have the same priority, the

switch will stop the power supply to the port with the highest port id.

왏 Power(W): The power consumed by the port.

왏 Current(mA): The current supplied by the port.

왏 Class: The class of the powered device linked to the port of the switch.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4.2.4 VLAN Mode Configuration

The switch supports Tag-based VLAN (802.1q) and Port-based VLAN. Its

VLAN mode supports 24 active VLANs and and the available VLAN ID range

is from 1~4094. VLAN configuration is used to divide a LAN into smaller ones.

With proper configuration you can not only gain improved security and incre-

ased performance but greatly reduced VLAN management.

쮿 VLAN Mode Setting

The VLAN Mode Selection function includes four modes: Port-based, Tag-

based and Metro mode.

Parameter:

쮿 VLAN Mode:

왏 Port-based:

A port-based VLAN defines its members by port. Any packet coming

in or going out from any port of a port-based VLAN will be accepted.

No filtering criterion applies in a port-based VLAN, the only criterion

is the physical connection to a member port. For example in a port-

based VLAN with the member ports 1, 2, 3 and 4, the ports 1, 2, 3

and 4 can communicate with each other, but port 5 can not commu-

nicate with them. Each port-based VLAN is identified with an ID (1 to

4094) and you can capture further information about the VLAN in a

description. This switch supports up to maximal 24 port-based

VLANs.

As soon as the VLAN mode is set on “port-based”, the display auto-

matically changes to the configuration of the port-based VLAN

groups.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

왏 Tag-based:

A tag-based VLAN identifies its member by VLAN-ID. If there are any

more rules in ingress or egress filtering lists, this rules determines if

the packet will be forwarded or not. The switch supports standard of

802.1q.

Each tag-based VLAN you set up must get a VLAN name and VLAN

ID. A valid VLAN ID is 1 up to 4094. You can create up to 24 Tag VLAN

groups.

As soon as the VLAN mode is set on “tag-based”, the setting double-

tag mode will be offered. If the double-tag mode is activated all

packets (tagged or untagged) will get a VLAN tag. Packets which have

already an “inner” tag will get in addition an “outer” tag. Internet ser-

vice provider use this function for additionally tagging in their own

network of customers VLAN tagged data streams.

If the double-tag mode is activated, you can select the ports on which

the doubled VLAN tags should be used.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

After confirmation of the tag-based VLAN mode, the display auto-

matically changes to the configuration of the tag-based VLAN groups.

왏 Metro Mode:

The Metro mode is a quick method to configure port-based VLANs.

Metro mode can be activated for the ports 21, 22, 23 and 24. This

option is usually used to get a comfortable uplink to the metro ether-

net environment.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

After confirmation of the Metro mode the display changes to the con-

figuration of the port-based VLAN groups. At the same time for all

ports without metro mode support a VLAN group is set up. This

VLAN group contains the respective port and the ports with metro

mode support. Ports can be deleted manually from certain groups if

needed.

4.2.5 VLAN Group Configuration

Shows the information of VLAN Groups, and allows administrators to

maintain them by modifying and deleting each VLAN group.

The display differs depending on the current VLAN mode:

쮿 If you are in port-based VLAN or in metro mode, it will just show the ID

and the descriptions of the existing members.

쮿 If you are in tag-based VLAN, it will show the ID and the descriptions of

the existing members. Additionally you can define further options for each

port.

The switch can store the configuration of port-based VLAN and tag-based

VLAN separately.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

General functions

쮿 Add:

Adds a new port-based or tag-based VLAN.

쮿 Modify:

Click on Modify to edit the selected VLAN.

쮿 Delete:

Click on Delete to remove the selected VLAN.

VLAN group configuration

Parameter:

쮿 ID (VLAN ID):

ID of the VLAN group (1 to 4094). The packet forwarding is based on this

ID.

쮿 Member:

Select the member ports of the VLAN group.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

VLAN Port Configuration

In tag-based mode you can define further settings for each port. Please click

the Port Config button in the list of tag-based VLAN group.

Parameter:

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Ingress Filtering enabled:

If the filter for incoming packets is activated, packets on this port are for-

wared only, if the port is member of the corresponding VLAN group.

Packets with other VLAN tags are discarded.

쮿 Packet Type:

왏 All: Forwards all packets (tagged and untagged).

왏 Tagged Only: Forwards tagged packets only and discards untagged

packets.

쮿 Role:

Defines the rules for outgoing packets.

왏 Access: Packets on this port are forwarded untagged. If double tags

are detected, the outer tag will be removed. This option is generally

used if end devices are connected to the port.

왏 Trunk: Packets on this port are forwarded using the current tag.

왏 Hybrid: Similar to trnuk, packets on this port are forwarded using the

current tag. If the current tag matches the “Untagged VLAN ID”, the

tag will be removed.

쮿 Untagged VLAN ID:

Active only if the role is set to hybrid. This value (from 1 to 4094) defines

the tag, which will be removed from outgoing packets.

쮿 PVID (Port VLAN ID):

This VLAN ID from 1 to 4094 is used to tag incoming packets for forwar-

ding. Only VLAN IDs which are defined in the list of tag-based VLAN

groups can be used as Port VLAN ID.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4.2.6 Aggregation

The Aggregation (Port Trunking) Configuration is used to configure the set-

tings of Link Aggregation. You can bundle more than one port by same speed,

full duplex and the same MAC to be a single logical port, thus the logical port

aggregates the bandwidth of these ports. This means you can apply your cur-

rent Ethernet equipments to build the bandwidth aggregation.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

The Aggregation Configuration displays the current setup of Aggregation

Trunking. With this function you can add a new trunking group or modify the

members of an existing trunking group.

Parameter:

쮿 Normal:

Set up the ports that do not join any aggregation trunking group.

쮿 Group 1-8:

Groups the ports you choose together. Up to 12 ports can be selected for

each group.

The aggregation groups has to be set up one after each other. Group

2 will remain inactive until the ports for group 1 are selected and the

settings are stored with Apply.

4.2.7 LACP

Smart Web Switch supports “Link Aggregation Control Protocol” (LACP). LACP

is a standard network protocol IEEE 802.3ad which dynamically creates and

manages trunk groups.

When you enable LACP link aggregation on a port, the port can automatically

negotiate with the ports at the remote end of a link to establish trunk groups.

LACP also allows port redundancy, that is, if an operational port fails, then one

of the "standby" ports become operational without user intervention.

Parameter:

쮿 Protocol Enabled:

Just tick the check box to enable LACP protocol then press Apply.

쮿 Key Value:

It's a key for an aggregation. This must be an integer value between 1 and

255 or auto select by switch.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4.2.8 RSTP

Rapid Spanning Tree protocol (RSTP) detects and resolves network loops,

respectively in case of need (breakdown of a connection) to activate it again.

The protocol allows a switch to communicate with other RSTP compliant swit-

ches and to ensure, that only one path exists between two end points in your

network.

Parameter:

쮿 System Priority:

System priority is used to determine the root switch, thus the root of the

spanning tree. The switch with the highest priority (lowest numeric value)

becomes the root switch. If all switches have the same priority, the switch

with the lowest MAC address will become the root switch. Select a value

from the drop-down list box. (The lower the numeric value you assign, the

higher the priority for this system.)

Default: 32768

쮿 Hello Time:

Hello Time is the time interval, in which the switch tells the following

devices in the spanning tree, with a “hello packet”, that it is still active. If

for example the LANCOM Switch is the root switch of the LAN, all other

bridges will use the hello time assigned by this switch to communicate

with each other. The allowed range is 1-10 second.

Default: 2 seconds

쮿 Max. Age:

If there are no “hello packets” for a certain time, a device in the spanning

tree assumes a change in the structure. In this case all connections in the

network need to be established again.

Maximum Age is the maximum time a switch can wait without receiving

a “hello packet” before attempting to reconfigure. During this time of

reconfiguration, all STP-capable devices in the network send only admi-

nistration packets, but no reference data of the connected devices.

The valid value of Max. Age is 6 -40 seconds.

Default: 20 seconds

쮿 Forward Delay:

Forward delay time is the maximum time (in seconds) a switch waits

before changing its state.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

For example the time a brige port needs, to move from “Listening state”

to “Learning state” or from “Learning state” to “Forwarding state”. The

general rule is:

2 * (Forward Delay - 1) >= Max Age >= 2 * (Hello Time + 1).

Default: 15 seconds

쮿 Force Version:

For the STP algorithm you can select between two options in the drop-

down list: RSTP or STP. Rapid Spanning Tree Protocol (RSTP) is an exten-

sion of STP and reduces the needed time for the new organisation of a

network after structure changed.

RSTP Port Configuration

Enable or disable RSTP protocol on the ports that are selected. Decide if the

Port should be an edge port and set path costs.

Parameter:

쮿 Protocol Enabled:

Just tick the check box beside the port x to enable RSTP protocol, then

press Apply.

쮿 Edge:

An Edge Port is a port connected to a device that knows nothing about

STP or RSTP. Usually, the connected device is an end station. Edge Ports

will immediately transit to forwarding state and skip the listening and

learning state because the edge ports cannot create bridging loops in the

network. This will expedite the convergence. When the link on the edge

port toggles, the STP topology keeps unchanged. Unlike the designate

port or root port though, an edge port will transit to a normal spanning-

tree port immediately if it receives a BPDU.

Just tick the check box beside the port x to enable edge function.

쮿 Path Cost:

Path cost is the cost of transmitting a frame on to a LAN through that port.

It is assigned according to the speed of the bridge. The slower the media,

the higher the cost. You can select auto or set the range from 1-

200000000.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4.2.9 802.1x Configuration

802.1x port-based network access control provides a method to restrict users

to access network resources via authenticating user’s information. This rest-

ricts users from gaining access to the network resources through a 802.1x-

enabled port without authentication. If a user wishes to touch the network

through a port under 802.1x control, he (she) must firstly input his (her)

account name for authentication and waits for gaining authorization before

sending or receiving any packets from a 802.1x-enabled port.

Before the devices or end stations can access the network resources through

the ports under 802.1x control, the devices or end stations connected to a

controlled port send the authentication request to the authenticator, the

authenticator pass the request to the authentication server to authenticate

and verify, and the server tell the authenticator if the request get the grant of

authorization for the ports.

According to IEEE 802.1x, there are three components implemented. They are

Authenticator, Supplicant and Authentication server.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Supplicant:

It is an entity being authenticated by an authenticator. It is used to com-

municate with the Authenticator PAE (Port Access Entity) by exchanging

the authentication message when the Authenticator PAE request to it.

쮿 Authenticator:

An entity facilitates the authentication of the supplicant entity. It controls

the state of the port, authorized or unauthorized, according to the result

of authentication message exchanged between it and a supplicant PAE.

The authenticator may request the supplicant to re-authenticate itself at

a configured time period. Once start re-authenticating the supplicant, the

controlled port keeps in the authorized state until re-authentication fails.

A port acting as an authenticator is thought to be two logical ports, a con-

trolled port and an uncontrolled port. A controlled port can only pass the

packets when the authenticator PAE is authorized, and otherwise, an

uncontrolled port will unconditionally pass the packets with PAE group

MAC address, which has the value of 01-80-c2-00-00-03 and will not be

forwarded by the MAC bridge, at any time.

쮿 Authentication server:

A device provides authentication service, through EAP, to an authentica-

tor by using authentication credentials supplied by the supplicant to

determine if the supplicant is authorized to access the network resource.

The overview of operation flow for the following figure is quite simple. When

the Supplicant PAE issues a request to the Authenticator PAE, Authenticator

and Supplicant exchange authentication messages. Then, the Authenticator

passes the request to the RADIUS server to verify. Finally, the RADIUS server

replies if the request is granted or denied.

While in the authentication process, the message packets, encapsulated by

Extensible Authentication Protocol over LAN (EAPOL), are exchanged between

an authenticator PAE and a supplicant PAE. The Authenticator exchanges the

message to the authentication server by using EAP encapsulation. Before suc-

cessfully authenticating, the supplicant can only reach the authenticator to

perform authentication message exchange or access the network from the

uncontrolled port.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

In the following figure is the typical configuration, a single supplicant, an

authenticator and an authentication server. B and C are in the internal net-

work, D is the authentication server running RADIUS, the switch at the central

location acts as an Authenticator connected to PC A and A is a PC outside the

controlled port, running Supplicant PAE. In this case, PC A wants to access the

services on device B and C, first, it must exchange the authentication message

with the authenticator on the port it connected via EAPOL packet. The

authenticator transfers the supplicant’s credentials to the authentication ser-

ver for verification. If successuf, the authentication server will inform the

authenticator about the granted access. Then, PC A is allowed to access B and

C via the switch. If there are two switches directly connected together instead

of a single one, for the link connecting the two switches, it may have to act in

two port roles at the end of the link: authenticator and supplicant, because

the traffic is bi-directional.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

The following figure shows the procedure of 802.1x authentication. There are

steps for the login based on 802.1x port access control management. The pro-

tocol used in the right side is EAPOL and the left side is EAP.

쐃 At the initial stage, the supplicant A is unauthenticated and a port on

switch acting as an authenticator is in unauthorized state. So the access

is blocked in this stage.

쐇 Initiating a session. Either authenticator or supplicant can initiate the

message exchange. If supplicant initiates the process, it sends an EAPOL-

start packet to the authenticator PAE and the authenticator will immedi-

ately respond with an EAP-Request/Identity packet.

쐋 The authenticator sends periodically an EAP-Request/Identity to the sup-

plicant requesting the identity that needs to be authenticated.

쐏 If the authenticator doesn’t send EAP-Request/Identity, the supplicant will

initiate the process by sending the EAPOL-Start to the authenticator.

쐄 Next, the Supplicant replies an EAP-Response/Identity to the authentica-

tor. The authenticator will embed the user ID into RADIUS-Access-

Request command and send it to the authentication server for confirming

its identity.

쐂 After receiving the RADIUS-Access-Request, the authentication server

sends a RADIUS-Access-Challenge to the supplicant to ask for the user

password via the authenticator PAE.

쐆 The supplicant converts the user password into the credential information,

in MD5 format and replies an EAP-Response with this credential informa-

tion as well as the specified authentication algorithm (MD5 or OTP) to the

authentication server via the authenticator PAE. As per the value of the

type field in the message PDU, the authentication server knows which

algorithm should be applied to authenticate the credential information,

EAP-MD5 (Message Digest 5) or EAP-OTP (One Time Password) or other

algorithms.

쐊 If user ID and password are correct, the authentication server will send a

RADIUS-Access-Accept to the authenticator. If not correct, the authenti-

cation server will send a RADIUS-Access-Reject.

쐎 When the authenticator PAE receives a RADIUS-Access-Accept, it will

send an EAP-Success to the supplicant. At this time, the supplicant is

authorized and the port connected to the supplicant and under 802.1x

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

control is in the authorized state. The supplicant and other devices con-

nected to this port can access the network. If the authenticator receives a

RADIUS-Access-Reject, it will send an EAP-Failure to the supplicant. This

means the supplicant has failed to authenticate. The port it is connected

to is in the unauthorized state, the supplicant and the devices connected

to this port won’t be allowed to access the network.

쐅 When the supplicant issues an EAP-Logoff message to the authentication

server, the port used is set to unauthorized.

The 802.1X “enabled” is the type of authentication supported by the switch.

In this mode, the devices connected to this port, once a supplicant is autho-

rized, can access the network resources through this port.

The 802.1x Port-based Network Access Control function supported by the

switch is more complex, it just supports basic Multihost mode, which can dis-

tinguish the device’s MAC address and its VID. The following table is the sum-

mary of the combination of the authentication status and the port status

versus the status of port mode, set in 802.1x Port mode, port control state, set

in 802.1x port setting. Here Entry Authorized means MAC entry is authorized.

Port Mode Port Control Authentication Port Status

Disable Don’t Care Don’t Care Port Uncontrolled

Multihost Auto Successful Port Authorized

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

Configuration

The 802.1X Server Configuration is used to configure the global parameters

for RADIUS authentication in 802.1X port security application.

Parameter:

쮿 Mode:

Enable or disable 802.1X function.

쮿 RADIUS IP:

RADIUS server IP address for authentication.

Default: 0.0.0.0

쮿 RADIUS UDP Port:

The port number to communicate with a RADIUS server for the authenti-

cation service. The valid value ranges 1-65535.

Default port number is 1812.

쮿 RADIUS Secret:

The secret key between authentication server and authenticator. It is a

string with the length of 1 - 15 characters. The character string may con-

tain upper case, lower case and 0-9. It is character sense. It is not allowed

to put a blank between any two characters.

Default: None

쮿 Admin State:

This is used to set the operation mode of authorization. There are three

types of operation modes supported: Force Unauthorized, Force Authori-

zed, Auto.

왏 Force Unauthorized:

The controlled port is forced to hold in the unauthorized state, no

matter which EAP negotiation between authenticator and supplicant

takes place.

Multihost Auto Failure Port Unauthorized

Multihost Force Unauthorized Don’t Care Port Unauthorized

Multihost Force Authorized Don’t Care Port Authorized

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

왏 Force Authorized:

The controlled port is forced to hold in the authorized state, no mat-

ter which EAP negotiation between authenticator and supplicant

takes place.

왏 Auto:

If the port is set to be in authorized or unauthorized state depends on

the result of the authentication exchange between the authenticatior

and supplicant.

Default: Force Authorized

쮿 Port State:

Shows the port status of authorization.

쮿 Re-authenticate:

Using this function all devices connected to this port will have to re-

authenticate with username and password when the reauthentication

period expires.

쮿 Re-authenticate All:

Re-authenticate for all ports at once.

Using this function forces the devices connected to all ports to re-

authenticate with username and password when the reauthentication

period expires.

쮿 Force Reinitialize:

Using this function forces all devices connected to this port to re-authen-

ticate with username and password immediately.

쮿 Force Reinitialize All:

Using this function forces the devices connected to all ports to re-

authenticate with username and password immediately.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

Statistics

Choose the port which you want to show of 802.1X statistics, the screen

include Authenticator counters, backend Authenticator counters, dot1x MIB

counters and Other statistics.

Parameters

You can enable or disable the reauthentication function and specify how often

a client has to reenter his or her username and password to stay connected to

the port.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

Parameter:

쮿 Reauthentication Enabled:

Choose whether regular authentication will take place in this port.

Default: Disable

쮿 Reauthentication Period (1-65535 s):

You can define the time period (in seconds), after a supplicant has to

authenticate again. The time period can not be zero.

Default: 3600 seconds

쮿 EAP timeout (1-255 s):

A timeout condition in the exchange between the authenticator and the

supplicant. Valid range: 1 -255.

Default: 30 seconds

4.2.10 IGMP Snooping

IGMP Snooping lets administrators configure a switch to constrain multicast

traffic on certain ports.

Parameter:

쮿 IGMP Enabled:

Here you can enable the IGMP function.

Default: disable

쮿 Router Ports:

A Port is a router port, if a router is connected which handles multicast

routing. Enable here the corresponding ports.

Default: none

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Unregistered IGMP Flooding enabled:

Allows multicats flooding, while the multicast traffic is not registered in

the multicast table.

Default: enable

쮿 VLAN ID:

With the IGMP Enable mode being selected, it will list the VLAN ID num-

ber.

쮿 IGMP Snooping Enabled:

If this function is enabled, the switch can handle IGMP-requests in the

network and learns the membership of certain multicast groups if neces-

sary.

Default: enable

쮿 IGMP Querying Enabled:

If this function is enabled, the switch can distribute IGMP-requests in the

network.

Default: enable

4.2.11 Mirror Configuration

Mirror Configuration is used to monitor the traffic in the network. This switch

supports one-port mirror multi-ports. For example, we assume that Port A and

Port B are Source Ports, and Port C is a Mirror Port, thus the traffic passing

through Port A and Port B will be copied to Port C for monitoring purposes.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

Parameter:

쮿 Source Port:

Sets the port for monitoring. Just tick the check box beside the port x.

Valid ports are port 1-24.

쮿 Mirror Port:

Use the drop-down menu to select a mirror port

The value “disabled” (default) deactivates this function.

4.2.12 QoS (Quality of Service) Configuration

The switch offers powerful QoS function. This function supports VLAN-tagged

priority that can make precedence of 8 priorities, and DSCP (Differentiated

Services Code Point) on Layer 3 of network framework.

쮿 QoS Configuration

While setting QoS function, please select the QoS Mode in drop-down

menu at first. Then you can use 802.1p Priority and DSCP Priority func-

tions. In this function, you can enable/disable QoS Mode and set Priority

Control, such as: 802.1p and DSCP. The switch only supports Strict Priority.

High priority queue is always passed first.

쮿 802.1p QoS Mode

This function will affect the priority of VLAN tags. Based on priority of

VLAN tags, it can arrange 0~7 priorities, priorities can map to 4 queues

of the switch (low, normal, medium, high) and possess different band-

width distribution according to your weight setting.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

Parameter:

왏 Prioritize Traffic

Five Prioritize Traffic values are provided: Custom, All Low Priority, All

Normal Priority, All Medium Priority, and All High Priority.

The QoS setting would apply to all ports on the switch if one of the

following values is selected: All Low Priority, All Normal Priority, All

Medium Priority, or All High Priority.

왏 Port Number

When Custom is selected to prioritize traffic, you may assign a specific

Port Number for 802.1p Configuration.

왏 802.1p Configuration

Each Priority can select any of the Queues. In Default, Priority 0 is

mapping to Queue normal, Priority 1 is mapping to Queue low, Prio-

rity 2 is mapping to Queue low, Priority 3 is mapping to Queue normal,

Priority 4 is mapping to Queue medium, Priority 5 is mapping to

Queue medium, Priority 6 is mapping to Queue high, and Priority 7 is

mapping to Queue high.

쮿 DSCP QoS Mode

In the late 1990s, the IETF redefined the meaning of the 8-bit SERVICE

TYPE field to accommodate a set of differentiated services (DS). Under the

differentiated services interpretation, the first six bits comprise a code-

point, which is sometimes abbreviated DSCP, and the last two bits are left

unused.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

DSCP can form total 64 kinds of traffic classes based on the arrangement

of a 6- bit field in DSCP of the IP packet. In the switch, the user is allowed

to set up to 64 kinds of these classes that belong to any queue (low, nor-

mal, medium, high).

Parameter:

왏 Prioritize Traffic

Five Prioritize Traffic values are provided: Custom, All Low Priority, All

Normal Priority, All Medium Priority, and All High Priority.

The QoS setting applies to all ports on the switch if one of the follo-

wing values is selected: All Low Priority, All Normal Priority, All

Medium Priority, or All High Priority.

왏 Port Number

When Custom is selected for Prioritize Traffic, you may assign a spe-

cific Port Number for DSCP Configuration.

왏 802.1p Configuration

64 kinds of priority traffic as mentioned above, can be set up for any

Queue (low, normal, medium, high). In default, Priority 0-63 are map-

ping to Queue high.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4.2.13 Filter

The filter configuration lets administrators assign certain IP addresses or sub-

nets to ports on the switch, from which a login on the switch for configuration

is allowed.

Parameter:

쮿 Source IP Filter:

왏 Mode:

There are three types of modes in this drop-down menu.

Default: Disabled.

Disabled:

Allows all IP Addresses to login and manage the switch.

Static:

Allows the IP Addresses set by the administrator to login and

manage the switch.

DHCP:

Allows the IP Address distributed by the DHCP to login and

manage the switch.

Note: If you choose this mode only an DHCP client could be

package forwarding on the port.

왏 IP Address:

Setting up the IP Address, it can be one IP Address or a LAN.

왏 IP Mask:

Setting up the IP Subnet Mask related with the IP Address.

쮿 DHCP Server Allowed:

Just tick the check box under the port x to allow the DHCP Server on this

port.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

Default: allowed

4.2.14 Rate Limit

Ingress and Egress Bandwidth Setting function are used to set up the limit of

Ingress or Egress bandwidth for each port.

Parameter:

쮿 Traffic Rate Unit

Select the data rate as basis for the rate limit. Possible values from

128 Kbps to 32 Mbps.

쮿 Ingress:

Set up the limit of Ingress bandwidth for the port you choose. Incoming

traffic will be discarded if the rate exceeds the value you set up in the Data

Rate field. Pause frames are also generated if flow control is enabled. The

format of the packet limits to unicast, broadcast and multicast. Valid

values are multiples (0 to 31) of the traffic rate unit. The resulting limit is

shown on the right next to the drop down box.

Default: No Limit

쮿 Egress:

Set up the limit of Egress bandwidth for the port you choose. Outgoing

traffic will be discarded if the rate exceeds the value you set up in the Data

Rate field. Pause frames are also generated if flow control is enabled. The

format of the packet limits to unicast, broadcast and multicast. Valid

values are multiples (0 to 31) of the traffic rate unit. The resulting limit is

shown on the right next to the drop down box.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

Default: No Limit

4.2.15 Storm Control

Storm Control is used to block unnecessary multicast and broadcast frames

that reduce the switch's performance. When the function is enabled and

values of storm control are exceeded, multicast and broadcast frames will be

dropped.

Parameter:

쮿 ICMP Rate:

Enables the ICMP Storm capability. The setting range is 1k-1024k per

second. If the amount of ICMP packets reachs this value, ICMP packets

will be dropped.

Default: No Limit

쮿 Learn Frames Rate:

To enable the Learn Frames Storm capability. User can use the drop-down

menu to select the number of frames. The setting range is 1k~1024k per

second.

Default: No Limit

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Broadcast Rate:

To enable the Broadcast Storm capability. User can use the drop-down

menu to select the number of frames. The setting range is 1k~1024k per

second.

Default: No Limit

쮿 Multicast Rate:

To enable the Multicast Storm capability. User can use the drop-down

menu to select the number of frames. The setting range is 1k~1024k per

second.

Default: No Limit

쮿 Flooded unicast Rate:

To enable the Flooded unicast Storm capability. User can use the drop-

down menu to select the number of frames. The setting range is

1k~1024k per second.

Default: No Limit

4.2.16 SNMP

Any Network Management System (NMS) running the Simple Network

Management Protocol (SNMP) can manage the managed devices equipped

with the SNMP agent, provided that the Management Information Base (MIB)

is installed correctly on the managed devices. SNMP is a protocol that is used

to govern the transfer of information between the SNMP manager and agent

and traverses the Object Identity (OID) of the Management Information Base

(MIB), described in the form of Structure Management Information (SMI). The

SNMP agent is running on the switch to response the request issued by the

SNMP manager.

Basically, it is passive except issuing the trap information. The switch supports

to turn on or off the SNMP agent. If you set the field SNMP “Enable”, the

SNMP agent will be started up. All supported MIB OIDs, including RMON MIB,

can be accessed via the SNMP manager. If the field SNMP is set “Disable”, the

SNMP agent will be de-activated, the related Community Name, Trap Host IP

Address, Trap and all MIB counters will be ignored.

쮿 SNMP Configuration

This function is used to configure SNMP settings, community name, trap

host and public traps as well as the throttle of SNMP. A SNMP manager

must pass the authentication by identifying both community names, then

it can access the MIB information of the target device. So, both parties

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

must have the same community name. Once completing the setting, click

Apply and the setting takes effect.

Parameter:

쮿 SNMP enable:

Enables or disables SNMP.

Default: Enabled

쮿 Get/Set/Trap Community:

The community name is used as password for authenticating if the

requesting network management unit belongs to the same community

group. If they both don’t have the same community name, they don’t

belong to the same group. Hence, the requesting network management

unit cannot access the device with a different community name via the

SNMP protocol; If they both have the same community name, they can

talk to each other.

The community name is user-definable variable with a maximum length

of 15 characters and is case sensitive. It is not allowed to put any blank in

the community name string. Any printable character is allowable. The

community name for each function works independently. Each function

has its own community name. Say, the community name for READ only

works for the READ function and can’t be applied to other functions such

as WRITE or TRAP.

Default SNMP function : enable

Default community name for Get: public

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

Default community name for Set: private

Default community name for Trap: public

쮿 System Event:

Select the events for which an SNMP-Trap should be send (Cold Boot and/

or Warm Boot).

Default: Enable

쮿 TP and Fiber Port Event:

Select the events on the ports for which an SNMP-Trap should be send

(Link Up and/or Link Down).

4.3 Monitoring

There are five functions contained in the monitoring function: Detailed Stati-

stics, LACP Status, RSTP Status, IGMP Status and Ping Status.

4.3.1 Detailed Statistics

Displays the detailed counting number of each port's traffic. All counter infor-

mation for one port are shown at one time. Click on a port in the upper screen

to show the values of this port. You can activate up to five receive statistics

and five transmit statistics at the same time. Confirm your selection with a

click on Apply. With Refresh you can update the table.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

Parameter:

쮿 Rx Packets:

The number of packets received.

쮿 Rx Octets:

Total received bytes.

쮿 Rx High Priority Packets:

Number of Rx packets classified as high priority.

쮿 Rx Low Priority Packets:

Number of Rx packets classified as low priority.

쮿 Rx Broadcast:

Shows the number of the received broadcast packets.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Rx Multicast:

Shows the number of received multicast packets.

쮿 Rx Broad- and Multicast:

Shows the number of received broadcasts with multicast packets.

쮿 Rx Error Packets:

Shows the number of received error packets.

쮿 Tx Packets:

The number of packets transmitted.

쮿 Tx Octets:

Total transmitted bytes.

쮿 Tx High Priority Packets:

Number of Tx packets classified as high priority.

쮿 Tx Low Priority Packets:

Number of Tx packets classified as low priority.

쮿 Tx Broadcast:

Shows the number of transmitted broadcast packets.

쮿 Tx Multicast:

Shows the number of transmitted multicast packets.

쮿 Tx Broad- and Multicast:

Shows the number of transmitted broadcasts with multicast packets.

쮿 Tx Error Packets:

Shows the number of received error packets.

쮿 Rx 64 Bytes:

Number of 64-byte frames in good and bad packets received.

쮿 Rx 65-127 Bytes:

Number of 65 ~ 126-byte frames in good and bad packets received.

쮿 Rx 128-255 Bytes:

Number of 127 ~ 255-byte frames in good and bad packets received.

쮿 Rx 256-511 Bytes:

Number of 256 ~ 511-byte frames in good and bad packets received.

쮿 Rx 512-1023 Bytes:

Number of 512 ~ 1023-byte frames in good and bad packets received.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Rx 1024-Bytes:

Number of 1024-max_length-byte frames in good and bad packets recei-

ved.

쮿 Tx 64 Bytes:

Number of 64-byte frames in good and bad packets transmitted.

쮿 Tx 65-127 Bytes:

Number of 65 ~ 126-byte frames in good and bad packets transmitted.

쮿 Tx 128-255 Bytes:

Number of 127 ~ 255-byte frames in good and bad packets transmitted.

쮿 Tx 256-511 Bytes:

Number of 256 ~ 511-byte frames in good and bad packets transmitted.

쮿 Tx 512-1023 Bytes:

Number of 512 ~ 1023-byte frames in good and bad packets transmitted.

쮿 Tx 1024-Bytes:

Number of 1024-max_length-byte frames in good and bad packets trans-

mitted.

쮿 Rx CRC/Alignment:

Number of Alignment errors and CRC error packets received. A cyclic red-

undancy check (CRC) checks an inspection value for data, to detect errors

in the transmitting process and the storage.

쮿 Rx Undersize:

Number of short frames (<64 Bytes) with valid CRC.

쮿 Rx Oversize:

Number of long frames (according to max_length register) with valid CRC.

쮿 Rx Fragments:

Number of short frames (< 64 bytes) with invalid CRC.

쮿 Rx Jabber:

Number of long frames (according to max_length register) with invalid

CRC.

쮿 Rx Drops:

Frames dropped due to the lack of receiving buffer.

쮿 Tx Collisions:

Number of collisions transmitting frames experienced.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Tx Drops:

Number of frames dropped due to excessive collision, late collision, or

frame aging.

쮿 Tx Overflow:

Number of frames dropped due to the lack of transmitting buffer.

4.3.2 LACP Status

The LACP Status window shows LACP information and status for all ports at

the same time. Within the IEEE specification the Link Aggregation Control Pro-

tocol (LACP) provides a method to control the bundling of several physical

ports together to form a single logical channel.

Parameter:

쮿 LACP Aggregation Overview:

Shows the group/port status. Default will set to red sign for “port link

down”. Please check legend table below for all references.

쮿 LACP Port Status:

Group/Port: Shows the port number.

Normal: See Legend.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4.3.3 RSTP Status

RSTP Status shows the present VLAN bridge information and the status of all

ports.

Parameter:

쮿 VLAN ID:

Shows VLAN ID.

쮿 Bridge ID:

Shows bridge priority setting and bridge ID of the switch, which stands for

the MAC address of this switch.

쮿 Hello Time:

Shows the current hello time of the root bridge.

쮿 Max. Age:

Shows the current root bridge maximum age time.

쮿 Forward Delay:

Shows the current root bridge forward delay time.

쮿 Topology:

Shows the root bridge’s spanning tree topology.

쮿 Root ID:

Shows Root bridge ID of this network segment. If this switch is a root

bridge the text: "This switch is Root" will appear.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4.3.4 IGMP Status

Internet Group Management Protocol (IGMP) is used to snoop the status of IP

multicast groups and display its associated information in both tagged VLAN

and non-tagged VLAN networks. When IGMP snooping is enabled in the

switch it analyzes all IGMP packets between hosts connected to the switch

and multicast router in the network. When a switch hears an IGMP report from

a host for a given multicast group, the switch adds the host's port number to

the multicast list for that group. When the switch hears an IGMP Leave, it

removes the host's port from the table entry.

IGMP Status shows the VLAN ID for each multicast group.

Parameter:

쮿 VLAN ID:

Shows VLAN ID for each multicast group.

쮿 Querier:

Shows the group membership queries status.

쮿 Queries transmitted:

Shows the number of group membership queries transmitted.

쮿 Queries received:

Shows the number of group membership queries received.

쮿 V1 Reports:

When a host receives a group membership query, it identifies the groups

associated with the query and determines to which groups it belongs. The

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

host then sets a timer, with a value less than the Max Response Time field

in the query, for each group to which it belongs. It calculates the number

of times of IGMPV1 report.

쮿 V2 Reports: See V1.

쮿 V3 Reports: See V1.

쮿 V2 Leaves:

When a host leaves a group, it sends a leave group membership message

to multicast routers on the network. It shows the leaves number.

4.3.5 Ping Status

Sets up target IP address for ping function and display ping status.

Ping test function is a tool for detecting if the target device is alive or not

through the ICMP protocol which abounds with report messages. The switch

provides the ping test function to let you know if the target device is available

or not. Fill in an IP address and click Apply. The result will show if the target

device is available. You can update the table with a click on Refresh.

Parameter:

쮿 Ping Parameter:

왏 Target IP address:

Target IP address to ping.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

왏 Count:

Use the drop-down menu to set the number of echo requests to send.

Four type of number are possible: 1, 5, 10 and 20.

Default: 1

왏 Time Out (in secs):

Use the drop-down menu to set the number of echo requests time out

in second. Four type numbers are possible: 1, 5,10 and 20.

Default: 1

NOTE: You need to press Apply to start after you set the parameters.

쮿 Ping Results:

왏 Target IP address:

Shows the active target IP address.

왏 Status:

Shows the result of the ping status.

쮿 Received replies:

Shows the received replies number of times.

쮿 Request timeouts:

Shows the timeout of request.

쮿 Average Response times (In ms):

Shows the average response time in milliseconds.

4.4 Maintenance

In this section the functions are described for maintaining the switch.

4.4.1 Warm Restart

Warm restart provides the function to restart the device.

After upgrading software, you must restart the switch to have the new

configuration taken in effect.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

쮿 Warm restart: Press Yes to confirm warm restart function. It will take

around 30 seconds to complete the system boot.

4.4.2 Factory Default

Factory default provides the function to retrieve default settings and replace

current configuration. Except the IP address setting, all settings will be resto-

red to the factory default values when "Factory Default" function is perfor-

med. If you want to restore all configurations including the IP address setting

to the factory default, please press the "RESET" button on the front panel lon-

ger than three seconds.

4.4.3 Software Upgrade

You can just click the browse button to retrieve the file you want in your sys-

tem to upgrade your switch.

4.4.4 Configuration File Transfer

You can backup your switch's configuration file into your computer folder in

case accident happens. In addition, uploading backup configuration file into

a new or a crashed switch can save much time and avoid mistakes.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 4: Operation of Web- based Management

4.4.5 Logout

The switch allows you to log outof the system to prevent other users from

using the system without permission. There are three possibilities to log out

or be logged out.

쮿 Auto Logout: If Auto Logout is ON and no action/no key stroke is done for

the time (in minutes) you set up in the Auto Logout Timer, the switch will

log you out automatically.

쮿 Implicit Logout: If you do not log out and exit the browser, the switch will

automatically log you out.

쮿 Logout Function: The switch allows administrators to log out manually by

Logout function.

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 5: Appendix

5 Appendix

5.1 Performance data and specification

LANCOM GS-1224 LANCOM GS-1224P

Performance Switching technology Store and forward with latency less than 5 μs

MAC addresses Support of maximal 8K MAC addresses

Throughput maximal 48 Gbps on the backplane

VLAN Port based and IEEE 802.1q tag based VLAN with up to 4096 VLAN

and up to 24 active VLANs; Supports ingress and egress packet fil-

ter in port based VLAN

LAN protocols Link Aggregation Control

Protocol (LACP)

Maximal 12 groups, max 8 member per group, supports DA, SA

and DA+SA MAC based trunking with automatic failover

Multicasting Supports IGMP snooping

Spanning Tree Protokoll

(STP) / Rapid STP

802.1d/1w

802.3af Features Ports 24x 802.3af PoE ports

Power 185 Watt total power with

dynamic load balancing on all

ports (i.e. up to 15.4 watt for 12

ports or 7.7 watt für 24 ports)

Priorisation Supports port based priority

and PoE status setting

Status information Monitoring via LED, displaying

the actual power consumption

per port in web interface

Interfaces Ethernet ports 24 ports 10/100/1000 Mbps ethernet, 4 Combo ports TP/SFP 10/

100/1000 Mbps

Power supply Internal power supply unit (110–230 V, 50-60 Hz)

Housing Robust metal housing, 19" 1HE (440 x 44,2 x 170 mm) with remo-

vable mounting brackets, network connectors on the front

Standards CE conformity according to EN 55022, EN 55024, EN 60950

Environment/

Temperature

Temperature range 0–40°C; humidity 5–90%; non-condensing

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 5: Appendix

Accessories 쮿 1000Base-SX SFP module, LANCOM SFP-SX-LC1, item no.

61556

쮿 1000Base-LX SFP module, LANCOM SFP-LX-LC1, item no.

61557

Service 5 years

Support Via Hotline and Internet

LANCOM GS-1224 LANCOM GS-1224P

LANCOM GS-1224 and LANCOM GS-1224P

쮿 Chapter 5: Appendix

5.2 Connector wiring

5.2.1 Ethernet interface 10BASE-T/100BASE-TX/1000BASE-T

8-pin RJ45 sockets (ISO 8877, EN 60603-7)

5.3 CE-declarations of conformity

LANCOM Systems herewith declares that the devices of the type described in

this documentation are in agreement with the basic requirements and other

relevant regulations of the 1995/5/EC directive.

The CE declarations of conformity for your device can be found on the relevant

product page on the LANCOM Web site (www.lancom.eu

Connector Pin Fast

Ethernet

Gigabit

Ethernet

1T+BI_DA+

2T-BI_DA-

3R+BI_DB+

4PoE/GBI_DC+

5PoE/GBI_DC-

6R-BI_DB-

7PoE/ -48 VBI_DD+

8PoE/ -48 VBI_DD-

0511

LANCOM Systems GmbH

Adenauerstr. 20/B2

52146 Würselen

Germany

E-Mail: info@lancom.eu

Internet www.lancom.eu

LANCOM GS-1224

LANCOM GS-1224P

...connecting your business

LC-GS1224-MANUAL_cover.indd 1LC-GS1224-MANUAL_cover.indd 1 03.05.2011 14:19:4403.05.2011 14:19:44

Report abuse

Libble takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Product:

Forumrules

To achieve meaningful questions, we apply the following rules:

First, read the manual;
Check if your question has been asked previously;
Try to ask your question as clearly as possible;
Did you already try to solve the problem? Please mention this;
Is your problem solved by a visitor then let him/her know in this forum;
To give a response to a question or answer, do not use this form but click on the button 'reply to this question';
Your question will be posted here and emailed to our subscribers. Therefore, avoid filling in personal details.

new questions and answers
new manuals

You will receive an email to register for one or both of the options.

Get your user manual by e-mail

Enter your email address to receive the manual of Lancom GS-1224P in the language / languages: English as an attachment in your email.

The manual is 0,94 mb in size.

You will receive the manual in your email within minutes. If you have not received an email, then probably have entered the wrong email address or your mailbox is too full. In addition, it may be that your ISP may have a maximum size for emails to receive.

Others manual(s) of Lancom GS-1224P

Lancom GS-1224P User Manual - German - 74 pages

The manual is sent by email. Check your email

If you have not received an email with the manual within fifteen minutes, it may be that you have a entered a wrong email address or that your ISP has set a maximum size to receive email that is smaller than the size of the manual.

The email address you have provided is not correct.

Please check the email address and correct it.

Your question is posted on this page

Would you like to receive an email when new answers and questions are posted? Please enter your email address.

Info

Lancom GS-1224P Manual

Product: