Page 1
Switch-M16eG Operation Manual for Menu Interface Model Number: PN28160K Thank you for purchasing our product. This manual provides important information about safe and proper operations of this Switching Hub. Please read the "Important Safety Instruction" on pages 3 to 5.
Page 2
This operation manual is applicable to the following Switching Hubs: Product name Model No. Firmware version Switch-M16eG PN28160K-ID 2.0.1.01 or higher PN28160K-TH PN28160K-MY PN28160K-SG...
Important Safety Instructions This chapter contains important safety instructions for preventing bodily injury and/or property damage. You are required to follow them. Severity of bodily injury and/or property damage, which could result from incorrect use of the Switching Hub, are explained below. This symbol indicates a potential hazard that WARNING could result in serious injury or death.
Page 4
WARNING Do not connect equipments other than 10BASE-T/100BASE-TX/1000BASE-T to twisted pair port. Deviation could lead to fire, electric shock, and/or equipment failure. Do not place this Switching Hub in harsh environment (such as near water, high humid, and/or high dust). Deviation could lead to fire, electric shock, and/or equipment failure.
Page 5
WARNING Use the bundled power cord (AC 100 – 240V specifications). Deviation could lead to electric shock, malfunction, and/or equipment failure. Unplug the power cord in case of equipment failure. Deviation, such as keeping connected for a long time, could lead to fire.
Basic Instructions for the Use of This Product For inspection and/or repair, consult the shop. Use commercial power supply from a wall socket, which is close and easily accessible to this Switching Hub. Unplug the power cord when installing or moving this Switching Hub. ...
Page 7
For the latest information about compatible SFP extension modules, check our website. 1. Panasonic will not be liable for any damage resulting from the operation not in accordance with this document or the loss of communications, which may or may not be caused by failure and/or malfunction of this product.
Table of Contents Important Safety Instructions ................3 Basic Instructions for the Use of This Product ............6 1. Product Outline ....................11 1.1. Features ...................... 11 1.2. Accessories ....................13 1.3. Part Names ....................14 1.4. LED Behavior ....................15 1.4.1.
Page 9
4.6.9. Time Configuration ................106 4.6.10. ARP Table ..................109 4.6.11. NDP Table ..................111 4.7. Advanced Switch Configuration .............. 113 4.7.1. VLAN Management ................115 4.7.2. Link Aggregation ................125 4.7.3. Port Monitoring Configuration Menu ..........127 4.7.4. Access Control Configuration Menu ..........129 4.7.5 Quality of Service Configuration ............
1. Product Outline Switch-M16eG is an all Giga bit Ethernet Switching Hub with management function having 14 ports of 10/100/1000BASE-T and two pairs of 10/100/1000BASE-T port and SFP extension slot, one of which is selectable. 1.1. Features Has wire-speed Layer 2 switching function. ...
Page 12
Telnet and SSH functions facilitate remote setting change and confirmation. Standard MIB (MIB II, Bridge MIB, etc.) is supported, enabling remote control by using the SNMP manager. (For details, refer to Appendix A and Appendix C.) Link aggregation function is supported. Aggregation can be manually ...
1.2. Accessories Please be sure to confirm the content. Please contact our distributor if any of the contents are insufficient. Quantity Installation Guide (this document)………………………………………………… 1 CD-ROM (PDF version of Operating Instructions) …………………………… 1 Mounting bracket (for 19-inch rack)……………………………………………… 2 Screws (for 19-inch rack)………………………………………………………………...
1.4. LED Behavior 1.4.1. LED Behavior at Start-up Upon turning this Switching Hub on, all LEDs tentatively light up. Then, the self-diagnosis of hardware is executed. Upon finishing the diagnosis, power LED and status/ECO mode LED light in solid green. Then, the Switching Hub starts working.
Page 16
Port LED display mode LED In the status mode described later, port LED shows linkup and communication status. By pressing the LED display switch button in the front panel, the display mode of port LED can be changed as follows. Port LED display mode Description STATUS/ECO...
Page 17
No loop detection history. Right Orange Shutting down by loop detection. Light Not shutting down by loop detection. Fig. 1-4 Port LED...
1.4.3. Loop detection function Turns on the port LED with an orange light when a loop occurs in the corresponding port. At this time, the relevant port automatically shuts down (default setting: 60 sec.) to prevent loop from occurring. If the loop is still not removed, the port will shut down again.
1.5. LED Display Change Button 1.5.1. Setting LED Base Mode You can select display of LEDs in this Switching Hub from two types: Status mode and Eco mode. The mode selected at system start-up is called the base mode. The base mode can be switched by keeping pressing the LED display switch button for more than 3 seconds.
Page 20
If the port LED display mode is switched to other than STATUS/ECO and then no operation is executed for more than 1 minute, the mode automatically shifts to the base mode.
2. Installation Switch-M16eG can be installed to a stainless steel product, a 19-inch rack, or on the wall. 2.1. Mounting to 19-inch Rack Take out the supplied 2 mounting brackets (for 19-inch rack) and 8 screws (for fixing the main unit and the mounting bracket), and fix the brackets to the main unit by tightening screws into 4 holes located at the sides.
3. Connection 3.1. Connection Using a Twisted Pair Port Connection Cable Use a CAT5E or higher twisted pair cable with 8P8C RJ45 modular plug. Network Configuration 100 m or shorter 100 m 100 m or shorter or shorter Fig.
3.2. Connection Using an SFP Extension Slot 1000BASE-SX: 550 m or shorter / 1000BASE-LX: 10 km or shorter 100 m 100 m or shorter or shorter Fig. 3-2 Example of Optical Fiber Cable Connection Plugging an SFP module (optional) into an SFP extension slot enables an optical fiber connection.
3.3. Connection to Power Connect the supplied power code to the power port of this Switching Hub and connect the other end into an electric outlet. This Switching Hub operates at 100-240 V (50/60 Hz). This Switching Hub does not have a power ON/OFF switch. Plugging the power cord turns on this Switching Hub's power and the operation starts.
4. Configuration Upon power on, this Switching Hub starts working as a switching hub. To use the SNMP management functionality or other unique functions, you need to configure the Switching Hub using a console port, Telnet, or SSH. In this chapter, the configuration of this Switching Hub is explained. Note: You need to configure an IP address to access this Switching Hub via Telnet or SSH.
If this screen does not appear, press Enter key to refresh the display or confirm that there is no error in configuration of communication mode and others. ============================================================================== PN28160K Local Management System Version x.x.x.xx MAC Address: xx:xx:xx:xx:xx:xx ============================================================================== Login Menu Login: Fig.
Page 27
============================================================================== PN28160K Remote Management System Version x.x.x.xx MAC Address: xx:x:xx:xx:xx:xx ============================================================================== Login Menu Login: Fig. 4-2-2 Login Screen (Telnet)
Page 28
Fig. 4-2-3. The Switching Hub's default password is the same as the login name ("manager"). Enter the password correctly and press the Enter key. ============================================================================== PN28160K Local Management System Version x.x.x.xx MAC Address: xx:xx:xx:xx:xx:xx ============================================================================== Login Menu...
4.3. Basic Operations on the Screen The console screen of the Switching Hub is organized as follows: 1. Title 2. Previous menu name 3. Current menu name PN28160K Local Management System Basic Switch Configuration -> System IP Configuration Menu MAC Address: xx:xx:xx:xx:xx:xx IP Address: 192.168.1.10...
Page 30
Screen Description Title The title of this screen. Shows "Local Management System" while being accessed via console. Shows "Remote Management System" while being accessed via Telnet. Previous menu Shows the name of the previous menu. Pressing "Q," name described later, opens the menu screen shown in this field.
To move to a sub-menu, enter a command letter. To return to the previous menu, enter the "Q" command. The second line from the top shows the current menu name. PN28160K Local Management System Main Menu [G]eneral Information [B]asic Switch Configuration...
Page 32
Screen Description General Information Shows this Switching Hub's hardware, firmware information and address settings. Basic Switch Configures this Switching Hub's basic functions (such as IP address, Configuration… SNMP and port settings). Advanced Switch Configures this Switching Hub's advanced functions (such as VLAN, Configuration…...
On the Main Menu, pressing "G" opens the General Information Menu, as shown in Fig. 4-5-1. This screen shows this Switching Hub's basic information. You cannot edit shown information on this screen. PN28160K Local Management System Main Menu -> General Information System up for: 0day(s), 0hr(s), 0min(s), 0sec(s) Boot / Runtime Code Version: x.x.x.x / x.x.x.x...
Page 34
PN28160K Local Management System Main Menu -> General Information System Address Information MAC Address: xx:xx:xx:xx:xx:xx IPv6 Address/PrefixLen: ::/128 IPv6 Link Local Address: IPv6 Default Gateway: Press any key to continue... Fig. 4-5-2 General Information Menu (IPv6)
Page 35
Screen Description System up for Shows accumulated time since the Switching Hub boot-up. Boot Code Shows the version of Boot Code. Version Runtime Code Shows the version of Runtime Code. Version (Upgrading firmware version described in 4.9.1 is applicable to Runtime Code.) Hardware Shows the hardware information.
Page 36
IPv6 Shows the Switching Hub's current IPv6 Address/PrefixLen address. ::/128 is displayed because no address is set on shipment. For configuration details, refer to 4.6.2a. IPv6 Link Local Shows the Switching Hub's current IPv6 link local Address address. :: is displayed because no address is set on shipment.
On the Main Menu, pressing "B" opens the Basic Switch Configuration Menu, as shown in Fig. 4-6-1. On this screen, you can configure the basic configuration settings, such as IP address, SMNP, and ports. PN28160K Local Management System Main Menu -> Basic Switch Configuration Menu System [A]dministration Configuration System [I]P Configuration...
Page 38
Screen Description System Administration Configures the administrative information, such as Switching Configuration Hub name, location and contact information. System IP Configuration Configures the IP-address-related network information. SNMP Configuration Configures SNMP-related settings. Port Configuration Basic Configures PoE for each port. Port Configuration Configures extended port settings, such as port name.
On the Basic Switch Configuration Menu, pressing "A" opens the System Administration Configuration Menu, as shown in Fig. 4-6-2. On this screen, you can set administrative information, such as device name. PN28160K Local Management System Basic Switch Configuration -> System Admin. Configuration Menu Description: Switch-M16eG Object ID: 1.3.6.1.4.1.396.5.4.2.19...
Page 40
Available commands are listed below. Set/edit the system name. Press "N." The command prompt changes to "Enter system name>." Enter a Switching Hub name in 50 one-byte characters or less. Set/edit the installation location information. Press "L." The command prompt changes to "Enter system location>." Enter a Switching Hub location in 50 one-byte characters or less.
On the Basic Switch Configuration Menu, pressing "I" opens the System IP Configuration Menu, as shown in Fig. 4-6-3. On this screen, you can set IP-address-related settings for this Switching Hub. PN28160K Local Management System Basic Switch Configuration -> System IP Configuration Menu MAC Address:...
Page 42
Available commands are listed below. Set/edit the IP address. Press "I." The command prompt changes to "Enter IP address>." Enter an IP address for the Switching Hub. M Set/edit the subnet mask. Press "M." The command prompt changes to "Enter subnet mask>." Enter a subnet mask for the Switching Hub.
Page 43
On the System IP Configuration Menu, pressing "P" opens the IPv6 Configuration Menu, as shown in Fig. 4-6-4. On this screen, you can set IPv6-address-related settings for this Switching Hub. PN28160K Local Management System System IP Configuration Menu -> IPv6 Configuration Menu MAC Address:...
Page 44
IPv6 Default Shows the IPv6 address of the router, set as a current default gateway. Gateway :: is displayed because no address is set on shipment.
On the Basic Switch Configuration Menu, pressing "N" opens the SNMP Configuration Menu, as shown in Fig. 4-6-5. On this screen, you can configure the SNMP agent settings. PN28160K Local Management System Basic Switch Configuration -> SNMP Configuration Menu SNMP [M]anagement Configuration...
Page 46
Available commands are listed below. Configure the SNMP manager settings. Press "M." The SNMP Management Configuration Menu opens. Configure the SNMP extend settings. Press "E." The SNMP Extend Configuration Menu opens. Configure the trap receiver settings. Press "T." The SNMP Trap Receiver Configuration Menu opens. Quit the SNMP Configuration Menu and return to the previous menu.
Page 47
On the SNMP Configuration Menu, pressing "M" opens the SNMP Management Configuration Menu, as shown in Fig. 4-6-6. On this screen, you can configure the SNMP manager settings. PN28160K Local Management System SNMP Configuration -> SNMP Management Configuration Menu SNMP Manager List:...
Page 48
Community Shows the current community name. Available commands are listed below. Set the SNMP manager status. Press "S." The command prompt changes to "Enter manager entry number>." Enter an SNMP manager entry number you wish to configure. Then, the command prompt changes to "Enable or Disable SNMP manger (E/D)>."...
Page 49
On the SNMP Management Configuration Menu, pressing "P" opens the Set IPv6 SNMP Manager Menu, as shown in Fig. 4-6-7. On this screen, you can configure the SNMP IPv6 manager settings. PN28160K Local Management System SNMP Management Configuration Menu -> Set IPv6 SNMP Manager Menu SNMP Manager List:...
Page 50
On the SNMP Configuration Menu, pressing "E" opens the SNMP Extend Configuration Menu, as shown in Fig. 4-6-8. On this screen, you can configure the SNMP manager settings. PN28160K Local Management System SNMP Configuration Menu -> SNMP Extend Configuration Menu SNMP [U]ser Configuration...
Page 51
On the SNMP Extend Configuration Menu, pressing "U" opens the SNMP User Configuration Menu, as shown in Fig. 4-6-9. On this screen, you can configure the SNMP User settings. PN28160K Local Management System SNMP Extend Configuration Menu -> SNMP User Configuration Menu SNMP User List:...
Page 52
Available commands are listed below. Go to the screen for creating SNMP user. Press "C." The command prompt changes to " Enter User ID>." Enter an SNMP user entry number you wish to configure. Then, the SNMP User Configuration Menu opens.
Page 53
On the SNMP User Configuration Menu, pressing "C" opens the Create SNMP User Configuration Menu, as shown in Fig. 4-6-10. On this screen, you can configure the SNMP User settings. PN28160K Local Management System SNMP User Configuration Menu -> Create SNMP User Configuration Menu Index : 3...
Page 54
IP address Shows the SNMP manager IP address. Available commands are listed below. Set a SNMP user name. Press "U." The command prompt changes to " Enter User Name>." Enter a SNMP user name. Set a name of group. Press "G." The command prompt changes to " Enter Group Name>." Enter a SNMP group name.
Page 55
On the SNMP User Configuration Menu, pressing "O" opens the Modify SNMP User Configuration Menu, as shown in Fig. 4-6-11. On this screen, you can configure the SNMP User settings. PN28160K Local Management System SNMP User Configuration Menu -> Modify SNMP User Configuration Menu Index : 2...
Page 56
IP address Shows the SNMP manager IP address. Available commands are listed below. Set a SNMP user name. Press "U." The command prompt changes to " Enter User Name>." Enter a SNMP user name. Set a name of group. Press "G." The command prompt changes to " Enter Group Name>." Enter a SNMP group name.
Page 57
On the SNMP Extend Configuration Menu, pressing "V" opens the SNMP View Configuration Menu, as shown in Fig. 4-6-12. On this screen, you can configure the SNMP View settings. PN28160K Local Management System SNMP Extend Configuration Menu -> SNMP View Configuration Menu Total Entry : 8...
Page 58
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Go to the screen for creating SNMP view. Press "C." The command prompt changes to " Please enber view name>." Enter an SNMP view in 32 one-byte characters or less.
Page 59
On the SNMP View Configuration Menu, pressing "C" opens the Create SNMP View Configuration Menu, as shown in Fig. 4-6-13. On this screen, you can configure the SNMP View settings. PN28160K Local Management System SNMP View Configuration Menu -> Create SNMP View Configuration Menu View Name...
Page 60
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Register an additional OID in subtree. Press "A." The command prompt changes to " Enter OID>." Enter an OID. Then, the command prompt changes to "...
Page 61
On the SNMP View Configuration Menu, pressing "O" opens the Modify SNMP View Configuration Menu, as shown in Fig. 4-6-14. On this screen, you can configure the SNMP view settings. PN28160K Local Management System SNMP View Configuration Menu -> Modify SNMP View Configuration Menu View Name...
Page 62
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Register an additional OID in subtree. Press "A." The command prompt changes to " Enter OID>." Enter an OID. Then, the command prompt changes to "...
Page 63
On the SNMP Extend Configuration Menu, pressing "G" opens the SNMP Group Configuration Menu, as shown in Fig. 4-6-15. On this screen, you can configure the SNMP Group settings. PN28160K Local Management System SNMP Extend Configuration Menu -> SNMP Group Configuration Menu Total Entry : 5 Group Name Ver.
Page 64
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Go to the screen for creating SNMP group. Press "C." The command prompt changes to " Please input the SNMP Group Name>." Enter an SNMP view in 32 one-byte characters or less.
Page 65
Version", opens the Create SNMP Group Configuration Menu, as shown in Fig. 4-6-16. On this screen, you can configure the SNMP Group settings. PN28160K Local Management System SNMP Group Configuration Menu -> Create SNMP Group Configuration Menu Group Name...
Page 66
Available commands are listed below. Set a SNMP version. Press "S." The command prompt changes to " Enter SNMP version>." Press "1" for SNMP v1. Press "2" for SNMP v2c. Press "3" for SNMP v3. Set a name of view to notify. Press "O."...
Page 67
Version", opens the Modify SNMP Group Configuration Menu, as shown in Fig. 4-6-17. On this screen, you can configure the SNMP Group settings. PN28160K Local Management System SNMP Group Configuration Menu -> Modify SNMP Group Configuration Menu Group Name...
Page 68
Available commands are listed below. Set a SNMP version. Press "S." The command prompt changes to " Enter SNMP version>." Press "1" for SNMP v1. Press "2" for SNMP v2c. Press "3" for SNMP v3. Set a name of view to notify. Press "O."...
Page 69
On the SNMP Configuration Menu, pressing "T" opens the SNMP Trap Receiver Configuration Menu, as shown in Fig. 4-6-18. On this screen, you can configure the SNMP trap receiver settings. PN28160K Local Management System SNMP Configuration -> SNMP Trap Receiver Configuration Menu Trap Receiver List:...
Page 70
Community Shows the current community name of a trap receiver. Available commands are listed below. Enable/disable the trap receiver. Press "S." The command prompt changes to "Enter manager entry number>." Enter an entry number for the trap receiver you wish to configure. Then, the command prompt changes to "Enable or Disable Trap Receiver (E/D)>."...
Page 71
On the SNMP Trap Receiver Configuration Menu, pressing "d" opens the Enable/Disable Individual Trap Menu, as shown in Fig. 4-6-19. On this screen, you can configure the trap sending settings. PN28160K Local Management System SNMP Trap Receiver Configuration -> Enable/Disable Individual Trap Menu Coldstart :...
Page 72
Available commands are listed below. Enable/disable the trap sending at a coldstart. Press "C." The command prompt changes to " Enable or Disable coldstart trap (E/D)>." Press "E" to enable the trap sending. Press "D" to disable it. Enable/disable the trap sending at an SNMP authentication failure. Press "A."...
Page 73
On the SNMP Trap Receiver Configuration Menu, pressing "P" opens the Set IPv6 Trap Receiver Menu, as shown in Fig. 4-6-20. On this screen, you can set SNMP trap receiver. PN28160K Local Management System SNMP Trap Receiver Configuration Menu -> Set IPv6 Trap Receiver Menu Trap Receiver List:...
On the Basic Switch Configuration Menu, pressing "p" opens the Port Configuration Menu, as shown in Fig. 4-6-21. On this screen, you can configure port status display settings and port settings. PN28160K Local Management System Basic Switch Configuration -> Port Configuration Basic Menu Port Trunk...
Page 75
Screen Description Port Shows the port number. Trunk Shows the group number for a trunked port. Type Shows the port type. 100TX The port type is 10/100BASE-TX. 1000T The port type is 10/100/1000BASE-T. 1000X The port type is SFP port. Admin Shows the current port status.
Page 76
Available commands are listed below. Show the next page. Press "N." The screen shows the next port. Show the previous page. Press "P." The screen shows the previous port. Enable/disable a port. Press "A." The command prompt changes to "Select port number to be changed>." Enter a port number you wish to change.
Page 77
Press "S." The command prompt changes to "Enter port number>." Enter a port number (from 1 to 16) you wish to change. Press "0" to change the settings of all ports at a time. Then, the command prompt changes to "Enable or Disable Auto-MDl for port # (E/D)>."...
On the Basic Switch Configuration Menu, pressing "e" opens the Port Configuration Menu, as shown in Fig. 4-6-22. On this screen, you can configure port status display settings and port settings. PN28160K Local Management System Basic Switch Configuration -> Port Configuration Extend Menu Jumbo Status : Disabled...
Page 79
Screen Description Jumbo Shows the current jumbo frame settings. The factory default setting is "Disabled." Enabled Jumbo frame is enabled. Disabled Jumbo frame is disabled. Port Shows the port number. Trunk Shows the group number for a trunked port. Type Shows the port type.
Page 80
Available commands are listed below. Show the next page. Press "N." The screen shows the next port. Show the previous page. Press "P." The screen shows the previous port. An EAP Packet forwarding can be assigned to each port. Press "E." The command prompt changes to "Select port number to be changed>." Enter a port number you wish to change.
On the Basic Switch Configuration Menu, pressing "o" opens the Port Configuration Power Saving Menu, as shown in Fig. 4-6-23. On this screen, you can configure port status display and power saving mode. PN28160K Local Management System Basic Switch Configuration -> Port Configuration Power Saving Menu Port Link Trunk...
Page 82
Screen Description Port Shows the port number. Link Shows the current link status. Link is established successfully. Down Link is not established. Trunk Shows the group number for a trunked port. Type Shows the port type. 100TX The port type is 10/100BASE-TX. 1000T The port type is 10/100/1000BASE-T.
Page 83
Available commands are listed below. Show the next page. Press "N." The screen shows the next port. Show the previous page. Press "P." The screen shows the previous port. Set the MNO series power saving mode. Press "S." The command prompt changes to "Select port number to be changed>." Enter a port number you wish to change.
Security Configuration screen, as shown in Fig. 4-6-24. On this screen, you can configure the access control settings to this Switching Hub for configuration and management. PN28160K Local Management System Basic Switch Configuration -> System Security Configuration Console UI Idle Timeout: 5 Min.
Page 85
Access is disabled. IP Setup Shows the access settings for the IP address configuration software, Interface: bundled with the Panasonic network cameras. The factory default setting is "Enabled." * For instructions, refer to Appendix C. Enabled: Access is enabled. Disabled: Access is disabled.
Page 86
Press "A." The Telnet Access Limitation Menu opens. For configuration details, refer to the next section (4.6.7.a). Configures the access settings for the IP address configuration software, bundled with the Panasonic network cameras. Press "I." The command prompt changes to "Enable or Disable IP setup interface (E/D)>."...
Page 87
Press "O." The command prompt changes to "Enter manager entry number>." Press "1" to change the first login method. Press "2" to change the second login method. Then, the command prompt changes to the "Select the login method." Press "L" to use the user name and password set in the Switching Hub.
Page 88
Access Limitation screen, as shown in Fig. 4-6-25. In this screen, you can configure limitation of equipment accessing to this Switching Hub via Telnet. PN28160K Local Management System System Security Configuration -> Telnet Access Limitation Menu Telnet Access Limitation :...
Page 89
Available commands are listed below. Enable/Disable the access limitation from Telnet. Set the access limitation from Telnet to Enable. Set the access limitation from Telnet to Disable. Set an IP address to be permitted. Five ranges can be set up. Press "A."...
Page 90
Access Limitation Menu, as shown in Fig. 4-6-26. On this screen, you can configure limitation of equipment accessing to this Switching Hub via Telnet. PN28160K Local Management System Telnet Access Limitation Menu -> IPv6 Telnet Access Limitation Menu Telnet Access Limitation :...
Page 91
Available commands are listed below. Enable/Disable the access limitation from IPv6 Telnet. Set the access limitation from IPv6 Telnet to Enable. Set the access limitation from IPv6 Telnet to Disable. Set an IPv6 address to be permitted. Five ranges can be set up. Press "A."...
Page 92
Configuration screen, as shown in Fig. 4-6-27. On this screen, you can configure access setting to RADIUS server that is used in login authentication. PN28160K Local Management System System Security Configuration -> RADIUS Configuration Menu NAS ID: Nas1 Index Server IP address...
Page 93
Available commands are listed below. Set a NAS ID (NAS Identifier). Press "I." The command prompt changes to "Enter NAS ID>." Enter NAS ID within 16 one-byte characters. Set an IP address of RADIUS server. Press "I." The command prompt changes to " Enter RADIUS server index>." Enter a RADIUS server entry number between 1 and 5.
Page 94
RADIUS Server Menu, as shown in Fig. 4-6-28. On this screen, you can configure access setting to RADIUS server that is used in login authentication. PN28160K Local Management System System Security Configuration -> Set IPv6 RADIUS Server Menu NAS ID: Nas1...
Page 95
Transmission Configuration screen, as shown in Fig. 4-6-29. On this screen, you can configure the setting of the Syslog server to which a system log Is sent. PN28160K Local Management System System Security Configuration -> Syslog Transmission Configuration Menu Syslog Server List:...
Page 96
Available commands are listed below. Configure the status of Syslog transmission. Press "S." The command prompt changes to " Enter manager entry number>." Enter a Syslog server entry number between 1 and 2. The command prompt changes to " Enable or Disable Server (E/D)>." Press "E"...
Page 97
IPv6 Syslog Server screen, as shown in Fig. 4-6-30. On this screen, you can configure the setting of the Syslog server to which a system log Is sent. PN28160K Local Management System System Security Configuration -> Set IPv6 Syslog Server Menu...
Page 98
Configuration screen, as shown in Fig. 4-6-31. On this screen, you can configure the SSH server setting. This Switching Hub supports SSHv2 only. Use and connect a client supporting SSHV2. PN28160K Local Management System System Security Configuration -> SSH Server Configuration SSH UI Idle Timeout: 5 Min.
Page 99
Available commands are listed below. Generate an SSH server key. Press "G" to generate an SSH server key. Configure the SSH access setting. Press "H." The command prompt changes to "Enable or Disable SSH server (E/D)>." Press "E" to enable the access. Press "D" to disable the access. Configure the idle timeout settings for automatically terminating an SSH-connected session if no input is made.
Page 100
On the System Security Configuration, pressing "B" opens the LED Base Mode Configuration screen, as shown in Fig. 4-6-32. On this screen, you can configure the LED base mode setting. PN28160K Local Management System System Security Configuration -> LED Base Mode Configuration System LED base-mode: Status Note: Save Configuration to Flash will be executed when LED Base Mode changed.
Database Information Menu, as shown in Fig. 4-6-33. In this screen, a list of MAC address required for transferring packets that have been learned and recorded. Also, you can add or delete MAC address statically. PN28160K Local Management System Basic Switch Configuration -> Forwarding Database Menu [S]tatic Address Table M[A]C Learning...
Page 102
On the Forwarding Database Information Menu, pressing "S" opens the Static Address Table Menu, as shown in Fig. 4-6-34. In this screen, you can add or delete a MAC address statically. PN28160K Local Management System Forwarding Database Menu -> Static Address Table Menu MAC Address...
Page 103
MAC Learning Menu, as shown in Fig. 4-6-35. On this screen, you can configure the MAC address auto-learning setting for each port and limit the number of MAC address auto-learning. PN28160K Local Management System Forwarding Database Menu -> MAC Learning Menu Port...
Page 104
Note: If MAC address auto-learning is disabled, communication cannot be established unless MAC address is registered statistically. Note: Assuming that the number of learned MAC addresses reaches the limit, and if a frame with new source MAC address that has not been learned is received, this frame is discarded.
Page 105
Display MAC Address by MAC screen, as shown in Fig. 4-6-36. In this screen, you can display all MAC address tables in this Switching Hub. PN28160K Local Management System Forwarding Database Menu -> Display MAC Address by MAC Age-Out Time: 300 Sec.
On the Basic Switch Configuration Menu, pressing "T" opens the Time Configuration Menu, as shown in Fig. 4-6-37. In this screen, you can configure the time setting and time synchronization setting by SNTP. PN28160K Local Management System Basic Switch Configuration -> Time Configuration Menu Time ( HH:MM:SS )
Page 107
PN28160K Local Management System Basic Switch Configuration -> Time Configuration Menu Time ( HH:MM:SS ) : 10:20:33 Date ( YYYY/MM/DD ) : 2009/04/01 Wednesday SNTP Server IP : 192.168.0.2 SNTP Server IPv6 : :: SNTP Polling Interval : 1440 Min...
Page 108
Available commands are listed below. Set the time of internal clock of this Switching Hub. Press "C." The command prompt changes to "Enter Date(Year) >" and enter a year. Then, the command prompt changes to "Enter Date(Month) >" and enter a month. Then, the command prompt changes to "Enter Date(Day) >"...
On the Basic Switch Configuration Menu, pressing "R" opens the ARP Table screen, as shown in Fig. 4-6-39. In this screen, you can refer and configure ARP table. PN28160K Local Management System Basic Switch Configuration -> ARP Table Sorting Method :...
Page 110
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Set the age-out time of ARP table. Press "T." The command prompt changes to "Enter ARP age timeout value >." Enter the age-out time of ARP table with a value of 30 to 86400 (seconds).
On the Basic Switch Configuration Menu, pressing "D" opens the NDP Table screen, as shown in Fig. 4-6-40. In this screen, you can refer and configure NDP table. PN28160K Local Management System Basic Switch Configuration -> NDP Table Sorting Method:...
Page 112
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Set the IPv6 Reachable time of NDP table. Press "R." The command prompt changes to " Enter NDP reachable time value>." Enter the IPv6 Reachable time of NDP table with a value of 30 to 86400 (seconds).
VLAN, link aggregation, port monitoring, access control, storm control, QoS, storm control, 802.1X Port Based Access Control, loop detection/shut-off, port grouping, digital diagnostic monitoring, and static multicast address functions. PN28160K Local Management System Main Menu -> Advaneced Switch Configuration Menu [V]LAN Management [L]ink Aggregation...
Page 114
Static Multicast Address Configures Static Multicast Address setting. Configuration Quit to previous menu Quits the Advanced Switch Configuration Menu and returns to the Main menu.
4.7.1. VLAN Management 4.7.1.a. Features Corresponding to IEEE802.1Q compatible Tag VLAN, a frame can be sent with a VLAN tag (hereinafter referred to as just "tag"). Having two different parameters of VLAN ID and PVID, forwarding destination of an untagged frame is determined by a combination of these parameters.
Page 116
On the Advanced Switch Configuration Menu, pressing "V" opens the VLAN Management Menu, as shown in Fig. 4-7-2. On this screen, you can configure VLAN-related settings. PN28160K Local Management System Advanced Switch Configuration -> VLAN Management Menu Total VLANs : 1...
Page 117
A management VLAN that is allowed to communicate with CPU. DOWN Not a management VLAN. Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Go to the screen for creating VLAN.
Page 118
Return to the previous menu. Note: VLAN 1 is set on shipment, and all ports belong to this VLAN. Also, the management VLAN is enabled. Note: When creating a new VLAN, PVID (after-mentioned) is not changed in conjunction with this new creation. After registering VLAN on this screen, make sure to confirm the configuration operation and content on the configuration screen in Fig.
Page 119
4.7.1.c. VLAN Creation Menu On the VLAN Management Menu, pressing "C" opens the VLAN Creation Menu , as shown in Fig. 4-7-3. On this screen, you can create VLAN. PN28160K Local Management System VLAN Management -> VLAN Creation Menu VLAN ID...
Page 120
Available commands are listed below. Set a VLAN ID (VLAN Identifier). Press "S." The command prompt changes to "Enter VLAN ID>." Enter a VLAN ID. Set a name of VLAN. Press "N." The command prompt changes to "Enter VLAN name>." Enter a VLAN name within 30 one-byte characters.
Page 121
On the VLAN Management Menu, pressing "o" and specifying target VLAN ID open the VLAN Modification Menu, as shown in Fig. 4-7-4. On this screen, you can modify VLAN-related setting information. PN28160K Local Management System VLAN Management -> VLAN Modification Menu VLAN ID...
Page 122
Available commands are listed below. Set a name of VLAN. Press "N." The command prompt changes to "Enter VLAN name>." Enter a VLAN name within 30 one-byte characters. Set a member of VLAN. Press "P." The command prompt changes to "Enter egress port number>." Enter a port number you wish to set.
Page 123
On the VLAN Management Menu, pressing "S" opens the VLAN Port Configuration Menu, as shown in Fig. 4-7-5. In this screen, you can configure VLAN-related settings by port. PN28160K Local Management System VLAN Management -> VLAN Port Configuration Menu Port PVID Acceptable Frame Type...
Page 124
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Configure PVID settings. Press "V." The command prompt changes to "Enter port number>." Enter a port number you wish to configure.
4.7.2. Link Aggregation 4.7.2.a. About Link aggregation Link aggregation is a function that is possible to increase redundancy of network paths and bandwidth between Switching Hubs by grouping multiple ports to a trunk for connection. In this Switching Hub, up to 8 ports can be assigned to 1 group, and 8 groups can be created.
Page 126
On the Advanced Switch Configuration Menu, pressing "L" opens the Trunk Configuration Menu, as shown in Fig. 4-7-6. On this screen, you can configure Link Aggregation settings. PN28160K Local Management System Advanced Switch Configuration -> Link Aggregation Menu Group Status...
On this screen, you can configure port monitoring settings. PN28160K Local Management System Advanced Switch Configuration -> Port Monitor Configuration Menu Monitoring Port Be Monitored Port(s)
Page 128
Screen Description Monitoring Port Shows the destination port number of data to be monitored. Be Monitored Shows the target port number to be monitored. Port(s) Direction Shows the communication direction of target packet to be monitored. Monitors a transmit packet. Monitors a receive packet.
On the Advanced Switch Configuration Menu, pressing "A" opens the Access Control Configuration Menu, as shown in Fig. 4-7-8. On this screen, you can set Access Control. PN28160K Local Management System Advanced Switch Configuration -> Access Control Configuration Menu [C]lassifier...
Page 130
On the Access Control Configuration Menu, pressing "C" opens the Classifier Configuration Menu, as shown in Fig. 4-7-9. On this screen, you can set classifier. PN28160K Local Management System Access Control Configuration -> Classifier Configuration Menu Multifield Classifier: Total Entries : 1 Index Src IP Addr/Mask Dst IP Addr/Mask DSCP Pro.
Page 131
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Create a classifier. Press "C." The Create Classifier Configuration Menu opens. For the Create Classifier Configuration Menu, refer to the next section (4.7.4.b).
Page 132
On the Classifier Configuration Menu, pressing "C" opens the Create Classifier Configuration Menu, as shown in Fig. 4-7-10. On this screen, you can create a classifier. PN28160K Local Management System Classifier Configuration -> Create Classifier Configuration Menu Classifier Index VLAN ID : 802.1p Priority :...
Page 133
Screen Description Classifier Index Shows the classifier index. VLAN ID Shows the VLAN ID. 802.1p Priority Shows the priority of IEEE802.1p. DSCP Shows the DSCP value. IPv6 DSCP Shows the IPv6 DSCP value Protocol Shows the protocol type. TCP SYN Flag Shows whether a TCP SYN flag is set for filtering.
Page 134
Available commands are listed below. Set a classifier index. Press "C." The command prompt changes to "Enter Classifier Index>." Enter a classifier index with a value of 1 to 65535. Set the source MAC address to be filtered. Press "S." The command prompt changes to "Enter source MAC address>." Enter the source MAC address as xx:xx:xx:xx:xx:xx.
Page 135
Press "M." The command prompt changes to "Enter ICMP type>." Enter an ICMP type with a value of 0 to 18. Set a TCP SYN flag to be filtered. (* Protocol needs to be set to TCP.) Press "Y." The command prompt changes to "Set TCP SYN flag (Y/N)>." Press "Y" for filter with a TCP SYN flag.
Page 136
On the Classifier Configuration Menu, pressing "M" opens the More Classifier Information screen, as shown in Fig. 4-7-11 and Fig. 4-7-12. On this screen, you can refer to classifier information. PN28160K Local Management System Access Control Configuration -> Classifier Configuration Menu Multifield Classifier: Total Entries : 1 Index Source MAC Addr./ Mask...
Page 137
PN28160K Local Management System Access Control Configuration -> Classifier Configuration Menu Multifield Classifier: Total Entries : 1 Index 802.1p VLAN ID TCP(SYN) ICMPTP ----- ------ ------- -------- ------------------------------------------------- 1 Ignore Ignore Ignore Ignore Press any key to continue... Fig. 4-7-12 Classifier Configuration Menu 2...
Page 138
Entries Information Menu, as shown in Fig. 4-7-13. On this screen, you can refer to detailed classifier information. Classifier needs to be created before reference. PN28160K Local Management System Classifier Configuration -> Show Detailed Entry Information Menu Detailed Classifier Information :...
Page 139
Screen Description Classifier Index Shows the classifier index. Source MAC Address Shows the source MAC address. Source Mask length Shows the length (bits) of source address mask. Destination MAC Address Shows the destination MAC address. Destination Mask length Shows the length (bits) of destination address mask. VLAN ID Shows the VLAN ID.
Page 140
On the Access Control Configuration Menu, pressing "I" opens the In-Profile Action Configuration Menu, as shown in Fig. 4-7-14. On this screen, you can configure in-profile setting. PN28160K Local Management System Access Control Configuration -> In-Profile Action Configuration Menu In-Profile Action:...
Page 141
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Create in-profile. Press "C." The Create In-Profile Action Menu opens. Refer to the next section (4.7.4.f).
Page 142
On the In-Profile Action Configuration screen, pressing "C" opens the Create In-Profile Action Menu, as shown in Fig. 4-7-15. On this screen, you can create in-profile action. PN28160K Local Management System In-Profile Action Configuration -> Create In-Profile Action Menu Index...
Page 143
Available commands are listed below. Set an in-profile index number. Press "I." The command prompt changes to "Enter in-profile action index>." Enter an index number with a value of 1 to 65535. Deny/permit packets. Press "D." The command prompt changes to "Select Deny/Permit (1-2)>." Press "1"...
Page 144
On the Access Control Configuration Menu, pressing "O" opens the Out-Profile Action Configuration Menu, as shown in Fig. 4-7-16. On this screen, you can configure out-profile setting. PN28160K Local Management System Access Control Configuration -> Out-Profile Action Configuration Menu Out-Profile Action:...
Page 145
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Create out-profile. Press "C." The Create Out-Profile Action Menu opens. Refer to the next section (4.7.4.h).
Page 146
On the Out-Profile Action Configuration screen, pressing "C" opens the Create Out-Profile Action Menu, as shown in Fig. 4-7-17. On this screen, you can create out-profile action. PN28160K Local Management System Out-Profile Action Configuration -> Create Out-Profile Action Menu Index...
Page 147
Available commands are listed below. Set an out-profile index number. Press "I." The command prompt changes to "Enter Out-Profile action index>." Enter an index number with a value of 1 to 65535. Set the committed rate. Press "C." The command prompt changes to "Enter committed rate>." Enter the committed rate with a value of 1 to 1000.
Page 148
When using both Access Control and Link Aggregation functions, assign a practical physical port number, not a logical port created in Link Aggregation. PN28160K Local Management System Access Control Configuration -> Port List Configuration Menu Port List: Total Entries : 0...
Page 149
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Create a port list. Press "C." The command prompt changes to "Enter port list index>." Enter an index number to be created.
Page 150
On the Access Control Configuration Menu, pressing "P" opens the Policy Configuration Menu, as shown in Fig. 4-7-19. On this screen, you can configure the policy settings. PN28160K Local Management System Access Control Configuration -> Policy Configuration Menu Policy : Total Entries : 0 Index Classifier Seq.
Page 151
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Create a policy. Press "C." The Create Policy Configuration Menu opens. For the Create Policy Configuration Menu, refer to the next section (4.7.4.k).
Page 152
On the Policy Configuration Menu, pressing "C" opens the Create Policy Configuration Menu, as shown in Fig. 4-7-20. On this screen, you can create a policy. PN28160K Local Management System Policy Configuration -> Create Policy Configuration Menu Policy Index Classifier Index...
Page 153
Available commands are listed below. Set a policy index number. Press "P." The command prompt changes to "Enter policy index>." Enter a policy index number. Set an index number of applicable classifier. Press "C." The command prompt changes to "Enter classifier index>." Enter an index number of applicable classifier.
On the Advanced Switch Configuration Menu, pressing "S" opens the Quality of Service Configuration Menu, as shown in Fig. 4-7-21. You can configure the QoS (Quality of Service) setting of the Switching Hub. PN28160K Local Management System Main Menu -> Quality of Service Configuration Menu [T]raffic Class Configuration...
Page 155
On the Quality of Service Configuration Menu, pressing "T" opens the Traffic Class Configuration screen, as shown in Fig. 4-7-22. On this screen, you can configure the traffic class setting. PN28160K Local Management System Quality of Service Configuration -> Traffic Class Configuration Menu QoS Status: Disabled...
Page 156
On the Quality of Service Configuration Menu, pressing "C" opens the Egress Rate Limiting Configuration Menu, as shown in Fig. 4-7-23. On this screen, you can set bandwidth control. PN28160K Local Management System Quality of Service Configuration -> Egress Rate Limiting Configuration Menu Port...
Page 157
Press "S." The command prompt changes to "Enter port number e.g.: 1, 3, 5-16>." Enter a port number to designate. Then, the command prompt changes to "Enable or Disable Status (E/D)>." Press "E" to enable the bandwidth control. Press "D" to disable it. Return to the previous menu.
On the Advanced Switch Configuration Menu, pressing "o" opens the Storm Control Configuration Menu, as shown in Fig. 4-7-24. You can set the storm control for unknown unicast, broadcast, and multicast traffic. PN28160K Local Management System Advanced Switch Configuration -> Storm Control Configuration Menu Port Storm Control Setting:...
Page 159
Available commands are listed below. Enable/disable the storm control for unknown unicast traffic. Press "D." The command prompt changes to "Enter port number>." Enter a port number to designate. Then, the command prompt changes to "Enable or Disable DLF storm control status>." Press "E" to enable the unknown unicast control. Press "D"...
Authentication Configuration screen, as shown in Fig. 4-7-25. On this screen, you can configure the IEEE 802.1X compatible port-based access control, MAC address-based access control, MAC authentication, and WEB authentication. PN28160K Local Management System Advanced Switch Configuration -> Authentication Configuration Menu [A]uthentication Status Table Authentication [L]og...
Page 161
Screen Description Authentication Status Table Displays the authentication status table. Authentication Log Displays the authentication log. Global Authentication Configures the common authentication settings. Configuration Local User Database Moves to the local user database configuration used in Configuration 802.1X access control or WEB authentication. Local MAC Authentication Moves to the local MAC database configuration used in Database Configuration...
Page 162
On the Authentication Configuration, pressing "a" opens the Authentication Status Table screen, as shown in Fig. 4-7-25-1. On this screen, you can display the authentication status for each connected host. PN28160K Local Management System Authentication Configuration -> Authentication Status Table Total Hosts...
Page 163
Screen Description Total Hosts Displays the total number of hosts registered in the authentication status table. The maximum number is 1024. Authorized Hosts Displays the number of authorized hosts. Auth Aging Time Displays the authentication aging time in minutes. (Factory default setting: 1440) MAC Address Displays the MAC address of the terminal to be authenticated.
Page 164
Authentication Log screen, as shown in Fig. 4-7-25-2. On this screen, you can display the authentication log of an event that occurred in the authentication process. PN28160K Local Management System Authentication Configuration -> Authentication Log Total Auth Logs : 0...
Page 165
Available commands are listed below. Display the next page. Press "N" to display the next page. Display the previous page. Press "P" to display to the previous page. Delete an authentication log. Display an authentication log with the specified ID. Press "J."...
Page 166
(XX:XX:XX:XX:XX:XX) on Port xx to IEEE802.1X access control using VLAN xxxx the RADIUS or local database and was assigned to a specific VLAN, [802.1X](RADIUS)Rejected user or it failed in authentication. xxxxxxxxxxxxxxxx notice (XX:XX:XX:XX:XX:XX) on Port xx [802.1X](Local)Authorized user xxxxxxxxxxxxxxxx info (XX:XX:XX:XX:XX:XX) on Port xx to VLAN xxxx [802.1X](Local)Rejected user...
Page 167
On the Authentication Configuration, pressing "G" opens the Global Authentication Configuration screen, as shown in Fig. 4-7-25-3. On this screen, you can configure the authentication function operations. PN28160K Local Management System Authentication Configuration -> Global Authentication Configuration Menu Global MAC Auth Status : Disabled Global WEB Auth Status : Disabled 802.1X Port-based Auth Ports : 1-16...
Page 168
Screen Description Global MAC Auth Displays the MAC authentication operation status of the entire Status device. Enabled MAC authentication is enabled. Disabled MAC authentication is disabled. (Factory default setting) Global WEB Auth Displays the WEB authentication operation status of the entire Status device.
Page 169
Database Configuration screen, as shown in Fig. 4-7-25-4. On this screen, you can configure the user account settings used in IEEE802.1X access control and WEB authentication PN28160K Local Management System Authentication Configuration -> Local User Database Configuration Menu User Name...
Page 170
Screen Description User Name Displays the user name. Password Displays the password. Displays [encrypted] if the password is encrypted. VLAN Displays the VLAN ID to be assigned after authentication. Auth Type Displays the authentication type to use the account. The account is used only in WEB authentication. 802.1X The account is used only in 802.1X access control.
Page 171
On the Authentication Configuration, pressing "C" opens the Local MAC Database Configuration screen, as shown in Fig. 4-7-25-5. On this screen, you can set the MAC address used in MAC authentication. PN28160K Local Management System Authentication Configuration -> Local MAC Database Configuration Menu Auth MAC Address...
Page 172
Available commands are listed below. Display the next page. Press "N" to display the next page. Display the previous page. Press "P" to display to the previous page. Add a MAC address that can be authenticated. Press "A." The command prompt changes to "Enter the MAC Address (xx:xx:xx:xx:xx:xx)>."...
Page 173
MAC Address from FDB screen, as shown in Fig. 4-7-25-6. On this screen, you can add all the MAC addresses learned in the FDB as MAC authentication local MAC addresses. PN28160K Local Management System Local MAC Database Configuration > Import MAC Address from FDB Sort by : MAC Address...
Page 174
Available commands are listed below. Display the next page. Press "N" to display the next page. Display the previous page. Press "P" to display to the previous page. Import a specified ID to the local MAC database. Press "S." The command prompt changes to "Enter the IDs >." Enter the ID to be imported.
Page 175
On this screen, you can configure the IEEE 802.1X compatible access control function. The supported authentication methods are EAP-MD5, TLS, and PEAP. PN28160K Local Management System Authentication Configuration -> 802.1X Access Control Configuration Menu 802.1X [G]lobal Configuration [P]erUser/MAC Based Access Control Configuration...
Page 176
Screen Description 802.1X Global Configures the IEEE802.1X access control global settings. Configuration PerUser/MAC Based Configures the IEEE802.1X access control function. Access Control Configuration Force Authorized MAC Sets the force authorized MAC address. Address Configuration Statistics Displays the IEEE802.1X statistics information. EAP-Request Configures the EAP-Request transmission settings.
Page 177
On the 802.1x Access Control Configuration, pressing "G" opens the 802.1X Global Configuration Menu screen, as shown in Fig. 4-7-25-8. On this screen, you can configure the IEEE802.1X global settings. PN28160K Local Management System 802.1X Access Control Configuration -> 802.1X Global Configuration Menu Primary Database...
Page 178
Screen Description Primary Displays the reference for the first authentication. Database RADIUS The reference is the RADIUS server. Local The reference is the local user database. (Factory default setting) Secondary Displays the reference for authentication that failed in the Primary Database. Database Local The reference is the local user database.
Page 179
4-7-25-9. On this screen, you can configure the IEEE 802.1X compatible port-based access control. The supported authentication methods are EAP-MD5, TLS, and PEAP. PN28160K Local Management System Advanced Switch Configuration -> Port Based Access Control Configuration Menu NAS ID: Nas1...
Page 180
Screen Description NAS ID Displays the authentication ID (NAS Identifier). Port No Displays the port number. Port Control Displays the operation mode for authentication requests. Auto The access control function is enabled. The authentication process relay is performed between the client and authentication server. Force The access control function is disabled.
Page 181
Serv Timeout Displays the timeout for the authentication server. The factory default setting is 30 seconds. Re-auth Period Displays the re-authentication time interval. The factory default setting is 3600 seconds. Guest VLAN ID Displays the VLAN ID to be applied when the terminal is not authorized.
Page 182
Set the re-authentication time interval. Press "E." The command prompt changes to "Enter re-authentication period>." Enter an integer number between 1 and 65535 (seconds). Enable/disable re-authentication. Press "A." The command prompt changes to "Enable or Disable re-authentication ?(E/D) >." Press "E" to enable re-authentication. Press "D" to disable it.
Page 183
MAC-base access control, pressing "p" opens the MAC Based Access Control Configuration screen, as shown in Fig. 4-7-25-10. On this screen, you can configure the IEEE 802.1X compatible MAC-based access control. PN28160K Local Management System Advanced Switch Configuration -> MAC Based Access Control Configuration Menu NAS ID: Nas1...
Page 184
Screen Description NAS ID Displays the authentication ID (NAS Identifier). Port No Displays the port number. Number of Displays the number of supplicants that can be authenticated. Supplicant Operational Displays the packet control status when the terminal is not Control Direction authorized.
Page 185
Static Indicates that the terminal was statically authorized by the registered information. MAC Control Displays the authentication type. Auto The authentication type is the RADIUS server. Force The authentication type is force authorized. Authorized Force The authentication type is force unauthorized. Unauthorized Auth Status Displays the authentication status.
Page 186
Press "E." The command prompt changes to "Enter re-authentication period>." Enter an integer number between 1 and 65535 (seconds). Enable/disable re-authentication. Press "A." The command prompt changes to "Select Per port or MAC address (P/M) >." Press "P" to set per port. Press "M" to set per MAC address. Press "P."...
Page 187
Authorized MAC Configuration Menu screen, as shown in Fig. 4-7-25-11. On this screen, you can set the MAC address of a device to be authorized/unauthorized without IEEE802.1X access control. PN28160K Local Management System 802.1x Access Control Configuration -> Force Authorized MAC Configuration Menu MAC Address...
Page 188
Available commands are listed below. Display the next page. Press "N" to display the next page. Display the previous page. Press "P" to display the previous page. Set the transmission/receiving direction of packets to be discarded when the terminal is not authorized.
Page 189
On the 802.1x Access Control Configuration, pressing "s" opens the Statistics Menu screen, as shown in Fig. 4-7-25-12. On this screen, you can check the transmission/receiving status of EAPOL packets used in IEEE802.1X. PN28160K Local Management System 802.1x Access Control Configuration -> Statistics Menu Port: 1 Refresh: 300 Sec.
Page 190
Available commands are listed below. Switch the port to display the values. Press "S." The command prompt changes to "Select Port number>." Enter the port number for which you wish to display values. Display the values of the next port. Press "N."...
Page 191
On this screen, you can display two types of counter values: Values accumulated after booting or power-off of this switch (Fig. 4-7-25-12), and values accumulated after resetting the counters (Fig. 4-7-25-13). PN28160K Local Management System 802.1x Access Control Configuration -> Statistics Menu Port: 1 Refresh: 300 Sec.
Page 192
Available commands are listed below. Switch the port to display the values. Press "S." The command prompt changes to "Select Port number>." Enter the port number for which you wish to display values. Display the values of the next port. Press "N."...
Page 193
EAP-Request Configuration screen, as shown in Fig. 4-7-25-14. On this screen, you can configure the EAP Request transmission settings used in the IEEE802.1X MAC-based access control mode. PN28160K Local Management System 802.1x Access Control Configuration -> EAP-Request Configuration [E]AP-Request Port Configuration...
Page 194
Port Configuration screen, as shown in Fig. 4-7-25-15. On this screen, you can configure the EAP Request transmission settings used in the IEEE802.1X MAC-based access control mode. PN28160K Local Management System 802.1x Access Control Configuration -> EAP-Request Port Configuration EAP-Request Interval: 5 Sec.
Page 195
Available commands are listed below. Display the values of the next port. Press "N" to display the next page. Display the values of the previous port. Press "P" to display the previous page. Change the transmission interval of EAP Requests. Press "E."...
Page 196
MAC Address Table screen, as shown in Fig. 4-7-25-16. On this screen, you can view the list of unauthorized MAC addresses to which EAP Requests are to be transmitted. PN28160K Local Management System 802.1x Access Control Configuration -> Unauthorized MAC Address Table Age-Out Time: 300 Sec. Display by:MAC...
Page 197
Available commands are listed below. Display the values of the next port. Press "N" to display the next page. Display the values of the previous port. Press "V" to display the previous page. Change the age-out time. Press "T." The command prompt changes to "Enter new age-out time>." Enter an integer number between 0 and 65535 (seconds).
Page 198
On the Authentication Configuration, pressing "M" opens the MAC Authentication Configuration Menu screen, as shown in Fig. 4-7-25-17. On this screen, you can configure the MAC authentication settings. PN28160K Local Management System Authentication Configuration -> MAC Authentication Configuration Menu Primary Database...
Page 199
Screen Description Primary Database Displays the reference for the first authentication. RADIUS The reference is the RADIUS server. Local The reference is the local user database. (Factory default setting) Secondary Displays the reference for authentication that failed in the Primary Database Database.
Page 200
Available commands are listed below. Set the Primary Database. Press "P." The command prompt changes to "Select the primary database (R/L)>." Press "R" to use the RADIUS server or "L" to use the local user database. Set the Secondary Database. Press "S."...
Page 201
Connecting the host to the WEB authentication port and accessing a URL from the WEB browser automatically transfers it to the WEB authentication login screen. PN28160K Local Management System Authentication Configuration -> WEB Authentication Configuration Menu Primary Database : Local...
Page 202
Screen Description Primary Database Displays the reference for the first authentication. RADIUS The reference is the RADIUS server. Local The reference is the local user database. (Factory default setting) Secondary Displays the reference for authentication that failed in the Primary Database Database.
Page 203
Available commands are listed below. Set the Primary Database. Press "P." The command prompt changes to "Select the primary database (R/L)>." Press "R" to use the RADIUS server or "L" to use the local user database. Set the Secondary Database. Press "S."...
Page 204
WEB Page Contents Configuration Menu screen, as shown in Fig. 4-7-25-19. On this screen, you can configure the display contents on the WEB authentication login screen. PN28160K Local Management System WEB Authentication Configuration -> WEB Page Contents Configuration Menu Page Title...
Page 205
Screen Description Page Title Displays the text of the WEB authentication login screen page title. You can use Japanese in Unicode. Logo Data Displays whether logo data exists or not. You can transfer image data of up to 512 KB in JPG/PNG/GIF format via the TFTP server. The actual image can be checked on the WEB setting screen.
Page 206
Available commands are listed below. Change the text of the WEB authentication login screen page title. Press "T." The command prompt changes to "Enter page title >." Enter text in 64 characters or less. You can use Japanese in Unicode. Change the text of the user name.
Page 207
IP addresses required for the WEB authentication port and the DHCP client in the guest VLAN to perform WEB authentication. PN28160K Local Management System WEB Authentication Configuration -> Temporary DHCP Server Configuration Menu Temporary DHCP Server Status : Disabled...
Page 208
Screen Description Temporary Displays the temporary DHCP server status. DHCP Server IP addresses required for WEB authentication access are leased to Status the guest VLAN and a port with WEB authentication enabled. To use this function, set a guest VLAN with the management VLAN enabled to the target WEB authentication port.
Page 209
Available commands are listed below. Change the temporary DHCP server function status. Press "S." The command prompt changes to "Enable or Disable temporary DHCP server status (E/D)>." Press "E" to enable the temporary DHCP server function or "D" to disable it. Change the DHCP lease time.
Page 210
On the Authentication Configuration, pressing "V" opens the Dynamic VLAN Configuration Menu screen, as shown in Fig. 4-7-25-22. On this screen, you can configure the dynamic VLAN settings. PN28160K Local Management System Authentication Configuration -> Dynamic VLAN Configuration Menu Accept RADIUS Attribute: Enabled...
Page 211
Screen Description Accept RADIUS Displays whether or not to use the Attribute reported from the Attribute RADIUS server. The target Attribute is as follows. - Tunnel-Private-Group-ID Enabled Uses the reported Attribute. (Factory default setting) Disabled Uses the setting of this switch. Port Displays the port number.
For network configuration, also refer to "Appendix C. Example of Network Configuration using Loop Detection/Shut-off Function and Its Precautions" in this operation manual. PN28160K Local Management System Advanced Switch Configuration -> Loop Detect Configuration Menu Global Loop Detection Status: Enabled...
Page 213
Screen Description Global Loop Shows the status of loop detection/shut-off function. Detection Status Enabled The loop detection/shut-off function is enabled. (Factory default setting) Disabled The loop detection/shut-off function is disabled. Port Shows the port number. Trunk Shows the link aggregation group ID. Link Shows the state of linkup.
Page 214
Available commands are listed below. Set the status of loop detection/shut-off function. Press "E." The command prompt changes to "Enable or Disable Loop Detection (E/D)>." Press "E" to enable the loop detection/shut-off function. Press "D" to disable it. Press "I." The Loop History Information screen opens. Set the status of loop detection/shut-off function of each port.
Page 215
On the Loop Detection Configuration Menu, pressing "I" opens the Loop History Information screen, as shown in Fig. 4-7-27. On this screen, the date and time of detecting loop and the event information are listed. PN28160K Local Management System Loop Detection Configuration Menu -> Loop History Information Entry Time(YYYY/MM/DD HH:MM:SS)
4.7.9. Port Group Configuration Menu On the Advanced Switch Configuration Menu, pressing "P" opens the Port Group Configuration Menu, as shown in Fig. 4-7-29. On this screen, you can configure port grouping. If a port grouping is configured, ports designated as members of the port group can communicate only among member ports in the same group.
Page 217
PN28160K Local Management System Advanced Switch Configuration -> Port Group Configuration Menu Total Groups : 0 Group ID Group Name Group Member Status -------- ---------------- ------------------------------------------- -------- -------------------------------- <COMMAND> ----------------------------------- [N]ext Page [C]reate Group [D]elete Group [P]revious Page [M]odify Group...
Page 218
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Go to the screen for creating a port group. Press "C." The Port Group Create Menu opens. For details, refer to the next section (4.7.9.a).
Page 219
On the Port Group Management Menu, pressing "C" opens the Port Group Creation Menu, as shown in Fig. 4-7-30. On this screen, you can create a port group. PN28160K Local Management System Port Group Configuration -> Port Group Configuration Menu Group ID...
Page 220
Available commands are listed below. Set a port group ID. Press "G." The command prompt changes to "Enter Port Group ID>." Enter a port group ID. Set a port group name. Press "N." The command prompt changes to "Enter Port Group name>." Enter a port group name in 16 one-byte characters or less.
Page 221
On the Port Group Management Menu, pressing "o" and then specifying a port group ID open the Port Group Modification Menu, as shown in Fig. 4-7-31. On this screen, you can modify the port group setting. PN28160K Local Management System Port Group Configuration -> Port Group Modification Menu Group ID...
Page 222
Available commands are listed below. Set a port group name. Press "N." The command prompt changes to "Enter Port Group name>." Enter a port group name in 16 one-byte characters or less. Set a port group member. Press "P." The command prompt changes to "Enter egress port number>." Enter a port number you wish to set.
On the Advanced Switch Configuration Menu, pressing "G" opens the Digital Diagnostic Monitoring Menu, as shown in Fig. 4-7-32. On this screen, you can show the SFP status and set the alarm. PN28160K Local Management System Advanced Switch Configuration -> Digital Diagnostic Monitoring Menu Limit Trap Status...
Page 224
High Alarm Shows the high alarm value. High Warning Shows the high warning value. Low Alarm Shows the low alarm value. Low Warning Shows the low warning value.
Page 225
Available commands are listed below. Show the next page. Press "N." The screen shows the next port. Show the previous page. Press "P." The screen shows the previous port. Enable/disable a sending SNMP trap. Press "S." The command prompt changes to " Enable or Disable Limit trap(E/D)>." Press "E"...
Multicast Address Table Menu, as shown in Fig. 4-7-33. On this screen, you can set the forwarding multicast group to the specific port only. PN28160K Local Management System Advanced Switch Configuration -> Static Multicast Address Table Menu VLAN ID Group MAC Address Group Members...
Page 227
Available commands are listed below. Show the next page. Press "N." The screen shows the next page. Show the previous page. Press "P." The screen shows the previous page. Register an additional Multicast group address. Press "A." The command prompt changes to " Enter VLAN ID >." Enter a VLAN ID between 1 and 4094.
On the Main Menu, pressing "S" opens the Statistics Menu, as shown in Fig. 4-8-1. On this screen, you can confirm the statistics information of packets and thereby grasp the network status. PN28160K Local Management System Main Menu -> Statistics Menu Port: 1 Refresh: 300 Sec.
Page 229
Available commands are listed below. Show the values of the next port. Press "N." The screen shows the counter values of the next port. Disabled in Port Show the values of the previous port. Press "P." The screen shows the counter values of the previous port. Disabled in Port 1.
Page 230
Switching Hub (Fig. 4-8-1) and values accumulated since the counter reset (Fig. 4-8-2). An accumulated value since booting is retained even if the counter is reset. PN28160K Local Management System Main Menu -> Statistics Menu Port: 1 Refresh: 300 Sec.
Page 231
Screen Description Port Shows the port number. Refresh Shows the refresh interval of the screen. (Factory default setting: 300 seconds) Elapsed Time Shows the time elapsed since resetting counters. Since Reset Counter Name Shows each counter name. Total Shows each counter value. Avg./s Shows the average per second of each counter.
Page 232
The counters are described below. Total RX Bytes Shows the number of bytes of all packets received. Total RX Pkts Shows the number of all packets received. Good Shows the number of broadcast packets received. Broadcast Good Multicast Shows the number of multicast packets received. CRC/Align Shows the number of error packets that have a normal packet length Errors...
Fig. 4-9-1. On this screen, you can configure and use additional functions of the Switching Hub, including firmware upgrade, upload/download of configuration, system reboot, and log viewing. PN28160K Local Management System Main Menu -> Switch Tools Configuration [T]FTP Software Upgrade...
On the Switch Tools Configuration Menu, pressing "T" opens the TFTP Software Upgrade screen, as shown in Fig. 4-9-2. On this screen, you can upgrade the firmware version. PN28160K Local Management System Switch Tools Configuration -> TFTP Software Upgrade Image Version: 1.0.0.xx...
Page 235
Available commands are listed below. Set the IP address of the TFTP server providing the firmware to be used for update. Press "S." The command prompt changes to "Enter IP address of TFTP server>." Enter the IP address of the TFTP server. Set the file name of the firmware to be upgraded.
Page 236
(To cancel the TFTP transfer process, press Ctrl+C during transfer.) When download is completed, the firmware is rewritten. After waiting for the time set by the Reboot Timer, rebooting is automatically executed. PN28160K Local Management System Software Upgrade Menu -> Download Status TFTP Server IP: 192.168.1.10...
Configuration File Upload/Download Menu, as shown in Fig. 4-9-4. On this screen, you can upload/download the configuration information of this Switching Hub to/from a PC as a file. PN28160K Local Management System Switch Tools Configuration -> Configuration File Upload/Download TFTP Server IP: 0.0.0.0...
Page 238
Available commands are listed below. Set the IP address of the TFTP server to upload/download the configuration information. Press "S." The command prompt changes to "Enter IP address of TFTP server>." Enter the IP address of the TFTP server. Set the file name of the configuration information to be uploaded/downloaded. Press "F."...
On the Switch Tools Configuration Menu, pressing "R" opens the System Reboot Menu, as shown in Fig. 4-9-5. On this screen, you can reboot this Switching Hub. PN28160K Local Management System Switch Tools Configuration -> System Reboot Menu Reboot Status:...
Page 240
Available commands are listed below. Set the reboot type to normal reboot or factory default. Press "O." The command prompt changes to "Select one option (N/F/I)>." Press "N" to set the type to normal reboot. Press "F" to return it to factory default. Press "I"...
On the Switch Tools Configuration Menu, pressing "x" opens the Exception Handler screen, as shown in Fig. 4-9-6. On this screen, you can configure the exception handling operations. PN28160K Local Management System Switch Tools Configuration -> Exception Handler Exception Handler:...
Page 242
Available commands are listed below. Enable/disable exception handler. Press "X." The command prompt changes to "Enable or Disable Exception Handler (E/D)>." Press "E" to enable the function. Press "D" to disable it. M Set the method of exception handler. Press "M." The command prompt changes to "Select Exception Handler Mode (M/R)>."...
On the Switch Tools Configuration Menu, pressing "P" opens the Ping Execution screen, as shown in Fig. 4-9-7. On this screen, you can select IPv4 or IPv6 ping command. PN28160K Local Management System Switch Tools Configuration -> Ping Execution IPv[4] Ping Execution...
Fig. 4-9-8. On this screen, you can execute the IPv4 ping command from the Switching Hub to confirm communications with connected terminals and other devices. PN28160K Local Management System Ping Execution -> IPv4 Ping Execution Target IP Address: 0.0.0.0...
Page 245
Data (E/C)>." Press "E" to execute ping. Press "C" to only clear the display. Cancel the ping command. Press "S" or "Ctrl+C" during the ping execution to cancel it. Return to the previous menu. PN28160K Local Management System Ping Execution -> IPv4 Ping Execution Target IP Address: 192.168.0.100...
Fig. 4-9-10. On this screen, you can execute the IPv6 ping command from the Switching Hub to confirm communications with connected terminals and other devices. PN28160K Local Management System Ping Execution -> IPv6 Ping Execution Target IP Address:...
Page 247
Data (E/C)>." Press "E" to execute ping. Press "C" to only clear the display. Cancel the ping command. Press "S" or "Ctrl+C" during the ping execution to cancel it. Return to the previous menu. PN28160K Local Management System Ping Execution -> IPv6 Ping Execution Target IP Address: 2001:1::1:201...
Menu, as shown in Fig. 4-9-12. This screen shows logs of events occurred to the Switching Hub. This allows you to grasp the events occurred to the Switching Hub and utilize them for network management. PN28160K Local Management System Switch Tools Configuration -> System Log Menu Entry Time(YYYY/MM/DD HH:MM:SS)
Page 249
Screen Description Entry Shows the event number. Time Shows the time when the event occurred. If the time is not set, the accumulated running time since boot is shown. Event Shows the description of the event occurred to the Switching Hub. Available commands are listed below.
Page 250
Cannot send the packets. (ARP) Indicate that cannot send the packet. Cannot send the packets. (EAP) Indicate that cannot send the packet. Cannot send the packets. (TFTP) Indicate that cannot send the packet. Loop Detect The loop detected between port xx and yy Indicates that a loop was detected between Port A and Port B.
Page 251
Detect the storm. (Broadcast) Indicates that broadcast storm occurred. System System Cold Start Indicates that the power of the Switching Hub was turned on. Port-X Link-up Indicates that Port-X was linked up. Port-X Link-down Info Indicates that Port-X was linked down. Connect SFP module Indicates that SFP module was connected.
Page 252
Indicates that the login operation was executed via console, and was failed. Not authorized!(IP: xxx.xxx.xxx.xxx) Indicates that the login operation was executed via TELNET or SSH, and was failed. Reject Telnet Access Indicates that the loginf operation was executed via TELNET, and was rejected based on TELNET access limitation function.
Page 253
Indicates that Switching Hub was rebooted. Reboot: Factory Default Indicates that Switching Hub was rebooted in the mode to return all settings to the factory default. Reboot: Factory Default Except IP Indicates that Switching Hub was rebooted in the mode to return settings other than IP address to the factory default.
Page 254
recovered from Indicates that SFP status recovered from threshold. High Indicates that upper limit. Indicates that lower limit. Alarm Indicates the alarm. Warning Indicates the warning.
On the Switch Tools Configuration Menu, pressing "W" opens the Watch Dog Timer Menu, as shown in Fig. 4-9-10. On this screen, you can enable/disable the Watch Dog Timer function. PN28160K Local Management System Switch Tools Configuration -> Watch Dog Timer Menu Watch Dog Timer: Disabled -------------------------------- <COMMAND>...
Press "N" to cancel it. If you don't save the configuration on this screen, it will be deleted when the system is rebooted or turned off. PN28160K Local Management System Main Menu -> Save Configuration to Flash Save current configuration? (Y/N)>...
Page 257
PN28160K Local Management System Main Menu -> Save Configuration to Flash Saving configuration to flash is successful, press any key to continue... Fig. 4-10-2 Saving Configuration to Flash screen: Completion of save...
4.11. Command Line Interface (CLI) On the Main Menu, pressing "C" opens the screen shown in Fig. 4-11-1. On this screen, you can use the command line for configuration instead of the menu screen. For configuration procedure, refer to the separate volume "Operation Manual (CLI)."...
4.12. Logout If you access from the console port, pressing "Q" on the Main Menu opens the login screen shown in Fig. 4-2-1. If you access using Telnet, pressing "Q" terminates the connection. To login again, follow the login procedures shown in the section 4.2.
* You can check the current settings because the list is displayed even after the time limit elapses. - The following function of the software of Panasonic System Networks Co., Ltd. cannot be used. - Auto setup function * Please contact each manufacturer for information about network cameras.
Appendix C. Example of Network Configuration using Loop Detection Function and Its Precautions Example of configuration using loop detection function By using the loop detection function, you can prevent a loop failure that is likely to be caused in a downstream Switching Hub that the user directly uses.
Page 264
Precautions in using loop detection function – Disable loop detection at upstream port(s) If a network is consisted of only Switching Hub equipped with loop detection function, an upstream Switching Hub may detect on ahead and block a loop occurred in a downstream Switching Hub. This may block all communications to the downstream Switching Hub.
Appendix D. MIB List The MIB list of this Switching Hub is as follows. <port_num> is a port number. <ip_address> is an IP address. <ipv4IfIndex> is an ipv4InterfaceIfIndex. <ipv6IfIndex> is an ipv6InterfaceIfIndex. <ipSysVersion> is an ipSystemStatsIPVersion. <etherIndex> is an etherStatsIndex. <ipVersion>...
Troubleshooting If you find any problem, please take the following steps to check. 1. LED indicators * The POWER LED is not lit. - Is the power cord connected? Please confirm that the power cord is securely connected to the power port.
After-sales Service 1. Warranty card A warranty card is included in the operating instructions (paper) provided with this Switching Hub. Be sure to confirm that the date of purchase, shop (company) name, etc., have been entered in the warranty card and then receive it from the shop. Keep it in a safe place. The warranty period is one year from the date of purchase.