Smart-Web Switch SL902-SWTGW215AS

Revision history

Contents

1. Foreword
   1. Target Audience
   2. Manual Convention
2. Web Page Login
   1. Log in the Network Management Client
   2. Constitution of Client Interface
   3. Navigation Bar on Web Interface
3. Home
   1. Information
4. Switch Monitor
   1. MAC Address Table
   2. Port Statistics
5. Switch Configuration
   1. Port Setting
   2. Port Mirror
   3. Port Isolation
   4. Port Rate Limit
   5. Port Aggregate
      1. static
      2. LACP
   6. Static MAC
6. VLAN Configuration
   1. VLAN
   2. VLAN Setting
   3. Port VLAN
7. Loop Configuration
   1. Loop protocol
   2. STP global
   3. STP port
8. QoS Configuration
   1. Port to Queue
   2. Queue Weight
9. Advanced
   1. DHCP Snooping
   2. Storm Control
   3. IGMP Snooping
   4. Jumbo Frame
10. System Manage
    1. IP Setting
    2. User Management
    3. Device Reboot
    4. Save Configuration
    5. Backup Configuration
    6. Firmware Upgrade
    7. Restore Factory

1 Foreword

1.1 Target Audience

This manual is prepared for the installers and system administrators who are responsible for network installation, configuration and maintenance. It assumes that the user has understood all network communication and management protocols, as well as the technical terms, theoretical principles, practical skills, and expertise of devices, protocols and interfaces related to networking.

1.2 Manual Convention

The following approaches should prevail.

2 Web Page Login

2.1 Log in the Network Management Client

Type in the default switch address: http://192.168.2.1 and press “Enter”.

Description: Browser standards: superior to IE 9.0, Chrome 23.0 and Firefox 20.0. Keep the IP network segment of PC consistent with that of switch but differentiate the IP address as you log in. Set PC's IP address of 192.168.2.x and the subnet mask of 255.255.255.0 for the first login (1< x ≤254).

A login window appears as follows. Type in the default username of “admin” and the password of “admin”. Click the “Log in” to see the switch system.

A visual representation of the login screen shows fields for Username and Password, with a "Login" button. The SODOLA logo and support email are also displayed.

2.2 Constitution of Client Interface

The typical operation interface of Web network management system is as follows.

A screenshot shows the web interface with the SODOLA logo, navigation menu (Home, Switch Monitor, Switch Configuration, VLAN Configuration, Loop Configuration, QoS Configuration, Advanced, System Manage), and device information including Device Name, Device Model, IP Address, MAC Address, System Uptime, Firmware Version, Netmask, and Port Status table.

Port Status Table:

2.3 Navigation Bar on Web Interface

Menu items such as System, Configuration, Security, Monitoring, and Tools are available on the web network management client. Each item contains submenus. Navigation bar is detailed as follows:

3 Home

3.1 Information

Display system information, including model, version, MAC, etc.

Instructions:

1. Click the “Home” in the navigation bar as follows:

The Device Info section displays details such as Device Name, Device Model, IP Address, MAC Address, System Uptime, Firmware Version, and Netmask.

4 Switch Monitor

4.1 MAC Address Table

Operation steps:

1. Click on the 'Switch Monitor > MAC Address Table' menu in the navigation bar to enter the MAC Address Table page.

A table displays MAC Address, Type, Port, and VLAN ID. The switch can automatically generate entries limited by their lifetime (aging time). Proper aging time is crucial for performance. Too short aging time can lead to reduced forwarding efficiency, while too long aging time can cause the switch to save outdated entries.

Total 2 Items, Current 1-10 Items, PerPage 10 Items << < 1 > >> 1 /1 Pages Goto

Instructions for aging time setting:

1. Click the "Switch Monitor > MAC Address Table", in the navigation bar as follows:

4.2 Port Statistics

Display port statistics information.

Instructions:

1. Click the "Switch Monitor > Port Statistics”, in the navigation bar as follows:

5 Switch Configuration

5.1 Port Setting

Querying and configuring Ethernet ports.

Instructions:

1. Click the "Switch Configuration > Port Setting” in the navigation bar as follows:

The interface allows configuring Port, State, Duplex Mode, Negotiation Speed, and Flow Control for each port. It also displays the actual status of these parameters.

Interface data are as follows.

5.2 Port Mirror

Port Mirroring copies the message of a specified switch port to the destination port. The copied port is the Source Port, and the copying port is the Destination Port. Destination Port accesses to data inspection devices so that users can analyze the messages received to monitor network and troubleshoot as follows:

A diagram illustrates a network with a PC connected to a switch, which is connected to a mirroring destination port and a data monitoring device. This setup allows for network monitoring and troubleshooting.

Instructions:

1. Click the "Switch Configuration > Port Mirror”, in the navigation bar as follows:

A table allows for deleting mirror configurations.

Interface data are as follows

5.3 Port Isolation

Messages of broadcast, multicast, etc. will flood at each port even though the flow needs no mutual communication sometimes. Under this circumstance, port isolation can separate the messages between two ports.

Instructions:

1. Click the "Switch Configuration > Port Isolation”, in the navigation bar as follows:

The interface allows selecting ports for isolation and configuring the Port Isolation List. Applying these settings can establish member lists of interworking groups.

Interface data are as follows

5.4 Port Rate Limit

It refers to the rate restriction on transmitting and receiving data at physical interfaces.

• Restrict the rate limiting at the egress before transmitting flow, thus controlling all outgoing message flow;
• Restrict the rate limiting at the ingress before receiving flow, thus controlling all incoming message flow;

Instructions:

1. Click the "Switch Configuration > Port Rate Limit”, in the navigation bar as follows:

The interface allows setting Ingress and Egress Rate Limits for each port. Rates can be configured from 16 to 2500000kb for Ports 1-8 and 16 to 10000000kb for Port 9.

Interface data are as follows

5.5 Port Aggregate

5.5.1 static

Link Aggregation broadens bandwidth and reliability by bundling a group of physical interfaces into a single logical interface. LAG (Link Aggregation Group) is a logical link bundled by multiple Ethernet links (Eth-Trunk). This technology bundles multiple physical interfaces into a single logical interface without upgrading hardware, improving reliability and sharing the flow load.

A diagram shows two switches, Switch A and Switch B, connected via an Eth-Trunk link composed of three Ethernet links (ge1/1, ge1/2, ge1/3). Each switch also has a ge1/5 port and is connected to VLAN10 and VLAN20.

Link aggregation can be configured to achieve the following:

• When the bandwidth between two switch devices connected through a link is insufficient.
• When the reliability of connecting two switch devices through a link does not meet the requirements.

Link aggregation is divided into static mode and LACP mode. In static mode, Eth Trunk establishment and member interfaces are manually configured. All active links participate in data forwarding and share traffic evenly (load sharing). If an active link fails, the group automatically shares traffic among the remaining active links. Static mode is useful when providing larger link bandwidth between devices that do not support LACP.

Instructions:

1. Click the "Switch Configuration > Port Aggregate”, in the navigation bar as follows:

The interface allows selecting an Aggregate Group ID, Type (static or LACP), and Port. Applying these settings configures the link aggregation.

Configuration Items

5.5.2 LACP

LACP (Link Aggregation Control Protocol), based on IEEE 802.3ad Standard, dynamically aggregates and disaggregates links. It exchanges information with opposite network devices through LACPDU. LACP enables ports to inform the network device of system priority, system MAC, port priority, and operation Key. The devices then compare this information to reach an agreement on port participation in dynamic aggregation. Dynamic LACP aggregation is automatically created or deleted by the system. Only ports connected to the same device with the same rate, duplex, and basic configuration can be aggregated.

Instructions for adding a dynamic link aggregation:

1. Click the “Switch Configuration > Port Aggregate” in the navigation bar, select the LAG ID and LACP mode, “Edit” them as follows:

The interface allows selecting LACP as the Type and choosing two ports to add as an LACP group.

After selecting LACP, the table updates to show the selected ports.

Interface data are as follows

Please make sure there is no member interface accessing the Eth-Trunk before changing its work pattern, otherwise it fails.

5.5 Static MAC

Static table is manually configured by users and distributed to each interface board, which won't age.

Instructions:

1. Click the "Switch Configuration > Static MAC”, in the navigation bar as follows:

The interface allows adding a new MAC address, VLAN ID, and Port. The MAC address format is HH:HH:HH:HH:HH:HH.

Interface data are as follows.

6 VLAN Configuration

6.1 VLAN

VLAN is formulated not restricted to physical locations, which means the hosts in a same VLAN can be placed at will. Each VLAN, as a broadcast domain, divides a physical LAN into logical LANs. Hosts can exchange messages by means of traditional communication. For the hosts in different VLANs, a device such as a router or L3 switch is a must.

A diagram illustrates a network with multiple switches connected to a router. The switches are configured with VLAN A and VLAN B, showing how VLANs segment the network.

VLAN is superior to the traditional Ethernet in terms of:

• Broadcast domain coverage: The broadcast message in a VLAN is limited, saving bandwidth and handling network-related issues more efficiently.
• LAN security: VLAN hosts fail to communicate with each other since messages are separated by the broadcast domain at the data link layer. They require a router or a Layer 3 switch for Layer 3 forwarding.
• Flexibility of creating a virtual working team: VLANs can create virtual working teams beyond physical network constraints. Users can access the network without reconfiguring if their physical locations change within the scope.

This management switch is compatible with VLAN types based on 802.1Q, protocols, MAC, and ports. For default configuration, 802.1Q VLAN mode should be adopted. Port VLAN is divided subject to a switch's interface No. Network administrators assign a different PVID (port default VLAN) to each switch interface. If a data frame without a VLAN tag enters a switch interface with a PVID, it will be marked with the same PVID or have an additional tag removed, even if the interface has a PVID. The solution to a VLAN frame depends on the interface type, easing member definition but requiring VLAN reconfiguration for member mobility.

6.1.1 VLAN Setting

1. Click the "VLAN Configuration > VLAN Setting", in the navigation bar as follows:

The VLAN List interface allows managing VLANs by setting VLAN ID and VLAN Name. New VLANs can be added using the 'AddVLAN' button.

6.1.2 Port VLAN

The setting page function allows selecting the Access and Trunk port types.

1. Click the "VLAN Configuration > Port VLAN”, in the navigation bar as follows:

The interface allows configuring the Port, Port VLAN type (Access or Trunk), Access VLAN, Native VLAN, and Trunk VLAN for each port.

Interface data are as follows

7 Loop Configuration

7.1 Loop protocol

The device sends loop detection packets and checks whether the packets are returned to the device (the receiving and sending interfaces are not required to be the same) to check whether loops exist. If a port receives a loop detection packet from the local device, it is determined that the link to which the port resides has a loop. When a loop occurs on the network, the LED of the corresponding port blinks (blocking the loop when loop avoidance is enabled) to alert the network administrator that a loop exists on the port.

Instructions:

1. Click the "Loop Configuration > Loop Protocol”, in the navigation bar as follows:

The Loop function can be set to Off, Loop Detection, or Spanning Tree.

7.2 STP global

Fast spanning tree protocol (RSTP) is used to eliminate the physical loop of data link layer in LAN. Its core is fast spanning tree algorithm. RSTP is fully downward compatible with STP protocol. In addition to the functions of avoiding loops and dynamically managing redundant links like the traditional STP protocol, RSTP greatly shortens the topology convergence time. The main functions of RSTP can be summarized as follows:

1. Discover and generate an optimal tree topology of LAN;
2. Discover and recover the topology failure, automatically update the network topology, enable the backup link, and maintain the best tree structure;

Instructions:

1. Click the "Loop Configuration > STP global", in the navigation bar as follows:

The STP global settings allow configuring Spanning Tree Status, Version, Priority, Max Aging Time, Hello Time, Forward Delay, Root Priority, Root MAC Address, Root Path Cost, Root Port, Root Maximum Age, Root Hello Time, and Root Forward Delay.

7.3 STP port

Instructions:

1. Click the "Loop Configuration > STP port”, in the navigation bar as follows:

The STP port settings allow configuring Port, Path Cost, Priority, P2P, and Edge for each port.

8 QoS Configuration

QoS (Quality of Service) assesses the ability of service providers to meet customer needs and the ability of transmitting packets over the Internet. QoS refers to the evaluation of service capabilities that support core requirements such as bandwidth, delay, delay variation, and packet loss rate. Bandwidth refers to the average business flow. Delay refers to the average time required for business flowing through the network. Delay variation refers to the time change of business flowing through the network. Packet loss rate refers to the percentage of lost business flow during transmission. Packet loss due to queue overflow is common.

Network service quality is constantly improved as new applications emerge. Delay-sensitive services like VoIP and video require higher standards on message transmission delay. To support these services, the network needs to identify business types and provide corresponding services. QoS regulates network flow to avoid and handle network congestion and reduce packet loss rate, allowing users to enjoy dedicated bandwidths and improving service quality.

QoS priorities vary with message types. The VLAN message uses 802.1p (CoS field), while the IP message uses DSCP. These fields need to be mapped at the gateway connected with various networks.

802.1p priority in the VLAN frame header: Typically, VLAN frames are interacted between Layer 2 devices. The PRI field (802.1p priority), or CoS field, in the VLAN frame header identifies the quality of service requirements according to IEEE 802.1Q definitions.

A diagram shows the structure of an 802.1Q header, including Destination Address, Source Address, 802.1Q Tag (TPID, PRI, CFI), Length/Type, Data, and FCS. The PRI field consists of 3 bits, defining 8 CoS of business priority.

IP Precedence/DSCP Field: According to RFC791, the ToS (Type of Service) domain in the IP message header is composed of 8 bits. The 3-bit Precedence field identifies IP message priority. DSCP (DS Code Point) uses the first 6 bits of the DS field, while the higher 2 bits are reserved. DS nodes select corresponding PHB (Per-Hop Behavior) according to DSCP values.

8.1 Port to Queue

Sets processing priorities for different tags of the data frame.

Instructions:

1. Click the "QoS Configuration > Port to Queue", in the navigation bar as follows:

The interface allows assigning a Queue number (1-8) to each port.

Interface data are as follows

8.2 Queue Weight

When the weight is strict priority, it is equivalent to SP. When the weight is 1-15, it is equivalent to WRR (weighted cyclic Scheduling algorithm).

Instructions:

1. Click the "QoS Configuration >Queue Weight”, in the navigation bar as follows:

The interface allows setting the Weight for each Queue, with options for Strict priority or values from 1 to 15.

Interface data are as follows.

9 Advanced

9.1 DHCP Snooping

For security, the network administrator may need to record the IP address of a user surfing the Internet and confirm the correspondence between the IP address obtained from the DHCP Server and the host's MAC address. The switch can monitor DHCP messages and record the user's IP address through DHCP Snooping at the data link layer. Private DHCP Servers may lead to wrong IP addresses. To ensure users obtain IP addresses through legal DHCP Servers, the DHCP Snooping security mechanism divides ports into Trust Port and Untrust Port.

Trust Ports connect directly or indirectly to legal DHCP Servers and forward DHCP messages to ensure correct IP addresses for DHCP Clients. Untrust Ports connect to illegal DHCP Servers, and DHCPACK and DHCPOFFER messages received from the DHCP Server on the Untrust Port are discarded to prevent incorrect IP addresses.

A diagram illustrates the typical networking of DHCP Snooping, showing DHCP Clients, a Switch A (DHCP Snooping), a Switch B (DHCP Relay), a DHCP Server, and the Internet. Eth1/0/1 and Eth1/0/2 are shown as connections between the switches.

The following methods are used to obtain the IP address and user MAC address from the DHCP Server:

• Snooping the DHCPREQUEST message
• Snooping the DHCPACK message

Enable DHCP Snooping

Instructions:

1. Click the "Advanced > DHCP Snooping”. DHCP Snooping interface is divided into global configuration and port configuration. Select the port to be modified in the port configuration and “Edit” the details as follows:

The interface allows enabling or disabling DHCP Snooping, configuring the valid VLAN No. of DHCP Snooping, configuring the port No. of DHCP Snooping, and specifying whether the port is a Trust Port.

9.2 Storm Control

Storms generated via broadcast, unknown multicast, and unicast messages are prevented by suppressing them subject to packet rates. The average rate of messages received by monitoring interfaces is compared with the maximum threshold configured during an inspection interval. Storm policing is performed if the average rate exceeds the maximum threshold.

When a L2 Ethernet interface receives broadcast, unknown multicast, or unicast messages, the device forwards them to other L2 interfaces in the same VLAN if the egress interface cannot be recognized according to destination MAC addresses. This can result in a broadcast storm, degrading device operation performance.

Three kinds of message flow can be controlled by storm policing characteristics:

Instructions:

1. Click the "Advanced > Storm Control”, in the navigation bar as follows:

The interface allows configuring Broadcast Rate, Known Multicast Rate, Unknown Multicast Rate, and Unknown Unicast Rate for each port. Rates can be set from 16 to 2500000 Kbps or 16 to 10,000,000 Kbps.

Interface data are as follows.

9.3 IGMP Snooping

IGMP Snooping (Internet Group Management Protocol Snooping) is a constraint mechanism on L2 devices to manage and control multicast groups. By analyzing IGMP messages, L2 devices establish a mapping between ports and MAC multicast addresses and forward multicast data accordingly. Multicast data is transmitted on L2 without IGMP snooping. When IGMP snooping runs, known multicast group data are transmitted to specified receivers, while unknown multicast data remains on Layer 2.

A diagram compares multicast packet transmission without IGMP Snooping and with IGMP Snooping. Without snooping, multicast packets are sent to all receivers. With snooping, known multicast group data are sent only to specified receivers.

Instructions:

1. Click the "Advanced > IGMP Setting", in the navigation bar as follows:

The interface allows enabling or disabling IGMP Snooping and displaying multicast group entries.

9.4 Jumbo Frame

Set the MTU (Maximum Transmission Unit) of the port.

Instructions:

1. Click the "Advanced > Jumbo Frame”, in the navigation bar as follows:

The Jumbo Frame Setting interface allows enabling Jumbo Frame and setting the Jumbo Frame Size to 12000 Bytes.

10 System Manage

10.1 IP Setting

Change the management IP address on web interfaces.

Instructions:

1. Click the "System Manage > IP Setting” in the navigation bar as follows:

The IP Setting interface allows configuring the IP Address Mode (Static IP or DHCP Client), IP Address, Netmask, and Gateway.

10.2 User Management

Users can check and modify the current username and password of the switch.

Instructions:

1. Click the "System Manage > User Management” in the navigation bar as follows:

The User Management interface allows setting a New Username and New Password, and confirming the password.

10.3 Device Reboot

Restart the system.

Instructions:

1. Click the "System Manage > Device Reboot", in the navigation bar as follows:

A "Reboot" button is available to restart the device.

10.4 Save Configuration

Instructions:

1. Click the "System Manage > Save Configuration”, in the navigation bar as follows:

A "Save configuration" button is available to save the current settings.

10.5 Backup Configuration

System configuration upgrade or backup.

Instructions:

1. Click the "System Manage > Backup Configuration”, in the navigation bar as follows:

The Backup Configuration interface provides options to "Backup" the current configuration and "Restore" it from a file.

10.6 Firmware Upgrade

System version firmware upgrade.

Instructions:

1. Click the "System Manage > Firmware Upgrade", in the navigation bar as follows:

The Firmware Upgrade interface displays the current Firmware Version and provides an "Upgrade" button. Note: Do not power off during the upgrade process.

10.7 Restore Factory

Restore factory settings.

Instructions:

1. Click the "System Manage > Restore factory”, in the navigation bar as follows:

A "Restore Factory Default" button is available to reset the device to its factory settings. The Tools menu also lists Firmware Upgrade and Reboot options.