24 10/100/1000Base-T Port & 4 10G SFP Port

NGSME48T2H48-Port 10/100/1000Base-T 2 10 Gigabit SFP Ports Layer 2 Full Management High Power PoE SwitchUser Manual

FCC/CE Mark WarningFCC WarningThis Equipment has been tested and found to comply with the limits for a Class-A digital device,pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protectionagainst harmful interference in a residential installation. This equipment generates, uses, and canradiate radio frequency energy. It may cause harmful interference to radio communications if theequipment is not installed and used in accordance with the instructions. However, there is noguarantee that interference will not occur in a particular installation. If this equipment does causeharmful interference to radio or television reception, which can be determined by turning the equipmentoff and on, the user is encouraged to try to correct the interference by one or more of the following measures:Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver isconnected. Consult the dealer or an experienced radio/TV technician for help.CE Mark WarningThis is a Class-B product. In a domestic environment this product may cause radio interference inwhich case the user may be required to take adequate measures.NGSME48T2H User Manual 2

Table of ContentsTable of ContentsBefore Starting . 8Intended Readers . 9Icons for Note, Caution, and Warning. 9Product Package Contents .10Chapter 1:Product Overview . 11Product Brief Description .12Product Specification .14Hardware Description .18Hardware Installation .19Chapter 2:Preparing for Management .20Preparation for Serial Console .21Preparation for Web Interface .23Preparation for Telnet/SSH Interface .25Chapter 3:Featuring Configuration – Web UI .27System Configuration .28System Information .28IP Configuration .29IPv6 Configuration .31NTP Configuration .33Time Configuration.34System Log Configuration .36Power Reduction .38Port Configuration .40Security Configuration: .42Security / Switch.42Security / Switch / Users Configuration .42Security / Switch / Privilege Levels Configuration .44Security / Switch / Auth Method.46Security /Switch / SSH Configuration.47Security / Switch / HTTPS Configuration .48Security / Switch / Access Management Configuration .49Security / Switch / SNMP .51RMON Statistics Configuration .62Security /Network .68Port Security Limit Control Configuration .68NGSME48T2H User Manual 3

Table of ContentsSecurity / Network / Network Access Server Configuration .72Security / Network / Access Control List Configuration .83Switch / Network / DHCP Configuration .99IP Source Guard Configuration .102ARP Inspection .104Security / AAA Authentication Server Configuration .106Aggregation Configuration . 110Static Aggregation . 110LACP - Dynamic Aggregation . 112Loop Protection. 114Spanning Tree . 116Spanning Tree / Bridge Setting. 117Spanning Tree / MSTI Mapping . 119Spanning Tree / MSTI Priorities .120Spanning Tree / CIST Ports .121Spanning Tree MSTI Ports .124MVR (Multicast VLAN Registration) .125IPMC (IP Multicast) .127IGMP Snooping Configuration.127Basic Configuration.127IGMP Snooping VLAN Configuration .130IGMP Snooping / Port Group Filtering .132MLD Snooping Configuration .133Basic Configuration.133MLD Snooping VLAN Configuration.135IPMC / MLD Snooping / Port Group Filtering .137LLDP Parameters .138LLDP Configuration.138LLDP Media Configuration.141PoE Configuration.149MAC Address Table Configuration.152VLAN (Virtual LAN).155VLAN Membership Configuration .155VLAN Port Configuration .158Private VLANs .160Private VLAN Membership Configuration.160Port Isolation Configuration .162NGSME48T2H User Manual 4

Table of ContentsVCL.163VCL / MAC-Based VLAN Configuration .163VCL / Protocol-based VLAN .165VCL / IP Subnet-based VLAN .168Voice VLAN Configuration .170Voice VLAN / Configuration .170Voice VLAN / OUI Configuration .172QoS .173QoS / Ingress Port Classification .173QoS / Ingress Port Policer Config .175QoS / Port Scheduler.176QoS / Egress Port Shapers .177QoS / Port Tag Remarking .178QoS / Port DSCP Configuration .179QoS / DSCP based QoS Ingress Classification .181QoS / DSCP Translation .182QoS / DSCP Classification .184QoS / Control List Configuration .185QoS / Storm Control Configuration .188Mirroring Configuration .189UPnP Configuration .191sFlow Configuration.192Chapter 4:Feature Configuration - CLI .194System Configuration .196Power Reduction .203Port Configuration .205Security Configuration.208Aggregation Configuration .228Loop Protection.230Spanning Tree .231MVR .235IPMC .237LLDP Configuration .240Power over Ethernet Configuration .242MAC Address Table Configuration.244VLAN Configuration .246Private VLAN Configuration .247NGSME48T2H User Manual 5

Table of ContentsVCL Configuration.248Voice VLAN Configuration .250QoS Configuration .252Mirroring Configuration .256UPnP Configuration .257sFlow Configuration.258Diagnostic Commands .260Maintenance Commands .262Chapter 5:Web Configuration - Monitor, Diagnostic, Maintenance .264Monitor .265Monitor / System .265Monitor / System / Information .265CPU Load .267System Log Information .268System / Detailed Log.269Monitor / Port State .270Port State.270Traffic Overview .271QoS Statistics .272QCL Status .273Detailed Port Statistics .275Monitor / Security .277Security / Access Management Statistics .277Security / Network .278Security / AAA .298Switch / SNMP / RMON .306LACP System Status .312System Status .312LACP Port Status .313LACP statistics .314Loop Protection .315STP Bridge Status .316Bridge Status .316STP Port Status.317STP Port Statistics .318MVR Status .319Statistics.319NGSME48T2H User Manual 6

Table of ContentsMVR Group Table .320Monitor / IPMC / IGMP Snooping .321IGMP Snooping .321MLD Snooping Status.327Monitor / LLDP .331LLDP / Neighbor.331LLDP MED Neighbors .333LLDP PoE .337LLDP EEE .339LLDP Statistics .341Dynamic MAC Table .343VLAN Membership Status .345VCL MAC-Based VLAN Status .349sFlow .350Diagnostic.351Ping .351Ping6 .352VeriPHY Cable Diagnostic.353Maintenance .355Restart Device .355Factory Defaults .355Software Upload .356Firmware Update.356Image Select .357Configuration .358Appendix A: Product Safety .360Appendix B: IP Configuration for Your PC .361NGSME48T2H User Manual 7

Before StartingIn Before Starting:This section contains introductory information, which includes: Intended Readers Icons for Note, Caution, and Warning Product Package ContentsNGSME48T2H User Manual 8

Before StartingIntended ReadersThis manual provides information regarding to all the aspects and functions neededto install, configure, use, and maintain the product you’ve purchased.This manual is intended for technicians who are familiar with in-depth concepts ofnetworking management and terminologies.Icons for Note, Caution, and WarningTo install, configure, use, and maintain this product properly, please pay attentionwhen you see these icons in this manual:A Note icon indicates important information which will guide you to use thisproduct properly.A Caution icon indicates either a potential for hardware damage or data loss,including information that will guide you to avoid these situations.A Warning icon indicates potentials for property damage and personal injury.NGSME48T2H User Manual 9

Before StartingProduct Package ContentsBefore starting install this product, please check and verify the contents of theproduct package, which should include the following items:One PoE SwitchOne Power CordOne User Manual CDOne pair Rack-mount kit 8 ScrewsNote: If any item listed in this table above is missing or damaged, please contactyour distributor or retailer as soon as possible.NGSME48T2H User Manual 10

Chapter 1:Product OverviewIn Product Overview:This section will give you an overview of this product, including its feature functionsand hardware/software specifications. Product Brief Description Product Specification Hardware Description Hardware InstallationNGSME48T2H User Manual 11

Chapter 1: Product OverviewProduct OverviewProduct Brief DescriptionIntroductionThe switch is 48-port 10/100/1000Base-T 2 10 Gigabit SFP Ports Rack-mountL2 Full Management Network Switch that is designed for medium or large networkenvironment to strengthen its network connection. The switch supports 136Gnon-blocking switch fabric, the 48 gigabit ports and 2 uplink 10G ports can transmitand receive data traffic without any lost. The EEE feature reduces the powerconsumption when there is no traffic forwarding even port is still connected. Theswitch also supports Layer 2 full management software features. These featuresare powerful to provide network control, management, monitor and security featurerequests. Including rack-mount brackets, the 19" size fits into your rack environment.It is a superb choice to boost your network with better performance and efficiency.2 10 Gigabit SFP Open SlotsThe switch equips with 2 10G SFP open slots as the uplink ports, the 10G uplinkdesign provides an excellent solution for expanding your network from 1G to 10G. By10G speed, this product provides high flexibility and high bandwidth connectivity toanother 10G switch or the Servers, Workstations and other attached devices whichsupport 10G interfaces. The user can also aggregate the 10G ports as Trunk groupto enlarge the bandwidth.Full Layer 2 Management FeaturesThe switch includes full Layer 2 Management features. The software set includesup to 4K 802.1Q VLAN and advanced Protocol VLAN, Private VLAN,MVR features. There are 8 physical queues Quality of Service, IPv4/v6 Multicastfiltering, Rapid Spanning Tree protocol to avoid network loop, Multiple SpanningTree Protocol to integrate VLAN and Spanning Tree, LACP, LLDP; sFlow, portmirroring, cable diagnostic and advanced Network Security features. It also providesConsole CLI for out of band management and SNMP, Web GUI for in bandManagement.NGSME48T2H User Manual 12

Chapter 1: Product OverviewProduct OverviewAdvanced SecurityThe switch supports advanced security features. For switch management, there aresecured HTTPS and SSH, the login password, configuration packets are secured.The port binding allows to bind specific MAC address to the port, only the MAC hasthe privilege to access the network. The 802.1X port based Access Control, everyuser should be authorized first when they want to access the network. AAA is theshort of the Authentication, Authorization and Accounting with RADIUS, TACAS server. Layer 2 Access Control List allows user to define the access privilegebased on IP, MAC, Port number, and etc.NGSME48T2H User Manual 13

Chapter 1: Product OverviewProduct OverviewProduct SpecificationStandardEthernet: IEEE 802.3, 802.3u, 802.3ab, 802.3aeIEEE 802.3az Energy Efficient Ethernet (EEE)Protocol: IEEE 802.3x - Flow Control, IEEE 802.1Q – VLAN,IEEE 802.1p - Class of Service, IEEE 802.1D - SpanningTree, IEEE 802.1w - Rapid Spanning Tree, IEEE 802.1s Multiple Spanning Tree, IEEE 802.3ad - Link AggregationControl Protocol (LACP), IEEE802.1v - Protocol VLAN, IEEE802.1AB - LLDP (Link Layer Discovery Protocol), IEEE802.1X - Access ControlInterfaceNumber of Port: 5010/100/1000Base RJ-45 Port : 48, Auto-negotiation, AutoMDI/MDIX10G SFP : 2PerformanceSwitching Capacity: 136G bpsMAC Address Table Size: 64KForwarding Rate: 10G port – 14,880,000pps1000Mbps port - 1,488,000pps100Mbps port - 148,800pps10Mbps port - 14,880ppsPacket Buffer: 64MbNGSME48T2H User Manual 14

Chapter 1: Product OverviewProduct OverviewL2 FeaturesFlow Control: 802.3x (Full-duplex)ort/ Back-Pressure(Half-duplex)Spanning Tree:IEEE 802.1D-2004(Includes IEEE 802.1w): RapidSpanning Tree Prot

Spanning Tree Protocol 802.1s Multiple Spanning Tree Protocol Loop Detection VLAN: IEEE 802.1Q Tagged Based, Max. VLAN Group: 4K QinQ Port-based VLAN Voice VLAN Private VLAN MVR MAC-Based VLAN Protocol-Based VAN Link Aggregation: IEEE 802.3ad with LACP: 26 trunks/ up to 8 port per trunk Stati