atop EHG7708 Series Industrial Managed Layer 2 Switch User Manual

atop EHG7708 Series Industrial Managed Layer 2 Switch

Product Information

• Product Name: Industrial Managed Ethernet Switch
• Manufacturer: Atop Technologies, Inc.
• Version: V0.4
• Series: EHG77xx Series
• Published Date: November 1st, 2023
• Warranty Period: 5 years

Introduction

The Industrial Managed Ethernet Switch is a high-performance switch designed for industrial network applications. It provides advanced network management features and is suitable for qualified network personnel, support technicians, system programmers, network planners, and first-time users.

Software Features

• Web-based configuration
• PoE (Power over Ethernet) support
• ERPS (Ethernet Ring Protection Switching) support
• DHCPv4 (Dynamic Host Configuration Protocol) support

Documentation Control

• Author: Atop Technologies, Inc.
• Revision: V0.4
• Creation Date: November 1st, 2023
• Last Revision Date: [Last Revision Date]
• Product Reference: [Product Reference]
• Document Status: [Document Status]

Contact Information

If you have any questions or encounter any issues, please contact your local distributor or visit the Atop Technologies, Inc. website at www.atoponline.com.

Product Usage Instructions

Section 1: Introduction to Industrial Managed Switch
Before using the Industrial Managed Ethernet Switch, it is important to understand its features and capabilities. This section provides an overview of the switch and its applications in industrial networks.

Section 2: Configuring with a Web Browser
The Industrial Managed Ethernet Switch can be configured using a web browser interface. This section explains how to access the switch’s configuration page and provides step-by-step instructions for configuring various settings.

Section 3: Monitor
The monitor feature of the Industrial Managed Ethernet Switch allows users to monitor network traffic and performance. This section explains how to access the monitor interface and interpret the data displayed.

Section 3.3: PoE
The PoE (Power over Ethernet) feature of the Industrial Managed Ethernet Switch enables the switch to provide power to connected devices through Ethernet cables. This section provides instructions on how to configure and manage PoE settings.

Section 3.4: ERPS
The ERPS (Ethernet Ring Protection Switching) feature of the Industrial Managed Ethernet Switch allows for redundant ring topologies to ensure network reliability. This section explains how to configure and monitor ERPS settings.

Section 3.5: DHCPv4
The DHCPv4 (Dynamic Host Configuration Protocol) feature of the Industrial Managed Ethernet Switch simplifies IP address assignment in a network. This section provides instructions on how to configure and manage DHCPv4 settings.

Specifications

• Manufacturer: Atop Technologies, Inc.
• Product Name: Industrial Managed Ethernet Switch
• Version: V0.4
• Series: EHG77xx Series
• Published Date: November 1st, 2023
• Warranty Period: 5 years

Frequently Asked Questions

Q: Who should use this user manual?
A: This user manual is intended for qualified network personnel, support technicians, system programmers, network planners, and first-time users.

Q: How can I contact technical support?
A: If you have any questions or encounter any issues, please contact your local distributor or visit the Atop Technologies, Inc. website at www.atoponline.com.

Q: What is the warranty period for the Industrial Managed Ethernet Switch?
A: Atop Technologies, Inc. provides a limited 5-year warranty for managed Ethernet switches.

Industrial Managed Ethernet Switch ­ EHG77xx

User Manual

Atop Technologies, Inc.
Industrial Managed Ethernet Switch
User Manual V0.4
November 1st, 2023
Series covered by this manual: EHG77xx Series
This PDF Document contains internal hyperlinks for ease of navigation. For example, click on any item listed in the Table of Contents to go to that page. Page 1 of 248

Industrial Managed Ethernet Switch ­ EHG77xx
Published by:
Atop Technologies, Inc. 2F, No. 146, Sec. 1, Tung-Hsing Rd, 30261 Chupei City, Hsinchu County Taiwan, R.O.C. Tel: +886-3-550-8137 Fax: +886-3-550-8131 www.atoponline.com

User Manual

Page 2 of 248

Industrial Managed Ethernet Switch ­ EHG77xx

User Manual

Important Announcement
The information contained in this document is the property of Atop Technologies, Inc., and is supplied for the sole purpose of operation and maintenance of Atop Technologies, Inc., products. No part of this publication is to be used for any other purposes, and it is not to be reproduced, copied, disclosed, transmitted, stored in a retrieval system, or translated into any human or computer language, in any form, by any means, in whole or in part, without the prior explicit written consent of Atop Technologies, Inc., Offenders will be held liable for damages and prosecution. All rights, including rights created by patent grant or registration of a utility model or design, are reserved.

Disclaimer
We have checked the contents of this manual for agreement with the hardware and the software described. Since deviations cannot be precluded entirely, we cannot guarantee full agreement. However, the data in this manual is reviewed regularly and any necessary corrections will be included in subsequent editions. Suggestions for improvement are welcome. All other product’s names referenced herein are registered trademarks of their respective companies.

Preface
This manual contains some advanced network management knowledge, instructions, examples, guidelines, and general theories. The contents are designed to help users manage the switch and use its software, a background in general theory is a must, when reading it. Please refer to the Glossary for technical terms and abbreviations.

Who Should Use This User Manual
This manual is to be used by qualified network personnel or support technicians who are familiar with network operations, and might be useful for system programmers or network planners as well. This manual also provides helpful and handy information for first time users. For any related problems, please contact your local distributor. If they are unable to assist you, please redirect your inquiries to www.atoponline.com .

Warranty Period Atop technology provides a limited 5-year warranty for managed Ethernet switches.

Documentation Control
Author: Revision: Revision History: Creation Date: Last Revision Date: Product Reference: Document Status:

Shawn Wu 0.4 Initial 16 October 2023 1 November 2023 Layer-2 Managed Switch ­ EHG7708, EHG7711, EHG7708c Released

Page 3 of 248

Industrial Managed Ethernet Switch ­ EHG77xx

Industrial Managed Ethernet Switch ­ EHG77XX

Page 13 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

Introduction

User Manual

Introduction to Industrial Managed Switch
Atop’s EHG (Ethernet Switching Hub Full Gigabit) 77xx series are product lines of powerful industrial managed switch which are referred to as Open Systems Interconnection (OSI) Layer 2 bridging devices. Unlike an “unmanaged” switch, which is normally found in homes or in Small Office/Home Office (SOHO) environments and runs in “auto-negotiation” mode, each port on a “managed switch” can be configured for its link bandwidth, priority, security, and duplex settings. The managed switches can be managed by Simple Network Management Protocol (SNMP) software, web browsers, Telnet, or serial console. Since every single port can be configured to specific settings, network administrators can better control the network and maximize network functionality.
Atop’s managed switch is also an industrial switch and not a commercial switch. A commercial switch simply works in a comfortable office environment. However, an industrial switch is designed to perform in harsh industrial environments, i.e., extreme temperature, high humidity, dusty air, potential high impact, or the presence of potentially high static charges. Atop’s managed switch works fine even in these environments.
Atop’s managed switch is designed to provide faster, secure, and more stable network. Advantages that make it a powerful switch are that it supports security such as IP Source Guard, DHCP Snooping, ARP Inspection as well as Access Control List (ACL) and network redundancy protocols/technologies such as Ethernet Ring Protection Switching (ERPS), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP). These protocols provide better network reliability and decrease recovery time.
Atop’s managed switch supports a wide range of IEEE standard protocols. This switch is excellent for keeping systems running smoothly, reliable for preventing system damage or losses, and friendly to all levels of users. The goal of this innovative product is to bring users an enhanced network management experience.
Note: Throughout the manual, the symbol * indicates that more detailed information of the subject will be provided at the end of this book or as a footnote.

Page 14 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Software Features

Atop’s industrial Layer-2 Managed switches come with a wide range of network protocols and software features. These protocols and software features allow the network administrator to implement security and reliability into their network. These features enable Atop’s switches to be used in safety applications, and factory and process automation. The followings are the list of protocols and software features.
· User Interfaces o Web browser o Telnet Console o Serial Console
· Dynamic Host Configuration Protocol (DHCP) Snooping/Relay/Client · Time Synchronization
o Network Time Protocol (NTP) Client o Simplified Network Time Protocol (SNTP) o IEEE 1588 Precision Clock Synchronization Protocol (PTP) v2 hw-E2E TC and hw-sw-Boundary ->
hw-Boundary Clock · Port Mirroring · Quality of Service (QoS) Traffic Regulation · Link Aggregation Control Protocol (LACP) · Medium Access Control (MAC) Filter · GARP VLAN Registration Protocol (GVRP) · Internet Group Management Protocol (IGMP)/ Multicast Listener Discovery (MLD) · Simple Network Management Protocol (SNMP) v1/v2/v3 · SNMP Inform · Spanning Tree Protocol (STP)/ Rapid Spanning Tree Protocol (RSTP)/ Multiple Spanning Tree Protocol
(MSTP) · Virtual Local Area Network (VLAN) · IEEE 802.1x/ Extensible Authentication Protocol (EAP) / Remote Authentication Dial-In User Service
(RADIUS) / Terminal Access Controller Access-Control System (TACACS+) · Security feature including Port Security/ IP Source Guard/ ARP Inspection/ Access Control List (ACL) · Ring
o Ethernet Ring Protection Switching (ERPS) · Link Layer Discovery Protocol (LLDP) · Alarm System (with E-mail Notification or Relay Output) · Industrial Protocols
o Modbus/TCP · SD Backup

Introduction to the Document
There are total of five sections in this document: Introduction, Configuring with a web browser, Monitor, Diagnostics, Maintenance. The first section introduces the device, the software features, and the document. The second section, “Configuring with a web browser”, shows users the setting webpage and the meaning of each parameter. The third section, “Monitor”, allows user to see the current status of the device. The fourth section, “Diagnostics”, allows user to identify problems and troubleshooting through ping and traceroute webpage. Lastly, the fifth section, “Maintenance”, will let user know how to restart the device, reset all settings to the default values, as well as upload software version and save/download/upload/activate/delete the current configuration.

Page 15 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

2 Configuring with a Web Browser
There are three ways to configure Atop’s Industrial Managed Ethernet Switch: Web browser, Telnet console, and Serial console. How to access the industrial managed switch through web browser is explained in Chapter 2 through Chapter 5. There are only a few differences among these three methods. The web browser and the telnet console methods allow users to access the switch over the Internet or the Ethernet LAN, while the serial console method requires a serial cable connection between the console and the switch. Users are recommended to configure the switch via a web browser because it is the most user-friendly interface.
Next, we will proceed to use a web browser to introduce the managed switch’s functions. It is recommended to use Microsoft Edge 103, Firefox 44, Chrome 48 or later versions. Below is a list of default factory settings. This information will be used during the login process. User must ensure that the computer accessing the switch are in the same subnet. That is the computer has an IP address and the subnet mask as same as the switch. Please pay attention when putting in the username and password, as they are case sensitive.
IP Address: 10.0.50.1 Subnet Mask: 255.255.0.0 Default Gateway: 0.0.0.0 User Name: admin Password: default
Before users can access the configuration, they have to log in. This can simply be done in the following steps.
1. Launch a web browser. 2. Type in the switch’s IP address (e.g. http://10.0.50.1), as shown in Figure 2.1).
Note: A small window is poped up for users to enter his/her credentials. There, the notification is shown that the connection to the site is not private.

Figure 2.1 Log in to a Web-based Configuration 3. Then, user can enter a Username and a Password and clicking on the Sign in button to access the
managed switch.
Page 16 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Figure 2.2 Entering Credential on the Login Webpage 4. If user entered wrong credentials, users can try to re-enter the new username and password again
until it is correct. Or users can simply click on the Cancel button to forfeit the process. 5. If the login process was success, the user will be presented with the Port State Overview Webpage
which shows the front panel of the managed switch, as shown in Figure 2.3.
Figure 2.3 First Page of EHG7711 after a Successful Login

Figure 2.4 First Page of EHG7708 after a Successful Login Page 17 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

System

This section describes how users can configure system information in details. Figure 2.5 shows submenus under the ConfigurationSystem main menu.

Figure 2.5 Submenus under ConfigurationSystem Menu

Information
This subsection describes how users can assign system’s details to the Atop’s switch. There are three fields in this System Information Configuration Webpage: System Contact, System Name, and System Location. By entering this unique and relevant system information, it will help identifying one specific switch among all the others in the network. However, the switch must support a SNMP protocol. Figure 2.6 shows the System Information Configuration Webpage of an EHG77XX managed switch model. After entering new information, click the “Save” button to update it on the switch. If users choose to instead click the reset button, it will undo any changes made locally and revert to the previously save values. Table 2.1 summarizes the setting information and the corresponding default factory settings of the device.

Figure 2.6 Configuration Webpage of the System Information

Table 2.1 Description of the System Information Configuration

Label System Contact
System Name

Description
Enters the contact information (name of a person) in case the system needs maintenance, or a problem occurs. The allowed string length is 0 to 255, and the allowed content is the ASCII characters from 32 to 126. The system name is mostly specified using the switch’s role or application. By convention, this is the node’s full domain name. Only a text string drawn from the alphabet (A-Za-z), digits (0-9), minus sign (-) is

Factory Default Null Null

Page 18 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Label System Location

Description
allowed in the system name. No space characters are permitted as part of a name. The first character must be an alphabet character, and the first or last character must not be a minus sign. The allowed string length is between 0 to 255. Note that the name entered here will also be shown in Atop’s Device Management Utility. Input the physical location of this node (e.g., telephone closet, 3rd floor) in the system location. The string length can be ranged from 0 to 255, and only the ASCII characters from 32 to 126 is allowed in the content.

Factory Default Null

2.1.2 IP
In this subsection, the user may modify network settings on Internet Protocol (IP) for the managed switch. This subsection is divided into three parts: IP Configuration, IP Interfaces, and IP Routes, as depicted in Figure 2.7Figure 2.10, where the description of each field within these figures are detailed in Table 2.2-Table 2.4. In the first part, the “IP Configuration” is related to how the managed switch will be operated as Host. The second part, “IP Interfaces”, is related to the configuration of IP Address and DHCP for both IPv4 and IPv6. Finally, the third part, “IP Routes”, contains the routing table that provides information about the network destination, gateway, next
hop, and distance.

Figure 2.7 Webpage to Configure System’s IP Information The first part, as shown in Figure 2.7, allows user to set the operating mode of the managed switch. Only “Host” mode is available for now. User can enter up to four Domain Name System (DNS) Servers. A DNS proxy option allows clients to set up the device as a DNS proxy server. A typical DNS proxy processes DNS queries by issuing a new DNS resolution query to each name server that it has detected until the hostname is resolved. DNS proxy can help improving the domain lookup performance by caching the previous lookups. Table 2.2 provides detailed description of each field in this first part, which is also called a basic IP setting.
Figure 2.8 IP Configuration Part in the Configuration->System->IP Submenu
Page 19 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Label Mode DNS Server
DNS Proxy

Table 2.2 Description of IP Configuration Description Configure the IP stack to act as a Host, where IP traffic between interfaces will not be routed. This setting controls which DNS server that will be used by the switch. Users can input at most four DNS servers in the configuration where each of their indicating indexes presents its preference (less index has higher priority) in doing DNS name resolution. The following modes are supported: – No DNS server: No DNS server will be used. – Configured IPv4: Explicitly provide the valid IPv4 unicast address of the DNS Server in dotted decimal notation. Please ensure that the configured DNS server could be reachable (e.g., via Ping) for activating DNS service. – Configured IPv6: Explicitly provide the valid IPv6 unicast (except local link) address of the DNS Server. Please ensure that the configured DNS server could be reachable (e.g., via Ping6) for activating DNS service. – From any DHCPv4 interfaces: The first DNS server leased to a DHCPv4-enabled interface will be used. – From this DHCPv4 interface: Specify from which DHCPv4-enabled interface a provided DNS server should be preferred. – From any DHCPv6 interfaces: The first DNS server leased to a DHCPv6-enabled interface will be used. – From this DHCPv6 interface: Specify from which DHCPv6-enabled interface a provided DNS server should be preferred. When DNS proxy is enabled, system will relay DNS requests to the currently configured DNS server and reply as a DNS resolver to the client devices on the network. Only an IPv4 DNS proxy is now supported.

The second part of IP Setting section is the IP Interface part, as shown in Figure 2.9. User can choose to enable DHCP (Dynamic Host Configuration Protocol) for DHCPv4 and/or DHCPv6 by checking the boxes in the first subcolumn within these fields, as shown in red circles. Using DHCP help reducing the administration’s work. The device will obtain the IP address and related information automatically from a DHCP server in the local network. If the DHCP’s box is unchecked, user has an option to setup the static IP address and related fields, such as the maximum length of subnet mask, manually. Table 2.3 provides detailed description of each option in this IP Interfaces’s setting part.

Figure 2.9 IP Interfaces Part in the Configuration->System->IP Submenu

Label Delete IF
DHCPv4 Enabled
DHCPv4 -> Client ID -> Type DHCPv4 -> Client ID -> ifMac

Table 2.3 Description of IP Interfaces’ Options Description Select this option to delete an existing IP interface. This VLAN setting will be associated with the IP interface. Only ports in this VLAN will be able to access the IP interface. This field is only available for input when creating a new interface Enable the DHCPv4 client by checking this box. If this option is enabled, the system will configure the IPv4 address and mask of the interface using the DHCPv4 protocol. This Client ID type specified which of the three types below, i.e. IfMac, ASCII or HEX, shall be used for the Client Identifier. See RFC-2132 in section 9.14. IfMac is used to specify the DHCP’s interface. When DHCPv4 client is enabled and the client identifier type is ‘ifmac’, the configured interface’s hardware MAC address will be used in the DHCP option 61 field.

Page 20 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Label DHCPv4 -> Client ID -> ASCII DHCPv4 -> Client ID -> HEX DHCPv4 -> Hostname DHCPv4 -> Fallback
DHCPv4 -> Current Lease IPv4 -> Address IPv4 -> Mask Length
DHCPv6 -> Enable DHCPv6 -> Rapid Commit DHCPv6 -> Current Lease IPv6 -> Address
IPv6 -> Mask Length

Description The ASCII string is used to identify the DHCP’s interface. When DHCPv4 client is enabled and the client identifier type is ‘ascii’, the ASCII string will be used in the DHCP option 61 field. The hexadecimal string is used to identify the DHCP’s interface. When DHCPv4 client is enabled and the client identifier type ‘hex’, the hexadecimal value will be used in the DHCP option 61 field. This field specified hostname of the DHCP client. If DHCPv4 client is enabled, the hostname that is configured here will be used in the DHCP option 12 field. When this field’s value is empty, the system name plus the latest three bytes of system MAC addresses will be used as the hostname. Time (in seconds) for the device to obtain a DHCP lease. After this period expires, a value set in IPv4 -> address field will be used as the IPv4 address of the interface. The valid integer value ranges between 0 to 4294967295 seconds. However, if this field is set to zero, the fall-back mechanism will be disabled. DHCP will keep retrying until a valid lease time is obtained. This field is only for the interface with an active DHCPv4 lease. This column shows the current interface address, which already provided by the DHCPv4 server. In this field, user can input an IPv4 address of the interface in dotted decimal notation. If the DHCP option is enabled, the fall-back IPv4 address will be configured here in this field. If this field is left blank, it means that the IPv4 operation on the interface or the DHCP fall-back address is not necessary. This field indicates the IPv4 network mask, in number of bits (prefix length). The values are valid between 0 and 30 bits for an IPv4 address. If DHCP is enabled, this field is configured with the fall-back IPv4 address’ network mask. The field may be left blank, if IPv4 operation on the interface or the DHCP fallback address is not necessary. Enable the DHCPv6 client by checking this box. If this option is enabled, the system will configure the IPv6 address of the interface using the DHCPv6 protocol. This option is only configurable, when the DHCPv6 option is enabled. By checking this box, user enable the DHCPv6 Rapid-Commit option by checking this box. If this option is enabled, the DHCPv6 client terminates the waiting process, as soon as a Reply message with a Rapid Commit option is received. This field is only for DHCPv6 interface with an active DHCPv6 lease. This column shows the current interface address, which already provided by the DHCPv6 server. In this field, user can input the IPv6 address of the interface in 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separating each field (:). For example, fe80::215:c5ff:fe03:4dc7. The symbol :: is a special syntax that can be used as a shorthand way of representing multiple 16-bit groups of contiguous zeros; but it can appear only once. System only accepts the valid IPv6 unicast address, IPv4-Compatible address, and IPv4-Mapped address. If IPv6 operation on the interface is not needed, this field may be left blank. This field indicates the IPv6 network mask, in number of bits (prefix length). The values are valid between 1 and 128 bits for an IPv6 address. If IPv6 operation on the interface is not needed, the field may be left blank.

Note: A->B means B is a subcolumn within A column

The third part of IP Setting section is the IP Routes, as shown in Figure 2.10. Description of each field or option is summarized in Table 2.4. User can click Add Route button to add a new route. Click on the Save button afterwards to update the IP configuration on the switch. For each update, the device must be rebooting, so that the new network settings can take effect. In case that the IP address of the managed switch is changed, user will need to manually update the new IP address in the URL field of the web browser.

Page 21 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Figure 2.10 IP Routes Part in the Configuration->System->IP Submenu

Label Delete Network Mask Length
Gateway Next Hop VLAN (IPv6)
Distance

Table 2.4 Description of Options in the IP Routes Part Description Select this option to delete an existing IP route. This field indicates the destination IP network. The valid format used here is dotted decimal notation or an IPv6 notation. A default route can use the value 0.0.0.0 or IPv6 :: notation. This field indicates mask in number of bits (prefix length) to define the destination IP network. Mask length defines number of bits that a network address must be matched to qualify for the route. The values between 0 and 32 bits are valid for IPv4 routes, and the value of 128 bits are valid for IPv6 routes. For the default value, a mask length is set to 0, which means all IP address will match anything. This field indicates the IP address of the gateway. Valid format is in dotted decimal notation for IPv4 or an IPv6 notation. Gateway must be in the same network as the destination IP network. This field indicates the VLAN ID (VID) of the specific IPv6 interface associated with the gateway. – The given VID ranges from 1 to 4095, and will be effective only when the corresponding IPv6 interface is valid. – If the IPv6 gateway address is link-local, the next hop VLAN must be specified for the gateway. Otherwise, user does not need to specify the next hop VLAN. The distance value of the route entry is used to provide the priority information of the routing protocols to routers. When two or more different routing protocols are involved and have the same destination, the distance value can be used to select the best path.

2.1.3 NTP
Atop’s industrial managed switch has internal calendar (date) and clock (or system time) which can be set manually or automatically. Figure 2.11 shows the Network Time Protocol (NTP) configuration webpage. Here, users can automatically set the device’s time by first selecting Enabled from the drop- down menu of Mode field. Then, users must enter the IP or Domain address of up to the total of five NTP servers: Server1 to Server 5. This allows the device to synchronise date and time with one of the NTP server. First, the device will synchronize its time with Server 1. If it failed to respond, the device will select the second priority server or Server 2 to synchronize its time with. If the Server 2 failed to respond, the device will then contact the third priority server or Server 3. This goes on until the device gets a response from any NTP servers, or none is responded. If any server’s field is empty or NULL, the device will not contact that server. The device will continue contacting the other lower priority servers instead.

Page 22 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Figure 2.11 Webpage to Configure System NTP Server

The detailed description of each field is provided in Table 2.5.

Label Description

Table 2.5 Descriptions of the NTP Settings

Factory Default

Mode Server 1 Server 2 Server 3 Server 4 Server 5

Select to enable or disable an automatically setting of the device time. This option will disable or enable network time protocol (NTP) daemon inside the managed switch, allowing it to synchronize its clock with other NTP servers. Sets the first IP or Domain address of NTP Server, e.g., time.nist.gov. Sets the second IP or Domain address of NTP Server. Device will locate the 2nd NTP Server if it fails to connect with the 1st NTP Server, e.g., time-A.timefreq.bldrdoc.gov Sets the third IP or Domain address of NTP Server. Device will locate the 3rd NTP Server if if it fails to connect with the 2nd NTP Server. Sets the fourth IP or Domain address of NTP Server. Device will locate the 4th NTP Server if if it fails to connect with the 3rd NTP Server. Sets the fifth IP or Domain address of NTP Server. Switch will locate the 5th NTP Server if if it fails to connect with the 4th NTP Server.

Disabled NULL NULL NULL NULL NULL

2.1.4 Time

This Time webpage allows the user to configure the time zone and daylight saving for the managed switch. There are three setting parts within this webpage: System Time Configuration, Time Zone Configuration, and Daylight-
Saving Time Configuration.

In the first part: System Time Configuration, users are allowed to set the device’s system time manually. Table 2.6 summarizes the descriptions of options in the system time configuration part.

In the second part: Time Zone Configuration, users are allowed to set the device’s time zone. By clicking the drop-down list of Time Zone field, users can select the device’s local time zone or Manual Setting option. In the Hours and Minutes fields, users can enter the number of hours and minutes of the device’s time that is offset from the local time zone when users selected Manual Setting option. Table 2.7 summarizes the descriptions of
options in time zone configuration.

In the third part: Daylight-Saving Time Configuration, if the switch is deployed in a region where daylight saving time is practiced (see note below for explanation), please select the Recurring or Non-Recurring options for
Daylight Saving Time field within the Daylight-Saving Time Configuration box. Then, users will have to enter the Start Time settings, End Time settings, and Offset settings in minute(s). Note that the Start Time settings and

Page 23 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

End Time setting will be different between the Recurring and Non-Recurring options. Recurring option means that the configuration of daylight saving will be repeated every year. On the other hand, non-recurring option
means that the daylight saving will be repeated only on the specified years. Table 2.8 summarizes the descriptions of options in daylight saving time configuration.
Note:
– Daylight Saving Time: In certain regions (e.g., US), local time is adjusted during the summer season in order to provide an extra hour of daylight in the afternoon, and one hour is usually shifted forward or backward.
– NTP: Network Time Protocol is used to synchronize the computer systems’ clocks with a standard NTP server: Examples of two NTP servers are time.nist.gov and time-A.timefreq.bldrdoc.gov.

Label Month Date Year Hours

Figure 2.12 Webpage to Configure System Time
Table 2.6 Description of System Time Configuration Description Select the month of system time Select the date of system time Select the year of system time Select the starting hour of system time

Page 24 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Label Minutes Seconds

Description Select the starting minute of system time Select the starting second of system time

Label Time Zone
Hours
Minutes
Acronym

Table 2.7 Description of Time Zone Configuration Description Lists various Time Zones worldwide. Select appropriate Time Zone from the drop down and click Save to set. The ‘Manual Setting’ options is used for the specific time zone which is excluded from the options list. Number of hours offset from UTC. This field is only available when Time Zone is set to Manual Setting. Number of minutes offset from UTC. This field is only available when Time Zone is set to Manual Setting. User can set the acronym of the time zone in this field (Range: Up to 16 characters). Notice the string ” is a special syntax that is reserved for null input.

Table 2.8 Description of Daylight-Saving Time Configuration

Label

Description

Daylight Saving This is used to set the clock forward or backward according to the configurations set below

Time

for a defined Daylight-Saving Time duration.

– Select ‘Disable’ to disable the Daylight-Saving Time configuration.

– Select ‘Recurring’ and configure the Daylight-Saving Time duration to repeat the

configuration every year.

– Select ‘Non-Recurring’ and configure the Daylight-Saving Time duration for single time

configuration.

(Default: Disabled)

Recurring Configuration

Start Time

Week – Select the starting week number.

settings

Day – Select the starting day.

Month – Select the starting month.

Hours – Select the starting hour.

Minutes – Select the starting minute.

End time

Week – Select the ending week number.

settings

Day – Select the ending day.

Month – Select the ending month.

Hours – Select the ending hour.

Minutes – Select the ending minute.

Offset settings Offset – Enter the number of minutes to add during Daylight Saving Time (Range: 1 to 1439).

Non-Recurring Configuration

Start Time

Month – Select the starting month.

settings

Date – Select the starting date.

Year – Select the starting year.

Hours – Select the starting hour.

Minutes – Select the starting minute.

End Time

Month – Select the ending month.

settings

Date – Select the ending date.

Year – Select the ending year.

Hours – Select the ending hour.

Minutes – Select the ending minute.

Offset settings Offset – Enter minutes that must be added to the normal time during Daylight Saving Time

(Range: 1 to 1439).

Page 25 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

2.1.5 Log
Figure 2.13 shows System Log configuration setting webpage. System Log or syslog keeps records of messages or events that are related to the overall functionalities of the managed switch. Here, the users can enable, where and what system log will be delivered to, in the other system. Select Enabled from the drop-down list of the Server Mode field if users want the system log to be saved in the remote log server. Otherwise, select Disabled to disable remote server operation mode.
Users need to provide the IP address of a remote log server and select type of the syslog level. Types of the syslog level include Error, Warning, Notice, and Informational. Please click on the Save button after finishing the setup. Or click Reset button to disregard all changes made locally and revert to previously saved values. Table 2.9 describes the details of parameters setting for the system log.

Figure 2.13 Webpage to Configure System -> Log

Field Server Mode Server Address

Table 2.9 Descriptions of the System Log Configuration Detailed description Indicates the server mode operation whether it is enabled or disabled. When it is enabled, the syslog message will be sent out to the remote syslog server. The syslog protocol is based on UDP communication and messages are received on UDP port number 514. There will be no acknowledgement sending back to the sende, since UDP is a connectionless protocol. The syslog packet will always be sent out even if the syslog server does not exist. Possible modes are: Enabled: Enable remote server mode operation. Disabled: Disable remote server mode operation. Indicates the IPv4 host address of a syslog server. If the switch provides DNS feature, it also can be a domain name. Indicates types of messages that will be sent to syslog server. Possible modes include:

– Error: Send the specific messages with the severity code less than or equal to Error (3).

Syslog Level

– Warning: Send the specific messages with the severity code less than or equal to Warning (4).

– Notice: Send the specific messages with the severity code less than or equal to Notice (5).

– Informational: Send the specific messages with the severity code less than or equal to Informational (6).

Default value Disabled
NULL Informational

2.1.6 DIP Switch
This section describes the DIP Switch Configuration. To enable it, click the Enable DIP Switch Control box. The DIP switch 1 on/off means Ring is activated/deactivated. The DIP switch 2 on/off means Master is
selected/deselected, and Slave is deselected/selected. When the DIP Switch 3 and 4 are on, nothing (N/A) is

Page 26 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

selected. When the DIP switch 3 and 4 are off, ERPS is selected. Webpage for configuring the system DIP switch
is shown in Figure 2.14. Click Save button to update the DIP Switch Configuration.

Figure 2.14 Webpage to Configure System DIP Switch
2.1.7 Alert This webpage allows the users to configure how each type of the power status alarm events will be sent to or notify the users. Power Status Alarms keep track of power status of the switch based on the available input connectors. EHG77XX supports two to three power sources. In the example, only two power sources: Power1 and Power2 are illustrated, as shown in Figure 2.15. Users can enable a notification of each power source’s alarm separately. Users can get notifications through many methods including Relay, Alarm LED, and E-mail by individually selecting Enabled within these fields. Click Save button to let the setting take effect or click Reset button to change back to the previously saved values.

Figure 2.15 Webpage to Configure System Alert In Table 2.10, the details setting for the power status alarm are described.
Page 27 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Label
Power Relay Alarm LED E-mail

Table 2.10 Descriptions of Power Status Alarm Event Selection

Description

Factory Default

Indicate specific power supply, such as Power 1, Power 2. Options: Disabled, Power On, or Power Off Options: Disabled, Power On, or Power Off Options: Disabled, Power On, or Power Off

–
Disabled Disabled Disabled

2.1.8 SMTP Setting
Simple Mail Transfer Protocol (SMTP) is an internet standard for sending e-mail across IP networks. In case of any warning events, the system can send an alarm message (e.g., Link Status and System Log) to users by e-mail. As shown in Figure 2.16, users can enable/disable server’s authentication, and when it is enabled, user can input user name and password, and edit email address of the sender and the recievers. Note that the total of four recipients are allowed to receive an e-mail.

Figure 2.16 Webpage to Configure System SMTP Setting An example of SMTP Setting is shown in Figure 2.17. When users select the box behind the Authentication field, TLS/SSL field as well as User Name and Change Password fields are enabled. Users can configure e-mail address of sender, so that the recipient can reply back to the correct person in charge. Also, users can configure the subject of email, so that it can be easily distinguishable from the other e-mails. At last, users can edit e-mail addresses of all four recipients in the order that will be shown in the e-mail. After entering all the necessary fields, please click on the Save button to allow the setting to take effect. Note that users can test sending an e-mail by simply clicking on the Send Test E-mail button. The description of each SMTP Setting parameter is summarized in Table 2.11.
Page 28 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Label

Figure 2.17 Example of SMTP Setting
Table 2.11 Descriptions of SMTP Setting Description

SMTP Server Authentication

TLS/SSL
User Name Change Password
Password E-mail Address of Sender Subject of Mail E-mail Address of 1st Recipient E-mail Address of 2nd Recipient E-mail Address of 3rd Recipient E-mail Address of 4th Recipient Save Send Test E-mail

Configure the IP address of an out-going e-mail server By checking on the box, users Enable or disable an authentication login. If enabled, users need a correct authentication to access the SMTP server. Thus, users will also need to setup User Name and Password to connect to the SMTP server. Enable or disable Transport Layer Security (TLS)/ Secure Sockets Layer (SSL) which is an encryption mechanism for communication with the SMTP Server
Set the username (or account name) to login for authentication. Max. of 31 characters. Enable the checkbox if user needs to set or change account password. If the checkbox is disabled, the account password will remain the old one. (If the password has not be set before, it will be NULL)
Set the account password for login/authentication. Max. of 31 characters. Configure the sender e-mail address Type the subject of this warning message. Max. of 63 characters. Set the first receiver’s E-mail address. Set the second receiver’s E-mail address. Set the third receiver’s E-mail address. Set the fourth receiver’s E-mail address. Click to save these modifications on the managed switch
Click to send a test email to recipient(s) listed above to check accuracy.

Factory Default NULL
Disable (Unchecked)
Disable (Unchecked) NULL
Disable (Unchecked)
NULL
NULL NULL
NULL NULL NULL NULL –

2.2 Ports
Port Setting webpage is shown in Figure 2.18. Users can check the state of each port through Link column. Red color means port is down while green color means port is up. Users can also check the Warning status of the port. In the speed column, users can check the Current speed and configure a new speed through Configured column. The transmission Speed of each port can be chosen from the dropdown list which could be 10 Mbps HDX, 10 Mbps FDX, 100 Mbps HDX, 100 Mbps FDX, and 1 Gbps FDX. The possible physical layer connections of each port are

Page 29 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

listed on the Adv Duplex and Adv speed column. The port’s duplexing (Duplex) can be either Full duplex (Fdx) or Half duplex (Hdx). The Half duplex option allows one-way communication at a time, while the Full duplex option allows simultaneous two-way communication. The Adv speed can be 10M, 100M, and 1G.
On the next column, user can select to enable/disable Flow Control for each port. The Flow Control mechanism can be enabled to avoid packet loss when congestion occurs. Within this column, there are Curr Rx and Curr Tx sub- columns, where users can check the status of flow control on the receiving and transmitting link, respectively.

Figure 2.18 Webpage to Configure Ports of EHG7711

Field Label Port
Link Warning

Figure 2.19 Webpage to Configure Ports of EHG7708

Table 2.12 Descriptions of Port Configuration Subfield Label Description

Factory Default

Indicate port number, e.g., ranging from 1 to 11. In the first row, port * will show all possible configurable options for the device. Show link status. Red colour for port down, and green colour for port up. Indicate a warning when there is a problem with the port. Different colours are used to indicate the severity of port problem.

–
Grey colour

Page 30 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Field Label Speed
Adv Duplex Adv Speed Flow Control

Subfield Label Description

Factory Default

: No warnings

: There are warnings. Use tooltip to see.

Current

Show current speed of the port. e.g., 100 fdx for 100

Mbps full duplex. If port is currently down, this field will

show “down”.

Configured

Selects any available link speed for the given switch

port. Only speeds supported by the specific port is

shown. Possible speeds are:

– Disabled – Disables the switch port operation.

– Automatic – Port auto negotiating speed and duplex

with the link partner, and selects the highest speed that

is compatible with the link partner.

– 10Mbps HDX – Forces the port in 10Mbps half-duplex

mode.

– 10Mbps FDX – Forces the port in 10Mbps full duplex

mode.

– 100Mbps HDX – Forces the port in 100Mbps half-duplex

mode.

– 100Mbps FDX – Forces the port in 100Mbps full duplex

mode.

– 1Gbps FDX – Forces the port in 1Gbps full duplex

– 2.5Gbps FDX – Forces the port in 2.5Gbps full duplex

(Only EHG7711 and EHG7708c have 2.5G SFP Port)

When duplex is set as auto i.e. auto negotiation, the port will only advertise

the specified duplex as either Fdx or Hdx to the link partner. By default, port

will advertise all the supported duplexes if the Duplex is Auto.

Fdx

Full duplex mode of the link. Click a checkbox to enable

the option.

Hdx

Half-duplex mode of the link. Click a checkbox to enable

the option.

When Speed is set as auto, i.e. auto negotiation, the port will only advertise

the specified speeds (e.g., 10M, 100M, 1G) to the link partner. By default,

port will advertise all the supported speeds if speed is set as Auto.

10M

Click to enable 10 Mbps link speed for this port.

100M

Click to enable 100 Mbps link speed for this port.

1G

Click to enable 1 Gbps link speed for this port.

When Auto Speed is selected on a port, this section indicates the flow

control capability that is advertised to the link partner. But when a fixed-

speed setting is selected, the chosen speed will be what is advertised.

Automatic
–

The Current Rx/Tx column indicates whether frames on the Rx/Tx port are currently paused or not, which depends on the last Auto Negotiation.

Check Enable to use flow control option. The setting here must be related to the setting in the Configured Link Speed.

NOTE: The 100FX standard does not support in Auto Negotiation. So, in

this mode, the flow control capabilities will always be shown as “disabled”

Enable

The Flow Control mechanism can be enabled to avoid

packet loss when congestion occurs.

Curr Rx

Symbol means that flow control is currently active on

the receiving traffic.

Symbol means that flow control is not active on the

receiving traffic.

Page 31 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Field Label

Subfield Label Description

Curr Tx

Symbol means that flow control is active on the transmitting traffic. Symbol means that flow control is not active on the transmitting traffic.

Factory Default

2.3 PoE
Power over Ethernet (PoE) is one of the functions in the managed switches that allows the switch to provide power supply to end devices, called Powered Device (PD), which is connected on the other side of the Ethernet ports. This means that the electrical power is delivered along with data over the Ethernet cables. This will be useful for the end devices that are located in the area that has no power supply. Besides, users can save additional cost on wiring the end devices. To find out whether this function is supported or not by your managed switch, please look for the keyword “PoE” in Atop’s model name. If the switch has “PoE” in its model name, it means that the switch is a Power Sourcing Equipment (PSE) that can provide power output to a Powered Device (PD). The PoE configuration webpage is as shown in Figure 2.20.

Field Label Port
Enable

Figure 2.20 Webpage to PoE Configuration
Table 2.13 Descriptions of Port Configuration Description The switch port number. EHG7708-8PoE : Show Port 1~8 EHG7708-4PoE-2SFP-225SFP : Show Port 1~4 EHG7711-4PoE-1SFP-225SFP : Show Port 1~4 EHG7711-8PoE-1SFP-225SFP : Show Port 1~8 Enable or Disable PoE the switch port operation.

Factory Default Enabled/Disabled

Page 32 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

2.4 ERPS
Ethernet Ring Protection Switching (ERPS) is a protocol for Ethernet layer network rings. The protocol specifies the protection mechanism for sub-50 ms delay time. ERPS protocol provides highly reliable and stable protection in the ring topology, so that it never forms loops which can affect network operation and service availability. Figure 2.21 depicts an example of ring topology forming by four Atop’s managed switch series.

Figure 2.21 An Example of Ring Topology (a) Major Ring, and (b) Sub-Ring
An ERPS ring consists of interconnected Layer 2 switching devices configured with the same control VLAN. An ERPS ring can be a major ring or a sub-ring, as shown in Figure 2.21. By default, an ERPS ring is a major ring. The major ring is a closed ring, whereas a sub-ring is a non-closed ring. The major ring and sub-ring can be configured through type field. On the network shown in Figure 2.21, switch EHG77XX-A to EHG77XX-C via EHG77XX-B and EHG77XX-D constitute a major ring, and switch EHG77XX-E through switch EHG77XX-F constitute a sub- ring.
In the Ethernet ring, loops can be avoided by guaranteeing that traffic may flow on all but one of the ring links at any time. This particular `’but one of the ring” link is called Ring Protection Link (RPL). A control message called Ring Automatic Protection Switch (R-APS) coordinates the activities of switching on/off the RPL. Under normal conditions, this link is blocked by the designated Ethernet Ring Node called RPL Owner Node to ensure that there is no loop formed for the Ethernet traffic. The node at the other end of the RPL is known as RPL Neighbor Node. In case an Ethernet ring failure occurs, the RPL Owner Node will be responsible for unblocking its end of the RPL to allow RPL to be used as a backup link. Other ring ports called common port will help monitoring the status of the directly connected ERPS link and send RAPS PDUs to notify the other ports of its link status changes.
If users want to have times to rectify the problem before clients detect them, users may use the Holdoff timer. When the failure occurs, the faulty alarm will not be immediately transmitted until the Holdoff timer expires. If an RPL owner port is unblocked due to a link/node recovery after its faulty, the involved port may not be changed to Up state immediately since it may cause network flapping. To prevent this problem, in revertive switching, the node where the RPL owner port resides starts the wait to restore (WTR) timer, after receiving a RAPS No Request (NR) message. If the node receives a RAPS Signal Fail (SF) message before the timer expires, it will terminate the WTR timer. Otherwise, the RPL owner will block its own port, and send out RAPS (no request or NR, root blocked or RB) messages to inform the other nodes of the link or node recovery and starts the Guard timer. Before the Guard timer expires, other nodes do not process any RAPS (NR) messages to avoid receiving out-of-date RAPS (NR) messages. After the Guard timer expires, if the other nodes still receive RAPS (NR) messages, the nodes set their recovered ports on the ring to the Forwarding state. In non-revertive switching, the WTR timer is not started, and the original faulty link is still blocked. ERPSv1 supports only revertive switching. ERPSv2 supports both revertive and nonrevertive switching.
Control messages of each ERPS ring (e.g., R-APS PDUs) are transmitted through a configuration of a control VLAN. For an ERPS ring that is already configured a control VLAN, when users add a port to the ERPS ring, the port is automatically added to the control VLAN. Different ERPS rings cannot be configured with the same control VLAN ID. The control VLAN must be mapped to an Ethernet Ring Protection (ERP) instance, so that ERPS forwards or blocks the VLAN packets based on blocking rules, protecting the ring network from broadcast storms.
Page 33 of 248

Industrial Managed Ethernet Switch ­ EHG77XX

User Manual

Figure 2.22 shows the ERPS Configuration webpage, and Table 2.14 summarizes the descriptions of columns in EPRS Configuration’s table.

Figure 2.22 Webpage to Configure ERPS

Label ERPS # RPL Mode
RPL Port
Ver Type
VC Interconnect Instance Interconnect Prop Port0/Port1 Interface Port0/Port1 SF
Ring Id
Node Id
Level Control VLAN Control PCP Rev Guard WTR Hold Off Enable
Oper
Warning

Table 2.14 Description of EPRS Configuration Table Description The ID of ERPS. Valid range 1 – 64. Ring Protection Link mode. Possible values: None: This switch doesn’t have the RPL port in the ring. Owner: This switch is RPL owner port in the ring. Neighbor: This switch is RPL neighbor in the ring. Indicates whether it is port0 or port1 that is the Ring Protection Link. Do not use this field if RPL Mode is None. ERPS protocol version v1 and v2 are supported. Type of ring. Possible values: Major: ERPS major ring (G.8001-2016, clause 3.2.39) Sub: ERPS sub-ring (G.8001-2016, clause 3.2.66) InterSub: ERPS sub-ring on an interconnection node (G.8001-2016, clause 3.2.66) Controls whether to use a Virtual Channel with a sub-ring. For a sub-ring on an interconnection node, this must reference the instance ID of the ring to which this sub-ring is connected. Controls whether the ring referenced by Interconnect Instance shall propagate R-APS flush PDUs whenever this sub-ring’s topology changes. Interface index of ring protection Port0/Port1.
Selects whether Signal Fail (SF) comes from the link state of a given interface, or from a Down-MEP. Possible values: MEP: Down-MEP Link: Link The Ring ID is used – along with the control VLAN – to identify R-APS PDUs as belonging to a particular ring. The Node ID is used inside the R-APS specific PDU to uniquely identify this node (switch) on the ring. MD/MEG Level of R-APS PDUs we transmit. The VLAN on which R-APS PDUs are transmitted and received on the ring ports. The PCP value used in the VLAN tag of the R-APS PDUs. Revertive (true) or Non-revertive (false) mode. Guard time in ms. Valid range is 10 – 2

References

• draft-josefsson-pppext-eap-tls-eap-01
• ATOP Technologies - Shaping Industrial Connections
• Home - ATOP
• Home - ATOP
• ietf.org/rfc/rfc2716.txt
• ietf.org/rfc/rfc2865.txt
• ietf.org/rfc/rfc2868
• ietf.org/rfc/rfc3580
• ietf.org/rfc/rfc3748
• ietf.org/rfc/rfc4675
• Download
• RFC 2138 - Remote Authentication Dial In User Service (RADIUS)

Read User Manual Online (PDF format)

Download This Manual (PDF format)

Download this manual  >>