ROLINE 21131131 Industrial SNMP 10x GbE Switch User Manual

ROLINE Industrial SNMP 10x GbE Switch, 2x SFP
Web-based Managed, 250W
Firmware Rev1.0 up
21.13.1131
User Manual 

Introduction

The device is a 10-port industrial managed Gigabit Ethernet switch which is featured with the following communication ports:

• Eight 10/100/1000Mbps Gigabit copper ports with PoE function
• Two dual-speed SFP slots for 100Base-FX 1000Base-X
• One RS-232 console port

1.1 Features

• Eight 10/100/1000Mbps RJ-45 and two dual-speed SFP slots

• All copper ports support auto-negotiation and auto-MDI/MDI-X detection.

• All copper ports are equipped with 802.3bt-compliant PoE PSE function

• Two SFP slots support dual speed for 100BASE-FX and 1000BASE-X SFP transceivers.

• Full wire speed forwarding

• Supports 802.3x flow control for full-duplex and backpressure for half-duplex

• Supports SFP with Digital Diagnostic Monitoring (DDM)

• Provides PoE PSE redundancy function

• Provides fiber Optical Power Alarm (OPA) function

• Provides Automatic Laser Shutdown (ALS) function

• Management:
  – HTTP/HTTPS/SSHv2/CLI telnet/CLI console/SNMP v1/v2c/v3/RMON
  – DHCP/DHCPv6 client, DHCP relay, DNS client, NTPv4
  – IPv6 support, System Syslog, Configuration down/upload, Software upload

• Security:
  – NAS, 802.1X, MAC-based/Web/CLI authentication
  – IP MAC binding, TACACS+, IP source guard

• Layer 2:
  – QoS, 802.1Q/MAC-based/Protocol-based/Private/IP subnet VLAN, Port Isolation
  – Storm control for UC/MC/BC packets, Static MAC configuration
  – IGMP v2/v3 snooping, MLD v1/v2 snooping, DHCP snooping
  – Multiple Spanning Tree – MSTP. RSTP, STP

• Auto Multi-Ring (AMR) Technology:
  – Fast failover response time
  – Auto recovery when failure is repaired
  – Supports up to five redundant rings
  – Works with RSTP network

• Specific SNMP implementation:
  – Private MIB for reading DDM status
  – Private MIB for remote boot the device over SNMP
  – Private MIB for TFTP firmware update over SNMP
  – Private MIB for configuring OPA function
  – Private MIB for configuring ALS function
  – OPA alarm traps

1.2 Product Panels
The following figure illustrates the front panel and rear panel of the switch:

1.3 LED Indicators

1.4 Specifications
10/100/1000 Copper Ports (Port 1 ~ Port 8)

Compliance| IEEE 802.3 10Base-T, IEEE 802.3u 100Base-TX, IEEE 802.3u 1000Base-T
---|---
Connectors| Shielded RJ-45 jacks
Pin assignments| Auto MDI/MDI-X detection
Configuration| Auto-negotiation or software control
Transmission rate| 10Mbps, 100Mbps, 1000Mbps
Duplex support| Full/Half duplex
Network cable| Cat.5 UTP

Dual-speed SFP Slots (Port 9, Port 10)

Compliance| IEEE 802.3u 100Base-FX
IEEE 802.3z 1000Base-SX/LX
---|---
Connectors| SFP for optional SFP type fiber transceivers
Configuration| Auto 1000Mbps, Full duplex
Forced 100Mbps, Full duplex
Transmission rate| 100Mbps and 1000Mbps
Network cables| MMF 50/125mm 62.5/125mm, SMF 9/125mm
Eye safety| IEC 825 compliant

Console Port

Switch Functions

Back pressure for half duplex operation

Power over Ethernet PSE Function

Compliant
PD classes| IEEE std.| DC power
min. 1| PSE output
power max. 2| Cable
power pairs| PD Available
power min. *3
---|---|---|---|---|---
802.3af| 802.3at| 802.3bt
Class 1| | | | 45V| 5.3W| 2| 3.84W
Class 2| | | | 45V| 8.5W| 2| 6.49W
Class 3| | | | 45V| 19W| 2| 13W
Class 4| | | | 45V| 36W| 4| 25.5W
Class 5| | | | 51V| 51W| 4| 40W
Class 6| | | | 51V| 68W| 4| 51W
Class 7| | | | 53V| 83W| 4| 62W
Class 8| | | ****| 53V| 95W| 4| 71.3W

1: The minimum DC power voltage to support the specified PSE output
2: The maximum output power at the PSE end for the requested PD class
*3: The minimum power received at the PD end with maximum output at the PSE end in worst case

Power Delivery| 95W max. (per port) at port output for Cat.5 distance up to 100 meters
---|---
PSE power pins| Pin 1/2/4/5: Vpoe +, Pin 3/6/7/8: Vpoe – (Vpoe  comes from DC power input)
Power delivery 95W max. at port output (Depending on DC power voltage)
Protection| PoE output shutdown
Protection events| Incompliant PD detection, PD disconnection
Overload, Over-current, Short-circuit, Under voltage
Power Capacity| 240W shared by all PSE ports

Terminal Block Connector

+45 ~ +57VDC for PoE applications
Power consumption| 10.3W max. (Full load with no PSE output)
250.3W max. (with full PoE output)
Alarm relay output| 3 terminal contacts (30VDC/1A max. or 120VAC/0.5A max.)
NC contacts: normal – shored, alarm – open
NO contacts: normal – open, alarm – shored
Alarm events| Power failure, Specific port link fault (software configured), OPA

Mechanical

Environmental

Installation

2.1 Unpacking
The product package contains:

• The switch unit
• QR code label
• One console cable

2.2 Safety Cautions
To reduce the risk of bodily injury, electrical shock, fire and damage to the product, observe the following precautions:

| Do not service any product except as explained in your system documentation.
---|---
Opening or removing covers may expose you to electrical shock.
Only a trained service technician should service components inside these compartments.
If any of the following conditions occur, unplug the product from the electrical outlet and replace the part
or contact your trained service provider:
– The power cable, extension cable, or plug is damaged.
– An object has fallen into the product.
– The product has been exposed to water.
– The product has been dropped or damaged.
– The product does not operate correctly when you follow the operating instructions.
Do not push any objects into the openings of your system. Doing so can cause fire or electric shock by shorting out interior components.
Operate the product only from the type of external power source indicated on the electrical ratings label.
If you are not sure of the type of power source required, consult your service provider or local power company.
Since the surface temperature of the device may be higher than 70℃ in range of the rated operating temperatures, install and operate the product only by authorized personnel only. Install the product at a restricted area where un- authorized persons cannot reach.

2.3 DIN-Rail Mounting
In the product package, a DIN-rail bracket is provided for mounting the switch in a industrial DIN-rail enclosure.
The steps to mount the switch onto a DIN rail are:

1. Install the mounting bracket onto the switch unit as shown below:
2. Attach bracket to the lower edge of the DIN rail and push the unit upward a little bit until the bracket can clamp on the upper edge of the DIN rail.
3. Clamp the unit to the DIN rail and make sure it is mounted securely.

Dimensions:

1 2.4 Panel Mounting
The switches are provided with an optional panel mounting bracket. The bracket supports mounting the switch on a plane surface securely.
The mounting steps are:

1. nstall the mounting bracket on the switch unit.
2. Screw the bracket on the switch unit.
3. Screw the switch unit on a panel. Three screw locations are shown below:

Dimensions:

2.5 Applying Power Power pins of the terminal block connector

Vdc Input specifications

A 2P terminal plug is provided together with the switch as shown below: Power wires : 24 ~ 12AWG (IEC 0.5~2.5mm² ), 1 meter max.

2.6 Alarm Relay Output
Alarm relay output is provided for reporting failure events to a remote alarm relay monitoring system. The replay output is provided with three contacts (support two logic types) in the terminal block connector next Vdc interfaces. Alarm Relay output pins and logic:

Pin| 3| 4| Alarm relay output, NO (Normal Open) contacts
Open: Normal, Shorted: Alarm
---|---|---|---
NO
Pin| 4| 5| Alarm relay output, NC (Normal Closed) contacts
Shorted: Normal, Open: Alarm
NC

Either pair can be used depending on the logic requirement for the relay monitoring system.
Use the provided 3P terminal plug for signal wiring and plug into the contacts.

Alarm Events

• Input power failure
• Specific port link down (The specific ports can be configured by software.)
• OPA alarm if optical power is higher than a upper limit setting or lower than a lower limit setting

Note: Be sure the voltage applied on the contacts is within the specification of 30VDC/1A max. or 120VAC/0.5A max.

2.7 Reset Button
The reset button is used to perform a reset to the switch. It is not used in normal cases and can be used for diagnostic purpose. If any network hanging problem is suspected, it is useful to push the button to reset the switch without turning off the power. Check whether the network is recovered. The button can also be used to restore the software configuration settings to factory default values.

The operations are:

switch.
The boot-up takes about 20 seconds and ends with all LED yellow ON and green ON then all OFF once.
Press the button until all LED yellow ON and green ON, then all OFF.| Boot & restore all factory default settings

2.8 Making UTP Connections
The 10/100/1000 RJ-45 copper ports support the following connection types and distances:

Network Cables

100-ohm
Link distance:| Up to 100 meters for all above

Auto MDI/MDI-X Function
This function allows the port to auto-detect the twisted-pair signals and adapts itself to form a valid MDI to MDIX connection with the remote connected device automatically. No matter a straight through cable or crossover cable is connected, the ports can sense the receiving pair automatically and configure itself to match the rule for MDI to MDI-X connection. It simplifies the cable installation.

Auto-negotiation Function
The ports are featured with auto-negotiation function and full capability to support connection to any Ethernet devices. The port performs a negotiation process for the speed and duplex configuration with the connected device automatically when each time a link is being established. If the connected device is also auto-negotiation capable, both devices will come out the best configuration after negotiation process. If the connected device is incapable in auto-negotiation, the switch will sense the speed and use half duplex for the connection.

Port Configuration Management
For making proper connection to an auto-negotiation incapable device, it is suggested to use port control function via software management to set forced mode and specify speed and duplex mode which match the configuration used by the connected device.

2.9 Making Fiber Connection
The dual-speed SFP slots, Port 9 and Port 10 must be installed with an SFP fiber transceiver for making fiber connection. The switch may come with one or two SFP transceivers pre-installed when it is shipped.

Types of the SFP Fiber transceivers supported:
1000Mbps based 1000BASE-X SFP transceivers
100Mbps based 100BASE-FX SFP transceivers

Installing SFP Fiber Transceiver
To install an SFP fiber transceiver into SFP slot, the steps are:

1. Turn off the power to the switch.
2. Insert the SFP fiber transceiver into the SFP slot. Normally, a bail is provided for every SFP transceiver. Hold the bail and make insertion.
3. Until the SFP transceiver is seated securely in the slot, place the bail in lock position.

Connecting Fiber Cables
LC connectors are commonly equipped on most SFP transceivers. Identify TX and RX connector before making cable connection. The following figure illustrates a connection example between two fiber ports: Make sure the Rx-to-Tx connection rule is followed on the both ends of the fiber cable.

Network Cables
Multimode (MMF) – 50/125µm, 62.5/125µm
Single mode (SMF) – 9/125µm

Port Speed Configuration
There are three options for configuring port speed via software for SFP Port 9 and Port 10.
The options are:

DDM data
100Mbps transceiver: Non-auto-negotiation (forced), 100Mbps, full duplex
1000Mbps transceiver: Auto-negotiation, 1000Mbps, full duplex
100Mbps FDX| Non-auto-negotiation (forced), 100Mbps, full duplex
1Gbps FDX| Auto-negotiation, 1000Mbps, full duplex

2.10 Making PoE PSE Connections
This section describes how to make a connection between a PSE port and a PoE Powered D device (PD). All copper ports are equipped with PoE PSE function. The ports are enabled to deliver power together with network signal to a connected powered device via Cat.5 cable. To make a PoE connection, the connected PoE PD must be a IEEE 802.3af IEEE 802.3at or IEEE 802.3bt-compliant device for safety reason. Incompliant devices are not supported by the PoE switch model. The following table lists the power levels of IEEE 802.3 standard:

IEEE 802.3 standard: PoE Classification for the Compliant PD Types and Power Level

Compliant PD classes|

IEEE std.

| PSE output power max.| PD available power min.
---|---|---|---
802.3af| 802.3at| 802.3bt
Class 1| | | | 4W| 3.84W
Class 2| | | | 7W| 6.49W
Class 3| | | | 15.4W| 13W
Class 4| | | | 32W| 25.5W
Class 5| | | | 45W| 40W
Class 6| | | | 60W| 51W
Class 7| | | | 75W| 62W
Class 8| | | ****| 90W| 71.3W

RJ-45 Pin Assignments of the device’s PSE Port

Vpoe: PoE power voltage on TP port

The PSE ports are equipped with the following capabilities:

1. Detection for an IEEE 802.3af /802.3at/802.3bt compliant PD.
2. No power is supplied to a device which is classified non-IEEE 802.3 compliant PD.
3. No power is supplied when no connection exists on the port.
4. The power is cut off immediately from powering condition when a disconnection occurs.
5. The power is cut off immediately from powering condition when overload occurs.
6. The power is cut off immediately from powering condition when over-current occurs.
7. The power is cut off immediately from powering condition when short circuit condition occurs.

The device specifications: DC power input vs. PoE power output

Requested PD classes| DC power min. 1| PSE output power max. 2| Cable power pairs 3| PD available power min. 4
---|---|---|---|---
Class 1| 45 ~ 57V| 5.3W| 2| 3.84W
Class 2| 45 ~ 57V| 8.5W| 2| 6.49W
Class 3| 45 ~ 57V| 19W| 2| 13W
Class 4| 45 ~ 57V| 36W| 4| 25.5W
Class 5| 51 ~ 57V| 51W| 4| 40W
Class 6| 51 ~ 57V| 68W| 4| 51W
Class 7| 53 ~ 57V| 83W| 4| 62W
Class 8| 53 ~ 57V| 95W| 4| 71.3W

1: The minimum DC power voltage to support the specified maximum PSE output
2: The maximum output power at the PSE end for the requested PD class
3: Cable pairs that deliver PSE power
4: The minimum power received at the PD end with maximum output at the PSE end in worst case
*5: The maximal total power budget shared by all PSE ports of the device is 240W.

Connection example:

2.11 LED Indication

status

| Green| ON| The power is supplied to the switch.
| OFF| The power is not supplied to the switch.
Mgt| Management status| Green| OFF| The switch is in initialization and diagnostics.
Yellow| BLINK| Initialization completed with diagnostic error

or system error found during normal operation

Green| ON| Initialization completed with no error
Port1 ~ Port 8
SPEED_LED| Port speed status| Green| ON| Speed is 1000Mbps.
Yellow| ON| Speed is 10Mbps or 100Mbps.
| BLINK| PoE power is on.
LINK_LED| Port link status| Green| ON| Port link is established. (No traffic)
Green| BLINK| Port link is up and there is traffic.
| OFF| Port link is down.
Port 9, Port 10
Speed _LED| Port speed/link status| Green| ON| A 1000Mbps link is established.
Yellow| ON| A 100Mbps link is established.
| BLINK| Activity status
| OFF| Port link is down.

2.12 Making Console Connection The connector designed for the console port is RJ-45.

Pin Assignments

Baud Rate information
Baud rate – 115200
Data bits – 8
Parity – None
Stop bit – 1
Flow control – None

Managing the Switch

The switch provides the following methods to configure and monitor the switch as follows:

• Making out of band telnet CLI management via the console port
• Making in-band management via telnet CLI over TCP/IP network
• Making in-band management via web interface over TCP/IP network
• Making in-band SNMP management over TCP/IP network

3.1 IP Address & Password
The IP Address is an identification of the switch in a TCP/IP network. Each switch should be designated a new and unique IP address in the network. The switch is shipped with the following factory default settings for software management:
Default IP address of the switch: 192.168.0.2 / 255.255.255.0
The switch uses local authentication instead of RADIUS authentication with factory defaults.
Fixed Username: admin
Default password:
No password is required with factory default. However, the password is used for local authentication in accessing to the switch via console, telnet and Http web-based interface. For security reason, it is recommended to change the default settings for the switch before deploying it to your network.

3.2 Configuring IP Address & Password via console and telnet
[IP Address] setting command is in IP command group.

IP Setup [] [] [] [] Parameters:

: IP address (a.b.c.d) : IPv4 subnet mask (a.b.c.d) : IPv4 router (a.b.c.d) : VLAN ID (1-4095) [IPv6 Address] setting command is also in IP command group. IP IPv6 Setup [] [] [] Parameters: : IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separates each field (:). : IPv6 subnet mask : IPv6 router [Password] setting command is also in Security/Switch/Users command group. Security Switch Users Configuration Security Switch Users Add Security Switch Users Delete Refer to “Operation manual for telnet and console management”.

3.3 Configuring IP Address via Web Interface
Start Web Browser
Start your browser software and enter the default IP address of the switch unit to which you want to connect. The IP address is used as URL for the browser software to search the device.
URL:http://192.168.0.2/

Login to Switch Unit
When browser software connects to the switch unit successfully, a Login screen is provided for you to login to the device as the left display below: Enter the following default values in the login page:
Default username: admin
Default password: ↵
No password is required.
Click to login into the switch.

Web Page after a Successful Login

Select [Configuration] - > [System] -> [IP] to configure IP address 

notation.
DNS Proxy| When DNS proxy is enabled, DUT will relay DNS requests to the current configured DNS server on DUT, and reply as a DNS resolver to the client device on the network.
| Click to save the changes.
---|---
| Click to undo any changes made locally and revert to previously saved values.
| Click to renew DHCP. This button is only available if DHCP is enabled.

3.4 Reference Manuals for Web, Console, Telnet Management
The following operation manuals are also provided separately for Console, Telnet and Web management:
Operation manual – telnet & console management xxxxxx.doc
Operation manual – web management xxxxx.doc
The manuals describe the detailed commands and information.

3.5 Configuration for SNMP Management
The switch supports SNMP v1, SNMP v2c, and SNMP v3 management. Make sure the related settings are wellconfigured for the switch before you start the SNMP management from an SNMP manager.

Using Telnet Interface
The following are available commands in telnet SNMP command group to configure SNMP-related settings:

SNMP Configuration
SNMP Mode [enable|disable] >SNMP Version [1|2c|3] >SNMP Read Community [] >SNMP Write Community [] >SNMP Trap Mode [enable|disable] >SNMP Trap Version [1|2c|3] >SNMP Trap Community [] >SNMP Trap Destination [] >SNMP Trap IPv6 Destination [] >SNMP Trap Authentication Failure [enable|disable] SNMP Trap Link-up [enable|disable] >SNMP Trap Inform Mode [enable|disable] SNMP Trap Inform Timeout [] >SNMP Trap Inform Retry Times [] >SNMP Trap Probe Security Engine ID [enable|disable] >SNMP Trap Security Engine ID [] >SNMP Trap Security Name [] SNMP Engine ID [] >SNMP Community Add [] [] >SNMP Community Delete
SNMP Community Lookup [] >SNMP User Add [MD5|SHA] [] [DES] [] >SNMP User Delete
SNMP User Changekey [] SNMP User Lookup [] >SNMP Group Add

SNMP Group Delete SNMP Group Lookup [] >SNMP View Add [included|excluded] SNMP View Delete SNMP View Lookup [] >SNMP Access Add [] [] >SNMP Access Delete SNMP Access Lookup []

Using Web Interface
Select [Configuration] -> [Security] -> [SNMP]: The commands supports configuration for:

• Basic system configuration for SNMP v1 and SNMP v2c
• Basic system configuration for SNMP v1 trap, SNMP v2c trap and SNMP v3 trap
• Communities that permit to access to SNMPv3 agent
• USM (User-based Security Model) user table for SNMPv3
• VACM (View-based Access Control Model) Viewer table for SNMPv3
• Group table for SNMPv3
• Accesses group table for SNMPv3

3.6 SNMP MIBs
The switch provides the following SNMP MIBs:

• RFC 1213 – MIB II
• RFC 2674 – QBridge MIB (VLAN MIB)
• RFC 2819 – RMON (Group 1, 2. 3 & 9)
• RFC 2863 – Interface Group (IF) MIB
• RFC 3411 – SNMP Management Frameworks
• RFC 3414 – User Based Security Model (USM)
• RFC 3415 – View Based Access Control Model (VACM)
• RFC 3621 – Power Ethernet MIB
• RFC 3635 – EtherLike MIB
• RFC 3636 – 802.3 Medium Attachment Units (MAUs) MIB
• RFC 4133 – Entity MIB
• RFC 4188 – Bridge MIB
• RFC 4668 – RADIUS Authentication Client MIB
• RFC 5519 – Multicast Group Membership Discovery (MGMD) MIB
• IEEE 802.1 MSTP MIB
• IEEE 802.1AB LLDP MIB
• IEEE 802.1X Port Access Entity (PAE) MIB
• TIA 1057 LLDP Media Endpoint Discovery (MED) MIB
• IEEE 802.1-Q-BRIDGE MIB
• Private SFPDDM MIB (Read DDM status of the SFP ports)
• Private reboot MIB (Remote boot over SNMP)
• Private TFTP firmware update MIB (TFTP Firmware update over SNMP)
• Private OPA function MIB (OPA configuration for the SFP ports)
• Private ALS function MIB (ALS configuration for the SFP ports)

One product MIB file is also available in the product CD for SNMP manager software.

3.6.1 SNMP Traps
In addition to the SNMP standard traps, the device is equipped with private OPA alarm traps.

The traps are:

• Alarm trap – Port TX power lower than the minimal value
• Alarm trap – Port TX power higher than the maximal value
• Normal trap – Port TX power back to normal (higher than the minimal value)
• Normal trap – Port TX power back to normal (lower than the maximal value)

Redundant Ring Applications

4.1 Auto Multi-Ring Technology
Auto Multi-Ring Technology was developed especially for switches connected in ring topology which needs redundant support when any failure occurs in ring. For large network, more than one ring connections are very common. Auto Multi- Ring Technology  implementation can support more than one ring connection within a switch. It is also able to work with RSTP support concurrently in the switch.

Some basic information is:

• Supports up to five rings in one switch
• Supports up to 30 member switches in one ring
• Provides fast response time than RSTP protocol
• Works with RSTP protocol concurrently within one switch

The following figure illustrates a configuration that three redundant rings and one RSTP ring hook on a main redundant ring. Some switches support two redundant rings concurrently.

The following figure shows one switch is configured to support three redundant rings and one RSTP ring at the same time.

4.2 Redundant Ring Applications with industrial standard RSTP protocol
It also can be done to support a ring connection using industrial standard RSTP function and establish a backup path. In case that any link failure occurs, the backup path can link up immediately to recover the network operation.

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>