Dahua PFS4218-16GT2GF-190, PFS4218-16GT2GF-240, S4220-16GT-190, S4228-24GT-240, S4228-24GT-360 User manual

  • Hello! I am an AI chatbot trained to assist you with the Dahua PFS4218-16GT2GF-190 User manual. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
Managed Gigabit PoE Switch
Web Config Manual
V1.0.1
Foreword I
Foreword
General
This Web Configuration Manual (hereinafter referred to as "the manual") introduces
operations on web interface of Managed Gigabit PoE Switch (hereinafter referred to as "the
Switch"). You can visit the switch on web browser, configure and manage the switch.
Safety Instructions
The following categorized signal words with defined meaning might appear in the manual.
Signal Words
Meaning
DANGER
Indicates a high potential hazard which, if not avoided, will result in
death or serious injury.
WARNING
Indicates a medium or low potential hazard which, if not avoided,
could result in slight or moderate injury.
CAUTION
Indicates a potential risk which, if not avoided, could result in
property damage, data loss, lower performance, or unpredictable
result.
TIPS
Provides methods to help you solve a problem or save you time.
NOTE
Provides additional information as the emphasis and supplement to
the text.
Revision History
Version
Revision Content
Release Time
V1.0.0
First release.
July 2019
V1.0.1
November 2020
Privacy Protection Notice
As the device user or data controller, you might collect personal data of others such as face,
fingerprints, car plate number, Email address, phone number, GPS and so on. You need to be
in compliance with the local privacy protection laws and regulations to protect the legitimate
rights and interests of other people by implementing measures include but not limited to:
providing clear and visible identification to inform data subject the existence of surveillance
area and providing related contact.
Foreword II
About the Manual
The manual is for reference only. If there is inconsistency between the manual and the
actual product, the actual product shall prevail.
We are not liable for any loss caused by the operations that do not comply with the
manual.
The manual would be updated according to the latest laws and regulations of related
regions. For detailed information, see the paper manual, CD-ROM, QR code or our
official website. If there is inconsistency between paper manual and the electronic
version, the electronic version shall prevail.
All the designs and software are subject to change without prior written notice. The
product updates might cause some differences between the actual product and the
manual. Please contact the customer service for the latest program and supplementary
documentation.
There still might be deviation in technical data, functions and operations description, or
errors in print. If there is any doubt or dispute, please refer to our final explanation.
Upgrade the reader software or try other mainstream reader software if the manual (in
PDF format) cannot be opened.
All trademarks, registered trademarks and the company names in the manual are the
properties of their respective owners.
Please visit our website, contact the supplier or customer service if there is any problem
occurred when using the device.
If there is any uncertainty or controversy, please refer to our final explanation.
Important Safeguards and Warnings III
Important Safeguards and Warnings
The manual helps you to use our product properly. To avoid danger and property damage,
read the manual carefully before using the product, and we highly recommend you to keep it
well for future reference.
Operating Requirements
Do not expose the device directly to the sunlight, and keep it away from heat source.
Do not install the device in the damp environment, and avoid dust and soot.
Make sure the device is in horizontal installation, and install the device on solid and flat
surface to avoid falling down.
Avoid liquid spattering on the device. Do not place object full of liquid on the device to
avoid liquid flowing into the device.
Install the device in the well-ventilated environment. Do not block the air vent of the
device.
Use the device at rated input and output voltage.
Do not dissemble the device without professional instruction.
Transport, use, and store the device in allowed ranges of humidity and temperature.
Power Supply Requirements
Use the battery properly to avoid fire, explosion, and other dangers.
Replace the battery with battery of the same type.
Use locally recommended power cord in the limit of rated specifications.
Use the standard power adapter. We will assume no responsibility for any problems
caused by nonstandard power adapter.
The power supply shall meet the SELV requirement. Use the power supply that conforms
to Limited Power Source, according to IEC60950-1. Refer to the device label.
Adopt GND protection for I-type device.
The coupler is the disconnecting apparatus. Keep it at the angle for easy to operate.
Table of Contents IV
Table of Contents
Foreword .................................................................................................................................................... I
Important Safeguards and Warnings .................................................................................................... III
1 Login ....................................................................................................................................................... 1
2 Quick Settings ....................................................................................................................................... 2
System Information ....................................................................................................................... 2 2.1 Local .............................................................................................................................................. 3 2.2 VLAN ............................................................................................................................................. 3 2.3 Aggregation ................................................................................................................................... 4 2.4 2.4.1 Static Aggregation Configuration ........................................................................................ 5
2.4.2 Dynamic Aggregation Configuration ................................................................................... 6
IP and Route ................................................................................................................................. 6 2.5
3 Advanced Settings ................................................................................................................................ 9
Common Configuration ................................................................................................................. 9 3.1 3.1.1 System Configuration ......................................................................................................... 9
3.1.2 Port Configuration ............................................................................................................. 15
3.1.3 VLAN Configuration .......................................................................................................... 17
3.1.4 Aggregation ....................................................................................................................... 18
3.1.5 MAC Table ........................................................................................................................ 20
3.1.6 Spanning Tree .................................................................................................................. 25
3.1.7 Long Distance PoE ........................................................................................................... 28
Seldom-used Configurations ...................................................................................................... 28 3.2 3.2.1 ERPS ................................................................................................................................ 28
3.2.2 ACL ................................................................................................................................... 36
3.2.3 Loop Protection ................................................................................................................. 39
3.2.4 Security ............................................................................................................................. 39
3.2.5 IGMP Snooping ................................................................................................................ 44
3.2.6 QoS ................................................................................................................................... 46
3.2.7 SNMP ................................................................................................................................ 56
3.2.8 DHCP Server .................................................................................................................... 59
3.2.9 LLDP ................................................................................................................................. 61
3.2.10 485 Config ...................................................................................................................... 63
3.2.11 PoE ................................................................................................................................. 64
4 Maintenance ......................................................................................................................................... 69
System Reboot ............................................................................................................................ 69 4.1 Restoring Default Settings .......................................................................................................... 69 4.2 Config Manage ............................................................................................................................ 69 4.3 4.3.1 Exporting Config File ........................................................................................................ 69
4.3.2 Uploading Config File ....................................................................................................... 70
Software Update ......................................................................................................................... 70 4.4 Mirroring ...................................................................................................................................... 71 4.5 Ping ............................................................................................................................................. 72 4.6 Function of Network Management System ................................................................................. 72 4.7 4.7.1 Function enabling and Login ............................................................................................ 72
4.7.2 Exporting Network Management Configuration File ........................................................ 73
Table of Contents V
4.7.3 Uploading Network Management Configuration File ....................................................... 73
Cybersecurity Recommendations ................................................................................... 74 Appendix 1
Login 1
1 Login
Before login, make sure:
You already configure the IP address of the switch. The IP address of VLAN 1 is
192.168.1.110 by default.
The PC with web browser is connected to the network, and the PC can ping the switch
successfully.
Enter the IP address (192.168.1.110 by default) of the switch in the address bar of the Step 1 web browser, and then press Enter.
The Login interface is displayed. See Figure 1-1.
Web login Figure 1-1
Enter user name and password. The user name and the password are admin by Step 2 default.
Click Login. Step 3 The Quick Setting interface is displayed.
Modify the password after first login. The password must consist of 8 to 32 non-blank
characters and contain at least two types of characters among upper case, lower case,
number, and special character (excluding ' " ; : &).
Quick Settings 2
2 Quick Settings
You can view the system information, and set the device parameters, VLAN, link aggregation,
IP address and route. Take 4-port PoE switch for example. The quick setting interface is
different depending on the models of switch. The actual interface shall prevail.
System Information 2.1
You can view the name, type, serial number, software version, IP address, port status and port
information of the device.
After logging in the system, the Quick Setting interface is displayed. See Figure 2-1. On the
switch, if the port shows green, it means the port is connected successfully. And If the port
shows gray, it means the port is not connected or the connection fails. See Table 2-1.
System information Figure 2-1
Table 2-1 Port information
Parameter
Description
Port
Displays all ports of the switch.
This switch contains 7 ports. Port quantity might vary depending on the
model you purchased, and the actual product shall prevail.
Port Type
Three types: Access, Hybrid, and Trunk.
Link
Two link states: Up and Down. Up indicates the port is connected
successfully, and Down indicates the port is not connected or the
connection fails.
Quick Settings 3
Parameter
Description
Flow Control
Displays the flow control state.
Speed/Duplex
Online: It displays the port rate and the duplex mode.
Offline: It displays Down.
VLAN
VLAN port. It is VLAN 1 by default.
POE
Displays the power consumption of POE. Only 14 ports are PoE ports.
Receive Usage
The current receiving speed is divided by the average speed in a
certain period (5 minutes usually).
Send Usage
The current sending speed is divided by the average speed in a certain
period (5 minutes usually).
Media Type
Two media types: Copper and Fiber. Copper indicates RJ-45 port,
and Fiber indicates fiber port.
Local 2.2
You can set the system name, IP address, and subnet mask.
Click Local on the right of Quick setting interface. Step 1 The Local interface is displayed. See Figure 2-2.
Local Figure 2-2
Enter the system name, IP address, and mask length. Step 2 Click OK. Step 3
VLAN 2.3
Add the port to the VLAN, and configure the VLAN. By default, the port is VLAN1.
Click Vlan on the Quick Setting interface. Step 1 The Vlan interface is displayed. See Figure 2-3.
Quick Settings 4
VLAN Figure 2-3
Configure the port VLAN parameters. See Table 2-2. Step 2
Table 2-2 Port VLAN configuration parameter
Parameter
Description
Port
Displays all ports of the switch.
Mode
Three modes: Access, Hybrid, and Trunk.
Access: When the port connects to terminal devices (such as PC and
IPC), select Access.
Trunk: When the port connects to switch, select Trunk.
Hybrid: Not often used.
Port VLAN
Add the port to a VLAN. By default, the port belongs to VLAN1, and the
range is 14094.
Allowed VLANs
Set the allowed VLAN. When the mode is Trunk, you can set it.
Click OK. Step 3
Aggregation 2.4
Add the port to the aggregation. For details, see "3.1.4 Aggregation."
Click Aggregation on Quick Setting interface, and the Aggregation interface is displayed.
See Figure 2-4.
Quick Settings 5
Aggregation Figure 2-4
2.4.1 Static Aggregation Configuration
Static aggregation is a method of combining or bundling of multiple switch ports or NICs to form
a single etherchannel. For example, add port 1 and port 2 to Static Group 1.
Select Model as Static in group 1, which indicates that the group is static aggregation. Step 1 Select port 1 and port 2 in group 1 to add the two ports to static aggregation. See Step 2 Figure 2-5.
For 4-port PoE switch, you can configure up to 3 groups of static aggregation. Static
aggregation is different depending on different models of PoE switch. The actual
interface shall prevail. Static configuration Figure 2-5
Click OK. Step 3 The port 1 and port 2 form a logical port.
Quick Settings 6
2.4.2 Dynamic Aggregation Configuration
Dynamic aggregation differs from static aggregation in that port quantity is fixed in static
aggregation, but quantity of actually aggregated port is adjusted dynamically according to flow
rate strategy.
Add the ports to the dynamic group. Step 1 1) Select LACP (Active) in the Mode area, and add the ports to the aggregation
group. For example, add port 3 and port 4 to aggregation group 2. See Figure 2-6.
2) Select LACP (Passive) in the Mode area, and add the ports to the aggregation
group. For example, add port 5 and port 6 to aggregation group 3. See Figure 2-6.
Dynamic configuration Figure 2-6
Click OK. Step 2
IP and Route 2.5
You can add the IP address of VLAN virtual interface and IP route. For details, see "3.1.1.2 IP
and Route."
Click IP & Route on the Quick Setting interface. Step 1 The IP & Route interface is displayed. See Figure 2-7.
Quick Settings 7
IP and route Figure 2-7
Add the VLAN interface. Step 2 1) Click Add in the IP Config area.
A new record is added. See Figure 2-8.
VLAN interface Figure 2-8
2) For the parameters, see Table 2-3.
Table 2-3 VLAN interface
Parameter
Description
VLAN
Enter VLAN number.
IP address
Set the IP address of the VLAN interface.
Mask Length
Set the mask length of the VLAN interface.
Add the IP route. Step 3 1) Click Add in the Route Config area.
Quick Settings 8
A new record is added. See Figure 2-9.
IP route Figure 2-9
2) For the parameters, see Table 2-4.
Table 2-4 IP routes
Parameter
Description
Network
It is the destination of the IP packet.
Mask Length
Mask length, with the destination address, is to identify the IP address
of the destination host or the route. After Logical AND between
destination address and network mask, you can get the IP address of
the destination host or the route.
Next Hop
The next hop IP of the route.
Click OK. Step 4
Advanced Settings 9
3 Advanced Settings
You can configure system, port, VLAN, aggregation, MAC table and other parameters on the
advanced settings interface. The advanced settings interface is different depending on the
models of switch, and the actual interface shall prevail. Take 4-port PoE switch for example.
Common Configuration 3.1
3.1.1 System Configuration
3.1.1.1 System Information
You can set the device name, IP address, mask length and DHCP enable, and view the
software information, hardware information and time.
Be careful when you enable DHCP Client. After enabling DHCP Client, the IP router or DHCP
server connecting to the switch will assign IP address to the switch automatically and the
existing IP address will be invalided, and then you cannot access the web interface.
Select Advanced > Common > System Config > System Info. Step 1 The System Info interface is displayed. See Figure 3-1.
Advanced Settings 10
System information Figure 3-1
Enter the device name, IP address and mask length and DHCP enable. Step 2 Click Save. Step 3
3.1.1.2 IP and Route
The hosts of different VLANs cannot communicate. Route or the layer 3 switch is needed for
forwarding.
The switch supports layer 3 forwarding through VLAN interface. VLAN interface is the virtual
interface of layer 3 mode, for layer 3 communication between the VLANs. It is not the physical
Advanced Settings 11
entity on the device. Every VLAN is related to a VLAN interface, and the VLAN interface can
forward packet for the VLAN. Generally, because the VLAN can isolate the broadcasting
domain, every VLAN corresponds to a network segment. VLAN interface is the gateway of the
network segment, and it supports layer 3 forwarding for the message based on IP address.
Select Advanced > Common > System Config > IP&Route. Step 1 The IP&Route interface is displayed. See Figure 3-2.
IP and route Figure 3-2
Add the VLAN interface. Step 2 1) Click Add in IP Setting region.
The Add IP interface is displayed. See Figure 3-3.
Advanced Settings 12
Add IP Figure 3-3
2) For the parameters, see Table 3-1.
Table 3-1 VLAN interface
Parameter
Description
VLAN
Enter VLAN number.
IP address
Set the IP address of the VLAN interface.
Mask Length
Set the mask length of the IP address.
3) Click OK.
Add the IP route. Step 3 1) Click Add in the Route Setting region.
The Add Route interface is displayed. See Figure 3-4.
Add route Figure 3-4
2) For the parameters, see Table 3-2.
Table 3-2 IP routes
Parameter
Description
Network
It is the destination of the IP packet.
Mask Length
Mask length, with destination address, is to identify the IP address of
the destination host or the route. After Logical AND between
destination address and network mask, you can get the IP address of
the destination host or the route.
Next Hop
The next hop IP of the route.
3) Click OK.
Advanced Settings 13
Click Save. Step 4
3.1.1.3 System time
Set the system time of switch.
Select Advanced > Common > System Config > Current Time.
The Current Time interface is displayed. See Figure 3-5.
Current time (1) Figure 3-5
You can set the system time through the following three methods:
Set the time manually
Set the date and time on Current Time interface, and then click Save.
Sync time
Click Sync PC, and the switch time synchronizes with the local PC time automatically.
Sync NTP server time
Only with NTP server configured in the network can you enable this function in the
following steps:
Select the NTP Enable box to enable the NTP service. Step 1 Set the IP address of the NTP server. See Figure 3-6. Step 2
Advanced Settings 14
Current time (2) Figure 3-6
Click Save. Step 3 The switch time automatically synchronizes with the time of server 1.
3.1.1.4 Log
You can view logs, export logs and clear logs.
Select Advanced > Common > System Config > Log. The Log interface is displayed. See
Figure 3-7.
/