KYLAND SICOM3448G User manual

  • Hello! I'm a chat assistant and I have read the provided Web Operation Manual for the KYLAND SICOM3448G Industrial Ethernet Switch. This document covers various aspects of the switch, including its software features for redundancy, security, and network management. I am ready to answer your questions about the device and its features.
  • What are the redundancy protocols supported by SICOM3448G?
    How can I access the switch?
    What are the security features of the switch?
    What network management options are available?
SICOM3448G Industrial Ethernet Switch
Web Operation Manual
Publication Date: Jan. 2017
Version: V1.0
Disclaimer:
Kyland Technology Co., Ltd. tries to keep the content in this manual as accurate and as
up-to-date as possible. This document is not guaranteed to be error-free, and we reserve the
right to amend it without notice.
All rights reserved
No part of this documentation may be excerpted, reproduced, translated, annotated or
duplicated, in any form or by any means without the prior written permission of KYLAND
Corporation.
Copyright © 2017 Kyland Technology Co., Ltd.
Website: http://www.kyland.com
FAX: +86-10-88796678
I
Contents
Perface .................................................................................................................................. 8
1 Product Introduction.......................................................................................................... 12
1.1 Overview .................................................................................................................... 12
1.2 Software Features ...................................................................................................... 12
2 Switch Access ................................................................................................................... 13
2.1 View Types ................................................................................................................. 13
2.2 Switch Access by Console Port .................................................................................. 14
2.3 Switch Access by Telnet ............................................................................................. 17
2.4 Switch Access by Web ............................................................................................... 18
3 Maintenance ..................................................................................................................... 22
4 Basic Configuration .......................................................................................................... 26
4.1 System Information .................................................................................................... 26
4.2 System Configuration ................................................................................................. 26
4.3 CPU Load .................................................................................................................. 27
4.4 Firmware Upgrade ..................................................................................................... 27
4.4.1 Firmware Upgrade by HTTP ................................................................................ 27
4.4.2 Firmware Upgrade by SFTP ................................................................................ 28
4.5 Firmware Application Activate .................................................................................... 30
5 IP Configuration ................................................................................................................ 32
5.1 IP Address Configuration............................................................................................ 32
5.2 ARP ............................................................................................................................ 35
5.2.1 Introduction .......................................................................................................... 35
5.2.2 Web Configuration ............................................................................................... 36
5.3 DHCP Configuration ................................................................................................... 37
5.3.1 DHCP Server Configuration ................................................................................. 38
5.3.2 DHCP Snooping .................................................................................................. 49
5.3.3 Option 82 Configuration ....................................................................................... 52
6 Clock System .................................................................................................................... 56
II
7 Port Configuration ............................................................................................................. 60
8 QoS Configuration ............................................................................................................ 65
8.1 Introduction ................................................................................................................ 65
8.2 Principle ..................................................................................................................... 66
8.3 Web Configuration ..................................................................................................... 67
8.3.1 Qos Statistics ....................................................................................................... 67
8.3.2 QCL Status .......................................................................................................... 67
8.3.3 Port Classification ................................................................................................ 68
8.3.4 Port Policing ........................................................................................................ 71
8.3.5 Queue Policing .................................................................................................... 73
8.3.6 Port Scheduler ..................................................................................................... 74
8.3.7 Port shaping ........................................................................................................ 75
8.3.8 Port Tag remarking .............................................................................................. 76
8.3.9 Port DSCP ........................................................................................................... 80
8.3.10 DSCP-Based QoS ............................................................................................. 81
8.3.11 DSCP translation ............................................................................................... 83
8.3.12 DSCP classification ........................................................................................... 84
8.3.13 QoS Control List ................................................................................................ 85
8.3.14 storm Policing .................................................................................................... 92
8.4 Typical Configuration Example ................................................................................... 94
9 Security ............................................................................................................................. 96
9.1 User Management ...................................................................................................... 96
9.1.1 Introduction .......................................................................................................... 96
9.1.2 Web Configuration ............................................................................................... 96
9.2 Authentication login configuration............................................................................. 100
9.3 SSH Configuration ................................................................................................... 101
9.3.1 Introduction ........................................................................................................ 101
9.3.2 Key .................................................................................................................... 101
9.3.3 Implementation .................................................................................................. 101
9.3.4 Web Configuration ............................................................................................. 102
III
9.3.5 Typical Configuration Example .......................................................................... 103
9.4 SSL Configuration .................................................................................................... 111
9.4.1 Introduce............................................................................................................ 111
9.4.2 Web Configuration ............................................................................................. 112
9.5 Access Management ................................................................................................ 114
9.5.1 Introduction ........................................................................................................ 114
9.5.2 Web Configuration ............................................................................................. 115
9.6 SNMP v1/SNMP v2c ................................................................................................ 116
9.6.1 Introduction ........................................................................................................ 116
9.6.2 Implementation .................................................................................................. 117
9.6.3 Explanation ........................................................................................................ 117
9.6.4 MIB Introduction ................................................................................................ 118
9.6.5 Web Configuration ............................................................................................. 119
9.6.6 Typical Configuration Example .......................................................................... 123
9.7 SNMPv3 ................................................................................................................... 124
9.7.1 Introduce............................................................................................................ 124
9.7.2 Implementation .................................................................................................. 125
9.7.3 Web Configuration ............................................................................................. 125
9.7.4 Typical Configuration Example .......................................................................... 135
9.8 RMON ...................................................................................................................... 137
9.8.1 Introduce............................................................................................................ 137
9.8.2 RMON Groups ................................................................................................... 137
9.8.3 Web Configuration ............................................................................................. 138
9.9 TACACS+ Configuration .......................................................................................... 144
9.9.1 Introduction ........................................................................................................ 144
9.9.2 Web Configuration ............................................................................................. 145
9.9.3 Typical Configuration Example .......................................................................... 147
9.10 RADIUS Configuration ........................................................................................... 148
9.10.1 Introduction ...................................................................................................... 148
9.10.2 Web Configuration ........................................................................................... 149
IV
9.10.3 Typical Configuration Example ........................................................................ 152
10 Network ........................................................................................................................ 154
10.1 IEEE802.1X Configuration ..................................................................................... 154
10.1.1 Introduction ...................................................................................................... 154
10.1.2 Web Configuration ........................................................................................... 155
10.1.3 Typical Configuration Example ........................................................................ 162
10.2 ACL ........................................................................................................................ 163
10.2.1 Overview.......................................................................................................... 163
10.2.2 Implementation ................................................................................................ 163
10.2.3 Web Configuration ........................................................................................... 164
10.2.4 Typical Configuration Example ........................................................................ 178
11 Port Aggregation ........................................................................................................... 179
11.1 Static Aggregation .................................................................................................. 179
11.1.1 Introduction ...................................................................................................... 179
11.1.2 Implementation ................................................................................................ 179
11.1.3 Web Configuration ........................................................................................... 180
11.1.4 Typical Configuration Example ........................................................................ 181
11.2 LACP ...................................................................................................................... 181
11.2.1 Introduction ...................................................................................................... 181
11.2.2 Implementation ................................................................................................ 182
11.2.3 Web Configuration ........................................................................................... 182
11.2.4 Typical Configuration Example ........................................................................ 185
12 Loop Detect Configuration ............................................................................................ 186
12.1 Overview ................................................................................................................ 186
12.2 Web Configuration ................................................................................................. 186
12.3 Typical Configuration Example ............................................................................... 189
13 IGMP Snooping ............................................................................................................ 190
13.1 Introduction ............................................................................................................ 190
13.2 Basic Concepts ...................................................................................................... 190
13.3 Principle ................................................................................................................. 191
V
13.4 Web Configuration ................................................................................................. 191
13.5 Typical Application Example ................................................................................... 197
14 Unregistered Multicast Action ....................................................................................... 199
14.1 Introduction ............................................................................................................ 199
14.2 Web Configuration ................................................................................................. 199
15 LLDP ............................................................................................................................. 200
15.1 Introduction ............................................................................................................ 200
15.2 Web Configuration ................................................................................................. 200
16 MAC Address Configuration ......................................................................................... 203
16.1 Introduction ............................................................................................................ 203
16.2 Web Configuration ................................................................................................. 203
17 VLAN ............................................................................................................................ 206
17.1 VLAN Configuration ............................................................................................... 206
17.1.1 Introduction ...................................................................................................... 206
17.1.2 Principle ........................................................................................................... 206
17.1.3 Port-based VLAN ............................................................................................. 207
17.1.4 Web Configuration ........................................................................................... 209
17.1.5 Typical Configuration Example ........................................................................ 213
17.2 PVLAN Configuration ............................................................................................. 214
17.2.1 Introduction ...................................................................................................... 214
17.2.2 Explanation ...................................................................................................... 215
17.2.3 Typical Configuration Example ........................................................................ 215
17.3 GVRP ..................................................................................................................... 217
17.3.1 GARP Introduction ........................................................................................... 217
17.3.2 GVRP Introduction ........................................................................................... 218
17.3.3 Web Configuration ........................................................................................... 218
17.3.4 Typical Configuration Example ........................................................................ 221
18 Redundancy ................................................................................................................. 222
18.1 DT-Ring .................................................................................................................. 222
18.1.1 Introduction ...................................................................................................... 222
VI
18.1.2 Concepts ......................................................................................................... 222
18.1.3 Implementation ................................................................................................ 223
18.1.4 Explanation ...................................................................................................... 226
18.1.5 Web Configuration ........................................................................................... 226
18.1.6 Typical Configuration Example ........................................................................ 229
18.2 DRP ....................................................................................................................... 230
18.2.1 Overview.......................................................................................................... 230
18.2.2 Concept ........................................................................................................... 231
18.2.3 Implementation ................................................................................................ 232
18.3 DHP ....................................................................................................................... 237
18.3.1 Overview.......................................................................................................... 237
18.3.2 Concepts ......................................................................................................... 238
18.3.3 Implementation ................................................................................................ 239
18.3.4 Description ....................................................................................................... 240
18.3.5 Web Configuration ........................................................................................... 240
18.3.6 Typical Configuration Example ........................................................................ 243
18.4 RSTP/STP.............................................................................................................. 244
18.4.1 Introduction ...................................................................................................... 244
18.4.2 Concepts ......................................................................................................... 244
18.4.3 BPDU .............................................................................................................. 245
18.4.4 Implementation ................................................................................................ 246
18.4.5 Web Configuration ........................................................................................... 247
18.4.6 Typical Configuration Example ........................................................................ 252
18.5 MSTP Configuration ............................................................................................... 254
18.5.1 Introduction ...................................................................................................... 254
18.5.2 Basic Concepts ................................................................................................ 255
18.5.3 MSTP Implementation ..................................................................................... 259
18.5.4 Web Configuration ........................................................................................... 260
18.5.5 Typical Configuration Example ........................................................................ 269
19 Alarm ............................................................................................................................ 273
VII
19.1 Introduction ............................................................................................................ 273
19.2 Web Configuration ................................................................................................. 273
20 Link Check .................................................................................................................... 280
20.1 Introduction ............................................................................................................ 280
20.2 Web Configuration ................................................................................................. 280
21 Log................................................................................................................................ 282
21.1 Introduction ............................................................................................................ 282
21.2 Web Configuration ................................................................................................. 282
22 Port Mirroring ................................................................................................................ 285
22.1 Introduction ............................................................................................................ 285
22.2 Explanation ............................................................................................................ 285
22.3 Web Configuration ................................................................................................. 285
22.4 Typical Configuration Example ............................................................................... 287
23 Diagnostics ................................................................................................................... 288
23.1 Ping ........................................................................................................................ 288
23.2 Ping6 ...................................................................................................................... 289
Appendix: Acronyms .......................................................................................................... 291
Perface
8
Perface
This manual mainly introduces the access methods and software features of SICOM3448G
industrial Ethernet switch, and details Web configuration methods.
Content Structure
The manual contains the following contents:
Main Content
Explanation
1. Product Introduction
 Overview
 Software Features
2. Switch Access
 View Types
 Switch Access by Console Port
 Switch Access by Telnet
 Switch Access by Web
3. Maintenance
 Reboot
 Load Default
 Save Current Configuration
 Upload/Download Configuration File
4. Basic Configuration
 System Information
 System Configuration
 CPU Load
 Firmware Upgrade (by HTTP, SFTP)
 Firmware Application Activate
5. IP Configuration
 IP Address Configuration
 ARP
 DHCP Configuration
6. Clock System
7. Port Configuration
8. QoS Configuration
9. Security
 User Mangement
Perface
9
 Authentication Login Configuration
 SSH Configuration
 SSL Configuration
 Access Management
 SNMP v1/v2c/v3
 RMON Configuration
 TACACS+ Configuration
 RADIUS Configuration
10. Network
 IEEE802.1X Configuration
 ACL Configuration
11. Port Aggregation
 Static Aggregation
 LACP Configuration
12. Loop Detect Configuration
13. IGMP Snooping
14. LLDP
15. MAC Address Configuration
16. VLAN
 VLAN Configuration
 PVLAN Configuration
 GVRP
17. Redundancy
 DT-Ring
 DRP/DHP
 RSTP/STP
 MSTP
18. Alarm
 Power Alarm
 Port Alarm
 DT-Ring Alarm
 DRP Alarm
 IP/MAC Conflict Alarm
19. Link Check
Perface
10
20. Log
21. Port Mirroring
22. Diagnostics
Ping
Conventions in the manual
1. Text format conventions
Format
Explanation
< >
The content in < > is a button name. For example, click <Apply> button.
[ ]
The content in [ ] is a window name or a menu name. For example, click [File] menu item.
{ }
The content in { } is a portfolio. For example, {IP address, MAC address} means IP address
and MAC address is a portfolio and they can be configured and displayed together.
→
Multi-level menus are separated by ―→‖. For example, Start → All Programs →
Accessories. Click [Start] menu, click the sub menu [All programs], then click the submenu
[Accessories].
/
Select one option from two or more options that are separated by ―/‖. For example
―Addition/Deduction‖ means addition or deduction.
~
It means a range. For example, ―1~255‖ means the range from 1 to 255.
2. CLI conventions
Format
Description
Bold
Commands and keywords, for example, show version, appear in bold font.
Italic
Parameters for which you supply values are in italic font. For example, in the
show vlan vlan id command, you need to supply the actual value of vlan id.
3. Symbol conventions
Symbol
Explanation
Caution
The matters need attention during the operation and configuration, and they are
supplement to the operation description.
Perface
11
Note
Necessary explanations to the operation description.
Warning
The matters call for special attention. Incorrect operation might cause data loss
or damage to devices.
Product Documents
The documents of SICOM3448G industrial Ethernet switch include:
Name of Document
SICOM3448G Industrial Ethernet Switches
Hardware Installation Manual_V1.0.pdf
SICOM3448G Industrial Ethernet Switch Web
Operation Manual
Document Obtainment
Product documents can be obtained by:
 CD shipped with the device
 Kyland website: www.kyland.com
Product Introduction
12
1 Product Introduction
1.1 Overview
SICOM3448G includes a series of high-performance industrial Ethernet switches developed
by Kyland particularly for oil&gas and rail transportation industry. The switches support
MSTP/RSTP, DT-Ring, IEC62439-6 redundancy protocols, guaranteeing the reliable
operation of the system.
1.2 Software Features
SICOM3448 provides abundant software features, satisfying customers' various
requirements.
 Redundancy protocols: STP/RSTP, MSTP, DT-Ring and DRP.
 Multicast protocols: IGMP Snooping, and static multicast.
 Switching attributes: VLAN, PVLAN, GVRP, QoS, and ARP.
 Bandwidth management: port static aggregation, LACP, port rate limiting, and port storm
suppression.
 Security: user management, access management, SSH, SSL, TACACS+, RADIUS,
IEEE802.1X, and ACL.
 Synchronization protocols: SNTP.
 Device management: software update, configuration file upload/download, and log record
and upload.
 Device diagnosis: port mirroring, LLDP, link check, and loop protection.
 Alarm function: power alarm, port alarm, ring alarm, and IP/MAC address conflict alarm.
 Network management: management by CLI, Telnet, Web and Kyvision network
management software, DHCP, and SNMP v1/v2c/v3 network monitoring.
 ……
Switch Access
13
2 Switch Access
You can access the switch by:
 Console port
 Telnet/SSH
 Web browser
 Kyvision management software
Kyvision network management software is designed by Kyland. For details, refer to its user
manual.
2.1 View Types
When logging into the Command Line Interface (CLI) by the console port or Telnet, you can
enter different views or switch between views by using the following commands.
Table 1 View Types
View Prompt
View Type
View Function
Command for View Switching
SWITCH #
Privileged
mode
View recently used commands.
View software version.
View response information for ping
operation.
Upload/Download configuration file.
Restore default configuration.
Reboot switch.
Save current configuration.
Display current configuration.
Update software.
Input ―configure terminal‖ to
switch from privileged mode to
configuration mode.
Input ―exit‖ to return to the
general mode.
SWITCH(config)
#
Configurati
on mode
Configure all switch functions.
Input "exit" or "end" to return to
the Privileged mode.
When the switch is configured through the CLI, "?" can be used to get command help. In the
help information, there are different parameter description formats. For example, <1, 255>
Switch Access
14
means a number range; <xx:xx:xx:xx:xx:xx> means a MAC address; <word31> means the
string range is 1~31. In addition, ↑ and ↓ can be used to scroll through recently used
commands.
2.2 Switch Access by Console Port
You can access a switch by its console port and the hyper terminal of Windows OS or other
software that supports serial port connection, such as HTT3.3. The following example shows
how to use Hyper Terminal to access switch by console port.
1. Connect the 9-pin serial port of a PC to the console port of the switch with the DB9-RJ45
console cable.
2. Run the Hyper Terminal in Windows desktop. Click [Start] → [All Programs] →
[Accessories] → [Communications] → [Hyper Terminal], as shown in Figure 1.
Figure 1 Starting the Hyper Terminal
3. Create a new connection "Switch", as shown in Figure 2.
Switch Access
15
Figure 2 Creating a New Connection
4. Connect the communication port in use, as shown in Figure 3.
Figure 3 Selecting the Communication Port
Note:
To confirm the communication port in use, right-click [My Computer] and click [Property] →
[Hardware] → [Device Manager] → [Port].
Switch Access
16
5. Set port parameters (Bits per second: 115200, Data bits: 8, Parity: None, Stop bits: 1, and
Flow control: None), as shown in Figure 4.
Figure 4 Setting Port Parameters
6. Click <OK> button to enter the switch CLI. Input default user "admin‖, and password‖123‖
to enter the privileged mode. You can also input other created users and password, as
shown in Figure 5.
Switch Access
17
Figure 5 CLI
2.3 Switch Access by Telnet
The precondition for accessing a switch by Telnet is the normal communication between the
PC and the switch.
1. Enter "telnet IP address" in the Run dialog box, as shown in Figure 6. The default IP
address of a Kyland switch is 192.168.0.2.
Figure 6 Telnet Access
Switch Access
18
Note:
To confirm the switch IP address, please refer to ―5 IP Configuration‖ to learn how to obtain IP
address.
2. In the Telnet interface, input user "admin", and password "123" to log in to the switch. You
can also input other created users and password, as shown in Figure 7.
Figure 7 Telnet Interface
2.4 Switch Access by Web
The precondition for accessing a switch by Web is the normal communication between the
PC and the switch.
Note:
IE8.0 or a later version is recommended for the best Web display results.
1. Input "IP address" in the browser address bar. The login interface is displayed, as shown
in
Figure 8. Input the default user name "admin", password "123", and the Verification. Click
/