Interlogix Enterprise-class Gigabit L3 Network Switches (NS4702-24P-4X) User manual

NS4702-24P-4X Managed

Switch User Manual

P/N 1073388-EN • REV A • ISS 08FEB18

Copyright

©

2018 United Technologies Corporation.

Interlogix is part of UTC

Climate, Controls & Security, a unit of United Technologies

Corporation

Trademarks and patents

Trade names used in this document may be trademarks or registered trademarks of the

manufacturers or vendors of the respective products.

Manufacturer

Interlogix

2955 Red Hill Avenue, Costa Mesa, CA 92626

-5923, USA

Authorized EU manufacturing representative:

UTC Fire & Security B.V.

Kelvinstraat 7, 6003 DH Weert, The Netherlands

Version

This document applies to

NS4702-24P-4X.

FCC compliance

This device complies with part 15 of the FCC Rules. Operation is subject to the following

two conditions: (1) This device may not cause harmful interference, and (2) this device

must accept any interference received,

including interference that may cause undesired

operation.

FCC compliance

Class A:

This equipment has been tested and found to comply with the limits for a Class

A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to

provide

reasonable protection against harmful interference when the equipment is

operated in a commercial environment. This equipment generates, uses, and can radiate

radio frequency energy and, if not installed and used in accordance with the instruction

manual,

may cause harmful interference to radio communications. Operation of this

equipment in a residential area is likely to cause harmful interference in which case the

user will be required to correct the interference at his own expense.

Canada

This Class A

digital apparatus complies with CAN ICES-003 (A)/NMB-3 (A).

Cet appareil numérique de la classe A est conforme à la norme CAN ICES

-003

(A)/NMB

-3 (A).

ACMA compliance

Notice!

This is a Class A product. In a domestic environment this product may cause

radio interference in which case the user may be required to take adequate measures.

Certification

EU directives

This product and

- if applicable - the supplied accessories too are marked with "CE" and

comply therefore with the applicable

harmonized European standards listed under the

EMC Directive 2014/30/EU, the RoHS Directive 2011/65/EU.

2012/19

/EU (WEEE directive):

Products marked with this symbol cannot be disposed of

as unsorted municipal waste in the European Union. For proper

recycling, return this

product to your local supplier upon the purchase of equivalent new equipment, or

dispose of it at designated collection points. For more information see:

www.recyclethis.info.

Product warnings and

disclaimers

THESE PRODUCTS ARE

INTENDED FOR SALE TO AND INSTALLATION BY

QUALIFIED PROFESSIONALS. UTC FIRE & SECURITY CANNOT PROVIDE ANY

ASSURANCE THAT ANY PERSON OR ENTITY BUYING ITS PRODUCTS,

INCLUDING ANY “AUTHORIZED DEALER” OR “AUTHORIZED RESELLER”, IS

PROPERLY TRAINED OR EXPERIENCED

TO CORRECTLY INSTALL FIRE AND

SECURITY RELATED PRODUCTS

.

For more information on warranty disclaimers and product safety information, please

check

www.firesecurityproducts.com/policy/product-warning/ or scan the following code:

Contact information and

manuals

For contact information go to:

www.interlogix.com or www.firesecurityproducts.com.

To get translations for this and other product manuals go to:

www.firesecurityproducts.com

.

Content

Important information 3

Chapter 1 Introduction 4

Package contents 4

Product description 5

Product features 13

Product specifications 17

Chapter 2 Installation 20

Hardware description 20

Chapter 3 Switch management 29

Requirements 29

Management access overview 29

Administration console 30

Web management 32

SNMP-based network management 32

Smart discovery utility 33

Chapter 4 Web configuration 34

Main web page 35

System 36

DHCP server 63

UDLD 74

Simple Network Management Protocol (SNMP) 76

Port management 88

Link aggregation 97

VLAN 105

Spanning Tree Protocol (STP) 132

Multicast 149

Quality of Service (QoS) 174

Access Control Lists (ACL) 199

Authentication 212

Security 247

MAC address table 264

LLDP 268

Network diagnostics 282

Loop protection 286

RMON 288

Ring 297

Power over Ethernet (PoE) 310

Port identification 324

LCD 324

NS4702-24P-4X Managed Switch User Manual 1

Chapter 5 Switch operation 326

Address table 326

Learning 326

Forwarding and filtering 326

Store-and-forward 326

Auto-negotiation 327

Chapter 6 PoE overview 328

What is PoE? 328

PoE system architecture 328

Chapter 7 Troubleshooting 330

Appendix A Networking connection 331

Glossary 333

2 NS4702-24P-4X Managed Switch User Manual

Important information

Limitation of liability

To the maximum extent permitted by applicable law, in no event will UTCFS be liable

for any lost profits or business opportunities, loss of use, business interruption, loss of

data, or any other indirect, special, incidental, or consequential damages under any

theory of liability, whether based in contract, tort, negligence, product liability, or

otherwise. Because some jurisdictions do not allow the exclusion or limitation of liability

for consequential or incidental damages the preceding limitation may not apply to you.

In any event the total liability of UTCFS shall not exceed the purchase price of the

product. The foregoing limitation will apply to the maximum extent permitted by

applicable law, regardless of whether UTCFS has been advised of the possibility of

such damages and regardless of whether any remedy fails of its essential purpose.

Installation in accordance with this manual, applicable codes, and the instructions of the

authority having jurisdiction is mandatory.

While every precaution has been taken during the preparation of this manual to ensure

the accuracy of its contents, UTCFS assumes no responsibility for errors or omissions.

Advisory messages

Advisory messages alert you to conditions or practices that can cause unwanted

results. The advisory messages used in this document are shown and described below.

WARNING: Warning messages advise you of hazards that could result in injury or loss

of life. They tell you which actions to take or to avoid in order to prevent the injury or

loss of life.

Caution: Caution messages advise you of possible equipment damage. They tell you

which actions to take or to avoid in order to prevent damage.

Note: Note messages advise you of the possible loss of time or effort. They describe

how to avoid the loss. Notes are also used to point out important information that you

should read.

NS4702-24P-4X Managed Switch User Manual 3

Chapter 1

Introduction

The IFS NS4702-24P-4X 24-port 10/100/1000Mbps 802.3at PoE + 4-Port 10G SFP+

managed switch with hardware layer 3 IPv4/IPv6 static routing comes with a multi-port

gigabit ethernet switch, SFP fiber optic connectibility, and robust layer 2 features. The

description of this model is as follows:

 L2+ 24-port 10/100/1000Mbps 802.3at PoE

 + 4-port 10G shared SFP+

 Managed switch with hardware layer 3 IPv4/IPv6 static routing

Unless specified, the term “managed switch” mentioned in this user manual refers to

the NS4702-24P-4X.

Package contents

Open the box of the managed switch and carefully unpack it. The box should contain

the following items:

 The managed switch × 1

 RJ45 to RS232 cable x 1

 Rubber feet x 4

 Two rack-mounting brackets with attachment screws x 1

 Power cord x 1

 SFP dust-proof cap x 4

If any of these are missing or damaged, contact your dealer immediately. If possible,

retain the carton including the original packing materials for repacking the product in

case there is a need to return it to us for repair.

Note: User manuals and install guides are available for download from

www.interlogix.com.

4 NS4702-24P-4X Managed Switch User Manual

Chapter 1: Introduction

Product description

PoE+ managed switch with advanced L2+/L4 switching and security

The NS4702-24P-4X is a cost-optimized, 1.25U, Gigabit PoE+ Managed Switch with an

LCD Touch Screen featuring intelligent PoE functions to improve the availability of

critical business applications. The managed switch provides IPv6/IPv4 dual stack

management and a built-in L2+/L4 Gigabit switching engine along with 24

10/100/1000BASE-T ports featuring 30 W PoEat and four additional 10 gigabit SFP+

ports. With a total power budget of up to 400 W for different kinds of PoE applications,

the managed switch provides a quick, safe, and cost-effective PoE+ network solution

for small businesses and enterprises.

Smart and Intuitive LCD Control

The smart LCD PoE managed switch provides an intuitive touch panel on its front panel

that facilitates the Ethernet PoE PD (powered device) management that greatly

promotes management efficiency in large-scale networks such as enterprises, hotels,

shopping malls, government buildings, and other public areas. They also feature the

following special management and status functions:

• IP address, VLAN and QoS configuration

• PoE management and status

• Port management and status, and SFP information

• Troubleshooting: cable diagnostic and remote IP ping

• Maintenance: reboot, factory default and save configuration

NS4702-24P-4X Managed Switch User Manual 5

Chapter 1: Introduction

Built-in unique PoE functions for powered devices management

As a managed PoE switch for surveillance, wireless, and VoIP networks, the NS4702-

24P-4X features the following special PoE management functions:

• PD alive check

• Scheduled power recycling

• PoE schedule

• PoE usage monitoring

Intelligent powered device alive check

The managed switch can be configured to monitor connected PD status in real time via

a ping action. After the PD stops working and responding, the managed switch

resumes the PoE port power and puts the PD back to work. The managed switch

greatly enhances the network reliability through the PoE port resetting the PD’s power

source and reducing the administrator management burden.

6 NS4702-24P-4X Managed Switch User Manual

Chapter 1: Introduction

Scheduled power recycling

The managed switch permits each of the connected PoE IP cameras or PoE wireless

access points to reboot at a specified time each week. This reduces the chance of IP

camera or AP crashes resulting from buffer overflow.

PoE schedule for energy saving

Under the trend of energy saving worldwide and contributing to environmental

protection, the managed switch can effectively control the power supply in addition to

its capability of provideing high Watt power. The “PoE schedule” function helps you to

enable or disable PoE power feeding for each PoE port during specified time intervals,

and is a powerful function to help SMBs or enterprises save power and money. It also

increases security by powering off PDs that should not be in use during non-business

hours.

NS4702-24P-4X Managed Switch User Manual 7

Chapter 1: Introduction

PoE usage monitoring

Using the power usage chart in the web management interface, the managed switch

allows the administrator to monitor the status of the power usage of the connected PDs

in real time, thus enhancing the management efficiency of the facilities.

Cost-effective 10 Gbps uplink capacity

10G Ethernet is a big leap in the evolution of Ethernet. The four 10G SFP+ slots of the

managed switch support dual-speed 10GBASE-SR/LR or 1000BASE-SX/LX, meaning

the administrator has the flexibility to choose a suitable SFP/SFP+ transceiver

according to the transmission distance or the transmission speed required to extend the

network efficiently. This enables SMB networks to achieve the maximum performance

of 10Gbps in a cost-effective way since the 10GbE interface usually available in a layer

3 switch but layer 3 switch could be too expensive for SMBs.

Environment-friendly, variable fan design for silent operation

The managed switch features a 19-inch metal housing, a low noise design, and an

effective ventilation system. It supports smart fan technology that automatically controls

the speed of the built-in fan to reduce noise and maintain the temperature of the PoE

switch for optimal power output capability. The managed switch operates reliably,

stably, and quietly in any environment without affecting performance.

Solution for IPv6 networking

With the IPv6/IPv4 dual stack and other management functions with user-friendly

interfaces, the managed switch is the best choice for IP surveillance, VoIP, and

wireless service providers to deploy the IPv6 network. More importantly, they help

SMBs upgrade their network infrastructures to the IPv6 era without any monetary

investment.

8 NS4702-24P-4X Managed Switch User Manual

Chapter 1: Introduction

IPv4/IPv6 VLAN routing for secure and flexible management

To help customers stay on top of their businesses, the managed switch not only

provides ultra high transmission performance and excellent layer 2 technologies, but

also a IPv4/IPv6 VLAN routing feature that allows cross over of different VLANs and

different IP addresses for the purpose of having a highly secured, flexible management

and simpler networking application.

Robust layer 2 feature

The managed switch can be programmed for advanced switch management functions

such as dynamic port link aggregation, Q-in-Q VLAN, Multiple Spanning Tree Protocol

(MSTP), layer 2 to layer 4 QoS, bandwidth control, and IGMP / MLD snooping. The

managed switch allows the operation of a high-speed trunk combining multiple ports. It

consists of a maximum of 14 trunk groups with four ports for each group, and also

supports fail-over.

Powerful security

The managed switch offers a comprehensive layer 2 to layer 4 Access Control List

(ACL) for enforcing security to the edge. It can be used to restrict network access by

denying packets based on source and destination IP address, TCP/UDP ports, or

defined typical network applications. Its protection mechanism also comprises 802.1x

NS4702-24P-4X Managed Switch User Manual 9

Chapter 1: Introduction

port-based and MAC-based user and device authentication. With the private VLAN

function, communication between edge ports can be prevented to ensure user privacy.

Enhanced security and traffic control

The managed switch also provides DHCP snooping, IP source guard, and dynamic

ARP inspection functions to prevent IP snooping from attack and discard ARP packets

with invalid MAC addresses. The network administrator can now construct highly-

secure corporate networks using considerably less time and effort than before.

User-friendly secure management

For efficient management, the managed switch is equipped with console, web, and

SNMP management interfaces. With the built-in web-based management interface, the

managed switch offers an easy-to-use, platform-independent management and

configuration facility. The managed switch supports standard Simple Network

Management Protocol (SNMP) and can be managed by any management software

based on the standard SNMP v1 or v2 protocol. For reducing product learning time, the

managed switch offers Cisco-like command via Telnet or console port, and the

customer doesn’t need to learn new commands from these switches. Moreover, the

managed switch offers secure management remotely by supporting SSH, SSL, and

SNMP v3 connections where the packet content can be encrypted at each session.

Intelligent SFP diagnostic mechanism

The managed switch series supports a SFP-DDM (Digital Diagnostic Monitor) function

that can easily monitor real-time parameters of the SFP and SFP+ transceivers, such

as optical output power, optical input power, temperature, laser bias current, and

transceiver supply voltage.

10 NS4702-24P-4X Managed Switch User Manual

Chapter 1: Introduction

Applications

Layer 2+ VLAN static routing application

The managed switch features IEEE 802.3at PoE+ that combines up to 30 W of power

output per port, and a PoE budget of up to 400 W which can deploy up to 24 PoE PD

devices. It also features a built-in, robust IPv4/IPv6 layer 3 traffic static routing protocol

to ensure reliable routing between VLANs and network segments. The routing protocols

can be applied by VLAN interface with up to 32 routing entries.

NS4702-24P-4X Managed Switch User Manual 11

Chapter 1: Introduction

Multiple Spanning Tree Protocol with PoE IP office solution for SMBs and

workgroups

The managed switch features strong, rapid self-recovery capability to prevent

interruptions and external intrusions. It incorporates Multiple Spanning Tree Protocol

(802.1s MSTP) into the customer’s automation network to enhance system reliability

and uptime. Adopting the IEEE 802.3af/802.3at PoE standard, the managed switch can

directly connect with any IEEE 802.3at PoE end-nodes like PTZ (Pan, Tilt & Zoom)

network cameras and speed dome cameras. The managed switch can easily help

enterprises with the available network infrastructure to build wireless AP, IP camera,

and VoIP systems where power can be centrally controlled.

12 NS4702-24P-4X Managed Switch User Manual

Chapter 1: Introduction

Product features

Physical port

• 24-port 10/100/1000BASE-T gigabit RJ45 copper ports with 24-port IEEE802.3af/at

PoE+ injector.

• Four 10GBASE-SR/LR SFP+ slots, compatible with 1000BASE-SX/LX/BX SFP.

• RJ45 console interface for basic switch management and setup.

Power over Ethernet

• Complies with IEEE 802.3at Power over Ethernet Plus/end-span PSE.

• Backward compatible with IEEE 802.3af Power over Ethernet.

• Up to 24 ports of IEEE 802.3af/IEEE 802.3at devices powered.

• Supports PoE power up to 30 W for each PoE port.

• Auto detects powered device (PD).

• Circuit protection prevents power interference between ports.

• Remote power feeding up to 100 meters.

• PoE management:

• Total PoE power budget control

NS4702-24P-4X Managed Switch User Manual 13

Chapter 1: Introduction

• Per port PoE function enable/disable

• PoE admin-mode control

• PoE port power feeding priority

• Per PoE port power limitation

• PD classification detection

• Temperature threshold control

• PD alive check

• PoE schedule

Layer 2 features

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause

frame flow control (full-duplex).

• High performance of Store-and-Forward architecture and runt/CRC filtering

eliminates erroneous packets to optimize the network bandwidth.

Storm control support:

• Broadcast / Multicast / Unknown-Unicast

Supports VLAN

• IEEE 802.1Q tagged VLAN

• Up to 255 VLANs groups out of 4094 VLAN IDs

• Provider bridging (VLAN Q-in-Q) support (IEEE 802.1ad)

• Private VLAN Edge (PVE)

• Protocol-based VLAN

• MAC-based VLAN

• Voice VLAN

• Management VLAN

Supports STP

• STP, IEEE 802.1D Spanning Tree Protocol

• RSTP, IEEE 802.1w Rapid Spanning Tree Protocol

• MSTP, IEEE 802.1s Multiple Spanning Tree Protocol, spanning tree by VLAN

• BPDU Guard

Supports link aggregation

• IEEE 802.3ad Link Aggregation Control Protocol (LACP)

• Cisco ether-channel (static trunk)

• Maximum 14 trunk groups, up to four ports per trunk group

14 NS4702-24P-4X Managed Switch User Manual

Chapter 1: Introduction

• Up to 80Gbps bandwidth (full duplex mode).

Provides port mirror (many-to-1)

Port mirroring to monitor the incoming or outgoing traffic on a particular port

Loop protection to avoid broadcast loops

Layer 3 IP routing features

• Supports a maximum of 32 software static routes and route summarization.

Quality of Service

• Ingress shaper and egress rate limit per port bandwidth control

• Eight priority queues on all switch ports

• Traffic classification:

- IEEE 802.1p CoS

- TOS / DSCP / IP Precedence of IPv4/IPv6 packets

- IP TCP/UDP port number

- Typical network application

• Strict priority and Weighted Round Robin (WRR) CoS policies

• Supports QoS and In/Out bandwidth control on each port

• Traffic-policing policies on the switch port

• DSCP remarking

Multicast

• Supports IGMP snooping v1, v2, and v3

• Supports MLD snooping v1 and v2

• Querier mode support

• IGMP snooping port filtering

• MLD snooping port filtering

• Multicast VLAN Registration (MVR) support

Security

• Authentication

− IEEE 802.1x Port-Based / MAC-Based network access authentication

− Built-in RADIUS client to co-operate with the RADIUS servers

− TACACS+ login users access authentication

− RADIUS / TACACS+ users access authentication

• Access Control List (ACL)

NS4702-24P-4X Managed Switch User Manual 15

Chapter 1: Introduction

− IPv4 / IPv6 IP-based ACL

− MAC-based ACL

• Source MAC / IP address binding

• DHCP snooping to filter distrusted DHCP messages

• Dynamic ARP inspection discards ARP packets with invalid MAC addresses to IP

address binding.

• IP source guard prevents IP spoofing attacks.

• IP address access management to prevent unauthorized intruders.

Management

• IPv4 and IPv6 dual stack management

• Switch management interfaces:

− Console / Telnet Command Line Interface

− Web switch management

− SNMP v1, v2c, and v3 switch management

− SSH / SSL secure access

− 2.4-inch color LCD touch screen

• User privilege levels control

• Built-in Trivial File Transfer Protocol (TFTP) client

• System maintenance

- Firmware upload/download via HTTP / TFTP

- Dual images

- Reset button for system reboot or reset to factory default

• Four RMON groups (history, statistics, alarms, and events)

• IPv6 IP address / NTP / DNS management and ICMPv6

• BOOTP and DHCP for IP address assignment

• DHCP relay

• DHCP Option 82

• NTP (Network Time Protocol)

• Link Layer Discovery Protocol (LLDP) and LLDP-MED

• Smart discovery utility for deploy management

• Network diagnostic

− ICMPv6/ICMPv4 remote ping

− Cable diagnostic technology provides the mechanism to detect and report

potential cabling issues

16 NS4702-24P-4X Managed Switch User Manual

Chapter 1: Introduction

• SMTP/Syslog remote alarm

• SNMP trap for interface Link Up and Link Down notification

• System log

• Smart fan with speed control

Product specifications

Hardware Specification

s

Copper

Ports

24

10/ 100/1000BASE-T RJ45 auto-MDI/MDI-X ports

SFP

+ Slots

Four 10GBASE

-SR/LR SFP+ interfaces (Port-25 to Port-28)

Compatible with 1000BASE

-SX/LX/BX SFP transceiver

Console Port

1 x RS

-232 to RJ45 serial port (115200, 8, N, 1)

Switch Architecture

Store

-and-Forward

Switch

Fabric

128

Gbps / non-blocking

Throughput

95.23

Mpps @ 64 bytes

Address Table

16

K entries, automatic source address learning and aging

Share

d Data Buffer

32M bits

Flow Control

IEEE 802.3x

pause frame for full-duplex

Back pressure for

half-duplex

Jumbo Frame

10

K bytes

Reset Button

< 5 seconds: System reboot

>

5 seconds: Factory Default

LED

System

:

SYS (Green)

AC/PWR (Green)

Fan1/2/3 Alert (Red)

PoE PWR Alert (Red)

PoE Ethernet Interfaces

(Port-1 to Port-24):

PoE In-use (Orange)

Ethernet Interfaces

(Port-1 to Port-24):

1000 LNK/ACT (Green), 10/100 LNK/ACT (Orange)

1/10G SFP+ Interfaces

(Port-25 to Port-28):

1G (Green), 10G (Orange)

Dimensions (W x D x H)

440 x

300 x 56 mm, 1.25U height

Weight

4.64

kg

Power

Consumption

Max.

488 W / 1665.13 BTU

Power Requirement

AC

100~240 V, 50/60 Hz, 7 A

ESD Protection

6K VDC

NS4702-24P-4X Managed Switch User Manual 17

Chapter 1: Introduction

Fan

Three smart fans

Power over Ethernet

PoE Standard

IEEE 8

02.3af/802.3at PoE PSE

PoE Power Supply Type

End

-span

PoE Power Output

Per

port 54 VDC, 30 W (max.)

Power Pin Assignment

End

-span: 1/2(-), 3/6(+)

PoE Power Budget

400

W (max.)

PoE Ability PD @

7 watts

24

units

PoE Ability PD @

15 watts

24

units

PoE Ability PD @

30 watts

13

units

Layer 2

Management Functions

Port

Configuration

Po

rt disable / enable

Auto

-negotiation 10/100/1000Mbps full and half duplex mode selection

Flow

control disable/enable

Port Status

Display each port’s

speed duplex mode, link status, flow control status, auto-

negotiation status, trunk

status

Port Mirroring

TX / RX / both

Many

-to-1 monitor

VLAN

802.1Q tagged

-based VLAN

Q

-in-Q tunneling

Private VLAN

Edge (PVE)

MAC

-based VLAN

Protocol

-based VLAN

Voice VLAN

MVR (Multicast VLAN Registration)

U

p to 255 VLAN groups, out of 4095 VLAN IDs

Link Aggregation

IEEE

802.3ad LACP/static trunk

1

4 groups with four ports per trunk

Spanning Tree Protocol

IEEE 802.1D Spanning Tree Protocol

(STP)

IEEE 802.1w Rapid Spanning Tree Protocol

(RSTP)

IEEE 802.1s Multiple Spanning Tree Protocol

(MSTP)

QoS

Traffic classification based,

strict priority and WRR

8

-level priority for switching

–

Port number

–

802.1p priority

–

802.1Q VLAN tag

–

DSCP/ToS field in IP packet

IGMP Snooping

IGMP (v1/v2

/v3) snooping, up to 255 multicast groups

IGMP

querier mode support

MLD Snooping

MLD (v1/v2)

snooping, up to 255 multicast groups

18 NS4702-24P-4X Managed Switch User Manual

Page is loading ...

Interlogix Enterprise-class Gigabit L3 Network Switches (NS4702-24P-4X) User manual

Interlogix Enterprise-class Gigabit L3 Network Switches (NS4702-24P-4X) User manual

Related papers

Other documents