VigorSwitch FX2120 - Network switch Draytek - Free user manual and instructions
Find the device manual for free VigorSwitch FX2120 Draytek in PDF.
| Product Type | Network Switch |
| Model | VigorSwitch FX2120 |
| Brand | Draytek |
| Port Configuration | 12 x 10/100/1000 Mbps Gigabit Ethernet ports, 2 x SFP slots |
| Switching Capacity | 24 Gbps |
| MAC Address Table | 8K entries |
| VLAN Support | Yes, up to 4K VLAN groups |
| Power Supply | 100-240V AC, 50-60 Hz |
| Power Consumption | 15W typical |
| Dimensions (W x D x H) | 330 x 230 x 44 mm (1U) |
| Weight | 2.5 kg |
| Operating Temperature | 0°C to 40°C |
| Mounting | Desktop or rack-mountable (brackets included) |
| LED Indicators | Power, Link/Act, Speed |
| Cooling | Fanless for silent operation |
| Management | Web interface, CLI, SNMP v1/v2c/v3 |
| Maintenance & Cleaning | Wipe with a dry cloth; do not use liquids or solvents. |
| Safety Precautions | Use only provided power cord; avoid moisture; keep vents clear. |
| Spare Parts & Repairability | No user-serviceable parts; contact Draytek support or authorized service. |
| Warranty | 2 years limited warranty |
| Certifications | CE, FCC |
Frequently Asked Questions - VigorSwitch FX2120 Draytek
User questions about VigorSwitch FX2120 Draytek
0 question about this device. Answer the ones you know or ask your own.
Ask a new question about this device
Download the instructions for your Network switch in PDF format for free! Find your manual VigorSwitch FX2120 - Draytek and take your electronic device back in hand. On this page are published all the documents necessary for the use of your device. VigorSwitch FX2120 by Draytek.
USER MANUAL VigorSwitch FX2120 Draytek
natural_image
Front view of a black ESP108 network switch device with green indicator lights and ports, set against a red background (no readable text or symbols on the device body beyond branding)User's Guide
V1.3
VigorSwitch FX2120
L2+ Managed Switch
User's Guide
Version: 1.3
Firmware Version: V3.7.4
Date: September 4, 2023
Intellectual Property Rights (IPR) Information
Copyrights
© All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.
Trademarks
The following trademarks are used in this document:
- Microsoft is a registered trademark of Microsoft Corp.
Windows 8, 10, 11 and Explorer are trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Inc.
Other products may be trademarks or registered trademarks of their respective manufacturers.
Safety Instructions and Approval
Safety Instructions
- Read the installation guide thoroughly before you set up the device.
The switch is a complicated electronic unit that may be repaired only be authorized and qualified personnel. Do not try to open or repair the switch yourself.
Do not place the switch in a damp or humid place, e.g. a bathroom.
The switch should be used in a sheltered area, within a temperature range of +5 to +40 Celsius. - Do not expose the switch to direct sunlight or other heat sources. The housing and electronic components may be damaged by direct sunlight or heat sources.
- Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards.
Do not power off the device when saving configurations or firmware upgrades. It may damage the data in a flash. Please disconnect the Internet connection on the device before powering it off when a TR-069/ ACS server manages the device. - Keep the package out of reach of children.
- When you want to dispose of the modem, please follow local regulations on conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the switch will be free from any defects in workmanship or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, we will, at our discretion, repair or replace the defective products or components, without charge for either parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. The warranty does not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the usability of the product will not be covered by the warranty. We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.
Be a Registered Owner
Web registration is preferred. You can register your Vigor router via https://myvigor.draytek.com.
Firmware & Tools Updates
Due to the continuous evolution of DrayTek technology, all modems will be regularly upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents. https://www.draytek.com
Table of Contents
Chapter I Introduction......IX
I-1 Introduction....1
I-1-1 Key Features....1
I-1-2 LED Indicators and Connectors....2
I-2 Installation....3
I-2-1 Network Connection....3
I-2-2 Rack-Mounted Installation....4
I-2-3 Typical Applications ....4
I-2-4 Configuring the Management Agent of Switch....8
I-2-5 IP Address Assignment....8
I-3 Accessing Web Page of VigorSwitch....13
I-4 Dashboard 14
Chapter II Configuration 15
II-1 General Setup.... 16
II-1-1 Mirroring.... 16
II-1-2 Link Aggregation.... 17
II-1-3 Multicast 20
II-1-4 STP 21
II-1-5 QoS 23
II-1-6 Jumbo Frame 26
II-1-7 LLDP 27
II-2 VLAN Setup.... 29
II-2-1 Existion VLAN 29
II-2-1-1 Default VLAN 29
II-2-1-2 Voice VLAN 30
II-2-1-3 Surveillance VLAN.... 32
II-2-2 MAC/Protocol VLAN Group 34
II-2-2-1 MAC Group 34
II-2-2-2 Protocol Group 36
II-2-3 GVRP 38
II-3 MAC Address Table 39
II-4 L3 Network 41
II-4-1 IP Network 41
II-4-2 Bind IP to MAC 43
II-4-2-1 MAC-IP Binding List.... 43
II-4-2-2 DHCP Table.... 44
II-4-3 VLAN Routing.... 45
II-5 Port Setup 47
II-5-1 General 47
II-5-2 VLAN Interface 49
II-5-3 GVRP 53
II-5-4 Multicast 55
II-5-5 STP 57
II-5-6 QoS....60
II-6 Multicast....63
II-6-1 IGMP Snooping....63
II-6-1-1 IGMP Snooping 64
II-6-1-2 VLAN Setting....64
II-6-1-3 Group Table.... 67
II-6-1-4 Filtering Profile....67
II-6-2 MVR 69
II-6-2-1 Port Setting....71
II-6-2-2 Static Group....72
II-6-3 MLD Snooping 74
II-6-3-1 MLD Snooping....75
II-6-3-2 VLAN Setting 76
II-6-3-3 Group Table....78
II-6-3-4 Filtering Profile....79
II-6-4 MLD Snooping Statistics....81
II-7 ONVIF Surveillance 82
II-7-1 Topology 82
II-7-2 Snapshot Stream 86
II-7-3 Device Maintenance 87
II-8 RADIUS/TACACS+ 91
II-8-1 RADIUS....91
II-8-2 TACACS+ 93
Chapter III Security 95
III-1 802.1x/MAC Authentication 96
III-1-1 Authentication Settings 96
III-1-2 Local/MAC Account 99
III-1-3 Authentication Hosts 100
III-2 Access Control List....102
III-2-1 Access Control List 102
III-1-2 Apply to Port 111
III-3 IP Source Guard 113
III-4 Port Security 115
III-5 Storm Control....117
III-6 DoS....119
III-6-1 Properties.... 119
III-6-2 Port Setting 121
III-7 Dynamic ARP Inspection 122
III-7-1 Properties 122
III-7-2 Statistics....123
III-8 DHCP Snooping....124
III-8-1 DHCP Snooping 124
III-8-2 Option82....125
III-8-3 Statistics....127
III-9 IP Conflict Prevention....128
III-10 Loop Protection 133
III-11 Port Recovery....135
Chapter IV Utilities.... 137
IV-1 Device Check 138
IV-2 Ping Test....139
IV-3 Fan Test....140
IV-4 SFP Vendor Info 141
IV-5 sFlow....142
Chapter V Monitoring....145
V-1 Log Center 146
V-1-1 System Log Information....146
V-1-2 System Log Settings.... 147
V-1-2-1 Local 147
V-1-2-2 Remote....149
V-2 Bandwidth Utilization.... 151
V-3 DHCP Table 152
V-4 Routing Table 153
V-5 CLI Sessions....154
V-6 LLDP Status....155
V-6-1 General Statistics.... 155
V-6-2 LLDP Device 156
V-6-2-1 Local 156
V-6-2-2 Remote....157
V-6-3 LLDP Overloading 158
V-7 GVRP Statistics 159
V-8 MLD Snooping Statistics 160
V-9 STP Statistics 161
V-10 Dynamic ARP Statistics 162
V-10 DHCP Snooping 163
V-10 Port Statistics 164
Chapter VI System Maintenance....165
VI-1 General....166
VI-1-1 Device Info 166
VI-1-2 Time 167
VI-1-3 Configuration....169
VI-1-4 Firmware 170
VI-2 Access Management 171
VI-2-1 LAN Access 171
VI-2-2 Management Authentication & Profile 173
VI-2-3 TR-069....176
VI-2-4 OpenVPN 178
VI-2-5 Webhook 179
VI-2-6 Account & Password....180
VI-3 LLDP....182
VI-3-1 LLDP Port Setting 182
VI-3-2 LLDP-MED Setting 184
VI-3-3 LLDP Statistics 187
VI-4 SNMP 188
VI-4-1 View....188
VI-4-2 Group....190
VI-4-3 Community 192
VI-4-4 User 194
VI-4-5 Engine ID 196
VI-4-6 Trap Notification 198
VI-5 Mail Server....201
VI-6 System Reboot 205
Chapter VII Troubleshooting....207
VII-1 Backing to Factory Default Setting....208
VII-1-1 Software Reset 208
VII-1-2 Hardware Reset.... 209
VII-2 Contacting DrayTek 210
Appendix Telnet Commands....211
A-1 Accessing Telnet of Vigor Switch 212
A-2 Available Commands 214
A-2-1 Clear Configuration.... 214
A-2-2 Clock Configuration 222
A-2-3 Configure Configuration 223
A-2-4 Copy Configuration....327
A-2-5 Delete Configuration 327
A-2-6 Disable Configuration....328
A-2-7 End Configuration 328
A-2-8 Exit Configuration 329
A-2-9 Hardware-Monitor Configuration.... 329
A-2-10 Ping Configuration....329
A-2-11 Reboot Configuration....330
A-2-12 Renew Configuration.... 330
A-2-13 Restore-defaults Configuration 330
A-2-14 Save Configuration 331
A-2-15 Show Configuration.... 331
A-2-16 SSL Configuration 332
A-2-17 Terminal Configuration.... 333
A-2-18 Traceroute Configuration 333
A-2-19 UDLD Configuration 334
Chapter I Introduction
natural_image
Simple icon of a browser window with three red dots, no text or symbols presentI-1 Introduction
This is a generic International version of the user guide. Specification, compatibility and features vary by region. For specific user guides suitable for your region or product, please contact local distributor.
Thank you for purchasing VigorSwitch.
I-1-1 Key Features
Before you use the Vigor modem, please get acquainted with the LED indicators and connectors first.
Below shows key features of this device:
QoS
The switch offers powerful QoS function. This function supports 802.1p VLAN tag priority and DSCP on Layer 3 of network framework.
VLAN
Support Port-based VLAN and IEEE802.1Q Tag VLAN. Support 24 active VLANs and VLAN ID 1\~4094.
Port Trunking
Allows one or more links to be aggregated together to form a Link Aggregation Group by the static setting.
Power Saving
The Power saving using the IEEE 802.3az, Energy-Efficient Ethernet to detect the client idle and cable length automatically and provides the different power. It could efficient to save the switch power and reduce the power consumption.
I-1-2 LED Indicators and Connectors
| LED | Status Explanation | |
| Monitor | On (Red) An alert for system failure due to overheating or wrong voltage. | |
| Blinking The system is (TBD) | ||
| Off The device is in normal condition. | ||
| SYS | On (Green) The switch finishes system booting and the system is ready. | |
| Blinking (Green) | The switch is powered on and starts system booting. | |
| Off The power is off or the system is not ready / malfunctioning. | ||
| PWR | On The device is powered on. | |
| Off The device is powered off or failed. | ||
| Port 1 ~ 12 SFP LNK/ACT | On (Blue) The device is connected with 10Gbps. | |
| On (Green) The device is connected with 1000Mbps. | ||
| Blinking The system is sending or receiving data through the port. | ||
| Off | The port is disconnected or the link is failed. | |
| Interface Description | ||
| RST | Factory reset button | |
| Press it to reboot the system. (<5 seconds)Press it to reset the system with factory default settings. (5~20 seconds) | ||
| Port 1 ~ 12 | Port 1 to Port 12 can be used for fiber connection. | |
| Console Used to perform telnet command control. | ||
I-2 Installation
Before starting to configure the switch, you have to connect your devices correctly.
Note:
For the sake of personal safety, only trained and qualified personnel should install this device.
I-2-1 Network Connection
- Insert the connector into the slot (port 1\~12 of this switch).
• Pull the release latch to remove it.
I-2-2 Rack-Mounted Installation
The switch can be installed easily by using rack mount kit.
-
Attach the brackets to the chassis of a 19-inch rack. The second bracket attaches the other side of the chassis as above procedure.
-
After the bracket installation, the VigorSwitch's chassis can be installed in a rack by using four screws for each side of the rack.
natural_image
Two isometric views of a 3D L-shaped metal bracket with eight circular holes (no text or symbols)
I-2-3 Typical Applications
The VigorSwitch implements 12 Gigabit Ethernet TP ports with auto MDIX and four slots for the removable module supporting comprehensive fiber types of connection, including LC and BiDi-LC SFP modules. The switch is suitable for the following applications:
Case 1: All switch ports are in the same local area network.
Every port can access each other. (*The switch image is sample only.)
flowchart
graph TD
A["Server 1"] -->|Ethernet Port| B["Client 1"]
C["Server 2"] -->|Ethernet Port| D["Client 2"]
E["Server 3"] -->|Ethernet Port| F["Client 3"]
G["Server 4"] -->|Ethernet Port| H["Client 4"]
I["Server 5"] -->|Ethernet Port| J["Client 5"]
If VLAN is enabled and configured, each node in the network that can communicate each other directly is bounded in the same VLAN area.
Here VLAN area is defined by what VLAN you are using. The switch supports both port-based VLAN and tag-based VLAN. They are different in practical deployment, especially in physical location. The following diagram shows how it works and what the difference they are.
Case 2: Port-based VLAN -1 (*The switch image is sample only.)
flowchart
graph TD
A["Server"] --> B["VLAN1"]
A --> C["VLAN2"]
A --> D["VLAN3"]
A --> E["VLAN4"]
B --> F["Computer 1"]
B --> G["Computer 2"]
C --> H["Computer 3"]
C --> I["Computer 4"]
D --> J["Computer 5"]
D --> K["Computer 6"]
E --> L["Computer 7"]
- The same VLAN members could not be in different switches.
• Every VLAN members could not access VLAN members each other. - The switch manager has to assign different names for each VLAN groups at one switch.
Case 3: Port-based VLAN - 2
flowchart
graph TD
A["Network Port 1"] --> B["VLAN1"]
A --> C["VLAN2"]
A --> D["VLAN3"]
A --> E["VLAN4"]
B --> F["Computer 1"]
B --> G["Computer 2"]
C --> H["Computer 1"]
C --> I["Computer 2"]
D --> J["Computer 1"]
D --> K["Computer 2"]
E --> L["Computer 1"]
E --> M["Computer 2"]
• VLAN1 members could not access VLAN2, VLAN3 and VLAN4 members.
- VLAN2 members could not access VLAN1 and VLAN3 members, but they could access VLAN4 members.
• VLAN3 members could not access VLAN1, VLAN2 and VLAN4.
- VLAN4 members could not access VLAN1 and VLAN3 members, but they could access VLAN2 members.
Case 4: The same VLAN members can be at different switches with the same VID
flowchart
graph TD
A["Router 1"] --> B["VLAN1"]
C["Router 2"] --> D["VLAN2"]
E["Router 3"] --> F["VLAN3"]
B --> C
D --> E
F --> C
Case 5: Desktop Installation
-
Install the switch on a level surface that can support the weight of the unit and the relevant components.
-
Plug the switch with the female end of the provided power cord and plug the male end to the power outlet.
Case 6: Central Site/Remote site application is used in carrier or ISP
flowchart
graph TD
A["Central Site"] --> B["Converter Chassis"]
A --> C["Fiber Optic"]
A --> D["mm or sm Fiber"]
A --> E["Managed Media Converter"]
A --> F["Copper Twisted-pair"]
F --> G["Computer"]
F --> H["Computer"]
F --> I["Computer"]
F --> J["Computer"]
A --> K["Fiber Optic"]
K --> L["Computer"]
style A fill:#f9f,stroke:#333
style B fill:#ccf,stroke:#333
style C fill:#cfc,stroke:#333
style D fill:#fcc,stroke:#333
style E fill:#cff,stroke:#333
style F fill:#ffc,stroke:#333
style G fill:#cfc,stroke:#333
style H fill:#cfc,stroke:#333
style I fill:#cfc,stroke:#333
style J fill:#cfc,stroke:#333
Case 7: Peer-to-peer application is used in two remote offices
flowchart
graph TD
A["Server"] --> B["Financial"]
A --> C["MIS"]
B --> D["Computer 1"]
B --> E["Computer 2"]
B --> F["Computer 3"]
C --> G["Computer 4"]
C --> H["Computer 5"]
C --> I["Computer 6"]
Case 8: Office network
I-2-4 Configuring the Management Agent of Switch
Users can monitor and configure the switch through the following procedures.
There are several ways to configure and monitor the switch, including Web-UI and SNMP.
VigorSwitch, for example:
IP Address: 192.168.1.224
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.1.254
flowchart
graph LR
A["Assign a reasonable IP address, for example: IP Address: 192.168.1.100<br>Subnet Mask: 255.255.255.0<br>Default Gateway: 192.168.1.254"] --> B["Ethernet LAN"]
I-2-5 IP Address Assignment
For IP address configuration, there are three parameters needed to be filled in. They are IP address, Subnet Mask, Default Gateway and DNS.
IP address:
The address of the network device in the network is used for internetworking communication. Its address structure looks is shown below. It is “classful” because it is split into predefined address classes or categories.
Each class has its own network range between the network identifier and host identifier in the 32 bits address. Each IP address comprises two parts: network identifier (address) and host identifier (address). The former indicates the network where the addressed host resides, and the latter indicates the individual host in the network which the address of host refers to. And the host identifier must be unique in the same LAN. Here the term of IP address we used is version 4, known as IPv4.
32 bits
With the classful addressing, it divides IP address into three classes, class A, class B and class C. The rest of IP addresses are for multicast and broadcast. The bit length of the network prefix is the same as that of the subnet mask and is denoted as IP address/X, for example, 192.168.1.0/24. Each class has its address range described below.
Class A:
Address is less than 126.255.255.255. There are a total of 126 networks can be defined because the address 0.0.0.0 is reserved for default route and 127.0.0.0/8 is reserved for loopback function.
Class B:
IP address range between 128.0.0.0 and 191.255.255.255. Each class B network has a 16-bit network prefix followed 16-bit host address. There are 16,384 (2^14)/16 networks able to be defined with a maximum of 65534 (2^16 -2) hosts per network.
Class C:
IP address range between 192.0.0.0 and 223.255.255.255. Each class C network has a 24-bit network prefix followed 8-bit host address. There are 2,097,152 (2^21)/24 networks able to be defined with a maximum of 254 (2^8 -2) hosts per network.
Bit#0123
23 24 31
| 110 |
Network address
Host address
Class D and E:
Class D is a class with first 4 MSB (Most significance bit) set to 1-1-1-0 and is used for IP Multicast. See also RFC 1112. Class E is a class with first 4 MSB set to 1-1-1-1 and is used for IP broadcast.
According to IANA (Internet Assigned Numbers Authority), there are three specific IP address blocks reserved and able to be used for extending internal network. We call it Private IP address and list below:
| Class A 10.0.0.0 --- 10.255.255.255 |
| Class B 172.16.0.0 --- 172.31.255.255 |
| Class C 192.168.0.0 --- 192.168.255.255 |
Please refer to RFC 1597 and RFC 1466 for more information.
Subnet mask:
It means the sub-division of a class-based network or a CIDR block. The subnet is used to determine how to split an IP address to the network prefix and the host address in bitwise basis. It is designed to utilize IP address more efficiently and ease to manage IP network.
For a class B network, 128.1.2.3, it may have a subnet mask 255.255.0.0 in default, in which the first two bytes is with all 1s. This means more than 60 thousands of nodes in flat IP address will be at the same network. It's too large to manage practically. Now if we divide it into smaller network by extending network prefix from 16 bits to, say 24 bits, that's using its third byte to subnet this class B network. Now it has a subnet mask 255.255.255.0, in which each bit of the first three bytes is 1. It's now clear that the first two bytes is used to identify the class B network, the third byte is used to identify the subnet within this class B network and, of course, the last byte is the host number.
Not all IP address is available in the sub-netted network. Two special addresses are reserved. They are the addresses with all zero's and all one's host number. For example, an IP address 128.1.2.128, what IP address reserved will be looked like? All 0s mean the network itself, and all 1s mean IP broadcast.
In this diagram, you can see the subnet mask with 25-bit long, 255.255.255.128, contains 126 members in the sub-netted network. Another is that the length of network prefix equals the number of the bit with 1s in that subnet mask. With this, you can easily count the number of IP addresses matched. The following table shows the result.
| Prefix Length No. of IP matched No. of Addressable IP | ||
| /32 | 1 | |
| /31 | 2 | |
| /30 | 4 | |
| /29 | 8 | |
| /28 | 16 | |
| /27 | 32 | |
| /26 | 64 | |
| /25 | 128 | |
| /24 | 256 | |
| /23 | 512 | |
| /22 | 1024 | 1022 |
| /21 | 2048 | 2046 |
| /20 | 4096 | 4094 |
| /19 | 8192 | 8190 |
| /18 | 16384 | 16382 |
| /17 | 32768 | 32766 |
| /16 | 65536 | 65534 |
According to the scheme above, a subnet mask 255.255.255.0 will partition a network with the class C. It means there will have a maximum of 254 effective nodes existed in this sub-netted network and is considered a physical network in an autonomous network. So it owns a network IP address which may looks like 168.1.2.0.
With the subnet mask, a bigger network can be cut into small pieces of network. If we want to have more than two independent networks in a worknet, a partition to the network must be performed. In this case, subnet mask must be applied.
For different network applications, the subnet mask may look like 255.255.255.240. This means it is a small network accommodating a maximum of 15 nodes in the network.
For assigning an IP address to the switch, you just have to check what the IP address of the network will be connected with the switch. Use the same network address and append your host address to it.
- First, IP Address: as shown above, enter "192.168.1.224", for instance. For sure, an IP address such as 192.168.1.x must be set on your PC.
- Second, Subnet Mask: as shown above, enter "255.255.255.0". Choose a subnet mask suitable for your network.
Note:
The DHCP Setting is enabled in default. Therefore, if a DHCP server presented on network connected to the switch, check before accessing your switch is essential.
I-3 Accessing Web Page of VigorSwitch
- Open any browser (e.g., Firefox) and type "192.168.1.224" as URL.
- Please enter "admin/admin" as the Username/Password and click Login.
- Now, the Main Screen will appear.
i Info:
The DHCP Setting is enabled in default. Therefore, if a DHCP server presented on network connected to VigorSwitch, checking before accessing VigorSwitch is essential.
I-4 Dashboard
Click Dashboard from the main menu on the left side of the main page.
A web page with default selections will be displayed on the screen. Refer to the following figure:
Chapter II Configuration
natural_image
Red gear icon enclosed in a circular arrow, no text or symbols presentII-1 General Setup
II-1-1 Mirroring
This section provides ability to mirror packets coming in or going out on any port to a destination port. Through the packet duplication in the destination port, this feature is convenient for system administrator to monitor / understand the traffic operation.
Available settings are explained as follows:
| Item | Description |
| Enabled | Enable / Disable - Click the toggle to enable / disable this function. - means "Enable". - means "Disable". |
| Destination Port Specify the port where you wish to observe the mirrored packets. | |
| Operate as Normal Port | Enable / Disable - Click the toggle to enable / disable this function. - means "Enable". - means "Disable". |
| Rx/Tx Source Mirrored Port | Select the port(s) which you wish to mirror the traffic, Rx for mirror the packets into the port, Tx for mirror the packets going out from the port. |
| Option |  - Clear current settings and return to factory default settings. |
After finishing this web page configuration, please click OK to save the settings.
II-1-2 Link Aggregation
LAG means Link Aggregation Group which groups some physical ports together to make a single high-bandwidth data path. Thus it can implement traffic load sharing among the member ports in a group to enhance the connection reliability.
Available settings are explained as follows:
| Item | Description |
| Link Aggregation | |
| LAG Load Balance Algorithm | Select your Load balance algorithm.MAC address- Aggregated group will balance the traffic based on different MAC addresses. Therefore, the packets from different MAC addresses will be sent to different links.IP/Mac Address- Aggregated group will balance the traffic based on MAC addresses and IP addresses. Therefore, the packets from same MAC addresses but different IP addresses will be sent to different links. |
| LACP | Enable / Disable- Click the toggle to enable / disable this function. - means “Enable”. - means “Disable”. |
| LACP System Priority | The priority is used to determine which switch (local or remote) on the LAG connection is able to decide LACP activities. The lower the number is, the higher the priority for VigorSwitch will be. Therefore, the switch with the highest system priority (e.g., 1) can make decisions about which ports actively participate in LAG at a given time. |
| +Add Link Aggregation | Click to open the setting page of creating Link Aggregation. |
To add a link aggregation, click the "+Add Link Aggregation" to open the edit page.
Available settings are explained as follows:
| Item | Description |
| Add/Edit Link Aggregation | |
| Show/Hide Advanced Mode | Click to switch different modes. |
| Port Select the GE port for applying the link aggregation configuration. | |
| Aggregation Type Specify the type for LAG. | |
| Static - The static aggregated port sends packets over active member without detecting or negotiating with remote aggregated port.LACP - The LACP aggregated ports place member into active only after negotiated with remote aggregated port for best reliability. | |
| Port Enable | Enable / Disable - Click the toggle to enable / disable this function.- means "Enable".- means "Disable". |
| Port Speed Port speed capabilities:1000M: Force speed with 1000M ability.10G: Force speed with 10G ability.Configure the speed to match fiber module speed. | |
| Flow Control | Enable / Disable - Click the toggle to enable / disable this function.- means "Enable".- means "Disable".A concentration of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and frame losses.Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port. The switch uses IEEE802.3x flow control in full duplex mode and backpressure flow control in halfduplex mode. IEEE802.3x flow control is used in full duplex mode to send a pause signal to the sending port, causing it to temporarily stop sending signals when the receiving port memory buffers fill. Back Pressure flow control is typically used in half duplex mode to send a "collision" signal to the sending port (mimicking a state of packet collision) causing the sending port to temporarily stop sending signals and resend later. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings. The new link aggregation group will be shown on the page.
II-1-3 Multicast
For the multicast packets, this page allows the administrator to choose actions for processing the unknown multicast packets and for handling known packets with MAC address, IP address and VLAN ID.
Available settings are explained as follows:
| Item | Description |
| Unknown Multicast Packets Action | Select an action for switch to handle with unknown multicast packet.Drop - Drop the unknown multicast data.Flood - Flood the unknown multicast data.Forward to Router Port - Forward the unknown multicast data to router port. |
| IPv4/IPv6 Packets Forward Method | Set the IPv4/IPv6 multicast forward method.Dst. MAC & VID - Forward using destination multicast MAC address and VLAN IDs.Dst. IP & VID - Forward using destination multicast IP address and VLAN ID. |
After finishing this web page configuration, please click OK to save the settings.
II-1-4 STP
The Spanning Tree Protocol (STP) is a network protocol that ensures a loop-free topology for any bridged Ethernet local area network.
Bridge Protocol Data Units (BPDUs) are frames that contain information about the Spanning Tree Protocol (STP). Switches send BPDUs using a unique MAC address from its origin port and a multicast address as destination MAC (01:80:C2:00:00:00, or 01:00:0C:CC:CC:CD for Per VLAN Spanning Tree).
For STP algorithms to function, the switches need to share information about themselves and their connections. What they share are bridge protocol data units (BPDUs).
BPDUs are sent out as multicast frames to which only other layer 2 switches or bridges are listening. If any loops (multiple possible paths between switches) are found in the network topology, the switches will co-operate to disable a port or ports to ensure that there are no loops; that is, from one device to any other device in the layer 2 network, only one path can be taken.
Available settings are explained as follows:
| Item | Description |
| Show / Hide Advanced Mode | Click to display or hide the advanced settings. |
| STP | |
| Enable | Enable / Disable - Click the toggle to enable / disable this function. ^ - means “Enable”. ^ - means “Disable”. |
| STP Mode Set the operating mode of Spanning Tree (STP).STP - Enable the Spanning Tree (STP) operation.RSTP - Enable the Rapid Spanning Tree (RSTP) operation.MSTP - Enable the Multiple Spanning Tree Protocol (MSTP) operation. | |
| BPDU Handling Specify the BPDU forward method when the STP is disabled.Filtering - Filter the BPDU when STP is disabled.Flooding - Flood the BPDU when STP is disabled. | |
| Path Cost Method Specify the path cost method. | |
| Long - Specifies that the default port path costs are within the range: 1~200,000,000.Short - Specifies that the default port path costs are within the range: 1~65,535. | |
| Bridge Setting - Negotiate with other VigorSwitch for determining the bridge switch. | |
| Priority | Specify the bridge priority. The valid range is from 0 to 61440, and the value should be the multiple of 4096. It ensures the probability that the switch is selected as the root bridge, and the lower value has the higher priority for the switch to be selected as the root bridge of the topology. |
| Forward Delay Specify the STP forward delay time, which is the amount of time that a port remains in the Listening and Learning states before it enters the Forwarding state. Its valid range is from 4 to 30 seconds. | |
| Max. Age Specify the time interval in seconds for a switch to wait the configuration messages, without attempting to redefine its own configuration. | |
| Tx Hold Count Specify the tx-hold-count used to limit the maximum numbers of packets transmission per second. The valid range is from 1 to 10. | |
| Hello Time Specify the STP hello time in second to broadcast its hello message to other bridge by Designated Ports. Its valid range is from 1 to 10 seconds. | |
| MST Instance & Port Setting | It appears if the Show Advanced Mode link is selected.MST Instance allows traffic of different VLAN to be mapped into different MST Instances. VigorSwitch supports up to 16 independent MST instances (0~15) with which the VLAN can be associated.Bridge Identifier - Displays the priority of MST instance number + MAC address of the switch.Designated Root Bridge - Displays the Bridge Identifier of the root bridge.Root Port - Displays the port toward the root.Root Path Cost - Displays the path cost toward the root.Remaining Hop - Displays the remaining hop count in BPDU.VLAN -Displays the ID of the VLAN which should be associated with this MST instance.- Click to modify the setting page of the selected VLAN.- Clear settings of the selected port and return to factory default settings. |
Click to open the MST editing page.
Available settings are explained as follows:
| Item | Description |
| VLAN Enter the ID (1-4094) of the VLAN which should be associated with this MST. | |
| Priority | The switch priority for this MST instance. A lower number gives the switch higher chance to be chosen as the root bridge. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
II-1-5 QoS
QoS (Quality of Service) functions to provide different quality of service for various network applications and requirements and optimize the bandwidth resource distribution to provide a network service experience of better quality.
Queue Setting
VigorSwitch supports multiple queues for each interface. The higher numbered queue represents the higher priority. The following lists the types of supported priority queues:
- Strict Priority (SP) - Egress traffic from the higher priority queue will be transmitted first, lower priority queue shall wait until all traffic in SP queue is transmitted.
- Weighted Round Robin (WRR) - The number of packets sent from the queue is proportional to the weight of the queue.
CoS Mapping
It allows users to configure how ingress frames with CoS/802.1p tag map to QoS queues, and QoS queues to CoS/802.1p on egress frames.
Actual effectiveness is based on how QoS is configured in previous QoS section. This page provides settings for user to configure mapping only.
DSCP Mapping
It allows user to configure how ingress packets with DSCP tag map to QoS queues, and QoS queues to DSCP on egress packets.
Actual effectiveness is based on how QoS is configured in previous QoS section. This page provides settings for user to configure mapping only.
It allows user to configure how ingress packets with IP Precedence tag map to QoS queues, and QoS queues to IP Precedence on egress packets.
Actual effectiveness is based on how QoS is configured in previous QoS section. This page provides settings for user to configure mapping only.
Egress Shaping Rate
It allows a user to configure the egress port rate limit. The egress rate limit is the number of bits per second that can be received from the egress interface. Excess bandwidth above this limit is discarded.
Egress Shaping per Queue
It allows users to configure the maximum egress bandwidth not only by the port but also by specific QoS queues. The configuration result for each port will be displayed on the table listed on the lower side of this web page.
Available settings are explained as follows:
| Item | Description |
| QoS | |
| Enable | Enable / Disable - Click the toggle to enable / disable the function of QoS mode.○- means "Enable".○- means "Disable". |
| Ingress Trust Mode Select the QoS operation mode. | CoS/802.1p -Traffic is mapped to queues based on the CoS field in the VLAN tag, or based on the per-port default CoS value if there is noVLAN tag on the incoming packet.DSCP – All IP traffic is mapped to queues based on the DSCP field in the IP header. If traffic is not IP traffic, it is mapped to the lowest priority queue.CoS/802.1p-DSCP – All IP traffic is mapped to queues based on the DSCP field in the IP header. If traffic is not IP but has VLAN tag, mapped to queues based on the CoS value in the VLAN tag.IP Precedence - All IP traffic is mapped to queues based on the DSCP field in the IP header. If traffic is not IP but has VLAN tag, mapped to queues based on the CoS value in the VLAN tag. |
Queue Setting
| Queue There are eight queue ID numbers allowed to be configured. | |
| Schedule | Strict Priority - Click it to set queue to strict priorityWRR - Click it to set queue to Weight round robin type. |
| Weight If the queue type is WRR, set the queue weight for the queue | |
| WRR Bandwidth Percentage | Displays the percentage of traffic which can be sent by current queue compared to total WRR queues. |
| CoS Mapping | |
| Class of Service Mapping to Queue (for Ingress Traffic) | Defines the queue ID (level 1 to 8) for different class of service values.Reset - Clear current settings and return to factory default settings. |
| Class of Service Mapping to Queue (for Egress Traffic Remark) | Defines the class of service value (0 to 7).Reset - Clear current settings and return to factory default settings. |
| DSCP Mapping | |
| DSCP Mapping to Queue (for Ingress Traffic) | Define the queue ID (level 1 to 8) for different DSCP values.Reset - Clear current settings and return to factory default settings. |
| DSCP Mapping to Queue (for Egress Traffic Remarking) | Define the DSCP value (0 to 63).Reset - Clear current settings and return to factory default settings. |
| IP Precedence Mapping | |
| IP Precedence Mapping to Queue (for Ingress Traffic) | Defines the queue ID (level 1 to 8) for different IP Precedence values.Reset - Clear current settings and return to factory default settings. |
| IP Precedence Mapping to Queue (for Egress Traffic Remarking) | Defines the IP Precedence value (0 to 7).Reset - Clear current settings and return to factory default settings. |
| Egress Shaping per Queue | Configure the maximum egress bandwidth not only by port but also by specific QoS queues.Reset - Clear all settings and return to factory default settings.Port - Display the port (10GE1 to 10GE12) profiles.C - Clear settings of the selected port and return to factory default settings. |
Edit - To modify the egress shaping rate for port profiles, select two (at least) GE ports to display the link.
- Egress Shaping Enabled- Switch the toggle to enable/disable the setting.
- Egress Shaping Rate (CIR) - Enter the rate value, <16-1000000>, unit: 16 Kbps.
After finishing this web page configuration, please click OK to save the settings.
II-1-6 Jumbo Frame
This page allows a user to configure switch port jumbo frame settings.
Available settings are explained as follows:
| Item | Description |
| Jumbo Frame | |
| Frame Size Enter Jumbo frame size. The valid range is 1526 bytes - 10000 bytes. | |
After finishing this web page configuration, please click OK to save the settings.
II-1-7 LLDP
This page allows a user to set general settings for LLDP.
Available settings are explained as follows:
| Item | Description |
| LLDP | |
| Enable | Enable / Disable - Click the toggle to enable / disable this function.○- means “Enable”.○- means “Disable”.If LLDP function is disabled, specify an action for the LLDP PDU packets.●Filtering- The LLDP packets will be filtered and deleted when LLDP is disabled.●Bridging- The LLDP packets will be bridging when LLDP is disabled.●Flooding- The LLDP packets will be flooded and forwarded to all interfaces when LLDP is disabled. |
| Transmission Interval | Select the interval at which frames are transmitted. The default is 30 seconds, and the valid range is 5–32768seconds. |
| Holdtime Multiplier | Select the multiplier on the transmit interval to assign to TTL (range 2–10, default = 4). |
| Reinitialization Delay | Select the delay before a re-initialization (range 1–10 seconds, default = 2). |
| Transmit Delay Select the delay after an LLDP frame is sent (range 1–8192 seconds, default = 3). | |
| LLDP-MED Fast Restart Repeat Count | Select the number of LLDP packets that will be sent during LLDP-MED Fast Start period.The default is 3. Available range is from 1 to 10. |
| Auto LLDP-MED Network Policy for | The default value is Enable. |
Voice Application
After finishing this web page configuration, please click OK to save the settings.
II-2 VLAN Setup
A virtual local area network, virtual LAN or VLAN, is a group of hosts with a common set of requirements that communicate as if they were attached to the same broadcast domain, regardless of their physical location. A VLAN has the same attributes as a physical local area network (LAN), but it allows for end stations to be grouped together even if they are not located on the same network switch. VLAN membership can be configured through software instead of physically relocating devices or connections.
II-2-1 Existion VLAN
II-2-1-1 Default VLAN
Available settings are explained as follows:
| Item | Description |
| +Add VLAN | Click to open the setting page of creating a new VLAN (with the same type of default VLAN). |
| VLAN ID Displays the ID number of the VLAN. | |
| VLAN Name Displays the name of the VLAN. | |
| VLAN Type Displays the type of the VLAN. | |
| Click to modify the setting page of the selected VLAN. | |
To create a new VLAN, click +Add VLAN to open the following page.
Available settings are explained as follows:
| Item | Description |
| Create VLAN | |
| VLAN ID Enter the number as VLAN ID to be created or deleted. If you want to create / delete multiple VLAN profiles, simply enter multiple VLAN ID separated by comma, and/or range of VLAN ID using hyphen. | |
| VLAN Name Enter the prefix you wish to add followed by VLAN ID as VLAN name.Leave it empty for using default "VLAN". | |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings. A new VLAN will be shown on the page.
II-2-1-2 Voice VLAN
With this feature, a VLAN will be created temporarily and when the specified OUI device delivers protocol packets related to "VoIP", VigorSwitch will guide these packets into the specified Voice LAN with specified priority tag to speed up the packet transmission. Such voice VLAN is only active inside VigorSwitch for packet transmission. After these packets leave VigorSwitch, the Voice VLAN tag will be removed immediately.
Click
to open the editing page.
Available settings are explained as follows:
| Item | Description |
| Edit VLAN | |
| Voice VLAN | Enable / Disable – Click the toggle to enable / disable this function.○ - means “Enable”.○ - means “Disable”. |
| Voice VLAN ID Select Voice VLAN ID profile. | |
| Remark Cos/802.1p Click the toggle to enable / disable this function.Remark Value - If enabled, qualified packets will be remarked by this value. Specify the number of packets to be remarked. (0 to 7). The VoIP packets will be tagged with this number, so that QoS can prioritize it correctly. | |
| Aging Time | Select value of aging time (30~65536 min).Default is 1440 minutes. A voice VLAN entry will be age out after this time if without any packet pass through. |
| Voice VLAN OUI | Click the to display advanced settings. Default has 8 pre-defined OUI MAC.OUI - Enter the OUI address.Description - Enter a description of the specified MAC address to the voice VLAN OUI table.- Click it to modify the OUI settings and the description.+Add - Click to create a new voice OUI. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
II-2-1-3 Surveillance VLAN
Surveillance VLAN can be configured for VigorSwitch to identify the packets coming from an IP camera automatically and assign those traffics to a specific VLAN ID and CoS/802.1p value, this helps you to prioritize those traffics and improve video quality.
Click to open the editing page.
Available settings are explained as follows:
| Item | Description |
| Edit VLAN | |
| Surveillance VLAN | Enable / Disable - Click the toggle to enable / disable this function.○ - means "Enable".○ - means "Disable".Enable the function to configure surveillance VLAN. |
| Surveillance VLAN ID Choose a VLAN profile as Surveillance VLAN. | |
| Remark Cos/802.1p Click the toggle to enable / disable this function.Remark Value - If enabled, qualified packets will be remarked by this value. Specify the number of packets to be remarked. (0 to 7). The VoIP packets will be tagged with this number, so that QoS can prioritize it correctly. | |
| Aging Time | Select value of aging time (30~65536 min).Default is 1440 minutes. A voice VLAN entry will be age out after this time if without any packet pass through. |
| Surveillance VLAN OUI | Filtering Surveillance traffic is based on the OUI of the IP cameras.Click the √ to display advanced settings.+Add - Click to create a new OUI.OUI - Enter OUI MAC address of monitored IP camera.Description - Enter a description of the specified MAC address to the surveillance VLAN OUI table.○ - Click to modify the OUI settings and the description. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
II-2-2 MAC/Protocol VLAN Group
II-2-2-1 MAC Group
The MAC VLAN allows you to statically assign a VLAN ID to a host with specific MAC address(es). VigorSwitch allows you to configure multiple groups with configured MAC address and mask to be active on ports and to be bound with VLAN ID. This page allows the network administrator to define groups with specific MAC addresses for later binding with VLAN and Port.
Available settings are explained as follows:
| Item | Description |
| MAC Group | |
| +Add Group Click to open the setting page of creating a new group. | |
| Group ID | It is a number for identification later, while chosen to be bound with VLAN/Port. |
| MAC Displays the MAC address of the device grouped under this VLAN profile. | |
| Mask Displays the number of the mask. | |
To add a MAC VLAN group, click the "+Add Group" to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Add MAC Group | |
| Group ID | It is a number for identification later, while chosen to be bound with VLAN/Port. |
| MAC Address Enter the MAC address you wish to be classified in this group. | |
| MASK | The mask is the length of matching prefix you wish to have on MAC address.For example, configure mask in 10. It means a host with beginning of the 10-digit of MAC address will be checked, and classified into this group if matched. |
| MAC VLAN Binding | The MAC VLAN allows you to statically assign a VLAN ID to a host with specific MAC address(es). VigorSwitch allows you to configure multiple groups with configured MAC address and mask to be active on ports and to be bound with VLAN ID. This page allows the network administrator to bind the group of specified MAC addresses with VLAN and Port.Enable / Disable - Click the toggle to enable / disable this function. - means "Enable".- means "Disable".+Add - Click to enter a port number and VLAN ID number.Port - Select the ports you wish to be bound with specified MAC address group.VLAN - Enter the VLAN ID that you wish to be bound with. |
After finishing this web page configuration, please click OK to save the settings.
A new group will be shown on the page.
Available settings are explained as follows:
| Item | Description |
| Click to modify the settings of the selected group. | |
| Click it to remove the selected entry. |
II-2-2-2 Protocol Group
VigorSwitch offers protocol VLANs which allows Network Administrator to filter out untagged traffic of certain protocol and then assign them a specific VLAN ID.
Up to eight protocol groups can be defined, each of them can have a unique filtering criterion such as frame type and protocol value.
Available settings are explained as follows:
| Item | Description |
| Protocol Group | |
| +Add Group Click to open the setting page of creating a new group. | |
| Group ID | It is a number for identification later, while chosen to be bound with VLAN/Port. |
| Frame Type | Displays the frame type which you would like to filter. |
| Protocol Value | Displays the value (ranging from 0x600 ~0xFFFE). Packets match with |
the value will be classified into this group.
To add a Protocol VLAN group, click the "+Add Group" to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Add Protocol Group | |
| Group ID | It is a number for identification later, while chosen to be bound with VLAN/Port. |
| Frame Type | Use the drop-down list to specify the frame type which you would like to filter.Ethernet_II - Packet will be mapped based on Ethernet version 2.IEEE802.3_LLC_Other -Packet will be mapped based on 802.3 packet with LLC other header.RFC_1042 - Packet will be mapped based on RFC 1042. |
| Protocol Value Input a value (ranging from 0x600 ~0xFFFE). Packets match with such value will be classified into this group. | |
| Protocol VLAN Binding | It is for setting up the ports and protocol group that we would like to filter, and the VLAN ID we would like to assign.Enable / Disable - Click the toggle to enable / disable this function. - means "Enable". - means "Disable".+Add - Click to enter a port number and VLAN ID number.Port - Select the ports you wish to be bound with specified MAC address group.VLAN - Enter the VLAN ID that you wish to be bound with. |
After finishing this web page configuration, please click OK to save the settings.
A new group will be shown on the page.
Available settings are explained as follows:
| Item | Description |
| Click to modify the settings of the selected group. | |
| Click it to remove the selected entry. |
II-2-3 GVRP
This page allows to enable/disable the GVRP function and displays the information for the membership for GVRP (GARP VLAN Registration Protocol).
Available settings are explained as follows:
| Item | Description |
| GVRP | |
| Enable | Click the toggle to enable / disable this function.○ - means “Enable”.○ - means “Disable”. |
II-3 MAC Address Table
This section allows user to view the static MAC address entries in the MAC table, change related setting, and assign MAC address into MAC table.
Available settings are explained as follows:
| Item | Description |
| Dynamic Learned | Displays the port number automatically learned by VigorSwitch. |
| Aging Time Enter the MAC address aging out value (5-32767 seconds). | |
| MAC | Displays the MAC address that will be forwarded. |
| VLAN | Displays the VLAN group to which the MAC address belongs. |
| Port Displays the port to which this MAC address belongs. | |
| +Add Static MAC Click it to add any port into the static MAC table. | |
To add a static MAC, click the "+Add Static MAC" to open the edit page.
Available settings are explained as follows:
| Item | Description |
| Add Static MAC | |
| MAC Enter the MAC address that will be forwarded. | |
| VLAN Select the VLAN group to which the MAC address belongs. | |
| Port Select the port to which this MAC address belongs. | |
| OK | Save the settings. |
After finishing this web page configuration, please click OK to save the settings.
II-4-1 IP Network
Different VLANs can communicate with each other. With the VLAN routing function, computers (or clients) under different VLANs (created from Configuration>>VLAN Setup) can access the Internet and share data or information with each other.
Available settings are explained as follows:
| Item | Description |
| IP Network | |
| +Add Interface Click to create a new VLAN interface profile. | |
| Comment Displays the brief comment for the VLAN ID. | |
| VLAN ID Displays the ID number of VLAN profile. | |
| VLAN Name Displays the name of the VLAN profile. | |
| IP Address/Subnet Mask | Displays the IP address and the subnet mask of the selected VLAN profile. |
| DHCP Server Displays the status of the server. | |
| Default DHCP Relay Option | |
| Append Relay Agent Option | Click the toggle to enable / disable the built-in DHCP server on Vigor switch. - means "Enable". - means "Disable". |
| Packets Contain Relay Agent Option | Set the packet processing method.Drop - Received packets which already contain relay information willbe discarded.Keep- All packets are forwarded, relay information already present will be ignored.Replace- Relay information already present in a packet is stripped and replaced with the router's own relay information. |
To add a new interface, click the "+Add Interface" to open the edit page.
Available settings are explained as follows:
| Item | Description |
| Add Interface | |
| Comment Enter a brief comment for the VLAN ID. | |
| VLAN ID Use the drop down list to select one VLAN ID. | |
| VLAN Name Displays the name of the VLAN profile related to the VLAN ID number selected above. | |
| IP Address Enter the IP address for the selected VLAN ID. | |
| Subnet Mask Enter the subnet mask for the IP address set above. | |
| DHCP Server Disable - Select to disable the DHCP server function. | |
| OK | Save the settings. |
After finishing this web page configuration, please click OK to save the settings.
II-4-2 Bind IP to MAC
This function is used to bind the IP and MAC address in LAN to have a strengthening control in network. With the Bind IP to MAC feature you can reserve LAN IP addresses for LAN clients. Each reserved IP address is associated with a Media Access Control (MAC) address.
II-4-2-1 MAC-IP Binding List
This page displays the MAC-IP Binding List and allows the user to add a new profile or edit/ delete an existed profile.
Available settings are explained as follows:
| Item | Description |
| +Add Binding IP Click to create a new binding list profile. | |
| Index Displays the index number of the binding list profile. | |
| MAC Address Displays the MAC address of the binding list profile. | |
| IP Address Displays the IP address of the binding list profile. | |
| Option | - Click to modify the settings of the selected entry.- Click it to remove the selected entry. |
To add a new binding IP, click the "+Add Binding IP" to open the edit page.
Available settings are explained as follows:
| Item | Description |
| IP Address Enter the IP address. | |
| MAC Address Enter the MAC address of the device to be bound with the IP address. | |
| +Add Click to create more binding IP settings. | |
| OK | Save the settings. |
After finishing this web page configuration, please click OK to save the settings.
II-4-2-2 DHCP Table
This page displays a table of DHCP servers used by "Bind IP to MAC".
| Item | Description |
| IP Address Displays the IP address of the DHCP server. | |
| MAC Address Displays the MAC address of the DHCP server. | |
| Host ID Displays the name of the DHCP server. | |
| Lease Time Start | Displays the starting point of the lease time. |
| Lease Time End | Displays the ending point of the lease time. |
II-4-3 VLAN Routing
Static routing is a process that the system network administrator can configure the network with all the required information for packet forwarding. Each VLAN can include several IP address with the same subnet. The network administrator can specify some IP addresses (with different subnets) and different VLANs for establishing a communication channel.
Available settings are explained as follows:
| Item | Description |
| Vlan Routing | |
VLAN Routing Enable Click the toggle to enable / disable this function. - means “Enable”.- means “Disable”. | |
| Static Route | |
| +Add Static Route Create a new static route. | |
| Destination IP Address/Subnet Mask | Displays the IP address/subnet mask of the static route. |
| Next Hop | Displays the type (none, gateway, interface) of the next hop. |
| Option | - Click to modify the settings of the selected entry. Reset - Click it to return to the factory default setting. |
To add a new static route setting, click the "+Add Static Route" to open the edit page.
Available settings are explained as follows:
| Item | Description |
| Destination IP Address | Enter the IP address. |
| Subnet Mask Enter the subnet mask for the above IP address. | |
| Next Hop | Select Gateway or Interface to enter the IP address or choose VLAN ID number. |
| Gateway IP Address | It is available when Gateway is selected as the Next Hop.Enter the IP address of the gateway. |
| Interface | It is available when Interface is selected as the Next Hop.Use the drop down list to specify the VLAN ID number. |
| OK | Save the settings. |
After finishing this web page configuration, please click OK to save the settings.
II-5-1 General
Port Setup is used to configure settings for the switch ports, trunk, Layer 2 protocols and other switch features.
Available settings are explained as follows:
| Item | Description |
| Port Displays the LAN ports (10GE1 to 10GE12). | |
| Description Displays the comment of the selected port. | |
| Port Enabled | Displays the status (Enabled or Disabled) of the LAN port. |
| Port Speed Displays the port speed capability. | |
| Link Status Displays the connection status. | |
| Fiber Media Type | Displays the media type (with different data rate) for the fiber port. |
| Duplex Displays the port duplex (auto/half/full) capability. | |
| Flow Control Config Displays the status (enabled/disabled) of Flow Control Config. | |
| Flow Control Status Displays the status (enabled/disabled) of Flow Control. | |
| Option | - Click it to modify the port setting.- Clear current settings and return to factory default settings. |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Port Setting | |
| Show / Hide Advanced Mode | Click to display or hide the advanced settings. |
| Port Displays the port number. | |
| Description Enter a brief explanation for the selected port. | |
| Port Enable Enable/disable the settings of the selected port. | |
| Fiber Media Type | Determine the media type (with different data rate) for the fiber port.Available type includes:● Fiber 10G● Fiber 1G● DAC 50 CM● DAC 100 CM● DAC 300 CM● DAC 500 CM● None |
| Flow Control Enabled | A concentration of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and frame losses.Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port. The switch uses IEEE802.3x flow control in full duplex mode and backpressure flow control in half duplex mode. IEEE802.3x flow control is used in full duplex mode to send a pause signal to the sending port, causing it to temporarily stop sending signals when the receiving port memory buffers fill. Back Pressure flow control is typically used in half duplex mode to send a "collision" signal to the sending port (mimicking a state of packet collision) causing the sending port to temporarily stop sending signalsand resend later. Enable / Disable - Click the toggle to enable / disable this function. ○ - means "Enable". ○ - means "Disable". |
| Port Isolation | It allows the network administrator to configure protected port setting to prevent the selected ports from communication with each other. Port isolation is only allowed to communicate with unprotected port. For example, GE1 and GE3 are selected in Port List and Enable is clicked as port isolation, then users behind GE1 and GE3 are separated and can not communicate with each other. Enable / Disable - Click the toggle to enable / disable this function. |
| LACP Priority Enter a port priority number for the port. | |
| LACP Timeout The timeout option decides how local switch of LAG connection determines connection to be lost. Switch would also notify the remote switch about this setting value, so that remote switch can send LACP PDU in correct timing. Short - LACP PDU will be sent per second. If port member is not seen over 3 seconds, it will cause port member timeout. Long - LACP PDU will be sent every 30 seconds. If port member is not seen over 90 seconds, it will cause port member timeout. | |
| EEE Enable or disable port EEE (Energy Efficient Ethernet) function for the selected port. | |
After finishing this web page configuration, please click OK to save the settings.
II-5-2 VLAN Interface
This page allows a user to configure interface (GE) settings related to VLAN.
Voice VLAN
With voice VLAN, a VLAN will be created temporarily and when the specified OUI device delivers protocol packets related to "VoIP", VigorSwitch will guide these packets into the specified Voice LAN with specified priority tag to speed up the packet transmission. The voice VLAN is only active inside VigorSwitch for packet transmission. After these packets leave VigorSwitch, the Voice VLAN tag will be removed immediately.
Surveillance VLAN
Surveillance VLAN can be configured for VigorSwitch to identify the packets coming from an IP camera automatically and assign those traffics to a specific VLAN ID and CoS/802.1p value, this helps you to prioritize those traffics and improve video quality.
Available settings are explained as follows:
| Item | Description |
| Port Displays the LAN port number. | |
| VLAN Mode Displays VLAN mode of the interface. | |
| PVID Displays the Port VLAN ID of the interface. | |
| Tagged VLAN Displays the VLAN profile (ID number) tagged in the VLAN interface. | |
| Untagged VLAN Displays the VLAN profile (ID number) untagged in the VLAN interface. | |
| Forbidden VLAN | Displays the VLAN profile (ID number) used by the VLAN interface. |
| Accept Frame Type Displays the acceptable-frame-type of the specified interfaces. | |
| Ingress Filtering Displays the status (enabled/disabled) of ingress filtering. | |
| Uplink Displays the status (enabled/disabled) of ??? | |
| Option | - Click it to modify the VLAN interface settings.- Clear current settings and return to factory default settings. |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Interface Setting | |
| Show / Hide Advanced Mode | Click to display or hide the advanced settings. |
| Port Displays the selected LAN port number. | |
| VLAN Mode | Select the VLAN mode of the interface.Hybrid - Support all functions as defined in IEEE 802.1Qspecification.Access - Accepts only untagged frames and join an untagged VLAN.Trunk - An untagged member of one VLAN at most, and is a tagged member of zero or more VLANs.Tunnel - Support all functions as defined in IEEE 802.1Q tunneling specification. |
| PVID | A PVID (Port VLAN ID) is a tag that adds to incoming untagged frames received on a port so that the frames are forwarded to the VLAN group that the tag defines.For port under Access Mode, VLAN ID provided as PVID would automatically be selected as the untagged VLAN. |
| Accepted Type | Specify the acceptable-frame-type of the specified interfaces. It's only available with Hybrid mode.All - Accept frames regardless it's tagged with 802.1q or not.Tag Only - Accept frames only with 802.1q tagged.Untag Only - Accept frames untagged. |
| Ingress Filtering | Enable the ingress filtering to filter out any packets not belong to any VLAN members of this port. It is enabled automatically while operating in Access and Trunk mode. |
| Tagged VLAN Specify the VLAN profile tagged in the VLAN. | |
| Untagged VLAN Specify the VLAN profile untagged in the VLAN. | |
| Below shows settings for Advanced Mode | |
| Forbidden VLAN | The selected GE port only allows default VLAN packet to pass through. Enable / Disable - Click the toggle to enable / disable the LAN port(s) as forbidden VLAN port. - means "Enable". - means "Disable". |
| Uplink Port | It is available when Trunk is selected as Interface VLAN mode. Click the toggle to enable the function and specify the TPID type. |
| TPID Use the drop down list to specify the TPID type. | |
| Voice VLAN Enable | Enable / Disable - Click the toggle to enable / disable the LAN port(s) as Voice VLAN port. |
| Voice VLAN CoS Mode | All - Once this port is identified as Voice VLAN by frame with matched OUI, remark CoS/802.1p shall tag for all ingress frame regardless of remarked frame matched with pre-configured OUI or not.Src (Source) - Once this port is identified as Voice VLAN by frame with matched OUI, remark CoS/802.1p shall tag for only the matched ingress frame with pre-configured OUI. |
| Surveillance VLAN Enabled | Enable / Disable - Click the toggle to enable / disable the LAN port(s) as Surveillance VLAN port. - means "Enable". - means "Disable". |
| Surveillance VLAN Mode | Select port surveillance VLAN mode.Auto - Surveillance VLAN auto detect packets that match OUI table and add received port into surveillance VLAN ID tagged member.Manual - User need add interface to VLAN ID tagged member manually. |
| Surveillance VLAN QoS Policy | Select port QoS Policy mode.Video Packet - QoS attributes are applied to packets with OUI in the source MAC address.All - QoS attributes are applied to packets that are classified to the Surveillance VLAN. |
| MAC VLAN Binding Enable/disable the function of MAC VLAN Binding. | |
| Protocol VLAN Binding Enable/disable the function of Protocol VLAN Binding. | |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
II-5-3 GVRP
This page allows the network administrator to configure registration mode (e.g., Normal, Fixed or Forbidden) of GVRP (GARP VLAN Registration Protocol) for each GE port.
Such function can eliminate unnecessary network traffic and prevent any attempt to transmit information to unregistered users.
Available settings are explained as follows:
| Item | Description |
| Port Displays the LAN port number. | |
| Enabled | Displays the status (Enabled/Disabled) of the GVRP port setting. |
| VLAN Creation Displays the status (Enabled/Disabled) of the VLAN Creation. | |
| Registration Displays the registration mode for each GE/LAG port. | |
| Option | - Click it to modify the GVRP settings.- Clear current settings and return to factory default settings. |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| GVRP Portsetting | |
| Port Displays the port number. | |
| Enabled | Enable / Disable - Click the toggle to enable / disable the GVRP port setting. - means “Enable”. - means “Disable”. |
| Dynamic VLAN Creation | Click the toggle to enable / disable the VLAN creation. |
| Registration | There are three modes to be specified.Normal - Default setting. All packets can pass through the selected GE port.Fixed - The selected GE port only sends static VLAN information to neighboring device and allows static VLAN packet to pass through.Forbidden - The selected GE port only allows default VLAN packet to pass through. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
II-5-4 Multicast
IGMP Snooping
IGMP snooping is the process of listening to Internet Group Management Protocol (IGMP) network traffic. The feature allows a network switch to listen in on the IGMP conversation between hosts and routers. By listening to these conversations the switch maintains a map of which links need which IP multicast streams. Multicasts may be filtered from the links which do not need them and thus controls which ports receive specific multicast traffic.
MLD Snooping
MLD snooping does the same thing as IGMP snooping. The difference is that IGMP snooping acts on IPv4 packets; MLD snooping acts on IPv6 packets. MLD snooping is the process of listening to Multicast Listener Discovery network traffic. It can examine IPv6 packets and forward these packets to designate location via VLAN port members.
Throttling
The administrator can configure the user on a switch port (GE/LAG port) belonging to which multicast group and restrict the number of multicast group that the user on the switch can join. Then the administrator is able to control the network service (e.g, IP/TV service) that the user can enjoy.
The Throttling page is used for configuring the maximum number (0\~256) of IGMP group that a user on a switch port can join. After defined the maximum number, each switch port interface can be set to deny the IGMP join report or set to replace randomly selected multicast interface with received IGMP join report.
Available settings are explained as follows:
| Item | Description |
| Port Displays the GE/LAG | port number. |
| IGMP Snooping Throttling Max. Group | Displays the maximum number of IGMP group profile. |
| IGMP Snooping Throttling Exceed Action | Displays the action performed when the number of IGMP join reports for the specified interface exceeds the value defined in Max Group. |
| MLD Snooping Throttling Max. Group | Displays the maximum number of MLD group profile. |
| MLD Snooping Throttling Exceed Action | Displays the action performed when the number of MLD join reports for the specified interface exceeds the value defined in Max Group. |
| Option | [8442] - Click it to modify the multicast settings for each port.[KC24] - Clear current settings and return to factory default settings. |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Multicast Port Setting | |
| Port Displays the port number. | |
| IGMP Snooping | |
| Throttling Max. Group | Define the maximum number of IGMP group profile that a user on the switch can join. If “0” is selected, then such interface (port) can join all of the IGMP group profiles (defined in Filtering Profile). |
| Throttling Exceed Action | VigorSwitch will perform the action defined below when the number of IGMP join reports for the specified interface exceeds the value defined in Max Group.Deny - It is default setting. The IGMP join report (for multicast service) received by such interface will be discarded.Replace - When it is selected, a new group with IGMP report received will replace the existing group. |
| MLD Snooping | |
| Throttling Max. Group | Define the maximum number of MLD group profile that a user on the switch can join. If “0” is selected, then such interface (port) can join all of the MLD group profiles (defined in Filtering Profile). |
| Throttling Exceed Action | VigorSwitch will perform the action defined below when the number of MLD join reports for the specified interface exceeds the value defined in Max Group.Deny - It is default setting. The MLD join report (for multicast service) received by such interface will be discarded.Replace - When it is selected, a new group with MLD report received will replace the existing group. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
II-5-5 STP
The Spanning Tree Protocol (STP) is a network protocol that ensures a loop-free topology for any bridged Ethernet local area network.
Bridge Protocol Data Units (BPDUs) are frames that contain information about the Spanning Tree Protocol (STP). Switches send BPDUs using a unique MAC address from its origin port and a multicast address as destination MAC (01:80:C2:00:00:00, or 01:00:0C:CC:CC:CD for Per VLAN Spanning Tree).
For STP algorithms to function, the switches need to share information about themselves and their connections. What they share are bridge protocol data units (BPDUs).
BPDUs are sent out as multicast frames to which only other layer 2 switches or bridges are listening. If any loops (multiple possible paths between switches) are found in the network topology, the switches will co-operate to disable a port or ports to ensure that there are no loops; that is, from one device to any other device in the layer 2 network, only one path can be taken.
Available settings are explained as follows:
| Item | Description |
| Port Displays the LAN port number (GE1 to GE28). | |
| Admin Enabled Displays the status (enabled/disabled) of Admin Enabled. | |
| BPDU Filter Displays the status (enabled/disabled) of BPDU Filter function. | |
| BPDU Guard Displays the status (enabled/disabled) of BPDU Guard function. | |
| Path Cost Displays the value of transmitting a frame onto a LAN through that port. | |
| Priority Displays the priority value for the port interface. | |
| Edge Port Displays the status (enabled/disabled) of Edge Port function. | |
| P2P Option | Displays the STP of link type (All, Yes, No) on this port. |
| Option |  - Click it to modify the STP port setting. - Clear current settings and return to factory default settings. |
- Click it to modify the STP port setting.
- Clear current settings and return to factory default settings.
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| STP Port Setting | |
| Show / Hide Advanced Mode | Click to display or hide the advanced settings. |
| Port Displays the selected | LAN port number. |
| Admin Enabled Displays the status of Admin Enabled. | |
| BPDU Filter | Click the toggle to enable / disable the function of dropping all BPDU packets and no BPDU will be sent. - means "Enable". - means "Disable". |
- means "Enable".
- means "Disable".
| BPDU Guard BPDU Guard | further protects your switch by turning this port into error state and shutdown if any BPDU received from this port. Check it to enable such function. |
| Path Cost | Path cost is the cost of transmitting a frame on to a LAN through that port. It is recommended to assign this value according to the speed of the bridge. The slower the media, the higher the cost. Entering 0 means the switch will automatically assign a value. |
| Priority | Specify a priority value for the switch. The smaller the priority value, the higher the priority and greater chance of becoming the root. |
| Edge Port | In the edge mode, the interface would be put into the Forwarding state immediately upon link up. If the edge mode is enabled for the interface and there are BPDUs received on the interface, the loop might be occurred in the short time before the STP state change.Click the toggle to enable / disable the function. |
| P2P Option | Auto - VigorSwitch determines the STP of link type for this port automatically.Yes - It means the STP of link type on this port is full-duplex and directly connect to another switch or host.No - It means the STP of link type on this port is “not” full-duplex and “does not” directly connect to another switch or host. |
After finishing this web page configuration, please click OK to save the settings.
II-5-6 QoS
This page is used to configure port settings for QoS. The configuration result for each port will be displayed on the table listed on the lower side of this web page.
Ingress Rate Limit
It allows a user to configure ingress port rate limit. The ingress rate limit is the number of bits per second that can be received from the ingress interface. Excess bandwidth above this limit is discarded.
Egress Shaping Rate
It allows a user to configure egress port rate limit. The egress rate limit is the number of bits per second that can be received from the egress interface. Excess bandwidth above this limit is discarded.
Available settings are explained as follows:
| Item | Description |
| Port Displays the port profiles (GE1 to GE28). | |
| Trust Port Displays if the traffic follow the trust mode in general setting (Enabled/Disabled). | |
| Ingress Default CoS | Displays the default CoS priority value for those ingress frames. |
| Egress Remark CoS Displays the status (Enabled/Disabled) of the function. | |
| Egress Remark DHCP/IP Precedence | Displays the status (Enabled/Disabled) of the function. |
| Ingress Rate Limit | Displays the value of the ingress rate limit. If this function is disabled, then Off will be shown instead. |
| Egress Rate Shaping | Displays the value of the egress rate shaping. If this function is disabled, then Off will be shown instead. |
| Option | - Click it to modify the QoS port setting.- Clear current settings and return to the factory default settings. |
To modify settings for a port, click the
link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| QoS Port Setting | |
| Port Displays the port profiles (GE1 to GE28). | |
| Trust Port Enable / Disable - Click the toggle to enable / disable this function. | |
| - Traffic will follow trust mode in general setting. | |
| - No QoS service for this port. | |
| Ingress Default CoS | Specify the default CoS priority value for those ingress frames without given trust QoS tag (802.1q/DSCP/IP Precedence, depending on configuration). |
| Egress Remark CoS | Enable / Disable - Click the toggle to enable / disable this function. |
| - means "Enable". | |
| - means "Disable". | |
| Egress Remark DSCP/IP Precedence | Click the toggle to enable / disable this function. |
| DSCP - Egress traffic will be marked with DSCP value according to the Queue to DSCP mapping table. | |
| IP Precedence - Egress traffic will be marked with IP Precedence value according to the Queue to IP Precedence mapping table. | |
| Ingress Rate Limit | The ingress rate limit is the number of bits per second that can be received from the ingress interface. Excess bandwidth above this limit is discarded. |
| Click the toggle to enable / disable this function. | |
| Enter the rate value,<16-1000000>,unit:16 Kbps. | |
| Egress Rate Shaping | The egress rate limit is the number of bits per second that can be received from the egress interface. Excess bandwidth above this limit is discarded. |
Click the toggle to enable / disable this function.
Enter the rate value,<16-1000000>,unit:16 Kbps.
After finishing this web page configuration, please click OK to save the settings.
II-6 Multicast
IP multicast is a technique for one-to-many communication over an IP infrastructure in a network.
To avoid the incoming data broadcasting to all GE ports, multicast is useful to transfer the data/message to specified GE ports for IGMP snooping. When VigorSwitch receives a message "subscribed" by the client, it must decide to transfer the data to specified GE ports according to the location of the client (subscribed member).
II-6-1 IGMP Snooping
IGMP snooping is the process of listening to Internet Group Management Protocol (IGMP) network traffic. The feature allows a network switch to listen in on the IGMP conversation between hosts and routers. By listening to these conversations the switch maintains a map of which links need which IP multicast streams. Multicasts may be filtered from the links which do not need them and thus controls which ports receive specific multicast traffic.
flowchart
graph TD
A["Source"] --> B["PIM (IPv4)"]
B --> C["Vigor router"]
C --> D["VigorSwitch"]
D --> E["Host A"]
D --> F["Host B"]
D --> G["Host C"]
style A fill:#f9f,stroke:#333
style B fill:#ccf,stroke:#333
style C fill:#cfc,stroke:#333
style D fill:#fcc,stroke:#333
style E fill:#cff,stroke:#333
style F fill:#ffc,stroke:#333
style G fill:#fcc,stroke:#333
flowchart
graph TD
A["PIM (IPv4)"] -->|Source| B["IGMP Snooping"]
B --> C["VigorSwitch"]
B --> D["Host A"]
B --> E["Host B"]
B --> F["Host C"]
B --> G["Vigor router"]
style A fill:#f9f,stroke:#333
style B fill:#ccf,stroke:#333
style C fill:#cfc,stroke:#333
style D fill:#fcc,stroke:#333
style E fill:#fcc,stroke:#333
style F fill:#fcc,stroke:#333
style G fill:#cff,stroke:#333
II-6-1-1 IGMP Snooping
Available settings are explained as follows:
| Item | Description |
| IGMP Snooping Enable | Enable / Disable - Click the toggle to enable / disable this function.  - means "Enable".- means "Disable". |
| IGMP Snooping Version | Set the IGMP snooping version.v2 - Only support process IGMP v2 packet.v3 - Support v3 basic and v2. |
| Report Suppression | It allows the switch to handle IGMP reports between router and host, suppressing bandwidth used by IGMP. Enable / Disable - Click the toggle to enable / disable this function. - means "Enable".- means "Disable". |
II-6-1-2 VLAN Setting
This page allows you to enable/disable IGMP function, select snooping version, and enable/disable snooping report suppression.
Available settings are explained as follows:
| Item | Description |
| VLAN ID Displays the VLAN ID number of the VLAN profile. | |
| VLAN Name Displays the name of the VLAN profile. | |
| IGMP Snooping Status Displays the status (Enabled/Disabled) of the IGMP function. | |
| Immediate Leave Displays the status (Enabled/Disabled) | |
| Querier Status Displays the status (Enabled/Disabled) of IGMP querier function. | |
| Static Router Ports Displays the LAN Port (GE/LAG) to send out query to remote host. | |
| Forbidden Router Ports | Displays the forbidden LAN Port (GE/LAG). |
| Expiry Time (sec.) | Displays the time before querier is considered no longer existed. |
| Option | - Click it to modify the IGMP setting.- Clear current settings and return to factory default settings. |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| IGMP Setting | |
| Show / Hide Advanced Mode | Click to display or hide the advanced settings. |
| VLAN ID Displays the VLAN ID number of the VLAN profile. | |
| VLAN Name Displays the name of the VLAN profile. | |
| General | IGMP Snooping Enable – Click the toggle to enable / disable this IGMP snooping function. |
Below shows settings for Advanced Mode
| Router Ports Auto Learn | Click the toggle to enable / disable this function. Set the enabling status of IGMP router port learning. The server will learn router port by IGMP query. |
| Query Robustness | Set a number which allows tuning for the expected packet loss on a subnet. |
| Query Interval Set the interval of querier to send the general query. | |
| Query Response Interval | It specifies the maximum allowed time before sending a responding report in units of 1/10 second. |
| Last Member Query Counter | After querying for specified times (defined here) and still not receiving any response from the subscribed member, VigorSwitch will stop transmitting data to the related GE port(s). |
| Last Member Query Interval | The maximum time interval between counting each member query message with no responses from any subscribed member. |
| Immediate Leave | Leave the multicast group immediately on the port & VLAN where leave message is sent from, regardless there is still a subscribed member or not. Click Enable to enable Fastleave function. |
| IGMP Querier | IGMP Querier Enable - Click the toggle to enable / disable this function.In Advanced Mode,Querier Version - Set the IGMP snooping version.v2 - Only support process IGMP v2 packet.v3 - Support v3 basic and v2.For maximum compatibility, it is suggested to use querier version lower than IGMP snooping version, for there is possible network mixed with IGMP v2/v3 client and v2 query message is widely understandable for those clients. |
| IGMP Static Group | The IGMP static group is allowed to assign a VLAN/port as a specific IPv4 multicast member. Every IPv4 multicast stream that belongs to the specified group IP address will be forwarded to the specified port/VLAN member.+Add - Click to create a new group.Group IP Address - Specify the IPv4 multicast address you wish to assign for the static group (defined in VLAN ID).Member Ports - Specify the port(s) that static group with given IPv4 multicast address shall include. |
| IGMP Router | Static Router Ports - Specify LAN Port (GE/LAG) to send out query to remote host.Forbidden Router Ports - Use the drop down list to specify forbidden LAN Port (GE/LAG). |
| IGMP Forward All | Static Forward Ports - Use the drop down list to specify LAN Port (GE/LAG). Later, the multicast packets will be delivered to the network device connected by these ports.Forbidden Forward Ports - Use the drop down list to specify forbidden LAN Port (GE/LAG). Later, the multicast packets will not be delivered to the network device connected by these ports. |
After finishing this web page configuration, please click OK to save the settings.
II-6-1-3 Group Table
This page shows currently known and dynamically learned by IGMP snooping or shows the assigned IPv4 multicast address group in operation.
Available settings are explained as follows:
| Item | Description |
| +Add Click to create a new profile. | |
| VLAN ID Display the VLAN of this multicast group belongs to. | |
| Group IP Address | Display the multicast address of this multicast group. |
| Member Ports | Display the port(s) where subscribing member of this multicast group belongs to. |
| Type | Display if it is dynamically learned or statically assigned. |
| Life (Sec.) | Display the life time of this multicast member left if no membership report sent again. |
To add a new group, click the +Add link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| VLAN ID Specify a VLAN profile as IGMP Static Group. | |
| Group IP Address | It is an identifier for the group member. Packets sent to such address will be transferred to all interfaces defined in Member Ports.Specify the IPv4 multicast address you wish to assign for the static group (defined in VLAN ID). |
| Member Ports Specify the port(s) that static group with given IPv4 multicast address shall include. | |
After finishing this web page configuration, please click OK to save the settings.
II-6-1-4 Filtering Profile
The administrator can configure the user on a switch port (GE/LAG port) belonging to which multicast group and restrict the number of multicast group that the user on the switch can join. Then the administrator is able to control the network service (e.g, IP/TV service) that the user can enjoy.
The filtering profile page allows to configure up to 128 IP-group (for multicast servie) profiles (starting and ending point within an IP range shall be specified). Each IP group profile can be set for permission of / denial of network service respectively.
In addition, such filtering profile is only effective for controlling the query for multicast. It has nothing to do with the general IGMP query.
Available settings are explained as follows:
| Item | Description |
| +Add Click to create a new profile. | |
| Profile ID Displays the index number of a filtering profile. | |
| Start Address Displays the starting point for the IP range. | |
| End Address Displays the ending point for the IP range. | |
| Action Displays the action performed for this profile. | |
| Binding Ports | Displays the interface (GE/LAG) selected for this profile. |
To add a new profile, click the +Add link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| +Add Click to have new fields for creating a new profile. | |
| Profile ID Enter one filtering profile (1~128) for IGMP snooping. | |
| Start Address | Enter an IP address as the starting point for the IP range. |
| End Address | Enter an IP address as the ending point for the IP range. |
| Action | Allow - When it is selected, the request for multicast traffic will be forwarded to the multicast group normally.Deny - It is default setting. The forwarding request of multicast traffic will be discarded. |
| Binding Ports | Select the GE/LAG port(s) (interfaces) for filtering profile to process multicast traffic. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
II-6-2 MVR
Multicast VLAN Registration (MVR) can route packets received in a multicast source VLAN to one or more desination VLANs. LAN users are in the destination VLANs and the multicast server is in the source VLAN.
MVR can continuously send multicast stream for traffic in the multicast VLAN, but isolate the streams from the source VLANs for bandwidth and security reasons.
In general, MVR is able to:
• Identify the MVR IP multicast streams and their associated IP multicast group.
• Intercept the IGMP messages
Available settings are explained as follows:
| Item | Description |
| MVR Enable Click the toggle | to enable / disable the MVR function. |
 - means “Enable”.- means “Disable”. | |
| VLAN ID | Choose one VLAN profile from the drop down list as multicast source VLAN which will receive multicast data. All source ports must belong to this VLAN. The default is VLAN 1.Note: Each VLAN ID shall be configured with group address and member port. |
| Mode There are two modes offered for MVR operation.Comaptible – Multicast data received by MVR hosts (multicast server) will be forwarded to all MVR receiver ports.Dynamic – Multicast data received by MVR hosts (multicast server) on VigorSwitch will be forwarded from those MVR data and client ports grouped under MVR server. | |
| Group Start | Enter an IP address. Any multicast data sent to this IP address will be sent to all source ports on VigorSwitch; and all receiver ports will accept /receive data from that multicast address. |
| Group Count | Select a number to configure a contiguous series of MVR groupaddresses (the range for count is 1 to 128; the default is 1). |
| Query Time | Use the drop down list to define the maximum time (1 - 10 seconds) to wait for IGMP report members on a receiver port before the port is removed from multicast group. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
II-6-2-1 Port Setting
It is necessary to specify destination port and source port (GE/LAG) for Vigor system to perform MVR operation.
Available settings are explained as follows:
| Item | Description |
| Port Displays the index number of the LAN Port (GE/LAG). | |
| Role Displays the role (None, Receiver or Source) of the port. | |
| Immediate Leave Displays the status (enable/disable) of the immediate leave function. | |
| Option | - Click it to modify the port setting for MVR.- Clear current settings and return to factory default settings. |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Port | Each port can be set as Receiver or Source port respectively. If you do not satisfy with the port setting, simply click to make the modification. |
| Role | None - Noting will be happed to the selected LAN port in MVR operation.Receiver - The selected port will be treated as destination port which will receive multicast data from the multicast server.Source - The selected port will be treated as source port which will send multicast data to the receiver port. |
| Immediate Leave | Enable - Enable the function of the immediate leave. When the port (with the role of receiver) receives the leave message, it will be removed from multicast group to speed up leave latency.Disable - Disable the function of immediate leave. |
| OK Save the settings. |
After finishing this web page configuration, please click OK to save the settings.
II-6-2-2 Static Group
The MLD static group is allowed to assign a VLAN/port as a specific IP multicast member. Every IP multicast stream that belongs to the specified group IP address will be forwarded to the specified port/VLAN member.
Available settings are explained as follows:
| Item | Description |
| +Add Click to have new fields for creating a new profile. | |
| VLAN ID Displays the ID number of the VLAN. | |
| Group Address Displays the IP address(es). | |
| Member | Displays the GE/LAG port to be grouped under the selected VLAN. |
| Type | Displays if it is dynamically learned or statically assigned. |
| Life | Displays the life time of this multicast member left if no membership report sent again. |
To add a new profile, click the +Add link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| VLAN ID Display the ID number of the VLAN. | |
| Group IP Address | Define a range of IP address(es) with the format of “xxx.xxx.xxx.xxx - xxx.xxx.xxx.xxx”. |
| Member Ports | Choose GE/LAG port to be grouped under the selected VLAN. |
| OK Save the settings. | |
II-6-3 MLD Snooping
MLD snooping does the same thing as IGMP snooping. The difference is that IGMP snooping acts on IPv4 packets; MLD snooping acts on IPv6 packets. MLD snooping is the process of listening to Multicast Listener Discovery network traffic. It can examine IPv6 packets and forward these packets to designate location via VLAN port members.
flowchart
graph TD
A["Source"] --> B["Vigor router"]
B --> C["VigorSwitch"]
C --> D["Host A"]
C --> E["Host B"]
C --> F["Host C"]
B --> G["PIM (IPv6)"]
G --> H["Multicast packets (IPv6) transmission without MLD snooping"]
flowchart
graph TD
A["Source"] --> B["MLD Snooping"]
B --> C["VigorSwitch"]
B --> D["Vigor router"]
B --> E["Host A"]
B --> F["Host B"]
B --> G["Host C"]
style A fill:#f9f,stroke:#333
style B fill:#ccf,stroke:#333
style C fill:#cfc,stroke:#333
style D fill:#fcc,stroke:#333
style E fill:#cff,stroke:#333
style F fill:#ffc,stroke:#333
style G fill:#fcc,stroke:#333
II-6-3-1 MLD Snooping
Available settings are explained as follows:
| Item | Description |
| MLD Snooping Enable | Enable / Disable - Click the toggle to enable / disable this function.○ - means “Enable”.○ - means “Disable”. |
| MLD Snooping Version | VigorSwitch supports two versions of MLD snooping.MLDv1 - When it is selected, VigorSwitch will detect packets controlled by MLDv1 andbridgethe traffic to IPv6 destination defined with multicast address(es).MLDv2 - When it is selected, VigorSwitch will detect packets controlled by MLDv1 andforwardthe traffic to destination defined with multicast address(es). |
| Report Suppression | It allows the switch to handle MLD reports between router and host, suppressing bandwidth used by MLD.Enable / Disable - Click the toggle to enable / disable this function. - means "Enable". - means "Disable". |
| OK | Save the settings. |
II-6-3-2 VLAN Setting
This page allows you to enable/disable MLD snooping function, select snooping version, and enable/disable snooping report suppression.
Available settings are explained as follows:
| Item | Description |
| VLAN ID Displays the VLAN ID number of the VLAN profile. | |
| VLAN Name Displays the name of the VLAN profile. | |
| MLD Snooping Status | Displays the status (Enabled/Disabled) of the MLD snooping function. |
| Immediate Leave Displays the status (Enabled/Disabled) of the immediate leave function. | |
| Static Router Ports Displays the LAN Port (GE/LAG) to send out query to remote host. | |
| Forbidden Router Ports | Displays the forbidden LAN Port (GE/LAG). |
| Expiry Time (sec.) | Displays the time before querier is considered no longer existed. |
| Click it to modify the MLD setting. | |
| Clear current settings and return to factory default settings. | |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| MLD Setting | |
| Show / Hide Advanced Mode | Click to display or hide the advanced settings. |
| VLAN ID Displays the VLAN ID number of the VLAN profile. | |
| VLAN Name Displays the name of the VLAN profile. | |
| General | MLD Snooping Enable - Click the toggle to enable / disable this MLD snooping function. - means "Enable". - means "Disable". |
| Below shows settings for Advanced Mode | |
| Router Ports Auto Learn | Click the toggle to enable / disable this function. Set the enabling status of MLD router port learning. The server will learn router port by IGMP query. |
| Query Robustness | Set a number which allows tuning for the expected packet loss on a subnet. |
| Query Interval Set the interval of querier to send the general query. | |
| Query Response Interval | It specifies the maximum allowed time before sending a responding report in units of 1/10 second. |
| Last Member Query Counter | After querying for specified times (defined here) and still not receiving any response from the subscribed member, VigorSwitch will stop transmitting data to the related GE port(s). |
| Last Member Query Interval | The maximum time interval between counting each member query message with no responses from any subscribed member. |
| Immediate Leave | Leave the multicast group immediately on the port & VLAN where leave message is sent from, regardless there is still a subscribedmember or not. Click the toggle to enable Fastleave function. |
| MLD Static Group | The MLD static group is allowed to assign a VLAN/port as a specific IPv4 multicast member. Every IPv6 multicast stream that belongs to the specified group IP address will be forwarded to the specified port/VLAN member.+Add - Click to create a new group.Group IP Address - Specify the IPv6 multicast address you wish to assign for the static group (defined in VLAN ID).Member Ports - Specify the port(s) that static group with given IPv6 multicast address shall include. |
| MLD Router | Static Router Ports - Specify LAN Port (GE/LAG) to send out query to remote host.Forbidden Router Ports - Use the drop down list to specify forbidden LAN Port (GE/LAG). |
| MLD Forward All | Static Forward All Ports - Use the drop down list to specify LAN Port (GE/LAG). Later, the multicast packets will be delivered to the network device connected by these ports.Forbidden Forward All Ports - Use the drop down list to specify forbidden LAN Port (GE/LAG). Later, the multicast packets will not be delivered to the network device connected by these ports. |
After finishing this web page configuration, please click OK to save the settings.
II-6-3-3 Group Table
This page shows currently known and dynamically learned by IGMP snooping or shows the assigned IPv4 multicast address group in operation.
Available settings are explained as follows:
| Item | Description |
| +Add Click to create a new profile. | |
| VLAN ID Display the VLAN of this multicast group belongs to. | |
| Group IP Address | Display the multicast address of this multicast group. |
| Member Ports | Display the port(s) where subscribing member of this multicast group belongs to. |
| Type | Display if it is dynamically learned or statically assigned. |
| Life (Sec.) | Display the life time of this multicast member left if no membership report sent again. |
To add a new group, click the +Add link to open the setting page.
![Group Table + Add VLAN ID Group IP Address Member Ports Type Life (Sec.) Option 1 [default] Select Home Static Selective All Filtering Profile 1 (default)](/content/2026/05/984286/images/08403f2ee7538bc3e3a2808eb280a8fdb74223d4e35a5ff0e0233ccb7f812ea3.jpg)
Available settings are explained as follows:
| Item | Description |
| VLAN ID Specify a VLAN profile as IGMP Static Group. | |
| Group IP Address | It is an identifier for the group member. Packets sent to such address will be transferred to all interfaces defined in Member Ports.Specify the IPv6 multicast address you wish to assign for the static group (defined in VLAN ID). |
| Member Ports Specify the port(s) that static group with given IPv4 multicast address shall include. | |
After finishing this web page configuration, please click OK to save the settings.
II-6-3-4 Filtering Profile
The administrator can configure the user on a switch port (GE/LAG port) belonging to which multicast group and restrict the number of multicast group that the user on the switch can join. Then the administrator is able to control the network service (e.g, IP/TV service) that the user can enjoy.
The filtering profile page allows to configure up to 128 IP-group (for multicast servie) profiles (starting and ending point within an IP range shall be specified). Each IP group profile can be set for permission of / denial of network service respectively.
In addition, such filtering profile is only effective for controlling the query for multicast. It has nothing to do with the general IGMP query.
Available settings are explained as follows:
| Item | Description |
| +Add Click to create a new profile. | |
| Profile ID Displays the index number of a filtering profile. | |
| Start Address Displays the starting point for the IP range. | |
| End Address Displays the ending point for the IP range. | |
| Action Displays the action performed for this profile. | |
| Binding Ports | Displays the interface (GE/LAG) selected for this profile. |
To add a new profile, click the +Add link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| +Add Click to have new fields for creating a new profile. | |
| Profile ID | Enter one filtering profile (1~128) for MLD snooping. |
| Start Address | Enter an IP address as the starting point for the IP range. |
| End Address | Enter an IP address as the ending point for the IP range. |
| Action | Allow - When it is selected, the request for multicast traffic will be forwarded to the multicast group normally.Deny - It is default setting. The forwarding request of multicast traffic will be discarded. |
| Binding Ports | Select the GE/LAG port(s) (interfaces) for filtering profile to process multicast traffic. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
II-6-4 MLD Snooping Statistics
This page displays the MLD snooping statistics.
II-7 ONVIF Surveillance
ONVIF (Open Network Video Interface Forum), an International standard for current surveillance system industry, focuses on security products based on network IP address.
With this feature, VigorSwitch can:
- Integrate the ONVIF device and surveillance network
● Centralize management of IP video products - View video images directly on VigorSwitch WUI
● Offer remote IP video products maintenance
Switch the toggle to enable the ONVIF Device Discovery function. Then click Apply.
II-7-1 Topology
ONVIF devices can be centralized and managed remotely via VigorSwitch. With a hierarchy view, the administrator can manage several ONVIF devices and check abnormal traffic detected by the Vigor system.
Available settings are explained as follows:
| Item | Description |
  | Camera - Displays the number of IP camera(s) connected to VigorSwitch. The panel sketch on the screen will display which LAN port that the IP camera connected.NVR - Displays the number of NVR device(s) connected to VigorSwitch. The panel sketch on the screen will display which LAN port that the NVR device connected. |
| Change VigorSwitch will detect the ONVIF device based on the interface selected. | |
| +Add New Group A group can contain one (IP camera or NVR, as group leader) to several devices (IP cameras as group devices).Click to create a new group for managing multiple devices. | |
| Index Displays the index number of the group profile. | |
| Group Name | Displays the name of the group profile. |
| Group Devices | Displays the number of the devices grouped under this profile. |
| VLAN | Displays the VLAN profile. |
| Click it to modify the group setting. | |
To modify settings for a port, click the
link to open the setting page.
Available settings are explained as follows:
| I[62C]X[44A] | Description |
E[6CZX] Group | |
S[5W]V / Hide AdvancedN | Click to display or hide the advanced settings. |
| C[Y4Z]X[4AX]IF Device Login (optional) | |
U name / Password[CKBH][64BK] [47WJ1] [03XA][75Y3][25O3][597X][1700X][Y15H][Y15H][38ZA] | Enter a name / password as the default value.In the entire ONVIF Surveillance menu, VigorSwitch will input this value in advanced and retrieve data. System administrator can access the IP device in which the username and password are as same as the default values.However, you can also input another username/password manually if the IP device username/password is different from the one you enter in Default Username/Default Password. |
A Inced Mode - Throughput Threshold Alert | |
A to All MemberF[XKT3][WXYT] | Check the box to apply the throughput threshold setting to all member ports. |
I[BCCZ]Express Alert Toggle the switch to enable the function. Set the ingress limit value. [FYAM][RNKA][DTYW] | When the incoming traffic (packet) of the GE port reaches the limit, the Vigor System will send an alert email to the system administrator.Rate Limit- Enter the ingress rate as a threshold to send mail alert. |
E [WTR]Express Alert Toggle the switch to enable the function.[WATC] | Rate Limit- Enter the egress rate as a threshold to send mail alert. |
natural_image
Row of 12 small rectangular icons with varying shades of gray and a single green square at position 11 (no text or symbols)
To create a new group, click the +Add New Group link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Add New Group | |
| Show / Hide Advanced Mode | Click to display or hide the advanced settings. |
| Group Name Enter the name of a group. | |
| Group Leader The system will detect the NVR or IP cameras, and list them on the field of NVR or Group Leader. | |
| Group Member This field lists all devices (IP cameras) not included by other group.Select one IP device to multiple devices or select all the devices for managed by this group. | |
| ONVIF Device Login (optional) | |
| Username / Password | Enter a name / password as the default value.In the entire ONVIF Surveillance menu, VigorSwitch will input this value in advanced and retrieve data. System administrator can access the IP device in which the username and password are as same as the default values.However, you can also input another username/password manually if the IP device username/password is different from the one you enter in Default Username/Default Password. |
| Throughput Threshold Alert | |
| Apply to All Member Ports | Check the box to apply the throughput threshold setting to all member ports. |
| Ingress Alert Toggle the switch to enable the function. Set the ingress limit value.When the incoming traffic (packet) of the GE port reaches the limit, the Vigor System will send an alert email to the system administrator.Rate Limit - Enter the ingress rate as a threshold to send mail alert. | |
Egress Alert Toggle the switch to enable the function. Set the egress limit value.
When the incoming traffic (packet) of the GE port reaches the limit, the Vigor System will send an alert email to the system administrator.
Rate Limit - Enter the ingress rate as a threshold to send mail alert.
After finishing this web page configuration, please click OK to save the settings.
II-7-2 Snapshot Stream
This page can offer a real-time video of specified IP camera for monitoring and control environments.
Available settings are explained as follows:
| Item | Description |
| Snapshot Stream | |
| Camera Name Displays the device name of the IP camera. | |
| IP Address Displays the IP address of the IP camera. | |
After authenticated with correct username and password, the image of the specified IP camera (supported by VigorSwitch) will be shown immediately. | |
| Username / Password - The default username/password will be input if it is configured on the Topology page. However, if the default input is not the correct username/password, enter the correct one of the IP camera instead.Login - Click it to authenticate the username and password for the specified IP camera. | |
A pop-up window (Video Preview) appears to display a live image on the screen.
II-7-3 Device Maintenance
The system administrator can remotely configure time setting and reboot the devices (IP cameras or NVRs) managed by Vigor switch.
Available settings are explained as follows:
| Item | Description |
| Device Maintenance | |
| Camera Name Displays the device name of the IP camera. | |
| IP Address Displays the IP address of the IP camera. | |
| MAC Address Displays the MAC address of the IP camera. | |
| Status | Displays the status (enabled or disabled) of the IP camera. |
Option
- Click to configure detailed settings.
Click
to configure detailed settings. First you have to login the ONVIF device.
After entering the correct username and password of the device, the detailed settings page will be shown as follows:
Available settings are explained as follows:
| Item | Description |
| General Information | |
| Factory Default Reset - Reset the factory default to the IP device. | |
| Device Reboot Reboot - Reboot the IP device immediately. | |
| Device Name | Click to modify the name of the device. |
| MAC Displays the MAC address of the device. | |
| Admin IP Displays the IP address of the device. | |
| Manufacturer Displays the manufacturer of the device. | |
| Model Displays the model name of the device. | |
| Firmware Displays the firmware version used by the device. | |
| Location Displays the location of the device. | |
| Group Displays the name of the group. | |
| Current Time Displays the time set for the device. | |
| UTC Time | Display the time and date information related to the selected device. |
| Time Zone Displays the time zone based on the location of the device. | |
| Daylight Saving | Displays the status (enabled/disabled) of the daylight saving function. |
Auto Device Check Click the toggle to enable / disable this function. - means "Enable".- means "Disable".Failure Action - Configure the power behavior for each LAN port.Power Cycle - Once the device is offline, Vigorswitch will power off the device and then power on the device again.Power Off - When the device is offline, power off the device immediately.Nothing - When the device is offline, no action will be performed.Note:When a PoE hub connecting to LAN port of VigorSwitch, the power behavior (on/off) to the PoE hub also will apply to all the devices connecting to the PoE hub.Mail Alert - Click the toggle to enable / disable this function. When the device is offline, Vigor system will send an alert mail to notify the recipient.With Snapshot - If enabled, the switch will try to get snapshot from the device per half hour. Before using this feature, set the group authentication information when adding group or configure Default Username/Password in the Topology page first.When the device is offline, no action will be performed. | |
| Access Information | |
| Mode Change the connection mode for this device.Static - When it is selected, you have to enter value for network setting manually for the IP device.IP Address - Enter an IPv4 address for the IP devicePrefix Length - Specify the subnet mask for the IP address.Gateway - Enter the IPv4 address for the gateway.DNS Server1/2 - Enter the IP address for primary / secondary DNS server.DHCP - When it is selected, the IP device will be assigned with the settings by the network's DHCP server automatically to access the Internet.Hostname - Display the hostname of the DHCP server. | |
| Zero Configuration Click the toggle to enable / disable this function.Enable - The network settings for the IP device will be configured automatically.Disable - The network settings for the IP device must be configured manually. | |
| HTTP Port Click the toggle to enable / disable this function. Enable - Click it to enable the HTTP port configuration and enter a port value if required. Disable - Disable the HTTP port configuration. | |
| HTTPS Port Click the toggle to enable / disable this function. Enable - Click it to enable the HTTPS port configuration and enter a port value if required. Disable - Disable the HTTPS port configuration. | |
| RTSP Port Click the toggle to enable / disable this function. Enable - Click it to enable the RTSP port configuration and enter a port value if required. Disable - Disable the RTSP port configuration. | |
II-8-1 RADIUS
This page allows the network administrator to add and configure multiple RADIUS servers.
Available settings are explained as follows:
| Item | Description |
| +Add Server Click to create a new server profile. | |
| Edit Default Click to modify the value(s) for Retry, Timeout and Key String. These values will be saved as default settings. | |
| + Add Server Edit Default | |
| Retry(1-10) 3 | |
| Timeout(1-30) 3 | |
| Key String | |
| Cancel Apply | |
To create a new profile, click the + Add Server link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Add Server | |
| Server Address Type | Specify whether switch uses a hostname to resolve address by DNS to connect to server, or directly connect using IPv4 address.HostnameIPv4IPv6 |
| Server Address Enter the server's address corresponding with address type given. | |
| Server Port Enter the port number used by RADIUS server. | |
| Priority Specify the priority that switch uses this server. The higher number,the lower priority. Switch will start with server with lowest priority. | |
| Retry Set the retry time before this server being considered not-reachable.Use Default - Use the default value. | |
| Timeout Set the time (in seconds) before this server being considered lost connection.Use Default - Use the default value. | |
| Key String Enter the string used to encrypt and authenticate with RADIUS server.Use Default - Use the default setting. | |
| Authentication Specify whether you would like to use this server for switch login authentication or 802.1x access port authentication, or both.AllLogin802.1X | |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
II-8-2 TACACS+
This page allows the network administrator to add and configure multiple TACACS+ server.
Available settings are explained as follows:
| Item | Description |
| +Add Server Click to create a new server profile. | |
| Edit Default Click to modify the value(s) for Timeout and Key String. These values will be saved as default settings. | |
 | |
To create a new profile, click the + Add Server link to open the setting page.
| Item | Description |
| Add Server | |
| Server Address Type | Specify whether switch uses a hostname to resolve address by DNS to connect to server, or directly connect using IPv4 address.HostnameIPv4IPv6 |
| Server Address Enter the server's address corresponding with address type given. | |
| Server Port Enter the port number used by TACACS+ server. | |
| Priority Specify the priority that switch uses this server. The higher number,the lower priority. Switch will start with server with lowest priority. | |
| Timeout Set the time (in seconds) before this server being considered lost connection.Use Default - Use the default value. | |
| Key String Enter the string used to encrypt and authenticate with TACACS+ server.Use Default - Use the default setting. | |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
Chapter III Security
natural_image
Abstract shield icon with a red keyhole symbol inside (no text or numbers)III-1-1 Authentication Settings
The authentication manager allows you to configure securely access from any host connected to physical ports. You may apply multiple ways of authentication to each port.
Available settings are explained as follows:
| Item | Description |
| 802.1x/MAC Authentication | |
| Authentication Type | Specify which type (802.1x, MAC-based) will be used for authentication. Choose to enable 802.1x or MAC-based authenticate method for host connecting to Ethernet port. You may configure which type to be used per port, but enabling any per port without enabling here will not be effective.MAC-Based802.1x |
| Guest VLAN | Click the toggle to enable/disable a Guest VLAN for those who have not successfully authenticated with any given methods. - means "Enable". If enabled, specify a VLAN ID number.- means "Disable".Guest VLAN ID - Choose one of the VLAN ID as a Guest VLAN. |
| MAC-Based User MAC Format | Specify how the MAC-based user ID should be expressed in EAP message between AAA server and switch. |
| Accounting | |
| Enable Click the toggle to | enable / disable this function.Server - Displays the type of the server. |
| Port Status | |
| Port Displays the index number of the GE ports. | |
| Select physical port(s) for applying settings. Note that port authentication will not be effective if none of them were enabled. | |
| Enabled Authentication Types | Displays the authentication type (802.1x and/or MAC-based) used by this port. |
| Host Mode Displays the host mode used by this port. | |
| Selected Authentication Types | Displays the authentication type (e.g., 802.1x) used by this port. |
| Selected Methods | Displays the authentication method (e.g., RADIUS) used by this port. |
| Guest VLAN Displays the status (enable/disable) of guest VLAN function. | |
| Click it to modify the port setting. | |
| Clear current settings and return to factory default settings. | |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Port Authentication Settings | |
| Port Displays the GE port number. | |
| Authentication Control | Click the toggle to enable / disable this function. - means "Enable". - means "Disable".If enabled, selectAuto, Authorized All or Unauthorized All as the control mode. |
| Enable Authentication Types | Select 802.1x and/or MAC-based authenticate method for host connecting to this port.802.1xMAC-based |
| Authentication Types | Displays available authentication types of AAA server (or local) you wish to have on this port. |
| Selected Authentication Types (In Order) | Specify the order of authentication type (e.g., 802.1x) you wish to have on this port. |
| Available Methods For TACACS+ | Display available methods of AAA server (or local) you wish to have on this port. |
| Selected Methods (In Order) | Specify the order of authentication methods (e.g., RADIUS) you wish to have on this port. |
| Host Mode Multi-Auth - | Each host are authenticated individually.Multi Hosts - Authentication is done on port basis, only one authenticated host is required; other hosts connected to this port can access freely as authenticated host.Single Host - Only one host can be authenticated, and access the port. |
| Advanced Mode | |
| Guest VLAN | Click the toggle to enable / disable this function. Select Enable to enable Guest VLAN on this port for those didn't authenticated successfully. |
| RADIUS VLAN Assignment | Static - Switch will use the VLAN assignment from the RADIUS server if it receives the information. If there is not VLAN information, it will keep the original VLAN of the host Cooperative - Switch will ignore the VLAN assignment from the RADIUS server and keep the original VLAN of the host.Reject - Switch will reject the host if it does not receive the VLAN information from the RADIUS server. |
| Max. Hosts | If Multi-Auth mode is selected as Host Mode, the total number of hosts cannot exceed the maximum number of hosts configured here. |
| Periodic Reauthentication | The hosts via the selected GE port will be re-authenticated periodically.Click the toggle to enable / disable this function. If enabled, specify the time setting.Periodic Reauthentication Period - Enter a time period. When the time is up, the host shall return to initial state and prepare to pass authentication procedure again. Default is 3600 seconds. |
| Inactive Timeout When a GE port is disabled just because authentication fails several times, the host connected to that port will be blocked for a period of time configured in quiet period.Later, after the time period set in this field, the host will be allowed to perform authentication again. | |
| Quiet Period When a GE port is disabled just because authentication fails several times, the host connected to that port will be blocked for a period of time configured in quiet period.Later, after the time period set in this field, the host will be allowed to perform authentication again. | |
| EAP Resent Period | Set the period for host to re-send EAP (Ethernet Automatic Protection)requests.Default value is 30 (seconds). |
| Supplicant Timeout | Set a period of time for the maximum number of EAP requests will be sent.If a response from the host is not received by VigorSwitch after the defined period (supplicant timeout), the authentication process will be started again. |
| Server Timeout | Set a period of time for the server. The EAP requests shall be resent to the supplicant within the time; otherwise, the time setting will lapse and the requests won't be sent out. |
| Max. EAP Request | Set a period of time for the server. The EAP requests shall be resent to the supplicant within the time; otherwise, the time setting will lapse and the requests won't be sent out. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
III-1-2 Local/MAC Account
This page allows the network administrator to create profiles by entering MAC address of the hosts to be authenticated.
Available settings are explained as follows:
| Item | Description |
| +Add Local MAC Account | Click to create a new MAC account. |
| MAC Address Displays the MAC address of the host. | |
| Policy Displays the policy (pass or block) of the host. | |
| VLAN Displays the VLAN ID assigned by the host. | |
| Reauthentication Period | Displays the time this account is required to be authenticated again. |
| Inactive Timeout Displays the time to log off this account. | |
To add a new profile, click the +Add Local MAC Account link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Local MAC Account | |
| MAC Address Enter the MAC address of the host. | |
| Policy | Pass - Click it to forcefully authenticate the host specified above.Block - The host specified above will not be authenticated by VigorSwitch.If Pass is selected, advanced mode will be shown below. |
| Advanced Mode | |
Assign VLAN Click the toggle to enable / disable this function. - means "Enable". - means "Disable".Specify which VLAN will be assigned by the host of this account. | |
| Reauthentication Period | Click the toggle to enable / disable this function.Set the time this account is required to be authenticated again after authentication has taken place. |
| Inactive Timout Click the toggle to enable / disable this function.Set a time. When the account is still inactive after the set time, it will be logged out by the system. | |
After finishing this web page configuration, please click OK to save the settings.
III-1-3 Authentication Hosts
This page displays information related to the host authenticated by VigorSwitch.
III-2 Access Control List
An Access Control List (ACL) is a sequential list of permit or deny conditions that apply to IP addresses, MAC addresses, or other more specific criteria. This switch tests ingress packets against the conditions in an ACL one by one. A packet will be accepted as soon as it matches a permit rule, or dropped as soon as it matches a deny rule. If no rules match, the frame is accepted.
Users can create the Access Control List (ACL) based on Layer 2 filtering, the MAC layer, Layer 2 to Layer 4 filtering, the IPv4, and Layer 2 to Layer 4 filtering, the IPv6. The ACL is composed by many Access Control Element (ACE) rules. You can create a new ACL here; then add multiple ACEs.
You may provide filtering/matching criteria for one or more packet characteristics (such as Source/Destination MAC, VLAN, 802.1p) for this ACE to identify the packet.
III-2-1 Access Control List
List Type - MAC
To create a new access control list, click the +Add Access Control List link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Access Control List | |
| List Name Enter a name for creating a new ACL profile. | |
| List Type Specify the filtering type (MAC/IPv4/IPv6).Select MAC. | |
| Rules | |
| Sequence | Assign a sequence number to this ACE. The sequence is used to identify which one of ACEs in an ACL is firstly used to match ingress packets. The switch port bound with an ACL use the contained ACE rules, start with the one with lower sequence number to match the packet first. |
| Action Select the action applied to the packet matched this ACE. Permit or deny the packets into switch core, or shutdown the port for stopping further transmission.PermitDenyShutdown | |
| Any Source MAC If disabled, please enter IP address with the subnet mask.Any Source MAC | |
| Any Destination MAC If disabled, please enter IP address with the subnet mask. | |
| Any Ethernet Type | Specify Ethernet type for filtering. Select Any Ethernet.Or, enter the value with the format of "0x600 ~ 0xFFFF".□ Any EthernetType (0x600-0xFFFF) |
| Any VLAN | Specify VLAN profile for filtering. Select Any VLAN.Or, enter a VLAN number. The packets coming from the VLAN specified here will be filtered by Vigor device.□ Any VLAN (1-4094) |
| Any 802.1p Priority | Specify the 802.1p priority value for filtering. Select Any 802.1p Priority.Or, enter a number from 0 to 7.□ Any 802.1p Priority (0-7) |
| +Add Rule | Click it to create more ACE rule(s) for this ACL.Each ACL profile can be added with 8 ACE rules. |
After finishing this web page configuration, please click OK to save the settings.
List Type - IPv4
To create a new access control list, click the +Add Access Control List link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Access Control List | |
| List Name Enter a name for creating a new ACL profile. | |
| List Type Specify the filtering type (IPv4). | |
| Rules | |
| Sequence | Assign a sequence number to this ACE. The sequence is used to identify which one of ACEs in an ACL is firstly used to match ingress packets. The switch port bound with an ACL use the contained ACE rules, start with the one with lower sequence number to match the packet first. |
| Action Select the action applied to the packet matched this ACE. Permit or deny the packets into switch core, or shutdown the port for stopping further transmission.·Permit·Deny·Shutdown | |
| Any Protocol Specify the protocol for filtering.Any Protocol - Default setting. All packets will be filtered.Self-Define - Enter a number (0 - 255) to specify a protocol. For example, 1 means “Internet Control Message”; 6 means “Transmission Control”.ICMP, IP in IP,... - Choose one of the protocols (e.g., ICMP, IP in IP, TCP, EGP, IGP...) from the drop down list. Packets passing through the selected protocol will be filtered. | |
| Sequence(1-2147483647)ActionAny protocol (0-255) | Self-DefineICMPIP in IPTCPSelf-Define | |
| Any Source IP Specify the source IPv4 address for filtering.Any Source IP – Default setting. All packets will be filtered.Select Any Source IP. Or, enter the IP address to filter the packets coming from that address.Any Source IP 0-32 | ||
| Any Destination IP Specify the destination IPv4 address for filtering.Any Destination IP – Default setting. All packets will be filtered.Select Any Destination IP. Or, enter the IP address to filter the packets coming from that address.Any Destination IP 0-32 | ||
| Any Service Any Service - Default setting. All packets will be filtered.DSCP – All IP traffic is mapped to queues based on the DSCP field in the IP header. If traffic is not IP traffic, it is mapped to the lowest priority queue.IP Precedence - All IP traffic is mapped to queues based on the IP Precedence field in the IP header. If traffic is not IP traffic, it is mapped to the lowest priority queue.Any Service (0-63)DSCP IP Precedence | ||
| Any Source Port Specify the source port number for filtering the packets.Any Source Port – Default setting. All packets will be filtered.Select Any Source Port. Or, enter the port number.Single – Only the packets passing through the number defined here will be filtered.Any Source port (0-65535)Single RangeRange – Only the packets passing through the port range defined | ||
here will be filtered. | |
| Any Destination Port | Specify the destination port number for filtering the packets.Any Destination Port- Default setting. All packets will be filtered.Select Any Destination Port. Or, enter the port number.Single- Only the packets passing through the number defined here will be filtered. Range- Only the packets passing through the port range defined here will be filtered. |
| Any ICMP Type | Any ICMP Type- Default setting. All packets will be filtered.Echo Reply, Destination Unreachable.... - Choose one of the type (e.g., Destination Unreachable, Echo Reply, MLD Query....) from the drop down list.Self-Define- Specify a type number (0 - 255) for ICMP code. For example, 0 means “Echo Reply”; 254 means “RFC3692-style Experiment 2”. |
| Any ICMP Code | ach ICMP type can be defined with different codes. For example, if you define ICMP Type as “3”, then the available codes for Type 3 will be 0-15.Any ICMP Code- Default setting. All packets will be filtered.Select Any ICMP Code. Or, enter 0 to 255 based on the ICMP type specified. |
| +Add Rule | Click it to create more ACE rule(s).Each ACL profile can be added with 8 ACE rules. |
List Type - IPv6
To create a new access control list, click the +Add Access Control List link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Access Control List | |
| List Name Enter a name for creating a new ACL profile. | |
| List Type Specify the filtering type (IPv6). | |
| Rules | |
| Sequence | Assign a sequence number to this ACE. The sequence is used to identify which one of ACEs in an ACL is firstly used to match ingress packets. The switch port bound with an ACL use the contained ACE rules, start with the one with lower sequence number to match the packet first. |
| Action Select the action applied to the packet matched this ACE. Permit or deny the packets into switch core, or shutdown the port for stopping further transmission.·Permit·Deny·Shutdown | |
| Any Protocol Specify the protocol for filtering.Any Protocol - Default setting. All packets will be filtered.Self-Define - Enter a number (0 - 255) to specify a protocol. For example, 1 means “Internet Control Message”; 6 means “Transmission Control”.ICMP, IP in IP,... - Choose one of the protocol (e.g., ICMP, TCP, EGP...) from the drop down list. Packets passing through the selected protocol will be filtered. | |
 | |
Any Source IP Specify the source IPv6 address for filtering.Any Source IP - Default setting. All packets will be filtered.Select Any Source IP. Or, enter the IP address to filter the packets coming from that address. | |
Any Destination IP Specify the destination IPv6 address for filtering.Any Destination IP - Default setting. All packets will be filtered.Select Any Destination IP. Or, enter the IP address to filter the packets coming from that address. | |
Any Service Any Service - Default setting. All packets will be filtered.DSCP - All IP traffic is mapped to queues based on the DSCP field in the IP header. If traffic is not IP traffic, it is mapped to the lowest priority queue.IP Precedence - All IP traffic is mapped to queues based on the IP Precedence field in the IP header. If traffic is not IP traffic, it is mapped to the lowest priority queue. | |
Any Source Port Specify the source port number for filtering the packets.Any Source Port - Default setting. All packets will be filtered.Select Any Source Port. Or, enter the port number.Single - Only the packets passing through the number defined here will be filtered. Range - Only the packets passing through the port range defined | |
here will be filtered. | |
| Any Destination Port | Specify the destination port number for filtering the packets.Any Destination Port- Default setting. All packets will be filtered.Select Any Destination Port. Or, enter the port number.Single- Only the packets passing through the number defined here will be filtered. Range- Only the packets passing through the port range defined here will be filtered. |
| Any ICMP Type | Any ICMP Type- Default setting. All packets will be filtered.Echo Reply, Destination Unreachable....- Choose one of the type (e.g., Destination Unreachable, Echo Reply, MLD Query....) from the drop down list.Self-Define- Specify a type number (0 - 255) for ICMP code. For example, 0 means “Echo Reply”; 254 means “RFC3692-style Experiment 2”. |
| Any ICMP Code | ach ICMP type can be defined with different codes. For example, if you define ICMP Type as “3”, then the available codes for Type 3 will be 0-15.Any ICMP Code- Default setting. All packets will be filtered.Select Any ICMP Code. Or, enter 0 to 255 based on the ICMP type specified. |
| +Add Rule | Click it to create more ACE rule(s).Each ACL profile can be added with 8 ACE rules. |
III-1-2 Apply to Port
It allows you to bind Access Control Lists created in previous section to an interface (physical port or aggregation).
A physical port can only be bound with one of the MAC, IPv4, or IPv6 ACLs, not all.
Available settings are explained as follows:
| Item | Description |
| Port Select the port profiles (10GE1 to 10GE12) for binding ACL. | |
| MAC Access Control List | Displays the ACL (MAC) to be bound on this interface (port), so the switch may filter packets by using it. |
| IPv4 Access Control List | Displays the ACL (IPv4) to be bound on this interface (port), so the switch may filter packets by using it. |
| IPv6 Access Control List | Displays the ACL (IPv6) to be bound on this interface (port), so the switch may filter packets by using it. |
| Option | - Click it to modify the port setting.- Clear current settings and return to factory default settings. |
To modify settings for a port, click the link to open the setting page.
Access Control List Apply to Port
Apply to Port
Available settings are explained as follows:
| Item | Description |
| MAC Access Control List | Select an ACL (MAC) to be bound on this interface (port). |
| IPv4 Access Control List | Select an ACL (IPv4) to be bound on this interface (port). |
| IPv6 Access Control List | Select an ACL (IPv6) to be bound on this interface (port). |
By using the source IP address filtering function, IP source guard can prevent a malicious host from feigning a legal host with its IP address and performing malicious attack.
IP source guard is a port-based feature. Therefore, it is necessary to configure detailed settings for each GE/LAG port interface separately.
Available parameters are explained as follows:
| Item | Description |
| Port Displays the port profile (10GE1 to 10GE12, LAG1 to LAG8). Check the box to the left side for applying the IP source guard function. | |
Enabled Click the toggle to enable / disable this profile. | - means "Enable".- means "Disable". |
| Source Verification Displays the type of source IP for the packet coming from. | |
| Max. Entry | Displays the total number (0~50) of accessible entries allowed for this port. |
| Current Entry Displays the number of accessible entries of this port. | |
| Option | - Click it to modify the IP Source Guard setting of the selected port.- Clear current settings and return to factory default settings. |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| IP Source Guard | |
| Port | Displays the port profile (10GE1 to 10GE12, LAG1 to LAG8). |
| Enabled | Click the toggle to enable / disable this function. - means "Enable".- means "Disable". |
| Source Verification | Specify the type of source IP for the packet coming from.IP - Only the packet with specified IP address will be verified.IP & MAC - Only the packet with specified IP address and MAC address will be verified. |
| Max. Entry | Define the total number (0~50) of accessible entries allowed for this port. The default is 0 (no limit). |
| Accessible Entries | Define the entry for applying the IP source guard function.IP - Select this type to enter an IPv4 address and set a VLAN ID.IP & MAC - Select this type to enter an IP address, MAC address and IPv4 address.+Add Entry - Click to display blank entry boxes for configuring a new IP address, MAC address, and VLAN ID. |
After finishing this web page configuration, please click OK to save the settings.
III-4 Port Security
This page allows the network administrator to configure security settings for each port interface (GE port /LAG group). When port security is enabled for each interface, related action will be performed once detecting that the number of MAC address exceeds the limit.
Available settings are explained as follows:
| Item | Description |
| Port Security | Click the toggle to enable / disable this function. After clicking, pressApply. - means “Enable”. - means “Disable”.Enable this function to configure the settings. |
| Port Displays the index number of the GE/LAG port. | |
| Enabled Click the toggle to enable / disable this function. | Enabled - The selected port applies the port security settings. Disabled - The selected port does not apply the port security settings. |
| Max. Allowed MAC Address | Displays the maximum number of MAC addresses that the port is allowed to learn. |
| Action Displays the action performed by the selected port. | |
| Option | [YYZX] - Click it to modify the port security setting of the selected port. |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Edit Port Security | |
| Port Displays the index number of the GE/LAG port. | |
| Port Security Click the toggle to enable / disable this function. | Enabled - The selected port applies the port security settings. |
| Disabled - The selected port does not apply the port security settings. | |
| Max. Allowed MAC Address | Enter the maximum number of MAC addresses that the port is allowed to learn. |
| Action Select an action to perform when there is an unknown MAC address on the port. | Forward- Forward a packet whose source MAC is unknown to the switch. |
| Discard- Discard a packet whose source MAC is unknown to the switch. | |
| Shutdown- Shutdown this port when a packet with unknown source MAC is received. | |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
Storm Control helps to suppress possible broadcast, unknown multicast or unknown unicast storm by applying a rate limit on those packets.
This page allows a user to configure general settings for Storm Control. In addition, it is used to configure port settings for Storm Control. The configuration result for each port will be displayed on the table listed on the lower side of this web page.
Available settings are explained as follows:
| Item | Description |
| Storm Control Mode | Select the mode of storm control.Kbits/sec - Storm control rate will be calculated by octet-based.Packet/sec - Storm control rate will be calculated by packet-based. |
| Preamble & Inter Frame Gap | Select the rate calculation with/without preamble & IFG (20 bytes).Excluded - Exclude preamble & IFG (20 bytes) when count ingress storm control rate.Included - Include preamble & IFG (20 bytes) when count ingress storm control rate. |
| Port Enable/disable the port (GE1 to GE28) profiles. | |
| Enabled | Click the toggle to enable / disable this profile. - means "Enable".- means "Disable". |
| Broadcast Displays the storm control rate limited for broadcast. | |
| Unknown Multicast Displays the storm control rate limited for unknown multicast. | |
| Unknown Unicast Displays the storm control rate limited for unknown unicast. | |
| Action Displays the action performed. | |
Option
- Click to modify the storm control settings of the selected port.
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Edit Storm Control | |
| Port Display the port profile selected to be modified. | |
| Storm Control | Click the toggle to enable / disable this function. - means "Enable". - means "Disable". |
| Limiting Rate | Broadcast – Specify the storm control rate for Broadcast packet. Value of storm control rate, Unit: Kbps (Kbits per-second). The range is from 16 to 1000000.Unknown Multicast – Specify the storm control rate for unknown multicast packet. Value of storm control rate, Unit: Kbps (Kbits per-second). The range is from 16 to 1000000.Unknown Unicast - Specify the storm control rate for unknown multicast packet. Value of storm control rate, Unit: Kbps (Kbits per-second). The range is from 16 to 1000000. |
| Action | Select the state of setting.Drop – Packets exceed storm control rate will be dropped.Shutdown - Port exceeds storm control rate will be shutdown. |
After finishing this web page configuration, please click OK to save the settings.
A Denial of Service (DoS) attack is a hacker attempt to make a device unavailable to its users. DoS attacks saturate the device with external communication requests, so that it cannot respond to legitimate traffic. These attacks usually lead to a device CPU overload.
The DoS protection feature is a set of predefined rules that protect the network from malicious attacks. The DoS Security Suite Setting enables activating the security suite.
III-6-1 Properties
This page allows a user to configure DoS setting to enable/disable DoS function for global setting.
Available settings are explained as follows:
| Item | Description |
| Destination MAC=Source MAC | Drops the packets if the destination MAC address is equal to the source MAC address.Check/unchecked the box to enable/disable the function. |
| LAND Attack Drops the packets if the source IP address is equal to the destination IP address.Check/unchecked the box to enable/disable the function. | |
| UDP Flood Attack (UDP Blat) | Drops the packets if the UDP source port equals to the UDP destination port.Check/unchecked the box to enable/disable the function. |
| TCP Flood Attack (TCP Blat) | Drops the packages if the TCP source port is equal to the TCP destination port.Check/unchecked the box to enable/disable the function. |
| Ping to Death | Avoids ping of death attack. Ping packets that length are larger than 65535 bytes.Check/unchecked the box to enable/disable the function. |
| IPv6 Minimum Fragments | Checks the minimum size of IPv6 fragments, and drop the packets smaller than the minimum size. The valid range is from 0 to 65535bytes, and default value is 1240 bytes.Check/unchecked the box to enable/disable the function. |
| ICMP Fragments Drops the fragmented ICMP packets.Check/unchecked the box to enable/disable the function. | |
| IPv4 Ping Maximum Size | Determines the IPv4 PING packet with the length.Check/unchecked the box to enable/disable the function. |
| IPv6 Ping Maximum Size | Determines the IPv6 PING packet with the length.Check/unchecked the box to enable/disable the function.Ping Maximum Size - Determine the IPv4/IPv6 PING packet with the length. Specify the maximum size of the ICMPv4/ICMPv6 ping packets.The valid range is from 0 to 65535 bytes, and the default value is 512 bytes. |
| Smurf Attack | Avoids smurf attack. The length range of the netmask is from 0 to 323 bytes, and default length is 0 byte.Check/unchecked the box to enable/disable the function. |
| TCP Minimum Header Size | Checks the minimum TCP header and drops the TCP packets with the header smaller than the minimum size. The length range is from 0 to 31 bytes, and default length is 20 bytes.Check/unchecked the box to enable/disable the function. |
| TCP-SYN (SPORT<1024) Drops SYN packets with sport less than 1024.Check/unchecked the box to enable/disable the function. | |
| Null Scan Attack Drops the packets with NULL scan.Check/unchecked the box to enable/disable the function. | |
| X-mas Scan Attack Drops the packets if the sequence number is zero, and the FIN, URG and PSH bits are set.Check/unchecked the box to enable/disable the function. | |
| TCP SYN-FIN Attack Drops the packets with SYN and FIN bits set.Check/unchecked the box to enable/disable the function. | |
| TCP SYN-RST Attack Drops the packets with SYN and RST bits set.Check/unchecked the box to enable/disable the function. | |
| TCP Fragment (Offset=1) | Drops the fragmented ICMP packets.Check/unchecked the box to enable/disable the function. |
After finishing this web page configuration, please click OK to save the settings.
III-6-2 Port Setting
This page allows a user to configure and display the state of DoS protection for interfaces. The configuration result for each port will be displayed on the table listed on the lower side of this web page.
Available settings are explained as follows:
| Item | Description |
| Port | Displays the port profile (10GE1 to 10GE12). Check the box to the left side to select the port profile. |
| DoS Protection | Click the toggle to enable / disable the function of DoS Protection. - means “Enable”. - means “Disable”. |
After finishing this web page configuration, please click OK to save the settings.
III-7 Dynamic ARP Inspection
Dynamic ARP inspection (DAI) can prevent ARP spoofing attacks by validating ARP packet in a network. It can intercept, record, and discard ARP packets with invalid IP-to-MAC address bindings; and then protect the network against malicious attacks.
III-7-1 Properties
This page allows a user to configure detailed settings of DAI for each port (GE/LAG).
Available settings are explained as follows:
| Item | Description |
| Enable | Click the toggle to enable / disable the function of Dynamic ARP Inspection. - means "Enable". - means "Disable". |
| VLAN ID | Select VLAN profile(s) to apply the function of Dynamic ARP Inspection.Only the GE/LAG port within the selected VLAN will apply DAI function. |
| Port Settings | |
| Port Displays the port (10GE1 to 10GE12, LAG1 to LAG8) or ports for applying DAI function. | |
| Trust | Click the toggle to enable/disable the function of DAI for this port. |
| Source MAC Address | Click the toggle to enable/disable the function of the source MAC address validation mechanism for this port. |
| Destination MAC Address | Click the toggle to enable/disable the function of the destination MAC address validation mechanism for this port. |
| IP Address Click the toggle to enable/disable the function of IP address validation mechanism for this port. | |
| Allow IP 0.0.0.0 | Click the toggle to enable/disable the function.The IP address of “0.0.0.0” can be applied to this port if it is enabled. |
| Rate Limit Enter a rate limitation value (0~50) for this port. | |
| Option | - Clear current settings and return to factory default settings. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
III-7-2 Statistics
This page displays all statistics recorded by Dynamic ARP Inspection function.
DHCP snooping is able to validate DHCP messages obtained from untrusted sources and filter out invalid message.
For DHCP snooping to function properly, it is suggested to connect DHCP servers to VigorSwitch through trusted interfaces; because untrusted DHCP messages will be forwarded to trusted interfaces only.
III-8-1 DHCP Snooping
By default, DHCP snooping is inactive on all VLANs. You can enable such a feature on a single VLAN or a range of VLANs.
This page allows a user to configure detailed settings of DHCP Snooping for each port (GE/LAG).
Any device that is not in the service provider network will be regarded as an untrusted source (such as a customer switch). Host ports are untrusted sources. In VigorSwitch, you can assign a source as a trusted device by configuring the trust state of its connecting port.
Available settings are explained as follows:
| Item | Description |
| Enable | Click the toggle to enable / disable the function of DHCP Snooping. - means "Enable". - means "Disable". |
| VLAN ID Select VLAN profile(s) to apply the function of DHCP Snooping function.Only the GE/LAG port within the selected VLAN will apply DHCP Snooping function. | |
| Port Settings | |
| Port Displays the port (10GE1 to 10GE12, LAG1 to LAG8) or ports for | |
| applying the DHCP snooping function. | |
| Trust Click the toggle to enable/disable the function of DHCP snooping for this port. | |
| Verify Hardware Address | Click the toggle to enable/disable chaddr (client hardware address) validation of GE/LAG port. All DHCP packets will be checked if the client hardware MAC address is the same as the source MAC in Ethernet header or not. Default is disabled. |
| Rate Limit Enter the rate limitation (0~300) of DHCP packets. The unit is "pps". "0" means unlimited. Default is unlimited. | |
| Option | - Clear current settings and return to factory default settings. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
III-8-2 Option82
You can use information settings including Remote ID and Circuit ID for Option82, also known as the DHCP relay agent, to protect VigorSwitch against spoofing attacks.
This page allows a user to set a string as remote ID for DHCP option82. For example, use a switch-configured hostname or specify an ASCII text string as remote ID.
In addition, it allows a user to set string as circuit ID for DHCP option82 setting. Circuit ID shall be combined with VLAN name (or VLAN ID number) and interface name (GE/LAG port).
Available settings are explained as follows:
| Item | Description |
| Option82 | |
| Option 82 Remote ID | The string specified here is used to identify the remote host.User-defined - Check it and manually enter switch MAC In byte order in the entry box. |
| Option 82 Circuit ID | |
+Add Click to have new fields for creating a new profile.
Port - Use the drop down list to select the port (10GE1 to 10GE12, LAG1 to LAG8) or ports for applying DHCP snooping, Option82 function.
VLAN - Choose a number as VLAN ID which is easy to be identified for a packet containing with it.
Circuit ID - Enter ASCII text string in the entry box. Later, any packet passes through the specified interface (GE/LAG port) will be inserted with such information.
Port Settings
| Port | Displays the port (10GE1 to 10GE12, LAG1 to LAG8) or ports for applying the Option82 function. |
| Enabled | Click the toggle to enable / disable the function of Option82 Property.- means "Enable".- means "Disable". |
| Allow Untrust Untrusted | packets detected by VigorSwitch will be performed by the action determined here.Keep– Packets are allowed to pass through.Drop– Packets are blocked and discarded.Replace– Packets will be replaced. |
| Option | - Clear current settings and return to factory default settings. |
| OK Save the settings. |
After finishing this web page configuration, please click OK to save the settings.
III-8-3 Statistics
This page displays all statistics recorded by DHCP snooping function.
III-9 IP Conflict Prevention
A user can configure IP addresses for network devices manually. However, it might result in conflict between different devices due to using the same IP address, and cause the devices not working correctly.
IP Conflict Prevention allows you to prevent IP conflict by binding the port with the specified IP address.
Prevention Level: Off
Prevention Level: Detect & Block
Available settings are explained as follows:
| Item | Description |
| IP Conflict Prevention | |
| Prevention Level Off - The function of IP conflict prevention is disabled. | |
| Detect Only- VigorSwitch will detect the host but no further action executed.Detect & Block- VigorSwitch will detect the host and block the host if it meets the configuration on this page. | |
| Prevention Setup | Quick Setup Wizard- It is available only when Detect & Blockis selected as Prevention Level. The system will guide to bind server port with an IP address step by step.Step 1: Choose a server port. Click Next. Step 2: Confirm the port type. Click Next. Step 3: Wait for the network detection. Step 4: Confirm / modify the protected host. Click Next. |
Step 5: Set up the prevention level. Click Next.
flowchart
graph LR
A["Define the DHCP Server port"] --> B["Please confirm the port type"]
B --> C["Please confirm the protected hosts"]
C --> D["Please set up prevention level"]
D --> E["Detect Only"]
E --> F["Detect & Block"]
After clicking OK, the IP address specified for the GE port will be unavailable for other network devices.
| Permit Link Aggregation | It appears after running the quick start wizard for IP conflict prevention. The devices connected to the LAG ports will not be blocked due to using the same IP. |
| Protected Host | |
| Port Displays the LAN port number (GE1 to GE28, LAG1 to LAG8) of the DHCP server. | |
| IP Displays the IP address of the DHCP server. | |
| MAC Address Displays the MAC address of the DHCP server. | |
| Host Type Displays the result of host type (e.g., Dynamic Binding) of the DHCP server. | |
| Conflicted By Displays the object conflicting with the host. | |
| Option | - Click to modify the settings of the selected port. - Click it to remove the selected entry. |
| Clear Click it to remove all entries. | |
After finishing this web page configuration, please click OK to save the settings.
To modify settings for a host, click the link of each port to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Edit Port | |
| Port Displays the LAN port number (GE1 to GE28, LAG1 to LAG8) of the selected host. | |
| Port Type Displays the port type of the selected host. | |
| IP Address(es) Enter the IP address based on the port type. | |
| There's a DHCP Server in this port | Yes - If there is a DHCP server in this port already, click Yes.No - If there is no DHCP server in this port already, click No. |
III-10 Loop Protection
Loop event might be caused due to wrong hardware connection. VigorSwitch will periodically send packets out to check if they loopback or not. This page allows you to set conditions and perform an action when VigorSwitch detects the looped packet.
Available settings are explained as follows:
| Item | Description |
| Loop Protection | |
| Enable | Enable / Disable - Click the toggle to enable / disable this function. VigorSwitch will detect the loop event of the GE port automatically. - means "Enable".- means "Disable". |
| When loop occurred.. | When the switch detects loop situation occurred to a port; it will perform the action selected in this field.Log - The switch will record such event as a log.Shutdown Port - The switch will shut down the port.After 1 second/2 seconds/3 seconds - Determine the time to record the event and / or shutdown the port.The settings configured here will be treated as global setting for all GE ports. |
| Port Displays the port number (GE1 to GE28). Check the box to the left to enable the selected port. | |
| Status | Enable / Disable - Click the toggle to enable / disable this function. |
| Action Display the specified action for the selected port. | |
| Option | - Click to modify the loop protection settings of the selected port. |
To modify settings for a port, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Port Displays the port number (10GE1 to 10GE12). | |
| Enable | Enable / Disable - Click the toggle to enable / disable this function. VigorSwitch will detect the loop event of the GE port automatically. - means "Enable". - means "Disable". |
| Action | Follow Global Setting - Adopts the settings configured for When loop occurred.Log - The switch will record such event as a log.Shutdown Port - The switch will shut down the port.Shutdown Port and Log - The switch will shut down the port and record the event as a log. The system administrator will view the content from system log. |
After finishing this web page configuration, please click OK to save the settings.
III-11 Port Recovery
This page is used for configuring settings to recover the port which is being blocked by the following functions after a defined period of time.
Available settings are explained as follows:
| Item | Description |
| Port Recovery | |
| Recover the port(s) after | The port being blocked will be able to receive and send traffic after the time period configured here. |
| Check the box to block the port(s) if encountering the situations listed below. | |
| BPDU Guard Checked - Recover the port being blocked by BPDU Guard after the time set in Recovery Interval. | |
| Self Loop Checked - Recover the port being blocked by self loop Guard after the time set in Recovery Interval. | |
| Broadcast Flood Checked - Recover the port being blocked by broadcast flood after the time set in Recovery Interval. | |
| Unknown Multicast Flood | Checked - Recover the port being blocked by unknown multicast flood after the time set in Recovery Interval. |
| Unicast Flood Checked - Recover the port being blocked by unicast flood after the time set in Recovery Interval. | |
| Access Control List | Checked - Recover the port being blocked by ACL after the time set in Recovery Interval. |
| Port Security Checked - Recover the port being blocked by port security after the time set in Recovery Interval. | |
| DHCP Rate Limit Checked - Recover the port being blocked by DHCP rate limit after the time set in Recovery Interval. | |
| ARP Rate Limit Checked - Recover the port being blocked by ARP rate limit after the time set in Recovery Interval. | |
This page is left blank.
Chapter IV Utilities
natural_image
Abstract geometric composition with four gray squares and one red diamond (no text or symbols)When the system administrator is unable to get Ping information from the targeted LAN port, Vigor system will send an alert e-mail to the system administrator.
The configuration result for each port will be displayed on the table listed on the lower side of this web page.
Available settings are explained as follows:
| Item | Description |
| Port Display the port number (10GE1 to 10GE12).Check the box to the left to enable the port settings. | |
| Checking Status | Enable / Disable - Click the toggle to enable / disable this function.- means "Enable". - means "Disable". |
| Ping IP Address Enter the IP address of the PoE device for check. | |
| Interval Time(sec.) | The ping check will be performed every 15, 30, 60 or 120 seconds for the selected port (PoE device). |
| Retry Time The system will perform the ping check the selected port (PoE device)for 1, 3 or 5 times. | |
| Mail Alert | Enable / Disable - Click the toggle to enable / disable this function. |
| Reset | - Clear current settings and return to factory default settings. |
After finishing this web page configuration, please click OK to save the settings.
This page is used for configuring the ping test and perform the ping test.
Available settings are explained as follows:
| Item | Description |
| Ping Test | |
| Protocol Choose IPv4/IPv6 to specify IP address for sending ping to check if network path is ok. | |
| Ping Host Enter the IP address of SNMP server based on the protocol selected above. | |
| Ping Time | It means how many times to send ping request packet.Enter a number between 1 and 5 as the count and the default configuration is 4. |
| Interval Defines the interval to perform ping action. For example, “1” means the ping action will be performed per second. | |
| Run Test Perform ping action. | |
IV-3 Fan Test
The built-in fan in the VigorSwitch can be tested if it runs normally or not. Simply click Test to perform the fan test.
To get general information about the SFP vendor, select Utilities>>SFP Vendor Info.
sFlow (Sampled Flow) is a method which uses sampling to get the network packets information for the system administrator understanding the network operation and the network congestion.
VigorSwitch plays the role of sFlow agent which collects and sends the collected data to a sFlow controller (e.g., an external monitoring software) for executing data analysis. The system administrator shall install the sFlow controller on the device which can communicate with VigorSwitch. When the administrator wants to monitor the data traffic via VigorSwitch and get the statistics, he/she can configure VigorSwitch as sFlow agent by configuring the settings listed below. Later, the sFlow controller can analyze the data and offer statistics for the system administrator.
Available settings are explained as follows:
| Item | Description |
| Profile Status | Enable / Disable - Click the toggle to enable / disable this function. - means "Enable". - means "Disable". |
| Packet Sampling Rate | Displays the sampling rate of the packets for the server to capture. |
| Counter Sampling Interval | Displays the time (sec.) for the sFlow server to obtain the traffic on the interface (LAN port) periodically. |
| Collector Address | Displays the hostname, IPv4 address, or IPv6 address of the data collector device. |
| Collector Port | Displays the port number used for real-time monitoring traffic status. |
| Data Source Port | Displays the LAN interface (10GE1 to 10GE12) of the data source port. |
| Option | [ATST] -lick to modify the loop protection settings of the selected port. |
ck tl
Available settings are explained as follows:
| Item | Description |
| sFlow Profile # | |
| Profile Enable | Enable / Disable - Click the toggle to enable / disable the settings for the selected profile.  - means "Enable". - means "Disable". |
| Packet Sampling Rate | Set the sampling rate of the packets for the server to capture. |
| Counter Sampling Interval | Set a time for the sFlow server to obtain the traffic on the interface (LAN port) periodically. Then, the sever will make statistics and transmit the data to the collector device. The default value is 30 (seconds). |
| Collector Address Type | Usually, you can specify a server or an IP address as a data collector device. Specify the role of the server (hostname, IPv4 or IPv6). |
| Collector Address | Enter the hostname, IPv4 address or IPv6 address according to the collector type selected. |
| Collector Port | The port number is the basic sampling unit which can be used for real-time monitoring traffic status. The default port number is 6343. |
| Data Source Ports | Specify the LAN interface (10GE1 to 10GE12) as the data source port. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
This page is left blank.
Chapter V Monitoring
natural_image
Simple icon of a red heartbeat line inside a computer monitor (no text or symbols)V-1-1 System Log Information
This page allows the user to set filtering conditions and displays the filtering result.
Available settings are explained as follows:
Item
Description
Filter Click to set the conditions for filtering.
Type - Specify the time (Past 1 Hour, Past 1 Day, Past 1 Week) for filtering.
Log Type - Select RAM (explore the logs contained in volatile memory (also known as RAM) or Flash (explore the logs contained in non-volatile memory).
Log Level - Select severity (emerg, alert, crit, error, warning, notice, info and debug) of log messages which you wish to filter out for review.
Log Category - Select the categories (related features) of logs you wish to review.
| Clear All Clear it to remove all logs displayed in this page. |
| Refresh Click it to refresh the log. |
| Time Displays the filtering time type. |
| Log Type Displays the log type (RAM or Flash). |
| Log Level Displays the severity of the log. |
| Log Category Displays the category of the log. |
| Content Displays the brief explanation of the log. |
V-1-2 System Log Settings
This page allows users to enable system logging into local Syslog and specific remote Syslog server for storage.
V-1-2-1 Local
Available settings are explained as follows:
| Item | Description |
| System Log Settings | |
| System Log | Enable / Disable - Click the toggle to enable / disable this function.  - means “Enable”. - means “Disable”. |
| System Log Mail | Enable / Disable - Click the toggle to enable / disable this function. Syslog Mail Server - Click to configure Syslog Mail Server. |
| Where to Log | |
| Local | Log in - Displays the log type. Enable - Select the box to enable the log type (RAM/Flash). |
To modify settings for the Syslog Mail Server, click the link to open the setting page.
Available settings are explained as follows:
| Item | Description |
| Syslog Mail Server | |
| Description Displays the name of the Syslog Mail Server. | |
| Server Status | Enable / Disable - Click the toggle to enable / disable the Syslog Mail Server settings. - means "Enable".- means "Disable". |
| SMTP Server Enter IP address or URL of the SMTP server. | |
| SMTP Port Enter the port number for the SMTP server. | |
| Authentication | Enable / Disable - Click the toggle to enable / disable the authentication mechanism.Usage - Enter a user name for authentication.Password - Enter a password for authentication. |
| Encryption | Enable / Disable - Click the toggle to enable / disable this function. After enabling Authentication, choose one of the encryption servers for data encryption.STARTTLS - The mail will be encrypted with StartTLS.SSL/TLS - The mail will be encrypted with StartTLS. |
| Sender Enter the email address which will send the syslog mail out. | |
| Receiver Enter the email address which will receive the syslog mail. | |
| Mail Notification | |
| Log Type Vigor system will send the e-mail related to the selected feature(e.g., AAA, ACL) to the recipient. | |
| Send Test Mail | After clicking this button, VigorSwitch system will send a test mail to the recipient. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
V-1-2-2 Remote
This page allows users to enable system logging into a specific remote Syslog server for storage.
Available settings are explained as follows:
| Item | Description |
| System Log Settings | |
| System Log | Enable / Disable - Click the toggle to enable / disable this function. - means “Enable”. - means “Disable”. |
| System Log Mail | Enable / Disable - Click the toggle to enable / disable this function.Syslog Mail Server - Click to configure Syslog Mail Server. |
| Where to Log | |
| +Add Server Click to create a new remote server. | |
| Log In Displays the index number of the remote server. | |
| Server IP: Port Displays the IP address and port number used by the server. | |
| Log Level Displays the severity of the system log. | |
| Facility Displays the facility of the remote Syslog server. | |
To add a remote server, click the "+Add Server" to open the edit page.
Available settings are explained as follows:
| Item | Description |
| Log Server | |
| Server IP Address Enter | IP address of the Syslog server. |
| Server Port Specify the port that syslog should be sent to. | |
| Log Level Select severity (emerg, alert, crit, error, warning, notice, info and debug) of log messages which will be stored. | |
| Facility One device supports multiple facilities (represented with facility ID, local0 to local7) of remote Syslog server. For each facility ID contains different Syslog server configuration, please choose a facility ID for this Syslog server. | |
After finishing this web page configuration, please click OK to save the settings.
V-2 Bandwidth Utilization
This page offers the traffic statistics including data information and data of interframe gap for each port.
Available settings are explained as follows:
| Item | Description |
| Auto Refresh Select the time interval for refreshing this page. | |
| Interframe Gap | The data of the interframe gap can be displayed or hidden by enabling/disabling for Interframe Gap.Enable / Disable - Click the toggle to enable / disable this function. - means "Enable". - means "Disable". |
V-3 DHCP Table
This page shows the IP list assigned by the DHCP server.
V-4 Routing Table
V-5 CLI Sessions
This page shows a list of CLI command executed. You can delete the selected CLI session by click the Remove button under the Edit item.
V-6-1 General Statistics
This page offers the statistics of LLDP packets of each port (10GE1 to 10GE12).
Available settings are explained as follows:
| Item | Description |
| General Statistics | |
| Clear All Clear it to remove all logs displayed in this page. | |
| Refresh Click it to refresh the status page. | |
V-6-2 LLDP Device
This page displays information for LLDP local and remote devices.
V-6-2-1 Local
This page displays information for LLDP local device.
Available settings are explained as follows:
| Item | Description |
| Refresh Click it to refresh the status page. | |
| Device Summary | Display a summary of the LLDP information for this switch.Chassis ID Subtype - Display the type of chassis ID, such as the MAC address.Chassis ID - Display Identifier of chassis. Where the chassis ID subtype is a MAC address, the MAC address of the switch is displayed.System Name - Display model name of switch.System Description - Display description of switch.Capabilities Supported - Display the primary functions of the device, such as Bridge, WLAN AP, or Router.Capabilities Enabled - Primary enabled functions of the device.Port ID Subtype - Display the type of the port identifier that is shown. |
| Port Details Display detailed information of the selected GE port.Click > to review the detailed information contained in TLVs sent out from each interface, containing MAC/PHY, 802.3, 802.3 Link Aggregation, 802.1 VLAN and Protocol for each LAN port (GE1 to GE28). | |
V-6-2-2 Remote
This page is used to view the information sent from neighboring devices by LLDP protocol.
Available settings are explained as follows:
| Item | Description |
| Refresh Click it to refresh the status page. | |
| Port Displays the number of the local port to which the neighbor is connected. | |
| Chassis ID Subtype Displays the type of chassis ID (for example, MAC address). | |
| Chassis ID Displays the identifier of the 802 LAN neighboring device's chassis. | |
| Port ID Subtype Displays the type of port identifier. | |
| Port ID Displays the number of port identifier. | |
| System Name Displays the name of the switch. | |
| Time to Live Displays the time interval in seconds after which the information for remote device will be deleted. | |
V-6-3 LLDP Overloading
This page allows user to review current size, overall size of LLDP packet and whether it is to exceed maximum allowed size of single LLDP packet.
Available settings are explained as follows:
| Item | Description |
| Refresh Click it to refresh the status page. | |
| Port | Displays the name of the port. |
| Total | Displays the total number of bytes of LLDP information in each packet. |
| Left to Send | Displays the total number of available bytes left for additional LLDP information in each packet. |
| Status | Displays if LLDP TLVs has overloaded the PDU maximum size or not. |
| Mandatory | Displays how many bytes used by mandatory TLVs. |
| 802.3TLVs | Displays how many bytes used by 802.3 TLVs. |
| Optional TLVs | Displays how many bytes used by optional TLVs. |
| 802.1 TLVs | Displays how many bytes used by 802.1 TLVs. |
V-7 GVRP Statistics
GVRP (Generic Attribute Registration Protocol) is used automatically for exchanging information for VLAN membership between switches. This page counts the GVRP information received on each port.
V-8 MLD Snooping Statistics
This page counts the MLD messages received or transmitted on the network.
| Rx | Tx | ||
| Total | 0 | Leave | € |
| Valid | 0 | Report | € |
| Invalid | 0 | General Query | € |
| Other | 0 | Special Group Query | € |
| Leave | 0 | Source-Specific Group Query | € |
| Report | 0 | ||
| General Query | 0 | ||
| Special Group Query | 0 | ||
| Source-Specific Group Query | 0 | ||
The Spanning Tree Protocol (STP) can be used to detect and disable network loops, and to provide backup links between switches, bridges, or routers.
This page allows users to edit the general setting of the STP CIST port and browser CIST port status.
Available settings are explained as follows:
| Item | Description |
| Refresh Click it to refresh the status page. | |
| Port Displays the interface number for GE and LAG. | |
| Identifier Displays the spanning tree port identifier. | |
| Path Cost Displays current path cost of given port. | |
| Designated Root Bridge | Displays the identifier of designated root bridge. |
| Root Path Cost | Displays the operational root path cost. |
| Designated Bridge | Displays the identifier of next bridge on this port. |
| Configure BPDUs Rx | Displays the counts of the received CONFIG BPDU. |
| TCN BPDUs Rx. | Displays the counts of the received TCN BPDU. |
| Configure BPDUs Tx. | Displays the counts of the transmitted CONFIG BPDU. |
| TCN BPDUs Tx | Displays the counts of the transmitted TCN BPDU. |
V-10 Dynamic ARP Statistics
| Port | Forward | Source MAC Failure | Destination MACF... | Source IP Validatio... | Destination IP Valid... | IP-MAC Mismatch ... |
| 10GE1 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE2 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE3 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE4 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE5 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE6 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE7 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE8 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE9 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE10 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE11 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10GE12 | 0 | 0 | 0 | 0 | 0 | 0 |
| LAG1 | 0 | 0 | 0 | 0 | 0 | 0 |
| LAG2 | 0 | 0 | 0 | 0 | 0 | 0 |
| LAG3 | 0 | 0 | 0 | 0 | 0 | 0 |
| LAG4 | 0 | 0 | 0 | 0 | 0 | 0 |
| LAG5 | 0 | 0 | 0 | 0 | 0 | 0 |
| LAG6 | 0 | 0 | 0 | 0 | 0 | 0 |
V-10 DHCP Snooping
| Port | Forward | Client Hardware Addiv... | Untrust Port Drop | Untrust Port Drop With ... | Invalid Drop |
| 10GE1 | 0 | 0 | 0 | 0 | 0 |
| 10GE2 | 0 | 0 | 0 | 0 | 0 |
| 10GE3 | 0 | 0 | 0 | 0 | 0 |
| 10GE4 | 0 | 0 | 0 | 0 | 0 |
| 10GE5 | 0 | 0 | 0 | 0 | 0 |
| 10GE6 | 0 | 0 | 0 | 0 | 0 |
| 10GE7 | 0 | 0 | 0 | 0 | 0 |
| 10GE8 | 0 | 0 | 0 | 0 | 0 |
| 10GE9 | 0 | 0 | 0 | 0 | 0 |
| 10GE10 | 0 | 0 | 0 | 0 | 0 |
| 10GE11 | 0 | 0 | 0 | 0 | 0 |
| 10GE12 | 0 | 0 | 0 | 0 | 0 |
| LAG1 | 0 | 0 | 0 | 0 | 0 |
| LAG2 | 0 | 0 | 0 | 0 | 0 |
| LAG3 | 0 | 0 | 0 | 0 | 0 |
| LAG4 | 0 | 0 | 0 | 0 | 0 |
| LAG5 | 0 | 0 | 0 | 0 | 0 |
| LAG6 | 0 | 0 | 0 | 0 | 0 |
This page displays statistics for GE/LAG ports.
Available settings are explained as follows:
| Item | Description |
| Clear All Clear it to remove all logs displayed in this page. | |
| Refresh Click it to refresh the status page. | |
| Port Displays the port number (GE/LAG). | |
Chapter VI System Maintenance
natural_image
Abstract graphic with a gray gear and red line, no text or symbols present.VI-1-1 Device Info
This page displays general information (name, location and contact) for the VigorSwitch.
Available settings are explained as follows:
| Item | Description |
| Device Name Displays the name of this VigorSwitch. Change the name if required. | |
| Location Define the location of this VigorSwitch. | |
| Contact Define the contact information of this VigorSwitch. | |
After finishing this web page configuration, please click OK to save the settings.
VI-1-2 Time
This page allows a user to specify time and activate SNTP server manually.
Available settings are explained as follows:
| Item | Description |
| Time | |
| Current System Time Display current system time based on the time server. | |
| Time Mode | SelectSNTP or Manual.If SNTP is selected, configure:SNTP/NTP Server- Enter the web site of the time server or the IP address of the server.Server Port- Enter the port number use by the time server.If Manual is selected, configure:Manual Time- Specify static time (year, month, day, hours, minutes and seconds) manually.Auto Detect Time Zone- Click the toggle to enable / disable this function.- means “Enable”.Daylight Saving Time- Click the toggle to enable / disable this function. If enabled, select the mode of daylight saving time.Recurring- Using recurring mode of daylight saving time.Non-Recurring- Using non-recurring mode of daylight saving time.USA-Using daylight saving time in the United States that starts on the second Sunday of March and ends on the first Sunday of November.European- Using daylight saving time in the Europe that starts on the last Sunday. |
| when Recurring is selected | Daylight Saving Time Offset - Specify the adjust offset of daylight saving time.Recurring From - Specify the starting time of recurring daylight saving time.Recurring To - Specify the ending time of recurring daylight saving time. |
| when Non-Recurring is selected | Daylight Saving Time Offset - Specify the adjust offset of daylight saving time.Non-recurring From - Specify the starting time of non-recurring daylight saving time.Non-recurring To - Specify the ending time of recurring daylight saving time. |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
VI-1-3 Configuration
Configuration Backup allows a user to backup the firmware image or configuration file on the switch to remote TFTP server or host file system through HTTP protocol.
Configuration Restore allows a user to upgrade the firmware image or configuration file on the switch to remote TFTP server or host file system through HTTP protocol.
Available settings are explained as follows:
| Item | Description |
| Configuration Backup | |
| Backup Method Select Backup method. | HTTP - Use WEB browser to backup firmware.TFTP - Use TFTP to backup firmware.Server IP Address - Enter the IPv4/IPv6 address for the TFTP server. |
| Backup Content | Backup - Make a backup copy for the configurations/SWM for VigorSwitch. |
| Configuration Restore | |
| Restore Method | Select Restore method.HTTP - Use WEB browser to restore firmware.Select Configuration File - Choose the file which will be used to restore the configuration settings.TFTP - Use TFTP to restore firmware.Server IP Address - Enter the IPv4/IPv6 address for the TFTP server.File Name - Enter the firmware image or configuration file name on the TFTP server. |
After finishing this web page configuration, please click OK to save the settings.
VI-1-4 Firmware
This page allows a user to upgrade the firmware image or configuration file on the switch to remote TFTP server or host file system through HTTP protocol.
Available settings are explained as follows:
| Item | Description |
| Firmware | |
| Current Firmware Version | Displays current used firmware. |
| Upgrade Method | Select Upgrade method:HTTP - Use WEB browser to upgrade firmware.Select Firmware File - Choose the firmware file located in your computer.TFTP - Use TFTP to upgrade firmware.Server IP Address - Enter the IPv4/IPv6 address for the TFTP server.File Name - Enter the firmware image or configuration file name on the TFTP server. |
After finishing this web page configuration, please click OK to save the settings.
VI-2 Access Management
VI-2-1 LAN Access
The switch needs an IP address for it to be managed over the network. The factory default IP address is 192.168.1.224. The subnet mask specifies the network number portion of an IP address. The factory default subnet mask is 255.255.255.0.
Use the IP Address (IPv4/IPv6) screen to configure the switch IP address and the default gateway device. The gateway field specifies the IP address of the gateway (next hop) for outgoing traffic. In addition, this page allows the network administrator to change the VLAN ID of management access. Management access protocols such as http, https, SNMP and etc., are only accessible from the VLAN specified as management VLAN.
Available settings are explained as follows:
| Item | Description |
| IPv4 Access | |
| IP Mode Select the mode of network connection. | |
| DHCP - Use static IPv4 address. | |
| Static - Use DHCP provisioned IP address and Gateway if feasible. | |
| IP Address - Enter the IP address of your switch in dotted decimal notation for example 192.168.1.224. If static mode is enabled, enter IP address in this field. | |
| Subnet Mask - Enter the IP subnet mask of your switch in dotted decimal notation for example 255.255.255.0. If static mode is enabled, enter subnet mask in this field. | |
| Gateway - Enter the IP address of the gateway in dotted decimal notation. If static mode is enabled, enter gateway address in this field. | |
| DNS Server1/2 - Enter primary/ secondary DNS server address in this field. | |
IPv6 Access
Auto Configuration Enabled - Let the switch automatically configure IPv6 address.
Click the toggle to enable / disable this function.
- means "Enable".
- means "Disable".
DHCPv6 Client - Enable this feature if there is a DHCPv6 server on your network for assigning IPv6 Address, instead of using Router Advertisement.
Disabled -
- IPv6 Address - Enter the IPv6 address of your switch. If auto configuration mode is disabled, enter IPv6 address in this field.
Gateway - Enter the IPv6 address of the router as your default IPv6 gateway to access IPv6 Internet or other IPv6 network.
DNS Server1/2 - Enter primary/ secondary DNS server address in this field.
Management VLAN
Management VLAN Select the VLAN ID as management VLAN.
Protocol Access
HTTP Server, HTTPS Server, Telnet Server, SSH Server, Enforce HTTPS Server
Select the protocol(s) for remote access.
After finishing this web page configuration, please click OK to save the settings.
VI-2-2 Management Authentication & Profile
The system administrator can log in VigorSwitch from profiles defined on this page. All profiles will apply the configuration of management server(s) and authentication method(s) settings.
Available settings are explained as follows:
| Item | Description |
| Management Authentication | |
| Management Server Displays available servers set as management server. | |
| Authentication Method | Displays available protocols for different management servers.Select one or more protocols for each server. |
| Management List | Displays a list of profiles that will apply the settings of server and authentication defined above.+ Add Profile - Click to create a new management profile. |
To add a remote server, click the "+Add Profile" to open the edit page.
Available settings are explained as follows:
| Item | Description |
| MANAGEMENT ACCESS PROFILE | |
| Profile Name Enter a name for an authentication profile. | |
| Profile Enable Click the toggle to enable / disable this profile. | |
 - means "Enable".- means "Disable". | |
+Add Rule Click to create a rule.
IP Version - Specify the IP address/subnet to which the ACL should be
| applied. All - All the IP address should be applied. IPv4 - Specify the IPv4 address /subnet. Enter the IPv4 address/subnet to which the ACE rule should apply. IPv6 -Specify the IPv6 address /subnet. Enter the IPv6 address/subnet to which the ACE rule should apply.Action - Select the action to be taken on the traffic of selected service type. Deny - Incoming / outgoing data which meets ACE rules will be blocked. Permit - Incoming / outgoing data which meets ACE rule is allowed to pass through. Port - Select the ports to which the ACL profile should be applied. Management - Specify a management server for this rule. Priority - Specify a priority number (1 to 65535) for such rule. The lower the number, the higher the priority. | |
| OK Save the settings. |
After finishing this web page configuration, please click OK to save the settings.
This page allows a user to configure TR-069 settings for connecting to VigorACS 3.
Available settings are explained as follows:
| Item | Description |
| Show/Hide Advanced Mode | Click to display / hide the advanced mode settings. |
TR-069 Click the toggle to enable / disable this function. | - means "Enable".- means "Disable". |
| Basic Mode - ACS Server | |
| ACS IP/Domain | Enter the IP address or domain name of the server. |
| Username Enter the username that you want to link with the VigorACS (Auto Configuration Server). | |
| Password Enter the password that you want to link with the VigorACS (Auto Configuration Server). | |
| Test with Inform | Click to send a message to test if this CPE is able to communicate with VigorACS server. |
| Advanced Mode - ACS Server | |
| Protocol | Choose HTTP or HTTPS for connecting with VigorACS. |
| Port Enter a value that VigorACS can use to access to this switch. | |
| ACS IP/Domain | Enter the IP address or domain name of the server. |
| Handler Enter the URL that you want to link with the VigorACS (Auto Configuration Server). | |
| Username Enter the username that you want to link with the VigorACS (Auto Configuration Server). | |
| Password Enter the password that you want to link with the VigorACS (Auto Configuration Server). | |
| Test with Inform | Click to send a message to test if this CPE is able to communicate with VigorACS server. |
| CPE Settings | |
| CPE Client | Choose HTTP or HTTPS for connecting with VigorACS. |
| URL Display the URL of VigorSwitch | |
| Port Enter a value that VigorACS can use to access to this switch. | |
| Username | Enter the username that VigorACS can use to access into this switch. |
| Password | Enter the password that VigorACS can use to access into this switch. |
| TLS Version | |
| TLS Minimum Protocol Version | Due to security consideration, the built-in HTTPS VPN server of the router had upgraded to TLS1.x protocol (TLS1.2/TLS1.3). Select one of the versions. |
| Periodic Inform | |
| Enable Click the toggle to enable/disable the function. | |
| Interval Time Set the interval time for the switch to send notification to CPE. | |
| STUN Settings | |
| Enable Click the toggle to enable / disable this function. | |
| Server Address Enter the IP address of the STUN server. | |
| Server port Enter the port number of the STUN server. | |
| Minimum Keep Alive Period | If the STUN server is enabled, the switch must send binding request to the server for the purpose of maintaining the binding in the Gateway. Please type a number as the minimum period. The default setting is "60 seconds". |
| Maximum Keep Alive Period | If the STUN server is enabled, the switch must send binding request to the server for the purpose of maintaining the binding in the Gateway. Please type a number as the maximum period. A value of "-1" indicates that no maximum period is specified. |
| Notification | |
| Port Link Up/Down | Vigor system will check the health status of LAN ports including link up /down, or speed change.Select LAN port(s) to do the health check of port link. |
| Link Speed Change Select LAN port(s) to do the health check of speed change. | |
After finishing this web page configuration, please click OK to save the settings.
VI-2-4 OpenVPN
Devices connecting to VigorSwitch can transmit data to remote end via OpenVPN to ensure the information security.
Available settings are explained as follows:
| Item | Description |
| Remote Management | Click the toggle to enable / disable OpenVPN tunnel between VigorSwitch with the remote end. - means “Enable”.- means “Disable”. |
| Select Configuration File | It is available when remote management is enabled.As a VPN client, please import the OpenVPN config file coming from OpenVPN server. |
| Current Configuration File | Click to remove current configuration file. |
| Session Status Display current OpenVPN status (Disabled, Connecting or Success). | |
After finishing this web page configuration, please click OK to save the settings.
VI-2-5 Webhook
Without getting any request, VigorSwitch will send the data (if available) that a user concerned to the specified URL (provided by remote client) automatically.
![System Maintenance / Access Management CAN Access Management Authentication & Profile TR 009 Open/VTN Methods Account & Password Webhook Evaluated URL:http://www.draytek.com(Drs) Repeat Period: 1 Meta Keep my settings while reset default. Test POST .Drapter/example HTTP3.1 Note: www.drytek.com User-Agent: "VigorSwitch FX210", 010DA000000 system-type application/json Content-Length: 172 {"Service": {"UASD": "0B110-AA-0B048-0B", "type": "Switch", "Name": "FX210", "model": "VigorSwitch FX210", "manufacturer": "DrayTek", "CV utilization": 16, "Memory": 33}] Cancel OK](/content/2026/05/984286/images/66f3644169f1e4003368d7bac954519c6c5d568feadfeae39f8ff0da9e4662bc.jpg)
Available settings are explained as follows:
| Item | Description |
| Enable | Click the toggle to enable / disable the webhook service. The data will be transmitted to the specified URL. - means “Enable”.- means “Disable”. |
| URL | Specify the destination to receive the real-time data by entering the URL.Please get the URL from the client who wants to obtain the newest and available data automatically from the Vigor switch. |
| Repeat Period Set the transmission interval (unit is minute). | |
| Keep my settings while reset default | Check the box to keep the webhook configuration when resetting VigorSwitch with default settings. |
| Test Vigor system will send a test report to the remote address. | |
After finishing this web page configuration, please click OK to save the settings.
VI-2-6 Account & Password
This page allows a user to add or delete local user on switch database for authentication.
Available settings are explained as follows:
| Item | Description |
| +Add Account Click to create a new account (up to eight accounts). | |
| Account Displays the name of the account. | |
| Permission Displays the privilege level (Admin or View Only) of the account. | |
| Option | - Click to modify the account settings. |
To modify an existing schedule profile, click the link of of the one to be changed.
To add a schedule profile, click the "+ Add Account " to open the edit page.
Available settings are explained as follows:
| Item | Description |
| Add Account | |
| Account Enter a username for new account. | If you want to modify an existed user account, simply enter the same string in this field. Then, modify the password and choose privilege level. After clickingApply, the existed user name will be modified with different values. |
| Permission | Administer - Allow to change switch settings.View Only- See switch settings only. Not allow to change it. |
| Password Enter a password for new account. | |
| Confirm Password Enter the password again for confirmation. | |
| Password Strength | Displays the strength of the password, indicated by the words “weak”, “medium” or “strong”. |
After finishing this web page configuration, please click OK to save the settings.
LLDP is a one-way protocol; there are no request/response sequences. Information is advertised by stations implementing the transmit function, and is received and processed by stations implementing the receive function. The LLDP category contains LLDP and LLDP-MED pages.
VI-3-1 LLDP Port Setting
This page allows a user to select specified port or all ports to configure LLDP state.
Available settings are explained as follows:
| Item | Description |
| Port Displays the index number of GE ports (10GE1 to 10GE12). | |
| Status | Displays the transmission of LLDP PDUs. |
| Optional TLVs | Displays the data communication protocols and optional information. |
| VLAN | Displays the VLAN ID number. |
| Option | - Click to modify the LLDP port settings of the selected port.- Clear current settings and return to factory default settings. |
To modify the port settings for the selected port, click the link of of the one to be changed.
Available settings are explained as follows:
| Item | Description |
| Port Displays the index number of 10GE port. | |
| LLDP Enable | Click the toggle to enable / disable this function. - means "Enable". - means "Disable".TX&RX – Transmit and receive LLDP PDUs both.TX Only – Transmit LLDP PDUs only.RX Only - Receive LLDP PDUs only. |
| Optional TLVs | Within data communication protocols, optional information may be encoded as a type-length-value or TLV element inside a protocol. TLV is also known as tag-length value.The type and length are fixed in size (typically 1-4 bytes), and the value field is of variable size.Select the LLDP optional TLVs to be carried (multiple selection is allowed).Available items include System Name, Port Description, System Description, System Capability, 802.3 MAC-PHY, 802.3 Link Aggregation, 802.3 Maximum Frame Size, Management Address and 802.1 PVID. |
| VLAN Select the VLAN ID | number to be performed (multiple selections are allowed). |
After finishing this web page configuration, please click OK to save the settings.
VI-3-2 LLDP-MED Setting
This page allows the network administrator to set MED (Media Endpoint Discovery) network policy and configure TLV (Type / Length / Value) settings for each port.
Available settings are explained as follows:
| Item | Description |
| Option | - Click to modify the LLDP port settings of the selected policy.- Clear current settings and return to factory default settings. |
VI-3-2-1 MED Network Policy
To modify the port settings for the selected MED network policy, click the link of ____ of the one to be changed.
Available settings are explained as follows:
| Item | Description |
| Policy ID Choose a number for configuring the policy profile. Available selections include 1 to 32. | |
| Policy Enable | Click the toggle to enable / disable this function. - means "Enable". - means "Disable". |
| Application | There are several applications which can be used for MED network. Selections include Voice, Voice Signaling, Guest Voice, Guest Voice Signaling, Softphone Voice, Video Conferencing, Stream Video and Video Signaling. |
| VLAN | Set a VLAN ID (ranging from 1 to 4094) for this profile. |
| VLAN Tag Specify if the outgoing packets will be tagged or not.Untag – Packets will be sent out without any tag.Tag – Packets will be sent out with a number tagged. | |
| Priority Set Layer2 priority (range from 0 to 7). | |
| DSCP Set DSCP value (range form 0 to 63). | |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
VI-3-2-2 LLDP-MED Port Setting
To modify the port settings for the selected MED port setting, click the link of ____ of the one to be changed.
Available settings are explained as follows:
| Item | Description |
| LLDP-MED Port Setting | |
| Port Displays the index number of 10GE port. | |
| LLDP-MED Enable | Click the toggle to enable / disable the LLDP MED on the selected port. - means "Enable". - means "Disable". |
| Optional TLVs | There are three TLVs (Type / Length / Value) for choosing: Location, Inventory, Network Policy and Select All. Select the one(s) for this profile. |
| Network Policies | Select network policy profiles for applying onto the selected port. |
| Location TLV Coordinate | Enter the coordinate location in 16 pairs of hexadecimal characters. |
| Civic | Enter the civic address in 6 ~ 160 pairs of hexadecimal characters. |
| ECS ELIN Enter the ECS (Emergency Call Service) ELIN (Emergency Location Identification Number) in 10 ~ 25 pairs of hexadecimal characters. | |
| OK Save the settings. | |
After finishing this web page configuration, please click OK to save the settings.
VI-3-3 LLDP Statistics
This page offers the statistics of LLDP packets (in, out and error) of each port (10GE1 to 10GE).
Available settings are explained as follows:
| Item | Description |
| Clear All | Clear it to remove all logs displayed in this page. |
| Refresh Click it to refresh the log. | |
| Port Displays the port number. | |
Simple Network Management Protocol (SNMP) is an "Internet-standard protocol for managing devices on IP networks". Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks and more.
SNMP is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention.
SNMP is a component of the Internet Protocol Suite as defined by the Internet Engineering Task Force (IETF). It consists of a set of standards for network management, including an application layer protocol, a database schema, and a set of data objects.
An SNMP-managed network consists of three key components:
- Managed device
• Agent - software which runs on managed devices
• Network management station (NMS) - software which runs on the manager
A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers.
An agent is a network-management software module that resides on a managed device. An agent has local knowledge of management information and translates that information to or from an SNMP-specific form.
A network management station (NMS) executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs may exist on any managed network.
VI-4-1 View
This page allows the network administrator to create MIB views (Management information base) and then include or exclude OID (Object Identifier) in a view.
Available settings are explained as follows:
| Item | Description |
| +Add View Click it to add a new MIB view profile. | |
| View Name Displays the name of the MIB view. | |
To add a schedule profile, click the "+ Add View " to open the edit page.
Available settings are explained as follows:
| Item | Description |
| View Name Enter a name of the MIB view. | |
| OID Subtree Enter an OID string to be included or excluded (based on the view type setting) from the MIB view. | |
| Type Determine to include or exclude the selected MIBs. | |
| +Add OID Subtree Click it to add a new MIB view profile. | |
After finishing this web page configuration, please click OK to save the settings.
VI-4-2 Group
This page allows the network administrator to group SNMP users and assign different authorization and access privileges.
Available settings are explained as follows:
| Item | Description |
| +Add Group Click it to create a new group profile. | |
| Group Name Displays the name for the group. | |
| Version Displays the SNMP version adopted by the group. | |
| Security Level | Displays the SNMP security level for the group. |
| Read View Displays the read view profile. | |
| Write View Displays the write view profile. | |
| Notify View Displays the notify view profile. | |
To add a schedule profile, click the "+ Add Group " to open the edit page.
Available settings are explained as follows:
| Item | Description |
| Add Group | |
| Group Name Enter a name for the group. | |
| SNMP Version Specify SNMP version (v1, v2 or v3). | |
| Security Level Specify SNMP security level for the group. It is available when SNMPv3 is selected.No Security - No authentication.Authentication - Authentication without encryption will be performed for packets.Authentication and Privacy - Authentication with encryption will be performed for packets. | |
| Read View | Click the toggle to enable / disable this function. If it is enabled, users of this group have the right to read the selected MIB view. - means "Enable". - means "Disable". |
| Select Read View | Use the drop down list to select one of the views. The default is "all", which means the group user can read all MIB views. |
| Write View | Click the toggle to enable / disable this function. If it is enabled, users of this group have the right to write the selected MIB view.Select Write View - Use the drop down list to select one of the views. The default is "all", which means the group user can write all MIB views. |
| Notify View | Click the toggle to enable / disable this function. If it is enabled, users of this group have the right to send notifications for the selected MIB view. |
| Select Notify View - Use the drop down list to select one of the views. The default is “all”, which means the group user have the right to send notification for all MIB views. | |
After finishing this web page configuration, please click OK to save the settings.
VI-4-3 Community
This page allows a user to add/remove multiple communities of SNMP.
Available settings are explained as follows:
| Item | Description |
| +Add Community Click it to add a new community. | |
| Community Name Displays the community name. | |
| View Displays the view profile. | |
| Group Displays the name of the group. | |
| Access Right | Displays the accessing right (read, read and write) that this community has. |
| Option | - Click to modify the settings of the community. - Remove the selected entry. |
To modify an existing community profile, click the link of of the one to be changed.
To add a schedule profile, click the "+ Add Community " to open the edit page.
Available settings are explained as follows:
| Item | Description |
| Add Community | |
| Community Name Enter a name as community name. The maximum length of the text is limited to 23 characters. | |
| Access Authorization Directly - View and access right can be specified for this SNMP community profile.Via Group - Specify one of the SNMP groups for this SNMP community profile. | |
| View | Simply specify one of the view profiles from the drop down list. |
| Group | It is available whenVia Groupis selected as access authorization.Specify a SNMP group to define the object available to the community. |
| Access Right Define the access right of the community group. | |
| Read Only- It allows unidirectional access to node-specific information.Read & Write- It allows bidirectional access to node-specific information. | |
After finishing this web page configuration, please click OK to save the settings.
VI-4-4 User
This page allows a user to configure SNMP user profile(s).
Available settings are explained as follows:
| Item | Description |
| +Add User Click it to add a new user profile. | |
| User Name Displays the name of this user profile. | |
| Group | Displays the group name to which this user profile belongs. |
| Security Level | Displays the security method used by this user profile. |
| Authentication Method | Displays the authentication method used by this user profile. |
| Privacy Method | Displays the privacy method used by this user profile. |
| Option | - Click to modify the settings of the community.- Remove the selected entry. |
To modify an existing user profile, click the link of of the one to be changed.
To add a user profile, click the "+ Add User" to open the edit page.
Available settings are explained as follows:
| Item | Description |
| Add User | |
| User Name Enter a name for creating new SNMP user. | |
| Group | Select one of theSNMPv3groups from the drop down list. Then, this user profile will be grouped under the selected SNMP group.If there is no group profile here, please openSNMP>>Grouppage to set profiles (at least one) first. |
| Security Level Displays the security level configured for the selected SNMP group.If the selected group is not aSNMPv3group, nothing will be displayed in this field. | |
| For SNMPv3 group only | |
| Authentication Method | It is available only when the Security Level is set with "Authentication", or "Authentication_and_Privacy".You can change the methods (None, MD5, SHA) for the selected SNMPv3 group. If no method is available for you to select, that means the selected SNMPv3 group is set with No Security. |
| Authentication Password | It is available only when the Security Level is set with "Authentication", or "Authentication_and_Privacy".Enter a string as the password for authentication. |
| Privacy Method It is available only when the Security Level is set with "Authentication_and_Privacy".You can change the methods (None, DES) for the selected SNMPv3 group. If no method is available for you to select, that means the selected SNMPv3 group is set with No privacy. | |
| Privacy Password It is available only when the Security Level is set with "Authentication_and_Privacy".Enter a string as the password for authentication. | |
After finishing this web page configuration, please click OK to save the settings.
VI-4-5 Engine ID
This page allows a user to configure and display SNMP local and remote engine ID.
Available settings are explained as follows:
| Item | Description |
| Local | |
| User Defined | Click the toggle to enable / disable this function. - means "Enable". - means "Disable". |
| Engine ID Displays the engine ID of the local server.The default Engine ID which is made up of MAC and Enterprise ID will be used instead. | |
| Remote | |
| +Add Server | Click it to create a new remote server profile. |
| Server Displays the hostname/IP address of the server. | |
| Engine ID Displays the engine ID of the remote server. | |
| Option | - Click to modify the server setting.- Clear the selected entry. |
To modify an existing server profile, click the link of of the one to be changed.
To add a remote server profile, click the "+ Add Server " to open the page.
Available settings are explained as follows:
| Item | Description |
| Add Remote Server | |
| Server Type | Specify the address type for entering hostname or IPv4/IPv6 address.HostnameIPv4IPv6 |
| Server | Enter the IP address or the hostname of the remote SNMP server. |
| Engine ID Specify the engine ID for remote SNMP server.The engine ID ranges from 10 to 64 hexadecimal characters, and the hexadecimal number must be divided by "2". | |
After finishing this web page configuration, please click OK to save the settings.
VI-4-6 Trap Notification
This page allows a user to add or delete the SNMP trap receiver IP address and community name. In addition, it allows a user to configure a host to receive SNMPv1/v2/ve notification.
Available settings are explained as follows:
| Item | Description |
| Trap Event | |
| AuthenticationFailure, Link Up/Down,Cold Start, Warm Start | Check the box to enable the function.Authentication Failure- VigorSwitch will reboot when encountering authentication failure (including community not match or user password not match).Link Up/Down- VigorSwitch will reboot while encountering port link up or down trap.Cold Start- VigorSwitch will reboot while encountering user trap.Warm Start- VigorSwitch will reboot while encountering power down trap. |
| Notification | |
| +Add Server | Click it to create a new notification server profile. |
| Server Displays IPv4/IPv6/Hostname of the SNMP trap recipients. | |
| Server Port | Displays the UDP port number for the recipient's server. |
| Version Displays the notification SNMP version. | |
| Notification Type | Displays the notification type (Trap or Inform). |
| Timeout Displays the number of SNMP informs timeout. | |
| Retry Displays the number of SNMP informs retry count. | |
| Community/User Displays the community profile. | |
| Security Level | Displays the security level for SNMP notification packet. |
| Option | - Click to modify the setting page of the server profile.- Remove the selected entry. |
To modify an existing server profile, click the link of of the one to be changed.
To add a user profile, click the "+ Add Server " to open the edit page.
Available settings are explained as follows:
| Item | Description |
| Add Notification Server | |
| Server Type | Choose IPv4/IPv6/Hostname to specify IP address or the hostname of the SNMP trap recipients.HostnameIPv4IPv6 |
| Server Address | Specify SNMP notification version (SNMPv1/v2/v3). |
| Server Port Specify a port number for the server. | |
| SNMP Version | Specify SNMP notification version (SNMPv1/v2/v3). |
| Community | Use the drop down list to choose one of the community profiles. |
| Notification Type Displays the notification type.To specify Notification Type, select v2 or v3 as SNMP Version.Trap -Send SNMP traps to the host.Inform - Send SNMP informs to the host. If it is used, Timeout and Retry also shall be defined. | |
| Timeout | Specify the SNMP informs timeout. It is available whenInformis selected asType. |
| Retry | Specify the SNMP informs retry count. It is available whenInformis selected as Type. |
| User It is available when v3 is selected as SNMP Version. | |
| Security Level It is available when v3 is selected as SNMP Version.Specify SNMP security level for SNMP notification packet. It is available | |
| when SNMPv3 is selected.No Security – No authentication.Authentication – Authentication without encryption will be performed for packets.Authentication and Privacy – Authentication with encryption will be performed for packets. | |
After finishing this web page configuration, please click OK to save the settings.
This page allows a user to configure settings for VigorSwitch to send alert mail or Syslog mail when encountering certain situation.
Available settings are explained as follows:
| Item | Description |
| Mail Server | |
| Description Displays the name of the mail server. | |
| Status | Click the toggle to enable / disable this function. - means "Enable". - means "Disable". |
| SMTP Server | Displays the IP address / host of the SMTP server. |
| Mail Content | Displays the condition(s) for VigorSwitch system to send a mail out. |
| Sender Displays the email address sending the alert/syslog mail. | |
| Receiver | Displays the email address receiving the alert/syslog mail. |
| Option |  - Click to modify the setting page of the server profile. |
Alert Mail Server
To modify the alert mail server profile, click the link of Alert Mail Server to be changed.
Available settings are explained as follows:
| Item | Description |
| Alert Mail Server | |
| Description Displays the name (Alert or Syslog) of the mail server. | |
| Enabled | Click the toggle to enable / disable the mail server. - means "Enable".- means "Disable". |
| SMTP Server Enter IP address or URL of the SMTP server. | |
| SMTP Port Enter the port number for the SMTP server. | |
| Authentication Click the toggle to enable / disable this function.User Name - Enter a user name for authentication.Password - Enter a password for authentication. | |
| Encryption Click the toggle to enable / disable this function.After enabling Authentication, choose one of the encryption servers for data encryption.STARTTLS - The mail will be encrypted with StartTLS.SSL/TLS - The mail will be encrypted with SSL/TLS. | |
| Sender Enter the email address which will send the alert mail out. | |
| Receiver Enter the email address which will receive the alert mail. | |
| Mail Notification | |
| Alert Type | Specify the condition(s) for VigorSwitch system to send an alert out.Port Link StatusPort Link SpeedSystem RestartedPoE Warning StatusIP Conflict |
| Min. Alert Transmit Interval | Set a time interval for VigorSwitch system to send an alert out from the specified sender. |
| Send Test Mail | After clicking this button, VigorSwitch system will send a test mail to the recipient. |
After finishing this web page configuration, please click OK to save the settings.
Syslog Mail Server
To modify the Syslog mail server profile, click the link of of Syslog Mail Server to be changed.
Available settings are explained as follows:
| Item | Description |
| Syslog Mail Server | |
| Description | Displays the name (Alert or Syslog) of the mail server. |
| Enabled | Click the toggle to enable / disable this function. - means "Enable".- means "Disable". |
| SMTP Server Enter IP address or URL of the SMTP server. | |
| SMTP Port Enter the port number for the SMTP server. | |
| Authentication Click the toggle to enable / disable this function.User Name - Enter a user name for authentication.Password - Enter a password for authentication. | |
| Encryption Click the toggle to enable / disable this function.After enabling Authentication, choose one of the encryption servers | |
| for data encryption.STARTTLS - The mail will be encrypted with StartTLS.SSL/TLS - The mail will be encrypted with SSL/TLS. | |
| Sender Enter the email address which will send the syslog mail out. | |
| Receiver Enter the email address which will receive the syslog mail. | |
| Mail Notification | |
| Log Type Vigor system will send the e-mail related to the selected feature(e.g., AAA, ACL) to the recipient. | |
| Send Test Mail | After clicking this button, VigorSwitch system will send a test mail to the recipient. |
After finishing this web page configuration, please click OK to save the settings.
VI-6 System Reboot
This page allows you to reboot VigorSwitch with current settings or return to factory default settings for VigorSwitch.
Available settings are explained as follows:
| Item | Description |
| System Reboot | |
| Reboot With | Current Configuration - Use current configuration settings. Factory Default - Use the default configuration settings. |
| Reboot Click to reboot the device immediately. | |
This page is left blank.
Chapter VII Troubleshooting
natural_image
Red and gray crossed wrench and nut icons (no text or symbols)VII-1 Backing to Factory Default Setting
Sometimes, a wrong connection can be improved by returning to the default settings. Try to reset the modem by software or hardware.
i Warning:
After pressing factory default setting, you will loose all settings you did before. Make sure you have recorded all useful settings before you pressing. The password of factory default is null.
VII-1-1 Software Reset
You can reset the modem to factory default via Web page.
Go to System Maintenance and choose System Reboot on the web page. The following screen will appear. Choose Factory Default and click OK. After few seconds, the modem will return all the settings to the factory settings.
VII-1-2 Hardware Reset
While the modem is running, press the RST button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the modem will restart with the default configuration.
After restore the factory default setting, you can configure the settings for the modem again to fit your personal request.
VII-2 Contacting DrayTek
If the modem still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com.
Appendix Telnet Commands
natural_image
Red and gray crossed wrench and nut icons (no text or symbols)A-1 Accessing Telnet of Vigor Switch
This chapter also gives you a general description for accessing telnet and describes the firmware versions for the routers explained in this manual.
Note:
For Windows 7 user, please make sure the Windows Features of Telnet Client has been turned on under Control Panel>>Programs.
Enter cmd and press Enter. The Telnet terminal will be open later.
In the following window, type Telnet 192.168.1.224 as below and press Enter. Note that the IP address in the example is the default address of the router. If you have changed the default, enter the current IP address of the router and press Enter.
![Microsoft Windows [版本 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Users\Carrie>telnet 192.168.1.224_](/content/2026/05/984286/images/8c06dcb4b848b4a9421abc898edb95985b9f2653431c5f7858b45f936392cffd.jpg)
For users using previous Windows system (e.g., XP), simply click Start >> Run and type Telnet 192.168.1.224 in the Open box.
Next, enter admin/admin for Account/Password.
A-2 Available Commands
Enter ? to get a list of available commands.
The available commands contain - clear, clock, configure, copy, delete, disable, end, exit, hardware-monitor, ping, reboot, renew, restore-defaults, save, show, ssl, terminal, traceroute and udld. Each command will be explained as follows.
Note: You can also enter? to check if there are subcommands under current command.
A-2-1 Clear Configuration
This command allows resetting the functions of ARP, authentication, gvrp, interface, IP, IPv6, LACP, Line, LLDP, Logging, MAC, mvr, and Spanning Tree.
Telnet Command: clear arp
Use this command to clear entries in the ARP cache.
Syntax Items
clear arp
Description
| Syntax Items Description | |
| clear arp - Enter the | IP address of the device (e.g., 192.168.1.224).Related Syntax:# clear arp |
- # clear arp
Example
FX2120# clear arp 192.168.1.224
FX2120#
Telnet Command: clear authentication
Use this command to clear authentication sessions based on LAN port, MAC address, or authentication type for 802.1x/MAC authentication.
Syntax Items
clear authentication sessions
clear authentication sessions interfaces 10GigabitEthernet
clear authentication sessions mac
clear authentication sessions session-id
clear authentication sessions type
Description
| Syntax Items Description | |
| clear authentication sessions | Clear all of the sessions related to authentication.Related Syntax:# clear authentication sessions |
| clear authentication sessions interfaces 10GigabitEthernet | Clear the sessions of a specific interface.<1-12>- Enter the number of LAN port.Related Syntax:# clear authentication sessions interfaces 10GigabitEthernet <1-12> |
| clear authentication sessions mac | Clear the sessions with the MAC address set here.- Enter the MAC address of the device that you want to clear the authentication information.Related Syntax:# clear authentication sessions mac |
| clear authentication sessions session-id | Clear the sessions with the string set here.- Enter a string of a session that you want to clear.Related Syntax:# clear authentication sessions session-id |
| clear authentication sessions type | Clear the sessions with authentication type selected here.- Use 802.1x authentication.- Use mac-based authentication.- Use web-based authentication.Related Syntax:# clear authentication sessions type |
Example
| FX2120# clear authentication sessions |
| No Auth Manager sessions currently exist |
| FX2120# clear authentication sessions mac 48:5B:39:2F:A8:66 |
| FX2120# clear authentication sessions interfaces 10GigabitEthernet 2 |
| FX2120# clear authentication sessions session-id 0000000B002AFBE8 |
| FX2120# |
Telnet Command: clear gvrp
Use this command to clear statistics or port error statistics for all interfaces or a specific interface (LAN or LAG).
Syntax Items
clear gvrp error-statistics
clear gvrp statistics
Description
| Syntax Items Description | |
| clear gvrp error-statistics | Specify a LAN/LAG interface for clearing error statistics for GVRP.<1-12> - Enter the number (1 to 12) of LAN port.<1-8> - Enter the number (1 to 8) of LAG interface (IEEE 802.3 Link Aggregation Interface) that you want to clear the GVRP setting.Related Syntax:# clear gvrp error-statistics interfaces 10GigabitEthernet <1-12># clear gvrp error-statistics interfaces LAG <1-8> |
| clear gvrp statistics Specify a | LAN/LAG interface for clearing statistics for GVRP.<1-12> - Specify an interface for clearing statistics for GVRP.<1-8> - Specify LAG interface for clearing statistics for GVRP.Related Syntax:# clear gvrp statistics interfaces 10GigabitEthernet <1-12># clear gvrp statistics interfaces LAG <1-8> |
Example
| FX2120# clear gvrp error-statistics interfaces 10GigabitEthernet 2 |
| FX2120# |
| FX2120# clear gvrp error-statistics interfaces LAG 2 |
| FX2120# |
Telnet Command: clear interfaces
Use this command to clear statistics counters for all interfaces or a specific interface (10GB LAN, LAN or LAG).
Syntax Items
clear interfaces 10GigabitEthernet clear interfaces LAG
Description
| Syntax Items Description | |
| clear interfaces10GigabitEthernet | Specify a LAN interface for clearing statistics counters on that port.<1-12> - Enter the number (1 to 12) of LAN port.Related Syntax:# clear interfaces gigabitEthernet <1-12> counters |
| clear interfaces LAG Specify a | LAG interface for clearing statistics counters on that port.<1-8> - Enter the number (1 to 8) of LAG interface (IEEE 802.3 Link Aggregation Interface).Related Syntax:# clear interfaces LAG <1-8> counters |
Example
| FX2120# clear interfaces 10gigabitethernet 3 counters |
| FX2120# clear interfaces |
| FX2120# clear interfaces LAG 2 counters |
| FX2120# |
Telnet Command: clear ip
Use this command to clear IGMP snooping groups (dynamic or static) information for all interfaces or a specific interface (LAN or LAG) with IP address.
Syntax Items
clear ip arp
clear ip dhcp
clear ip igmp
Description
| Syntax Items Description | |
| clear ip arp <1-12> - Enter the | number (1 to 12) of LAN port.<1-8> - Specify a LAG interface for clearing ARP inspection information.statistics - Clear the statistics for ARP inspection.Related Syntax:clear ip dhcp snooping database statistics - Clear snooping database statistics for DHCP server.snooping interfaces 10GigabitEthernet / LAG- Specify a LAN / LAG interface for clearing DHCP snooping information.<1-12> - Enter the number (1 to 12) of LAN port.<1-8> - Specify a LAG interface for clearing DHCP snooping information.Related Syntax:# clear ip dhcp snooping database statistics# clear ip dhcp snooping interfaces 10GigabitEthernet <1-12> statistics# clear ip dhcp snooping interfaces LAG <1-8> statistics |
| clear ip lgmp | snooping groups dynamic - Clear dynamic snooping groups of IGMP server.snooping groups static - Clear static snooping groups of IGMP server.snooping statistics - Clear snooping statistics for IGMP server.Related Syntax:# clear ip igmp snooping groups dynamic# clear ip igmp snooping groups static# clear ip igmp snooping statistics |
Example
FX2120# clear ip igmp snooping groups dynamic FX2120#
Telnet Command: clear ipv6
Use this command to clear MLD snooping configuration for dynamic / static group(s) with IPv6 address.
Syntax Items
clear ipv6 mld
Description
| Syntax Items Description | |
| clear ipv6 mld snooping groups dynamic - Clear dynamic snooping groups of MLD.snooping groups static - Clear static snooping groups of MLD.Related Syntax:# clear ipv6 mld snooping groups dynamic# clear ipv6 mld snooping groups static# clear ipv6 mld snooping statistics |
Example
FX2120# clear ipv6
FX2120# clear ipv6 mld snooping groups dynamic
FX2120# clear ipv6 mld snooping groups dynamic?
< cr >
FX2120# clear ipv6 mld snooping groups static
FX2120#
Telnet Command: clear lacp
Use this command to clear LACP configuration for specified LAG interface or all LAG interfaces.
Syntax Items
clear lacp <1-8> counters
clear lacp counters
Description
| Syntax Items Description | |
| clear lacp <1-8> | <1-8> - Enter the number (1 to 8) of LAG interface (IEEE 802.3 Link Aggregation Interface).Related Syntax:# clear lacp <1-8> counters |
| clear lacp counters Clear LACP | configuration for all LAG interfaces.Related Syntax:# clear lacp counters |
Example
| FX2120# clear lacp 1 countersNo interfaces configured in the channel groupFX2120# |
Telnet Command: clear line
Use this command to clear line settings including SSH (Secure Shell) configuration and telnet daemon configuration.
Syntax Items
clear line ssh
clear line telnet
Description
| Syntax Items Description | |
| clear line ssh Clear SSH configuration for line connection. | |
| clear line telnet Clear SSH Telnet configuration for line connection. | |
| # clear line telnet | |
Example
FX2120# clear line ssh FX2120# clear line telnet
Telnet Command: clear lldp
Use this command to clear LLDP statistics or reset LLDP information.
Syntax Items
clear lldp global clear lldp interfaces
Description
| Syntax Items Description | |
| clear lldp global Clear all of the statistics related to LLDP.Related Syntax:# clear lldp global statistics | |
| clear lldp interfaces Specify a | LAN / LAG interface for clearing LLDP information.<1-12>- Enter the number (1 to 28) of LAN port.<1-8>- Enter the number (1 to 8) of LAG interface (IEEE 802.3 Link Aggregation Interface).Related Syntax:# clear lldp interfaces 10GigabitEthernet <1-12>statistics# clear lldp interfaces LAG <1-8>statistics |
Example
FX2120# clear lldp global statistics FX2120# FX2120# clear lldp interfaces LAG 1 statistics FX2120# clear lldp interfaces 10gigabitethernet 1 statistics FX2120#
Telnet Command: clear logging
Use this command to clear log messages from the internal logging buffer and flash.
Syntax Items
clear logging buffered
clear logging file
Description
| Syntax Items Description | |
| clear logging buffered Clear the log stored in RAM. | |
| Related Syntax:● # clear logging buffered | |
| clear logging file Clear the log | stored in flash.Related Syntax:● # clear logging file |
Example
FX2120# clear logging buffered
FX2120# clear logging file
FX2120#
Telnet Command: clear mac
Use this command to clear MAC configuration related to VLAN, LAG, and LAN port.
Syntax Items
clear mac
Description
| Syntax Items Description | |
| clear mac address-table <1-12> | - Enter the number (1 to 12) of LAN port.<1-8>- Enter the number (1 to 8) of LAG interface (IEEE 802.3 Link Aggregation Interface).<1-4094>- Specify a VLAN ID by entering its number.Related Syntax:# clear mac adderss-table dynamic interfaces10GigabitEthernet <1-12># clear mac adderss-table dynamic interfaces LAG <1-8># clear mac adderss-table dynamic vlan <1-4094> |
Example
FX2120# clear mac address-table dynamic vlan 2038 FX2120# clear mac address-table dynamic interfaces 10gigabitethernet 3 FX2120#
Telnet Command: clear mvr
Use this command to clear information for all members (including dynamic, static) of MVR.
Syntax Items
clear mvr members
Description
| Syntax Items Description | |
| clear mvr members Clear information for dynamic / static members.Related Syntax: | |
| # clear mvr members dynamic# clear mvr members static | |
Example
FX2120# clear mvr members dynamic FX2120# clear mvr members static FX2120#
Telnet Command: clear spanning-tree
Use this command to clear running system information.
Syntax Items
clear spanning-tree
Description
| Syntax Items Description | |
| clear spanning-tree interfaces | Specify a LAN interface for clearing its running information.<1-12>- Enter the number (1 to 12) of LAN port.<1-8>- Enter the number (1 to 8) of LAG interface (IEEE 802.3 Link Aggregation Interface).Related Syntax:# clear spanning-tree interfaces 10GigabitEthernet <1-12>statistics# clear spanning-tree interfaces LAG <1-8> statistics |
Example
FX2120# clear spanning-tree interfaces 10GigabitEthernet <1-12> 10GigabitEthernet device number FX2120# clear spanning-tree interfaces 10gigabitethernet 3 statistics FX2120# clear spanning-tree interfaces LAG 1 statistics FX2120#
A-2-2 Clock Configuration
This command allows managing the system clock.
Telnet Command: clock set
Use this command to configure the system clock manually.
Syntax Items
clock set
Description
| Syntax Items Description |
| clock set Set current by entering hours, minutes, seconds, month, date and year with the format listed below:- Hour, minute, second (e.g., 08:10:30).- January.- February-March-April-May-June-July-August- September- October-November- December- Date 1 to 31.- Year of 2000 to 2035.Related Syntax:# clock set HH:MM:SSjan/feb/mar/apr/may/jun/jul/aug/sep/oct/nov/dec <1-31><2000-2035> |
Example
FX2120# clock set 12:10:30 jan 1 2019
2019-01-01 12:10:30 UTC+8
A-2-3 Configure Configuration
This command allows configuring the settings related to VigorSwitch.
Available sub-commands under Configure include:
aaa, acct, authentication, boot, clock, custom, dhcp-server, dos, dot1x, do, dray_surveillance, enable, end, errdisable, exit, gvrp, hostname, http, interface, ip, ipv6, jumbo-frame, lacp, lag, line, lldp, logging, logmail, loop-protection, mac, mailalert, management, management-vlan, mirror, mvr, no, openvpn, poe, qos, radius, schedule, sflow, snmp, sntp, spanning-tree, start-up, storm-control, surveillance-vlan, system, tacacs, tr069, udld, username, vlan, voice-vlan and webhook
Before configuration, you have to enter "configure" to access into next phase.
To return to previous phase, enter "exit"
Example
FX2120# configure
FX2120(config)#
FX2120(config)# exit
FX2120#
Telnet Command: aaa
Use this command to add a login authentication list to authenticate with local, tacacs+, radius, and none service.
Syntax Items
aaa authentication enable
aaa authentication login
Description
| Syntax Items Description | |
| aaa authentication enable Enable authentication is used only on CLI for a user trying to switch from User EXEC (>) mode to Privileged EXEC (#) mode. enable - Enable the authentication list.- Enter a string as the list name for authentication type. Default value is "default".- Specify the authentication method by entering none, enable, tacacs+ or radius.None: Do nothing and just make user be authenticated.Enable: Use local password to authenticate.Tacacs+: Use remote Tacas+ server to authenticate.Radius: Use remote Radius server to authenticate.default - It is used to configure default enable authentication.Related Syntax:#aaa authentication enable#aaa authentication enable default | |
| aaa authentication login Login authentication is used when a user tries to login into the switch.-Specify the authentication method by entering none, enable, tacacs+ or radius.default - It is used to configure default login authentication.Related Syntax:#aaa authentication login#aaa authentication login default |
Example
| FX2120# configure | |
| FX2120(config)# | |
| FX2120(config)# aaa authentication enable LISTNAME enable | |
| FX2120(config)# | |
| FX2120(config)# exit | |
| FX2120# show aaa authentication enable lists | |
| Enable List Name | Authentication Method List |
| ---- | ---- |
| default | enable |
| LISTNAME | enable | |
| FX2120# |
Telnet Command: acct
Use this command to set RADIUS / TACACS server.
Syntax Items
acct server radius
acct server tacacs
Description
| Syntax Items Description | |
| server radius <1-65535> - Set a value to wait for a packet retransmission to the authentication server.<1-60> - Set the transmission interval (unit is second).# acct server radius disconnect message port <1-65535>interval <1-60> | |
| server tacacs <1-65535> - Set a value to wait for a packet retransmission to the authentication server.<1-60> - Set the transmission interval (unit is second).# acct server tacacs disconnect message port <1-65535>interval <1-60> |
Example
| FX2120# configure |
| FX2120(config)# |
| FX2120(config)# acct server radius disconnect message port 3030 interval 30 |
| FX2120(config)# |
Telnet Command: authentication
Use this command to enable the global setting of 802.1x/MAC/WEB authentication network access control (default is disabled for all).
Syntax Items
authentication dot1x
authentication guest-vlan
authentication mac
authentication web
Description
| Syntax Items Description | |
| authentication dot1x Enable 80 | 2.1x authentication by entering the word, dot1x after authentication.Related Syntax:# authentication dot1x |
| authentication guest-vlan | Configure the guest VLAN.<1-4094> - Specify a guest VLAN ID by entering its number.Related Syntax:# authentication guest-vlan <1-4094> |
| authentication mac Enable MAC authentication by entering the word, mac after authentication.mac local - Local database for MAC-Based authentication. It can add local MAC authentication hosts in database.- Enter the MAC address to be added for authentication.control auth - Set a local entry control mode, auth (the host will be set to authorized) or unauth (the host will be set to unauthorized).vlan <1~4094> - Specify a VLAN ID by entering its numberreauth-period <300~4294967294> - Set a time to initiate automatic re-authentication.inactive-timeout <60~65535>- Set the inactive timeout for MAC authentication host. After the time interval, if there is no activity from the client, then it will be unauthorized by Vigor system.control unauth - Set a local entry control mode as "unauth" to let the host set as unauthorized.radius mac-case- Set RADIUS user ID with lower case or upper case.radius mac-delimiter- Select RADIUS user ID delimiter. In which,colon: XX:XX:XX:XX:XX:XXdot: XX.XX.XX.XX.XX.XXhyphen: XX-XX-XX-XX-XX-XXnone:XXXXXXXXXXXXgap <2/4/6> - Select delimiter gap.Related Syntax:#authentication mac#authentication mac localcontrol auth inactive-timeout <60~65535>#authentication mac localcontrol auth reauth-period <300~4294967294>#authentication mac localcontrol auth vlan <1~4094>#authentication mac localcontrol auth vlan<1~4094> reauth-period <300~4294967294>#authentication mac localcontrol auth vlan<1~4094> reauth-period <300~4294967294> inactive-timeout <60~65535>#authentication mac localcontrol unauth#authentication mac radius mac-case#authentication mac radius mac-delimiter | #authentication mac radius mac-delimitergap <2/4/6> |
| authentication web | Web - Enable web authentication by entering the word “web” after “authentication”.username- Specify a username.password- Set a password.vlan <1~4094>- Specify a VLAN ID by entering its number.reauth-period <30~4294967294>- Set a time to initiate automatic re-authentication.inactive-timeout <60~65535>- Set the inactive timeout for MAC authentication host. After the time interval, if there is no activity from the client, then it will be unauthorized by Vigor system.Related Syntax:#authentication web#authentication web local usernamepasswordinactive-timeout <60~65535)#authentication web local usernamepasswordreauth-period <300~4294967294)#authentication web local usernamepasswordreauth-period <300~4294967294inactive-timeout <60~65535)#authentication web local usernamepasswordvlan<1~4094)#authentication web local usernamepasswordinactive-timeout <60~65535)#authentication web local usernamepasswordreauth-period <30~4294967294inactive-timeout <60~65535)#authentication web local usernamepasswordvlan<1~4094>reauth-period<30~4294967294>inactive-timeout <60~65535> |
Example
FX2120# P2280x# configure
FX2120 (config)# authentication dot1x
FX2120 (config)# vlan 3
FX2120 (config-vlan)# exit
FX2120 (config)# authentication guest-vlan 3
FX2120 (config)#
FX2120 (config)# exit
FX2120# show authentication
Authentication dot1x state : enabled
Authentication mac state : disabled
Authentication web state : disabled
Guest VLAN : enabled (3)
Mac-auth Radius User ID Format :XXXXXXXXXX
Mac-auth Local Entry :
Web-auth Local Entry :
Interface Configurations
Interface GigabitEthernet1
Admin Control : disable
Host Mode : multi-auth
Type dot1x State : disabled
Type mac State : disabled
Type web State : disabled
Type Order : dot1x
MAC/WEB Method Order : radius
Guest VLAN : disabled
Reauthentication : disabled
Max Hosts : 256
VLAN Assign Mode : static
--More-
FX2120# configure
FX2120 (config)# authentication mac local 00:11:22:33:00:01 control auth vlan 3 reauth-period 500 inactive-timeout 300
FX2120 (config)#
FX2120 (config)# authentication mac local 00:11:22:33:00:01 control unauth
FX2120 (config)#
FX2120 (config)# authentication web local username user_1 password 1234tw vlan 3 reauth-period 600 inactive-timeout 700
FX2120 (config)#
Telnet Command: boot
Use this command to have a backup image in the flash partition. Select the active firmware image, and another firmware image will become a backup one.
Syntax Items
boot system
Description
| Syntax Items Description | |
| boot system Boot the system | from flash image partition 0 / 1.Related Syntax:# boot system image0# boot system image1 |
Example
| FX2120# configure | ||||
| FX2120(config)# | ||||
| FX2120# configure | ||||
| FX2120(config)# | ||||
| FX2120(config)# boot system image0 | ||||
| Select "image0" Success | ||||
| FX2120 (config)# exit | ||||
| FX2120# | ||||
| FX2120# show boot | ||||
| Image | Version | Date | Status | File Name |
| ---- | ---- | ---- | ---- | ---- |
| 0 | 1.0.2 | 2017-08-29 09:44:57 | Not active* | 2120_r442_220RC1.all |
| 1 | 2.3.2 | 2018-05-16 09:14:31 | Active | p2280_r734_230RC4.all |
"*" designates that the image was selected for the next boot
FX2120#
Telnet Command: clock
Use this command to configure time zone, summer-time and external time source for the system clock.
Syntax Items
clock auto timezone
clock source local
clock source sntp
clock summer-time
clock timezone
Description
| Syntax Items Description | |
| clock auto timezone | VigorSwitch sets the time zone automatically. |
| clock source local Configure an | external time source for the system clock."local" means to use static time. It is the default setting.Related Syntax:# clock source local |
| clock source sntp Configure an | external time source for the system clock. "sntp" means to use SNTP time.Related Syntax:# clock source sntp |
| clock summer-time Configure | the system to automatically switch to summer time(daylight saving time).ACRONYM - Specify the acronym name of time zone. The acronym of the time zone will be displayed when summer time is in effect. If unspecified, the time zone acronym will be used in default. (1-4 chars)- Indicate January, February, March, April, May, June, July, August, September, October, November, December. |
| <1-31> means date 1 to 31.<2000-2037>- means year of 2000 to 2035.- means hours and minutes.recurring - Summer time should start and end on the corresponding specified days every year.<1-1440>- Set the number of minutes to add during the summer time. The default number is 60.eu - The summer time is based on the European Union rules.(Start point – last Sunday in March, End point – last Sunday in October)usa - The summer time is based on the United States rules. (Start point – second Sunday in March, End point – first Sunday in November)first - The first week of the month.last - The last week of the month.- Indicate Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday.- Indicate January, February, March, April, May, June, July, August, September, October, November, December.- Specify the first week or the last week of the month.<1-5>- Specify the number of the week in the month.Note that the first group of month, date, hour and minute is used for configuring starting time, and the second group is used for configuring ending time.Related Syntax:# clock summer-time ACRONYM date<1-31><2000-2037><HH:MM># clock summer-time ACRONYM recurring eu<1-1440)# clock summer-time ACRONYM recurring usa<1-1440)# clock summer-time ACRONYM recurring first< jan / feb / mar / apr / may / jun/ jul/aug/ sep/oct/nov/dec><HH:MM><first/last>< sun/mon/tue/wed/thu/fri/sat>< jan /feb /mar /apr /may /jun/ jul/aug/ sep/oct/nov/dec><HH:MM><1-14400># clock summer-time ACRONYM recurring last< sun/mon/tue/wed/thu/fri/sat>< jan /feb /mar /apr /may /jun/ jul/aug/ sep/oct/nov/dec><HH:MM><1-5>< sun/mon/tue/wed/thu/fri/sat>< jan /feb /mar /apr /may/jun/ jul/aug/ sep/oct/nov/dec><HH:MM><1-14400> |
clock timezone ACRONYM Set the time zone for display purposes.
| <-12-13> minutes <0-59> | ACRONYM – Specify the acronym name of time zone. The acronym of the time zone will be displayed when summer time is in effect. If unspecified, the time zone acronym will be used in default. (1-4 chars)<-12-13> – Specify the hour offset (from -12 to +13) of time zone. minutes <0-59> – Specify the minute difference from UTC.Related Syntax:# clock timezone ACRONYM <-12-13>minutes <0-59> |
Example
| FX2120# configure |
| FX2120(config)# clock source sntp |
| FX2120(config)# exit |
| FX2120# show clock detail |
| 2019-01-05 06:51:23 UTC+8 |
| Time source is sntp |
| Time zone: |
| Acronym is |
| Offset is UTC+8 |
| FX2120# configure |
| FX2120(config)# clock summer-time tw date jan 30 2019 23:30 feb 1 2019 20:50 |
| FX2120(config)# exit |
| FX2120# show clock detail |
| 2019-01-05 07:13:49 UTC+8 |
| Time source is sntp |
| Time zone: |
| Acronym is ACRONYM |
| Offset is UTC-10:08 |
| Summertime: |
| Acronym is tw |
| Starting and ending on a specific date. |
| Begins at 1 30 19 23:30 |
| Ends at 2 1 19 20:50 |
| Offset is 60 minutes. |
| FX2120# configure |
| FX2120(config)# clock summer-time ACRONYM recurring eu 1200 |
| FX2120(config)# clock summer-time ACRONYM recurring first mon jan 10:10 first sun feb 10:10 1000 |
| FX2120(config)# exit |
| FX2120# show clock detail |
| 2019-01-05 11:37:18 UTC+8 |
| Time source is sntp |
| Time zone: |
| Acronym is |
| Offset is UTC+8 |
| Summertime: |
| Acronym is ACRONYM |
| Recurring every year. |
| Begins at 1 1 1 10:10 |
| Ends at 1 0 2 10:10 |
| Offset is 1000 minutes |
Telnet Command: custom
Use this command to enable the module settings.
Syntax Items
custom enable
Description
| Syntax Items Description | |
| custom enable Enable the module settings. | Related Syntax:# custom enable |
Example
| FX2120# configure |
| FX2120(config)# custom enable |
| FX2120(config)# |
Telnet Command: dos
Use this command to enable specific Denial of Service (DoS) protection.
Syntax Items
dos daeqsa-deny dos icmp-frag-pkts-deny dos icmp-ping-max-length dos icmpv4-ping-max-check dos icmpv6-ping-max-check dos ipv6-min-frag-size-check dos ipv6-min-frag-size-length dos land-deny dos nullscan-deny dos pod-deny dos smurf-deny dos smurf-netmask dos syn-sportl1024-deny dos synfin-deny dos synrst-deny dos tcp-frag-off-min-check dos tcpblat-deny
dos tcphdr-min-check
dos tcphdr-min-length
dos udpblat-deny
dos xma-deny
Description
| Syntax Items Description | |
| dos daeqsa-deny | Drop the packets if the destination MAC address equals to the source MAC address.Related Syntax:# dos daeqsa-deny |
| dos icmp-frag-pkts-deny Drop | the fragmented ICMP packets.Related Syntax:# dos icmp-frag-pkts-deny |
| dos icmp-ping-max-length | Set the maximum packet size for ICMPv4/ICMPv6 ping operation.<0-65535>- Specify a packet number.Related Syntax:# dos icmp-ping-max-length <0-65535> |
| dos icmpv4-ping-max-check | Check ICMPv4 ping maximum packets size and drop the packets larger than the maximum packet size defined by the command, dos icmp-ping-max-length.Related Syntax:# dos icmpv4-ping-max-check |
| dos icmpv6-ping-max-check | Check ICMPv6 ping maximum packets size and drop the packets larger than the maximum packet size defined by the command, icmp-ping-max-length.Related Syntax:# dos icmpv6-ping-max-check |
| dos ipv6-min-frag-size-check | Check minimum size of IPv6 fragments.Related Syntax:# dos ipv6-min-frag-size-check |
| dos ipv6-min-frag-size-length<0-65535> | Set the minimum packet size of IPv6 fragmented packets.<0-65535>- Specify a packet number.Related Syntax:# dos ipv6-min-frag-size-length <0-65535> |
| dos land-deny Drop the packets if the source IP address equals to destination IP address.Related Syntax:# dos land-deny | |
| dos nullscan-deny Drop the packets if attacked by NULL Scan.Related Syntax:# dos nullscan-deny | |
| dos pod-deny Drop the packets if attacked by Ping of Death. | |
| Related Syntax:# dos pod-deny | |
| dos smurf-deny Drop the packets if encountered Smurf attack.Related Syntax:# dos smurf-deny | |
| dos smurf-netmask Set the smurf attack size.<0-32>- Enter a number as smurf attacks size.Related Syntax:# dos smurf-netmask <0-32> | |
| dos syn-sportl1024-deny Drop SYN packets with sport less than 1024.Related Syntax:# dos syn-sportl1024-deny | |
| dos synfin-deny Drop the packets with SYN and FIN bits set.Related Syntax:# dos synfin-deny | |
| dos synrst-deny Drop the packets with SYNC and RST bits set.Related Syntax:# dos synrst-deny | |
| dos tcp-frag-off-min-check | Drop the TCP fragmented packet with offset equals to the minimum packet size.Related Syntax:# dos tcp-frag-off-min-check |
| dos tcpblat-deny | Drop the packets if the source TCP port equals to destination TCP port.Related Syntax:# dos tcpblat-deny |
| dos tcphdr-min-check | Check the minimum TCP header and drop the TCP packets with the header smaller than the minimum size defined.Related Syntax:# dos tcphdr-min-check |
| dos tcphdr-min-length | Set the minimum size of TCP header.<0-65535>- Specify a packet number.Related Syntax:# dos tcphdr-min-length <0-65535> |
| dos udpblat-deny | Drop the packets if the source UDP port equals to destination UDP port.Related Syntax:# dos udpblat-deny |
| dos xma-deny | Drop the packets if the sequence number is zero and the FIN, URG and PSH bits are set already.Related Syntax:# dos xma-deny |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# dos icmp-ping-max-length 25252
FX2120(config)# dos icmpv4-ping-max-check
FX2120(config)#
Telnet Command: dot1x
Use this command to set 802.1x configuration.
Syntax Items
dot1x
Description
| Syntax Items Description | |
| dot1x guest-vlan <0-4094> - Enter a number as guest VLAN ID.Related Syntax:# dot1x guest-vlan <0-4094> | |
Example
| FX2120# configure |
| FX2120(config)# |
| FX2120(config)# dot1x guest-vlan 33 |
| VLAN does not exist |
| FX2120(config)# |
Telnet Command: do
Use this command to execute a command immediately.
Syntax Items
do SEQUENCE
Description
| Syntax Items Description | |
| SEQUENCE | Enter the command that you want to execute immediately.Related Syntax: (for example)# do show info |
Example
FX2120(config)# do show info
System Name : FX2120
System Location : Default
System Contact : Default
MAC Address : 14:49:BC:41:3F:E3
IP Address : 192.168.1.13
Subnet Mask : 255.255.255.0
Loader Version : 2.2.0
Loader Date : Sep 29 2021 - 16:21:09
Firmware Version : 3.7.0
Firmware Date : Sep 29 2021 - 18:30:42
Firmware Revision : 485b507
System Object ID : 1.3.6.1.4.1.7367
System Up Time : 0 days, 22 hours, 2 mins, 26 secs
FX2120(config)#
Telnet Command: dray\_surveillance
Use this command to enable / disable the ONVIF.
Syntax Items
dray_surveillance add
dray_surveillance direct-add
dray_surveillance set
Description
| Syntax Items Description | |
| dray_surveillance add Add an IP device for surveillance. WORD <36-36> - Enter the UUID string of the IP camera or IP-based device.Related Syntax:# dray_surveillance add device uuid WORD <36-36># dray_surveillance add group uuid WORD <36-36> | |
| dray_surveillance direct-add WORD <36-36> - Enter the UUID string of the IP camera or IP-based device.Related Syntax:# dray_surveillance direct-add device uuid WORD <36-36> | |
| dray_surveillance set username WORD<1-32> - Enter a string as the default user name.password WORD<1-32>> - Enter a string as the default password.encptpwd WORD <1-128> - Enter a string as the encrypted key. WORD <36-36> - Enter the UUID string of the IP camera or the IP-based device. | |
| ip- Enter the IP address of the IP camera or the IP-based device.Mask- Enter the subnet mask of the IP camera or the IP-based device.vlan <1-4094>- Enter a value representing the VLAN ID.Related Syntax:# dray_surveillance set default username WORD<1-32>password WORD<1-32># dray_surveillance set default username WORD<1-32>encptpwd WORD <1-128># dray_surveillance set device uuid WORD <36-36># dray_surveillance set group uuid WORD <36-36># dray_surveillance set interface ip# dray_surveillance set interface mask# dray_surveillance set vlan <1-4094> | |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# dray_surveillance
FX2120(config)#
FX2120(config)# dray_surveillance add device uuid 53d7762a-c52b-4bb9-8000-305501e0f35f
FX2120(config)#
Telnet Command: enable
Use this command to configure local password with encrypted string or not.
Syntax Items
enable password
enable privilege
enable secret
Description
| Syntax Items Description | |
| enable password | Edit the password for each privilege level for activating authentication.<1-15> - Enter a number for specifying a privilege level. Default value is 15.Related Syntax:# enable password <1-15> |
| enable privilege Edit the privilege | level of the password for local user.<1-15> - Enter a number for specifying a privilege level. Default value is 15.- Enter a new string as the password.Related Syntax:# enable privilege <1-15> password(This password will NOT be encrypted.)# enable privilege <1-15> secret(This password will BE encrypted.)# enable privilege <1-15> secret encrypted(This password is copied from another configuration file. So, enter an existed and encrypted password.) |
| enable secret | Enter a new string as the encrypted password.Related Syntax:# enable secret PASSWORD# enable secret encrypted PASSWORD |
Example
FX2120# configure
FX2120(config)# enable secret encrypted testtest
FX2120(config)# exit
FX2120# show running-config
FX2120# ...
enable privilege 2 secret "OTE5ZTY4MmNhYzgyNWQ0MzBhNTgwZTg0MmZmMGJiYzQ="
enable secret "testtest"
vlan 2
name "test0002"
vlan 3
name "test0003"
vlan 5
name "test_carrie"
voice-vlan oui-table 00:E0:BB "3COM"
voice-vlan oui-table 00:03:6B "Cisco"
voice-vlan oui-table 00:E0:75 "Veritel"
......
Telnet Command: end
Use this command to end current mode.
Syntax Items
end
Example
FX2120# configure
FX2120(config)#end
FX2120#
Telnet Command: errdisable
Use this command to enable the auto recovery timer for port error.
Syntax Items
errdisable recovery cause
errdisable recovery interval
Description
| Syntax Items Description | |
| errdisable recovery cause | Enable the auto recovery timer for port error disabled from ACL,all, ARP rate limit, STP BPDU guard, broadcast flooding, DHCP rate limit, port security, STP self-loop, unicast flooding, or unknown multicast flooding causes.Related Syntax:# erridisable recovery cause < acl /all /arp-inspection /bpduguard /broadcast-flood /dhcp-rate-limit /psecure-violation /selfloop /unicast-flood /unknown-multicast-flood > |
| errdisable recovery interval Set the recovery time of the error disabled port.<30-86400>- The default value is 300 seconds.Related Syntax:# errdisable recovery interval <30-86400> | |
Example
| FX2120# configure |
| FX2120(config)# |
| FX2120(config)# errdisable recovery interval 600 |
| FX2120(config)# |
Telnet Command: exit
Use this command to exit current mode and return to previous mode/phase.
Syntax Items
exit
Example
| FX2120# configure |
| FX2120(config)# |
| FX2120(config)# exit |
| FX2120# |
Telnet Command: gvrp
Use this command to enable the GVRP configuration. In default, the GVRP is disabled.
Syntax Items
gvrp
Example
FX2120# configure
FX2120(config)# gvrp
FX2120(config)#
FX2120(config)# exit
FX2120# show gvrp
GVRP Status
----
GVRP : Enabled
Join time : 200 ms
Leave time : 600 ms
LeaveAll time : 10000 ms
FX2120#
Telnet Command: hostname
Use this command to modify the network name of VigorSwitch.
Syntax Items
hostname WORD
Description
| Syntax Items Description | |
| Hostname WORD | - Enter a string as the network name for VigorSwitch.Related Syntax:# hostname WORD |
Example
| FX2120# configure |
| FX2120(config)# hostname Switch_3F |
| Switch_3F(config)# |
Telnet Command: interface
Use this command to configure interface settings.
Before configuring, you have to access into next phase. See the following example:
FX2120# configure
FX2120(config)#
FX2120(config)# interface 10GigabitEthernet 3
FX2120(config-if)#
Or
FX2120# configure
FX2120(config)#
FX2120(config)# interface range LAG 3
FX2120 (config-if-range)#
Syntax Items
interface 10GigabitEthernet
interface VLAN
interface LAG
interface range
Description
| Syntax Items Description | |
| interface 10GigabitEthernet | <1-12> - Specify the number of Ethernet LAN port.Related Syntax:# interface 10GigabitEthernet <1-12> |
| Interface vlan <1-4094> - Specify the number of VLAN ID.Related Syntax:# interface vlan <1-4094> | |
| interface LAG <1-8> - Specify the number of LAG interface.Related Syntax:# interface LAG <1-8> | |
| Interface range Specify an interface ranges for configuring detailed settings.Related Syntax:# interface range 10GigabitEthernet <1-12># interface range LAG <1-8> | |
Example
| FX2120# configure |
| FX2120(config)# interface LAG 1 |
| FX2120(config-if)# |
Under (config-if)#, available sub-commands for LAN, VLAN or LAG will be different. Below shows the items under Ethernet LAN:
<config-if># gvrp
<config-if># ip
<config-if># ipv6
<config-if># lacp
<config-if># lag
<config-if># lldp
<config-if># loop-protection
<config-if># mac
<config-if># mvr
<config-if># no
<config-if># poe
<config-if># port-security
<config-if># power
<config-if># protected
<config-if># qos
<config-if># rate-limit
<config-if># shutdown
<config-if># spanning-tree
<config-if># speed
<config-if># storm-control
<config-if># surveillance-vlan
<config-if># switchport
<config-if># udld
<config-if># vlan
<config-if># voice-vlan
Description
| Syntax Items Description | |
| 10g-media It is used for configuring 10G media type.dac100cm - Set the media type as 100cm DAC.dac300cm - Set the media type as 300cm DAC.dac500cm - Set the media type as 500cm DAC.dac50cm - Set the media type as 50cm DAC.fiber10g - Set the media type as 10G Fiber.fiber1g - Set the media type as 1G Fiber. none - Set the media type to NONE media.Related Syntax:# 10g-media dac100cm# 10g-media dac300cm# 10g-media dac500cm# 10g-media dac50cm# 10g-media fiber10g# 10g-media fiber1g# 10g-media none | |
| authentication | Apply Auth Manager Port Configuration Commands to the |
| specified interface (Ethernet port/LAG port).dot1x - Execute the 802.1x authentication.guest-vlan - Authenticate the guest VLAN configuration.host-mode- Set the host mode for authentication on this port.max-hosts <1-256> - Set the maximum number of authenticated hoss allowed on this port.method- Set authentication method by using local or RADIUS server.order- Add an authentication type to the order list.port-control<auto / force-auth / force-unauth> - Set the port state of this port as AUTO, Authorized or Unauthorized.radius-attributes vlan reject - If the Radius server authorizes the supplicant, but does not provide a supplicant VLAN, the supplicant will be rejected. If the parameter is omitted, the option is applied by default.radius-attributes vlan static - If the Radius server authorizes the supplicant but does not provide asupplicant VLAN, the supplicant will be accepted.reauth - Enable/Disable Reauthentication for this porttimer<inactive> <60-65535> - Set the time value for authentication. After the time interval, if there is no activity from the client, it will be unauthorized.timer quiet <0-65535> - Set the time value to wait failed authentication exchange.timer reauth <300-4294967294> - Set the time value. After the time interval, an automatic re-authentication should be initiated.web - Execute the web-based authentication.web max-login-attempts <3-10> - Set a maximum number of login attempts on the port.web max-login-attempts infinite - No limit for login attempts.Related Syntax:# authentication dot1x# authentication guest-vlan# authentication host-mode/multi-host / single-host)# authentication mac# authentication max-hosts <1-256)# authentication method# authentication order# authentication port-control# authentication radius-attributes vlan reject# authentication radius-attributes vlan static# authentication reauth# authentication timer inactive <60-65535)# authentication timer quiet <0-65535># authentication timer reauth<300-4294967294># authentication web# authentication web max-login-attempts <3-10># authentication web max-login-attempts infinite | |
| back-pressure Enable back-pressure for the specified interface (Ethernet port/LAG port).Related Syntax:# back-pressure | |
| custom - Enable the custom module configuration for the specified interface (Ethernet port/LAG port).Related Syntax:# custom enable | |
| description Write a description for the specified interface (Ethernet port/LAG port).- Enter a description (up to 32 characters).Related Syntax:# description | |
| device-check Perform a device check the specified interface (Ethernet port/LAG port).ip-address-A. B.C.D.- Enter the IP address of the device.interval <120/15/30/60>- Check the device interval by entering the time value. Unit is second.retry <1/3/5>- Enter the retry time during a checking period.failure-action- Set the power cycle.alert- Enable or disable the alert function.- Enter multiple IP addresses separated by ",".Related Syntax:# device-check ip-addressinterval <120/15/30/60>retry <1/3/5>failure-action# device-check ip-addressinterval <120/15/30/60>retry <1/3/5>failure-actionalert# device-check multi ip-addressinterval <120/15/30/60>retry <1/3/5>failure-actionalert | |
| dos Apply DoS to the specified interface (Ethernet port/LAG port). | |
| dot1x It is available for Gigabit Ethernet port only.guest-vlan - Set guest VLAN configuration.max-req <1-10>- Set the maximum request retries. Default is 2.Port-control-set the port control value (auto, authorized or unauthorized)reauth - Enable/disable the reauthentication for this port.timeout | |
| /supp-timeout /tx-period>- Set timeout value for this port.<0-65535>- Set a value as quiet period (default is 60-second).<300-4294967294>- Set a value as re-authentication period.(default is 3600-second).<1-65535>- Set a value to wait for a packet retransmission to the authentication server.supp-timeout <1-65535>- Set a vale as supplicant timeout period.tx-period <1-65535>- Set a value to wait for a response to an EAP-request / identity before resending the request.Related Syntax:# dot1x guest-vlan# dot1x max-req <1-10># dot1x port-control# dot1x reauth# dot1x timeout quiet-period <0-65535># dot1x timeout reauth-period<300-4294967294># dot1x timeout server-timeout <1-65535># dot1x timeout supp-timeout <1-65535># dot1x timeout tx-period <1-65535> | |
| do Run execution commands in current mode. | |
| dray_surveillance Use this command to set the ONVIF throughput alert threshold.<16-1000000>- Specify a number as the alert threshold for egress /ingress throughput.Related Syntax:# dray_surveillance set threshold alert egress<16-1000000># dray_surveillance set threshold alert ingress<16-1000000> | |
| duplex Apply the duplex configuration to the specified interface (Ethernet port/LAG port).-Auto duplex configuration.- Force full duplex operation.- Force half-duplex operation.Related Syntax:# duplex | |
| eee Apply the EEE configuration to the specified interface (Ethernet port). | |
| end End current mode, change to enable mode and return to previous phase. | |
| exit Exit from current mode. | |
| flowcontrol | Configure flow-control mode to the spe (Ethernet port/LAG port). |
| - Enable AUTO flow-control configuration.- Disable the force flow-control.- Enable the force flow-control.Related Syntax:# flowcontrol | |
| gvrp Apply the GVRP configuration | tion to the specified interface (Ethernet port/LAG port).registration-mode- Set registration mode for GVRP. When registration-mode is fixed or forbidden, it will remove the dynamic port from VLAN.vlan-creation-forbid - Do not remove dynamic port from VLAN.Related Syntax:# gvrp registration-mode# gvrp vlan-creation-forbid |
| ip Apply IP configuration to the specified interface (Ethernet port/LAG port).acl-Specify an ACL for packets. Enter the name of the ACL.bind-ip- Enter an IP address for binding with the port type.conflict prevention bind-ip- Enter the IP address for the binding.conflict prevention port-type DHCP-Client - Set DHCP Client as the port type.conflict prevention port-type DHCP-Server -Set DHCP Server as the port type.conflict prevention port-type Multiple-Hosts - Set Multiple-Hosts as the port type.conflict prevention port-type Multiple-Hosts has-server - Use this string if there is a DHCP server in this port.conflict prevention port-type Static-Binding -Set Static-Binding as the port type.igmp filter <1-128> - Use it to bind a profile for a port. Specify a profile ID.igmp max-groups <0-256> - Use it to limit port learning max group number (0-256).igmp max-groups action- Use it to set the action (deny or replace) when the number of groups reach the limitation.source binding max-entry <1-50> - Set the maximum dynamic binding entry number.source binding max-entry no-limit - No limit to binding entry.source verify mac-and-ip - Use it to enable IP source guard function.Related Syntax:# ip acl# ip conflict prevention bind-ip | |
| # ip conflict prevention port-type DHCP-Client# ip conflict prevention port-type DHCP-Client has-server# ip conflict prevention port-type DHCP-Server# ip conflict prevention port-type DHCP-Server has-server# ip conflict prevention port-type Multiple-Hosts# ip conflict prevention port-type Multiple-Hosts has-server# ip conflict prevention port-type Static-Binding# ip conflict prevention port-type Static-Binding has-server# ip igmp filter <1-128># ip igmp max-groups <0-256># ip igmp max-groups action# ip source binding max-entry <1-50># ip source binding max-entry no-limit# ip source verify mac-and-ip | |
| ipv6 Apply IPv6 configuration to the specified interface (Ethernet port/LAG port).acl - Specify the ACL name for packets mld - Set IPv6 filter for MLD configuration.mld max-groups - Specify the number for maximum group. <0-256> - MLD snooping group number.action - Define the action to be performed when excessing the maximum group.Related Syntax:# ipv6 acl# ipv6 mld filter# ipv6 mld max-groups <0-256># ipv6 mld max-groups action | |
| lacp Apply LACP Configuration to the specified interface (Ethernet port/LAG port).<1-65535> - Set a number for IEEE 802.3 link aggregation port priority.- Set long or short timeout value.Related Syntax:# lacp port-priority <1-65535># lacp timeout | |
| lag Apply Link Aggregation Group Configuration the specified interface (Ethernet port/LAG port).<1-8> - Specify LAG number.Related Syntax:# lag <1-8> | |
| lldp med location - Configure the LLDP MED location data. The "coordinate", "civic-address", "ecs-elin" locations are | |
| independent, so at most three location TLVs could be sent if their data are not empty.med network-policy add / remove - Configure the LLDP MED network policy table. Add /remove a network policy entry that can be bind to ports.med tlv-select - Configure LLDP MED TLVs selection. Available optional TLVs are network-policy, location, inventory and poe-pse.tlv-select - Select LLDP TLVs to send.- The location is specified as civic address.- Range from 6 to 160 hexadecimal bytes.- The location is specified as coordinates.- 16 hexadecimal bytes exactly.- The location is specified as ECS ELIN.- 10 to 25 hexadecimal bytes.- Range from 1 to 32.- LLDP optional TLV, pick from: port-desc, sys-name, sys-desc, sys-cap, mac-phy, lag, max-frame-size, management-addr.pvid- Enable or disable the TX optional-TLV 802.1 PVID.vlan-name<2-4094>- Add/remove a selected VLAN. Enter the VLAN ID number.- Enable LLDP reception on interface.- Enable LLDP transmission on interface.Related Syntax:# lldp med location# lldp med network-policy add# lldp med network-policy remove# lldp med tlv-select# lldp tlv-select# lldp tlv-select pvid# lldp tlv-select vlan-name<2-4094)# lldp | |
| loop-protection Record the log, shutdown the port or follow the global loop-protection settings for each port.Related Syntax:# loop-protection action all# loop-protection action global# loop-protection action log# loop-protection action shutdown | |
| mac Specify an access control list for packets.Before configuring, you have to create an ACL based on MAC | |
| address. For example,# mac acl CA_ACL#- Enter a name for ACL.Related Syntax:# mac acl | |
| mvr Make MVR configuration. | immediate - Enable MVR function.type- Specify MVR port type as receiver or source.Related Syntax:# mvr immediate# mvr type |
| no Negate command. Such | command can disable current setting of command executed and return to the factory setting of that command.Example:# no mvrThe operation will make mvr setting is default. Continue?[yes/no]:yes#Related Syntax:# no |
| poe Enable or disable the PoE | port. |
| port-security port-security - Enable the port security functionality. Default is disabled.address-limit <1-256>- Enter the number as limitation for MAC address.action- Speicfy an action to be performed.Related Syntax:# port-security# port-security adderss-limit <1-256>action | |
| power Configure the inline power for the PoE device.inline auto - Turn on the PoE device discovery protocol and apply the power to the device.inline never - Turn off the PoE device power.power-limit <15.4w/30w/MW>- Set the power limit for the PoE device.priority <1-3/critical/high/low>- Set the priority of power application for the PoE device.schedule-index - Specify the index number (1 to 15) of the schedule profile.Related Syntax:# power inline auto | |
| # power inline never# power power-limit <15.4w/30w/MW)# power priority <1-3/critical/high/low)# power schedule-index <1-15> | |
| protected Configure an interface to be a protected port.Related Syntax:#protected | |
| qos cos - Configure the default CoS value for an Ethernet port.<0-7> - Specify a CoS value for the selected interface. Default value is 0.remark - Configure remarking state of each port.trust - Configure each port to trust state while the system is in "basic" mode. There are four trust types for a device to judge the appropriate queue of the packets.- Enable cos remarking.- Enable DSCP remarking.- Enable cos and DSCP remarking.- Enable IP precedence remarking.Related Syntax:#qos cos <0-7>#qos remark#qos trust | - Enable cos remarking.- Enable DSCP remarking.- Enable cos and DSCP remarking.- Enable IP precedence remarking.Related Syntax:#qos cos <0-7>#qos remark#qos trust |
| rate-limit It is effective for Ethernet port only.egress - Configure the egress port shaper.ingress - Configure the ingress port shaper.egress queue - Configure queue for egress port shaper.<0-1000000> - Enter a number as the average traffic rate in Kbps. It must be a multiple of 16.<16-1000000> - Enter a number as the average traffic rate in Kbps. It must be a multiple of 16.<1-8> - Specify a number as queue ID.Related Syntax:# rate-limit egress <0-1000000># rate-limit egress queue <1-8> <16-1000000># rate-limit ingress <16-1000000> | |
| shutdown Disable the selected interface. Example:(config)# interface 10gigabitethernet 3(config-if)# shutdown(config-if)# exit(config)# exit# show interface 10Gigabitethernet 310GigabitEthernet3 is downRelated Syntax:# shutdown | |
| spanning-tree | Configure spanning-tree settings.bpdu-filter - Set the BPDU-Filter for specified port.bpdu-guard - Set the BPDU-Guard for specified port.edge - Set the edge-port for specified port.cost - Change an interface's spanning tree path cost.link-type - Specify a link type for spanning tree protocol use.mcheck - Set the mcheck for specified port to migrate.mst - Set spanning-tree parameters of instance.port-priority- Set the priority for specified instance.<0-200000000> - Specify a value of internal path cost (0 means Auto).- The selected port will be treated as point-to-point.- The selected port will be treated as shared.<0-15> - Specify an instance ID.<0-240> - Specify a priority number for the selected port.Related Syntax:# spanning-tree# spanning-tree # spanning-tree cost <0-200000000># spanning-tree link-type# spanning-tree mcheck# spanning-tree mst <0-15> cost <0-200000000># spanning-tree port-priority <0-240> |
| speed | Configure speed operation.<10/100/1000> - Force 10/100/1000 Mbps operation.- Enable Auto speed configuration.Related Syntax:# speed<10/100/1000)# speed auto |
| storm-control | action - Select an action for storm control after exceeding the threshold.broadcast level - Enable the storm control type of broadcast for the selected port.unknown-multicast level - Enable the storm control type of unknown-multicast for the selected port.unknown-unicast level- Enable the storm control type of unknown-unicast for the selected port.- Drop packets after exceeding storm control threshold.- Disable the port after exceeding storm control threshold.<1-1000000> - Specify the rate value.Related Syntax:# storm-control action# storm-control broadcast level <1-1000000># storm-control unknown-multicast level<1-1000000># storm-control unknown-unicast level<1-1000000> |
| surveillance-vlan cos - Set surveillance VLAN configuration.mode - Set surveillance member port join mode.- QoS attributes are applied to all packets that are classified to the Surveillance VLAN.- QoS attributes are applied only on packets from IP phones.- Make surveillance member port join voice VLAN automatically.- The administrator manually makes surveillance member port join voice VLAN.Related Syntax:# surveillance-vlan cos# surveillance-vlan mode | |
| switchport Set switching mode characteristics.access vlan -Use it to set a native VLAN on the interface.default-vlan tagged - Use it to make the selected port interface to become the default VLAN tagged member.forbidden default-vlan - Use it to forbid the defult-vlan on the interface.forbidden vlan - Use it to forbid a vlan on the interface.hybrid acceptable-frame-type - Use it to choose which type of frame will be accepted.hybrid allowed - Use it to allow a VALN set on the interface.hybrid ingress-filtering - Use it to enable VLAN ingress filter.hybrid pvid - Use it to set PVID of the interface.mode access - Use it to configure the selected port as the role of access. Only untagged frames will be accepted.mode hybrid - Use it to configure the selected port as the role of hybrid. Support all functions defined in IEEE 802.1Q specification.mode trunk uplink - Use it to configure the selected port as the role of trunk. It can recognize double tagging on the interface.trunk allowed - Use it to allow a VALN on the interface.trunk native - Use it to set a native VLAN on the interface.tunnel vlan - Use it to set a Dot1q tunnel VLAN on the interface.vlan tpid - Use it to set TPID on the interface.<1-4094>- Specify a VLAN ID.- Add or remove the allowed VLAN list.- Specify an option for accepting all frames, only tagged frames or only untagged frames.<1-4094/all>- Specify a VLAN ID or all VLAN IDs.< 0x8100 / 0x88A8 / 0x9100 / 0x9200>- Specify one | |
| tag-protocol-id.Related Syntax:# switchport access vlan <1-4094)# switchport default-vlan tagged# switchport forbidden default-vlan# switchport forbidden vlan<1-4094)# switchport hybrid acceptable-frame-type# switchport hybrid allowed vlan add <1-4094)# switchport hybrid allowed vlan add <1-4094)# switchport hybrid allowed vlan remove <1-4094)# switchport hybrid ingress-filtering# switchport hybrid pvid <1-4094)# switchport mode# switchport mode trunk uplink# switchport trunk allowed vlan<1-4094/all)# switchport trunk native <1-4094)# switchport tunnel vlan <1-4094)# switchport vlan tpid < 0x8100/0x88A8 / 0x9100 / 0x9200> | |
| udld Configure UDLD enabled | or disabled and ignore global UDLD setting. aggressive - Enable UDLD protocol on such interface.Related Syntax:# udld# udld aggressive |
| vlan mac-vlan group - Set a MAC-based VLAN configuration. | - Specify a group ID to map.- Specify a VLAN ID.Related Syntax:# vlan mac-vlan group <1-2147483647> vlan <1-4094> |
| voice-vlan cos - Set voice VLAN | configuration as COS mode.mode - Set voice member port join mode.- QoS attributes are applied on all packets that are classified to the Voice VLAN.- QoS attributes are applied only on packets from IP phones.- Make voice member port join voice VLAN automatically.- The administrator manually makes voice member port join voice VLAN.Related Syntax:# voice-vlan cos# voice-vlan mode |
Example
| FX2120# configure |
| FX2120(config)# interface LAG 1 |
| FX2120(config-if)# speed 100 |
| FX2120(config-if)# backpressure |
| FX2120(config-if)# lldp med location ecs-elin 112233445566778899AA |
| FX2120(config-if)# vlan mac-vlan group 35 vlan 1000 |
| FX2120(config-if)# device-check multi ip-address 192.168.1.58,192.168.1.68 interval 30 retry 3 failure-action nothing alert enable |
| killall: jobsd: no process killed |
| FX2120(config-if)# |
Telnet Command: ip
Use this command to create an IPv4 access list (ACL) which performs classification on layer 3 fields and enters ip-access configuration mode.
Syntax Items
ip acl
ip address
ip arp
ip conflict
ip default-gateway
ip dhcp
ip dns
ip forcedhttps
ip http
ip https
ip igmp
ip route
ip source
ip ssh
ip telnet
Description
| Syntax Items Description | |
| ip acl | acl- Set the name of the access list (ACL) based on IPv4.To configure detailed settings, enter the name of ACL to access into next level.#ip aclThen, available sub-command includes:#deny#do#end#exit#permit#sequence#show |
| Use the “deny” command to create deny rules for the IPv4 access list.<0-255/egp/hmp/icmp/igp/ipinip/ipv6 /ipv6:frag /ipv6:icmp /ipv6:rout / ip / l2tp /ospf /pim / rdp / rsvp /tcp /udp > - Specify the IP protocol number or enter the name of the protocol./- Specify the source and destination IPv4 addresses and subnet masks.dscp <0-63> - Set the DSCP filtering by specifying a value for DSCP.precedence <0-7> - Set the cos value and the cos mask for a packet.shutdown - Disable the Ethernet interface.any - Any IP address (as source or destination).Related Syntax:#deny <0-255>/<A.B.C.D>/<A.B.C.D>/dscp <0-63>#deny <0-255>/<A.B.C.D>/<A.B.C.D>/<A.B.C.D>/dscp <0-63> shutdown#deny <0-255>/<A.B.C.D>/<A.B.C.D>/precedence <0-7>#deny <0-255>/<A.B.C.D>/<A.B.C.D>/precedence <0-7> shutdownany anydscp <0-63>#deny <0-255>/<A.B.C.D>/<A.B.C.D>/shutdown##deny <0-255>/<A.B.C.D>/<A.B.C.D>/precedence <0-7> any any any dscp <0-7> shutdown#deny <0-255>/<A.B.C.D>/<A.B.C.D>/sup Shutdown#deny <0-255>/<A.B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A.B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A.B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A.B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A.B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-7> any any any dscp <0-7> shutdown#deny <0-255>/<A.B.C.D>/<A.B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-7> any any any any dscp <0-7> shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C.D>/sup Shutdown#deny <0-7> any any any any dscp <0-7> shutdown#deny <0-255>/<A B.C.D>/<A B.C D}/sup Shutdown#deny <0-255>/<A B.C.D>/<A B.C D}/sup Shutdown#deny <0-255>/<A B.C D>/<A B.C D}/sup Shutdown#deny <0-255>/<A B.C D>/<A B.C D}/sup Shutdown#deny <0-255>/<A B.C D>/<A B.C D}/sup Shutdown#deny <0-7> any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any any if you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do your can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you Can you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do you can do us | |
| Use the “deny” command to run execution command in current mode.-Related Syntax:#do | |
| Use the “end” command to finish current mode. Any changesin current mode will be saved.Related Syntax:#end | |
| Use the "exit" command to close the current CLI session or return to the previous mode without saving the settings.Related Syntax:#exit | |
| Use the "no sequence" command to delete any entry in management ACL.<1-2147483647>- Specify an index number of the ACL.Related Syntax:#no sequence <1-2147483647> | |
| Use the "sequence" command to deny or permit the ACL.<1-2147483647>- Enter the sequence of ACL entry. The sequence represents the priority of the ACE in the ACL.Related Syntax:#sequence <1-2147483647>deny#sequence <1-2147483647>permit | |
| Use the "show acl" command to list current status of the selected ACL. | |
| ip address | Use this command to modify the administration IPv4 address. address-A.B.C.D>- Specify the IPv4 addresses. This IP is required when the administer wants to access into VigorSwitch through Telnet, SSH, HTTP, HTTPS, SNMP and so on.mask-Specify the netmask of the IP address.Related Syntax:#ip addressmask |
| Ip arp Use this command to enable the function of dynamic ARP inspection.vlan <1-4094>- Specify the VLAN ID number.Related Syntax:#ip arp inspection#ip arp inspection vlan <1-4094> | |
| ip conflict Use this command to do IP conflict prevention.lag - Enable/disable the function.- Specify the IPv4 addresses.<1-12>- Specify a physical port.<1-8>- Specify a LAG port.<1-4094>- Specify a VLAN ID number.Related Syntax:#ip conflict detection#ip conflict lag#ip conflict prevention#ip conflict prevention bindingvlan | |
| <1-4094><A.B.C.D>10GigabitEthernet <1-12>server#ip conflict prevention bindingvlan<1-4094><A.B.C.D>10GigabitEthernet <1-12>static#ip conflict prevention bindingvlan<1-4094><A.B.C.D>LAG <1-8>server#ip conflict prevention bindingvlan <1-4094><A.B.C.D>interface 10GigabitEthernet <1-12>server#ip conflict prevention binding vlan <1-4094><A.B.C.D><A.B.C.D>interface 10GigabitEthernet <1-12>static#ip conflict prevention binding vlan <1-4094><A.B.C.D><A.B.C.D>interface LAG<1-8>server#ip conflict prevention binding vlan <1-4094><A.B.C.D><A.B.C.D>interface LAG<1-8>static#ip conflict prevention server ip conflict prevention server-ipinterface 10GigabitEthernet <1-12>#ip conflict prevention server-ipinterface LAG <1-8> | |
| ip default-gateway Use this command to modify default gateway address. | address- Specify the IPv4 addresses.Related Syntax:#ip default-gateway |
| ip dhcp Use this command to enable DHCP client to get IP address from remote DHCP server.Related Syntax:#ip dhcp | |
| ip dns Use this command to modify DNS server configuration.- Specify the IP address as primary DNS server.- Sepcify two IP addresses as primary and secondary DNS server.- Specify the MAC address as primary DNS server.- Specify two MAC addresses as primary and secondary DNS server.lookup - Enable the IP domain naming system lookup.Related Syntax:#ip dns#ip dns#ip dns#ip dns#ip dns #ip dns lookup | |
| ip forcedhttps Use this command to enable the function of forced HTTPS configuration.Related Syntax: | |
| #ip forcedhttps | |
| ip http Use this command to | enable the function of HTTP configuration.Session-timeout - Set the session timeout.<0-86400> - Set the timeout value. 0 means no timeout.Related Syntax:#ip http session-timeout <0-86400> |
| ip https Use this command to | enable the function of HTTPS configuration.session-timeout - Set the session timeout.<0-86400> - Set the timeout value. 0 means no timeout.tls version- Set the TLS version.Related Syntax:#ip https session-timeout <0-86400>#ip https tls version |
| ip igmp Use this command to | set IGMP profile and enable IGMP snooping function.Profile - Set IGMP profile.<1-128> - Enter the index number of IGMP profile to access into next phase for configuring detailed settings.- Specify the source and destination IPv4 addressesaction- Specify the rule (deny/permit) for the IGMP profile.snooping forward-method- Set the forward method.snooping report-suppression - Set the IGMP v1 or v2 report suppression.snooping unknown-multicast action drop /flood/router-port-Set unknown multicast. The packets will be dropped, flood, or forwarded to the router ports.snooping version <2/3> - Set the IGMP snooping operation version.snooping vlan- Set a VLAN ID (1 to 4094) for the IGMP VLAN configuration forbidden-port 10GigabitEthernt <1 to 12> / LAG <1 to 8> - Specify an interface for the IPv4 forbidden port configuration.immediate-leave - Enable the IGMP snooping immediate-leave function.last-member-query-count <1-7>- Set a value as the Last Member Query Count.last-member-query-interval <1-25> - Set the time interval.querier - Enable the querier for the IGMP VLAN configuration.querier <2/3> - Set the querier version (Version 2 or Version 3).query-interval <30-18000> - Set the time interval for the query.response-time <5-20> - Set the response time.robustness-variable <1-7> - Set the robustness variable.router learn pim-dvmrp - Enable the IGMP snooping router |
port learn by PIM, DVMRP and IGMP messages.
static-group
interfaces 10GigabitEthernt <1 to 12>/ LAG <1 to 8> - Specify an interface.
static-port 10GigabitEthernt <1 to 12>/LAG <1 to 8> - Set the static port for an interface.
static-router-port 10GigabitEthernt <1 to 12>/LAG <1 to 8> - Set the static router port for an interface.
Related Syntax:
<config>#ip igmp profile <1-128>
<config-igmp-profile># do
<config-igmp-profile># end
<config-igmp-profile># exit
<config-igmp-profile># profile range ip
<A.B.C.D><A.B.C.D>
<config-igmp-profile># profile range ip
<A.B.C.D><A.B.C.D> action <deny/permit>
<config-igmp-profile># profile range ip <A.B.C.D>
action <deny/permit>
<config-igmp-profile># show
-
-
-
-
| pim-dvmrp# ip igmp snooping vlanstatic-groupinterfaces 10GigabitEthernt <1 to 12)# ip igmp snooping vlanstatic-groupinterfaces LAG <1 to 8)# ip igmp snooping vlanstatic-port 10GigabitEthernt <1 to 12)# ip igmp snooping vlanstatic-port LAG <1 to 8)# ip igmp snooping vlanstatic-router-port 10GigabitEthernt <1 to 12)# ip igmp snooping vlanstatic-router-port LAG <1 to 8> | |
| ip route Use this command to create a static route.- Specify the source IPv4 address.vlan <1-4094>- Specify the VLAN ID number.mask- Specify the subnet mask.Related Syntax:# ip route# ip route#gateway# ip routemaskgateway | |
| ip source Use this command to create a static IP source binding entry.- Enter the MAC address for the binding entry.vlan <1-4094>- Specify the VLAN ID number.- Specify the IPv4 address and netmask.<1-12>- Specify a physical port.<1-8>- Specify a LAG port.Related Syntax:# ip source bindingvlan <1-4094><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C.D><A.B.C. | - Specify the source IPv4 address.- Specify the VLAN ID number.mask- Specify the subnet mask.Related Syntax:# ip route#gatewaymask@gateway |
| ip ssh Use this command to generate the key files for SSH connection.- Select the key files for SSH connection.Related Syntax:# ip ssh | |
| ip telnet Use this command to enable telnet service.Related Syntax:# ip telnet |
Example
FX2120# configure
FX2120(config)# ip acl market_1
FX2120config-ip-acl)#
FX2120 (config-ip-acl)# deny 20 192.168.2.55/255.255.255.0 192.168.2.85/255.255.255.0
FX2120(config)#
| Syntax Items Description | |
| ipv6 acl | - Set the name of the access list (ACL) based on IPv6. To configure detailed settings, enter the name of ACL to access into next level.#ipv6 aclThen, available sub-command includes:#deny#do#end#exit#no#permit#sequence#show |
| Use the “deny” command to create deny rules for the IPv4 access list.<0-255/icmp/ipv6/tcp /udp > - Specify the IP protocol number or enter the name of the protocol.<0-255/any> - Specify ICMPv6 number./<0-128> <X:X::X:X>/<0-128> - Specify the source/destination IPv6 addresses and subnet masks.dscp <0-63> - Set the DSCP filtering by specifying a value for DSCP.precedence <0-7> - Set the cos value and the cos mask for a packet. |
shutdown - Disable the Ethernet interface.
any – Any IP address (as source or destination).
<0-65535 / PORT_RANGE / any / daytime / discard / domain / drip / echo / ftp / ftp-data / hostname / klogin / kshell / pop2 / pop3 / smtp / sunrpc / syslog / tacacs-ds / talk / telnet / time / whois / www>
match-all
<0-65535/ PORT_RANGE / any / bootpc / bootps / discard / domain / echo / nameserver / netbios-ns / ntp / rip / snmp / snmptrap / sunrpc / syslog / tacacs-ds / talk / tftp / time / who>
Related Syntax:
| /<0-128>#deny ipv6/<0-128>dscp <0-63>#deny ipv6/<0-128>dscp <0-63>shutdown>#deny ipv6/<0-128>precedence <0-7>#deny ipv6/<0-128>precedence <0-7>shutdown#deny ipv6/<0-128>any dscp <0-63>#deny ipv6/<0-128>any dscp <0-63>shutdown#deny ipv6/<0-128>any precedence <0-7>#deny ipv6/<0-128>any precedence <0-7>shutdown#deny ipv6/<0-128>any shutdown#deny ipv6 any <0-128>dscp <0-63>#deny ipv6 any <0-128>dscp <0-63>shutdown#deny ipv6 any <0-128>supdown#deny ipv6 any <0-128>supdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#deny ipv6 any any shutdown#Deny tcp <0-128> <0-65535 / PORT_RANGE / any / daytime / discard / domain / drip / echo / ftp / ftp-data / hostname / klogin / kshell / pop2 / pop3 / smtp / sunrpc / syslog / tacacs-ds / talk / telnet / time / whois / www><0-128> <0-65535 / PORT_RANGE / any / daytime / discard / domain / drip / echo / ftp / ftp-data / hostname / klogin / kshell / pop2 / pop3 / smtp / sunrpc / syslog / tacacs-ds / talk / telnet / time / whois / www>#deny tcp <0-128> <0-65535 / |
PORT_RANGE / any / daytime / discard / domain / drip / echo / ftp / ftp-data / hostname / klogin / kshell / pop2 / pop3 / smtp / sunrpc / syslog / tacacs-ds / talk / telnet / time / whois / www>
PORT_RANGE / any / daytime / discard / domain / drip / echo / ftp / ftp-data / hostname / klogin / kshell / pop2 / pop3 / smtp / sunrpc / syslog / tacacs-ds / talk / telnet / time / whois / www> dscp <0-63>
| snmtrap / sunrpc / syslog / tacacs-ds / talk / tftp / time / who><X:X::X:X>/<0-128> <0-65535/ PORT_RANGE / any / bootpc / bootps / discard / domain / echo / nameserver / netbios-ns / ntp / rip / snmp / snmtrap / sunrpc / syslog / tacacs-ds / talk / tftp / time / who> dscp <0-63> shutdown#deny udp<X:X::X:X>/<0-128> <0-65535/ PORT_RANGE / any / bootpc / bootps / discard / domain / echo / nameserver / netbios-ns / ntp / rip / snmp / snmtrap / sunrpc / syslog / tacacs-ds / talk / tftp / time / who><X:X::X:X>/<0-128> <0-65535/ PORT_RANGE / any / bootpc / bootps / discard / domain / echo / nameserver / netbios-ns / ntp / rip / snmp / snmtrap / sunrpc / syslog / tacacs-ds / talk / tftp / time / who>dscp <0-63> precedence <0-7>#deny udp<X:X::X:X>/<0-128> <0-65535/ PORT_RANGE / any / bootpc / bootps / discard / domain / echo / nameserver / netbios-ns / ntp / rip / snmp / snmtrap / sunrpc / syslog / tacacs-ds / talk / tftp / time / who><X:X::X:X>/<0-128> <0-65534/ PORT_RANGE / any / bootpc / bootps / discard / domain / echo / nameserver / netbios-ns / ntp / rip / snmp / snmtrap / sunrpc / syslog / tacacs-ds / talk / tftp / time / who> dscp <0-63> precedence <0-7> shutdown#deny udp<X:X::X:X>/<0-128> <0-65535/ any | |
| Use the “do” command to run execution command in current mode.-Related Syntax:#do | |
| Use the “end” command to finish current mode. Any changes in current mode will be saved.Related Syntax:#end | |
| Use the “exit” command to close the current CLI session or return to the previous mode without saving the settings.Related Syntax:#exit | |
| Use the “no sequence” command to delete any entry in management ACL.<1-2147483647>- Specify an index number of the ACL.Related Syntax:#no sequence <1-2147483647> | |
| Use the “permit” command to create permit rules which bypass the packets meet the rule.<0-255/icmp/ipv6/tcp /udp > - Specify the IP protocol number or enter the name of the protocol.<0-255/any> - Specify ICMPv6 number./<0-128> <0-128> - Specify the | |
| source/destination IPv6 addresses and subnet masks.dscp <0-63> - Set the DSCP filtering by specifying a value for DSCP.precedence <0-7> - Set the cos value and the cos mask for a packet.shutdown - Disable the Ethernet interface.any - Any IP address (as source or destination).<0-65535 / PORT_RANGE / any / daytime / discard / domain / drip / echo / ftp / ftp-data / hostname / klogin / kshell / pop2 / pop3 / smtp / sunrpc / syslog / tacacs-ds / talk / telnet / time / whois / www>/<0-128> <0-65535 / PORT_RANGE / any / daytime / discard / domain / drip / echo / ftp / ftp-data / hostname / klogin / kshell / pop2 / pop3 / smtp / sunrpc / syslog / tacacs-ds / talk / telnet / time / whois / www> - Set TCP port.match-all- Set TCP flags. List of TCP flags that should occur. If a flag should be set, it is p refixed by "+"If a flag should be unset, it is prefixed by "-"Avai lable options are +urg, +ack, +psh, +rst, +syn, +fin, -urg, -ack, -psh, -rst, -syn and -fin.To define more than 1 flag - enter additional flags one after another without a space (example +syn-ack).<0-65535/ PORT_RANGE / any / bootpc / bootps / discard / domain / echo / nameserver / netbios-ns / ntp / rip / snmp / snmptrap / sunrpc / syslog / tacacs-ds / talk / tftp / time / who>/<0-128> <0-65535/ PORT_RANGE / any / bootpc / bootps / discard / domain / echo / nameserver / netbios-ns / ntp / rip / snmp / snmptrap / sunrpc / syslog / tacacs-ds / talk / tftp / time / who> - Set UDP port.Related Syntax:#permit <0-255>/<0-128>/<X::X:X>/<0-128>#permit <0-255>/<0-128>/<X::X:X>/<0-128>dscp <0-63>#permit <0-255>/<0-128>/<X::X:X>/<0-128>dscp <0-63> shutdown#permit <0-255>/<0-128>/<X::X:X>/<0-128> precedence <0-7>#permit <0-255>/<0-128>/<X::X:X>/<0-128> precedence <0-7> shutdown#permit <0-255>/<0-128><X::X:X>/<0-128> shutdown#permit <0-255>/<0-128> any dscp <0-63>#permit <0-255>/<0-128> any dscp <0-63> shutdown#permit <0-255>/<0-128> any precedence <0-7>#permit <0-255>/<0-128> any precedence <0-7> shutdown#permit <0-255>/<0-128> any shutdown |
| <0-255 / any / destination-unreachable / echo-reply / echo-request / nd-na / nd-ns / packet-too-big/ parameter-problem/ router-advertisement / router-solicitation / time-exceeded> <0-255 /any> shutdown# permit ipv6/<0-128>/<X:X::X:X>/<0-128># permit ipv6/<0-128>/<X:X::X:X>/<0-128> dscp <0-63># permit ipv6/<0-128>/<X:X::X:X>/<0-128> dscp <0-63> shutdown# permit ipv6/<0-128>/<X:X::X:X>/<0-128> precedence <0-7># permit ipv6/<0-128>/<X:X::X:X>/<0-128> precedence <0-7> shutdown# permit ipv6/<0-128>/<X:X::X:X>/<0-128> shutdown# permit ipv6/<0-128> any dscp <0-63># permit ipv6/<0-128> any dscp <0-63> shutdown# permit ipv6/<0-128> any precedence <0-7># permit ipv6/<0-128> any precedence <0-7> shutdown# permit ipv6/<0-128> any shutdown# permit ipv6 any/<0-128># permit ipv6 any/<0-128> dscp <0-63># permit ipv6 any/<0-128> dscp <0-63> shutdown# permit ipv6 any/<0-128> precedence <0-7># permit ipv6 any/<0-128> precedence <0-7> shutdown# permit ipv6 any/<0-128> shutdown# permit ipv6 any any dscp <0-63># permit ipv6 any any dscp <0-63> shutdown# permit ipv6 any any precedence <0-7># permit ipv6 any any precedence <0-7> shutdown# permit ipv6 any any shutdown# permit tcp/<0-128> <0-65535 / PORT_RANGE / any / daytime / discard / domain / drip / echo / ftp / ftp-data / hostname / klogin / kshell / pop2 / pop3 / smtp / sunrpc / syslog / tacacs-ds / talk / telnet / time |
/ whois / www>
PORT_RANGE / any / daytime / discard / domain / drip / echo / ftp / ftp-data / hostname / klogin / kshell / pop2 / pop3 / smtp / sunrpc / syslog / tacacs-ds / talk / telnet / time / whois / www>
/ whois / www>
PORT_RANGE / any / daytime / discard / domain / drip / echo / ftp / ftp-data / hostname / klogin / kshell / pop2 / pop3 / smtp / sunrpc / syslog / tacacs-ds / talk / telnet / time / whois / www> match-all
| bootpc / bootps / discard / domain / echo / nameserver /netbios-ns / ntp / rip / snmp / snmptrap / sunrpc / syslog /tacacs-ds / talk / tftp / time / who> dscp <0-63># permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# permit udp/# commit | |
| Use the "sequence" command to deny or permit the ACL. <1-2147483647> - Enter the sequence of ACL entry. The sequence represents the priority of the ACE in the ACL.Related Syntax:#sequence <1-2147483647> deny#sequence <1-2147483647> permit | |
| Use the "show acl" command to list current status of the selected ACL. | |
| Ipv6 address | Use this command to modify the administration IPv6 address. address#Specify the IPv6 addresses. This IP is required when the administer wants to access into VigorSwitch through Telnet, SSH, HTTP, HTTPS, SNMP and so on. prefix <0-128> - Specify the prefix length of the IPv6 address.Related Syntax:#ipv6 addressprefix <0-128> |
| Ipv6 autoconfig | Use this command to enable IPv6 auto configuration feature. |
| Ipv6 default-gateway Use this | command to modify default gateway address.default-address#Specify the IPv6 addresses of the gateway.Related Syntax:#ipv6 default-gateway |
| ipv6 dhcp Use this command to enable DHCPv6 client to get IP address from remote DHCPv6 server.Related Syntax:#ipv6 dhcp | |
| ipv6 mld Use this command to set MLD configuration.profile <1-128> - Use it to enter profile configuration.snooping - Use it to enable MLD snooping function.forward-method- Specify a method to forward the packets.report-suppression - Use it to enable MLD snooping report-suppression function.unknown-multicast action- Use it to set unknown multicast action.version <1/2> - Use it to change MLD support version.vlan <1-4094> - Use it to enable MLD on VLAN. Specify a VLAN ID for configuration.forbidden-port 10GigabitEthernet <1-12> - Specify a physical port.forbidden-port LAG <1-8> - Specify a LAG port.forbidden-router-port 10GigabitEthernet <1-12> - Use it to add static forbidden router port. Specify a physical port.forbidden-router-port LAG <1-8> - Use it to add static forbidden router port. Specify a LAG port.immediate-leave - Use it to enable fastleave function.last-member-query-count <1-7> - Use it to change how many query packets will send. Specify the last member query count. Default is 2.last-member-query-interval <1-25> - Use it to set interval between each query packet. Specify the last member query interval. Default is 1.query-interval <30-18000> - Use it to set interval between each query. Specify the query interval. Default is 125.response-time <5-20> - Use it to set response time. Specify a time value. Default is 10.robustness-variable <1-7> - Specify a robustness-variable value. Default is 2.router learn pim-dvmrp - Use it to enable learning router port by rouing protocol packets (DVMRP).static-groupinterfaces 10GigabitEthernet <1-12> - Use it to add a static group. Specify a physical port.static-groupinterfaces LAG <1-8> - Use it to add a static group. Specify a LAG port.static-port 10gigabitethernet <1-12>- Use it to add static forwarding port. Specify a physical port.static-port LAG <1-8>- Use it to add static forwarding port. Specify a LAG port.static-router-port 10GigabitEthernet <1-12>- Use it to add | static router port. All query packets wil forward to the specified port. Specify a physical port.static-router-port LAG <1-8> - Use it to add static router port. All query packets wil forward to the specified port. Specify a LAG port.Related Syntax:# ipv6 mld profile <1-128># do# end# exit# profile range ipv6action# profile range ipv6# profile range ipv6action# show# ipv6 mld snooping# ipv6 mld snooping forward-method# ipv6 mld snooping report-suppression# ipv6 mld snooping unknown-multicast action# ipv6 mld snooping version <1/2># ipv6 mld snooping vlan <1-4094>forbidden-port 10GigabitEthernet <1-12># ipv6 mld snooping vlan <1-4094>forbidden-port LAG <1-8># ipv6 mld snooping vlan <1-4094>forbidden-router-port 10GigabitEthernet <1-12># ipv6 mld snooping vlan <1-4094>forbidden-router-port LAG <1-8># ipv6 mld snooping vlan <1-4094>immediate-leave# ipv6 mld snooping vlan <1-4094>last-member-query-count <1-7># ipv6 mld snooping vlan <1-4094>last-member-query-interval <1-25># ipv6 mld snooping vlan <1-4094>query-interval <30-18000># ipv6 mld snooping vlan <1-4094>response-time <5-20># ipv6 mld snooping vlan <1-4094>robustness-variable <1-7># ipv6 mld snooping vlan <1-4094>router learn pim-dvmrp# ipv6 mld snooping vlan <1-4094>static-groupinterfaces 10GigabitEthernet <1-12># ipv6 mld snooping vlan <1-4094>static-groupinterfaces LAG <1-8>#ipv6 mld snooping vlan <1-4094> static-port 10GigabitEthernet <1-12>#ipv6 mld snooping vlan <1-4094> static-port LAG <1-8>#ipv6 mld snooping vlan <1-4094> static-router-port 10GigabitEthernet <1-12>#ipv6 mld snooping vlan <1-4094> static-router-port LAG <1-8> |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# ipv6 mld snooping vlan 33
FX2120(config)# ipv6 acl CA_v6
FX2120(config-ipv6-acl)# deny 3 00:50::32:ff/24 00:50::78:aa/32
Telnet Command: jumbo-frame
Use this command to modify the maximum frame size of jumbo frame.
Syntax Items
jumbo-frame
Description
| Syntax Items Description | |
| jumbo-frame Enable the function of jumbo frame. | |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# jumbo-frame 8000
FX2120(config)#
Telnet Command: lacp
Use this command to set the system priority of the switch.
Syntax Items
Iacp
lapp system-priority
Description
| Syntax Items Description | |
| lacp Enable the function. | |
| lacp system-priority It is used for selecting a master switch between two devices.Lower system priority has higher priority. The device with higher priority value can determine which port is able to join LAG.<1-65535>- Specify the system priority value.Related Syntax:# lacp# lacp system-priority <1-65535> | |
Example
| FX2120# configure |
| FX2120(config)# |
| FX2120(config)# lacp system-priority 1000 |
| FX2120(config)# |
Telnet Command: lag
LAG port can transmit packets to all ports for balancing the traffic loading. Use this command to change the load balance algorithm to src-dst-mac or src-dst-mac-ip as the Load Balance policy.
Syntax Items
lag load-balance
Description
| Syntax Items Description | |
| lag load-balance | LAG load balancing is based on source and destination MAC address and/or IP address.Related Syntax:# lag load-balance src-dst-mac# lag load-balance src-dst-mac-ip |
Example
| FX2120# configure |
| FX2120(config)# lag load-balance src-dst-mac |
| FX2120(config)# |
Telnet Command: line
Use this command to select line configuration mode.
Syntax Items
line console
line ssh
line telent
Description
| Syntax Items Description | |
| console/ssh/telnet | Select console configuration mode.To configure detailed settings, access into next level.#lineconsole - Select the console line to configure. Then, available sub-commands are:#do#exec-timeout#exit#history#no#password-thresh#silent-time |
| Select SSH line to configure. Then, available sub-commands are:#do#end#exec-timeout#exit#password-thresh#silent-time | |
| telnet - Select telnet line to configure. Then, available sub-commands are:#do#end#exec-timeout#exit#password-thresh#silent-time | |
| #do | Use the "do" command to run execution command in current mode.-Related Syntax:#do |
| #exec-timeout | Use the "exec-timeout" to set the session timeout configuration.<0-65535>- Enter the number.Related Syntax:#exec-timeout <0-65535> |
| #exit Use the "exit" command | to close the current CLI session or return to the previous mode without saving the settings.Related Syntax:#exit |
| #history Use the "history" command to specify the index number of history.<1-256>- Enter a number.Related Syntax:#history <1-256> | |
| #no Use the "no" command to negate line command.Related Syntax:#no enable#no history#no login | |
| #password-thresh Use the "password-thresh" command to set the login password intrusion threshold.<0-120>- Set a number of allowed password attempts. 0 means no threshold.Related Syntax:#password-thresh <0-120> | |
| #silent-time Use the "silent-time" command to set fail silent time.<0-65535>- Set the time to disable the console response.Related Syntax:#silent-time <0-65535> | |
Example
FX2120# configure FX2120(config)# FX2120(config)# line telnet FX2120(config-line)#
Telnet Command: Ildp
Use this command to set LLDP function.
Syntax Items
Ildp
lldp holdtime-multiplier
Ildp Ildpdu
Ildp med
Ildp reinit-delay
lldp tx-delay
Ildp tx-interval
Description
| Syntax Items Description | |
| Ildp | Enable the function of LLDP. |
| Ildp holdtime-multiplier | Set the multiplier used for calculating the LLDP discoverypacket hold time.<2-10> - Set the LLDP hold time multiplier.Related Syntax:# lldp holdtime-multiplier <2-10> |
| Ildp lldpdu | bridging - The LLDP packets will be bridging when LLDP is disabledPeopleing - The LLDP packets will be filtered and deleted when LLDP is disabled.flooding - The LLDP packets will be flooded and forwarded to all interfaces when LLDP is disabled.Related Syntax:# lldp lldpdu bridging# lldp lldpdu filtering# lldp lldpdu flooding |
| Ildp med med fast-start-repeat-count - Set the LLDP PDU fast start TX repeat count.med network-policy - Set the LLDP MED network policy table.med network-policy voice auto - Enable the network policy voice auto mode.<1-10> - Set the fast start repeat count.<1-32> - Specify the index number of the policy.appAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppApp AppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppApp appsAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppApp appAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppApp APPAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppPAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppApppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppApp AppsAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAcc AppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppAppApp App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App APP App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App Apps App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App Ap App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App App,1-1-10> - Enter the number of delay time. Note that both tx-interval and tx-delay will affect the LLDP PDU TX time. Related Syntax: | |
| Ildp reinit-delay Set the LLDP reinit-delay to avoid LLDP generating too many PDU.<1-10> - Specify a number for LLDP server to initialize.Related Syntax:# lldp reinit-delay <1-10> | |
| Ildp tx-delay Set the delay time between the successful LLDP frame transmissions.<1-8191> - Enter the number of delay time. Note that both tx-interval and tx-delay will affect the LLDP PDU TX time.Related Syntax: | |
| # lldp tx-delay <1-8191> | |
| lldp tx-interval Set the LLDP TX | interval.<5-32767>- Enter the interval in unit of second.Related Syntax:# lldp tx-interval <5-32767> |
Example
FX2120# configure FX2120(config)# FX2120(config)# lldp holdtime-multiplier 5 FX2120(config)#
Telnet Command: logging
Use this command to set logging service on VigorSwitch.
Syntax Items
logging
logging buffered
logging console
logging file
logging host
Description
| Syntax Items Description | |
| logging | Enable the logging service. |
| logging buffered | Store the log message in the RAM. |
| logging console Specify the logging level.<0-7> - Specify the logging level by entering a number (from EMEGR-DEBUG).Related Syntax:# logging console# logging console severity <0-7> | |
| logging file Store the log message in the flash.<0-7> - Specify the logging level by entering a number (from EMEGR-DEBUG).Related Syntax:# logging file severity <0-7> | |
| logging host Define the logging server.host- Enter an IP address of the remote (or local) server.facility-Specify the facility parameter for the syslog message.port <1-65535>- Enter a number for the remote server. Default is 514. | |
| severity <0-7> - Specify the logging level by entering a number (from EMEGR-DEBUG). | |
| - Define a name as the host.Related Syntax:#logging hostfacility#logging hostport <1-65535>#logging hostport <1-65535> facility#logging hostport <1-65535> severity <0-7> facility#logging hostseverity <0-7> facility#logging hostfacility#logging hostport <1-65535>#logging hostport <1-65535> facility#logging hostport <1-65535> severity <0-7> facility#logging hostseverity <0-7> facility#logging hostport <1-65535> facility#logging hostport <1-65535> facility#logging hostport <1-65535> severity <0-7> facility#logging hostport <1-65535> facility#logging hostport <1-65535> facility#logging hostport <1-65535> facility#logging hostport <1-65535> severity <0-7> facility | |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# logging host aa:00::1a:FF facility local1
Telnet Command: logmail
Use this command to configure log mail.
Syntax Items
logmail active
logmail auth
logmail category
logmail encpassword
logmail encry
logmail password
logmail port
logmail receiver
logmail sender
logmail server
Description
| Syntax Items Description | |
| logmail active | - Enable or disable the function of log mail.Related Syntax:# logmail active |
| logmail auth | - Enable or disable the function of SMTP server authentication.Related Syntax:# logmail auth |
| logmail category | UTHMGR,CABLE_DIAG, DAI, DHCP_SNOOPING,GVRP, IGMP_SNOOPING, IPSG, L2, LLDP, Mac-based, Mirror,MLD_SNOOPING, Platform, PM, POE, Port, PORT_SECURITY,QoS, Rate, SNMP, STP, Security, System, Surveillance, Trunk,UDLD, VLAN, CLEAR>- Specify one type for the logmail.Related Syntax:# logmail category |
| logmail encpassword Set SMTP | encrypt authentication password.- Enter the password for SMTP server encrypt authentication.Related Syntax:# logmail encpassword |
| logmail encry | - Specify the encryption type for mail alert.Related Syntax:# logmail encry |
| logmail password | - Enter the password for SMTP server authentication.Related Syntax:# logmail password |
| logmail port <0-65535>- Enter a port number.Related Syntax:# logmail port <0-65535> | |
| logmail receiver Specify an address for receiving the alert mail. | - Enter the email address of the receiver.Related Syntax:# logmail receiver |
| logmail sender Specify an address which sends out the alert mail. | - Enter the email address of the sender.Related Syntax:# logmail |
| logmail server Set the IP address of the server.- Enter the IP address of the SMTP server.Related Syntax:# logmail server | |
| logmail username- Enter the username authenticated by STMP server.Related Syntax:# logmail username | |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# logmail receiver carrie_ni@draytek.com
FX2120(config)#
Telnet Command: loop-protection
Use this command to set loop-protection.
Syntax Items
loop-protection action
loop-protection periodicTime
loop-protection state
Description
| Syntax Items Description | |
| loop-protection action | Specify an action to be taken when the loop is happened.- Specify one action to be executed.Related Syntax:# loop-protection action |
| loop-protection periodicTime | Send the loop protection packets to the network hosts.<1-3>- Enter the number of the packet.Related Syntax:# Related Syntax:# loop-protection periodicTime <1-3> |
| loop-protection state | - Enable or disable the function of loop protection.Related Syntax:# loop-protection state |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# loop-protection state enable
FX2120(config)#
Telnet Command: mac
Use this command to create a MAC access list.
Syntax Items
mac acl
mac address-table
Description
| Syntax Items Description | |
| mac acl | - Set the name of the access list (ACL).To configure detailed settings, enter the name of ACL to access into next level.#mac aclThen, available sub-commands are:#deny#do#end#exit#permit#sequence |
| Use the “deny” command to add deny rules for the MAC access list://-Specify the source and destination MAC addresses and subnet masks.cos <0-7><0-7> - Set the cos value and the cos mask for a packet.<0x0600-0xFFFF> - Set the EtherType of the packet.Shutdown – Disable the Ethernet interface.vlan <1-4094> - Specify the VLAN ID of the packet.any – Any MAC address.Related Syntax:•#deny/√cos <0-7><0-7>•#deny/√cos <0-7><0-7> ethtype<0x0600-0xFFFF>•#deny/√cos <0-7><0-7> ethtype<0x0600-0xFFFF> shutdown•#deny/√cos <0-7><0-7> shutdown•#deny/√ethtype <0x0600-0xFFFF>•#deny/√ethtype <0x0600-0xFFFF> shutdown•#deny/√><A:B:C:D:E:F>/<A:B:C:D:E:F> shutdown●#deny any/<A:B:C:D:E:F>/<A:B:C:D:E:F><A:B:C:D:E:F>/<A:B:C:D:E:F>cos <0-7><0-7>●#deny any/<A:B:C:D:E:F>/<A:B:C:D:E:F><A:B:C:D:E:F>/<A:B:C:D:E:F>cos <0-7><0-7> ethtype<0x0600-0xFFFF>●#deny any/<A:B:C:D:E:F>/<A:B:C:D:E:F><A:B:C:D:E:F>/<A:B:C:D:E:F>cos <0-7><0-7> ethtype<0x0600-0xFFFF> shutdown●#deny any/<A:B:C:D:E:F>/<A:B:C:D:E:F><A:B:C:D:E:F>/<A:B:C:D:E:F>cos <0-7><0-7> shutdown●#deny any any cos <0-7><0-7>●#deny any any cos <0-7><0-7> ethtype<0x0600-0xFFFF>●#deny any any cos <0-7><0-7> ethtype<0x0600-0xFFFF> shutdown●#deny any any cos <0-7><0-7> shutdown●#deny any any ethtype <0x0600-0xFFFF>●#deny any any ethtype <0x0600-0xFFFF> shutdown●#deny any any shutdown●#deny any any vlan <1-4094>●#deny any any vlan <1-4094> cos<0-7><0-7>●#deny any any vlan <1-4094> cos<0-7><0-7> ethtype <0x0600-0xFFFF>●#deny any any vlan <1-4094> cos<0-7><0-7> ethtype <0x0600-0xFFFF> shutdown●#deny any any vlan <1-4094> ethtype<0x0600-0xFFFF>●#deny any any vlan <1-4094> ethtype<0x0600-0xFFFF> shutdown●#deny any any vlan <1-4094> shutdown | |
| Use the “do” command to run execution command in current mode. | |
| Related Syntax:●#do | |
| Use the “end” command to finish current mode. Any changes in current mode will be saved.Related Syntax:●#end | |
| Use the “exit” command to close the current CLI session or return to the previous mode without saving the settings.Related Syntax:●#exit | |
| Use the “no sequence” command to delete any entry in management ACL. | |
| <1-65535>- Specify an index number of the ACL.Related Syntax:#no sequence <1-65535> | |
| Use the "permit" command to add permit rules which bypass the packets meet the rule./- Specify the source anddestination MAC addresses and subnet masks.cos <0-7><0-7>- Set the cos value and the cos mask for a packet.<0x0600-0xFFFF>- Set the EtherType of the packet.Shutdown – Disable the Ethernet interface.vlan <1-4094>- Specify the VLAN ID of the packet.any – Any MAC address.Related Syntax:#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/cos <0-7><0-7>#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/nlan <1-4094>#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#permit/#mit/ A : B : C : D : E : F / A : B : C : D : E : F / A : B : C : D : E : F / A : B : C : C : D : E : F / A : B : C : D : E : F / A : B : C : D : E : / A : B : C : D : E : F / A : B : C : D : E : F / A : B : C / A : B : C : D : E : F / A : B : C : D : E : F / A : B : C: D : E : F / A : B : C : D : E : F / A : B : C : D : E : F / A : B : C : D : E : F / A : B : C : D : E : F / A : B : C : D : E : F - Specify the source anddestination MAC addresses and subnet masks. <0-7><0-7>- Set the cos value and the cos mask for apacket. | |
| Use the "sequence" command to deny or permit the ACL.<1-2147483647>- Enter the sequence index ACE. The sequence represents the priority of the ACE in the ACL.#no sequence <1-65535> |
<0x0600-0xFFFF> - Set the EtherType of the packet. shutdown - Disable the Ethernet interface.
vlan <1-4094> - Specify the VLAN ID of the packet. any – Any MAC address.
Related Syntax:
-
shutdown
-
vlan <1-4094> cos <0-7><0-7>
| /vlan <1-4094> ethtype<0x0600-0xFFFF>#sequence <1-2147483647>permit anyany cos <0-7><0-7>#sequence <1-2147483647>permit anyany cos <0-7><0-7> ethtype <0x0600-0xFFFF>#sequence <1-2147483647>permit anyany ethtype <0x0600-0xFFFF>#sequence <1-2147483647>permit anyany vlan <1-4094>#sequence <1-2147483647>permit anyany vlan <1-4094>cos <0-7><0-7>#sequence <1-2147483647>permit anyany vlan <1-4094>cos <0-7><0-7> ethtype<0x0600-0xFFFF>#sequence <1-2147483647>permit anyany vlan <1-4094> ethtype <0x0600-0xFFFF> | |
| mac address-table | Set the aging time for an entry remains in the MAC address table.address-table static - Add a static address to the MAC addresstable to drop the packets with the specified source ordestination MAC address.<10-630> - Unit is second. Default is 300.static - Enter the MAC address.vlan <1-4094> - Specify the VLAN ID of the packet.10gigabitEthernet <1-12> - Specify a physical port.LAG <1-8> - Specify a LAG port.Related Syntax:# mac address-table aging-time <10-630># mac address-table staticvlan<1-4094> drop# mac address-table staticvlan<1-4094> interfaces 10GigabitEthernet <1-12># mac address-table staticvlan<1-4094> interfaces LAG <1-8> |
Example
FX2120# configure
FX2120(config)# mac acl test_CA
FX2120 (config-mac-acl)# deny 00:50:00:7f:12:11/00:00:00:00:10:20
00:50:00:aa:bb:cc/00:00:00:00:12:00 cos 3 2 ethtype 0x0600
FX2120 (config-mac-acl)# deny any 00:50:00:7f:12:11/00:00:00:00:10:20 cos 5 6 ethtype 0x0600
FX2120 (config-mac-acl)# deny any
FX2120(config)# mac address-table static 00:50:07:12:ff:aa vlan 300 drop
Telnet Command: mailalert
Use this command to configure mail alert for various conditions.
Syntax Items
mailalert active
mailalert auth
mailalert devicecheck
mailalert encpassword
mailalert encry
mailalert hwmon
mailalert interval
mailalert ipconflict
mailalert password
mailalert poestatus
mailalert port
mailalert portlink
mailalert portspeed
mailalert receiver
mailalert sender
mailalert server
mailalert sysrestart
mailalert throughputcheck
mailalert username
Description
| Syntax Items Description | |
| mailalert active | - Enable or disable the function of mail alert.Related Syntax:# mailalert active |
| mailalert auth | - Enable or disable the function of SMTP server authentication.Related Syntax:# mailalert auth |
| mailalert devicecheck | - Enable or disable the function of sending a mail alert when encountering a device check error.Related Syntax:# mailalert devicecheck |
| mailalert encpassword | - Set a encryption authentication password for the mail alert.Related Syntax:# mailalert encpassword |
| mailalert encry Specify the encryption type for mail alert.-Related Syntax:# mailalert encry | |
| mailalert hwmon Send a mail alert when hardware monitor error.- Enable or disable the function. | |
| Related Syntax:# mailalert hwmon | |
| mailalert interval Set the trans | mission interval for the mail alert.<1-60>- Unit is second.Related Syntax:# mailalert interval <1-60> |
| mailalert ipconflict | - Enable or disable the function of sending a mail alert if encountering the IP conflict.Related Syntax:# mailalert ipconflict |
| mailalert password | - Enter the password for SMTP server authentication.Related Syntax:# mailalert password |
| mailalert poestatus | - Enable or disable the function of sending a mail alert when PoE status is changed.Related Syntax:# mailalert poestatus |
| mailalert port <0-65535>- Enter | a port number.Related Syntax:# mailalert port <0-65535> |
| mailalert portlink | - Enable or disable the function of sending an alert when the port link status changes.Related Syntax:# mailalert portlink |
| mailalert portspeed | - Enable or disable the function of sending an alert when the port link speed changes.Related Syntax:# mailalert portspeed |
| mailalert receiver Specify an address for receiving the alert mail. | - Enter the email address of the receiver.Related Syntax:# mailalert receiver |
| mailalert sender Specify an address which sends out the alert mail. | - Enter the email address of the sender.Related Syntax:# mailalert sender |
| mailalert server Set the IP address of the server. | - Enter the IP address of the SMTP server.Related Syntax:# mailalert server |
| mailalert sysrestart | -Enable or disable the function of sending a mail alert when the system restarts.Related Syntax:# mailalert sysrestart |
| mailalert throughputcheck | - Enable or disable the function of sending a mail alert when reaching the throughput threshold.Related Syntax:# mailalert throughputcheck |
| mailalert username | Enter the username authenticated by SMTP server.Related Syntax:# mailalert username |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# mailalert receiver carrie_ni@draytek.com
Telnet Command: management
Use this command to create a management access list and set configuration mode.
Syntax Items
management access-list
management access-class
Description
| Syntax Items Description | |
| management access-list | - Enter the name of the access list.To configure detailed settings, enter the name of ACL to access into next level.#management access-listThen, available sub-commands are:#deny#do#end#exit#permit#sequence |
| Use the “deny” command to add deny rules for the management access list:10GigabitEthernet <1-12> - Specify a physical port.LAG <1-8> - Specify a LAG port.service-/Specify the source IP address with mask for the packets.ipv6/<0-128> - Specify the source IPv6 address and prefix length of the packet.Related Syntax:#deny interfaces 10GigabitEthernet <1-12>service#deny interfaces LAG <1-8> service#deny ip//interfaces 10GigabitEthernet <1-12> service#deny ipv6/<0-128> interfaces LAG <1-8> service#deny ipv6/<0-128> interfaces LAG <1-8> service | |
| Use the “do” command to run execution command in current mode.-Related Syntax:#do | |
| Use the “end” command to finish current mode. Any changes in current mode will be saved.Related Syntax:#end | |
| Use the “exit” command to close the current CLI session or return to the previous mode without saving the settings.Related Syntax:#exit | |
| Use the “no sequence” command to delete any entry in management ACL.<1-65535>- Specify an index number of the ACL.Related Syntax:#no sequence <1-65535> | |
| Use the “permit” command to add permit rules which bypass the packets meet the rule.10GigabitEthernet <1-12>- Specify a physical port.LAG <1-8>- Specify a LAG port.service- Specify the servcietype.ip/<0-128>- Specify the source IPv6 address and prefix length of the packet.Related Syntax:#permit interfaces 10GigabitEthernet <1-12>service#permit interfaces LAG <1-8> service#permit ip//interfaces | |
| 10GigabitEthernet <1-12> service | |
| ·#permit ip/#permit ipv6/#permit ipv6 | |
| ·#permit ipv6/#permit ipv6 | |
| ·#permit ipv6/#permit ipv6 | |
| Use the “sequence” command to deny or permit the ACL. <1-65535>- Specify an index number of the ACL. 10GigabitEthernet <1-12> - Specify a physical port. LAG <1-8> - Specify a LAG port. service - Specify the servcie type. ip - Specify the source IP address with mask for the packets. ipv6 - Specify the source IPv6 address and prefix length of the packet. Related Syntax: ·#sequence <1-65535>deny interfaces 10GigabitEthernet <1-12> service ·#sequence <1-65535>deny interfaces LAG <1-8> service ·#sequence <1-65535>deny ip - interfaces 10GigabitEthernet <1-12> service ·#sequence <1-65535>deny ip - interfaces LAG <1-8> service ·#sequence <1-65535>deny ipv6 - interfaces 10GigabitEthernet <1-12> service ·#sequence <1-65535>deny ipv6 - interfaces LAG <1-8> service ·#sequence <1-65535>permit interfaces 10GigabitEthernet <1-12> service ·#sequence <1-65535>permit interfaces LAG <1-8> service ·#sequence <1-65535>permit ip - interfaces 10GigabitEthernet <1-12> service ·#sequence <1-65535>permit t ip - interfaces LAG <1-8> service ·#sequence <1-65535>permit ipv6 - interfaces 10GigabitEthernet <1-12>service#sequence <1-65535> permit/<0-128> interfaces LAG <1-8> service | |
| management access-class Specify an ACL as active access-list.- Enter the name of the access list.Related Syntax:# management access-class | |
Example
FX2120# configure
FX2120 (config)#
FX2120 (config)# management access-list CA_ACL
FX2120 (config-macl)# deny ip 192.168.2.56/255.255.255.0 interfaces gigabitethernet 3 service telnet
FX2120 (config-macl)#
FX2120 (config-macl)# deny ipv6 00:50::7f:3b/24
Telnet Command: management-vlan
Use this command to set VLAN ID for management VLAN.
Syntax Items
management-vlan vlan
Description
| Syntax Items Description | |
| management-vlan vlan Set the | management VLAN ID.<1-4094>- Specify the VLAN ID number of management VLAN.Related Syntax:# management-vlan vlan <1-4094> |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# management-vlan vlan 200
VLAN 200: VLAN does not exist
FX2120(config)#
Telnet Command: mirror
Use this command to set the source / destination interface of a port mirror session.
Syntax Items
mirror session
Description
| Syntax Items Description | |
| mirror session | Set the destination/source interface of a port mirror session.<1-4> - Specify the mirror session ID number.10GigabitEthernet <1-12> - Specify a physical port as the SPANdestination.LAG <1-8> - Specify a LAG port.allow-ingress – Enable the ingress traffic forwarding.- Specify the mirror direction, TX only, RX only or TX and RX.Related Syntax:# mirror session <1-4> destination interface 10GigabitEthernet <1-12># mirror session <1-4> destination interface 10GigabitEthernet <1-12> allow-ingress# mirror session <1-4> source interfaces 10GigabitEthernet <1-12># mirror session <1-4> source interfaces LAG <1-8> |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# mirror session 3 destination interface 10GigabitEthernet 3 allow
FX2120(config)#
FX2120(config)# mirror session 3 source interfaces LAG 3 both
FX2120(config)#
Telnet Command: mvr
Use this command to enable MVR function and configure related settings.
Syntax Items
mvr
mvr group
mvr mode
mvr query-time
mvr vlan
Description
| Syntax Items Description | |
| mvr Enable MVR function. | Related Syntax:# mvr |
| mvr group Set MVR group address.- Enter an IP address.<1-128>- Specify a number for contiguous series of IPv4 | |
| multicast address.Related Syntax:# mvr group<1-128> | |
| mvr mode Set MVR mode as compatible or dynamic.- The switch does not support IGMP dynamic joins on the source ports.- The switch supports MVR membership on the source ports.Related Syntax:# mvr mode | |
| mvr query-time Set query response time for MVR.<1-10>- Specify the response time (second).Related Syntax:# mvr query-time <1-10> | |
| mvr vlan Set a VLAN ID for MVR.<1-4094>- Specify the existed static VLAN ID.Related Syntax:# mvr vlan <1-4094> | |
Example
FX2120# configure
FX2120(config)#
FX2120(config)#mvr group 192.168.2.33
The operation will delete the MVR VLAN groups include static MVR groups.Continue
? [yes/no]:y
Input Parameter Error
FX2120(config)#
Telnet Command: no
Use this command to disable specific command.
Syntax Items
no
Example
FX2120# configure
FX2120(config)#
FX2120(config)# no port-security
FX2120(config)#
Telnet Command: openvpn
Use this command to enable/disable the OpenVPN tunnel.
Syntax Items
openvpn enable
openvpn disable
openvpn filename
Description
| Syntax Items Description | |
| enable Enable the OpenVPN tunnel. | |
| disable Disable the OpenVPN tunnel. | |
| filename- Define a name for OpenVPN configuration.Related Syntax:# openvpn filename | |
Example
| FX2120# configure |
| FX2120(config)#openvpn enable |
| killall: openvpn: no process killed |
| FX2120(config)# |
Telnet Command: poe
Use this command configure settings for PoE device. This command is not available for the non-PoE model.
Syntax Items
poe mode
poe schedule
Description
| Syntax Items Description | |
| poe mode | auto - VigorSwitch determines the power watts for PoE device based on actual demand.manual - VigorSwitch will supply actual power demand for the PoE device and reserved PD class power for the PoE device. none - VigorSwitch does not supply any power for the PoE device.Related Syntax:# poe mode auto# poe mode manual# poe mode none |
| poe schedule Specify a schedu | ule for PoE device.global-enable - Enable the global setting.index <1-24> - Specify the index number of the schedule profiles.Related Syntax:# poe schedule global-enable# poe schedule index <1-24> |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# poe
Telnet Command: port-security
Use this command to enable the function of port security.
Syntax Items
port-security
Example
FX2120# configure
FX2120(config)# port-security
FX2120(config)#
Telnet Command: qos
Use this command to configure QoS settings.
Syntax Items
qos
qos map
qos queue
qos trust
Description
| Syntax Items Description | |
| qos | Enable the quality of service based on basic trust type to assign the queue for packets.Related Syntax:# qos |
| qos map map cos-queue - Set | the CoS to queue map.map dscp-queue - Set the DSCP to queue map.map precedence-queue - Set the IP Precedence to queue map.map queue-cos - Modify the queue to CoS map.map queue-dscp - Modify the queue to DSCP map.map queue-precedence - Modify the queue to IP precedence map.<1-8> - Specify the queue number for the following CoS values mapped.<1-8> - Specify the queue number to which the DSCP value shall correspond.<1-8> - Specify the queue number to which the IP precedence value shall correspond.<0-7> - Enter the cos value to which the queue ID shallcorrespond.<0-7> - Enter the DSCP value to which the queue ID shall correspond.<0-7> - Enter the IP precedence value to which the queue ID shall correspond.Related Syntax:# qos map cos-queue SEQUENCE to <1-8># qos map dscp-queue SEQUENCE to <1-8># qos map precedence-queue SEQUENCE to <1-8># qos map queue-cos SEQUENCE to <0-7># qos map queue-dscp SEQUENCE to <0-7># qos map queue-precedence SEQUENCE to <0-7> |
| qos queue | queue strict-priority-num - Set the number of strict priority queue.queue weight SEQUENCE - Set the number of non-strict priority queue.<0-8> - Specify the queue number.<weight1-weight8> <1-127> - Specify a number (1~127) representing queue weight value.Related Syntax:# qos queue strict-priority-num <0-8># qos queue weight SEQUENCE<1-127> |
| qos trust | Set the trust type, cos, for the device to judge the appropriate queue of the packets.Related Syntax:# qos trust |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# qos map cos-queue SEQUENCE to 3
FX2120(config)#
Telnet Command: radius
Use this command to configure settings for RADIUS server.
Syntax Items
radius default-config
radius host
Description
| Syntax Items Description | |
| radius default-config | Key- Specify key string for RADIUS server. Retransmit <1-10>- Specify the retransmit times (from 1 to 10)for RADIUS server.Timeout <1-30> - Specify the time out value (from 1 to 30) for RADIUS server.Related Syntax:# radius default-config key# radius default-config keyretransmit <1-10># radius default-config keyretransmit <1-10> timeout <1-30># radius default-config retransmit <1-10># radius default-config retransmit <1-10> timeout <1-30># radius default-config timeout <1-30> |
| radius host | host- Specify a domain name or IP address for RADIUS server host.auth-port <0~65535> - Speify a UDP port number for RADIUS server.key- Specify key string for RADIUS server.priority <0~65535> - Specify the priority for RADIUS server.retransmit <1-10> - Specify the retransmit times (from 1 to 10) for RADIUS server.timeout <1-30> - Specify the time out value (from 1 to 30) for RADIUS server.type <802.1x / all / login> - Choose the usage type for 802.1X authentication, or login, or both 802.1X authentication and login of RADIUS type.Related Syntax:# radius hostauth-port <0~65535># radius hostauth-port <0~65535>key# radius hostauth-port <0~65535>keypriority <0~65535)# radius hostauth-port <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~10>timeout <1-30> type <802.1x / all / login)# radius hostkey# radius hostkey# radius hostkeyworthport <0~65535)# radius hostkeyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport<0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~65535>keyworthport <0~670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000retransmit <1-10> timeout <1-30># radius hostpriority <0~65535> retransmit <1-10> timeout <1-30> type <802.1x / all / login># radius hostretransmit <1-10># radius hostretransmit <1-10> timeout <1-30># radius hostretransmit <1-10> timeout <1-30> type <802.1x / all / login># radius hosttimeout <1-30># radius hosttimeout <1-30> type <802.1x / all / login># radius hosttype <802.1x / all / login> |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# radius default-config key 123456789 retransmit 3 timeout 10
FX2120(config)# radius host radius auth-port 3000
Telnet Command: schedule
Use this command to set schedule.
Syntax Items
schedule index
Description
| Syntax Items Description | |
| schedule index | Specify an index number for configuring detailed settings of a schedule profile.<1-15> - Enter a number to select a schedule profile.- Give a brief description for such profile.cycle-days - The action applied with the schedule will take place every few days.monthly-date - The action applied with the schedule will take place in specified day within a month.once - The action applied with the schedule will take place for one time.weekdays - The action applied with the schedule will take place on a certain day within a week.<1-31> - Enter a number to make action repeat.- Represent month of April, August, December, February, January, July, June, March, May, November, October, and September.- Represent Sunday, Monday, Tuesday, Wednesday, Thursday, Friday and Saturday.<1-31> - Enter a number as the start date within a month. |
| <2000-2035> - Enter the number as the year of start date.- Enter the hours and the minutes.- Enable (on) or disable (off) the action applied with such profile.Related Syntax:# schedule index <1-15> description# schedule index <1-15> how-often cycle-days<1-31> start-date<2000-2035> start-timeduration# schedule index <1-15> how-often monthly-date<1-31> start-date<2000-2035> start-timeduration# schedule index <1-15> how-often oncestart-date<2000-2035> start-timeaction# schedule index <1-15> how-often weekdays<2000-2035> start-timeduration# schedule index <1-15> how-often weekdays<2000-2035> duration |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# schedule index 1 how-often cycle-days 3 start-date jan 1 2019 start-time 08:01 duration 17:30 action on
FX2120(config)# schedule index 2 how-often weekdays sun start-date may 11 2019 start-time 02:10 duration 12:10 action on
FX2120(config)#
Telnet Command: sflow
Use this command to configure sflow profile.
Syntax Items
sflow profile
Description
| Syntax Items Description | |
| sflow profile | profile <1-8> - Enter the ID number (1 to 8) of the profile.rate <0-65535> - Set the sampling rate for the sFlow profile. 0 means to disable the sampling rate.interval <0-65535> - Set the time interval for the sFlow profile.collector- Set the collector hostname.data_sources interfaces 10GigabitEthernet <1-12> - Speicfy theLAN port.port <0-65535> - Set the TCP/UDP port number for the profile.Related Syntax:# sflow profile <1-8> rate <0-65535> interval<0-65535> collectordata_sources interfaces 10GigabitEthernet <1-12># sflow profile <1-8> rateinterval<0-65535> collectorport <0-65535> data_sources interfaces 10GigabitEthernet <1-12> |
Example
| FX2120# configure |
| FX2120(config)# |
| FX2120(config)# sflow profile 3 rate 2558 interval 9600 collector sHost port 1000 data_source interfaces 10GigabitEthernet 10 |
| DNS resolution failed. Please check DNS server setting or host name |
| FX2120(config)# |
| FX2120(config)# sflow profile 3 rate 2558 interval 9600 collector sHost data_sources interfaces 10GigabitEthernet 10 |
| FX2120(config)# |
Use this command to define SNMP community.
Syntax Items
snmp community
snmp engineid
snmp group
snmp host
snmp trap
snmp user
snmp view
Description
| Syntax Items Description | |
| snmp community | snmp community - Set community name for SNMP v1 and v2, and access group name.Available parameters for SNMP community:after community - Enter a string (maximum length: 20 characters) as community name.after group - Enter a string (maximum length: 30 characters) as access group.ro - Set the community as read only.rw - Set the community as read and write.Related Syntax:# snmp communitygroupro# snmp communityrw# snmp communityviewro# snmp community viewrw |
| snmp engineid snmp engineid | - Set the remote host for SNMP engine.default - Reset to default setting of engine ID for SNMP server.- Such number must be 10 ~ 64 hexadecimal.- Enter the IP address of the remote SNMP server.- Enter the host name of the remote SNMP server.- Enter the IPv6 address for remote SNMP server.Related Syntax:# snmp engineid# snmp engineid default# snmp engineid remote# snmp engineid remote# snmp engineid remote# snmp engineid remote |
| snmp group snmp group - Set | the SNMP group.- Specify the name of SNMP group.version <1/2c/3> - Specify the version of SNMP service.- Specify the packet authentication mode. "auth" means to perform packet authentication without encryption. It is applicable for SNMPv3 only. "noauth" means no packet authentication performed. "priv" means to perform packet authentication with encryption and also it is applicable for SNMPv3 only.read-view- Set the view name to enable agent configuration.notify-view- Set the view name to send only trap included in SNMP view for notification.write-view- Set the view name to enable viewing.Related Syntax:# snmp groupversion <1/2c/3>read-view# snmp groupversion <1/2c/3>read-viewnotify-view# snmp groupversion <1/2c/3>read-viewnotify-viewwrite-view |
| snmp host snmp host - Set a host | host to receive SNMP notifications.- Enter the IPv4/IPv6 address or host name of the receipt.version <1/2c/3> - Specify the version of SNMP service.- Set the community name sent with the notification.udp-port <1-65535> - Set the UDP port number.timeout <1-300> - Set the timeout of V2c informs.retries <1-255> - Enter the retry counter of V2c informs.Related Syntax:Set a host to receive SNMP notifications.# snmp hostretries <1-255># snmp hosttimeout <1-300> # snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host# snmp host |
| Set a host to receive SNMP notifications. Notification type is informs.# snmp hostinformsretries <1-255># snmp hostinformstimeout <1-300># snmp hostinformstimeout <1-300> # snmp host# infromspart <1-65535># snmp host# infromspart <1-65535># snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart < 1-255># snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspert <1-255># snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host## infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-6575> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infromspart <1-65535> # snmp host# infrom spart <1-65535> # snmp host# infrom spart <1-65535> # snmp host# infrom spart <1-65535> # snmp host# infrom spart <1-65535> # snmp host# infrom spart <1-65535> # snmp host# infrom spart <1-65535><<1-255># snmp hosttrapstimeout<1-300># snmp hosttrapstimeout<1-300>retries <1-255># snmp hosttraps version<1/2c/3>retries <1-255># snmp hosttraps version<1/2c/3>timeout <1-300>retries <1-255># snmp hosttraps version<1/2c/3><NAME>udp-port <1-65535># snmp hosttraps version<1/2c/3><NAME>udp-port <1-65535>retries <1-255># snmp hosttraps version<1/2c/3><NAME>udp-port <1-65535>timeout <1-300># snmp hosttraps version<1/2c/3><NAME>udp-port <1-65535>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><NAME>retries <1-255># snmp hostversion <1/2c/3><NAME>timeout <1-300># snmp hostversion <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><NAME>udp-port <1-65535># snmp hostversion <1/2c/3><NAME>udp-port <1-65535>retries <1-255># snmp hostversion <1/2c/3><NAME>udp-port <1-65535>timeout <1-300># snmp hostversion <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><NAME>udp-port <1-65535># snmp hostversion <1/2c/3><NAME>timeout <1-300># snmp hostversion <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp hostversion < 1/2c/3><NAME>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3></name>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><name>retries <1-255># snmp hostversion <1/2c/3><name>timeout <1-300># snmp hostversion <1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion < 1/2 c/3><name>timeout <1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion < 1/2c/3>< name>timeout <1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout <1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout < 1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retries <1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retries < 1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retries < 1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retries < 1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retnes < 1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retries < 1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300>retries < 1-255># snmp hostversion < 1/2c/3><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300></name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><name>timeout < 1-300><normal><normal># snmp hostversion < 1/2c/3><name>timeout <1-300><name>timeout <1-300><name>timeout <1-300><name>timeout <1-300><name>timeout <1-300><name>timeout <1-300><name>timeout <1-300><name>timeout <1-300><name>timeout <1-300><name>timeout <1-300><name>timeout <1-30 | |
| <1-300># snmp host HOSTNAME informsretries <1-255>timeout <1-300>retries <1-255># snmp host HOSTNAME informsudp-port <1-65535># snmp host HOSTNAME informsudp-port <1-65535>retries <1-255># snmp host HOSTNAME informsudp-port <1-65535>timeout <1-300># snmp host HOSTNAME informsudp-port <1-65535>timeout <1-300>retries <1-255># snmp host HOSTNAME traps# snmp host HOSTNAME trapsretries <1-255># snmp host HOSTNAME trapstimeout <1-300># snmp host HOSTNAME trapstimeout <1-300>retries <1-255># snmp host HOSTNAME trapsudp-port <1-65535># snmp host HOSTNAME trapsudp-port <1-65535>retries <1-255># snmp host HOSTNAME trapsudp-port <1-65535>timeout <1-300># snmp host HOSTNAME trapsudp-port <1-65535>timeout <1-300>retries <1-255># snmp host HOSTNAME traps version <1/2c/3><NAME>retries <1-255># snmp host HOSTNAME traps version <1/2c/3><NAME>timeout <1-300># snmp host HOSTNAME traps version <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp host HOSTNAME traps version <1/2c/3><NAME>udp-port <1-65535># snmp host HOSTNAME traps version <1/2c/3><NAME>retries <1-255># snmp host HOSTNAME traps version <1/2c/3><NAME>timeout <1-300># snmp host HOSTNAME traps version <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp host HOSTNAME traps version <1/2c/c3><NAME>retries <1-255># snmp host HOSTNAME traps version <1/2c/3><NAME>timeout <1-300># snmp host HOSTNAME traps version <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp host HOSTNAME traps version <1/2c/3><NAME>retries <1-255># snmp host HOSTNAME traps version <1/2c/3><NAME>timeout <1-300># snmp host HOSTNAME traps version <1/2c/3><NAME>timeout <1-300>retries <1-300># snmp host HOSTNAME version <1/2c/3><NAME>retries <1-255># snmp host HOSTNAME version <1/2c/3><NAME>retries <1-255># snmp host HOSTNAME version <1/2c/3><NAME>timeout <1-300># snmp host HOSTNAME version <1/2c/3><NAME>timeout <1-300>retries <1-255># snmp host HOSTNAME version <1/2c/3><NAME>retries <1-255># snmp host HOSTNAME version <1/2c/3><NAME>retries <1-255># snmp host HOSTNAME version <1/2c/3><NAME>retries <1-255># snmp host HOSTNAME version <1/2c/3><NAME>retries <1-255># snmp host HOSTNAME version <1/2c/3><name>retries <1-255># snmp host HOSTNAME version <1/2c/3><name>retries <1-255># snmp host HOSTNAME version <1/2c/3><name>retries <1-255># snmp host HOSTNAME version <1/2c/3><name>retries <1-255># snmp host HOSTNAME version <1/2c/3><Name>retries <1-255># snmp host HOSTNAME version <1/2c/3><name>retries <1-255># snmp host HOSTNAME version <1/2c/3><name>retries <1-255># snmp host HOSTNAME version <1/2c/3><name>retries <1-255># snmp host HOSTNAME version <1/2c/3><|content_end|># snmp host HOSTNAME version <1/2c/3> # snmp host HOSTNAME version <1/2c/3> # snmp host HOSTNAME version <1/2c/3> # snmp host HOSTNAME version <1/2c/3> # snmp host HOSTNAME version <1/2c/3> # snmp host HOSTNAME version <1/2c/3> # snmp host HOSTNAME version <1/2c/3> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snpm host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME version <1/65535> # snmp host HOSTNAME versions <1/255> # snmp host HOSTNAME versions <1/255> # snmp host HOSTNAME versions <1/255> # snmp host HOSTNAME versions <1/255> # snmp host HOSTNAME versions <1/255> # snmp host HOSTNAME versions <1/255> # snmp host HOSTNAME versions <1/255> # snmp host HOSTNAME versions <1/255>< | |
| # snmp hosttrapsudp-port <1-65535>timeout <1-300># snmp hosttrapsudp-port <1-65535>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3># snmp hostversion <1/2c/3>retries <1-255># snmp hostversion <1/2c/3>timeout <1-300># snmp hostversion <1/2c/3>timeout <1-300>retries <1-255># snmp hostversion <1/2c/3>udp-port <1-65535># snmp hostversion <1/2c/3>udp-port <1-65535>retries <1-255># snmp hostversion <1/2c/3>udp-port <1-65535>timeout <1-300># snmp hostversion <1/2c/3>udp-port <1-65535>timeout <1-300>retries <1-255> | |
| snmp trap snmp trap - Send the SNMP traps.auth - Enable the SNMP authentication failure trap.cold-start - Enable the SNMP cold startup failure trap.linkUpDown - Enable the SNMP link up and down failure trap.wort-security - Enable the SNMP port security trap.Warm-start - Enable the SNMP warm startup failure trap.Related Syntax:# snmp trap | |
| snmp user snmp user - Set SNMP user account.- Specify a name of SNMP user.- Sepcify a name of SNMP group.auth - Specify the authentication mode, md5 or sha.- Enter the password for the md5/sha mode.Pri - Enter a password as a privacy key.Related Syntax:# snmp user# snmp userauth# snmp userauthpriv | |
| snmp view snmp view - Set the SNMP view.- Enter the SNMP view name.Subtree - Specify the ASN.1 subtree object identifier (OID).oid-mask - Speicfy the OID mask, or use all for all masks.viewtype - Let the selected MIBs include or | |
| exclude in the SNMP view.Related Syntax:# snmp view subtreeoid-mask viewtype | |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# snmp engineid remote 192.168.2.38 00036D001188
FX2120(config)# snmp engineid remote 00:50::16:88 00036D002288
FX2120(config)# snmp host 192.168.2.89 CAR_community udp-port 1500 timeout 200
FX2120(config)# snmp host 192.168.2.88 informs version 2c CAR_community udp-port 3000 timeout 180 retries 35
FX2120(config)# snmp host 192.168.2.88 traps version 2c CAR_traps udp-port 6500 timeout 60 retries 2
FX2120(config)# snmp host 192.168.2.88 version 2c CAR_version udp-port 3000 timeout 60 retries 2
FX2120(config)# snmp host HOSTNAME CAR_host udp-port 3000 timeout 60 retries
FX2120(config)# snmp host HOSTNAME informs HA_informs udp-port 3000 timeout 60 retries 2
FX2120(config)# snmp host HOSTNAME version 2c HT_version udp-port 3000 timeout 60 retries 2
FX2120(config)# snmp user CA_user_1 CA_group_1 auth md5 CA12345678 priv PR12345678
FX2120(config)# snmp view CAR_community subtree 10 oid-mask 9 viewtype included
FX2120(config)#
Telnet Command: sntp
Use this command to configure settings for remote SNTP server.
Syntax Items
sntp host
Description
| Syntax Items Description | |
| sntp host | Set the remote SNTP server by specifying IP address or hostname.- Enter the IP address or hostname of SNTP server.<1-65535>- Specify the port number for the SNTP server.Related Syntax:# sntp host# sntp host>> port <1-65535> |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# sntp host KEY1245 port 3000
FX2120(config)#
Telnet Command: spanning-tree
Use this command to configure settings for spanning-tree.
Syntax Items
spanning-tree
spanning-tree bpdu
spanning-tree forward-delay
spanning-tree hello-time
spanning-tree max-hops
spanning-tree maximum-age
spanning-tree mode
spanning-tree mst
spanning-tree pathcost
spanning-tree priority
spanning-tree tx-hold-count
Description
| Syntax Items Description | |
| spanning-tree Enable the function of spanning-tree.Related Syntax:# spanning-tree | |
| spanning-tree bpdu Filter/flood the BPDU packets.- Packets will be filtered when STP is disabled on specified interface.- Packets will be flooded to all interfaces with STP disabled and flooding mode.Related Syntax:# spanning-tree bpdu | |
| spanning-tree forward-delay Set the STP forward delay time.<4-30>- Default value is 15 (seconds).Related Syntax:# spanning-tree forward-delay <4-30> | |
| spanning-tree hello-time Set the hello time interval to broadcast the message to other bridges.<1-10>- Default value is 2 (seconds).Related Syntax:# spanning-tree hello-time <1-10> | |
| spanning-tree max-hops | Set the number of hops for BPDI packets to be forwarded in the MSTP region.<1-40>- Default value is 20 (seconds).Related Syntax:# spanning-tree max-hops <1-40> |
| spanning-tree maximum-age | Set the time interval for VigorSwitch to wait without receiving the configuration message.<6-40> - Default value is 20 (seconds).Related Syntax:# spanning-tree maximum-age <6-40> |
| spanning-tree mode | - Specify the operation mode for spanning tree, such as multiple spanning tree (MSTP), rapid spanning tree (RSTP) or spanning tree (STP).Related Syntax:# spanning-tree mode |
| spanning-tree mst | spanning-tree mst - Configure port priority settings for MST. <0-15> - Specify the instance ID. <0-61440> - Set the priority for the specified instance ID.Related Syntax:# spanning-tree mst <0-15> priority <0-61440> |
| spanning-tree mst configuration - Access into the MSTP configuration mode. To configure detailed settings, access into next level.# spanning-tree mst configuration# then, available sub-commands are:# do# exit# instance# name# no# revisiondo - Enter the action to be performed.end - End current mode.exit - Exit from current mode.instance <0-15> vlan <1-4094> - Specify the instance ID number and VLAN ID number.name - Set a name of MST configuration.no - Set to default setting.revision <0-65535> - Set revision level. | |
| spanning-tree pathcost Set the | path-cost method for spanning tree.- Long means the path cost ranging from 1 to 200000000; short means the path cost ranging from 1 to 65535.Related Syntax:# spanning-tree pathcost method |
| spanning-tree priority Set the | priority for the specified instance ID.<0-61440> - The number must be multiple of 4096.Related Syntax:# spanning-tree priority <0-61440> |
| spanning-tree tx-hold-count Set the maximum number of packets transmission per second.<1-10> - Valid range is from 1 to 10.Related Syntax:# spanning-tree tx-hold-count <1-10> | |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# spanning-tree forward-delay 20
FX2120(config)#
FX2120(config)# spanning-tree maximum-age 38
FX2120(config)#
FX2120(config)# spanning-tree tx-hold-count 3
FX2120(config)#
Telnet Command: start-up
Use this command to restart ICP status after rebooting VigorSwitch.
Syntax Items
start-up icp
Description
| Syntax Items Description | |
| start-up icp Related Syntax: | # start-up icp enable |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# start-up icp enable
FX2120(config)#
Telnet Command: storm-control
Use this command to configure settings for Storm Control.
Syntax Items
storm-control ifg exclude
storm-control ifg include
storm-control unit bps
storm-control unit pps
Description
| Syntax Items Description | |
| storm-control ifg exclude | Exclude the preamble and IFG (inter frame gap) into the calculating.Related Syntax:# storm-control ifg exclude |
| storm-control ifg include Include | the preamble and IFG (inter frame gap) into the calculating.Related Syntax:# storm-control ifg include |
| storm-control unit bps Change | the unit of calculating method for storm-control.bps - Calculate the storm control rate by octet-based.Related Syntax:# storm-control unit bps |
| storm-control unit pps Change | the unit of calculating method for storm-control.pps - Calculate the storm control rate by packet-based.Related Syntax:# storm-control unit pps |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# storm-control ifg exclude
FX2120(config)#
FX2120(config)# storm-control unit bps
FX2120(config)#
Telnet Command: surveillance-vlan
Use this command to configure settings for surveillance-VLAN.
Syntax Items
surveillance-vlan surveillance-vlan aging-time surveillance-vlan cos surveillance-vlan oui-table surveillance-vlan vlan
Description
| Syntax Items Description | |
| surveillance-vlan | Enable the function of surveillance VLAN on VigorSwitch.Related Syntax:# surveillance-vlan |
| surveillance-vlan aging-time | Set the aging time for surveillance VLAN.<30-65536> - Enter a value as aging time.Related Syntax:# surveillance-vlan aging-time <30-65536> |
| surveillance-vlan cos | Set the class of service (0~7) for surveillance VLAN.<0-7>- Enter a number.Related Syntax:# surveillance-vlan cos <0-7> remark |
| surveillance-vlan oui-table Enable OUI surveillance VLAN configuration for specified interface.- Enter the OUI address (e.g., 00:50:12).- Enter a string to briefly explain the surveillance VLAN.Related Syntax:# surveillance-vlan oui-table | |
| surveillance-vlan vlan Specify a | VLAN profile as surveillance VLAN.<2-4094>- Specify the surveillance VLAN ID.Related Syntax:# surveillance-vlan vlan <2-4094> |
Example
| FX2120# configure |
| FX2120(config)# |
| FX2120(config)# |
| FX2120(config)# surveillance-vlan aging-time 60 |
| FX2120(config)# |
| FX2120(config)# surveillance-vlan oui-table 00:50:12 fortestonly |
| FX2120(config)# |
Telnet Command: system
Use this command to modify the contact information of VigorSwitch.
Syntax Items
system contact
system location
system name
Description
| Syntax Items Description | |
| system contact | - Enter a string (maximum length: 256 characters).Related Syntax:# system contact |
| system location | - Specify the location of the host.Related Syntax:# system location |
| system name | - Change the name of the system. The default name is "FX2120".Related Syntax:# system name |
Example
| FX2120# configure |
| FX2120(config)# |
| FX2120(config)# system contact callMIS |
| FX2120(config)# |
| FX2120(config)# system location DrayTek |
| FX2120(config)# system name UPDATEFRIM |
| UPDATEFRIM(config)# |
Telnet Command: tacacs
Use this command to configure TACACS+ server.
Syntax Items
tacacs default-config
tacacs host
Description
| Syntax Items Description | |
| tacacs default-config Set the default parameters for the TACACS+ server.Modify the default parameters of server key and timeout setting for the TACACS+ server.- Enter a string as the TACACS+ server key.<1-30>- Enter a value as the TACACS+ server timeout.Related Syntax:# tacacs default-config# tacacs default-config key# tacacs default-config keytimeout<1-30> | |
| tacacs host Set host name for the TACACS+ server or set host name, server key and priority for the TACACS+ server.- Enter the host name of the TACACS+ server.- Enter a string as the TACACS+ server key.<1-65535>- Enter a value as server priority in server group.<1-30>- Enter a timeout setting.Related Syntax:# tacacs hostkey# tacacs hostkeykeypriority <1-65535># tacacs hostkeytimeout <1-30> | |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# tacacs default-config key tce00056 timeout 25
DNS resolution failed. Please check DNS server setting or host name
FX2120(config)# tacacs host carrie02 key TA012345 priority 3000 timeout 10
FX2120(config)#
Telnet Command: tr069
Use this command to configure parameter settings of TR-069.
Syntax Items
tr069 acsPwd
tr069 acsUsername
tr069 acsurl
tr069 cpeEnable
tr069 cpePwd
tr069 cpeUsername
tr069 cpeport
tr069 healthlinkstatus
tr069 healthpoewarning
tr069 healthspeedstatus
tr069 periodicInfo
tr069 periodicTime
tr069 ssl
tr069 stun
tr069 stunMAXkeepalive
tr069 stunMINkeepalive
tr069 stunaddr
tr069 stunport
tr069 tls
Description
| Syntax Items Description | |
| tr069 acsPwd | - Enter the password used for registering to VigorACS server.Related Syntax:# tr069 acsPwd |
| tr069 acsUsername | - Enter the username used for registering to VigorACS server.Related Syntax:# tr069 acsUsername |
| tr069 acsurl | - Enter the URL for VigorACS server.Related Syntax:# tr069 acsurl |
| tr069 cpeEnable | - Enter Enable for VigorACS controlling such CPE through the Internet.Related Syntax:# tr069 cpeEnable |
| tr069 cpePwd | - Enter the password that VigorACS server can use it to authenticate and control the CPE device.Related Syntax:# tr069 cpePwd |
| tr069 cpeUsername | - Enter the username that VigorACS server can use it to authenticate and control the CPE device.Related Syntax:# tr069 cpeUsername |
| tr069 cpeport <0-65535> - Enter the port number for CPE.Related Syntax:# tr069 cpeport <0-65535> | |
| tr069 healthlinkstatus Perform | the health check for the link status of specified interface(s).- Specify the interface, such as GE1, GE3-GE5 and so on.Related Syntax:# tr069 healthlinkstatus |
| tr069 healthpoewarning Perform | m the health check for PoE port warning status.- Specify the interface, such as GE1, GE3-GE5 and so on.Related Syntax:# tr069 healthpoewarning |
| tr069 healthspeedstatus Perform | m the health check for link speed status of specified interface(s).- Specify the interface, such as GE1, GE3-GE5 and so on.Related Syntax:# tr069 healthspeedstatus |
| tr069 periodicInfo | - Enter Enable to activate periodic information setting.Related Syntax:# tr069 periodicInfo |
| tr069 periodicTime TIME Update | te the CPE information to VigorACS server.Related Syntax:# tr069 periodicTime TIME |
| tr069 ssl | - Enter Enable to enable CPE management protocol with SSL.Related Syntax:# tr069 ssl |
| tr069 stun | - Enter Enable to enable CPE management protocol with STUN server.Related Syntax:# tr069 stun |
| tr069 stunMAXkeepalive Set the | maximum time period for CPE to send the binding request to VigorACS server.<0-65535>- Enter a number.Related Syntax:# tr069 stunMAXkeepalive <0-65535> |
| tr069 stunMINkeepalive Set the | minimum time period for CPE to send the binding request to VigorACS server.<0-65535>- Enter a number.Related Syntax:# tr069 stunMINkeepalive <0-65535> |
| tr069 stunaddr- Enter the URL/IP address of STUN server. | Related Syntax:# tr069 stunaddr |
| tr069 stunport <0-65535>- Set | the port number for STUN server.Related Syntax:# tr069 stunport <0-65535> |
| tr069 tls Set TLS version (1.2 or 1.3). | Related Syntax:# tr069 tls version |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# tr069 stunaddr 192.168.3.99
FX2120(config)#
Telnet Command: udld
Use this command to set the time interval of UniDirectional Link Detection (UDLD) sent message.
Syntax Items
udld
Description
| Syntax Items Description | |
| udld message time | <1-90> - Specify a time interval (unit: second) for sending message.Related Syntax:#udld message time <1-90> |
Example
Example
FX2120# configure
FX2120(config)#
FX2120(config)# udd message time 35
FX2120(config)#
Telnet Command: username
Use this command to add a new user account or edit an existing user account.
Syntax Items
username
Description
| Syntax Items Description | |
| username | privilege - Set a user account with the privilege of admin, user or customized level.secret - Set a user account with unencrypted password.secret encrypted - Set a user account with encrypted password.- Enter the name (0~32 characters) of the local user profile.- Specify the privilege level to be admin (privilege 15) / user (privilege 1).- Enter a string as the password for the local user.Related Syntax:# usernameprivilegesecret# usernamesecret# usernamesecret encrypted |
Example
FX2120# configure
FX2120(config)#
FX2120(config)# username carrie_1 privilege admin secret md123456
FX2120(config)#
FX2120(config)# username carrie_1 secret encrypted ca123456
Old password: *****
FX2120(config)#
Telnet Command: vlan
Use this command to configure detailed settings for VLAN profile.
Before configuring, you have to access into next phase. See the following example:
FX2120# configure
FX2120(config)#
FX2120(config)# vlan 3
FX2120(config-vlan)#
Syntax Items
vlan vlan-list
vlan mac-vlan group
vlan protocol-vlan group
Description
| Syntax Items Description | |
| vlan vlan-list | Specify the index number of VLAN profile. To configure detailed settings, access into next level.- The available range is 1 to 4094.# vlan 33# Then, available sub-commands are:#do#end#exit#name |
| Use the "do" command to run execution command in current mode.- Related Syntax:#do | |
| Use the "end" command to finish current mode. Any changes in current mode will be saved.Related Syntax:#end | |
| Use the "exit" command to close the current CLI session or return to the previous mode without saving the settings.Related Syntax:#exit | |
| Use the "name" command to add a VLAN profile.- Enter the name of the VLAN profile.Related Syntax:#name | |
| vlan mac-vlan group | Create a MAC-vlan group.<1-2147483647>- Specify a group ID.- Enter the MAC address to be mapped.<9-48>- Enter a number representing the subnet mask.Related Syntax:#vlan mac-vlan group <1-2147483647>mask <9-48> |
| vlan protocol-vlan group Create a protocol VLAN group with specified protocol type and value.<1-8> - Enter a number to specify a VLAN group.- Ethernet_ii/ 11c_other/snap_1042> - Specify a frame type by entering Ethernet_ii, 11c_other or snap_1042.- Enter a value (0x0600~0xFFFE).Related Syntax:# vlan protocol-vlan group <1-8> frame-typeprotocol-value |
Example
| FX2120# configure |
| FX2120(config)# vlan 3 |
| FX2120 (config-vlan)# |
| FX2120 (config-vlan)# name vlan_friends |
| FX2120 (config-vlan)# |
| ... |
| FX2120(config)# vlan mac-vlan group 33 00:50:17:22:12:ff mask 10 |
| FX2120(config)# vlan group 1 frame-type ethernet_ii protocol-value 0x0600 |
| FX2120(config)# |
Telnet Command: voice-vlan
Use this command to enable voice VLAN and configure settings for voice VLAN.
Syntax Items
voice-vlan aging-time
voice-vlan cos
voice-vlan oui-table
voice-vlan vlan
Description
| Syntax Items Description | |
| voice-vlan aging-time | Set the voice VLAN aging timeout interval.<30-65536> - The unit is minute. Default is 1440 (minutes).- Enter the name of the VLAN profile.Related Syntax:# voice-vlan aging-time <30-65536> |
| voice-vlan cos | Set the voice VLAN cos value and remark function.Specify the class of service for voice VLAN.<0-7> - CoS value. Default is 6. Remark is disabled.remark - L2 user priority is remarked with the CoS value.Related Syntax:# voice-vlan cos <0-7> remark |
| voice-vlan oui-table | Add or remove the selected OUI to/from the OUI table. Indefault, there are 8 OUI addresses.- Enter the OUI address.- Enter a brief description for the specified MAC address to the voice VLAN OUI table.Related Syntax:# voice-vlan cos <0-7> remark |
| voice-vlan vlan | Set the VLAN identifier of the voice VLAN.<2-4094>- Enter the number of VLAN ID.Related Syntax:# voice-vlan vlan <2-4094> |
Example
FX2120# configure
FX2120(config)# voice-vlan aging-time 1000
FX2120(config)#
FX2120(config)# voice-vlan oui-table 22:30:ff test_01
FX2120(config)#
FX2120(config)# voice-vlan oui-table 00:01:E2 STAMP
FX2120(config)# exit
FX2120# show voice-vlan interfaces 10gigabitEthernet 1
Voice VLAN Aging : 1000 minutes
Voice VLAN CoS : 6
Voice VLAN 1p Remark: disabled
OUI table
OUI MAC | Description
----+----
00:E0:BB | 3COM
00:03:6B | Cisco
00:E0:75 | Veritel
00:D0:1E | Pingtel
00:01:E3 | Siemens
00:60:B9 | NEC/Philips
00:0F:E2 | H3C
00:09:6E | Avaya
22:30:FF | test_01
00:01:E2 | STAMP
Port | State | Port Mode | Cos Mode
----+----+----
gi1 | Disabled | Auto | Src
FX2120#
Telnet Command: webhook
Use this command to enable or disable the webhook service.
Syntax Items
webhook active
webhook host
webhook interval
webhook keep
Description
| Syntax Items Description | |
| webhook active | - Enable or disable the webhook application.Related Syntax:# webhook active |
| webhook host | Specify the destination (URL, domain name, IP address) to receive the data transferred by VigorSwitch.ip - Enter the IP address of the destination.path - Enter the path string (part of the composition of the URL) of the destination.port - Enter a port number (1-65535).service - Specify the protocol (http or https) of the destination.url - Enter the domain name (e.g., draytek.com) of the destination. Note that it is not necessary to enter this information if IP address has been set first.Related Syntax:# webhook host ip# webhook host path# webhook host port# webhook host service# webhook host url |
| webhook interval | <1-60> - Set the transmission interval (unit is minute).Related Syntax:# webhook interval <1-60> |
| webhook keep | settings - Enable or disable the function of keep webhook settings.Related Syntax:# webhook keep settings |
Example
FX2120# configure
FX2120(config)# webhook host service https
FX2120(config)# webhook host url www.demo.com
FX2120(config)# webhook host path Draytek/demo
FX2120(config)# webhook host port 443
FX2120(config)# webhook interval 2
A-2-4 Copy Configuration
Use this command to upgrade firmware image, configuration file, syslog file, language file and security certificate.
Syntax Items
copy flash://
copy tftp://
copy startup-config
Description
| Syntax Items Description | |
| copy flash:// Related Syntax: | # copy flash:// flash://# copy flash:// tftp:// |
| copy startup-config | running-config - Copy the startup configuration file to the running configuration.tftp://- Copy the startup configuration file to remote TFTP server with a filename.- Enter the IP address of TFTP sever.- Create a name to save the configuration file.Related Syntax:# copy startup-config tftp:// |
| copy tftp:// running-config - Get the running configuration from specified TFTP server.startup-config - Get the startup configuration from specified TFTP server.Related Syntax:# copy tftp:// flash://# copy tftp:// startup-config# copy tftp:// tftp:// |
Example
FX2120# copy startup-config tftp://172.16.3.8/test_da.cfg
Uploading file. Please wait...
Save configuration done.
FX2120#
A-2-5 Delete Configuration
Use this command to delete a file from the FLASH file system or restore the factory default settings of VigorSwitch.
Syntax Items
delete flash:// startup-config
delete startup-config
Description
| Syntax Items Description | |
| delete flash://startup-config | Delete the startup configuration file in FLASH file system.Related Syntax:# delete flash://startup-config |
| delete startup-config Restore | the factory default settings of VigorSwitch.Related Syntax:# delete startup-config |
Example
| FX2120# delet flash://startup-configDelete flash://startup-config [y/n] yDo you want to reload the system to take effect? [y/n] y... |
A-2-6 Disable Configuration
All commands used will be divided into EXEC mode and Privileged EXEC mode. This command is to turn off privileged mode command.
Default privilege level is 15 if no privilege level is specified on enable command.
Default privilege level is 1 if no privilege level is specified on disable command.
Syntax Items
disable
Description
| Syntax Items Description | |
| disable Enter a number to specify the privilege level. | Related Syntax:● # disable <1-14> |
Example
| FX2120# disable ? |
| <1-14> Privilege level |
| FX2120# disable 3 |
| FX2120# |
| <1-14> Privilege level |
| FX2120# disable 3 |
| FX2120# |
A-2-7 End Configuration
Use this command to end current mode.
Syntax Items
end
Example
FX2120(config)# interface GigabitEthernet 3
FX2120(config-if)# end
FX2120#
A-2-8 Exit Configuration
Use this command to close current CLI session or return to previous mode.
Syntax Items
exit
Example
FX2120(config)# interface 10GigabitEthernet 3
FX2120(config-if)# exit
FX2120(config)#
A-2-9 Hardware-Monitor Configuration
Use this command to execute the hardware fan test.
Syntax Items
hardware-monitor fan-test
Example
FX2120# hardware-monitor fan-test
Test Start...
fan1:
4825
Fan1 Success
Test Done.
FX2120#
A-2-10 Ping Configuration
Use this command to send ICMP ECHO_REQUEST to network hosts.
Syntax Items
ping
Description
| Syntax Items Description | |
| ping | - Enter an IPv4/IPv6 address or a domain name to ping.<1-999999999> - Specify the number of repetitions of ping operation.Related Syntax:# pingcount <1-999999999> |
Example
FX2120# ping 192.168.1.11 count 3
PING 192.168.1.11 (192.168.1.11): 56 data bytes
64 bytes from 192.168.1.11: icmp_seq=0 ttl=64 time=0.0 ms
64 bytes from 192.168.1.11: icmp_seq=1 ttl=64 time=0.0 ms
64 bytes from 192.168.1.11: icmp_seq=2 ttl=64 time=0.0 ms
--- 192.168.1.11 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 0.0/0.0/0.0 ms
FX2120#
A-2-11 Reboot Configuration
Use this command to perform a cold restart of VigorSwitch.
Syntax Items
reboot
Example
FX2120# reboot
FX2120#
A-2-12 Renew Configuration
Use this command to renew DHCP Snooping database from backup file.
Syntax Items
renew ip dhcp snooping database
Example
FX2120# renew ip dhcp snooping database
FX2120#
A-2-13 Restore-defaults Configuration
Use this command to restore the factory default settings for the system or for the selected port.
Syntax Items
restore-defaults
Description
| Syntax Items Description | |
| restore-defaults | <1-12> - Enter the number (1 to 12) of LAN port.<1-8> - Enter the number of LAG port.Related Syntax:# restore-defaults# restore-defaults interfaces 10GigabitEthernet <1-12># restore-defaults interfaces LAG <1-8> |
Example
FX2120# restore-defaults interfaces 10gigabitethernet 3
Interface gi3: restore factory defaults.
FX2120#
FX2120# restore-default
System: restore factory defaults. Do you want to reboot now? (y/n)y
A-2-14 Save Configuration
Use this command to save configuration and activate the settings.
Note that this command has the same effect as "copy running-config startup-config".
Syntax Items
save
Example
FX2120# save
Success
FX2120#
A-2-15 Show Configuration
After finished the command setting, use this command to display the configuration for all commands.
Syntax Items
show
Example
FX2120# show acl utilization
Type: sys
usage: 256
Type: IPSG usage: 128
Type: Auth usage: 128
FX2120#
FX2120#
FX2120# show arp
Address HWtype HWaddress Flags Mask Iface
192.168.1.55 ether 00:1D:AA:F0:26:08 C eth0
192.168.1.10 ether 00:05:5D:E4:D8:EE C eth0
FX2120# show voice-vlan interfaces gigabitethernet 3
Voice VLAN Aging : 1440 minutes
Voice VLAN CoS : 6
Voice VLAN 1p Remark: disabled
OUI table
OUI MAC | Description
----+----
00:E0:BB | 3COM
00:03:6B | Cisco
00:E0:75 | Veritel
00:D0:1E | Pingtel
00:01:E3 | Siemens
00:60:B9 | NEC/Philips
00:0F:E2 | H3C
00:09:6E | Avaya
Port | State | Port Mode | Cos Mode
----+----+----+----
gi3 | Disabled | Auto | Src
FX2120#
A-2-16 SSL Configuration
Use this command to generate security certificate files such as RSA, DSA.
After entering the command of SSL, follow the onscreen questions to give the required information.
Syntax Items
ssl
Example
FX2120# ssl
Generating a 1024 bit RSA private key
--------++++++
--------++++++
writing new private key to '/mnt/ssh/ssl_key.pem_tmp'
----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a D
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '', the field will be left blank.
----
Country Name (2 letter code) [AU]:tw
State or Province Name (full name) [Some-State]:hs
Locality Name (eg, city) []:hschu
Organization Name (eg, company) [Internet Widthits Pty Ltd]:draytek
Organizational Unit Name (eg, section) []:marketing
Common Name (e.g. server FQDN or YOUR name) []:draytek
Email Address :carrie_ni@draytek.com
FX2120#
A-2-17 Terminal Configuration
Use this command to set the maximum line number that the terminal is able to print.
Syntax Items
terminal
Description
| Syntax Items Description | |
| terminal | <0-24> - Enter the length value. 0 means no limit.Related Syntax:# terminal length <0-24> |
Example
| FX2120# terminal length 15 |
| FX2120# show running-config |
| ...... |
A-2-18 Traceroute Configuration
Use this command to execute network trace route diagnostic.
Syntax Items
traceroute
Description
| Syntax Items Description | |
| traceroute | - Enter the IP address or the hostname of the device for VigorSwitch to perform traceroute diagnostic.Related Syntax:# traceroute |
Example
FX2120# traceroute 192.168.1.224 traceroute to 192.168.1.224 (192.168.1.224), 30 hops max, 40 byte packets 1 192.168.1.224 (192.168.1.224) 0 ms 0 ms 0 ms FX2120#
A-2-19 UDLD Configuration
Use this command to reset all interfaces disabled by the UniDirectional Link Detection (UDLD) and make data traffic begin passing through the interfaces again.
Syntax Items
traceroute
Description
| Syntax Items Description | |
| udld Reset all the interfaces which have been shut down by UDLD. | |
Example
| FX2120# udld reset |
| FX2120# |
- User's Guide
- VigorSwitch FX2120
- Intellectual Property Rights (IPR) Information
- Copyrights
- Trademarks
- Safety Instructions and Approval
- Safety Instructions
- Warranty
- Be a Registered Owner
- Firmware & Tools Updates
- Table of Contents
- Chapter I Introduction......IX
- Chapter II Configuration 15
- Chapter III Security 95
- Chapter IV Utilities.... 137
- Chapter V Monitoring....145
- Chapter VI System Maintenance....165
- Chapter VII Troubleshooting....207
- Appendix Telnet Commands....211
- Chapter I Introduction
- I-1 Introduction
- I-1-1 Key Features
- QoS
- VLAN
- Port Trunking
- Power Saving
- I-2 Installation
- I-2-1 Network Connection
- I-2-2 Rack-Mounted Installation
- I-2-3 Typical Applications
- Case 5: Desktop Installation
- I-2-4 Configuring the Management Agent of Switch
- I-2-5 IP Address Assignment
- IP address:
- Class A:
- Class B:
- Class C:
- Class D and E:
- Subnet mask:
- Note:
- I-3 Accessing Web Page of VigorSwitch
- i Info:
- I-4 Dashboard
- Chapter II Configuration
- II-1 General Setup
- II-1-1 Mirroring
- II-1-2 Link Aggregation
- II-1-3 Multicast
- II-1-4 STP
- II-1-5 QoS
- Queue Setting
- CoS Mapping
- DSCP Mapping
- Egress Shaping Rate
- Egress Shaping per Queue
- II-1-6 Jumbo Frame
- II-1-7 LLDP
- Voice Application
- II-2 VLAN Setup
- II-2-1 Existion VLAN
- II-2-1-2 Voice VLAN
- Click
- II-2-1-3 Surveillance VLAN
- II-2-2 MAC/Protocol VLAN Group
- II-2-2-1 MAC Group
- II-2-2-2 Protocol Group
- II-2-3 GVRP
- II-3 MAC Address Table
- II-4-1 IP Network
- II-4-2 Bind IP to MAC
- II-4-2-1 MAC-IP Binding List
- II-4-2-2 DHCP Table
- II-4-3 VLAN Routing
- II-5-1 General
- II-5-2 VLAN Interface
- Voice VLAN
- Surveillance VLAN
- II-5-3 GVRP
- II-5-4 Multicast
- IGMP Snooping
- MLD Snooping
- Throttling
- II-5-5 STP
- II-5-6 QoS
- Ingress Rate Limit
- II-6 Multicast
- II-6-1 IGMP Snooping
- II-6-1-2 VLAN Setting
- II-6-1-3 Group Table
- II-6-1-4 Filtering Profile
- II-6-2 MVR
- II-6-2-1 Port Setting
- II-6-2-2 Static Group
- II-6-3 MLD Snooping
- II-6-3-2 VLAN Setting
- II-6-3-3 Group Table
- II-6-3-4 Filtering Profile
- II-6-4 MLD Snooping Statistics
- II-7 ONVIF Surveillance
- II-7-1 Topology
- II-7-2 Snapshot Stream
- II-7-3 Device Maintenance
- Option
- II-8-1 RADIUS
- II-8-2 TACACS+
- Chapter III Security
- III-1-1 Authentication Settings
- III-1-2 Local/MAC Account
- III-1-3 Authentication Hosts
- III-2 Access Control List
- III-2-1 Access Control List
- List Type - MAC
- List Type - IPv4
- List Type - IPv6
- III-1-2 Apply to Port
- III-4 Port Security
- III-6-1 Properties
- III-6-2 Port Setting
- III-7 Dynamic ARP Inspection
- III-7-1 Properties
- III-7-2 Statistics
- III-8-1 DHCP Snooping
- III-8-2 Option82
- III-8-3 Statistics
- III-9 IP Conflict Prevention
- III-10 Loop Protection
- III-11 Port Recovery
- Chapter IV Utilities
- IV-3 Fan Test
- Chapter V Monitoring
- V-1-1 System Log Information
- Item
- Description
- V-1-2 System Log Settings
- V-1-2-1 Local
- V-1-2-2 Remote
- V-2 Bandwidth Utilization
- V-3 DHCP Table
- V-4 Routing Table
- V-5 CLI Sessions
- V-6-1 General Statistics
- V-6-2 LLDP Device
- V-6-2-1 Local
- V-6-2-2 Remote
- V-6-3 LLDP Overloading
- V-7 GVRP Statistics
- V-8 MLD Snooping Statistics
- V-10 Dynamic ARP Statistics
- V-10 DHCP Snooping
- Chapter VI System Maintenance
- VI-1-1 Device Info
- VI-1-2 Time
- VI-1-3 Configuration
- VI-1-4 Firmware
- VI-2 Access Management
- VI-2-1 LAN Access
- IPv6 Access
- Disabled -
- Management VLAN
- Protocol Access
- VI-2-2 Management Authentication & Profile
- VI-2-4 OpenVPN
- VI-2-5 Webhook
- VI-2-6 Account & Password
- VI-3-1 LLDP Port Setting
- VI-3-2 LLDP-MED Setting
- VI-3-2-1 MED Network Policy
- VI-3-2-2 LLDP-MED Port Setting
- VI-3-3 LLDP Statistics
- VI-4-1 View
- VI-4-2 Group
- VI-4-3 Community
- VI-4-4 User
- VI-4-5 Engine ID
- VI-4-6 Trap Notification
- Alert Mail Server
- Syslog Mail Server
- VI-6 System Reboot
- Chapter VII Troubleshooting
- VII-1 Backing to Factory Default Setting
- i Warning:
- VII-1-1 Software Reset
- VII-1-2 Hardware Reset
- VII-2 Contacting DrayTek
- Appendix Telnet Commands
- A-1 Accessing Telnet of Vigor Switch
- A-2 Available Commands
- A-2-1 Clear Configuration
- Telnet Command: clear arp
- Syntax Items
- Example
- Telnet Command: clear authentication
- Telnet Command: clear gvrp
- Telnet Command: clear interfaces
- Telnet Command: clear ip
- Telnet Command: clear ipv6
- Telnet Command: clear lacp
- Telnet Command: clear line
- Telnet Command: clear lldp
- Telnet Command: clear logging
- Telnet Command: clear mac
- Telnet Command: clear mvr
- Telnet Command: clear spanning-tree
- A-2-2 Clock Configuration
- Telnet Command: clock set
- A-2-3 Configure Configuration
- Telnet Command: aaa
- Telnet Command: acct
- Telnet Command: authentication
- Telnet Command: boot
- Telnet Command: clock
- Telnet Command: custom
- Telnet Command: dos
- Telnet Command: dot1x
- Telnet Command: do
- Telnet Command: dray\_surveillance
- Telnet Command: enable
- Telnet Command: end
- Telnet Command: errdisable
- Telnet Command: exit
- Telnet Command: gvrp
- Telnet Command: hostname
- Telnet Command: interface
- Telnet Command: ip
- Related Syntax:
- Telnet Command: jumbo-frame
- Telnet Command: lacp
- Telnet Command: lag
- Telnet Command: line
- Telnet Command: Ildp
- Telnet Command: logging
- Telnet Command: logmail
- Telnet Command: loop-protection
- Telnet Command: mac
- shutdown
- Telnet Command: mailalert
- Telnet Command: management
- Telnet Command: management-vlan
- Telnet Command: mirror
- Telnet Command: mvr
- Telnet Command: no
- Telnet Command: openvpn
- Telnet Command: poe
- Telnet Command: port-security
- Telnet Command: qos
- Telnet Command: radius
- Telnet Command: schedule
- Telnet Command: sflow
- Telnet Command: sntp
- Telnet Command: spanning-tree
- Telnet Command: start-up
- Telnet Command: storm-control
- Telnet Command: surveillance-vlan
- Telnet Command: system
- Telnet Command: tacacs
- Telnet Command: tr069
- Telnet Command: udld
- Telnet Command: username
- Telnet Command: vlan
- Telnet Command: voice-vlan
- Telnet Command: webhook
- A-2-4 Copy Configuration
- A-2-5 Delete Configuration
- A-2-6 Disable Configuration
- A-2-7 End Configuration
- A-2-8 Exit Configuration
- A-2-9 Hardware-Monitor Configuration
- A-2-10 Ping Configuration
- A-2-11 Reboot Configuration
- A-2-12 Renew Configuration
- A-2-13 Restore-defaults Configuration
- A-2-14 Save Configuration
- A-2-15 Show Configuration
- A-2-16 SSL Configuration
- A-2-17 Terminal Configuration
- A-2-18 Traceroute Configuration
- A-2-19 UDLD Configuration
Brand : Draytek
Model : VigorSwitch FX2120
Category : Network switch