KTI Networks KGD-600, Installation Manual

Page 1: ... 1 KGD 600 Industrial Web Smart 6 Port Gigabit Ethernet Switch with Fiber Connectivity Installation Guide DOC 070402 ...

Page 2: ...rves the right to revise this documentation and to make changes in content from time to time without obligation on the part of KTI Networks Inc to provide notification of such revision or change For more information contact United States KTI Networks Inc P O BOX 631008 Houston Texas 77263 1008 Phone 713 2663891 Fax 713 2663893 E mail kti ktinet com URL http www ktinet com International Fax 886 2 2...

Page 3: ...or compliance could void the user s authority to operate the equipment 2 Shielded interface cables and AC power cord if any must be used in order to comply with the emission limits CISPR A COMPLIANCE This device complies with EMC directive of the European Community and meets or exceeds the following technical standard EN 55022 Limits and Methods of Measurement of Radio Interference Characteristics...

Page 4: ...breviation 19 3 2 QoS Function 20 3 2 1 Packet Priority Classification 21 3 2 2 Priority Class Queues 21 3 2 3 Egress Service Policy 21 3 3 VLAN Function 22 3 3 1 VLAN Operation 22 3 3 2 Ingress Rules 22 3 3 2 1 802 1Q Tag Aware Per port setting 22 3 3 2 2 Keep Tag Per port setting 22 3 3 2 3 Drop Untag Per Port Setting 23 3 3 2 4 Drop Tag Per Port Setting 23 3 3 3 Ingress Default Tag Per Port Set...

Page 5: ...37 4 6 3 3 Egress Settings 38 4 6 3 4 VLANGroups 39 4 6 4 Important Notes for VLAN Configuration 40 4 7 Quality of Service 41 4 7 1 802 1p Mapping 42 4 7 2 DSCP Mapping 43 4 7 3 QoS Service Policy 44 4 8 Port Mirroring 45 4 9 802 1X Configuration 46 4 9 1 802 1X Re authentication Parameters 47 4 10 Statistics 48 4 11 Reboot System 49 4 12 Restore Default 49 4 13 Update Firmware Configuration 49 4 ...

Page 6: ...es used Fiber Connectivity The mini GBIC SFP port can be installed with an optional SFP optical fiber transceiver to support one Gigabit fiber connection when needed Web Management The switch is embedded with an Http server which provides management functions for advanced network functions including Port Control Quality of Service and Virtual LAN functions The manage ment can be performed via Web ...

Page 7: ...s in band web based management interface All copper ports support auto negotiation and auto MDI MDI X detection Provides full wire speed forwarding Supports 802 3x flow control for full duplex and backpressure for half duplex Provides port status statistic monitoring and control function Supports port based and 802 1Q Tag based VLAN Provides QoS function Provides port mirroring function Management...

Page 8: ... 8 1 2 Product Panels The following figure illustrates the faces of the switch ...

Page 9: ...te 10Mbps 100Mbps 1000Mbps Duplex support Full Half duplex Network cable Cat 5 UTP 1000Mbps Mini GBIC Fiber Port Compliance IEEE 802 3z 1000Base SX LX mini GBIC Connectors SFP for optional SFP type fiber transceivers Configuration Auto Forced 1000Mbps Full duplex Transmission rate 1000Mbps Network cables MMF 50 125 60 125 SMF 9 125 Eye safety IEC 825 compliant Switch Functions MAC Addresses Table ...

Page 10: ...put Interfaces DC IN Jack D 6 3mm D 2 0mm DC IN Terminal Block screw type Operating Input Voltages 5 30VDC 5 Power Consumption 3 6W max 7 5V Mechanical Dimension base 144 x 104 5 x 26 mm Housing Enclosed metal with no fan Mounting Support Din rail mounting Panel mounting Wall mounting Desktop mounting Environmental Operating Temperature Typical 20o C 70o C Storage Temperature 20o C 85o C Relative ...

Page 11: ... cable extension cable or plug is damaged An object has fallen into the product The product has been exposed to water The product has been dropped or damaged The product does not operate correctly when you follow the operating instructions Do not push any objects into the openings of your system Doing so can cause fire or electric shock by shorting out interior components Operate the product only ...

Page 12: ...Mounting The steps to mount the switch on aDin rail are One Din rail mounting bracket is provided in the product package as shown below Install the bracket on the bottom of the switch unit Mount the device on a Din rail ...

Page 13: ...anel Mounting One panel mounting bracket is provided in the product package as shown below Install the bracket on the bottom of the switch unit The final dimension after panel bracket is installed is shown below ...

Page 14: ...supply system Using Terminal Blocks Three terminal contacts are provided Vdc Positive terminal Vdc Negative terminal Chassis ground Vdc 5V 30VDC One 3P terminal plugs are provided together with the switch The plug is shown below Power wires 24 12AWG IEC 0 5 2 5mm2 Install the power source wires with the plug properly Then plug in the terminal block socket ...

Page 15: ...ter which is used to supply the DC power for the unit should have the AC voltage matching the commercial power voltage in your area 2 7 Reset Button The reset button is used to perform a reset to the switch It is not used in normal cases and can be used for diagnostic purpose If any network hanging problem is suspected it is useful to push the button to reset the switch without turning off the pow...

Page 16: ... to MDI X connection It simplifies the cable installation Auto negotiation Function The ports are featured with auto negotiation function and full capability to support connection to any Ethernet devices The port performs a negotiation process for the speed and duplex configuration with the connected device automatically when each time a link is being established If the connected device is also au...

Page 17: ...into the mini GBIC port Normally a bail is provided for every SFP transceiver Hold the bail and make insertion 3 Until the SFP transceiver is seated securely in the slot place the bail in lock position Connecting Fiber Cables LC connectors are commonly equipped on most SFP transceiver modules Identify TX and RX connector before making cable connection The following figure illustrates a connection ...

Page 18: ... 6 link is down P6 OL Port6 optical link ON Optical signal is detected on Port 6 OFF No optical signal is detected on Port 6 2 11 Configuring IP Address and Password for the Switch The switch is shipped with the following factory default settings for software management Default IP address of the switch 192 168 0 2 255 255 255 0 The IP Address is an identification of the switch in a TCP IP network ...

Page 19: ...rd Ethernet frame with no VLAN Tag field Priority tagged packet An IEEE 802 1Q packet which VID filed value is zero VID 0 VLAN Tagged packet An IEEE 802 1Q packet which VID filed value is not zero VID 0 PVID Port VID PVID is the default VID of an ingress port It is often used in VLAN classification for untagged packets It is also often used for egress tagging operation DSCP Differentiated Service ...

Page 20: ...on to guide the packet forwarding in four priority classes The versatile classification methods can meet most of the application needs The following figure illustrates the QoS operation flow when a packet received on the ingress port until it is transmitted out from the egress port ...

Page 21: ... to an egress port 3 2 2 Priority Class Queues Each egress port in the switch is equipped with four priority class egress queues to store the packets for transmission A packet is stored into the class queue which is associated to the classified priority class For example a packet is stored into Class 3 egress queue if it is classified as priority Class 3 3 2 3 Egress Service Policy Each port can b...

Page 22: ...ring and packet tag removal The related Ingress port settings are 3 3 2 1 802 1Q Tag Aware Per port setting Tag aware 802 1Q Tag Aware mode is used The switch examines the tag content of every received packets For a VLAN tagged packet the packet VLAN tag data is retrieved as packet tag information for VLAN classification and egress tagging operation For untagged packet and priority tagged packet p...

Page 23: ...en Ingress port default tag is used it is copied as packet associated Packet Tag Information for VLAN classification The PVID is used as index to one VLAN group in VLAN group table 3 3 4 Packet Tag Information Under VLAN process every packet is associated with one Packet Tag information in packet forward ing operation The tag information includes VID CFI and User Priority data and is used for two ...

Page 24: ...ropped Refer to section 3 2 4 for details about how the Packet Tag information is generated The member ports specified in the matched VLAN group are the admitted egress port range for the packet The packet will never be forwarded to other ports which are not in the member ports The Source Port Check setting of the matched VLAN group is also referred If it is enabled the ingress port will be checke...

Page 25: ...agged VID configured in next setting even Insert Tag is enabled Disable This rule is not applied 3 3 9 Summary of VLAN Function VLAN Modes Port based VLAN Mode simple port based 2 VLAN groups mode Port based VLAN ISP Mode simple port based 5 VLAN groups mode Advanced VLAN Mode Full VLAN configuration for port based and Tag based VLAN Advanced VLAN Mode Egress Settings per port Tag Aware Keep Tag D...

Page 26: ...now if services should be granted The 802 1X authenticator operates as a go between with the supplicant and the authentication server to provide services to the network When a switch is configured as an authenticator the ports of the switch must then be configured for authorization In an authenticator initiated port authorization a client is powered up or plugs into the port and the authenticator ...

Page 27: ...nd enter the IP address of the switch unit to which you want to connect The IP address is used as URL for the browser software to search the device URL http xxx xxx xxx xxx Factory default IP address 192 168 0 2 4 2 Login to the Switch Unit When browser software connects to the switch unit successfully a Login screen is provided for you to login to the device as follows The switch will accept only...

Page 28: ...ation Port Mirroring Port mirroring related configuration 802 1X 802 1x authentication for port access control Monitoring Statistics List statistics for all ports Maintenance Reboot System Command to reboot the switch Restore Default Command to restore the switch with factory default settings Update Firmware Command to update the switch firmware Command to update the switch configuration upload fi...

Page 29: ...b reply packets from the switch User priority Priority value for web reply packets from the switch IP Address Set IP address for the switch management Subnet Mask Set Subnet mask for IP address for the switch management Gateway Set Default gateway IP address for the switch management Name Set the system name for this switch unit Password Set new password Apply Click to apply the configuration chan...

Page 30: ... not zero The switch web http server only accepts tagged management packets matched Management VLAN VID and replies tagged packets with tag composed of Management VLAN VID CFI and User Priority settings to the manage ment host The egress port will also be limited in the member ports of the matched VLAN group Summary of the rules VLAN Configuration Management VLAN VID Switch Embedded Web Server ope...

Page 31: ...lex capability Auto Enable 10 100 1000M Full Half 10 Half Disable 10M Half 10 Full Disable 10M Full 100 Half Disable 100M Half 100 Full Disable 100M Full 1000 Full Enable 1000M Full Port 6 Mode Auto negotiation Speed capability Duplex capability 1000 Full Enable 1000M Full Force 1000 Full Disable 1000M Full Flow Control Set port flow control function V set to enable 802 3x pause flow control for i...

Page 32: ...freely with no VLAN limitation Port based VLAN Mode Simple configuration for 2 port based VLAN groups Port based VLAN ISP Mode Simple configuration for 5 port based VLAN groups Advance VLAN Mode Full VLAN configuration for port based and Tag based VLAN Apply Click to apply the configuration change Refresh Click to refresh current configuration ...

Page 33: ... change Refresh Click to refresh current configuration Back Click to go back to upper menu Operation in this mode 1 The member ports of two groups are allowed to overlap 2 The member ports in same group can communicate with other members only 3 No packet tag is examined 4 A received packet will not be modified i e tagging or untagging through VLAN operation till it is transmitted ...

Page 34: ...ased VLAN groups are configured as follows auto matically Group 1 member Port 1 Port 6 Group 2 member Port 2 Port 6 Group 3 member Port 3 Port 6 Group 4 member Port 4 Port 6 Group 5 member Port 5 Port 6 Mode Operation 1 The joint port is the shared member port for all groups 2 Two member ports are configured in each group 3 The member ports in same group can communicate with other only 4 No packet...

Page 35: ...tion Ingress Default Tag Click to configure per port Ingress Default Tag settings Ingress Settings Click to configure per port ingress settings Egress Settings Click to configure per port egress settings VLAN Groups Click to configure VLAN group table ...

Page 36: ...ID is used as index for VLAN classification VLAN group table lookup in one of the following conditions 1 Ingress port Tag Aware setting Tag ignore 2 Ingress port Tag Aware setting Tag aware and the received packet is untagged or priority tagged PVID CFI User Priority Ingress Default Tag for the ingress port It is used as the tag for insertion in egress tagging operation in one of the following con...

Page 37: ...ble admit untagged packets and priority tagged packets Drop Tag Drop all VLAN tagged packets Enable drop VLAN tagged packets Disable admit VLAN tagged packets Apply Click to apply the configuration change Refresh Click to refresh current configuration Back Click to go back to upper menu Note 1 Priority tagged packet VID 0 is treated as untagged packet in the switch 2 Tag Aware setting affects the ...

Page 38: ...to disable this function Untagged VID VID for Untagging Specific VID setting 1 4095 decimal 12 bit VID value Apply Click to apply the configuration change Refresh Click to refresh current configuration Back Click to go back to upper menu The inserted tag sources when Insert Tag Enable are listed as follows Received packet type Tag Aware Tag ignore Tag Aware Tag aware Untagged Ingress Default Tag I...

Page 39: ...for the packets belong to the VLAN Port 1 6 click to select Source Port Check Check whether the ingress port is the member port of the VLAN Enable set to enable this check the packet is dropped if ingress port is not member port of the VLAN Disable set to disable this check Apply Click to apply the configuration change Refresh Click to refresh current configuration Back Click to go back to upper m...

Page 40: ...uble Tagged in Advanced VLAN Mode For a received packet Ingress port Keep Tag setting and Egress port Insert Tag setting are enabled at the same time It will cause the packet double tagged when egress Although it is often applied in Q in Q provider bridging application However such condition should be avoided in normal VLAN configuration See table below Ingress port Egress port Keep Tag Insert Tag...

Page 41: ...ns are disabled It is also used as default priority class for the received packet when both 802 1p and DSCP classifi cation failed in classification Class 3 Class 0 priority class 802 1p Mapping Click to configure 802 1p mapping tables DSCP Mapping Click to configureDSCP mapping table Service Policy Click to configure per port egress service policy mode Apply Click to apply the configuration chang...

Page 42: ...ty class Mapped priority class for tag m on Port n Class 3 Class 0 Apply Click to apply the configuration change Refresh Click to refresh current configuration Back Click to go back to upper menu Every ingress port has its own 802 1p mapping table The table is referred in 802 1p priority classifica tion for the received packet ...

Page 43: ... user defined DSCP value Class 3 Class 0 All others The other DSCP values not in the seven user defined values are assigned a default priority class Class 3 Class 0 Apply Click to apply the configuration change Refresh Click to refresh current configuration Back Click to go back to upper menu Only one DSCP mapping table is configured and applied to all ports The table is referred in DSCP priority ...

Page 44: ...o 5 3 1 1 Weighted ratio priority Class 3 2 1 0 1 1 1 1 weighted ratio 1 1 1 1 Apply Click to apply the configuration change Refresh Click to refresh current configuration Back Click to go back to upper menu Notes 1 Queue with higher class number has higher priority than queue with lower class number That means Class 3 Class 2 Class 1 Class 0 by default 2 In weighted ratio policies a weighted fair...

Page 45: ...Port The port is forwarded all packets received on the mirrored ports Mirrored Ports Select the ports which will be mirrored all received packets to the sniffer port Apply Click to apply the configuration change Refresh Click to refresh current configuration ...

Page 46: ...rver Port Port number Admin State Port 802 1x control Auto set to the Authorized or Unauthorized state in accordance with the outcome of an authentication exchange between the Supplicant and the Authentication Server Force Authorized the port is forced to be in authorized state Force Unauthorized the port is forced to be in unauthorized state Port State Port 802 1x state 802 1X Disabled the port i...

Page 47: ...apply the configuration change Refresh Click to refresh current configuration 4 9 1 802 1X Re authentication Parameters Configuration Description Reauthentication Enabled Check to enable periodical re authentication for all ports Reauthentication Period The period of time after which the connected radius clients must be re authenticated unit second Value 1 3600 EAPtimeout The period of time the sw...

Page 48: ...mes transmitted on the port Rx Bytes Total of bytes received on the port Rx Frames Total of packet frames received on the port Tx Errors Total of error packet frames transmitted on the port Rx Errors Total of error packet frames received on the port Clear Click to reset all statistic counters Refresh Click to refresh all statistic counters ...

Page 49: ...the switch and make your current http connection lost 4 13 Update Firmware Configuration This web page can be used to Upload new version of firmware from PC to the device Upload Restore new configuration file from PC to the device Backup switch configuration and save as a file on PC 4 13 1 Update Firmware This menu is used to perform in band firmware switch software upgrade Enter the path and file...

Page 50: ...uration file from the switch 4 13 3 Backup Configuration File The steps to download the configuration from the switch unit and save it on PC 1 Move the mouse to Backup Config File link 2 Click right button of the mouse 3 Select Save Target As menu to enter the file name for downloading the configuration 4 14 Logout This menu is used to perform a logout from the switch management If current user do...

Page 51: ...tting Member Ports Port 1 2 3 4 5 6 for Group 1 None for Group 2 Port based VLAN ISP Mode setting Joint Port Port 6 Advanced VLAN Mode Settings Ingress Default Tag PVID 1 for all ports Ingress Default Tag CFI 0 for all ports Ingress Default Tag User Priority 0 for all ports Ingress Setting Tag Aware Tag ignore for all ports Ingress Setting Keep Tag Enable for all ports Ingress Setting Drop Untag D...

Page 52: ...e VLAN Group 5 Source Port Check Disable VLAN Group 6 VID 6 VLAN Group 6 Member Ports None VLAN Group 6 Source Port Check Disable VLAN Group 7 VID 7 VLAN Group 7 Member Ports None VLAN Group 7 Source Port Check Disable VLAN Group 8 VID 8 VLAN Group 8 Member Ports None VLAN Group 8 Source Port Check Disable Quality of Service Configuration 802 1p Classification Disable for all ports DSCP Classifica...

Page 53: ...ority 0 Class 0 All others DSCP Class 0 QoS Service Policy Port 1 Strict priority Port 2 Strict priority Port 3 Strict priority Port 4 Strict priority Port 5 Strict priority Port 6 Strict priority Port Mirroring Configuration Sniffer Port Port 1 Mirrored Ports None 802 1X Configuration Mode Disabled RADIUS IP 0 0 0 0 RADIUS UDP Port 1812 RADIUS Secret None Admin State Force Authorized for all port...