Cisco Slm2008 v10 Ug a-web

8/3/2019 Cisco Slm2008 v10 Ug a-web

1/32

USER GUIDE

BUSINESS SERIE

5-Port and 8-Port10/100/1000 GigabitSmart Switch with PDand AC Power

Model: SLM2005, SLM2008


2/32

About This Guide

5-Port and 8-Port 10/100/1000 Ggabt Smart Swtches wth PD and AC Power

About Ths Gude

Icon Descriptions

While reading through the User Guide you may encountervarious icons designed to call attention to a speciic item.Below is a description o these icons:

NOTE: This checkmark indicates that there isa note o interest and is something that youshould pay special attention to while using theproduct.

WARNING: This exclamation point indicatesthat there is a caution or warning and it is

something that could damage your property orproduct.

WEB: This globe icon indicates a noteworthywebsite address or e-mail address.

Online Resources

Most web browsers allow you to enter the web addresswithout adding the http:// in ront o the address. ThisUser Guide will reer to websites without including http://in ront o the address. Some older web browsers mayrequire you to add it.

Resource Webste

Linksys www.linksys.com

Linksys International www.linksys.com/international

Glossary www.linksys.com/glossary

Network Security www.linksys.com/security

Copyright and Trademarks

Speciications are subject to change without notice.Linksys is a registered trademark or trademark o CiscoSystems, Inc. and/or its ailiates in the U.S. and certainother countries. Copyright 2007 Cisco Systems, Inc. Allrights reserved. Other brands and product names aretrademarks or registered trademarks o their respectiveholders.


3/32

Table of Contents


Chapter 1: Introduction 1

Chapter 2: Product Overview 2

Front Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Side Panels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Chapter 3: Installation 3

Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Pre-Installation Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Full-Duplex Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

1000BASE-T Cable Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Positioning the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Placement Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Wall-Mount Placement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Desktop Placement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Hardware Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Chapter 4: Advanced Confguration 5

Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

System > System Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Port > Port Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Port > Static Link Aggregation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Port > LACP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Port > LACP Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7VLAN > VLAN Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

VLAN > VLAN Port Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Security > 802.1X Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Security > 802.1X Parameter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Security > Static MAC Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Security > Management Access List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Security > Storm Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Rate Threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

QoS > QoS Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

Queue Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

QoS Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11

STP > STP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

STP Port Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12

STP > STP Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12

STP VLAN Bridge Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12

STP Port Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12

Statistics > Statistics Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12

Statistics > IGMP Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13


4/32

Table of Contents


Multicast > IGMP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

Admin > Ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

Ping Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Admin > Port Mirror . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Admin > Factory Deault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Admin > Reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Admin > Save Conguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Admin > Firmware Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

Appendix A: Glossary 16

Appendix B: Specifcations 20

SLM2005 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

SLM2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21

Appendix C: Warranty and Regulatory Inormation 22Limited Warranty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

FCC Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

Saety Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

Industry Canada Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

Rglement dIndustry Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

User Inormation or Consumer Products Covered by EU Directive 2002/96/EC on WasteElectric and Electronic Equipment (WEEE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24

Appendix D: Contact Inormation 28


5/32

1

Introduction


Chapter 1

Chapter 1:Introducton

The 5-port and 8-port 10/100/1000 Gigabit Smart Switcheswith PD and AC Power allow you to upgrade your existing10/100 network by replacing your current workgroup hubor switch. At the same time, you can conigure advancedeatures or security, QoS, and Spanning Tree using itsweb-based utility.

The Linksys Gigabit Smart Switches not only allow you toupgrade to Gigabit speeds, but also allow you to expandyour network securely. The Gigabit Smart Switches withPD have virtual LAN (VLAN) capabilities to restrict the lowo multicast and broadcast traic. Stations within a givenVLAN can reely communicate using either unicast ormulticast addressing. Communication between dierentVLANs is not possible.

Extensive QoS eatures make the solution ideal orreal-time applications like Voice and Video. The 4 priorityqueues together with the Weighted Round Robin andStrict Priority scheduling techniques acilitate eicientcoexistence o real-time traic with data traic allowingthem each to meet their QoS needs. Individual users orapplications can be prioritized above others using variousClass o Service options - by port, layer 2 priority (802.1p),and layer 3 priority (TOS or DSCP). Intelligent broadcastand multicast storm controls minimize and contain theeects o these types o traic on regular traic. IGMP

Snooping limits bandwidth-intensive video traic toonly the requestors without looding all users. Incomingtraic can be policed and outgoing traic can be shapedallowing you to control network access and traic low.

There are eatures that allow you to expand and grow yournetwork o switches. Link aggregation allows multiplehigh-bandwidth trunks between switches to be setup.This also provides a level o reliability in that the systemcontinues to operate i one o the links breaks. SpanningTree (STP) allow you to build a mesh o switches increasingthe availability o the system.


6/32

Product Overview


Chapter

Chapter :Product Overvew

Front PanelThe LEDs are located on the ront panel o the Switch.

Front Panel - SLM2008

System (Green) Lights up green to indicate that

power is being supplied to the Switch.

1-5 or 1-8 (Green) Each LED will light upwhen there is a connection made through itscorresponding port. It will lash when there isactivity on its corresponding port.

Back Panel

The Ethernet ports are located on the back panel o theSwitch.

Back Panel - SLM2008

Ethernet 1 The Switchs irst RJ-45 port supportsthe IEEE 802.3a Power-over-Ethernet (PoE) PDstandard that enables DC power to be suppliedto the Switch using wires in the connectingtwisted-pair cable. Any 802.3a-compliant Powerover Ethernet device attached to the port candirectly supply power to the Switch over thetwisted-pair cable without requiring its ownseparate power source.

To connect a device to a port, you will need touse Category 5e (or better) network cable.

Ethernet 1-5 or 1-8 These RJ-45 ports supportnetwork speeds o either 10Mbps, 100Mbps, or1000Mbps and can operate in hal and ull-duplexmodes. Auto-sensing technology enables eachport to automatically detect the speed o thedevice connected to it and adjust its speed andduplex accordingly.

Side Panels

The Reset button and Power port are located on the rightside panel o the Switch.

Right Side Panel

Reset Button The Reset button can be used toreset or reboot the Switch.

Reboot I the button is pressed or less than10 seconds, the Switch will reboot.

Restore Factory Deaults I the buttonis pressed or longer than 10 seconds, theSwitchs settings will be restored to theactory deaults.

NOTE: The Switch can only be conigured usingthe web-based utility. I you cannot access theweb-based utility because o conigurationchanges youve made, you can reset the Switchto the actory deauts.

Power The Power port is where you will

connect the AC power.

The security slot is located on the let side panel o theSwitch.

Let Side Panel

Securty Slot The security slot can be utilizedto attach a lock to the Switch.


7/32

Installation


Chapter

Chapter :Installaton

OverviewThis chapter will explain how to connect network devicesto the Switch. The ollowing diagram shows a typicalnetwork coniguration.

InternetCable/DSL

Modem RouterWireless Access

Point

Powered bySwitch

Desktop Notebook Server

Typical Network Coniguration

When you connect your network devices, make sure youdont exceed the maximum cabling distance o 100 meters(328 eet).

Pre-Installation Considerations

Full-Duplex Considerations

The Switch provides ull-duplex support or its RJ-45

ports. Full-duplex operation allows data to be sent andreceived simultaneously, doubling a ports potential datathroughput. I you will be using the Switch in ull-duplexmode, the maximum cable length using Category 5 cableis 328 eet (100 meters).

1000BASE-T Cable Requirements

All Category 5 UTP cables that are used or 100BASE-TXconnections should also work or 1000BASE-T, providingthat all our wire pairs are connected. However, it isrecommended that or all critical connections, or anynew cable installations, Category 5e (enhanced Category

5) or Category 6 cable should be used. The Category5e speciication includes test parameters that are onlyrecommendations or Category 5. Thereore, the irststep in preparing existing Category 5 cabling or running1000BASE-T is a simple test o the cable installation to besure that it complies with the IEEE 802.3ab standards.

Positioning the Switch

Beore you choose a location or the Switch, observe theollowing guidelines:

Make sure that the Switch is accessible and that the

cables can be connected easily.Keep cabling away rom sources o electrical noise,power lines, and luorescent lighting ixtures.

Position the Switch away rom water and moisturesources.

To ensure adequate air low around the Switch, besure to provide a minimum clearance o two inches(50mm).

Do not stack ree-standing Switches more than ourunits high.


8/32

Installation


Chapter

Placement Options

There are two ways to physically install the Switch, eitherhang the Switch on a wall using its wall-mount slots orplace it on a desktop.

Wall-Mount Placement

You will need 2 suitable screws to mount the Switch.

Suggested Mountng Hardware

2.5-3mm

4-5 mm 1-2 mm

NOTE: Linksys is not responsible or damagesincurred by insecure wall-mounting hardware.

Determine where you want to mount the Switch.Ensure that the wall you use is smooth, lat, dry andsturdy and make sure the location is within reach othe power outlet.

Drill two holes into the wall. Make sure the holes are2 inches apart.

Insert a screw into each hole, and leave 3 mm o itshead exposed.

Maneuver the Switch so the wall-mount slots line up

with the two screws.Place the wall-mount slots over the screws and slidethe Switch down until the screws it snugly into thewall-mount slots.

Congratulations! The Wall-Mount installation o the Switchis complete.

2 inches

Print this page at 100% size, cut alongthe dotted line and place on the wallto drill precise spacing.

Wall Mounting Template

1.

2.

3.

4.

5.

Desktop Placement

Place the Switch on a desktop near an AC powersource.

Keep enough ventilation space or the switch andcheck the environmental restrictions mentioned inAppendix B: Speciications as you are placing theSwitch.

Connect the Switch to network devices according tothe Hardware Installation instructions below.

Hardware Installation

To connect network devices to the Switch, ollow theseinstructions:

Make sure all the devices you will connect to the Switchare powered o.

Connect a Category 5e Ethernet network cable to oneo the numbered ports on the Switch.

NOTE: Reserve port 1 i you are using a networkdevice to provide power to this Switch.

Connect the other end to a PC or other networkdevice.

Repeat steps 2 and 3 to connect additional devices.

Provide power to the Switch in one o two ways:

Connect a Category 5e Ethernet network cablerom port 1 o the Switch to a network device withthe ability to provide Power over Ethernet.

Connect the supplied power cord to the Switchspower port, and plug the other end into anelectrical outlet. When connecting power, alwaysuse a surge protector.

Power on the devices connected to the Switch. Eachactive ports corresponding LED will light up on theSwitch.

Hardware installation is complete.

1.

2.

3.

4.

5.

6.


9/32

Chapter Advanced Configuration


Chapter :Advanced Conguraton

Open your web browser and enter http://19.168.1.5into the address ield. Press the Enter key and the Passwordscreen will appear.

Address Bar

NOTE: The deault IP address is 19.168.1.5.I the IP address has been changed, enter theassigned IP address instead o the deault.

The irst time you open the web-based utility, enter admn(the deault username) in the username ield and enteradmin as the password. Click the OK button. You can seta password later rom the System > System Settings screen.

Login Screen

Setup

The irst screen displayed upon login is the System Settingsscreen. There are 10 options across the top o the screen:System, Port, VLAN, Securty, QoS, STP, Statstcs,Multcast, Admn and Logout. Each option containsscreens that will help you conigure and manage theSwitch.

System > System Settings

The System > System Settings screen displays a summary oSwitch inormation.

System > System Settings

System Name This ield allows you to enter/modiy thename o the Switch.

System Locaton This ield allows you to enter/modiythe location name o the Switch.

MAC Address The MAC address o the Switch is displayedhere.

S/W Verson The sotware version o the Switch isdisplayed here.

IP Address The IP address assigned to the Switch isdisplayed. The deault IP address is 19.168.1.5.

Subnet Mask The Subnet Mask assigned to the Switch isdisplayed. The deault is 55.55.55.0.

Deault Gateway Displays the IP address o the gatewaybetween this device and management stations that existon other network segments. The deault value is 0.0.0.0.

DHCP Server The IP address o the DHCP server.

Enable DHCP When enabled, the Switch will attempt toobtain an IP address rom a DHCP server on your network.I an IP address is not obtained, the Switch will use the IPaddress deined in the IP Address ield below.

IP Address The IP address assigned to the Switchcan be modiied in this ield. The deault IP address is19.168.1.5.

NOTE: I the static IP address is changed, theSwitch will automatically log you out o the

web-based utility. To log back in, you must usethe new Static IP address.

Subnet Mask The Subnet Mask assigned to the Switch canbe modiied in this ield. The deault is 55.55.55.0.

Deault Gateway The IP address o the gateway can bemodiied in this ield. The deault is 0.0.0.0.

Management VLAN Enter the ID o the conigured VLAN(1-4094, no leading zeroes). By deault, all ports on theSwitch are members o VLAN 1. However, the managementstation can be attached to a port belonging to any VLAN,as long as that VLAN has been assigned an IP address.

Username Speciies the username. The deault usernameis admn. Only one admin user is allowed.

Password A new password can be entered in this ield.The password is not displayed as it is entered. Eachcharacter is displayed as a bullet in the password ield.

Web Admn Tmeout (secs) As a security measure, theweb-based utility will timeout ater being idle or theamount o time deined in this ield. I the Switch is idleor the amount o time deined here, login is requiredto return to the web-based utility. The time is entered inseconds. The deault value is 00 seconds.


10/32



Be sure to clickSave Settngs and reboot the Switch bygoing toAdmin > Reboot.

Port > Port Settings

You can manually conigure the speed, duplex, andlow control settings used on speciic ports, or useautonegotiation to allow the Switch to autodetectthe connection settings used by the attached device.Full-duplex mode should be used on ports wheneverpossible to double the throughput o Switch connections.Flow control should also be enabled to control networktraic during periods o congestion and prevent the losso packets when port buer thresholds are exceeded. TheSwitch supports low control based on the IEEE 802.3xstandard.

Ports > Port Settings

Port Displays the port number.

Lnk Status Displays the link status o the port.

Mode The current speed and duplex mode settingsare displayed here. Auto Speed is enabled by deault toallow the Switch to autonegotiate the speed and duplexsettings. The ollowing capabilities are supported:

Auto Speed This option enables autonegotiation.When autonegotiation is enabled, you do not need tospeciy the capabilities to be advertised.

10 Hal Supports 10 Mbps hal-duplex operation.

10 Full Supports 10 Mbps ull-duplex operation.

100 Hal Supports 100 Mbps hal-duplex operation.



Dsabled Disables the port.

Flow Control Indicates whether low control is enabledor not.

LAG Indicates whether the port is a LAG member.

Enable Jumbo Frames Selecting this enables JumboFrame support (up to 9KB).

Be sure to clickSave Settngs to retain any changes.

Port > Static Link Aggregation

You can create multiple links between devices that workas one virtual, aggregate link (LAG). An aggregated linkoers a dramatic increase in bandwidth or network

segments where bottlenecks exist, as well as providing aault-tolerant link between two devices. You can create upto two LAGs on the Switch. Each LAG can contain up toive/eight ports.

Port > Link Aggregation

LAG Displays the LAG number. By selecting the Portnumbers, the port can be added to the LAG group.

ClickSave Settngs to save any changes.

Port > LACP Settings

Ports can be statically grouped into an aggregate link(that is, LAG) to increase the bandwidth o a networkconnection or to ensure ault recovery. Or you can use theLink Aggregation Control Protocol (LACP) to automaticallynegotiate a LAG link between the Switch and anothernetwork device. For dynamic LAGs, the switches have tocomply with LACP. This Switch supports up to two LAGs.For example, a LAG consisting o two 1000 Mbps portscan support an aggregate bandwidth o 4 Gbps whenoperating at ull duplex.

To avoid creating a loop in the network, be sure you enableLACP beore connecting the ports, and also disconnectthe ports beore disabling LACP.

NOTE: LAG port members will have to beconigured with the same speed and duplexmode. A user must ensure the LAG membersports have the same speed and duplex settingsbeore activating an LACP group.


11/32



Port > LACP Settings


Enable LACP Enables LACP.

Admn Key A channel will only be ormed between portshaving the same admin key. This only applies to portslocated on the same switch. The deault setting is auto.


Port > LACP Status

From the LACP Status screen, you will see the LACP Statusor each port, and its partner port number, and operationalport key.

Port > LACP Status

LACP Port Status LACP Status on each interace sincethe device was last rereshed.

Protocol Actve Indicates i the LACP is disabled orenabled on the interace.

Partner Port Number Indicates the port that is in thesame LAG group.

Operatonal Port Key A channel will only be ormedbetween ports having the same operational port key. Thisonly applies to ports located on the same switch.

VLAN > VLAN Settings

A VLAN is a group o ports that can be located anywherein the network, but communicate as though they belongto the same physical segment. VLANs help to simpliy

network management by allowing you to move devicesto a new VLAN without having to change any physicalconnections. VLANs can be easily organized to relectdepartmental groups (such as Marketing or R&D), usagegroups (such as e-mail), or multicast groups (used ormultimedia applications such as videoconerencing). Youcan create up to 16 VLANs on the Switch.

To create a single VLAN, enter the VLAN ID, and clickAdd.Use the VLAN ID screen to conigure port members or LAGmembers or a speciic VLAN index.

VLAN > VLAN Settings

VLAN ID ID o conigured VLAN (1-4094, no leadingzeroes).

To remove a VLAN, select the VLANs in the VLAN list, then

clickDelete.


VLAN > VLAN Port Settings

You can conigure VLAN behavior or speciic interaces,including the mode, accepted rame type, VLAN identiier(PVID), and ingress iltering.

VLAN > VLAN Port Settings


12/32



Enable Tx Force Untag When this option is enabled,all egress rames rom this port become untagged. Thedeault value is Dsable. When this unction is disabled,only rames with the VLAN ID equal to the PVID will becomeuntagged, otherwise, rames are sent with a VLAN tag.

Enable Ingress Flter Determines how to process ramestagged or VLANs or which the ingress port is not amember. The deault value is enabled. Ingress ilteringonly aects tagged rames. I ingress iltering is disabledand a port receives rames with a VLAN tag that uses adierent PVID than the receiving port, the packet typeswill be orwarded to the port belonging to the appropriateVLAN (determined by the VLAN tag). I ingress iltering isenabled and a port receives rames tagged or VLANs orwhich it is not a member, these rames will be discarded.

Acceptable Frame Type Sets the interace to accept allrame types, including tagged or untagged rames, or

only tagged rames. When set to receive all rame types,any received rames that are untagged are orwarded tothe VLAN based on the PVID o its ingress port. All rametypes are selected by deault.

PVID (Port VLAN denter) VLAN ID assigned tountagged rames received on the interace. The deaultvalue is 1. For all other VLANs, an interace must irst beconigured as an untagged member beore you can assignits PVID to that group. Fill in the required settings or each interace, then clickSave Settngs.

Security > 802.1X Settings

Network switches can provide open and easy accessto network resources by simply attaching a client PC.Although this automatic coniguration and access is adesirable eature, it also allows unauthorized personnelto easily intrude and possibly gain access to sensitivenetwork data.

Security > 802.1X Settings

The IEEE 802.1X (dot1X) standard deines a port-basedaccess control procedure that prevents unauthorizedaccess to a network by requiring users to irst submitcredentials or authentication. Access to all switch ports ina network can be centrally controlled rom a server, which

means that authorized users can use the same credentialsor authentication rom any point within the network.

This Switch uses the Extensible Authentication Protocolover LANs (EAPOL) to exchange authentication protocolmessages with the client, and a remote RADIUSauthentication server to veriy user identity and accessrights. When a client connects to a switch port, the Switchresponds with an EAPOL identity request. The clientprovides its identity (such as a user name) in an EAPOLresponse to the Switch, which it orwards to the RADIUSserver. The RADIUS server veriies the client identity andsends an access challenge back to the client. The EAP packet

rom the RADIUS server contains not only the challenge,but the authentication method to be used. The client canreject the authentication method and request another,depending on the coniguration o the client sotwareand the RADIUS server. The authentication method mustbe MD5. The client responds to the appropriate methodwith its credentials, such as a password or certiicate.The RADIUS server veriies the client credentials andresponds with an accept or reject packet. I authenticationis successul, the Switch allows the client to access thenetwork. Otherwise, network access is denied and theport remains blocked.

The operation o 802.1X on the Switch requires theollowing:

The Switch must have an IP address assigned.

RADIUS authentication must be enabled on the Switchand the IP address o the RADIUS server speciied.

802.1X must be enabled globally or the Switch.

Each Switch port that will be used must be set to dot1XAuto mode.

Each client that needs to be authenticated musthave dot1X client sotware installed and properlyconigured.

The RADIUS server and 802.1X client support EAP. (TheSwitch only supports EAPOL in order to pass the EAPpackets rom the server to the client.)

The RADIUS server and client also have to support thesame EAP authentication type MD5. (Some clientshave native support in Windows, otherwise the dot1xclient must support it.)

80.1X Mode Enables or disables 802.1X mode.

RADIUS IP Enter the IP address o the server.


13/32



RADIUS UDP Port Enter the UDP Port o the server. TheUDP port is used to veriy the RADIUS server authentication.The deault value is 181.

Key Strng Enter the secret key string as deined on

the RADIUS server. The secret key string is used orauthenticating and encrypting communications betweenthe device and the RADIUS server.

Admn State Sets the authentication mode to one o theollowing options:

Auto Requires a dot1x-aware client to be authorizedby the authentication server. Clients that are notdot1x-aware will be denied access.

Force-Authorzed Forces the port to grant access toall clients, either dot1x-aware or otherwise. (This is thedeault setting.)

Force-Unauthorzed Forces the port to deny accessto all clients, either dot1x-aware or otherwise.

Port State Displays the state o the 802.1X or each port.

Re-authentcate It will trigger the switch to ask aconnected client to restart authentication process.

Force Rentalze It will trigger the speciic port o theswitch to restart 802.1X process.

Statstcs The Switch can display statistics or 802.1Xprotocol exchanges or any port.


Security > 802.1X ParameterWhen 802.1X is enabled, you need to conigure theparameters or the authentication process that runsbetween the client and the Switch. The client identitylookup process that runs between the Switch andauthentication server also needs to be conigured. Theseparameters are described in this section.

Security > 802.1X Parameter

Enable Reauthentcaton Enables re-authentication.

Reauthtentcaton Perod (1-600 seconds) Setsthe time period ater which a connected client must bere-authenticated. The deault value is 600 seconds.

EAP Tmeout (1-55 seconds) Sets the time periodduring an authentication session that the Switch waitsbeore retransmitting an EAP packet. The deault value is0 seconds.


Security > Static MAC Address

Static MAC Address allows you to conigure a switch portwith the MAC address o one or more devices that areauthorized to access the network through that port. TheMAC address is bound to the ingress port speciied on thelist and does not allow the MAC address to change ports.Only incoming traic with source addresses already storedin the static address table will be accepted as authorizedto access the network through that port. MAC addresseson the list do not age out.

Security > Static MAC Address

MAC Address Enter the speciic MAC address or thesystem to store and decide the destination port toorward.

VLAN ID Enter the VLAN ID associated with the speciicMAC address.

Port Select the port associated with the speciic MACaddress.


Security > Management Access List

Management Access List speciies which Source IPaddresses can manage the device.

Security > Management Access List

Enable Management Access Lst Enable IP Access List.


14/32



Management IP address 1 Enter the IP address o adevice that you wish to allow manage the Switch.

Management IP address Enter the IP address o asecond device that you wish to allow manage the Switch.

Management IP address Enter the IP address o a thirddevice that you wish to allow manage the Switch.

Management IP address Enter the IP address o aourth device that you wish to allow manage the Switch.

Management IP address 5 Enter the IP address o a ithdevice that you wish to allow manage the Switch.


Security > Storm Control

Rate Threshold

The maximum rate (packets per second) at which unknownpackets are orwarded.

Security > Storm Control

Broadcast Rate You can select the storm controlbroadcast rate threshold rom the list or select the deaultvalue, No Lmt.

Multcast Rate You can select the storm control multicastrate threshold rom the list or select the deault value, NoLmt.


QoS > QoS Settings

Network traic is usually unpredictable and the only basicassurance that can be oered is best eort traic delivery.To overcome this challenge, Quality o Service (QoS)is applied throughout the network. This ensures thatnetwork traic is prioritized according to speciied criteria,and that speciic traic receives preerential treatment.QoS in the network optimizes network perormance andentails two basic acilities:

Classiying incoming traic into handling classes, basedon an attribute, including:

The ingress interace

Packet content

A combination o these attributes

Providing various mechanisms or determining theallocation o network resources to dierent handling

classes, including:The assignment o network traic to a particularhardware queue

The assignment o internal resources

You can set the Switch to service the queues based ona strict rule that requires all traic in a higher priorityqueue to be processed beore lower priority queues areserviced, or use Weighted Round-Robin (WRR) queuingthat speciies a relative weight o each queue. WRRuses a pre-deined relative weight or each queue thatdetermines the percentage o service time the Switchservices each queue beore moving on to the next queue.This prevents the head-o-line blocking that can occurwith strict priority queuing.

QoS > QoS Settings

Queue Mode

Set the Queue Mode to Strict Priority or WRR.

Strct Prorty Services the egress queues in sequentialorder, transmitting all traic in the higher priority queuesbeore servicing lower priority queues.

WRR Weighted Round-Robin shares bandwidth at theegress ports by using scheduling weights 1, 2, 4, 8 orqueues 1 through 4 respectively.

WRR Weght Displays the WRR weights to queues.


15/32



QoS Mode

Set the QoS Mode to QoS Disabled, 802.1p, Port Based, orDSCP.

802.1pEnabled? 802.1p QoS

YesYes

No

No

Port QoS

No

No

DSCP QoS

Yes YesTagged?

DSCPFound?

PacketDSCP

Enabled?

QoS Mode Priority Diagram

802.1p

802.1p QoS Mode allows you to speciy data packetpriority based on the 802.1p value in VLAN priority tago the packet. Users can map 802.1p to one o 4 priorityqueues.

Prioritize Traffic

Allows you to select a traic prioritization setting. Thedeault value is Custom.

802.1p Settings

The deault 802.1p settings are shown in the ollowingtable:

Deault 80.1p Settngs

80.1p Value Prorty Level

0 normal

1 low

2 low

3 normal

4 medium5 medium

6 high

7 high

Port-Based

Port-Based QoS mode allows you to set priority levels oreach port.

Port-Based Settings

This allows customization o priority levels or speciicports. By deault, all ports are set to high priority.

DSCPThe Switch supports a common method o prioritizing IPtraic to meet application requirements. Traic prioritiescan be mapped to one o 4 priority queues based on theDSCP (Dierentiated Services Code Point) value.

DSCP Settings

DSCP Settings enable mapping DSCP values to speciicpriority levels. The deault DSCP settings are shown in theollowing table:

DSCP Settngs

DSCP Value (0-6) Prorty

46 high

34 medium

24 normal

All others low

DSCP Value Indicates the Dierentiated Services CodePoint value in the incoming packet.

Prorty Maps the DSCP value to the selected prioritylevel.


STP > STP Settings

The Spanning Tree Algorithm (STA) can be used to detectand disable network loops, and to provide backup linksbetween switches, bridges or routers. This allows theSwitch to interact with other bridging devices (that is, anSTA-compliant switch, bridge or router) in your networkto ensure that only one route exists between any twostations on the network, and provide backup links whichautomatically take over when a primary link goes down.

STP > STP Settings


16/32



System Prorty Bridge priority is used in selecting theroot device, root port, and designated port. The devicewith the highest priority becomes the STA root device.However, i all devices have the same priority, the devicewith the lowest MAC address will then become the root

device. The deault value is 68. The range is 0 to 61440in steps o 4096.

Hello Tme Interval (in seconds) at which the root devicetransmits a coniguration message. The deault is seconds. The range is 0 to 10 seconds.

Max Age The maximum time (in seconds) a device canwait without receiving a coniguration message beoreattempting to reconigure. The deault max age is 0seconds. The range is 6 to 40 seconds.

Forward Delay The maximum time (in seconds) thisdevice will wait beore changing states (i.e., discarding

to learning to orwarding). The deault is 15 seconds. Therange is 4 to 30 seconds.

STP Port Settings


Enable STP Indicates i STP is enabled on the port.

Port Fast Indicates i Port Fast is enabled on the port.I Port Fast mode is enabled or a port, the Port Stateis automatically placed in the Forwarding state whenthe port link is up. Port Fast optimizes the STP protocolconvergence.

Path Cost The path cost is used to determine the bestpath between devices. The deault value is auto.


STP > STP Status

From the STP Status screen, you will see the STP Status oreach VLAN Bridge, and or each port.

STP > STP Status

STP VLAN Bridge Overview

VLAN ID The VLAN ID that has been assigned to theinterace.

Brdge ID A unique identiier or this bridge, consisting othe bridge priority and MAC address (where the address istaken rom the Switch system).

Hello Tme Displays the Hello Time value as deined on

the STP > STP Settings screen.Max Age Displays the Max Age value as deined on theSTP > STP Settings screen.

Fwd Delay Displays the Forward Delay value as deinedon the STP > STP Settings screen.

Topology Displays the topology.

Root ID The Root ID is displayed here.

STP Port Status

STP Status on each interace since the device was lastrereshed.

Port The number o the port.

VLAN The VLAN that has been assigned to the port.

Path Cost The best path between devices.

Port Fast Indicates the device is the end or a switchconnection.

Port State Indicates i the STP is disabled or enabled onthe interace.

Statistics > Statistics Overview

You can display standard statistics on network traic oreach port o the device.

From the Statistics Overview screen, you will see thestandard statistics or each port o the device. Use theReresh button to update the statistics.

Statistics > Statistics Overview

Port Displays the port that the data applies to.

Tx Byte Displays the number o octets transmitted on theport since the device was last rereshed.

Tx Frames Displays the number o rames transmitted onthe port since the device was last rereshed.

Rx Bytes Displays the number o octets received on theport since the device was last rereshed.


17/32



Rx Frames Displays the number o rames received onthe port since the device was last rereshed.

Tx Errors Displays the number o transmitted packetswith errors that have occurred on the port since the device

was last rereshed.Rx Errors Displays the number o received packets witherrors that have occurred on the port since the device waslast rereshed.

Tx Broadcast Displays the number o good broadcastpackets transmitted on the port since the device was lastrereshed.

Rx Broadcast Displays the number o good broadcastpackets received on the port since the device was lastrereshed.

Statistics > IGMP Status

From the IGMP Status screen, you will see the IGMP Statusor each VLAN interace.

Statistics > IGMP Status

VLAN ID Displays the VLAN ID .

Querer Indicates the IGMP router is active or idle.

Queres Transmtted Displays the number o queriesthat have been transmitted.

Queres Receved Displays the number o queries thathave been received.

v1 Reports Displays the number o IGMP v1 reportpackets that have been received by the Switch.

v Reports Displays the number o IGMP v2 reportpackets that have been received by the Switch.

v Leaves Displays the number o IGMP v2 leave packetsthat have been received by the Switch.

Multicast > IGMP Settings

When IGMP Snooping is enabled globally, all IGMP packetsare orwarded to the CPU. The CPU analyzes the incomingpackets and determines:

The ports that want to join which Multicast groups andissue the IGMP join packet

The ports that have Multicast routers generating IGMPqueries

Ports requesting to join a speciic Multicast group issue anIGMP report, speciying that Multicast group is acceptingmembers. This results in the creation o the Multicastiltering database.

Multicast > IGMP Settings

NOTE: All unctions listed on the Multicast> IGMP Settings screen require Enable IGMPSnooping to be enabled beore settings willtake eect.

Enable IGMP Snoopng Indicates i IGMP Snooping isenabled on the device.

Enable Unregstered IP Multcast Floodng Indicatesi Unregistered IP Multicast Flooding is enabled on thedevice.

VLAN ID Displays the VLAN ID number.

Enable IGMP Snoopng Indicates i IGMP Snooping isenabled on each VLAN interace.

Enable IGMP Queryng Indicates i IGMP Querying isenabled on each VLAN interace.


Admin > Ping

You can use a ping to see i another site on the networkcan be reached. Ping sends ICMP echo request packets toanother node on the network.

Admin > Ping


18/32



Ping Parameters

Target IP Address Enter the IP Address o the device youwant to ping.

Count Set the maximum count to the target IP Addressor each attempt.

Tme Out Set the time out (in seconds) interval i thedevice does not respond.


Admin > Port Mirror

You can mirror traic rom any source port to a target portor real-time analysis. The target port speed should matchor exceed source port speed, otherwise traic may bedropped rom the monitor port. The Switch supports onlyone mirror session.

Admin > Port Mirror

Source Port The port whose traic will be monitored.

Target Port The port that will mirror the traic on thesource port.

NOTE: The Switch supports bi-directional portmirroring (transmit and receive).


Admin > Factory Deault

Restores the Switchs actory deault settings.

Admin > Factory Deault

Click the Restore to Deault button, then it will restorethe actory deault settings to the switch.

Admin > Reboot

Restarts the Switch retaining the current conigurationsettings.

Admin > Reboot

Click the Reboot button, then it will restart the Switch.

Admin > Save Coniguration

This Save Configuration screen is used to save and retrievethe Switchs coniguration inormation using your Webbrowser.

Conguraton Upload Select this option to load apreviously saved coniguration ile (.cg). To do so, perormthe ollowing steps:

Click the Browse button.

Locate the appropriate ile and clickOpen.

Click the Upload button to load the ile.

Conguraton Backup Select this option to save theSwitch settings to a coniguration ile (.cg).

Click the Save button.

ClickSave when prompted to open, save, or cancel.

Select the location where the ile should be saved andclickSave.

1.

2.

3.

1.

2.

3.


19/32



Admin > Firmware Upgrade

Allows you to upgrade the irmware using your Webbrowser.

Admin > FIrmware Upgrade

Frmware Upgrade To do so, perorm the ollowingsteps:

Click the Browse button.

Locate the appropriate ile and clickOpen.

Click the Proceed button to load the ile.

1.

2.

3.


20/32

16

Glossary

5-Port and 8-Port 10/100/1000 Ggabt Smart Swtch wth PD and AC Power

Appendx A

Appendx A:Glossary

This glossary contains some basic networking terms youmay come across when using this product.

WEB: For additional terms, please visit theglossary at www.lnksys.com/glossary

Access Mode Speciies the method by which user accessis granted to the system.

Access Pont A device that allows wireless-equippedcomputers and other devices to communicate with awired network. Also used to expand the range o a wireless

network.Access Proles Allows network managers to deineproiles and rules or accessing the device. Access tomanagement unctions can be limited to user groups,which are deined by the ollowing criteria:

Ingress interaces

Source IP address and/or Source IP subnets.

ACE Filters in Access Control Lists (ACL) that determinewhich network traic is orwarded. An ACE is based on theollowing criteria:

Protocol

Protocol ID

Source Port

Destination Port

Wildcard Mask

Source IP Address

Destination IP Address

ACL (Access Control Lst) Access Control Lists areused to grant, deny, or limit access devices, eatures, orapplications.

Auto-negotaton Allows 10/100 Mbps or 10/100/1000Mbps Ethernet ports to automatically establish theoptimal duplex mode, low control, and speed.

Back Pressure A mechanism used with Hal Duplex modethat enables a port not to receive a message.

Bandwdth The transmission capacity o a given deviceor network.

Bandwdth Assgnments Indicates the amount obandwidth assigned to a speciic application, user, and/orinterace.

Baud Indicates the number o signaling elementstransmitted each second.

Best Eort Indicates that traic is assigned to the lowestpriority queue, and packet delivery is not guaranteed.

Bt A binary digit.Boot To start a device and cause it to start executinginstructions.

Browser An application program that provides a way tolook at and interact with all the inormation on the WorldWide Web.

Brdge A device that connect two networks. Bridges arehardware speciic, however they are protocol independent.Bridges operate at Layer 1 and Layer 2 levels.

Broadcast Doman Devices sets that receive broadcastrames originating rom any device within a designated

set. Routers bind Broadcast domains, because routers donot orward broadcast rames.

Broadcast Storm An excessive amount o broadcastmessages simultaneously transmitted across a networkby a single port. Forwarded message responses areheaped onto the network, overloading network resourcesor causing the network to time out.

Burst A packet transmission at aster than normal rates.Bursts are limited in time and only occur under speciicconditions.

Burst Sze Indicates the burst size transmitted at a aster

than normal rate.Byte A unit o data that is usually eight bits long

Cable Modem A device that connects a computer to thecable television network, which in turn connects to theInternet.

CBS (Commtted Burst Sze) Indicates the maximumnumber o data bits transmitted within a speciic timeinterval.

CIR (Commtted Inormaton Rate) The data rate isaveraged over a minimum time increment.

Class Maps An aspect o Quality o Service system that is

comprised o an IP ACL and/or a MAC ACL. Class maps areconigured to match packet criteria, and are matched topackets in a irst-it ashion.

Combo Ports A single logical port with two physicalconnections, including an RJ-45 connection and a SFPconnection.

Communtes Speciies a group o users which retain thesame system access rights.


21/32

1

Glossary


Appendx A

CoS (Class o Servce) The 802.1p priority scheme. CoSprovides a method or tagging packets with priorityinormation. A CoS value between 0-7 is added to theLayer II header o packets, where zero is the lowest priorityand seven is the highest.

DDNS (Dynamc Doman Name System) Allows thehosting o a website, FTP server, or e-mail server with aixed domain name (e.g., www.xyz.com) and a dynamic IPaddress.

Deault Gateway A device that orwards Internet traicrom your local area network.

DHCP (Dynamc Host Conguraton Protocol) Anetworking protocol that allows administrators to assigntemporary IP addresses to network computers by leasingan IP address to a user or a limited amount o time, insteado assigning permanent IP addresses.

DHCP Clents An Internet host using DHCP to obtainconiguration parameters, such as a network address.

DHCP Server An Internet host that returns conigurationparameters to DHCP clients.

DNS (Doman Name Server) The IP address o your ISPsserver, which translates the names o websites into IPaddresses.

Doman A speciic name or a network o computers.

Download To receive a ile transmitted over a network.

DSL (Dgtal Subscrber Lne) An always-on broadband

connection over traditional phone lines.DSCP (DServ Code Pont) Provides a method otagging IP packets with QoS priority inormation.

Dynamc IP Address A temporary IP address assigned bya DHCP server.

EIGRP (Enhanced Interor Gateway RoutngProtocol) Provides ast convergence, support or variable-length subnet mask, and supports multiple network layerprotocols.

Encrypton Encoding data transmitted in a network.

Ethernet IEEE standard network protocol that speciies

how data is placed on and retrieved rom a commontransmission medium.

Frmware The programming code that runs a networkingdevice.

Flow Control Enables lower speed devices tocommunicate with higher speed devices. This isimplemented by the higher speed device reraining romsending packets.

FTP (Fle Transer Protocol) A protocol used to transeriles over a TCP/IP network.

Full Duplex The ability o a networking device to receiveand transmit data simultaneously.

GARP (General Attrbutes RegstratonProtocol) Registers client stations into a multicast

domain.Gateway A device that interconnects networks withdierent, incompatible communications protocols.

GBIC (GgaBt Interace Converter) A hardware moduleused to attach network devices to iber-based transmissionsystems. GBIC converts the serial electrical signals to serialoptical signals and vice versa.

GVRP (GARP VLAN Regstraton Protocol) Registersclient stations into a VLANs.

Hal Duplex Data transmission that can occur in twodirections over a single line, but only one direction at a

time.HTTP (HyperText Transport Protocol) Thecommunications protocol used to connect to servers onthe World Wide Web.

HTTPS (HyperText Transport Protocol Secure) Anextension to the standard HTTP protocol that providesconidentiality by encrypting the traic rom the website.By deault this protocol uses TCP port 443.

ICMP (Internet Control Message Protocol) Allows thegateway or destination host to communicate with thesource host. For example, to report a processing error.

IGMP (Internet Group Management Protocol) Allowshosts to notiy their local switch or router that they wantto receive transmissions assigned to a speciic multicastgroup.

IP (Internet Protocol) A protocol used to send data overa network.

IP Address The address used to identiy a computer ordevice on a network.

IPCONFIG A Windows 2000 and XP utility that displaysthe IP address or a particular networking device.

IPSec (Internet Protocol Securty) A VPN protocol used

to implement secure exchange o packets at the IP layer.ISP (Internet Servce Provder) A company that providesaccess to the Internet.

Jumbo Frames Enable transporting identical data inewer rames. Jumbo Frames reduce overhead, lowerprocessing time, and ensure ewer interrupts.

LAG (Lnk Aggregated Group) Aggregates ports orVLANs into a single virtual port or VLAN.

LAN The computers and networking products that makeup your local network.


22/32

18

Glossary


Appendx A

MAC (Meda Access Control) Address The uniqueaddress that a manuacturer assigns to each networkingdevice.

Mask A ilter that includes or excludes certain values, or

example parts o an IP address.Mbps (MegaBts Per Second) One million bits persecond; a unit o measurement or data transmission.

MD5 (Message Dgest 5) An algorithm that produces a128-bit hash. MD5 is a variation o MD4, and increases MD4security. MD5 veriies the integrity o the communicationand authenticates the origin o the communication.

MDI (Meda Dependent Interace) A cable used or endstations.

MDIX (Meda Dependent Interace wth Crossover) Acable used or hubs and switches.

MIB (Management Inormaton Base) MIBs containinormation describing speciic aspects o networkcomponents.

Multcast Transmits copies o a single packet to multipleports.

Network A series o computers or devices connected orthe purpose o data sharing, storage, and/or transmissionbetween users.

NMS (Network Management System) An interace thatprovides a method o managing a system.

OID (Object Identer) Used by SNMP to identiy

managed objects. In the SNMP Manager/Agent networkmanagement paradigm, each managed object must havean OID to identiy it.

Packet A unit o data sent over a network.

Png (Packet INternet Groper) An Internet utility usedto determine whether a particular IP address is online.

Polcng Determines i traic levels are within a speciiedproile. Policing manages the maximum traic rate usedto send or receive packets on an interace.

Port The connection point on a computer or networkingdevice used or plugging in cables or adapters.

Port Mrrorng Monitors and mirrors network traic byorwarding copies o incoming and outgoing packetsrom one port to a monitoring port.

Power over Ethernet (PoE) A technology enabling anEthernet network cable to deliver both data and power.

QoS (Qualty o Servce) Provides policies that containsets o ilters (rules). QoS allows network managersto decide how and what network traic is orwardedaccording to priorities, application types, and source anddestination addresses.

RADIUS (Remote Authentcaton Dal-In UserServce) A protocol that uses an authentication server tocontrol network access.

RJ-5 (Regstered Jack-5) An Ethernet connector that

holds up to eight wires.RMON (Remote Montorng) Provides networkinormation to be collected rom a single workstation.

Router A networking device that connects multiplenetworks together.

RSTP (Rapd Spannng Tree Protocol) Detects and usesnetwork topologies that allow a aster convergence o thespanning tree, without creating orwarding loops.

Server Any computer whose unction in a network is toprovide user access to iles, printing, communications,and other services.

SMTP (Smple Mal Transer Protocol) The standard e-mail protocol on the Internet.

SNMP (Smple Network Management Protocol) Awidely used network monitoring and control protocol.

SSH Secure Shell. A utility that uses strong authenticationand secure communications to log in to another computerover a network.

SSL (Secure Socket Layer) Encryption technology orthe Internet used to provide secure transactions, such asthe transmission o credit card numbers or e-commerce.

Statc IP Address A ixed address assigned to a computer

or device that is connected to a network.

STP (Spannng Tree Protocol) Prevents loops in networktraic. The Spanning Tree Protocol (STP) provides treetopography or any arrangement o bridges. STP providesone path between end stations on a network, eliminatingloops.

Subnet (Sub-network) Subnets are portions o anetwork that share a common address component. InTCP/IP networks, devices that share a preix are part othe same subnet. For example, all devices with a preix o157.100.100.100 are part o the same subnet.

Subnet Mask An address code that determines the sizeo the network.

Swtch Filters and orwards packets between LANsegments. Switches support any packet protocol type.

TACACS+ (Termnal Access Controller Access ControlSystem Plus) Proprietary Cisco enhancement to TerminalAccess Controller Access Control System ( TACACS). Providesadditional support or authentication, authorization, andaccounting.


23/32

19

Glossary


Appendx A

TCP (Transmsson Control Protocol) A network protocolor transmitting data that requires acknowledgementrom the recipient o data sent.

TCP/IP (Transmsson Control Protocol/Internet

Protocol) A set o instructions PCs use to communicateover a network.

Telnet A user command and TCP/IP protocol used oraccessing remote PCs.

TFTP (Trval Fle Transer Protocol) A version o theTCP/IP FTP protocol that has no directory or passwordcapability.

Throughput The amount o data moved successullyrom one node to another in a given time period.

Trunkng Link Aggregation. Optimizes port usage bylinking a group o ports together to orm a single trunk

(aggregated groups).TX Rate Transmission Rate.

UDP (User Data Protocol) Communication protocol thattransmits packets but does not guarantee their delivery.

Upgrade To replace existing sotware or irmware with anewer version.

Upload To transmit a ile over a network.

URL (Unorm Resource Locator) The address o a ilelocated on the Internet.

VLAN (Vrtual Local Area Networks) Logical subgroups

that constitute a Local Area Network (LAN). This is done insotware rather than deining a hardware solution.

WAN (Wde Area Network) Networks that cover a largegeographical area.

Wldcard Mask Speciies which IP address bits areused, and which bits are ignored. A wild card masko 255.255.255.255 indicates that no bit is important.A wildcard o 0.0.0.0 indicates that all the bits areimportant.

For example, i the destination IP address is 149.36.184.198and the wildcard mask is 255.36.184.00, the irst two bitso the IP address are used, while the last two bits are

ignored.


24/32


25/32


26/32

Warranty and Regulatory Information


Appendx C

Appendx C:Warranty and Regulatory

InormatonLimited Warranty

Linksys warrants to You that, or a period o ive years(the Warranty Period), your Linksys Product will besubstantially ree o deects in materials and workmanshipunder normal use. Your exclusive remedy and Linksysentire liability under this warranty will be or Linksys atits option to repair or replace the Product or reund Yourpurchase price less any rebates. This limited warrantyextends only to the original purchaser.

I the Product proves deective during the WarrantyPeriod call Linksys Technical Support in order to obtaina Return Authorization Number, i applicable. BE SURETO HAVE YOUR PROOF OF PURCHASE ON HAND WHENCALLING. I You are requested to return the Product, markthe Return Authorization Number clearly on the outsideo the package and include a copy o your original prooo purchase. RETURN REQUESTS CANNOT BE PROCESSEDWITHOUT PROOF OF PURCHASE. You are responsibleor shipping deective Products to Linksys. Linksys paysor UPS Ground shipping rom Linksys back to You only.Customers located outside o the United States o Americaand Canada are responsible or all shipping and handling

charges.

ALL IMPLIED WARRANTIES AND CONDITIONS OFMERCHANTABILITY OR FITNESS FOR A PARTICULARPURPOSE ARE LIMITED TO THE DURATION OF THEWARRANTY PERIOD. ALL OTHER EXPRESS OR IMPLIEDCONDITIONS, REPRESENTATIONS AND WARRANTIES,INCLUDING ANY IMPLIED WARRANTY OF NON-INFRINGEMENT, ARE DISCLAIMED. Some jurisdictions donot allow limitations on how long an implied warrantylasts, so the above limitation may not apply to You. Thiswarranty gives You speciic legal rights, and You may alsohave other rights which vary by jurisdiction.

This warranty does not apply i the Product (a) has beenaltered, except by Linksys, (b) has not been installed,operated, repaired, or maintained in accordance withinstructions supplied by Linksys, or (c) has been subjectedto abnormal physical or electrical stress, misuse,negligence, or accident. In addition, due to the continualdevelopment o new techniques or intruding upon andattacking networks, Linksys does not warrant that theProduct will be ree o vulnerability to intrusion or attack.

TO THE EXTENT NOT PROHIBITED BY LAW, IN NO EVENTWILL LINKSYS BE LIABLE FOR ANY LOST DATA, REVENUEOR PROFIT, OR FOR SPECIAL, INDIRECT, CONSEQUENTIAL,INCIDENTAL OR PUNITIVE DAMAGES, REGARDLESS OF THETHEORY OF LIABILITY (INCLUDING NEGLIGENCE), ARISING

OUT OF OR RELATED TO THE USE OF OR INABILITY TOUSE THE PRODUCT (INCLUDING ANY SOFTWARE), EVENIF LINKSYS HAS BEEN ADVISED OF THE POSSIBILITY OFSUCH DAMAGES. IN NO EVENT WILL LINKSYS LIABILITYEXCEED THE AMOUNT PAID BY YOU FOR THE PRODUCT.The oregoing limitations will apply even i any warranty orremedy provided under this Agreement ails o its essentialpurpose. Some jurisdictions do not allow the exclusion orlimitation o incidental or consequential damages, so theabove limitation or exclusion may not apply to You.

Please direct all inquiries to: Linksys, P.O. Box 18558, Irvine,CA 92623.


27/32



Appendx C

FCC Statement

This product has been tested and complies with thespeciications or a Class B digital device, pursuant to Part15 o the FCC Rules. These limits are designed to provide

reasonable protection against harmul intererence ina residential installation. This equipment generates,uses, and can radiate radio requency energy and, i notinstalled and used according to the instructions, maycause harmul intererence to radio communications.However, there is no guarantee that intererence will notoccur in a particular installation. I this equipment doescause harmul intererence to radio or television reception,which is ound by turning the equipment o and on, theuser is encouraged to try to correct the intererence byone or more o the ollowing measures:

Reorient or relocate the receiving antenna

Increase the separation between the equipment ordevices

Connect the equipment to an outlet other than thereceivers

Consult a dealer or an experienced radio/TV technicianor assistance

Saety Notices

Caution: To reduce the risk o ire, use only No.26 AWG orlarger telecommunication line cord.

Do not use this product near water, or example, in a wetbasement or near a swimming pool.

Avoid using this product during an electrical storm. Theremay be a remote risk o electric shock rom lightning.

WARNING: This product contains lead, knownto the State o Caliornia to cause cancer, andbirth deects or other reproductive harm. Washhands ater handling.

Industry Canada Statement

This device complies with Industry Canada ICES-003 rule.

Operation is subject to the ollowing two conditions:

This device may not cause intererence and

This device must accept any intererence, includingintererence that may cause undesired operation othe device.

1.

2.

Rglement dIndustry Canada

Cet appareil est conorme la norme NMB003 dIndustrieCanada.

Le onctionnement est soumis aux conditions suivantes :

Ce priphrique ne doit pas causer dinterrences;

Ce priphrique doit accepter toutes les interrencesreues, y compris celles qui risquent dentraner unonctionnement indsirable.

1.

2.


28/32



Appendx C

User Inormation or Consumer Products

Covered by EU Directive 2002/96/EC on

Waste Electric and Electronic Equipment

(WEEE)This document contains important inormation or userswith regards to the proper disposal and recycling oLinksys products. Consumers are required to comply withthis notice or all electronic products bearing the ollowingsymbol:

Englsh - Envronmental Inormaton or Customers nthe European Unon

European Directive 2002/96/EC requires that the equipmentbearing this symbol on the product and/or its packaging mustnot be disposed o with unsorted municipal waste. The symbolindicates that this product should be disposed o separatelyrom regular household waste streams. It is your responsibility todispose o this and other electric and electronic equipment viadesignated collection acilities appointed by the government orlocal authorities. Correct disposal and recycling will help prevent

potential negative consequences to the environment andhuman health. For more detailed inormation about the disposalo your old equipment, please contact your local authorities,waste disposal service, or the shop where you purchased theproduct.

(Bulgaran) -

2002/96/EC , / , . ,

. . . - , , .

Cetna (Czech) - Inormace o ochran votnhoprosted pro zkaznky v zemch Evropsk une

Evropsk smrnice 2002/96/ES zakazuje, aby zazen oznaentmto symbolem na produktu anebo na obalu bylo likvidovnos netdnm komunlnm odpadem. Tento symbol udv,

e dan produkt mus bt likvidovn oddlen od bnhokomunlnho odpadu. Odpovdte za likvidaci tohoto produktua dalch elektrickch a elektronickch zazen prostednictvmurench sbrnch mst stanovench vldou nebo mstnmiady. Sprvn likvidace a recyklace pomh pedchzetpotencilnm negativnm dopadm na ivotn prosted a lidskzdrav. Podrobnj inormace o likvidaci starho vybaven silaskav vydejte od mstnch ad, podniku zabvajcho selikvidac komunlnch odpad nebo obchodu, kde jste produktzakoupili.

Dansk (Dansh) - Mljnormaton or kunder EU

EU-direktiv 2002/96/EF krver, at udstyr der brer dette symbol

p produktet og/eller emballagen ikke m bortskaes somusorteret kommunalt aald. Symbolet betyder, at dette produktskal bortskaes adskilt ra det almindelige husholdningsaald.Det er dit ansvar at bortskae dette og andet elektrisk ogelektronisk udstyr via bestemte indsamlingssteder udpegeta staten eller de lokale myndigheder. Korrekt bortskaelseog genvinding vil hjlpe med til at undg mulige skader ormiljet og menneskers sundhed. Kontakt venligst de lokalemyndigheder, renovationstjenesten eller den butik, hvor duhar kbt produktet, angende mere detaljeret inormation ombortskaelse a dit gamle udstyr.

Deutsch (German) - Umweltnormaton r Kundennnerhalb der Europschen Unon

Die Europische Richtlinie 2002/96/EC verlangt, dass technischeAusrstung, die direkt am Gert und/oder an der Verpackung mitdiesem Symbol versehen ist , nicht zusammen mit unsortiertemGemeindeaball entsorgt werden dar. Das Symbol weist darauhin, dass das Produkt von regulrem Haushaltmll getrenntentsorgt werden sollte. Es liegt in Ihrer Verantwortung, diesesGert und andere elektrische und elektronische Gerte berdie dar zustndigen und von der Regierung oder rtlichenBehrden dazu bestimmten Sammelstellen zu entsorgen.Ordnungsgemes Entsorgen und Recyceln trgt dazu bei,potentielle negative Folgen r Umwelt und die menschlicheGesundheit zu vermeiden. Wenn Sie weitere Inormationen zurEntsorgung Ihrer Altgerte bentigen, wenden Sie sich bitte andie rtlichen Behrden oder stdtischen Entsorgungsdiensteoder an den Hndler, bei dem Sie das Produkt erworben haben.


29/32

5



Appendx C

Eest (Estonan) - Keskkonnaalane normatsoonEuroopa Ldus asuvatele klentdele

Euroopa Liidu direktiivi 2002/96/E nuete kohaselt onseadmeid, millel on tootel vi pakendil kesolev smbol ,keelatud krvaldada koos sorteerimata olmejtmetega. See

smbol nitab, et toode tuleks krvaldada eraldi tavalistestolmejtmevoogudest. Olete kohustatud krvaldama kesoleva ja ka muud elektri- ja elektroonikaseadmed riigi vi kohalikeametiasutuste poolt ette nhtud kogumispunktide kaudu.Seadmete korrektne krvaldamine ja ringlussevtt aitab vltidavimalikke negatiivseid tagajrgi keskkonnale ning inimestetervisele. Vanade seadmete krvaldamise kohta tpsemainormatsiooni saamiseks vtke palun hendust kohalikeametiasutustega, jtmekitlusirmaga vi kauplusega, kust tetoote ostsite.

Espaol (Spansh) - Inormacn medoambental paraclentes de la Unn Europea

La Directiva 2002/96/CE de la UE exige que los equipos quelleven este smbolo en el propio aparato y/o en su embalajeno deben eliminarse junto con otros residuos urbanos noseleccionados. El smbolo indica que el producto en cuestindebe separarse de los residuos domsticos convencionales convistas a su eliminacin. Es responsabilidad suya desechar este ycualesquiera otros aparatos elctricos y electrnicos a travs delos puntos de recogida que ponen a su disposicin el gobierno ylas autoridades locales. Al desechar y reciclar correctamente estosaparatos estar contribuyendo a evitar posibles consecuenciasnegativas para el medio ambiente y la salud de las personas. Sidesea obtener inormacin ms detallada sobre la eliminacinsegura de su aparato usado, consulte a las autoridades locales,al servicio de recogida y eliminacin de residuos de su zona o

pregunte en la tienda donde adquiri el producto.

(Greek) -

2002/96/EC / . .

. . , , .

Franas (French) - Inormatons envronnementalespour les clents de lUnon europenne

La directive europenne 2002/96/CE exige que lquipementsur lequel est appos ce symbole sur le produit et/ou sonemballage ne soit pas jet avec les autres ordures mnagres. Ce

symbole indique que le produit doit tre limin dans un circuitdistinct de celui pour les dchets des mnages. Il est de votreresponsabilit de jeter ce matriel ainsi que tout autre matriellectrique ou lectronique par les moyens de collecte indiquspar le gouvernement et les pouvoirs publics des collectivitsterritoriales. Llimination et le recyclage en bonne et due ormeont pour but de lutter contre limpact naste potentiel de cetype de produits sur lenvironnement et la sant publique. Pourplus dinormations sur le mode dlimination de votre ancienquipement, veuillez prendre contact avec les pouvoirs publicslocaux, le service de traitement des dchets, ou lendroit o vousavez achet le produit.

Italano (Italan) - Inormazon relatve allambenteper clent resdent nellUnone Europea

La direttiva europea 2002/96/EC richiede che le apparecchiaturecontrassegnate con questo simbolo sul prodotto e/osullimballaggio non siano smaltite insieme ai riiuti urbaninon dierenziati. Il simbolo indica che questo prodotto nondeve essere smaltito insieme ai normali riiuti domestici. responsabilit del proprietario smaltire sia questi prodotti siale altre apparecchiature elettriche ed elettroniche mediantele speciiche strutture di raccolta indicate dal governo o daglienti pubblici locali. Il corretto smaltimento ed il riciclaggioaiuteranno a prevenire conseguenze potenzialmente negativeper lambiente e per la salute dellessere umano. Per ricevereinormazioni pi dettagliate circa lo smaltimento delle vecchie

apparecchiature in Vostro possesso, Vi invitiamo a contattare glienti pubblici di competenza, il servizio di smaltimento riiuti o ilnegozio nel quale avete acquistato il prodotto.

Latveu valoda (Latvan) - Ekoloska normcjaklentem Eropas Savenbas jursdkcj

Direktv 2002/96/EK ir prasba, ka aprkojumu, kam pievienotazme uz paa izstrdjuma vai uz t iesaiojuma, nedrkstizmest neirot veid kop ar komunlajiem atkritumiem(tiem, ko rada vietji iedzvotji un uzmumi). zme nozmto, ka ierce ir jizmet atkritumos t, lai t nenonktu kop arparastiem mjsaimniecbas atkritumiem. Jsu pienkums ir oun citas elektriskas un elektroniskas ierces izmest atkritumos,

izmantojot paus atkritumu savkanas veidus un ldzekus, konodroina valsts un pavaldbu iestdes. Ja izmeana atkritumosun prstrde tiek veikta pareizi, tad mazins iespjamaiskaitjums dabai un cilvku veselbai. Skkas zias parnovecojua aprkojuma izmeanu atkritumos js varat saemtvietj pavaldb, atkritumu savkanas dienest, k ar veikal,kur iegdjties o izstrdjumu.


30/32


31/32



Appendx C

Portugus (Portuguese) - Inormao ambental paraclentes da Uno Europea

A Directiva Europeia 2002/96/CE exige que o equipamentoque exibe este smbolo no produto e/ou na sua embalagemno seja eliminado junto com os resduos municipais no

separados. O smbolo indica que este produto deve sereliminado separadamente dos resduos domsticos regulares. da sua responsabilidade eliminar este e qualquer outroequipamento elctrico e electrnico atravs das instalaesde recolha designadas pelas autoridades governamentais oulocais. A eliminao e reciclagem correctas ajudaro a preveniras consequncias negativas para o ambiente e para a sadehumana. Para obter inormaes mais detalhadas sobre aorma de eliminar o seu equipamento antigo, contacte asautoridades locais, os servios de eliminao de resduos ou oestabelecimento comercial onde adquiriu o produto.

Romn (Romanan) - Inorma de medu pentru

clen dn Ununea EuropeanDirectiva european 2002/96/CE impune ca echipamentele careprezint acest simbol pe produs i/sau pe ambalajul acestuia snu ie casate mpreun cu gunoiul menajer municipal. Simbolulindic aptul c acest produs trebuie s ie casat separat degunoiul menajer obinuit. Este responsabilitatea dvs. s casaiacest produs i alte echipamente electrice i electronice prinintermediul unitilor de colectare special desemnate de guvernsau de autoritile locale. Casarea i reciclarea corecte vor ajutala prevenirea potenialelor consecine negative asupra sntiimediului i a oamenilor. Pentru mai multe inormaii detaliatecu privire la casarea acestui echipament vechi, contactaiautoritile locale, serviciul de salubrizare sau magazinul de lacare ai achiziionat produsul.

Slovenna (Slovak) - Inormce o ochrane votnhoprostreda pre zkaznkov v Eurpskej n

Poda eurpskej smernice 2002/96/ES zariadenie s tmtosymbolom na produkte a/alebo jeho balen nesmie bylikvidovan spolu s netriedenm komunlnym odpadom.Symbol znamen, e produkt by sa mal likvidova oddeleneod benho odpadu z domcnost. Je vaou povinnosoulikvidova toto i ostatn elektrick a elektronick zariadeniaprostrednctvom pecializovanch zbernch zariaden urenchvldou alebo miestnymi orgnmi. Sprvna likvidcia a recyklciapome zabrni prpadnm negatvnym dopadom na ivotnprostredie a zdravie ud. Ak mte zujem o podrobnejie

inormcie o likvidcii starho zariadenia, obrte sa, prosm, namiestne orgny, organizcie zaoberajce sa likvidciou odpadovalebo obchod, v ktorom ste si produkt zakpili.

Slovenna (Slovene) - Okoljske normacje za strankev Evropsk unj

Evropska direktiva 2002/96/EC prepoveduje odlaganje opreme,oznaene s tem simbolom na izdelku in/ali na embalai medobiajne, nerazvrene odpadke. Ta simbol opozarja, da je treba

izdelek odvrei loeno od preostalih gospodinjskih odpadkov.Vaa odgovornost je, da to in preostalo elektrino in elektronskoopremo odnesete na posebna zbiralia, ki jih doloijodravne ustanove ali lokalna uprava. S pravilnim odlaganjemin recikliranjem boste prepreili morebitne kodljive vplive naokolje in zdravje ljudi. e elite izvedeti ve o odlaganju stareopreme, se obrnite na lokalno upravo, odpad ali trgovino, kjerste izdelek kupili.

Suom (Fnnsh) - Ymprst koskeva tetoja EU-alueen asakkalle

EU-direktiivi 2002/96/EY edellytt, ett jos laitteistossa on tmsymboli itse tuotteessa ja/tai sen pakkauksessa, laitteistoa

ei saa hvitt lajittelemattoman yhdyskuntajtteen mukana.Symboli merkitsee sit, ett tm tuote on hvitettv erillntavallisesta kotitalousjtteest. Sinun vastuullasi on hvitttm elektroniikkatuote ja muut vastaavat elektroniikkatuotteetviemll tuote tai tuotteet viranomaisten mrmnkeryspisteeseen. Laitteiston oikea hvittminen estmahdolliset kielteiset vaikutukset ympristn ja ihmistenterveyteen. Listietoja vanhan laitteiston oikeasta hvitystavastasaa paikallisilta viranomaisilta, jtteenhvityspalvelusta tai siitmyymlst, josta ostit tuotteen.

Svenska (Swedsh) - Mljnormaton r kunder Europeska unonen

Det europeiska direktivet 2002/96/EC krver att utrustning meddenna symbol p produkten och/eller rpackningen inte rkastas med osorterat kommunalt avall. Symbolen visar att dennaprodukt br kastas eter att den avskiljts rn vanligt hushllsavall.Det aller p ditt ansvar att kasta denna och annan elektrisk ochelektronisk utrustning p aststllda insamlingsplatser utseddaav regeringen eller lokala myndigheter. Korrekt kassering ochtervinning skyddar mot eventuella negativa konsekvenserr miljn och personhlsa. Fr mer detaljerad inormation omkassering av din gamla utrustning kontaktar du dina lokalamyndigheter, avallshanteringen eller butiken dr du kpteprodukten.

WEB: For additional inormation, please visitwww.lnksys.com


32/32

Contact InformationAppendx D

Appendx D:Contact Inormaton

Lnksys Contact Inormaton

Website http://www.linksys.com

E-Mail [email protected]

FTP Site tp.linksys.com

Advice Line 800-546-5797 (LINKSYS)

Support 800-326-7114

RMA (Return Merchandise

Authorization)949-823-3000

Fax 949-823-3002

NOTE: Details on warranty and RMA issuescan be ound in the Warranty and RegulatoryInormation section o this Guide.

Cisco Slm2008 v10 Ug a-web

Documents

Transcript of Cisco Slm2008 v10 Ug a-web