M775 2 ETS-2GS8GP A4 E Screen

OTN Systems | ETS Manual
MASTERS IN MISSION CRITICAL COMMUNICATIONS
Industrial Ethernet Switch

10 ports: ETS-2GS8GP (S30828-B8-X1)
2 x Gigabit SFP, 8 x Gigabit Ethernet with PoE
Open Transport Network Industrial Ethernet Switch ETS-2GS8GP
OTN Systems NV COPYRIGHT AND TRADE SECRETS/LIABILITY

____ ____
Industrielaan 17b, 2250 Olen, Belgium The present document and its contents remain the property
of OTN fSystems NV and shall not, without prior written
Tel: +32 14 25 28 47 consent, be copied or transmitted or communicated to third
Fax: +32 14 25 20 23 parties, nor be used for any other purpose than such as
E-mail: [email protected] underlies their delivery to the addressee.
www.otnsystems.com
The present document and its contents may change in the
Ref. No.: EB-M775-E-2 course of time or may not be suitable in a specific situation.
Issued May, 2021 Consequently, they are recommended as suggested
guideline only.
Specifications subject to change as design
improvements are implemented. OTN Systems NV hereby disclaims any liability for any
©2021 OTN Systems NV - All rights reserved. damages that may result from the use of the present
document unless it is used with respect to the operation
and maintenance of equipment originally manufactured by
OTN Systems NV and covered by its standard warranty.
Contents
1. INTRODUCTION ..................................................................................................6
1.1 General ................................................................................................................ 6
1.2 Overview ............................................................................................................. 6
1.3 Major Features ................................................................................................... 6
1.4 Package List ....................................................................................................... 7
1.5 Manual References ............................................................................................ 7
1.6 Possible Network Solutions ............................................................................. 8
2. HARDWARE INSTALLATION .............................................................................9

2.1 ETS-2GS8GP Switch .......................................................................................... 9
2.1.1 Front Panel .......................................................................................................... 9
2.1.2 Front Panel LEDs............................................................................................... 10
2.1.3 Dimensions ........................................................................................................ 11
2.1.4 Bottom View ....................................................................................................... 11
2.1.5 Rear Side ........................................................................................................... 12
2.1.6 Wiring Power Inputs ........................................................................................... 12
2.1.7 Wiring RJ-45 Gigabit Ethernet Port ................................................................... 15
2.1.8 Wiring SFP Gigabit Ethernet Ports .................................................................... 16
2.1.9 Wiring Digital Input ............................................................................................. 16
2.1.10 Wiring Digital Output (Relay Output) ................................................................. 16
2.1.11 Wiring Earth Ground .......................................................................................... 17
2.1.12 Wiring RS-232 Console Cable ........................................................................... 17
2.1.13 DIN Rail Mounting Installation ........................................................................... 17
2.1.14 Wall Mounting Installation .................................................................................. 18
3. ETS SWITCH MANAGEMENT .......................................................................... 19

3.1 Out-band management .................................................................................... 19
3.2 In-band management ....................................................................................... 19
3.3 Management via Serial Console ..................................................................... 19
3.4 Management via Web Interface ...................................................................... 19
3.4.1 Verify the PC side .............................................................................................. 20
3.4.2 Web Interface..................................................................................................... 20
3.4.3 Secured Web Interface ...................................................................................... 21
3.5 Management via Telnet Console .................................................................... 22
3.6 Management via SSH (Secure Shell) ............................................................. 22
4. SWITCH CONFIGURATION .............................................................................. 24

4.1 Basic Setting .................................................................................................... 24
4.1.1 Switch Setting .................................................................................................... 24
4.1.2 Admin Password ................................................................................................ 25
4.1.3 IP Configuration ................................................................................................. 27
4.1.4 Time Setting ....................................................................................................... 28
4.1.5 Jumbo Frame ..................................................................................................... 29
4.1.6 DHCP Server ..................................................................................................... 30
4.1.7 Backup and Restore .......................................................................................... 33
4.1.8 Firmware Upgrade ............................................................................................. 35
4.1.9 Load Default (Factory Default)........................................................................... 36
4.2 Port Configuration ........................................................................................... 37
4.2.1 Port Control ........................................................................................................ 37
4.2.2 Port Status ......................................................................................................... 38
4.2.3 Rate Control ....................................................................................................... 39
4.2.4 Storm Control ..................................................................................................... 40
4.2.5 Port Trunking ..................................................................................................... 40
4.2.6 CFM Configuration (Currently not supported) ................................................... 42
EB-M775-E-2 Page 3 of 116

Industrial Ethernet Switch ETS-2GS8GP Open Transport Network
4.3 Power Over Ethernet (PoE) ............................................................................. 42

4.3.1 PoE Control ........................................................................................................ 42
4.3.2 PoE Scheduling ................................................................................................. 46
4.3.3 PoE Status ......................................................................................................... 47
4.3.4 Example ............................................................................................................. 48
4.4 Network Redundancy ...................................................................................... 49
4.4.1 Differences RSTP → Redundant Gigabit Ethernet ........................................ 50
4.4.2 STP/RSTP/MSTP .............................................................................................. 50
4.4.3 STP Port Configuration ...................................................................................... 52
4.4.4 STP Information ................................................................................................. 53
4.4.5 MSTP ................................................................................................................. 54
4.4.6 MSTP Configuration........................................................................................... 54
4.4.7 MSTP Port Configuration ................................................................................... 56
4.4.8 MSTP Information .............................................................................................. 56
4.4.9 Redundant Gigabit Ethernet Ring Configuration (RGERP) ............................... 57
4.4.10 Redundant Gigabit Ethernet Ring Information ................................................... 62
4.4.11 ERPS Configuration ........................................................................................... 63
4.4.12 ERPS Information .............................................................................................. 63
4.5 VLAN ................................................................................................................. 64
4.5.1 VLAN Configuration ........................................................................................... 65
4.5.2 VLAN Port Configuration ................................................................................... 67
4.5.3 VLAN Information............................................................................................... 69
4.5.4 PVLAN Configuration (=Private VLAN = currently not supported) .................... 69
4.5.5 PVLAN Port Configuration (=Private VLAN = currently not supported) ............. 69
4.5.6 PVLAN Information (=Private VLAN = currently not supported) ........................ 69
4.5.7 GVRP configuration (currently not supported) ................................................... 70
4.6 Traffic Prioritization ......................................................................................... 70
4.6.1 QoS Setting ........................................................................................................ 71
4.6.2 CoS-Queue Mapping ......................................................................................... 73
4.6.3 DSCP-Priority Mapping ...................................................................................... 73
4.7 Multicast Filtering ............................................................................................ 74
4.7.1 IGMP Query ....................................................................................................... 75
4.7.2 IGMP Snooping/Filtering .................................................................................... 75
4.7.3 GMRP Configuration (Currently not supported) ................................................ 77
4.8 SNMP ................................................................................................................. 77
4.8.1 SNMP V1/V2c Configuration ............................................................................. 78
4.8.2 SNMP V3 Profile ................................................................................................ 78
4.8.3 SNMP Trap ........................................................................................................ 79
4.9 Security ............................................................................................................. 80
4.9.1 Filters: IP Filter ................................................................................................... 80
4.9.2 Filters: MAC Filter .............................................................................................. 81
4.9.3 Filters: ARP Filter ............................................................................................... 83
4.9.4 Filters: Filter Attach ............................................................................................ 84
4.9.5 Port Security (currently not supported) .............................................................. 85
4.9.6 IEEE 802.1X (Port Based Network Access Control) ......................................... 85
4.9.7 Sticky Link .......................................................................................................... 90
4.9.8 DHCP Snooping (currently not supported) ........................................................ 91
4.9.9 DHCP Binding (currently not supported) ........................................................... 91
4.9.10 IP Source Guard (currently not supported) ........................................................ 91
4.9.11 Dynamic ARP Inspection (currently not supported) ........................................... 91
4.9.12 Dynamic ARP Inspection Statistics (currently not supported) ........................... 91
4.9.13 Access Interface ................................................................................................ 91
4.10 Warning ............................................................................................................. 92
4.10.1 Fault Relay Setting............................................................................................. 92
4.10.2 Event Selection .................................................................................................. 95
4.10.3 SysLog Configuration ........................................................................................ 96
4.10.4 SMTP Configuration........................................................................................... 97
4.11 Monitor and Diag.............................................................................................. 98
4.11.1 LLDP Configuration............................................................................................ 98
Page 4 of 116 EB-M775-E-2

4.11.2 MAC Address Table ........................................................................................... 99

4.11.3 Port Statistics ................................................................................................... 100
4.11.4 Port Mirroring ................................................................................................... 101
4.11.5 Event Logs ....................................................................................................... 101
4.11.6 Ping .................................................................................................................. 102
4.12 Device Front Panel......................................................................................... 103
4.13 Save (to Flash) ............................................................................................... 104
4.14 Logout ............................................................................................................. 104
4.15 Reboot ............................................................................................................. 105
5. COMMAND LINE INTERFACE ........................................................................ 106

5.1 User EXEC Mode ............................................................................................ 106
5.2 Privileged EXEC Mode .................................................................................. 106
5.3 Global Configuration Mode ........................................................................... 107
5.4 (Port) Interface Configuration ....................................................................... 107
5.5 Summary of the 5 command modes ............................................................ 109
6. APPENDIX ....................................................................................................... 111

6.1 Product Specification .................................................................................... 111
6.2 Ordering Information ..................................................................................... 114
6.3 Pin Assignment of the RS-232 Console Cable ........................................... 114
6.4 SFP family ....................................................................................................... 115
7. ABBREVIATIONS............................................................................................ 115

1. INTRODUCTION
1.1 General
In this document, if the term “ETS switch” is used, it covers the ETS-2GS8GP switch.
• ETS = EThernet Switch;
• 2GS = 2 Gigabit Ethernet SFP ports;
• 8GP = 8 Gigabit Ethernet ports with PoE (=Power over Ethernet)
The ETS-2GS8GP industrial switch can be integrated in an XTran network many different
ways as of XTran Release 4.3. See §1.6 for some possible network solutions.
Following topics are covered in this chapter:
• Overview
• Major Features
• Package Checklist
1.2 Overview
The ETS-2GS8GP has 8 10/100/1000 Base-TX ports with PoE and 2 GbE SFP ports. The
ETS-2GS8GP can be remotely configured by a Command Line Interface (CLI) via SSH or a
Telnet connection, a Web browser and managed by Simple Network Management Protocol
(SNMP) and Remote Monitoring (RMON). You can also connect the attached RS-232
console cable to manage the switch via CLI.
Security is enhanced with advanced features such as 802.1Q VLAN and Port/IP security.
Performance is optimized by QoS and IGMP Snooping/Query. The Redundant Gigabit
Ethernet Ring enables self-healing capability for network failures and provides failover
switching in less than 50 ms (less than 200 ms with 1000Base-TX).
For interoperability with your existing network, the ETS-2GS8GP also comes with an
advanced redundant network solution, Ring Coupling and Rapid Dual Homing technology.
With Ring Coupling and Rapid Dual Homing technology, Ethernet Ring can be extended
more easily.
The IP-31 design (=International Protection Rating 31) aluminum case is perfectly suited in a
harsh industrial environment. The event warning is notified to the network administrator via e-
mail, system log, or to field engineers by relay output. The ETS-2GS8GP is CE/FCC/UL
compliant to ensure safe and reliable data transmission for industrial applications.
1.3 Major Features
The ETS-2GS8GP has the following features:
8 10/100/1000 Base-TX PoE ports and 2 Gigabit SFP ports.
• Redundant Gigabit Ethernet Ring, failover switching in less than 50ms (less than 200 ms
with 1000Base-TX)
• Redundant Gigabit Ethernet Ring (recovery time < 5ms), Rapid Dual Homing, Multiple
Ring, and MSTP/RSTP;
• IEEE 802.3af 15.4W / IEEE 802.3at 30W High Power PoE
• 240W total power budget for High-power PoE camera

• SFP ports support 10/100/1000 Mbps with Digital Diagnostic Monitoring (DDM) to monitor
long distance fiber quality
• Advanced management by LACP/VLAN/Q-in-Q/Private VLAN/ GVRP/ QoS/ IGMP,

Snooping/Rate Control/ Online Multi-Port Mirroring/ Advanced DHCP server, Client
• Advanced Security system by Port Security, Access IP list, SSH and HTTPS Login
• Event Notification through E-mail, SNMP trap and SysLog
• IEEE 802.1AB LLDP
• CLI, Web, SNMP/RMON for network Management
• Multiple event relay output for enhanced device alarm control
• Hi-Pot Isolation Protection for ports and power
• Powered via external PSU (V30812-A5020-A97)
NOTE: More technical specifications are listed in Appendix 6.1.
1.4 Package List

The ETS-2GS8GP is shipped with following items:
• One ETS-2GS8GP Switch
• One DIN rail clip (attached to the switch)
• One RS-232 DB-9 to RJ-45 console cable
If any of the above items are missing or damaged, please contact your local sales
representative.
1.5 Manual References

• XTran TRM (SFP/SFP+/XFP/QSFP+) Manual: Doc. No.: M811*.pdf

1.6 Possible Network Solutions

Below, find some possible network solutions extending a backbone network with an ETS
Ring/Line network. Your solution could be implemented with one, more or a mix of the ETS
designs below.
• ETS(1): Port Extension
• ETS(2): Daisy Chain
• ETS(3): Redundant Gigabit Ethernet Ring (Single ETS - Single Node)
• ETS(4): Redundant Gigabit Ethernet Ring (Double ETS - Single Node)
• ETS(5): Redundant Gigabit Ethernet Ring (Double ETS - Double Node)
At least 2 management NICs:

• (1) = Management connection to a node network card to manage the backbone network,
• (2) = Connection with an ethernet service via an ethernet module to manage the ETS rings
Management PC Backbone Backbone ETS

(with at least 2 NICs) Node Node ETS(1)
(1) ETS(2)
(2)
Backbone Backbone
Node Network
ETS(4) ETS(3)
ETS(5)
ETS

2. HARDWARE INSTALLATION
This chapter includes hardware introduction, installation and configuration information.
• Hardware Introduction
- Front Panel
- Front Panel LEDs
- Dimension
- Bottom View
• Wiring Power Inputs
• Wiring Digital Input
• Wiring Relay Output (digital output)
• Wiring Earth Ground
• Wiring Ethernet Ports
• Wiring RS-232 console cable
• DIN rail Mounting Installation
• Wall-Mounting Installation
2.1 ETS-2GS8GP Switch

2.1.1 Front Panel
The front panel includes 8 RJ-45 Gigabit Ethernet ports with PoE, 2 Gigabit Ethernet SFP
ports, an RS-232 console port, System / Port LEDs and a Reset button.
Reset button: Pushing the hardware Reset button resets everything to the factory default
including the IP address (default IP address = 192.168.1.2).
System LEDs
Port1 – 8:
PoE LEDs
Port 9 - 10:
SFP
Reset Button
Gigabit Ethernet Ports
+ Link/Activity LEDs
RS-232 Console
Port 1 - 8:
RJ45:
Gigabit Ethernet Ports
including PoE
+ Link/Activity LEDs
Optional:
PC connection for
local configuration
and/or management.
Chassis
Grounding
Digital Input/Output Screw
Relay Alarms
PSU Input Ports:

Power1, Power2

2.1.2 Front Panel LEDs
LED Color Status

System LEDs
PWR1 Not lit, dark No power from PSU1
Lit, green Power received from PSU1
PWR2 Not lit, dark No power from PSU2
Lit, green Power received from PSU2
Sys Not lit, dark System not ready
Blinking, green System is on progress firmware upgrade or not ready
Lit, green System is ready
R.S Not lit, dark This switch is a slave in the ring
Blinking, red Ring failed, Ring with wrong port
Lit, yellow Ring abnormal
Lit, green This switch is the Ring Master
DO Not lit, dark No fault conditions active, everything fine.
Lit, red Digital Output Relay is closed or active due to a fault
condition based on a configured fault Event.
DI Not lit, dark Digital input is not activated, Logic Low (0): DC 0..10V
Lit, green Digital input is activated, Logic High (1): DC 11..30V
Port 9-10: SFP Port LEDs:
LNK/ACT
Speed 1000 Mbps
LNK/ACT Not lit, dark The link is down

Lit, green The link is up
Blinking, green There is activity on the link
Speed 1000M Not lit, dark Speed is 10/100 Mbps
Lit, Orange Speed is 1000Mbps
Page 10 of 116 EB-M775-E-2

Port 1-8: 10/100/1000 RJ-45 LEDs
Speed 1000 Mbps LNK/ACT
LNK/ACT Speed 1000 Mbps
LNK/ACT Not lit, dark The link is down

Lit, green The link is up
Blinking, green There is activity on the link
Speed 1000M Not lit, dark Speed is 10/100 Mbps
Lit, Orange Speed is 1000Mbps
PoE ON Not lit, dark Power output over current or cable short, no PoE
power delivered
Lit, yellow The port is using PoE Power
Blinking, yellow The port is still detecting or searching for a connected
PoE device
2.1.3 Dimensions
W x D x H = 95mm x 127mm x 170mm without DIN Rail Clip
W x D x H = 95mm x 136.5mm x 170mm with DIN Rail Clip
2.1.4 Bottom View

The bottom view of the ETS-2GS8GP switch consists of two terminal block connectors with
two DC power inputs, one Digital Input, one Relay Outputs (=Digital Output) and one
Earth Ground.
EB-M775-E-2 Page 11 of 116

Earth
ground
Bottom View
ETS-2GS8GP
PW1, PW2
Redundant
DC Pow er Inputs
DI: Digital
Input
DO: Relay Output

(Digital Output)
2.1.5 Rear Side

The rear side shows the DIN rail clip.
DIN Rail
Clip
2.1.6 Wiring Power Inputs

The ETS-2GS8GP provides a redundant or aggregated DC power input, depending on the
voltage of the power input. If there are over 2 power inputs connected with different voltages,
the ETS will be powered from the highest connected voltage (redundant power). If the
voltages of power inputs are the same, the total power output will be aggregated (aggregated
power) up to a maximum of 240W.
Page 12 of 116 EB-M775-E-2

PW1, PW2
Redundant
DC Pow er Inputs
PSU on DIN Rail V30812-A5020-A97 PSU Cable S30827-C142-A30 (3 meter)

100-240 VAC ± 10% 56VDC DIN RAIL PSU.
48-
56V
DC ok
Cable Pin Wire Colors
ETS-2GS8GP Side Codes
Parallel Use
+ Brown
Single Use
13
14 - Blue
DC ok
AC 100-240V
N L DC 48V 10A
+ + - -
The range of the available DC power input:

• In IEEE802.3af mode, the PoE power output is 44~57 VDC, 0.35A. Therefore, the ETS
DC power input must be 46~57VDC. → AC/DC PSU (V30812-A5020-A97) can be used
and is shipped with 56VDC output.
• In IEEE802.3at mode, the PoE power output is 50~57 VDC, 0.6A. Therefore, the ETS DC
power input must be 53~57VDC → AC/DC PSU (V30812-A5020-A97) can be used and is
shipped with 56VDC output.
Follow below steps to wire the redundant or aggregated DC power inputs.

1. It is a good practice to turn off input and load power, and to unplug the power supply
before making wire connections.
2. Power 1 and Power 2 support power redundancy and polarity reverse protection
functions.
3. Positive and negative power system inputs are both accepted, but Power 1 and Power 2
must apply the same mode.
4. Connect the ETS-2GS8GP PSU cable(s) (=S30827-C142-A30) to the PSU via
connecting the open ends of the PSU cable to the PSU outputs (‘++--‘): respect the
polarity.
5. Tighten the wire-clamp screws to prevent DC wires to get loose.
EB-M775-E-2 Page 13 of 116

6. Depending on the chosen PSU/ETS-2GS8GP set-up (see pictures/examples below),

remove unused cables (if any) from the PSU cable(s) via unscrewing the unused cable
from the PSU cable connector. Set-up examples:
• Example1: one PSU → one ETS-2GS8GP switch
• Example2: two PSUs → one ETS-2GS8GP switch
7. Connect the main power (220 VAC) to the PSU via connecting the open ends of the
standard power cable to the “L”, “N” and GND on the PSU.
8. If using IEEE802.3at mode PoE, make sure that the external PSU delivers at least
53VDC via adjusting the Output voltage potentiometer on the PSU. If AC/DC PSU
(V30812-A5020-A97) is used, it has already 56VDC output.
9. Connect the PSU to the ETS-2GS8GP switch via plugging in this PSU cable into the
green PSU connector (PW1+-PW2+-) on the bottom of the ETS-2GS8GP switch.
NOTE: The range of a suitable electric wire is from 0.2 mm² (=24 AWG) to 3.31 mm² (=12
AWG) (→ AWG = American Wire Gauge).
NOTE: If the 2 power inputs are connected, the ETS-2GS8GP will be powered from the
highest connected voltage. The ETS-2GS8GP will alarm for power loss, either from
PW1 or PW2.
Example1: one PSU → one ETS-2GS8GP switch
48-
56V
DC ok
Not Unscrew here to

used remove unused cable
Parallel Use
Single Use
13
14
DC ok
AC 100-240V
N L DC 48V 10A
+ + - -
Example2: two PSUs → one ETS-2GS8GP switch
Redundant
48- 48-
56V 56V Power
DC ok DC ok
Supply
Parallel Use Parallel Use

Single Use Single Use
13 13
14 14
DC ok DC ok
AC 100-240V AC 100-240V
N L DC 48V 10A N L DC 48V 10A
+ + - - + + - -
Page 14 of 116 EB-M775-E-2

a. Power Supply Specifications

The table below shows the Power Supply Specifications without PoE:
Input Range ETS Max. Power Consumption

Max. Input
Min Max Current All Ethernet ports without PoE
46 VDC 57 VDC 8.2A 16 W
The table below shows the Power Supply Specifications with PoE/PoE+:
Input Range Power Consumption

PoE
Min Max Max
48 VDC (IEEE802.3af) 48 VDC 57 VDC 16 + 240 = 256 W

53 VDC (IEEE802.3at) 53 VDC 57 VDC 16 + 240 = 256 W
NOTE: Power consumption varies based upon configuration. RJ45 ports consume roughly
1W less than SFP ports.
2.1.7 Wiring RJ-45 Gigabit Ethernet Port

The ETS switch includes 8 RJ-45 Gigabit Ethernet ports. The Gigabit Ethernet ports support
100Base-T and 1000Base-TX, in full or half duplex mode. All the Gigabit Ethernet ports will
auto-detect the signal from the connected devices to negotiate the link speed and duplex
mode. Auto MDI/MDIX allows users to connect another switch, hub or workstation without
having to worry about straight through or crossover cables.
Straight through Cables Crossover Cables
NOTE: Ethernet cables use pins 1, 2, 3 and 6 of an 8-pin RJ-45 connector. The pin signals
are converted by the automatic MDI-X function, as shown in the next table.
Pin MDI-X Signals MDI Signals

1 RD+ TD+
2 RD- TD-
3 TD+ RD+
6 TD- RD-
Connect one side of the Ethernet cable into any ETS switch port and connect the other side
to your attached device. The LNK LED will light up when the cable has been correctly
connected. See paragraph §2.1.2 for all the LED descriptions. Always make sure that the
EB-M775-E-2 Page 15 of 116

cables between the switches and attached devices (e.g. switch, hub, or workstation) are less
than 100 meters (328 feet).
The wiring cable types are as below.
• 10 Base-T: 2-pair UTP/STP Cat. 3, 4, 5e or 6 cable, EIA/TIA-568 100-ohm (100m)
• 100 Base-TX: 2-pair UTP/STP Cat. 5e or 6 cable, EIA/TIA-568 100-ohm (100m)
• 1000 Base-TX: 4-pair UTP/STP Cat. 5e or 6 cable, EIA/TIA-568 100-ohm (100m)
For: PoE/PoE+
• PoE:IEEE 802.3af: 4-pair UTP/STP Cat. 5e or 6 cable, EIA/TIA-568 100-ohm (100m)
• PoE+:IEEE 802.3at: 4-pair UTP/STP Cat. 5e or 6 cable, EIA/TIA-568 100-ohm (100m)
2.1.8 Wiring SFP Gigabit Ethernet Ports

The ETS-2GS8GP has two Gigabit SFP ports (port 9, 10).
SFP ports: 1000Base-SX/LX/EX/ZX/BX. See chapter §1.5 to find a reference to the TRMs
(SFP/SFP+/XFP/QSFP+) manual.
The SFP ports also provide the DDM (=Digital Diagnostic Monitoring) function, it can assist
the user to monitor the quality of the optical signal and diagnose the transmission of the fiber.
By the DDM function, the user can get real information including the strength of received
optical signal, the launched optical signal, the current operating temperature of the SFP
transceiver and the specification of the transceiver. See §4.2.2 for an example. Warning
events can be sent when the allowed configured temperature and/or optical power ranges
are exceeded, see §4.10.2.
2.1.9 Wiring Digital Input
The ETS-2GS8GP provides one digital input. It allows users to connect the digital outputs of
external/third party units and manage/monitor the status of the connected unit. The Digital
Input pin can be pulled high or low. thus the connected equipment can actively drive these
pins high or low. The web interface reads out these values.
Power input voltage:
• ‘0’ = low = 0..10V DC
• ‘1’ = high = 11..30V DC
Connect the wires properly!
2.1.10 Wiring Digital Output (Relay Output)

The ETS-2GS8GP provides one Digital Output, also known as Relay Output. The relay
contact are energized (open) for normal operation and will close for fault conditions. The fault
conditions include power failures, Ethernet port link break or other pre-defined events which
can be configured in the ETS-2GS8GP web interface. Connect the wires properly!
Page 16 of 116 EB-M775-E-2

Chassis must
be grounded
DO (Relay) carry current: 0.5A/DC 24V
Digital output wiring

simulate diagram
2.1.11 Wiring Earth Ground

To ensure the system will not be damaged by noise or any electrical shock, unscrew the
earth ground screw (on the bottom), connect a green yellow earthing cable (6mm²) to it and
then tighten the screw again.
2.1.12 Wiring RS-232 Console Cable
The ETS switch can be directly connected/managed to/by a PC via an RS-232 DB-9 to RJ-
45 cable. Connect the DB-9 connector to the COM port of your PC and the RJ45 connector
to the RS-232 Console connector on the ETS switch.
Open a Terminal tool on the PC and configure the RS-232 serial settings to 9600, N, 8, 1.
(Baud Rate: 9600 / Parity: None / Data Bit: 8 / Stop Bit: 1). Then you can access the CLI via
terminal tool and the console cable.
2.1.13 DIN Rail Mounting Installation
The DIN rail clip is already attached to the ETS-2GS8GP when packaged. Follow the steps
below to mount the ETS-2GS8GP to the DIN rail track:
1. First, plug the DIN rail clip onto the back of the DIN rail track.
DIN Rail DIN Rail

Track Clip
2. Push the bottom of the DIN rail clip onto the track.
EB-M775-E-2 Page 17 of 116

3. Check if the DIN rail clip is tightly attached on the track.

NOTE: The DIN rail should be compliant with the DIN EN50022 standard. Using a non-
compliant DIN rail may cause an unsafe installation of the ETS-2GS8GP switch.
2.1.14 Wall Mounting Installation

Follow the steps below to install the ETS-2GS8GP with the wall mounting plate.
1. To remove the DIN rail clip from the ETS-2GS8GP, unscrew the DIN rail clip.
2. Place the wall mounting plate on the rear panel of the ETS-2GS8GP.
3. Screw the wall mounting plate onto the ETS-2GS8GP.
4. Use the hook holes at the corners of the wall mounting plate to hang the ETS-2GS8GP
onto the wall.
Mounting plate and screws
Page 18 of 116 EB-M775-E-2

3. ETS SWITCH MANAGEMENT

The ETS switch management can be done via a web interface and CLI via Telnet, SSH and
a Serial Console.
• Out-band management
• In-band management
• Management via Serial Console (CLI)
• Management via Web Interface
• Management via Telnet/SSH console (CLI)
3.1 Out-band management

You can configure the ETS switch via a local PC and connecting the RS-232 console cable
to the ETS switch, and using ‘serial’ in PuTTY (freeware tool PuTTY: http://www.putty.org).
3.2 In-band management
The in-band management means that you can remotely manage the switch via the network
via a Telnet or SSH session or via a web interface. If you know the IP address of the switch,
you can access the switch via a web interface on the switch, see §3.4.
3.3 Management via Serial Console
In the ETS switch package, one RS-232 DB-9 to RJ-45 console cable is available. Please
attach the RS-232 DB-9 connector to your PC COM port, connect the RJ-45 connector to the
Console port of the ETS switch. If you lose the cable, please follow the console cable PIN
assignment to find one (see §6.3).
1. Go to Start → Program → Accessories → Communication → Hyper Terminal or PuTTY
or any other...
2. Give a name to the new console connection.
3. Choose the COM name.
4. Select the correct serial settings. The serial settings of the COM port must be set as
follows: Baud Rate: 9600 / Parity: None / Data Bit: 8 / Stop Bit: 1
5. After being connected, you can see the Switch login request.
6. Login the switch. The default username is admin, password admin.
Booting...
Sun Jan 1 00:00:00 UTC 2020
Switch login: admin
Password:
ETS-2GS8GP (version 1.0_202002120958).
Switch>
3.4 Management via Web Interface

The ETS switch provides both an HTTP and HTTPs (secured) Web Interface for managing
the switch via a web browser (Google Chrome or Mozilla Firefox, Internet Explorer = not
supported).
EB-M775-E-2 Page 19 of 116

3.4.1 Verify the PC side

1. Verify that your PC network interface card (NIC) is operational, and that your operating
system supports TCP/IP protocol.
2. Wire DC power to the switch and connect your switch to your PC via an RJ-45 Ethernet
cable.
3. The switch default IP address is 192.168.1.2.
4. Change your computer IP address to e.g. 192.168.1.60 or other another IP address
which is located in the 192.168.1.x (Network Mask: 255.255.255.0) subnet.
5. Open a command prompt (e.g. DOS box) and ping 192.168.1.2 to verify a normal
response time.
3.4.2 Web Interface
The web interface is developed in CGI. It allows you to use a Google Chrome or Mozilla
Firefox web browser (Internet Explorer = not supported) to configure and monitor the switch
from anywhere on the network.
Before using the web interface, verify that your ETS switch is properly installed on your
network.
1. Launch the web browser (Google Chrome or Mozilla Firefox) and Login.
2. Enter http://192.168.1.2 (=default switch IP address) or the http://<current switch IP
address e.g. 192.168.1.65 > in the web browser address bar.
3. The web interface login screen will appear. Enter the user name and the password.
Default user name and password are both admin. If you fill out the wrong password for
the user admin at login, the login will fail, the screen remains waiting for the correct login.
4. Language (English = default): select the desired language English/German. If you want to
change the language after login, you have to logout and login again and select the
desired language.
5. Click Login. Next, you are logged in into the switch web interface. The Welcome screen is
listed below.
Page 20 of 116 EB-M775-E-2

NOTE: It is possible to change the IP address of the ETS switch to fit in your network
environment.
NOTE: The ETS switch web interface session will log out automatically if you don’t give any
input after 30 minutes. After logged out, you should re-login and enter the correct
user name and password again.
3.4.3 Secured Web Interface
The web interface also provides a secured HTTPS login. HTTPS (HTTP secure) provides
encrypted configuration commands and secure identification of the server.
1. Launch the web browser (Google Chrome or Mozilla Firefox, Internet Explorer = not
supported) on the PC.
2. Enter HTTPS://192.168.1.2 (=default switch IP address) or the HTTPS://<current switch
IP address e.g. 192.168.1.65> in the web browser address bar.
3. Following popup screen will appear and request you to trust the secured HTTPS
connection distributed by the ETS switch first. Click OK to trust it.
EB-M775-E-2 Page 21 of 116

4. The web interface login screen will appear. Enter the user name and the password.
Default user name and password are both admin.
5. Click Login. Next, you are logged in into the switch web interface.
6. From now on, the web interface commands are the same as in the normal HTTP
environment.
3.5 Management via Telnet Console

You can connect to the ETS switch via a Telnet session. The command lines are the same
as the commands via the RS-232 console port. Telnet commands are not encrypted. Open a
Telnet connection to the switch as follows:
1. Go to Start → Run;
2. Enter cmd and click OK;
3. Enter the command Telnet 192.168.1.65 (current IP address of the switch).
NOTE: A Telnet session is also possible via the freeware tool PuTTY: http://www.putty.org.
3.6 Management via SSH (Secure Shell)

You can connect to the ETS switch via an SSH connection. SSH encrypts all the
configuration commands that you send to the switch.
SSH is a client/server architecture while the ETS is the SSH server. When you want to make
an SSH connection to the switch, the SSH client tool should be downloaded first. An SSH
Client is available via the freeware tool PuTTY: http://www.putty.org which is copyright
protected 1997-2013 Simon Tatham
1. Open the SSH Client e.g. via PuTTY

In the Session configuration, enter the Host Name (IP Address of your ETS switch) and
Port number (default = 22). Select the “SSH” protocol. Click Open to start the SSH
session console.
Page 22 of 116 EB-M775-E-2

2. The SSH server cipher information from the ETS switch pops up in the screen below.
Click Yes to accept the Security Alert.
3. After a few seconds, the SSH connection to the ETS switch is opened. The login screen
is shown below.
4. Enter the Login Name admin and Password admin.
5. All the commands you see in SSH are the same as the CLI commands you see via the
RS-232 console. The chapter 5 lists and describes the possible commands to configure
the switch.
EB-M775-E-2 Page 23 of 116

4. SWITCH CONFIGURATION
Once you have chosen a way to manage/configure the switch (see previous paragraph),
following items are covered:
• Basic Setting
• Port Configuration
• Power over Ethernet
• Network Redundancy
• VLAN
• Traffic Prioritization
• Multicast Filtering
• SNMP
• Security
• Warning
• Monitor and Diag
• Device Front Panel
• Save
• Logout
• Reboot
4.1 Basic Setting

Basic Setting is a group of general settings that can be configured (e.g. IP address, User
name/Password…) or actions (e.g. firmware upgrade, backup and restore…) that can be
performed on the switch.
Following settings/actions are included in this group:
• Switch Setting
• Admin Password
• IP Configuration
• Time Setting
• Jumbo Frame
• DHCP Server
• Backup and Restore
• Firmware Upgrade
• Load Default (=Factory Default)
4.1.1 Switch Setting

You can assign a System Name, Location and Contact. Other general system information
can be viewed.
Page 24 of 116 EB-M775-E-2

Click Apply to apply your

modifications instantly
Click Save after Apply to save your modifications into

flash. Your changes will remain after a reboot.
System Name: Assign a name to the device. Maximum length = 64 characters. After you
configure the name, CLI system will select the first 12 characters as the name in CLI system.
System Location: Assign the physical location of the switch here. Maximum length = 64
characters.
System Contact: Assign a switch contact responsible here, e.g. name, mail address or other
information of the administrator. Maximum length = 64 characters.
System OID: The SNMP object ID of the switch.
System Description: The ETS-2GS8GP Industrial Management Ethernet Switch is the
name of this product.
Firmware Version: Display the firmware version installed in this device.
MAC Address/Device MAC: Display the unique hardware address (MAC address) assigned
by the manufacturer.
Serial Number: The serial number of the ETS switch.
Manufacturing Date: The manufacturing date of the ETS switch.
Click Apply to apply your settings.

Click Save in the tree view to keep the settings after reboot as well.
4.1.2 Admin Password

You can change the user name and the password that is used to login the web interface.
EB-M775-E-2 Page 25 of 116

Users that log on on the ETS must authenticate first. If the user/password combination does
not exist, the logon will fail. One user can be configured locally (Local User). Other additional
users can be configured as well on an external RADIUS Server.
Local User:
Name (=User name): Enter a new user name here. The default value is admin. This is a
local defined user on the ETS itself.
Password: Enter a new password here of this user. The default value is admin.
Confirm Password: Enter the same new password again to confirm it.
Click Apply to apply your configuration.
Page 26 of 116 EB-M775-E-2

RADIUS Users
Prerequisites: The RADIUS server must be reachable via the ETS Management VLAN (by
default, VLAN ID 99). Make sure to configure users on the external RADIUS Server(s). This
cannot be done via this web interface, but must be done on the RADIUS Server itself.
If the ETS must check the authentication as well via an external RADIUS server, fill out the
following:
RADIUS Server IP: Fill out the IP address of the RADIUS Server.
Shared Key: The authentication messages to and from the RADIUS server use an
authentication key, a 'shared key'. The RADIUS Client (=the ETS) needs this key to
communicate with the RADIUS server. Without this key, no communication is possible. Fill
out the shared key.
Server Port: Fill out the RADIUS Server port number, usually 1812, via which the
authentication must occur.
In addition, it is possible to configure a Secondary RADIUS Server. Fill out similar fields for
this server.
TACACS Server: Currently not supported.
Authentication Order: Choose the order for the user login process: Local (=default) / Radius
Local / TACACS Local (TACACS not supported).
4.1.3 IP Configuration
Configure the IP (v4) address settings of the switch. The IPv6 settings are for future use.
DHCP Client - Enable: The DHCP server on the network will automatically assign an IP
address to the switch. In this mode, the default IP address will be replaced by the one
assigned by DHCP server.
EB-M775-E-2 Page 27 of 116

DHCP Client - Disable: The IP address in the IP Address field will be assigned to the switch.
IP Address: If the DHCP client is disabled, fill out the IP Address field manually to assign
the IP address to the switch. If the DHCP client function is enabled, you don’t have to fill out
the IP address field as it will be overwritten by the IP address generated by the DHCP server.
The default IP address is 192.168.1.2. The DHCP server can be configured further on.
NOTE: If you already changed the default IP address and you saved the configuration, only
a Reset via the hardware Reset button on the ETS-2GS8GP switch sets the IP
address back to the default IP address 192.168.1.2.
Subnet Mask: Assign the subnet mask for the IP address here. If the DHCP Client function
is enabled, you don’t need to fill out the subnet mask. The default Subnet Mask is
255.255.255.0. Note: In the CLI, we use the enabled bit of the subnet mask to represent the
number displayed in web interface. For example, 8 stands for 255.0.0.0; 16 stands for
255.255.0.0; 24 stands for 255.255.255.0.
Default Gateway: Assign the default gateway for the switch here. The default gateway is
192.168.1.1. Note: In CLI, we use 0.0.0.0/0 to represent for the default gateway.
DNS Server1: Fill out the IP address of the primary DNS (=Domain Name System) Server, if
any.
DNS Server2: Fill out the IP address of the secondary DNS Server, if any.
Always make sure to Save your configuration. Also the IP address is lost when a reboot
occurs without saving first.
4.1.4 Time Setting

Time Setting allows the user to set the switch time manually or through an NTP server. The
Network Time Protocol (NTP) is a protocol used to synchronize computer clocks that are
connected with each other via a network. You can configure NTP settings here to
synchronize the clocks of several switches on the network.
The ETS-2GS8GP switch also provides Daylight Saving function.
a. Time Setting
Time Setting Source - Manual Setting: The user can configure the date and time manually.
If the switch must get the same date/time settings as the administrator PC, click Current
Time > Get PC Time.
Page 28 of 116 EB-M775-E-2

Time Setting Source - NTP client: Check NTP > Enable NTP Client Update. The date/time
settings of the switch will be synchronized to the date/time settings of the NTP server in the
network. The switch will send request packets to acquire the current date/time from the NTP
server (Primary/Secondary Server IP Address) that you assign in the fields.
Time Zone: Select the timezone where the switch is located. The default timezone is GMT
Greenwich Mean Time.
Daylight Saving Time (DST): When Daylight Saving Time is enabled, the date/time settings
of the switch change automatically at the configured Daylight Saving Start and Daylight
Saving End dates. E.g. almost all European countries use DST, and most change on the
same date and time, starting on the last Sunday in March and ending on the last Sunday in
October.
On the Daylight Saving Start date, the clocks are changed everywhere at 01:00 UTC, i.e.
from local times of 01:00/02:00/03:00 to 02:00/03:00/04:00
On the Daylight Saving End date, the clocks are changed everywhere at 01:00 UTC, i.e.
from local times of 02:00/03:00/04:00 to 01:00/02:00/03:00.
Click on Apply to apply your configuration.
b. IEEE 1588 PTPv2

With the Precision Time Protocol (PTP) IEEE 1588 it is possible to synchronize the clocks
of different end devices over a network at speeds faster than one microsecond.
To enable IEEE 1588, Set Enable to Enable and click Apply. After this step, the other fields
can be set as well. Set Mode to Auto, Preferred Clock or Slave Mode. After
synchronization, the system time will display the correct PTP server time.
Click on Apply to apply your configuration.
4.1.5 Jumbo Frame

What is a Jumbo Frame?
The typical Ethernet frame has a size of 64 to 1518 bytes. This is sufficient for general
purposes. However, when a user wants to transmit large files, the files maybe segmented
into many small sized packets. While the transmitting speed becomes slow, long size Jumbo
EB-M775-E-2 Page 29 of 116

frames can solve the issue. The switch allows you to configure per port, the size of the MTU,
Maximum Transmission Unit. The default value is 1518 bytes. The maximum Jumbo Frame
size is 9216 bytes. You can freely change the available packet size. Jumbo frames can only
be used on the Gigabit Ethernet interfaces.
MTU Size. The range is 1500 to 9216 bytes. the default is 1518 bytes.
4.1.6 DHCP Server

A DHCP Server generates IP addresses for switches that have a DHCP Client enabled.
a. Server Configuration
The DHCP Server can be enabled or disabled via the Global Setting.
Page 30 of 116 EB-M775-E-2

DHCP Server configuration:

If the DHCP server is enabled, enter the Network IP address for the DHCP server IP pool,
the Subnet Mask, the Default Gateway address of the DHCP server and the Lease Time
(=amount of time before the assigned IP address expires, e.g. 604800 s = 7 days) for the
DHCP client.
Excluded Address List:
If there is an IP address that cannot be used by the DHCP Server to assign to the DHCP
clients or switches, fill this IP address out in the Excluded IP Address field and click Add.
This IP address will be listed. The address can be removed from the address list by selecting
the address and clicking the Remove button.
Static Port/IP Binding List:
Port and IP Address: Via Port and IP Address, it is possible that a specific port always
receives the same IP address from the DHCP server. Add the Port and IP Address in the
DHCP server distributing range, Click Add to add a new Port and IP address for a specified
link partner. To remove it from the list, just select the rule and click Remove.
Static MAC/IP Binding List:
MAC Address and IP Address: Via MAC Address and IP Address, it is possible that a
specific MAC Address always receives the same IP address from the DHCP server. Add the
MAC Address and IP Address in the DHCP server distributing range, Click Add to add a new
MAC Address and IP address for a specified link partner. To remove it from the list, just
select the rule and click Remove.
Option 82/IP Binding List:
Option82 IP Address Configuration: You can add some IP Address, Circuit ID and Remote
ID in the DHCP server distributing range. Circuit ID is the port where the DHCP request was
received. Remote ID is the MAC address of the remote device. Click Add to add a new
binding. To remove it from the list, just select the rule and click Remove.
b. DHCP Leased Entries
DHCP Leased Entries: the switch provides a list with assigned IP addresses by the DHCP
server. It will show the MAC and IP addresses that were assigned by the DHCP server. Click
the Reload button to refresh the listing.
c. Option82 Information
DHCP Relay Agent: When using multiple subnets, it is possible that there is no DHCP
server available in the client subnet but only a DHCP Relay function. This DHCP Relay
forwards or relays the DHCP messages from clients to the DHCP Server in another subnet
EB-M775-E-2 Page 31 of 116

and vice versa. Select Enable or Disable DHCP Relay Agent to enable/disable the Relay
Agent function.
Helper Address: This is the DHCP Server’s IP address. Four IP addresses are possible. Fill
out the field with preferred IP address of DHCP Server, and then click Apply to activate the
DHCP relay agent function. All the DHCP packets from client will be modified by the policy
and forwarded to DHCP Server through the gateway port.
Relay Policy: The Relay Policy is used when the DHCP request is relayed through more
than one switch. The switch can drop, keep or replace the MAC address of the DHCP
Request packet.
• drop: Drops the option 82 field and does not add any option 82 field.
• keep: Keeps the original option 82 field and forwards it to the DHCP server.
• replace (default after enabling the Relay Agent): Replaces the existing option 82 field
and adds a new option 82 field.
DHCP Option82: You can configure the DHCP Option82 setting of the Relay Agent. Choose
‘Default’ or you can input any string for Circuit ID and Remote ID. By default, Circuit ID is
the combination of VLAN-ID/Port number. Remote ID is the MAC address of Relay Agent.
Page 32 of 116 EB-M775-E-2

....
4.1.7 Backup and Restore

Prerequisite1: activate TFTP Client on the PC via Control Panel → Programs → Programs
and Features → Turn Windows features on or off → Enable ‘TFTP Client’;
Prerequisite2: Turn off Windows Firewall on the PC via Control Panel → System and
Security → Windows Firewall: Programs → Turn Windows Firewall on or off → Turn of
Windows firewall (recommended) all selections.
With the Save command, you can save (or backup) the current Switch configuration (stored
in the flash memory of the switch) into a file on the admin Management PC, to a USB or the
TFTP server. This will allow you to go to Restore (=Upload, Restore, Load) command later
to restore the configuration file back to the switch. Before you restore the configuration file,
you must place the backup configuration file on the PC, TFTP or SFTP server. The switch
will then download this configuration file back into the flash.
Note: After a Restore (=Load) of a config file, the ETS switch must be rebooted to activate
the config file.
There are 3 modes for users to backup/restore the configuration file, Local Files mode,
TFTP and SFTP Server mode.
Local Files mode: In this mode, the switch acts as the file server. Users can browse the
target folder and then enter a new (or existing) file name to back up the configuration. Users
can also browse the target folder and select an existing configuration file to restore the
configuration back to the switch. This mode is only provided by the web interface while CLI is
not supported.
EB-M775-E-2 Page 33 of 116

• Load settings from file: Click on Choose File button to browse the configuration files in
your computer and click on Upload to restore.
• Save settings to file: Click on Save… to save settings to configuration file on your
computer.
TFTP Server mode: In this mode, the switch acts as TFTP client. Before you do so, make
sure that your TFTP server is ready. Next, enter the IP address of TFTP Server and Backup
configuration file name. This mode can be used in both CLI and the web interface.
• IP: Enter the IP address of your TFTP Server.
• File Name: File to which the switch configuration will be saved or backed up. Enter a new
file name or select an existing one.
• Save and Reload Setting: Choose Save or Load in the list and click on Submit to perform
the action.
SFTP Server mode: In this mode, the switch acts as SFTP client. Before you do so, make
sure that your SFTP server is ready. Next, enter the IP address of SFTP Server and Backup
configuration file name. This mode can be used in both CLI and the web interface.
• IP: Enter the IP address of your SFTP Server.
• User Name: This is the user name for SFTP connection.
• Password: This is the password for SFTP connection.
• File Name: File to which the switch configuration will be saved or backed up. Enter a new
file name or select an existing one.
• Save and Reload Setting: Choose Save or Load in the list and click on Submit to perform
the action.
Configuration File: The configuration file of the switch is a pure text file. It can be opened
and viewed via a text-editor.You can also modify the file, add/remove some configuration
settings, save the file in the text-editor and restore it back to the switch.
Startup Configuration File: After you saved (via save in the tree view) the running
configuration to flash, the new settings will be kept and work after a reboot. You can use
show startup-config to view it in CLI. The Backup command can only backup such
configuration file to your PC or TFTP server.
Technical Tip:
Default Configuration File:
The switch provides the default configuration file in the system. You can use the Re-
set button, Reload command to reset the system.
Running Configuration File:
The CLI of the switch allows viewing the latest settings running in the switch. The in-
formation shown here are the settings you have set up but not yet saved to flash.
The settings not yet saved to flash will not work after a reboot of the switch. You can
use show running-config to view it in the CLI.
NOTE: Selecting the wrong configuration file might mess up the entire configuration.
Page 34 of 116 EB-M775-E-2

4.1.8 Firmware Upgrade

Check that your ETS firmware is compatible with the product Release Line that you are
using. This can be verified via the 'Downloads' tool on the OTN Systems Customer and
Partner Portal (= https://extranet.otnsystems.com). In this tool, select your Product Release
Line and expand the 'ETS' section to verify the released firmware versions. If needed, the
correct firmware version can be download from here to your PC as well. If needed, upgrade
the firmware on the ETS as described below.
CAUTION: Make sure that all the ETSes in your entire ETS subnet run on the same
Firmware!
NOTE: CAUTION: The switch will automatically reboot after upgrading the firmware on the
switch. Alert the attached switch users before upgrading!
There are 3 modes for users to upgrade the firmware: Local File mode, TFTP and SFTP.
Local File mode: In this mode, the switch acts as the file server. Users can browse the target
folder and choose the firmware file on the listed box.This mode is only provided by Web UI
while CLI is not supported.
• Select file: Browse the target folder and choose the firmware *.bin file and click on
Upgrade to upgrade.
TFTP mode: In this mode, the switch acts as the TFTP client. Before you do so, make sure
that your TFTP server is ready. And then please type the IP address of TFTP Server IP
address. This mode can be used in both CLI and Web UI.
• File Name: The filename of the firmware.
• Click on Upgrade to perform the upgrade.
EB-M775-E-2 Page 35 of 116

SFTP mode: In this mode, the switch acts as the SFTP client. Before you do so, make sure
that your SFTP server is ready. And then please type the IP address of SFTP Server IP
address. This mode can be used in both CLI and Web UI.
• Port: This is the Port of the SFTP server.
• File Name: The filename of the firmware.
• Name: Name for SFTP connection.
• Password: Password for the SFTP connection.
• Click on Upgrade to perform the upgrade.
4.1.9 Load Default (Factory Default)

In this section, you can reset the complete switch configuration to the default configuration
except for the IP Address. Click Reset to set the switch configuration back to the default
switch configuration. The default setting will be operational after rebooting the switch.
a. Description after clicking Reset button

The popup screen below asks for Reset confirmation. Click OK to start.
The screen below announces that you have to reboot the switch to load it with the default
settings (except for the IP address). Click Ok to close the announcement.
Page 36 of 116 EB-M775-E-2

Reboot the switch manually via Reboot in the tree view.

NOTE: This ETS switch has a hardware Reset button. The default IP address can be set
viat this button or via logging in in the Serial Console (see §3.3) and using the
commands 'reload default-config file' and 'reboot'.
4.2 Port Configuration

The Port Configuration group enables you to enable/disable ports, configure port auto-
negotiation, speed, duplex, flow control, rate limit control and port aggregation settings. It
also allows you to view port status and aggregation information.
Following commands are included in this group:
• Port Control
• Port Status
• Rate Control
• Storm Control
• Port Trunking
• CFM Configuration (CFM = Connectivity Fault Management)
4.2.1 Port Control

Port Control commands allow you to enable/disable port states or configure the port auto-
negotiation, speed, duplex and flow control.
Select the port you want to configure and change the settings accordingly.
State: enable or disable this port. A disabled port stops to link to the other end and stops to
forward any traffic. The default setting is Enable which means all the ports are active when
you receive the switch.
Speed/Duplex: configure the port speed and duplex mode. Possible values in the list below:
• RJ45 Port 1..8 (gi1..gi8):
• AutoNegotiation (=default value)
• 10M Full Duplex(10 Full)
• 10M Half Duplex(10 Half)
• 100M Full Duplex(100 Full)
• 100M Half Duplex(100 Half)
• SFP Port 9, 10 (gi9, gi10):
• AutoNegotiation (=default value)
• 100M Full Duplex (100 Full)
EB-M775-E-2 Page 37 of 116

Flow Control:
Flow control is done by means of pause frames. The pause frame instructs the source to
stop sending packets for a specific period of time. The sending station waits the requested
time before sending more data. The flow control mechanism in the ETS is symmetric: this
means that the ETS is able to send and receive pause frames
• Enable: enables the symmetric flow control. Also make sure that the destination party has
activated flow control.
• Disable: disables the flow control mechanism. Received packets are discarded when no
incoming packet buffer space is available.
Description: Enter a description for the used port, e.g. ‘StreetCamera2‘.

Technical Tips: If both ends are not configured at the same speed, they can’t link with each
other. If both ends are not in the same duplex mode, they will be connected by half-duplex
mode.
4.2.2 Port Status
Port Status shows the current configured port settings and some extra status information.
SFP DDM (=Digital Diagnostics Monitoring) shows extra status info on the used SFPs.
SFP fiber transceiver with Digital Diagnostic Monitoring (DDM) function is supported. This
function provides real time information of the SFP transceiver and allows the user to
diagnose the optical fiber signal received and launched. The information of this SFP DDM
will be listed in the table below.
CAUTION!
Port Status:
Page 38 of 116 EB-M775-E-2

Port: Port interface number.

Link: Link status. Up → Link UP. Down → Link Down.
State: Enable → port is enabled. Disable → port is disabled/shut down.
Speed/Duplex: Current working speed/duplex mode of the port.
Flow Control: State of the flow control.
SFP Vendor: Vendor name of the used SFP.
Wavelength: Wavelength of the used SFP.
Distance: Typical distance that can be reached with the used SFP.
SFP DDM (table):

SFP Scan / Eject:
• --- : No SFP is plugged into that port.
• Scan: Scan the plugged in SFP.
• Eject: Eject (=soft disconnect) the plugged in SPF in a controlled way. A soft-ejected SFP
can be connected again by rebooting the switch or by pull out and plug in the SFP again
to reconnect the SFP.
SFP DDM:
• Enable : Enable SFP DDM (=Digital Diagnostics Monitoring).
• Disable: Disable SFP DDM (=Digital Diagnostics Monitoring).
Temperature - Current: Shows the current temperature of the used SFP.

Temperature - Range: Shows the allowed temperature range of the used SFP.
Tx Power (dBm) - Current: Shows the current Transmit power of the used SFP.
Tx Power (dBm) - Range: Shows the Transmit power range of the used SFP.
Rx Power (dBm) - Current: Shows the current Receive power of the used SFP.
Rx Power (dBm) - Range: Shows the current Receive power range of the used SFP.
Eject all button: Warning: CAUTION! It soft-disconnects all SFPs without any alert. As a
result, only if the management channel (Management VID) is programmed on one of the SFP
ports, this ETS switch will be completely isolated. Pull out and plug in the SFPs again to
reconnect the SFPs.
See chapter §1.5 to find a reference to the TRMs (SFP/SFP+/XFP/QSFP+) manual.
4.2.3 Rate Control
EB-M775-E-2 Page 39 of 116

Rate limiting is a form of flow control used to enforce a strict bandwidth limit at a port. You
can program separate transmit (Egress Rule) and receive (Ingress Rule) rate limits in Kbps
at each port, and even apply the limit to certain packet types as described in §4.2.4. Rate
values can be entered in steps of 64 Kbps.
4.2.4 Storm Control

Storm Control is similar to Rate Control. Rate Control limits all the traffic to a specific
configured rate, whereas Storm Control allows the operator to define the rate for specific
packet types.
Packet type: You can assign the Rate for specific packet types based on packet number per
second. The packet types of the Ingress Rule listed here include Broadcast, DLF
(Destination Lookup Failure) and Multicast. Choose Enable/Disable to enable or disable the
storm control of specific packets on a specific port.
Rate (packet/sec): This column allows you to manually assign the limit rate of the port. The
unit is packets per second. The limit range is from 2 to 262142 packet/sec, zero means no
limit. The maximum available value of Fast Ethernet interface is 148810, this is the maximum
packet number of the 100M throughput.
Enter the rate value of the port you want assign and press the Enter key. Click Apply to
apply the configuration of all the configured ports. Applying all the ports’ storm control values
at once may take some time and the web interface may become slow.
4.2.5 Port Trunking

The Port Trunking configuration allows you to group multiple Ethernet ports in parallel to
increase the link bandwidth. The aggregated ports can be viewed as one physical port so
that the bandwidth is higher than merely one single Ethernet port. The member ports of the
same trunk group can balance the load and are a backup for each other port. The Port
Trunking feature is usually used when you need a higher bandwidth for the backbone
network.
Following terminology is also used in the Ethernet world and they all refer to Port Trunking:
Link Aggregation Group (LAG), Link Aggregation Control Protocol (LACP), Ethernet Trunk,
Ether Channel…etc. Most of these implementations are now conform to IEEE standard,
802.3ad.
The aggregated ports can interconnect to the other switch which also supports Port Trunking.
The ETS switch supports two types of port trunking:
Type: 802.3ad LACP: Use this type of trunking when the other side of the trunk also uses
802.3ad Link Aggregation Control Protocol (LACP).
Type: Static Trunk: Use this type of trunking when the other side of the trunk uses
non-802.3ad LACP.
Page 40 of 116 EB-M775-E-2

a. Aggregation Configuration
E.g. port4 and port5 belong to Trunk4 (802.3ad LACP), port9 belongs to Trunk5 (802.3ad
LACP).
....
Trunk Size: The switch can support up to 8 trunk groups. Each trunk group can support up
to 8 member ports. Since the member ports should use same speed/duplex, max groups for
100M ports would be 7, 3 for gigabit ports.
Group ID: Group ID is the ID for the port trunking group. Ports with the same group ID
belong in the same group. Group ID means that the port is not port of a trunk group.
Trunk Type: Static and 802.3ad LACP. Each Trunk Group can only support Static or
802.3ad LACP, not a mix of both. Select the needed type.
Load Balance Setting: Type: There are several load balance types based on dst-ip
(Destination IP), dst-mac (Destination MAC), src-dst-ip (Source and Destination IP), src-dst-
mac (Source and Destination MAC), src-ip (Source IP), src-mac (Source MAC).
b. Aggregation Information
This page shows the status of port aggregation. Once the aggregation ports are negotiated
well, you will see following status.
EB-M775-E-2 Page 41 of 116

Group ID: Name or ID of the Trunk Group which aggregation status is displayed.
Type: Indicates the type of the Trunk Group: Static or LACP.
Aggregated (ports): The ports are aggregated with other ports in the same trunk. The port
links must be up.
Individual (ports): When LACP is enabled for a port, but no other port is assigned to the
same trunk as this port, this port is displayed in the Individual Column. The port links must be
up.
Link Down (ports): When LACP is enabled for a port, member ports of the LACP group
which are not linked up will be displayed in the Link Down column.
4.2.6 CFM Configuration (Currently not supported)
See also §4.4.11
4.3 Power Over Ethernet (PoE)
Power over Ethernet is fully compliant with IEEE 802.3af and IEEE 802.3at that include 1-
event with IEEE 802.1AB LLDP classification and 2-event classification mechanisms for PoE
MDI (=Media Dependent Interface).
This ETS switch adapts up to 8-Port PoE injectors in port 1 to port 8, each port with the
ability to deliver 30W according the IEEE 802.3at standard.
The total PoE power budget for the entire switch is 240W.
The following commands are included in this section:
• PoE Control
• PD (=Power Device) Status Detection
• PoE Scheduling
• PoE Status
ATTENTION: During the PoE operating, the surface will accumulate heat and caused
surface temperature becomes higher than ambient temperature. Do not touch device surface
during PoE operating!
4.3.1 PoE Control

In WiMax systems, Wireless APs, and high-end PoE applications, there are various types of
PDs (=Powered Device), for instance, IEEE 802.3af, IEEE 802.3at 2-event, IEEE 802.3at
LLDP, and non-standard type.
Page 42 of 116 EB-M775-E-2

To be compatible with different PDs, ETS-2GS8GP is designed with 4 powering modes,

including IEEE 802.3af mode, IEEE 802.3at 2-event mode, IEEE 802.3at LLDP classification
mode as well as forced powering mode to meet all of the PD types in the industry. As a
result, they can be flexibly used to deliver power for different PoE-enabled devices in various
applications.
IEEE 802.3at LLDP provides smart power budget control behavior to fulfill the needs of
higher end setups requiring exact high power delivery. By using the ongoing dynamic re-
negotiation function of the IEEE802.3at LLDP, the ETS-2GS8GP can perform more
intelligently by dynamically reallocating power to the PDs. ETS-2GS8GP implements the 2-
event and Link Layer Discovery Protocol (LLDP) PoE into the system for efficient power
budget negotiation between PSE (=Power Source Equipment) and PD devices.
....
...
EB-M775-E-2 Page 43 of 116

a. PoE System/ Emergency Power Management

This section allows to configure PoE on switch level.
This ETS switch is offered with dual 48VDC power inputs for providing true PSU redundancy.
An alarm relay output signals when a power input fails or other critical events occur. To
ensure reliable power delivery, other advanced PoE power management features include
individual port status monitoring, emergency power management (2 power supply indication
inputs for quick shutdown of ports (according to the priority list below) in cases where power
supply failure occurs and voltage/current monitoring and regulation.
Power management allows this ETS switch to determine the exact power draw per port and
to balance each port PoE power output accordingly. This, in turn, allows the switch to power
higher and lower wattage devices according to user-definable parameters such as maximum
available power, and maximum allowable power per port.
The priority order is decided by port number according the following port number list from
high priority to low priority: 1-2-3-4-5-6-7-8. This means that port ‘1’ always gets its power
first.
DC1: Refers to the PSU connected to PW1
DC2: Refers to the PSU connected to PW2
Budget (W) (default=0, range [0...240]):
In DC1: Fill out PoE Budget and output voltage of the external PSU connected to DC1;
In DC2: Fill out PoE Budget and output voltage of the external PSU connected to DC2;
Both power budget of DC1 and DC2 will be aggregated up to a maximum of 240W. 0 means
power is disabled or not available.
Voltage (V) (default=48, range [46...57]): the voltage applied to the power inputs
PW1/PW2. Fill out the specification of the connected power supply. If this value mismatches
the PSU specification, it may cause the system draw more current from one PSU which with
the higher voltage. When using the external AC/DC PSU V30812-A5020-A97, fill out 56V in
the voltage field.
Power Budget Warning Level (%): Power Budget Warning Level is used for power
utilization monitoring, (valid range is 0 – 100 %, and 0 means that the function is disabled) If
the power utilization using is more than this configured level, the warning event will happen.
E.g. if the Power budget is 240W and the Power Budget Warning Level is 10 (%) it means
that if more than 24W is consumed by PDs, an event will be triggered in the Monitor and
Diag→ Event Logs. This event log will only be created if the PoE Powering of this port is
enabled in the PoE Event Selection in the Warning → Event Selection → PoE Event
Selection (see §4.10.2).
Page 44 of 116 EB-M775-E-2

b. Port Configuration
This section allows to configure PoE on port level.

PoE Mode: You can pull down the PoE Mode column configure this mode:
• Enable: Enable PoE on this port;
• Disable: Disable PoE on this port;
• Schedule: Set port in PoE in scheduling control mode;
Powering Mode: Pull down the drop-down list and assign one of the following modes to the
port:
• IEEE 802.3af: ETS-2GS8GP could only deliver power when the connected PD is
IEEE 802.3af as well.
• IEEE 802.3at (LLDP): ETS-2GS8GP would deliver power to the PD that supports
IEEE 802.3at LLDP.
• IEEE 802.3at (2-Event): ETS-2GS8GP would deliver power to the PD that supports
IEEE 802.3at 2-Event feature.
• Forced mode: once the PoE mode is enabled, the port will be directly powered even
if there is no Ethernet cable plugged in. Please be careful when using forced mode.
Budget Mode:
• Auto: Budget limitation is performed automatically, the Budget field will not be taken
into account.
• Manual: If set to Manual, the configured Budget will be taken into account.
Budget (W) (range: 0.44 … 31Watt): If Budget Mode is set to Manual, the Power Budget
can limit the consumption of PoE and ensures the PoE port can get the pre-allocated power
budget. The range of Power Budget is 0.4 to 31 Watt. The max effective power budget of
802.3af powering mode is 15.4 Watt even if the power budget is set to 31 Watts.
Priority: supports 3 levels: Critical, High and low. If the system PoE consumption is over the
system budget control, the PoE system will disable the PoE delivery on the low priority ports
until the power consumption becomes smaller than the PoE system budget.
Click the Apply button to apply the new parameter settings.
EB-M775-E-2 Page 45 of 116

c. PD Status Detection
This function provides automatic detection of a remote device powered by ETS-2GS8GP. If
the remote system crashes or is unstable, ETS-2GS8GP will perform a system reboot by
turning off and on again to trigger the remote device.
You can enable/disable the PD Status Detection function. Click the Apply button after
configuring it. See figure below:
Enable PD Status Detection: Enables/Disables the PD Status Detection.

IP Address: Enter the IP address of the PD that you want to detect on this specific port.
Cycle Time(s): The Cycle Time is the gap per detection. Make sure to set it bigger than the
boot time of the powered device. E.g., if you connect an IP camera, it usually has a boot time
of 40 à 50 seconds. As a result, you could set the cycle time to 90 seconds.
Once you enabled this function, the PoE Switch will request the PD and turn-off the PoE
power if the PD system does not echo the request. After the cycle time, the PoE switch will
start to request the PD again. This function is also called LPLD (=Link Partner Line
Detection).
Delete: Enable this checkbox and click Apply to clear the filled out fields.
Click the Apply button to apply the new parameter settings.
DO NOT TOUCH DEVICE SURFACE DURING PoE PROGRESS

HIGH POWER FEEDING!!!
4.3.2 PoE Scheduling

The PoE Scheduling control is a powerful function to help you save energy and reduce
operational cost. You need to configure PoE Scheduling and select a target port manually to
enable this function.
Page 46 of 116 EB-M775-E-2

If you want PoE scheduling on a specific port, make sure to have set Mode to Schedule for
this specific port first, see §4.3.1b.
PoE Schedule on <port N°>: is Enabled/Disabled (see §4.3.1b). Select here the port for
which you want to configure the schedule.
Next, configure the schedule itself via clicking the desired checkboxes in the time schedule
table. An enabled checkbox means that PoE is enabled for that hour on that day.
4.3.3 PoE Status
The PoE Status page shows the operating status of each PoE power on each PoE Port. The
power information includes power input voltage and budget, power aggregation and
redundancy status, Total Power budget, Total Output Power, Warning Water Level and
Utilization (=Total Output Power/Total Power Budget). The PoE Port information includes
PoE mode, Operation status, PD class, Power Budget, Power Consumption, Voltage and
Current.
Power aggregation: if the PSUs are in the same priority level (primary, secondary), the PSU
powers will be aggregated or added up to a maximum of 240W. A higher Power voltage
(default = 56 V) will increase the priority of the PSU.
NOTE: AC/DC PSU V30812-A5020-A97 is by default shipped with an output voltage of 56V.
NOTE: You can configure the power budget and voltage of DC Power 1 and 2. The valid
range of budget is 0 – 240 Watts
Example:
• DC1 Power: 56 V, 240W (V30812-A5020-A97)
• DC2 Power: 56 V, 240W (V30812-A5020-A97)
Example Result:
• DC1 and DC2 have the same voltages (56 V) and therefor the same priority. They
both contribute to the Primary Power → Primary Power by DC1 and DC2;
• →Total Power Budget = 240W (240W is maximum)
• Primary Power by DC1 and DC2
• Secondary Power: Not available.
EB-M775-E-2 Page 47 of 116

Power redundancy: if the powers are in a different priority level (=different voltages (V)), the
secondary power will be backup power for primary.
4.3.4 Example
Next, we illustrate how to configure IEEE 802.3at LLDP. Assume the PD is ready for IEEE
802.3at LLDP, we only still need to configure the ETS switch.
• In the ETS switch, enable the LLDP (refer to Topology Discovery §4.11.1)
• Enable PoE Mode on the ETS-2GS8GP port to which the PD is connected e.g. Port 4
• Set Powering Mode to 802.3at (LLDP) on this Port 4.
When ETS-2GS8GP and the PD are ready to IEEE802.3at LLDP, IEEE 802.3at LLDP starts
operation. Finally, see the result on PoE Status (refer to §4.3.3).
After configuring, please click the Apply button to enable and perform the configurations.
DO NOT TOUCH DEVICE SURFACE DURING PoE PROGRESS HIGH POWER FEEDING
ETS PD
IEEE 802.3at LLDP
Port4 (Power Device)
Page 48 of 116 EB-M775-E-2

4.4 Network Redundancy

It is critical for industrial applications that the network remains non-stop. The ETS switch
supports standard STP, RSTP, MSTP, Redundant Gigabit Ethernet Ring, Rapid Dual
Homing.
(R)STP is the abbreviation of (Rapid) Spanning Tree Protocol. If a switch has more than one
path to a destination, it will lead to message loops that can generate broadcast storms and
quickly bog down a network. The spanning tree was created to eliminate the negative effects
of message loops in switched networks.
A spanning tree uses a spanning tree algorithm (STA) to automatically sense whether a
switch has more than one path to communicate with another switch. It will then select the
best path (primary), and block the other path(s). It will also keep track of the blocked path(s)
in case the primary path fails. Spanning Tree Protocol (STP) introduced a standard method
to accomplish this. It is specified in IEEE 802.1D-1998.
Later on, RSTP was introduced. RSTP is an improved version of STP providing much faster
spanning tree convergence after a topology change. This is specified in IEEE 802.1w. In
2004, IEEE 802.1w is included into IEEE 802.1D-2004 version. This switch supports both
RSTP and STP (all switches that support RSTP are also backward compatible with switches
that only support STP).
MSTP is supported as well. The MSTP protocol is a direct extension of RSTP. It can provide
an independent spanning tree for different VLANs. It simplifies network management,
provides for even faster convergence than RSTP by limiting the size of each region, and
prevents VLAN members from being segmented from the rest of the group (as sometimes
occurs with IEEE 802.1D STP).
STP/RSTP/MSTP can be enabled/disabled per port.
The ETS switch can aggregate multiple Rings within one switch. All the ports can be
configured as the ring port of a ring, each ring has its own Ring ID and the Ring ID will be
added to the watchdog packet to monitor the ring status.
The Ring ports can be LACP/Port Trunking ports, after having aggregated ports to a group,
the group of ports can act as the Ring port of the Ring.
Advanced RDH technology also facilitates the ETS switch to connect with a core managed
switch easily and conveniently. With RDH technology, you can also couple several
Redundant Gigabit Ethernet Ring or RSTP clouds together.
The ETS switch also supports 802.1D-2004 version Rapid Spanning Tree Protocol (RSTP).
The new version of RSTP standard includes 802.1D-1998 STP, 802.1w RSTP.
• STP Configuration
• STP Port Configuration
• STP Information
• MSTP Configuration
• MSTP Port Configuration
• MSTP Information
• Redundant Gigabit Ethernet Ring
• Redundant Gigabit Ethernet Ring Info
• ERPS Configuration
• ERPS Information
• Command Lines for Network Redundancy
EB-M775-E-2 Page 49 of 116

4.4.1 Differences RSTP → Redundant Gigabit Ethernet
STP/RSTP Redundant Gigabit Ethernet

To avoid message loops (broadcast storms) in meshed To avoid message loops (broadcast storms) in ring
networks networks, works in 10/100/1000 Mbps rings.
Due to long synchronization times, a maximum of 25 Maximum 250 ETS switches per Redundant Gigabit
ETS switches per RSTP domain is allowed Ethernet ring
All the Ethernet ports of the switch can be involved Only two ports of the switch can be involved in a
together in RSTP Redundant Gigabit Ethernet Ring. As a result,
reconfigures much faster than RSTP.
Root bridge: Ring Master:
combination of Bridge Priority & MAC Address combination of Device Priority & MAC Address
1. Lowest value of Bridge Priority = Highest 1. Highest value of Device Priority =
priority → becomes Root Bridge Highest priority → becomes Ring Master
2. At least two bridges have the same highest 2. At least two devices have the highest
Priority → Lowest MAC Address of these Priority → Highest MAC Address of
two becomes Root Bridge these two becomes Ring Master
If all the used ports have the same path cost, the lowest If all the used ports have the same path cost, the
Port number will be blocked. highest Port number will be blocked.
Either RSTP is used in a network or Redundant Gigabit Ethernet, but never both together.
4.4.2 STP/RSTP/MSTP
This web page below allows you to enable/disable STP/RSTP/MSTP for the entire switch,
configure the global settings and port settings.
ATTENTION: Due to long synchronization times, an advised (or absolute) maximum of 7 (or
20) hops of ETS switches per STP/RSTP domain is allowed.
The window below is valid for STP, RSTP, and MSTP.
• STP Mode:
• Disable / STP / RSTP / MSTP
Depending on the selected mode, pages within the Network Redundancy tab are activated or
deactivated as indicated in the table below:
Page 50 of 116 EB-M775-E-2

Page STP Mode

Disable STP or RSTP MSTP
STP Configuration Deactivated Activated Activated
STP Port Configuration Deactivated Activated Activated
(STP State)
STP Information Deactivated Activated Deactivated
MSTP Configuration Deactivated Deactivated Activated
MSTP Port Configuration Deactivated Deactivated Activated
MSTP Information Deactivated Deactivated Activated
Set STP Mode to STP, RSTP or MSTP to use one of these protocols. It will be enabled for
the entire switch. It can be enabled/disabled per port later on. Select Disable if none of these
protocols must be active. Click the Apply button to activate the selected mode. After clicking
the Apply button, the Bridge Configuration parameters become active.
• Bridge Configuration
Bridge Priority (0-61440): A lower priority value has more priority than a higher priority
value. STP/RSTP uses the bridge ID to determine the root bridge, the bridge with the lowest
bridge ID becomes the root bridge. The bridge ID is composed of the bridge priority and the
bridge MAC address. The bridge with the lowest priority value (=highest priority) becomes
the lowest bridge ID. If all the bridge IDs have the same priority, the bridge with the lowest
MAC address will then become the root bridge.
NOTE: The bridge priority value must be in multiples of 4096.
Max Age (6-40): Enter a value from 6 to 40 seconds here. This value represents the time
that a bridge will wait without receiving STP/RSTP/MSTP configuration messages before
attempting to reconfigure.
If this ETS switch is not the root bridge, and if it has not received an ‘hello’ message from the
root bridge in an amount of time equal to Max Age, then this switch will reconfigure itself as a
root bridge. If two or more devices on the network are recognized as a root bridge, the root
bridges will negotiate again to set up a new spanning tree topology.
Hello Time (1-10): Enter a value from 1 to 10 seconds here. The hello time is the time
between each bridge protocol data unit (BPDU) ‘hello message’ that is sent on a port to
check the current STP/RSTP/MSTP status.
The root bridge of the spanning tree topology periodically sends out a ‘hello’ message to
other devices on the network to check if the topology is up and running.
Forward Delay (4-30): Enter a value between 4 and 30 seconds. This is the amount of time
that a port waits before changing from the STP/RSTP/MSTP learning and listening state into
the forwarding state.
Click on Apply to apply your settings.
NOTE: Following rule must be applied to configure Hello Time, Forwarding Delay, and Max
Age parameters.
2 × (Forward Delay Time – 1 sec) ≥ Max Age Time ≥ 2 × (Hello Time value + 1 sec)
EB-M775-E-2 Page 51 of 116

4.4.3 STP Port Configuration

This page allows you to configure the port parameter after setting the STP Mode in the STP
Configuration page. It will be enabled for the entire switch. It can be enabled/disabled per
port later on.
Depending in what STP mode the ETS switch is, following parameters can be configured.
Port STP Mode

Configuration
Parameters Disable STP RSTP MSTP
STP Port STP Port STP Port STP Port MSTP Port
Config. Config. Config. Config. Config.
STP State read-only configurable configurable configurable ---
Path Cost read-only configurable configurable --- configurable
Port Priority read-only configurable configurable --- configurable
Link Type read-only read-only configurable --- configurable
Edge Port read-only read-only configurable --- configurable
Note: '---' = not available or relevant
Select the port you want to configure and you will be able to view current settings and status
of the port.
STP State: Once STP/RSTP/MSTP has been enabled for the entire switch, all the ports are
STP/RTP/MSTP enabled by default. This mode can be enabled/disabled per port. Disable
STP state when connecting a device in order to avoid STP waiting periods. When the MSTP
mode has been selected, it can be disabled/enabled per port in the STP Port Configuration
page. It means that the MSTP will be enabled/disabled per port and not per MSTP instance.
Path Cost: Enter a value between 1 and 200000000. This value represents the “cost” of the
path to the other bridge from the transmitting bridge at the specified port. If there is more
than one path from switch A to switch B, the path with the lowest path cost will be the
selected path for data transmittal, the other paths will be blocked via blocking the connected
ports.
Port Priority: Enter a value between 0 and 240, using multiples of 16. This is the value that
decides which port should be blocked by priority in a LAN.
Link Type: Enter one of the 3 possible link types: Auto, P2P (only for RSTP) and Shared
(only for RSTP). Some of the rapid state transitions that are possible within STP depend
upon whether the port of concern can only be connected to another bridge (i.e. it is served by
a point-to-point LAN segment), or if it can be connected to two or more bridges (i.e. it is
Page 52 of 116 EB-M775-E-2

served by a shared-medium LAN segment). This function allows link status of the link to be
manipulated administratively. Always Auto and read-only in STP mode.
• Auto: it is auto-negotiated between two or more ports whether P2P or Shared mode is
configured.
• P2P (only for RSTP mode): P2P mode is configured on this port. It means that this port
can only connect to one other port. The 2 ends work in full duplex mode.
• Shared (only for RSTP mode): P2P mode is disabled on this port. It means that this port
can connect to multiple other ports. The 2 ends may connect through a share media and
work in half duplex mode.
Edge Port: A port directly connected to the end stations (e.g. PC, laptop...) cannot create a
bridging loop in the network.
• Always disable (read only) in STP mode;
• Can be set to enable/disable in RSTP mode;
In RSTP mode, to configure this port as an edge port, set the port to the Enable state. When
e.g. the PC connects to an admin edge port on the switch, this switch port will change from
blocking to forwarding state 4 seconds after the connection has been made.
Click Apply to apply your settings.
4.4.4 STP Information

This page shows the information of the root switch and port status after setting the STP
Mode (in the STP Configuration page) to STP or RSTP.
This web page shows the information of the root switch and the port status.
Root Information: Displays the root Bridge ID, Root Priority, Root Port, Root Path Cost.
Displayed Timing Info: Max Age, Hello Time and Forward Delay of the BPDU sent from the
root switch.
Port Information: Displays the port Role, Port State, Path Cost, Port Priority, Link Type,
Edge port mode, Aggregated (ID/Type).
EB-M775-E-2 Page 53 of 116

4.4.5 MSTP
MSTP (Multiple Spanning Tree Protocol) is a direct extension of RSTP. MSTP can provide
an independent spanning tree for different VLANs. It simplifies network management,
provides for even faster convergence than RSTP by limiting the size of each region, and
prevents VLAN members from being segmented from the rest of the group (as sometimes
occurs with IEEE 802.1D STP).
While using MSTP, there are some new concepts of the network architecture. A switch may
belong to different groups, act as root or designate switch, generate BPDU for the network to
maintain the forwarding table of the spanning tree. MSTP can also provide multiple
forwarding paths and enable load balancing.
One VLAN can be mapped to a Multiple Spanning Tree Instance (MSTI). The maximum
amount of MSTI is 16, range from 0-15. The MSTP builds a separate Multiple Spanning Tree
(MST) for each instance to maintain connectivity among each of the assigned VLAN groups.
An Internal Spanning Tree (IST) is used to connect all the MSTP switches within an MST
region. An MST Region may contain multiple MSTP Instances.
A Common Spanning Tree (CST) interconnects all adjacent MST regions and acts as a
virtual bridge node for communications with STP or RSTP nodes in the global network.
MSTP connects all bridges and LAN segments with a single Common and Internal Spanning
Tree (CIST). The CIST is formed as a result of the running spanning tree algorithm between
switches that support the STP, RSTP, MSTP protocols.
To use MSTP, set the STP Mode (in the STP Configuration page) to MSTP. It will be
enabled for the entire switch. It can be enabled/disabled per port later on.
• Bridge Configuration Parameters → see §4.4.2.
4.4.6 MSTP Configuration

This page allows to configure the Region Name and its Revision, mapping the VLAN to the
MST Instance and check the current MST Instance configuration. The network can be
divided virtually into different Regions. The switches within the same Region should have the
same Region and Revision number.
• MST Region Configuration
• Add MST Instance
• MST Instance Configuration
Page 54 of 116 EB-M775-E-2

• MST Region Configuration
Region Name: The name for the Region. Maximum length: 32 characters.
Revision: The revision for the Region. Range: 0-65535; Default: 0
Click on Apply to apply your settings.
ATTENTION: when ETS switches and other Devices must operate together in the same
MSTP instance, make sure to configure the same Region Name and Revision for the other
devices as well.
• Add MST Instance
An MST Instance maps a VLAN and a priority to the instance. Before doing this, the VLAN
must have been created and member ports must have been assigned to the VLAN. Please
refer to the VLAN setting page in §4.5.
Instance ID: Select the Instance ID from the range [1..15].
VLAN Group: Enter the VLAN ID that must be mapped to the MST Instance.
Instance Priority: Assign the priority to the instance. It will overrule the configured Bridge
Priority.
Click the Add button to create the new MST Instance. The new MST Instance will be listed
in the ‘Current MST Instance Configuration List’.
• MST Instance Configuration
This is a list of all the MST Instances created on this switch. Click on the Apply button to
apply the settings. Removing an instance is possible via clicking an instance line and clicking
the Remove button. New instances are not shown instantly in this list. Click the Reload
button first to show new instances.
EB-M775-E-2 Page 55 of 116

4.4.7 MSTP Port Configuration

This page allows to configure the Port settings. Choose the Instance ID you want to
configure. The enabled MSTP and linked up ports within the instance will be listed in this
table. Note that the ports that do not belong to the Instance, or the ports that or not MSTP
activated will not be listed. The meaning of the Path Cost, Port Priority, Link Type and
Edge Port is the same as the definition of these parameters in STP/RSTP (see §4.4.3).
MSTP can be enabled/disabled per port:
Once MSTP has been enabled for the entire switch (STP Configuration page), all the ports
are MSTP enabled by default. This mode can be enabled/disabled per port in the 'STP Port
Configuration page' (see §4.4.3) by enabling/disabling the STP state. It means that the
MSTP will be enabled/disabled per port and not per MSTP instance.
Change these parameter values if needed and click Apply to apply your settings.
4.4.8 MSTP Information

This page allows you to see the current MSTP information. Choose the Instance ID first. If
the instance is not added, the information remains blank. The Root Information shows the
setting of the Root switch.
The Port Information shows the port setting and status of the ports within the instance.
Page 56 of 116 EB-M775-E-2

Click on “Reload“ to reload the MSTP information display.

4.4.9 Redundant Gigabit Ethernet Ring Configuration (RGERP)
RGERP = Redundant Gigabit Ethernet Ring Protection
The most common industrial network redundancy topology is a ring or a loop. Typically, the
managed switches are connected in series and the last switch is connected back to the first
one. Below, first a logical flow is described and followed with the web page settings.
• Logical Flow
Find below an example of the Redundant Gigabit Ethernet Ring or RGERP in action.
• Figure 1: ETS ring coupled to a backbone network, everything normal.
• Figure 2a, 2b: Ring Master determination based on the Device Prio and MAC
Address: Dedicated Ring Master or Auto Ring Master
• Figure 3→6: Ring Master blocks one of its ports based on the path cost = logical ring
break.
• Figure 7: Physical ring break occurs between two ETSes.
• Figure 8: Ring Master opens its blocked port.
• Figure 9: ETS Ring up and running with physical ring break, in case of Auto Ring
Master, the ring masters jumps next to the physical break.
• Figure 10: Physical break repaired, the Ring Master after the break reparation
remains the same in case of Auto Ring Master.
EB-M775-E-2 Page 57 of 116

Management PC 1 2a (Auto Ring Master)

2b (Dedicated Ring Master)
Backbone Network Backbone Network
ETS Ring Device Prio

with RGERP
Ring Master
- Highest MAC address in the ring 2a) Auto Ring Master (MAC Address):
or - All devices have same device priority, device with highest MAC address
- Highest device priority in the ring becomes ring master. If a physical ring break occurs, the ETS with the highest
MAC address next to the break becomes new Ring Master.
→ The ring master follows the physical ring breaks.
2b) Dedicated Ring Master (Device Priority):

- Device with highest device priority becomes ring master. The ring master
does NOT follow the physical ring breaks.
3 4
→ Purpose RGERP: 9 10
Avoid Loops in ETS Ring via a
configured logical ring break Port 9 Port 10
based on port path cost Path cost = 128 Path cost = 129
10 9
9 10
10 9 10 9 10 9
Ring Master Ring Master
Page 58 of 116 EB-M775-E-2

5 6
9 10
Path cost P10 > Path cost P9 Ethernet
P10 Blocked by RGERP traffic with logical ring
= logical ring break break in Ring Master
10 9
9 10
9 10 10 9 10 9 10 9
7 8
9 10
Physical Ring Break Ring Master opens P10
between two ETSes again within 50 ms
10 9
9 10
9 10 10 9 10 9 10 9
EB-M775-E-2 Page 59 of 116

9a (Auto Ring Master) 10a (Auto Ring Master)
Physical Ring Break Physical break repaired.

Only logical break.
NEW Ring Master remains.
Highest MAC address
Non-revertive! (*)
next to break
9 10 9 10
Ring Master ETS with highest MAC NEW Auto Ring Master
Address next to break next to break
becomes new Ring Master
(*) After a physical break recovery between a backbone node and
ETS, the ETS next to the break with the highest MAC address remains
the Ring Master, although it might not be the highest MAC address in
the entire ETS ring.
9b (Dedicated Ring Master) 10b (Dedicated Ring Master)
Physical Ring Break Physical break repaired. Dedicated Ring

Master blocks ports to create logical break.
9 10 10
Dedicated Ring Dedicated Ring Master Dedicated Ring

Master remains unblocks ports Master
Page 60 of 116 EB-M775-E-2

• Redundant Gigabit Ethernet Ring

The web page below allows you to enable the settings for the Redundant Gigabit Ethernet
Ring.
• Add Ring
To create a new Redundant Gigabit Ethernet Ring. Fill in a Ring ID in the range from 0 to 31.
If the Name field is empty, the name of this ring will automatically be ‘Ring<ID>’.
• Ring Configuration
Ring ID: Shows the ID of the listed ring (created in the ‘Add Ring’ step). The ID cannot be
changed (range [0…31]).
Name: Shows the name of the Ring. If it is not filled out at creation time, it will be
automatically named by the rule ‘Ring<ID>’.
Version: This is the Redundant Ring function version selection.
Redundant Ring: Provides redundancy in the ETS Ring topology.
Super Ring: not supported.
Device Priority: The switch with the highest priority (=highest value) will be automatically
selected as Ring Master. In the Ring Master switch, one of the ring ports will become
forwarding port and the other one will become blocking port. If all of the switches in the ring
have the same priority, the switch with the highest MAC address will be selected as Ring
Master.
Control Channel: Control Channel is used to tag the RGERP packets with a specific vlan ID
(The control Channel ID). If the Control Channel value = 0, then the RGERP packets will be
untagged. So Control channel (ID) = VLAN ID of the RGERP packets.
Ring Port1: You should have 2 Ring Ports in the switch, Ring Port1 and Ring Port2. No
matter this switch is the Ring Master or not, 2 ports should be selected to be Ring Ports. In
EB-M775-E-2 Page 61 of 116

the Ring Master switch, one of the ring ports will become the forwarding port and the other
one will become the blocking port.
Path Cost: Change the Path Cost of Ring Port1. If this switch is the Ring Master of a Ring,
then it determines the blocking port. The Port with the highest Path Cost within the Ring
Master switch will become the blocking port. If the Path Cost of both ports in the Ring Master
is the same, the port with the highest port number will become the blocking port.
Ring Port2: Assign another port for ring connection
Path Cost: Change the Path Cost of Ring Port2
Rapid Dual Homing (RDH): When you want to connect multiple Redundant Gigabit Ethernet
Rings with third party equipment, RDH allows to have a maximum of 7 multiple links for
redundancy. RDH will smartly choose the fastest link as the primary link and block all the
other links to avoid loops. If the primary link fails, RDH will automatically forward the
secondary link for network redundancy. If the secondary link fails, RDH will automatically
forward the third link for network redundancy etc....
RDH Ext. ID: Rapid Dual Homing Extension ID. The Extension ID and Ring ID cannot be the
same, when dual home to the same foreign network. The Extension ID ranges from 0 to 7.
With the combination of Extension ID (0 to 7) and Ring ID (0 to 31), we can now support up
to 256 (8*32) different dual homing rings.
Ring status: To enable/disable the Ring. Remember to enable the ring after having added it.
• Super Chain Configuration (Currently not supported)
• Rapid Dual Homing Configuration
Ring ID: Shows the ID of the listed ring (created in the ‘Add Ring’ step). The ID cannot be
changed (range [0…31]).
Auto Dectect: Enable RDH auto detect RDH port mode.
Port <port number>: Enable RDH on specific ports.
4.4.10 Redundant Gigabit Ethernet Ring Information

This page shows the Redundant Gigabit Ethernet Ring Information.
Ring ID: Ring ID.

Version: shows the selected Redundant Ring function.
Role: This Switch is RM (=Ring Master) or nonRM (=non Ring Master). Disabled means that
No RGERP is running or no ring available.
Page 62 of 116 EB-M775-E-2

Status:
• Normal: The redundancy is up and running and all links are physically OK.
• Abnormal: There is a physical break in the Ring.
RM MAC: No matter whether this switch is the Ring Master or not, the RM MAC shows the
Ring Master MAC address. It helps to find the redundant path.
Blocking Port: No matter whether this switch is the Ring Master or not, this field shows the
blocked port of the Ring Master.
Role Transition Count: Indicates how many times the switch Role has changed between
nonRM and RM.
Ring state Transition Count: Indicates how many times the Ring status has changed
between Normal and Abnormal state.
4.4.11 ERPS Configuration

(See also CFM Configuration: §4.2.6 )
ERPS = Ethernet Ring Protection Switching
ERPS (ITU-T under G.8032) is a Recommendation to provide sub-50ms protection and
recovery switching for Ethernet traffic in a ring topology and at the same time ensuring that
there are no loops formed at the Ethernet layer..
4.4.12 ERPS Information

This page shows the ERPS Information.
EB-M775-E-2 Page 63 of 116

• ERPS Information
Ring ID: Ring ID.

• Timer Information
Ring ID: Ring ID.

• Statistics
Ring ID: Ring ID.
4.5 VLAN
A Virtual LAN (VLAN) is a “logical” grouping of switches in order to limit a broadcast domain
to specific members of a group without physically grouping the members together. That
means that VLAN allows to eliminate useless network traffic so that only members of the
VLAN will receive traffic from the same VLAN members. Basically, creating a VLAN from a
switch is the logical equivalent of physically reconnecting a group of network devices to
another Layer 2 switch, without actually disconnecting these devices from their original
switches.
This ETS switch supports IEEE 802.1Q VLAN which is also known as Tag-Based VLAN.
Tag-Based VLAN allows VLANs to be created across different switches (see the figure
below) and uses VLAN control information stored in a VLAN header attached to the IEEE
802.3 packet frames. This tag contains a VLAN Identifier (VID) that indicates to which VLAN
this packet belongs.
Page 64 of 116 EB-M775-E-2

FLOOR3
VLAN3
VLAN2
VLAN1
FLOOR2
FLOOR1
• QinQ
The QinQ is originally designed to expand the number of VLANs by adding a tag to the
802.1Q packets. The original VLAN is usually identified as Customer VLAN (C-VLAN) and
the new added tag - as Service VLAN (S-VLAN). By adding the additional tag, QinQ
increases the possible number of VLANs. After QinQ has been enabled, up to 256 x 256
VLANs can be used. With different standard tags, it also improves the network security.
ATTENTION: Caution is necessary when enabling this feature in combination with other
backbone products. Verify whether the connected backbone nodes support this feature.
QinQ
The VLAN group in the web interface allows you to Add/Remove VLANs, configure QinQ,
configure port Ingress/Egress parameters and view the VLAN table.
Following commands are included in this VLAN group:
• VLAN Configuration
• VLAN Port Configuration
• VLAN Information
• PVLAN Configuration (currently not supported)
• PVLAN Port Configuration (currently not supported)
• PLVAN Information (currently not supported)
• GVRP Configuration (currently not supported)
• VLAN Table
4.5.1 VLAN Configuration

This web page allows to assign a Management VLAN, create a static VLAN and assign the
Egress rule for the member ports of the VLAN.
EB-M775-E-2 Page 65 of 116

Management VLAN ID: The switch supports management VLAN. The management VLAN
ID is the VLAN ID of the CPU interface so that only member ports of the management VLAN
can ping and access the switch. The default management VLAN ID is 99.
• CAUTION: By default, the management VLAN ID 99 is used on port 1 and the two trunk
ports. We advise to shut down port 1 and the unused trunk ports or remove those ports
from the management VLAN for security reasons.
• CAUTION: If an external RADIUS server is used, it is possible that the accessibility of

static configured VLANs is overruled by Dynamic VLAN assignment in the external
RADIUS server, see §4.9.6. If the external RADIUS server grants access to a new VLAN
that is not yet in the Static VLAN Configuration Table, a new line with the new VLAN will
be added to this table automatically.
Static VLAN:
Assign a VLAN ID and VLAN Name for a new VLAN here.
VLAN ID is used by the switch to identify different VLANs. A valid VLAN ID is between 1 and
4094. 1 is the default VLAN (ID).
VLAN Name is a reference for a network administrator to identify different VLANs. Maximum
length = 12 characters. If the VLAN name is left empty, the switch will automatically assign
the name ‘VLAN<VID>’.
Steps to create a new (static) VLAN: Enter a VLAN ID (e.g. 4) and NAME (e.g. test), and
click Add to create a new VLAN. As a result, the new VLAN is displayed in the Static VLAN
Configuration table, see figure below. After creating the VLAN, the VLAN status remains
Unused until you add ports to the VLAN.
Static VLAN Configuration (=Egress List)
A list of the created VLANs is displayed. Still, the egress (outgoing) port rule (Untagged or
Tagged) must still be configured here. E.g., in the list below, notice that the new VLAN ID 4
is created with VLAN name is ‘test’. The ports Egress rules are not configured yet (--).
Page 66 of 116 EB-M775-E-2

Click on ‘--‘ of a port to show the combo box. Select one of the following options:
• -- : Not available, port not assigned to that VLAN
• U: Untag: click ‘U’ to untag the egress/outgoing frames.
• T: Tag: click ‘T’ to tag the egress/outgoing frames.
NOTE: Before changing the management VLAN ID, remember that the port attached by the
administrator should be the member port of the management VLAN; otherwise the
administrator cannot access the switch via the network.
NOTE: A maximum of 256 VLANs can be created within the switch.
NOTE: Each new unique PVID that is added in the VLAN Port Configuration table in
§4.5.2 will automatically generate a new VLAN line in the Static VLAN
Configuration table in §4.5.1 with ‘VLAN ID’ = <PVID>, ‘Name’= VLAN<PVID>, and
‘1, 2, …port n’ = ‘--‘.
Click Apply to apply the configured settings. If you want to remove one VLAN, select the
VLAN entry and click the Remove Selected button.
• QinQ example: See §4.5.2.
4.5.2 VLAN Port Configuration

VLAN Port Configuration allows you to set up VLAN port parameters for a specific port.
These parameters include PVID, Tunnel Mode, EtherType (=currently not supported), Accept
Frame Type and Ingress Filtering.
PVID (Port VLAN ID): Enter a port VLAN ID here. PVID allows the switches to identify which
port belongs to which VLAN. To keep things simple, it is recommended that the used PVIDs
are part of the VID list. PVIDs must be in the range 1 to 4094. E.g. incoming untagged
frames at a specific port <n> will be tagged with the PVID of port <n>.
EB-M775-E-2 Page 67 of 116

Tunnel Mode: This is the parameter that makes QinQ possible.

• None: No QinQ will be configured on this port. Normal VLAN handling remains.
• 802.1Q Tunnel: Set this value on this port if this port must participate in QinQ and if
this port is connected to a C-VLAN. Ingress traffic: The port receives tagged frames
from the C-VLAN and adds a new tag (Port VID) as S-VLAN VID. Egress traffic: the S-
VLAN tag will be removed from the packets when the traffic is forwarded to the C-
VLAN. After ‘802.1Q Tunnel’ mode has been assigned to a port, the egress setting of
the port should be “Untag”, it indicates the egress packet is always untagged. This is
configured in the Static VLAN Configuration table in §4.5.1.
• 802.1Q Tunnel Uplink: Set this value on this port if this port must participate in QinQ
and if this port is connected to an S-VLAN. Ingress traffic: The port receives tagged
frames from the S-VLAN and removes the S-VLAN VID. Egress traffic: the S-VLAN
tag will be kept from the packets when the traffic is forwarded to the S-VLAN. After
‘802.1Q Tunnel Uplink’ has been assigned to a port, the egress setting of the port
should be “Tag”, it indicates the egress packet is always tagged. This is configured in
the Static VLAN Configuration table in §4.5.1.
• Within an ETS switch, all the ingress traffic on the ‘Tunnel’ ports is forwarded on all
the ‘Tunnel Uplink’ ports and vice versa. The figure below shows the relationship
between 802.1Q Tunnel and 802.1Q Tunnel Uplink:
ETS 802.1Q Tunnel 802.1Q Tunnel

Uplink Uplink
802.1Q Tunnel 802.1Q Tunnel
C-VLAN1 S-VLAN C-VLAN1
C-VLAN2 C-VLAN2
C-VLAN3 Packets from the three C-VLANs C-VLAN3

travel over the same link
Packets with 1tag: C-VID Packets with 2tags: C-VID Packets with 1tag: C-VID
S-VID
• QinQ Example: In the example picture below: port 4 and 5 must be configured as
‘802.1Q Tunnel’ and must have PVID 1000. Port 9 must be configured as ‘802.1Q
Tunnel Uplink’. VID 101 and VID 102 are transparent for this switch and must
therefore not be configured. A second part of the configuration must be done in the
Static VLAN Configuration table in §4.5.1.
101 1000
102 1000
101 101
ETS ETS
VID = 101 VID = 1000 VID = 101
4 9 9 4
5 5
VID = 102 VID = 102
102 102
Page 68 of 116 EB-M775-E-2

NOTE: Each new unique PVID that is added in the VLAN Port Configuration table will
automatically generate a new VLAN line in the Static VLAN Configuration table in
§4.5.1 with ‘VLAN ID’ = <PVID>, ‘Name’= VLAN<PVID>, and ‘1, 2, …port n’ = ‘--‘.
EtherType: Future use.
Accept Frame Type: Configure which frame types are accepted on this port.
• Admit All: the port can accept both tagged and untagged packets
• Tag Only: the port can only accept tagged packets
Ingress Filtering: Ingress filtering helps the VLAN engine to filter out undesired traffic on a
port. When Ingress Filtering is enabled, the switch checks whether the receiving port
belongs to the corresponding Egress VLAN list (see §4.5.1). Then the switch determines if
the frames can be processed or not on this port. For example (see screenshot §4.5.1), if a
tagged frame from VLAN99 is received, and Ingress Filtering is enabled for that specific port,
the switch will determine if that port is on the VLAN99 Egress list. If it is, the frame can be
processed. If it’s not, the frame will be dropped.
4.5.3 VLAN Information

This figure below shows your configured VLAN table, including VLAN ID, Name, Status and
Egress rule of the ports.
VLAN ID: ID of the VLAN.

Name: Name of the VLAN.
Status: Static indicates that this VLAN is a manually configured VLAN. Unused means that
this VLAN is created by the web interface and the CLI and has no member ports. This VLAN
is not operational yet. Dynamic means that this VLAN is learnt by GVRP.
After creating the VLAN, the status remains Unused until ports are added to the VLAN.
4.5.4 PVLAN Configuration (=Private VLAN = currently not supported)

4.5.5 PVLAN Port Configuration (=Private VLAN = currently not supported)
4.5.6 PVLAN Information (=Private VLAN = currently not supported)
EB-M775-E-2 Page 69 of 116

4.5.7 GVRP configuration (currently not supported)

GVRP (=GARP VLAN Registration Protocol) allows the switches to set-up VLANs
automatically rather than via manual configuration on every port of every switch in the
network.
GVRP Protocol: Allow the user to enable/disable GVRP globally.

State: After enabling GVRP globally, it is still possible here to enable/disable GVRP by port.
Registration: This value sets the registration mode of GVRP (default is Normal mode)
Normal / Fixed / Forbidden.
Join Timer: Controls the interval (in seconds) of sending the ‘GVRP Join BPDU’. An
instance of this timer is required on a per-Port, per-GARP Participant basis.
Leave Timer: Control the time in seconds to release the GVRP reservation after receiving
the ‘GVRP Leave BPDU’. An instance of the timer is required for each state machine that is
in the LV (=leave) state.
Leave All Timer: Controls the period in seconds to start the garbage collection of the
registered VLAN. The timer is required on a per-Port, per-GARP Participant basis.
4.6 Traffic Prioritization

Quality of Service (QoS) provides a traffic prioritization mechanism which allows users to
deliver a better service to certain flows. QoS can also help to decrease congestion problems
and ensure high-priority traffic is delivered first. This section allows to configure Traffic
Prioritization settings for each port with regard to the setting priorities.
QoS on the ETS switch supports:
• 8 physical queues
• Possible configurable prioritization methods
• IEEE 802.1p Cos tag (priority tag)
• IPv4 DSCP/TOS
• Possible configurable queueing schemes

• Round Robin Scheme
• Strict Priority Scheme
• Weighted Round Robin Scheme (WRR = Weighted Round Robin)
• Weighted Deficit Round Robin Scheme (DWRR = Deficit Weighted Round Robin)
Page 70 of 116 EB-M775-E-2

Following items can be configured:

• QoS Setting
• CoS-Queue Mapping (Cos = layer2)
• DSCP-Priority Mapping (DSCP = layer3)
• CLI Commands for Traffic Prioritization
4.6.1 QoS Setting

QoS is not a field with bits and bytes in a frame. It is more a general naming for delivering a
better flow service based on the Cos and the DSCP field.
• QoS Trust Mode
The QoS Trust Mode can be configured as follows:

• 802.1P priority tag: The priority will follow the 802.1P CoS priority that you have
assigned.
• DSCP/TOS code point: The priority will follow the DSCP/TOS code point that you
have assigned.
• Queue Scheduling:
The Queue Scheduling rule can be configured as follows:

Round Robin Scheme: Packets in each of the CoS queue have an equal opportunity to
send packets. Even though several packets may be available in a higher-priority queue. For
example, there are 8 queues A, B, C, D, E, F, G and H, the packets are sent in the following
sequence: A1,B1,C1,D1,E1,F1,G1,H1 A2,B2,C2,D2,E2,F2,G2,H2
A3,B3,C3,D3,E3,F3,G3,H3 . . .
Strict Priority Scheme: Packets with higher priority in the queue will always be processed
first. So as long as there are high priority packets, the lowest priority packets will not get a
chance to get through.
EB-M775-E-2 Page 71 of 116

Weighted Round Robin Scheme: This scheme allows users to assign new weight ratio for
each class. Weight (default=1) indicates the amount of packets in this queue that will be
processed in the entire cycle. Value 10 is the highest ratio. The ratio of each class is
calculated as below:
Wx / W0 + W1 + W2 + W3 + W4 + W5 + W6 + W7 (Total volume of Queue 0-7)
The scheduler will select one packet from each CoS queue and go around all queues which
have a pending packet. For example, there are 8 queues A, B, C, D, E, F, G and H with their
respective weights of 8, 7, 6, 5, 4, 3, 2, 1, the packets are sent in the following sequence:
A1,B1,C1,D1,E1,F1,G1,H1 / A2,B2,C2,D2,E2,F2,G2 / A3,B3,C3,D3,E3,F3 / A4,B4,C4,D4,E4
/ A5,B5,C5,D5 / A6,B6,C6 / A7,B7 / A8 / A1,B1,C1,D1,E1,F1,G1,H1 -- start again...
Weighted Deficit Round Robin Scheme: This scheme allows you to assign a new weight
ratio for each class. Weight (default=empty, [0..2032 bytes], steps of 2 bytes) indicates the
amount of bytes per cycle. A setting of 0 establishes pure priority scheduling. The
programmable ratio setting ranges from 1 to 127.
Find below some extra info on this scheduling scheme. The figure below shows a detailed
example.
• Per scheduler transmit cycle, high priority queues will be processed first;
• The configured weight is some sort of credit amount to transport packets (bytes);
• The scheduler will transmit packets from each queue that has still enough weight (or
credits) to transmit the next packet.
• E.g. If the configured weight for a queue = 500, and the next packet in the queue is 400
bytes (valid for 400 credits), it means that the packet can and will be transmitted in this
cycle. If the next packet in the same queue and same cycle is 300 bytes with only 100
credits remaining (=500-400), this packet will not be transmitted in this cycle. The 100
remaining credits will be saved for the next cycle on this queue. The scheduler moves on
to the next queue and processes the other queues similarly.
• After all queues have been processed, the scheduler will start again to process all
queues starting with queue 7, starting again with new credits = initial weight (for this
queue) + remaining credits from previous cycle.
Scheduler Transmit Cycle1 Scheduler Transmit Cycle2 Scheduler Transmit Cycle3

Packets in queue
waiting for transmit start credits start credits start credits
High Prio credits left credits left credits left
7c 7b 7a nothing sent,
Q7 120 220 130
90 130 80 100 80 20 not enough 120 0
(=100+20) credits for (=100+120)
next packet
90
(weight=100 bytes)
6c 6b 6a
Q6 nothing sent,
100 100 200 300 200 0 300 100 200 500 0
queue empty
(=300+200)
(weight=300 bytes) 100
5c 5b 5a nothing sent,
Q5 not enough 1000 600 700
300 200 600 500 500 200 300 500
credits for
next packet
(=500+500) (=500+200)
200
(weight=500 bytes)
Q4
Scheduler
 = empty
Q0
transmitted on link
Low Prio 5c 7c 7b 5b 5a 6c 6b 6a 7a
300 90 130 200 600 100 100 200 80
last first
Page 72 of 116 EB-M775-E-2

• Port Setting
Queue: Indicate the queue (=default port priority value) for each port for untagged or priority-
tagged frames. The Queue 7 is the highest port-based queue, 0 is the lowest queue. When
the ETS switch receives the frames, the switch will attach the value to the CoS field of the
incoming VLAN-tagged packets.
CAUTION: It is advised not to use or map queue '7' when RGERP (or ring protection) is
active in your ETS network.
Default priority type is COS. The system will provide default a COS-Queue table to which you
can refer for the next command.
Click Apply to enable the settings.
4.6.2 CoS-Queue Mapping
This web page below allows to map the possible CoS values to the 8 physical queues.
Users can freely modify the mapping table or follow the default suggestion of the IEEE
802.1p standard. IEEE 802.1p suggestion values are used as default values.
• Queue 0 (=lowest priority queue).
• Queue 7, (=highest priority queue).
• CAUTION: if RGERP is active in your network, is it is strongly advised that:
• CoS 7 is always mapped to the highest priority queue 7;
• CoS [0..6] are mapped to a queue different from the highest priority queue;
Click Apply to enable the configured settings.

4.6.3 DSCP-Priority Mapping
This web page below allows to map the possible DSCP values to the 8 physical queues.
Users can freely modify the mapping table to follow the upper layer 3 switch or routers’
DSCP setting.
• DSCP values 0..7 = mapped to physical Queue 0 (=lowest priority queue).
• DSCP values 8..15 = mapped to physical Queue 1
• DSCP values 56..63 = mapped to physical Queue 7 (=highest priority queue)
• Queue 0 (=lowest priority queue).

• Queue 7 (=highest priority queue).
EB-M775-E-2 Page 73 of 116

Click Apply to enable the configured settings.
4.7 Multicast Filtering

For multicast filtering, the ETS switch uses the IGMP Snooping technology. IGMP (Internet
Group Management Protocol). IGMP snooping is the process of listening to IGMP network
traffic. IGMP snooping, as implied by the name, is a feature that allows a layer 2 switch to
"listen in" on the IGMP conversation between hosts and routers by processing the layer 3
IGMP packets sent in a multicast network.
IGMP snooping is designed to prevent hosts on a local network from receiving traffic for a
multicast group they have not explicitly joined. It provides switches with a mechanism to
prune multicast traffic from links that do not contain a multicast listener (IGMP client). A
switch that does not IGMP snoop will, by default, 'flood' multicast traffic to all the ports in a
broadcast domain (or the VLAN equivalent).
A typical multicast application examples is broadcasting streaming media to an audience that
has tuned into the event by setting up a multicast group membership.
Enabling IGMP Snooping allows the ports to detect IGMP queries, report packets, and
manage multicast traffic through the switch. IGMP has three fundamental types of messages,
as shown below:
Message Description
Query A message sent by the Querier (an IGMP router or a switch) which asks
for a response from each host that belongs to the multicast group.
Report A message sent by a host to the Querier to indicate that the host wants to
be or is a member of a given group indicated in the report message.
Leave Group A message sent by a host to the Querier to indicate that the host has quit
as a member of a specific multicast group.
You can enable IGMP Snooping and IGMP Query functions here. You will see the
information of the IGMP Snooping function in this section, including different multicast
Page 74 of 116 EB-M775-E-2

groups’ VID and member ports, and IP multicast addresses that range from 224.0.0.0 to
239.255.255.255.
• IGMP Query
• IGMP Snooping/Filtering
• GMRP Configuration (currently not supported)
• CLI Commands for Multicast Filtering
4.7.1 IGMP Query
This page allows users to configure the IGMP Query feature. It means that the switch can be
configured as IGMP Querier (=a switch that sends out IGMP Queries). IGMP Query can only
be enabled on the management VLAN. If you want to run the IGMP Snooping feature in
several VLANs, make sure that each VLAN has its own IGMP Querier first.
The IGMP Querier periodically sends query packets to all end-stations on the LANs or
VLANs that are connected to it. For networks with more than one IGMP Querier, the switch
with the lowest IP address becomes the IGMP Querier.
In the IGMP Query selection, you can select V1, V2 or Disable. V1 means IGMP V1 General
Query and V2 means IGMP V2 General Query. The query will be forwarded to all multicast
groups in the VLAN. Disable allows you to disable the switch of being an IGMP Querier.
Enable: you can Disable (=default) / Enable the IGMP querier on the ETS switch.
Version: When the IGMP querier has been enabled, you can select v2 (=Version2) or v1
(=Version1). Version1 means IGMP V1 General Query and Version2 means IGMP V2
General Query. The query will be forwarded to all multicast groups in the VLAN.
Query Interval: The period in seconds between two consecutive IGMP Queries sent by the
IGMP Querier.
Query Maximum Response Time(s): The maximum time in seconds that the IGMP Query
receiver has to answer the IGMP Querier.
4.7.2 IGMP Snooping/Filtering

This web page is to enable the IGMP Snooping/Filtering feature, assign IGMP Snooping for a
specific VLAN, and view the IGMP Snooping table (=mix from dynamic learnt or static
configured entries). The ETS switch supports IGMP snooping V1/V2/V3 and IGMP query
V1/V2.
EB-M775-E-2 Page 75 of 116

IGMP Snooping Global Setting: Enable or Disable IGMP Snooping.

IGMP Snooping VLAN Setting: IGMP Snooping settings per VLAN.
IGMP Snooping: After having the IGMP Snooping feature globally enabled, you can enable
IGMP Snooping for one or more specific VLAN(s) or VID. Click Enable/Disable to
activate/deactivate IGMP snooping for the selected VLAN(s).
Immediate-Leave: Enable or Disable immediate leave requests.
Last Member Query Interval: The last member query interval is the maximum amount of
time in seconds between group-specific query messages, including those sent in response to
leave-group messages.
Group Time Out (seconds):
• Auto: Group Time Out = 3 * IGMP Query-Interval.
• Custom value: overrules the ‘Auto’. E.g. fill out 27 for a Group Time Out of 27 seconds.
Filtering Mode:
• Flood Unknown: Send Unknown Multicast to All Ports.
• Discard Unknown: An unknown-multicast is a multicast message from an IP-address for
which no ‘Join’ request message was sent by one of the multicast group members.
Discard Unknown Multicast traffic.
• Source Only Learning: Enable or disable IGMP Snooping Source Only Learning
function on a specific VLAN. When it is enabled, the ETS sends the packets with an
unknown MAC/IP Multicast address to query ports. Click Apply.
Click Apply to apply the configured settings.
IGMP Snooping Table: This table lists the multicast group IP addresses, the VLAN ID it
belongs to, and its interface. This table is learnt automatically and cannot be edited. The
table refreshed automatically, but if it does not refresh fast enough, click the Reload button
to refresh the table on command.
The ETS switch supports 256 multicast groups.
Page 76 of 116 EB-M775-E-2

4.7.3 GMRP Configuration (Currently not supported)
4.8 SNMP
Simple Network Management Protocol (SNMP) is a protocol used for exchanging
management information between network devices. SNMP is a member of the TCP/IP
protocol suite. The ETS switch supports SNMP v1 and v2c and V3.
An SNMP managed network consists of two main components: agents and a manager.
• Agent: An agent is a management software module that resides in the managed switch
itself. The agent also translates the local management information from the managed
device into a SNMP compatible format.
• Manager: The manager is the console through the network, e.g. Management PC.
SNMP
Manager
(e.g. Management PC)
SNMP
Agent Agent Agent
MIB MIB MIB
Switch Switch Switch

(managed device) (managed device) (managed device)
Following topics are handled in this group:

• SNMP V1/V2c Configuration
• SNMP V3 Profile
• SNMP Trap
• CLI Commands for SNMP
EB-M775-E-2 Page 77 of 116

4.8.1 SNMP V1/V2c Configuration

This page allows users to configure an SNMP V1/V2c Community. The most basic form of
SNMP security is the Community String. SNMP Community Strings are like passwords for
network elements because SNMP V1/V2c does not request you to enter a password before
accessing the SNMP agent. The community includes 2 privileges: Read Only and Read and
Write.
With the Read Only privilege, you can only read the values of the MIB tables. The default
community string is ‘Public’.
With the Read and Write privilege, you can read and set the values of the MIB tables. The
default community string is ‘Private’.
The ETS switch allows users to assign 4 community strings. Enter the community string and
select the privilege. Next, click Apply.
NOTE: When installing the device in your network for the first time, it is highly
recommended to change the community string. Since most SNMP management
applications use Public and Private as their default community name!
4.8.2 SNMP V3 Profile

SNMP v3 provides more security functions when the user performs remote management
through the SNMP protocol. It delivers SNMP information to the administrator with user
authentication. All data communication between the ETS switch and the administrator is
encrypted to ensure secure communication. Authenticated users can be added here.
CAUTION: Default Profile.

DO NOT DELETE/REMOVE
ATTENTION:
A SPECIFIC PREDEFINED/CONFIGURED SNMPV3 PROFILE IS USED TO MANAGE THE
ETS SWITCHES. DO NOT REMOVE THIS DEFAULT PROFILE IN THE ETS SWITCH.
Page 78 of 116 EB-M775-E-2

User Name: Choose a username of a new SNMP profile that must be added and
authenticated, and fill it out.
Security Level: Here the user can select the following levels of security: None,
Authentication, and Authentication with privacy.
Authentication Level: select the authentication level, either MD5 (Message-Digest algorithm
5) or SHA (Secure Hash Algorithm). MD5 is a widely used cryptographic hash function with a
128-bit hash value. SHA (Secure Hash Algorithm) hash functions refer to five Federal
Information Processing Standard-approved algorithms for computing a condensed digital
representation. The SNMP v3 parameters in the SNMP tool must be configured with the
same authentication method.
Authentication Password: Enter the SNMP v3 user authentication password.
Privacy Protocol: This is the SNMP V3 user Privacy Protocol, DES.
DES Password: Enter the password for SNMP v3 user DES Encryption.
Click the Add button.
4.8.3 SNMP Trap

An SNMP Trap is a message which is initiated by a network element and sent to the network
management system. For example, an ETS switch could send a message if one of its
redundant power supplies fails.
An SNMP Trap is the notification feature defined by the SNMP protocol. All the SNMP
management applications can understand such trap information.
This page allows users to Enable SNMP Trap, configure the SNMP Trap server IP (=IP
Address of the Management PC or Server), Community name, and trap Version V1 or V2c.
Click Add to add the SNMP Trap Server in the Trap Server Profile list.
Note: The ETS switches use port 6021 to send out SNMP traps.
EB-M775-E-2 Page 79 of 116

4.9 Security
The ETS switch provides several security features to secure the Ethernet connection. The
features include Port Security and IP Security.
• Filters (IP filter, MAC filter, ARP Filter, Filter attach)
• Port Security (currently not supported)
• 802.1X (Configuration, Port Configuration, Port Information)
• Sticky Link
• DHCP Snooping (currently not supported)
• DHCP Binding (currently not supported)
• IP Source Guard (currently not supported)
• Dynamic ARP Inspection (currently not supported)
• Dynamic ADP Inspection Statistics (currently not supported)
• Access Interface
• CLI Commands for Security
4.9.1 Filters: IP Filter

This filter is known as the Access Control List (=ACL) feature for IP Addresses.
Via ACE (= Access Control Entry), a user defines the Permit or Deny rule for a specific IP
address or IP group by a network mask in each ACE. One ACL may include several ACEs,
the system checks the ACEs one after one and forwards packets based on the result. Once
the rule conflicts, the older entry is selected as the forward rule.
• IP Filter Group
fill out a number from the shown ranges e.g. '1' for the IP Standard Access List. Click Add to
add the filter or rule in the table below. The filled out number will be the Group Number for
the filter.
Page 80 of 116 EB-M775-E-2

• IP Filter Setting
Group Number: The ID or the name for this IP Filter entry;

Protocol: Select a protocol you want associate with the filter. The field includes IP, TCP,
UDP or ICMP type. TCP, UPD or UCP only for extended Access Lists.
Source IP: the source IP Address that you want to configure.
Source Wildcard: select a wildcard from the dropdown list to allow a single host or a group
of hosts based on the wildcard. The wildcard is wildcard mask. Some of the allowance
examples in the table below.
Wildcard Bit Number of Note

allowance
Any 11111111.11111111. All All IP addresses.
11111111.11111111 Or a mask:
255.255.255.255
Host 0.0.0.0 1 Only the Source or
Destination host.
0.0.0.3 0.0.0.(00000011) 3
0.0.0.7 0.0.0.(00000111) 7
0.0.0.15 0.0.0.(11111111) 15
….
Note: The mask is a wildcard mask: the high-order bits of the mask that are binary zeros
determine how many corresponding high-order bits in the IP address are significant. The
selected action applies to any source address with these high-order bits.
Source Port: This is the source port of the L4 protocol (TCP/UDP).
Destination IP: the destination IP Address that you want to configure.
Destination Wildcard: similar as Source Wildcard
Destination Port: This is the destination port of the L4 protocol (TCP/UDP).
Egress Port: This is the outgoing (exiting) port number.
Action: This is the filter action, which is to deny or permit the packet
Click Add to add the filter in the IP filter List. The filter must be activated via Filter Attach (see
§4.9.3).
4.9.2 Filters: MAC Filter

MAC Filters can filter layer 2 traffic. This filter is known as the Access Control List (=ACL)
feature for MAC Addresses.
Via ACE (= Access Control Entry), a user defines the Permit or Deny rule for a specific MAC
address or group by a network mask in each ACE. One ACL may include several ACEs, the
EB-M775-E-2 Page 81 of 116

system checks the ACEs one after one and forwards packets based on the result. Once the
rule conflicts, the older entry is selected as the forward rule.
• MAC Filter Group
fill out a MAC Filter group name. Click Add to add the filter or rule in the table below. The
filled out name will be the Group Name for the filter.
• MAC Filter Setting
Group Name: The name for this MAC Filter entry;

Source MAC: the source MAC Address that you want to configure.
Source Wildcard: select a wildcard from the dropdown list to allow a single host or a group
of hosts based on the wildcard. The wildcard is wildcard mask. Some of the allowance
examples in the table below.
Wildcard Bit Number of Note

allowance
Any 11111111.11111111. All All IP addresses.
11111111.11111111 Or a mask:
255.255.255.255
Host 0.0.0.0 1 Only the Source or
Destination host.
0.0.0.3 0.0.0.(00000011) 3
0.0.0.7 0.0.0.(00000111) 7
0.0.0.15 0.0.0.(11111111) 15
….
Page 82 of 116 EB-M775-E-2

Note: The mask is a wildcard mask: the high-order bits of the mask that are binary zeros
determine how many corresponding high-order bits in the IP address are significant. The
selected action applies to any source address with these high-order bits.
Destination MAC: the destination MAC Address that you want to configure.
Destination Wildcard: similar as Source Wildcard
Action: This is the filter action, which is to deny or permit the packet
Click Add to add the filter in the MAC filter List. The filter must be activated via Filter Attach
(see §4.9.3).
4.9.3 Filters: ARP Filter

ARP filtering can help limit ARP traffic and restrict network use by certain users or devices.
The Add Filters feature filters ARP as it passes through a switch and permits or denies
packets crossing specified interfaces.
ARP Filter Group:
• Filter: Fill out a name to create a new ARP Filter Group and click Apply.
• Select/Filter: To remove a filter group, click the selected checkbox of the filter that must
be removed and click Remove.
ARP Filter Rule Setting:

Filter: Select one of the created Filter Groups in the drop down list.
Action: This is the filter action, which is to deny or permit the packet.
Source IP: This is the source IP address of the packet on which the action must be done.
Source MAC: This is the source MAC address of the packet on which the action must be
done.
Destination IP: This is the destination IP address of the packet on which the action must be
done.
Destination MAC: This is the destination MAC address of the packet on which the action
must be done.
Click Apply to add the filter in the ARP filter List. Note: The filter is already active and must
not be additionally activated via Filter Attach.
EB-M775-E-2 Page 83 of 116

4.9.4 Filters: Filter Attach

To apply a MAC Filter rule to an ingress port, select the ingress port via Port and a MAC
Filter via the MAC Filter drop down and click Apply. As a result, your applied filter shows up
in the Filter Attach List.
To apply an IP Filter rule to an ingress port, select the ingress port via Port and an IP Filter
via the IP Filter drop down and click Apply. As a result, your applied filter shows up in the
Filter Attach List.
Note: an ARP Filter must not be attached. Just configure one group and enter the value to
enable or disable an ARP Filter.
Page 84 of 116 EB-M775-E-2

4.9.5 Port Security (currently not supported)

4.9.6 IEEE 802.1X (Port Based Network Access Control)
IEEE 802.1X is an IEEE standard for port-based Network Access Control via RADIUS; it is
part of the IEEE 802 (802.1) group of protocols. It provides authentication to devices
attached to a LAN port, establishing a point-to-point connection or preventing access from
that port if authentication fails.
a. 802.1X Configuration
This panels configures the authentication method for the entire switch.
If the Authentication Method is Local, there is only one authentication method: via Local
registered users (username + password) in the ETS switch itself.
If the Authentication Method is RADIUS, there are two possible authentication methods for
a supplicant to ETS (supplicant = ETS client) via an external RADIUS server. See the
methods below, listed in the order of processing in order to get authentication access. All the
authentication data is configured in the external RADIUS server.
- (1st) (User) User Name + Password or Certificate
- (2nd) (Device) MAC Based
If one of the above authentication methods is succesful, the RADIUS server verifies if this
supplicant is configured in a VLAN. If yes, then the supplicant is dynamically assigned to this
VLAN in ETS (=Dynamic VLAN assigment). If the authentication fails or the supplicant is not
assigned to a VLAN in the RADIUS server, the supplicant will be assigned to the Guest
VLAN (<>0). If no Guest VLAN is configured (=0), the supplicant will be Unauthorized in ETS
or fall back to the default VLAN configuration in ETS. See the flow below.
NOTE: A dynamic or guest assigned VLAN always overrules the default VLAN configuration
in ETS.
Dynamic VLAN assignment (via external RADIUS Server)

RADIUS Server
ETS Retry
Fail 2 times
Supplicant A
Supplicant B Authenticating Guest VLAN
<> 0 in ETS
ETS Port
Supplicant C (User/Certificate/MAC Address) Configured? No Unauthorized
Success SNMP Trap will be generated
(Guest VLAN) during the case of
Yes
authentication failure
scenario.
Assigned to
RADIUS VLAN ETS Port Authorized
in RADIUS Yes (RADIUS VLAN)
Server?
(Supplicant A , VLAN A)
No (Supplicant B , VLAN B)
(Supplicant C , VLAN C)
Guest VLAN ETS Port

<> 0 in ETS Authorized
Configured? Yes
(Guest VLAN)
No
ETS Port
Authorized
(Default VLAN configured In ETS)
EB-M775-E-2 Page 85 of 116

System Auth Control: Enable/disable the 802.1x authentication function.

Authentication Method:
• RADIUS: RADIUS is an authentication server that provides a key for authentication, with
this method the user must connect a switch to the server.
• Local: If a user selects Local for the authentication method, the switch uses the local user
data base which can be created in this page via Local Radius User for authentication.
Click the Apply button to apply the System Auth Control and Authentication Method.
Authentication Method = Authentication Method =

RADIUS LOCAL
Radius Server:
• RADIUS Server IP: The IP address of the RADIUS server.
• Shared Key: The password for communication between the switch and the RADIUS
Server.
• Server Port: UDP port of the RADIUS server.
• Accounting Port: UDP port for packets that contain the information of account actions.
Secondary Radius Server:

• RADIUS Server IP: The IP address of the secondary RADIUS server.
• Shared Key: The password for communication between the switch and the secondary
RADIUS Server.
• Server Port: UDP port of the secondary RADIUS server.
• Accounting Port: UDP port for packets that contain the information of account actions.
Click the Apply button to apply the RADIUS Server and Secondary RADIUS Server
configurations.
Local Radius User: Here the user can add an Account/Password for local authentication.
Page 86 of 116 EB-M775-E-2

• Username: The username of the local RADIUS user.

• Password: The password of the local RADIUS user.
• VID: The VLAN ID of the local RADIUS user.
Click the Apply button to add a local RADIUS user.
Local RADIUS User List: This list shows the account information; User also can remove
selected accounts here.
• Name: The username of the local RADIUS user.
• Password: The password of the local RADIUS user.
• VID: The VLAN ID of the local RADIUS user.
Check Delete checkbox and click the Delete button to remove selected local RADIUS users.
b. 802.1X Port Configuration
This panel allows to configure the authentication per port.
Used if Port Control = Auto
Port Configuration:
• Port: Select the checkbox of the port that you want configure.
• Port Control: Force Authorized means that this port is authorized, the data is free to
travel in/out. Force unauthorized is just the opposite, the port is blocked. With both
Force Authorized and Force unauthorized, no RADIUS authentication occurs. If the
user wants to control this port with RADIUS authentication (either Local or via RADIUS
server), select Auto for port control.
• If Port Control = Auto:
• MAB (=MAC Authentication Bypass): (only relevant for Authentication method =

RADIUS) If this field is enabled, the functional MAC Address of a device will bypass to
the RADIUS Server for authentication. MAB can only be used to authenticate devices,
not users. Multiple users logged in to and using the same device, will get the same
network access via MAB.
• Re-authentication: If this field is enabled, the switch will ask the client periodically to
re-authenticate. The default time interval is 3600 seconds.
EB-M775-E-2 Page 87 of 116

• Max Request (default=2, range 1..10): The maximum number of times that the switch
allows a client request.
• Guest VLAN (default=0, range 0..4094): Only used if authentication fails. If this field is
set to 0, the port will be blocked after authentication fails. Otherwise, the port will be
set to Guest VLAN. Note: Guest VLAN = Quarantaine VLAN.
• Host Mode (default = single): If there is more than one device connected to this port,
set the Host Mode to Single, it means that only the first PC that authenticates
successfully can access this port. If this port is set to Multi, any device that
authenticates successfully will have access.
Multi-Host Authentication (via external RADIUS Server)
RADIUS Server
ETS-2GS8GP
Switch
Supplicant-1 Supplicant-2
• Admin Control Direction (default = Both):

• In: inbound traffic from the client to the ETS is blocked/dropped/ignored until the
user has been authenticated
• Both: Communication in both directions is blocked until the client has been
authenticated
Click the Apply Selected button to apply the 802.1x port configurations.
Click the Initialize Selected button to initialize the selected port (select a port by selecting
the port checkbox).
Click the Reauthenticate Selected button to re-authenticate the selected port.
Click the Default Selected button to set the selected port configuration and the port ‘Timeout
Configuration’ settings back to the default values.
Page 88 of 116 EB-M775-E-2

802.1x Timeout Configuration:

• Re-Auth Period(s) (default=3600, range[1..65535]): If reauthentication has been enabled
(see above), the ETS switch will periodically ask the client to re-authenticate itself
according the configured ‘Re-Auth Period’.
• Quiet Period(s) (default=60, range[1..65535]): When authentication failed, the ETS switch
will wait for the configured ‘Quit Period’ and try to communicate with the radius server
again.
• Tx Period(s) (default=30, range[1..65535]): Sets the period that the ETS switch waits for a
response from the client to an identity-request, before the ETS switch (re)transmits the
authentication request to the RADIUS server.
• Supplicant Timeout(s) (default=30, range[1..65535]): (supplicant = client) When relaying a

request from the RADIUS authentication server to the client, the amount of time that the
ETS switch waits for a response before (re)transmitting the request to the client.
• Server Timeout(s) (default=30, range[1..65535]): When relaying a response from the

client to the RADIUS authentication server, the amount of time that the ETS switch waits
for a reply before retransmitting the response to the server.
Click the Apply button to apply the 802.1x timeout configurations.
c. 802.1X Port Information

This panel shows the port status:
EB-M775-E-2 Page 89 of 116

• Port: The port identifier.
• Port Control: Force Authorized means this port is authorized, the data is free to travel
in/out. Force un-authorized means just the opposite, the port is blocked. Auto means that
this port is controlled using the RADIUS Authentication Server.
• MAB: Disable means that no MAB (=MAC Authentication Bypass) is allowed on this port.
Enable means that MAB is allowed.
• Port Status: The authorize status of the port. Authorized means that the client already has
some kind of authorization on the port. None means that the client still has to authenticate
via the Radius Server.
• Supplicant MAC Address: The MAC address of the authorized supplicant (=client), if any.
• Oper Control Direction: The operation control direction of the port.

• In: inbound traffic from the client to the ETS is blocked/dropped/ignored until the user
has been authenticated
• Both: Communication in both directions is blocked until the client has been
authenticated
Click the Reload button to reload 802.1x port status.
4.9.7 Sticky Link

The Sticky Link feature is a port protection feature. The feature shuts down a port when an
unexpected or unwanted cable is plugged in. A cable can only be plugged in and keep the
port status up when the port is armed, see further. A sticky link port is a port that has the
sticky link feature enabled.
Page 90 of 116 EB-M775-E-2

Status: Enables/Disables the sticky link feature on the port.

Auto Arm: Enables/Disables the Auto Arm feature on the port. The Auto Arm feature arms
the port automatically after a reboot. To arm = grant a sticky link port a one-time permission
to bring up a link. After arming a port, the link comes up immediately if the cable was already
plugged in or at the moment the cable is plugged in. Once the link has come up, the port will
be disarmed automatically.
Threshold (100…3000 ms): Indicates the time interval in which a temporary interrupt (due to
a glitch) on an active sticky link is allowed without bringing the sticky link down. When an
interrupt on the active link has been detected, the timeout timer starts:
• the interrupt disappears before the timeout timer expires: the link comes up again.
• the interrupt does not disappear before the timeout timer expires: The link will be forced
down or administratively disabled.
Arm Status: When the Sticky Link feature is enabled (per port), the port remains down until
the port is armed by the management system. When a sticky link port is armed (armed, link
down) it waits until a cable is plugged in to become active. Once the port is active
(disarmed, link up), it remains active until the cable is unplugged (disarmed, link down) or
until the port is manually shut down. When the cable is unplugged, the management systems
is notified (trap).
Link: Indicates the link status, Up or Down.
Click the Apply button to Apply the changes.
4.9.8 DHCP Snooping (currently not supported)

4.9.9 DHCP Binding (currently not supported)
4.9.10 IP Source Guard (currently not supported)
4.9.11 Dynamic ARP Inspection (currently not supported)
4.9.12 Dynamic ARP Inspection Statistics (currently not supported)
4.9.13 Access Interface
For security reasons, it is possible to shut down the Console port.
EB-M775-E-2 Page 91 of 116

Console: ‘On’ enables the port, ‘Off’ disables or blocks the port.
USB Storage (not supported).
4.10 Warning
The ETS switch provides several Warning features to monitor the status (changes) of the
switches and/or the network. Features: Fault Relay, Event Selection, System Log and SMTP
E-mail Alert.
• Fault Relay Setting
• Event Selection
• Syslog Configuration
• SMTP Configuration
• CLI Commands for Warning
4.10.1 Fault Relay Setting

This ETS switch provides 1 digital output (=Relay Output) that can be used to output ‘Events’
and/or ‘Special Functions’. Multiple events and special functions can be selected at the
same time. The output of the relay is an OR function of the selected items.
When using it as an ‘Event’:
• Normal operation: Relay Output = OFF = Relay Open = DO LED off
• Fault condition: Relay Output = ON = Relay Closed = DO LED on
When using it as a ‘Special Function’:

• The output is defined by the special function itself, see further on;
Events:
• Power failure
• Ethernet port Link failure
• Redundant Gigabit Ethernet Ring failure
• Ping failure
Special functions:
• Ping Reset failure
Page 92 of 116 EB-M775-E-2

• Dry Output (Periodical On/Off)

• Digital Input State
You can configure the relay output behavior in the Fault Relay Setting.
Select the event or special function that you want to trigger:

• Alarm 1: You can select multiple checkboxes to trigger this alarm relay. The '*' means that
the relay is triggered by the selected item, see example figure below.
• Status is off: All the selected events are OK (no fault) and the Dry Output, if selected,
(see also further) is in its OFF period;
• Status is on: The relay output is ON due to a selected event which is in a fault
condition or the Dry Output, if selected, (see also further) is in its ON period.
192.168.1.10 can be pinged
→ OK, No failure
→ Status is OFF
→ no Asterisk
Alarm
Relay OFF
192.168.5.100 can NOT be pinged

→ FAILURE
→ Status is ON
→ Asterisk
Alarm
Relay ON
Asterisk, indicates active condition or failure
EB-M775-E-2 Page 93 of 116

• Power Failure: If this checkbox is selected and a power failure of the selected PSU
occurs, the relay will turn on. You can select Power DC1, Power DC2 or Any.
• Link Failure: If this checkbox is selected and a link failure on one of the selected port
occurs, the relay will turn on.
• Ring: If this checkbox is selected and the Redundant Gigabit Ethernet Ring changes or
has a fiber break, a Ring link failure occurs, the relay will turn on as long as the new Ring
state holds on.
• Ping Failure: If this checkbox is selected, pings will be sent to the filled out IP address.
You can use the command to detect the network status. If a ping fails, the relay will turn
on.
• Ping Reset (special function): If this checkbox is selected, pings will be sent to the filled
out IP address. You can use the command to detect the network status. In a normal
situation, the IP address can be pinged and the relay will be ‘on’ until the ping fails. After
the ping failure, the pinging stops and the output relay goes into reset (= relay ‘off’) for an
amount of seconds (=Reset Time). After expiration of the Reset Time, the output relay is
set ‘on’ again for an amount of seconds (=Hold Time). After expiration of the Hold Time,
the pinging starts again.
• Pinging is at a rate of ± 1 ping/second.

• Reset Time (Sec): Time period in which the relay is set ‘off’ (=open). No pinging in
this period.
• Hold Time (Sec): Time period in which the relay is set to ‘on’ (=closed) again. No
pinging in this period. This time is usually the time used for rebooting the target
device. After expiration of the Hold Time, the pinging starts again.
5s 50s
‘on’ ‘off’ ‘on’ ‘on’
Continuously Ping Reset Hold Start to Ping

until ping error Relay Relay again until error
No Response
to Ping = error
• Dry Output (special function): If this checkbox is selected, the relay output can operate in
two modes: square wave generator or on/off switch by using the on/off periods in a
specific way.
• Square wave generator: You can set the on period (different from 0) and off period
(different from 0) in seconds (range is 1-65535s). If another event is selected as well
(e.g. ping) and this event is in failure, the square wave will be overruled as long as the
event is in failure.
Square wave: Relay = 5 seconds on, 10 seconds off
5s 10s 5s 10s
‘on’ ‘off’ ‘on’ ‘off’
• On/Off switch:
• Set relay continuously on: Set ‘On Period’ <> 0 and set ‘Off Period’ = 0
• Set relay continuously off: Set ‘On Period’ = 0 and set ‘Off Period’ <> 0.
Page 94 of 116 EB-M775-E-2

• DI State: The fault relay will be triggered if the selected digital input (=DI number) is low
or high. E.g., when DI State High is selected, the relay output will be on when the DI is
pulled high.
4.10.2 Event Selection

Event Types can be divided into three groups: System Events, Port Events, PoE Events
and SFP DDM Events. System Events are related to the overall function of the switch
whereas Port Events are related to the activity of specific ports.
System Event Warning Event is sent when…..

Device Cold Start The Power is cut off and then reconnected.
Device Warm Start The switch has been rebooted by the CLI or web interface.
Authentication Failure An incorrect password, SNMP Community String is entered.
Time Synchronization Failure The NTP Server is not accessible.
Power 1 Failure Power1 Fails or is broken.
Power 2 Failure Power2 Fails or is broken.
Fault Relay 1 The DO/Alarm/Fault Relay is on (=closed).
DI 1 Change The digital input changes.
Ring Event The Ring Master has changed or the backup path is
activated.
SFP Event When selected, the switch generates a notification if the
state of an SFP changes. This event is only applicable if an
SFP module is inserted into one of the switch's SFP slots.
Sticky Link Event Sticky Link status Changes
DHCP Snooping Event Currently not supported
DAI Event Currently not supported
IPSG Event Currently not supported
Port Event Warning Event is sent when…..
Disable No events are sent for the selected port.
Up A notification will be generated when the port connection
goes from down to up, e.g. connection to another port.
Down A notification will be generated when the port connection
goes from up to down, e.g. cable is pulled out.
Both The link status changes.
PoE Event Warning Event is sent when…..
Disable No PoE events are sent for the selected port.
Enable A PoE event occurs
EB-M775-E-2 Page 95 of 116

SFP DDM Event Warning Event is sent when…..

Temperature (degree) Range SFP temperature exceeds the configured range [Low, High]
Tx Power (dBm) Range SFP TX power exceeds the configured range [Low, High]
Rx Power (dBm) Range SFP RX power exceeds the configured range [Low, High]
Port Security Warning Event is sent when…..
(Currently not supported)
Disable No security events are sent for the selected port.
Enable A Port Security event occurs
4.10.3 SysLog Configuration

System Log provides the system administrator local (local mode) and/or remote (remote
mode) system logging history.
Local Mode: In this mode, the switch lists the occurred events, selected in the Event
Selection page, to the System Log table of the switch. The system logs can be monitored in
the [Monitor and Diag] / [Event Log] page.
Remote Mode: The remote mode is also known as the Server mode in the ETS switch. In
this mode, the Remote IP address of the System Log server must be filled out. The local
switch will send the occurred events selected in Event Selection page to the assigned
System Log server.
Page 96 of 116 EB-M775-E-2

Both: The local and remote mode will be enabled at the same time.
NOTE: An event logging is also kept in the Management Server. This logging is up to date
with information gathered via SNMP-traps and SNMP-polling.

NOTE: When enabling Local or Both mode, the system logs can be monitored in the
[Monitor and Diag] / [Event Log] page.
4.10.4 SMTP Configuration

The ETS switch has a Mail Alert feature. The switch will send the occurred events to the
remote SMTP mail server. As a result, the interested receiver receives event notifications by
E-mail. The mail warning is conform to the SMTP standard.
This page allows you to enable the Mail Alert feature, assign the SMTP Server IP address,
Sender and Receiver E-mail, username and password for SMTP server authentication.
EB-M775-E-2 Page 97 of 116

Field Description
SMTP Server IP Address Enter the IP address of the mail Server
Mail Account Enter the ‘from’ (=sender) mail address
Authentication Check the Authentication checkbox if authentication is
required for the indicated mail server.
User Name Enter the mail account user name (Max.40 characters)
Password Enter the mail account password
Confirm Password Enter the mail account password again for confirmation
4 email addresses can be configured to receive email alerts from the switch
Rcpt Email Address 1 The first mail address to receive email alerts from the
switch (Max. 40 characters)
Rcpt Email Address 2 The second mail address to receive email alerts from
the switch (Max. 40 characters)
Rcpt Email Address 3 The third mail address to receive email alerts from the
Rcpt Email Address 4 The fourth mail address to receive email alerts from the
4.11 Monitor and Diag

Following items can be monitored and/or diagnosed: LLDP Configuration, MAC Address
Table, Port Statistics, Port Mirroring, Event Logs and Ping.
• LLDP Configuration
• MAC Address Table
• Port Statistics
• Port Mirroring
• Event Logs
• Ping
• CLI Commands for Monitor and Diag
4.11.1 LLDP Configuration

LLDP = Link Layer (=layer2) Discovery Protocol = LLDP is a neighbor discovery protocol that
is used for network devices to advertise information about themselves to other devices on
the network. This protocol runs over the data-link layer, which allows two systems running
different network layer protocols to learn about each other. Select Enable to activate this
protocol on the switch.
LLDP Configuration:
Page 98 of 116 EB-M775-E-2

LLDP Timer (sec): The frequency of LLDP updates from a switch towards its neighbors. E.g.
if the LLDP timer = 30s (=default) then the switch sends out LLDP updates every 30
seconds.
LLDP Hold Time (sec): The amount of time that the switch holds the information of its
neighbors before discarding it. By default this is 120s.
LLDP Port State: This table shows the information that the switch has already received from
its neighbors.
Click Apply to apply the settings.
4.11.2 MAC Address Table

This ETS switch provides 16K entries. In this page, users can change the Aging time, add
Static Unicast MAC Addresses, monitor the MAC address or sort them by different packet
types and ports. Click on Apply to change the value.
Aging Time (Sec): The learnt MAC address table is dynamic. Each time the switch sees a
specific MAC address, the aging time counter for that specific MAC address is reset. If the
switch does not see that MAC address within the configured Aging Time, that MAC address
is too old to keep and can/will be overwritten if a new MAC address (not already in the MAC
address table) enters the switch. Only the dynamic learnt addresses can/will be overwritten,
static added addresses not. The default Aging Time is 300 seconds. The Aging Time can be
modified in this page.
Static Unicast MAC Address: Static Unicast MAC Addresses can be added manually to the
MAC address table. Enter the MAC Address (format: xxxx.xxxx.xxxx), select its VID and Port
ID, and then click Add to add it to the MAC Address table.
Static Multicast MAC Address: Static Multicast MAC Addresses can be added manually to
the MAC address table. Enter the MAC Address (format: xxxx.xxxx.xxxx), select its VID and
Port ID, and then click Add to add it to the MAC Address table.
MAC Address Table: This MAC Address Table shows all the addresses learnt by the switch
or added manually by the administrator. The packet types include All, Static Unicast,
Dynamic Unicast, Static Multicast and Dynamic Multicast. The table allows users to sort the
MAC address by the address types and VID.
EB-M775-E-2 Page 99 of 116

Packet Types: Management Unicast = MAC address of the switch. It belongs to the CPU
port only. Static Unicast MAC address can be added and deleted. Dynamic Unicast MAC
address is MAC address learnt by the switch. Static Multicast MAC Address can be added
by the CLI and can be deleted by the Web interface and CLI. Dynamic Multicast will appear
after having enabled IGMP on the switch, and the switch has learnt from the IGMP reports.
Static Unicast/Multicast MAC addresses can be removed via the Remove button. Click
Reload to refresh the table. New learnt Unicast/Multicast MAC addresses will be updated in
the MAC address table.
4.11.3 Port Statistics

In this page, you can view operation statistics for each port. The statistics that can be viewed
include Link Type, Link State, Rx Good, Rx Bad, Rx Abort, Tx Good, Tx Bad and Collision.
Rx means the received packet while Tx means the transmitted packets.
NOTE: If the Bad, Abort or Collision counters increase a lot, it may mean that your network
cable is not properly connected, the network performance of the port is poor…etc.
Check your network cable, Network Interface Card of the connected device, the
network application, or reallocate the network traffic…etc.
Click Clear Selected to reset the counters of the selected ports, and click Clear All to reset
the counters of all the ports. Click Reload to refresh the counters.
Page 100 of 116 EB-M775-E-2

4.11.4 Port Mirroring

Port mirroring (also called port spanning) is a tool that allows you to mirror the traffic from
one or more ports onto another port, without disrupting the flow of traffic on the original port.
Any traffic that goes into or out of the Source Port(s) will be duplicated at the Destination
Port. This traffic can then be analyzed at the Destination port using a monitoring device or
application. A network administrator will typically utilize this tool for diagnostics, debugging,
or fending off attacks.
Port Mirroring: Select Enable/Disable to enable/disable Port Mirror.
Source Port: This is also known as Monitor Port. These are the ports you want to monitor.
The traffic of all source/monitor ports will be copied to destination/analysis ports. You can
choose a single port, or any combination of ports, but you can only monitor them in Rx or TX
only. Check the checkbox of the Port ID, RX, Tx or Both to select the source ports.
Destination Port: This is also known as the Analysis Port. You can analyze the traffic of all
the monitored ports at this port without affecting the flow of traffic on the port(s) being
monitored.
CAUTION: When multiple selected source ports process the same Multicast data, this data
will be mirrored only once on the destination port (or output).
• All the selected ‘Rx Source Ports’ and ‘Tx Source Ports’ are duplicated on the same
‘Destination Port’.
A network administrator would typically connect a LAN analyzer device to this port. Click
Apply to apply the settings.
4.11.5 Event Logs

The Event Log lists all the events that were selected in the SysLog Configuration in the
web page Warning → Syslog Configuration.
When SysLog Mode ‘Local’ is selected, the switch will record occurred events in the local
log table (=see below, Events Log). A logged entry includes the index, date and time of
occurrence the name of the Event.
Click on Clear to clear the entries. Click Reload to refresh the table.
EB-M775-E-2 Page 101 of 116

4.11.6 Ping
This page provides the Ping Utility for users to ping remote devices and check whether the
device is alive or not. Enter the IP address of the target device in the Destination and click
Ping to start the ping. After a few seconds, the result is displayed.
Page 102 of 116 EB-M775-E-2

4.12 Device Front Panel

This page allows you to see the LEDs status of the switch.
NOTE: No CLI commands for this feature.
LED Activated Deactivated Other

See §2.1.2.
PORTS Activated Deactivated Other
Gigabit Ethernet Green Black
SFP Gray+Green Black, No SFP Gray+Black: SFP Plugged in but
plugged in link not up yet.
EB-M775-E-2 Page 103 of 116

4.13 Save (to Flash)

The Save→Save to Flash feature allows you to save the switch configuration into the Flash
on the switch. Powering off or rebooting the switch without clicking Save→Save to Flash
first, will cause a loss of the new settings, also a newly configured IP address.
4.14 Logout
The switch provides 2 logout methods. The web connection logs out automatically if you
don’t input any command within 30 minutes. The Logout command allows you to manually
logout the web connection. Click Yes to logout.
Page 104 of 116 EB-M775-E-2

4.15 Reboot
NOTE: Before Rebooting, remember to click the Save button in the tree view to save your
settings. Otherwise, the modifications you made are lost after a reboot.
NOTE: This ETS switch has no hardware Reset button.
Reboot allows you to reboot the switch. Some switch configuration modifications require a
switch reboot. Click on Reboot in main tree view to enter the reboot menu. Click on Yes to
reboot the switch.
After clicking the Yes button:
After the automatic reboot, fill out the user name and password again to log in.
EB-M775-E-2 Page 105 of 116

5. COMMAND LINE INTERFACE

The Command Line Interface (CLI) is the user interface to the embedded software system on
the switch. The CLI allows you to monitor system and status information, configure the switch
and receive responses back from the switch when entering a command.
There are some different command modes. Each command mode has its own access
ability, available command lines and uses different command lines to enter and exit.
Possible command modes:
• User EXEC
• Privileged EXEC
• Global Configuration
• (Port/VLAN) Interface Configuration modes
5.1 User EXEC Mode

As long as you login the switch via the CLI, you are in the ‘User EXEC mode’. You can ping,
telnet the remote device and show some basic information. Type enable to enter the next
mode, exit to logout, ? to display the full command list below:
ETS-2GS8GP>
enable Turn on Privileged EXEC mode
exit Exit current mode to go to the previous mode
list Print command list
ping Send echo messages
quit Exit current mode and down to previous mode
show Show running system information
telnet Open a telnet connection
traceroute Trace route to destination
? Show the command list
5.2 Privileged EXEC Mode

Enter enable in the ‘User EXEC mode’ to enter the ‘Privileged EXEC mode’. In this mode,
the system allows you to view the current configuration, reset to defaults, reload the switch,
show the system information, save the current configuration and enter the ‘Global
configuration’ mode.
Type configure terminal to enter the next mode, exit to leave, ? to display the full command
list below:
Switch#
archive manage archive files
clear Reset functions
clock Configure time-of-day clock
configure Configuration from vty interface
copy Copy from one file to another
debug Debugging functions (see also 'undebug')
disable Turn off privileged mode command
end End current mode and change to enable mode
exit Exit current mode and down to previous mode
more Display the contents of a file
no Negate a command or set its defaults
ping Send echo messages
reboot Reboot system
reload copy a default-config file to replace the current one
show Show running system information
telnet Open a telnet connection
terminal Set terminal line parameters
traceroute Trace route to destination
write Write running configuration to memory, network, or terminal
Page 106 of 116 EB-M775-E-2

5.3 Global Configuration Mode

Enter configure terminal in privileged EXEC mode to enter the ‘Global configuration’ mode.
In ‘Global configuration’ mode, you can configure all the possible system features.
Enter interface IFNAME/VLAN to enter the (port) interface configuration mode, exit to return
to the previous mode. ? to see the command list. Available command lists of global
configuration mode.
Switch# configure terminal
Switch(config)#
administrator Administrator account setting
arp Set a static ARP entry
auth Authentication
clock Configure time-of-day clock
default Set a command to its defaults
dot1x IEEE 802.1x standard access security control
ethertype Ethertype
gmrp GMRP protocol
gvrp GARP VLAN Registration Protocol
hostname Set system's network name
interface Select an interface to configure
ip IP information
ipv6 IP information
lacp Link Aggregation Control Protocol
lldp Link Layer Discovery Protocol
log Logging control
loop-protect Ethernet loop protection
mac-address-table mac address table
mirror Port mirroring
modbus Modbus TCP Slave
nameserver DNS Server
ntp Configure NTP
poe Configure power over ethernet
ptpd IEEE1588 Precision Time Protocol
qos Quality of Service (QoS)
redundant-ring Configure Redundant Gigabit Ethernet Ring
relay relay output type information
router Enable a routing process
service System service
sfp Small form-factor pluggable
smtp-server SMTP server configuration
snmp-server the SNMP server
spanning-tree the spanning tree algorithm
trunk Trunk group configuration
vlan Virtual LAN
warning-event Warning event selection
write-config Specify config files to write to
5.4 (Port) Interface Configuration

Enter interface IFNAME in the global configuration mode to enter the interface configuration
mode. In this mode, you can configure port settings.
Possible port interface names:
• For gigabit Ethernet port 1: gi1
• ….
• For gigabit Ethernet port 10: gi10
Enter the interface name of the port that you want to configure.
Type exit to return to the previous mode.
Type ? to see the command list
EB-M775-E-2 Page 107 of 116

Available command lists of the global configuration mode.

Switch(config)# interface fa1
Switch(config-if)#
acceptable Configures the 802.1Q acceptable frame types of a port.
auto-negotiation Enables auto-negotiation state of a given port
description Interface specific description
dot1x IEEE 802.1x standard access security control
duplex Specifies the duplex mode of operation for a port
flowcontrol Sets the flow-control value for an interface
garp General Attribute Registration Protocol
ingress 802.1Q ingress filtering features
lacp Link Aggregation Control Protocol
loopback Specifies the loopback mode of operation for a port
mdix Configure mdix state of a given port
mtu Specifies the MTU on a port.
poe Configure power over ethernet
qos Quality of Service (QoS)
rate-limit Rate limit configuration
sfp Small form-factor pluggable
shutdown Shutdown the selected interface
spanning-tree the spanning-tree protocol
speed Specifies the speed of a Fast Ethernet port or a Gigabit
Ethernet port.
switchport Set switching mode characteristics
(VLAN) Interface Configuration: Enter interface VLAN VLAN-ID in global configuration

mode to enter the VLAN interface configuration mode. In this mode, you can configure
the settings for the specific VLAN.
The VLAN interface name of VLAN 1 is VLAN 1, VLAN 2 is VLAN 2…
Type exit to return to the previous mode. Type ? to see the available command list.
The command lists of the VLAN interface configuration mode.
Switch(config)# interface vlan 1

Switch(config-if)#
description Interface specific description
ip Interface Internet Protocol config commands
ipv6 Interface Internet Protocol config commands
shutdown Shutdown the selected interface
Page 108 of 116 EB-M775-E-2

5.5 Summary of the 5 command modes
Command Main Function Enter and Exit Method Prompt

Mode
Switch>
User EXEC First level of access. User Enter: Login successfully
can ping, telnet a remote Exit: exit to logout.
device, and show some
Next mode: Type enable to
basic information.
enter privileged EXEC mode.
Switch#
Privileged View current Enter: Type enable in User
EXEC configuration, reset EXEC mode.
default, reload switch, Exit: Type exit to logout
save configuration and
Prev Mode: Type disable to
enter global configuration
return to user EXEC mode.
mode.
Next Mode: Type configure
terminal to enter global
configuration command.
Switch(config)#
Global Configure all the available Enter: Type configure
configuration features terminal in privileged EXEC
mode
Exit: Type exit or end or
press Ctrl-Z to exit.
Next mode: Type interface
IFNAME/ VLAN VID to enter
interface configuration mode
Switch(config-if)#
Port Configure port related Enter: Type interface
Interface settings. IFNAME in global
configuration mode.
configuration
Exit: Type exit or Ctrl+Z to
global configuration mode.
Type end to privileged EXEC
mode.
Switch(config-vlan)#
VLAN Configure VLAN specific Enter: Type interface VLAN
Interface settings. VID in global configuration
Configuration mode.
Exit: Type exit or Ctrl+Z to
global configuration mode.
Type end to privileged EXEC
mode.
EB-M775-E-2 Page 109 of 116

Find below some useful commands to see other available commands in that mode.
? To see all the available commands in this mode. It helps you to see the next command
you can/should type as well.
Switch(config)# interface (?)

IFNAME Interface's name
vlan Select a vlan to configure
(Character)? To see all the available commands that start with this character.
Switch(config)# a?
access-list Add an access list entry
administrator Administrator account setting
arp Set a static ARP entry
Tab The TAB key helps you to input the command quicker. If there is only one available
command in the next, clicking on the TAB types out the command automatically.
Switch# co (tab) (tab)

Switch# configure terminal
Switch(config)# ac (tab)
Switch(config)# access-list
Ctrl+C To stop executing the unfinished command.

Ctrl+S To lock the terminal screen. Entering commands is not possible now.
Ctrl+Q To unlock the screen which is locked by Ctrl+S.
Ctrl+Z To exit configuration mode.
Page 110 of 116 EB-M775-E-2

6. APPENDIX
6.1 Product Specification
a. Technology
Standard IEEE 802.3u 100 Base-TX Fast Ethernet

IEEE 802.3ab 1000 Base-T
IEEE 802.3x Flow Control and Back-pressure
IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
IEEE 802.1p Class of Service (CoS)
IEEE 802.1Q VLAN and GVRP
IEEE 802.1D-2004 Rapid Spanning Tree Protocol (RSTP)
IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
IEEE 802.3ad Link Aggregation Protocol (LACP)
IEEE 802.1x Port Based Network Access Protocol
IEEE 802.3af/at Power over Ethernet
b. System Performance
Switch Technology Store and Forward Technology with 32Gbps Switch Fabric,
Non-blocking
CPU performance 32 bits CPU with Hardware based Watch-dog timer with 10S
reset timer
System Memory 32MBytes flash ROM, 256M bytes system RAM
Transfer packet size 64 bytes to 9K bytes Jumbo Frame
MAC Address Table 16K

Packet Buffer 1.5MBytes shared memory for packet buffer with intelligent
memory
management unit for burst data traffic
Transfer performance 14,880pps for Ethernet and 148,800 for Fast Ethernet,
1488,100 for Gigabit Ethernet
c. System Management
Management Telnet with SSH, Web Browser with SSL, SNMP V1/V2c/V3 with
Interface SNMP Trap (up to 4 trap stations), RMON (Group 1,2,3,9) for in-
band management. Local RS-232 M12 connector for out-band
management.
Management The maximum management session up to four, and support
Security management Host IP secure feature to prevent unauthorized
remote login
SNMP MIB MIB-II, Bridge MIB, Ethernet-like-MIB, VLAN MIB, IGMP MIB,
Private MIB
NMS Windows based NMS (Network Management System)
Network Time NTP with daylight saving and localize time sync function
Protocol
EB-M775-E-2 Page 111 of 116

Management IP Predefined Host IP address for management host login security

Security
E-mail Warning 4 Receipt E-mail accounts with E-mail server authentication
System Event Log 2 Event log record modes- Local and remote Log Server with
authentication
d. Network Performance
Port Configuration Port link Speed, Link mode, current status and enable/disable
Port Trunk IEEE 802.3ad Link Aggregation Control Protocol (LACP) and
Static port trunk; trunk member up to 8 ports in one group,
maximum 5 trunk groups
VLAN IEEE 802.1Q Tag VLAN with 256 VLAN Entries and provides 2K
GVRP
entries; 3 VLAN link modes- Trunk mode, Hybrid mode and Link
access mode
Private VLAN The Private VLAN is special for group uplink access with
independent port security. With the private VLAN function, each
VLAN community is isolated and only exchange by high level
device with primary VLAN community
IEEE 802.1Q QinQ Supports Double VLAN tag for VLAN isolation and security
IEEE 802.1p The Ethernet Switch MAC controller supports IEEE 802.1p Class
of Service function; Per interface with 4 queues
IGMP Snooping IGMP Snooping v1/v2/v3 for multicast filtering and IGMP Query
mode; also support unknown multicasting process forwarding
policies- drop, flooding and forward to router port
Rate Control Ingress/Egress filtering for broadcast, multicast, unknown DA or all
packets
Port Mirroring On-line traffic monitoring on multiple selected ports
DHCP System supports DHCP Client function for dynamic IP address
obtain from DHCP Server, and the Switch also support DHCP
Server function with DHCP Relay Agent to forward DHCP request
through specified forwarding path. The DHCP Server also offer
port based DHCP Server function with predefined IP address or
perform MAC&IP address binding
function
IEEE 802.1x/ Port Port based network access control, and authenticated by localize
Security predefined MAC address or remote RADIUS Server
Power over Ethernet IEEE 802.3af, IEEE 802.3at, End-Span wiring architecture
PoE operating mode Auto Mode: IEEE 802.3af/at behaviors with IEEE802.3af 1-Event
and IEEE 802.3at 2-Event classification for standard PD
Forced Mode: User configured Power consumption budget control
with
IEEE 802.3 PoE /PD detection, or forced without PD detection
Page 112 of 116 EB-M775-E-2

PoE forwarding RJ-45: V+(3,6), V- (1,2)

conductor
Power forwarding PoE Port: 15W/IEEE8-2.3af, 30W/IEEE 82.3at, 35W /IEEE802.3at
capability with high power voltage input PoE System Power Budget: 240W
at 75°C Ambient temperature
PoE System Power Power Budget Reserve by PD declaration. The power budget
Budget control system will reserve power for connected PD device, once
latest PD device (PoE 8) claimed power over the system surplus
power, then the latest PoE will be disabled System Power Budget:
240Watts / 54V for High Power PoE Input Voltage
e. Network Redundancy
Redundant Gigabit Ring Redundancy Technology, failover switching in less than

Ethernet Ring 50 ms (less than 200 ms with 1000Base-TX).
Rapid Dual Homing (RDH) Multiple uplink paths to one or multiple upper switch
Spanning Tree IEEE802.1D-2004 Rapid Spanning Tree Protocol. Compatible
with Legacy Spanning Tree and IEEE 802.1w multiple
spanning tree.
Loop Protection Provides interface looping protection during the RSTP,MSR
(Currently Not Supported) ring state change.
f. Interface
Enclosure port 1000Mbps Gigabit Ethernet port (#1~#8): 8 x RJ-45 Connectors with
IEEE 802.3at PSE function
SFP port (#9,#10): supports 1000Mbps Fiber Transceiver with Digital
Diagnostic Monitoring (DDM) for optical fiber quality inspection. The SFP
connection with high priority than RJ-45 copper.
Power input: 4-Pin Removable Terminal Block Connector Digital Input:
Semi Digital Input (Low: 0~10V, High:11~30V)
Digital Output: Dry Relay Output with Normal Open operating mode with
DC 24V/0.5A contact capability
Reset Button System hardware reset
Cables 100Base-TX: 2 pairs STP Cat.5e/Cat.6 cable, EIA/TIA-568B 100-ohm
(length:100Meters)
1000Base-T: 4 pairs STP Cat. 5e/Cat.6 cable, EIA/TIA-568B 100-ohm
(length:100Meters)
Power Cable: Recommended uses 18AWG electrical power cable with
UL certification for the high power PoE application
LEDs See §2.1.2
EB-M775-E-2 Page 113 of 116

g. Power Requirements
System power Input Input Range: DC 46~57V; Inrush current: 64A / DC 46V input,
76.4A / DC 57V input.
Power system type: Passive power source
Power Consumption Max 16 Watts without PoE
Max 240 Watts with PoE
IEEE802.3af or IEEE802.3af is configurable per port.
h. Mechanical
Installation DIN-Rail mounting

Case material Steel metal with Aluminum heat-dissipate panel housing
Ingress Protection –grade 30
Dimension (mm) 95 (W) x 127(D) x 170 (H) – w/o DIN Rail Clip
95 (W) x 136.2(D) x 170 (H) – w/ DIN Rail Clip
Weight 1.94Kg
Ingress Protection IP-31
i. Temperature
Operating temperatures -25°C to 65°C (-13°F to 149°F);
6.2 Ordering Information
ETS-2GS8GP
S30828-B8-X1 ETS-2GS8GP: Industrial 10-Port Managed Ethernet Switch
Includes: 8-ports 1000Base-TX with PoE and 2-ports 10/100/1000
SFP ports Switch, Wall mounting plate and six screws.
PSU
S30827-C142-A30 DC PSU Cable
V30812-A5020-A97 DIN rail Power Supply AC 100-240 VAC ± 10 % - 56 VDC. In case
PoE is required use this PoE power supply.
6.3 Pin Assignment of the RS-232 Console Cable

The total cable length is 1.50m, excluding RJ-45 and DB-9!
DB-9 is ‘Female’.
Page 114 of 116 EB-M775-E-2

RJ-45 Pin DB-9 Pin

1 7
2 9
3 4
4 5
5 1
6 3
7 2
8 8
6.4 SFP family

See §1.5.
7. ABBREVIATIONS
AC Alternate Current
ACE Access Control Entry
ACL Access Control List
AWG American Wire Gauge
BPDU Bridge Protocol Data Unit
CLI Command Line Interface
CoS Class of Service
DC Direct Current
DDM digital diagnostics monitoring
DES Data Encryption Standard
DHCP Dynamic Host Control Protocol
DLF Destination Lookup Failure
DNS Domain Name System
DSCP DiffServ Code Points
DST Daylight Saving Time
DWRR Deficit Weighted Round Robin
ETS-2GS8GP Ethernet Switch 2 Gigabit SFP + 8 Gigabit Ethernet with PoE ports
FD Full Duplex
GARP Generic Attribute Registration Protocol
GMRP GARP Multicast Registration Protocol
GVRP GARP VLAN Registration Protocol
HD Half Duplex
HTTP Hyper Text Transfer Protocol
HTTPS HTTP Secure
IEEE Institute of Electrical and Electronics Engineers
IGMP Internet Group Management Protocol
IP Internet Protocol
EB-M775-E-2 Page 115 of 116

LACP Link Aggregation Control Protocol

LAG Link Aggregation Group
LAN Local Access Network
LLDP Link Layer Discovery Protocol
LPLD Link Partner Live Detect
MAC Medium Access Control
MD5 Message-Digest algorithm 5
MDI Media Dependent Interface
MIB Management Information Base
MTU Maximum Transmission Unit
NTP Server Network Time Protocol Server
OID Object Identifier
OMS OTN Management System
PD Powered Device
PLC Programmable Logic Controller
PoE Power over Ethernet
PSE Power Source Equipment
PSU Power Supply Unit
PTP Precision Time Protocol
PVID Port VLAN ID
QoS Quality of Service
RADIUS Remote Authentication Dial-In User Service
RDH Rapid Dual Homing
RGERP Redundant Gigabit Ethernet Ring Protocol.
RMON Remote Monitoring
RSTP Rapid spanning tree protocol
SFP Small form-factor pluggable
SHA Secure Hash Algorithm
SLAN Segmented LAN
SMTP Simple Message Transfer Protocol
SNMP Simple Network Management Protocol
SSH Secure Shell
STA Spanning Tree Algorithm
STP Spanning Tree Protocol
TFTP Trivial File Transfer Protocol
UI User Interface
VID VLAN ID
VLAN Virtual LAN
VTP VLAN Trunking Protocol
WRR Weighted Round Robin
Page 116 of 116 EB-M775-E-2

M775 2 ETS-2GS8GP A4 E Screen

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

M775 2 ETS-2GS8GP A4 E Screen

Uploaded by

Copyright:

Available Formats

OTN Systems | ETS Manual

MASTERS IN MISSION CRITICAL COMMUNICATIONS

Industrial Ethernet Switch

OTN Systems NV COPYRIGHT AND TRADE SECRETS/LIABILITY

2. HARDWARE INSTALLATION .............................................................................9

3. ETS SWITCH MANAGEMENT .......................................................................... 19

4. SWITCH CONFIGURATION .............................................................................. 24

EB-M775-E-2 Page 3 of 116

4.3 Power Over Ethernet (PoE) ............................................................................. 42

Page 4 of 116 EB-M775-E-2

4.11.2 MAC Address Table ........................................................................................... 99

5. COMMAND LINE INTERFACE ........................................................................ 106

6. APPENDIX ....................................................................................................... 111

EB-M775-E-2 Page 5 of 116

• IEEE 802.3af 15.4W / IEEE 802.3at 30W High Power PoE

• 240W total power budget for High-power PoE camera

Page 6 of 116 EB-M775-E-2

• Advanced management by LACP/VLAN/Q-in-Q/Private VLAN/ GVRP/ QoS/ IGMP,

• Event Notification through E-mail, SNMP trap and SysLog

• IEEE 802.1AB LLDP

• CLI, Web, SNMP/RMON for network Management

• Multiple event relay output for enhanced device alarm control

• Hi-Pot Isolation Protection for ports and power

• Powered via external PSU (V30812-A5020-A97)

NOTE: More technical specifications are listed in Appendix 6.1.

1.4 Package List

• One DIN rail clip (attached to the switch)

• One RS-232 DB-9 to RJ-45 console cable

1.5 Manual References

EB-M775-E-2 Page 7 of 116

1.6 Possible Network Solutions

At least 2 management NICs:

Management PC Backbone Backbone ETS

Page 8 of 116 EB-M775-E-2

2.1 ETS-2GS8GP Switch

PSU Input Ports:

EB-M775-E-2 Page 9 of 116

2.1.2 Front Panel LEDs

LED Color Status

Speed 1000 Mbps

LNK/ACT Not lit, dark The link is down

Page 10 of 116 EB-M775-E-2

Port 1-8: 10/100/1000 RJ-45 LEDs

Speed 1000 Mbps LNK/ACT

LNK/ACT Speed 1000 Mbps

LNK/ACT Not lit, dark The link is down

2.1.4 Bottom View

EB-M775-E-2 Page 11 of 116

DO: Relay Output

2.1.5 Rear Side

2.1.6 Wiring Power Inputs

Page 12 of 116 EB-M775-E-2

PSU on DIN Rail V30812-A5020-A97 PSU Cable S30827-C142-A30 (3 meter)

The range of the available DC power input:

Follow below steps to wire the redundant or aggregated DC power inputs.

EB-M775-E-2 Page 13 of 116

6. Depending on the chosen PSU/ETS-2GS8GP set-up (see pictures/examples below),

Example1: one PSU → one ETS-2GS8GP switch

Not Unscrew here to

Example2: two PSUs → one ETS-2GS8GP switch

Parallel Use Parallel Use

Page 14 of 116 EB-M775-E-2

a. Power Supply Specifications