Secure, reliable, intelligent, managed gigabit switching with maximum PoE
The Linksys SRW2008MP WebView fully managed switch brings gigabit speeds to your users, while adding a whole new level of intelligence and security to network. The eight 10/100/1000 Mbps ports enable you take advantage of the Gigabit Ethernet interfaces shipping on the current generation of servers, workstations and storage devices, in addition to supporting existing 10/100 Mbps clients. The optional miniGBIC ports allow you to expand network as your business grows.

SRW2008MP

For wireless or VoIP deployments, the SRW2008MP supports the IEEE802.3af standard for Power over Ethernet (PoE). With automatic load sensing, the power control circuitry automatically detects PoE on the end-device before providing power. For safety, each port has independent overload and short-circuit protection, along with LED indicators for power status. A maximum of 15.4W is available on all 8 fixed 10/100/1000 Mbps ports for powering PoE enabled wireless AP or VoIP handsets. As more business functions and processes migrate to the network, having an intelligent network becomes a necessity. The SRW2008MP is able to secure the network through IEEE 802.1Q VLANs, IEEE 802.1X port authentication, Access Control Lists (ACL) and MAC-based filtering. At the same time, the enhanced QoS and traffic management features ensure clear and reliable voice and video communications. Having this additional functionality is not useful if it cannot be implemented. Linksys WebView provides an intuitive, secure management interface enabling you to better utilize the comprehensive feature-set of the SRW2008MP, resulting in a better optimized, more secure network.
Supports 8 10/100/1000 ports with 2 shared miniGBIC slots
Offers standards based IEEE 802.3af PoE, supporting 8 ports at 15.4W per port
Features a 16 Gbps, non-blocking switch core
Fully manageable through the WebView web interface or console port

PRODUCT DATA

8-Port 10/100/1000 Managed Gigabit Switch with Maximum PoE

Model: SRW2008MP

BUSINESS SERIES

Features

8 10/100/1000 Gigabit Ethernet ports 2 miniGBIC slots for fiber and copper Gigabit Ethernet expansion PoE on 8 10/100/1000 ports supplies up to IEEE 802.3af maximum of 15.4W per port 16 Gbps, non-blocking, store-and-forward switching capacity Simplified QoS management using 802.1p, Diffserv or ToS traffic prioritization specifications Access Control Lists (ACL) for granular security and QoS implementation WebView management enables configuration and monitoring from a standard web browser Secure remote management of the switch via SSH and SSL encryption 802.1Q based VLANs enable segmentation of networks for improved performance and security Private VLAN Edge for simplified network isolation for guests connections or autonomous networks Automatic configuration of VLANs across multiple switches through GVRP/ GARP User/Network port level security via 802.1X authentication and MAC-based filtering

Specifications

Model Ports Cabling Type LEDs POE Switching Capacity Forwarding Rate MAC table size Number of VLANs VLAN HOL Blocking Web User Interface SNMP SNMP MIBs RMON Firmware Upgrade Port Mirroring Other Management IEEE 802.1X Access Control SRW2008MP 8 RJ-45 connectors for 10BASE-T/100BASE-TX/1000Base-T with 2 Gigabit combo ports shared between miniGBIC ports and ports 7 and 8 Console port Auto MDI/MDI-X Autonegotiate/Manual setting UTP CAT 5 or better for 10BASE-T/100BASE-TX, UTP CAT 5e or better for 1000BASE-T Link/Act, PoE, System 802.3af compliant. Supply up to IEEE Standard maximum of 15.4W on 8 10/100/1000 ports 16 Gbps, non-blocking 11.9 Mpps wire-speed performance 8K 256 active VLANs (VLAN ID range is 4096) Port-based and 802.1Q Tag-based VLANs Management VLAN Head of line blocking prevention Built-in Web UI for easy browser-based configuration (HTTP/HTTPS) SNMP version 1,2c,3 with support for traps. RFC1213 MIB-2, RFC2863 Interface MIB, RFC2665 Ether-like MIB, RFC1493 Bridge MIB, RFC2674 Extended Bridge MIB (P-bridge, Q-bridge), RFC2819 RMON MIB (groups 1,2,3,9 only), RFC2737 Entity MIB, RFC 2618 RADIUS Client MIB RFC 1215 Traps Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis Web browser upgrade (HTTP) and TFTP Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe Traceroute Secure Socket Layer (SSL) Secure Shell (SSH) RADIUS Port mirroring TFTP upgrade SSL security for Web UI DHCP client BootP SNTP Xmodem upgrade Cable diagnostics PING Telnet client (SSH secure support) 802.1X - RADIUS Authentication. MD5 Encryption ACLs - Drop or rate limit based on: Source and destination MAC-based Source and destination IP address Protocol TOS/DSCP Port VLAN Ethertype

Performance

Layer 2

Management

Security
Increased the bandwidth and added link redundancy with Link Aggregation Control Protocol (LACP) Enhanced rate limiting capabilities and storm control, including multicast, broadcast and flood control Port mirroring for noninvasive monitoring of switch traffic Jumbo frame support (10KB) SNMP v1, v2c, v3 and RMON support Fully rack-mountable using the included rack-mounting hardware

Availability

Link Aggregation Storm Control Spanning Tree IGMP Snooping Priority levels Scheduling Class of Service Rate Limiting Standards Link Aggregation using IEEE 802.3ad LACP Up to 8 ports in up to 8 groups Broadcast, Multicast and Unknown Unicast IEEE 802.1D Spanning Tree, IEEE 802.1w Rapid Spanning Tree, IEEE 802.1s Multiple Spanning Tree IGMP (v1/v2) snooping limits bandwidth-intensive video traffic to only the requestors. Support 256 multicast groups 4 Hardware queues Priority Queuing and Weighted Round Robin (WRR) Port-based 802.1p VLAN priority based IPv4/v6 IP precedence/TOS/DSCP based TCP/UDP port based Diffserv Classification and remarking ACLs Ingress policer Egress rate control 802.3 10BASE-T Ethernet, 802.3u 100BASE-TX Fast Ethernet, 802.3ab 1000BASE-T Gigabit Ethernet, 802.3z Gigabit Ethernet, 802.3x Flow Control, 802.3 ad LACP,802.3af POE, 802.1d STP, 802.1Q/p VLAN, 802.1w Rapid STP, 802.1s Multiple STP, 802.1X Port Access Authentication 11" x 1.75" x 6.69" (279 x 45 x 170 mm) 2.65 lb (1.2 kg) External AC power adapter FCC Part15 Class A, CE Class A, UL, cUL, CE mark, CB 32 to 104F (0 to 40C) -4 to 158F (-20 to 70C) 10 to 90% 10 to 95%

Environmental

Dimensions WxHxD Unit Weight Power Certification Operating Temperature Storage Temperature Operating Humidity Storage Humidity
Linksys A Division of Cisco Systems, Inc. 121 Theory Irvine, CA 92617 USA
E-mail: sales@linksys.com support@linksys.com Web: http://www.linksys.com Linksys products are available in more than 50 countries, supported by 12 Linksys Regional Offices throughout the world. For a complete list of local Linksys Sales and Technical Support contacts, visit our Worldwide Web Site at www.linksys.com.

Package Contents

SRW2008MP with 8 10/100/1000BASE-T plus Two Shared MiniGBIC Ports AC Power Adapter and Cord Rack Mounting Kit CD with User Guide in PDF format Registration Card Console Cable

Minimum Requirements

Web-Based Utility: Web Browser - Microsoft Internet Explorer (Version 5.5 or Above) Cat5 Ethernet Network Cables Operating System: Windows 2000, XP or Above

Warranty

5 Years
Check the product package and contents for specific features supported. Specifications are subject to change without notice. Linksys is a registered trademark or trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. Copyright 2006 Cisco Systems, Inc. All rights reserved. Other brands and product names are trademarks or registered trademarks of their respective holders.

6111310A-RR

HyperTerminal Connection Description Screen
HyperTerminal Properties Screen
Connecting to the Switch through a Telnet Session
1. Open a command line editor and enter telnet 192.168.1.254. Then, press the Enter key. 2. The Login screen will now appear. The first time you open the CLI interface, select Edit and hit Enter. Enter admin in the User Name field. Leave the Password field blank.
8-Port 10/100/1000 Gigabit Switch with Webview 8
System Configuration Menu
Press the Esc button and you will return to the login screen. Use the right arrow button to navigate to Execute and press the Enter button to enter the CLI interface.
Configuring the Switch through the Console Interface
The console screens consist of a series of menus. Each menu has several options, which are listed vertically. You select a menu option when you highlight it; pressing the Enter key activates the highlighted option. To navigate through the menus and actions of the console interface, use the up or down arrow keys to move up or down, and use the left or right arrow keys to move left or right. Use the Enter key to select a menu option, and use the Esc key to return to the previous selection. Menu options and any values entered or present will be highlighted. The bottom of the screen lists the actions available.
System Configuration Menu options: 1. System Information 2. Management Settings 3. User and Password Settings 4. Security Settings 5. IP Configuration 6. File Management 7. Restore System Default Settings 8. Reboot System 0. Back to Main Menu.

System Information

From the System Information screen you can check current firmware versions and other general switch information.

Switch Main Menu

The Main Menu screen displays six menu choices: System Configuration Menu, Port Status, Port Configuration, Help, and Log Out.

Main Menu

Versions
The Versions screen displays the Boot Version, Software Version, Loader Version and the Hardware Version.

Management Settings

From the Management Settings screen, you can set Serial Port Session Configuration, Telnet Session Configuration, or Secure Telnet (SSH) Configuration.
Boot Version This file runs when the Switch is turned on. It performs power-on diagnostics and loads the operating system for the Switch. Software Version This file contains the programming code that runs the Switch. Hardware Version The current hardware setup of the Switch.
Serial Port Configuration
On the Serial Port Configuration screen, the Switchs baud rate is displayed. Select Edit and press the Enter key to make changes. Toggle to the desired speed and when your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.
General System Information
The General System Information screen displays the System Description, System Up Time, System Mac Address, System Contact, System Name and System Location. Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.

Telnet Configuration

On the Telnet Configuration screen, the time-out is displayed. The value is entered in seconds. If you do not want the Telnet session to timeout, you may enter a value of 0 sec.

General Information

Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.

SSH Server Configuration

SSH Configuration
On the SSH Configuration screen, you can select SSH Server Configuration, SSH Server Status, SSH Crypto Key Generation, and SSH Keys Fingerprints.

SSH Status

The SSH Status screen displays whether the SSH Server is enabled, the RSA and DSA key status, and any open SSH sessions. Select Refresh to update the screen if necessary. To exit, select Quit and press the Enter key.

SSH Configuation

On the SSH Server Configuration screen, the SSH Server can be enabled or disabled by navigating to the SSH Server option and using the SPACE bar to toggle the option. The SSH Server Port can be modified by entering in the value. Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.
SSH Crypto Key Generation
On the SSH Crypto Key Generation screen, the SSH Public Key Algorithm can be toggled between RSA and DSA using the SPACE bar to toggle the option. The SSH Public Key Length cannot be modified. Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.

Management VLAN This drop-down allows you to select the Management VLAN. IP Address Mode This drop-down allows you to select Static or Dynamic IP address configuration. Host Name Enter the DHCP Host Name here. IP Address If using a static IP address, enter the IP address here. Subnet Mask Enter the subnet mask of the currently configured IP address. Default Gateway Enter the IP address of the Default Gateway.
8-Port 10/100/1000 Gigabit Switch with Webview 18
DNS Server Enter the primary DNS Server information. Click the Save Settings button to save your changes or click Cancel Changes to discard the information.

Daylight Saving

Daylight Saving Select Daylight Saving to enable it on the Switch. If the Switch should use US daylight savings, then select USA. If the Switch should use EU daylight savings, then select European. If it should use another kind of daylight savings, then select Custom and complete the From and To fields. Time Set Offset (1-1440) For non-US and European countries, specify the amount of time for daylight savings. The default is 60 minutes. From If you selected Other for the Daylight Saving setting, then enter the date and time when daylight savings begins. To If you selected Other for the Daylight Saving setting, then enter the date and time when daylight savings ends. Recurring If you selected Other for the Daylight Saving setting and daylight savings has the same start and end dates and times every year, then select Recurring. From If you selected Recurring, then enter the date and time when daylight savings begins. To If you selected Recurring, then enter the date and time when daylight savings ends.

Setup > Time

The Time screen allows you to configure the time settings for the Switch.

Set Time

Use System Time When this option is selected, the local hardware clock is utilized. Use SNTP Time When this option is selected, the time is synchronized to an SNTP (Simple Network Time Protocol) server.

SNTP Servers

Server1 Enter the primary SNTP server here. Server2 Enter a secondary SNTP server here. SNTP Polling Interval (60-86400) The value defined here determines the amount of time (in seconds) before the Switch polls the SNTP server. The default value is every 1024 seconds (approx. 17 minutes). Click the Save Settings button to save your changes or click Cancel Changes to discard the information.

Local Time

Hours The hour can be entered here. Minutes The minutes can be entered here. Seconds The seconds can be entered here. Month The month can be entered here. Day The day can be entered here. Year The year can be entered here. Time Zone Enter the difference between Greenwich Mean Time (GMT) and local time.
Port Management > Port Settings
The Port Management > Port Settings screen shows you the settings for each of the Switchs ports. Port The number of the port. To use an SFP module, click on the Detail button of the appropriate port (G1, G2). Description Displays a brief description of the port (can be entered by clicking on the Detail button). Administrative Status The port can be taken offline by selecting the Down option. When Up is selected, the port can be accessed normally. Link Status Up indicates a port has an active connection, Down indicates there is no active connection or the port has been taken offline by an Administrator.

Link Aggregation Detail

LAG Configuration
LAG The number of the selected LAG. Description A general description can be listed here for reference. LACP Indicates if the LAG is in LACP (Link Aggregation Control Protocol) mode. LAG Type The port types that comprise the LAG. Administrative Status Enables or forwarding through the selected LAG. disables traffic
Current Status Indicates if the LAG is currently operating. Reactivate Suspended LAG Reactivates a LAG if the LAG has been disabled as a result of a port lock or ACL operation. Admin Auto Negotiation Enables or disables Auto Negotiation on the LAG. Auto-negotiation is a protocol between two link partners that enables a LAG to advertise its transmission rate, duplex mode and flow control (the flow control default is disabled) abilities to its partner. Current Auto Negotiation The current Auto Negotiation setting. Admin Speed The configured speed at which the LAG is operating. Current LAG Speed The current speed at which the LAG is operating. Admin Flow Control Enables or disables flow control or enables the auto negotiation of flow control on the LAG. Current Flow Control The user-designated Flow Control setting. PVE Displays the PVE group to which the LAG is configured.
Port Management > LACP
LACP System Priority (1-65535) Indicates the global LACP priority value. The possible range is 1- 65535. The default value is 1. Port Defines the port number to which timeout and priority values are assigned. LACP Port Priority Defines the LACP priority value for the port. The field range is 1-65535. LACP Timeout Administrative LACP timeout. A short or Long timeout value can be selected. Long is the default. Admin Key A channel will only be formed between ports having the same admin key. This only applies to ports located on the same switch.

Select Ports

Ports Displays the ports that are members of the selected LAG.
Aggregate ports can be linked into link-aggregation port groups. Each group is comprised of ports with the same speed, set to full-duplex operation. Aggregated Links can be manually setup or automatically established by enabling Link Aggregation Control Protocol (LACP) on the relevant links. Aggregate ports can be linked into link-aggregation port-groups. Each group is comprised of ports with the same speed. The LACP screen contains fields for configuring LACP LAGs.

Admit Tag Only Indicates that only tagged packets

VLAN Range

VLAN Range. Indicates a range of VLANs being configured. To add the defined range of VLAN ID numbers, press the Add Range button.
are accepted on the port.
Admit All Indicates that both tagged and untagged
packets are accepted on the port.
PVID Assigns a VLAN ID to untagged packets. The possible values are 2 to 4094. VLAN 4095 is defined as per standard and industry practice as the discard VLAN. Packets classified to the Discard VLAN are dropped. Ingress Filtering Enables or disables Ingress filtering on the port. Ingress filtering discards packets which do not include an ingress port. LAG Indicates the LAG to which the VLAN is defined.
Tagged Defines the interface as a tagged member of a VLAN. All packets forwarded by the interface are tagged. The packets contain VLAN information. Untagged Packets forwarded by the interface are untagged. Forbidden Forbidden ports are not included in the VLAN. Exclude Excludes the interface from the VLAN. However, the interface can be added to the VLAN through GVRP.
VLAN Management > Ports to VLAN
The Ports to VLAN screen contains fields for configuring ports to a VLAN. The port default VLAN ID (PVID) is configured on the Create VLAN screen. All untagged packets arriving to the device are tagged by the ports PVID.
VLAN Management > VLAN to Ports
The VLAN to Ports screen contains fields for configuring VLANs to a ports.
Interface Displays the interface number. Mode Indicates the port to VLAN mode. The possible field values are: General Indicates the port belongs to VLANs, and each VLAN is user-defined as tagged or untagged (full 802.1Q mode). Access Indicates the port belongs to a single untagged VLAN. When a port is in Access mode, the packet types which are accepted on the port cannot be designated. Ingress filtering cannot be enabled/disabled on an access port. Trunk Indicates the port belongs to VLANs in which all ports are tagged, except for one port that can be untagged. Join VLAN Defines the VLANs to which the interface is joined. VLANs Displays the PVID tag.
The Ports to VLAN screen contains a Port Table for VLAN parameters for each ports. Ports are assigned VLAN membership by selecting and configuring the presented configuration options. VLAN The VLAN number. Access Indicates the port belongs to a single untagged VLAN. When a port is in Access mode, the packet types which are accepted on the port cannot be designated. Ingress filtering cannot be enabled/disabled on an access port. Trunk Indicates the port belongs to VLANs in which all ports are tagged, except for one port that can be untagged. General Indicates the port belongs to VLANs, and each VLAN is user-defined as tagged or untagged (full 802.1Q mode).

Force-Authorized The controlled port state is set to
Security > Ports Security
Force-Authorized (forward traffic).
Force-Unauthorized The controlled port state is set
to Force-Unauthorized (discard traffic). Enable Periodic Reauthentication Permits immediate port reauthentication. Setting Timer The Setting Timer button opens the Setting Timer screen to configure ports for 802.1x functionality.

Setting Timer

802.1x Settings > Setting Timer
Port Indicates the port name.
Network security can be increased by limiting access on a specific port only to users with specific MAC addresses. MAC addresses can be dynamically learned or statically configured. Locked port security monitors both received and learned packets that are received on specific ports. Access to the locked port is limited to users with specific MAC addresses. These addresses are either manually defined on the port, or learned on that port up to the point when it is locked. When a packet is received on a locked port, and the packet source MAC address is not tied
to that port (either it was learned on a different port, or it is unknown to the system), the protection mechanism is invoked, and can provide various options. Unauthorized packets arriving at a locked port are either:
Forwarded Discarded with no trap Discarded with a trap Cause the port to be shut down.
Trap Frequency The amount of time (in seconds) between traps. The default value is 10 seconds.
Security > Multiple Hosts
The Multiple Hosts screen allows network managers to configure advanced port-based authentication settings for specific ports and VLANs.
Locked port security also enables storing a list of MAC addresses in the configuration file. The MAC address list can be restored after the device has been reset. Disabled ports are activated from the Port Security page. Interface Displays the port or LAG name. Lock Interface Selecting this option locks the specified interface. Learning Mode Defines the locked port type. The Learning Mode field is enabled only if Locked is selected in the Interface Status field.The possible field values are:
Classic Lock Locks the port using the classic lock
mechanism. The port is immediately locked, regardless of the number of addresses that have already been learned.
Limited Dynamic Lock Locks the port by deleting
Security > HTTPS Settings
the current dynamic MAC addresses associated with the port. The port learns up to the maximum addresses allowed on the port. Both relearning and aging MAC addresses are enabled. In order to change the Learning Mode, the Lock Interface must be set to Unlocked. Once the mode is changed, the Lock Interface can be reinstated. Max Entries Specifies the number of MAC addresses that can be learned on the port. The Max Entries field is enabled only if Locked is selected in the Interface Status field. In addition, the Limited Dynamic Lock mode is selected. The default is 1. Action on Violation Indicates the action to be applied to packets arriving on a locked port. The possible field values are:

Global Setting

Spanning Tree State Indicates if STP is enabled on the device. STP Operation Mode Indicates the STP mode by which STP is enabled on the device. The possible field values are:
Classic STP Enables Classic STP on the device. This is
Max Age Specifies the device Maximum Age Time. The Maximum Age Time indicates the amount of time in seconds a bridge waits before sending configuration messages. The default max age is 20 seconds. The range is 6 to 40 seconds. Forward Delay Specifies the device forward delay time. The Forward Delay Time indicates the amount of time in seconds a bridge remains in a listening and learning state before forwarding packets. The default is 15 seconds. The range is 4 to 30 seconds.

the default value.

Rapid STP Enables Rapid STP on the device. Multiple STP Enables Multiple STP on the device.
BPDU Handling Determines how BPDU packets are managed when STP is disabled on the port/ device. BPDUs are used to transmit spanning tree information. The possible field values are:
Spanning Tree > STP Port Settings
Forwarding Indicates that the port is in Forwarding
mode. The port can forward traffic and learn new MAC addresses. Speed Indicates the speed at which the port is operating. Path Cost Indicates the port contribution to the root path cost. The path cost is adjusted to a higher or lower value, and is used to forward traffic when a path being rerouted. Default Path Cost When selected the default path cost is implemented. Priority Priority value of the port. The priority value influences the port choice when a bridge has two ports connected in a loop. The priority value is between 0 -240. The priority value is provided in increments of 16. Designated Bridge ID Indicates the bridge priority and the MAC Address of the designated bridge. Designated Port ID Indicates the selected ports priority and interface. Designated Cost Indicates the cost of the port participating in the STP topology. Ports with a lower cost are less likely to be blocked if STP detects loops. Forward Transitions Indicates the number of times the port has changed from the Blocking state to Forwarding state.
Network administrators can assign STP settings to specific interfaces using the STP Interface Settings screen. The STP Interface Settings screen contains the following fields: Interface Indicates the port or LAG on which STP is enabled. STP Indicates if STP is enabled on the port. Port Fast Indicates if Fast Link is enabled on the port. If Fast Link mode is enabled for a port, the Port State is automatically placed in the Forwarding state when the port link is up. Fast Link optimizes the STP protocol convergence. STP convergence can take 30-60 seconds in large networks. Port State Displays the current STP state of a port. If enabled, the port state determines what forwarding action is taken on traffic. Possible port states are:

Classic STP Indicates that Classic STP is enabled on

the device.

Rapid STP Indicates that Rapid STP is enabled on the

device.

Multiple STP Indicates that Multiple STP is enabled
on the device. Fast Link Indicates if Fast Link is enabled or disabled for the port or LAG. If Fast Link is enabled for a port, the port is automatically placed in the forwarding state. Port State Indicates if RSTP is enabled on the interface. Point-to-Point Admin Status Indicates if a point-to-point links are established, or permits the device to establish a point-to-point link. The possible field values are:

Auto Point-to-point

MSTP provides differing load balancing scenarios. For example, while port A is blocked in one STP instance, the same port is placed in the Forwarding State in another STP instance. The MSTP Properties screen contains information for defining global MSTP settings, including region names, MSTP revisions, and maximum hops. The MSTP Properties screen contains the following fields: Region Name Provides a user-defined STP region name. Revision Defines unsigned 16-bit number that identifies the revision of the current MST configuration. The revision number is required as part of the MST configuration. The possible field range 0-65535. Max Hops Indicates the total number of hops that occur in a specific region before the BPDU is discarded. Once the BPDU is discarded, the port information is aged out. The possible field range is 1-40. The field default is 20 hops. IST Master Identifies the Spanning Tree Master instance. The IST Master is the specified instance root.
links established by the device.

automatically

Enabled Enables the device to establish a point-to-
point link. To establish communications over a pointto-point link, the originating PPP first sends Link Control Protocol (LCP) packets to configure and test the data link. After a link is established and optional facilities are negotiated as needed by the LCP, the originating PPP sends Network Control Protocols (NCP) packets to select and configure one or more network layer protocols. When each of the chosen network
Spanning Tree > MSTP Instance Settings
Spanning Tree > MSTP Interface Settings
MSTP operation maps VLANs into STP instances. Packets assigned to various VLANs are transmitted along different paths within Multiple Spanning Trees Regions (MST Regions). Regions are one or more Multiple Spanning Tree bridges by which frames can be transmitted. In configuring MST, the MST region to which the device belongs is defined. A configuration consists of the name, revision, and region to which the device belongs. Network Administrators can define MSTP Instances settings using the MSTP Instance Settings screen. Instance ID Defines the VLAN group to which the interface is assigned. Included VLAN Maps the selected VLAN to the selected instance. Each VLAN belongs to one instance. Bridge Priority Specifies the selected spanning tree instance device priority. The field range is 0-61440. Designated Root Bridge ID Indicates the ID of the bridge with the lowest path cost to the instance ID. Root Port Indicates the selected instances root port. Root Path Cost Indicates the selected instances path cost. Bridge ID Indicates the bridge ID of the selected instance. Remaining Hops Indicates the number of hops remaining to the next destination.

dynamically.

user-defined.
SNMP > Global Parameters
The Global Parameters screen contains parameters for defining SNMP notification parameters.

SNMP > Views

Local Engine ID Indicates the local device engine ID. The field value is a hexadecimal string. Each byte in hexadecimal character strings consists of two hexadecimal digits. Each byte can be separated by a period or a colon. The Engine ID must be defined before SNMPv3 is enabled. For standalone devices, select a default Engine ID that is comprised of Enterprise number and the default MAC address. For a stackable system configure the Engine ID, and verify that the Engine ID is unique for the administrative domain. This prevents two devices in a network from having the same Engine ID. Use Default Uses the device generated Engine ID. The default Engine ID is based on the device MAC address and is defined per standard as:
First 4 octets first bit = 1, the rest is IANA Enterprise
SNMP Views provide access or block access to device features or feature aspects. For example, a view can be defined that states that SNMP Group A has Read Only (R/O) access to Multicast groups, while SNMP Group B has Read-Write (R/W) access to Multicast groups. Feature access is granted via the MIB name, or MIB Object ID.\ View Name Displays the user-defined views. The options are as follows:
Default Displays the default SNMP view for read and

read/write views.

DefaultSuper Displays the default SNMP view for
administrator views. Subtree ID Tree Indicates the device feature OID included or excluded in the selected SNMP view. The options to select the Subtree are as follows:
Select from List Select the Subtree from the list

number.

Fifth octet Set to 3 to indicate the MAC address that

follows.

Last 6 octets MAC address of the device.
SNMP Notifications Indicates if the device can send SNMP notifications. Authentication Notifications Indicates if SNMP Authentication failure notification is enabled on the device.

provided.

Insert Enables a Subtree not included in the Select
from List field to be entered. View Type Indicates if the defined OID branch will be included or excluded in the selected SNMP view. The Add to List button adds the Views configuration to the Views Table at the bottom of the screen.

SNMP > Group Profile

Notify Sends traps for the assigned SNMP view.
SNMP > Group Membership
The Group Profile screen provides information for creating SNMP groups and assigning SNMP access control privileges to SNMP groups. Groups allow network managers to assign access rights to specific device features, or features aspects. Group Name Displays the user-defined group to which access control rules are applied. The field range is up to 30 characters. Security Model Defines the SNMP version attached to the group. The possible field values are:

Traps Indicates traps are sent. Informs Indicates informs are sent.
SNMPv1,2 Enables SNMPv1,2 as the Notification Recipient. Either SNMPv1,2 or SNMPv3 can be enabled at any one time, but not both at the same time. If SNMPv1,2 is enabled, the Community String and Notification Version fields are enabled for configuration:
The Notification Filter screen permits filtering traps based on OIDs. Each OID is linked to a device feature or a feature aspect. The Notification Filter screen also allows network managers to filter notifications. Filter Name Contains a list of user-defined notification filters. New Object Identifier Subtree Displays the OID for which notifications are sent or blocked. If a filter is attached to an OID, traps or informs are generated and sent to the trap recipients. Object IDs are selected from either the Select from List or the Object ID List. there are two configuration options: Select from List Select the OID from the list provided. Object ID Enter an OID not offered in the Select from List option. Filter Type Indicates whether informs or traps are sent regarding the OID to the trap recipients.
Excluded Restricts sending OID traps or informs. Included Sends OID traps or informs.
Community String Identifies the community string of the trap manager. Notification Version Determines the trap type. The possible field values are:
SNMP V1 Indicates SNMP Version 1 traps are sent. SNMP V2 Indicates SNMP Version 2 traps are sent.
SNMPv3 Enables SNMPv3 as the Notification Recipient. Either SNMPv1,2 or SNMPv3 can be enabled at any one time, but not both at the same time. If SNMPv3is enabled, the User Name and Security Level fields are enabled for configuration: User Name Defines the user to whom SNMP notifications are sent. Security Level Defines the means by which the packet is authenticated. The possible field values are:
No Authentication Indicates the packet is neither
authenticated nor encrypted.

Authentication Indicates

packet

authenticated.

Privacy Indicates the packet is both authenticated

and encrypted.

8-Port 10/100/1000 Gigabit Switch with Webview 50
UDP Port Displays the UDP port used to send notifications. The default is 162. Filter Name Indicates if the SNMP filter for which the SNMP Notification filter is defined. Timeout Indicates the amount of time (seconds) the device waits before resending informs. The default is 15 seconds. Retries Indicates the amount of times the device resends an inform request. The default is 3 seconds. The Add to List button adds the Notification Recipient configuration to the relevant table at the bottom of the screen.

RADIUS (Remote Authentication Dial-In User Service) A protocol that uses an authentication server to control network access. RJ-45 (Registered Jack-45) An Ethernet connector that holds up to eight wires. RMON (Remote Monitoring) Provides network information to be collected from a single workstation. Router A networking device that connects multiple networks together. RSTP (Rapid Spanning Tree Protocol) Detects and uses network topologies that allow a faster convergence of the spanning tree, without creating forwarding loops. Server Any computer whose function in a network is to provide user access to files, printing, communications, and other services. SMTP (Simple Mail Transfer Protocol) The standard email protocol on the Internet. SNMP (Simple Network Management Protocol) A widely used network monitoring and control protocol. SSH Secure Shell. A utility that uses strong authentication and secure communications to log in to another computer over a network. SSL (Secure Socket Layer) Encryption technology for the Internet used to provide secure transactions, such as the transmission of credit card numbers for e-commerce. Static IP Address A fixed address assigned to a computer or device that is connected to a network. STP (Spanning Tree Protocol) Prevents loops in network traffic. The Spanning Tree Protocol (STP) provides tree topography for any arrangement of bridges. STP provides one path between end stations on a network, eliminating loops. Subnet (Sub-network) Subnets are portions of a network that share a common address component. In TCP/IP networks, devices that share a prefix are part of the same subnet. For example, all devices with a prefix of 157.100.100.100 are part of the same subnet. Subnet Mask An address code that determines the size of the network. Switch Filters and forwards packets between LAN segments. Switches support any packet protocol type. TACACS+ (Terminal Access Controller Access Control System Plus) Proprietary Cisco enhancement to Terminal Access Controller Access Control System (TACACS). Provides additional support for authentication, authorization, and accounting.
TCP (Transmission Control Protocol) A network protocol for transmitting data that requires acknowledgement from the recipient of data sent. TCP/IP (Transmission Control Protocol/Internet Protocol) A set of instructions PCs use to communicate over a network. Telnet A user command and TCP/IP protocol used for accessing remote PCs. TFTP (Trivial File Transfer Protocol) A version of the TCP/IP FTP protocol that has no directory or password capability. Throughput The amount of data moved successfully from one node to another in a given time period. Trunking Link Aggregation. Optimizes port usage by linking a group of ports together to form a single trunk (aggregated groups). TX Rate Transmission Rate. UDP (User Data Protocol) Communication protocol that transmits packets but does not guarantee their delivery. Upgrade To replace existing software or firmware with a newer version. Upload To transmit a file over a network. URL (Uniform Resource Locator) The address of a file located on the Internet. VLAN (Virtual Local Area Networks) Logical subgroups that constitute a Local Area Network (LAN). This is done in software rather than defining a hardware solution. WAN (Wide Area Network) Networks that cover a large geographical area. Wildcard Mask Specifies which IP address bits are used, and which bits are ignored. A wild card mask of 255.255.255.255 indicates that no bit is important. A wildcard of 0.0.0.0 indicates that all the bits are important. For example, if the destination IP address is 149.36.184.198 and the wildcard mask is 255.36.184.00, the first two bits of the IP address are used, while the last two bits are ignored.

Appendix D

Appendix D: Specifications

Specifications

Model Ports Cabling Type LEDs SRWRJ-45 Connectors for 10BASE-T/100BASE-TX/ 1000Base-T with 2 shared SFP ports on port 7 and 8 (combo port) Console Port Auto MDI/MDI-X Autonegotiate/Manual Setting UTP CAT 5 or Better for 10BASE-T/100BASE-TX, UTP CAT 5e or better for 1000BASE-TX Link/Act, Gigabit Speed, System 16 Gig Non-Blocking 11,9 Mpps Wire-Speed Performance 8K 256 Active VLANs (4096 range) Port-Based and 802.1Q Tag-Based VLANs Management VLAN Head of Line Blocking Prevention Built-In Web UI for Easy Browser-Based Configuration (HTTP/HTTPS) SNMP Version 1, 2c, 3 with Support for Traps RFC1213 MIB-2, RFC2863 Interface MIB, RFC2665 Ether-like MIB, RFC1493 Bridge MIB, RFC2674 Extended Bridge MIB (P-bridge, Q-bridge), RFC2819 RMON MIB (groups 1,2,3,9 only), RFC2737 Entity MIB, RFC 2618 RADIUS Client MIB, RFC 1215 Traps RMON Firmware Upgrade Port Mirroring Other Management IEEE 802.1X Access Control
Embedded Remote Monitoring (RMON) Software Agent Supports four RMON Groups (History, Statistics, Alarms, and Events) for Enhanced Traffic Management, Monitoring, and Analysis. Web Browser Upgrade (HTTP) TFTP Upgrade Traffic on a Port can be Mirrored to another Port for Analysis with a Network Analyzer or RMON Probe Traceroute Secure Socket Layer (SSL) Secure Shell (SSH) RADIUS Port Mirroring TFTP upgrade SSL security for Web UI DHCP Client BootP SNTP Xmodem Upgrade Cable Diagnostics PING Telnet Client (SSH Secure Support) 802.1X - RADIUS Authentication MD5 Encryption ACLs Drop or Rate Limit Based on: Source and Destination MAC-Based Source and Destination IP Address Protocol ToS/DSCP Port VLAN Ethertype Link Aggregation using IEEE 802.3ad LACP Up to 8 Ports in up to 8 Groups

Performance

Switching Capacity Forwarding Rate

Layer 2

MAC table size Number of VLANs VLAN HOL Blocking

Security Features

Management
Web User Interface SNMP SNMP MIBs

Availability

Link Aggregation
Storm Control Spanning Tree IGMP Snooping Broadcast, Multicast and Unknown Unicast IEEE 802.1d Spanning Tree, IEEE 802.1w Rapid Spanning Tree, IEEE 802.1s Multiple Spanning Tree IGMP (v1/v2) Snooping Provides for Fast Client Joins and Leaves of Multicast Streams and Limits Bandwidth- Intensive Video Traffic to Only the Requestors Supports 256 Multicast Groups. 4 Hardware Queues Priority Queueing and Weighted Round Robin (WRR) Port-Based 802.1p VLAN Priority Based IPv4/v6 IP Precedence/TOS/ DSCP Based TCP/UDP Port Based Diffserv Classification and Remarking ACLs Ingress Policer Egress Rate Control 802.3 10BASE-T Ethernet, 802.3u 100BASE-TX Fast Ethernet, 802.3ab 1000BASE-T Gigabit Ethernet, 802.3z Gigabit Ethernet, 802.3x Flow Control, 802.3 ad LACP, 802.1d STP, 802.1Q/p VLAN, 802.1w Rapid STP, 802.1s Multiple STP, 802.1x Port Access Authentication 279,4 x 44,45 x 170 mm 1 kg External AC Power Adapter FCC Part15 Class A, CE Class A, UL, cUL, CE Mark, CB 0 to 40C -20 to 70C Operating Humidity Storage Humidity

SRW2008P 8 RJ-45 Connectors for 10BASE-T/100BASE-TX/ 1000Base-T with 2 shared SFP ports on port 7 and 8 (combo port) Console Port Auto MDI/MDI-X Autonegotiate/Manual Setting UTP CAT 5 or Better for 10BASE-T/100BASE-TX UTP CAT 5e or Better for 1000BASE-T Link/Act, PoE, System 802.3af complaint. Supply up to IEEE Standard maximum of 15.4W on 4 10/100/1000 ports or up to 7.5W on 8 10/100/1000 ports 16 Gig Non-Blocking 11,9 Mpps Wire-Speed Performance 8K 256 Active VLANs (4096 range) Port-Based and 802.1Q Tag-Based VLANs Management VLAN Head of Line Blocking Prevention Built-In Web UI for Easy Browser-Based Configuration (HTTP/HTTPS) SNMP Version 1, 2c, 3 with Support for Traps RFC1213 MIB-2, RFC2863 Interface MIB, RFC2665 Ether-like MIB, RFC1493 Bridge MIB, RFC2674 Extended Bridge MIB (P-bridge, Q-bridge), RFC2819 RMON MIB (groups 1,2,3,9 only), RFC2737 Entity MIB, RFC 2618 RADIUS Client MIB, RFC 1215 Traps Embedded Remote Monitoring (RMON) Software Agent
Priority levels Scheduling Class of Service Rate Limiting Standards
Dimensions Unit Weight Power Certification Operating Temp. Storage Temp. Operating Humidity Storage Humidity
Firmware Upgrade Port Mirroring Other Management IEEE 802.1X Access Control Supports four RMON Groups (History, Statistics, Alarms, and Events) for Enhanced Traffic Management, Monitoring, and Analysis. Web Browser Upgrade (HTTP) TFTP Upgrade Traffic on a Port can be Mirrored to another Port for Analysis with a Network Analyzer or RMON Probe Traceroute Secure Socket Layer (SSL) Secure Shell (SSH) RADIUS Port Mirroring TFTP Upgrade SSL security for Web UI DHCP Client BootP SNTP Xmodem Upgrade Cable Diagnostics PING Telnet Client (SSH Secure Support) 802.1X - RADIUS Authentication MD5 Encryption ACLs Drop or Rate Limit Based on: Source and Destination MAC-Based Source and Destination IP Address Protocol ToS/DSCP Port VLAN Ethertype Link Aggregation using IEEE 802.3ad LACP Up to 8 Ports in up to 8 Groups Broadcast, Multicast and Unknown Unicast IEEE 802.1d Spanning Tree, IEEE 802.1w Rapid Spanning Tree, IEEE 802.1s Multiple Spanning Tree IGMP (v1/v2) snooping limits
bandwidth-intensive video traffic to only the requestors. Support 256 multicast groups. 4 Hardware Queues Priority Queueing and Weighted Round Robin (WRR) Port-Based 802.1p VLAN Priority Based IPv4/v6 IP Precedence/TOS/ DSCP Based TCP/UDP Port Based Diffserv Classification and Remarking ACLs Ingress Policer Egress Rate Control 802.3 10BASE-T Ethernet, 802.3u 100BASE-TX Fast Ethernet, 802.3ab 1000BASE-T Gigabit Ethernet 802.3z Gigabit Ethernet 802.3x Flow Control, 802.3 ad LACP, 802.3af PoE 802.1d STP, 802.1Q/p VLAN, 802.1w Rapid STP, 802.1s Multiple STP, 802.1x Port Access Authentication 279,4 x 44,45 x 170 mm 1,2 kg External AC Power Adapter FCC Part15 Class A, CE Class A, UL, cUL, CE Mark, CB 0 to 40C -20 to 70C 10 to 90% Noncondensing 10 to 95% Noncondensing