SRW208G 8-port

10/100 Ethernet Switch with WebView and Expansion Slots. Includes 8 10/100 RJ45 ports and 1 10/100/1000 RJ-45 port and 1 MiniGBIC slot.

SRW208L 8-port

10/100 Ethernet Switch with WebView and 100Base-LX Uplink. Includes 8 10/100 RJ-45 ports and 1 MiniGBIC slot and 1 100LX Uplink port. WebView and Maximum POE (Power over Ethernet. Includes 8 10/100 RJ-45 ports and 2 10/100/1000 RJ45 ports and 2 shared MiniGBIC slots. 10/100 Ethernet Switch with WebView and POE (Power over Ethernet) Includes 8 10/100 RJ-45 ports and 2 10/100/1000 RJ-45 ports and 2 shared MiniGBIC slots.
SRW208MP 8-port 10/100 Ethernet Switch with

SRW208P 8-port

For the purpose of this manual, whenever a feature applies to all models, the model number will be referenced as SRW208x. If a specific model number is mentioned, then the feature is specific to that model. The Linksys WebView Managed switch allows you to expand your network securely. Configuration of the Switch is secured using SSL for web access. User control is secured using 802.1x security using a RADIUS authentication mechanism and can also be controlled using MAC-based filtering. Extensive QoS features makes the solution ideal for realtime applications like Voice and Video. The 4 priority queues together with the Weighted Round Robin and Strict Priority scheduling techniques facilitate efficient coexistence of real-time traffic with data traffic allowing them each to meet their QoS needs. Individual users or applications can be prioritized above others using various Class of Service options - by port, layer 2 priority (802.1p), and Layer 3 priority (TOS or DSCP). Intelligent Broadcast, and Multicast storm control minimizes and contain the effect of these types of traffic on regular traffic. IGMP Snooping limits bandwidth-intensive video traffic to only the requestors without flooding to all users. Incoming traffic can be policed and outgoing traffic can be shaped allowing you to control network access and traffic flow.
8-Port 10/100 Ethernet Switch with Webview 1

Chapter 2

Chapter 2: Product Overview

SRW208 - Front Panel

The LEDs and ports are located on the front panel of the Switch.

Product Overview

Front Panel
SYSTEM (Green) The system LED lights up to indicate that the Switch is powered on. LINK/ACT (Green) The LINK/ACT LED lights up to indicate a functional network link through the corresponding port (1 through 8, G1, or G2) with an attached device. It flashes to indicate that the Switch is actively sending or receiving data over that port. 100M (Orange) The 100M LED lights up to indicate a 100Mbps connection on the corresponding port (1 through 8). Gigabit (Orange) The Gigabit LED lights up to indicate a Gigabit connection on the corresponding RJ-45 port (G1) or miniGBIC port (G2). ETHERNET 1-8 The Switch is equipped with 8 auto-sensing, Ethernet network ports, which use RJ-45 connectors. The Fast Ethernet ports support network speeds of 10Mbps or 100Mbps. They can operate in half and full-duplex modes. Auto-sensing technology enables each port to automatically detect the speed of the device connected to it (10Mbps or 100Mbps), and adjust its speed and duplex accordingly. G1-G2 The Gigabit Ethernet ports support network speeds of 10Mbps, 100Mbps, and 1000Mbps. They can operate in half and fullduplex modes. Auto-sensing technology enables each port to automatically detect the speed of the device connected to it (10Mbps, 100Mbps, or 1000Mbps), and adjust its speed and duplex accordingly. The G1 and G2 RJ-45 ports are shared with the miniGBIC ports. miniGBIC1/2 The mini-GBIC (gigabit interface converter) port is a connection point for a miniGBIC expansion module, so the Switch can be uplinked via fiber to another switch. Each MiniGBIC port provides a link to a high-speed network segment or individual workstation at speeds of up to 1000Mbps.

SYSTEM (Green) The system LED lights up to indicate that the Switch is powered on. LINK/ACT (Green) The LINK/ACT LED lights up to indicate a functional network link through the corresponding port (1 through 8) with an attached device. It flashes to indicate that the Switch is actively sending or receiving data over that port. 100M (Orange) The 100M LED lights up to indicate a 100Mbps connection on the corresponding port (1 through 8). ETHERNET 1-8 The Switch is equipped with 8 auto-sensing, Ethernet network ports, which use RJ-45 connectors. The Fast Ethernet ports support network speeds of 10Mbps or 100Mbps. They can operate in half and full-duplex modes. Auto-sensing technology enables each port to automatically detect the speed of the device connected to it (10Mbps or 100Mbps), and adjust its speed and duplex accordingly. Console The Console port is where you can connect a serial cable to a PCs serial port for configuration using your PCs HyperTerminal program. Refer to Chapter 4: Using the Console Interface for Configuration for more information.

SRW208G - Front Panel

Console The Console port is where you can connect a serial cable to a PCs serial port for configuration using your PCs HyperTerminal program. Refer to Chapter 4: Using the Console Interface for Configuration for more information.
G1 The mini-GBIC (gigabit interface converter) port is a connection point for a mini-GBIC expansion module, so the Switch can be uplinked via fiber to another switch. Each MiniGBIC port provides a link to a high-speed network segment or individual workstation at speeds of up to 1000Mbps. Use the Linksys MGBT1, MGBSX1, or MGBLH1 mini-GBIC modules with the Switch. The MGBSX1 and the MGBLH1 require fiber cabling with LC connectors, while the MGBT1 requires a Category 5e Ethernet cable with an RJ-45 connector. 9 The 100LX port is where you can connect

SRW208L - Front Panel

SYSTEM (Green) The system LED lights up to indicate that the Switch is powered on. LINK/ACT (Green) The LINK/ACT LED lights up to indicate a functional network link through the corresponding port (1 through 8, G1, or 100LX) with an attached device. It flashes to indicate that the Switch is actively sending or receiving data over that port. 100M (Orange) The 100M LED lights up to indicate a 100Mbps connection on the corresponding port (1 through 8). Gigabit (Orange) The Gigabit LED lights up to indicate a Gigabit connection on the corresponding RJ-45 port (G1) or miniGBIC port (G2). ETHERNET 1-8 The Switch is equipped with 8 auto-sensing, Ethernet network ports, which use RJ-45 connectors. The Fast Ethernet ports support network speeds of 10Mbps or 100Mbps. They can operate in half and full-duplex modes. Auto-sensing technology enables each port to automatically detect the speed of the device connected to it (10Mbps or 100Mbps), and adjust its speed and duplex accordingly.

System Configuration Menu options: 1. System Information 2. Management Settings 3. User and Password Settings 4. Security Settings 5. IP Configuration 6. File Management 7. Restore System Default Settings 8. Reboot System 0. Back to Main Menu.

System Information

From the System Information screen you can check current firmware versions and other general switch information.

Switch Main Menu

The Main Menu screen displays six menu choices: System Configuration Menu, Port Status, Port Configuration, Help, and Log Out.
System Information Main Menu

Versions

The Versions screen displays the Boot Version, Software Version, Loader Version and the Hardware Version.

Management Settings

From the Management Settings screen, you can set Serial Port Session Configuration, Telnet Session Configuration, or Secure Telnet (SSH) Configuration.
Boot Version This file runs when the Switch is turned on. It performs power-on diagnostics and loads the operating system for the Switch. Software Version This file contains the programming code that runs the Switch. Hardware Version The current hardware setup of the Switch.
Serial Port Configuration
On the Serial Port Configuration screen, the Switchs baud rate is displayed. Select Edit and press the Enter key to make changes. Toggle to the desired speed and when your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.
General System Information
The General System Information screen displays the System Description, System Up Time, System Mac Address, System Contact, System Name and System Location. Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.

Telnet Configuration

On the Telnet Configuration screen, the time-out is displayed. The value is entered in seconds. If you do not want the Telnet session to timeout, you may enter a value of 0 sec.

General Information

Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.

SSH Server Configuration

SSH Configuration
On the SSH Configuration screen, you can select SSH Server Configuration, SSH Server Status, SSH Crypto Key Generation, and SSH Keys Fingerprints.

PoE Information

Maximum Available Power Indicates the maximum amount of power the device can supply. System Operation Status Indicates whether the PoE function is on or off. Mainpower Consumption Displays how much power is currently used.
Management VLAN This drop-down allows you to select the Management VLAN. IP Address Mode This drop-down allows you to select Static or Dynamic IP address configuration. Host Name Enter the DHCP Host Name here. IP Address If using a static IP address, enter the IP address here. Subnet Mask Enter the subnet mask of the currently configured IP address. Default Gateway Enter the IP address of the Default Gateway.
8-Port 10/100 Ethernet Switch with Webview 19
DNS Server Enter the primary DNS Server information. Click the Save Settings button to save your changes or click Cancel Changes to discard the information.

Daylight Saving

Daylight Saving Select Daylight Saving to enable it on the Switch. If the Switch should use US daylight savings, then select USA. If the Switch should use EU daylight savings, then select European. If it should use another kind of daylight savings, then select Custom and complete the From and To fields. Time Set Offset (1-1440) For non-US and European countries, specify the amount of time for daylight savings. The default is 60 minutes. From If you selected Other for the Daylight Saving setting, then enter the date and time when daylight savings begins. To If you selected Other for the Daylight Saving setting, then enter the date and time when daylight savings ends. Recurring If you selected Other for the Daylight Saving setting and daylight savings has the same start and end dates and times every year, then select Recurring. From If you selected Recurring, then enter the date and time when daylight savings begins. To If you selected Recurring, then enter the date and time when daylight savings ends.

Setup > Time

The Time screen allows you to configure the time settings for the Switch.

Set Time

Use System Time When this option is selected, the local hardware clock is utilized. Use SNTP Time When this option is selected, the time is synchronized to an SNTP (Simple Network Time Protocol) server.

SNTP Servers

Server1 Enter the primary SNTP server here. Server2 Enter a secondary SNTP server here. SNTP Polling Interval (60-86400) The value defined here determines the amount of time (in seconds) before the Switch polls the SNTP server. The default value is every 1024 seconds (approx. 17 minutes). Click the Save Settings button to save your changes or click Cancel Changes to discard the information.

Local Time

Hours The hour can be entered here. Minutes The minutes can be entered here. Seconds The seconds can be entered here. Month The month can be entered here. Day The day can be entered here. Year The year can be entered here. Time Zone Enter the difference between Greenwich Mean Time (GMT) and local time.

VLAN Management > Ports to VLAN
The Ports to VLAN screen contains fields for configuring ports to a VLAN. The port default VLAN ID (PVID) is configured on the Create VLAN screen. All untagged packets arriving to the device are tagged by the ports PVID.
VLAN Management > VLAN to Ports
The VLAN to Ports screen contains fields for configuring VLANs to a ports.
Interface Displays the interface number. Mode Indicates the port to VLAN mode. The possible field values are: General Indicates the port belongs to VLANs, and each VLAN is user-defined as tagged or untagged (full 802.1Q mode). Access Indicates the port belongs to a single untagged VLAN. When a port is in Access mode, the packet types which are accepted on the port cannot be designated. Ingress filtering cannot be enabled/disabled on an access port. Trunk Indicates the port belongs to VLANs in which all ports are tagged, except for one port that can be untagged. Join VLAN Defines the VLANs to which the interface is joined. VLANs Displays the PVID tag.
The Ports to VLAN screen contains a Port Table for VLAN parameters for each ports. Ports are assigned VLAN membership by selecting and configuring the presented configuration options. VLAN The VLAN number. Access Indicates the port belongs to a single untagged VLAN. When a port is in Access mode, the packet types which are accepted on the port cannot be designated. Ingress filtering cannot be enabled/disabled on an access port. Trunk Indicates the port belongs to VLANs in which all ports are tagged, except for one port that can be untagged. General Indicates the port belongs to VLANs, and each VLAN is user-defined as tagged or untagged (full 802.1Q mode).
LAG Indicates if the port is a member of a LAG. If it is a member of a LAG, it cannot be configured to a VLAN. The LAG to which it belongs can be configured to a VLAN. enabled.
Port Indicates the port number on which GVRP is LAG Indicates the LAG number on which GVRP is

Join VLAN Detail

The Join VLAN Detail screen allows you to select the VLAN for the port selected and determine whether it is tagged or untagged. It will be displayed with a T if it is tagged and with a U if it is untagged.

enabled.

GVRP State When the checkbox is checked, GVRP is enabled on the interface. Dynamic VLAN Creation When the checkbox is checked, Dynamic VLAN creation is enabled on the interface. GVRP Registration When the checkbox is checked, VLAN registration through GVRP is enabled on the device. The Update button adds the configured GVRP setting to the table at the bottom of the screen.

The ingress interface Packet content A combination of these attributes
Security > Storm Control
Port Displays the port number for which storm control is enabled.
Providing various mechanisms for determining the allocation of network resources to different handling classes, including:
The assignment of network traffic to a particular

hardware queue

The assignment of internal resources Traffic shaping
The terms Class of Service (CoS) and QoS are used in the following context: CoS provides varying Layer 2 traffic services. CoS refers to classification of traffic to traffic-classes, which are handled as an aggregate whole, with no per-flow settings. CoS is usually related to the 802.1p service that classifies flows according to their Layer 2 priority, as set in the VLAN header. QoS refers to Layer 2 traffic and above. QoS handles perflow settings, even within a single traffic class.

QoS > CoS Settings

Broadcast Control Indicates whether broadcast packet types are forwarded on the specific interface. Mode Specifies the Broadcast mode currently enabled on the device. The possible field values are:
Unknown Unicast, Multicast & Broadcast Counts
Unicast, Multicast, and Broadcast traffic. & Broadcast Counts Multicast traffic together.

Multicast

Broadcast
Broadcast Only Counts only Broadcast traffic.
Rate Threshold The maximum rate (packets per second) at which unknown packets are forwarded. The default value is 3500. The range is 70 -100000.
Network traffic is usually unpredictable, and the only basic assurance that can be offered is best effort traffic delivery. To overcome this challenge, Quality of Service (QoS) is applied throughout the network. This ensures that network traffic is prioritized according to specified criteria, and that specific traffic receives preferential treatment. QoS in the network optimizes network performance and entails two basic facilities: Classifying incoming traffic into handling classes, based on an attribute, including:

QOS > CoS Settings

The CoS Settings screen contains fields for enabling or disabling CoS. In addition, the Trust mode can be selected. The Trust mode relies on predefined fields within the packet to determine the egress queue settings. The CoS Settings screen has two areas, CoS Settings and CoS to Queue. CoS Mode Indicates if QoS is enabled on the interface. The possible values are:

First 4 octets first bit = 1, the rest is IANA Enterprise
SNMP Views provide access or block access to device features or feature aspects. For example, a view can be defined that states that SNMP Group A has Read Only (R/O) access to Multicast groups, while SNMP Group B has Read-Write (R/W) access to Multicast groups. Feature access is granted via the MIB name, or MIB Object ID.\ View Name Displays the user-defined views. The options are as follows:
Default Displays the default SNMP view for read and

read/write views.

DefaultSuper Displays the default SNMP view for

administrator views.

number. follows.
Fifth octet Set to 3 to indicate the MAC address that Last 6 octets MAC address of the device.
Subtree ID Tree Indicates the device feature OID included or excluded in the selected SNMP view. The options to select the Subtree are as follows:
Select from List Select the Subtree from the list
SNMP Notifications Indicates if the device can send SNMP notifications. Authentication Notifications Indicates if SNMP Authentication failure notification is enabled on the device.

provided.

Insert Enables a Subtree not included in the Select
from List field to be entered.
View Type Indicates if the defined OID branch will be included or excluded in the selected SNMP view. The Add to List button adds the Views configuration to the Views Table at the bottom of the screen.

SNMP > Group Profile

Notify Sends traps for the assigned SNMP view.
SNMP > Group Membership
The Group Profile screen provides information for creating SNMP groups and assigning SNMP access control privileges to SNMP groups. Groups allow network managers to assign access rights to specific device features, or features aspects. Group Name Displays the user-defined group to which access control rules are applied. The field range is up to 30 characters. Security Model Defines the SNMP version attached to the group. The possible field values are:
SNMPv1 SNMPv1 is defined for the group. SNMPv2 SNMPv2 is defined for the group. SNMPv3 SNMPv3 is defined for the group.

SNMP > Notification Recipient
The Notification Recipient screen contains information for defining filters that determine whether traps are sent to specific users, and the trap type sent. SNMP notification filters provide the following services:
Identifying Management Trap Targets Trap Filtering Selecting Trap Generation Parameters Providing Access Control Checks
SNMP > Notification Filter
Recipient IP Indicates the IP address to whom the traps are sent. Notification Type Defines the notification sent. The possible field values are:
Traps Indicates traps are sent. Informs Indicates informs are sent.
SNMPv1,2 Enables SNMPv1,2 as the Notification Recipient. Either SNMPv1,2 or SNMPv3 can be enabled at any one time, but not both at the same time. If SNMPv1,2 is enabled, the Community String and Notification Version fields are enabled for configuration:
The Notification Filter screen permits filtering traps based on OIDs. Each OID is linked to a device feature or a feature aspect. The Notification Filter screen also allows network managers to filter notifications. Filter Name Contains a list of user-defined notification filters. New Object Identifier Subtree Displays the OID for which notifications are sent or blocked. If a filter is attached to an OID, traps or informs are generated and sent to the trap recipients. Object IDs are selected from either the Select from List or the Object ID List. there are two configuration options: Select from List Select the OID from the list provided. Object ID Enter an OID not offered in the Select from List option. Filter Type Indicates whether informs or traps are sent regarding the OID to the trap recipients.
Excluded Restricts sending OID traps or informs. Included Sends OID traps or informs.
Community String Identifies the community string of the trap manager. Notification Version Determines the trap type. The possible field values are:
SNMP V1 Indicates SNMP Version 1 traps are sent. SNMP V2 Indicates SNMP Version 2 traps are sent.
SNMPv3 Enables SNMPv3 as the Notification Recipient. Either SNMPv1,2 or SNMPv3 can be enabled at any one time, but not both at the same time. If SNMPv3is enabled, the User Name and Security Level fields are enabled for configuration: User Name Defines the user to whom SNMP notifications are sent. Security Level Defines the means by which the packet is authenticated. The possible field values are:

Port Specifies the interface for which the table is queried. There are two interface types from which to select.
Port The specific port number. LAG The specific LAG number.
MAC Address Specifies the MAC address for which the table is queried. VLAN ID Specifies the VLAN ID for which the table is queried. Address Table Sort Key Specifies the means by which the Dynamic MAC Address Table is sorted. The address table can be sorted by address, VLAN, or interface.
Admin > Dynamic Address
The Dynamic Address Table contains the MAC addresses learned by monitoring the source address for traffic entering the switch. When the destination address for inbound traffic is found in the database, the packets intended for that address are forwarded directly to the associated port. Otherwise, the traffic is flooded to all ports.

Admin > Logging

The System Logs enable viewing device events in real time, and recording the events for later usage. System Logs record and manage events and report errors or informational messages.
The Dynamic Address screen contains parameters for querying information in the Dynamic MAC Address Table, including the interface type, MAC addresses, VLAN, and table storing. The Dynamic MAC Address table contains information about the aging time before a dynamic MAC
Event messages have a unique format, as per the SYSLOG protocols recommended message format for
all error reporting. For example, Syslog and local device reporting messages are assigned a severity code, and include a message mnemonic, which identifies the source application generating the message. It allows messages to be filtered based on their urgency or relevancy. Each message severity determines the set of event logging devices that are sent per each event logging. Logging Indicates if device global logs for Cache, File, and Server Logs are enabled. Console logs are enabled by default.
Emergency The system is not functioning. Alert The system needs immediate attention. Critical The system is in a critical state. Error A system error has occurred. Warning A system warning has occurred. Notice The system is functioning properly, but system
Source Port Defines the port to which traffic is mirrored. Type Indicates the port mode configuration for port mirroring. The possible field values are:
RxOnly Defines the port mirroring on receiving ports.
This is the default value. ports.
TxOnly Defines the port mirroring on transmitting

Both Defines the port mirroring on both receiving and transmitting ports. Target Port Defines the port from which traffic is mirrored.

Admin > Cable Test

The Cable Test screen shows you results from performance tests on copper cables. The maximum cable length that can be tested is 120 meters. Cables are tested when the ports are in the down state, except for the Approximate Cable Length test.

notice has occurred.

Informational Provides device information. Debug Provides detailed information about the
log. If a Debug error occurs, contact Customer Tech Support.
Admin > Port Mirroring
Port This is the port to which the cable is connected. Test Result This is the test result. OK indicates that the cable passed the test. No Cable means there is no cable connected to the port. Open Cable means the cable is connected on only one side. Short Cable indicates that a short has occurred in the cable. Undefined indicates that the test could not be properly performed. Cable Fault Distance This is the distance from the port at which the cable error occurred. Last Update This is the last time the port was tested. Test Click the Test button to perform the test.
Port mirroring monitors and mirrors network traffic by forwarding copies of incoming and outgoing packets from one port to a monitoring port. Port mirroring can be used as diagnostic tool and/or a debugging feature. Port mirroring also enables switch performance monitoring. Network administrators configure port mirroring by selecting a specific port to copy all packets, and different ports from which the packets are copied.
Cable Length This is the approximate length of the cable. The Cable Length test can be performed only when the port is up and operating at 1Gbps.

Via HTTP

This HTTP Firmware Upgrade screen is used for saving configuration information using your web browser. Upgrade Select this option to upgrade the switch from a file on the local hard drive.
Source File Type in the name and path of the file or
Admin > Save Configuration
click Browse to locate the upgrade file.

Backup

Proceed The Proceed button is used to backup the configuration to the local hard drive.
Admin > Firmware Upgrade

Via TFTP

After you download a new image file, the device should be rebooted. If you are downloading a new boot image, please follow these steps: 1. Download the new boot code. WARNING: While inputting the boot code, refrain from reseting the device. 2. Download the new software image. 3. Reset the device now. Upgrade Select this option to upgrade the switch from a file located on a TFTP server.

TFTP Server The TFTP Server IP Address that contains
Admin > FIrmware Upgrade
The Firmware Upgrade screen contains the following fields: via TFTP Defines the upgrade through a TFTP Server. via HTTP Allows you to upgrade the firmware using your Web browser. Upgrade Defines the screen functionality as a Firmware upgrade. Backup Defines the screen functionality as a Firmware backup. TFTP Server IP Address Specifies the TFTP Server IP Address from which files are downloaded. Source File Name Specifies the file to be downloaded. Destination File name Specifies the destination file type to which to the file is downloaded. The possible field values are: Software Image Downloads the image file. Boot Code Downloads the boot file.
the source file to upgrade from. the TFTP server.
Source File Specifies the name of the upgrade file on
Backup To back up the switch configuration via TFTP, enter the TFTP server address.
TFTP Server Specifies the TFTP Server IP Address to
which the configuration file will be saved.

Destination

File Specifies the name of configuration file. The default is StartupCfg.cfg.
NOTE: When downloading a configuration file, make sure that it is a valid configuration file. If you have edited the file, ensure that only valid entries have been configured.
NOTE: Restoring the factory defaults will erase all configuration settings that you have made. You can save a backup of your current configuration settings from the Admin > Save Configuration screen.

Admin > Reboot

Admin > Server Logs
The Server Logs screen contains information for viewing and configuring the Remote Log Servers. New log servers can be defined, and the log severity sent to each server.
The Reboot screen resets the device. The device configuration is automatically saved before the device is rebooted.
Admin > Factory Defaults
The Factory Reset screen allows network managers to reset the device to the factory defaults shipped with the switch. Restoring factory defaults results in erasing the configuration file.
Server Specifies the server to which logs can be sent. UDP Port (1-65535) Defines the UDP port to which the server logs are sent. The possible range is 1 to 65535. The default value is 514. Facility Defines a user-defined application from which system logs are sent to the remote server. Only one facility can be assigned to a single server. If a second facility level is assigned, the first facility is overridden. All applications defined for a device utilize the same facility on a server. The field default is Local 7. The possible field values are Local 0 - Local 7. Description Provides a user-defined server description. Minimum Severity Indicates the minimum severity from which logs are sent to the server. For example, if Notice is selected, all logs from a Notice severity and higher are sent to the remote server. The Add to List button adds the Server Log configuration to the Server Log Table at the bottom of the screen.

Appendix D

Appendix D: Specifications

Specifications

Model Ports Cabling Type LEDs SRWRJ-45 Connectors for 10BASE-T and 100BASE-TX Console Port Auto MDI/MDI-X Autonegotiate/Manual Setting UTP CAT 5 or Better for 10BASE-T/100BASE-TX 10/100 Link/Act, Speed, System 1.6 Gig Non-Blocking 1.19 Mpps Wire-Speed Performance 8K 256 Active VLANs (4096 range) Port-Based and 802.1Q Tag-Based VLANs Management VLAN Head of Line Blocking Prevention Built-In Web UI for Easy Browser-Based Configuration (HTTP/HTTPS) SNMP Version 1, 2c, 3 with Support for Traps RFC1213 MIB-2, RFC2863 Interface MIB, RFC2665 Ether-like MIB, RFC1493 Bridge MIB, RFC2674 Extended Bridge MIB (P-bridge, Q-bridge), RFC2819 RMON MIB (groups 1,2,3,9 only), RFC2737 Entity MIB, RFC 2618 RADIUS Client MIB, RFC 1215 Traps Embedded Remote Monitoring (RMON) Software Agent Supports four RMON Groups (History, Statistics, Alarms, and Events) for Enhanced Traffic Management, Monitoring, and Firmware Upgrade Port Mirroring Other Management IEEE 802.1X Access Control Analysis.
Web Browser Upgrade (HTTP) TFTP Upgrade Traffic on a Port can be Mirrored to another Port for Analysis with a Network Analyzer or RMON Probe Traceroute Secure Socket Layer (SSL) Secure Shell (SSH) RADIUS Port Mirroring TFTP upgrade SSL security for Web UI DHCP Client BootP SNTP Xmodem Upgrade Cable Diagnostics PING Telnet Client (SSH Secure Support) 802.1X - RADIUS Authentication MD5 Encryption ACLs Drop or Rate Limit Based on: Source and Destination MAC-Based Source and Destination IP Address Protocol ToS/DSCP Port VLAN Ethertype Link Aggregation using IEEE 802.3ad LACP Up to 8 Ports in up to 8 Groups Broadcast, Multicast and Unknown Unicast IEEE 802.1d Spanning Tree, IEEE 802.1w Rapid Spanning Tree, IEEE 802.1s Multiple Spanning Tree

Performance

Switching Capacity Forwarding Rate

Layer 2

MAC table size Number of VLANs VLAN HOL Blocking

Security Features

Management
Web User Interface SNMP SNMP MIBs RMON

Availability

Link Aggregation Storm Control Spanning Tree
IGMP Snooping IGMP (v1/v2) Snooping Provides for Fast Client Joins and Leaves of Multicast Streams and Limits Bandwidth- Intensive Video Traffic to Only the Requestors Supports 256 Multicast Groups. 4 Hardware Queues Priority Queueing and Weighted Round Robin (WRR) Port-Based 802.1p VLAN Priority Based IPv4/v6 IP Precedence/TOS/ DSCP Based TCP/UDP Port Based Diffserv Classification and Remarking ACLs Ingress Policer Egress Rate Control 802.3 10BASE-T Ethernet, 802.3u 100BASE-TX Fast Ethernet, 802.3ab, 802.3x Flow Control, 802.3 ad LACP, 802.1D STP, 802.1Q/p VLAN, 802.1w Rapid STP, 802.1s Multiple STP, 802.1x Port Access Authentication 11" x 1.75" x 6.69" (279.4 x 44.45 x 170 mm) 2.20 lb (1 kg) External AC Power Adapter FCC Part15 Class A, CE Class A, UL, cUL, CE Mark, CB 32 to 104F (0 to 40C) -4 to 158F (-20 to 70C) 10 to 90% Noncondensing 10 to 95% Noncondensing Model Ports Cabling Type LEDs SRW208G

Regulatory Information

Industry Canada Statement
This Class A digital apparatus complies with Canadian ICES-003. Operation is subject to the following two conditions: 1. This device may not cause interference and 2. This device must accept any interference, including interference that may cause undesired operation of the device.

Avis dIndustrie Canada

Cet appareil numrique de la classe A est conforme la norme NMB-003 dIndustrie Canada. Le fonctionnement est soumis aux conditions suivantes : 1. Ce priphrique ne doit pas causer dinterfrences; 2. Ce priphrique doit accepter toutes les interfrences reues, y compris celles qui risquent dentraner un fonctionnement indsirable.

Safety Notices

Caution: To reduce the risk of fire, use only No.26 AWG
or larger telecommunication line cord.
Do not use this product near water, for example, in a
wet basement or near a swimming pool.
Avoid using this product during an electrical storm.
There may be a remote risk of electric shock from lightning. WARNING: This product contains lead, known to the State of California to cause cancer, and birth defects or other reproductive harm. Wash hands after handling.
User Information for Consumer Products Covered by EU Directive 2002/96/EC on Waste Electric and Electronic Equipment (WEEE)
This document contains important information for users with regards to the proper disposal and recycling of Linksys products. Consumers are required to comply with this notice for all electronic products bearing the following symbol:
Cetina (Czech) - Informace o ochran ivotnho prosted pro zkaznky v zemch Evropsk unie
Evropsk smrnice 2002/96/ES zakazuje, aby zazen oznaen tmto symbolem na produktu anebo na obalu bylo likvidovno s netdnm komunlnm odpadem. Tento symbol udv, e dan produkt mus bt likvidovn oddlen od bnho komunlnho odpadu. Odpovdte za likvidaci tohoto produktu a dalch elektrickch a elektronickch zazen prostednictvm urench sbrnch mst stanovench vldou nebo mstnmi ady. Sprvn likvidace a recyklace pomh pedchzet potencilnm negativnm dopadm na ivotn prosted a lidsk zdrav. Podrobnj informace o likvidaci starho vybaven si laskav vydejte od mstnch ad, podniku zabvajcho se likvidac komunlnch odpad nebo obchodu, kde jste produkt zakoupili.

System Information Using this screen, you can check the Switchs firmware versions and general system information.
Figure 4-8: System Information Menu
Versions The Versions screen displays the Switchs boot, software, and hardware firmware versions.

Figure 4-9: Versions

General System Information The General System Information screen displays the Switchs description, System Up Time, System MAC Address, System Contact, System Name, and System Location. Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.
Figure 4-10: General System Information
Management Settings From the Management Settings screen, you can set Serial Port Session Configuration, Telnet Session Configuration, or Secure Telnet (SSH) Configuration.
Figure 4-11: Management Settings Menu Serial Port Configuration On the Serial Port Configuration screen, the Switchs baud rate is displayed. Select Edit and press the Enter key to make changes. Toggle to the desired speed and when your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.
Figure 4-12: Serial Port Configuration
Telnet Configuration On the Telnet Configuration screen, the time-out is displayed. The value is entered in seconds. If you do not want the Telnet session to timeout, you may enter a value of 0 sec. Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.
Figure 4-13: Telnet Configuration
SSH Configuration On the SSH Configuration screen, you can select SSH Server Configuration, SSH Server Status, SSH Crypto Key Generation, and SSH Keys Fingerprints.
SSH Server Configuration On the SSH Server Configuration screen, the SSH Server can be enabled or disabled by navigating to the SSH Server option and using the SPACE bar to toggle the option. The SSH Server Port can be modified by entering in the value. Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.

Chapter 5: Using the Web-based Utility for Configuration Statistics Tab - RMON Statistics
Figure 5-17: Statistics - RMON Statistics
Collisions. Displays the number of collisions received on the interface since the device was last refreshed. Frames of xx Bytes. Number of xx-byte frames received on the interface since the device was last refreshed. Clear Counters button. This option will reset all of the statistic counts. Refresh Now button. Use this option to refresh the statistics.
Statistics Tab - RMON History
The RMON History screen contains information about samples of data taken from ports. For example, the samples may include interface definitions or polling periods. The RMON History Control screen is divided into RMON History and Log Table. Source Interface. Displays the interface from which the history samples were taken. The possible field values are: Port. Specifies the port from which the RMON information was taken. LAG. Specifies the port from which the RMON information was taken. Sampling Interval. Indicates (in seconds) the time that samplings are taken from the ports. The field range is 13600. The default is 1800 seconds (equal to 30 minutes). Max No. of Samples to Keep. Indicates the number of samples to save. Owner. Displays the RMON station or user that requested the RMON information. The field range is 0-20 characters. The Add to List button adds the configured RMON sampling to the Log Table at the bottom of the screen. Figure 5-18: Statistics - RMON History

Log Table

Sampling Requested. Displays the number of samples to be saved. The field range is 1-65535. The default value is 50. Current Number of Samples. Displays the current number of samples taken.
Chapter 5: Using the Web-based Utility for Configuration Statistics Tab - RMON History

RMON History

The RMON History screen contains interface specific statistical network samplings. Each table entry represents all counter values compiled during a single sample. History Entry No. Displays the history table entry number. Owner. Displays the RMON station or user that requested the RMON information. The field range is 0-20 characters. Sample No. Indicates the sample number from which the statistics were taken. Drop Events. Displays the number of dropped events that have occurred on the interface since the device was last refreshed. Received Bytes (Octets). Displays the number of octets received on the interface since the device was last refreshed. This number includes bad packets and FCS octets, but excludes framing bits. Received Packets. Displays the number of packets received on the interface since the device was last refreshed, including bad packets, Multicast and Broadcast packets. Broadcast Packets. Displays the number of good Broadcast packets received on the interface since the device was last refreshed. This number does not include Multicast packets. Multicast Packets. Displays the number of good Multicast packets received on the interface since the device was last refreshed. CRC Align Errors. Displays the number of CRC and Align errors that have occurred on the interface since the device was last refreshed. Undersize Packets. Displays the number of undersized packets (less than 64 octets) received on the interface since the device was last refreshed. Oversize Packets. Displays the number of oversized packets (over 1518 octets) received on the interface since the device was last refreshed. Fragments. Displays the number of fragments (packets with less than 64 octets, excluding framing bits, but including FCS octets) received on the interface since the device was last refreshed. Figure 5-19: RMON History Table

Jabbers. Displays the total number of received packets that were longer than 1518 octets. This number excludes frame bits, but includes FCS octets that had either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral octet (Alignment Error) number. The field range to detect jabbers is between 20 ms and 150 ms. Collisions. Displays the number of collisions received on the interface since the device was last refreshed. Utilization. Displays the percentage of the interface utilized.
Statistics Tab - RMON Alarm
The RMON Alarm screen contains fields for setting network alarms. Network alarms occur when a network problem, or event, is detected. Rising and falling thresholds generate events. Alarm Entry. Indicates a specific alarm. Source Interface. Displays the interface for which RMON statistics are displayed. The possible field values are: Port. Displays the RMON statistics for the selected port. LAG. Displays the RMON statistics for the selected LAG. Counter Name. Displays the selected MIB variable. Sample Type. Defines the sampling method for the selected variable and comparing the value against the thresholds. The possible field values are: Absolute. Compares the values directly with the thresholds at the end of the sampling interval. Delta. Subtracts the last sampled value from the current value. The difference in the values is compared to the threshold. Rising Threshold. Displays the rising counter value that triggers the rising threshold alarm. The rising threshold is presented on top of the graph bars. Each monitored variable is designated a color. Rising Event. Displays the mechanism in which the alarms are reported. The possible field values are: LOG. Indicates there is not a saving mechanism for either the device or in the management system. If the device is not reset, the entry remains in the Log Table. TRAP. Indicates that an SNMP trap is generated, and sent via the Trap mechanism. The Trap can also be saved using the Trap mechanism.
Chapter 5: Using the Web-based Utility for Configuration Statistics Tab - RMON Alarm
Figure 5-20: Statistics - RMON Alarm
Both. Indicates that both the Log and Trap mechanism are used to report alarms. Falling Threshold. Displays the falling counter value that triggers the falling threshold alarm. The falling threshold is graphically presented on top of the graph bars. Each monitored variable is designated a color. Falling Event. Displays the mechanism in which the alarms are reported. The possible field values are: LOG. Indicates there is not a saving mechanism for either the device or in the management system. If the device is not reset, the entry remains in the Log Table. TRAP. Indicates that a SNMP trap is generated, and sent via the Trap mechanism. The Trap can also be saved using the Trap mechanism. Both. Indicates that both the Log and Trap mechanism are used to report alarms. Startup Alarm. Displays the trigger that activates the alarm generation. Rising is defined by crossing the threshold from a low-value threshold to a higher-value threshold. Interval. Defines the alarm interval time in seconds. Owner. Displays the device or user that defined the alarm. The Add to List button adds the RMON Alarms Table entry. The Alarm Table area contains the following additional field: Counter Value. Displays the current counter value for the particular alarm.

Chapter 5: Using the Web-based Utility for Configuration Security Tab - ACL Binding
Figure 5-29: Security - RADIUS 55
Dead Time. Defines the amount of time (minutes) that a RADIUS server is bypassed for service requests. The range is 0-2000. The Dead Time default is 0 minutes. Key String. Defines the default key string used for authenticating and encrypting all RADIUS communications between the device and the RADIUS server. This key must match the RADIUS encryption. Source IP Address. Defines the source IP address that is used for communication with RADIUS servers. Usage Type. Specifies the RADIUS server authentication type. The default value is Login. The possible field values are: Login. Indicates that the RADIUS server is used for authenticating user name and passwords. 802.1X. Indicates that the RADIUS server is used for 802.1X authentication. All. Indicates that the RADIUS server is used for authenticating user name and passwords, and 802.1X port authentication. The Add to List button adds the RADIUS configuration to the RADIUS Table at the bottom of the screen.

Security Tab - TACACS+

The device provides Terminal Access Controller Access Control System (TACACS+) client support. TACACS+ provides centralized security for validation of users accessing the device. TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes. The TACACS+ protocol ensures network integrity through encrypted protocol exchanges between the device and TACACS+ server. Host IP Address. Displays the TACACS+ Server IP address. Priority. Displays the order in which the TACACS+ servers are used. The default is 0. Source IP Address. Displays the device source IP address used for the TACACS+ session between the device and the TACACS+ server. Key String. Defines the authentication and encryption key for TACACS+ server. The key must match the encryption key used on the TACACS+ server. Authentication Port. Displays the port number through which the TACACS+ session occurs. The default is port 49.
Figure 5-30: Security - TACACS+
Chapter 5: Using the Web-based Utility for Configuration Security Tab - TACACS+
Timeout for Reply. Displays the amount of time that passes before the connection between the device and the TACACS+ server times out. The field range is 1-30 seconds. Status. Displays the connection status between the device and the TACACS+ server. The possible field values are: Connected. There is currently a connection between the device and the TACACS+ server. Not Connected. There is not currently a connection between the device and the TACACS+ server. Single Connection. Maintains a single open connection between the device and the TACACS+ server when selected The Add to List button adds the TACACS+ configuration to the TACACS+ table at the bottom of the screen.

Security Tab - 802.1x Settings
Port based authentication enables authenticating system users on a per-port basis via an external server. Only authenticated and approved system users can transmit and receive data. Ports are authenticated via the RADIUS server using the Extensible Authentication Protocol (EAP). Enable 802.1x. Place a checkmark in the check box to enable 802.1x authentication. Port. Indicates the port name. Status Port Control. Specifies the port authorization state. The possible field values are as follows: Force-Authorized. The controlled port state is set to Force-Authorized (forward traffic). Force-Unauthorized. The controlled port state is set to Force-Unauthorized (discard traffic). Enable Periodic Reauthentication. Permits immediate port reauthentication. Setting Timer. The Setting Timer button opens the Setting Timer screen to configure ports for 802.1x functionality. Figure 5-31: Security - 802.1x Settings

Setting Timer screen

Port. Indicates the port name. Figure 5-32: 802.1x Settings - Setting Timer
Chapter 5: Using the Web-based Utility for Configuration Security Tab - 802.1x Settings
Reauthentication Period. Specifies the number of seconds in which the selected port is reauthenticated (Range: 300-4294967295). The field default is 3600 seconds. Quiet Period. Specifies the number of seconds that the switch remains in the quiet state following a failed authentication exchange (Range: 0-65535). Resending EAP. Specifies the number of seconds that the switch waits for a response to an EAP - request/ identity frame, from the supplicant (client), before resending the request. Max EAP Requests. The total amount of EAP requests sent. If a response is not received after the defined period, the authentication process is restarted. The field default is 2 retries. Supplicant Timeout. Displays the number of seconds that lapses before EAP requests are resent to the supplicant (Range: 1-65535). The field default is 30 seconds. Server Timeout. Specifies the number of seconds that lapses before the switch resends a request to the authentication server (Range: 1-65535). The field default is 30 seconds.
Security Tab - Port Security
Network security can be increased by limiting access on a specific port only to users with specific MAC addresses. MAC addresses can be dynamically learned or statically configured. Locked port security monitors both received and learned packets that are received on specific ports. Access to the locked port is limited to users with specific MAC addresses. These addresses are either manually defined on the port, or learned on that port up to the point when it is locked. When a packet is received on a locked port, and the packet source MAC address is not tied to that port (either it was learned on a different port, or it is unknown to the system), the protection mechanism is invoked, and can provide various options. Unauthorized packets arriving at a locked port are either: Forwarded Discarded with no trap Discarded with a trap Cause the port to be shut down. Locked port security also enables storing a list of MAC addresses in the configuration file. The MAC address list can be restored after the device has been reset. Disabled ports are activated from the Port Security page.

Chapter 5: Using the Web-based Utility for Configuration QoS Tab - DSCP Settings
Figure 5-38: QoS - DSCP Settings

QoS Tab - Basic Mode

The Basic Mode screen contains the following fields: Trust Mode. Displays the trust mode. If a packets CoS tag and DSCP tag are mapped to different queues, the Trust Mode determines the queue to which the packet is assigned. Possible values are: CoS. Sets trust mode to CoS on the device. The CoS mapping determines the packet queue DSCP. Sets trust mode to DSCP on the device. The DSCP mapping determines the packet queue

QoS Tab - Advanced Mode

Advanced QoS mode provides rules for specifying flow classification and assigning rule actions that relate to bandwidth management. The rules are based on the Access Control Lists (see Access Control Tab). MAC ACLs and IP ACLs can be grouped together in more complex structures, called policies. Policies can be applied to an interface. Policy ACLs are applied in the sequence they appear within the policy. Only a single policy can be attached to a port. In advanced QoS mode, ACLs can be applied directly to an interface in the Security - ACL Binding. However, a policy and ACL cannot be simultaneously applied to an interface. After assigning packets to a specific queue, services such as configuring output queues for the scheduling scheme, or configuring output shaping for burst size, CIR, or CBS per interface or per queue, can be applied. Out of Profile DSCP Assignments. This button opens up the Out of Profile DSCP screen. Figure 5-40: QoS - Basic Mode
Out of Profile DSCP screen
DSCP In. Displays the DSCP In value. DSCP Out. Displays the current DSCP out value. A new value can be selected from the pull-down menu. The Policy Settings button opens the Policy Name screen.

Policy Name screen

Policy Name. Defines a new Policy name.
Chapter 5: Using the Web-based Utility for Configuration QoS Tab - Basic Mode
Figure 5-41: QoS - Advanced Mode 64
Add to List. The Add to List button will add the policy to the Policy Name table. Select Policy. Selects an existing Policy by name. The Policy can be comprised of: Class Map Action Policer New Policy Name. Defines a new Policy name. Class Map. Selects an existing Class Map by name. New Class Map. The New Class Map button opens the New Class Map screen. Figure 5-42: Advanced Mode - Out of Profile DSCP

New Class Map screen

Class Map Name. Defines a new Class Map name Preferred ACL. Indicates if packets are first matched to an IP based ACL or a MAC based ACL. The possible field values are: IP Based ACLs. Matches packets to IP based ACLs first, then matches packets to MAC based ACLs. Figure 5-43: Advanced Mode - Policy Name MAC Based ACLs. Matches packets to MAC based ACLs first, then matches packets to IP based ACLs. IP ACL. Matches packets to IP based ACLs first, then matches packets to MAC based ACLs. Match. Criteria used to match IP addresses and /or MAC addresses with an ACLs address.The possible field values are: And. Both the MAC-based and the IP-based ACL must match a packet. Or. Either the MAC-based or the IP-based ACL must match a packet. MAC ACL. Matches packets to MAC based ACLs first, then matches packets to IP based ACLs. Police. Enables Policer functionality. Type. Policer type for the class. Possible values are: Figure 5-44: Advanced Mode - New Class Map

Chapter 5: Using the Web-based Utility for Configuration Spanning Tree Tab - RSTP Port Settings
Figure 5-49: Spanning Tree - RSTP Port Settings
Mode. Indicates the current Spanning Tree mode. The Spanning Tree mode is selected in the Global STP screen. The possible field values are: Classic STP. Indicates that Classic STP is enabled on the device. Rapid STP. Indicates that Rapid STP is enabled on the device. Multiple STP. Indicates that Multiple STP is enabled on the device. Fast Link. Indicates if Fast Link is enabled or disabled for the port or LAG. If Fast Link is enabled for a port, the port is automatically placed in the forwarding state. Port State. Indicates if RSTP is enabled on the interface. Point-to-Point Admin Status. Indicates if a point-to-point links are established, or permits the device to establish a point-to-point link. The possible field values are: Auto. Point-to-point links are automatically established by the device. Enabled. Enables the device to establish a point-to-point link. To establish communications over a pointto-point link, the originating PPP first sends Link Control Protocol (LCP) packets to configure and test the data link. After a link is established and optional facilities are negotiated as needed by the LCP, the originating PPP sends Network Control Protocols (NCP) packets to select and configure one or more network layer protocols. When each of the chosen network layer protocols has been configured, packets from each network layer protocol can be sent over the link. The link remains configured for communications until explicit LCP or NCP packets close the link, or until some external event occurs. This is the actual switch port link type. It may differ from the administrative state. Disabled. Disables point-to-point link. Point-to-Point Oper Status. Indicates the Point-to-Point operating state. To run a migration test, press Activate next to the Activate Protocol Migration Test field. The test sends Link Control Protocol (LCP) packets to test if a data link is enabled.
Spanning Tree Tab - MSTP Properties
MSTP provides differing load balancing scenarios. For example, while port A is blocked in one STP instance, the same port is placed in the Forwarding State in another STP instance. The MSTP Properties screen contains information for defining global MSTP settings, including region names, MSTP revisions, and maximum hops. The MSTP Properties screen contains the following fields: Region Name. Provides a user-defined STP region name. Revision. Defines unsigned 16-bit number that identifies the revision of the current MST configuration. The revision number is required as part of the MST configuration. The possible field range 0-65535. Max Hops. Indicates the total number of hops that occur in a specific region before the BPDU is discarded. Once the BPDU is discarded, the port information is aged out. The possible field range is 1-40. The field default is 20 hops. IST Master. Identifies the Spanning Tree Master instance. The IST Master is the specified instance root. Figure 5-50: Spanning Tree - MSTP Properties

Spanning Tree Tab - MSTP Instance Settings
MSTP operation maps VLANs into STP instances. Packets assigned to various VLANs are transmitted along different paths within Multiple Spanning Trees Regions (MST Regions). Regions are one or more Multiple Spanning Tree bridges by which frames can be transmitted. In configuring MST, the MST region to which the device belongs is defined. A configuration consists of the name, revision, and region to which the device belongs. Network Administrators can define MSTP Instances settings using the MSTP Instance Settings screen. Instance ID. Defines the VLAN group to which the interface is assigned. Included VLAN. Maps the selected VLAN to the selected instance. Each VLAN belongs to one instance. Bridge Priority. Specifies the selected spanning tree instance device priority. The field range is 0-61440. Designated Root Bridge ID. Indicates the ID of the bridge with the lowest path cost to the instance ID. Root Port. Indicates the selected instances root port.
Chapter 5: Using the Web-based Utility for Configuration Spanning Tree Tab - MSTP Properties
Figure 5-51: Spanning Tree - MSTP Instance Settings 72
Root Path Cost. Indicates the selected instances path cost. Bridge ID. Indicates the bridge ID of the selected instance. Remaining Hops. Indicates the number of hops remaining to the next destination.
Spanning Tree Tab - MSTP Interface Settings
Network Administrators can assign MSTP Interface settings using the MSTP Interface Settings screen. The MSTP Interface Settings screen contains the following fields: Instance ID. Lists the MSTP instances configured on the device. Possible field range is 0-15. Interface. Displays the interface for which the MSTP settings are displayed. The possible field values are: Port. Specifies the port for which the MSTP settings are displayed. LAG. Specifies the LAG for which the MSTP settings are displayed. Port State. Indicates whether the port is enabled for the specific instance. Type. Indicates if the port is a point-to-point port, or a port connected to a hub. The possible field values are: Boundary Port. Indicates the port is a boundary port. A Boundary port attaches MST bridges to LAN in an outlying region. If the port is a boundary port, it also indicates whether the device on the other side of the link is working in RSTP or STP mode. Master Port. Indicates the port is a master port. A Master port provides connectivity from a MSTP region to the outlying CIST root. Internal. Indicates the port is an internal port. Role. Indicates the port role assigned by the STP algorithm in order to provide to STP paths. The possible field values are: Root. Provides the lowest cost path to forward packets to root device. Designated. Indicates the port or LAG via which the designated device is attached to the LAN. Alternate. Provides an alternate path to the root device from the root interface.

Figure 5-52: Spanning Tree - MSTP Interface Settings
Chapter 5: Using the Web-based Utility for Configuration Spanning Tree Tab - MSTP Interface Settings
Backup. Provides a backup path to the designated port path toward the Spanning Tree leaves. Backup ports occur only when two ports are connected in a loop by a point-to-point link. Backup ports also occur when a LAN has two or more connections connected to a shared segment. Disabled. Indicates the port is not participating in the Spanning Tree. Mode. Indicates the current Spanning Tree mode. The Spanning Tree mode is selected in the Global STP screen. The possible field values are: Classic STP. Indicates that Classic STP is enabled on the device. Rapid STP. Indicates that Rapid STP is enabled on the device. Multiple STP. Indicates that Multiple STP is enabled on the device. Interface Priority. Defines the interface priority for specified instance. The default value is 128. Path Cost. Indicates the port contribution to the Spanning Tree instance. The range should always be 1200,000,000. Designated Bridge ID. Indicates that the bridge ID number that connects the link or shared LAN to the root. Designated Port ID. Indicates that the Port ID number on the designated bridge that connects the link or the shared LAN to the root. Designated Cost. Indicates that the default path cost is assigned according to the method selected on the Spanning Tree Global Settings screen. Forward Transitions. Indicates the number of times the port has changed from Forwarding state to Blocking state. Remaining Hops. Indicates the hops remaining to the next destination.
Multicast Tab - IGMP Snooping
When IGMP Snooping is enabled globally, all IGMP packets are forwarded to the CPU. The CPU analyzes the incoming packets and determines: Which ports want to join which Multicast groups? Which ports have Multicast routers generating IGMP queries?
Chapter 5: Using the Web-based Utility for Configuration Multicast Tab - IGMP Snooping
Which routing protocols are forwarding packets and Multicast traffic? Ports requesting to join a specific Multicast group issue an IGMP report, specifying that Multicast group is accepting members. This results in the creation of the Multicast filtering database. Enable IGMP Snooping. Indicates if IGMP Snooping is enabled on the device. IGMP Snooping can be enabled only if Bridge Multicast Filtering is enabled. VLAN ID. Specifies the VLAN ID. IGMP Status. Indicates if IGMP snooping is enabled on the VLAN. Auto Learn. Indicates if Auto Learn is enabled on the device. If Auto Learn is enabled, the device automatically learns where other Multicast groups are located. Enables or disables Auto Learn on the Ethernet device. Host Timeout. Indicates the amount of time host waits to receive a message before timing out. The default time is 260 seconds. MRouter Timeout. Indicates the amount of the time the Multicast router waits to receive a message before it times out. The default value is 300 seconds. Leave Timeout. Indicates the amount of time the host waits, after requesting to leave the IGMP group and not receiving a Join message from another station, before timing out. If a Leave Timeout occurs, the switch notifies the Multicast device to stop sending traffic The Leave Timeout value is either user-defined, or an immediate leave value. The default timeout is 10 seconds. Figure 5-53: Multicast - IGMP Snooping

Chapter 5: Using the Web-based Utility for Configuration SNMP Tab - Notification Filter
SNMP Tab - Notification Recipient
The Notification Recipient screen contains information for defining filters that determine whether traps are sent to specific users, and the trap type sent. SNMP notification filters provide the following services: Identifying Management Trap Targets Trap Filtering Selecting Trap Generation Parameters Providing Access Control Checks Recipient IP. Indicates the IP address to whom the traps are sent. Notification Type. Defines the notification sent. The possible field values are: Traps. Indicates traps are sent. Figure 5-62: SNMP - Notification Recipient Informs. Indicates informs are sent. SNMPv1,2. Enables SNMPv1,2 as the Notification Recipient. Either SNMPv1,2 or SNMPv3 can be enabled at any one time, but not both at the same time. If SNMPv1,2 is enabled, the Community String and Notification Version fields are enabled for configuration: Community String. Identifies the community string of the trap manager. Notification Version. Determines the trap type. The possible field values are: SNMP V1. Indicates SNMP Version 1 traps are sent. SNMP V2. Indicates SNMP Version 2 traps are sent.
SNMPv3. Enables SNMPv3 as the Notification Recipient. Either SNMPv1,2 or SNMPv3 can be enabled at any one time, but not both at the same time. If SNMPv3is enabled, the User Name and Security Level fields are enabled for configuration: User Name. Defines the user to whom SNMP notifications are sent. Security Level. Defines the means by which the packet is authenticated. The possible field values are: No Authentication. Indicates the packet is neither authenticated nor encrypted.
Chapter 5: Using the Web-based Utility for Configuration SNMP Tab - Notification Recipient
Authentication. Indicates the packet is authenticated. Privacy. Indicates the packet is both authenticated and encrypted. UDP Port. Displays the UDP port used to send notifications. The default is 162. Filter Name. Indicates if the SNMP filter for which the SNMP Notification filter is defined. Timeout. Indicates the amount of time (seconds) the device waits before resending informs. The default is 15 seconds. Retries. Indicates the amount of times the device resends an inform request. The default is 3 seconds. The Add to List button adds the Notification Recipient configuration to the relevant table at the bottom of the screen.

TCP/IP

Before a computer can communicate within a network, TCP/IP must be enabled. TCP/IP is a set of instructions, or protocol, all PCs follow to communicate over a network. This is true for wireless networks as well. Your PCs will not be able to utilize wireless networking without having TCP/IP enabled. Windows Help provides complete instructions on enabling TCP/IP.

Shared Resources

If you wish to share printers, folder, or files over your network, Windows Help provides complete instructions on utilizing shared resources.
Network Neighborhood/My Network Places
Other PCs on your network will appear under Network Neighborhood or My Network Places (depending upon the version of Windows you're running). Windows Help provides complete instructions on adding PCs to your network.
Appendix C: Downloading using Xmodem
The Startup menu can be entered when booting the device. There is a two second window of time to enter the Startup Menu immediately after the POST test. The menu can be accessed directly from a terminal connected to the console port. The Startup menu procedures can be done using the ASCII terminal or Windows HyperTerminal. The software download procedure is performed when a new version must be downloaded to replace corrupted files, update or upgrade the system software. To download software from the Startup menu: To enter the Startup menu: 1. Power off your computer and Switch. 2. Connect the provided null modem cable from the COM port on your computer to the Console port on the Switch. 3. Power on your computer and launch HyperTerminal, follow the instructions in Chapter 4: Using the Console Interface for Configuration to configure HyperTerminal to connect to the Switch. 4. Power on the Switch and watch for the auto-boot message: Figure C-1: Auto-Boot Message Autoboot in 2 seconds - press RETURN or Esc. to abort and enter prom. 5. When the auto-boot message appears, press the Enter key to access the Startup menu. NOTE: If a selection is not made within 35 seconds (default), the device times out and you will need to disconnect the power to restart the process.
6. Select [1] Download Software and a message will appear Downloading code using XMODEM with characters running across the screen. If you do not perform the steps on the next page to locate the file for download within a certain time, the device will reset.

Figure C-1: Startup Menu

Appendix C: Downloading using Xmodem Startup Menu Procedures
7. Select Send File from the Transfer pull-down menu. 8. In the Filename: field, enter the file path for the file to be downloaded or click Browse to locate the file. Only valid files, with a *.ros or *.rfb suffix, that have been provided by Linksys, can be downloaded. Downloading invalid files will result in unpredictable behavior. Ensure that the Xmodem protocol is selected in the Protocol: field. 9. Press Send and the software is downloaded.

Security IEEE 802.1x Access Control 802.1x - RADIUS Authentication. MD5 Encryption ACLs - Drop or Rate Limit based on: Source and Destination MAC-based Source and Destination IP address
Protocol TOS/DSCP Port VLAN Ethertype Availability Link Aggregation Storm Control Spanning Tree IGMP Snooping QoS Priority levels Scheduling Class of Service 4 Hardware queues Priority Queueing and Weighted Round Robin (WRR) Port-based 802.1p VLAN priority based IPv4/v6 IP Precedence/TOS/DSCP based TCP/UDP port based Diffserv Classification and Remarking ACLs Ingress policer Egress rate control Link Aggregation using IEEE 802.3ad LACP Up to 8 ports in up to 8 groups Broadcast, Muticast and Unknown Unicast IEEE 802.1D Spanning Tree, IEEE 802.1w Rapid Spanning Tree, IEEE 802.1s Multiple Spanning Tree IGMP (v1/v2) snooping provides for fast client joins and leaves of multicast streams and limits bandwidth-intensive video traffic to only the requestors. Support 256 multicast groups.

Rate Limiting

Standards
802.3 10BASE-T Ethernet, 802.3u 100BASE-TX Fast Ethernet, 802.3ab 1000BASE-T Gigabit Ethernet, 802.3z Gigabit Ethernet, 802.3x Flow Control, 802.3 ad LACP, 802.1D STP, 802.1Q/p VLAN, 802.1w Rapid STP, 802.1s Multiple STP, 802.1x Port Access Authentication
Environmental Dimensions Unit Weight Power Certifications Operating Temp. Storage Temp. Operating Humidity Storage Humidity 11 x 1.75 x 6.69 (279.4 mm x 44.45 mm x 170 mm) 2.20 lbs. (1 kg) External AC Power Adapter FCC Part15 Class A, CE Class A, UL, cUL, CE mark, CB 0C to 40C (32F to 104F) -20C to 70C (-4F to 158F) 10% to 90%, Non-Condensing 10% to 95% Non-Condensing

SRW208L

Ports 8 RJ-45 connectors for 10/100BASE-TX, 1 mini GBIC/SFP port, and 1 LC type connector for 100LX SMF port at 1310nm Console port Auto MDI/MDI-X Autonegotiate/Manual setting UTP CAT 5 or better for 10BASE-T/100BASE-TX, UTP CAT 5e or better for 1000BASE-T 10/100 Link/Act, 1 Gig Link/Act, Speed, 1 100LC Link/Act, System
Cabling Type LEDs Performance Switching Capacity Forwarding Rate
3.8 Gig non-blocking 2.8 Mpps wire-speed performance
Layer 2 MAC table size Number of VLANs VLAN HOL Blocking Management Web User Interface SNMP Built-in Web UI for easy browser-based configuration (HTTP/HTTPS) SNMP version 1,2c,3 with support for traps.
Appendix E: Specifications SRW208L
Security IEEE 802.1x Access Control 802.1x - RADIUS Authentication. MD5 Encryption ACLs - Drop or Rate Limit based on: Source and Destination MAC-based Source and Destination IP address Protocol
TOS/DSCP Port VLAN Ethertype Availability Link Aggregation Storm Control Spanning Tree IGMP Snooping QoS Priority levels Scheduling Class of Service 4 Hardware queues Priority Queueing and Weighted Round Robin (WRR) Port-based 802.1p VLAN priority based IPv4/v6 IP Precedence/TOS/DSCP based TCP/UDP port based Diffserv Classification and Remarking ACLs Ingress policer Egress rate control Link Aggregation using IEEE 802.3ad LACP Up to 8 ports in up to 8 groups Broadcast, Muticast and Unknown Unicast IEEE 802.1D Spanning Tree, IEEE 802.1w Rapid Spanning Tree, IEEE 802.1s Multiple Spanning Tree IGMP (v1/v2) snooping provides for fast client joins and leaves of multicast streams and limits bandwidth-intensive video traffic to only the requestors. Support 256 multicast groups.