8-Port 10/100 Ethernet Switch with Webview iii
Policy Name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 New Class Map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 New Aggregate Policer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Spanning Tree. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Spanning Tree > STP Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Spanning Tree > Global STP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Global Setting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Bridge Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Spanning Tree > STP Port Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Spanning Tree > RSTP Port Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Spanning Tree > MSTP Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Spanning Tree > MSTP Instance Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Spanning Tree > MSTP Interface Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Multicast > IGMP Snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 Multicast > Bridge Multicast. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 Multicast > Bridge Multicast Forward All . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 SNMP > Global Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 SNMP > Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 SNMP > Group Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 SNMP > Group Membership. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 SNMP > Communities. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 Base Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 Advanced Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 SNMP > Notification Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 SNMP > Notification Recipient. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 Admin > User Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Admin > Static Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Query. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Admin > Dynamic Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Query. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Admin > Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Admin > Port Mirroring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 Admin > Cable Test. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 Admin > Save Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Via TFTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Via HTTP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Admin > Firmware Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Admin > Reboot. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Admin > Factory Defaults. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Admin > Server Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Admin > Memory Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Admin > Flash Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

8-Port 10/100 Ethernet Switch with Webview iv
Appendix A: About Gigabit Ethernet and Fiber Optic Cabling
Gigabit Ethernet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Fiber Optic Cabling. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Appendix B: Introduction Appendix C: Glossary Appendix D: Specifications Appendix E: Warranty Information
Startup Menu Procedures. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Exclusions and Limitations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 Obtaining Warranty Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 Technical Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Appendix F: Regulatory Information
FCC Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Safety Notices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Industry Canada Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Avis dIndustrie Canada. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 User Information for Consumer Products Covered by EU Directive 2002/96/EC on Waste Electric and Electronic Equipment (WEEE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Appendix G: Contact Information

Chapter 1

Chapter 1: Introduction

Welcome

This guide covers five product models.

SRW208 8-port

Introduction
10/100 Ethernet Switch WebView.Includes 8 10/100 RJ-45 ports.
There are features that allow you to expand and grow your network of switches. Link aggregation allows multiple high-bandwidth trunks between switches to be setup. This also provides a level of reliability in that the system continues to operate if one of the links break. Spanning Tree (STP), Fast Spanning Tree, and Rapid Spanning Tree (RSTP) allow you to build a mesh of switches increasing the availability of the system. The rich management functionality of the WebView switches includes SNMP, RMON, Telnet, and HTTP Management options, allowing you to flexibly integrate and manage these devices in your network. The SRW208P and SRW208MP support Automatic Load Sensing - Power control circuitry automatically detects Power over Ethernet on access point before providing power. Power feeding of Ethernet limited for fixed 10/100 Base-T/TX ports. The SRW208MP can provide maximum output power per PoE port up to 15.4W on 8 ports simultaneously. while the SRW208P can provide maximum output power on 4 ports simultaneously or 8 ports at half power.

SRW208P/SRW208MP - Front Panel
SYSTEM (Green) The system LED lights up to indicate that the Switch is powered on. LINK/ACT (1-8) (Green) The LINK/ACT LED lights up to indicate a functional network link through the corresponding port (1 through 8) with an attached device. It flashes to indicate that the Switch is actively sending or receiving data over that port. PoE (Orange) The PoE LED lights up to indicate a device is connected utilizing Power over Ethernet on the corresponding port (1 through 8).
Gigabit (Orange) The Gigabit LED lights up to indicate a Gigabit connection on the corresponding RJ-45 port (G1 through G2). ETHERNET 1-8 The Switch is equipped with 8 auto-sensing, Ethernet network ports, which use RJ-45 connectors. The Fast Ethernet ports support network speeds of 10Mbps or 100Mbps. They can operate in half and full-duplex modes. Auto-sensing technology enables each port to automatically detect the speed of the device connected to it (10Mbps or 100Mbps), and adjust its speed and duplex accordingly. G1-G2 The Gigabit Ethernet ports support network speeds of 10Mbps, 100Mbps, and 1000Mbps. They can operate in half and fullduplex modes. Auto-sensing technology enables each port to automatically detect the speed of the device connected to it (10Mbps, 100Mbps, or 1000Mbps), and adjust its speed and duplex accordingly. The G1 and G2 RJ-45 ports are shared with the miniGBIC ports. miniGBIC1/2 The mini-GBIC (gigabit interface converter) port is a connection point for a miniGBIC expansion module, so the Switch can be uplinked via fiber to another switch. Each MiniGBIC port provides a link to a high-speed network segment or individual workstation at speeds of up to 1000Mbps. Console The Console port is where you can connect a serial cable to a PCs serial port for configuration using your PCs HyperTerminal program. Refer to Chapter 4: Using the Console Interface for Configuration for more information.

Back Panel

The console and power ports are located on the back panel of the Switch.
POWER The Power port is where you will connect the AC power.

Chapter 3

Chapter 3: Installation

Overview

This chapter will explain how to connect network devices to the Switch. The following diagram shows a typical network configuration.

Boot Version This file runs when the Switch is turned on. It performs power-on diagnostics and loads the operating system for the Switch. Software Version This file contains the programming code that runs the Switch. Hardware Version The current hardware setup of the Switch.
Serial Port Configuration
On the Serial Port Configuration screen, the Switchs baud rate is displayed. Select Edit and press the Enter key to make changes. Toggle to the desired speed and when your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.
General System Information
The General System Information screen displays the System Description, System Up Time, System Mac Address, System Contact, System Name and System Location. Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.

Telnet Configuration

On the Telnet Configuration screen, the time-out is displayed. The value is entered in seconds. If you do not want the Telnet session to timeout, you may enter a value of 0 sec.

General Information

Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.

SSH Server Configuration

SSH Configuration
On the SSH Configuration screen, you can select SSH Server Configuration, SSH Server Status, SSH Crypto Key Generation, and SSH Keys Fingerprints.

SSH Status

The SSH Status screen displays whether the SSH Server is enabled, the RSA and DSA key status, and any open SSH sessions. Select Refresh to update the screen if necessary. To exit, select Quit and press the Enter key.

SSH Configuation

On the SSH Server Configuration screen, the SSH Server can be enabled or disabled by navigating to the SSH Server option and using the SPACE bar to toggle the option. The SSH Server Port can be modified by entering in the value. Select Edit and press the Enter key to make changes. When your changes are complete, press the Esc key to return to the Action menu. Select Save and press the Enter key to save your changes. To exit, select Quit and press the Enter key.

Port based authentication enables authenticating system users on a per-port basis via an external server. Only authenticated and approved system users can transmit and receive data. Ports are authenticated via the RADIUS server using the Extensible Authentication Protocol (EAP). Enable 802.1x Place a checkmark in the check box to enable 802.1x authentication. Port Indicates the port name. Status Port Control Specifies the port authorization state. The possible field values are as follows:
Force-Authorized The controlled port state is set to
Security > Ports Security
Force-Authorized (forward traffic).
Force-Unauthorized The controlled port state is set
to Force-Unauthorized (discard traffic).
Enable Periodic Reauthentication Permits immediate port reauthentication. Setting Timer The Setting Timer button opens the Setting Timer screen to configure ports for 802.1x functionality.

Setting Timer

802.1x Settings > Setting Timer
Port Indicates the port name.
Network security can be increased by limiting access on a specific port only to users with specific MAC addresses. MAC addresses can be dynamically learned or statically configured. Locked port security monitors both received and learned packets that are received on specific ports. Access to the locked port is limited to users with specific MAC addresses. These addresses are either manually defined on the port, or learned on that port up to the point when it is locked. When a packet is received on a locked port, and the packet source MAC address is not tied
to that port (either it was learned on a different port, or it is unknown to the system), the protection mechanism is invoked, and can provide various options. Unauthorized packets arriving at a locked port are either:
Forwarded Discarded with no trap Discarded with a trap Cause the port to be shut down.
Trap Frequency The amount of time (in seconds) between traps. The default value is 10 seconds.
Security > Multiple Hosts
The Multiple Hosts screen allows network managers to configure advanced port-based authentication settings for specific ports and VLANs.
Locked port security also enables storing a list of MAC addresses in the configuration file. The MAC address list can be restored after the device has been reset. Disabled ports are activated from the Port Security page. Interface Displays the port or LAG name. Lock Interface Selecting this option locks the specified interface. Learning Mode Defines the locked port type. The Learning Mode field is enabled only if Locked is selected in the Interface Status field.The possible field values are:

Classic Lock Locks the port using the classic lock
mechanism. The port is immediately locked, regardless of the number of addresses that have already been learned.
Security > HTTPS Settings
Limited Dynamic Lock Locks the port by deleting
the current dynamic MAC addresses associated with the port. The port learns up to the maximum addresses allowed on the port. Both relearning and aging MAC addresses are enabled.
Port Displays the port number for which advanced portbased authentication is enabled. Enable Multiple Hosts When checked, indicates that multiple hosts are enabled. Multiple hosts must be enabled in order to either disable the ingress-filter, or to use port-lock security on the selected port. Action on Violation Defines the action to be applied to packets arriving in single-host mode, from a host whose MAC address is not the supplicant MAC address. The possible field values are:
Discard Discards the packets. This is the default
In order to change the Learning Mode, the Lock Interface must be set to Unlocked. Once the mode is changed, the Lock Interface can be reinstated. Max Entries Specifies the number of MAC addresses that can be learned on the port. The Max Entries field is enabled only if Locked is selected in the Interface Status field. In addition, the Limited Dynamic Lock mode is selected. The default is 1. Action on Violation Indicates the action to be applied to packets arriving on a locked port. The possible field values are:
Discard Discards packets from any unlearned source.

value.

Forward Forwards the packet. Discard Disable Discards the packets and shuts
down the port. The ports remains shut down until reactivated, or until the device is reset.
This is the default value.
Forward Normal Forwards packets from an unknown
Enable Traps When checked, indicates that traps are enabled for Multiple Hosts. Trap Frequency Defines the time period by which traps are sent to the host. The Trap Frequency (1-1000000) field can be defined only if multiple hosts are disabled. The default is 10 seconds. Status Indicates the host status. If there is an asterisk (*), the port is either not linked or is down.
source without learning the MAC address.
Discard Disable Discards packets from any unlearned

links established by the device.

automatically

Enabled Enables the device to establish a point-to-
point link. To establish communications over a pointto-point link, the originating PPP first sends Link Control Protocol (LCP) packets to configure and test the data link. After a link is established and optional facilities are negotiated as needed by the LCP, the originating PPP sends Network Control Protocols (NCP) packets to select and configure one or more network layer protocols. When each of the chosen network
Spanning Tree > MSTP Instance Settings
Spanning Tree > MSTP Interface Settings
MSTP operation maps VLANs into STP instances. Packets assigned to various VLANs are transmitted along different paths within Multiple Spanning Trees Regions (MST Regions). Regions are one or more Multiple Spanning Tree bridges by which frames can be transmitted. In configuring MST, the MST region to which the device belongs is defined. A configuration consists of the name, revision, and region to which the device belongs. Network Administrators can define MSTP Instances settings using the MSTP Instance Settings screen. Instance ID Defines the VLAN group to which the interface is assigned. Included VLAN Maps the selected VLAN to the selected instance. Each VLAN belongs to one instance. Bridge Priority Specifies the selected spanning tree instance device priority. The field range is 0-61440. Designated Root Bridge ID Indicates the ID of the bridge with the lowest path cost to the instance ID. Root Port Indicates the selected instances root port. Root Path Cost Indicates the selected instances path cost. Bridge ID Indicates the bridge ID of the selected instance. Remaining Hops Indicates the number of hops remaining to the next destination.
Network Administrators can assign MSTP Interface settings using the MSTP Interface Settings screen. The MSTP Interface Settings screen contains the following fields: Instance ID Lists the MSTP instances configured on the device. Possible field range is 0-15. Interface Displays the interface for which the MSTP settings are displayed. The possible field values are:

Leave Timeout Indicates the amount of time the host waits, after requesting to leave the IGMP group and not receiving a Join message from another station, before timing out. If a Leave Timeout occurs, the switch notifies the Multicast device to stop sending traffic The Leave Timeout value is either user-defined, or an immediate leave value. The default timeout is 10 seconds. dynamically.

Dynamic Indicates

configured
Forbidden Forbidden ports are not included the
Multicast group, even if IGMP snooping designated the port to join a Multicast group.
None The port is not configured for Multicast service.
Multicast > Bridge Multicast
The Add to List button adds the configured RMON event to the Event Table at the bottom of the screen.
Multicast > Bridge Multicast Forward All
Multicast > Global Settings
The Bridge Multicast screen displays the ports and LAGs attached to the Multicast service group in the Ports and LAGs tables. The Port and LAG tables also reflect the manner in which the port or LAGs joined the Multicast group. Ports can be added either to existing groups or to new Multicast service groups. The Bridge Multicast screen permits new Multicast service groups to be created. The Bridge Multicast screen also assigns ports to a specific Multicast service address group. The Bridge Multicast screen is divided into two areas, Configuring Multicast and Multicast Table. The fields are the same for both areas. VLAN ID Identifies a VLAN to be configured to a Multicast service. Bridge Multicast Address Identifies the Multicast group MAC address/IP address. Bridge IP Multicast DIsplays the port that can be added to a Multicast service. LAG Displays LAG that can be added to a Multicast service. The configuration options are as follows:

Static Indicates

Multicast > Multicast Forward All
The Bridge Multicast Forward All screen contains fields for attaching ports or LAGs to a device that is attached to a neighboring Multicast router/switch. Once IGMP Snooping is enabled, Multicast packets are forwarded to the appropriate port or VLAN. The Bridge Multicast Forward All screen contains the following fields: VLAN ID DIsplays the VLAN for which Multicast parameters are displayed. The configuration options are as follows:

SHA Password Indicates that port authentication
only, and changes cannot be made to the assigned SNMP view.

HMAC-SHA-96

MD5 Key Indicates that port authentication is
Write The management access is read-write and
performed via the HMAC-MD5 algorithm.
changes can be made to the assigned SNMP view.
SHA Key Indicates that port authentication is
performed via HMAC-SHA-96 authentication. Password Define the local user password. Local user passwords can contain up to 159 characters. Authentication Key Defines the HMAC-MD5-96 or HMAC-SHA-96 authentication level. The authentication and privacy keys are entered to define the authentication key. If only authentication is required, 16 bytes are defined. If both privacy and authentication are required, 32 bytes are defined. Each byte in hexadecimal character strings is two hexadecimal digits. Each byte can be separated by a period or a colon. Privacy Key Defines the Privacy Key (LSB). If only authentication is required, 20 bytes are defined. If both privacy and authentication are required, 36 bytes are defined. Each byte in hexadecimal character strings is two hexadecimal digits. Each byte can be separated by a period or colon. The Add to List button adds the Group Membership configuration to the respective table at the bottom of the screen.
Basic Enables SNMP Basic mode for a selected community and contains the following fields: Access Mode Defines the access rights of the community. The possible field values are:
Read Only Management access is restricted to read-
only, and changes cannot be made to the community.
Read Write Management access is read-write and
changes can be made to the device configuration, but not to the community. Admin User has access to all device configuration options, as well as permissions to modify the community.
View Name Contains a list of user-defined SNMP views. Advanced Enables SNMP Advanced mode for a selected community and contains the following fields: Group Name Defines advanced SNMP communities group names. The Add to List button adds the Communities configuration to the respective Table at the bottom of the screen.

SNMP > Communities

The Communities screen contains three Communities, Basic Table and Advanced Table. areas,

Base Table

Management Station Displays the management station IP address for which the basic SNMP community is defined. Community String Displays the password used to authenticate the management station to the device. Access Mode Displays the access rights of the community. View Name Displays the user-defined SNMP view.

Admin > Flash Logs

The Flash Log screen contains information about log entries saved to the Log File in FLASH, including the time the log was generated, the log severity, and a description of the log message. The Message Log is available after reboot.
Admin > Flash Logs 8-Port 10/100 Ethernet Switch with Webview 57

Appendix A

Gigabit Ethernet
About Gigabit Ethernet and Fiber Optic Cabling
Gigabit Ethernet runs at speeds of 1Gbps (Gigabit per second), ten times faster than 100Mbps Fast Ethernet, but it still integrates seamlessly with 100Mbps Fast Ethernet hardware. Users can connect Gigabit Ethernet hardware with either fiber optic cabling or copper Category 5e cabling, with fiber optics more suited for network backbones. As the Gigabit standard gradually integrates into existing networks, current computer applications will enjoy faster access time for network data, hardware, and Internet connections.

Fiber Optic Cabling

Fiber optic cabling is made from flexible, optically efficient strands of glass and coated with a layer of rubber tubing, fiber optics use photons of light instead of electrons to send and receive data. Although fiber is physically capable of carrying terabits of data per second, the signaling hardware currently on the market can handle no more than a few gigabits of data per second. Fiber cables come with two main connector types. The most commonly used fiber optic cable is multi-mode fiber cable (MMF), with a 62.5 micron fiber optic core. Singlemode fiber cabling is somewhat more efficient than multi-mode but far more expensive, due to its smaller optic core that helps retain the intensity of traveling light signals. A fiber connection always require two fiber cables: one transmits data, and the other receives it. Each fiber optic cable is tipped with a connector that fits into a fiber port on a network adapter, hub, or switch. In the USA, most cables use a square SC connector that slides and locks into place when plugged into a port or connected to another cable. In Europe, the round ST connector is more prevalent. For Gigabit Ethernet, you must use the Linksys MGBT1, MGBSX1, or MGBLH1 miniGBIC modules with the Linksys Gigabit Switches. The MGBSX1 and the MGBLH1 require fiber cabling with LC connectors, and the MGBT1 requires a Category 5e Ethernet cable with an RJ-45 connector. For Fast Ethernet, you must use the MFEFX1 (100BASE-FX) or MFELX1 (100BASE-LX) SFP transceivers.

Appendix B

Appendix B: Introduction

Startup Menu Procedures

The Startup menu can be entered when booting the device. There is a two second window of time to enter the Startup Menu immediately after the POST test. The menu can be accessed directly from a terminal connected to the console port. The Startup menu procedures can be done using the ASCII terminal or Windows HyperTerminal. The software download procedure is performed when a new version must be downloaded to replace corrupted files, update or upgrade the system software. To download software from the Startup menu: To enter the Startup menu: 1. Power off your computer and Switch. 2. Connect the provided null modem cable from the COM port on your computer to the Console port on the Switch. 3. Power on your computer and launch HyperTerminal, follow the instructions in Chapter 4: Configuration Using the Console Interface to configure HyperTerminal to connect to the Switch. 4. Power on the Switch the auto-boot message: and watch for

Full Duplex The ability of a networking device to receive and transmit data simultaneously. GARP (General Attributes Registration Protocol) Registers client stations into a multicast domain. Gateway A device that interconnects networks with different, incompatible communications protocols. GBIC (GigaBit Interface Converter) A hardware module used to attach network devices to fiber-based transmission systems. GBIC converts the serial electrical signals to serial optical signals and vice versa. GVRP (GARP VLAN Registration Protocol) Registers client stations into a VLANs. Half Duplex Data transmission that can occur in two directions over a single line, but only one direction at a time. HTTP (HyperText Transport Protocol) The communications protocol used to connect to servers on the World Wide Web. HTTPS (HyperText Transport Protocol Secure) An extension to the standard HTTP protocol that provides confidentiality by encrypting the traffic from the website. By default this protocol uses TCP port 443. ICMP (Internet Control Message Protocol) Allows the gateway or destination host to communicate with the source host. For example, to report a processing error. IGMP (Internet Group Management Protocol) Allows hosts to notify their local switch or router that they want to receive transmissions assigned to a specific multicast group. IP (Internet Protocol) A protocol used to send data over a network. IP Address The address used to identify a computer or device on a network. IPCONFIG A Windows 2000 and XP utility that displays the IP address for a particular networking device. IPSec (Internet Protocol Security) A VPN protocol used to implement secure exchange of packets at the IP layer. ISP (Internet Service Provider) A company that provides access to the Internet. Jumbo Frames Enable transporting identical data in fewer frames. Jumbo Frames reduce overhead, lower processing time, and ensure fewer interrupts. LAG (Link Aggregated Group) Aggregates ports or VLANs into a single virtual port or VLAN. LAN The computers and networking products that make up your local network.
MAC (Media Access Control) Address The unique address that a manufacturer assigns to each networking device. Mask A filter that includes or excludes certain values, for example parts of an IP address. Mbps (MegaBits Per Second) One million bits per second; a unit of measurement for data transmission. MD5 (Message Digest 5) An algorithm that produces a 128-bit hash. MD5 is a variation of MD4, and increases MD4 security. MD5 verifies the integrity of the communication and authenticates the origin of the communication. MDI (Media Dependent Interface) A cable used for end stations. MDIX (Media Dependent Interface with Crossover) A cable used for hubs and switches. MIB (Management Information Base) MIBs contain information describing specific aspects of network components. Multicast Transmits copies of a single packet to multiple ports. Network A series of computers or devices connected for the purpose of data sharing, storage, and/or transmission between users. NMS (Network Management System) An interface that provides a method of managing a system. OID (Object Identifier) Used by SNMP to identify managed objects. In the SNMP Manager/Agent network management paradigm, each managed object must have an OID to identify it. Packet A unit of data sent over a network. Ping (Packet INternet Groper) An Internet utility used to determine whether a particular IP address is online. Policing Determines if traffic levels are within a specified profile. Policing manages the maximum traffic rate used to send or receive packets on an interface. Port The connection point on a computer or networking device used for plugging in cables or adapters. Port Mirroring Monitors and mirrors network traffic by forwarding copies of incoming and outgoing packets from one port to a monitoring port. Power over Ethernet (PoE) A technology enabling an Ethernet network cable to deliver both data and power. QoS (Quality of Service) Provides policies that contain sets of filters (rules). QoS allows network managers to decide how and what network traffic is forwarded according to priorities, application types, and source and destination addresses.

Appendix D

Appendix D: Specifications

Specifications

Model Ports Cabling Type LEDs SRWRJ-45 Connectors for 10BASE-T and 100BASE-TX Console Port Auto MDI/MDI-X Autonegotiate/Manual Setting UTP CAT 5 or Better for 10BASE-T/100BASE-TX 10/100 Link/Act, Speed, System 1.6 Gig Non-Blocking 1.19 Mpps Wire-Speed Performance 8K 256 Active VLANs (4096 range) Port-Based and 802.1Q Tag-Based VLANs Management VLAN Head of Line Blocking Prevention Built-In Web UI for Easy Browser-Based Configuration (HTTP/HTTPS) SNMP Version 1, 2c, 3 with Support for Traps RFC1213 MIB-2, RFC2863 Interface MIB, RFC2665 Ether-like MIB, RFC1493 Bridge MIB, RFC2674 Extended Bridge MIB (P-bridge, Q-bridge), RFC2819 RMON MIB (groups 1,2,3,9 only), RFC2737 Entity MIB, RFC 2618 RADIUS Client MIB, RFC 1215 Traps Embedded Remote Monitoring (RMON) Software Agent Supports four RMON Groups (History, Statistics, Alarms, and Events) for Enhanced Traffic Management, Monitoring, and Firmware Upgrade Port Mirroring Other Management IEEE 802.1X Access Control Analysis.
Web Browser Upgrade (HTTP) TFTP Upgrade Traffic on a Port can be Mirrored to another Port for Analysis with a Network Analyzer or RMON Probe Traceroute Secure Socket Layer (SSL) Secure Shell (SSH) RADIUS Port Mirroring TFTP upgrade SSL security for Web UI DHCP Client BootP SNTP Xmodem Upgrade Cable Diagnostics PING Telnet Client (SSH Secure Support) 802.1X - RADIUS Authentication MD5 Encryption ACLs Drop or Rate Limit Based on: Source and Destination MAC-Based Source and Destination IP Address Protocol ToS/DSCP Port VLAN Ethertype Link Aggregation using IEEE 802.3ad LACP Up to 8 Ports in up to 8 Groups Broadcast, Multicast and Unknown Unicast IEEE 802.1d Spanning Tree, IEEE 802.1w Rapid Spanning Tree, IEEE 802.1s Multiple Spanning Tree

Performance

Switching Capacity Forwarding Rate

Layer 2

MAC table size Number of VLANs VLAN HOL Blocking

Security Features

Management
Web User Interface SNMP SNMP MIBs RMON

Availability

Link Aggregation Storm Control Spanning Tree
IGMP Snooping IGMP (v1/v2) Snooping Provides for Fast Client Joins and Leaves of Multicast Streams and Limits Bandwidth- Intensive Video Traffic to Only the Requestors Supports 256 Multicast Groups. 4 Hardware Queues Priority Queueing and Weighted Round Robin (WRR) Port-Based 802.1p VLAN Priority Based IPv4/v6 IP Precedence/TOS/ DSCP Based TCP/UDP Port Based Diffserv Classification and Remarking ACLs Ingress Policer Egress Rate Control 802.3 10BASE-T Ethernet, 802.3u 100BASE-TX Fast Ethernet, 802.3ab, 802.3x Flow Control, 802.3 ad LACP, 802.1D STP, 802.1Q/p VLAN, 802.1w Rapid STP, 802.1s Multiple STP, 802.1x Port Access Authentication 11" x 1.75" x 6.69" (279.4 x 44.45 x 170 mm) 2.20 lb (1 kg) External AC Power Adapter FCC Part15 Class A, CE Class A, UL, cUL, CE Mark, CB 32 to 104F (0 to 40C) -4 to 158F (-20 to 70C) 10 to 90% Noncondensing 10 to 95% Noncondensing Model Ports Cabling Type LEDs SRW208G

original purchase when returning your product. Products received without a RMA number and dated proof of original purchase will be rejected. Do not include any other items with the product you are returning to Linksys. Defective product covered by this limited warranty will be repaired or replaced and returned to you without charge. Customers outside of the United States of America and Canada are responsible for all shipping and handling charges, custom duties, VAT and other associated taxes and charges. Repairs or replacements not covered under this limited warranty will be subject to charge at Linksys then-current rates.

Technical Support

This limited warranty is neither a service nor a support contract. Information about Linksys current technical support offerings and policies (including any fees for support services) can be found at: www.linksys.com/support. This limited warranty is governed by the laws of the jurisdiction in which the Product was purchased by you. Please direct all inquiries to: Linksys, P.O. Box 18558, Irvine, CA 92623.

Appendix F

FCC Statement
This equipment has been tested and complies with the specifications for a Class A digital device, pursuant to Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. These limits are designed to provide reasonable protection against harmful interference when equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. WARNING: You are cautioned that changes or modifications not expressly approved by the party responsible for compliance could void your authority to operate the equipment.

Regulatory Information

Industry Canada Statement
This Class A digital apparatus complies with Canadian ICES-003. Operation is subject to the following two conditions: 1. This device may not cause interference and 2. This device must accept any interference, including interference that may cause undesired operation of the device.

Secure, reliable, intelligent, managed PoE switching for your growing business
Growing businesses require cost-effective, networking solutions that can scale with ever changing business needs. The Linksys SRW208MP WebView managed switch brings a whole new level of intelligence and security to the network infrastructure. The combination of its intelligence and small size make it ideal for a conference room or training room where security and uptime are important. It offers a two Gigabit copper or optical interfaces for connection to a core switch. For Wireless or VoIP deployments, the SRW208MP supports IEEE802.3af standard for Power over Ethernet. With automatic load sensing, the power control circuitry automatically detects Power over Ethernet on end-device before providing power. Power feeding of Ethernet is limited for fixed 10/100 Base-T/TX ports. The solution can provide maximum output power per PoE port up to 15.4W on all 8 ports simultaneously. Independent overload and short-circuit protection for each port. LED indicators for power status per PoE port. Network security is a top priority in any size business. Most business data networks, large and small, are unsecured. Unauthorized access to the network and mission critical data is a constant concern. The SRW208MP secures the network through 802.1X port authentication and MAC Filtering. 802.1X requires the client to authenticate themselves before the port will pass data.

SRW208MP

Businesses are recognizing the benefits of doing Voice over IP (VoIP) and are quickly migrating their voice services to IP-based platforms, requiring their local area networks to support both voice and data applications. In unmanaged IP networks, bursty data sessions can disrupt voice packet delivery, causing poor voice quality. With the enhanced QoS and traffic management features in the SRW208MP, voice data can be prioritized, ensuring clear and reliable voice communications. Enabling the SRW208MP advanced features further secures the integrity of your network. The WebView interface provides an intuitive, secure management interface enabling you to better utilize the comprehensive feature-set of the switch, resulting in a better optimized, more secure network.
Standards-based IEEE 802.3af PoE - Up to 8 ports at 15.4W Dual gigabit uplinks provide increased bandwidth and redundancy 802.1x port authentication and MAC address filtering brings network security down to the switch port level Advance QoS enables the network to be optimized for your networked applications, including voice, video and data storage

PRODUCT DATA

8-port 10/100 Ethernet Switch with WebView and Maximum PoE

Model: SRW208MP

BUSINESS SERIES

Features

8 - 10/100 Switched RJ45 ports deliver up to 200Mbps of throughput per port 2 - 10/100/1000 Switched RJ45 / Mini-GBIC Combo Ports PoE on 10/100 ports supply up to IEEE 802.3af maximum of 15.4W per port on all 8 ports 5.6 Gbps Non-blocking, store-and-Forward switching mechanism Simplified QoS management enabled by advanced queuing techniques using 802.1p, Diffserv or ToS traffic prioritization specifications Configuration and monitoring from a standard web browser with WebView management Secure remote management of the switch via SSH and SSL secure channel network protocols 802.1Q based VLANs enable segmentation of networks for improved performance and security Private VLAN Edge for simplified network isolation for guests connections or autonomous networks Automatic configuration of VLANs across multiple switches through GVRP/GARP Automatic MDI/MDIX detection support
8-port 10/100 switch with WebView

Specifications

Model Ports Buttons Cabling Type LEDs SRW208MP 8 RJ45 connectors for 10BASE-T and 100BASE-TX, 2 RJ45 connectors for 10BASE-T/100BASE-TX/1000BASE-T with 2 SFP slots Console port Auto MDI/MDI-X Auto-negotiate/Manual setting no UTP CAT 5 or better for 10BASE-T/100BASE-TX, UTP CAT 5e or better for 1000BASE-T 10/100 Link/Act, PoE, 2 Gig Link/Act, Speed, System
802.3af compliant. Supply up to IEEE Standard maximum of 15.4 on 8 10/100 ports

Performance

Switching Capacity Forwarding Rate 5.6 Gig non-blocking 4.17Mpps wire-speed performance

Layer 2

MAC table size Number of VLANs VLAN HOL Blocking 8K 256 active VLANs (4096 range) Port-based and 802.1Q Tag-based VLANs Management VLAN Head of line blocking prevention

Management

Web User Interface SNMP SNMP MIBs RMON Built-in Web UI for easy browser-based configuration (HTTP/HTTPS) SNMP version 1, 2c, 3 with support for traps RFC1213 MIB-2, RFC2863 Interface MIB, RFC2665 Ether-like MIB, RFC1493 Bridge MIB, RFC2674 Extended Bridge MIB (P-bridge, Q-bridge), RFC2819 RMON MIB (groups 1,2,3,9 only), RFC2737 Entity MIB, RFC 2618 RADIUS Client MIB, RFC 1215 Traps, Private PoE MIB Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis.
Firmware Upgrade Web Browser upgrade (HTTP) and TFTP Port Mirroring Other Management Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe Traceroute Secure Socket Layer (SSL) Secure Shell (SSH) RADIUS Port mirroring TFTP upgrade SSL security for Web UI DHCP Client BootP SNTP Xmodem upgrade Cable Diagnostics PING Telnet Client (SSH secure support)

Security

IEEE 802.1x Access Control 802.1x - RADIUS Authentication. MD5 Encryption ACLs - Drop or Rate Limit based on: Source and Destination MAC-based Source and Destination IP address Protocol TOS/DSCP Port VLAN Ethertype
User/Network port level security via 802.1x authentication and MAC-based filtering Increased the bandwidth (up to 8x) and added link redundancy with Link Aggregation Control Protocol (LACP) Enhanced rate limiting capabilities provide control, including back pressure to control the rate that data that can flow in and out of a port Multicasting, Broadcasting and Flooding Control Port Mirroring for non-invasive monitoring of switch traffic Jumbo frame support - up to 1632 bytes SNMP v1, v2c, v3 Fully rack-mountable using the included rack-mounting hardware

Availability

Link Aggregation Storm Control Spanning Tree IGMP Snooping Link Aggregation using IEEE 802.3ad LACP Up to 8 ports in up to 8 groups Broadcast, Multicast and Unknown Unicast IEEE 802.1d Spanning Tree, IEEE 802.1w Rapid Spanning Tree, IEEE 802.1s Multiple Spanning Tree IGMP (v1/v2) snooping limits bandwidth-intensive video traffic to only the requestors. Support 256 multicast groups.

Priority levels 4 Hardware queues
Scheduling Priority Queuing and Weighted Round Robin (WRR) Class of Service Rate Limiting Port-based 802.1p VLAN priority based IPv4/v6 IP Precedence/TOS/DSCP based TCP/UDP port based Diffserv Classification and Remarking ACLs Ingress policer Egress rate control

Standards

802.3 10BASE-T Ethernet, 802.3u 100BASE-TX Fast Ethernet, 802.3ab 1000BASE-T Gigabit Ethernet, 802.3z Gigabit Ethernet, 802.3x Flow Control, 802.3 ad LACP,802.3af PoE, 802.1d STP, 802.1Q/p VLAN, 802.1w Rapid STP, 802.1s Multiple STP, 802.1x Port Access Authentication

Environmental

Dimensions WxHxD Unit Weight Linksys A Division of Cisco Systems, Inc. 121 Theory Irvine, CA 92617 USA
E-mail: sales@linksys.com support@linksys.com Web: http://www.linksys.com Linksys products are available in more than 50 countries, supported by 12 Linksys Regional Offices throughout the world. For a complete list of local Linksys Sales and Technical Support contacts, visit our Worldwide Web Site at www.linksys.com.
11 x 1.75 x 6.69 (279.4 mm x 44.5 mm x 170 mm) 2.65 lbs (1.2 kg) External AC Power Adapter FCC Part15 Class A, CE Class A, UL, cUL, CE mark, CB 0 to 40C (32 to 104F) -20 to 70C (-4 to 158F) 10% to 90% 10% to 95%
Power Certification Operating Temp. Storage Temp. Operating Humidity Storage Humidity

Package Contents

SRW208MP with 8 10/100 Base-T and 2 Gig combo ports with SFP or RJ45 AC Power Adapter with Power Cord Two Rack Mounting Kits/eight screws CD with User Guide in PDF Format
Registration Card Console Cable

Minimum Requirements

Web-based Configuration Java-enabled Browser Cat5 Ethernet Network Cable
TCP/IP Protocol installed on each computer within the network Network Adapter installed in each computer Network Operating System (e.g. Windows, Linux, MacOS X)
Check the product package and contents for specific features supported. Specifications are subject to change without notice. Linksys is a registered trademark or trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. Copyright 2006 Cisco Systems, Inc. All rights reserved. Other brands and product names are trademarks or registered trademarks of their respective holders.