SWP2 Series Technical Data
Firmware revision: Rev.2.03.13
Thank you for your purchase of the Yamaha SWP2 series.
Please read this manual carefully, correctly installing the unit and making the proper settings before use.
Make sure to observe the warnings and cautions listed in this manual, in order to use the unit correctly and safely.
Startup guide
This explains the procedure for preparing to set up the SWP2 series unit that you purchased.
Settings for the SWP2 series can be made using the following four methods.
- Make settings via the Web GUI
- Make settings via commands using the CONSOLE port
- Make settings via commands using TELNET
- Make settings via commands using SSH
This document explains "Preparing to make settings via the Web GUI" and "Preparing to make settings via the CONSOLE port."
Preparing to make settings via the Web GUI
You'll log into the Web GUI from Yamaha LAN Monitor, so install Yamaha LAN Monitor before you proceed.
Before you log in, connect the computer to the same network.
For details on supported web browsers, refer to the Yamaha Pro Audio website.
https://www.yamaha.com/proaudio/
- Prepare the computer and other items you'll need when making settings.
- Obtain a category 5 Ethernet cable for connecting to this unit.
- The following web browsers are recommended for use.
- Windows
- Internet Explorer 11, EDGE, Google Chrome, Mozilla FireFox
- Mac, iOS
- Apple Safari 7.0 or later
- Windows
- Connect this unit to the computer via a category 5 Ethernet cable.
- Power-on this unit. This unit takes approximately 70 seconds to start up.
When startup is completed, the indicator of the LAN port to which the Ethernet cable is connected will light according to the communication speed and mode.
- Start Yamaha LAN Monitor.
- Select the device for which you want to make settings, and in the "Device details" view, click the "Web GUI" button.
When access succeeds, a dialog box asking you to enter a user name and password appears.
- If you have previously specified them, enter a user name and password, and click the "log in" button.
With the factory settings, no user name or password have been specified, so you don't need to enter a user name or password.
- Subsequently, make settings as appropriate for the system in which this unit is being used.
- For details on settings via the Web GUI, refer to Help within the Web GUI that you accessed.
Preparing to make settings via the CONSOLE port
- Prepare the computer and other items you'll need when making settings.
When making settings via the CONSOLE port, use an RJ-45/DB-9 console cable.
You'll also need terminal software for controlling the serial (COM) port of the computer.
Set the communication settings of the console terminal as follows.
- Baud rate: 9600 bps
- Data: 8 bits
- Parity: none
- Stop bit: 1 bit
- Flow control: Xon/Xoff
- Use an RJ-45/DB-9 console cable to connect the computer to this unit.
- Power-on this unit. This unit takes approximately 70 seconds to start up.
Immediately after startup, the serial console screen appears as follows.
YamahaL2SW BootROM Ver.1.00 Starting ............................. SWP2 Rev.2.03.01 (Tue Mar 13 08:41:39 2018) Copyright (c) 2018 Yamaha Corporation. All Rights Reserved.
- Log in to this unit.
In the initial state, a user name and password have not been specified, so you'll be able to log in by pressing the "Enter" key at the user name input prompt and the password input prompt.
Username: (Input the "Enter" key) Password: (Input the "Enter" key) SWP2 Rev.2.03.01 (Tue Mar 13 08:41:39 2018) Copyright (c) 2018 Yamaha Corporation. All Rights Reserved. SWP2>
- Subsequently, make settings as appropriate for the system in which this unit is being used.
- For details on settings via the serial console, refer to Command Reference.
Firmware Updates
For stable operation, we recommend that you apply the latest firmware updates, which include new functionality and bug fixes.
Please confirm your system version before applying updates.
- Use the show environment command to check the system version.
Web GUI Function
The latest firmware for this unit supports the following settings and functions.
- Detailed settings
- Interface settings
- Link aggregation
- VLAN
- MAC address table
- Routing
- DNS client
- IGMP Snooping
- Access lists
- QoS
- Mail notification
- Terminal monitoring
- Management
- Unit settings
- Time settings
- Access management
- Management password
- Server settings
- Maintenance
- Command execution (For details on the commands, refer to the Command Reference.)
- Firmware update
- CONFIG file management
- Statistical data management
- SYSLOG management
- Restart and initialization
- Web GUI language
- Unit settings
Precautions
- Do not use this unit near another electrical product such as a television, radio, or mobile phone. Such use might cause noise in this unit or in the television or radio.
- Do not use this unit in locations of direct sunlight (such as inside a car located in the sun), in extremely hot locations such as near a stove, in extremely cold locations, nor in locations that are excessively dusty or are subject to strong vibration. Such conditions might cause this unit's panel to deform or internal components to malfunction, or might cause unstable operation.
- If the ambient temperature in which this unit is located undergoes extreme change (such as when the unit is moved or is subject to aggressive air-conditioning or heating), and there is a danger that condensation has formed within the unit, leave the unit unpowered for several hours to ensure that condensation has disappeared before using the unit. Using the unit when condensation is present might cause malfunctions.
- Products made of vinyl, plastic, or rubber should not be placed on this unit. Such objects might cause this unit's panel to be discolored or damaged.
- To clean this unit, use a soft dry cloth. Do not use benzene, thinner, detergent, or a chemically treated cloth, such things might cause discoloration or damage.
- Before touching this unit, discharge any static electricity from your clothing and body. Static electricity might cause malfunctions. Before you proceed, touch an unpainted metal component or the ground terminal of a grounded device.
- Do not place this unit in locations where there is a strong magnetic field. Such conditions might cause malfunctions.
- Do not connect equipment that generates noise to the same electrical power supply line as this unit. Such conditions might cause malfunctions or faulty operation.
- Do not route communication cables near power cords. High voltages might be induced, causing faulty operation.
- When using a 1000BASE-T connection, use enhanced category 5 (CAT5e) or better LAN cable.
- Optical fiber cables can suffer problems such as loss of accuracy caused by damage or abrasion to their connector, or dirty contacts, causing insufficient light reception or failure to link up. In particular, single mode fiber is more prone to suffer these effects than multi mode fiber, so it should be handled with care. Clean the contacts before making connections.
- SWP2 Series Technical Data (GUI)
- General
- Introduction
Introduction
1. What you can do using the Web GUI
The Web GUI lets you perform basic settings and management of the Yamaha switch (this unit). The Web GUI contains the following screens for you to make settings and perform management.
- Dashboard
- Detailed settings
- Management
- CONFIG
- TECHINFO
2. Operating environment
Here we explain the environment that is required in order to use the Web GUI.
Recommended web browser
We recommend the following web browser for use with the Web GUI.
- Windows
- Microsoft Edge
- Google Chrome
- Mozilla Firefox
- Mac
- Apple Safari
- iOS
- Apple Safari
The latest version of each browser is recommended.
Microsoft Internet Explorer is not supported.
<NOTE>
- Do not use the [Back] or [Forward] buttons of the web browser.
- In some cases, the display layout of a page may become disordered. If this occurs, please access that page once again.
<Memo>
- The Web GUI uses UTF-8 character encoding.
JavaScript settings
The Web GUI uses JavaScript. If your web browser is set to disable JavaScript, you might not be able to use the Web GUI itself.
In advance, please enable JavaScript as described in the following procedure.
- Settings for Google Chrome (Windows version)
- Press the Google Chrome menu button.
- On the menu that appears, select “Settings (S)”.
- Select the “Advanced settings” in the lower part of the page.
- In the “Privacy and security” section, select “Content settings”.
- Select “JavaScript”.
- Move the slider to the right to “Allowed (recommended)”.
- For details on JavaScript settings for Google Chrome, refer to the Google Chrome support page (external site).
- Settings for Mozilla Firefox (Windows version)
- For details on JavaScript settings for Firefox, refer to the Firefox support page (external site).
- Settings for Safari (Mac version)
- On the menu, select “Safari” and choose “Preferences.”
- In the window that appears, choose “Security.”
- Add a check mark for “Allow plug-ins” and “Enable JavaScript.”
- Settings for Safari (iOS version)
- On the home screen, select “Settings”.
- Select “Safari”.
- Select “Advanced”.
- Move the “JavaScript” slider to the right to enable.
Cookie settings
The Web GUI uses cookies. If your web browser is set to disable cookies, you might not be able to use the Web GUI itself.
Follow the steps below to allow cookies in order to use the Web GUI.
- Settings for Google Chrome (Windows version)
- Press the Google Chrome menu button.
- On the menu that appears, select “Settings (S)”.
- Select the “Advanced settings” in the lower part of the page.
- In the “Privacy and security” section, select “Content settings”.
- Select “Cookies”.
- Move the topmost slider to the right, to enable “Allow sites to save and read cookie data (recommended)”.
- Settings for Mozilla Firefox (Windows version)
- Press the Mozilla Firefox menu button.
- In the menu that appears, choose “Preferences”.
- Select the “Privacy” panel.
- Select “Remember history” from the drop-down list box in the “History” section.
- Settings for Safari (Mac version)
- On the menu, select “Safari” and choose “Preferences”.
- In the window that appears, choose “Privacy”.
- For the “Cookies and website data” setting, select a setting other than “Always block”.
- Settings for Safari (iOS version)
- On the home screen, select “Settings”.
- Select “Safari”.
- Select “Block Cookies”.
- Select a setting other than “Always block”.
3. User access rights
Users who log in to the Web GUI are divided into two types: general users and administrative users. These are referred to as “access levels.” The differences between the access levels are described below.
- For general users
Can view the settings of the unit. Cannot change the settings.
- For administrative users
Can view and change the settings of the unit. The user can also obtain CONFIG and TECHNIFO.
4. Note when using together with command input
Settings for this unit can be made not only via the Web GUI but also from the command console screen by directly entering commands. Command input allows a broader range of settings than when using the Web GUI, and also lets you make settings for functions that are not supported in the Web GUI. If you use both command input and the Web GUI to make settings, be aware that the commands that you input may be overwritten, or the settings may be cleared.
<Memo>
- The command console screen contains the following items.
- Management -> “Maintenance” -> “Command execution”
- For details on commands, refer to “Command reference.”
5. Language
The Web GUI allows you to switch the display language.To switch the display language, press the "Language Switch" button on the top menu, and select a language you want.
The supported languages are as follows.
- Japanese
- English
- SWP2 Series Technical Data (GUI)
- General
- Login/Logout
Login/Logout
1. Login page
Start your web browser, and access “http://(the IP address you assigned to this unit)/” to display the login page.
The following items are shown on the login page.
- Model name ( Ex. : SWX3220-16MT )
- hostname ( Name configured using the hostname command )
- Input box for user name
- Input box for password
- [Login] button
If login fails, the following error messages are displayed.
- Incorrect user name or password
Login failed. The user name or password is incorrect.
- Maximum number of sessions have been reached
Login failed. The maximum number of sessions has been reached.
Note: Refer to “4. About sessions” for details on sessions.
2. Login method
Here we explain how to log in to the Web GUI of this unit.
- Start your web browser, and access the login page.
- Enter the user name and login password, and press the [Login] button.
Logging in as a guest user
- Leaving the user name input box empty, enter the login password (configured using the “password” command) or the administrator password (configured using the “enable password” command).
- When using a login password to login, you will be logged in as a general user.
- When using an administrator password to login, you will be logged in as an administrative user.
- When the password entered matches both the login password and the administrator password, you will be logged in as an administrative user.
Logging in as a registered user
- Enter the user name and password that were configured using the “username” command.
- When logging in as a user without administrative privileges, you will be logged in as a general user.
- When logging in as a user with administrative privileges, you will be logged in as an administrative user.
<About general users and administrative users>
- General User If you log in as a general user, you will be able to view this unit’s settings and operating status. You will not be able to make settings for this unit.
- Administrative User If you log in as an administrative user, you will be able to perform all Web GUI operations. You can view the unit’s settings and operating status, and configure the settings for this unit.
<About passwords>
- You must enter the password as single-byte characters. Double-byte characters may not be used. Uppercase and lowercase characters are distinguished.
- Take care not to forget the password that you assigned. If you have forgotten the password, ask the administrator who set up this unit for the correct password.
<NOTE>
- You will not be able to properly login if the browser is configured to block cookies.
- In this case, refer to the "Introduction 2. Operating environment" section to set up your cookies.
3. Logout method
- In the upper right of the screen, press the [Logout] button to display the “Log out” dialog box.
- Press the [Login screen] button in the dialog box to go to the login page.
4. About sessions
- If you can successfully login to the Web GUI, a session will be established between the browser in use and this unit.
- Each time you login from a different browser or device, a new session is established.
- The session will be maintained until you log out or the session times out.
- Sessions that have been established will time out after five minutes have elapsed from the last data communication.
- Up to four sessions can be established at one time.
- Information for a session can be checked using the “show users” command.
5. Select display language
- A screen for selecting a language appears right after you log in, only if you log in to the Web GUI as an administrative user in the factory-set state.
- Once you select a language, the Web GUI displays in the language.
- SWP2 Series Technical Data (GUI)
- General
- About each screen
About each screen
1. Dashboard
It shows the various system information of this device in visual form. You can check and monitor the following status.
- Interface information
- System information
- Resource information ( CPU Utilization / Memory Utilization )
- SYSLOG
- Terminal monitoring
- Traffic information ( Transmit / Reception )
- Resource information ( Graph )
2. Detailed settings
In this page you can make detailed network-related settings for this unit. The following items are provided.
- Interface settings
- Link aggregation
- Port authentication
- Port authentication settings
- Server settings
- Authentication management
- VLAN
- Create VLAN
- Tag VLAN
- Multiple VLAN
- MAC address table
- Routing
- DNS client
- IGMP snooping
- Access list
- Create Access list
- Apply Access list
- QoS
- RADIUS server
- Server settings
- User management
- Managing certificates
- Mail notification
- Terminal monitoring
3. Management
In this page you can make settings for this unit, and perform maintenance. The following items are provided.
- Unit settings
- Access management
- User settings
- Various server settings
- Dante optimization
- Maintenance
- Command execution
- Update firmware
- CONFIG management
- SYSLOG management
- Restart and initialization
4. CONFIG
The results of running the “show running-config” command (a setting of this unit) can be viewed in a web browser or acquired as a text file.
- Viewing CONFIG
- In the “CONFIG” menu, press the [Show in browser] button. The execution result of the “show running-config” command is shown in a sub-window.
- To close, press the web browser’s close button.
- Obtaining CONFIG as a text file
- In the “CONFIG” menu, press the [Obtain as text file] button to start the download automatically.
- The name of the acquired file is “running-config_YYYYMMDDhhmmss.txt”.
YYYY ... A.D. ( 4 Digit ) MM ... Month ( 2 Digit ) DD ... Day ( 2 Digit ) hh ... Hours ( 2 Digit ) mm ... Minutes ( 2 Digit ) ss ... Seconds ( 2 Digit )
5. TECHINFO
The “show tech-support” command lets you view status information for all of this unit’s functions.
In the “TECHINFO” menu, the results of running the “show tech-support” command can be viewed in a web browser or acquired as a text file.
- Viewing TECHNIFO
- In the “TECHINFO” menu, press the [Show in browser] button. The execution result of the “show tech-support” command is shown.
- To close, press the web browser’s close button.
- Obtaining TECHNIFO as a text file
- In the “TECHINFO” menu, press the [Obtain as text file] button to start the download automatically.
- The name of the acquired file is “technifo_YYYYMMDDhhmmss.txt”.
YYYY ... A.D. ( 4 Digit ) MM ... Month ( 2 Digit ) DD ... Day ( 2 Digit ) hh ... Hours ( 2 Digit ) mm ... Minutes ( 2 Digit ) ss ... Seconds ( 2 Digit )
- Notes
- It may take some time to obtain TECHNIFO.
- This unit may undergo loading while the information is being acquired.
6. Web Console
You can access the console screen from the "WebConsole" menu. A new browser window opens, and a login prompt appears. Enter your username and password to log in.
- Constraints
- The Key input does not work correctly in Safari for macOS. Please use a browser (Chrome, Edge, Firefox) other than Safari.
- Launching multiple web consoles is not supported. If you open a new web console, the current session is disconnected.
- There are the following restrictions when accessing an L2MS slave's web console from the LAN map via an HTTP proxy.
- If the L2MS master is a router, it is not supported.
- If the L2MS master is a switch, make sure that the firmware supports the web console.
- Do not launch multiple web consoles. You may temporarily lose access to the Web GUI of the L2MS master.
- SWP2 Series Technical Data (GUI)
- Dashboard
- SWP2 Series Technical Data (GUI)
- Dashboard
- About the dashboard
About the dashboard
Using the dashboard- What is the dashboard?
- The page that provides visualization and monitoring of various system information and status information is called the "dashboard."
- Since a warning field appears when a parameter being monitored exceeds its threshold value, this can also be used to analyze the cause when a problem occurs, or for troubleshooting.
- What is a gadget?
- Each window shown in the dashboard is called a "gadget."
- A gadget that you want to check can be placed in the desired location.
- Information for each gadget is automatically updated at regular intervals.
The following buttons are shown in the dashboard.
- About the "gadget" button
- From the "gadget" button () located in the upper right, select the gadget that you want to be shown.
- About the "alert" button
- Up to 32 alerts are shown in order of their recentness.
- The status is monitored by the gadgets that are shown, and when an abnormality or a high load is detected, the "alert" button () flashes and a list of alerts is shown below the "alert" button.
- The alert list shows the content of the currently detected alerts, in order of their recentness.
- Date and time that the abnormality was detected
- Gadget that detected the abnormality
- Detected content
- A flashing "alert" button is also shown on the bar of the gadget that is the object of the alert.
- The alert indication disappears when the following conditions are met (the conditions vary depending on the content that was detected).
- The unit recovered from the abnormal state (e.g., the usage ratio or throughput decreased below the threshold value)
- The state was cleared (e.g., the setting was changed, the port's link went down)
- The alert list's "clear" button () was pressed (*)
(*)Note that even if you press the "clear" button so that the item is no longer shown in the alert list, it is not the case that the abnormal situation has been solved.
- When all alert indications disappear, the "alert" button stops flashing, and the alert list disappears.
- You can press the "alert" button to open or close the alert list.
- It is not possible to open both the alert list and the alert history list at the same time.
- About the "history" button
- The alert history shows up to 64 items in order of their recentness.
- Although the alert history is shown in bold characters, alerts that were cleared from the alert list by the "clear" button are shown in non-bold characters.
- If there is an alert history that has not been viewed or cleared, the number of such events is shown at the lower right of the "history" button (); this is the number of alerts that are displayed in bold characters ().
If this number is displayed, you should check the content of the alerts that had occurred in the alert history list.
- In the alert history list, if you press the "check" button ()of each history item, it is switched to non-bold characters as a history item that has been checked, and the "check" button is no longer displayed.
- Pressing the "check all" () button in the alert history list will put the entire history in the checked state.
- Pressing the "delete all" () button in the alert history list will delete the entire history.
- You can press the "history" button to open or close the alert history list.
- It is not possible to open both the alert list and the alert history list at the same time.
The following gadgets can be used.
- System information
- Resource information
- Interface information
- SYSLOG
- Terminal monitoring
- Traffic information (transmission/reception)
- Resource information (graph)
Each gadget has the following functions.
- Add gadget:
- In the upper right, press the "gadget" button (), select the gadget that you want to add from the list of gadgets, and press the "apply" button.
- The gadget is always added at the far upper left of the dashboard.
- Delete gadget:
- In the upper right, press the "gadget" button (), clear the selection from the list of gadgets, and press the "apply" button.
- You can also delete a gadget by pressing the "close" button () located at the upper right of each gadget.
- Move gadget:
- When you place the mouse on the bar of a gadget, the mouse pointer changes to a move symbol, allowing you to drag the gadget to the desired position.
- The possible move-destinations for a gadget are shown in gray.
- The interface information gadget cannot be moved.
- Separate the gadget screen:
- A "Separate" button () is shown in the upper right of each gadget.
- If you press the "Separate" button, that gadget alone is shown in a different window.
- At this time, the corresponding gadget in the dashboard is indicated as "In separate window."
- If a gadget is separated, the following occurs.
- The "Separate" button is no longer shown for the separated gadget.
- When you update the dashboard display, all separated gadgets return to the dashboard and are shown.
- When you close the dashboard, all separated gadgets are also closed.
- Separated gadgets can also be displayed by specifying a URL directly in the browser.
Example) System information gadget: http://192.168.100.1/dashboard/system.html
- Minimize gadget:
- When you press the minimize icon () in the upper left of each gadget, the icon turns sideways () and the gadget display is minimized.
- When you press it again, the icon returns to its original downward orientation () and the gadget returns to its original size.
- Saving a gadget's position information:
- When you add, delete, move, minimize, or restore a gadget, its position information is saved.
- This information is saved even after the unit is power-cycled.
- If you return the unit to its factory-set state, this information is initialized.
- If you log-in as a general user, the gadget's position information is not saved.
- Auto-update gadget:
- All gadgets are automatically updated at regular intervals.
- The update interval differs depending on the gadget.
- Show alerts:
- When a gadget detects an abnormal condition or a high load, a flashing "alert" button () appears beside the minimize icon of that gadget.
- The following states are the subject of alerts.
Gadget Trigger System information Reboot was detected as the startup reason Resource information CPU usage ratio exceeded 80 % Memory usage ratio exceeded 80 % Interface information Loop occurred SFP optical reception level exceeded the upper threshold SFP optical reception level fell below the lower threshold Traffic information Port throughput exceeded 60 % of the link speed
- SWP2 Series Technical Data (GUI)
- Dashboard
- About each gadget
About each gadget
Interface information
This shows the link status of the ports.
- The "Port" icon display lets you check the link status of the ports.
- When you move the mouse cursor over the "Port" icon, detailed port information is shown.
- The "port" icon is shown as follows depending on the link status.
Link status: for a LAN port
Icon Explanation Link up (port speed 1000BASE-T) Link up (port speed 100BASE-TX) Link up (port speed 10BASE-T) Link down Error occurrence( Loop detection, Shutdown by BPDU guard, Shutdown by port-security, The throughput has exceeded link speed 60. ) The STP state of the port is discarding. (CIST only)
It means that the STP is blocking frames even though the link is up.* This icon is overlaid on the link-up icon.
Link status: for an SFP+ port
Icon Explanation Link up (port speed 10 GbE) Link up (port speed 1 GbE) Link down Error occurrence( Loop detection, Shutdown by BPDU guard, Shutdown by port-security, Optical RX power error, The throughput has exceeded link speed 60. ) The STP state of the port is discarding. (CIST only)
It means that the STP is blocking frames even though the link is up.* This icon is overlaid on the link-up icon.
System information
The following information is displayed.- Device name:
- Display the device name of the switch.
- Firmware revision:
- Firmware revision
- Serial number:
- Serial number of the device
- This is also shown by a label on the top of the chassis.
- MAC address:
- MAC address of the device
- This is also shown by a label on the top of the chassis.
- Currently-running firmware:
- The currently-running firmware is shown.
- Currently-running settings file:
- The currently used CONFIG file is shown.
- According to CONFIG switch number 1, either USER (if on) or DANTE (if off) is loaded at system startup.
- Serial baud rate
- Displays the baud rate of the console port.
- System time:
- Current device date and time
- If the date and time are incorrect, set the date and time either in the Web GUI's "Management" -> "Device settings" page, or by using the clock set command or the ntpdate command.
- Startup time:
- System startup date and time
- Startup reason:
- Reason for startup
- Start from power-off state, reload command, revision up, etc.
- If reboot due to startup was detected, the background color changes to red, and an alert indication () appears.
- Check with the network administrator.
- In the alert list, click the "cancel" button () to clear the alert indication.
- SFP optical reception level:
- Shows the SFP+ port's optical reception level and the module that is connected
Resource information
This shows the CPU usage and memory usage.
- The current values and peak values of CPU usage and memory usage are shown.
- The number at the right of the meter is the current usage, and the number at the left is the peak value.
- You can clear the previous peak value from "Clear peak values,".
- Peak values are also cleared when you restart the device.
- When you move the mouse cursor to each meter, the peak value and the date and time at which the peak value was recorded are shown.
- If CPU usage exceeds 80%, an alert () appears.
- Check the date and time at which the peak value was recorded, and refer to other gadgets to check the traffic and logs from that timeframe.
- If memory usage exceeds 80%, an alert () appears.
- Check the date and time at which the peak value was recorded, and refer to other gadgets to check the traffic and logs from that timeframe.
SYSLOG
This shows the most recent SYSLOG.
- The most recent log is at the top.
- In the select menu you can change the number of lines that are displayed (default: 10 lines).
Terminal monitoring
This shows a list of the monitor terminals and the status of each.
- This shows a count of the terminals determined to be up (Up), terminals determined to be down (Down), terminals on which monitoring has not been started (Idle), and the total number of monitor terminals (All).
- For each monitor terminal, this shows the monitoring target, model name, monitoring type, and status.
- When you place the mouse cursor on the status field, the status of the monitor terminal is shown.
- When you click the "Up," "Down," "Idle," or "All" button, only the monitors that are in the corresponding state are shown.
- If not even one monitor terminal is registered, the display indicates "No monitor terminals are registered."
Traffic information
This shows a traffic graph for the physical interface.
There is a gadget for transmission traffic and a gadget for reception traffic.
- You can use the "Live,"Day," "Month," and "Year" buttons to change the time period shown by the graph.
- Live
- This shows the traffic of the past two minutes.
- The graph is automatically updated at one-second intervals.
- Day
- This shows the traffic for each hour of the specified day.
- To specify the day, you can use the day-specifying box located at the upper right of the gadget.
- When you press the day-specifying box, a calendar appears; when you select a day, the graph for the specified day appears.
- In the calendar, you can specify a day within the past year.
- Month
- This shows the traffic for each day of the specified month.
- To specify the month, you can use the month-specifying box located at the upper right of the gadget.
- When you press the month-specifying box, a calendar appears; when you select a month, the graph for the specified month appears.
- In the calendar, you can specify a month within the past year.
- Year
- This shows the traffic for each month of the specified year.
- To specify the year, you can use the year-specifying box located at the upper right of the gadget.
- When you press the year-specifying box, a calendar appears; when you select a year, the graph for the specified year appears.
- In the year-specifying box, you can specify either the current year or the previous year.
- Live
- When you click the "interface select" button (), the "interface select" dialog box appears.
- From the "interface select" dialog box, select the interface that is shown in the graph.
- The graph depicts the average traffic for each time of the interface.
- Up to eight lines can be shown in the graph, and eight colors are used: blue, salmon pink, yellow, green, gray, sky blue, pink, and purple.
- These colors are assigned when the graph is rendered, starting with the lowest-numbered interface.
- The top of the graph's vertical axis will increase from the minimum of 10 [kbps] to the maximum of 10 [Gbps] according to the traffic.
- The graph's horizontal axis shows the following depending on the duration that you specified.
- Live: current time - the time 120 seconds ago (hh:mm:ss format)
- Day: 0 hours - 23 hours
- Month: Day 1 - day 28, day 29, day 30, day 31
- Year: January - December
- When you place the mouse cursor on a line of the graph, the interface information, the date and time, and the amount of traffic are shown.
- A legend for the currently displayed graph is shown at the bottom of the gadget.
- Using the legend
- Lines are shown only for items that are enabled by their check box in the legend.
- If you clear a check box, that line is not displayed in the graph.
- This is useful if multiple lines are shown overlapping, or if you want to temporarily monitor only a specific interface.
- If the currently-monitored interface does not exist, the indication "The interface being monitored is not selected" appears.
- When you refresh the screen, the rendering interval and the items selected in the legend return to the following default state.
- Rendering interval: Live
- Legend check boxes: all applied
- If the traffic exceeds 60%, an alert () appears.
- When the traffic falls below 50%, the alert is cleared.
- If the "separate" button () is used to show the gadget in a separate window
- The settings prior to separation are applied to the settings of the interface being monitored.
- The rendering interval and the legend settings return to the default state.
- The interface settings that you select in the separate window are also applied to the gadget in the dashboard when you close the separate window.
- If you display a gadget by directly entering the URL of the separate window
- The rendering interval and the legend settings return to the default state.
Resource information (graph)
This shows the CPU usage and memory usage as a graph.
- You can use the "Live,"Day," "Month," and "Year" buttons to change the time period shown by the graph.
- Live
- This shows the traffic of the past two minutes.
- The graph is automatically updated at one-second intervals.
- Day
- This shows the traffic for each hour of the specified day.
- To specify the day, you can use the day-specifying box located at the upper right of the gadget.
- When you press the day-specifying box, a calendar appears; when you select a day, the graph for the specified day appears.
- In the calendar, you can specify a day within the past year.
- Month
- This shows the traffic for each day of the specified month.
- To specify the month, you can use the month-specifying box located at the upper right of the gadget.
- When you press the month-specifying box, a calendar appears; when you select a month, the graph for the specified month appears.
- In the calendar, you can specify a month within the past year.
- Year
- This shows the traffic for each month of the specified year.
- To specify the year, you can use the year-specifying box located at the upper right of the gadget.
- When you press the year-specifying box, a calendar appears; when you select a year, the graph for the specified year appears.
- In the year-specifying box, you can specify either the current year or the previous year.
- Live
- The graph depicts the average usage ratio for each time that is being monitored.
- In the lines of the graph, the blue line is the CPU usage ratio, and the memory usage ratio is shown as a salmon pink line.
- The graph's vertical axis has an upper limit of 100 [%].
- The graph's horizontal axis shows the following depending on the duration that you specified.
- Live: current time - the time 120 seconds ago (hh:mm:ss format)
- Day: 0 hours - 23 hours
- Month: Day 1 - day 28, day 29, day 30, day 31
- Year: January - December
- When you place the mouse cursor on a line of the graph, the object being monitored, the date and time, and the usage ratio are shown.
- A legend for the currently displayed graph is shown at the bottom of the gadget.
- Using the legend
- Lines are shown only for items that are enabled by their check box in the legend.
- If you clear a check box, that line is not displayed in the graph.
- When you refresh the screen, the rendering interval and the items selected in the legend return to the following default state.
- Rendering interval: Live
- Legend check boxes: all applied
- If CPU usage exceeds 80%, an alert () appears.
- If CPU usage falls below 80%, the alert is cleared.
- If memory usage exceeds 80%, an alert () appears.
- If memory usage falls below 80%, the alert is cleared.
- If the "separate" button () is used to show the gadget in a separate window
- The rendering interval and the legend settings return to the default state.
- If you display a gadget by directly entering the URL of the separate window
- The rendering interval and the legend settings return to the default state.
- SWP2 Series Technical Data (GUI)
- Detailed settings
- Interface settings
Interface settings
1. Summary
In this page you can edit the physical interface settings.
2. Top page
This is the top page of the interface settings.
Interface list
- For each interface, this shows the current operating status and settings of the physical interface.
- The items in the table are explained below.
- Check box
- Add a check mark when you want to make settings for multiple interfaces or to initialize settings.
- Port
- This shows the interface name.
- Link
- This shows the interface's link status.
- In the case of other than a LAN port, the port type is shown in parentheses.
- Speed settings
- Displays the speed and communication mode settings.
- EEE
- This shows the operating status of the EEE function.
- Explanation
- This displays the explanatory text that is specified for the interface.
- Check box
- Press the "Setting" button to access a page where you can change the settings of the selected interface.
- If you press the "Set all" button, the settings can be changed for all interfaces whose check box contains a check mark.
- You cannot make a multiple selection that includes ports of differing types.
- The default values are reflected in the settings page of the physical interface.
- When you press the "Return to defaults" button, the settings will be initialized for all interfaces whose check box contains a check mark.
- The default values for each setting are as follows.
- Operation: Enable the interface
- Description: Unspecified
- Speed/communication mode: Automatic
- EEE function: Disabled (Don't use power-conservation Ethernet function)
- The default values for each setting are as follows.
3. Physical interface settings page
In this page you can edit the physical interface settings.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Physical interface settings
- Port
- This shows the name of the interface that you're setting.
- Operation
- Choose the interface's operation from the following.
- Enable the interface
- Disable the interface
- Choose the interface's operation from the following.
- Description
- Sets the description text for the interface.
- You can enter single-byte alphanumeric characters except for the ? character.
- Up to 80 characters can be entered.
- Speed and communication mode
- Choose the interface's speed and communication method from the following.
- For a LAN port
- Automatic
- 1 Gbps / full duplex
- 100 Mbps / full duplex
- 100 Mbps / half duplex
- 10 Mbps / full duplex
- 10 Mbps / half duplex
- For an SFP+ port
- Automatic
- 10 Gbps / full duplex
- For a LAN port
- Choose the interface's speed and communication method from the following.
- EEE function
- The EEE function can be set only for LAN ports.
- Choose the EEE function's operation from the following.
- Disabled (don't use power-conservation Ethernet function)
- Enabled (use power-conservation Ethernet function)
- SWP2 Series Technical Data (GUI)
- Detailed settings
- Link aggregation
Link aggregation
1. Summary
In this page you can make link aggregation settings.
2. Top page
This is the top page for link aggregation.
System settings
- This shows systems settings related to link aggregation.
- The items in the table are explained below.
- LACP system priority
- Shows the LACP priority order specified for the system.
- Mixed-speed mode
- Displays whether the LACP mixed-speed mode is enabled or not.
- Load balance rules
- Shows the load balance settings.
- LACP system priority
- Press the "Settings" button to access the page for making system settings related to link aggregation.
Interface list
- This shows the operating status and settings of the logical interfaces and physical interfaces.
- The items in the table are explained below.
- Check box
- Place a check in this box to delete a logical interface.
- Port
- This shows the interface name.
- Link
- This shows the interface's link status.
- LACP status
- This shows the interface's LACP status as one of the following.
- Standby
- Negotiating
- Ready to communicate
- -
- This shows the interface's LACP status as one of the following.
- LACP priority order
- This shows the priority order for actual operation.
- The priority order is shown as a value of 1–12, which is calculated according to the value of the LACP priority order setting.
- Description
- This displays the explanatory text that is specified for the interface.
- Check box
- Press the "New" button to access a page where you can make settings for a new logical interface.
- Press the "Setting" button to access a page where you can change the settings of the selected logical interface.
- If you press the "Delete" button, all logical interfaces whose check box has a check mark will be deleted.
- You can choose one of the following to specify how the physical interface will operate after the logical interface is deleted.
- Enable
- Disable
- You can choose one of the following to specify how the physical interface will operate after the logical interface is deleted.
- Up to 127 logical interfaces can be specified.
- However, the maximum number of static logical interfaces is 96.
3. System settings
This page lets you make system settings related to link aggregation.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
System settings
- LACP system priority
- Set the LACP system priority.
- The input range is 1–65535.
- LACP mixed-speed mode
- Select whether to enable the LACP mixed-speed mode from the following.
- Disable
- When this function is disabled, physical interfaces with different communication speeds belonging to the LACP logical interface cannot communicate at the same time.
- Enable
- When this function is enabled, physical interfaces with different communication speeds belonging to the LACP logical interface can communicate at the same time.
- Enable this function when you want to aggregate physical interfaces with different communication speeds into an LACP logical interface.
- Disable
- Select whether to enable the LACP mixed-speed mode from the following.
- Load balance rules
- Select the load balance rules from the following.
- Destination MAC address
- Source MAC address
- Destination/source MAC address
- Destination IP address
- Source IP address
- Destination/source IP address
- Destination port number
- Source port number
- Destination/source port number
- Select the load balance rules from the following.
4. Logical interface settings page
In this page you can edit the logical interface settings.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Logical interface settings
- Logical interface
- When making new settings
- Choose the logical interface's type from the following.
- Static logical interface
- LACP logical interface
- Choose the logical interface's type from the following.
- When editing the settings
- This shows the name of the logical interface that you selected.
- When making new settings
- Interface number
- Specify the interface number.
- For a static logical interface, the input range is 1–96.
- For a LACP logical interface, the input range is 1–127.
- This item is shown only when making a new setting.
- Associated ports
- Select the ports that are associated with a logical interface.
- Press the "Select" button to access the "Physical interface list" dialog box.
- In the "Physical interface list" dialog box, add a check mark to a port's check box and press the "OK" button to select an associated port.
- A maximum of 8 ports can be selected for a static logical interface, and a maximum of 12 ports can be selected for an LACP logical interface.
- If you accessed this dialog box with an LACP logical interface selected in the "Logical interface" item, you can specify the following for each associated port.
- Operating mode
- Active
- Passive
- LACP priority order
- 1 - 12
- LACP timeout
- 3 seconds
- 90 seconds
- Operating mode
- Operation
- Choose the logical interface's operation from the following.
- Enable the interface
- Disable the interface
- Choose the logical interface's operation from the following.
- Description
- Sets the description text for the interface.
- You can enter single-byte alphanumeric characters except for the ? character.
- Up to 80 characters can be entered.
- SWP2 Series Technical Data (GUI)
- Detailed settings
- Port authentication
- SWP2 Series Technical Data (GUI)
- Detailed settings
- Port authentication
- Port authentication settings
Port authentication settings
1. Summary
This page is for configuring the port authentication.
To use port authentication, you need to configure the system settings and the interface settings.
You also need to configure the authentication server in Port authentication > Server settings.
2. Top page
This is the top page for the port authentication settings.
System settings
- Displays the port authentication settings for the system.
- The table items are explained below.
- 802.1X authentication
- Displays whether 802.1X authentication is enabled or not for the entire system.
- MAC authentication
- Displays whether MAC authentication is enabled or not for the entire system.
- Web authentication
- Displays whether web authentication is enabled or not for the entire system.
- 802.1X authentication
- Press the "Setting" button to display the page for configuring the system settings.
Interface settings
- Displays the port authentication settings for the interface.
- The table items are explained below.
- I/F
- Displays the interface name.
- Enabled authentication functions
- Displays the enabled authentication functions for the interface.
- Host mode
- Displays the authentication operation mode setting.
- I/F
- Press the "Setting" button to display the page for changing the settings of the selected interface.
- Press the "Specify all" button to configure all interfaces with the check box selected.
- If you press the "Return to defaults" button, the settings will be initialized on all interfaces whose check boxes are selected.
3. System settings page
This page is for configuring the port authentication for the system.
You can also change the detailed settings by pressing the "Advanced settings" button.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
System settings
- Authentication functions to be enabled
- Select the authentication functions to be enabled for the entire system from the following.
- 802.1X authentication
- MAC authentication
- Web authentication
- Select the authentication functions to be enabled for the entire system from the following.
- MAC address format for MAC authentication
- Select the MAC address format for MAC authentication from the following.
- Delimiter (-), Lowercase
- Delimiter (:), Lowercase
- No delimiter, Lowercase
- Delimiter (-), Uppercase
- Delimiter (:), Uppercase
- No delimiter, Uppercase
- Select the MAC address format for MAC authentication from the following.
- Redirect URL after successful web authentication
- Specify the destination URL for redirecting the authenticated device after successful web authentication.
- Enter up to 256 characters using single-byte alphanumeric characters and symbols, excluding ? symbol.
- Clearing authentication status
- Specify whether or not to clear the authentication status of the device periodically.
- The input range of the time to clear is from 0 to 23 o'clock.
- If Clearing authentication status is set in the interface settings, the setting in the interface settings takes precedence.
4. Interface settings page
This page is for configuring the port authentication for the interface.
You can also change the detailed settings by pressing the "Advanced settings" button.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Interface settings
- Applicable interface
- Displays the name of the interface whose settings are to be changed.
- Authentication functions to be enabled
- Select authentication functions to be enabled for the interface from the following.
- 802.1X authentication
- MAC authentication
- Web authentication
- Select authentication functions to be enabled for the interface from the following.
- Host mode
- Select the authentication operation mode for the authentication function from the following.
- Single host mode
- If the device connected to the interface has successfully authenticated, only the device can access.If another device has already authenticated, this device cannot authenticate or access.
- Multi host mode
- If any device connected to the interface has successfully authenticated, all devices connected to the interface can access.
- Multi supplicant mode ( Recommended )
- All devices connected to the interface can individually authenticate, and only the devices successfully authenticated can access.
- Single host mode
- Select the authentication operation mode for the authentication function from the following.
- Guest VLAN
- Specify the guest VLAN.
- Press the "Select" button, and then select a VLAN ID from the "VLAN list" dialog.
- When a guest VLAN is configured, devices that have not successfully authenticated can also access the specified VLAN.
- This cannot be used with web authentication.
- Dynamic VLAN
- Specify whether or not to use dynamic VLAN.
- If you set to use dynamic VLAN, VLANs are dynamically assigned to each device that has successfully authenticated.
- The VLAN to be assigned depends on the authentication server settings.
- Waiting time for a response from device
- Specify the waiting time for a response from the device during authentication.
- The input range is from 1 to 65535 seconds.
- Authentication restriction period after authentication failure
- Specify the period to restrict authentication after the authentication of a device fails.
- The input range is from 1 to 65535 seconds.
- While authentication is restricted, all packets received on the target interface are discarded.
- Re-authentication of authenticated device
- Specify whether or not to periodically re-authenticate the device that has successfully authenticated.
- The input range of the re-authentication interval is from 300 to 86400 seconds.
- Clearing authentication status
- Specify whether or not to clear the authentication status of the device periodically.
- The input range of the time to clear is from 0 to 23 o'clock.
- 802.1X authentication operation mode
- Select the operation mode for 802.1X authentication from the following.
- Operate as authentication interface
- Set as authenticated interface
- Set as unauthenticated interface
- Select the operation mode for 802.1X authentication from the following.
- Forwarding control on unauthenticated ports for 802.1X authentication
- When 802.1X authentication is enabled, specify the communication restriction method for devices that have not successfully authenticated from the following.
- Discard both sending and receiving
- Discard only receiving
- If any of the following conditions are met, this setting is ignored, and the function operates as Discard only receiving.
- Host mode is set to multi-supplicant mode.
- MAC authentication is enabled.
- If the guest VLAN is configured, this setting does not affect the communication restrictions.
- When 802.1X authentication is enabled, specify the communication restriction method for devices that have not successfully authenticated from the following.
- Number of times to send EAPOL packets
- Specify the maximum number of times to send EAPOL packets.
- The input range is from 1 to 10 times.
Server settings
1. Summary
This page is for configuring the authentication server.
Configure the authentication server for port authentication.
To use the built-in RADIUS server as an authentication server, you need to configure the built-in RADIUS server in RADIUS server > Server settings.
2. Top page
This is the top page for the Server settings.
Authentication RADIUS server settings
- Displays the authentication RADIUS server settings.
- The table items are explained below.
- Address
- Displays the authentication server address.
- Port number
- Displays the authentication server port number.
- Address
- Press the "New" button to display the page for configuring a new authentication server.
- Press the "Setting" button to display the page for changing the selected authentication server's settings.
- Press the "Delete" button to delete all authentication servers with the check box selected.
- Up to 8 authentication server settings can be created.
Common detailed settings
- Displays the common detailed settings.
- The table items are explained below.
- Waiting time for a response per server
- Displays the waiting time for a response per server.
- Number of times to resend requests to server
- Displays the number of times to resend requests to the server.
- Server usage restriction period
- Displays the period for server usage restriction.
- NAS-Identifier attribute to be notified to the server
- Displays the NAS-Identifier attribute to be notified to the server.
- Waiting time for a response per server
- Press the "Setting" button to display the page for changing the common detailed settings.
3. Authentication RADIUS server settings page
This page is for configuring the authentication RADIUS server.
You can also change the detailed settings by pressing the "Advanced settings" button.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Authentication RADIUS server settings
- Server type
- Select the authentication server type from the following.
- Use built-in RADIUS server
- Use external RADIUS server
- If you select Use built-in RADIUS server, the following settings are specified with predetermined values.
- Server address
- Server port number
- Shared password with server
- This item appears only for new settings.
- Select the authentication server type from the following.
- Server address
- Specify the address of the authentication server.
- Enter the address in one of the following formats.
- IPv4 address : XXX.XXX.XXX.XXX
- IPv6 global address : XXXX:XXXX::XXXX:XXXX
- IPv6 link-local address : fe80::X%vlanN
- To change the setting, you need to start over from a new setting.
- Server port number
- Specify the port number of the authentication server.
- The input range is from 0 to 65535.
- Shared password with server
- Specify the shared password with the authentication server.
- Enter up to 64 characters using single-byte alphanumeric characters and symbols, excluding ? and space symbols.
- If you omit the input, the shared password set in the common detailed settings is applied.
- Waiting time for a response from server
- Specify the waiting time for a response from the authentication server.
- The input range is from 1 to 1000 seconds.
- If you omit the input, the waiting time for a response per server set in the common detailed settings is applied.
- Number of times to resend requests to server
- Specify the number of times to resend requests to the server when the authentication server's response times out.
- The input range is from 0 to 100 times.
- If you omit the input, the number of times to resend requests to the server set in the common detailed settings is applied.
4. Common detailed settings page
This page is for changing the common detailed settings of the authentication server.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Common detailed settings
- Shared password with server
- Specify the shared password with the authentication server.
- Enter up to 64 characters using single-byte alphanumeric characters and symbols, excluding ? and space symbols.
- Waiting time for a response from server
- Specify the waiting time for a response from the authentication server.
- The input range is from 1 to 1000 seconds.
- Number of times to resend requests to server
- Specify the number of times to resend requests to the server when the authentication server's response times out.
- The input range is from 0 to 100 times.
- Server usage restriction period
- Specify the period to restrict the use of the authentication server temporarily for when the server does not reply after resending requests.
- The input range is from 0 to 1440 minutes.
- NAS-Identifier attribute to be notified to the server
- Specify the NAS-Identifier attribute to be notified to the authentication server.
- Enter up to 253 characters using single-byte alphanumeric characters and symbols, excluding ? symbol.
- SWP2 Series Technical Data (GUI)
- Detailed settings
- Port authentication
- Authentication management
Authentication management
1. Summary
This page is for managing authentication.
You can check and delete the authentication information of the device.
2. Top page
This is the top page for the authentication management.
Authentication information of devices
- Displays the authentication information for each device.
- The table items are explained below.
- Port
- Displays the interface to which the device is connected.
- Name
- Displays the name of the device.
- MAC address
- Displays the MAC address of the device.
- Authentication method
- Displays the authentication method used to authenticate the device.
- State
- Displays the authentication status of the device.
- VLAN
- Displays the VLAN to which the device belongs.
- Port
- A maximum of 100 items can be displayed for one page. Press or or enter a numeric value to switch between pages.
- You can press the sort switch to sort by each item.
- Press the "Update" button to update the device's authentication information to the latest status.
- Press the "Delete" button to delete all authentication information with the check box selected.
Create VLAN
1. Summary
In this page you can create or delete VLANs, and change the IP address.
2. Top page
This is the top page for creating a VLAN.
VLAN list
- Information for the defined VLANs is displayed
- IPv4 primary address is displayed in bold.
- A maximum of 20 items can be displayed for one page. Press or or enter a numeric value to switch between pages.
- You can press the sort switch to sort by each item.
- Press the [New] button to access a page where you can create a new VLAN
- Press the [Setting] button to access a page where you can change the settings of the selected VLAN
- If you press the [Delete] button, all VLANs whose check box has a check mark will be deleted
- The following VLAN cannot be deleted
- Default VLAN ( VLAN ID = 1 )
- Private VLAN
- The following VLAN cannot be deleted
- Up to 256 VLANs can be created including the default VLAN (VLAN ID = 1).
3. VLAN settings page
In this page you can create a new VLAN or edit the settings of an already-defined VLAN.
Enter the settings, and then press the [Confirm] button.
If there are no mistakes in the input content of the confirmation screen, press the [OK] button.
VLAN settings
- VLAN ID
- To create a new VLAN, enter the desired VLAN ID within the valid range (2-4094)
- The smallest ID of the unregistered VLAN IDs is entered as the default value
- If an already-registered VLAN ID is entered, it is handled as a change in settings
- When changing the settings, it is not possible to change the VLAN ID
- To create a new VLAN, enter the desired VLAN ID within the valid range (2-4094)
- Name
- Specify the name of the VLAN using up to 32 single-byte alphanumeric characters and symbols.
- The default VLAN (VLAN ID = 1) cannot be renamed
- A space and “?” cannot be used in the name of the VLAN.
- Specify the name of the VLAN using up to 32 single-byte alphanumeric characters and symbols.
- Frame transmission
Select frame forwarding from the following items.
- Enable frame transmission
- Disable frame transmission
- Frame forwarding cannot be disabled for the default VLAN (VLAN ID = 1)
- IPv4 address
- For IPv4 addresses, you can specify one primary address and up to 4 secondary addresses for each VLAN.
- You can set up to 8 of these addresses on the entire system.
- You can set this item only for VLANs with frame forwarding enabled.
- Set each address as follows.
- Primary address
- Select the IP address setting from the following.
- Not set
- Obtain automatically using DHCP
- Selecting the check box for "Setting the link local address when auto-acquire does not work" will enable the Auto IP function.
- The Auto IP function can be enabled for only one VLAN.
- You can specify a host name to notify the DHCP server.
- Selecting the check box for "Setting the link local address when auto-acquire does not work" will enable the Auto IP function.
- Specify a fixed IP address
- Enter the IP address and subnet mask
- You can set description or note about the IP address as a label.
- If you select Obtain automatically using DHCP or Specify a fixed IP address, the various server configurations are changed for the VLAN that you configure as follows.
- You can access the HTTP server and the TELNET server from the VLAN interface. (To enable access to the SSH server and the TFTP server, you need additional configurations.)
- No changes are made to the configuration of a server that already has 8 VLAN interfaces registered.
- Select the IP address setting from the following.
- Secondary address
- Enter the following settings in the table.
- Address
- Enter the IP address and subnet mask
- Label
- You can set description or note about the IP address as a label.
- Address
- Press the icon to add a configuration form.
- Press the "Delete" button to delete a configuration form.
- Enter the following settings in the table.
- Primary address
- IPv6 address
- For IPv6 addresses, you can specify up to 5 global addresses and one link-local address for each VLAN.
- You can set up to 8 of these addresses on the entire system.
- Select whether the IPv6 address will be enabled or disabled from the following items.
- Disable IPv6
- Enable IPv6
- If you select Enable IPv6, the various server configurations are changed for the VLAN that you configure as follows.
- You can access the HTTP server and the TELNET server from the VLAN interface. (To enable access to the SSH server and the TFTP server, you need additional configurations.)
- No changes are made to the configuration of a server that already has 8 VLAN interfaces registered.
- Set each address as follows.
- Global address
- Enter the following settings in the table.
- Type
- Select from the following items.
- Obtain automatically using RA
- Specify the address
- Select from the following items.
- Address
- Enter the IP address and subnet mask
- Type
- Press the icon to add a configuration form.
- Press the "Delete" button to delete a configuration form.
- Enter the following settings in the table.
- Link local address
- Enter an IP address.
- Global address
Tag VLAN
1. Summary
In this page you can make settings for tagged VLANs.
2. Top page
This is the top page for tagged VLANs.
Tag VLAN settings
- The various settings for tagged VLANs are shown for each LAN/SFP port and logical interface
- "Frame types that can be received" is displayed according to the operating mode and the VLAN settings. (This item cannot be set in the settings page.)
- Press the "Setting" button to access a page where you can change the settings for the tagged VLAN of the selected interface
- If you press the "Specify all" button, the settings can be changed for all LAN/SFP ports and logical interfaces whose check box contains a check mark
- If you press the "Return to defaults" button, the settings will be initialized for all LAN/SFP ports and logical interfaces whose check box contains a check mark
- Default settings for a tagged VLAN are as follows
- Operating mode: Access
- Assigned VLAN: Default VLAN (VLAN ID = 1)
- Default settings for a tagged VLAN are as follows
- Settings for the LAN/SFP port assigned to a private VLAN cannot be changed
- Settings for the LAN/SFP port assigned to a voice VLAN cannot be changed
- If the operation mode is "Trunk," both the native VLAN and the trunk VLAN are shown as assigned VLANs.
3. Tagged VLAN settings page
In this page you can make various settings related to tagged VLANs.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Tag VLAN settings
- Port
- The LAN/SFP+ port for which settings are made is shown
- Operating mode
- Access
- The corresponding port is specified as the access (untagged) port
- Trunk
- The corresponding port is specified as the trunk (tagged) port
- Access
- Access VLAN
- This item is shown only if the operating mode is "Access."
- From the list, select the access port's assigned VLAN
- However, the following cannot be selected as access VLAN.
- Private VLAN
- VoiceVLAN
- VLAN for which frame forwarding is disabled
- Native VLAN
- This item is shown only if the operating mode is "Trunk."
- From the list, select the assignment-destination VLAN (native VLAN) for untagged frames received from the trunk port.
- However, the following cannot be selected as native VLAN.
- VLAN selected as trunk VLAN
- Private VLAN
- VoiceVLAN
- VLAN for which frame forwarding is disabled
- Trunk VLAN
- This item is shown only if the operating mode is "Trunk."
- Specify the assignment-destination VLAN (trunk VLAN) for tagged frames received at the trunk port.
- When you press the "Select" button, a list of the selectable VLAN IDs appears in a separate window
- However, the following cannot be selected as trunk VLAN.
- VLAN selected as native VLAN
- Private VLAN
- VoiceVLAN
- VLAN for which frame forwarding is disabled
- Place a check mark in the check box of the VLAN ID that you want to specify, and press the "Confirm" button
- Ingress filter
Select the ingress filter from the following items. This item is shown only if the operating mode is "Trunk."
- Enabled ( Receive only if the VLAN ID of the incoming frame is the same as the associated VLAN )
- Disabled ( Receive all frames )
Multiple VLAN
1. Summary
In this page you can make settings for multiple VLANs.
Multiple VLAN is a function to prohibit communication between groups, by separating the ports into groups on a single switch.
A single port can belong to multiple groups, and the same network address can be allocated between different groups.
When using a port-based VLAN in conjunction with tagged VLAN, ports that belong to different VLANs cannot communicate, even though the port may belong to the same multiple VLAN group.
2. Top page
This is the top page for multiple VLANs.
Tag VLAN settings
- The multiple VLAN group settings are shown for each LAN port and logical interface.
- Press the "Setting" button to access a page where you can change the multiple VLAN settings for the selected interface.
- If you press the "Set all" button, the settings can be changed for all LAN ports and logical interfaces whose check boxes are selected.
- When you press the "Return to defaults" button, the settings will be initialized for all LAN ports and logical interfaces whose check boxes are selected.
- The default setting is for all interfaces to belong to no groups.
3. Multiple VLAN settings page
In this page you can make settings related to multiple VLANs.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Multiple VLAN settings
- Port
- This shows the name of the LAN port and logical interface that you're setting.
- Group
- Selects the joined VLAN group.
- Press the "Select" button to display the “Multiple VLAN Group Selection” dialog box.
- In the "Multiple VLAN Group Selection" dialog box, select the group by adding a check mark, and press the "OK" button to select the joined group.
- SWP2 Series Technical Data (GUI)
- Detailed settings
- MAC address table
MAC address table
1. Summary
In this page you can edit the settings of the MAC address table function.
2. Top page
This is the top page for the MAC address table.
Basic settings for MAC address learning function
- The current settings for the MAC address learning function are shown
- When you press the "Setting" button, a page where you can change the MAC address learning function settings will appear
Static MAC address table settings
- The static MAC address table is shown as a list
- A maximum of 20 items can be displayed for one page. Press or , or enter a numeric value to switch between pages.
- You can press the sort switch to sort by each item.
- If you press the "New" button, a page appears in which you can create a new static MAC address entry.
- If you press the "Setting" button, a page appears in which you can edit the settings of the selected static MAC address entry.
- If you press the "Delete" button, all static MAC address entries whose check box has a check mark will be deleted.
- Up to 256 static MAC address entries can be created from the Web GUI.
3. MAC address learning function basic settings page
In this page you can make settings for the MAC address learning function.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Basic settings for MAC address learning function
- MAC address learning function
Select the MAC address learning function from the following items.
- Use MAC address learning function
- Don't use MAC address learning function
- Aging time for dynamic entries
- Specify a setting in the range of 10 seconds to 400 seconds. The default value is 300 seconds
4. Static MAC address table settings page
In this page you can make static MAC address settings.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Static MAC address settings
- Type
Choose from the following items as the type of MAC address to be registered in the static MAC address table.
- Register a unicast MAC address
- Register a multicast MAC address
- Destination MAC address
- Enter the MAC address in the format of hhhh.hhhh.hhhh.
- Frame processing
From the following items, select the processing for frames sent to the destination MAC address.
- Forward frames that are being sent to the destination MAC address
- Discard frames that are being sent to the destination MAC address
- If registering a multi-cast MAC address, "Forward" is the only frame processing that can be specified
- Destination VLAN ID
- Select the forwarding-destination VLAN ID from those that are registered in the VLAN database
- Forwarding destination interface
- When you press the "Select" button, the interfaces associated with the forwarding-destination VLAN ID are shown as a list
Place a check mark in the check box of the interface(s) that you want to use as a forwarding-destination interface, and press the "Confirm" button
- If registering a unicast MAC address, you can specify one interface
- If registering a multicast MAC address, you can specify multiple interfaces
- When you press the "Select" button, the interfaces associated with the forwarding-destination VLAN ID are shown as a list
- SWP2 Series Technical Data (GUI)
- Detailed settings
- Spanning tree
Spanning tree
1. Summary
This page is for configuring the spanning tree.
If you want to use the spanning tree function, you need to enable both the system settings and the interface settings.
If the spanning tree is disabled in the system settings, the spanning tree does not work on all interfaces regardless of the interface settings.
2. Top page
This is the top page for the spanning tree.
System settings
- Displays the spanning tree setting for the system.
- Press the "Setting" button to display the page for configuring the system settings.
Interface settings
- Displays the spanning tree setting for each interface.
- The table items are explained below.
- I/F
- Displays the interface name.
- Spanning tree function
- Displays whether the spanning tree function is enabled or not on the interface.
- I/F
- Press the "Setting" button to display the page where you can change the settings of the selected interface.
- If you press the "Specify all" button, the settings can be changed for all interfaces whose check box is selected.
- If you press the "Return to defaults" button, the settings will be initialized on all interfaces whose check boxes are selected.
3. System settings page
This page is for configuring the spanning tree for the system.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
System settings
- Spanning tree function
- Select the spanning tree function setting from the following items.
- Use
- Don't use
- Select the spanning tree function setting from the following items.
4. Interface settings page
This page is for configuring the spanning tree for the interface.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Interface settings
- Applicable interface
- Displays the name of the interface whose settings are to be changed.
- Spanning tree function
- Select the spanning tree function setting from the following items.
- Use
- Don't use
- Select the spanning tree function setting from the following items.
Routing
1. Summary
In this page you can make routing settings.
2. Top page
This is the top page for routing settings.
Routing function basic settings
- The current settings for the routing function are shown.
- When you press the "Setting" button, a page where you can change the routing function settings will appear.
Routing table
- This shows details of the routing table
- The items in the table are explained below.
- Check box
- Place a check in this box to delete static route information.
- Enabled routes
- A route that is used for actual communication is indicated by Enabled.
- A route that is not used for actual communication is indicated by Disabled.
- Type
- One of the following is shown as the type of route information.
- static
- connected
- One of the following is shown as the type of route information.
- Destination
- This shows the destination network address of the route information.
- If the destination is the default gateway, this indicates default.
- Gateway
- This shows the gateway of the route information.
- If set to discard packets, this indicates Null.
- Priority order
- This shows the administrative distance of the route information.
- Check box
- If you press the "New" button, a page appears in which you can make new settings for static route information.
- If you press the "Setting" button, a page appears in which you can edit the settings of the selected static route information.
- If you press the "Delete" button, all static route information whose check box has a check mark will be deleted.
- Static route information entries show a check box and a "Setting" button.
- Up to 512 static route information entries can be created.
- Up to 128 static route information entries can be displayed.
- When 128 static route information entries are displayed, the "New" button is disabled.
3. Routing function basic setting page
In this page you can specify whether the routing function is used.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Routing function basic setting page
- Routing function
Select the routing function from the following items.
- Use routing function
- Don't use routing function
4. Static route information settings page
In this page you can make static route information settings.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Set static route information
- Destination network
- When making new settings
- Select the destination network from the following
- Specify the network address
- Enter the destination network address
- Default gateway
- Specify the network address
- Select the destination network from the following
- When editing the settings
- This shows the destination network address
- When making new settings
- Gateway
- Select the gateway from the following
- Specify IP address
- Enter the gateway's IP address
- Discard without forwarding packets
- Specify IP address
- Select the gateway from the following
- Priority order
- Enter the priority order
- The input range is 1–255
DNS client
1. Summary
In this page you can make DNS client settings.
2. Top page
This is the top page for DNS client settings.
DNS client settings
- This page shows the DNS client settings.
- The items in the table are explained below.
- DNS client function
- The setting indicates whether the DNS client function is enabled or disabled.
- DNS server address
- This shows the setting for the DNS server address that is queried to resolve a name.
- Default domain
- This shows the default domain setting.
- Search domain
- This shows the search domain setting.
- DNS client function
- Press the "Setting" button to access a page where you can make DNS client settings.
3. DNS client settings page
In this page you can make DNS client settings.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
DNS client settings
- DNS client function
- Choose the operation of the DNS client function from the following.
- Enable
- Disable
- Choose the operation of the DNS client function from the following.
- DNS server address
- This specifies the DNS server address.
- The server address can be specified either as an IPv4 address or an IPv6 address.
- You can specify up to three server addresses.
- Default domain
- This specifies the default domain.
- Up to 256 characters can be entered.
- Search domain
- This specifies the search domain.
- Up to 256 characters can be entered.
- You can specify up to six search domains.
- SWP2 Series Technical Data (GUI)
- Detailed settings
- IGMP snooping
IGMP snooping
1. Summary
In this page you can edit the settings of the IGMP snooping function.
2. Top page
This is the top page for IGMP snooping.
IGMP snooping function settings
- IGMP snooping function settings are shown for each VLAN ID that is defined
- A maximum of 20 items can be displayed for one page. Press or , or enter a numeric value to switch between pages.
- When you press the "Setting" button, a page where you can change the IGMP snooping function settings for the selected VLAN ID will appear
- If you press the "Specify all" button, the settings can be changed for all VLAN IDs whose check box contains a check mark
- If you press the "Return to defaults" button, the settings will be initialized for all VLAN IDs whose check box contains a check mark
- Default settings for the IGMP snooping function are as follows
- IGMP snooping function: Enabled
- IGMP version: IGMPv3
- IGMP querier: Disabled
- IGMP query transmission interval: 125 seconds
- TTL check: Enabled
- Default settings for the IGMP snooping function are as follows
3. IGMP snooping function settings page
In this page you can make various settings for the IGMP snooping function.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
IGMP snooping function settings
- VLAN ID
- The VLAN ID for which settings are being made is shown
- IGMP snooping function
- Enabled ( Control transmission of IP multicast packets )
- Enables the IGMP snooping function By monitoring (snooping) the IGMP messages that are exchanged between the receiving equipment and the multicast router, multicast packet flooding can be controlled, limiting the network bandwidth that is used.
- Disabled ( Flood IP multicast packets )
- Disables the IGMP snooping function Multicast packets are always forwarded to all ports in the same VLAN.
- Enabled ( Control transmission of IP multicast packets )
- IGMP version
Select the IGMP version from the following items.
- IGMPv3
- IGMPv2
- IGMP querier
- Enabled ( Periodically transmit IGMP queries )
- IGMP query transmission function is enabled. The transmission interval can be specified in the range of 20 seconds to 18000 seconds
- Disabled ( Don't transmit IGMP queries )
- IGMP query transmission function is disabled
- Enabled ( Periodically transmit IGMP queries )
- TTL check
Select the TTL check from the following items.
- Enabled ( IGMP packets other than TTL=1 are discarded )
- Disabled ( IGMP packets other than TTL=1 are corrected to TTL=1 and transmitted )
- SWP2 Series Technical Data (GUI)
- Detailed settings
- Access lists
- Creating an access list
Creating an access list
1. Summary
In this page you can create or delete access lists, and modify their settings.
2. Top page
This is the top page for creating an access list.
List of access lists
- Information for the access lists that have been created will be shown.
- The items in the table are explained below.
- ID
- The access list ID will be shown.
- Type
- The access list type will be shown.
- Comment
- The comment specified for the access list will be shown.
- ID
- A maximum of 20 items can be displayed for one page. Press or , or enter a numeric value to switch between pages.
- You can press the sort switch to sort by each item.
- Press the "New" button to access a page where you can create a new access list.
- Press the "Setting" button to access a page where you can change the settings of the selected VLAN.
- Press the "Delete" button to delete all VLANs whose check boxes are selected.
- Access lists that are assigned to class maps cannot be deleted.
- On this page, you can reference and configure up to 512 access lists.
3. Access list settings page
In this page you can create new access lists, and modify the settings of access lists that are already created.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Set access list
- Access lists
- Select from the following access list types.
- IPv4 access list
- IPv6 access list
- MAC access list
- When changing the settings, you cannot change the access list type.
- Select from the following access list types.
- Access list ID
- Access list IDs can be set within the following range, according to the access list type.
- For IPv4 access lists
- 1 - 2000
- For IPv6 access lists
- 3001 - 4000
- For MAC access lists
- 2001 - 3000
- For IPv4 access lists
- When changing the settings, you cannot change the access list ID.
- Access list IDs can be set within the following range, according to the access list type.
- Comment
- Specify the comment using up to 32 single-byte alphanumeric characters and symbols.
- You cannot use the question make character (?) in the comment text.
- Control parameters
- Specifying the access list control parameters
- On this page, you can configure up to 256 control parameters for a single access list.
- Press the “Add” button to open the “Control parameter settings” dialog box.
- On the “Control parameter settings” dialog box, you can specify which traffic to allow and to deny from the following items.
- Operation
- From the following items, select the operation to perform for the traffic that matches the parameters.
- Allow
- Deny
- From the following items, select the operation to perform for the traffic that matches the parameters.
- Source address
- Select the source address to target from the following items.
- All addresses
- Specify host address
- Specify network address
- Cannot be specified for a MAC access list
- Specify address with wildcard bit
- Specify address and wildcard mask
- Cannot be specified for a IPv6 access list
- When the wildcard mask bit is 1, the corresponding bit for the address will not be checked.
- Specify parameters for subnet 192.168.1.0/24 as shown below.
- Address: 192.168.1.0; wildcard mask: 0.0.0.255
- For the conditions for vendor code 00-A0-DE-*-*-*, specify as shown below.
- Address: 00A0.DE00.0000; wildcard mask: 0000.00FF.FFFF
- Select the source address to target from the following items.
- Destination address
- The items to configure for destination addresses are equivalent to those of source addresses.
- Cannot be specified for a IPv6 access list
- Protocol
- Select the protocol to target from the following items.
- All protocols
- TCP
- UDP
- ICMP
- Specify the protocol number
- The input range for the protocol number is 0–255.
- When selecting TCP or UDP as a protocol, you cannot specify the source port number or the destination port number.
- You can specify either the same port number or specify a range.
- The input range for the port number is 0–65535.
- When selecting TCP as a protocol, you can specify the parameters for the TCP header control flag.
- If more than one bit is specified, it works under the AND condition. Packets with all the specified bits set to 1 are targets.
- For example, you can deny only TCP connections from outside to inside by allowing only packets with ACK bit or RST bit of 1 for the interface's direction.
- In this case, you need to set two control conditions. One is to allow packets with an ACK bit value of 1, and the other is to allow packets with an RST bit value of 1.
- Cannot be specified for a MAC access list or a IPv6 access list
- Select the protocol to target from the following items.
- Operation
- Press the "Delete" button to delete the corresponding control parameters.
- Press the or icon to change order in which the control parameters are applied.
- When evaluating the traffic, control parameters with later numbers will be evaluated first. If they match the parameters, any succeeding parameters will not be checked.
- SWP2 Series Technical Data (GUI)
- Detailed settings
- Access lists
- Apply access list
Apply access list
1. Summary
On this page, you can apply access lists to an interface.
2. Top page
This is the top page for applying access lists.
Interface list
- The access list information to be applied to an interface will be shown.
- The items in the table are explained below.
- I/F
- This shows the interface name.
- Access list (IN)
- The following information for the access list to be applied to the input side of the interface will be shown.
- ID
- The access list ID will be shown.
- Type
- The access list type will be shown.
- Comment
- The comment specified for the access list will be shown.
- ID
- The following information for the access list to be applied to the input side of the interface will be shown.
- Access list (OUT)
- Information for the access list to be applied to the input side of the interface will be shown.
- Information similar to that of the access list (IN) will be shown.
- I/F
- Press the "Setting" button to access a page where you can change the settings of the selected interface.
- If you press the "Set all" button, the settings can be changed for all interfaces whose check box contains a check mark.
- When you press the "Return to defaults" button, the settings will be initialized for all interfaces whose check box contains a check mark.
3. Page for selecting the access list to apply
On this page, you can select the access lists to apply to an interface.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Selecting the access lists to apply
- Applicable interface
- The interface for which the access list is applied will be shown.
- Access list to apply (IN)
- Select the access list to apply to the input side of the interface.
- Press the "Select" button to display the “Select Access List” dialog box.
- In the "Select Access List” dialog box, select the check box for the access list and press the "Confirm" button to select the access list to apply.
- Press the "Details" button in the “Select Access List” dialog to display the settings for the applicable access list.
- For IPv4 access lists that specify a range of port numbers, these can only be applied to a single interface for the entire system.
- 512 control parameters can be applied to an interface for the entire system.
- Applying an access list to a single interface will reduce the number of applicable control parameters by the number of control parameters included in the access list.
- For instance, when you apply an access list in which five control parameters are specified to the input side of port 1.1, the number of applicable control parameters is reduced by five.
- Note that since the control parameters are used internally by the system and by other functions, the number of control parameters that can actually be applied will be less than 512.
- Access list to apply (OUT)
- Select the access list to apply to the output side of the interface.
- The setting item contents for the access list (OUT) that is applied are equivalent to those of the access list (IN) that is applied.
- IPv4 access lists that specify a range of port numbers cannot be applied to the output side.
- MAC access lists cannot be applied to the output side of an interface.
- Access lists cannot be applied to the output side of a logical interface.
QoS
1. Summary
In this page you can edit the settings of the QoS (Quality of Service) function.
You can enable/disable the QoS function, and change the trust mode.
2. Top page
This is the top page for QoS.
QoS function basic settings
- The current setting is shown as to whether the QoS function is used
- Press the "Setting" button to access a page where you can change the settings
- In order to enable the QoS function, you must enter the CLI's global configuration mode, and then disable flow control.
QoS function settings
- The trust mode setting used by the QoS function is shown for each LAN/SFP+ port
- Press the "Setting" button to access a page where you can change the settings of the selected LAN/SFP+ port
- If you press the "Specify all" button, the settings can be changed for all LAN/SFP+ ports whose check box contains a check mark
- If you press the "Return to defaults" button, the settings will be initialized for all LAN/SFP+ ports whose check box contains a check mark
- The default trunk mode setting for all ports is "CoS"
- If the settings do not use the QoS function, QoS function settings cannot be made
3. QoS function basic settings page
In this page you can specify whether the QoS function is used.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Be aware that if the settings do not use the QoS function, all QoS-related settings will be cleared.
QoS function basic settings
- QoS function<
- Don't use QoS function
- The QoS function will be disabled. At this time, all QoS settings will be cleared.
- Use QoS function
- The QoS function will be enabled. QoS-related settings and commands can be executed.
- Don't use QoS function
4. QoS function settings page
Set the "Trust mode" setting which means whether the transmission queue is determined based on the packet's CoS value or DSCP value, or on the priority order specified for the port.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
QoS function settings
- Port
- The LAN/SFP+ port for which settings are made is shown
- Trust mode
- Use CoS value to determine transmission queue
- The packet's CoS value and the "CoS - Transmission queue ID conversion table" are used to determine the transmission queue
- If the received packet is an untagged packet, the default CoS value is applied
- For details on checking and changing the default CoS value and the "CoS - Transmission queue ID conversion table," refer to the command reference
- Use DSCP value to determine transmission queue
- The packet's DSCP value and the "DSCP - Transmission queue ID conversion table" are used to determine the transmission queue
- For details on checking and changing the "DSCP - Transmission queue ID conversion table," refer to the command reference
- Use the priority order specified for the port to determine the transmission queue
- The transmission queue is determined by the "port priority"
- As the port priority, select the transmission queue that is assigned, in the range of 0–7
Higher numbers are a higher priority order; with the default setting, 2 is selected
- The setting can be changed only if the trust mode is set to "port priority"
- If a policy map is applied to the LAN/SFP+ port, you cannot change the trust mode setting.
- Use CoS value to determine transmission queue
- SWP2 Series Technical Data (GUI)
- Detailed settings
- RADIUS server
Server settings
1. Summary
This page is for performing operations related to the certificate authority and RADIUS server.
2. Top page
This is the top page for the RADIUS server.
Certificate authority management
- Press the “Next” button to the right of “Create certificate authority” to begin the process of creating a certificate authority.
- Press the “Next” button to the right of “Delete certificate authority” to begin the process of deleting the certificate authority.
- Press the “Next” button to the right of “Backup/restore files and settings related to certificate authority” to begin the process of backing up or restoring.
RADIUS server settings
- Displays the settings for the RADIUS server.
- The table items are explained below.
- RADIUS server usage
- Displays whether a RADIUS server is to be used or not.
- If a RADIUS server is to be used, the port number will be displayed.
- Interfaces that can access the RADIUS server
- Displays the interfaces that can access the RADIUS server.
- Reauthentication interval configured for authenticator
- Displays the settings for the reauthentication interval configured on the authenticator by the RADIUS server.
- Authentication method
- Displays the authentication method settings used by the RADIUS server.
- RADIUS server usage
RADIUS client list
- Displays the RADIUS client settings.
- The table items are explained below.
- Check box
- Select the check box to delete the RADIUS client settings.
- IP address
- Displays the RADIUS client address.
- Check box
- A maximum of 20 items can be displayed for one page. Press or or enter a numeric value to switch between pages.
- You can press the sort switch to sort by each item.
- Press the “New” button to access a page where you can configure the settings for a new RADIUS client.
- Press the “Setting” button to access a page where you can change the selected RADIUS client settings.
- Press the “Delete” button to delete all RADIUS clients whose check boxes are selected.
- On this page, you can configure up to 100 RADIUS clients.
3. Certificate authority creation page
This is the certificate authority creation page.
Enter the certificate authority name, and then press the "Confirm" button.
If there are no mistakes in the input content confirmation screen, press the "OK" button.
If a certificate authority already exists, you will not be able to create a certificate authority.
Create a certificate authority
- Name
- Specifies the certificate authority name.
- Enter from 3 to 32 single-byte alphanumeric characters/symbols, with the following exceptions: \ [ ] / " ? space
- You cannot set the name as DEFAULT.
- If this is omitted, the name YAMAHA_SWITCH will be automatically set.
4. Certificate authority deletion page
This is the certificate authority deletion page.
Press the “Execute” button to delete the certificate authority.
Deleting the certificate authority will delete all RADIUS-related settings, certificates and so on.
5. Backup and restore page
This page is for backup/restore of settings related to certificate authorities.
Enter the contents, and then press the "Confirm" button.
If there are no mistakes in the input content confirmation screen, press the "OK" button.
The following files and settings will be backed up and restored.
- Certificate authority
- Various certificates
- RADIUS client settings
- RADIUS user settings
Backup and restore
- Content to execute
- Select whether to backup or to restore.
- When “Restore” is selected, press the “Select file” button to specify the file to restore.
- zip file password
- Enter up to 32 single-byte alphanumeric characters/symbols, with the following exceptions: # & ^ \ ; | ` { }
- When backing up, enter the password set for the backup file.
- When restoring, enter the password set for the backup file when it was backed up.
6. RADIUS server settings page
In this page you can configure the settings for a RADIUS server.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
RADIUS server settings
- RADIUS server usage
- Select below whether a RADIUS server will be used.
- Use
- Don't use
- When Use is selected, specify the port number.
- Input a port number from 1024 to 65535.
- When Use is selected, a certificate authority is created when the settings are made, if one does not already exist.
- Select below whether a RADIUS server will be used.
- Interfaces that can access the RADIUS server
- Press the "Select" button to display the "VLAN interface list" dialog box.
- You can select the port check box in the "VLAN interface list" dialog box and press the "Confirm" button to select the associated interface.
- Up to 7 VLAN interfaces can be selected.
- Reauthentication interval configured for authenticator
- Select the reauthentication interval configured on the authenticator from the options below.
- 3600 Seconds
- 43200 Seconds
- 86400 Seconds
- 604800 Seconds
- Select the reauthentication interval configured on the authenticator from the options below.
- Authentication method
- Select the authentication method used by the RADIUS server from the methods below.
- PAP
- PEAP
- EAP-MD5
- EAP-TLS
- EAP-TTLS
- Select the authentication method used by the RADIUS server from the methods below.
7. RADIUS client settings page
This page is for configuring the RADIUS client settings.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
RADIUS client settings
- IP address
- Specifies the RADIUS client address.
- Enter IPv4 addresses using the XXX.XXX.XXX.XXX format.
- Enter IPv6 addresses using the XXXX:XXXX::XXXX.XXXX format.
- When the settings are changed, the IP address of the selected RADIUS client will be displayed as text.
- Secret text string
- Specifies the secret text string of the RADIUS client.
- Enter up to 64 single-byte alphanumeric characters/symbols, with the following exceptions: \ [ ] " ? space
User management
1. Summary
This page is for configuring the RADIUS user settings.
2. Top page
This is the top page for RADIUS users.
User settings
- Displays the settings for the RADIUS user.
- The table items are explained below.
- Check box
- Select the check box to delete the RADIUS user settings.
- User ID
- Displays the user ID for the RADIUS user.
- Name
- Displays the name of the RADIUS user.
- Authentication method
- Displays the authentication method for the RADIUS user.
- VLAN
- Displays the VLAN that can be accessed by the RADIUS user.
- Check box
- Input the text string in the text box at the top of the table, and press the icon to search for user information.
- The drop-down list box to the left of the text box lets you select one of the following items to filter the search parameters even further.
- None
- User ID
- Name
- Authentication method
- VLAN
- A maximum of 100 items can be displayed for one page. Press or or enter a numeric value to switch between pages.
- You can press the sort switch to sort by each item.
- Press the “New” button to display a page where you can create new settings for the RADIUS user.
- Press the “Setting” button to access a page where you can change the settings of the selected RADIUS user.
- Press the “Delete” button to delete the settings for all RADIUS users whose check boxes are selected.
- Press the “Import” button to display a page where you can import settings for the RADIUS user.
- Press the “Export” button to export the settings for RADIUS users as a CSV file.
- On this page, you can configure up to 2000 RADIUS users.
3. User settings page
This page is for configuring the RADIUS user settings.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
User settings
- Select an authentication function
- Select the authentication method used by the RADIUS user from the methods below.
- 802.1X
- MAC
- Web
- None
- When the authentication method is selected, the items that must be entered and the items that do not need to be entered for the selected authentication function will become clear.
- When using a Yamaha device as the authenticator, we recommend that you select an authentication function.
- When Not specified is selected, all items will become selectable.
- When using a non-Yamaha device as the authenticator, we recommend that you select Not specified.
- When changing the settings, it is not possible to select anything besides Not specified.
- Select the authentication method used by the RADIUS user from the methods below.
- User ID
- Specifies the user ID for the RADIUS user.
- Specify a text string from 3 to 32 characters.
- The characters that can be inputted depends on the type of authentication method.
- For PAP, EAP-MD5, EAP-TTLS, and PEAP:
- Single-byte alphanumeric characters/symbols, with the following exceptions: \ [ ] " ? space
- For EAP-TLS:
- Single-byte alphanumeric characters/symbols, with the following exceptions: \ [ ] / : < * > | " ? space
- For PAP, EAP-MD5, EAP-TTLS, and PEAP:
- You cannot set the name as DEFAULT.
- When using MAC authentication, input the MAC address for the user’s terminal.
- For the MAC address, use one of the following input formats according to the authenticator settings.
- XX:XX:XX:XX:XX:XX
- XX-XX-XX-XX-XX-XX
- XXXXXXXXXXXX
- When MAC authentication is selected for “Select an authentication function,” the MAC address that was entered will be automatically reflected in the “Password” and “Password (confirm)” fields.
- For the MAC address, use one of the following input formats according to the authenticator settings.
- Password
- Specifies the password for the RADIUS user.
- Enter up to 32 single-byte alphanumeric characters/symbols, with the following exceptions: \ [ ] ?
- When using MAC authentication, input the MAC address for the user’s terminal.
- Password ( Confirm )
- To confirm, enter the password once again that you entered in the “Password” field.
- Authentication method
- Select the authentication method used to authenticate the RADIUS user from the methods below.
- PAP
- PEAP, EAP-MD5, EAP-TTLS
- EAP-TLS
- Select the authentication method used to authenticate the RADIUS user from the methods below.
- Name
- Specifies the name of the RADIUS user.
- Enter up to 32 single-byte alphanumeric characters/symbols, with the following exception: ?
- Terminal MAC address
- Input this address when you wish to control access by using a supplicant MAC address in addition to authentication via user ID and password.
- Enter the address using the XXXX.XXXX.XXXX format.
- VLAN
- Specifies the VLAN to assign to the user via dynamic VLAN.
- Input a VLAN from 1 to 4094.
- SSID of connected device
- For users that are authenticated via a wireless AP, this specifies the SSID that can be used to connect.
- Enter up to 32 single-byte alphanumeric characters/symbols, with the following exceptions: \ [ ]
- Recipient e-mail address for certificates
- Specify the e-mail recipient addresses used when sending client certificates.
- Input up to 256 single-byte alphanumeric characters and single-byte symbols.
- You cannot use symbols other than _ - . and @.
- Period of certificate validity
- Specifies the period of validity that is set when creating a client certificate.
- Enter the date in YYYY/MM/DD format.
- Dates from the current system date to 2037/12/31 can be entered for the period of validity.
4. User settings import page
This page is for importing the RADIUS user settings.
Enter the contents, and then press the "Confirm" button.
If there are no mistakes in the input content confirmation screen, press the "OK" button.
The client certificates for users that were deleted during import will automatically be revoked.
Import user settings
- File to import
- Select the CSV file to import.
- Issue a certificate
- Select below whether to issue a client certificate after the import is completed.
- Issue a certificate for users whose settings have been changed, and send e-mail
- Issue a certificate for users whose settings have been changed
- Do not issue a certificate
- Select below whether to issue a client certificate after the import is completed.
- SWP2 Series Technical Data (GUI)
- Detailed settings
- RADIUS server
- Managing certificates
Managing certificates
1. Summary
This page is for performing certificate-related operations.
2. Top page
This is the top page for certificate operations.
Mail notification settings
- Displays e-mail notification-related settings for certificates.
- The table items are explained below.
- Mail template ID for sending certificates
- Displays the mail template ID to be used when attaching and sending a client certificate via e-mail.
- Mail template ID for certificate period of validity notifications
- Displays the mail template ID to be used when attaching and sending a client certificate period of validity notification via e-mail.
- Timing of period of certificate validity notifications
- Displays the settings for the timing used to send the period of validity notifications for client certificates.
- Mail template ID for sending certificates
User list
- Displays the certificate information for the RADIUS user.
- The table items are explained below.
- Check box
- Select the check box to issue, revoke or download a certificate.
- User ID
- Displays the user ID for the RADIUS user.
- Name
- Displays the name of the RADIUS user.
- Mail address
- The RADIUS user e-mail addresses will be displayed.
- Period of validity (Settings)
- Displays the certificate’s period of validity for the RADIUS user.
- Period of validity (certificate)
- Displays the period of validity of the client certificate associated with a RADIUS user.
- If there are multiple client certificates, the certificate with the most recent period of validity will be shown.
- Check box
- Input the text string in the text box at the top of the table, and press the icon to search for user information.
- The drop-down list box to the left of the text box lets you select one of the following items to filter the search parameters even further.
- None
- User ID
- Name
- Mail address
- Certificates not issued
- Expired certificates
- Certificates soon to expire
- Displays users whose certificates will expire within one month.
- Certificates revoked
- You cannot specify a search text string when selecting either Certificates not issued, Expired certificates, Certificates soon to expire or Certificates revoked.
- A maximum of 100 items can be displayed for one page. Press or or enter a numeric value to switch between pages.
- You can press the sort switch to sort by each item.
- Press the “Issue” button in the “Specified users” box to issue certificates for all RADIUS users whose check boxes are selected.
- You can select the check box for Attach certificates issued and send via e-mail that is displayed in the dialog box and press the “Execute” button to attach and send the issued certificates via e-mail.
- The e-mail recipients are the e-mail addresses of each RADIUS user.
- Press the “Revoke” button in the “Specified users” box to revoke certificates for all RADIUS users whose check boxes are selected.
- Select the certificate which will be revoked from the list below.
- Old certificates
- New certificates
- Both
- For users with only one certificate, the certificate is revoked regardless of which of the above is selected.
- Select the certificate which will be revoked from the list below.
- Press the “Download” button in the “Specified users” box to download the certificates for all RADIUS users whose check boxes are selected.
- Press the “Send” button in the “Specified users” box to attach and send the certificates for all RADIUS users whose check boxes are selected.
- Press the “Download” button in the “All users” box to download the certificates for all RADIUS users.
- Press the “Send” button in the “All users” box to attach and send the certificates for all RADIUS users via e-mail.
- Some operations will be restricted for the statuses shown below.
- The certificate authority does not exist
- Certificate is being issued
- If a user exists whose certificate has not been issued, a notification will be shown in the blue information box.
- Press the “Bulk issue” button to issue client certificates in bulk, for users corresponding to the following.
- Users who have never issued certificate
- Users who was changed password or expire after issued certificate
- Press the “Bulk issue” button to issue client certificates in bulk, for users corresponding to the following.
- The progress will be shown in the blue information box while the certificates are being issued.
3. Mail notification settings page
This page is for settings related to certificate e-mail notifications.
Enter the settings, and then press the "Confirm" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Mail notification settings
- Mail template ID for sending certificates
- Select the mail template ID.
- Mail template ID for certificate period of validity notifications
- Select the mail template ID.
- Timing of period of certificate validity notifications
- Specify the timing of the period of certificate validity notifications.
- Input a value from 1 to 90.
- Up to three can be specified.
4. Certificate operations page
This page is for performing certificate-related operations.
Enter the contents, and then press the "Confirm" button.
If there are no mistakes in the input content confirmation screen, press the "OK" button.
Certificate operations
- Certificate to operate
- Information for the target certificate for the operation will be displayed.
- Select the check box of the certificate for which the operation is performed.
- Content to execute
- Select the certificate operation from the list below.
- Download certificate
- Attach certificates and send via e-mail
- Set certificate to revoke
- Select the certificate operation from the list below.
- SWP2 Series Technical Data (GUI)
- Detailed settings
- Mail notification
Mail notification
1. Summary
In this page you can make various settings related to mail notification. If you specify mail notification, mail is automatically sent to the specified destination when the specified conditions are satisfied.
In advance, use the "New" button in the "List of registered mail servers" to register the destination mail server. After registering this, use the "New" button in the "List of mail notification settings" to make mail notification settings.
2. Top page
This is the top page for mail notification.
List of registered mail servers
- This shows information for the currently registered mail servers (SMTP servers).
- You can add settings by using the "New" button located above the list.
- If you want to edit the settings, press the "Settings" button located at the right of the list. A page for editing the settings appears, allowing you to edit the settings.
- If you want to delete settings, select the settings that you want to delete, and press the "Delete" button located above the list. A confirmation dialog box appears; press the "Delete" button to delete the settings.
- Up to ten mail servers can be registered.
Mail notification settings list
- This shows the currently-specified mail notification settings.
- You can add settings by using the "New" button located above the list.
- If you want to edit the settings, press the "Settings" button located at the right of the list. A page for editing the settings appears, allowing you to edit the settings.
- If you want to delete settings, select the settings that you want to delete, and press the "Delete" button located above the list. A confirmation dialog box appears; press the "Delete" button to delete the settings.
- To perform a mail transmission test, press the "Next" button in the "Transmission test" item. A confirmation dialog box appears; press the "Execute" button to execute the mail transmission test.
3. Mail server settings page
In this page you can make settings for the destination mail server (SMTP server). Check the items that you specified, and then press the "OK" button. If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
List of registered mail servers
- ID number
- This is the ID number of the mail server. It is assigned automatically.
- Account identification name
- Specify the account identification name of the mail server. For convenience, specify a name that will be easy to distinguish.
- You can use up to 64 single-byte characters.
- This may be omitted.
- SMTP server address
- Enter the IP address or domain name of the SMTP server used to transmit mail.
- You can use up to 64 single-byte characters.
- Port number of the SMPT server
- Enter the port number of the SMTP server.
- If you check "Submission port (port 587)," port 587 (the submission port) is specified.
- Encrypting SMTP
- This setting determines whether to encrypt SMTP with SSL when sending mail.
- Selecting "Not encrypt" is to use SMTP for sending mail.
- Selecting "Encrypt with SSL (over SSL)" is to use SMTPS (SMTP over SSL) for sending mail, so that SMTP is encrypted with SSL.
- It is recommended to set 465 for "SMTP server port number".
- Selecting "Encrypt with SSL (STARTTLS)" is to use SMTPS (STARTTLS) for sending mail, so that SMTP is encrypted with SSL.
- For STARTTLS, communication is encrypted only if the SMTP server supports encryption using SSL.
- Encryption using SSL is not available when setting an IPv6 address as the SMTP server address.
- SMTP authentication
- Select from the drop-down list box whether to authenticate with the SMTP server.
- To authenticate, enter the following settings.
- User name
- This setting determines the user name used when authenticating to the SMTP server.
- Up to 64 single-byte characters are allowed.
- Password
- This setting determines the password used when authenticating to the SMTP server.
- Up to 64 single-byte characters are allowed.
- User name
4. Mail notification settings page
In this page you can make settings for mail notification. You can make settings such as the source of the mail notification and the destination address. Check the items that you specified, and then press the "OK" button. If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Mail notification settings
- ID number
- This is the ID number of the mail notification setting. It is assigned automatically.
- Sender (From)
- Specify the mail address of the source that sends the mail. SMTP server:
- Select the SMTP server used to send the mail.
- Enter the mail address of the source that sends the mail.
- You can use up to 64 single-byte characters. However, symbols other than underbar ( _ ), hyphen ( - ), dot ( . ), and at-sign ( @ ) cannot be used.
- Specify the mail address of the source that sends the mail. SMTP server:
- Destination (To)
- Enter the mail address of the recipient to whom the mail is sent.
- You can register up to four items, and mail is sent to all the registered mail addresses.
- You can use up to 64 single-byte characters. However, symbols other than underbar ( _ ), hyphen ( - ), dot ( . ), and at-sign ( @ ) cannot be used.
- This setting does not affect the mail send function of the RADIUS server.
- Subject
- Specify the subject of the mail that is sent.
- You can use up to 128 single-byte characters.
- If you select "Use prespecified subject," the subject will be the prespecified subject.
- This setting does not affect the mail send function of the RADIUS server.
- Content of notification
- Choose the content of the notification from the following.
- Terminal monitoring status notification
- Notification is sent when there is a change in the status of a terminal being monitored by the terminal monitoring function.
- Terminal monitoring status notification
- This setting does not affect the mail send function of the RADIUS server.
- Choose the content of the notification from the following.
- Mail transmission wait time
- Specify the time that mail transmission waits after a notification event occurs.
- If other notification events occur during the wait time, the contents of those notifications are combined into a single mail.
- This setting does not affect the mail send function of the RADIUS server.
- SWP2 Series Technical Data (GUI)
- Detailed settings
- Terminal monitoring
Terminal monitoring
1. Summary
On this page you can make settings for device monitoring.
The device communication status can be monitored by specifying the monitoring target and method.
You can also specify the action to be executed when the device status changes.
Device monitoring settings can be made only from the Web GUI.
Although the contents of the device monitoring settings are not shown in the CONFIG file, when an operation (such as “erase startup-config”) is performed on the CONFIG file, the same operation is performed on the device monitoring settings.
2. Top page
This is the top page for device monitoring.
List of monitored terminals
- The device monitoring status and settings are shown here.
- The table items are explained below.
- Check box
- Select the check box to delete device monitoring settings.
- Status
- One of the device monitoring statuses as follows are displayed.
- IDLE
- UP
- DOWN
- Refer to 4. Conditions for determining monitored device status for the conditions used to determine the above statuses.
- One of the device monitoring statuses as follows are displayed.
- Include in monitoring
- Displays information for the monitoring target(s).
- If the monitoring type is “Ping”, the IP address of the monitored device will be displayed.
- For monitoring types other than “Ping”, the interface number will be displayed.
- Device name
- Displays the name of the device being monitored.
- Monitoring type
- Displays one of the following monitoring types for the device being monitored.
- Ping
- Frame reception volume
- LLDP
- Displays one of the following monitoring types for the device being monitored.
- Check box
- Press the [New] button to display a page where you can create new settings for monitored devices.
- Press the [Setting] button to access a page where you can change the settings of the selected device.
- Press the [Update] button to update the table.
- If you press the [Delete] button, all monitored devices whose check boxes are selected will be deleted.
- Up to 256 monitored devices can be configured.
- Of these, up to 64 monitored devices with ping can be configured.
3. Monitored device settings page
This page is for configuring the monitored device settings.
Enter the settings, and then press the [Confirm] button.
If there are no mistakes in the input content of the confirmation screen, press the [OK] button.
Setting monitored devices
- Device name
- Specifies the device name.
- Characters that can be inputted include single-byte alphanumeric characters and symbols, excluding ?.
- Up to 80 characters can be inputted.
- Monitoring type
- Select from one of the following monitoring methods.
- Ping-based communication monitoring
- Frame reception volume monitoring
- LLDP reception interval monitoring
- This item cannot be changed when changing the settings.
- Select from one of the following monitoring methods.
- Destination IP address for ping
- Specifies the IP address to which a ping message will be transmitted.
- This item will only be displayed when Ping-based communication monitoring is selected for the “Monitoring type” item.
- Time waiting for reply
- Specifies the time required to determine whether the ping response has failed.
- The input range is 1 - 60.
- This item will only be displayed when Ping-based communication monitoring is selected for the “Monitoring type” item.
- No. of failures before detecting unavailable device
- Specifies the number of times that the ping response must fail before determining that the monitored device is unavailable.
- The input range is 1 - 100.
- This item will only be displayed when Ping-based communication monitoring is selected for the “Monitoring type” item.
- Port
- Specifies the port for frame monitoring.
- The input format is portX.YY.
- This item will only be displayed when Frame reception volume monitoring or LLDP reception interval monitoring is selected for the "Monitoring type" item.
- Monitor start band
- Specifies the bandwidth at which frame reception volume monitoring will start.
- The input range is 1 - 1000000000.
- This item will only be displayed when Frame monitoring type is selected for the “Monitoring type” item.
- Unavailable device detection band
- Specifies the band value for determining that the monitored device is unavailable.
- The input range is 0 - 999999999.
- The value specified for this item must be less than the value used for “Monitor start band”.
- This item will only be displayed when Frame monitoring type is selected for the “Monitoring type” item.
- Operation when detecting change in status
- SNMP trap transmission
- When a change of status is detected, a trap is notified to the SNMP manager.
- Mail notification
- An e-mail is sent when a change of status is detected.
- The e-mail server, destination and so on must be configured in order to send e-mail.
- Further, you must select the Status notification for device monitoring in the “Mail notification settings” as the “notification content”.
- Configure the e-mail server and e-mail template on the E-mail notifications page.
- SNMP trap transmission
4. Conditions for determining monitored device status
This explains the conditions for when the monitored device status changes.
- Monitoring with Ping
- If a Ping packet transmitted by this unit does not return within the set time waiting for reply, this is counted as one failure, The status is determined by how many failures occur.
- The conditions for change in status are shown below.
- IDLE status
- Initial status determination has not been completed after setting the monitored device.
- UP status
- Ping transmission has not failed continuously for the no. of failures before detecting unavailable device that was set.
- DOWN status
- Ping transmission fails continuously for the no. of failures before detecting unavailable device that was set.
- IDLE status
- Monitoring according to frame reception volume
- Measures the frame reception volume for the monitoring target and determines the status.
- The conditions for change in status are shown below.
- IDLE status
- After the monitored device is configured, the frame reception volume for the monitored target port has not once exceeded the monitor start band that was set.
- UP status
- After the frame reception volume for the monitored target port exceeded the monitor start band that was set, it did not fall below the unavailable device detection band.
- The frame reception volume for the monitored target port rose above the unavailable device detection band in DOWN status.
- DOWN status
- The frame reception volume for the monitored target port fell below the unavailable device detection band in UP status.
- IDLE status
- Monitoring with LLDP
- Status is determined by the LLDP frame reception status at the monitored target port.
- The conditions for change in status are shown below.
- IDLE status
- After the monitored device is configured, no LLDP frames have been received at the monitored target port.
- UP status
- The next LLDP frame was able to be received at the monitored target port, within the TTL of the previously accepted LLDP frame.
- An LLDP frame could be received in DOWN status at the monitored target port.
- DOWN status
- The next LLDP frame could not be received at the monitored target port, within the TTL of the previously accepted LLDP frame.
- IDLE status
- SWP2 Series Technical Data (GUI)
- Management
- Unit settings
Unit settings
1. Summary
You can make settings related to the date and time of the unit.
2. Top page
This is the top page for this unit's settings. The current date and time, time zone setting, and date and time synchronization setting are shown.
Time zone setting
The time zone setting is shown.
- Press the "Setting" button to access a page where you can change the settings.
Current date and time setting
The current date and time specified for this unit are shown.
- Press the "Setting" button to access a page where you can change the settings.
Date and time synchronization setting
The NTP server that is queried at the specified time and date synchronization interval is shown.
- Press the "Next" button to access a page where you can synchronize the time.
- Press the "Setting" button to access a page where you can change the settings.
3. Time zone setting page
In this page you can set the time zone.
When you have entered the settings, press the "OK" button. If there are no mistakes in the input content confirmation screen, press the "OK" button.
Time zone setting
- Time zone
- Select the time zone from the following.
- UTC
- JST
- Difference from GMT ( -12:00 to +13:00 )
- Select the time zone from the following.
4. Current date and time setting page
In this page you can set the current date and time.
When you have entered the settings, press the "OK" button. If there are no mistakes in the input content confirmation screen, press the "OK" button.
Current date and time setting
- Current time
- In the "year/month/date" box, enter the date in YYYY/MM/DD format.
- When you move the focus to the box, a calender is displayed. You can select a date to enter that date in the box.
- You can also enter this manually.
- In the "hours:minutes:seconds" box, enter the time in hh:mm:ss format.
- When you move the focus to the box, a calender is displayed. You can select a date to enter that date in the box.
- You can also enter this manually.
- In the "year/month/date" box, enter the date in YYYY/MM/DD format.
5. Date and time synchronization page
In this page you can synchronize the time with an NTP server.
When you press the "Execute" button, the time is synchronized with the NTP server that is specified as the query destination.
6. Date and time synchronization setting page
In this page you can make settings for synchronization with an NTP server.
When you have entered the settings, press the "OK" button. If there are no mistakes in the input content confirmation screen, press the "OK" button.
Date and time synchronization setting
- Date and time synchronization interval
- Specifies the interval at which time is synchronized with the NTP server.
- You can choose from the following as the synchronization interval.
- Unused
- 1 hour – 24 hours
- The default value is 1 hour
- NTP server to query
- Enter the host name or IP address of the NTP server that will perform synchronization.
- Up to two NTP servers can be set.
- SWP2 Series Technical Data (GUI)
- Management
- Access management
User settings
1. Summary
In this page you can make user settings.
2. Top page
This is the top page for user settings.
Password settings
- Password-related settings are shown.
- The items in the table are explained below.
- Administrator password
- Indicates whether an administrator password has been set.
- Login password
- Indicates whether a login password has been set.
- Encryption
- Indicates whether password encryption is enabled or disabled.
- Administrator password
- Press the "Setting" button to access a page where you can make password-related settings.
User settings
- A list of user settings is displayed.
- The items in the table are explained below.
- Check box
- Place a check in this box to delete user settings.
- User name
- Shows the user name.
- Password
- Indicates whether a password has been set for the user.
- Administrative privileges
- Indicates whether administrative privileges have been given to the user.
- Check box
- Press the "New" button to access a page where you can create a new user.
- Press the "Setting" button to access a page where you can change the settings of the selected user.
- If you press the "Delete" button, the settings of all users whose check box has a check mark will be deleted.
- Settings can be specified for up to 32 users.
3. Password setting page
In this page you can make various password-related settings.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Password settings
- Administrator password
- Enter the administrator password that you want to specify.
- If you don't want to change the password, place a check mark in Don't change the administrator password.
- If a password has already been specified, there will be a check mark by default in Don't change the administrator password.
- When you enter a password, the password strength is shown. This can provide guidance for your choice of password.
- The password strength is indicated in four levels from "weak" to "strongest" based on the following conditions.
- Number of characters
- Number of types of character
- Uppercase characters are included
- Lowercase characters are included
- Numerals are included
- Symbols are included
- Administrator password (confirm)
- To confirm the password that you entered in the "Administrator password" field, enter the password once again.
- Login password
- Enter the login password that you want to specify.
- The operation of Don't change the login password is the same as for the "Administrator password" item.
- The evaluation of password strength is the same as for the "Administrator password" item.
- Login password (confirm)
- To confirm the password that you entered in the "Login password" field, enter the password once again.
- Encrypt password
- Select the password encryption setting from the following.
- Encrypt
- Don't encrypt
- An already-encrypted password cannot be recovered.
- The settings of this item affect the following passwords.
- Administrator password
- Login password
- User password
- Select the password encryption setting from the following.
4. User settings page
In this page you can make user settings.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
User settings
- User name
- When making new settings
- Specify the user name.
- Single-byte alphanumeric characters can be used.
- Up to 32 characters can be entered.
- The following character strings cannot be specified.
- lp
- adm
- bin
- ftp
- gdm
- man
- rpc
- sys
- xfs
- halt
- news
- nscd
- sync
- uucp
- root
- games
- daemon
- gopher
- nobody
- ftpuser
- mtsuser
- rpcuser
- mailnull
- operator
- shutdown
- When editing the settings
- The name of the selected user is displayed.
- When making new settings
- New password
- Enter the new password that you want to specify.
- The password strength evaluation is the same as in "Administrator password" of the Password settings page.
- New password (confirm)
- To confirm the password that you entered in the "New password" field, enter the password once again.
- Administrative privileges
- Select the user's administrative privileges from the following.
- Not granted
- Granted
- When a user to whom administrative privileges are granted logs into the Web GUI, they can log in as an administrative user.
- Select the user's administrative privileges from the following.
- SWP2 Series Technical Data (GUI)
- Management
- Access management
- Various server settings
Various server settings
1. Summary
In this page you can make various server settings.
2. Top page
This is the top page for making various server settings.
The current settings for the following servers are shown.
- HTTP server
- TELNET server
- SSH server
- TFTP server
Access via the Web GUI
- The HTTP server settings are shown.
- The items in the table are explained below.
- Use HTTP server
- Indicates whether the HTTP server is used.
- If the HTTP server is used, the port number is shown.
- Use secure HTTP server
- Indicates whether the secure HTTP server is used.
- If the secure HTTP server is used, the port number is shown.
- Interfaces that can access the HTTP server
- Shows the interfaces that can access the HTTP server.
- The maintenance VLAN can be accessed regardless of the server setting.
- Clients that can access the HTTP server
- Shows the clients that can access the HTTP server.
- Use HTTP server
Access using TELNET
- The TELNET server settings are shown.
- The items in the table are explained below.
- Use TELNET server
- Indicates whether the TELNET server is used.
- If the TELNET server is used, the port number is shown.
- Interfaces that can access the TELNET server
- Shows the interfaces that can access the TELNET server.
- The maintenance VLAN can be accessed regardless of the server setting.
- Clients that can access the TELNET server
- Shows the clients that can access the TELNET server.
- Use TELNET server
Access using SSH
- The SSH server settings are shown.
- The items in the table are explained below.
- Use SSH server
- Indicates whether the SSH server is used.
- If the SSH server is used, the port number is shown.
- Interfaces that can access the SSH server
- Shows the interfaces that can access the SSH server.
- The maintenance VLAN can be accessed regardless of the server setting.
- Clients that can access the SSH server
- Shows the clients that can access the SSH server.
- Client alive checking from SSH server
- Indicates whether the SSH server checks that the client is alive.
- If the SSH server is set to check that the client is alive, the checking interval and the number of checks before disconnection are shown.
- Use SSH server
Access using TFTP
- The TFTP server settings are shown.
- The items in the table are explained below.
- Use TFTP server
- Indicates whether the TFTP server is used.
- If the TFTP server is used, the port number is shown.
- Interfaces that can access the TFTP server
- Shows the interfaces that can access the TFTP server.
- The maintenance VLAN can be accessed regardless of the server setting.
- Use TFTP server
3. Web GUI access page
In this page you can make settings for the HTTP server.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Access via the Web GUI
- Use HTTP server
- Select from the following to specify whether the HTTP server is used.
- Use
- Don't use
- If use is selected, specify the port number.
- The input range for the port number is 1–65535.
- Select from the following to specify whether the HTTP server is used.
- Use secure HTTP server
- Select from the following to specify whether the secure HTTP server is used.
- Use
- Don't use
- If use is selected, specify the port number.
- The input range for the port number is 1–65535.
- Select from the following to specify whether the secure HTTP server is used.
- Interfaces that can access the HTTP server
- Press the "Select" button to access the "VLAN interface list" dialog box.
- In the "VLAN interface list" dialog box, add a check mark to a port's check box and press the "OK" button to select an interface.
- Up to eight VLAN interfaces can be selected.
- Clients that can access the HTTP server
- Select from the following methods of limiting client access.
- Allow all
- Specify conditions
- If you choose Specify conditions, you can specify up to eight conditions.
- Specify the following as conditions.
- Operation
- Choose the operation for access restriction from the following.
- Allow
- Deny
- Choose the operation for access restriction from the following.
- Condition
- Choose the object of access restriction from the following.
- All addresses
- Specify IP address
- Choose the object of access restriction from the following.
- IP address
- If you choose Specify IP address, specify the IP address.
- You can specify the following as the IP address.
- IPv4 address
- Example: 192.168.100.1
- IPv4 network address
- Example: 192.168.100.0/24
- IPv6 address
- Example: fe80::1234:5678
- IPv6 network address
- Example: 2001:1234:5678:90ab::0/64
- IPv4 address
- Operation
- By pressing the icon you can add a settings form.
- By pressing the "Delete" button you can delete a settings form.
- Select from the following methods of limiting client access.
4. TELNET access page
In this page you can make settings for the TELNET server.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Access using TELNET
- Use TELNET server
- Select from the following to specify whether the TELNET server is used.
- Use
- Don't use
- If use is selected, specify the port number.
- The input range for the port number is 1–65535.
- Select from the following to specify whether the TELNET server is used.
- Interfaces that can access the TELNET server
- The method of making settings for this item is the same as in the Web GUI access page item "Interfaces that can access the HTTP server."
- Clients that can access the TELNET server
- The method of making settings for this item is the same as in the Web GUI access page item "Clients that can access the HTTP server."
5. SSH access page
In this page you can make settings for the SSH server.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
If the SSH server's host key has not yet been generated, the host key is automatically generated when you change the setting to use the SSH server.
Access using SSH
- Use SSH server
- Select from the following to specify whether the SSH server is used.
- Use
- Don't use
- If use is selected, specify the port number.
- The input range for the port number is 1–65535.
- Select from the following to specify whether the SSH server is used.
- Interfaces that can access the SSH server
- The method of making settings for this item is the same as in the Web GUI access page item "Interfaces that can access the HTTP server."
- Clients that can access the SSH server
- The method of making settings for this item is the same as in the Web GUI access page item "Clients that can access the HTTP server."
- Client alive checking from SSH server
- Select from the following to specify whether the SSH server checks that the client is alive.
- Check
- Don't check
- If you selected Check, then specify the checking interval and the number of times to check before disconnecting.
- The input range for the checking interval is 1–2147483647.
- The input range for the number of times to check is 1–2147483647.
- Select from the following to specify whether the SSH server checks that the client is alive.
6. TFTP access page
In this page you can make settings for the TFTP server.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Access using TFTP
- Use TFTP server
- Select from the following to specify whether the TFTP server is used.
- Use
- Don't use
- If use is selected, specify the port number.
- The input range for the port number is 1–65535.
- Select from the following to specify whether the TFTP server is used.
- Interfaces that can access the TFTP server
- The method of making settings for this item is the same as in the Web GUI access page item "Interfaces that can access the HTTP server."
- SWP2 Series Technical Data (GUI)
- Management
- Dante optimization settings
Dante optimization settings
1. Summary
In this page you can perform operations related to Dante optimization settings.
Dante optimization settings can be made manually or automatically using LLDP.
When you make optimization settings, the following functions are set.
- DiffServ base QoS
- IGMP snooping
- Flow control
- EEE
2. Top page
This is the top page for Dante optimization settings.
Manual settings
- When you press the "Next" button, the procedure of optimizing the Dante settings will begin.
Automatic settings using LLDP
- The current settings for automatic setting function using LLDP are shown.
- When you press the "Setting" button, a page where you can change the LLDP automatic settings function will appear.
3. Manual settings page
In this page you can make settings for Dante optimization.
When you press the "Execute" button, the optimal settings are applied.
4. LLDP automatic settings page
In this page you can perform automatic settings using LLDP.
Enter the settings, and then press the "OK" button.
If there are no mistakes in the input content of the confirmation screen, press the "OK" button.
Automatic settings using LLDP
- Automatic settings using LLDP
- Select from the following to specify whether automatic settings using LLDP are enabled or disabled.
- Enable
- Disable
- SWP2 Series Technical Data (GUI)
- Management
- Maintenance
- Command execution
Command execution
1. Summary
In this page you can perform operations related to command execution.
2. Command execution page
In this page you can execute commands and acquire the results of command execution. After entering the command in the command entry field, press the "Execute" button to execute the command. If you press the "Clear" button, the contents of the command entry field are cleared.
Command execution
- Command input
- In the command entry field, enter the setting in console command format (abbreviated input is not accepted).
- You can enter multiple commands together by separating them with line-returns.
- Execution is always started from the specially-privileged EXEC mode (enable). Enter the mode change command each time.
- For details on the commands to enter, refer to the command reference and to information such as the Network device product information page and the Network device technical information page.
- The following commands cannot be entered.
- ping
- ping6
- telnet
- ssh
- ssh-server host key generate
- reload
- restart
- cold start
- firmware-update execute
- erase startup-config
- copy running-config startup-config
- show config
- show running-config
- show startup-config
- show history
- show tech-support
- quit
- disable
- logout
- exit (when in privileged EXEC mode)
- copy radius-server local
- crypto pki generate ca
- no crypto pki generate ca
- Command execution result
- Displays the command execution result.
- Success ... Shown if the command executed successfully.
- Error ... Shown if the command you entered could not be executed.
- Prohibited ... Shown if a prohibited command was entered.
- Displays the command execution result.
- Command execution log
- The console log is output as the command execution record.
- The command execution log will not necessarily always show the identical result as when the console setting operation was executed.
- By pressing the "Obtain as text file" button, you can acquire the contents of the command execution log as a text file.
- The name of the acquired file is command_YYYYMMDDhhmmss.txt.
YYYY ... Year (4 digit) MM ... Month (2 digit) DD ... Day (2 digit) hh ... Hour (2 digit) mm ... Minute (2 digit) ss ... Second (2 digit)
- SWP2 Series Technical Data (GUI)
- Management
- Maintenance
- Firmware update
Firmware update
1. Summary
In this page you can perform operations related to firmware update.
2. Top page
This is the top page for firmware update.
You can start the procedure for updating the firmware via the network. Various settings for updating the firmware via the network are displayed.
Current firmware revision
- The currently-used firmware revision is shown.
Update firmware from PC
- When you press the "Next" button, the procedure for updating the firmware from the PC will be started.
Update firmware via network
- When you press the "Next" button, the procedure for updating the firmware via the network will be started.
- Various settings for updating the firmware via the network are displayed.
- Press the "Setting" button to access a page where you can change the settings.
3. Update firmware from PC page
In this page you can specify the firmware file placed on the PC from which you are accessing the Web GUI, and perform the firmware update.
In "Select file," select the firmware file that you want to use for the update, and press the "OK" button. If there are no mistakes in the confirmation screen, press the "Execute" button.
Note that the unit will automatically restart when the firmware has been updated successfully.
Update firmware from PC
- Specify update file
- Selects the firmware file used for the update
4. Update firmware via network page
In this page you can download a firmware file from a web server, and perform the firmware update. This function lets you easily perform the entire process of checking for the latest firmware, downloading it, and updating the firmware.
When you open the page, the revision of the firmware file on the web server is automatically checked.
If the URL of the download source is a Yamaha website, and an updatable firmware revision is found, pressing the "Execute" button will display the software license agreement. Carefully read the software license agreement, and press either the "Agree" button or "Disagree" button. Only if you press the "Agree" button, the firmware file will start being downloaded from the web server.
Note that the unit will automatically restart when the firmware has been updated successfully.
Update firmware via network
- Current firmware revision
- The revision of the currently-used firmware file is shown.
- Firmware revision available for update
- Updatable revisions of the firmware files on the web server are shown.
5. Firmware update basic settings page
In this page you can make various settings for updating the firmware via the network.
When you have entered the settings, press the "OK" button. If there are no mistakes in the input content confirmation screen, press the "OK" button.
Firmware update basic settings
- Download source URL
- This is the setting of the URL at which the firmware is located.
- Permit downward revision
- This setting permits or forbids rewriting to an older version of firmware.
- Timeout
- This setting specifies the timeout time during the process of updating the firmware via the network.
- SWP2 Series Technical Data (GUI)
- Management
- Maintenance
- CONFIG management
CONFIG management
1. Summary
In this page you can import and export CONFIG.
This unit operates in accordance with its CONFIG (settings data). A CONFIG file consists of a combination of multiple commands.
2. Top page
This is the top page for CONFIG management.
You can start the process of importing a CONFIG, or the process of exporting a CONFIG.
Import
- Press the "Next" button to display a page where you can import a CONFIG.
Export
- Press the "Next" button to display a page where you can export a CONFIG.
3. Import page
In this page, a CONFIG from the PC can be copied to internal non-volatile memory, updating the CONFIG.
When you have entered the settings, press the "OK" button. If there are no mistakes in the input content confirmation screen, press the "Execute" button.
When the import has ended successfully, the unit automatically reboots.
Import CONFIG
- Import method
- Select the import method from the following options.
- Import all settings (.zip)
- Import information such as a CONFIG file and a L2MS slave CONFIG together.
- Import a CONFIG file (.txt)
- Import a CONFIG file.
- Settings to import
- Press the "Select a file" button to display the file selection dialog box.
- You can use the settings obtained on the export page.
- Import-destination
- Select the import-destination CONFIG in internal non-volatile memory.
- Currently-used CONFIG
- The currently used CONFIG is shown.
- backup-config file to import
- Press the "Select a file" button to display the file selection dialog box.
- You can use the settings obtained on the export page.
4. Export page
In this page you can copy a CONFIG from internal non-volatile memory to the PC.
When you have finished entry, check the entered content and press the "OK" button.
Export CONFIG
- Export method
- Select the export method from the following options.
- Export all settings (.zip)
- Export information such as a CONFIG file and a L2MS slave CONFIG together.
- Export a CONFIG file (.txt)
- Export a CONFIG file.
- Settings to export
- Select the CONFIG in internal non-volatile memory that you want to export.
- Currently-used CONFIG
- The currently used CONFIG is shown.
- File to export
- Select the CONFIG file in internal non-volatile memory that you want to export.
- SWP2 Series Technical Data (GUI)
- Management
- Maintenance
- SYSLOG management
SYSLOG management
1. Summary
In this page you can view and edit the settings of the SYSLOG function.
The operation history of this device is output as the SYSLOG (log data) according to the settings of the SYSLOG function. In addition to recording the SYSLOG inside this device, you can also specify a destination address for output to an external host.
2. Top page
This is the top page for SYSLOG management.
The current settings for the SYSLOG function are shown.
SYSLOG settings
- The type of SYSLOG that is output and the SYSLOG transmission destination address are shown.
- Press the "Setting" button to access a page where you can change the settings.
3. SYSLOG settings page
In this page you can make settings for the SYSLOG function.
When you have entered the settings, press the "OK" button. If there are no mistakes in the input content confirmation screen, press the "OK" button.
For details on the various SYSLOG types, refer to the command reference.
SYSLOG settings
- SYSLOG type
- DEBUG
- This setting specifies whether DEBUG type SYSLOG is output.
- INFO
- This setting specifies whether INFO type SYSLOG is output.
- ERROR
- This setting specifies whether ERROR type SYSLOG is output.
- DEBUG
- SYSLOG transmission destination address
- This is the transmission destination address setting when outputting the SYSLOG to an external host.
- You can specify up to two IPv4/IPv6 destination addresses.
- In the case of an IPv6 link local address, you will also need to specify the outgoing interface. (fe80::X%vlanN format)
- If no transmission destination address is specified, the SYSLOG is recorded only inside the switch.
- SWP2 Series Technical Data (GUI)
- Management
- Maintenance
- Restart and initialization
Restart and initialization
1. Summary
In this page you can restart this unit and return it to the factory-set state.
2. Top page
This is the top page for restart and initialization.
Here you can start the process of restarting this unit or returning it to the factory-set state.
Restart
- When you press the "Next" button, the process of restarting this unit will begin.
Initialization
- When you press the "Next" button, the process of returning this unit to the factory-set state will begin.
3. Restart page
In this page you can restart this unit.
When you press the "Execute" button, the unit restarts.
Note that when you execute restart, the settings that were being changed will not be saved. In addition, the GUI cannot be accessed until restart has completed.
4. Initialization page
In this page you can return this unit to its factory-set state.
After you have entered the administrator password, press the "OK" button. Confirm the content to be executed, and if you want to return this unit to its factory-set state, press the "Execute" button.
Note that when the unit is returned to its factory-set state, all settings will return to their default values, including the address for accessing the GUI.
Initialization
- Administrator password
- To return the unit to its factory-set state, enter the administrator password.