LEOS Full Managed Ethernet Switch...torques must be observed during assembly. Only use connecting...

Operating instructions

LEOSFull Managed Ethernet Switch

804202, LEOS-FM-ETH-SW-WR-LUEVersion 0411.06.2019

Lütze Transportation GmbHBruckwiesenstrasse 17-19D-71384 WeinstadtTel.: +49 (0) 7151 6053-545Fax: +49 (0) 7151 6053-6545Sales.Transportation@luetze.dewww.luetze-transportation.de

LEOS Full Managed Ethernet Switch ▪ Contents

Contents1 Foreword ....................................................................................................... 52 General information ..................................................................................... 62.1 Explanation of symbols........................................................................................................... 62.2 Copyright ................................................................................................................................ 62.3 Disclaimer ............................................................................................................................... 72.4 Identification plate................................................................................................................... 7

3 Safety............................................................................................................. 93.1 Appropriate Use...................................................................................................................... 93.2 Addressees............................................................................................................................. 9

4 Product Overview....................................................................................... 104.1 Overview of product features................................................................................................ 11

5 Installation .................................................................................................. 125.1 Mounting options .................................................................................................................. 125.2 Wall mounting ....................................................................................................................... 125.3 Mounting adapter set ............................................................................................................ 135.4 Grounding............................................................................................................................. 155.5 Wiring.................................................................................................................................... 16

6 Initial commissioning................................................................................. 186.1 Factory settings .................................................................................................................... 186.2 Initial commissioning............................................................................................................. 186.3 Replacing a defective device ................................................................................................ 19

7 Configuration via web interface................................................................ 208 System settings.......................................................................................... 228.1 System configuration and services ....................................................................................... 228.2 Ethernet ports (interfaces) .................................................................................................... 228.3 Time...................................................................................................................................... 248.4 SNMP ................................................................................................................................... 258.5 SNMP Traps ......................................................................................................................... 268.6 DHCP.................................................................................................................................... 278.7 LLDP..................................................................................................................................... 29

9 Switch settings ........................................................................................... 309.1 VLAN .................................................................................................................................... 309.2 QoS ...................................................................................................................................... 329.3 Link Aggregation................................................................................................................... 339.4 Port Mirroring ........................................................................................................................ 34

10 Diagnostics ................................................................................................. 3510.1 LED display........................................................................................................................... 3510.2 Signal contact ....................................................................................................................... 3510.3 Log files ................................................................................................................................ 36

11 Settings for system access ....................................................................... 3811.1 IP addresses......................................................................................................................... 3811.2 User rights ............................................................................................................................ 3811.3 Configuration files ................................................................................................................. 39

12 USB functions............................................................................................. 4012.1 Downloading the configuration ............................................................................................. 4012.2 Uploading the configuration.................................................................................................. 4012.3 Resetting the configuration ................................................................................................... 40

LEOS Full Managed Ethernet Switch ▪ Contents

12.4 Downloading a diagnostics image ........................................................................................ 4112.5 Firmware Update .................................................................................................................. 41

13 Firmware Update ........................................................................................ 4213.1 Firmware update via web interface....................................................................................... 42

14 Diagnostics image...................................................................................... 4314.1 Call via the web interface...................................................................................................... 43

15 Service......................................................................................................... 4415.1 Known issues........................................................................................................................ 44

16 Decommissioning and disposal................................................................ 4517 Amendment index ...................................................................................... 46

LEOS Full Managed Ethernet Switch ▪ Foreword

5

1 ForewordThese instructions are a component of the product:LEOS Full Managed Ethernet Switch

These instructions must be read and understood before installing, operating, maintaining or dismantling the device.

Risk of injury and damage to equipment caused by non-observance of the operating instructions.

The instructions contain important information on safety, commissioning, operation, maintenance and disposal of the corresponding device.

Before installation or use, carefully read these instructions in order to rule out possible dangers and damage and to guarantee correct use

Always keep the document to hand. This applies until the disposal of the product. When selling or lending, pass on the instructions.

These operating instructions can also be found on the website of Lütze Transportation GmbH - www.luetze-transportation.comSearch for either the article number "804202", or the product name„LEOS Full Managed Ethernet Switch“.

LEOS Full Managed Ethernet Switch ▪ General information

2 General information

2.1 Explanation of symbolsThe manual contains safety information, which is characterized by a signal word in combination with a certain colour to indicate the warning level. The information highlights possible dangers and gives instructions on how to avoid them.

You will also find icons that indicate important information and action steps:

2.2 CopyrightThis installation manual is intended for the operator and its staff only. It is forbidden to give the contents to a third party, to duplicate, exploit or otherwise disclose it unless authorized expressly and in writing by Lütze Transportation GmbH. Details, texts, images and drawings in the contents are copyright protected and are subject to commercial property rights. Contravention can be prosecuting criminally. The trademarks and product names mentioned in this document are subject to absolute provisions of the effective label right and property rights of the respective registered owners.

Indicates a dangerous situation which leads to death or serious injuries if not observed.

Indicates a dangerous situation which can lead to death or serious injuries if not observed.

Indicates a dangerous situation which can lead to slight or moderate injuries if not observed.

Indicates a situation which could damage the product or the environment. This information foresees injuries.

Indicates technically important information to operate the device safely.

Indicates the use of tools.

6


2.3 DisclaimerThe installation instructions have been prepared taking into account the applicable standards, provisions and in accordance with the state of technology. The accuracy of the contents of the documentation has been checked, however deviations cannot be ruled out. No liability is assumed for these deviations. Amendments and addenda are also made in the next version of the manual. Lütze Transportation GmbH does not assume liability for damage or accidents that occur as a result of the following:

• Non-compliance with the manual

• When employing untrained or unqualified staff

• Unintended use

• If there are unauthorized changes or functional changes to the device

• If non-original or licensed parts or equipment are used

2.4 Identification plate

The identification plate, which has the following structure, is located on the switch:

Fig. 1: Example of an identification plate

The identification plate contains the following information:

• Part Number

• Hardware revision

• Module description

• MAC-ID if available, further MAC-IDs see Chapter 11.1 “IP addresses” on page 38

• Production date

• Software version

• Serial number:

• Data Matrix Code, contents: serial number, part number, date, MAC-ID

• QR Code, reference to product information

Note the identification plate.

• The identification plate should always be legible

• If there is a fault, the part number and serial number are needed.

D-71384 Weinstadt

Mad

e in

Ger

mn

ay

www.luetze.com

803101.01 Rev. A

16DI DC 24 V-36V

LION-DI16-24V-36V-LUE

0000000001

1.00 LSGP

S/N:C/N:SW:Date: 31.12.12

299999

C

7


2.4.1 QR Code – Product informationThe code refers to additional product information in the online catalog on the Lütze Transportation website. To reach this site, proceed as follows:

1. Scan the QR code with a smartphone or other device that can read QR codes.

2. The default browser opens with the corresponding page.

Fig. 2: Screenshot Online Catalogue – Language selection

3. Select a corresponding language.

4. The device is displayed in the Online Catalogue. Under Downloads you can download additional technical documentation.

8

LEOS Full Managed Ethernet Switch ▪ Safety

9

3 Safety

3.1 Appropriate UseA correct and safe operation of the device requires an appropriate transport, proper storage, mounting, installation commissioning, operation and maintenance. The permissible ambient conditions must be observed. Information in the accompanying documentation must be observed.

3.2 AddresseesThe operating manual is directed towards planners, project managers and programmers, as well as to staff authorized to commission, operate and maintain the devices and systems. A distinction is made between various qualification levels of the staff.

3.2.1 Operating staff

Trained staff The staff have been trained by the operator in the assigned tasks and have been informed of the possible resulting dangers. They do not have any technical expertise.

Experts The staff have a technical education, expertise and/or experience in the relevant area and thus are able to perform specific tasks on and with the device.

Electricians The staff have a technical education in the relevant area and thus are able to perform specific tasks on and with the device.

The qualification levels of the staff are referred to in the individual sections.

Risk of injury by use through insufficiently qualified operating staff! Incorrect handling by unqualified or insufficiently qualified staff can lead to injuries and damage. Activities, which require specific actions, should only be performed by staff trained in advance, or by experts, notably electricians.

LEOS Full Managed Ethernet Switch ▪ Product Overview

4 Product OverviewThe LEOS Full Managed Ethernet Switch has been developed for use in industry and in transport applications. The switch can be configured via an integrated web interface.

The device is characterized by its robust design, port, prioritization, port disabling, signal contact, configuration management, and remote diagnostics.

1 PE connection

2 Auxiliary power supply with relay

3 Ports

4 LED display

5 Holes for wall mounting

6 Service interface (digital input & USB)

6

10

LEOS Full Managed Ethernet Switch ▪ Product Overview

4.1 Overview of product features

Feature DescriptionHousing IP54, Wall mountingSupply Range 24 – 110 V Hardware Store and Forward Switching Mode

AutonegotiationAutocrossingAutopolaritySignal contact AC/DC 150 VLEDs: Logic supply, Link & Activity, Speed, Digital input, relay output8 Port witj 10/100BASE-TX

Software RSTPLLDPSNMP (SNMP Traps)NTPDHCP (DHCP Option 82, Static Leases)QoSTag-based VLANPort MirroringPort MonitoringWebinterfaceFirmware UpdateEvent LoggingConfiguration SaveCable Test

158

36,4

144

140

LEOS

X1

X2

X3

X4

X5

X6

X7

X8

DI

ULStatus

RO

X9

X10

X5

X1

X6

X2

X7

X3

X8

X4

POWER

SERVICE

CH5

CH1

CH6

CH2

CH7

CH3

CH8

CH4

LNK/

ACTSPD

11

LEOS Full Managed Ethernet Switch ▪ Installation

5 Installation

5.1 Mounting options

5.2 Wall mounting

Never wire electrical connections when they are connected to the power supply!Never wire live wires!

Do not carry out any assembly work on the device when it is connected to the power supply.

1 ISO 4762 M5×25 hexagon socket screw (equal: DIN 912 M5x25)

2 ISO 7089 M5 washer (equal: DIN 125 A M5 washer)

3 DIN 6797 A M5 lock washer (No ISO Standard available.)

12

3

The specified screws and washers are not included with the delivery.

12


5.3 Mounting adapter setThe switch can only be mounted on the DIN rail using the adapter set 804210.

The adapter set is not included with the delivery.

For mounting you need a T20 screwdriver (also called a TX20 or 6-lobe screwdriver (T20)).

1 DIN rail adapter

2 M6x12 flat head screw TX20 (T20)

3 LEOS Switch

2

1 2

3

Torque: 8 Nm

13


5.3.1 DIN rail mounting

5.3.2 DIN rail end mounting

3

2

1

2

31

14


5.4 Grounding

For mounting you need a hexagonal key, wrench size 3 mm.

Electric shocks and injuries through incorrect grounding.

• The devices must be grounded by an electrician.

• The ground connection must not be more than 20 cm long. 10 cm is recommended.

• The ground cable must have a gauge of at least 2.5 mm².

• The cable shoe used must be as wide as possible.

• Always ground the device via the PE connection, but the DIN rail.

• Ground the DIN rail separately in order to comply with the EMC Directive.

Torque: 2 Nm

15


5.5 Wiring

5.5.1 X1-X8, channels 1 – 8All ports of the Ethernet Switch are 4-pin, D-coded M12 jacks. The pin assignment is prescribed as follows:

5.5.2 X9, power supplyM12 jack 4-pin, A-coded

5.5.3 X10, Service interfaceM12 jack 8-pin, A-coded

Pin Signal

1 TX+

2 RX+

3 TX-

4 RX-

*The relay can be configured via the web server as a N/O contact or break contact.

Pin Signal

1 DC 24 - 110 V

2 Relay contact*

3 DC 0 V

4 Relay contact*

Pin Signal

1 DI-

2 USB 5 V

3 USB+

4 USB-

5 USB 0 V

6 NC

7 DI+

8 NC

16


5.5.4 Connecting lead

5.5.5 Important notice for reaching protection class IP54In order to reach protection class IP54 when assembled, the recommended torques must be observed during assembly.

Only use connecting leads that fulfil the following criteria:

• Electronic equipment on rolling stock EN 50155

• Shock and vibration EN 61373

• Railway applications - Rolling stock - Electrical connectors, requirements and test methods EN 50467

• Fire protection in rail vehicles EN 45545-1

• Ambient temperature: -40°C – +85°C

• Protection class (fitted) IP54

This is the only way to guarantee the correct operation of the Ethernet Switch.

Recommended torques for protection class IP54

M12 connections 0.6 Nm

M12 screw plug 0.4 Nm

All unused connections must be closed with the recommended torque using the screw plugs supplied.

17

LEOS Full Managed Ethernet Switch ▪ Initial commissioning

6 Initial commissioning

6.1 Factory settingsThe device is supplied pre-configured. The factory-settings configuration has been selected so that the device the at all Ethernet ports can be identified immediately after the device is switched on. The following are the factory settings:

6.2 Initial commissioningProceed as follows for the initial commissioning:

1. Connect the power supply.

2. Connect the PC / laptop to one of the Ethernet ports 1-8 on the device.

3. The connected PC / laptop must have the following network settings: Automat-ically detect IP address.

4. Open a web browser and enter the device's LAN-IP address.

5. Carry out the desired configuration of the device.

6. Connect the switch to your network devices.

Web interface IP address: 192.168.1.1 (LAN)

Web interface username admin

Web interface password: password

Web interface access: Port 1-8

Ethernet ports: enabled

Auto-negotiation enabled

DHCP

• Pool

• Sub-network mask

• Gateway

enabled

192.168.1.10-254

255.255.255.0

192.168.1.1

VLAN, QoS, Port mirroring: disabled

Link aggregation: disabled

NTP disabled

SNMP enabled

Signal contact: Normally open

Signal contact events: Power; over and under-temperature

RSTP enabled

Broadcast storm protection disabled

18

LEOS Full Managed Ethernet Switch ▪ Initial commissioning

6.3 Replacing a defective deviceAfter commissioning the device, the configuration can be downloaded via the web interface or by USB. The steps necessary for this are explained in chapters:

Chapter 7 “Configuration via web interface” on page 20

and

Chapter 12.1 “Downloading the configuration” on page 40

or

Chapter 12.2 “Uploading the configuration” on page 40.

19

LEOS Full Managed Ethernet Switch ▪ Configuration via web interface

7 Configuration via web interfaceConfiguration via web browser allows changes to be made to the device settings via the network. To do this, the IP address of the switch has to be called in a web browser. For the preset LAN-IP address, see Chapter 6.1 “Factory settings” on page 18 When the page is opened in the browser, a warning is issued first. This is normal because it is not possible to issue a secure certificate for IP address.

To gain access to the system, the user has to verify themselves. This is done with a username and password. The web interface is then loaded.

The default access is

User: admin

Password: password

It is not possible to have a certficate created for every desired IP address.

• Check the IP address and its certificate.

If a password is lost, it is only possible to reset the device in the factory. The existing configurations cannot be backed up. There is no master password.

• Keep the password secure.

20

LEOS Full Managed Ethernet Switch ▪ Configuration via web interface

The left area is for navigation and is divided into the categories of Diagnostics, Configuration and Maintain. The statuses of various parts of the system are displayed under Monitoring. In the Configuration area, settings can be changed and the Maintain area allows configurations to be saved, Firmware updates to be loaded and it facilitates user administration.

After logging in, the dashboard is displayed first, which contains a detailed overview and provides the first information about the status of the network ports.

21

LEOS Full Managed Ethernet Switch ▪ System settings

8 System settings

8.1 System configuration and servicesServices represent software components that can be enabled and disabled. A list of all services and their status can be found under Configuration > System in the table System Services. Services can also be switched off and on here. If a service is disabled, it cannot be configured.

8.2 Ethernet ports (interfaces)The settings for Ethernet Ports are made under Configuration > Interfaces in the web interface. The page contains two tables. The upper one shows the status of the interfaces. The lower table serves to change the settings.

The following settings can be selected for each port:

Option Value: Description

Name Name of the interface (maximum 64 characters, no line breaks, no spaces and special characters)

Description Description of the interface (maximum 64 characters, no line breaks, no spaces and special characters)

Link Enable Port enabled

Disable Port disabled

Speed 100 Mbit/s Port set to 100 Mbit/s

10 Mbit/s Port set to 10 Mbit/s

Auto Port uses Auto-Negotiation to negotiate the speed

22


The settings are transferred with the "Set" button. With the "clear" button, the current values are read back from the device.

Auto-Negotiation will negotiate the highest possible speed that is also supported by the connected remote station. If Auto-Negotiation is not to be used, the settings for speed and duplex have to be made in both network participants in order to facilitate error-free communication.

8.2.1 Rapid Spanning Tree (RSTP)The Rapid Spanning Tree Protocol (RSTP) detects redundant paths in the network and deactivates them. If the primary path fails, it switches to the redundant path. A separate MAC address is used for each port.

The RSTP is a network protocol used to deactivate redundant paths in local networks or to reactivate them if necessary (failure of a connection). It is a further development of the Spanning Tree Protocol (STP). It is defined in the IEEE 802.1w standard.

8.2.2 Broadcast storm protectionA broadcast storm is the strong accumulation of broadcast and multicast traffic in a computer network.

Broadcast storm protection prevents the network from being overloaded by too many multicast and broadcast telegrams that can be triggered by redundant paths.

Duplex Full Port uses full duplex

Half Port uses half duplex

Auto Port uses Auto-Negotiation to negotiate the duplex setting

Flow Control On Flow control on

Off Flow control off

Auto Automatically negotiate flow control

Ports can be activated and deactivated via "Link".

It is recommended that unneeded ports are disabled if a Linkdown event is to be monitored (see Chapter 10.2 “Signal contact” on page 35).

23


8.3 TimeThe system time configuration is performed on the page Configuration > Time.

Ideally, an NTP server is available in the network. As a result, it is possible to synchronize the time automatically at regular intervals.

In order to set an NTP server, this is entered in the text field under NTP server and is added with the "Add" button. Up to six NTP servers can be defined. The server marked as "Preferred" is the primary time source. If this source cannot be reached, one of the other servers is used.

Alternatively to the NTP, it is also possible to set the time manually. This is done in the Time table. The current day is entered in "Date" in the format YYYY-MM-DD. The time is entered in "Time" in the format HH:MM:SS. The time zone used can be set in the dropdown menu Timezone.

NTP Description

Server The switch acts as NTP server for the LAN, but it does not take the time from an NTP server. The system time must be configured.

Client The switch takes the time from an NTP server without acting as a server itself.

Server & Client

The switch takes its time from an NTP server and itself acts as NTP server for the LAN.

The server marked as "Preferred" has a gray border.

The switch does not implement an automatic change between summer and winter time.

24


8.4 SNMPThe SNMP protocol is an interface for remote monitoring and maintenance of a network device. It comprises a manager on the control server and the agents on the devices being monitored. The agent is a service, which received queries from the manager and executes the desired operation and provided the required data. The parameters of a system, also called Managed Objects, which can be queried and changed by SNMP, is device-specific. There is a large number of standardized parameters, which are summarized in the so-called MIBs, Management Information Bases. The switch implements the following MIBs:

• System-MIB

• Interfaces-MIB

• RMON-MIB

Each parameter has a unique Object Identifier (OID). The OID comprises two to three parts. The first part describes the MIBs that belong to this parameter. The second part describes the parameter. If there is more than one instance of a parameter, the third part describes the third part.

Example:

The switch makes it possible to query the operative status (ifOperStatus) of all interfaces via the Interfaces-MIB

.1.3.6.1.2.1.2.2.1.8.1 = INTEGER: up(1)

.1.3.6.1.2.1.2.2.1.8.2 = INTEGER: down(2)

.1.3.6.1.2.1.2.2.1.8.3 = INTEGER: up(1)

.1.3.6.1.2.1.2.2.1.8.4 = INTEGER: down(2)

.1.3.6.1.2.1.2.2.1.8.5 = INTEGER: down(2)

.1.3.6.1.2.1.2.2.1.8.6 = INTEGER: up(1)

.1.3.6.1.2.1.2.2.1.8.7 = INTEGER: down(2)

.1.3.6.1.2.1.2.2.1.8.8 = INTEGER: up(1)

The first part of the OIDs addresses the Interfaces-MIB (.1.3.6.1.2.1.2.2.1), the parameter ifOperStatus has the value 8 and the last number corresponds to the interface instances. Within the Interfaces-MIB, the instance is the same as the port number on the housing. In the above example, the ports 1, 3, 6, 8 are enabled, the other ports are not enabled.

The SNMP service allows devices to read the status of the switch via the network and also to adjust the settings.

In the table above, the SNMP service is configured, the lower table lists the SNMP users and facilitates their administration.

25


If SNMP Version 3 is enabled, users can be set up, with which the switch is accessed. The connection here is encrypted with AES and the integrity of the data is ensured with an MD5-Hash. Up to 10 users are permitted.

Available MIBs

• System-MIB

• Interface-MIB

• RMON-MIB

The values, name, description, contact and location supplied by the System MIB correspond to the values set via the web interface under Configuration > System. They can be used with SNMP-Set commands.

The interface and RMON-MIB provides all the values as read-only.

8.5 SNMP Traps

SNMP Traps can be enabled and disabled under Configuration > SNMP. To do this, the switch autonomously sends SNMP messages as soon as certain events occur. These trigger events are:

Overtemperature, under-temperature and again at normal temperature, as well as when the DI input is switched.

Other possible settings include the destination IP address, to which the traps are to be sent, and the Trap Community.

Option Description

Configuration Enables or disables the SNMP service

Version Supported versions 1, 2c & 3, and all possible combinations.

Read Community The name for the Read Community

Write Community The name for the Write Community

Access Whether the service can be reached via the WAN, LAN or both interfaces

Versions 1 and 2c of the SNMP protocol transfer all the data unencrypted.

26


8.6 DHCPThe Service DHCP provides IP addresses within the LAN. The system DHCP service configuration is performed on the page Configuration > DHCP. The table facilitates the setting of the general DHCP options.

The right-hand table lists the statically set addresses. An entry comprises a MAC and an IP address and can be removed with the "remove" button. It is possible to create new allocations in the lowest line.

All dynamically assigned IP addresses can be displayed with the Active Leases button. The following information is available:

Option Description

Poolsize Defines a range of IP addresses that are assigned to the clients. The two IP addresses must be in the same network defined by the sub-network mask.

Netmask Defines the sub-network mask

Gateway Defines the gateway

DNS Defines one or two DNS servers that are allocated to the clients

Domain Defines a domain that is assigned to the clients

Leasetime The Leasetime is the time in seconds, for which a client may keep the IP address assigned to it. The client can extend the lease shortly before the time expires. The Leasetime must be in the range from 1000 to 1000000.

With Static Leases, IP addresses for devices can be allocated selectively on the basis of the MAC address.

Option Description

IP The assigned IP address

Mac The Mac address of the host

Host The name of the host

Expires The time, for which the IP address is still reserved

27


8.6.1 DHCP Option 82Option 82 allows IP addresses to be bound to a port rather than to MAC addresses. To do this ,you can open a window with the DCHP Option 82 button, in which an IP address can be entered for each interface. The changes are applied with the Update button.

IP addresses assigned via DHCP Option 82 remain bound to the device if during the Leasetime it is connected to a port without DHCP Option 82.

DHCP Option 82 allows devices to be swapped faster. The new device receives the same IP address as the device being replaced at this port.

Static Leases have a higher priority than DHCP Option 82 entries. If a device, for which a static leases exists for its MAC address, is connected to a port with a DHCP Option 82 entry, the IP address defined in the static lease is assigned to the device.

28


8.7 LLDPLDP is a protocol for automatic topology detection. Every 30 seconds, the router sends an LLDP packet to each interface enabled in the LLDP process. This packet contains the following information:

• System name

• System description

• Interface name

• Interface description

• MAC address

The remote stations of the ports can decode and display this information via their management interface. Conversely, the router also receives the packets and evaluates them. Neighbors detected in this way can be queried via the web interface. This makes it possible for the administrator of a network to detect simply, which devices are connected to each other. If the cabling is changed, the display updates within 30 seconds. If a neighbor no longer sends LLDP packets, the neighbor entry is deleted after 120 seconds.

The LLDP service allows neighboring network components to be detected. This service is enabled and configured in the web interface under Configuration > LLDP.

The top table facilitates the settings, the lower table displays the neighboring devices.

If an interface is set to "Enable", the router processes incoming LLDP frames. It sends LLDP frames, which contain the following information, in 30-second intervals:

• System name

• System description

• Interface name

• Interface description

• MAC address

Each port has a unique MAC address, which makes it possible to distinguish between the individual ports.

29

LEOS Full Managed Ethernet Switch ▪ Switch settings

9 Switch settingsThe following settings only apply to LAN Ports.

9.1 VLANVLANs allow a network to be segmented and for these to be operated like several small networks. Tagged VLANs are available for this.

VLANs can be set up in the web interface under Configuration > Set up VLAN.

The top table contains the settings for the respective interfaces. Pressing the Edit button opens a window, with which the respective interface can be configured.

Interfaces 1 to 8 and the connection to the CPU are available. The interfaces, which are located in a trunk group, are represented as a single interface with the name of the trunk group and can only be configured together

The table below lists the available VLAN groups (Chapter 9.1.1.1 “VLAN groups” on page 32). The table contains the ID, the name and a button, with which the group can be removed. With "Add VLAN Group", a window can be opened, in which you can create additional groups. To do this, only the ID and a name have to be entered and then the "Add VLAN" button pressed. Alternatively, the window can be closed with the Close button or the X.

9.1.1 Tagged VLANsTagged VLANs facilitate more complex VLAN configurations. The Ethernet Frames here are expanded with a 802.1Q header, which among other things contains a VLAN-ID. The VLAN-ID is in the range 1-4095 and allocates the Ethernet Frame to a VLAN. A Switch Port only accepts Ethernet Frames, whose VLAN-ID corresponds to one of the VLAN-IDs configured for this port. The frames can only be allocated to ports that are also in the "tag-based" mode and are a member of the VLAN.

One or more tags can be allocated to an interface. The interface contains a primary tag, which among other things can be used for tagging untagged packets.

30


Option Value: Description

Port VLAN

Primary VLAN

ingress unmodified all packets are not changeddrop-untagged

packets already tagged are not changed, untagged packets are discarded

drop-tagged packets already tagged are discarded, untagged packets are not changed

override-tag packets already tagged are treated as though they had the default-tag for the port, untagged packets are not affected.

egress unmodified all packets are not changeddiscard-tag packets already tagged are removed, untagged

packets are not changedwith-tag packets already tagged are not changed, untagged

packets are given the default-tag for the port, where they are input.

The VLAN configuration of the CPU port affects which ports can communicate with the CPU. The CPU port to the VLAN group facilitates access to the web interface.

31


9.1.1.1 VLAN groupsVLAN groups are pairs comprising a VLAN-ID and a name. The VLAN-ID has a value of 1 to 4095 and is unique.

VLAN groups can only be removed if the group is not linked to an interface. A maximum of 64 different VLAN groups can be defined.

9.2 QoSQoS (Quality of Service) allows certain network traffic to be prioritized. The QoS settings are adjusted in the web interface under Configuration > QoS. The criteria, according to which a packet is prioritized are specified with the Trustmode. The Trustmodes VLAN and IP allow the sender of the packet to specify its priority.

The packets are then processed in different queues. QoS here only relates to the switch interfaces.

After all the frames in Queue 3 have been sent, the remaining bandwidth is divided between Queues 2-0 on a 4-2-1 basis.

Trust mode Description

None "Default ingress cos" assigned to all packets

VLAN If an incoming frame contains an 802.1Q-Header, the COS value contained therein is applied.

IP The DSCP value is applied as a result of the incoming frame, even if the frame does not include an 802.1Q Header.

Queue ID Description

3 Queue 3 is a priority queue, it is serviced until all the frames have been transferred. Data streams with high requirements of latency and availability should be assigned to this queue. Please note that excessive utilization in this queue can have a negative impact on the data streams of the other queues.

2 High-priority fairly weighted queue

1 Normal-priority fairly weighted queue

0 Low-priority fairly weighted queue

32


With "Edit Mapping", a window opens, in which the allocation of the DSCP and COS values to the queues is specified.

The DSCP field is part of the IP header. The mappings specified here are used when a port in Trustmode is IP. The COS values are part of the 802.1Q header. They are used when a port is in tag-based VLAN mode and the Trustmode has been set for the VLAN.

9.3 Link AggregationLink Aggregation (also called Port Trunking) allows several ports to be bundled so that a higher throughput rate is possible between two devices.

The settings for Link Aggregation are made under Configuration > Link Aggregation in the web interface.

The queue with ID 3 should only be used for services, which require less bandwidth and have high time requirements.

33


Each interface can be added to a group or can be configured without a group (None). A maximum of 4 groups are available here. So that a trunk group works properly, all ports of the group must have the link state "up". If a link fails, packets are lost.

The setting is transferred with the "Set" button on the device.

9.4 Port MirroringPort Mirroring (or Port Monitoring) allows network traffic to be duplicated on an observation port and analyzed there. The incoming and/or outgoing traffic can be duplicated for each port.

The settings for Port Mirroring are adjusted in the web interface under Configuration > Port Mirroring.

When Port Mirroring is to be used, an interface has to be selected as destination. This interface must not be part of a Trunk Group. You can then specify the interfaces, from which traffic is to be duplicated.

The settings are transferred with the "Set" button.

Link Aggregation distributes the data traffic to the available cables on the basis of the MAC address. A connection between two devices can therefore reach a maximum of 100 Mbit/s.

The destination interface no longer has access to the web interface and can only receive data.

34

LEOS Full Managed Ethernet Switch ▪ Diagnostics

10 Diagnostics

10.1 LED displayYou can carry out an initial, quick device diagnosis using the LED display.

10.1.1 System status LEDThese LEDs show the status of the device. The LED display is replicated in the web interface. Their meaning is explained in the following table.

10.1.2 Port LEDTwo LEDs are assigned to each network port. Their meaning is explained in the following table.

10.2 Signal contactThe signal contact serves to signalize fault statuses that occur. Devices can be connected to it, which then receive this signal.

The signal contact can be set via the web interface under Configuration > Fault Contact.

The signal contact can be configured by the user. The following configurations are permitted:

LED Color Activity Mode

Status - Off Operating system is not active

green on No fault

red on A fault has occurred

RO - Off Relay open/closed

orange on Relay switches (opens/closes) based on an event

UL - Off Supply voltage not connected

green on Supply voltage connected

DI - Off The digital input is logic "LOW".

green on The digital input is logic "HIGH".

LED Color Activity Mode

LNK/ACT

- none No network connection (Link Down)

yellow on Network connection (Link Up)

yellow Flashing Data traffic (Link Up)

SPD - none 10 Mbit/s (provided Link/Act Link Up signalized)

green on 100 Mbit/s

35


The user can choose whether the signal contact is reset automatically after triggering an event or if this is to be done manually.

One or more of the following events can be selected as the trigger for the signal contact:

10.3 Log filesThe device is able to record occurring events in log files. This includes system status, messages, and events caused by the user. 1000 events are logged.

The log files contain the following information for each event

• Date (with time)

• Priority

• Type

• Description

Under Monitoring > Logging the user can select which events should be monitored. The following events can be selected:

Contact type Meaning

Normally Open Signal contact is normally open in the default status.

When an event occurs, the signal contact is closed.

Normally Close Signal contact is normally closed in the default status.

When an event occurs, the signal contact is opened.

Event Meaning

Over Temperature

Temperature of the sensor exceeds the threshold = 90°

Under Temperature

Temperature of the sensor falls below the threshold = -40°

Linkdown any Port enabled but link down (at any port)

Linkdown Interface 1 – 8

Port enabled but link down (at the selected port)

Digital In Digital input

System Error • Memory error

• Switch/Phy not detected

• Error in the internal voltage

Config Error User configuration incorrect

Login Admin Login

Restore Initial status corresponds to the last status before reset

36


The log entries are listed in the web interface under Monitoring > Logging and can be downloaded as a csv file. Below is an example of the log entries:

Event Meaning

Power Changes to the power supply

Thermal Temperature limit exceeded/undercut

Network Change at the WAN port

Switch Change at the Switch Ports

System System events

Relay Output Change to the signal contact

User Login/ Logout in the web interface

DHCP Assigning IP addresses

Digital In Input is set to active

Time Priority Type Description

2015-10-02T15:11:15Z INFO Switch Interface 5 down







2015-10-02T15:11:15Z INFO Network interface 1 up

2015-10-02T15:11:15Z INFO System System Startup

37

LEOS Full Managed Ethernet Switch ▪ Settings for system access

11 Settings for system access

11.1 IP addressesThe settings for the IP address, through which the web interface can be reached, are in the web interface under Configuration > System. The IP address, the sub-network mask and the gateway are set here and transferred with the "Set" button for the respective interface on the device. The factory settings are in Chapter 6.1 “Factory settings” on page 18:

Changing password

The password is changed under Maintain > User Management.

Normal users can set a new password with their password. They can only change their own password.

The Admin User can change all passwords.

11.2 User rightsApart from admin, there are also operator and guest user accounts. A separate password can be assigned for each.

In principle, all three user accounts can see all settings, except for passwords and the SNMP-Write-Community. The accounts are different, however, in terms of their permissions for changing settings. The following table shows which user accounts have which permissions.

Changes to these settings only become active after a restart.

38

LEOS Full Managed Ethernet Switch ▪ Settings for system access

11.3 Configuration filesAll the system settings can be managed via the configuration files.

This can be done via the user interface under Maintain > Settings. The following functions are supported:

• Download the configuration

• Upload the configuration files

• Save the current configuration in the device's internal memory

• Load a configuration from the internal memory

When creating a configuration file, the default setting is for the parameters of all active services and of the system to be saved. Inactive services do not have a configuration and therefore cannot be saved. It is also possible to save only part of the services in a configuration. This is helpful if you have several devices in a network and want to create a configuration that, for example, does not change the IP address.

To apply a configuration, it is selected and then applied with the button "apply Configfile" on the device.

Setting: Visibility

admin operator guest

Dashboard yes yes yes

Monitoring yes yes yes

Configuration yes yes No

Maintaining (Settings, Update Firmware) yes No No

USB functions yes No No

Maintaining (change user account passwords)

All only one's own

only one's own

39

LEOS Full Managed Ethernet Switch ▪ USB functions

12 USB functionsThe USB interface allows various functions to be executed without the device being connected via the web interface. To prevent unauthorized access, each operation is secured with a username and password. To trigger an operation, a command file called "device.cmd" is saved in the root directory of a USB stick. The structure of the file corresponds to the Json format. After successfully executing the operation, the command file is deleted in order to prevent inadvertent multiple executions.

12.1 Downloading the configurationThe switch allows the configuration to be saved on a USB stick. To trigger the operation, a command file called "device.cmd" and with the following contents is saved in the root directory of a USB stick. After inserting the USB stick, the switch generates the file "device.cfg" on the USB stick.

{

"user":"<Username:>",

"password":"<Password>",

"command":"configuration download"

}

12.2 Uploading the configurationThe switch allows the configuration to be uploaded from a USB stick to the device. This function allows fast commissioning of new devices, which should have a standard configuration. To trigger the operation, a command file called "device.cmd" and with the following contents is saved in the root directory of a USB stick. The configuration file "device.cfg" must also be available.

{



"command":"configuration upload"

}

12.3 Resetting the configurationThe configuration can be reset to factory settings using the USB stick. The passwords remain unaffected by this. To perform the operation, the file called "device.cmd" with the following contents must be available in the root directory of a USB stick.

{



"command":"configuration recovery"

}

40

LEOS Full Managed Ethernet Switch ▪ USB functions

12.4 Downloading a diagnostics imageA diagnostics image with information for Technical Support can be downloaded to a USB stick. After inserting the USB stick, it takes about 20 seconds for the data on the stick to be saved. To perform the operation, the file called "device.cmd" with the following contents must be available in the root directory of a USB stick.

{



"command":"system information download”

}

12.5 Firmware UpdateFirmware updates can also be loaded from the USB interface. For more information about firmware updates, see chapter "Firmware update". Apart from the command file "device.cmd", the root directory of the USB stick must also contain the firmware file "device.fw".

{



"command":"firmware update"

}

Before a Firmware update, the configurations have to be saved (Chapter 12.1 “Downloading the configuration” on page 40 and Chapter 11.3 “Configuration files” on page 39) because these can be lost and the device is reset to the factory settings.

41

LEOS Full Managed Ethernet Switch ▪ Firmware Update

42

13 Firmware UpdateA Firmware update can be performed via the web interface.

A Firmware file suitable for the device is needed for the Firmware update.

13.1 Firmware update via web interfaceThe corresponding option can be found at Maintain > Update Firmware. After pressing the search button, a pop-up window appears, in which the Firmware file is selected. By pressing the "Start" button, the Firmware update is then transferred to the device. The progress bar first shows the upload. In a second step, it shows the progress of the installation. The current step is described in the Info column. The switch does not restart automatically after completion of the update. You can initiate the restart manually by clicking on "Reset".

The steps performed after the upload are:

• Validating firmware update file

• Decrypting the firmware update file

• Decompressing the firmware update file

• Flashing the update

• Preparing to boot the new version

• Firmware update succeeded

Before a Firmware update, the configurations have to be saved (Chapter 12.1 “Downloading the configuration” on page 40 and Chapter 11.3 “Configuration files” on page 39) because these can be lost and the device is reset to the factory settings.

The power supply must not be interrupted as long as a Firmware update is running. This may take some time and can be seen from the system status LEDs (see chapter Chapter 10.1.1 “System status LED” on page 35).

To complete a Firmware update, it is necessary to restart the system.

LEOS Full Managed Ethernet Switch ▪ Diagnostics image

43

14 Diagnostics imageA diagnostics image can be downloaded from the system in order to support Technical Support. The diagnostics image contains information about various subsystems of the device. It is encrypted and can only be read by Technical Support. It is possible to call the diagnostics image via the USB interface (see chapter Chapter 12 “USB functions” on page 40) and the web interface.

14.1 Call via the web interfaceOpen the point Settings and click on the Get button. The download button is enabled after about 10 seconds. You can download the image by clicking on the button.

LEOS Full Managed Ethernet Switch ▪ Service

15 ServiceIf you have general questions about the product or repair enquiries, please contact:

Lütze Transportation GmbHBruckwiesenstrasse17-1971384 WeinstadtTel.: +49 (0) 7151 6053-545Fax: +49 (0) 7171 [email protected]

15.1 Known issuesThis is an excerpt from the software release note. Known issues with the devices are listed below:

• RSTP does not work on Link Aggregation interfaces, as there are no RSTP BPDUs generated on these interfaces. Therefore RSTP can not detect and prevent loops parallel to these Link Aggregation interfaces.RSTP does work on all other ports which have Link Aggregation disabled.

44

LEOS Full Managed Ethernet Switch ▪ Decommissioning and disposal

16 Decommissioning and disposalWhen decommissioning and disposing of the expansion modules, please comply with the environmental guidelines applicable at the location of the respective country. Dismantle the device and break it down entirely for the disposal. Dispose electronic components according to the national electronic scrap directive. You are obliged to dispose of the supplied goods after the end of use at your own costs correctly in accordance with the statutory provisions and you shall indemnify Lütze Transportation GmbH from the obligations according to s.10(2) ElektroG (manufacturers' duty to take back waste electrical and electronic equipment) and thus from associated third-party claims. If you pass on the goods to commercial third parties and these are not contractually obliged to assume the disposal and further obligation, it is incumbent upon the customer to take back the goods after end of use at its own costs and to dispose of them correctly according to the statutory provisions. Lütze Transportation GmbH's claim for takeover / indemnification by the customer shall not expire before the end of two years after the final end of use of the device. The two-year period suspension of the period shall not start at the earliest until receipt of written notification by Lütze Transportation GmbH of the end of use.

45

LEOS Full Managed Ethernet Switch ▪ Amendment index

17 Amendment index

Version Change Date

00 New document 2017-04-28

01 Changes at point 1. Foreword, 2.1 Explanation of symbols, 5.2 Wall mounting, 5.3.3 is now 5.4 Grounding, 5.5.4 - Tightening torques added, 5.5.5 Note on achieving protection class IP54 added. Some PDF links updated.

2018-05-15

02 Formal changes 2018-06-07

03 Additions: 6.1 Factory settings; New: 8.2.1 Rapid Spanning Tree (RSTP); New: 8.2.2. Broadcast Storm protection; 8.10 LLDP - Note new; New: 15.2 Change log

2019-05-14

04 withdrawn: 15.2 Change log 2019-06-11

46

LEOS Full Managed Ethernet Switch...torques must be observed during assembly. Only use connecting...

Documents

Transcript of LEOS Full Managed Ethernet Switch...torques must be observed during assembly. Only use connecting...