Template:Networking tswos manual ports: Difference between revisions

Revision as of 11:50, 25 October 2024

The information in this page is updated in accordance with firmware version .

Summary

The Ports page provides information related to the status of the device's physical ports, as well as the ability to edit port settings, security, loopback detection.

General

In this section you can enable Jumbo frames and LLDP frame filter services.

Field	Value	Description
Jumbo frames	off \| on; default: on	Allow ethernet frame with a payload greater than the standard maximum transmission unit (MTU) of 1500 bytes. This may improve network performance by making data transmissions more efficient.
LLDP frame filter	off \| on; default: off	Enable to stop the forwarding of LLDP frames.
IGMP snooping	off \| on; default: off	Enables IGMP snooping.
Multicast querier	off \| on; default: off	Enables multicast querier.

Port Settings

This section displays information about the status of the device's ports with the ability to configure port settings.

Port Settings

The figure below is an example of the All Ports window, color indicates port speed and status:

[[File:Networking_tswos_manual_ports_ports_settings_port_settings_{{{poe}}}.png|border|class=tlt-border]]

To change port settings select port and press `edit (number of ports) ports` button:

[[File:Networking_tswos_manual_ports_ports_settings_port_settings_edit_{{{poe}}}.png|border|class=tlt-border]]

You will be redirected to `Port settings`. From here you can enable/disable ports or change settings:

[[File:Networking_tswos_manual_ports_ports_settings_port_settings_settings_{{{poe}}}.png|border|class=tlt-border]]

Field	Value	Description
Enable	off \| on; default: on	Toggle port on or off.
EEE	off \| on; default: on	Enable Energy-Efficient Ethernet.
Isolate port	off \| on; default: off	When enabled port will be isolated from other isolated ports. Traffic between isolated ports will droped. Traffic between isolated and normal ports will be sent as normal.
Link speed	Auto \| 10Mbps (E) \| 100Mbps (FE) \| 1000Mbps (GbE); default: Auto	A measure of how fast ports are able to transmit and receive data.
Duplex	Full \| Half; default:	Advertises preferred duplex mode and speed for negotiation with other devices.

Port Status

This section displays port status information. There is also an option to select, enable ports, enable/disable PoE, EEE and Isolation options:

Field Name	Description
Port	Port ID.
Enabled	Enable/Disable port.
Status	Port status.
Speed	Port link speed. Possible speeds: GbE: 1000Mbps FE: 100Mbps E: 10Mbps
PoE (W)	PoE port power usage in watts.
EEE	Enable/Disable Energy-Efficient Ethernet.
Isolation	When enabled port will be isolated from other isolated ports. Traffic between isolated ports will be droped. Traffic between isolated and normal ports will be sent as normal.
TX sum	Total upload.
RX sum	Total download.
TX rate	Upload speed.
RX rate	Download speed.

Port Mirroring

Port Mirroring is a service that mirrors incoming and outgoing packets on one Ethernet port (Source Port) to another (Monitoring Port).

To change port mirroring settings select port and press `Edit` button:

You will be redirected to `Port mirroring settings`, from here you can select ingress and egress ports:

Field	Value	Description
Enable	off \| on; default: off	The port which will mirror the packets.
Ingress mirroring port list	port; default: none	Specify which port incoming traffic is mirrored.
Egress mirroring port list	port; default: none	Specify which port outcoming traffic is mirrored.

Loopback Detection

A port-based loopback detection service that using its own distinctive packets, seeks to identify and break a network loop by shutting down troublesome ports.

Field	Value	Description
Enable	off \| on; default: off	Enable loopback detection.
Broadcast interval	integer [1..10000]; default: none	Send detection packets in an given interval from 1 to 10000 seconds.
Auto-recovery interval	integer [60..10000]; default: none	Restores disabled ports in an given interval from 60 to 10000 seconds.

Port Tracking

Tracks specific port status. Notes:

STP: STP must be disabled in Network -> Spanning Tree and loopback detection must be enabled for the service to function.

Port unblocking: When a loop occurs before a broadcast, it won't be recognized until the broadcast transmits its own packets, since the service only listens for packets with its own particular protocol.

To change port tracking setting press on port and you will be redirected to `Port tracking configuration`:

Field	Value	Description
Enable	off \| on; default: on	Enable port tracking.
Recovery mode	Auto \| Manual; default: Auto	Manages port unblocking type.Possible modes: Manual: Port is blocked until manual unblock. Auto: Unblocked automatically depending on the global Auto-recovery interval value.

802.1X

This section displays information about the status of the device's ports with the ability to configure port security settings.

General

Port Status

The figure below is an example of the Port Status window, color indicates port speed and status:

[[File:Networking_tswos_manual_ports_8021x_port_status_{{{poe}}}.png|border|class=tlt-border]]

To change port security settings select port and press `edit (number of ports) ports` button:

[[File:Networking_tswos_manual_ports_8021x_port_status_edit_{{{poe}}}.png|border|class=tlt-border]]

You will be redirected to `Port security settings`. From here you can enable/disable ports or change security settings:

Field	Value	Description
Enable	off \| on; default: off	Enable security for port.
Role	Client \| Server; default: Server	Toggle 802.1x role.
Radius sever	radius server ID; default: example	Radius server ID.
Guest VLAN	Disabled \| VLAN; default: Disabled	Select guest VLAN for 802.1x server service.
Fallback VLAN	Disabled \| VLAN; default: Disabled	Select fallback VLAN 802.1x for server service.
Reject VLAN	Disabled \| VLAN; default: Disabled	Select reject VLAN 802.1x for server service.
Accept VLAN	Radius assigned \| VLAN; default: VLAN	Select accept VLAN 802.1x for server service
Client: Authentication type	MD5 \| TLS \| Password (EAP-PWD) \| Tunneled TLS \| Protected EAP (PEAP); default: MD5	Authentication type.
Client: Identity (Username)	string; default: none	Used as the username for authentication.
Client: MD5, PWD, Tunneled TLS, Protected EAP (PEAP): Password	string; default: none	Used for authentication.
Client:TLS: CA Certificate	.crt file; default: none	Radius server CA certificate.
Client:TLS: User certificate	.crt file; default: none	TLS client certificate.
Client:TLS: Private Key	.key file; default: none	TLS Private Key.
Client:TLS: Private Key Password	string; default: none	TLS Private Key Password.
Client:Tunneled TLS: Inner authentication	PAP \| MSCHAP \| MSCHAPv2 \| MSCHAPv2 (no EAP) \| CHAP \| MD5 \| GTC; default: PAP	Inner authentication type.
Client:Protected EAP (PEAP): Inner authentication	MSCHAPv2 \| MD5 \| GTC; default: MSCHAPv2	Inner authentication type.
Client:Protected EAP (PEAP): Peap version	Auto \| PEAPv0 \| PEAPv1; default: auto	You can choose an option of a blocking type.
Client:Tunneled TLS, Protected EAP (PEAP): Anonymous identity	string; default: none	Shown as username outside the encrypted tunnel. Not used for authentication.
Client:Tunneled TLS, Protected EAP (PEAP): CA Certificate	.crt file; default: none	Radius server CA certificate.

Port Status

This section displays port status information. There is also an option to select, enable ports security, choose RADIUS server and change RADIUS unreachable action:

Field Name	Description
Port	Port ID.
Enabled	Enables port security on this port.
Status	Port status.
Radius server	Authenticates and authorizes devices trying to connect to this port.
Radius unreachable action	"Accept" gives anyone access to the port when the radius server is unreachable. "Reject" only unblocks the port if radius server explicitly authorizes it.

RADIUS

The RADIUS page is used to create and manage radius servers:

Field Name	Description
ID	RADIUS server ID.
Address (IPv4)	RADIUS server IP.
Authentication port	RADIUS server athentication port.
Secret	RADIUS server secret.

Radius Configuration

The RADIUS configuration window should look similar to this:

[[Category:{{{name}}} Network section]]

Field	Value	Description
IP address	ip; default: 0.0.0.0	RADIUS server IP.
Authentication port	integer [1.. 65535]; default: 1812	RADIUS server athentication port.
Secret	string; default: -	RADIUS server secret.
Test connectivity	-(interactive) button	Test connectivity to RADIUS server.
Test user credentials	-(interactive) button	Test credentials to RADIUS server.
Enable backup RADIUS server	off \| on; default: off	Enable backup RADIUS server.
IP address	ip; default: none	Backup RADIUS server IP.
Authentication port	integer [1.. 65535]; default: none	Backup RADIUS server authentication port.
Secret	string; default: -	Backup RADIUS server secret.
Test connectivity	-(interactive) button	Test connectivity to backup RADIUS server.
Test user credentials	-(interactive) button	Test credentials to backup RADIUS server.

@@ Line 328: / Line 328: @@
      <tr>
        	<td><span style="color:orange">Client:</span> Authentication type</td>
-        	<td>MD5 {{!}} <span style="color:red">TLS</span> {{!}} PWD {{!}} <span style="color:green">Tunneled TLS</span> {{!}} <span style="color:blue">Protected EAP (PEAP)</span>; default: <b>MD5</b></td>
+        	<td>MD5 {{!}} <span style="color:red">TLS</span> {{!}} Password (EAP-PWD) {{!}} <span style="color:green">Tunneled TLS</span> {{!}} <span style="color:blue">Protected EAP (PEAP)</span>; default: <b>MD5</b></td>
         	<td>Authentication type.</td>
      </tr>
@@ Line 373: / Line 373: @@
      <tr>
        	<td><span style="color:orange">Client:</span><span style="color:blue">Protected EAP (PEAP)</span>: Peap version</td>
-        	<td>auto {{!}} 0 {{!}} 1; default: <b>auto</b></td>
+        	<td>Auto {{!}} PEAPv0 {{!}} PEAPv1; default: <b>auto</b></td>
-        	<td>Peap version.</td>
+        	<td>You can choose an option of a blocking type.</td>
      </tr>
      <tr>