COMMANDO Soldier E3000 Series Managed Switch Web GUI Guide

COMMANDO Soldier E3000 Series Switches offers a state of art quality product that can serve on real time high-speed Performance with input power AC as well as DC, covers larger physical distance up to 250 meters with copper cables as compared to other brands best switches. This series is having advance L3 features, which are highly reliable, conformance to international open standards, durable, serviceable, aesthetics, perceived quality, enhanced performance with larger range with copper cables and usability leads to value to money. Easy Management via lots of options like RIP V1/2, OSPF, Advanced Web-based Graphical User Interface (Web GUI), Industry standard Command Line interface (CLI), RADIUS/TACACS+, LLDP/LLDP-MED, Time based PoE/PoE+ Scheduling, DHCP server as well as zero touch provisioning whichever is suitable to our esteem customers.

COMMANDO Soldier E3000 Series switches are L3 Aggregation and Access Series Routing Switches are fully managed L3 having 4, 24 and 48 GE switch ports or 24/48 SFP ports with perpetual PoE/PoE+ IEEE 802.3 af/at (15.4W, 30W) compliant or Non PoE models plus additional fixed 10G or 1G fiber/ 10GE or 1GE copper uplink ports as per requirement with perpetual PoE/PoE+ for no power downtime required for network resiliency and high availability which delivering robust performance and intelligent switching for growing networks. This series switches are easy to deploy, use, manage and designed exclusively for enterprise-class aggregation layer and as edge networks Switches, specially built for Security, IoT, and Cloud networking needs of growing businesses, high-end campus networks for Small-Medium Business (SMB). Designed for operational simplicity to lower total cost of ownership, they enable scalable, secure, and energy-efficient business operations with intelligent and automated services. This intelligent managed routing switches designed for networks requiring High performance, High port density, High uplink bandwidth, Flexibility, Fault Tolerance, and Advanced Software features for maximum Return on Investment (ROI). Switch models are designed for full PoE capability on all ports, power and fan redundancy, Layer 3 feature support static and dynamic routing, these are optimized for today’s surveillance, mobile and IoT needs. Designed for operational simplicity to lower total cost of ownership, they enable scalable, secure, and energy-efficient business operations with intelligent and automated services.

It has high performance fixed uplink with fiber/copper 10G, 1G/10GE, 1GE ports fixed uplink which helps it to meet the requirement of high-end campus LAN, Metro/Enterprise networks. Each switch is capable to deliver 15.4W PoE and 30W PoE+ along with automated power (ON/OFF) scheduling with perpetual IEEE 802.3af compliant PoE (Power over Ethernet), 802.3at compliant PoE+ (Power over Ethernet plus) and having power budget up to 800W. Switches are PoE/PoE+ capable to provide power across all access ports for wireless APs, security cameras, and other IoT devices which are used in surveillance. These switches are powerful and flexible enough for users to deploy PoE/PoE+ standard supplies up to 30W of power per port which is backward compatible with 15.4W PD which makes it ideal for applications using high power wireless access points, PTZ (Pan Tilt Zoom) IP cameras, Surveillance cameras, VoIP telephony systems, kiosks, POS terminals, thin client, 802.11ac and 802.11ax access points, small cells, and connected LED lighting devices over longer distances up to 250 meters. It’s software includes OSPF, RIP, Static route, QoS Traffic classification based on Layer 2, Layer 3, Layer 4, and priority information Actions including ACL, CAR, and re-marking, Queue scheduling modes such as PQ, WFQ and PQ+WRR, Congestion avoidance mechanisms, including WRED and tail drop, Traffic shaping, SNMPv1/v2c/v3, Zero Touch Provisioning (ZTP), 802.1x authentication, RADIUS and TACACS+ authentication for login, DoS, ARP, MAC address attacks, broadcast storms, and heavy-traffic and ICMP attack defenses, Remote Network Monitoring (RMON).

These switches have advanced Security features, and advanced Quality of Service (QoS), ideal for all organizations considering reliable, affordable hardware with well-known CLI and simple Web managed real time interface. Automated PoE/PoE+ scheduling, Scripting capabilities, Layer 3 routing, Automatic MDIX and Auto-negotiation on all ports select the right transmission modes (half or full duplex) as well as data transmission for crossover or straight-through cables dynamically. Moreover, with its innovative energy-efficient technology, can save up to 58% of power consumption, making it an eco-friendly perfect solution for your business network. These switches come with lifetime free software upgrades and patching to enhance features and supports patching, which provides fixes for critical bugs and security vulnerabilities between regular maintenance upgrades. This support allows customers to add new features and upgrades without having to pay a single dollar.

It has a 4K-entry VLAN table which provides VLAN classification according to port-based, protocol-and-port-based, MAC-based, and Flow-based capability. It also supports IVL (Independent VLAN Learning), SVL (Shared VLAN Learning), and IVL/SVL (both Independent and Shared VLAN Learning) for flexible network topology architecture. It provides IEEE802.1ad (Q-in-Q) for double tag insertion and removal function. In additions, VLAN translation function is also supported for Metro Ethernet applications with up to 32K entries L2 MAC table are supported with 2-left 4-way hashing algorithm which can effectively reduce collision ratio. An independent 4K-entry Multicast table is used to support Multicast functions, such as IGMP snooping. The device supports a 4K-entry VLAN/Ingress/Egress Access Control List (ACL). The ACL function supports L2/L3/L4 match fields and performs configurable actions, such as Drop/Permit/Redirect/Mirror /Logging/Policing/Ingress VLAN conversion/Egress VLAN conversion/QoS remarking/VLAN tag status assignment. Per-port ingress/egress bandwidth control and per-queue egress bandwidth control are supported. The device provides three types of packet scheduling, including SP (Strict Priority), WFQ (Weighted Fair Queuing), and WRR (Weighted Round Robin). Each port has 8 physical queues, and each queue provides a leaky bucket to shape the incoming traffic into the average rate behavior. The Broadcast/Multicast/Unknown-Multicast/Unknown-Unicast storm suppression function can inhibit external and internal malicious attacks. The device supports 4-sets of port mirror configurations to mirror ingress and egress traffic. RSPAN, sFlow are also supported for traffic monitoring purposes. For network management purposes, complete MIB counters are supported to provide forwarding statistics in real time. The link aggregation function enhances link redundancy and increases bandwidth linearly. It offers robust QoS to optimize traffic on your Business Network, these switches provide (Port-based/802.1p/DSCP) QoS to keep latency-sensitive video and voice traffic jitter-free moving smoothly. Additionally, port-based, tag-based VLAN, Voice VLANs can improve security and meet more network segmentation requirements. This series switches also have provisioning of QOS, Static and dynamic routing for IPV6 clients.

 

Simplified Configuration and Management
Zero-Touch Provisioning (ZTP) simplifies installation of the switch.
Easy to manage via Console/web-Based Management (Web GUI) / Telnet / SSH / HTTPS.

 

Remote Manageability
Remote management is the process that allows the administrators to take full control of all operations using a remote. This remote management via Web GUI / Telnet / SSH / HTTPS will reduce time and money spent on management and maintenance and physical presence of Network Engineer.

 

Management by CLI- Console, Telnet (RFC854) up to 3 sessions

Management by Web GUI -HTTP, HTTPS for management Based on Remote Configuration and maintenance Using Telnet.

 

In this CLI guide we will understand Management by Command Line Interface (CLI) through console port, telnet management mode.

 

Accessing the Switch via console port

How to Login COMMANDO Series E3000 via console port?

The console interface is used by connecting the Switch to a VT100–compatible terminal or a computer running an ordinary terminal emulator program (e.g., the Hyper Terminal program included with the Windows operating system) using an RS–232C serial cable. Your terminal parameters will need to be set to:

• VT–100 compatible

• 115200 baud

• 8 data bits

• No parity

• One stop bit

• No flow control

 

Users may also access the same functions over a Telnet interface. Once you have set an IP address for your Switch, you can use a Telnet program (in VT–100 compatible terminal mode) to access and control the Switch. All the screens are identical, whether accessed from the console port or from a Telnet interface.

 

Step 1: Connect the Switch console port with PC/Laptop via console cable.

Fig-1 Connection of console port with PC/Laptop via console cable.

 

Step 2: The communication parameters configuration of the Putty Terminal with console is shown below Baud rate (Speed):115200

Fig-2. Putty configuration in PC for console port access

 

Step 3: Click on "Open".You will get following window.

With the console port properly connected to a management computer, the following screen should be visible.

Fig-3. COMMANDO Series E3000 Switch CLI access via console port

 

How to Login COMMANDO Series E3000 Web GUI and Enable Telnet?

Before Accessing Command Line Interface via telnet, you have to login to Web GUI of COMMANDO E3000 Switch. Connect one Ethernet port to your system with RJ45 LAN cable.

Fig-4. COMMANDO Series E3000 Switch port connected with PC via RJ45 LAN cable.

 

In PC following LAN setting required.

• Open Network and sharing center.
• Click change Adapter settings.
• Double click on Local Area Connection.
• Click Properties.
• Double click on Internet Protocol Version 4 (TCP/IPv4) option and set default IP as shown below.

 

IP Address: 192.168.0.(2-254)
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.0.1

 

Fig-5 Local Area Connection properties for Web Interface

 

Now Open any web browser type http://192.168.0.1 and hit “Enter” following window will appear.

 

Use following login details to enter in Web GUI mode,

Username: admin

Password: ********

(Note: Password is mentioned on backside of device)

 

Enter the login button. COMMANDO E3000 series switch starting Page appears.

Fig-6. COMMANDO E3000 Switch Web GUI Administrator Login Page 

 

Fig-7. COMMANDO E3000 Switch Web GUI starting Page

 

Following steps are required to access CLI via telnet lines.

Management>>Management Access>>Management Service

Click on Management

Click on Management Access

Click on Management Services

Telnet Click on

“Apply” and “Save” the configuration.

 

This is required stage before accessing COMMANDO E3000 Switch Command Line Interface (CLI) to enable “Telnet”. By default, “Telnet” service is disabled by default, so you must enable it manually.

 

Management >>Management Access>>Management Service is very important page to enable and disable Telnet, SSH, HTTP, HTTPS, SNMP and Set Session Timeout (By default 10min), Password Retry Count (By default 3), Silent Time (To block all further login attempts until the timer expires By default is 0 second) .

 

 

Fig-8. COMMANDO E3000 Switch Management Access service. 

 

Users access CLI through TELNET

Following are the steps to access CLI via telnet.

Step 1: Connect the LAN port of PC/Laptop with any Ethernet port of the switch by LAN cable.

Step 2: The communication parameters configuration of the Putty Terminal with TELNET is shown below:

IP Address: 192.168.0.1

Port: 23

Fig-9. Putty configuration in PC for Telnet access

 

Step 3: Click on “Open”. You will get following window.

Username: admin

Password: ********

(Note: Password is mentioned on backside of device)

 

Fig-10. COMMANDO Series E3000 Switch CLI access via telnet

 

1.1 Web browse based graphical user interface (Web GUI)

Introduction

COMMANDO E3000 Series SoldierOS had a web browser based graphical user interface (Web GUI). This is inbuilt in each COMMANDO E3000 series switches. You can use either the CLI via Console/Telnet or Web GUI for managing E3000 Series Switches. COMMANDO Networks recommend that you use this Web GUI which can configure almost everything as you needed in simple and user-friendly manner. This Web GUI is a state of art having world class features with which you can configure basic, advance, and special feature very easily. After setting the Proper PC LAN parameter given above and in Web browser giving IP address 192.168.0.1 you will get the login page.

Fig 1.1 Username and Password page of E3000 Series Switches

 

Fig 1.2 Default Login page of E3000 Series Switches

 

Note: With E3000 Web based Graphical User Interface (Web GUI)

1. You can change default IP 192.168.0.1 to any desired IP address.
2. You can change Factory set username--> admin and password-->*******.
3. Factory set default Password is written on the Backside of device.

 

After you login the web page successfully, you will see the System information page which provides you real time status of Switch. This page shows very important System information of this E3000 device which can help in troubleshooting network issues. The upper frame is the front panel frame, which shows the connection situation of each port. If a port is connected and link is up and working properly then the corresponding port on the front panel will be green.

Fig 1.3 System Information page of E3000 Series Switches

 

1.2 Main Menu Description in Web GUI

The left-hand panel shows the configuration the configuration web pages tabs. All configuration web pages are hidden by the group head label. To expand the group head label, click the down arrow sign on the left side of main WEB page. Then this down arrow key can expand group head label to get specific Web pages for Switch to configure as per requirement of users.

In E3000 Series Switches SoldierOS comes with PoE/PoE+ as Well as Non PoE models. COMMAMDO SoldierOS has 15 Group heads for E3000 PoE based switches. Lots of functions and protocols can be easily configured by Web GUI and very handy and easy to troubleshoot any networking issue.

 

Fig 1.4 WEB Pages for E3000 Series Switches.

 

Quick Start Device Configuration

To simplify E3000 Series device configuration through quick navigation, the Getting Started page provides links to the most used pages.

 

Table 1.1 E3000 Series Switches SoldierOS Web Software Frameworks.

1.3 Save, Logout, Reboot, Debug Buttons

1.3.1 Save

By clicking Save button will copy running-config to startup-config to save the current running configuration to the startup configuration file in Switch Memory. This means that if power failure or device OFF/ON configuration will not be lost and remained as per saved configuration.

Fig 1.3.1 Save button

 

Fig 1.3.2 Applying Save button

 

1.3.2 Logout

Logging out means to end access to a COMMANDO Switch on a Web GUI. Logging out informs the COMMANDO Switch that the current user wishes to end the login session.

Fig 1.3.3 Logout button on WEBGUI

Fig 1.3.4 Applying Logout button on Web GUI

 

1.3.3 Reboot

Reboot means boot again. COMMANDO Switch is force by this command to power OFF and immediately Power-On. This command forcefully restarting the Switch again.

Fig 1.3.5 Reboot button on Web GUI

 

Fig 1.3.6 Applying Reboot button on Web GUI

 

1.3.4 Debug

Debug is used to find and resolve bugs or defects. Debugging is the process of troubleshooting for detecting and removing of existing and potential issue in network.

Fig 1.3.6 Debug message button on Web GUI

 

Fig 1.3.7 View Debug message on Web GUI

Group Header: Status

After clicking Status down arrow keys four corresponding web pages tabs are opened.

System Information: This section describes how to view system information and configure various options on the device. This web page shows the Exact running status of device along with LED Indication like Power, System, connection and activity for all ports, UP/Down status of all ports as well as configuration for devices such as System Information, Model, System Name, System Location, System Contact, Serial Number, MAC Address, IPv4 Address, IPv6 Address, System OID, System Uptime, Current Time, Loader Version, Loader Date, Firmware Version, Firmware Date. This page also gives enabled status device management lines like Telnet, SSH, HTTP, HTTPS, SNMP.

System Time: System time options for configuring the system time, time zone, and Daylight Savings Time (DST).

Logging Message: You can enable or disable logging on the Log Settings page and select whether to aggregate log messages.

Port: You can view port statistics and reset the port counters.

Link Aggregation: Enable/disable the Link Aggregation Control (LAG) protocol and configure the potential member ports to the desired LAGs by using the LAG Management page. By default, all LAGs are empty.

MAC Address Table: There are two types of MAC addresses—static and dynamic. Depending on their type, MAC addresses are either stored in the Static Address table or in the Dynamic Address table, along with VLAN and port information. Static addresses are configured by the user, and therefore, they do not expire. These pages describe how to add MAC addresses to the system. It covers Configuring Static MAC Addresses, Managing Dynamic MAC Addresses.

 

2.1 System Information
This is the main display page of E3000 SoldierOS. This web page shows the Exact running status of device along with LED Indication like Power, System, connection and activity for all ports, UP/Down status of all ports as well as configuration for devices such as System Information, Model, System Name, System Location, System Contact, Serial Number, MAC Address, IPv4 Address, IPv6 Address, System OID, System Uptime, Current Time, Loader Version, Loader Date, Firmware Version, Firmware Date. This page also gives enabled status device management lines like Telnet, SSH, HTTP, HTTPS, SNMP.

Fig 2.1 System information Web page

 

2.1.1 Changing the System Name, Location and Contact

Following are the steps to change the Default System Name, Location and Contact.

Status>>System Information>>Edit button

Fig 2.1.1 Changing the System Name, System Location and System Contact

 

After clicking Status>>System Information>>Edit button, Modify the System Name, System Location and System Contact as per users’ requirements.

Fig 2.1.2 Changing System Name, System Location and System Contact

 

After changing System Name, System Location and System Contact click on Apply button. Then you can see the changed System Name, System Location and System Contact.

Fig 2.1.3 Viewing Changed System Name, System Location and System Contact

 

2.2 System Time

Synchronized system clock is critical because every aspect of managing, securing, planning, and debugging a network involves determining when events occur. Without synchronized clocks, accurately correlating log files between devices when tracking security breaches or network usage is impossible. Synchronized time also reduces confusion in shared file systems, as it is important for the modification times to be consistent, regardless of the machine on which the file systems reside. For these reasons, it is important that the time configured on all the devices on the network is accurate.

System time can be set manually by the user, dynamically from an SNTP server, or synchronized from the PC running the Web GUI. If an SNTP server is chosen, the manual time settings are overwritten when communications with the server are established. As part of the boot process, the device always configures the time, time zone, and DST. These parameters are obtained from the PC running the Web GUI, SNTP, values set manually, or if all else fails, from the factory defaults. 

The following methods are available for setting the system time on the Switches

Manual—You must manually set the time.

From PC—Time can be received from the PC by using browser information. 

This method of setting time from PC works with both HTTP and HTTPS connections.

SNTP—Time can be received from SNTP time servers. SNTP ensures accurate network time synchronization of the device up to the millisecond by using an SNTP server for the clock source.

This page allow user to set time source, static time, time zone and daylight-saving settings. Time zone and daylight saving takes effect both static time or time from SNTP server.

To display System Time page, click Status>> System Time

Fig 2.2.1 Default System Time configuration page

 

Time Zone and Daylight Savings Time (DST)

A time zone is one of the areas into which the world is divided where the time is calculated as being a particular number of hours behind or ahead of GM. The main purpose of Daylight-Saving Time (called "Summertime" in many places in the world) is to make better use of daylight. We change our clocks during the summer months to move an hour of daylight from the morning to the evening.

Fig 2.4.2 Timezone configuration page

 

Fig 2.4.3 Daylight saving time configuration page

 

From Computer

This is the best way to configure the time setting in switch. E3000 Series Switches will take and sync with logging PC time automatically. This is a recommended setting to have proper time setting in switch. Just select proper time zone as per country or requirement.

To configure and view this recommended setting click on Status>> System Time and use source From Computer.

Fig 2.4.4 Time configuration from connected computer page

 

Fig 2.4.5 Time configuration from connected computer page

 

SNTP

The simple network time protocol (SNTP) is a time synchronization protocol of the TCP/IP protocol family. It is based on the connectionless user datagram protocol (UDP) and can be used on all supporting devices to synchronize system time in IP networks (IPv4 and IPv6). Time can be received from SNTP time servers. SNTP ensures accurate network time synchronization of the device up to the millisecond by using an SNTP server for the clock source. You can also set local or public time server IP or Hostname if time server is locally available.

Fig 2.4.6 SNTP Configuration page

 

After changing Time, you can verify the changed time from system information page.

Fig 2.4.5 System Information page displaying current time.

 

2.3 Logging Message

This page shows the log messages Logging Message Table of RAM by System Log feature, which enables the device to generate multiple independent logs. Each log is a set of messages describing system events. System Log feature, which enables the device to generate multiple independent logs. Each log is a set of messages describing system events. By default, notification Log message sent to the console interface. Log written into a cyclical list of logged events in the RAM and erased when the device reboots. Log written to a cyclical log-file saved to the Flash memory and persists across reboots. To view the logging messages stored on the RAM, click Status >> Logging Message and use Viewing option RAM

Note: By default, RAM option will be selected.

Fig 2.3.1 Logging Message Table of RAM

 

To view the logging messages stored on the Flash, click Status >> Logging Message and use Viewing option Flash.

Fig 2.3.2 Logging Message Table of Flash

 

The number of entries to be shown for logging message table are shown

Fig 2.3.3 Logging Message Table of Entries selection

 

2.4 Port

A management information base (MIB) is a database used for managing the entities in a communication network. Most often associated with the Simple Network Management Protocol (SNMP), the term is also used more generically in contexts such as in OSI/ISO Network management model.

 

2.4.1 Port Statistics

This page shows Port statistics like MIB Counter & Refresh rate for each port. By default, Port Gigabit Ethernet 1 is selected, and refresh rate is 10 seconds. The Port configuration page displays port summary and status information. To view particular port status, click Status >> Port >> Statistics and select Port.

Note: Default selection is GE1

Fig 2.4.1 Port selection for MIB Counter Statistics

 

Fig 2.4.2 Gigabit Ethernet 5 port selection for MIB Counter Statistics

 

The other common type of MIB used for polling statistics is a MIB counter. Interface MIB used to measure traffic on a network interface. The MIB will show you a running total number of the octets (bytes) of traffic that have went in/out of the interface.

Fig 2.4.3 RMON  MIB Counter Statistics

 

2.4.2 Port Error Disabled

The ErrDisable feature is implemented to handle special situations where the switch detected excessive or late collisions on a port, port duplex misconfiguration, EtherChannel misconfiguration, Bridge Protocol Data Unit (BPDU) port-guard violation, UniDirectional Link Detection (UDLD), and other (miscellaneous) causes.

 

The error-disable function allows the switch to shut down/ Protect /Restrict a port when it encounters physical, driver or configuration problems. A port being error-disabled is not by itself a cause for alarm, but a symptom of a problem that must be resolved. To display the Error Disabled web page, click Status >> Port >> Error Disabled.

Fig 2.4.4 Default Port Error disabled Table

 

Recovering form Error disabled state

To recover a port that is in an ErrDisable state, manual intervention is required, and the administrator must access the switch and configure the specific port with "shutdown" followed by the "no shutdown" command in CLI. This command sequence will enable the port again, however, if the problem persists expect to find the port in ErrDisable state again soon. In Web GUI can easily recover from error disable by selecting port and pressing recovery button.

Fig 2.4.5 Recovering form error disabled state.

 

2.4.3 Port Bandwidth Utilization

Bandwidth utilization for each port can be seen by this page and for the switch fabric itself. Easiest way to look at all ports, this shows how much bandwidth for each switch port interfaces are using. In other words, it helps you monitor bandwidth. This page allow user to look bandwidth utilization in real time. This page will refresh automatically by default in 5 second. To display Bandwidth Utilization web page, click Status >> Port >> Bandwidth Utilization.

Fig 2.4.6  Bandwidth utilization and refresh rate

 

2.5 Link Aggregation

Link aggregation is a way of bundling a bunch of individual Ethernet/ Fast Ethernet/ Gigabit Ethernet links together, so they act like a single logical link. The official IEEE standard for link aggregation used to be called 802.3ad.

Link aggregation groups (LAGs) allow you to combine multiple Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single link, which increases fault tolerance and load sharing. Specify LAG membership before you enable the LAG. The switch supports up to eight LAGs. To display the Link Aggregation web page, click Status >> Link Aggregation.

Fig 2.5.1 Default Link Aggregation table information.

 

Fig 2.5.2  Link Aggregation table information.

 

2.6 Mac Address Table

A MAC address table, sometimes called a Content Addressable Memory (CAM) table, is used on Ethernet switches to determine where to forward traffic on a LAN.

There are two types of MAC addresses—static and dynamic. Depending on their type, MAC addresses are either stored in the Static Address table or in the dynamic address table, along with VLAN and port information. Static addresses are configured by the user, and therefore, they do not expire. To display the MAC Address Table web page, click Status >> MAC Address Table.

Fig 2.6.1  Mac Address Table  information

 

Fig 2.6.2 Default Static Mac Address Table information