Profiles

Profiles are a set of general configuration settings that can be swiftly and easily applied to all devices associated with the Profile so all devices are configured identically as a group.

Creating a Profile

After a profile is created, you can configure switch port functionality, port activity schedules, and advanced features including VLAN, Quality of Service, and access control functions in each profile.

Note: Profiles are created for individual organizations. In order to configure Profiles, select the organization from the drop-down menu at the top of the page.

1. Navigate to Configure > Switch > Profiles.
2. Click Create Profile.
3. Enter a name for the Profile and choose the device model.
   ‎ Note: The Profile can only be used for the selected device model type.
4. Select the Access Level for the accessibility level of the profile.
5. [Optional] Select Clone from existing profile and choose a Profile from the drop-down menu to clone an existing Profile.
6. Click Create Profile.

Deleting Profiles

1. Navigate to Configure > Switch > Profiles.
2. Click the checkbox next to the Profiles you wish to delete.
3. From the Profile list, click Delete profile at the top of the table.
4. When prompted to confirm, click Yes.

Configuring Switch Port Settings

From the Ports window, you can configure basic and advanced settings for individual ports or groups of ports. Switch ports are categorized into group ports, with each group referring to the number of ports on the physical switch model. For example, port group 10 configures port settings for 10-port switches. The port settings configured in the profile will only apply to the ports of the corresponding switch type. For example, any port configurations for port group 10 will only apply to corresponding ports on 10-port switch using this profile.

Customizing the Profile Port Configuration Overview

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Ports under the Actions column of the Profile you wish to edit.
3. Select a port group from the Ports group drop-down menu. This will only display ports for the selected port group profile. For example, selecting port group 28 will only show ports 1 to 28 of the profile used for 28-port switches. Select All to show all port groups.

4. Click the filter parameter icon.
   ‎

5. Click the checkbox next to the parameters to display them in the overview.
   ‎ Note: All checked parameters will automatically appear.

Configuring Profile Port Settings for One or More Switch Ports

Switch port configuration allows administrators to configure extensive port functionality including port availability, port speed, redundancy, VLAN, PoE, and port activity schedules for individual ports or for a group of ports.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Ports under the Actions column of the Profile you wish to edit.
3. From the port list, check the box next to the ports you wish to edit.
4. Click Edit.
5. Specify the following information:
   ‎ Note: At the top of the edit port window is a list of all selected ports. The changes made will apply to all selected ports.
   ‎

 

6. Click Save.
7. Click Push Configuration.

 

Aggregating Multiple Switch Profile Ports

Port aggregation allows you to link multiple physical ports together as one logical link to increase port bandwidth and redundancy in the event of a single physical link failure. Ports can be aggregated using either LACP or static link.

Note: Port aggregation is not supported if the port type is set to “Access”. To configure the port type, refer to the above Configuring Profile Port Settings for One or More Switch Ports section for more information.

 

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Ports under the Actions column of the Profile you wish to edit.
3. From the port list, check the box next to the ports you wish to link together.
4. Click Aggregate.
5. In the Link Aggregation Setting window, select the aggregation type.
   ‎ Note: Static link requires manual configuration of the ports in the aggregation group. Link Aggregation Control Protocol (LACP) dynamically queries to listening ports to join the aggregation group.
   ‎

 

6. Click Aggregate.
   ‎ Note: Aggregated ports can be identified by the combined port number in the Aggregate column of the port overview.
   ‎
7. Click Push Configuration.

Splitting Aggregated Switch Ports

Linked port groups can be split into their respective individual ports. Splitting port groups will undo all aggregation settings applied to the affected ports.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Ports under the Actions column of the Profile you wish to edit.
3. From the port list, check the box next to the aggregated port(s) you wish to split.
4. Click Split.
   ‎ Note: This will immediately split the selected aggregated ports.
5. Click Push Configuration.

Mirroring Port Traffic to Another Switch Profile Port

Port Mirroring is a method of monitoring network traffic that forwards a copy of each incoming and/or outgoing packet from one port of the switch to another port, where the packet can be studied. This enables network managers to better monitor network performance.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Ports under the Actions column of the Profile you wish to edit.
3. From the port list, check the box next to the port(s) you wish to mirror.
4. Click Mirror.
5. Specify the following information:
   ‎

 

6. Click Create port mirror.
7. Click Push Configuration.

Undoing Port Traffic Mirroring

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Ports under the Actions column of the Profile you wish to edit.
3. From the port list, check the box next to the mirrored port(s) you wish to unmirror.
4. Click Unmirror.
5. Click Delete port mirror.
6. Click Push Configuration.

Adding a Tag to One or More Switch Profile Ports

User can add descriptive tag to ports to identify and filter different ports or groups of ports. Tags are purely informational and do not affect the functionality of the port.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Ports under the Actions column of the Profile you wish to edit.
3. From the port list, check the box next to the port(s) you wish to add a tag to.
4. Click Tag.
5. In the Add field, enter the tag content. Multiple tags can be entered.
   ‎ Note: If this is a new tag, click Add option to make this a reusable tag.
   ‎
   ‎
6. Click Add tag.
   ‎ Note: Any tags associated to a port will be shown in the Tags column.
   ‎

Removing a Tag From One or More Switch Ports

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Ports under the Actions column of the Profile you wish to edit.
3. From the port list, check the box next to the tagged port(s) you wish to remove the tag(s) from.
4. Click Tag.
5. In the Delete field, enter the tag name. Alternatively, click the input field to bring up a list with all the associated tags.
6. Click Remove tag.

Configuring Basic Switch Profile Settings

Configuring Management VLAN Membership

The management VLAN is the primary VLAN to connect to the cloud to configure and manage the network. By default, management VLAN 1 is the default for all switch ports.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the Basic tab.
4. In the VLAN Configuration section, select a VLAN ID from the drop-down menu or directly enter an ID into the VLAN ID field.
   ‎ Note: Changing the management VLAN ID requires the management port(s) to be assigned to the new management VLAN ID.
5. Click Save.
6. Click Push Configuration.

Configuring Spanning Tree Protocol (STP)

RSTP is an availability and redundancy feature that prevents redundant backup links between switches and prevents switch loops from forming by shutting down the port causing the loop. If RSTP is enabled under profile settings, this profile’s device will be enabled. You can enable/disable RSTP of individual ports under the Switch Ports page, or at Configure > Switch > Profile > Ports. Note: RSTP must be manually enabled under BOTH Switch Settings of a profile and Switch Ports.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the Basic tab.
4. In the RSTP Configuration section, select Enable next to RSTP.
5. Click Add to add an RSTP bridge priority.
6. In the Set the bridge priority for switches window, specify the following information:
   ‎

 

7. [Optional] Click Add to add additional bridge priorities.
8. Click Add.
9. [Optional] To delete a bridge priority, check the checkbox next to the switch and click Delete under the Actions column.
10. Click Save.
11. Click Push Configuration.

Configuring DHCP Server Screening

DHCP screening allows administrators to whitelist DHCP servers to prevent unauthorized DHCP servers and devices from gaining access to the network.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the Basic tab.
4. In the DHCP Server Screening Configuration section, select Enable next to DHCP Server Screening.
5. In the Allowed DHCP server field, enter the IP address of the DHCP server to whitelist.
   ‎ Note: Up to 5 DHCP servers can be whitelisted.
6. Click Save.
7. Click Push Configuration.

Configuring Voice VLAN 

Voice traffic from IP phones can be assigned to a dedicated VLAN (via Voice VLAN ID setting) and given traffic priority (via Voice VLAN CoS setting).

Note: Voice VLAN priority settings overrule any priority settings configured in the Quality of Service section.

Note: Voice VLAN is not supported if the port type is set to “Trunk”. 

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the Basic tab.
4. In the Voice VLAN Configuration section, select Enable next to Voice VLAN.
5. In the Voice VLAN ID field, enter an ID between 2 and 4094.
6. Select a Voice VLAN Class of Service (CoS) level from the drop-down menu.
   ‎ Note: The CoS level reflects the priority level of Voice VLAN traffic. A higher value means a high priority, whereas a lower value means a low priority.
7. [Optional] Click Add to add a Voice VLAN OUI.
   ‎ Note: An Organizationally Unique Identifier (OUI) is used to add additional manufacturers to the voice VLAN identification list in addition to the pre-configured OUIs.
8. In the Add OUIs for switches window, specify the following information:‎

9. [Optional] Click Add to add additional OUIs.
10. Click Add.
11. [Optional] To delete an OUI, check the checkbox next to the OUI and click Delete.
    ‎ Note: Default OUIs cannot be deleted.
12. Click Save.
13. Click Push Configuration.

Configuring Jumbo Frame

Enabling Jumbo Frame allows the port to switch frames larger than the standard Ethernet frame and can maximize server-to-server performance.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the Basic tab.
4. In the Jumbo Frame Configuration section, select Enable next to Jumbo Frame.
5. Click Save.
6. Click Push Configuration.

Configuring Quality of Service Settings

QoS is an implementation of the IEEE 802.1p standard that allows network administrators to reserve bandwidth for important functions that require a larger bandwidth or that might have a higher priority, such as VoIP (voice-over Internet Protocol), web browsing applications, file server applications or video conferencing. By reserving more bandwidth for critical traffic, the overall network performance can be maintained and  critical data can be transmitted smoothly.

The Quality of Service windows displays the status of Quality of Service priority levels of each port, a higher priority means the traffic from this port will be first handled by the switch. For packets that are untagged, the switch will assign the priority depending on your configuration.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the Basic tab.
4. In the Quality of Service section, select the Trust State. The selection determines the CoS value assignment method. For CoS/802.1p, the CoS will be based on the packet's Queue ID. For DSCP, the CoS will be based on the DSCP value. Configure the mapping between Queue ID and CoS and between CoS and DSCP below for your selection.
5. Select the Scheduling method: SP (Strict Priority) and WRR (Weighted Round Robin.  For SP, incoming traffic with the highest priority will be transmitted first. For WRR, the proportion of the incoming packets to be transmitted will be based on the weight of the queue.
6. In the DSCP  to CoS  Mapping section, select a Class of Service value between 0 to 7 for each DSCP value. A higher value means a higher priority while a lower value means a lower priority.  Depending on the Scheduling Method, Traffic from ports with assigned CoS values are processed differently.
   ‎
7. In the CoS to Queue Mapping section, select the Queue ID to for each CoS value (0-7).
8. Click Save.
9. Click Push Configuration.

Configuring SNMP Settings

Simple Network Management Protocol (SNMP) can be enabled to support monitoring and management tasks on the network. Depending on the capabilities of the switch, versions v1, v2c and v3 are supported. Once it is enabled, the switch device can then reply to the SNMP commands and generate trap messages when there are alert events.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the Basic tab.
4. In the SNMP section, enable or disable the SNMP. 
5. Enter the UDP port for SNMP communication. The default is 161.
6. Enter the SNMP community name. The default is public.
7. Enable or disable the trap state. If enabled, enter the trap receivers' IP addresses. Separate multiple addresses with a comma, space , or semicolon.
8. [Optional] Click Download MIBs to download MIB files. You can view them with a MIB browser.
9. Click Save.
10. Click Push Configuration.

Configuring ACL Settings

Creating IPv4 Access Control Policy Rules

IPv4 Access Control Lists (ACL) allow administrators to configure a set of criteria for permitting or denying traffic coming from and to the switch based on IP addresses.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the ACL tab.
4. In the User Defined IPv4 Rules section, click Add.
5. In the Add an IPv4 rule window, specify the following information:‎

 

6. Click Add.
7. Click Save.
8. Click Push Configuration.

Editing IPv4 Access Control Policy Rules

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the ACL tab.
4. In the User Defined IPv4 Rules section, click Edit in the Actions column of the rule you wish to edit.
5. Specify the following information:
   ‎

 

6. Click Save.
7. Click Push Configuration.

 

Deleting IPv4 Access Control Policy Rules

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the ACL tab.
4. In the User Defined IPv4 Rules section, click the checkbox next to the rule(s) you wish to delete.
5. Click Delete.
   ‎
6. When prompted to confirm, click Yes.

Creating MAC Access Control Policy Rules

 Besides ACL filtering according to IP addresses, MAC addresses can also be configured and applied to ACL.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the ACL tab.
4. In the User Defined MAC Rules section, click Add.
5. In the Add a MAC ACL window, specify the following information:

 

6. Click Save.
7. Click Push Configuration.

Configuring Access Policies

Creating an Access Policy

Administrators can configure one or more remote RADIUS servers for port-based or MAC-based authorization and authentication. This ensures that only users with matching credentials have access to the network. Administrators can also configure a Guest VLAN to grant Internet access to visitors, while preventing them from accessing the network.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the Access Policy tab.
4. Enter a name for the policy.
5. In the RADIUS servers field, select a pre-configured RADIUS server or click Add a RADIUS server to add a new RADIUS server.
6. In the Add RADIUS servers window, specify the following information:
   ‎

Note: RADIUS servers can be configured centrally in the Authentication menu. Refer to Authentication for more information.

7. [Optional] Click RADIUS server 2/RADIUS server 3 to add additional RADIUS servers.
8. Select an access policy type:

 

9. [Optional] Select a VLAN ID for guest VLAN from the drop-down menu.
10. Click Save.
11. Click Push Configuration.

Configure a Guest VLAN

Administrators can configure one or more Guest VLANs to grant internet access to visitors, while preventing them from accessing the network.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the Access Policy tab.
4. Select a Guest VLAN from the list.
5. Click Save.
6. Click Push Configuration.

Configuring Internet Group Management Protocol (IGMP) Snooping

IGMP  Snooping allows administrators to configure switches to subscribe to, and receive multicast traffic. If a switch is not added to the IGMP list, it will not receive multicast traffic by default.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to edit.
3. Click the IGMP Snooping tab.
4. Click Add to add a switch to the IGMP snooping list.
5. In the Add IGMP snooping settings for switches window, specify the following information:

 

6. [Optional] Click Add to add switches to the IGMP list.
7. Click Add.
8. To configure IGMP snooping VLAN settings, click Add.

   Enter the following information:

   VLAN ID	Assign a VLAN ID for the IGMP VLAN group.
   IGMP Snooping	Select an IGMP policy. Enable: The VLAN will subscribe to and receive multicast traffic. Disable: The VLAN will not receive multicast traffic.
   Querier state	Enable or disable the Querier state for sending query messages to discover members of a given multicast group.
   Multicast filtering mode	Select the filtering mode for multicast: Forward unregistered or Filter unregistered.
   Static Mrouter port settings	Select the member ports of the configured VLAN to set as a  Static Multicast router (Mrouter) port which connects to a multicast router for forwarding multicast traffic.

    
9. Click Save.
10. Click Push Configuration.

 

Viewing Current VLANs on the Switch

The configured VLANs can be viewed in the Profile settings. To obtain the VLAN list, go to Configure > Switch > Profiles.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click Settings under the Actions column of the Profile you wish to view or edit.
3. Click the VLAN tab.

The following information is displayed:

 

Pushing Configuration Changes

The Push Configuration function allows you to quickly apply Profile configuration changes to all devices using this Profile.

Note: Changes made to a Profile’s ports or settings will be pushed to all associated devices after the user selects Push Configuration.

1. Navigate to Configure > Switch > Profiles.
2. From the Profile list, click the checkbox next to the Profiles you wish to push the configuration to apply it to the associated devices of the configured model.
3. Click Push Configuration  at the top of the table.
4. Select either Push Configuration Now or Schedule a Configuration Pushing Time to apply the configuration changes at a later time. The schedule will be reflected in the Scheduled Push column of the Profiles list.

   ‎ Note: A result window will appear providing a summary of the update status.

5. In the Push Configuration Result window, click the X icon in the top-right to close the window.