Siemens RUGGEDCOM ROS v4.3 User Manual

Chapter 5
Setup and Configuration
RUGGEDCOM ROS
User Guide
136 Forbidden Ports List
Frame Received
a
Untagged
Priority Tagged
(VID = 0)
Tagged (Valid VID)
VLAN ID associated with the frame PVID PVID VID in the Tag
Frame dropped due to its tagged/untagged format No No No
Frame dropped if the ingress port is not a member of the VLAN the
frame is associated with and ingress filtering is enabled
Yes
a
Does not depend on the ingress port's VLAN configuration parameters.
Egress rules are applied as follows to all frames when they are transmitted by the switch.
On Other VLAN
Egress Port Type On Egress Port's Native VLAN
Port Is a Member Of the VLAN
Port Is Not a Member
Of the VLAN
Edge Dropped
Trunk
According to the egress port's
PVID Format parameter
Tagged Dropped
Section5.1.1.6
Forbidden Ports List
Each VLAN can be configured to exclude ports from membership in the VLAN using the forbidden ports list. For
more information, refer to Section5.1.5.2, “Adding a Static VLAN” .
Section5.1.1.7
VLAN-Aware and VLAN-Unaware Modes
The native operation mode for an IEEE 802.1Q compliant switch is VLAN-aware. Even if a specific network
architecture does not use VLANs, RUGGEDCOM ROS's default VLAN settings allow the switch to still operate in a
VLAN-aware mode, while providing functionality required for almost any network application. However, the IEEE
802.1Q standard defines a set of rules that must be followed by all VLAN-aware switches:
• Valid VIDs are within the range of 1 to 4094. VIDs equal to 0 or 4095 are invalid.
• Each frame ingressing a VLAN-aware switch is associated with a valid VID.
• Each frame egressing a VLAN-aware switch is either untagged or tagged with a valid VID. Priority-tagged frames
with an invalid VID will never sent out by a VLAN-aware switch.
NOTE
Some applications have requirements conflicting with IEEE 802.Q1 native mode of operation. For
example, some applications explicitly require priority-tagged frames to be received by end devices.
To avoid conflicts and provide full compatibility with legacy (VLAN-unaware) devices, RUGGEDCOM
ROS can be configured to work in VLAN-unaware mode.
In that mode:
• Frames ingressing a VLAN-unaware device are not associated with any VLAN
• Frames egressing a VLAN-unaware device are sent out unmodified (i.e. in the same untagged,
802.1Q-tagged or priority-tagged format as they were received)

Siemens RUGGEDCOM ROS v4.3 Specifications

General

Brand	Siemens
Model	RUGGEDCOM ROS v4.3
Category	Wireless Router
Language	English

Summary

Preface and Document Overview

Document Conventions and Alerts

Explains document conventions for information presentation and alert types.

System Requirements and Documentation Access

Details workstation requirements and methods for accessing user documentation.

Training and Customer Support Information

Provides details on Siemens training services and customer support contact methods.

RUGGEDCOM ROS Introduction and Core Features

Features and Benefits Overview

Highlights key features like Cyber Security, eRSTP, QoS, VLAN, SNMP, and NTP.

Security Recommendations and Credential File Management

Offers detailed security advice for authentication, access control, and key management.

Networking Standards, MIBs, and Protocol Support

Lists supported networking standards, SNMP MIBs, and protocol capabilities.

SSH and SSL Keys and Certificates Management

Covers lifecycle, requirements, and generation of SSH and SSL keys and certificates.

Navigating and Operating the RUGGEDCOM ROS Interface

Connecting to and Logging Into ROS Devices

Explains direct serial console and network connection methods, including login procedures.

Console and Web Interface Usage and Navigation

Describes interface layouts, navigation controls, and basic operations for console and web UIs.

Command Line Interface (CLI) and SQL Command Operations

Details CLI commands for device management, including SQL for database manipulation.

Flash File System and SSH Public Key Management

Covers managing flash memory files and configuring SSH public keys for access control.

RUGGEDCOM ROS Device Management and Monitoring

Product Information, Diagnostics, and Factory Defaults

Provides methods for viewing device details, diagnostic information, and restoring factory settings.

File Management, System Logging, and Firmware Updates

Covers uploading/downloading files, managing logs, and firmware upgrade/downgrade procedures.

Ethernet Port Configuration, Statistics, and Security

Details configuration, status, statistics, and security settings for Ethernet ports.

IP Interface, Gateway, and Network Service Configuration

Explains management of IP interfaces, gateways, and network services like SNMP and NTP.

Remote Monitoring, RMON Alarms, and Device Maintenance

Covers remote monitoring using RMON, alarm management, and system maintenance tasks.

Device Resetting and Secure Decommissioning Procedures

Outlines procedures for resetting the device and safely decommissioning it.

RUGGEDCOM ROS System Administration and Security Policies

System Information, Login Screen, and Password Management

Covers configuring system identification, customizing login screen, and managing user passwords.

Alarm Configuration and Authentication Security Alarms

Details alarm configuration, viewing latched alarms, and security alarms for authentication.

Configuration File Security and Authentication Server Integration

Explains managing configuration files, data encryption, and integrating RADIUS/TACACS+ servers.

Configuring Network Features in RUGGEDCOM ROS

Virtual LANs (VLANs) and Spanning Tree Protocol (STP) Configuration

Covers VLAN concepts, configuration, and Spanning Tree Protocol (STP/RSTP/MSTP) operation.

Classes of Service (CoS), MAC Addresses, and Time Synchronization

Details CoS for traffic prioritization, MAC address management, and time synchronization.

SNMP Management, Network Discovery, and Multicast Filtering

Explains SNMP management, network discovery protocols (LLDP/RCDP), and IGMP/GMRP multicast filtering.

Port Security and IEEE 802.1X Authentication Implementation

Covers port security mechanisms, including MAC-based and IEEE 802.1X authentication.

Link Aggregation and Port Trunking Configuration

Describes link aggregation for increased bandwidth and redundancy using port trunks.

Troubleshooting Common RUGGEDCOM ROS Network Issues

General and Ethernet Port Connectivity Diagnostics

Provides troubleshooting steps for common issues like ping failures and Ethernet port problems.

Spanning Tree and VLAN Protocol Troubleshooting Scenarios

Addresses troubleshooting for Spanning Tree loops, port states, and VLAN communication problems.