Hirschmann GUI Graphical User Interface Industrial ETHERNET (Gigabit-)Switch RS20/RS30/RS40, MS20/MS30

Hirschmann GUI Graphical User Interface Industrial ETHERNET (Gigabit-)Switch RS20/RS30/RS40, MS20/MS30 

Document Overview

Document positioning: Official reference manual for Hirschmann Industrial Ethernet Switch graphical user interface (GUI) and command-line interface (CLI), applicable to RS20/RS30/RS40, MS20/MS30 and other series devices, version L2E Rel.9.0 (released in February 2015).

Core objective: To provide technical personnel with a complete operation guide for equipment configuration, monitoring, and diagnosis, ensuring network reliability, security, and compatibility in industrial scenarios.

Supporting resources: It needs to be used in conjunction with installation manuals, basic configuration manuals, redundant configuration manuals, etc., and supports the integration of HiVision network management software.

Basic configuration (IP/system information)

1. GUI operation steps

Key settings for functional operation path

Configure IP address basic settings ->select "Local" network mode, enter IP address, subnet mask, gateway; VLAN ID default 1 (0 means all VLANs are accessible)

Modify system information basic settings ->System input system name (PROFINET scene only includes letters/numbers/hyphens/dots), location, and contact person; Set temperature threshold (default upper and lower limits adapted to industrial environments)

Save Configuration Basic Settings → Load/Save Select "Save to Device" or "Save to PC (XML/financial format)", click "Set" to confirm

Restore factory settings to basic settings → Load/Save → Delete Select "Current Configuration", click "Delete Configuration", restart the device to take effect

2. CLI operation commands

Example of Function Command (Mode)

Configure IP address privilege execution mode: network parms <ip> <mask> [gw] network parms 192.168.1.100 255.255.255.0 192.168.1.1

View system information privilege execution mode: show sysinfo displays software version, MAC address, CPU utilization, port status, etc

Save configuration privilege execution mode: copy running config startup config Save current configuration to non-volatile memory, restart without loss

Restore factory settings privilege execution mode: clear config factory. After confirmation, delete all configurations (including IP addresses) and reconfigure them

VLAN configuration (IEEE 802.1Q)

1. GUI operation steps

Key settings for functional operation path

Create static VLAN switch → VLAN → Static VLAN Input VLAN ID (1-4042) and name (up to 32 characters); Port selection "T (tagged)" or "U (untagged)"

Configure port VLAN attribute exchange → VLAN → default port VLAN ID 1; Allow frame type selection of 'admitAll' (default); Disable inbound filtering (required for HIPER Ring scenarios)

View VLAN status exchange → VLAN → Current VLAN View port members, tag modes, and creation times for all VLANs

2. CLI operation commands

Example of Function Command (Mode)

Enter VLAN database mode privilege execution mode: VLAN database-

Create VLAN database mode: VLAN<id>VLAN 10 (Create VLAN 10)

Naming VLAN VLAN database schema: VLAN name<id><name>VLAN name 10 Production (naming VLAN 10 as "Production")

Configure port VLAN member interface configuration mode: VLAN participation include<id>interface 1/1 → VLAN participation include 10 (port 1/1 joins VLAN 10)

Configure port label mode interface configuration mode: VLAN tagging<id>interface 1/1 → VLAN tagging 10 (port 1/1 sends VLAN 10 frames with labels)

View VLAN configuration privilege execution mode: show VLAN brief displays the IDs, names, and types of all VLANs

Redundant configuration (HIPER Ring/MRP Ring)

1. HIPER Ring configuration

Operation method steps/command key parameters

GUI redundancy → ring network redundancy → select "HIPER Ring" ring port and choose 2 physical ports (such as 1/1, 1/2); Select "Standard" (480ms) or "Acceleration" (280ms) as the recovery mode; Enable Environmental Manager

CLI global configuration mode: hip ring → hip ring port primary<slot/port>→ hip ring port secondary<slot/port>→ hip ring recovery delay standard hip ring port primary 1/1 → hip ring port secondary 1/2 (set 1/1 and 1/2 as ring ports)

2. MRP Ring configuration

Operation method steps/command key parameters

GUI redundancy → ring network redundancy → select "MRP Ring" ring port and choose 2 physical ports; Set VLAN ID to>0 (bind specific VLAN); Select a recovery time of 200ms/500ms; Enable Environmental Manager

CLI global configuration mode: mrp new domain → mrp current domain<domain>→ mrp port<slot/port>ring port mrp new domain 1 → mrp current domain 1 → mrp port 1/1 ring port (port 1/1 is set as MRP ring port)

Port security configuration (MAC/IP binding)

1. GUI operation steps

Key settings for functional operation path

MAC based Port Security ->Port Security ->Configure and select "MAC Based" Port Allow MAC addresses: Enter up to 50 MAC addresses (supports address ranges, such as 00:80:63:00:00:00/24); Dynamically limit 1-50 automatic learning addresses

IP based port security → Port security → Configuration selection "IP based" port allows IP addresses: enter up to 10 IPs; relies on ARP to resolve MAC, ensuring that the terminal device is online

Violation action setting security ->Port security ->Select "trapOnly" (alert), "portDisable" (disable port), or "autoDisable" (reset according to diagnostic configuration) from the port table

2. CLI operation commands

Example of Function Command (Mode)

Enable MAC based port security global configuration mode: port sec mode MAC based-

Binding MAC address to port interface configuration mode: port sec allowed mac add<mac>interface 1/1 → port sec allowed mac add 00:11:22:33:44:55 (binding MAC to port 1/1)

Binding IP address to port interface configuration mode: port sec allowed ip add<ip>interface 1/1 → port sec allowed ip add 192.168.1.200 (binding IP to port 1/1)

Set violation action interface configuration mode: port sec action<action>interface 1/1 → port sec action portDisable (disable port 1/1 when violating)

View port security status privilege execution mode: show port sec port<slot/port>show port sec port 1/1 (view the security configuration of port 1/1)

QoS/Priority Configuration

1. GUI operation steps

Key settings for functional operation path

Global Trust Mode QoS/Priority → Select "trustDot1p" (Trust VLAN Priority) or "trustIpDscp" (Trust IP DSCP) globally; Set the priority of management messages to 6-7 (to ensure the management channel)

Port priority QoS/priority → Port configuration Port priority is set to 0-7 (with 7 being the highest), automatically mapped to 4 traffic classes

802.1D/p mapping QoS/priority → 802.1D/p mapping VLAN priority 0-7 to traffic class 0-3 (e.g. priority 6 → traffic class 3, adapted to voice services)

2. CLI operation commands

Example of Function Command (Mode)

Set global trust mode Global configuration mode: classofservice trust<mode>classofservice trust trustDot1p (trust VLAN priority)

Configure port priority interface configuration mode: VLAN priority<priority>interface 1/1 → VLAN priority 7 (port 1/1 priority is set to 7)

Configure DSCP mapping global configuration mode: classofservice ip-dscp-mapping <<dscp> <trafficclass> classofservice ip-dscp-mapping 46 3（DSCP 46 → Traffic category 3, adapted to EF business)

View QoS configuration privilege execution mode: show classofservice trust displays the current trust mode and mapping rules

Time synchronization configuration (SNTP/PTP)

1. SNTP configuration

Operation method steps/command key parameters

GUI time → SNTP configuration enables SNTP client; Enter the NTP server address for the main server IP; Request interval of 30 seconds (default); Set the broadcast to 'On'

CLI global configuration mode: sntp operation on → sntp client server primary<ip>sntp operation on → sntp client server primary 210.72.145.44 (configure national time service center server)

2. PTP configuration (IEEE 1588)

Operation method steps/command key parameters

GUI time → PTP → global mode selection "v2 binary lock"; Synchronization threshold of 30ns (default); Enable PTP transmission and reception on the port

CLI global configuration mode: ptp mode v2 binary lock → ptp port<slot/port>enable ptp mode v2 binary lock → ptp port 1/1 enable (port 1/1 enables PTP)

Diagnostic tool (port mirroring/logging)

1. Port mirroring configuration

Operation method steps/command key parameters

GUI diagnosis ->Port image source port selection - Select the ports to be monitored (up to 8); Select the monitoring port (idle port) as the destination port; Set the operation to 'On'

CLI global configuration mode: monitor session 1 source interface<slot/port>→ monitor session 1 destination interface<slot/port>→ monitor session 1 mode enable monitor session 1 source interface 1/1-1/8 → monitor session 1 destination interface 1/9 → monitor session 1 mode enable (monitor port traffic from 1/1-1/8 to 1/9)

2. Log viewing

Operation method steps/command instructions

GUI diagnosis → Syslog/diagnosis → Trap log to view system event and alarm logs; Support exporting to PC

CLI privileged execution mode: show logging traplogs displays all Trap logs (including timestamps and event descriptions)