MS650919PM
MS650919PM
Profi Line+
Industrial Gigabit Ethernet Ring-Switch
Overview
The Industrial Ethernet Switch Profi Line+ of MICROSENS is a further development of the
successful Profi Line series. With Gigabit Ethernet on all ports combined with the PoE+
functionality the switch offers highest performance. Designed for highest reliability and
shortest recovery times this switch is the first choice for Industrial Ethernet.
The hardware of the Profi Line+ Switch is designed today for future functions, which are
easy to activate with firmware upgrades. This is facilitated by the latest high-
performance switching chipsets in combination with a powerful ARM processor. As an
established, stable operating system, Linux offers a solid foundation for an intelligent,
open and long-term reliable platform.
Highlights
Specifications
IP Stack
Dual Stack Parallel handling of IPv4 and IPv6 protocol.
IPv4 Stack Internet Protocol v4 handling with support of IPv4, ARP, DHCP, ICMP.
RFC 791 (IPv4), RFC 826 (ARP), RFC 792 (ICMP), RFC 2131 (DHCP)
IPv6 Stack Internet Protocol v6 handling with support of IPv6, DHCPv6, ICMPv6, NDP.
RFC 2460/2464/3484/3513 (IPv6), RFC 2462 (Address Configuration), RFC 2463
(ICMPv6), RFC 2461 (Neighbor Discovery Protocol), RFC 3315 (DHCPv6)
Port Control
Administration Port disable, Individual port alias
Power-over-Ethernet (PoE)
Function Sourcing of power to connected devices via standard network Twisted-Pair cable
802.3at mode PoE+ voltage is turned on only after powered device (PD) is detected and
classified on port. Output voltage and power is monitored. Port power is shut
down if limits are exceeded.
802.3af mode PoE voltage is turned on only after powered device (PD) is detected and
classified on port. Output voltage and power is monitored. Port power is shut
down if limits are exceeded.
Power Management Power limit can be defined per port and per total device. Additionally the class of
the powered device (PD) can be limited per port.
Standards IEEE Std. 802.3af (Data Terminal Equipment Power via Media Dependent
Interface), IEEE Std. 802.3at (Data Terminal Equipment Power via Media
Dependent Interface).
Switch Functions
Port Monitor Monitor port for the connection of a network protocol analyzer. Traffic of the port
to be analyzed is copied to the monitor port.
RMON counters 17 Integrated counters for detailed traffic analysis and network trouble shooting.
MAC Table Access to table of MAC addresses learned by the switch. Can be filtered per port,
VLAN address type and entry type (dynamic/static).
Access Mode For the connection of non-VLAN capable end devices (e.g. PCs). Outgoing
packets are send untagged. Incoming packets are tagged with the port default
VLAN ID (PVID).
For the interconnection of VLAN capable switches. Outgoing packets are always
Trunk Mode send tagged. Incoming packets are received tagged. Incoming packets without
VLAN tag are tagged with the port default VLAN ID (PVID).
Hybrid Mode For the connection of VLAN capable and non-VLAN capable devices on the same
port (e.g. VoIP-phone (tagged) and PC (untagged)). Outgoing packets are sent
tagged, except packets for the port default VLAN ID (PVID), which are untagged.
Incoming packets are received untagged for the port default VLAN (PVID), all
other packets are tagged.
Priority Override VLAN priority code point of incoming packets can be overwritten with the VLAN
specific priority defined in the VLAN filter.
RSTP VLAN VLAN ID used by Spanning Tree instance for BPDU tagging.
Unauthorized VLAN VLAN ID assigned by Port Based Access Control to unauthorized ports
(guest VLAN).
Management VLAN VLAN ID used by the management agent (device internal port).
Standard IEEE Std. 802.1D, IEEE Std. 802.1Q, IEEE Std. 802.1p
Prioritization Strict priority (higher priority always first) or weighted fair queuing (8:4:2:1
Scheme highest to lowest).
Layer1 Priority Static priority queue can be assigned for each port.
Layer2 Priority Incoming packets are forwarded according to the priority code point in their
VLAN tag. The 8 VLAN priority code points can be individually mapped on the 4
priority queues.
Layer3 Priority Incoming packets are forwarded according to the value of the DiffServ Codepoint
(IPv4) / TrafficClass (IPv6) in their IP header. Maximum 64 code points are
supported. For each code point the corresponding priority queue can be mapped.
Traffic shaping 5 ingress rate shaping buckets per port. Supports rate and priority based rate
shaping
Standard IEEE Std. 802.1p (VLAN priority code point), RFC 2474/3260 (IPv4 DiffServ/IPv6
Traffic Class)
MICROSENS Ring MICROSENS Redundant Ring Protocol with ultra-fast recovery time <20 ms
Protocol within MICROSENS Ring topologies.
Multicast Forwarding
IGMP Snooping Snooping of Internet Group Management Protocol (IGMPv1/v2/v3) for IPv4.
Automatic detection and forwarding of IPv4 multicast-streams. Unregistered
packets can be flooded or blocked. Multicast routers can be detected by
discovery or by query message.
Voice VLAN Support of Voice VLAN for configuration of connected Cisco VoIP-phone.
IEEE 802.1X Multiple users can be authenticated using central RADIUS server based on
Authentication username/password or certificate.
RADIUS MAC Multiple users can be authenticated using central RADIUS server based on their
Authentication MAC addresses.
MAC locking Multiple users can be authenticated based on their MAC addresses. Authorized
MAC addresses are stored permanently in the device. They can be configured
manually or automatically by locking the first MAC addresses learned on the port.
Dynamic VLAN RADIUS server can provide user specific VLAN ID using tunnel-attribute in accept
message. Port VLAN is dynamically set accordingly. Unauthorized users may be
placed in an unauthorized VLAN ('guest VLAN') or blocked completely.
IP Address The IP address of the connected user is detected via ARP snooping. User IP
Detection address information can be logged using RADIUS accounting function.
User Login
Function Implements user based and view based authentication and scope limiting.
Supports unlimited number of user/groups and views (limited by system memory
constrains only). Offers ultimate flexibility with precise access control.
Secure Shell (SSH) SSH via TCP/IP port 22. Authentication methods RSA, Diffie-Hellman Key
Exchange. Encryption protocols 3DES-CBC, HMAC-SHA1.
Web Manager
Function Integrated Web Manager with graphical user interface (GUI) for device
configuration and administration using standard web browser.
SNMPv3 Simple Network Management Protocol v3 (SNMPv3) for secure access to device
information stored in Management Information Base (MIB). SNMPv3 supports data
encryption, User-based Security Model (USM) and View-based Access Control
Model (VACM).
MIBs MIB-2, Enterprise-MIB (MICROSENS G6 MIB). File can be downloaded from the
integrated Web Manager.
RADIUS Client
Function RADIUS client via UDP/IP ports 1812 (access), 1813 (accounting) for Remote
Authentication Dial In User Service (RADIUS) server for authorizing user access
and logging of user accounting information.
Standard RFC 2865 (RADIUS), RFC 2866 (Accounting), RFC 2868 (Tunnel Attributes)
Files
Configuration File transfers may be used to upgrade the software or to load configuration files.
The unit supports TFTP, FTP, SFTP, HTTP, HTTPS transfer protocols. Additionally
files may be loaded via DHCP directives.
Firmware Update Software download can be complete or incremental. Individual modules may be
upgraded, normally without influencing service. Flexible system permits
customized upgrade files if required.
Syslog Client
Function Syslog messages are triggered by system events and can be send to unlimited
number of Syslog servers (limited by system memory constrains only).
Event Manager
Function Mapping of device status changes (Triggers) to actions e.g. sending out SNMP
trap, Syslog message etc.
Customizable Event severity and alert level freely configurable. Event text strings may be
events customized via user interface with developer rights.
Traps and Syslog Unlimited number of trap and/or Syslog receivers. Event may be filtered
individually on a group level.
Interfaces
Technical Specifications
Fiber Ports (SFP slots) Ring 1/2 green Ring 1/2 normal
yellow Ring backup active
Number 2 red Ring backup failure
off Ring deactivated
Type Gigabit Ethernet Signal in 1/2 green activated, no signal
Dual Speed SFP red S1/S2 activated, alarm
100/1000Base-X, support of off inactive
SFP digital diagnostics function
Signal out 1/2 green activated, no signal
Connector LC (SFP transceiver) red S1/S2 activated, alarm
off inactive
Multimode Multimode, 62.5/125µm (280
(MS100200DX) m) or 50/125 µm (550 m)
850nm wavelength Control Panel
-4..-9.5 dBm output power
-18 dBm sensitivity Reset button Reset of the switch, new upload
0 dBm saturation of the latest stored
Single Mode Single Mode, 9/125 µm (10 km) configuration
(MS100210DX) 1310 nm wavelength (direct hardware function)
-3..-9,5 dBm output power Factory button Request of the IP configuration
-20 dBm sensitivity for management, reset back to
-3 dBm saturation factory default settings
Flow Control Pause Frames (IEEE 802.3x),
configurable
Input 24..57 VDC (54 VDC typ.) Dimensions 120.5 x 59.7 x 100.5 mm
(w x d x h, without connectors)
Power Typ. 7 W
Consumption Weight Approx. 790 g (without SFPs)
Connectors 2x 3 pin screw connector
Standards
Ring-Topology
Normal operation
All switches are configured for ring
operation
One switch is assigned as ring master
Ring master cuts the ring logically
Ring error
Switches signalize segment failure via
ethernet (fiber-uplink)
Master gets that information via ethernet
and closes the logical cut
Switches relearn the actual network
topology (MAC-addresses)
Network function is re-established in less
than 50 ms
Dimensions
Memory Card
SD Memory Card
The SD memory card is used for the Change of memory card transfers the
permanent storage of configuration, complete device status
script and firmware files. With this Firmware update by memory card
memory card it is possible to transfer a exchange possible
configuration to a new device in case of
a device failure. Fault tolerant journaling file system
Optional it is possible to write an own Industrial grade– long term stability
MAC address to the SD memory card. Encrypted system as security option
This MAC address has priority compared
to the MAC address in the switch. This Only MICROSENS memory cards have
allows having an exact clone of the to be used. Only with this the long
device by swapping the memory card. term stability over the complete
temperature range can be guaranteed.
Alarm Contacts
Order Information
Accessories
Description Article No.:
SFP Transceiver with extended temperature range -25°C up to +85°C
(Fast Ethernet & WDM on request)
Network Management
External Power Supplies for industrial use with PoE / PoE+ 44..57VDC
This document in whole or in part may not be duplicated, reproduced, stored or retransmitted without prior written permission of MICROSENS GmbH
& Co. KG. All information in this document is provided ‘as is’ and subject to change without notice. MICROSENS GmbH & Co. KG disclaims any
liability for the correctness, completeness or quality of the information provided, fitness for a particular purpose or consecutive damage.
MICROSENS is a trademark of MICROSENS GmbH & Co. KG. Any product names mentioned herein may be trademarks and/or registered trademarks
of their respective companies. mr/hb/tk/aku MS650919_PL+_DAT_EN_v1.0.0.docx