Knowledge Base

Check The Settings

The aim of this procedure is to check whether the settings for the switch were loaded correctly. If you did not use the file Netgear GS728TP.txt, you have to create these settings manually. For other switches, comparable settings are needed.

Background

The configuration file loads settings for the following:

• IGMP (Internet Group Management Protocol) Snooping — Video streams in the Viso network are transferred using Multicast. This means that video streams from one Viso Recorder are sent to multiple Viso computers, but not to all computers in the network. This is in contrast with Unicast, in which a stream is sent to only one computer, and Broadcast, in which a stream is sent to all computers in a network. In comparison to broadcasting, multicasting greatly decreases the amount of traffic over the network. IGMP snooping allows the switch to send audio and video only to the Viso computers, saving network resources.
• DSCP (Differentiated Services Code Point) — The streams from the IP cameras must get the highest priority over the network. This ensures that streaming video and audio over the network is not delayed if other tasks, such as copying, occur simultaneously. Prioritizing is done using Differentiated Services Code Point (DSCP). You must create settings to ensure that the switch prioritizes the packages from the IP cameras according to the DSCP value.
• Connection To Domain — When you connect the Viso network with the switch to the domain, you must specify what traffic types are allowed through which ports.

Settings For IGMP Snooping

1. Open the Switching tab and the subtab Multicast.
2. On the left of your screen, click IGMP Snooping.
3. Check under IGMP Snooping Configuration that the IGMP Snooping Status is set to Enable.
4. On the left of the window, select IGMP Snooping Querier.
5. Check that the Querier Admin Mode is set to Enable.
6. Check that the Snooping Querier Address is set to the IP address of the switch.
7. On the left of the window, select IGMP Snooping and then IGMP Snooping VLAN Configuration.
8. Check that both VLAN numbers are set to Enable and have a Query Interval of 30.

Test The Network

1. To test whether the network works correctly, download the program Wireshark from wireshark.org and install it.
2. Choose the Ethernet connection of the switch and click Start.
3. In the Filter field, type IGMP.
4. Check that there are lines with the address of the switch that contain Membership Query in the Info column. If so, the network is functioning correctly.

Settings For DSCP

1. Open the QoS tab and check that DSCP is selected from the Global Trust Mode list.
2. Click Advanced on the left and then DSCP To Queue Mapping.
3. Under Expedited Forwarding (EF) PHB, check that the value under Queue is 3. If not, select this value.

Add DSCP Values For Devices That Do Not Support DSCP

Axis IP cameras support DSCP. However, the Epiphan Pearl Nano and Epiphan VGADVI broadcasters that Noldus supplies do not support DSCP. IP cameras from other brands may also not support DSCP. Packages from these devices will have a DSCP value of zero. The DSCP value of these packages must be changed by the switch to 46. To do so:

1. In the QoS tab, open the subtab DiffServ.
2. On the left of your window, select Advanced and then Class Configuration.
3. In the Class Name field, type the name of your device, for example Epiphan Broadcaster. Click Add.
4. Click on the hyperlink that you just created.
5. Under DiffServ Class Configuration, select the Match Every checkbox and from the list next to it select Any.
6. Click Policy Configuration on the left of your window.
7. Enter a Policy Name, for example PolicyEpiphan.
8. From the Member Class list, select the class name you made in step 3 and click Add.
9. Click on the hyperlink that you just created.
10. Select Mark IP DSCP and from the list select EF. EF stands for Expedited Forwarding and is a DSCP value of 46. Click Apply.
11. Click Service Configuration on the left.
12. Select the port number on the switch to which the device is connected. Do not select port 1, since that port is reserved for the connection to the domain. From the list under Policy In Name, select the policy you created in step 7. Click Apply.
13. Mark this port on the switch so it is clear that DSCP is available for this port.
14. Repeat these steps for other devices that do not support DSCP.

Settings To Connect The Viso Network To The LDAP Domain

With these settings you create a set of rules to allow traffic through the switch between Viso and your domain using a Lightweight Directory Access Protocol (LDAP). This traffic makes use of port 389. The Viso Web App makes use of port 80.

1. Open the Security tab and choose ACL from the menu directly below the tabs.
2. Choose Advanced > IP ACL. There should be a link labeled Noldus LDAP. If not, proceed to the next step to create it.
3. Type a name in the IP ACL field and click Add at the bottom of the page.
4. Choose IP Extended Rules from the menu on the left.
5. Check that there are six rules. If these are not present, click Add at the bottom of the window.
6. Make a rule to allow TCP traffic to port 389. Enter the required details and click Add at the bottom of the window.
7. Make a rule to allow TCP traffic from port 389. Enter the required details and click Add at the bottom of the window.
8. Make a rule to allow UDP traffic to port 389. Enter the required details and click Add at the bottom of the window.
9. Make a rule to allow UDP traffic from port 389. Enter the required details and click Add at the bottom of the window.
10. Make a rule to allow TCP traffic to HTTP port 80. First select TCP from the Protocol Type list, then enter 80 in the Dst L4 Port field, then select http from the Dst L4 Port field.
11. Make a rule to allow UDP traffic to HTTP port 80. First select UDP from the Protocol Type list, then enter 80 in the Dst L4 Port field, then select http from the Dst L4 Port field.
12. Bind the rules to a port on the switch. From the menu on the left, choose IP Binding Configuration.
13. Unfold the Port item.
14. Select the number of the port on the switch that is connected to the domain. By default the switch is configured to connect port number 1 to the company network.
15. Enter 1 in the Sequence Number field.
16. Click Apply. The Interface Binding Status table in the same window should now reflect the configured binding.