INTRODUCTION

The GWN7711(P) Series are Layer 2 lite managed switches for small to medium-sized businesses, offering scalable, secure, high-performance networks. They support VLAN for traffic segmentation, QoS for prioritizing traffic, IGMP snooping for network optimization, and robust security features. The PoE model provides dynamic PoE output for various devices, including IP phones and cameras. Easy management options include a local web interface and GDMS Networking, suitable for hotels, home offices, and small-to-medium businesses.

The GWN7710R is a 6-Port (5GE+1SFP) Outdoor Lite Managed PoE Switch with an IP66-rated shell for harsh weather conditions. It builds scalable, secure, high-performance networks in scenic locations like hotels and restaurants. It supports VLAN segmentation, various QoS management modes, bandwidth control, and Storm Control for enhanced performance. Integrated PoE supports long-distance power supply and data transmission. Managed via a local web interface and GDMS Networking, its compact design supports versatile installation methods for indoor and outdoor areas.

PRODUCT OVERVIEW

Feature Highlights

• GWN7711

GWN7711 Features at a glance

• GWN7711P

GWN7711P Features at a glance

• GWN7710R

GWN7710R Features at a glance

GWN7711/P Technical Specifications

GWN7711(P) Technical Specifications

GWN7710R Technical Specifications

GWN7710R Technical Specifications

INSTALLATION

Before deploying and configuring the GWN771x switch, the device needs to be properly powered up and connected to the network. This section describes detailed information on the installation, connection, and warranty policy of the GWN771x switch.

Package Contents

• GWN7711(P)

• GWN7710R

Port Description

• GWN7711(P)

GWN7711(P) Ports

• GWN7710R

GWN7710R Ports

Grounding and Accessing GWN771x

Grounding the GWN7711/P Switch

1. Remove the ground screw from the back of the switch, and connect one end of the ground cable to the wiring terminal of the switch.
2. Put the ground screw back into the screw hole, and tighten it with a screwdriver.
3. Connect the other end of the ground cable to the other device that has been grounded or directly to the terminal of the ground bar in the equipment room.

Grounding the GWN7710R Switch

1. Remove the ground screw from the back of the device, and connect one end of the ground cable to the wiring terminal of the device.
2. Put the ground screw back into the screw hole, and tighten it with a screwdriver.
3. Connect the other end of the ground cable to another device that has been grounded or directly to the terminal of the ground bar in the equipment room.

Mounting methods for the GWN7710R

Pole Mount

1. Attach the bracket to the back of the unit using the assembled screws.
2. Open the metal straps by turning the locking mechanism counterclockwise. You can loosen it by hand or use a flathead screwdriver.
3. Straighten out the end of the metal straps and slide it through the back of the bracket.
4. Wrap the metal strap around the pole and use a flathead screwdriver to tighten the locking mechanism by turning it clockwise

Wall Mount

1. Rotate the bracket 90° and attach it horizontally on the back of the device with assembled screws.
2. Drill four holes on the wall referring to the positions of the ones on the bracket. Then, fix an expansion screw in each hole.
3. Attach the device by securing the bracket with the expansion screws on the wall.

DIN-Rail Mount

1. Attach the DIN-Rail bracket with screws on the back of the device.
2. Clamp the DIN-Rail bracket to the universal guide rail.

Cable Installation For GWN7710R

1. Insert the cable through the hole under the device housing and connect it to the corresponding interface, then insert the other end of the cable into the waterproof silicone plug.
2. Insert the waterproof silicone plug into the designated position under the device housing.
3. Push the anti-water shell in the direction of the arrow until the bottom shell is completely closed, and then use screws to fix it.

GWN7710R PoE Output mode

The table below displays the cables for configuring Power over Ethernet (PoE) to connected devices in outdoor environments. PoE Output mode enables the switch to provide power to devices like outdoor access points, surveillance cameras, or other PoE-enabled equipment, simplifying installation by eliminating the need for separate power sources. This setup ensures the continuous operation of outdoor network devices, even in remote locations, enhancing network connectivity and management flexibility.

GWN7710R Deployment Cases

Solar DC + Fiber Optic Cable

This deployment involves installing GWN7710R, powered by solar direct current (DC) energy and connected via fiber optic cables outdoors. This setup is ideal for remote locations or areas without reliable power sources, where traditional electrical wiring is impractical. Solar panels generate electricity, which powers the network switches, ensuring continuous connectivity. Fiber optic cables provide high-speed and reliable data transmission over long distances, making them suitable for various outdoor networking applications such as surveillance, environmental monitoring, or rural connectivity.

PoE++ RJ45 Power and Data

This setup uses Power over Ethernet (PoE++) technology to provide both power and data connectivity to outdoor devices via RJ45 connections. This setup eliminates the need for separate power sources for each device, simplifying installation and maintenance. PoE++ delivers higher power levels over Ethernet cables, making it suitable for outdoor applications such as IP cameras, wireless access points, or outdoor lighting, where traditional power sources are not available.

GWN7711(P) Deployment Cases

802.1Q VLAN Trunk for Multi-Dedicated SIP Trunking

Using VLAN Trunking to merge multiple ITSP streams into a single port connecting to UCM, and aggregate Internet and IPTV into another port connecting to the router and switch.

• Port 1: Access VLAN 10 ITSP 1 SIP trunk
• Port 2: Access VLAN 20 ITSP 2 SIP trunk
• Port 4: Trunk VLAN(10/20) to UCM
• Port 6: Access VLAN 30 Internet service
• Port 7: Access VLAN 40 IPTV service
• Port 8: Trunk VLAN(30/40) to Router

PoE & VLAN Isolation for IP Camera

Use VLAN to isolate the IP Camera/Internet/IPTV traffic. Use link aggregation to increase upstream bandwidth.

• Port 1: 24V/48V 4 Pair Passive PoE Camera
• Port 2: 24V 2 Pair Passive PoE Camera
• Port 3: 802.3af PoE IP Video Intercom System
• Port 4: Wireless 802.3af PoE AP
• Port 5: Network Equipment PC, printer, etc.
• Port 6: GRP VoIP Phone, etc.
• Port 7-8: Uplink Aggregation Group

GETTING STARTED

Device LED Indicators

The front panel of the GWN771x has LED indicators for power and interface activities; the table below describes the LED indicators’ status.

GWN7711(P) LED Indicators

Below is the LED Indicator for GWN7710R:

GWN7710R LED Indicators

Access and configure

Login using the Web UI

1. A PC uses a network cable to correctly connect any RJ45 port of the switch.
2. Set the Ethernet (or local connection) IP address of the PC to 192.168.0.x (“x” is any value between 1-253), and the subnet mask to 255.255.255.0, so that it is in the same network segment as the switch IP address. If DHCP is used, this step could be skipped.
3. Type the switch’s management IP address http:// in the browser, and enter username and password to log in. (The default administrator username is “admin” and the default random password can be found on the sticker on the GWN771x switch).

Configure using GDMS Networking/GWN Manager

Type https://www.gdms.cloud (https://<gwn_manager_IP> for GWN Manager) in the browser, and enter the account and password to log in to the cloud platform. If you don’t have an account, please register first or ask the administrator to assign one for you. To add a GWN switch to GDMS Networking/GWN manager, refer to the online documentation: https://documentation.grandstream.com.

WebUI Configuration

GWN771x WebUI includes 9 main sections to configure and manage the switch and check the connection status.

Search

GWN771x Switches have search functionality to help the user find the right configuration, settings, parameters, etc.

On the top of the page, there is a search icon. The user can click on it and then enter the keyword relevant to their search, and then they will get all the possible locations of that keyword.

Language

To change the language on the GWN771x switch interface:

• Navigate to the top right corner of the interface where the username is displayed.
• Click on the drop-down menu next to the username.
• Select “Language” from the drop-down options.
• After selecting the language, the interface will switch to the chosen language.

Reboot

To reboot the GWN771x switch:

• Navigate to the top right corner of the interface where the username is displayed.
• Click on the drop-down menu next to the username.
• Select “Reboot” from the drop-down options.
• Confirm the action to reboot the device.
• The device will automatically restart after a brief delay.

Change Password

To change the password on your GWN771x switch:

• Navigate to the top right corner of the interface where the username is displayed.
• Click on the drop-down menu next to the username.
• Select “Change Password” from the drop-down options.
• A “Change Password” dialog box will appear.
• Enter the current password in the Current Password field.
• In the New Password field, input a new password that meets the criteria: it must contain 8-32 characters and include at least two of the following: digits, letters, and special characters (e.g., admin,123).
• Enter the same password in the Confirm New Password field.
• Click “Complete” to apply the changes.

Logout

To log out of the GWN771x switch:

• Navigate to the top right corner of the interface where the username is displayed.
• Click on the drop-down menu next to the username.
• Select “Logout” to safely log out of the current session.

OVERVIEW

The overview is the first section that displays System information on the first page “System Info” and Port status on the second page “Port Info”. This section provides the user with a general and global view of the GWN771x system and port status for easy monitoring.

System Info

System Info is the first page after successfully logging into the GWN771x Web Interface. It provides an overall view of the GWN771x Switch information, including the Device name, MAC Address, System Version, etc.

To name the device, please click on , then enter the desired name.

Port Info

This page displays the status for each port on the GWN771x switches, indicated by color code (green, red, grey, white, etc) and PoE symbol. Please refer to the figure below:

The following table explains the color code and the symbols used:

Ports Labels and Color Code

Note: a PoE symbol and color code combination is also possible. Ex: in this case, the port is using 1000 Mbps speed and also using PoE at the same time.

There are 3 main sections for each port:

• Basic Info: displays info about the port name, speed, status etc.

Note: Click onto modify the port settings like Description, Speed, Duplex Mode, and Flow Control or to enable or disable the port.

• PoE Power Supply: displays PoE Current Power and priority, Status etc.

Note: Click on to change PoE settings.

SYSTEM

IP Setting

The IP Setting page allows users to configure the switch’s IP address and management VLAN. The user can assign a Management VLAN, choose between DHCP or Static for IP configuration, and manually set DNS servers when necessary. These settings are essential for ensuring network management and connectivity.

Management VLAN and MTU

This section allows for the customization of how the switch identifies itself on the network and how it handles management-level data packets

• Management VLAN

The Management VLAN field specifies the VLAN ID used to access the switch’s web-based management interface. Only ports assigned to this specific VLAN will be permitted to access the Web UI, providing an essential layer of security by segmenting management traffic from general user data.

• MTU (Maximum Transmission Unit)

The MTU setting defines the largest size of a protocol data unit (in bytes) that the switch’s management interface can communicate in a single transaction.

When to adjust: While the standard Ethernet MTU is 1500, you may need to lower this value if the switch is managed over a network with restricted packet sizes, such as a VPN tunnel, a GRE tunnel, or certain ISP backhauls (e.g., PPPoE often requires 1492).

Recommendation: It is highly recommended to keep this at the default 1500 unless your network infrastructure specifically requires a smaller packet size to prevent fragmentation or packet loss.

IPv4 Address Settings

These parameters determine the switch’s network identity and how it communicates with management platforms.

IP Setting

Management Platform

The Management Platform allows users to configure how the GWN771x switch connects to a management platform. The switch supports multiple management platforms, including GDMS Cloud and GWN Manager. The management platform selection can either be automatic or manually specified by the user.

Steps to Configure the Management Platform

1. Navigate to: System ➝ Management Platform.
2. Enable DHCP Option 43: If needed, toggle on “Allow DHCP Option 43 to Override.”
3. Select Connection Management Platform:
   • Choose Auto for automatic platform selection.
   • Select GDMS Networking, L2/L3 Manager, L2/L3 Router based on your setup.
4. Specify Server Address and Port (if applicable):
   • If a specific platform is selected (e.g., L3 Manager), input the server address and port number.
5. Save your configuration.

For more details, refer to this table:

Management platform

When the switch is successfully connected to a platform (either GDMS Cloud, GWN Manager, or a Router), a corresponding Cloud Icon with a green check mark will appear at the top of the Web UI. This icon signifies that the switch is now integrated with the management platform, and some configurations from the platform may now be applied to the switch, as shown below:

SWITCHING

The switching section covers Ports and LAG (Link Aggregation Group) configurations.

Port Settings

On this page, you can configure the basic parameters for GWN771x Switch ports, like disabling or enabling the port, adding a Description, specifying the speed, Duplex mode, and Flow Control.

To configure a port, please navigate to Switching → Port Settings.

To configure a port, click on the “Edit” icon under the operation column.

Port Settings – Edit port

Jumbo Frame

The maximum Transmission Payload or MTU is typically 1500 bytes. In case the user requires even a bigger MTU length for a specific scenario, there is an option on the GWN771x Switch to enable Jumbo Frame; the maximum Ethernet frame size ranges from 2K up to 15K. The default parameter is 9K.

LAG

LAG means Link Aggregation Group, which groups some physical ports to make a single high-bandwidth data path. Thus, it can implement traffic load sharing among the member ports in a group to enhance the connection reliability.

To configure LAG, please navigate to Switching → LAG.

GWN771x switches support up to 4 link aggregation groups, as shown in the figure below:

To edit/configure a LAG, click on the “Edit” icon under the operation column.

Edit LAG

MAC Address Search

The MAC address table records the correspondence between the MAC addresses of other devices learned by the switch and the interfaces, as well as information such as the VLANs to which the interfaces belong. When forwarding a packet, the device queries the MAC address table according to the destination MAC address of the packet. If the MAC address table contains an entry corresponding to the destination MAC address of the packet, it directly forwards the packet through the outbound interface in the entry. If the MAC address table does not contain an entry corresponding to the destination MAC address of the packet, the device will use broadcast mode to forward the packet on all interfaces in the VLAN to which it belongs, except the receiving interface.

On this page, the user can search using the MAC address and the VLAN. If the device MAC address is found, it will be displayed on the Search Result section.

Spanning Tree

The Spanning Tree Protocol (STP) prevents network loops by creating a loop-free topology in Ethernet networks. It allows redundant paths without causing broadcast storms or multiple frame copies.

Global Settings – Spanning Tree

The Global Settings tab in the Spanning Tree section lets administrators configure general Spanning Tree settings and view real-time status.

To access Spanning Tree Global Settings:

1. Navigate to Switching → Spanning Tree → Global Settings.
2. Enable Spanning Tree by toggling the switch to ON.
3. Configure the following fields:

Spanning Tree – Global Settings

This section displays the current status of the spanning tree topology. You can refresh the information by clicking the Refresh icon.

Spanning Tree – Real-Time Status Information

Port Settings – Spanning Tree

The Port Settings tab allows configuration of Spanning Tree on a per-port basis, enabling administrators to control port behavior, priority, path cost, and monitor port status.

To configure Spanning Tree on specific ports:

1. Navigate to Switching → Spanning Tree → Port Settings.
2. Select the port you wish to configure and click Edit.
3. Configure the following fields:

Spanning Tree – Port Settings

Port Status

This section provides real-time information about the selected port’s spanning tree status.

Spanning Tree – Port Status

VLAN

A virtual local area network, virtual LAN or VLAN, is a group of hosts with a common set of requirements that communicate as if they were attached to the same broadcast domain, regardless of their physical location. A VLAN has the same attributes as a physical local area network (LAN), but it allows for end stations to be grouped even if they are not located on the same network switch. VLAN membership can be configured through software instead of physically relocating devices or connections.

Port VLAN

On this page, the user can select which VLANs (a preset from 1 to 8) can be allowed on GWN771x ports. This is a simplified way to manage VLANs from 1 to 8. To have more flexibility and control, please enable 802.1Q VLAN, and the Port VLAN will be disabled automatically.

First Enable Port VLAN as shown below:

Click the “Edit” icon under the Operation column to edit a VLAN, then select which ports this VLAN will be allowed on.

802.1Q VLAN

For more flexibility and control over VLAN configuration, the user can enable 802.1Q VLAN, and in this case, the user is not restricted to VLANs from 1 to 8.

Click on the “Add” button to add a VLAN, as shown below:

Deletion safeguards (Delete All)
Clicking Delete All removes only user-created VLANs. The following VLANs are protected and are not deleted: VLAN 1, the Management VLAN, and the Voice VLAN. The UI displays:
“VLAN 1, Management VLAN, and Voice VLAN cannot be deleted.”

Note: Protection follows the current IDs you’ve configured. If the Management VLAN or Voice VLAN equals VLAN 1, it remains protected as well. If Voice VLAN is disabled, only VLAN 1 and the Management VLAN are protected.

On this screen, the user can configure the VLAN:

• VLAN: Specify the VLAN ID (Range 2-4094).
• Description: Enter a description for the VLAN.
• Member Type: A shortcut to untag/tag or remove all members.
• Physical port: Select the tagged/untagged ports accordingly.

802.1Q PVID Settings

If 802.1Q VLAN is enabled, this page lets you assign the PVID (Port VLAN ID) on each port and control whether the port operates in VLAN Transparent mode.

Field descriptions

• Port: Physical interface identifier.
• PVID: VLAN ID used to classify untagged ingress frames on the port. Egress tagging is determined by the port’s membership on the 802.1Q VLAN page.
• VLAN Transparent: Per-port switch that determines how tagged frames are handled.
  • Disabled: The port enforces the local 802.1Q VLAN table. Frames are forwarded only for VLANs where the port is a member (Tagged or Untagged).
  • Enabled: The port bypasses the local 802.1Q VLAN table and directly passes all VLAN-tagged packets. The on-screen help states:
    “Once enabled, the port will no longer check the local 802.1Q VLAN table entries and will directly pass through all VLAN packets.”
• Operation: Opens the Edit Port dialog.

Configure PVID and VLAN Transparent

1. Go to VLAN → 802.1Q PVID Settings.
2. In the table, click Edit for the target port.

3. Set PVID to the VLAN ID that should classify untagged ingress traffic on that port.
4. Set VLAN Transparent as required:
   • Enabled to pass through tagged frames without checking local VLAN membership.
   • Disabled to enforce the VLAN membership defined on the VLAN → 802.1Q VLAN.
5. Click OK, then Save.

Notes:

• Scope: VLAN Transparent affects the handling of tagged frames on that port. Untagged frames are still classified by the port’s PVID.
• Membership: Enabling VLAN Transparent does not modify the VLAN membership table; it simply bypasses membership checks for tagged traffic on that port.
• Use cases: Inline/uplink ports that must relay existing VLAN tags as-is. For access ports, leave VLAN Transparent Disabled so traffic is classified and enforced per the VLAN table.
• Mode dependency: This page applies only when 802.1Q VLAN is enabled. It does not apply in Port VLAN mode.

Voice VLAN

This feature allows network administrators to prioritize voice traffic, improving VoIP call quality and ensuring efficient bandwidth usage.

Global Settings – Voice VLAN

This section allows administrators to enable and configure the Voice VLAN feature globally.

Fields & Options:

• Voice VLAN: Dropdown menu with the following options:
  • Disabled: Turns off the Voice VLAN feature.
  • Tagged OUI: This option assigns a specific VLAN ID to tagged packets from voice devices based on their Organizationally Unique Identifier (OUI). Devices that have their traffic tagged according to their OUI will be assigned to this VLAN.
  • Untagged OUI: This option assigns a VLAN ID to untagged packets from recognized voice devices. Devices without VLAN tagging but matching an OUI in the system will be assigned to the Voice VLAN. This is particularly useful in scenarios where VoIP phones or softphones do not support VLAN tagging but need to be assigned to the designated Voice VLAN for quality of service (QoS) prioritization.
• Voice VLAN ID:
  • Specifies the VLAN ID that will be used for voice traffic.
  • Required if “Tagged OUI” or “Untagged OUI” is selected.
• CoS/802.1p Priority:
  • Defines the priority level for Voice VLAN traffic (range: 0-7). Higher values indicate higher priority for voice packets. Proper CoS/802.1p priority settings enhance VoIP performance by ensuring voice packets are transmitted with higher priority.

Port Settings

Configuring specific ports for Voice VLAN ensures that only designated ports handle voice traffic, optimizing network performance and preventing unnecessary congestion on non-voice ports.

This section configures Voice VLAN on specific ports.

Steps to configure:

1. Click Edit to modify port settings.
2. Select the ports to apply Voice VLAN.
3. Enable the Voice VLAN toggle.
4. Select a Mode:
   • Manual: Retains manual ingress filtering rules.
   • Auto: Disables ingress filtering for recognized voice packets, allowing automatic handling.
5. Click OK to save.

OUI Settings

Managing OUIs is crucial for ensuring that only authorized voice devices are recognized and assigned to the Voice VLAN. This helps improve network efficiency by reducing misclassified traffic and enhances security by preventing unauthorized devices from accessing the designated VLAN.

This section allows customization of Organizationally Unique Identifiers (OUIs) used to recognize voice devices.

Options Available:

• Add New OUI:
  • Allows manual entry of an OUI address for voice devices.
  • Choose Custom to enter an OUI manually or select a predefined OUI from the dropdown list.
  • The OUI address consists of the first three octets of a MAC address (e.g., 00:B8:82).
  • Optionally, enter a Description (up to 32 characters) to label the OUI.
  • Click OK to save.

IGMP SNOOPING

The GWN771x switches support IGMP snooping, which is an IPv4 Layer 2 multicast protocol that optimizes the handling of multicast traffic in a network by intelligently forwarding traffic only to the ports where interested hosts are located, based on the monitoring of IGMP messages.

On the Global Settings tab, the users can enable the IGMP Snooping feature by toggling ON the feature, and for Unknown Multicast Packet will be either dropped or flooded as shown below:

IGMP snooping dynamically identifies router ports by monitoring IGMP General Query messages and optimizes the forwarding of multicast traffic to those ports for efficient use of network bandwidth.

TheDynamic Router Port tab displays all the discovered dynamic router ports. The users can click on the “Refresh” button to refresh the list.

QOS

The popularity of the network and the diversification of services have led to a surge in Internet traffic, resulting in network congestion, increased forwarding delay, and even packet loss in severe cases, resulting in reduced service quality or even unavailability. Therefore, to carry out these real-time services on the network, it is necessary to solve the problem of network congestion. The best way is to increase the bandwidth of the network, but considering the cost of operation and maintenance, this is not realistic. The most effective solution is to apply” Guaranteed ” policies to govern network traffic. QoS technology is developed under this background. QoS is quality of service, and its purpose is to provide end-to-end service quality assurance for various business needs. QoS is a tool for effectively utilizing network resources. It allows different traffic flows to compete for network resources unequally. Voice, video, and important data applications can be prioritized in network equipment.

QoS Basic Settings

On this page, the user can edit the port priority for each port. Supported modes are:

• Port-Based
• 802.1P-Based
• DSCP-Based

Please navigate to QoS → QoS Basic Settings page:

Select one or multiple ports, then click on the “Edit” button to modify the ports’ priority. The priority range is from 0 to 7, a larger value indicates a higher priority, and value 0 is the default value.

Priority Mapping

Priority mapping is used to realize the conversion between the QoS priority carried in the packet and the internal priority of the device ( also known as the local priority, which is the priority used by the device to differentiate the service level of the packet ) so that the device provides the Differentiated QoS service quality. Users can use different QoS priority fields in different networks according to network planning.

• 802.1p Mapping

On this tab, the user can map between 802.1p and CoS (Class of Service) where 0 is the lowest priority and 7 is the highest priority for 802.1p, and by default, CoS is set to be the same (it’s recommended to keep it by default only if necessary or a specific network requires it).

• DSCP Mapping

On this tab, the user can map between CoS and DSCP (Differentiated Services Code Point); in this case, 802.1p and CoS mapping must be configured first. (It’s recommended to keep the default settings to keep the consistency between all switches, only if it’s necessary or the network requires it)

Queue Scheduling

When congestion occurs in the network, the device will determine the processing order of forwarding packets according to the specified scheduling policy, so that high-priority packets are preferentially scheduled.

Queue scheduling algorithm: queue scheduling according to the switch interface.

• Strict priority (SP) scheduling: The flow with the highest priority is served first, and the flow with the second-highest priority is served until there is no flow at that priority. Each interface of the switch supports 8 queues ( queues 0-7 ), queue 7 is the highest priority queue, and queue 0 is the lowest priority queue. Disadvantage: When congestion occurs, if there are packets in the high-priority queue for a long time, the packets in the low-priority queue cannot be scheduled, and data cannot be transmitted.
• Weighted Round Robin (WRR) scheduling: each priority queue is allocated a certain bandwidth, and provides services for each priority queue according to the priority from high to low. When the high-priority queue has used up all the allocated bandwidth, it is automatically switched to the next priority queue to serve it.
• Weighted Fair Queuing (WFQ) scheduling: Based on ensuring fairness (bandwidth, delay) as much as possible, priority considerations are added, so that high-priority packets have more opportunities for priority scheduling than low-priority packets. WFQ can automatically classify flows by their “session” information (protocol type, source and destination IP addresses, source and destination TCP or UDP ports, priority bits in the ToS field, etc.) Place each flow evenly into different queues, thus balancing the latency of the individual flows as a whole. When dequeuing, WFQ allocates the bandwidth that each flow should occupy at the egress according to the flow priority (Precedence). The smaller the priority value is, the less bandwidth is obtained; otherwise, the more bandwidth is obtained.

Select one or multiple ports, then click on the “Edit” button to modify the ports’ Queuing Algorithm. The default algorithm is set to Strict Priority (SP).

If Weighted Round Robin (WRR) or Weighted Fair Queuing (WFQ) is selected, the Weight option can be configured accordingly; the higher the Weight, the higher the traffic priority.

Rate Limit

The interface rate limit can limit the total rate of all packets sent or received on an interface. The interface rate limit also uses the token bucket to control the flow. If an interface rate limit is configured on an interface of the device, all packets sent through this interface must first be processed through the token bucket of the interface rate limiter. If there are enough tokens in the token bucket, the packet can be sent; otherwise, the packet will be discarded or cached.

To configure Rate Limit, please navigate to QoS → Rate Limit, then select one or multiple ports, click on the “Edit” button to edit the port(s).

Enable the Ingress (incoming traffic to the switch) and then set the rate limit (in Kbps), and then enable Egress (outgoing traffic) and set the rate limit (in Kbps).

Security

Storm Control

The GWN771x switches support a storm control feature that prevents broadcast, unknown multicast, or unknown unicast by monitoring and limiting excessive traffic on a port. It helps prevent network congestion and performance problems caused by an overwhelming amount of packets. Thresholds are set to limit traffic when defined limits are exceeded.

Navigate to QoS → Storm Control, then select the unit that Storm Control will use:

• Kbps
• pps (packet per second)

Select one or multiple ports then click on the “Edit” button or icon under column operation to edit the selected port(s). Please refer to the figure and table below:

Storm Control

DHCP Snooping

DHCP Snooping is a security feature that protects against rogue DHCP servers. It allows network administrators to specify trusted and untrusted ports, ensuring that only legitimate DHCP servers can provide IP addresses. Untrusted ports will drop DHCP server responses from unauthorized servers, while trusted ports will allow traffic from legitimate DHCP servers.

To enable DHCP Snooping:

1. Log in to the Web UI of your GWN771x switch.
2. Navigate to:
   • Security → DHCP Snooping
3. Enable DHCP Snooping globally by toggling the switch at the top of the page.

Once enabled, DHCP Snooping will monitor and filter DHCP traffic on all interfaces.

DHCP Snooping Port Settings

Configure the trusted/untrusted status of each port, and whether DHCP Option 82 is enabled, to help with tracking and security.

Port-Specific Settings: You can configure DHCP Snooping on individual ports.

• Click Edit next to the port you want to configure.
• The following fields can be adjusted:

DHCP Snooping Edit port

POE

Power Over Ethernet (PoE) refers to supplying power over an Ethernet network, also known as a local area network-based power supply system, PoL or Active Ethernet.

Usually, the terminal devices of the access point need to use a DC power supply, but due to insufficient wiring, these devices need unified power management. At this time, the switch interface provides the power supply function, which can solve the above problems and realize the precise control of the port PoE power supply.

Power Supply Info

This page displays the Power Supply Info like the number of PoE, Total, Remaining PoE Power, etc, and even the Supply Voltage.

Power Supply Setting

On this page, the user can configure the total power input and configure PoE on each port that supports PoE. e.g, on the GWN7711P switch model, the ports 1-4 support PoE/PoE+.

Total Power Input: Configure proper power based on the selected power supply.

For instance, if the user sets the Total Power Input to 15 watts, this amount of power is insufficient to power both the switch and more than two access points simultaneously using PoE. Consequently, the power shortfall may cause the devices to reboot repeatedly due to the inadequate power supply.

To reset the PSE, click on the “PSE Reset” button as shown below:

When resetting the Power Sourcing Equipment (PSE) on the GWN7711P switch, a confirmation dialog appears, warning that this action will power off and restart all connected Powered Devices (PDs). The user must acknowledge the risk by selecting the checkbox and clicking “Ok” to proceed.

To edit the PoE parameters on the supported port, click on the “Edit icon” under the operation column, then select from the drop-down lists the power supply standard, power supply mode, and power supply priority.

PoE Watchdog

The PoE Watchdog feature is designed to monitor the connectivity of Powered Devices (PD) on PoE-enabled ports. The switch periodically sends packets to a configured IP address to check the PD’s availability. If the PD does not respond, the switch will disable and re-enable the PoE on that port, effectively rebooting the device. This feature is useful for ensuring the continuous operation of critical devices like IP cameras, access points, or VoIP phones.

Steps to Configure PoE Watchdog

1. Navigate to PoE → PoE Watchdog from the web interface.
2. Click on the edit icon next to the port you want to configure.
3. In the edit page, configure the following fields:
   • Port: Select the port to monitor.
   • Description: (Optional) Describe the port.
   • Enable: Toggle to enable or disable PoE Watchdog for this port.
   • IP Address: Enter the IP address of the device to ping.
   • Send Packet Interval (s): Set the interval between ping packets.
   • Enable Delay Time (s): Set the delay time before enabling the PoE watchdog.
   • Retries: Configure the number of ping retries before considering the device unreachable.
   • Disable Time (s): Set the time to disable PoE before re-enabling it.

MONITORING

Port Statistics

For monitoring or even sometimes troubleshooting, the Flow Statistics displays in real time the flow of data with different units like Octets, Packets, Transmission Rate, and OutErrPackets.

To refresh the statistics, click on the “Refresh” button, and to clear all the statistics, click on the “Clear All” button.

To clear the data for a specific port, click on the “clear icon” under the operation column.

For more details, click on the “Exclamation mark icon” under the operation column next to each port.

Port Mirror

Mirroring refers to copying the packets from the specified source to the destination port. The specified source is called the mirroring source, the destination port is called the observing port, and the copied packet is called the mirroring packet.

Mirroring can make a copy of the original packet without affecting the normal processing of the original packet by the device, and send it to the monitoring device through the observation port to determine whether the service running on the network is normal.

The GWN771x switch supports up to 4 groups. To configure/edit a group, click on the “Edit icon” under the operation column.

To start mirroring a port, first, select the Ingress (incoming traffic to the switch) Mirroring port, then select the Egress (outgoing traffic) Mirroring port, and then select from the drop-down list the Monitor port (Monitor port cannot be the same as the Mirroring port), please refer to the figure below:

Cable Test

The Cable Test can detect whether the cable connected to the switch is faulty and the location of the fault. Using this function can assist in the daily engineering installation diagnosis.

Please navigate to Maintenance → Cable Test.

Loopback Detection

The Loopback Detection feature helps prevent self-looping on a port, which can disrupt the normal operation of the network. When loopback detection is enabled on a port, if a loop is detected, the port will automatically shut down or take appropriate measures.

Configuration:

1. Navigate to Monitoring → Loopback Detection on the GWN771x switch’s web UI.
2. Toggle Loopback Detection on or off.
3. Click OK to save the settings.

Loopback Detection

MAINTENANCE

Upgrade

GWN771x Switches support manual upload firmware upgrade via a BIN file that can be downloaded from the Grandstream Firmware page: https://www.grandstream.com/support/firmware

Upgrade Via Network is also supported by specifying the Firmware Server Path (For example, firmware.grandstream.com).

Backup & Restore

On this page, the user can back up the configuration, restore from a previously saved configuration file or factory reset the GWN771x.

• Backup: The current switch configuration can be exported and saved to your computer. In the future, if you need to restore this configuration, you can simply import the backup file.
• Restore: The switch configuration can be restored based on the imported configuration file. If the device fails to be restored, hold down the Pinhole button on the back of the switch for five seconds to restore the switch to factory settings.
• Factory Reset: After factory restoration, all configurations of the switch will be restored to factory defaults. Please use it with caution! You are recommended to back up the current configuration before factory restoration.

Ping

The user on this page can enter the IP Address or Hostname and then click “Start”, the results of the ping command will be shown below.

SNMP

The Simple Network Management Protocol (SNMP) feature allows network administrators to monitor and manage devices within the network. The SNMP feature can be configured to send notifications and traps to an SNMP manager, helping to ensure efficient network operations.

Global Settings – SNMP

The Global Settings tab in the SNMP section allows administrators to configure community strings for SNMPv2 operations.

To access SNMP Global Settings:

1. Navigate to Maintenance → SNMP → Global Settings.
2. Enable SNMP by toggling the switch to ON.

SNMP Global Settings Field Descriptions

Notification Management

The Notification Management tab allows the configuration of the SNMP trap server and port.

To configure the trap server:

1. Navigate to Maintenance → SNMP → Notification Management.
2. Set the following fields:
   • Server Address: Specify the IP address of the SNMP trap server.
   • UDP Port: Enter the port used for SNMP trap communication (default is 162).

Trap Event

The Trap Event tab allows administrators to select the specific events for which SNMP traps should be sent to the SNMP manager.

To configure SNMP traps:

1. Navigate to Maintenance → SNMP → Trap Event.
2. Enable the desired trap events by toggling their switches. The available events are:
   • Authentication Failed
   • Port Up/Down
   • Cold Start
   • Warm Start
   • STP Bridge
   • Port ErrDisable
   • PoE Power Supply
   • VLAN Creation
   • VLAN Deletion
   • Configuration File Distribution

LLDP

The Link Layer Discovery Protocol (LLDP) allows the switch to advertise its identity, capabilities, and status to neighboring devices in the network. LLDP helps administrators efficiently monitor and manage network devices by providing detailed information about devices connected to the network.

Global Settings

To access LLDP Global Settings:

1. Navigate to Maintenance → LLDP → Global Settings.
2. Enable LLDP by toggling the switch to ON.

When LLDP is disabled, the system provides two handling options:

• Filter: Stops LLDP packets at the device, using LLDP only for local neighbor information.
• Bridge: Forwards LLDP packets to other devices, enabling broader network discovery.

Select the desired LLDP handling method, then click OK.

LLDP Global Settings Field Descriptions

Port Settings

The Port Settings section allows the configuration of LLDP operation on a per-port basis. Users can specify how LLDP should behave on each port and select which TLV (Type-Length-Value) elements to include in the advertisements.

To configure LLDP per port:

1. Under the Global Settings tab, scroll down to Port Settings.
2. Click Edit next to the desired port to modify its LLDP configuration.

LLDP Port Settings Field Descriptions

Neighbor Info

The Neighbor Info tab provides detailed information about the devices connected to the switch via LLDP. This includes the identity, chassis ID, and port information for each neighboring device.

To access Neighbor Info:

1. Navigate to Maintenance → LLDP → Neighbor Info.
2. The page will display the following information for each neighboring device:
   • Local Port: The local port connected to the neighbor.
   • Chassis ID: The chassis ID of the neighboring device.
   • Neighbor Port ID: The port on the neighboring device that is connected to the switch.
   • Device Name: The name of the neighboring device.
   • System Description: A description of the neighboring device.
   • Survival Time (TTL): The remaining time before the neighbor’s LLDP data expires.
3. Click Refresh to update the information, or Delete to remove neighbor entries.

LED Indicators

The LED indicators (power, port, and PoE indicators) can be toggled ON or OFF through the web interface. This feature allows users to disable the LEDs when needed, providing a cleaner and more discreet appearance while maintaining full functionality.

To configure the LED indicators:

1. Log in to the switch’s web interface.
2. Navigate to Maintenance → LED Indicators.
3. Toggle the switch next to LED Indicators to enable or disable all LED lights.
4. Click Save to apply the settings.

Once disabled, no LED feedback for power, port activity, or PoE states will be shown.

CHANGE LOG

This section documents significant changes from previous versions of the GWN7711(P)/GWN7710R switches user manuals. Only major new features or major document updates are listed here. Minor updates for corrections or editing are not documented here.

Firmware Version 1.0.7.17

• Added support for GWN7711P to support 65W PoE load. [GWN7711P Technical Specifications]
• Added MTU settings for management interface. [IPv4 Address Settings]

Firmware Version 1.0.7.14

• Added support for the new MAC OUI that starts with the reference14-4C-FF-XX-XX-XX. [OUI Settings]

Firmware Version 1.0.7.9

Product name: GWN7711, GWN7711P, GWN7710R

• Added 802.1Q VLAN filtering. [802.1Q VLAN]
• Added VLAN Transparent transmission for 802.1Q VLANs. [802.1Q PVID Settings]
• Updated ingress filtering behavior to allow all VLANs. [Rate Limit]
• Added device temperature reporting to GCC management. [Management Platform]
• Added cloud-side validation and error when an unsupported total PoE input is configured for GWN7710R. [Management Platform]
• Added error handling when the global Voice VLAN is not set as tagged or untagged and provisioning fails. [Global Settings – Voice VLAN]
• Updated Voice VLAN to support the Tagged OUI type on GWN771x. [Global Settings – Voice VLAN]
• Added missing HTTP security response headers.
• Set the default total power to 120W at startup when using a 12V power supply on GWN7711P. [Power Supply Setting]
• Updated LLDP to display Link Aggregation information under the IEEE 802.3 TLV. [LLDP]
• Added VLAN Transparent forwarding support in the IGMP module. [IGMP SNOOPING]
• Added safeguard prompt indicating that VLAN 1, the Management VLAN, and the Voice VLAN cannot be deleted when using “Delete All.” [802.1Q VLAN]

Firmware Version 1.0.3.21

Product name: GWN7711, GWN7711P, GWN7710R

• Added support for [Voice VLAN].
• Added support to set PoE input total power via Cloud. [Power Supply Setting]

Firmware Version 1.0.3.13

Product name: GWN7711, GWN7711P, GWN7710R

• No Major Changes.

Firmware Version 1.0.3.11

Product name: GWN7711, GWN7711P, GWN7710R

• Added support for LLDP features. [LLDP]
• Added support for SNMP features. [SNMP]
• Added support for spanning tree features. [Spanning Tree]
• Added support for management VLAN configuration. [Management VLAN]
• Added support for DHCP Snooping features. [DHCP Snooping]
• Added support for PoE ping watchdog features. [PoE Watchdog]
• Added support for ‘,’ character for password. [Change Password]
• Added support for MAC address input with a hyphen-separated format in the MAC fields. [MAC Address Search]
• Added support for the latest GDMS Networking features. [Management Platform]
• Added support for the latest GWN Manager features. [Management Platform]
• GWN7710R added support for configuring all LED lights ON or OFF through the webpage. [LED Indicators]
• Added Loop Detection status to the Loop Detection list, and changed the status of the table header to Port Status. [Loopback Detection]

Firmware Version 1.0.1.25

Product name: GWN7711, GWN7711P, GWN7710R

• No major changes.
• This is the initial version for GWN7710R.

Firmware Version 1.0.1.22

Product name: GWN7711, GWN7711P

• Added support for GDMS Networking and GWN Manager. [Manager Settings]
• Added the cloud connection status icon. [Manager Settings]
• Added the risk alarm for PSE reset. [Power Supply Setting]
• Added a prompt when saving the PoE function. [Power Supply Setting]

Firmware Version 1.0.0.8

Product name: GWN7711, GWN7711P

• This is the initial release.