Stratix 5400, 5410, 5700 and ArmorStratix 5700 switches report problems through their front-panel indicators, through Device Manager (the web interface) and through Logix Designer. Every indicator state and command below comes from the Rockwell manual 1783-UM007Q-EN-P (07/2022).
1. System indicators: EIP Mod, EIP Net, Setup, Pwr
The EIP Mod and EIP Net indicators mean the same thing on the 5400, 5410, 5700 and ArmorStratix 5700 (1783-UM007Q pp. 286, 288, 290).
| Indicator | State | Meaning |
|---|---|---|
| EIP Mod | Solid green | Switch operating properly |
| EIP Mod | Flashing green | Not configured, for example no IP address |
| EIP Mod | Flashing red | Recoverable system fault |
| EIP Mod | Solid red | Nonrecoverable system fault |
| EIP Net | Solid green | CIP connection established to at least one device |
| EIP Net | Flashing green | IP address present, no CIP connection established |
| EIP Net | Flashing red | One or more connections to attached devices timed out |
| EIP Net | Solid red | The switch's IP address is already used by another device |
| EIP Mod / EIP Net | Flashing green and red | POST is running |
| EIP Mod / EIP Net | Off | Power off or not properly connected |
| Pwr A / Pwr B (5400; DC_A/PWR A, DC_B/PWR B on 5700) | Solid red | No power on that circuit, switch configured for dual-input power. The 5410 has PSU 1 / PSU 2 instead: solid red = power output bad, flashing red = power input bad (p. 291) |
Setup indicator:
- If POST passes, Setup turns solid green; if it fails, Setup turns red. POST failures are fatal: Rockwell says to contact technical support (pp. 333–334).
- A Short Press of the Express Setup button on a switch that already has a non-default configuration turns Setup red for 10 seconds and exits that mode (p. 27).
- Away from the cabinet: the Front Panel view in Device Manager shows the same indicator colors as the switch (p. 284).
2. Port indicators
In Status mode (the default) (pp. 286, 289, 291):
| Port indicator | Meaning |
|---|---|
| Off | No link |
| Solid green | Link, no activity |
| Flashing green | Link active and healthy |
| Alternating green and amber | Fault or error on the link |
| Solid amber | Port disabled |
On the 5400 and 5410, the Display Mode / Disp. Mode button steps the port indicators through Speed, Duplex, PRP and PoE and back to Status; all mode indicators off means Status mode (pp. 287, 290). The DLR mode on 5400 and 5410 indicators is marked "Not functional as of the current release" (pp. 289, 292), so ring status has to be read in software (section 6).
3. A port that will not link or keeps flapping
A port that keeps losing and regaining link, or shows many packet errors, usually points to a damaged cable or connector (p. 334).
- Swap in a known good cable; check connectors for broken, bent or missing pins.
- Bypass patch panels and fiber-to-copper media converters if possible.
- Move the cable to another port to see whether the problem follows the cable.
- Check that both ends show link: a broken wire or one shut-down port can leave only one side showing link (p. 335).
- 1000 Mbps needs Category 5e or 6 cable (p. 334). SFP: use only Rockwell modules, try a known good module, clean fiber ends (p. 335).
Device Manager > Monitor > Diagnostics runs the Broken Wire Detection (TDR) test, which reports the distance to a break on copper ports; it does not run on SFP ports. The test can interrupt traffic on the port, and gigabit ports must first be set to the RJ45 media type (p. 330).
4. Error-disabled, shut-down or blocked ports
The manual gives two CLI commands to see whether a port is error-disabled, disabled or shut down: show interfaces (privileged EXEC) and show int status. Check both ends of the link and re-enable the port if needed; a port shut down manually stays down until it is re-enabled (p. 335).
Logix Designer > Port Status shows each port's Port Fault Status: "Error - Disable event", "SFP error - Disabled", "CDP native VLAN mismatch", "MAC address flap", "Port security violation" (p. 299).
Three causes that are easy to miss:
- The PLC disables the port. The switch output tag has a disable bit per port; with the controller in Run mode, these bits always take precedence over Device Manager or the CLI (p. 341). Fault/Program Action can also set ports to disable when the controller goes to Program mode or loses its connection; the default is Hold Last State (p. 54).
- Port security. On a violation, the port goes into Restrict mode: packets from unknown MAC addresses are dropped, and the switch sends an SNMP trap and logs a syslog message (p. 222). With static secure MAC IDs, a replaced device needs its MAC ID configured again (p. 221). The input tag has an
AnyPortUnauthorizedDevicebit and a…UnauthorizedDevicebit per port (pp. 342, 360). - A port disabled by hand during troubleshooting (p. 52) and never re-enabled.
Re-enabling a port, restarting or resetting the switch changes traffic on a running network and can restart a machine. Follow the plant's permit and lockout rules.
5. Speed/duplex mismatch and IP problems
Many alignment, FCS or late-collision errors in port statistics can indicate a speed or duplex mismatch, for example one end on autonegotiate and the other fixed at full duplex. Let both ends autonegotiate, or set both ends manually to the same values; if errors stay high, check the cable distance (p. 337). Fiber ports do not support autonegotiation (p. 53). Error counts per port: Device Manager > Monitor > Port Statistics (p. 302).
IP problems:
- The switch gets no address from DHCP: make sure the upstream device really is a DHCP server, then repeat Express Setup. Wrong IP address: assign a new one and update it in Express Setup (p. 336).
- A static IP address must be outside the DHCP server's range, otherwise address conflicts can occur (p. 34).
6. DLR ring faults
Ring status values: Normal, Ring Fault, Unexpected Loop Detected, Partial Network Fault, Rapid Fault/Restore Cycle (p. 119).
- Device Manager > Monitor > DLR: Overview tab, Ring Faults tab (number, time and location of faults), Ring Members tab (MAC and IP) (p. 314).
- Partial gateway faults (traffic lost in one direction) and rapid faults (a node disconnected and reconnected five times within 30 seconds) make the supervisor block the port and segment the network; they must be cleared manually on the Overview tab (p. 314).
- Last Active Node on Port 1/2 gives the IP address of the last active node on each side, which helps locate the break (p. 121).
- New ring: configure at least one supervisor before physically closing the ring; a Stratix 5400 must be in DLR feature mode (p. 113).
- Logix Designer: Device Level Ring (DLR) > Ring 1/2/3 > Statistics or Members (p. 316).
Further reading: Rockwell ENET-AT003 (Troubleshoot EtherNet/IP Networks), referenced by 1783-UM007Q; see also DLR vs PRP.
7. Device Manager will not open
- Check the IP address typed in the browser and that the computer is on the same subnet as the switch; otherwise a router or an address change is needed (p. 336).
- Page opens but misbehaves: use a private browsing window (p. 336).
- A switch started from its SD card loses Device Manager if the card is removed while it runs (p. 58).
8. Firmware, restart and reset
Update from Admin > Software Update; do not use or close that browser session meanwhile (pp. 63–64). If the update fails: check the .tar file is correct and refresh Device Manager; with connectivity, retry; without it, restart or reset the switch (p. 339).
Restart keeps the saved configuration; reset to factory defaults deletes all settings, including the IP address (p. 337). On IOS 15.2(4)EA3 or later, holding Express Setup until Setup flashes green and red during seconds 16–20 resets the switch (p. 338): releasing the button in that window erases the configuration of a running switch, so do not press and hold Express Setup on a live switch unless a factory reset is intended.
Before calling for support
- Run
show tech-support: Device Manager > Help > Support > "Information commonly needed by field service" (pp. 339–340). - Save the configuration: Admin > Load/Save in Device Manager, or Save/Restore in Logix Designer (pp. 56–57).
- Capture Monitor > Syslog. "Clear Log" does not fix anything; time settings are lost on power loss, and the manual suggests connecting to NTP (pp. 300–301).
- Note the catalog number, IOS release, photos of the indicators and the Port Status screen.
Need an engineer on site: request support. Network redesign: industrial networks and OT security.
Frequently asked questions
What does a red light on a Stratix 5700 mean?
Solid red EIP Net means a duplicate IP address; flashing red means connections to attached devices have timed out. Flashing red EIP Mod is a recoverable system fault, solid red a nonrecoverable one. A red Setup indicator after power-up means POST failed, so contact Rockwell support (1783-UM007Q pp. 286, 334).
Which command shows an err-disabled port on a Stratix switch?
The manual uses show interfaces or show int status, checking both ends and re-enabling the port if needed (p. 335). A solid amber port indicator means the port is disabled.
Why can't I open Device Manager on a Stratix switch?
Check the IP address typed in the browser and that the computer is on the same subnet as the switch; if the page opens but misbehaves, use a private browsing window (p. 336).
Where do I see a DLR Ring Fault on a Stratix switch?
Device Manager > Monitor > DLR: the Ring Faults tab gives the number, time and location of faults, and the Overview tab lets you clear partial gateway and rapid faults (p. 314).
Sources
- Rockwell Automation, 1783-UM007Q-EN-P, Stratix Managed Switches User Manual, 07/2022 — pp. 27, 34, 52–54, 56–58, 63–64, 113, 119, 121, 221–222, 284, 286–292, 299–302, 314, 316, 330, 333–342, 360
Read 6 November 2026. This article paraphrases the sources and does not quote them; read the original documents before designing or working on a system.