User’s Guide GS1920 Series Intelligent Layer 2 GbE Switch Default Login Details LAN IP Address User Name Password Version 4.50 Edition 1, 02/2018 http://192.168.1.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the Switch.
Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions • All models may be referred to as the “Switch” in this guide. • Product labels, screen names, field labels and field choices are all in bold font.
Contents Overview Contents Overview User’s Guide ......................................................................................................................................19 Getting to Know Your Switch .............................................................................................................. 20 Hardware Installation and Connection ............................................................................................. 25 Hardware Panels .................................
Contents Overview Differentiated Services ....................................................................................................................... 301 DHCP .................................................................................................................................................... 305 ARP Setup ............................................................................................................................................ 317 Maintenance ....................
Table of Contents Table of Contents Document Conventions ......................................................................................................................3 Contents Overview ..............................................................................................................................4 Table of Contents .................................................................................................................................6 Part I: User’s Guide..................
Table of Contents Part II: Technical Reference........................................................................... 33 Chapter 4 The Web Configurator........................................................................................................................34 4.1 Overview ......................................................................................................................................... 34 4.2 System Login ..............................................................
Table of Contents 8.1 Overview ......................................................................................................................................... 62 8.1.1 What You Can Do ................................................................................................................. 62 8.2 System Information ...................................................................................................................... 62 8.3 General Setup ...................................
Table of Contents 9.11 Technical Reference .................................................................................................................. 107 9.11.1 Create an IP-based VLAN Example ................................................................................ 107 Chapter 10 Static MAC Forwarding....................................................................................................................109 10.1 Overview ..........................................................
Table of Contents 14.1 Bandwidth Control Overview ................................................................................................... 138 14.1.1 What You Can Do ............................................................................................................. 138 14.2 Bandwidth Control Setup .......................................................................................................... 138 Chapter 15 Broadcast Storm Control ............................................
Table of Contents 19.1 Port Security Overview .............................................................................................................. 162 19.1.1 What You Can Do ............................................................................................................. 162 19.2 Port Security Setup ...................................................................................................................... 162 Chapter 20 Time Range...........................................
Table of Contents 24.3.2 IGMP Snooping VLAN ...................................................................................................... 190 24.3.3 IGMP Filtering Profile ........................................................................................................ 192 24.4 IPv6 Multicast Status .................................................................................................................. 193 24.4.1 MLD Snooping-proxy .................................................
Table of Contents 26.10.1 ARP Inspection Port Configure ...................................................................................... 234 26.10.2 ARP Inspection VLAN Configure ................................................................................... 235 26.11 Technical Reference ................................................................................................................ 236 26.11.1 DHCP Snooping Overview ................................................................
Table of Contents Chapter 31 Private VLAN .....................................................................................................................................263 31.1 Private VLAN Overview ............................................................................................................. 263 31.2 Configuring Private VLAN .......................................................................................................... 263 Chapter 32 Green Ethernet .......................
Table of Contents Chapter 36 Differentiated Services ....................................................................................................................301 36.1 DiffServ Overview ...................................................................................................................... 301 36.1.1 What You Can Do ............................................................................................................. 301 36.1.2 What You Need to Know ..........................
Table of Contents 39.3 Firmware Upgrade ................................................................................................................... 324 39.4 Restore Configuration ................................................................................................................ 326 39.5 Backup Configuration ................................................................................................................ 326 39.6 Custom Default ..........................................
Table of Contents 43.1.1 What You Can Do ............................................................................................................. 356 43.2 Syslog Setup ................................................................................................................................ 356 Chapter 44 Cluster Management.......................................................................................................................359 44.1 Cluster Management Overview ...................
Table of Contents 50.1 Overview ..................................................................................................................................... 376 50.2 Port Status .................................................................................................................................... 376 50.2.1 Port Details ...................................................................................................................... 377 50.2.2 Port Utilization .................
P ART I User’s Guide 19
CHAPTER 1 Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The GS1920 Series consists of the following models: • GS1920-24 • GS1920-24HP • GS1920-48 • GS1920-48HP Referring to PoE model(s) in this User's Guide only applies to GS1920-24HP and GS1920-48HP. The Switch is a layer-2 standalone Ethernet switch with additional features suitable for Ethernet.
Chapter 1 Getting to Know Your Switch Table 2 Models and Port Features SWITCH MODEL FIRMWARE VERSION GS1920-48 4.10(AANZ.2) and later GS1920-48HP 4.10(AAOA.2) and later The GS1920-24HP, and GS1920-48HP come with a Power-over-Ethernet (PoE) feature. The GS1920-24HP, and GS1920-48HP support the IEEE 802.3at High Power over Ethernet (PoE) standard and IEEE 802.3af PoE standard. Key feature differences between Switch models are as follows.
Chapter 1 Getting to Know Your Switch Figure 1 Backbone Application 1.1.2 Bridging Example In this example, the Switch connects different company departments (RD and Sales) to the corporate backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All users that need high bandwidth can connect to high-speed department servers via the Switch. You can provide a super-fast uplink connection by using a Gigabit Ethernet/SFP port on the Switch.
Chapter 1 Getting to Know Your Switch 1.1.3 High Performance Switching Example The Switch is ideal for connecting two networks that need high bandwidth. In the following example, use trunking to connect these two networks. Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode) is not feasible for most people due to the expense of replacing all existing Ethernet cables and adapter cards, restructuring your network and complex maintenance.
Chapter 1 Getting to Know Your Switch Figure 4 Shared Server Using VLAN Example 1.2 Ways to Manage the Switch Use any of the following methods to manage the Switch. • Web Configurator. This is recommended for everyday management of the Switch using a (supported) web browser. See Chapter 4 on page 34. • FTP. Use FTP for firmware upgrades and configuration backup/restore. See Section 39.8.1 on page 330. • SNMP. The Switch can be monitored by an SNMP manager. See Section 40.7.1 on page 341.
CHAPTER 2 Hardware Installation and Connection 2.1 Installation Scenarios This chapter shows you how to install and connect the Switch. The Switch can be placed on a desktop or rack-mounted on a standard EIA rack. Use the rubber feet in a desktop installation and the brackets in a rack-mounted installation. 2.2 Desktop Installation Procedure 1 Make sure the Switch is clean and dry. 2 Set the Switch on a smooth, level surface strong enough to support the weight of the Switch and the connected cables.
Chapter 2 Hardware Installation and Connection 2.3.1.1 Precautions • Make sure the rack will safely support the combined weight of all the equipment it contains. • Make sure the position of the Switch does not make the rack unstable or top-heavy. Take all necessary precautions to anchor the rack securely before installing the unit. 2.3.
Chapter 2 Hardware Installation and Connection Figure 6 Mounting the Switch on a Rack 2 Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. 3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack.
CHAPTER 3 Hardware Panels This chapter describes the front panel and rear panel of the Switch and shows you how to make the hardware connections. 3.1 Front Panel The following figures show the front panels of the Switch. Figure 7 Front Panel: GS1920-24 Figure 8 Front Panel: GS1920-24HP Figure 9 Front Panel: GS1920-48 Figure 10 Front Panel: GS1920-48HP 3.1.1 Gigabit Ethernet Ports The Switch has 1000Base-T auto-negotiating, auto-crossover Ethernet ports.
Chapter 3 Hardware Panels Note: The dual personality ports change to fiber mode directly when inserting the fiber module. When auto-negotiation is turned on, an Ethernet port negotiates with the peer automatically to determine the connection speed and duplex mode. If the peer Ethernet port does not support autonegotiation or turns off this feature, the Switch determines the connection speed by detecting the signal on the cable and using half duplex mode.
Chapter 3 Hardware Panels 3 The Switch automatically detects the installed transceiver. Check the LEDs to verify that it is functioning properly. 4 Close the transceiver’s latch (latch styles vary). 5 Connect the fiber optic cables to the transceiver. Figure 11 Transceiver Installation Example Figure 12 Connecting the Fiber Optic Cables 3.1.2.2 Transceiver Removal Use the following steps to remove an SFP transceiver. 1 Remove the fiber optic cables from the transceiver.
Chapter 3 Hardware Panels 3.1.3 LED Mode (only available for GS1920-48HP) After you push this button (see Section Figure 10 on page 28) to active PoE on the Switch, view the LEDs to ensure proper functioning of the Switch and as an aid in troubleshooting (see Section 3.3 on page 32). 3.2 Rear Panel The following figures show the rear panels of the Switch. Figure 16 Rear Panel: GS1920-24 Figure 17 Rear Panel: GS1920-24HP Figure 18 Rear Panel: GS1920-48 Figure 19 Rear Panel: GS1920-48HP 3.2.
Chapter 3 Hardware Panels 3.3 LEDs After you connect the power to the Switch, view the LEDs to ensure proper functioning of the Switch and as an aid in troubleshooting. Table 4 LED Descriptions LED COLOR STATUS DESCRIPTION PoE Green On Each Ethernet port’s LED is changed to act as a PoE LED by using the LED MODE button on the front panel. Off Each Ethernet port’s LED is changed back to act as a LNK/ACT LED by releasing the LED MODE button on the front panel. On The Switch is turned on.
P ART II Technical Reference 33
CHAPTER 4 The Web Configurator 4.1 Overview This section introduces the configuration and functions of the web configurator. The web configurator is an HTML-based management interface that allows easy Switch setup and management via Internet browser. Use Internet Explorer 9.0 and later versions, Mozilla Firefox 21 and later versions, Safari 6.0 and later versions or Google Chrome 26.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
Chapter 4 The Web Configurator Figure 20 Web Configurator: Login 4 Click Log In to view the first web configurator screen. 5 If you didn’t change the default administrator password and/or SNMP community values, a warning screen displays each time you log into the web configurator. Click Password / SNMP to open a screen where you can change the administrator and SNMP passwords simultaneously. Otherwise, click Ignore to close it.
Chapter 4 The Web Configurator Figure 22 Web Configurator: Password Change the default administrator and/or SNMP passwords, and then click Apply to save your changes. Table 5 Web Configurator: Password/SNMP LABEL DESCRIPTION Administrator This is the default administrator account with the “admin” user name. You cannot change the default administrator user name. Only the administrator has read/write access. Old Password Type the existing system password (1234 is the default password when shipped).
Chapter 4 The Web Configurator 4.3 The Status Screen The Status screen is the first screen that displays when you access the web configurator. This guide uses PoE model(s) screens as an example. The screens may very slightly for different models. The following figure shows the navigating components of a web configurator screen.
Chapter 4 The Web Configurator Table 6 Navigation Panel Sub-links Overview BASIC SETTING ADVANCED APPLICATION IP APPLICATION MANAGEMENT The following table describes the links in the navigation panel. Table 7 Navigation Panel Links LINK DESCRIPTION Basic Settings System Info This link takes you to a screen that displays general system information. General Setup This link takes you to a screen where you can configure general identification information about the Switch.
Chapter 4 The Web Configurator Table 7 Navigation Panel Links (continued) LINK DESCRIPTION IPv6 This link takes you to a screen where you can view IPv6 status and configure IPv6 settings. DNS This link takes you to a screen where you can configure DNS (domain name server) IP addresses. Advanced Application VLAN This link takes you to screens where you can configure port-based or 802.1Q VLAN (depending on what you configured in the Switch Setup menu).
Chapter 4 The Web Configurator Table 7 Navigation Panel Links (continued) LINK DESCRIPTION Private VLAN This link takes you to a screen where you can configure private VLANs. Green Ethernet This link takes you to a screen where you can configure green Ethernet settings in EEE, auto power down, and short reach for each port. LLDP This link takes you to screens where you can configure LLDP settings.
Chapter 4 The Web Configurator Figure 24 Change Administrator Login Password 4.4 Saving Your Configuration When you are done modifying the settings in a screen, click Apply to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. Click the Save link in the upper right hand corner of the web configurator to save your configuration to nonvolatile memory.
7 Prevent all services from accessing the Switch. 8 Change a service port number but forget it. 9 You forgot to log out of the Switch from a computer before logging in again on another computer. Note: Be careful not to lock yourself and others out of the Switch. 4.6 Resetting the Switch If you lock yourself (and others) from the Switch or forget the administrator password, you will need to reload the factory-default configuration file or reset the Switch back to the factory defaults. 4.6.
Chapter 4 The Web Configurator 4.6.2 Reload the Configuration File Uploading the factory-default configuration file replaces the current configuration file with the factorydefault configuration file. This means that you will lose all previous configurations. The password will also be reset to “1234” and the IP address to 192.168.1.1. 4.7 Logging Out of the Web Configurator Click Logout in a screen to exit the web configurator. You have to log in with your password again after you log out.
Chapter 5 Initial Setup Example CHAPTER 5 Initial Setup Example 5.1 Overview This chapter shows how to set up the Switch for an example network. The following lists the configuration steps for the initial setup: • Creating a VLAN • Setting Port VID • Configuring Switch Management IP Address 5.1.1 Creating a VLAN VLANs confine broadcast frames to the VLAN group in which the port(s) belongs. You can do this with port-based VLAN or tagged static VLAN with fixed port members.
Chapter 5 Initial Setup Example 2 In the Static VLAN screen, select ACTIVE, enter a descriptive name in the Name field and enter 2 in the VLAN Group ID field for the VLAN2 network. Note: The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to the same VLAN ID. 3 Since the VLAN2 network is connected to port 1 on the Switch, select Fixed to configure port 1 to be a permanent member of the VLAN only.
Figure 29 Initial Setup Network Example: Port VID 1 Click Advanced Applications > VLAN > VLAN Configuration in the navigation panel. Then click the VLAN Port Setup link. 2 Enter 2 in the PVID field for port 2 and click Apply to save your changes back to the runtime memory. Settings in the run-time memory are lost when the Switch’s power is turned off. 5.1.3 Configuring Switch Management IP Address The default management IP address of the Switch is 192.168.1.1.
Chapter 5 Initial Setup Example Figure 30 Initial Setup Example: Management IP Address 1 Connect your computer to any Ethernet port on the Switch. Make sure your computer is in the same subnet as the Switch. 2 Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurator. See Section 4.2 on page 34 for more information. 3 Click Basic Setting > IP Setup in the navigation panel. 4 Configure the related fields in the IP Setup screen.
Chapter 6 Tutorials CHAPTER 6 Tutorials 6.1 Overview This chapter provides some examples of using the web configurator to set up and use the Switch. The tutorials include: • How to Use DHCPv4 Snooping on the Switch • How to Use DHCPv4 Relay on the Switch 6.2 How to Use DHCPv4 Snooping on the Switch You only want DHCP server A connected to port 5 to assign IP addresses to all devices in VLAN network (V). Create a VLAN containing ports 5, 6 and 7. Connect a computer M to the Switch for management.
Chapter 6 Tutorials 2 Go to Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup, and create a VLAN with ID of 100. Add ports 5, 6 and 7 in the VLAN by selecting Fixed in the Control field as shown. Deselect Tx Tagging because you don’t want outgoing traffic to contain this VLAN tag. Click Add. Figure 32 Tutorial: Create a VLAN and Add Ports to It 3 Go to Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup, and set the PVID of the ports 5, 6 and 7 to 100.
Chapter 6 Tutorials 4 Go to Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure, activate and specify VLAN 100 as the DHCP VLAN as shown. Click Apply. Figure 34 Tutorial: Specify DHCP VLAN 5 Click the Port link at the top right corner. 6 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Trusted state field for port 5 because the DHCP server is connected to port 5.
Chapter 6 Tutorials 7 Go to Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > VLAN, show VLAN 100 by entering 100 in the Start VID and End VID fields and click Apply. Then select Yes in the Enabled field of the VLAN 100 entry shown at the bottom section of the screen. If you want to add more information in the DHCP request packets such as source VLAN ID or system name, you can also select an Option82 Profile in the entry. See Section 26.11.1.3 on page 238.
Chapter 6 Tutorials 6.3.1 DHCP Relay Tutorial Introduction In this example, you have configured your DHCP server (192.168.2.3) and want to have it assign a specific IP address (say 172.16.1.18) to DHCP client A based on the system name, VLAN ID and port number in the DHCP request. Client A connects to the Switch’s port 2 in VLAN 102. Figure 38 Tutorial: DHCP Relay Scenario 6.3.2 Creating a VLAN Follow the steps below to configure port 2 as a member of VLAN 102.
Chapter 6 Tutorials 3 Click Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup. 4 In the Static VLAN screen, select ACTIVE, enter a descriptive name (VLAN 102 for example) in the Name field and enter 102 in the VLAN Group ID field. 5 Select Fixed to configure port 2 to be a permanent member of this VLAN. 6 Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending. 7 Click Add to save the settings to the run-time memory.
Chapter 6 Tutorials Figure 42 Tutorial: Add Tag for Frames Received on Port 2 11 Click the Save link in the upper right corner of the web configurator to save your configuration permanently. 6.3.3 Configuring DHCPv4 Relay Follow the steps below to enable DHCP relay on the Switch and allow the Switch to add relay agent information (such as the VLAN ID) to DHCP requests. 1 Click IP Application > DHCP > DHCPv4 and then the Global link to open the DHCP Relay screen. 2 Select the Active check box.
7 The DHCP server can then assign a specific IP address based on the DHCP request. 6.3.4 Troubleshooting Check the client A’s IP address. If it did not receive the IP address 172.16.1.18, make sure: 1 Client A is connected to the Switch’s port 2 in VLAN 102. 2 You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. 3 You clicked the Save link on the Switch to have your settings take effect.
Chapter 7 Status and ZON CHAPTER 7 Status and ZON 7.1 Overview This chapter describes the screens for System Status, ZON Utility, ZON Neighbor Management, Port Status, and Port Details. 7.1.1 What You Can Do • Use the Status screen (Section 7.2 on page 56) to see the Switch’s general device information, system status, and IP addresses. You can also display other status screens for more information. • Use the ZON Utility screen (Section 7.3 on page 58) to deploy and manage network devices.
Chapter 7 Status and ZON Figure 44 Status (for PoE model(s)) The following table describes the labels in this screen. Table 9 Status LABEL DESCRIPTION Device Information Device Type This field displays the model name of this Switch. System Name This field displays the name used to identify the Switch on any network. Boot Version This field displays the version number and date of the boot module that is currently on the Switch.
Chapter 7 Status and ZON Table 9 Status (continued) LABEL DESCRIPTION Default Gateway This field displays the IP address of the Switch’s default gateway. IP Setup Click the link to go to the Basic Setting > IP Setup screen. IPV6 Global Unicast Address This field displays the Switch’s IPv6 global unicast address IPV6 Link-Local Address This field displays the Switch’s IPv6 link-local address. IPv6 configuration Click the link to go to the Basic Setting > IPv6 screen.
Chapter 7 Status and ZON Figure 45 Supported Devices and Versions Select a network adapter to discover all devices on the connected network. Figure 46 Network Adapter After you click the Go button, the ZON Utility will discover all devices on your network.
Chapter 7 Status and ZON Figure 47 Discovery The following figure shows the ZON Utility screen. Figure 48 ZON Utility Screen 7.4 ZON Neighbor Management Screen The ZON neighbor management screen allows you to view and manage the Switch’s neighboring devices more conveniently. It uses Layer Link Discovery Protocol (LLDP) to discover all neighbor devices connected to the Switch including non-Zyxel devices.
Chapter 7 Status and ZON Figure 49 Status > Neighbor The following table describes the fields in the above screen. Table 10 Status > Neighbor LABEL DESCRIPTION Local Port This shows the port of the Switch, on which the neighboring device is discovered. Desc. This shows the port description of the Switch. PoE Draw This shows the consumption that the neighboring device connected to this port draws from the Switch. This allows you to plan and use within the power budget of the Switch.
Chapter 8 Basic Setting CHAPTER 8 Basic Setting 8.1 Overview This chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup, Port Setup, PoE, Interface Setup and IPv6 screens. 8.1.1 What You Can Do • Use the System Info screen (Section 8.2 on page 62) to check the firmware version number. • Use the General Setup screen (Section 8.3 on page 64) to configure general settings such as the system name and time. • Use the Switch Setup screen (Section 8.
Figure 50 Basic Setting > System Info (for PoE model(s) only) The following table describes the labels in this screen. Table 11 Basic Setting > System Info LABEL DESCRIPTION System Name This field displays the descriptive name of the Switch for identification purposes. Product Model This field displays the product model of the Switch. Use this information when searching for firmware upgrade or looking for other support information in the website.
Chapter 8 Basic Setting Table 11 Basic Setting > System Info (continued) LABEL DESCRIPTION Temperature (C) BOARD, MAC and PHY refer to the location of the temperature sensors on the Switch printed circuit board. Current This shows the current temperature at this sensor. MAX This field displays the maximum temperature measured at this sensor. MIN This field displays the minimum temperature measured at this sensor. Threshold This field displays the upper temperature limit at this sensor.
Chapter 8 Basic Setting Figure 51 Basic Setting > General Setup The following table describes the labels in this screen. Table 12 Basic Setting > General Setup LABEL DESCRIPTION System Name Choose a descriptive name for identification purposes. This name consists of up to 64 printable characters; spaces are allowed. Location Enter the geographic location of your Switch. You can use up to 32 printable ASCII characters; spaces are allowed.
Chapter 8 Basic Setting Table 12 Basic Setting > General Setup (continued) LABEL DESCRIPTION Daylight Saving Time Daylight saving is a period from late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening. Select this option if you use Daylight Saving Time. Start Date Configure the day and time when Daylight Saving Time starts if you selected Daylight Saving Time. The time is displayed in the 24 hour format.
Chapter 8 Basic Setting 8.5 Switch Setup Click Basic Setting > Switch Setup in the navigation panel to display the screen as shown. The VLAN setup screens change depending on whether you choose 802.1Q or Port Based in the VLAN Type field in this screen. Refer to Chapter 9 on page 89 for more information on VLAN. Figure 52 Basic Setting > Switch Setup The following table describes the labels in this screen. Table 13 Basic Setting > Switch Setup LABEL DESCRIPTION VLAN Type Choose 802.1Q or Port Based.
Chapter 8 Basic Setting Table 13 Basic Setting > Switch Setup (continued) LABEL DESCRIPTION Leave All Timer Leave All Timer sets the duration of the Leave All Period timer for GVRP in milliseconds. Each port has a single Leave All Period timer. Leave All Timer must be larger than Leave Timer. Priority Queue Assignment IEEE 802.1p defines up to eight separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service.
Chapter 8 Basic Setting Figure 53 Basic Setting > IP Setup The following table describes the labels in this screen. Table 14 Basic Setting > IP Setup LABEL DESCRIPTION Default Management IP Address DHCP Client Select this option if you have a DHCP server that can assign the Switch an IP address, subnet mask, a default gateway IP address and a domain name server IP address automatically.
Chapter 8 Basic Setting Table 14 Basic Setting > IP Setup (continued) LABEL DESCRIPTION Management IP Addresses You can create up to 64 IP addresses, which are used to access and manage the Switch from the ports belonging to the pre-defined VLAN(s). You must configure a VLAN first. IP Address Enter the IP address for managing the Switch by the members of the VLAN specified in the VID field below. IP Subnet Mask Enter the IP subnet mask in dotted decimal notation.
Chapter 8 Basic Setting Figure 54 Basic Setting > Port Setup The following table describes the labels in this screen. Table 15 Basic Setting > Port Setup LABEL DESCRIPTION Port This is the port index number. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them.
Chapter 8 Basic Setting Table 15 Basic Setting > Port Setup (continued) LABEL DESCRIPTION Flow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and frame losses. Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port. The Switch uses IEEE802.3x flow control in full duplex mode and backpressure flow control in half duplex mode. IEEE802.
Chapter 8 Basic Setting Figure 56 Basic Setting > PoE Status The following table describes the labels in this screen. Table 16 Basic Setting > PoE Status LABEL DESCRIPTION PoE Mode This field displays the power management mode used by the Switch, whether it is in Classification or Consumption mode. Total Power (W) This field displays the total power the Switch can provide to the connected PoE-enabled devices on the PoE ports.
Chapter 8 Basic Setting Table 16 Basic Setting > PoE Status (continued) LABEL DESCRIPTION PD Priority When the total power requested by the PDs exceeds the total PoE power budget on the Switch, you can set the PD priority to allow the Switch to provide power to ports with higher priority first. • • • Critical has the highest priority. High has the Switch assign power to the port after all critical priority ports are served.
Chapter 8 Basic Setting Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen opens. Figure 58 Basic Setting > PoE Setup The following table describes the labels in this screen. Table 18 Basic Setting > PoE Setup LABEL DESCRIPTION PoE Mode Select the power management mode you want the Switch to use. • • Classification - Select this if you want the Switch to reserve the Max Power (mW) to each PD according to the priority level.
Chapter 8 Basic Setting Table 18 Basic Setting > PoE Setup (continued) LABEL DESCRIPTION Power-Up Set how the Switch provides power to a connected PD at power-up. 802.3af - the Switch follows the IEEE 802.3af Power over Ethernet standard to supply power to the connected PDs during power-up. Legacy - the Switch can provide power to the connected PDs that require high inrush currents at power-up. Inrush current is the maximum, instantaneous input current drawn by the PD when first turned on. Pre-802.
Chapter 8 Basic Setting The following table describes the labels in this screen. Table 19 Basic Setting > Interface Setup LABEL DESCRIPTION Interface Type Select the type of IPv6 interface for which you want to configure. The Switch supports the VLAN interface type for IPv6 at the time of writing. Interface ID Specify a unique identification number (from 1 to 4094) for the interface.
Chapter 8 Basic Setting 8.10.1 IPv6 Interface Status Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the Basic Setting > IPv6 screen. The following screen opens. Figure 61 Basic Setting > IPv6 > IPv6 Interface Status The following table describes the labels in this screen. Table 21 Basic Setting > IPv6 > IPv6 Interface Status LABEL DESCRIPTION IPv6 Active This field displays whether the IPv6 interface is activated or not.
Chapter 8 Basic Setting Table 21 Basic Setting > IPv6 > IPv6 Interface Status (continued) LABEL DESCRIPTION Global Unicast Address(es) This field displays the Switch’s global unicast address to identify this interface. Joined Group Address(es) This field displays the IPv6 multicast addresses of groups the Switch’s interface joins. ND DAD Active This field displays whether Neighbor Discovery (ND) Duplicate Address Detection (DAD) is enabled on the interface.
Chapter 8 Basic Setting 8.10.2 IPv6 Configuration Use this screen to configure IPv6 settings on the Switch. Click the IPv6 Configuration link in the Basic Setting > IPv6 screen. The following screen opens. Figure 62 Basic Setting > IPv6 > IPv6 Configuration The following table describes the labels in this screen. Table 22 Basic Setting > IPv6 > IPv6 Configuration LABEL DESCRIPTION IPv6 Global Setup Click the link to go to a screen where you can configure the global IPv6 settings on the Switch.
Chapter 8 Basic Setting Figure 63 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Global Setup The following table describes the labels in this screen. Table 23 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Global Setup LABEL DESCRIPTION IPv6 Hop Limit Specify the maximum number of hops (from 1 to 255) in router advertisements. This is the maximum number of hops on which an IPv6 packet is allowed to transmit before it is discarded by an IPv6 router, which is similar to the TTL field in IPv4.
Chapter 8 Basic Setting The following table describes the labels in this screen. Table 24 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Interface Setup LABEL DESCRIPTION Interface Select the IPv6 interface you want to configure. Active Select this option to enable the interface. Address Autoconfig Select this option to allow the interface to automatically generate a link-local address via stateless autoconfiguration. Apply Click Apply to save your changes to the Switch’s run-time memory.
Chapter 8 Basic Setting Table 25 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Link-Local Address Setup (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh.
Chapter 8 Basic Setting Table 26 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Global Address Setup (continued) LABEL DESCRIPTION IPv6 Global Address/Prefix Length This field displays the IPv6 global address and prefix length for the interface. EUI-64 This shows whether the interface ID of the global address is generated using the EUI-64 format. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries.
Chapter 8 Basic Setting Table 27 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Neighbor Discovery Setup (continued) LABEL DESCRIPTION Clear Click Clear to reset the fields to the factory defaults. Index This is the interface index number. Click on an index number to change the settings. Interface This is the name of the IPv6 interface you created. DAD Attempts This field displays the number of consecutive neighbor solicitations the Switch sends for this interface.
Chapter 8 Basic Setting Table 28 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Neighbor Setup (continued) LABEL DESCRIPTION Add Click this to create a new entry or to update an existing one. This saves your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh.
Chapter 8 Basic Setting The following table describes the labels in this screen. Table 29 Basic Setting > IPv6 > IPv6 Configuration > DHCPv6 Client Setup LABEL DESCRIPTION Interface Select the IPv6 interface you want to configure. IA Type Select IA-NA to set the Switch to get a non-temporary IP address from the DHCPv6 server for this interface.
Chapter 8 Basic Setting Figure 70 Basic Setting > DNS The following table describes the labels in this screen. Table 30 Basic Setting > DNS LABEL DESCRIPTION Static Domain Name Server Preference This is the priority of the DNS server address. Server Address Enter a domain name server IPv6/IPv4 address in order to be able to use a domain name instead of an IP address. Apply Click Apply to save your changes to the Switch’s run-time memory.
CHAPTER 9 VLAN 9.1 Overview This chapter shows you how to configure 802.1Q tagged and port-based VLANs. The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. 9.1.1 What You Can Do • Use the VLAN Status screen (Section 9.2 on page 92) to view and search all VLAN groups. • Use the VLAN Detail screen (Section 9.2.1 on page 93) to view detailed port settings and status of the VLAN group. • Use the Static VLAN Setup screen (Section 9.
Chapter 9 VLAN The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then that frame should not be forwarded as it is to an untagged port. The remaining twelve bits define the VLAN ID, giving a possible maximum number of 4,096 VLANs. Note that user priority and VLAN ID are independent of each other.
Chapter 9 VLAN Please refer to the following table for common IEEE 802.1Q VLAN terminology. Table 31 IEEE 802.1Q VLAN Terminology VLAN PARAMETER TERM DESCRIPTION VLAN Type Permanent VLAN This is a static VLAN created manually. Dynamic VLAN This is a VLAN configured by a GVRP registration/deregistration process. Registration Fixed Fixed registration ports are permanent VLAN members. Registration Forbidden Ports with registration forbidden are forbidden to join the specified VLAN.
Chapter 9 VLAN Figure 72 Basic Setting > Switch Setup > Select VLAN Type Static VLAN Use a static VLAN to decide whether an incoming frame on a port should be • sent to a VLAN group as normal depending on its VLAN tag. • sent to a group whether it has a VLAN tag or not. • blocked from a VLAN group regardless of its VLAN tag. You can also tag all outgoing frames (that were previously untagged) from a port with the specified VID. 9.2 VLAN Status Use this screen to view and search all VLAN groups.
Chapter 9 VLAN Table 32 Advanced Application > VLAN: VLAN Status (continued) LABEL DESCRIPTION Index This is the VLAN index number. Click on an index number to view more VLAN details. VID This is the VLAN identification number that was configured in the Static VLAN screen. Elapsed Time This field shows how long it has been since a normal VLAN was registered or a static VLAN was set up. Status This field shows how this VLAN was added to the Switch.
Chapter 9 VLAN 9.3 VLAN Configuration Use this screen to view IEEE 802.1Q VLAN parameters for the Switch. Click Advanced Application > VLAN > VLAN Configuration to see the following screen. Figure 75 Advanced Application > VLAN > VLAN Configuration The following table describes the labels in the above screen. Table 34 Advanced Application > VLAN > VLAN Configuration LABEL DESCRIPTION Static VLAN Setup Click Click Here to configure the Static VLAN for the Switch.
Chapter 9 VLAN Figure 76 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup The following table describes the related labels in this screen. Table 35 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup LABEL DESCRIPTION ACTIVE Select this check box to activate the VLAN settings. Name Enter a descriptive name for the VLAN group for identification purposes. This name consists of up to 64 printable characters. Spaces are allowed.
Chapter 9 VLAN Table 35 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup (continued) LABEL DESCRIPTION Add Click Add to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to change the fields back to their last saved values.
Chapter 9 VLAN The following table describes the labels in this screen. Table 36 Advanced Application > VLAN > VLAN Configuration> VLAN Port Setup LABEL DESCRIPTION GVRP GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Port This field displays the port number. * Settings in this row apply to all ports. Select this check box to permit VLAN groups beyond the local Switch.
Chapter 9 VLAN video for 192.168.1.0/24 and data for 10.1.1.0/24. The Switch can then be configured to group incoming traffic based on the source IP subnet of incoming frames. You configure a subnet based VLAN with priority 6 and VID of 100 for traffic received from IP subnet 172.16.1.0/24 (voice services). You also have a subnet based VLAN with priority 5 and VID of 200 for traffic received from IP subnet 192.168.1.0/24 (video services).
Chapter 9 VLAN Figure 79 Advanced Application > VLAN > VLAN Configuration > Subnet Based VLAN Setup Note: The following table describes the labels in this screen. Table 37 Advanced Application > VLAN > VLAN Configuration > Subnet Based VLAN Setup LABEL DESCRIPTION Active Check this box to activate this subnet based VLANs on the Switch. DHCP-Vlan Override When DHCP snooping is enabled DHCP clients can renew their IP address through the DHCP VLAN or via another DHCP server on the subnet based VLAN.
Chapter 9 VLAN Table 37 Advanced Application > VLAN > VLAN Configuration > Subnet Based VLAN Setup LABEL DESCRIPTION Active This field shows whether the subnet based VLAN is active or not. Name This field shows the name the subnet based VLAN. IP This field shows the IP address of the subnet for this subnet based VLAN. Mask-Bits This field shows the subnet mask in bit number format for this subnet based VLAN. VID This field shows the VLAN ID of the frames which belong to this subnet based VLAN.
Chapter 9 VLAN 9.7.1 Configuring Protocol Based VLAN Click the Protocol Based VLAN Setup link in the VLAN Configuration screen to display the configuration screen as shown. Note: Protocol-based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. Figure 81 Advanced Application > VLAN > VLAN Configuration > Protocol Based VLAN Setup Note: The following table describes the labels in this screen.
Chapter 9 VLAN Table 38 Advanced Application > VLAN > VLAN Configuration > Protocol Based VLAN Setup LABEL DESCRIPTION Port This field shows which port belongs to this protocol based VLAN. Name This field shows the name the protocol based VLAN. Ethernet-type This field shows which Ethernet protocol is part of this protocol based VLAN. VID This field shows the VLAN ID of the port. Priority This field shows the priority which is assigned to frames belonging to this protocol based VLAN.
Chapter 9 VLAN The following table describes the fields in the above screen. Table 39 Advanced Application > VLAN > VLAN Configuration > Voice VLAN Setup LABEL DESCRIPTION Voice VLAN Global Setup Voice VLAN Click the Voice VLAN radio button if you want to enable the Voice VLAN feature. Type a VLAN ID number in the box next to the radio button that is associated with the Voice VLAN. Click Disable radio button if you do not want to enable the Voice VLAN feature.
Chapter 9 VLAN Figure 83 Advanced Application > VLAN > VLAN Configuration > MAC Based VLAN Setup The following table describes the fields in the above screen. Table 40 Advanced Application > VLAN > VLAN Configuration > MAC Based VLAN Setup LABEL DESCRIPTION Name Type a name up to 32 alpha numeric characters for the MAC-based VLAN entry. MAC Address Type a MAC address that is bind to the MAC-based VLAN entry.
Chapter 9 VLAN Port-based VLANs are specific only to the Switch on which they were created. Note: When you activate port-based VLAN, the Switch uses a default VLAN ID of 1. You cannot change it. Note: In screens (such as IP Setup and Filtering) that require a VID, you must enter 1 as the VID. The port-based VLAN setup screen is shown next. The CPU management port forms a VLAN with all Ethernet ports. 9.10.
Chapter 9 VLAN Figure 85 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation) GS1920 Series User’s Guide 106
Chapter 9 VLAN The following table describes the labels in this screen. Table 41 Advanced Application > VLAN: Port Based VLAN Setup label Description Setting Wizard Choose All connected or Port isolation. All connected means all ports can communicate with each other, that is, there are no virtual LANs. All incoming and outgoing ports are selected. This option is the most flexible but also the least secure.
Chapter 9 VLAN Figure 86 Protocol Based VLAN Configuration Example To add more ports to this protocol based VLAN. 1 Click the index number of the protocol based VLAN entry. Click 1. 2 Change the value in the Port field to the next port you want to add. 3 Click Add.
Chapter 10 Static MAC Forwarding C H A P T E R 10 Static MAC Forwarding 10.1 Overview This chapter discusses how to configure forwarding rules based on MAC addresses of devices on your network. Use these screens to configure static MAC address forwarding. 10.1.1 What You Can Do Use the Static MAC Forwarding screen (Section 10.2 on page 109) to assign static MAC addresses for a port. 10.
Figure 87 Advanced Application > Static MAC Forwarding The following table describes the labels in this screen. Table 42 Advanced Application > Static MAC Forwarding LABEL DESCRIPTION Active Select this check box to activate your rule. You may temporarily deactivate a rule without deleting it by clearing this check box. Name Enter a descriptive name for identification purposes for this static MAC address forwarding rule.
Chapter 11 Static Multicast Forwarding C H A P T E R 11 Static Multicast Forwarding 11.1 Static Multicast Forward Setup Overview This chapter discusses how to configure forwarding rules based on multicast MAC addresses of devices on your network. Use these screens to configure static multicast address forwarding. 11.1.1 What You Can Do Use the Static Multicast Forwarding screen (Section 11.
Figure 89 Static Multicast Forwarding to A Single Port Figure 90 Static Multicast Forwarding to Multiple Ports 11.2 Configuring Static Multicast Forwarding Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). Click Advanced Application > Static Multicast Forwarding to display the configuration screen as shown.
Chapter 11 Static Multicast Forwarding Figure 91 Advanced Application > Static Multicast Forwarding The following table describes the labels in this screen. Table 43 Advanced Application > Static Multicast Forwarding LABEL DESCRIPTION Active Select this check box to activate your rule. You may temporarily deactivate a rule without deleting it by clearing this check box. Name Type a descriptive name (up to 32 printable ASCII characters) for this static multicast MAC address forwarding rule.
Chapter 11 Static Multicast Forwarding Table 43 Advanced Application > Static Multicast Forwarding (continued) LABEL DESCRIPTION Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes.
C H A P T E R 12 Filtering 12.1 Filtering Overview This chapter discusses MAC address port filtering. Filtering means sifting traffic going through the Switch based on the source and/or destination MAC addresses and VLAN group (ID). 12.1.1 What You Can Do Use the Filtering screen (Section 12.2 on page 115) to create rules for traffic going through the Switch. 12.2 Configure a Filtering Rule Use this screen to create rules for traffic going through the Switch.
Chapter 12 Filtering The following table describes the related labels in this screen. Table 44 Advanced Application > Filtering LABEL DESCRIPTION Active Make sure to select this check box to activate your rule. You may temporarily deactivate a rule without deleting it by deselecting this check box. Name Type a descriptive name (up to 32 printable ASCII characters) for this rule. This is for identification only.
C H A P T E R 13 Spanning Tree Protocol 13.1 Spanning Tree Protocol Overview The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) as defined in the following standards. • IEEE 802.1D Spanning Tree Protocol • IEEE 802.1w Rapid Spanning Tree Protocol • IEEE 802.1s Multiple Spanning Tree Protocol The Switch also allows you to set up multiple STP configurations (or trees). Ports can then be assigned to the trees. 13.1.
Chapter 13 Spanning Tree Protocol generates the topology change. In STP, a longer delay is required as the device that causes a topology change first notifies the root bridge that then notifies the network. Both RSTP and STP flush unwanted learned addresses from the filtering database. In RSTP, the port states are Discarding, Learning, and Forwarding. Note: In this user’s guide, “STP” refers to both STP and RSTP. STP Terminology The root bridge is the base of the spanning tree.
Chapter 13 Spanning Tree Protocol STP Port States STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from blocking state to forwarding state so as to eliminate transient loops. Table 46 STP Port States PORT STATE DESCRIPTION Disabled STP is disabled (default). Blocking Only configuration and management BPDUs are received and processed. Listening All BPDUs are received and processed. Note: The listening state does not exist in RSTP.
Chapter 13 Spanning Tree Protocol • Load-balancing is possible as traffic from different VLANs can use distinct paths in a region. 13.2 Spanning Tree Protocol Status Screen The Spanning Tree Protocol status screen changes depending on what standard you choose to implement on your network. Click Advanced Application > Spanning Tree Protocol to see the screen as shown.
Chapter 13 Spanning Tree Protocol The following table describes the labels in this screen. Table 47 Advanced Application > Spanning Tree Protocol > Configuration LABEL DESCRIPTION Spanning Tree Mode You can activate one of the STP modes on the Switch. Apply Click Apply to save your changes to the Switch’s run-time memory.
Chapter 13 Spanning Tree Protocol The following table describes the labels in this screen. Table 48 Advanced Application > Spanning Tree Protocol > RSTP LABEL DESCRIPTION Status Click Status to display the RSTP Status screen (see Figure 97 on page 123). Active Select this check box to activate RSTP. Clear this checkbox to disable RSTP. Note: You must also activate Rapid Spanning Tree in the Advanced Application > Spanning Tree Protocol > Configuration screen to enable RSTP on the Switch.
Chapter 13 Spanning Tree Protocol Table 48 Advanced Application > Spanning Tree Protocol > RSTP (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 13.
Chapter 13 Spanning Tree Protocol Table 49 Advanced Application > Spanning Tree Protocol > Status: RSTP (continued) LABEL DESCRIPTION Topology Changed Times This is the number of times the spanning tree has been reconfigured. Time Since Last Change This is the time since the spanning tree was last reconfigured. Port This field displays the number of the port on the Switch. Port State This field displays the port state in STP.
Chapter 13 Spanning Tree Protocol Figure 98 Advanced Application > Spanning Tree Protocol > MRSTP The following table describes the labels in this screen. Table 50 Advanced Application > Spanning Tree Protocol > MRSTP LABEL DESCRIPTION Status Click Status to display the MRSTP Status screen (see Figure 99 on page 127). Tree This is a read only index number of the STP trees. Active Select this check box to activate an STP tree. Clear this checkbox to disable an STP tree.
Chapter 13 Spanning Tree Protocol Table 50 Advanced Application > Spanning Tree Protocol > MRSTP (continued) LABEL DESCRIPTION Forwarding Delay This is the maximum time (in seconds) the Switch will wait before changing states. This delay is required because every switch must receive information about topology changes before it starts to forward frames.
Chapter 13 Spanning Tree Protocol Figure 99 Advanced Application > Spanning Tree Protocol > Status: MRSTP Note: The following table describes the labels in this screen. Table 51 Advanced Application > Spanning Tree Protocol > Status: MRSTP LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you want to activate. Click MRSTP to edit MRSTP settings on the Switch. Tree Select which STP tree configuration you want to view.
Chapter 13 Spanning Tree Protocol Table 51 Advanced Application > Spanning Tree Protocol > Status: MRSTP (continued) LABEL DESCRIPTION Port Role This field displays the role of the port in STP. • • • • • Root - A forwarding port on a non-root bridge, which has the lowest path cost and is the best port from the non-root bridge to the root bridge. A root bridge does not have a root port. Designated - A forwarding port on the designated bridge for each connected LAN segment.
Chapter 13 Spanning Tree Protocol Figure 100 Advanced Application > Spanning Tree Protocol > MSTP GS1920 Series User’s Guide 129
Chapter 13 Spanning Tree Protocol The following table describes the labels in this screen. Table 52 Advanced Application > Spanning Tree Protocol > MSTP LABEL DESCRIPTION Status Click Status to display the MSTP Status screen (see Figure 102 on page 133). Port Click Port to display the MSTP Port screen (see Figure 101 on page 131). Active Select this to activate MSTP on the Switch. Clear this to disable MSTP on the Switch.
Chapter 13 Spanning Tree Protocol Table 52 Advanced Application > Spanning Tree Protocol > MSTP (continued) LABEL DESCRIPTION * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this check box to add this port to the MST instance.
Chapter 13 Spanning Tree Protocol The following table describes the labels in this screen. Table 53 Advanced Application > Spanning Tree Protocol > MSTP > Port LABEL DESCRIPTION MSTP Click MSTP to edit MSTP settings on the Switch. Port This field displays the port number. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Chapter 13 Spanning Tree Protocol Figure 102 Advanced Application > Spanning Tree Protocol > Status: MSTP The following table describes the labels in this screen. Table 54 Advanced Application > Spanning Tree Protocol > Status: MSTP LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you want to activate. Click MSTP to edit MSTP settings on the Switch. CST This section describes the Common Spanning Tree settings.
Chapter 13 Spanning Tree Protocol Table 54 Advanced Application > Spanning Tree Protocol > Status: MSTP (continued) LABEL DESCRIPTION Configuration Digest A configuration digest is generated from the VLAN-MSTI mapping information. Topology Changed Times This is the number of times the spanning tree has been reconfigured. Time Since Last Change This is the time since the spanning tree was last reconfigured. Instance: These fields display the MSTI to VLAN mapping.
Chapter 13 Spanning Tree Protocol 13.10 Technical Reference This section provides technical background information on the topics discussed in this chapter. 13.10.1 MSTP Network Example The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP or RSTP, the link for VLAN 2 will be blocked as STP and RSTP allow only one link in the network and block the redundant link.
Chapter 13 Spanning Tree Protocol 13.10.2 MST Region An MST region is a logical grouping of multiple network devices that appears as a single device to the rest of the network. Each MSTP-enabled device can only belong to one MST region. When BPDUs enter an MST region, external path cost (of paths outside this region) is increased by one. Internal path cost (of paths within this region) is increased by one when BPDUs traverse the region.
Chapter 13 Spanning Tree Protocol Figure 106 MSTP and Legacy RSTP Network Example GS1920 Series User’s Guide 137
C H A P T E R 14 Bandwidth Control 14.1 Bandwidth Control Overview This chapter shows you how you can cap the maximum bandwidth using the Bandwidth Control screen. Bandwidth control means defining a maximum allowable bandwidth for incoming and/or out-going traffic flows on a port. 14.1.1 What You Can Do Use the Bandwidth Control screen (Section 14.2 on page 138) to limit the bandwidth for traffic going through the Switch. 14.
Chapter 14 Bandwidth Control The following table describes the related labels in this screen. Table 55 Advanced Application > Bandwidth Control LABEL DESCRIPTION Active Select this check box to enable bandwidth control on the Switch. Port This field displays the port number. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
C H A P T E R 15 Broadcast Storm Control 15.1 Broadcast Storm Control Overview This chapter introduces and shows you how to configure the broadcast storm control feature. Broadcast storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the ports. When the maximum number of allowable broadcast, multicast and/or DLF packets is reached per second, the subsequent packets are discarded.
Chapter 15 Broadcast Storm Control Figure 108 Advanced Application > Broadcast Storm Control The following table describes the labels in this screen. Table 56 Advanced Application > Broadcast Storm Control LABEL DESCRIPTION Active Select this check box to enable traffic storm control on the Switch. Clear this check box to disable this feature. Port This field displays the port number. * Settings in this row apply to all ports.
C H A P T E R 16 Mirroring 16.1 Mirroring Overview This chapter discusses port mirroring setup screens. Port mirroring allows you to copy a traffic flow to a monitor port (the port you copy the traffic to) in order that you can examine the traffic from the monitor port without interference. 16.1.1 What You Can Do Use the Mirroring screen (Section 16.2 on page 142) to select a monitor port and specify the traffic flow to be copied to the monitor port. 16.
Chapter 16 Mirroring The following table describes the labels in this screen. Table 57 Advanced Application > Mirroring LABEL DESCRIPTION Active Select this check box to activate port mirroring on the Switch. Clear this check box to disable the feature. Monitor Port The monitor port is the port you copy the traffic to in order to examine it in more detail without interfering with the traffic flow on the original port(s). Enter the port number of the monitor port.
C H A P T E R 17 Link Aggregation 17.1 Link Aggregation Overview This chapter shows you how to logically aggregate physical links to form one logical, higher-bandwidth link. Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link. You may want to trunk ports if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link.
Chapter 17 Link Aggregation • You must connect all ports point-to-point to the same Ethernet switch and configure the ports for LACP trunking. • LACP only works on full-duplex links. • All ports in the same trunk group must have the same media type, speed, duplex mode and flow control settings. Configure trunk groups or LACP before you connect the Ethernet switch to avoid causing network topology loops.
Chapter 17 Link Aggregation The following table describes the labels in this screen. Table 60 Advanced Application > Link Aggregation Status LABEL DESCRIPTION Group ID This field displays the group ID to identify a trunk group, that is, one logical link containing multiple ports. Enabled Ports These are the ports you have configured in the Link Aggregation screen to be in the trunk group. The port number(s) displays only when this trunk group is activated and there is a port belonging to this group.
Chapter 17 Link Aggregation Figure 111 Advanced Application > Link Aggregation > Link Aggregation Setting The following table describes the labels in this screen. Table 61 Advanced Application > Link Aggregation > Link Aggregation Setting LABEL DESCRIPTION Link Aggregation Setting This is the only screen you need to configure to enable static link aggregation. Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports.
Chapter 17 Link Aggregation Table 61 Advanced Application > Link Aggregation > Link Aggregation Setting (continued) LABEL DESCRIPTION Criteria Select the outgoing traffic distribution type. Packets from the same source and/or to the same destination are sent over the same link within the trunk. By default, the Switch uses the src-dst-mac distribution type. If the Switch is behind a router, the packet’s destination or source MAC address will be changed.
Chapter 17 Link Aggregation Figure 112 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP The following table describes the labels in this screen. Table 62 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP LABEL Link Aggregation Control Protocol Active DESCRIPTION Note: Do not configure this screen unless you want to enable dynamic link aggregation. Select this checkbox to enable Link Aggregation Control Protocol (LACP).
Chapter 17 Link Aggregation Table 62 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP (continued) LABEL DESCRIPTION System Priority LACP system priority is a number between 1 and 65,535. The switch with the lowest system priority (and lowest port number if system priority is the same) becomes the LACP “server”. The LACP “server” controls the operation of LACP setup. Enter a number to set the priority of an active port using Link Aggregation Control Protocol (LACP).
Chapter 17 Link Aggregation 2 Configure static trunking - Click Advanced Application > Link Aggregation > Link Aggregation Setting. In this screen activate trunk group T1, select the traffic distribution algorithm used by this group and select the ports that should belong to this group as shown in the figure below. Click Apply when you are done. Figure 114 Trunking Example - Configuration Screen Your trunk group 1 (T1) configuration is now complete.
Chapter 18 Port Authentication C H A P T E R 18 Port Authentication 18.1 Port Authentication Overview This chapter describes the IEEE 802.1x and MAC authentication methods. Port authentication is a way to validate access to ports on the Switch to clients based on an external server (authentication server). The Switch supports the following methods for port authentication: • IEEE 802.1x2 - An authentication server validates access to a port based on a username and password provided by the user.
Figure 115 IEEE 802.1x Authentication Process 18.1.3 MAC Authentication MAC authentication works in a very similar way to IEEE 802.1x authentication. The main difference is that the Switch does not prompt the client for login credentials. The login credentials are based on the source MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. Figure 116 MAC Authentication Process 18.
Chapter 18 Port Authentication Click Advanced Application > Port Authentication in the navigation panel to display the screen as shown. Select a port authentication method’s link in the screen that appears. Figure 117 Advanced Application > Port Authentication 18.3 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. In the Port Authentication screen click 802.1x to display the configuration screen as shown. Figure 118 Advanced Application > Port Authentication > 802.
Chapter 18 Port Authentication The following table describes the labels in this screen. Table 63 Advanced Application > Port Authentication > 802.1x LABEL DESCRIPTION Active Select this check box to permit 802.1x authentication on the Switch. Note: You must first enable 802.1x authentication on the Switch before configuring it on each port. Port This field displays the port number. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports.
Chapter 18 Port Authentication Figure 119 Guest VLAN Example Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication > 802.1x screen click Guest Vlan to display the configuration screen as shown. Figure 120 Advanced Application > Port Authentication > 802.1x > Guest VLAN The following table describes the labels in this screen. Table 64 Advanced Application > Port Authentication > 802.1x > Guest VLAN LABEL DESCRIPTION Port This field displays a port number.
Chapter 18 Port Authentication Table 64 Advanced Application > Port Authentication > 802.1x > Guest VLAN (continued) LABEL DESCRIPTION Active Select this checkbox to enable the guest VLAN feature on this port. Clients that fail authentication are placed in the guest VLAN and can receive limited services. Guest Vlan A guest VLAN is a pre-configured VLAN on the Switch that allows non-authenticated users to access limited network resources through the Switch. You must also enable IEEE 802.
Chapter 18 Port Authentication Figure 121 Advanced Application > Port Authentication > MAC Authentication The following table describes the labels in this screen. Table 65 Advanced Application > Port Authentication > MAC Authentication LABEL DESCRIPTION Active Select this check box to permit MAC authentication on the Switch. Note: You must first enable MAC authentication on the Switch before configuring it on each port.
Chapter 18 Port Authentication Table 65 Advanced Application > Port Authentication > MAC Authentication (continued) LABEL DESCRIPTION * Use this row to make the setting the same for all ports. Use this row first and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this check box to permit MAC authentication on this port. You must first allow MAC authentication on the Switch before configuring it on each port.
Chapter 18 Port Authentication 18.5.2.1 Types of RADIUS Messages The following types of RADIUS messages are exchanged between the switch and the RADIUS server for user authentication: • Access-Request Sent by an switch requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access.
MD5 authentication is the simplest one-way authentication method. The authentication server sends a challenge to the wired client. The wired client ‘proves’ that it knows the password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. However, MD5 authentication has some weaknesses. Since the authentication server needs to get the plaintext passwords, the passwords must be stored.
Chapter 19 Port Security C H A P T E R 19 Port Security 19.1 Port Security Overview This chapter shows you how to set up port security. Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the Switch. The Switch can learn up to 16K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 16K.
Chapter 19 Port Security Figure 122 Advanced Application > Port Security The following table describes the labels in this screen. Table 66 Advanced Application > Port Security LABEL DESCRIPTION Port List Enter the number of the port(s) (separated by a comma) on which you want to enable port security and disable MAC address learning. After you click MAC freeze, all previously learned MAC addresses on the specified port(s) will become static MAC addresses and display in the Static MAC Forwarding screen.
Table 66 Advanced Application > Port Security (continued) LABEL DESCRIPTION Address Learning MAC address learning reduces outgoing broadcast traffic. For MAC address learning to occur on a port, the port itself must be active with address learning enabled. Limited Number of Learned MAC Address Use this field to limit the number of (dynamic) MAC addresses that may be learned on a port.
Chapter 20 Time Range C H A P T E R 20 Time Range 20.1 Time Range Overview You can set up one-time and recurring schedules for time-oriented features, such as PoE and classifier. The UAG supports one-time and recurring schedules. One-time schedules are effective only once, while recurring schedules usually repeat. Both types of schedules are based on the current date and time in the Switch. 20.1.1 What You Can Do Use the Time Range screen (Section 20.
The following table describes the labels in this screen. Table 67 Advanced Application > Time Range LABEL DESCRIPTION Name Enter a descriptive name for this rule for identifying purposes. Type Select Absolute to create a one-time schedule. One-time schedules begin on a specific start date and time and end on a specific stop date and time. One-time schedules are useful for long holidays and vacation periods. Alternatively, select Periodic to create a recurring schedule.
Chapter 21 Classifier C H A P T E R 21 Classifier 21.1 Classifier Overview This chapter introduces and shows you how to configure the packet classifier on the Switch. It also discusses Quality of Service (QoS) and classifier concepts as employed by the Switch. 21.1.1 What You Can Do • Use the Classifier Status screen (Section 21.2 on page 168) to view the classifiers configured on the Switch and how many times the traffic matches the rules. • Use the Classifier Configuration screen (Section 21.
Chapter 21 Classifier 21.2 Classifier Status Use this screen to view the classifiers configured on the Switch and how many times the traffic matches the rules. Click Advanced Application > Classifier in the navigation panel to display the configuration screen as shown. Figure 124 Advanced Application > Classifier > Classifier Status The following table describes the labels in this screen.
Chapter 21 Classifier Figure 125 Advanced Application > Classifier > Classifier Configuration GS1920 Series User’s Guide 169
Chapter 21 Classifier The following table describes the labels in this screen. Table 69 Advanced Application > Classifier > Classifier Configuration LABEL DESCRIPTION Active Select this option to enable this rule. Name Enter a descriptive name for this rule for identifying purposes. Weight Enter a number between 0 and 65535 to specify the rule’s weight. When the match order is in manual mode in the Classifier Global Setting screen, a higher weight means a higher priority.
Chapter 21 Classifier Table 69 Advanced Application > Classifier > Classifier Configuration (continued) LABEL DESCRIPTION Layer 3 Specify the fields below to configure a layer 3 classifier. DSCP IPv4/IPv6 Select Any to classify traffic from any DSCP or select the second option and specify a DSCP (DiffServ Code Point) number between 0 and 63 in the field provided.
Chapter 21 Classifier Table 69 Advanced Application > Classifier > Classifier Configuration (continued) LABEL DESCRIPTION Cancel Click Cancel to reset the fields back to your previous configuration. Clear Click Clear to set the above fields back to the factory defaults. 21.3.1 Viewing and Editing Classifier Configuration Summary To view a summary of the classifier configuration, scroll down to the summary table at the bottom of the Classifier screen.
Chapter 21 Classifier Table 71 Common Ethernet Types and Protocol Numbers ETHERNET TYPE PROTOCOL NUMBER IBM SNA 80D5 AppleTalk AARP 80F3 In the Internet Protocol there is a field, called “Protocol”, to identify the next level protocol. The following table shows some common protocol types and the corresponding protocol number. Refer to http:// www.iana.org/assignments/protocol-numbers for a complete list.
Chapter 21 Classifier The following table describes the labels in this screen. Table 74 Advanced Application > Classifier > Classifier Configuration > Classifier Global Setting LABEL DESCRIPTION Match Order Select manual to have classifier rules applied according to the weight of each rule you configured in Advanced Application > Classifier > Classifier Configuration. Alternatively, select auto to have classifier rules applied according to the layer of the item configured in the rule.
Figure 128 Classifier: Example GS1920 Series User’s Guide 175
Chapter 22 Policy Rule C H A P T E R 22 Policy Rule 22.1 Policy Rules Overview This chapter shows you how to configure policy rules. A classifier distinguishes traffic into flows based on the configured criteria (refer to Chapter 21 on page 167 for more information). A policy rule ensures that a traffic flow gets the requested treatment in the network. 22.1.1 What You Can Do Use the Policy Rule screen (Section 22.
Chapter 22 Policy Rule Figure 129 Advanced Application > Policy Rule The following table describes the labels in this screen. Table 75 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option to enable the policy. Name Enter a descriptive name for identification purposes. Classifier(s) This field displays the active classifier(s) you configure in the Classifier screen. Select the classifier(s) to which this policy rule applies.
Chapter 22 Policy Rule Table 75 Advanced Application > Policy Rule (continued) LABEL DESCRIPTION Rate Limit You can configure the desired bandwidth available to a traffic flow. Traffic that exceeds the maximum bandwidth allocated (in cases where the network is congested) is dropped. Bandwidth Specify the bandwidth in kilobit per second (Kbps). Enter a number between 64 and 1000000. Action Specify the action(s) the Switch takes on the associated classified traffic flow.
Table 75 Advanced Application > Policy Rule (continued) LABEL DESCRIPTION Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. 22.3 Policy Example The figure below shows an example Policy screen where you configure a policy to limit bandwidth on a traffic flow classified using the Example classifier (refer to Section 21.5 on page 174).
Chapter 23 Queuing Method C H A P T E R 23 Queuing Method 23.1 Queuing Method Overview This chapter introduces the queuing methods supported. Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic. See also Priority Queue Assignment in Switch Setup and 802.1p Priority in Port Setup for related information. 23.1.1 What You Can Do Use the Queueing Method screen (Section 23.
Chapter 23 Queuing Method amount of bandwidth, and then moves to the end of the list; and so on, depending on the number of queues being used. This works in a looping fashion until a queue is empty. Weighted Round Robin Scheduling (WRR) uses the same algorithm as round robin scheduling, but services queues based on their priority and queue weight (the number you configure in the queue Weight field) rather than a fixed amount of bandwidth.
The following table describes the labels in this screen. Table 76 Advanced Application > Queuing Method LABEL DESCRIPTION Port This label shows the port you are configuring. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them.
Chapter 24 Multicast C H A P T E R 24 Multicast 24.1 Multicast Overview This chapter shows you how to configure various multicast features. Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast delivers IP packets to just a group of hosts on the network.
Chapter 24 Multicast IGMP Snooping A Switch can passively snoop on IGMP packets transferred between IP multicast routers/switches and IP multicast hosts to learn the IP multicast group membership. It checks IGMP packets passing through it, picks out the group registration information, and configures multicasting accordingly. IGMP snooping allows the Switch to learn multicast groups without you having to manually configure them.
Chapter 24 Multicast query from a router (X) or MLD Done or Report message from any upstream port, it will be broadcast to all connected upstream ports. MLD Messages A multicast router or switch periodically sends general queries to MLD hosts to update the multicast forwarding table. When an MLD host wants to join a multicast group, it sends an MLD Report message for that address. An MLD Done message is similar to an IGMP Leave message.
Chapter 24 Multicast Figure 132 MVR Network Example Types of MVR Ports In MVR, a source port is a port on the Switch that can send and receive multicast traffic in a multicast VLAN while a receiver port can only receive multicast traffic. Once configured, the Switch maintains a forwarding table that matches the multicast stream to the associated multicast group. MVR Modes You can set your Switch to operate in either dynamic or compatible mode.
Chapter 24 Multicast Figure 133 MVR Multicast Television Example 24.2 Multicast Setup Use this screen to configure IGMP for IPv4 or MLD for IPv6 and set up multicast VLANs. Click Advanced Application > Multicast in the navigation panel. Figure 134 Advanced Application > Multicast Setup The following table describes the labels in this screen.
Chapter 24 Multicast The following table describes the labels in this screen. Table 78 Advanced Application > Multicast > IPv4 Multicast LABEL DESCRIPTION Index This is the index number of the entry. VID This field displays the multicast VLAN ID. Port This field displays the port number that belongs to the multicast group. Multicast Group This field displays IP multicast group addresses. 24.3.
Chapter 24 Multicast Table 79 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping (continued) (continued) LABEL DESCRIPTION Host Timeout Specify the time (from 1 to 16 711 450) in seconds that elapses before the Switch removes an IGMP group membership entry if it does not receive report messages from the port. 802.1p Priority Select a priority level (0-7) to which the Switch changes the priority in outgoing IGMP control packets. Otherwise, select No-Change to not replace the priority.
Chapter 24 Multicast Table 79 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping (continued) (continued) LABEL DESCRIPTION Max Group Num. Enter the number of multicast groups this port is allowed to join. Once a port is registered in the specified number of multicast groups, any new IGMP join report frame(s) is dropped on this port. Throttling IGMP throttling controls how the Switch deals with the IGMP reports when the maximum number of the IGMP groups a port can join is reached.
Chapter 24 Multicast Figure 137 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping > IGMP Snooping VLAN The following table describes the labels in this screen. Table 80 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping > IGMP Snooping VLAN LABEL DESCRIPTION Mode Select auto to have the Switch learn multicast group membership information of any VLANs automatically.
Chapter 24 Multicast Table 80 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping > IGMP Snooping VLAN LABEL DESCRIPTION Name This field displays the descriptive name for this VLAN group. VID This field displays the ID number of the VLAN group. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the entry(ies) that you want to remove, then click the Delete button.
Chapter 24 Multicast Table 81 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping > IGMP Filtering Profile LABEL DESCRIPTION Add Click this to create a new entry. This saves your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Clear Click Clear to reset the fields to the factory defaults.
Chapter 24 Multicast Figure 140 Advanced Application > Multicast > IPv6Multicast > MLD Snooping-proxy The following table describes the fields in the above screen. Table 83 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy LABEL DESCRIPTION MLD Snooping-proxy Use these settings to configure MLD snooping-proxy. Active Select Active to enable MLD snooping-proxy on the Switch to minimize MLD control messages and allow better network performance. 802.
Chapter 24 Multicast The following table describes the fields in the above screen. Table 84 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN LABEL DESCRIPTION VID Enter the ID number of the VLAN on which you want to enable MLD snooping-proxy and configure related settings. Upstream Query Interval Enter the amount of time (in miliseconds) between general query messages sent by the router connected to the upstream port.
Chapter 24 Multicast Table 84 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN LABEL DESCRIPTION Index This is the index number of the MLD snooping-proxy VLAN entry in the table. Click on an index number to view more details or change the settings. VID This field displays the ID number of the VLAN group. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries.
Chapter 24 Multicast The following table describes the fields in the above screen. Table 85 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Port Role Setting LABEL DESCRIPTION MLD Snooping-proxy VLAN ID Select the VLAN ID for which you want to configure a port’s MLD snooping-proxy settings. Port This field displays the port number. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports.
Chapter 24 Multicast Figure 143 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering The following table describes the fields in the above screen. Table 86 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering LABEL DESCRIPTION Active Select this option to enable MLD filtering on the Switch. Port This field displays the port number. * Settings in this row apply to all ports.
Chapter 24 Multicast 24.4.5 MLD Snooping-proxy Filtering Profile Use this screen to create an MLD filtering profile and set the range of the multicast address(es). Click the Filtering Profile link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering screen to display the screen as shown. Figure 144 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering > Filtering Profile The following table describes the fields in the above screen.
Chapter 24 Multicast Table 87 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering Profile LABEL DESCRIPTION To delete the profile(s) and all the accompanying rules, select the profile(s) that you want to remove, then click the Delete button. You can select the check box in the table heading row to select all profiles. To delete a rule(s) from a profile, select the rule(s) that you want to remove , then click the Delete button.
Chapter 24 Multicast Figure 145 Advanced Application > Multicast > MVR The following table describes the related labels in this screen. Table 88 Advanced Application > Multicast > MVR LABEL DESCRIPTION Active Select this check box to enable MVR to allow one single multicast VLAN to be shared among different subscriber VLANs on the network. Group Name Enter a descriptive name (up to 32 printable ASCII characters) for identification purposes.
Chapter 24 Multicast Table 88 Advanced Application > Multicast > MVR (continued) LABEL DESCRIPTION * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. Source Port Select this option to set this port as the MVR source port that sends and receives multicast traffic.
Chapter 24 Multicast Figure 146 Advanced Application > Multicast > MVR > Group Configuration The following table describes the labels in this screen. Table 89 Advanced Application > Multicast > MVR > Group Configuration LABEL DESCRIPTION Multicast VLAN ID Select a multicast VLAN ID (that you configured in the MVR screen) from the drop-down list box. Group Name Enter a descriptive name for identification purposes.
Chapter 24 Multicast Table 89 Advanced Application > Multicast > MVR > Group Configuration (continued) LABEL DESCRIPTION Delete Select the entry(ies) that you want to remove, then click the Delete button to remove the selected entry(ies) from the table. If you delete a multicast VLAN, all multicast groups in this VLAN will also be removed. Cancel Select Cancel to clear the checkbox(es) in the table. 24.5.
Chapter 24 Multicast Figure 148 MVR Configuration Example EXAMPLE To set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The following figure shows an example where two IPv4 multicast groups (News and Movie) are configured for the multicast VLAN 200.
Chapter 24 Multicast Figure 150 MVR Group Configuration Example-2 EXAMPLE GS1920 Series User’s Guide 206
C H A P T E R 25 AAA 25.1 AAA Overview This chapter describes how to configure authentication, authorization and accounting settings on the Switch. The external servers that perform authentication, authorization and accounting functions are known as AAA servers.
Chapter 25 AAA Accounting is the process of recording what a user is doing. The Switch can use an external server to track when users log in, log out, execute commands and so on. Accounting can also record system related actions such as boot up and shut down times of the Switch. Local User Accounts By storing user profiles locally on the Switch, your Switch is able to authenticate and authorize users without interacting with a network AAA server.
Chapter 25 AAA Figure 153 Advanced Application > AAA > RADIUS Server Setup The following table describes the labels in this screen. Table 91 Advanced Application > AAA > RADIUS Server Setup LABEL DESCRIPTION Authentication Server Use this section to configure your RADIUS authentication settings. Mode This field is only valid if you configure multiple RADIUS servers.
Chapter 25 AAA Table 91 Advanced Application > AAA > RADIUS Server Setup (continued) LABEL DESCRIPTION Delete Check this box if you want to remove an existing RADIUS server entry from the Switch. This entry is deleted when you click Apply. Accounting Server Use this section to configure your RADIUS accounting server settings. Timeout Specify the amount of time in seconds that the Switch waits for an accounting request response from the RADIUS accounting server.
Chapter 25 AAA Figure 154 Advanced Application > AAA > TACACS+ Server Setup The following table describes the labels in this screen. Table 92 Advanced Application > AAA > TACACS+ Server Setup LABEL DESCRIPTION Authentication Server Use this section to configure your TACACS+ authentication settings. Mode This field is only valid if you configure multiple TACACS+ servers.
Chapter 25 AAA Table 92 Advanced Application > AAA > TACACS+ Server Setup (continued) LABEL DESCRIPTION Delete Check this box if you want to remove an existing TACACS+ server entry from the Switch. This entry is deleted when you click Apply. Accounting Server Use this section to configure your TACACS+ accounting settings. Timeout Specify the amount of time in seconds that the Switch waits for an accounting request response from the TACACS+ server.
Chapter 25 AAA The following table describes the labels in this screen. Table 93 Advanced Application > AAA > AAA Setup LABEL DESCRIPTION Authentication Use this section to specify the methods used to authenticate users accessing the Switch. Login These fields specify which database the Switch should use (first, second and third) to authenticate administrator accounts (users for Switch management). Configure the local user accounts in the Access Control > Logins screen.
Chapter 25 AAA Table 93 Advanced Application > AAA > AAA Setup (continued) LABEL DESCRIPTION Mode The Switch supports two modes of recording login events. Select: • start-stop - to have the Switch send information to the accounting server when a user begins a session, during a user’s session (if it lasts past the Update Period), and when a user ends a session. • stop-only - to have the Switch send information to the accounting server only when a user ends a session.
Chapter 25 AAA The following table describes the VSAs supported on the Switch.
Chapter 25 AAA 25.6.3 Attributes Used for Authentication The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication. 25.6.3.1 Attributes Used for Authenticating Privilege Access User-Name - The format of the User-Name attribute is $enab#$, where # is the privilege level (1-14). User-Password NAS-Identifier NAS-IP-Address 25.6.3.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 25.6.3.
Chapter 26 IP Source Guard C H A P T E R 26 IP Source Guard 26.1 IP Source Guard Overview Use IPv4 source guard to filter unauthorized DHCP and ARP packets in your network. IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in your network.
• Use the ARP Inspection VLAN Status screen (Section 26.8 on page 231) to look at various statistics about ARP packets in each VLAN. • Use the ARP Inspection Log Status screen (Section 26.9 on page 231) to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. • Use the ARP Inspection Configure screen (Section 26.10 on page 233) to enable ARP inspection on the Switch.
Chapter 26 IP Source Guard 26.3 IPv4 Source Guard Setup Use this screen to look at the current bindings for DHCP snooping and ARP inspection. Bindings are used by DHCP snooping and ARP inspection to distinguish between authorized and unauthorized packets in the network. The Switch learns the bindings by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings).
Chapter 26 IP Source Guard Figure 158 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > Static Binding The following table describes the labels in this screen. Table 98 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > Static Binding LABEL DESCRIPTION ARP Freeze ARP Freeze allows you to automatically create static bindings from the current ARP entries (either dynamically learned or static ARP entries) until the Switch’s binding table is full.
Chapter 26 IP Source Guard Table 98 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > Static Binding LABEL DESCRIPTION Index This field displays a sequential number for each binding. MAC Address This field displays the source MAC address in the binding. IP Address This field displays the IP address assigned to the MAC address in the binding. Lease This field displays how long the binding is valid. Type This field displays how the Switch learned the binding.
Chapter 26 IP Source Guard Figure 159 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping The following table describes the labels in this screen. Table 99 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping LABEL DESCRIPTION Database Status This section displays the current settings for the DHCP snooping database. You can configure them in the DHCP Snooping Configure screen. See Section 26.6 on page 224.
Chapter 26 IP Source Guard Table 99 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping LABEL Abort timer DESCRIPTION This field displays how long (in seconds) the Switch waits to update the DHCP snooping database after the current bindings change. This section displays information about the current update and the next update of the DHCP snooping database. Agent running This field displays the status of the current update or access of the DHCP snooping database.
Chapter 26 IP Source Guard Table 99 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping LABEL DESCRIPTION Binding collisions This field displays the number of bindings the Switch ignored because the Switch already had a binding with the same MAC address and VLAN ID. Invalid interfaces This field displays the number of bindings the Switch ignored because the port number was a trusted interface or does not exist anymore.
Chapter 26 IP Source Guard Figure 160 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure The following table describes the labels in this screen. Table 100 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure LABEL DESCRIPTION Active Select this to enable DHCP snooping on the Switch. You still have to enable DHCP snooping on specific VLAN and specify trusted ports.
Chapter 26 IP Source Guard Table 100 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure (continued) (continued) LABEL Renew DHCP Snooping URL DESCRIPTION Enter the location of a DHCP snooping database, and click Renew if you want the Switch to load it. You can use this to load dynamic bindings from a different DHCP snooping database than the one specified in Agent URL.
Chapter 26 IP Source Guard The following table describes the labels in this screen. Table 101 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > Port LABEL DESCRIPTION Port This field displays the port number. If you configure the * port, the settings are applied to all of the ports. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports.
Chapter 26 IP Source Guard Figure 162 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > VLAN The following table describes the labels in this screen. Table 102 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > VLAN LABEL DESCRIPTION Show VLAN Use this section to specify the VLANs you want to manage in the section below. Start VID Enter the lowest VLAN ID you want to manage in the section below.
Chapter 26 IP Source Guard Figure 163 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > VLAN > Port The following table describes the labels in this screen. Table 103 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > VLAN > Port LABEL DESCRIPTION VID Enter the ID number of the VLAN you want to configure here. Port Enter the number of port(s) to which you want to apply the specified DHCP option 82 profile.
Chapter 26 IP Source Guard 26.7 ARP Inspection Status Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unauthorized ARP packet. When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection.
Chapter 26 IP Source Guard 26.8 ARP Inspection VLAN Status Use this screen to look at various statistics about ARP packets in each VLAN. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > VLAN Status. Figure 165 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > VLAN Status The following table describes the labels in this screen.
Chapter 26 IP Source Guard Figure 166 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Log Status The following table describes the labels in this screen. Table 106 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Log Status LABEL DESCRIPTION Clearing log status table Click Apply to remove all the log messages that were generated by ARP packets and that have not been sent to the syslog server yet.
Chapter 26 IP Source Guard 26.10 ARP Inspection Configure Use this screen to enable ARP inspection on the Switch. You can also configure the length of time the Switch stores records of discarded ARP packets and global settings for the ARP inspection log. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Configure.
Chapter 26 IP Source Guard Table 107 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Configure (continued) LABEL Syslog rate DESCRIPTION Enter the maximum number of syslog messages the Switch can send to the syslog server in one batch. This number is expressed as a rate because the batch frequency is determined by the Log Interval. You must configure the syslog server (Chapter 43 on page 356) to use this.
Chapter 26 IP Source Guard The following table describes the labels in this screen. Table 108 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Configure > Port LABEL DESCRIPTION Port This field displays the port number. If you configure the * port, the settings are applied to all of the ports. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports.
Chapter 26 IP Source Guard Figure 169 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Configure > VLAN The following table describes the labels in this screen. Table 109 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Configure > VLAN LABEL DESCRIPTION VLAN Use this section to specify the VLANs you want to manage in the section below. Start VID Enter the lowest VLAN ID you want to manage in the section below.
Chapter 26 IP Source Guard 26.11.1.1 Trusted vs. Untrusted Ports Every port is either a trusted port or an untrusted port for DHCP snooping. This setting is independent of the trusted/untrusted setting for ARP inspection. You can also specify the maximum number for DHCP packets that each port (trusted or untrusted) can receive each second. Trusted ports are connected to DHCP servers or other switches.
Chapter 26 IP Source Guard 26.11.1.3 DHCP Relay Option 82 Information The Switch can add information to DHCP requests that it does not discard. This provides the DHCP server more information about the source of the requests. The Switch can add the following information: • Slot ID (1 byte), port ID (1 byte), and source VLAN ID (2 bytes) • System name (up to 32 bytes) This information is stored in an Agent Information field in the option 82 field of the DHCP headers of client DHCP request frames.
Chapter 26 IP Source Guard • It pretends to be computer B and sends a message to computer A. As a result, all the communication between computer A and computer B passes through computer X. Computer X can read and alter the information passed between them. 26.11.2.1 ARP Inspection and MAC Address Filters When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet.
Chapter 27 Loop Guard C H A P T E R 27 Loop Guard 27.1 Loop Guard Overview This chapter shows you how to configure the Switch to guard against loops on the edge of your network. Loop guard allows you to configure the Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch. While you can use Spanning Tree Protocol (STP) to prevent loops in the core of your network. STP cannot prevent loops that occur on the edge of your network. Figure 172 Loop Guard vs.
Chapter 27 Loop Guard • It will receive its own broadcast messages that it sends out as they loop back. It will then re-broadcast those messages again. The following figure shows port N on switch A connected to switch B. Switch B is in loop state. When broadcast or multicast packets leave port N and reach switch B, they are sent back to port N on A as they are rebroadcast from B.
Chapter 27 Loop Guard 27.2 Loop Guard Setup Click Advanced Application > Loop Guard in the navigation panel to display the screen as shown. Note: The loop guard feature can not be enabled on the ports that have Spanning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Figure 176 Advanced Application > Loop Guard The following table describes the labels in this screen. Table 110 Advanced Application > Loop Guard LABEL DESCRIPTION Active Select this option to enable loop guard on the Switch.
Chapter 27 Loop Guard Table 110 Advanced Application > Loop Guard (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh.
Chapter 28 Layer 2 Protocol Tunneling C H A P T E R 28 Layer 2 Protocol Tunneling 28.1 Layer 2 Protocol Tunneling Overview This chapter shows you how to configure layer 2 protocol tunneling on the Switch. 28.1.1 What You Can Do Use the Layer 2 Protocol Tunnel screen (Section 28.2 on page 245) to enable layer 2 protocol tunneling on the Switch and specify a MAC address with which the Switch uses to encapsulate the layer 2 protocol packets by replacing the destination MAC address in the packets. 28.1.
Chapter 28 Layer 2 Protocol Tunneling To emulate a point-to-point topology between two customer switches at different sites, such as A and B, you can enable protocol tunneling on edge switches 1 and 2 for PAgP (Port Aggregation Protocol), LACP or UDLD (UniDirectional Link Detection). Figure 178 L2PT Network Example 28.1.2.1 Layer 2 Protocol Tunneling Mode Each port can have two layer 2 protocol tunneling modes, Access and Tunnel.
Chapter 28 Layer 2 Protocol Tunneling Figure 179 Advanced Application > Layer 2 Protocol Tunneling The following table describes the labels in this screen. Table 111 Advanced Application > Layer 2 Protocol Tunneling LABEL DESCRIPTION Active Select this to enable layer 2 protocol tunneling on the Switch. Destination MAC Address Specify a MAC address with which the Switch uses to encapsulate the layer 2 protocol packets by replacing the destination MAC address in the packets.
Chapter 28 Layer 2 Protocol Tunneling Table 111 Advanced Application > Layer 2 Protocol Tunneling (continued) LABEL DESCRIPTION VTP Select this option to have the Switch tunnel VTP (VLAN Trunking Protocol) packets so that all customer switches can use consistent VLAN configuration through the service provider’s network.
Chapter 29 PPPoE C H A P T E R 29 PPPoE 29.1 PPPoE Intermediate Agent Overview This chapter describes how the Switch gives a PPPoE termination server additional information that the server can use to identify and authenticate a PPPoE client. A PPPoE Intermediate Agent (PPPoE IA) is deployed between a PPPoE server and PPPoE clients.
Chapter 29 PPPoE The Tag_Type is 0x0105 for vendor-specific tags, as defined in RFC 2516. The Tag_Len indicates the length of Value, i1 and i2. The Value is the 32-bit number 0x00000DE9, which stands for the “ADSL Forum” IANA entry. i1 and i2 are PPPoE intermediate agent sub-options, which contain additional information about the PPPoE client. 29.1.2.2 Sub-Option Format There are two types of sub-option: “Agent Circuit ID Sub-option” and “Agent Remote ID Sub-option”. They have the following formats.
Chapter 29 PPPoE Working Text (WT)-101. The default access node identifier is the host name of the PPPoE intermediate agent and the eth indicates “Ethernet”. Table 116 PPPoE IA Circuit ID Sub-option Format: Defined in WT-101 SubOpt Length 0x01 N (1 byte) (1 byte) Value Access Node Identifier Space eth Space Slot ID / Port No : VLAN ID (1 byte) (3 byte) (1 byte) (1 byte) (1 byte) (2 byte) (1 byte) (4 bytes) (20 byte) 29.1.2.
Chapter 29 PPPoE 29.3 PPPoE Intermediate Agent Use this screen to configure the Switch to give a PPPoE termination server additional subscriber information that the server can use to identify and authenticate a PPPoE client. Click Advanced Application > PPPoE > Intermediate Agent in the navigation panel to display the screen as shown. Figure 181 Advanced Application > PPPoE > Intermediate Agent The following table describes the labels in this screen.
Chapter 29 PPPoE Table 117 Advanced Application > PPPoE > Intermediate Agent (continued) LABEL delimiter DESCRIPTION Select a delimiter to separate the identifier-string, slot ID, port number and/or VLAN ID from each other. You can use a pound key (#), semi-colon (;), period (.), comma (,), forward slash (/) or space. Apply Click Apply to save your changes to the Switch’s run-time memory.
Table 118 Advanced Application > PPPoE > Intermediate Agent > Port (continued) LABEL DESCRIPTION Server Trusted State Select whether this port is a trusted port (Trusted) or an untrusted port (Untrusted). Trusted ports are uplink ports connected to PPPoE servers.
Chapter 29 PPPoE The following table describes the labels in this screen. Table 119 Advanced Application > PPPoE > Intermediate Agent > Port > VLAN LABEL DESCRIPTION Show Port Enter a port number to show the PPPoE Intermediate Agent settings for the specified VLAN(s) on the port. Show VLAN Use this section to specify the VLANs you want to configure in the section below. Start VID End VID Enter the lowest VLAN ID you want to configure in the section below.
Chapter 29 PPPoE The following table describes the labels in this screen. Table 120 Advanced Application > PPPoE > Intermediate Agent > VLAN LABEL DESCRIPTION Show VLAN Use this section to specify the VLANs you want to configure in the section below. Start VID Enter the lowest VLAN ID you want to configure in the section below. End VID Enter the highest VLAN ID you want to configure in the section below. Apply Click Apply to display the specified range of VLANs in the section below.
Chapter 30 Error Disable C H A P T E R 30 Error Disable 30.1 Error Disable Overview This chapter shows you how to configure the rate limit for control packets on a port, and set the Switch to take an action (such as to shut down a port or stop sending packets) on a port when the Switch detects a pre-configured error. It also shows you how to configure the Switch to automatically undo the action after the error is gone. 30.1.
30.2 Error Disable Screen Use this screen to go to the screens where you can configure error disable related settings. Click Advanced Application > Errdisable in the navigation panel to open the following screen. Figure 185 Advanced Application > Errdisable The following table describes the labels in this screen.
Chapter 30 Error Disable Figure 186 Advanced Application > Errdisable > Errdisable Status The following table describes the labels in this screen. Table 122 Advanced Application > Errdisable > Errdisable Status LABEL DESCRIPTION Inactive-reason mode reset Port List Enter the number of the port(s) (separated by a comma) on which you want to reset inactivereason status. Cause Select the cause of inactive-reason mode you want to reset here.
Chapter 30 Error Disable Table 122 Advanced Application > Errdisable > Errdisable Status (continued) LABEL Status DESCRIPTION This field displays the errdisable status • • Forwarding: The Switch is forwarding packets. Rate-limitation mode is always in Forwarding status.
Chapter 30 Error Disable The following table describes the labels in this screen. Table 123 Advanced Application > Errdisable > CPU protection LABEL DESCRIPTION Reason Select the type of control packet you want to configure here. Port This field displays the port number. * Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them.
Table 124 Advanced Application > Errdisable > Errdisable Detect (continued) LABEL DESCRIPTION Mode Select the action that the Switch takes when the number of control packets exceed the rate limit on a port, set in the Advanced Application > Errdisable > CPU protection screen. • • • inactive-port - The Switch disables the port on which the control packets are received. inactive-reason - The Switch drops all the specified control packets (such as BPDU) on the port.
Chapter 30 Error Disable Table 125 Advanced Application > Errdisable > Errdisable Recovery (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh.
Chapter 31 Private VLAN C HAPTER 31 30 Private VLAN This chapter shows you how to configure the Switch to prevent communications between ports in a VLAN. 31.1 Private VLAN Overview Private VLAN allows you to do port isolation within a VLAN in a simple way. You specify which port(s) in a VLAN is not isolated by adding it to the promiscuous port list. The Switch automatically adds other ports in this VLAN to the isolated port list and blocks traffic between the isolated ports.
Chapter 31 Private VLAN Figure 191 Advanced Application > Private VLAN The following table describes the labels in this screen. Table 126 Advanced Application > Private VLAN LABEL DESCRIPTION Active Check this box to enable private VLAN in a VLAN. Name Enter a descriptive name (up to 32 printable ASCII characters) for identification purposes. VLAN ID Enter a VLAN ID from 1 to 4094. This is the VLAN to which this rule applies.
Chapter 32 Green Ethernet C H A P T E R 32 Green Ethernet This chapter shows you how to configure the Switch to reduce the power consumed by switch ports. 32.1 Green Ethernet Overview Green Ethernet reduces switch port power consumption in the following ways. IEEE 802.3az Energy Efficient Ethernet (EEE) If EEE is enabled, both sides of a link support EEE and there is no traffic, the port enters Low Power Idle (LPI) mode.
Chapter 32 Green Ethernet Figure 192 Advanced Application > Green Ethernet The following table describes the labels in this screen. Table 127 Advanced Application > Green Ethernet LABEL DESCRIPTION EEE Select this to activate Energy Efficient Ethernet globally. Auto Power Down Select this to activate Auto Power Down globally. Short Reach Select this to activate Short Reach globally. Port This field displays the port number. * Use this row to make the setting the same for all ports.
Chapter 33 Link Layer Discovery Protocol (LLDP) C HAPTER 33 31 Link Layer Discovery Protocol (LLDP) 33.1 LLDP Overview The LLDP (Link Layer Discovery Protocol) is a layer 2 protocol. It allows a network device to advertise its identity and capabilities on the local network. It also allows the device to maintain and store information from adjacent devices which are directly connected to the network device.
Chapter 33 Link Layer Discovery Protocol (LLDP) The next figure demonstrates that the network devices Switches and Routers (S and R) transmit and receive device information via LLDPDU and the network manager can query the information using Simple Network Management Protocol (SNMP). Figure 193 LLDP Overview 33.2 LLDP-MED Overview LLDP-MED (Link Layer Discovery Protocol for Media Endpoint Devices) is an extension to the standard LLDP developed by the Telecommunications Industry Association (TIA) TR-41.
Figure 194 LLDP-MED Overview 33.3 LLDP Screens Click Advanced Application > LLDP in the navigation panel to display the screen as shown next. Figure 195 Advanced Application > LLDP The following table describes the labels in this screen. Table 128 Advanced Application > LLDP LABEL DESCRIPTION LLDP LLDP Local Status Click here to show a screen with the Switch’s LLDP information. LLDP Remote Status Click here to show a screen with LLDP information from the neighboring devices.
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 128 Advanced Application > LLDP (continued) LABEL DESCRIPTION LLDP-MED LLDP-MED Configuration Click here to show a screen to configure LLDP-MED (Link Layer Discovery Protocol for Media Endpoint Devices) parameters. LLDP-MED Network Policy Click here to show a screen to configure LLDP-MED (Link Layer Discovery Protocol for Media Endpoint Devices) network policy parameters.
Chapter 33 Link Layer Discovery Protocol (LLDP) The following table describes the labels in this screen. Table 129 Advanced Application > LLDP > LLDP Local Status LABEL DESCRIPTION Basic TLV Chassis ID TLV This displays the chassis ID of the local Switch, that is the Switch you’re configuring. The chassis ID is identified by the chassis ID subtype. Chassis ID Subtype - this displays how the chassis of the Switch is identified. Chassis ID - This displays the chassis ID of the local Switch.
Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 197 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail GS1920 Series User’s Guide 272
Chapter 33 Link Layer Discovery Protocol (LLDP) The following table describes the labels in this screen. Table 130 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail LABEL DESCRIPTION Basic TLV These are the Basic TLV flags Port ID TLV The port ID TLV identifies the specific port that transmitted the LLDP frame. • • Port Description TLV Port ID Subtype: This shows how the port is identified. Port ID: This is the ID of the port. This displays the local port description.
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 130 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail LABEL DESCRIPTION Network Policy TLV This displays a network policy for the specified application. Location Identification TLV This shows the location information of a caller by its ELIN (Emergency Location Identifier Number) or the IETF Geopriv Civic Address based Location Configuration Information (Civic Address LCI).
Chapter 33 Link Layer Discovery Protocol (LLDP) 33.5.1 LLDP Remote Port Status Detail This screen displays detailed LLDP status of the remote device conencted to the Switch. Click Advanced Application > LLDP > LLDP Remote Status (Click Here) and then click an index number, for example 1, in the Index column in the LLDP Remote Status screen to display the screen as shown next.
Table 132 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Basic TLV) LABEL DESCRIPTION Port ID TLV • • Time To Live TLV This displays the time-to-live (TTL) multiplier of LLDP frames. The device information on the neighboring devices ages out and is discarded when its corresponding TTL expires. The TTL value is to multiply the TTL multiplier by the LLDP frames transmitting interval. Port Description TLV This displays the remote port description.
Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 200 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail> (Dot 1 and Dot3 TLV) The following table describes the labels in the Dot1 and Dot3 parts of the screen. Table 133 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Dot1 and Dot3 TLV) LABEL DESCRIPTION Dot1 TLV Port VLAN ID TLV This displays the VLAN ID of this port on the remote device.
Table 133 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Dot1 and Dot3 TLV) LABEL Vlan Name TLV DESCRIPTION This shows the VLAN ID and name for remote device port. • • Protocol Identity TLV VLAN ID VLAN Name The Protocol Identity TLV allows the Switch to advertise the particular protocols that are accessible through its port.
Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 201 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED TLV) GS1920 Series User’s Guide 279
The following table describes the labels in the MED TLV part of the screen. Table 134 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED TLV) LABEL DESCRIPTION MED TLV LLDP Media Endpoint Discovery (MED) is an extension of LLDP that provides additional capabilities to support media endpoint devices. MED enables advertisement and discovery of network policies, device location discovery to allow creation of location databases, and information for troubleshooting.
Chapter 33 Link Layer Discovery Protocol (LLDP) 33.6 LLDP Configuration Use this screen to configure global LLDP settings on the Switch. Click Advanced Application > LLDP > LLDP Configuration (Click Here) to display the screen as shown next. Figure 202 Advanced Application > LLDP > LLDP Configuration The following table describes the labels in this screen. Table 135 Advanced Application > LLDP > LLDP Configuration LABEL DESCRIPTION Active Select to enable LLDP on the Switch. It is enabled by default.
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 135 Advanced Application > LLDP > LLDP Configuration LABEL DESCRIPTION Port This displays the Switch’s port number. * means all ports. * Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. Admin Status Select whether LLDP transmission and/or reception is allowed on this port.
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 136 Advanced Application > LLDP > LLDP Configuration > Basic TLV Setting LABEL DESCRIPTION Management Address Select the check box(es) to enable or disable the sending of Management Address TLVs on the port(s). Port Description Select the check box(es) to enable or disable the sending of Port Description TLVs on the port(s).
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 137 Advanced Application > LLDP > LLDP Configuration > Org-specific TLV Setting LABEL Port VLAN ID DESCRIPTION Select the check box(es) to enable or disable the sending of IEEE 802.1 Port VLAN ID TLVs on the port(s). All check boxes in this column are enabled by default. Dot3 TLV Link Aggregation Select the check box(es) to enable or disable the sending of IEEE 802.3 Link Aggregation TLVs on the port(s).
Chapter 33 Link Layer Discovery Protocol (LLDP) The following table describes the labels in this screen. Table 138 Advanced Application > LLDP > LLDP-MED Configuration LABEL DESCRIPTION Port This displays the Switch’s port number. Select * to configure all ports simultaneously. * Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them.
Chapter 33 Link Layer Discovery Protocol (LLDP) The following table describes the labels in this screen. Table 139 Advanced Application > LLDP > LLDP-MED Network Policy LABEL DESCRIPTION Port Enter the port number to set up the LLDP-MED network policy. Application Type Select the type of application used in the network policy.
Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 207 Advanced Application > LLDP > LLDP-MED Location The following table describes the labels in this screen. Table 140 Advanced Application > LLDP > LLDP-MED Location LABEL DESCRIPTION Port Enter the port number you want to set up the location within the LLDP-MED network. Location Coordinates The LLDP-MED uses geographical coordinates and Civic Address to set the location information of the remote device.
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 140 Advanced Application > LLDP > LLDP-MED Location LABEL Altitude DESCRIPTION Enter the altitude information. The value should be from -2097151 to 2097151 in meters or in floors. • • Datum Select the appropriate geodetic datum used by GPS. • • • Civic Address meters floor WGS84 NAD83-NAVD88 NAD83-MLLW Enter the Civic Address by providing information such as Country, State, County, City, Street, Number, ZIP code and other additional information.
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 140 Advanced Application > LLDP > LLDP-MED Location LABEL DESCRIPTION Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the locations that you want to remove, then click the Delete button. Cancel Click Cancel to clear the selected check boxes.
Chapter 34 OAM C H A P T E R 34 OAM 34.1 OAM Overview Link layer Ethernet OAM (Operations, Administration and Maintenance) as described in IEEE 802.3ah is a link monitoring protocol. It utilizes OAM Protocol Data Units or OAM PDUs to transmit link status information between directly connected Ethernet devices. Both devices must support IEEE 802.3ah.
Chapter 34 OAM Figure 208 Advanced Application > OAM Status The following table describes the labels in this screen. Table 141 Advanced Application > OAM Status LABEL DESCRIPTION Local This section displays information about the ports on the Switch. Port This field displays the number of the port on the Switch. Mode This field displays the operational state of the port when OAM is enabled on the port. Active - Allows the port to issue and respond to Ethernet OAM commands.
Chapter 34 OAM Figure 209 Advanced Application > OAM Status > OAM Details The following table describes the labels in this screen. Table 142 Advanced Application > OAM Status > OAM Details LABEL DESCRIPTION Discovery This section displays OAM configuration details and operational status of the port on the Switch and/or the remote device.
Chapter 34 OAM Table 142 Advanced Application > OAM Status > OAM Details (continued) LABEL Mode DESCRIPTION This field displays the OAM mode. The device in active mode (typically the service provider's device) controls the device in passive mode (typically the subscriber's device). Active: The port initiates OAM discovery; sends information PDUs; and may send event notification PDUs, variable request/response PDUs, or loopback control PDUs.
Chapter 34 OAM Table 142 Advanced Application > OAM Status > OAM Details (continued) LABEL Discovery state DESCRIPTION This field indicates the state in the OAM discovery process. OAM-enabled devices use this process to detect each other and to exchange information about their OAM configuration and capabilities. OAM discovery is a handshake protocol. Fault: One of the devices is transmitting OAM PDUs with link fault information, or the interface is not operational.
Chapter 34 OAM Table 142 Advanced Application > OAM Status > OAM Details (continued) LABEL DESCRIPTION Unsupported OAMPDU Tx This field displays the number of unsupported OAM PDUs sent on the port. Unsupported OAMPDU Rx This field displays the number of unsupported OAM PDUs received on the port. 34.3 OAM Configuration Use this screen to turn on Ethernet OAM on the Switch and port(s) and configure the related settings.
Chapter 34 OAM Table 143 Advanced Application > OAM > OAM Configuration (continued) LABEL DESCRIPTION Mode Specify the OAM mode on the port. Select Active to allow the port to issue and respond to Ethernet OAM commands. Select Passive to allow the port to respond to Ethernet OAM commands. Remote Loopback Supported Select this check box to enable the remote loopback feature on the port. Otherwise, clear the check box to disable it.
Chapter 34 OAM Table 144 Advanced Application > OAM > OAM Remote Loopback (continued) LABEL DESCRIPTION Packet Size Define the allowable packet size of the loopback test frames. Test Click Test to begin the test. Remote Loopback Mode Port Enter the number of the port from which the Switch sends loopback control PDUs to initiate or terminate a remote-loopack test.
C H A P T E R 35 Static Route 35.1 Static Routing Overview This chapter shows you how to configure static routes. The Switch uses IP for communication with management computers, for example using HTTP, Telnet, SSH, or SNMP. Use IP static routes to have the Switch respond to remote management stations that are not reachable through the default gateway.
Chapter 35 Static Route Figure 213 IP Application > Static Routing To enable IPv4 static route, configure the static route settings in the IP Application > Static Routing > IPv4 Static Route screen. 35.3 IPv4 Static Route Click IP Application > Static Routing > IPv4 Static Route in the navigation panel to display the screen as shown. Figure 214 IP Application > Static Routing > IPv4 Static Route The following table describes the related labels you use to create a static route.
Chapter 35 Static Route Table 145 IP Application > Static Routing > IPv4 Static Route (continued) LABEL DESCRIPTION Metric The metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link. The number need not be precise, but it must be between 1 and 15. In practice, 2 or 3 is usually a good number.
C H A P T E R 36 Differentiated Services 36.1 DiffServ Overview This chapter shows you how to configure Differentiated Services (DiffServ) on the Switch. Quality of Service (QoS) is used to prioritize source-to-destination traffic flows. All packets in the flow are given the same priority. You can use CoS (class of service) to give different priorities to different packet types.
Chapter 36 Differentiated Services DiffServ Network Example The following figure depicts a DiffServ network consisting of a group of directly connected DiffServcompliant network devices. The boundary node (A in Figure 216) in a DiffServ network classifies (marks with a DSCP value) the incoming packets into different traffic flows (Platinum, Gold, Silver, Bronze) based on the configured marking rules. A network administrator can then apply various traffic policies to the traffic flows.
Chapter 36 Differentiated Services Figure 217 IP Application > DiffServ The following table describes the labels in this screen. Table 146 IP Application > DiffServ LABEL DESCRIPTION Active Select this option to enable DiffServ on the Switch. Port This field displays the index number of a port on the switch. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports.
Chapter 36 Differentiated Services The following table shows the default DSCP-to-IEEE802.1p mapping. Table 147 Default DSCP-IEEE 802.1p Mapping DSCP VALUE 0–7 8 – 15 16 – 23 24 – 31 32 – 39 40 – 47 48 – 55 56 – 63 IEEE 802.1p 0 1 2 3 4 5 6 7 36.3.1 Configuring DSCP Settings To change the DSCP-IEEE 802.1p mapping click the DSCP Setting link in the DiffServ screen to display the screen as shown next.
C H A P T E R 37 DHCP 37.1 DHCP Overview This chapter shows you how to configure the DHCP feature. DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configuration at start-up from a server. If you configure the Switch as a DHCP relay agent, then the Switch forwards DHCP requests to DHCP server on your network.
Chapter 37 DHCP 37.2 DHCP Configuration Click IP Application > DHCP in the navigation panel to display the screen as shown. Click the link next to DHCPv4 to open screens where you can enable and configure DHCPv4 relay settings and create option 82 profiles. Click the link next to DHCPv6 to open a screen where you can configure DHCPv6 relay settings. Figure 219 IP Application > DHCP 37.3 DHCPv4 Status Click IP Application > DHCP > DHCPv4 in the navigation panel. The DHCP Status screen displays.
Chapter 37 DHCP The Switch can be configured as a global DHCP relay. This means that the Switch forwards all DHCP requests from all domains to the same DHCP server. You can also configure the Switch to relay DHCP information based on the VLAN membership of the DHCP clients. 37.4.1 DHCPv4 Relay Agent Information The Switch can add information about the source of client DHCP requests that it relays to a DHCP server by adding Relay Agent Information.
Chapter 37 DHCP Table 153 DHCP Relay Agent Remote ID Sub-option Format SubOpt Code Length 2 N (1 byte) (1 byte) Value MAC Address or String The 1 in the first field identifies this as an Agent Circuit ID sub-option and 2 identifies this as an Agent Remote ID sub-option. The next field specifies the length of the field. 37.4.2 DHCPv4 Option 82 Profile Use this screen to create DHCPv4 option 82 profiles.
Chapter 37 DHCP Table 154 IP Application > DHCP > DHCPv4 > Option 82 Profile (continued) LABEL string DESCRIPTION Enter a string of up to 64 ASCII characters that the Switch adds into the client DHCP requests. Spaces are allowed. Remote-ID Use this section to configure the Remote ID sub-option to include information that identifies the relay agent (the Switch). Enable Select this option to have the Switch append the Remote ID sub-option to the option 82 field of DHCP requests.
Chapter 37 DHCP The following table describes the labels in this screen. Table 155 IP Application > DHCP > DHCPv4 > Global LABEL DESCRIPTION Active Select this check box to enable DHCPv4 relay. Remote DHCP Server 1 .. 3 Enter the IP address of a DHCPv4 server in dotted decimal notation. Option 82 Profile Select a pre-defined DHCPv4 option 82 profile that the Switch applies to all ports.
Chapter 37 DHCP Table 156 IP Application > DHCP > DHCPv4 > Global > Port (continued) LABEL DESCRIPTION Cancel Click this to reset the values above based on the last selected entry or, if not applicable, to clear the fields above. Clear Click Clear to reset the fields to the factory defaults. Index This field displays a sequential number for each entry. Click an index number to change the settings. Port This field displays the port(s) to which the Switch applies the settings.
Chapter 37 DHCP Figure 225 DHCP Relay Configuration Example EXAMPLE 37.4.6 Configuring DHCPv4 VLAN Settings Use this screen to configure your DHCP settings based on the VLAN domain of the DHCP clients. Click IP Application > DHCP > DHCPv4 in the navigation panel, then click the VLAN link In the DHCP Status screen that displays. Note: You must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. See Section 5.1.
Chapter 37 DHCP Table 157 IP Application > DHCP > DHCPv4 > VLAN (continued) LABEL DESCRIPTION Add Click this to create a new entry or to update an existing one. This saves your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh.
Chapter 37 DHCP Table 158 IP Application > DHCP > DHCPv4 > VLAN > Port (continued) LABEL DESCRIPTION Option 82 Profile Select a pre-defined DHCP option 82 profile that the Switch applies to the specified port(s) in this VLAN. The Switch adds the Circuit ID sub-option and/or Remote ID sub-option specified in the profile to DHCP requests that it relays to a DHCP server. The profile you select here has priority over the one you select in the DHCP > DHCPv4 > VLAN screen.
Chapter 37 DHCP Figure 229 DHCP Relay for Two VLANs Configuration Example EXAMPLE 37.5 DHCPv6 Relay A DHCPv6 relay agent is on the same network as the DHCPv6 clients and helps forward messages between the DHCPv6 server and clients. When a client cannot use its link-local address and a wellknown multicast address to locate a DHCPv6 server on its network, it then needs a DHCPv6 relay agent to send a message to a DHCPv6 server that is not attached to the same network.
Chapter 37 DHCP Figure 230 IP Application > DHCP > DHCPv6 The following table describes the labels in this screen. Table 159 IP Application > DHCP > DHCPv6 LABEL DESCRIPTION VID Enter the ID number of the VLAN you want to configure here. Helper Address Enter the remote DHCPv6 server address for the specified VLAN.
C H A P T E R 38 ARP Setup 38.1 ARP Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network. An IP (version 4) address is 32 bits long. In an Ethernet LAN, MAC addresses are 48 bits long. The ARP table maintains an association between each MAC address and its corresponding IP address. 38.1.
Chapter 38 ARP Setup Switch and then sends an ICMP request after getting the ARP reply from the Switch. The Switch finds no matched entry for host B in the ARP table and broadcasts the ARP request to all the devices on the LAN. When the Switch receives the ARP reply from host B, it updates its ARP table and also forwards host A’s ICMP request to host B.
Chapter 38 ARP Setup Therefore in the following example, the Switch can learn host A’s MAC address from the ARP request sent by host A. The Switch then forwards host B’s ICMP reply to host A right after getting host B’s MAC address and ICMP reply. 38.2 ARP Setup Click IP Application > ARP Setup in the navigation panel to display the screen as shown. Click the link next to ARP Learning to open a screen where you can set the ARP learning mode for each port. Figure 231 IP Application > ARP Setup 38.2.
Chapter 38 ARP Setup Figure 232 IP Application > ARP Setup > ARP Learning The following table describes the labels in this screen. Table 160 IP Application > ARP Setup > ARP Learning LABEL DESCRIPTION Port This field displays the port number. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
C H A P T E R 39 Maintenance 39.1 Overview This chapter explains how to configure the screens that let you maintain the firmware and configuration files. 39.1.1 What You Can Do • Use the Maintenance screen (Section 39.2 on page 321) to upload the latest firmware. • Use the Firmware Upgrade screen (Section 39.3 on page 324) to upload the latest firmware. • Use the Restore Configuration screen (Section 39.4 on page 326) to upload a stored device configuration file.
Chapter 39 Maintenance Figure 233 Management > Maintenance The following table describes the labels in this screen. Table 161 Management > Maintenance LABEL DESCRIPTION Current This field displays which configuration (Configuration 1 or Configuration 2) is currently operating on the Switch. Firmware Upgrade Click Click Here to go to the Firmware Upgrade screen. Restore Configuration Click Click Here to go to the Restore Configuration screen.
Chapter 39 Maintenance 39.2.1 Erase Running-Configuration Follow the steps below to reset the Switch back to the Zyxel default configuration settings. 1 In the Maintenance screen, click the Click Here button next to Erase Running-Configuration to clear all Switch configuration information you configured and return to the Zyxel default configuration settings. 2 Click OK to reset all Switch configurations to the Zyxel default configuration settings.
Chapter 39 Maintenance 39.2.3 Reboot System Reboot System allows you to restart the Switch without physically turning the power off. It also allows you to load configuration one (Config 1), configuration two (Config 2), a Custom Default or the factory deault configuration when you reboot. Follow the steps below to reboot the Switch. 1 In the Maintenance screen, click a configuration button next to Reboot System to reboot and load that configuration file. The following screen displays.
Chapter 39 Maintenance Figure 236 Management > Maintenance > Firmware Upgrade Type the path and file name of the firmware file you wish to upload to the Switch in the File Path text box or click Choose File to locate it. Firmware upgrades are only applied after a reboot. Click Upgrade to load the new firmware. After the firmware upgrade process is complete, see the System Info screen to verify your current firmware version number.
Chapter 39 Maintenance Table 162 Management > Maintenance > Firmware Upgrade LABEL DESCRIPTION File Path Type the path and file name of the firmware file you wish to upload to the Switch in the File Path text box or click Choose File to locate it. Upgrade Click Upgrade to load the new firmware. Firmware upgrades are only applied after a reboot.
Chapter 39 Maintenance 2 If the current configuration file is open and/or downloaded to your computer automatically, you can click File > Save As to save the file to a specific place. If a dialog box pops up asking whether you want to open or save the file, click Save or Save File to download it to the default downloads folder on your computer.
Chapter 39 Maintenance Figure 240 Custom Default Enabled If Custom Default is disabled, the Custom Default buttons in the Management > Maintenance screen won’t be available. Figure 241 Custom Default Disabled 39.7 Tech-Support The Tech-Support feature is a log enhancement tool that logs useful information such as CPU utilization history, memory and Mbuf (Memory Buffer) log and crash reports for issue analysis by customer support should you have difficulty with your Switch.
Chapter 39 Maintenance Figure 242 Management > Maintenance > Tech-Support You may need WordPad or similar software to see the log report correctly. The table below describes the fields in the above screen. Table 163 Management > Maintenance > Tech-Support LABEL DESCRIPTION CPU Type a number ranging from 50 to 100 in the CPU threshold box, and type another number ranging from 5 to 60 in the seconds box then click Apply.
Table 163 Management > Maintenance > Tech-Support LABEL DESCRIPTION Mbuf Click Download to see the Mbuf log report. The log includes Mbuf over threshold information. This log report is stored in flash memory. ROM Click Download to see the Read Only Memory (ROM) log report. This report is stored in flash memory. 39.8 Technical Reference This section provides technical background information on the topics discussed in this chapter. 39.8.
Chapter 39 Maintenance Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. 39.8.3 FTP Command Line Procedure 1 Launch the FTP client on your computer. 2 Enter open, followed by a space and the IP address of your Switch. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is “1234”). 5 Enter bin to set transfer mode to binary.
Chapter 40 Access Control C H A P T E R 40 Access Control 40.1 Access Control Overview This chapter describes how to control access to the Switch. FTP is allowed one session each, Telnet and SSH share nine sessions, up to five Web sessions (five different user names and passwords) and/or limitless SNMP access control sessions are allowed.
Chapter 40 Access Control Figure 243 Management > Access Control The following table describes the labels in this screen. Table 166 Management > Access Control LABEL DESCRIPTION SNMP Click this link to configure your SNMP settings. Logins Click this link to assign which users can access the Switch via web configurator at any one time. Service Access Control Click this link to decide what services you may use to access the Switch.
Chapter 40 Access Control The following table describes the labels in this screen. Table 167 Management > Access Control > SNMP LABEL DESCRIPTION General Setting Use this section to specify the SNMP version and community (password) values. Version Select the SNMP version for the Switch. The SNMP version on the Switch must match the version on the SNMP manager. Choose SNMP version 2c (v2c), SNMP version 3 (v3) or both (v3v2c). SNMP version 2c is backwards compatible with SNMP version 1.
Chapter 40 Access Control The following table describes the labels in this screen. Table 168 Management > Access Control > SNMP > Trap Group LABEL DESCRIPTION Trap Destination IP Select one of your configured trap destination IP addresses. These are the IP addresses of the SNMP managers. You must first configure a trap destination IP address in the SNMP Setting screen. Use the rest of the screen to select which traps the Switch sends to that SNMP manager.
Chapter 40 Access Control The following table describes the labels in this screen. Table 169 Management > Access Control > SNMP > Trap Group > Port LABEL DESCRIPTION Option Select the trap type you want to configure here. Port This field displays a port number. * Settings in this row apply to all ports. Use this row only if you want to make some of the settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Chapter 40 Access Control Table 170 Management > Access Control > SNMP > User (continued) LABEL DESCRIPTION Security Level Select whether you want to implement authentication and/or encryption for SNMP communication from this user. Choose: • • • noauth -to use the username as the password string to send to the SNMP manager. This is equivalent to the Get, Set and Trap Community in SNMP v2c. This is the lowest security level.
Chapter 40 Access Control 40.4 Setting Up Login Accounts Up to five people (one administrator and four non-administrators) may access the Switch via web configurator at any one time. • An administrator is someone who can both view and configure Switch changes. The username for the Administrator is always admin. The default administrator password is 1234. Note: It is highly recommended that you change the default administrator password (1234).
Chapter 40 Access Control Table 171 Management > Access Control > Logins (continued) LABEL DESCRIPTION Retype to confirm Retype your new system password for confirmation Privilege Type the privilege level for this user. At the time of writing, users may have a privilege level of 0, 3, 13, or 14 representing different configuration rights as shown below. • • • • 0 - Display basic system information. 3 - Display configuration or status.
Chapter 40 Access Control Table 172 Management > Access Control > Service Access Control (continued) LABEL DESCRIPTION Service Port For Telnet, SSH, FTP, HTTP or HTTPS services, you may change the default service port by typing the new port number in the Service Port field. If you change the default port number then you will have to let people (who wish to use the service) know the new port number for that service.
Chapter 40 Access Control The following table describes the labels in this screen. Table 173 Management > Access Control > Remote Management LABEL DESCRIPTION Entry This is the client set index number. A “client set” is a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Active Select this check box to activate this secured client set. Clear the check box if you wish to temporarily disable the set without deleting it.
Chapter 40 Access Control An agent is a management software module that resides in a managed Switch (the Switch). An agent translates the local management information from the managed Switch into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions. It executes applications that control and monitor managed devices.
Chapter 40 Access Control SNMP Traps The Switch sends traps to an SNMP manager when an event occurs. The following tables outline the SNMP traps by category. An OID (Object ID) that begins with “1.3.6.1.4.1.890.1.15” is defined in private MIBs. Otherwise, it is a standard MIB OID. Table 175 SNMP System Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION coldstart coldStart 1.3.6.1.6.3.1.1.5.1 This trap is sent when the Switch is turned on. warmstart warmStart 1.3.6.1.6.3.1.1.5.
Chapter 40 Access Control Table 178 SNMP IP Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION ping pingProbeFailed 1.3.6.1.2.1.80.0.1 This trap is sent when a single ping probe fails. pingTestFailed 1.3.6.1.2.1.80.0.2 This trap is sent when a ping test (consisting of a series of ping probes) fails. pingTestCompleted 1.3.6.1.2.1.80.0.3 This trap is sent when a ping test is completed. traceRouteTestFailed 1.3.6.1.2.1.81.0.2 This trap is sent when a traceroute test fails.
Chapter 40 Access Control Figure 253 How SSH Works 1 Host Identification The SSH client sends a connection request to the SSH server. The server identifies itself with a host key. The client encrypts a randomly generated session key with the host key and server key and sends the result back to the server. The client automatically saves any new server public keys. In subsequent connections, the server public key is checked against the saved version on the client computer.
Chapter 40 Access Control 40.7.2.3 Requirements for Using SSH You must install an SSH client program on a client computer (Windows or Linux operating system) that is used to connect to the Switch over SSH. 40.7.3 Introduction to HTTPS HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol that encrypts and decrypts web pages.
Chapter 40 Access Control Internet Explorer Warning Messages Internet Explorer 6 When you attempt to access the Switch HTTPS server, a Windows dialog box pops up asking if you trust the server certificate. You see the following Security Alert screen in Internet Explorer. Select Yes to proceed to the web configurator login screen; if you select No, then web configurator access is blocked.
Chapter 40 Access Control Figure 257 Certificate Error (Internet Explorer 7 or 8) EXAMPLE Click Install Certificate... and follow the on-screen instructions to install the certificate in your browser. Figure 258 Certificate (Internet Explorer 7 or 8) EXAMPLE Mozilla Firefox Warning Messages When you attempt to access the Switch HTTPS server, a This Connection is Unstructed screen may display. If that is the case, click I Understand the Risks and then the Add Exception... button.
Chapter 40 Access Control Figure 259 Security Alert (Mozilla Firefox) Confirm the HTTPS server URL matches. Click Confirm Security Exception to proceed to the web configurator login screen.
Chapter 40 Access Control 40.7.4 Google Chrome Warning Messages When you attempt to access the Switch HTTPS server, a Your connection is not private screen may display. If that is the case, click Advanced and then Proceed to x.x.x.x (unsafe) to proceed to the web configurator login screen. Figure 261 Security Alert (Google Chrome 58.0.3029.110) 40.7.4.1 The Main Screen After you accept the certificate and enter the login username and password, the Switch main screen appears.
Chapter 40 Access Control Figure 262 Example: Lock Denoting a Secure Connection EXAMPLE GS1920 Series User’s Guide 351
Chapter 41 Diagnostic C H A P T E R 41 Diagnostic 41.1 Overview This chapter explains the Diagnostic screen. You can use this screen to help you identify problems. 41.2 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to ping IP addresses, run a traceroute, perform port tests or show the Switch’s location between devices.
The following table describes the labels in this screen. Table 180 Management > Diagnostic LABEL DESCRIPTION Ping Test IPv4 Select this option if you want to ping an IPv4 address, and select vlan to specify the ID number of the VLAN to which the Switch is to send ping requests. Otherwise, select - to send ping requests to all VLANs on the Switch. IPv6 Select this option if you want to ping an IPv6 address.
Chapter 41 Diagnostic Table 180 Management > Diagnostic (continued) LABEL Cable length DESCRIPTION This displays the total length of the Ethernet cable that is connected to the port when the Pair status is Ok and the Switch chipset supports this feature. This shows N/A if the Pair status is Open or Short. Check the Distance to fault. This shows Unsupported if the Switch chipset does not support to show the cable length.
Chapter 42 System Log C H A P T E R 42 System Log 42.1 Overview A log message stores the information for viewing. 42.2 System Log Click Management > System Log in the navigation panel to open this screen. Use this screen to check current system logs. Note: When a log reaches the maximum number of log messages, new log messages automatically overwrite existing log messages, starting with the oldest existing log message first.
C H A P T E R 43 Syslog Setup 43.1 Syslog Overview This chapter explains the syslog screens. The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages. A syslog-enabled device can generate a syslog message and send it to a syslog server. Syslog is defined in RFC 3164. The RFC defines the packet format, content and system log related information of syslog messages. Each syslog message has a facility and severity level.
Figure 265 Management > Syslog Setup The following table describes the labels in this screen. Table 182 Management > Syslog Setup LABEL DESCRIPTION Syslog Select Active to turn on syslog (system logging) and then configure the syslog setting Logging Type This column displays the names of the categories of logs that the device can generate. Active Select this option to set the device to generate logs for the corresponding category.
Chapter 43 Syslog Setup Table 182 Management > Syslog Setup LABEL DESCRIPTION Add Click Add to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. Clear Click Clear to return the fields to the factory defaults.
Chapter 44 Cluster Management C H A P T E R 44 Cluster Management 44.1 Cluster Management Overview This chapter introduces cluster management. Cluster Management allows you to manage switches through one Switch, called the cluster manager. The switches must be directly connected and be in the same VLAN group so as to be able to communicate with one another.
44.1.1 What You Can Do • Use the Cluster Management screen (Section 44.2 on page 360) to view the role of the Switch within the cluster and to access a cluster member switch’s web configurator. • Use the Clustering Management Configuration screen (Section 44.1 on page 359) to configure clustering management. 44.2 Cluster Management Status Use this screen to view the role of the Switch within the cluster and to access a cluster member switch’s web configurator.
Chapter 44 Cluster Management Table 184 Management > Cluster Management: Status (continued) LABEL DESCRIPTION Model This field displays the model name. Status This field displays: Online (the cluster member switch is accessible) Error (for example the cluster member switch password was changed or the switch was set as the manager and so left the member list, etc.) Offline (the switch is disconnected - Offline shows approximately 1.
Chapter 44 Cluster Management The following table describes the labels in this screen. Table 185 Management > Cluster Management > Configuration LABEL DESCRIPTION Clustering Manager Active Select Active to have this Switch become the cluster manager switch. A cluster can only have one manager. Other (directly connected) switches that are set to be cluster managers will not be visible in the Clustering Candidates list.
Chapter 44 Cluster Management 44.4 Technical Reference This section provides technical background information on the topics discussed in this chapter. 44.4.1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch's web configurator home page.
Chapter 44 Cluster Management Figure 270 Example: Uploading Firmware to a Cluster Member Switch C:\>ftp 192.168.1.1 Connected to 192.168.1.1. 220 Switch FTP version 1.0 ready at Thu Jan 1 00:58:46 1970 User (192.168.0.
Chapter 45 MAC Table C H A P T E R 45 MAC Table 45.1 MAC Table Overview This chapter introduces the MAC Table screen. The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered across the Switch’s ports. It shows what device MAC address, belonging to what VLAN group (if any) is forwarded to which port(s) and whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). 45.1.
Figure 271 MAC Table Flowchart 45.2 Viewing the MAC Table Use this screen to check whether the MAC address is dynamic or static. Click Management > MAC Table in the navigation panel to display the following screen.
Chapter 45 MAC Table The following table describes the labels in this screen. Table 187 Management > MAC Table LABEL DESCRIPTION Condition Select one of the buttons and click Search to only display the data which matches the criteria you specified. Select All to display any entry in the MAC table of the Switch. Select Static to display the MAC entries manually configured on the Switch. Select MAC and enter a MAC address in the field provided to display a specified MAC entry.
Chapter 46 ARP Table C H A P T E R 46 ARP Table 46.1 Overview This chapter introduces ARP Table. Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network. An IP (version 4) address is 32 bits long. In an Ethernet LAN, MAC addresses are 48 bits long. The ARP Table maintains an association between each MAC address and its corresponding IP address. 46.1.
Figure 273 Management > ARP Table The following table describes the labels in this screen. Table 188 Management > ARP Table LABEL DESCRIPTION Condition Specify how you want the Switch to remove ARP entries when you click Flush. Select All to remove all of the dynamic entries from the ARP table. Select IP Address and enter an IP address to remove the dynamic entries learned with the specified IP address. Select Port and enter a port number to remove the dynamic entries learned on the specified port.
Chapter 47 Path MTU Table C H A P T E R 47 Path MTU Table 47.1 Path MTU Overview This chapter introduces the IPv6 Path MTU table. The largest size (in bytes) of a packet that can be transferred over a data link is called the maximum transmission unit (MTU). The Switch uses Path MTU Discovery to discover Path MTU (PMTU), that is, the minimum link MTU of all the links in a path to the destination.
C H A P T E R 48 Configure Clone 48.1 Overview This chapter shows you how you can copy the settings of one port onto other ports. 48.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen.
Figure 275 Management > Configure Clone GS1920 Series User’s Guide 372
Chapter 48 Configure Clone The following table describes the labels in this screen. Table 190 Management > Configure Clone LABEL DESCRIPTION Source/ Destination Enter the source port under the Source label. This port’s attributes are copied. Port Enter the destination port or ports under the Destination label. These are the ports which are going to have the same attributes as the source port. You can enter individual ports separated by a comma or a range of ports by using a dash.
Chapter 49 IPv6 Neighbor Table C H A P T E R 49 IPv6 Neighbor Table 49.1 IPv6 Neighbor Table Overview This chapter introduces the IPv6 neighbor table. An IPv6 host is required to have a neighbor table. If there is an address to be resolved or verified, the Switch sends out a neighbor solicitation message. When the Switch receives a neighbor advertisement in response, it stores the neighbor’s link-layer address in the neighbor table.
Table 191 Management > IPv6 Neighbor Table (continued) LABEL DESCRIPTION Status This field displays whether the neighbor IPv6 interface is reachable. In IPv6, “reachable” means an IPv6 packet can be correctly forwarded to a neighbor node (host or router) and the neighbor can successfully receive and handle the packet. The available options in this field are: • • • • • • • Type This field displays the type of an address mapping to a neighbor interface.
C H A P T E R 50 Port Status 50.1 Overview This chapter introduces the port status screens. 50.2 Port Status This screen displays a port statistical summary with links to each port showing statistical details. To view the port statistics, click Status in all web configurator screens and then the Port Status link in the Quick Links section of the Status screen to display the Port Status screen as shown next. You can also click Management > Port Status to see the following screen.
Chapter 50 Port Status Table 192 Port Status (continued) LABEL DESCRIPTION State If STP (Spanning Tree Protocol) is enabled, this field displays the STP state of the port. SeeSection 13.1 on page 117 for more information. If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP. When LACP (Link Aggregation Control Protocol), STP, and dot1x are in blocking state, it displays Blocking. PD For PoE model(s) only.
Chapter 50 Port Status Figure 278 Port Status > Port Details The following table describes the labels in this screen. Table 193 Port Status: Port Details LABEL DESCRIPTION Port Info Port NO. This field displays the port number you are viewing. Name This field displays the name of the port. Link This field displays the speed (either 10M for 10Mbps, 100M for 100Mbps, 1000M for 1000Mbps, or 10G for 10 Gbps) and the duplex (F for full duplex or H for half duplex).
Chapter 50 Port Status Table 193 Port Status: Port Details (continued) LABEL State DESCRIPTION If STP (Spanning Tree Protocol) is enabled, this field displays the STP state of the port. SeeSection 13.1 on page 117 for more information. If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP. When LACP (Link Aggregation Control Protocol), STP, and dot1x are in blocking state, it displays Blocking. LACP This field shows if LACP is enabled on this port or not.
Chapter 50 Port Status Table 193 Port Status: Port Details (continued) LABEL DESCRIPTION Distribution 64 This field shows the number of packets (including bad packets) received that were 64 octets in length. 65-127 This field shows the number of packets (including bad packets) received that were between 65 and 127 octets in length. 128-255 This field shows the number of packets (including bad packets) received that were between 128 and 255 octets in length.
Chapter 50 Port Status The following table describes the labels in this screen. Table 194 Port Status: Utilization LABEL DESCRIPTION Port This identifies the Ethernet port. Link This field displays the speed (either 10M for Mbps, 100M for 100 Mbps, 1000M for 1000 Mbps, or 10G for 10 Gbps) and the duplex (F for full duplex). It also shows the cable type (Copper or Fiber) for the combo ports. This field displays Down if the port is not connected to any device.
C H A P T E R 51 Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • Switch Access and Login • Switch Configuration 51.1 Power, Hardware Connections, and LEDs The Switch does not turn on. None of the LEDs turn on. 1 Make sure you are using the power adaptor or cord included with the Switch.
Chapter 51 Troubleshooting 4 Disconnect and re-connect the power adaptor or cord to the Switch. 5 If the problem continues, contact the vendor. 51.2 Switch Access and Login I forgot the IP address for the Switch. 1 The default IP address is 192.168.1.1. 2 If this does not work, you have to reset the device to its factory defaults. See Section 4.6 on page 42. I forgot the username and/or password. 1 The default username is admin and the default password is 1234.
Chapter 51 Troubleshooting • Try to access the Switch using another service, such as Telnet. If you can access the Switch, check the remote management settings to find out why the Switch does not respond to HTTP. I can see the Login screen, but I cannot log in to the Switch. 1 Make sure you have entered the user name and password correctly. The default user name is admin, and the default password is 1234. These fields are case-sensitive, so make sure [Caps Lock] is not on.
Chapter 51 Troubleshooting 51.3 Switch Configuration I lost my configuration settings after I restarted the Switch. Make sure you save your configuration into the Switch’s nonvolatile memory each time you make changes. Click Save at the top right corner of the web configurator to save the configuration permanently. See also Section 39.2.2 on page 323 for more information about how to save your configuration. I accidentally unplugged the Switch. I’m not sure which configuration file will be loaded.
APPENDIX A Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a Zyxel office for the region in which you bought the device. See http://www.zyxel.com/homepage.shtml and also http://www.zyxel.com/about_zyxel/zyxel_worldwide.shtml for the latest information. Please have the following information ready when you contact an office. Required Information • Product model and serial number.
Appendix A Customer Support Korea • Zyxel Korea Corp. • http://www.zyxel.kr Malaysia • Zyxel Malaysia Sdn Bhd. • http://www.zyxel.com.my Pakistan • Zyxel Pakistan (Pvt.) Ltd. • http://www.zyxel.com.pk Philippines • Zyxel Philippines • http://www.zyxel.com.ph Singapore • Zyxel Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • Zyxel Communications Corporation • http://www.zyxel.com/tw/zh/ Thailand • Zyxel Thailand Co., Ltd • http://www.zyxel.co.
Appendix A Customer Support Belgium • Zyxel Communications B.V. • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulgaria • Zyxel България • http://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • http://www.zyxel.cz Denmark • Zyxel Communications A/S • http://www.zyxel.dk Estonia • Zyxel Estonia • http://www.zyxel.com/ee/et/ Finland • Zyxel Communications • http://www.zyxel.fi France • Zyxel France • http://www.zyxel.
Appendix A Customer Support Latvia • Zyxel Latvia • http://www.zyxel.com/lv/lv/homepage.shtml Lithuania • Zyxel Lithuania • http://www.zyxel.com/lt/lt/homepage.shtml Netherlands • Zyxel Benelux • http://www.zyxel.nl Norway • Zyxel Communications • http://www.zyxel.no Poland • Zyxel Communications Poland • http://www.zyxel.pl Romania • Zyxel Romania • http://www.zyxel.com/ro/ro Russia • Zyxel Russia • http://www.zyxel.ru Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • http://www.
Appendix A Customer Support • http://www.zyxel.ch/ Turkey • Zyxel Turkey A.S. • http://www.zyxel.com.tr UK • Zyxel Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • Zyxel Ukraine • http://www.ua.zyxel.com Latin America Argentina • Zyxel Communication Corporation • http://www.zyxel.com/ec/es/ Brazil • Zyxel Communications Brasil Ltda. • https://www.zyxel.com/br/pt/ Ecuador • Zyxel Communication Corporation • http://www.zyxel.
Appendix A Customer Support North America USA • Zyxel Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • Zyxel Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.
APPENDIX B Common Services The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/code numbers and services, visit the IANA (Internet Assigned Number Authority) web site. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like. • Protocol: This is the type of IP protocol used by the service.
Appendix B Common Services Table 195 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION HTTPS TCP 443 HTTPS is a secured http session often used in ecommerce. ICMP User-Defined 1 Internet Control Message Protocol is often used for diagnostic or routing purposes. ICQ UDP 4000 This is a popular Internet chat program. IGMP (MULTICAST) User-Defined 2 Internet Group Multicast Protocol is used when sending packets to a specific group of hosts.
Appendix B Common Services Table 195 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION SQL-NET TCP 1521 Structured Query Language is an interface to access data on many different types of database systems, including mainframes, midrange systems, UNIX systems and network servers. SSH TCP/UDP 22 Secure Shell Remote Login Program. STRM WORKS UDP 1558 Stream Works Protocol. SYSLOG UDP 514 Syslog allows you to send system logs to a UNIX server.
APPENDIX C IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 1038 IP addresses. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000. IPv6 addresses can be abbreviated in two ways: • Leading zeros in a block can be omitted.
Appendix C IPv6 Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4. Multicast Address In IPv6, multicast addresses provide the same functionality as IPv4 broadcast addresses. Broadcasting is not supported in IPv6.
Appendix C IPv6 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000. Interface ID In IPv6, an interface ID is a 64-bit identifier.
Appendix C IPv6 Each DHCP client and server has a unique DHCP Unique IDentifier (DUID), which is used for identification when they are exchanging DHCPv6 messages. The DUID is generated from the MAC address, time, vendor assigned ID and/or the vendor's private enterprise number registered with the IANA. It should not change over time even after you reboot the device.
Appendix C IPv6 ICMPv6 Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC 4443. ICMPv6 has a preceding Next Header value of 58, which is different from the value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6. IPv6 nodes use ICMPv6 to report errors encountered in packet processing and perform other diagnostic functions, such as "ping".
Appendix C IPv6 Example - Enabling IPv6 on Windows XP/2003/Vista By default, Windows XP and Windows 2003 support IPv6. This example shows you how to use the ipv6 install command on Windows XP/2003 to enable IPv6. This also displays how to use the ipconfig command to see auto-generated IP addresses. C:\>ipv6 install Installing... Succeeded. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific IP Address. . . . . Subnet Mask . . . . IP Address. . . . .
Appendix C IPv6 5 Click Start and then OK. 6 Now your computer can obtain an IPv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: 1 Select Control Panel > Network and Sharing Center > Local Area Connection. 2 Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. 3 Click OK to save the change.
Appendix C IPv6 4 Click Close to exit the Local Area Connection Status screen. 5 Select Start > All Programs > Accessories > Command Prompt. 6 Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific DNS IPv6 Address. . . . . . Link-local IPv6 Address IPv4 Address. . . . . . Subnet Mask . . . . . . Default Gateway .
APPENDIX D Legal Information Copyright Copyright © 2018 by Zyxel Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation.
Appendix D Legal Information List of National Codes COUNTRY ISO 3166 2 LETTER CODE COUNTRY ISO 3166 2 LETTER CODE Austria AT Liechtenstein LI Belgium BE Lithuania LT Bulgaria BG Luxembourg LU Croatia HR Malta MT Cyprus CY Netherlands NL Czech Republic CR Norway NO Denmark DK Poland PL Estonia EE Portugal PT Finland FI Romania RO France FR Serbia RS Germany DE Slovakia SK Greece GR Slovenia SI Hungary HU Spain ES SE Iceland IS Sweden Ireland IE Sw
Appendix D Legal Information Environment Statement European Union - Disposal and Recycling Information The symbol below means that according to local regulations your product and/or its battery shall be disposed of separately from domestic waste. If this product is end of life, take it to a recycling station designated by local authorities.
Appendix D Legal Information • 設備必須接地，接地導線不允許被破壞或沒有適當安裝接地導線，如果不確定接地方式是否符合要求可聯繫相應的電氣檢驗機構檢驗。 • 如果您提供的系統中有提供熱插拔電源，連接或斷開電源請遵循以下指導原則 - 先連接電源線至設備連，再連接電源。 - 先斷開電源再拔除連接至設備的電源線。 - 如果系統有多個電源，需拔除所有連接至電源的電源線再關閉設備電源。 • 產品沒有斷電裝置或者採用電源線的插頭視為斷電裝置的一部分，以下警語將適用 : - 對永久連接之設備， 在設備外部須安裝可觸及之斷電裝置； - 對插接式之設備， 插座必須接近安裝之地點而且是易於觸及的。 About the Symbols Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage.
Index Index ARP-Request 318 Numerics authentication setup 212 802.
Index Class of Service 301 D classifier 167 and QoS 167 editing 172 example 174 logging 173 match order 173 overview 167 setup 168, 172 status 168 viewing 172 daylight saving time 66 default Ethernet settings 29 default IP 34, 68 DHCP configuration options 305 Dynamic Host Configuration Protocol 305 modes 305 Relay Agent Information format 307 setup 306 cloning a port See port cloning DHCP relay option 82 238 cluster management 359 and switch passwords 362 cluster manager 359, 362 cluster member 359,
Index DSCP 301 what it does 301 untagged 97 front panel 28 dual firmware images 324 FTP 330 file transfer procedure 331 restrictions over WAN 331 dynamic link aggregation 144 E G egress port 107 egress rate, and bandwidth control 139 GARP 90 errdisable status 259 GARP (Generic Attribute Registration Protocol) 90 error disable 256 control packets 258 CPU protection 259 detect 260 recovery 261 status 257 GARP timer 67, 90 general setup 64 getting help 43 Gigabit ports 28 GMT (Greenwich Mean Time) 6
Index activate 154 port authentication 152 reauthentication 155 global address 83 global unicast address 79 link-local address 82 link-local IP 78 neighbor discovery 84 neighbor table 85 stateless autoconfiguration 81 status 78 IEEE 802.3at 72 IEEE 802.
Index Basic TLV 282 global settings 281 local port status 271 organization-specific TLV 283 status of remote device 275 TLV 267 configuration backup 326 firmware 324 restoring configuration 326 maintenance 321 current configuration 322 main screen 322 LLDP (Link Layer Discovery Protocol) 267 Management Information Base (MIB) 342 LLDP-MED 268 classes of endpoint devices 268 example 268 management IP address 68 management port 107 managing the device good habits 24 using FTP. See FTP.
Index maximum hops 130 revision level 130 status 132 P PAGP 247 MTU 370 password 40 administrator 36, 338 MTU (Multi-Tenant Unit) 66 multicast IGMP throttling 190 IP addresses 183 setup 187 Path MTU 370 Path MTU Discovery 370 Per-Hop Behavior 301 PHB 301 multicast group 192 ping, test connection 353 multicast MAC address 111 PoE PD priority 75 power management mode 75 power-up mode 74 schedule 74 Multiple Spanning Tree Protocol, See MSTP 117, 119 Multiple STP 119 Multi-Tenant Unit 66 MVR 185 conf
Index port VLAN trunking 91 and classifier 167 port-based VLAN 104 all connected 107 port isolation 107 settings wizard 107 Quality of Service 301 queue weight 181 queuing 180 SPQ 180 WRR 180 ports diagnostics 353, 354 mirroring 142 speed/duplex 71 standby 144 queuing method 180, 182 power voltage 64 R power connector 31 rack-mounting 25 power status 64 RADIUS 208 advantages 208 and tunnel protocol attribute 215 setup 208 PPPoE IA 248 agent sub-options 250 configuration 250 drop PPPoE packets 2
Index type 166 status 37, 56 MRSTP 126 MSTP 132 port 376 power 64 STP 123 VLAN 92 Secure Shell See SSH service access control 339 service port 340 Simple Network Management Protocol, see SNMP Small Form-factor Pluggable (SFP) 29 SNMP 341 agent 342 and MIB 342 authentication 337 communities 36, 334 management model 341 manager 342 MIB 342 network components 341 object variables 342 protocol operations 342 security 337 setup 333 traps 334 users 336 version 3 and security 342 versions supported 341 STP 117
Index tagged VLAN 89 V Tech-Support 328 log enhancement 328 Vendor Specific Attribute, See VSA 214 temperature indicator 64 Terminal Access Controller Access-Control System Plus 207 VID 93 number of possible VIDs 90 priority frame 90 time current 65 VID (VLAN Identifier) 90 Virtual Local Area Network 66 Time (RFC-868) 65 VLAN 66 acceptable frame type 97 automatic registration 90 ID 89 ingress filtering 97 introduction 66, 89 number of VLANs 92 port number 93 port settings 96 port-based VLAN 104 po
Index home 37 login 34 logout 43 navigation panel 37 weight, queuing 181 Weighted Round Robin Scheduling (WRR) 181 WRR (Weighted Round Robin Scheduling) 180 Z ZDP 58 ZON neighbor management 60 ZON Utility 58 ZyNOS (ZyXEL Network Operating System) 330 ZyXEL Discovery Protocol 58 GS1920 Series User’s Guide 416
