ZyXEL Communications GS3700 Series User Manual
ZyXEL Communications GS3700 Series User Manual

ZyXEL Communications GS3700 Series User Manual

Gbe l2+ switch
Hide thumbs Also See for GS3700 Series:
Table of Contents

Advertisement

GS3 7 0 0 / XGS3 7 0 0 Se r ie s
GbE L2+ Swit ch
Version 4.30
Edit ion 1, 10/ 2015
Quick Start Guide
Use r 's Gu ide
D e fa u lt Login D e t a ils
I P Addr ess
ht t p: / / 192.168.0.1 ( Out -
ht t p: / / 192.168.1.1 ( I n-
www.zyxel.com
User Nam e
Password
of- band MGMT port )
band port s)
adm in
1234
Copyright © 2015 ZyXEL Com m unicat ions Corporat ion

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications GS3700 Series

  • Page 1 GS3 7 0 0 / XGS3 7 0 0 Se r ie s GbE L2+ Swit ch Version 4.30 Edit ion 1, 10/ 2015 Quick Start Guide Use r ’s Gu ide D e fa u lt Login D e t a ils I P Addr ess ht t p: / / 192.168.0.1 ( Out - of- band MGMT port )
  • Page 2: Related Documentation

    IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Not e: This guide is a reference for a ser ies of product s. Ther efore som e feat ures or opt ions in t his guide m ay not be available in your product . Screenshot s and graphics in t his book m ay differ slight ly from your product due t o differences in your product firm ware or your com put er operat ing syst em .
  • Page 3 Contents Overview Contents Overview User’s Guide ............................20 Getting to Know Your Switch ........................21 Hardware Installation and Connection ....................26 Hardware Overview ..........................30 The Web Configurator ..........................37 Technical Reference ..........................46 ZON Utility, ZON Neighbor Management and Port Status ..............47 Basic Setting ............................56 VLAN ..............................101 Static MAC Forward Setup ........................124 Static Multicast Forward Setup ......................127...
  • Page 4 Contents Overview Anti-Arpscan ............................372 BPDU Guard ............................378 OAM ..............................381 ZULD ..............................390 Static Route ............................396 Policy Routing ............................400 Differentiated Services ..........................404 DHCP ..............................413 VRRP ..............................430 Load Sharing ............................439 ARP Setup ............................441 Maintenance ............................447 Access Control ............................458 Diagnostic .............................482 System Log ............................485 Syslog Setup ............................486 Cluster Management ..........................489 MAC Table .............................495...
  • Page 5 Table of Contents Table of Contents Contents Overview ..........................3 Table of Contents ..........................5 Part I: User’s Guide ..................20 Chapter 1 Getting to Know Your Switch......................21 1.1 Introduction ............................21 1.1.1 Bridging Example ........................22 1.1.2 High Performance Switching Example ..................22 1.1.3 Gigabit Ethernet to the Desktop ....................23 1.1.4 IEEE 802.1Q VLAN Application Example ................23 1.1.5 IPv6 Support ..........................24 1.2 Ways to Manage the Switch ......................24...
  • Page 6 Table of Contents Chapter 4 The Web Configurator ........................37 4.1 Introduction ............................37 4.2 System Login ..........................37 4.3 The Web Configurator Layout ......................38 4.3.1 Change Your Password ......................42 4.4 Saving Your Configuration ........................43 4.5 Switch Lockout ..........................43 4.6 Resetting the Switch ........................44 4.6.1 Reload the Configuration File ....................44 4.7 Logging Out of the Web Configurator ....................45...
  • Page 7 Table of Contents 6.9.1 IPv6 Interface Status .......................80 6.9.2 IPv6 Configuration ........................83 6.9.3 IPv6 Global Setup ........................83 6.9.4 IPv6 Interface Setup ........................84 6.9.5 IPv6 Link-Local Address Setup ....................85 6.9.6 IPv6 Global Address Setup .....................86 6.9.7 IPv6 Neighbor Discovery Setup ....................87 6.9.8 IPv6 Router Discovery Setup ....................88 6.9.9 IPv6 Prefix Setup ........................89 6.9.10 IPv6 Neighbor Setup ......................91...
  • Page 8 Table of Contents 8.2 Configuring Static MAC Forwarding ...................124 Chapter 9 Static Multicast Forward Setup .......................127 9.1 Static Multicast Forwarding Overview .....................127 9.2 Configuring Static Multicast Forwarding ..................128 Chapter 10 Filtering..............................130 10.1 Configure a Filtering Rule ......................130 Chapter 11 Spanning Tree Protocol........................132 11.1 STP/RSTP Overview ........................132 11.1.1 STP Terminology .........................132 11.1.2 How STP Works ........................133...
  • Page 9 Table of Contents 14.1.2 Remote Port Mirroring ......................167 14.1.3 Source ..........................168 14.1.4 Destination ...........................170 14.1.5 Connected Port ........................171 Chapter 15 Link Aggregation ..........................175 15.1 Link Aggregation Overview ......................175 15.2 Dynamic Link Aggregation ......................175 15.2.1 Link Aggregation ID ......................176 15.3 Link Aggregation Status .......................176 15.4 Link Aggregation Setting ......................177 15.5 Link Aggregation Control Protocol .....................180...
  • Page 10 Table of Contents 19.5 Classifier Example ........................208 Chapter 20 Policy Rule ............................210 20.1 Policy Rules Overview .........................210 20.1.1 DiffServ ..........................210 20.1.2 DSCP and Per-Hop Behavior ....................210 20.2 Configuring Policy Rules .......................210 20.3 Policy Example ..........................213 Chapter 21 Queuing Method ..........................215 21.1 Queuing Method Overview ......................215 21.1.1 Strictly Priority ........................215 21.1.2 Weighted Fair Queuing ......................215...
  • Page 11 Table of Contents 23.4 IPv6 Multicast Status ........................236 23.4.1 MLD Snooping-proxy ......................237 23.4.2 MLD Snooping-proxy VLAN ....................237 23.4.3 MLD Snooping-proxy VLAN Port Role Setting ..............239 23.4.4 MLD Snooping-proxy Filtering ....................241 23.4.5 MLD Snooping-proxy Filtering Profile .................243 23.5 MVR Overview ..........................244 23.5.1 Types of MVR Ports ......................245 23.5.2 MVR Modes .........................245 23.5.3 How MVR Works .........................245...
  • Page 12 Table of Contents 25.7.1 ARP Inspection VLAN Status ....................280 25.7.2 ARP Inspection Log Status ....................281 25.8 ARP Inspection Configure ......................282 25.8.1 ARP Inspection Port Configure ....................284 25.8.2 ARP Inspection VLAN Configure ..................286 25.9 IPv6 Source Guard Overview .......................287 25.10 IPv6 Source Binding Status ......................287 25.11 IPv6 Static Binding Setup ......................288 25.12 IPv6 Source Guard Policy Setup ....................290 25.13 IPv6 Source Guard Port Setup ....................291...
  • Page 13 Table of Contents 30.1 PPPoE Intermediate Agent Overview ..................316 30.1.1 PPPoE Intermediate Agent Tag Format ................316 30.1.2 Sub-Option Format ......................316 30.1.3 Port State ..........................317 30.2 The PPPoE Screen ........................318 30.3 PPPoE Intermediate Agent ......................318 30.3.1 PPPoE IA Per-Port ......................320 30.3.2 PPPoE IA Per-Port Per-VLAN ....................322 30.3.3 PPPoE IA for VLAN ......................323 Chapter 31 Error Disable .............................325...
  • Page 14 Table of Contents 35.4.1 LLDP Local Port Status Detail ....................348 35.5 LLDP Remote Status ........................352 35.5.1 LLDP Remote Port Status Detail ..................352 35.6 LLDP Configuration ........................358 35.6.1 LLDP Configuration Basic TLV Setting ................361 35.6.2 LLDP Configuration Basic Org-specific TLV Setting ............362 35.7 LLDP-MED Configuration ......................364 35.8 LLDP-MED Network Policy ......................366 35.9 LLDP-MED Location...
  • Page 15 Table of Contents Chapter 40 Static Route ............................396 40.1 Static Routing Overview ......................396 40.2 Static Routing ..........................396 40.3 Configuring IPv4 Static Routing ....................397 40.4 Configuring IPv6 Static Routing ....................398 Chapter 41 Policy Routing...........................400 41.1 Policy Route Overview .........................400 41.1.1 Benefits ..........................400 41.2 Configuring Policy Routing Profile ....................400 41.2.1 Policy Routing Rule Configuration ..................401 Chapter 42...
  • Page 16 Table of Contents 43.5.1 DHCPv4 VLAN Port Configure ...................422 43.5.2 Example: DHCP Relay for Two VLANs ................423 43.6 DHCPv6 Status ..........................424 43.7 DHCPv6 Information ........................425 43.8 DHCPv6 Prefix Delegation ......................426 43.9 DHCPv6 Relay ..........................428 Chapter 44 VRRP..............................430 44.1 VRRP Overview ...........................430 44.2 VRRP Status ..........................431 44.3 VRRP Configuration ........................431 44.3.1 IP Interface Setup .......................431...
  • Page 17 Table of Contents 47.7.1 Load Stacking Default ......................452 47.7.2 Load Factory Default ......................453 47.8 Tech-Support ..........................453 47.9 FTP Command Line ........................455 47.9.1 Filename Conventions ......................455 47.9.2 FTP Command Line Procedure ..................456 47.9.3 GUI-based FTP Clients ......................456 47.9.4 FTP Restrictions .........................457 Chapter 48 Access Control ..........................458 48.1 Access Control Overview...
  • Page 18 Table of Contents Chapter 51 Syslog Setup .............................486 51.1 Syslog Overview ...........................486 51.2 Syslog Setup ..........................486 Chapter 52 Cluster Management ........................489 52.1 Clustering Management Status Overview ..................489 52.2 Cluster Management Status ......................490 52.2.1 Cluster Member Switch Management ................491 52.3 Clustering Management Configuration ..................493 Chapter 53 MAC Table ............................495 53.1 MAC Table Overview ........................495...
  • Page 19 Table of Contents Chapter 59 IPv6 Neighbor Table..........................508 59.1 IPv6 Neighbor Table Overview .....................508 59.2 Viewing the IPv6 Neighbor Table ....................508 Chapter 60 Troubleshooting..........................510 60.1 Power, Hardware Connections, and LEDs ..................510 60.2 Switch Access and Login ......................511 60.3 Switch Configuration ........................513 Appendix A Common Services ......................514 Appendix B IPv6 ..........................517 Appendix C Customer Support ......................526...
  • Page 20: User's Guide

    User’s Guide...
  • Page 21: Getting To Know Your Switch

    H A P TE R Getting to Know Your Switch This chapt er int roduces t he m ain feat ures and applicat ions of t he Swit ch. 1.1 Introduction Your Swit ch is a layer 2+ , Gigabit Et hernet ( GbE) swit ch wit h t wo power slot s for hot- swappable RPS300 or RPS600- HP power m odules.
  • Page 22: Bridging Example

    Chapter 1 Getting to Know Your Switch 1.1.1 Bridging Example I n t his exam ple t he Swit ch connect s different com pany depart m ent s ( RD and Sa le s) t o t he corporat e backbone. I t can alleviat e bandwidt h cont ent ion and elim inat e server and net work bot t lenecks.
  • Page 23: Gigabit Ethernet To The Desktop

    Chapter 1 Getting to Know Your Switch Figure 2 High Perform ance Swit ching 10 Gbps Trunk Branch 1.1.3 Gigabit Ethernet to the Desktop The Swit ch is an ideal solut ion for sm all net works which dem and high bandwidt h for a group of heavy t raffic users.
  • Page 24: Ipv6 Support

    Chapter 1 Getting to Know Your Switch For m ore inform at ion on VLANs, refer t o Chapt er 7 on page 101. 1.1.4.1 Tag-based VLAN Example Port s in t he sam e VLAN group share t he sam e fram e broadcast dom ain, t hus increasing net work perform ance by reducing broadcast t raffic.
  • Page 25: Good Habits For Managing The Switch

    Chapter 1 Getting to Know Your Switch • Web Configurat or. This is recom m ended for everyday m anagem ent of t he Swit ch using a ( support ed) web browser. See Chapt er 4 on page • Com m and Line I nt erface.
  • Page 26: Hardware Installation And Connection

    H A P TE R Hardware Installation and Connection This chapt er shows you how t o inst all and connect t he Swit ch. 2.1 Freestanding Installation Make sure t he Swit ch is clean and dry. Set t he Swit ch on a sm oot h, level surface st rong enough t o support t he weight of t he Swit ch and t he connect ed cables.
  • Page 27: Mounting The Switch On A Rack

    Chapter 2 Hardware Installation and Connection 2.2 Mounting the Switch on a Rack This sect ion list s t he rack m ount ing requirem ent s and precaut ions and describes t he inst allat ion st eps of how t o m ount t he Swit ch in a 19- inch rack wit h t he included rack m ount ing kit . Not e: ZyXEL provides ext ensible rear m ount ing bracket s ( RM400) t o inst all t he Swit ch in a 21- inch, 23- inch or 24- inch rack.
  • Page 28: Mounting The Switch On A Rack

    Chapter 2 Hardware Installation and Connection Slide t he rear bracket along t he rail and set t he bracket in place depending on t he dept h of t he rack. The rear bracket s can be used wit h a 19- inch rack. Rear Bracket Sliding Rail Front Bracket...
  • Page 29: Power Module Installation

    Chapter 2 Hardware Installation and Connection Rear Front 2.6 Power Module Installation There is one power m odule inst alled in t he first power slot of t he Swit ch by default . See t he Pow e r M odu le H a r dw a r e I nst a lla t ion Guide for how t o inst all a second power m odule or rem ove t he power m odule.
  • Page 30: Hardware Overview

    This chapt er describes t he front panel and rear panel of t he Swit ch and shows you how t o m ake t he hardware connect ions. 3.1 Front Panel Connections The figure below shows t he front panel of t he Swit ch. Figure 6 Front Panel: GS3700 Series GS3700/XGS3700 Series User’s Guide...
  • Page 31: Ethernet Ports

    Chapter 3 Hardware Overview Figure 7 Front Panel: XGS3700 Series The following t able describes t he port s. Table 2 Panel Connect ions CONNECTOR DESCRIPTION 24 or 48 10/ Connect t hese port s t o a com put er, a hub, an Et hernet swit ch or rout er. 100/ 1000Base-T RJ- 45 Et hernet Port s...
  • Page 32: Sfp/Sfp+ Slots

    Chapter 3 Hardware Overview • Speed: Aut o • Duplex: Aut o • Flow cont rol: Off • Dual Personalit y I nt erface: Fiber- opt ic m odule fir s t 3.1.2 SFP/SFP+ Slots These are four slot s for Sm all Form - Fact or Pluggable ( SFP) or SFP+ m odules, such as an SFP/ SFP+ t ransceiver.
  • Page 33: Management Port

    Chapter 3 Hardware Overview Figure 9 I nst alled Transceiver 3.1.2.2 Transceiver Removal Use t he following st eps t o rem ove a t ransceiver. Open t he t ransceiver ’s lat ch ( lat ch st yles vary) . Figure 10 Opening t he Transceiver ’s Lat ch Exam ple Pull t he t ransceiver out of t he slot .
  • Page 34: Rear Panel

    Chapter 3 Hardware Overview • No parit y, 8 dat a bit s, 1 st op bit • No flow cont rol Connect t he m ale 9- pin end of t he RS- 232 console cable t o t he console port of t he Swit ch. Connect t he fem ale end t o a serial port ( COM1, COM2 or ot her COM port ) of your com put er.
  • Page 35: Leds

    Chapter 3 Hardware Overview Disconnect t he power cord from t he power out let . Disconnect t he power cord from t he AC power socket . 3.3 LEDs The following t able describes t he LEDs. Table 3 LEDs COLOR STATUS DESCRIPTION...
  • Page 36 Chapter 3 Hardware Overview Table 3 LEDs ( cont inued) COLOR STATUS DESCRIPTION 1- 24 or 1- Green Power is supplied t o t he PoE port . Power is not supplied t o t he PoE port . POE ( Right ) 1G SFP Slot s 25- 28 or Green...
  • Page 37: The Web Configurator

    H A P TE R The Web Configurator This sect ion int roduces t he configurat ion and funct ions of t he web configurat or. 4.1 Introduction The web configurat or is an HTML- based m anagem ent int erface t hat allows easy Swit ch set up and m anagem ent via I nt ernet browser.
  • Page 38: The Web Configurator Layout

    Chapter 4 The Web Configurator Figure 13 Web Configurat or: Login Click OK t o view t he first web configurat or screen. 4.3 The Web Configurator Layout The St a t us screen is t he first screen t hat displays when you access t he web configurat or. This guide uses t he XGS3700- 48HP screens as an exam ple.
  • Page 39 Chapter 4 The Web Configurator C - Click t his link t o save your configurat ion int o t he Swit ch’s nonvolat ile m em ory. Nonvolat ile m em ory is saved in t he configurat ion file from which t he Swit ch boot ed from and it st ays t he sam e even if t he Swit ch’s power is t urned off.
  • Page 40 Chapter 4 The Web Configurator The following t able describes t he links in t he navigat ion panel. Table 5 Navigat ion Panel Links LINK DESCRIPTION Basic Set t ings Syst em I nfo This link t akes you t o a screen t hat displays general syst em and hardware m onit oring inform at ion.
  • Page 41 Chapter 4 The Web Configurator Table 5 Navigat ion Panel Links ( cont inued) LINK DESCRIPTION Classifier This link t akes you t o screens where you can configure t he Swit ch t o group packet s based on t he specified crit eria. Policy Rule This link t akes you t o a screen where you can configure t he Swit ch t o perform special t reat m ent on t he grouped packet s.
  • Page 42: Change Your Password

    Chapter 4 The Web Configurator Table 5 Navigat ion Panel Links ( cont inued) LINK DESCRIPTION DiffServ This link t akes you t o screens where you can enable DiffServ, configure m arking rules and set DSCP- t o- I EEE802.1p m appings. DHCP This link t akes you t o screens where you can configure t he DHCP set t ings.
  • Page 43: Saving Your Configuration

    Chapter 4 The Web Configurator Figure 15 Change Adm inist rat or Login Password 4.4 Saving Your Configuration When you are done m odifying t he set t ings in a screen, click Apply t o save your changes back t o t he run- t im e m em ory.
  • Page 44: Resetting The Switch

    Chapter 4 The Web Configurator Prevent all services from accessing t he Swit ch. Change a service port num ber but forget it . Not e: Be careful not t o lock your self and ot hers out of t he Swit ch. I f you do lock yourself out , t ry using out- of- band m anagem ent ( via t he m anagem ent port ) t o configure t he Swit ch.
  • Page 45: Logging Out Of The Web Configurator

    Chapter 4 The Web Configurator Figure 16 Reset t ing t he Swit ch: Via t he Console Port Bootbase Version: V1.00 | 12/11/2012 13:49:40 RAM: Size = 524288 Kbytes DRAM POST: Testing: 524288K DRAM Test SUCCESS ! ZyNOS Version: V4.10(AAGF.5)b1 | 6/5/2014 20:10:8 Press any key to enter debug mode within 3 seconds.
  • Page 46: Technical Reference

    Technical Reference...
  • Page 47: Overview

    H A P TE R ZON Utility, ZON Neighbor Management and Port Status 5.1 Overview This chapt er describes t he screens for Syst em St at us, ZON Ut ilit y, ZON Neighbor Managem ent , Port St at us and Port Det ails. 5.2 Status The St a t us screen displays when you log int o t he Swit ch or click St a t u s at t he t op right corner of t he web configurat or.
  • Page 48: Chapter 5 Zon Utility, Zon Neighbor Management And Port Status

    Chapter 5 ZON Utility, ZON Neighbor Management and Port Status The following t able describes t he fields in t he above screen. Table 6 St at us LABEL DESCRIPTION Device I nform at ion Device Type This field displays t he m odel nam e of t his Swit ch. Syst em Nam e This field displays t he nam e used t o ident ify t he Swit ch on any net work.
  • Page 49: Zyxel One Network (Zon) Utility Screen

    Chapter 5 ZON Utility, ZON Neighbor Management and Port Status 5.3 ZyXEL One Network (ZON) Utility Screen ZON Ut ilit y is a program designed t o help you deploy and m anage a net work m ore efficient ly. I t det ect s devices aut om at ically and allows you t o do basic set t ings on devices in t he net work wit hout having t o be near it .
  • Page 50 Chapter 5 ZON Utility, ZON Neighbor Management and Port Status Figure 20 St at us > Neighbor The following t able describes t he fields in t he above screen. Table 7 St at us > Neighbor LABEL DESCRIPTION Local Port This shows t he port of t he Swit ch, on which t he neighboring device is discovered.
  • Page 51: Port Status

    Chapter 5 ZON Utility, ZON Neighbor Management and Port Status 5.5 Port Status This screen displays a port st at ist ical sum m ary wit h links t o each port showing st at ist ical det ails. To view t he port st at ist ics, click St a t us in all web configurat or screens and t hen t he Por t St a t us link in t he Quick Link s sect ion of t he St a t us screen t o display t he Por t St a t us screen as shown next .
  • Page 52: Port Details

    Chapter 5 ZON Utility, ZON Neighbor Management and Port Status Table 8 Port St at us LABEL DESCRIPTION Nam e This is t he nam e you assigned t o t his port in t he Ba sic Se t t in g > Por t Se t u p screen. Link This field displays t he speed ( such as 1 0 0 M for 100 Mbps, 1 0 0 0 M for 1000 Mbps, or 1 0 G for 10 Gbps) and t he duplex ( F for full duplex) .
  • Page 53 Chapter 5 ZON Utility, ZON Neighbor Management and Port Status Figure 23 Port St at us: Port Det ails The following t able describes t he labels in t his screen. Table 9 Port St at us: Port Det ails LABEL DESCRIPTION Port I nfo...
  • Page 54 Chapter 5 ZON Utility, ZON Neighbor Management and Port Status Table 9 Port St at us: Port Det ails ( cont inued) LABEL DESCRIPTION RxPkt s This field shows t he num ber of received fram es on t his port Errors This field shows t he num ber of received errors on t his port .
  • Page 55 Chapter 5 ZON Utility, ZON Neighbor Management and Port Status Table 9 Port St at us: Port Det ails ( cont inued) LABEL DESCRIPTION 256 t o 511 This field shows t he num ber of packet s ( including bad packet s) received t hat were bet ween 256 and 511 oct et s in lengt h.
  • Page 56: Basic Setting

    H A P TE R Basic Setting This chapt er describes how t o configure t he Ba sic Se t t in g screens. 6.1 System Information I n t he navigat ion panel, click Ba sic Se t t ing > Syst e m I nfo t o display t he screen as shown. You can check t he firm ware version num ber and m onit or t he Swit ch t em perat ure, fan speeds and volt age in t his screen.
  • Page 57 Chapter 6 Basic Setting Figure 24 Basic Set t ing > Syst em I nfo ( St andalone Mode) GS3700/XGS3700 Series User’s Guide...
  • Page 58 Chapter 6 Basic Setting Figure 25 Basic Set t ing > Syst em I nfo ( St acking Mode) The following t able describes t he labels in t hese screens. Table 10 Basic Set t ing > Syst em I nfo ( St andalone and St acking Modes) LABEL DESCRIPTION Syst em Nam e...
  • Page 59: System Information Stacking Hardware Monitor

    Chapter 6 Basic Setting Table 10 Basic Set t ing > Syst em I nfo ( St andalone and St acking Modes) ( cont inued) LABEL DESCRIPTION MI N This field displays t he m inim um t em perat ure m easured at t his sensor. Threshold This field displays t he upper t em perat ure lim it at t his sensor.
  • Page 60 Chapter 6 Basic Setting Figure 26 Basic Set t ing > Syst em I nfo > Hardware Monit or ( St acking Mode) The following t able describes t he labels in t his screen. Table 11 Basic Set t ing > Syst em I nfo > Hardware Monit or ( St acking Mode) LABEL DESCRIPTION SLOT...
  • Page 61: General Setup

    Chapter 6 Basic Setting Table 11 Basic Set t ing > Syst em I nfo > Hardware Monit or ( St acking Mode) ( cont inued) LABEL DESCRIPTION Volt age ( V) The power supply for each volt age has a sensor t hat is capable of det ect ing and report ing if t he volt age falls out of t he t olerance range.
  • Page 62 Chapter 6 Basic Setting Table 12 Basic Set t ing > General Set up ( cont inued) LABEL DESCRIPTION Cont act Person's Type t he nam e of t he person in charge of t his Swit ch. You can use up t o 32 print able Nam e ASCI I charact ers;...
  • Page 63: Introduction To Vlans

    Chapter 6 Basic Setting Table 12 Basic Set t ing > General Set up ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
  • Page 64 Chapter 6 Basic Setting Figure 28 Basic Set t ing > Swit ch Set up The following t able describes t he labels in t his screen. Table 13 Basic Set t ing > Swit ch Set up LABEL DESCRIPTION VLAN Type Choose 8 0 2 .1 Q or Por t Ba se d.
  • Page 65: Ip Setup

    Chapter 6 Basic Setting Table 13 Basic Set t ing > Swit ch Set up ( cont inued) LABEL DESCRIPTION Priorit y Queue Assignm ent I EEE 802.1p defines up t o eight separat e t raffic t ypes by insert ing a t ag int o a MAC- layer fram e t hat cont ains bit s t o define class of service.
  • Page 66: Ip Status Details

    Chapter 6 Basic Setting You can configure up t o 128 I P dom ains which are used t o access and m anage t he Swit ch from t he port s belonging t o t he pre- defined VLAN( s) . Not e: You m ust configure a VLAN first .
  • Page 67: Ip Configuration

    Chapter 6 Basic Setting Figure 31 Basic Set t ing > I P Set up > I P St at us Det ails: DHCP The following t able describes t he labels in t his screen. Table 16 Basic Set t ing > I P Set up > I P St at us Det ails: DHCP LABEL DESCRIPTION Type...
  • Page 68 Chapter 6 Basic Setting Figure 32 Basic Set t ing > I P Set up > I P Configurat ion The following t able describes t he labels in t his screen. Table 17 Basic Set t ing > I P Set up > I P Configurat ion LABEL DESCRIPTION Default Gat eway...
  • Page 69: Port Setup

    Chapter 6 Basic Setting Table 17 Basic Set t ing > I P Set up > I P Configurat ion ( cont inued) LABEL DESCRIPTION Default Ent er t he I P address of t he default out going gat eway in dot t ed decim al not at ion, for Gat eway exam ple, 192.168.0.254 Apply...
  • Page 70 Chapter 6 Basic Setting Figure 33 Basic Set t ing > Port Set up ( GS3700 Series) Figure 34 Basic Set t ing > Port Set up ( XGS3700 Series: St andalone m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 71 Chapter 6 Basic Setting Figure 35 Basic Set t ing > Port Set up ( XGS3700 Series: St acking m ode) The following t able describes t he labels in t his screen. Table 18 Basic Set t ing > Port Set up LABEL DESCRIPTION Slot ( St acking...
  • Page 72 Chapter 6 Basic Setting Table 18 Basic Set t ing > Port Set up ( cont inued) LABEL DESCRIPTION Speed/ Duplex Select t he speed and t he duplex m ode of t he Et hernet connect ion on t his port . The choices are Au t o, 1 0 M / H a lf D u ple x , 1 0 M / Fu ll D uple x , 1 0 0 M / H a lf D u ple x and 1 0 0 M / Fu ll D uple x for a 100Base-T connect ion.
  • Page 73 Chapter 6 Basic Setting The Swit ch support s bot h t he I EEE 802.3af Power over Et hernet ( PoE) and I EEE 802.3at High Power over Et hernet ( PoE) st andards. The Swit ch is Power Sourcing Equipm ent ( PSE) because it provides a source of power via it s Et hernet port s, and each device t hat receives power t hrough an Et hernet port is a Powered Device ( PD) .
  • Page 74 Chapter 6 Basic Setting Figure 38 Basic Set t ing > PoE Set up ( St acking m ode) The following t able describes t he labels in t his screen. Table 19 Basic Set t ing > PoE Set up LABEL DESCRIPTION PoE St at us...
  • Page 75: Poe Time Range Status

    Chapter 6 Basic Setting Table 19 Basic Set t ing > PoE Set up LABEL DESCRIPTION Class This shows t he power classificat ion of t he PD. This is a num ber from 0 t o 4, where each value represent s a range of power ( W) and current ( m A) t hat t he PD requires t o funct ion.
  • Page 76: Poe Setup

    Chapter 6 Basic Setting The following t able describes t he labels in t his screen. Table 20 Basic Set t ing > PoE Set up > PoE Tim e Range St at us LABEL DESCRIPTION Port This is t he num ber of t he port on t he Swit ch. Tim e Range This field displays t he nam e of t he schedule which is applied t o t he port .
  • Page 77 Chapter 6 Basic Setting Figure 41 Basic Set t ing > PoE Set up > PoE Set up ( St acking m ode) The following t able describes t he labels in t his screen. Table 21 Basic Set t ing > PoE Set up > PoE Set up LABEL DESCRIPTION PoE Mode...
  • Page 78 Chapter 6 Basic Setting Table 21 Basic Set t ing > PoE Set up > PoE Set up ( cont inued) LABEL DESCRIPTION PD Priorit y This field is not available for t he SFP or SFP+ port s. When t he t ot al power request ed by t he PDs exceeds t he t ot al PoE power budget on t he Swit ch, you can set t he PD priorit y t o allow t he Swit ch t o provide power t o port s wit h higher priorit y.
  • Page 79: Interface Setup

    Chapter 6 Basic Setting Not e: The t ot al power available varies by Swit ch. Use t he show pwr com m and t o see t he t ot al power available for your Swit ch. The num ber of port s t hat can be powered by PoE is t he ( t ot al power available) / ( m axim um power available per port ) .
  • Page 80: Ipv6

    Chapter 6 Basic Setting Table 22 Basic Set t ing > I nt erface Set up ( cont inued) LABEL DESCRIPTION I ndex This field displays t he index num ber of an ent ry. I nt erface Type This field displays t he t ype of int erface. I nt erface I D This field displays t he ident ificat ion num ber of t he int erface.
  • Page 81 Chapter 6 Basic Setting Figure 44 Basic Set t ing > I Pv6 I nt erface St at us The following t able describes t he labels in t his screen. Table 24 Basic Set t ing > I Pv6 I nt erface St at us LABEL DESCRIPTION I Pv6 Act ive...
  • Page 82 Chapter 6 Basic Setting Table 24 Basic Set t ing > I Pv6 I nt erface St at us ( cont inued) LABEL DESCRIPTION Link Local This field displays t he Swit ch’s link- local I P address and prefix generat ed by t he int erface. I t Address also shows whet her t he I P address is preferred, which m eans it is a valid address and can be used as a sender or receiver address.
  • Page 83: Ipv6 Configuration

    Chapter 6 Basic Setting 6.9.2 IPv6 Configuration Use t his screen t o configure I Pv6 set t ings on t he Swit ch. Click t he I Pv6 Con figu r a t ion link in t he Ba sic Se t t ing > I Pv6 screen. The following screen opens. Figure 45 Basic Set t ing >...
  • Page 84: Ipv6 Interface Setup

    Chapter 6 Basic Setting Figure 46 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Global Set up The following t able describes t he labels in t his screen. Table 26 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Global Set up LABEL DESCRIPTION I Pv6 Hop Lim it...
  • Page 85: Ipv6 Link-Local Address Setup

    Chapter 6 Basic Setting The following t able describes t he labels in t his screen. Table 27 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 I nt erface Set up LABEL DESCRIPTION I nt erface Select t he I Pv6 int erface you want t o configure.
  • Page 86: Ipv6 Global Address Setup

    Chapter 6 Basic Setting Table 28 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Link- Local Address Set up ( cont inued) LABEL DESCRIPTION Default Gat eway Set t he default gat eway I Pv6 address for t he int erface. When an int erface cannot find a rout ing inform at ion for a fram e’s dest inat ion, it forwards t he packet t o t he default gat eway.
  • Page 87: Ipv6 Neighbor Discovery Setup

    Chapter 6 Basic Setting Table 29 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Global Address Set up ( cont inued) LABEL DESCRIPTION I ndex This is t he int erface index num ber. Click on an index num ber t o change t he set t ings. I nt erface This is t he nam e of t he I Pv6 int erface you creat ed.
  • Page 88: Ipv6 Router Discovery Setup

    Chapter 6 Basic Setting Table 30 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Neighbor Discovery Set up ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he nonvolat ile m em ory when you are done configuring.
  • Page 89: Ipv6 Prefix Setup

    Chapter 6 Basic Setting The following t able describes t he labels in t his screen. Table 31 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Rout er Discovery Set up LABEL DESCRIPTION I nt erface Select t he I Pv6 int erface you want t o configure.
  • Page 90 Chapter 6 Basic Setting Figure 52 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Prefix Set up The following t able describes t he labels in t his screen. Table 32 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Prefix Set up LABEL DESCRIPTION I nt erface...
  • Page 91: Ipv6 Neighbor Setup

    Chapter 6 Basic Setting Table 32 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Prefix Set up ( cont inued) LABEL DESCRIPTION Preferred Lifet im e This field displays t he preferred lifet im e of an I Pv6 address generat ed from t he prefix. Delet e Check t he ent ry( ies) t hat you want t o rem ove in t he D e le t e colum n and t hen click D e le t e t o rem ove t he select ed ent ry( ies) from t he sum m ary t able.
  • Page 92: Dhcpv6 Client Setup

    Chapter 6 Basic Setting Table 33 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Neighbor Set up ( cont inued) LABEL DESCRIPTION Cancel Click Ca nce l t o begin configuring t his screen afresh. Clear Click Cle a r t o reset t he fields t o t he fact ory default s.
  • Page 93: Stacking

    Chapter 6 Basic Setting Table 34 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > DHCPv6 Client Set up ( cont inued) LABEL DESCRIPTION Opt ions Select D N S t o have t he Swit ch obt ain DNS server I Pv6 addresses and/ or select D om a in- List t o have t he Swit ch obt ain a list of dom ain nam es from t he DHCP server.
  • Page 94: Stacking Status

    Chapter 6 Basic Setting Table 35 Swit ch St acking MODELS WITH STACKING SUPPORT XGS3700- 48 XGS3700- 48HP Not e: Up t o 8 Sw it ches per st ack are allowed. You can m anage each Swit ch in t he st ack from a m ast er Swit ch using it s web configurat or or console.
  • Page 95: Stacking Slot

    Chapter 6 Basic Setting Figure 57 Basic Set t ing > St acking St at us The following t able describes t he labels in t his screen. Table 36 Basic Set t ing > St acking > St acking St at us LABEL DESCRIPTION Slot...
  • Page 96 Chapter 6 Basic Setting Figure 58 Basic Set t ing > St acking > St acking St at us > Slot num ber The following t able describes t he labels in t his screen. Table 37 Basic Set t ing > St acking > St acking St at us > Slot num ber LABEL DESCRIPTION Slot...
  • Page 97: Stacking Configuration

    Chapter 6 Basic Setting 6.10.3 Stacking Configuration A support ed Swit ch can change bet ween st acking and st andalone m ode by select ing t he Act ive check box in t he Ba sic Se t t ing > St a ck ing > Configur a t ion screen. Not e: When you change m odes, all configurat ions except user account s, but including running configurat ion, config01 and config02 will be erased and t he Swit ch will reboot wit h a new config01.
  • Page 98 Chapter 6 Basic Setting Aft er reboot com plet es, t he m ast er LED will t urn on. Configure t he Swit ch st acking priorit y t o a high value, such as 63. Change a second Swit ch t o st acking m ode and wait for it t o finish reboot ing aut om at ically. This m ast er LED will also t urn on.
  • Page 99 Chapter 6 Basic Setting The following t able describes t he labels in t his screen. Table 38 Basic Set t ing > St acking > Configurat ion LABEL DESCRIPTION Act ive Select t he Act ive check box t o put t he Swit ch in st acking m ode. This will erase t he running configurat ion, config01 and config02.
  • Page 100 Chapter 6 Basic Setting Table 39 Basic Set t ing > DNS ( cont inued) LABEL DESCRIPTION Server Address Ent er a dom ain nam e server I Pv6/ I Pv4 address in order t o be able t o use a dom ain nam e inst ead of an I P address.
  • Page 101: Vlan

    H A P TE R VLAN The t ype of screen you see here depends on t he VLAN Type you select ed in t he Sw it ch Se t u p screen which is only available in st andalone m ode. The Swit ch does not support port- based VLANs in st acking m ode.
  • Page 102: Automatic Vlan Registration

    Chapter 7 VLAN 7.2 Automatic VLAN Registration GARP and GVRP are t he prot ocols used t o aut om at ically regist er VLAN m em bership across swit ches. 7.2.1 GARP GARP ( Generic At t ribut e Regist rat ion Prot ocol) allows net work swit ches t o regist er and de- regist er at t ribut e values wit h ot her GARP part icipant s wit hin a bridged LAN.
  • Page 103: Port Vlan Trunking

    Chapter 7 VLAN 7.3 Port VLAN Trunking Enable VLAN Tr u nk in g on a port t o allow fram es belonging t o unknown VLAN groups t o pass t hrough t hat port . This is useful if you want t o set up VLAN groups on end devices wit hout having t o configure t he sam e VLAN groups on int erm ediary devices.
  • Page 104: Vlan Status

    Chapter 7 VLAN 7.5.1 VLAN Status Sect ion 7.1 on page 101 for m ore inform at ion on 802.1Q VLAN. Click Adva nce d Applica t ion > VLAN from t he navigat ion panel t o display t he VLAN St a t us screen as shown next . Figure 63 Advanced Applicat ion >...
  • Page 105: Vlan Details

    Chapter 7 VLAN 7.5.2 VLAN Details Use t his screen t o view det ailed port set t ings and st at us of t he VLAN group. See Sect ion 7.1 on page 101 for m ore inform at ion on 802.1Q VLAN. Click on an index num ber in t he V LAN St a t us screen t o display VLAN det ails.
  • Page 106: Private Vlan Status

    Chapter 7 VLAN Table 42 Advanced Applicat ion > VLAN > VLAN Det ail ( cont inued) LABEL DESCRIPTION Port List This shows t he port s m apped t o t he privat e VLAN using t he Adva n ce d Applica t ion > Pr iva t e VLAN or Adva nce d Applica t ion >...
  • Page 107: Configure A Static Vlan

    Chapter 7 VLAN Figure 66 Advanced Applicat ion > VLAN > VLAN Configurat ion The following t able describes t he labels in t he above screen. Table 44 Advanced Applicat ion > VLAN > VLAN Configurat ion LABEL DESCRIPTION St at ic VLAN Set up Click Click H e r e t o configure t he St at ic VLAN for t he Swit ch.
  • Page 108 Chapter 7 VLAN Figure 67 Advanced Applicat ion > VLAN > VLAN Configurat ion > St at ic VLAN Set up The following t able describes t he relat ed labels in t his screen. Table 45 Advanced Applicat ion > VLAN > VLAN Configurat ion > St at ic VLAN Set up LABEL DESCRIPTION ACTI VE...
  • Page 109: Configure Vlan Port Settings

    Chapter 7 VLAN Table 45 Advanced Applicat ion > VLAN > VLAN Configurat ion > St at ic VLAN Set up ( cont inued) LABEL DESCRIPTION Port The port num ber ident ifies t he port you are configuring. I n st acking m ode, t he first num ber represent s t he slot and t he second t he port num ber.
  • Page 110 Chapter 7 VLAN Figure 68 Advanced Applicat ion > VLAN > VLAN Configurat ion > VLAN Port Set up: St andalone m ode Figure 69 Advanced Applicat ion > VLAN > VLAN Configurat ion > VLAN Port Set up: St acking m ode GS3700/XGS3700 Series User’s Guide...
  • Page 111: Subnet Based Vlans

    Chapter 7 VLAN The following t able describes t he labels in t his screen. Table 46 Advanced Applicat ion > VLAN > VLAN Configurat ion > VLAN Port Set up: St andalone/ St acking m ode LABEL DESCRIPTION GVRP GVRP ( GARP VLAN Regist rat ion Prot ocol) is a regist rat ion prot ocol t hat defines a way for swit ches t o regist er necessary VLAN m em bers on port s across t he net work.
  • Page 112: Configuring Subnet Based Vlan

    Chapter 7 VLAN subnet it cam e from . The unt agged packet s from t he sam e I P subnet are t hen placed in t he sam e subnet based VLAN. One advant age of using subnet based VLANs is t hat priorit y can be assigned t o t raffic from t he sam e I P subnet .
  • Page 113 Chapter 7 VLAN Figure 71 Advanced Applicat ion > VLAN > VLAN Configurat ion > Subnet Based VLAN Set up The following t able describes t he labels in t his screen. Table 47 Advanced Applicat ion > VLAN > VLAN Configurat ion > Subnet Based VLAN Set up LABEL DESCRIPTION Act ive...
  • Page 114: Protocol Based Vlans

    Chapter 7 VLAN Table 47 Advanced Applicat ion > VLAN > VLAN Configurat ion > Subnet Based VLAN Set up LABEL DESCRIPTION This field shows t he I P address of t he subnet for t his subnet based VLAN. Mask- Bit s This field shows t he subnet m ask in bit num ber form at for t his subnet based VLAN.
  • Page 115 Chapter 7 VLAN Figure 73 Advanced Applicat ion > VLAN > VLAN Configurat ion > Prot ocol Based VLAN Set up The following t able describes t he labels in t his screen. Table 48 Advanced Applicat ion > VLAN > VLAN Configurat ion > Prot ocol Based VLAN Set up LABEL DESCRIPTION Act ive...
  • Page 116 Chapter 7 VLAN Table 48 Advanced Applicat ion > VLAN > VLAN Configurat ion > Prot ocol Based VLAN Set up LABEL DESCRIPTION Priorit y This field shows t he priorit y which is assigned t o fram es belonging t o t his prot ocol based VLAN.
  • Page 117: Port-Based Vlan Setup (Standalone Mode)

    Chapter 7 VLAN 7.8 Port-based VLAN Setup (Standalone Mode) Port- based VLANs are VLANs where t he packet forwarding decision is based on t he dest inat ion MAC address and it s associat ed port . Port- based VLANs require allowed out going port s t o be defined for each port . Therefore, if you wish t o allow t wo subscriber port s t o t alk t o each ot her, for exam ple, bet ween conference room s in a hot el, you m ust define t he egress ( an egress port is an out going port , t hat is, a port t hrough which a dat a packet leaves) for bot h port s.
  • Page 118 Chapter 7 VLAN Figure 75 Advanced Applicat ion > VLAN > Port Based VLAN Set up ( All Connect ed) The following screen shows users on a port- based, port- isolat ed VLAN configurat ion. GS3700/XGS3700 Series User’s Guide...
  • Page 119 Chapter 7 VLAN Figure 76 Advanced Applicat ion > VLAN: Port Based VLAN Set up ( Port I solat ion) GS3700/XGS3700 Series User’s Guide...
  • Page 120: Voice Vlan

    Chapter 7 VLAN The following t able describes t he labels in t his screen. Table 49 Advanced Applicat ion > VLAN: Port Based VLAN Set up LABEL DESCRIPTION Set t ing Wizard Choose All conne ct e d or Por t isola t ion. All con n e ct e d m eans all port s can com m unicat e wit h each ot her, t hat is, t here are no virt ual LANs.
  • Page 121 Chapter 7 VLAN Figure 77 Advanced Applicat ion > VLAN > VLAN Configurat ion > Voice VLAN Set up The following t able describes t he fields in t he above screen. Table 50 Advanced Applicat ion > VLAN > VLAN Configurat ion > Voice VLAN Set up LABEL DESCRIPTION Voice VLAN Global Set up...
  • Page 122: Mac Based Vlan

    Chapter 7 VLAN Table 50 Advanced Applicat ion > VLAN > VLAN Configurat ion > Voice VLAN Set up LABEL DESCRIPTION Select an ent ry’s check box t o select a specific ent ry. Ot herwise, select t he check box in t he t able heading row t o select all ent ries.
  • Page 123 Chapter 7 VLAN Table 51 Advanced Applicat ion > VLAN > VLAN Configurat ion > MAC- based VLAN Set up LABEL DESCRIPTION Priorit y Type a priorit y ( 0- 7) for t he MAC- based VLAN ent ry.The higher t he num eric value you assign, t he higher t he priorit y for t his MAC- based VLAN ent ry.
  • Page 124: Static Mac Forward Setup

    H A P TE R Static MAC Forward Setup Use t hese screens t o configure st at ic MAC address forwarding. 8.1 Overview This chapt er discusses how t o configure forwarding rules based on MAC addresses of devices on your net work.
  • Page 125 Chapter 8 Static MAC Forward Setup Figure 80 Advanced Applicat ion > St at ic MAC Forwarding ( St acking m ode) The following t able describes t he labels in t his screen. Table 52 Advanced Applicat ion > St at ic MAC Forwarding LABEL DESCRIPTION Act ive...
  • Page 126 Chapter 8 Static MAC Forward Setup Table 52 Advanced Applicat ion > St at ic MAC Forwarding ( cont inued) LABEL DESCRIPTION Delet e Click D e le t e t o rem ove t he select ed ent ry from t he sum m ary t able. Cancel Click Ca n ce l t o clear t he check boxes.
  • Page 127: Static Multicast Forward Setup

    H A P TE R Static Multicast Forward Setup Use t hese screens t o configure st at ic m ult icast address forwarding. 9.1 Static Multicast Forwarding Overview A m ult icast MAC address is t he MAC address of a m em ber of a m ult icast group. A st at ic m ult icast address is a m ult icast MAC address t hat has been m anually ent ered in t he m ult icast t able.
  • Page 128: Configuring Static Multicast Forwarding

    Chapter 9 Static Multicast Forward Setup Figure 83 St at ic Mult icast Forwarding t o Mult iple Port s 9.2 Configuring Static Multicast Forwarding Use t his screen t o configure rules t o forward specific m ult icast fram es, such as st ream ing or cont rol fram es, t o specific port ( s) .
  • Page 129 Chapter 9 Static Multicast Forward Setup Table 53 Advanced Applicat ion > St at ic Mult icast Forwarding ( cont inued) LABEL DESCRIPTION Port Ent er t he port ( s) where fram es wit h dest inat ion MAC address t hat m at ched t he ent ry above are forwarded.
  • Page 130: Filtering

    HAPTER Filtering This chapt er discusses MAC address port filt ering. 10.1 Configure a Filtering Rule Configure t he Swit ch t o filt er t raffic based on t he t raffic’s source, dest inat ion MAC addresses and/ or VLAN group ( I D) .
  • Page 131 Chapter 10 Filtering Table 54 Advanced Applicat ion > FI lt ering ( cont inued) LABEL DESCRIPTION Act ion Select D isca r d sou r ce t o drop fram es from t he source MAC address ( specified in t he M AC field) .
  • Page 132: Spanning Tree Protocol

    HAPTER Spanning Tree Protocol The Swit ch support s Spanning Tree Prot ocol ( STP) , Rapid Spanning Tree Prot ocol ( RSTP) and Mult iple Spanning Tree Prot ocol ( MSTP) as defined in t he following st andards. •...
  • Page 133: How Stp Works

    Chapter 11 Spanning Tree Protocol Table 55 STP Pat h Cost s RECOMMENDED RECOMMENDED LINK SPEED ALLOWED RANGE VALUE RANGE Pat h Cost 1Gbps 3 t o 10 1 t o 65535 Pat h Cost 10Gbps 1 t o 5 1 t o 65535 On each bridge, t he bridge com m unicat es wit h t he root t hrough t he root port .
  • Page 134: Multiple Stp

    Chapter 11 Spanning Tree Protocol I n t he following exam ple, t here are t wo RSTP inst ances ( M RSTP1 and M RSTP2 ) on swit ch A. Figure 86 MRSTP Net work Exam ple To set up MRSTP , act ivat e MRSTP on t he Swit ch and specify which port ( s) belong t o which spanning t ree.
  • Page 135: Mst Region

    Chapter 11 Spanning Tree Protocol Figure 87 STP/ RSTP Net work Exam ple VLAN 1 VLAN 2 Wit h MSTP , VLANs 1 and 2 are m apped t o different spanning t rees in t he net work. Thus t raffic from t he t wo VLANs t ravel on different pat hs.
  • Page 136: Spanning Tree Protocol Status Screen

    Chapter 11 Spanning Tree Protocol 11.1.5.3 MST Instance An MST I nst ance ( MSTI ) is a spanning t ree inst ance. VLANs can be configured t o run on a specific MSTI . Each creat ed MSTI is ident ified by a unique num ber ( known as an MST I D) known int ernally t o a region.
  • Page 137: Spanning Tree Configuration

    Chapter 11 Spanning Tree Protocol Figure 91 Advanced Applicat ion > Spanning Tree Prot ocol ( St andalone m ode) Figure 92 Advanced Applicat ion > Spanning Tree Prot ocol ( St acking m ode) This screen differs depending on which STP m ode ( RSTP , MRSTP or MSTP) you configure on t he Swit ch.
  • Page 138: Configure Rapid Spanning Tree Protocol

    Chapter 11 Spanning Tree Protocol The following t able describes t he labels in t his screen. Table 57 Advanced Applicat ion > Spanning Tree Prot ocol > Configurat ion LABEL DESCRIPTION Spanning Tree You can act ivat e one of t he STP m odes on t he Swit ch. Mode Select Ra pid Spa n n in g Tr e e , M u lt iple Ra pid Spa n n in g Tr e e or M u lt iple Spa n n in g Tr e e .
  • Page 139 Chapter 11 Spanning Tree Protocol Figure 95 Advanced Applicat ion > Spanning Tree Prot ocol > RSTP ( St acking m ode) The following t able describes t he labels in t his screen. Table 58 Advanced Applicat ion > Spanning Tree Prot ocol > RSTP LABEL DESCRIPTION St at us...
  • Page 140 Chapter 11 Spanning Tree Protocol Table 58 Advanced Applicat ion > Spanning Tree Prot ocol > RSTP ( cont inued) LABEL DESCRIPTION Max Age This is t he m axim um t im e ( in seconds) a swit ch can wait wit hout receiving a BPDU before at t em pt ing t o reconfigure.
  • Page 141: Rapid Spanning Tree Protocol Status

    Chapter 11 Spanning Tree Protocol 11.5 Rapid Spanning Tree Protocol Status Click Adva nce d Applica t ion > Spa n nin g Tr e e Pr ot ocol in t he navigat ion panel t o display t he st at us screen as shown next .
  • Page 142: Configure Multiple Rapid Spanning Tree Protocol

    Chapter 11 Spanning Tree Protocol Table 59 Advanced Applicat ion > Spanning Tree Prot ocol > St at us: RSTP ( cont inued) LABEL DESCRIPTION Port St at e This field displays t he port st at e in STP . •...
  • Page 143 Chapter 11 Spanning Tree Protocol Figure 97 Advanced Applicat ion > Spanning Tree Prot ocol > MRSTP ( St andalone m ode) Figure 98 Advanced Applicat ion > Spanning Tree Prot ocol > MRSTP ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 144 Chapter 11 Spanning Tree Protocol The following t able describes t he labels in t his screen. Table 60 Advanced Applicat ion > Spanning Tree Prot ocol > MRSTP LABEL DESCRIPTION St at us Click St a t us t o display t he M RSTP St a t u s screen ( see Figure 99 on page 145) .
  • Page 145: Multiple Rapid Spanning Tree Protocol Status

    Chapter 11 Spanning Tree Protocol Table 60 Advanced Applicat ion > Spanning Tree Prot ocol > MRSTP ( cont inued) LABEL DESCRIPTION Root Guard Select t his check box t o enable root guard on t his port in order t o prevent t he swit ch( es) ( St andalone at t ached t o t he port from becom ing t he root bridge.
  • Page 146 Chapter 11 Spanning Tree Protocol The following t able describes t he labels in t his screen. Table 61 Advanced Applicat ion > Spanning Tree Prot ocol > St at us: MRSTP LABEL DESCRIPTION Configurat ion Click Configu r a t ion t o specify which STP m ode you want t o act ivat e. Click M RSTP t o edit MRSTP set t ings on t he Swit ch.
  • Page 147: Configure Multiple Spanning Tree Protocol

    Chapter 11 Spanning Tree Protocol Table 61 Advanced Applicat ion > Spanning Tree Prot ocol > St at us: MRSTP ( cont inued) LABEL DESCRIPTION Designat ed Cost This field displays t he pat h cost t o t he LAN segm ent t o which t he port is connect ed when t he port is a designat ed port .
  • Page 148 Chapter 11 Spanning Tree Protocol Figure 100 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP ( St andalone m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 149 Chapter 11 Spanning Tree Protocol Figure 101 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP ( St acking m ode) The following t able describes t he labels in t his screen. Table 62 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP LABEL DESCRIPTION St at us...
  • Page 150 Chapter 11 Spanning Tree Protocol Table 62 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP ( cont inued) LABEL DESCRIPTION MaxAge This is t he m axim um t im e ( in seconds) a swit ch can wait wit hout receiving a BPDU before at t em pt ing t o reconfigure.
  • Page 151: Multiple Spanning Tree Protocol Port Configuration

    Chapter 11 Spanning Tree Protocol Table 62 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP ( cont inued) LABEL DESCRIPTION Act ive Select t his check box t o add t his port t o t he MST inst ance. Priorit y Configure t he priorit y for each port here.
  • Page 152 Chapter 11 Spanning Tree Protocol Figure 102 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP > Port ( St andalone m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 153 Chapter 11 Spanning Tree Protocol Figure 103 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP > Port ( St acking m ode) The following t able describes t he labels in t his screen. Table 63 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP > Port LABEL DESCRIPTION Slot ( St acking...
  • Page 154: Multiple Spanning Tree Protocol Status

    Chapter 11 Spanning Tree Protocol Table 63 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP > Port ( cont inued) LABEL DESCRIPTION Root Guard Select t his check box t o enable root guard on t his port in order t o prevent t he swit ch( es) ( St andalone at t ached t o t he port from becom ing t he root bridge.
  • Page 155 Chapter 11 Spanning Tree Protocol The following t able describes t he labels in t his screen. Table 64 Advanced Applicat ion > Spanning Tree Prot ocol > St at us: MSTP LABEL DESCRIPTION Configurat ion Click Con figu r a t ion t o specify which STP m ode you want t o act ivat e. Click M STP t o edit MSTP set t ings on t he Swit ch.
  • Page 156 Chapter 11 Spanning Tree Protocol Table 64 Advanced Applicat ion > Spanning Tree Prot ocol > St at us: MSTP ( cont inued) LABEL DESCRIPTION Port St at e This field displays t he port st at e in STP . •...
  • Page 157: Bandwidth Control

    HAPTER Bandwidth Control This chapt er shows you how t o cap t he m axim um bandwidt h using t he Ba n dw idt h Cont r ol screen. 12.1 Bandwidth Control Overview Bandwidt h cont rol m eans defining a m axim um allowable bandwidt h for incom ing and/ or out- going t raffic flows on a port .
  • Page 158 Chapter 12 Bandwidth Control Figure 105 Advanced Applicat ion > Bandwidt h Cont rol ( St andalone m ode) Figure 106 Advanced Applicat ion > Bandwidt h Cont rol ( St acking m ode) The following t able describes t he relat ed labels in t his screen. Table 65 Advanced Applicat ion >...
  • Page 159 Chapter 12 Bandwidth Control Table 65 Advanced Applicat ion > Bandwidt h Cont rol ( cont inued) LABEL DESCRIPTION Port This field displays t he port num ber. I n st acking m ode, t he first box field is t he slot I D and t he ( St andalone or second field is t he port num ber.
  • Page 160: Broadcast Storm Control

    HAPTER Broadcast Storm Control This chapt er int roduces and shows you how t o configure t he broadcast st orm cont rol feat ure. 13.1 Broadcast Storm Control Setup Broadcast st orm cont rol lim it s t he num ber of broadcast , m ult icast and dest inat ion lookup failure ( DLF) packet s t he Swit ch receives per second on t he port s.
  • Page 161 Chapter 13 Broadcast Storm Control Figure 108 Advanced Applicat ion > Broadcast St orm Cont rol ( St acking m ode) The following t able describes t he labels in t his screen. Table 66 Advanced Applicat ion > Broadcast St orm Cont rol LABEL DESCRIPTION Act ive...
  • Page 162: Mirroring

    HAPTER Mirroring This chapt er discusses port m irroring set up screens. 14.1 Port Mirroring Port m irroring allows you t o copy a t raffic flow t o a m onit or port ( t he port you copy t he t raffic t o) in order t hat you can exam ine t he t raffic from t he m onit or port wit hout int erference.
  • Page 163 Chapter 14 Mirroring Single-Destination RMirror I f t he m irrored t raffic is forwarded t o one single dest inat ion swit ch, you can disable t he reflect or port . The Swit ch adds RMirror VLAN t ag and forwards m irrored t raffic from t he m irroring port t o t he connect ed port direct ly.
  • Page 164 Chapter 14 Mirroring Port Rules in Port Mirroring The following t able shows t he rule for a port in rem ot e port m irroring. For exam ple, a port on t he source device can be a m irroring port in bot h RMirror VLAN 1 and RMirror VLAN 2. But when t he port is t he source device’s m irroring port in RMirror VLAN 1, it cannot be t he reflect or port or m onit or port in anot her RMirror VLAN.
  • Page 165: Local Port Mirroring

    Chapter 14 Mirroring 14.1.1 Local Port Mirroring Click Adva nce d Applica t ion > M ir r or in g in t he navigat ion panel t o display t he M ir r or in g screen. Use t his screen t o select a m onit or port and specify t he t raffic flow t o be copied t o t he m onit or port . Figure 109 Advanced Applicat ion >...
  • Page 166 Chapter 14 Mirroring Figure 110 Advanced Applicat ion > Mirroring ( St acking m ode) The following t able describes t he labels in t his screen. Table 69 Advanced Applicat ion > Mirroring LABEL DESCRIPTION Act ive Select t his check box t o act ivat e port m irroring on t he Swit ch. Clear t his check box t o disable t he feat ure.
  • Page 167: Remote Port Mirroring

    Chapter 14 Mirroring Table 69 Advanced Applicat ion > Mirroring ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
  • Page 168: Source

    Chapter 14 Mirroring 14.1.3 Source Use t his screen t o configure t he reflect or port and specify t he t raffic flow t o be copied t o t he m onit or port when t he Swit ch is t he source device in rem ot e port m irroring. Click t he Sour ce link in t he RM ir r or screen.
  • Page 169 Chapter 14 Mirroring Figure 113 Advanced Applicat ion > Mirroring > RMirror > Source ( St acking m ode) The following t able describes t he labels in t his screen. Table 71 Advanced Applicat ion > Mirroring > RMirror > Source LABEL DESCRIPTION RMirror VLAN I D...
  • Page 170: Destination

    Chapter 14 Mirroring Table 71 Advanced Applicat ion > Mirroring > RMirror > Source ( cont inued) LABEL DESCRIPTION Set t ings in t his row apply t o all port s. Use t his row only if you want t o m ake som e set t ings t he sam e for all port s. Use t his row first t o set t he com m on set t ings and t hen m ake adj ust m ent s on a port- by- port basis.
  • Page 171: Connected Port

    Chapter 14 Mirroring The following t able describes t he labels in t his screen. Table 72 Advanced Applicat ion > Mirroring > RMirror > Dest inat ion LABEL DESCRIPTION RMirror VLAN I D Select t he RMirror VLAN over which t he m irrored t raffic is forwarded. Monit or Port Specify t he port t o which you copy t he t raffic in order t o exam ine it in m ore det ail wit hout int erfering wit h t he t raffic flow on t he original port ( s) .
  • Page 172 Chapter 14 Mirroring Figure 115 Advanced Applicat ion > Mirroring > RMirror > Connect ed Port ( St andalone m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 173 Chapter 14 Mirroring Figure 116 Advanced Applicat ion > Mirroring > RMirror > Connect ed Port ( St acking m ode) The following t able describes t he labels in t his screen. Table 73 Advanced Applicat ion > Mirroring > RMirror > Connect ed Port LABEL DESCRIPTION RMirror VLAN I D...
  • Page 174 Chapter 14 Mirroring Table 73 Advanced Applicat ion > Mirroring > RMirror > Connect ed Port ( cont inued) LABEL DESCRIPTION Connect ed Port When t he Swit ch is a source device in rem ot e port m irroring, select t his opt ion t o have t he port help forward m irrored t raffic t o t he connect ed port of t he int erm ediat e or dest inat ion device in t he sam e RMirror VLAN.
  • Page 175: Link Aggregation

    HAPTER Link Aggregation This chapt er shows you how t o logically aggregat e physical links t o form one logical, higher- bandwidt h link. 15.1 Link Aggregation Overview Link aggregat ion ( t runking) is t he grouping of physical port s int o one logical higher- capacit y link. You m ay want t o t runk port s if for exam ple, it is cheaper t o use m ult iple lower- speed links t han t o under- ut ilize a high- speed, but m ore cost ly, single- port link.
  • Page 176: Link Aggregation Id

    Chapter 15 Link Aggregation Configure t runk groups or LACP before you connect t he Et hernet swit ch t o avoid causing net work t opology loops. 15.2.1 Link Aggregation ID LACP aggregat ion I D consist s of t he following inform at ion. Port Priorit y and Port Num ber are 0 as it is t he aggregat or I D for t he t runk group, not t he individual port .
  • Page 177: Link Aggregation Setting

    Chapter 15 Link Aggregation The following t able describes t he labels in t his screen. Table 76 Advanced Applicat ion > Link Aggregat ion St at us LABEL DESCRIPTION Group I D This field displays t he group I D t o ident ify a t runk group, t hat is, one logical link cont aining m ult iple port s.
  • Page 178 Chapter 15 Link Aggregation Figure 118 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing ( St andalone m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 179 Chapter 15 Link Aggregation Figure 119 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing ( St acking m ode) The following t able describes t he labels in t his screen. Table 77 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing LABEL DESCRIPTION Link...
  • Page 180: Link Aggregation Control Protocol

    Chapter 15 Link Aggregation Table 77 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing ( cont inued) LABEL DESCRIPTION Act ive Select t his opt ion t o act ivat e a t runk group. Crit eria Select t he out going t raffic dist ribut ion t ype.
  • Page 181 Chapter 15 Link Aggregation Figure 120 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing > LACP ( St andalone m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 182 Chapter 15 Link Aggregation Figure 121 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing > LACP ( St acking m ode) The following t able describes t he labels in t his screen. Table 78 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing > LACP LABEL DESCRIPTION Link...
  • Page 183: Static Trunking Example

    Chapter 15 Link Aggregation Table 78 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing > LACP ( cont inued) LABEL DESCRIPTION Slot ( St acking This field appears only in st acking m ode. Click t he drop- down list t o choose t he slot num ber m ode) of t he Swit ch in a st ack.
  • Page 184 Chapter 15 Link Aggregation Figure 123 Trunking Exam ple - Configurat ion Screen EXAMPLE Your t runk group 1 ( T1 ) configurat ion is now com plet e. GS3700/XGS3700 Series User’s Guide...
  • Page 185: Port Authentication

    HAPTER Port Authentication This chapt er describes t he I EEE 802.1x and MAC aut hent icat ion m et hods. 16.1 Port Authentication Overview Port aut hent icat ion is a way t o validat e access t o port s on t he Swit ch t o client s based on an ext ernal server ( aut hent icat ion server) .
  • Page 186: Mac Authentication

    Chapter 16 Port Authentication Figure 124 I EEE 802.1x Aut hent icat ion Process New Connection Identity Request Login Credentials Authentication Request Access Challenge Challenge Request Challenge Response Access Request Authentication Reply Session Granted/Denied 16.1.2 MAC Authentication MAC aut hent icat ion works in a very sim ilar way t o I EEE 802.1x aut hent icat ion. The m ain difference is t hat t he Swit ch does not prom pt t he client for login credent ials.
  • Page 187: Port Authentication Configuration

    Chapter 16 Port Authentication Figure 125 MAC Aut hent icat ion Process New Connection Authentication Request Authentication Reply Session Granted/Denied 16.2 Port Authentication Configuration To enable port aut hent icat ion, first act ivat e t he port aut hent icat ion m et hod( s) you want t o use ( bot h on t he Swit ch and t he port ( s) ) , t hen configure t he RADI US server set t ings in t he AAA >...
  • Page 188 Chapter 16 Port Authentication Figure 127 Advanced Applicat ion > Port Aut hent icat ion > 802.1x ( St andalone m ode) Figure 128 Advanced Applicat ion > Port Aut hent icat ion > 802.1x ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 189: Guest Vlan

    Chapter 16 Port Authentication The following t able describes t he labels in t his screen. Table 79 Advanced Applicat ion > Port Aut hent icat ion > 802.1x LABEL DESCRIPTION Act ive Select t his check box t o perm it 802.1x aut hent icat ion on t he Swit ch. Note: You must first enable 802.1x authentication on the Switch before configuring it on each port.
  • Page 190 Chapter 16 Port Authentication Figure 129 Guest VLAN Exam ple VLAN 100 VLAN 102 Internet Use t his screen t o enable and assign a guest VLAN t o a port . I n t he Por t Aut he nt ica t ion > 8 0 2 .1 x screen click Gu e st Vla n t o display t he configurat ion screen as shown.
  • Page 191 Chapter 16 Port Authentication Figure 131 Advanced Applicat ion > Port Aut hent icat ion > 802.1x > Guest VLAN ( St acking m ode) The following t able describes t he labels in t his screen. Table 80 Advanced Applicat ion > Port Aut hent icat ion > 802.1x > Guest VLAN LABEL DESCRIPTION Slot ( St acking...
  • Page 192: Activate Mac Authentication

    Chapter 16 Port Authentication Table 80 Advanced Applicat ion > Port Aut hent icat ion > 802.1x > Guest VLAN ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non-volat ile m em ory when you are done configuring.
  • Page 193 Chapter 16 Port Authentication Figure 133 Advanced Applicat ion > Port Aut hent icat ion > MAC Aut hent icat ion ( St acking m ode) The following t able describes t he labels in t his screen. Table 81 Advanced Applicat ion > Port Aut hent icat ion > MAC Aut hent icat ion LABEL DESCRIPTION Act ive...
  • Page 194 Chapter 16 Port Authentication Table 81 Advanced Applicat ion > Port Aut hent icat ion > MAC Aut hent icat ion ( cont inued) LABEL DESCRIPTION Use t his row t o m ake t he set t ing t he sam e for all port s. Use t his row first and t hen m ake adj ust m ent s on a port- by- port basis.
  • Page 195: Port Security

    HAPTER Port Security This chapt er shows you how t o set up port securit y. 17.1 About Port Security Port securit y allows only packet s wit h dynam ically learned MAC addresses and/ or configured st at ic MAC addresses t o pass t hrough a port on t he Swit ch.
  • Page 196 Chapter 17 Port Security Figure 134 Advanced Applicat ion > Port Securit y ( St andalone m ode) Figure 135 Advanced Applicat ion > Port Securit y ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 197: Vlan Mac Address Limit

    Chapter 17 Port Security The following t able describes t he labels in t his screen. Table 82 Advanced Applicat ion > Port Securit y LABEL DESCRIPTION Port List Ent er t he num ber of t he port ( s) ( separat ed by a com m a) on which you want t o enable port securit y and disable MAC address learning.
  • Page 198 Chapter 17 Port Security Figure 136 Advanced Applicat ion > Port Securit y > VLAN MAC Address Lim it The following t able describes t he labels in t his screen. Table 83 Advanced Applicat ion > Port Securit y > VLAN MAC Address Lim it LABEL DESCRIPTION Act ive...
  • Page 199: Time Range

    HAPTER Time Range This chapt er shows you how t o set up a t im e range for t im e- orient ed feat ures on t he Swit ch. 18.1 About Time Range You can set a t im e range for t im e- orient ed feat ures such as Classifier ACL ( Access Cont rol List ) rule which cat egorizes dat a packet s int o different net work t raffic flow.
  • Page 200 Chapter 18 Time Range The following t able describes t he labels in t his screen. Table 84 Advanced Applicat ion > Tim e Range LABEL DESCRIPTION Nam e Type a nam e for t his t im e range rule. Type Select a t im e range t ype.
  • Page 201: Classifier

    HAPTER Classifier This chapt er int roduces and shows you how t o configure t he packet classifier on t he Swit ch. 19.1 About the Classifier and QoS Qualit y of Service ( QoS) refers t o bot h a net work's abilit y t o deliver dat a wit h m inim um delay, and t he net working m et hods used t o cont rol t he use of bandwidt h.
  • Page 202: Classifier Configuration

    Chapter 19 Classifier Figure 138 Advanced Applicat ion > Classifier > Classifier St at us The following t able describes t he labels in t his screen. Table 85 Advanced Applicat ion > Classifier > Classifier St at us LABEL DESCRIPTION I ndex This field displays t he index num ber of t he Classifier rule.
  • Page 203 Chapter 19 Classifier Figure 139 Advanced Applicat ion > Classifier > Classifier Configurat ion The following t able describes t he labels in t his screen. Table 86 Advanced Applicat ion > Classifier > Classifier Configurat ion LABEL DESCRIPTION Act ive Select t his opt ion t o enable t his rule.
  • Page 204 Chapter 19 Classifier Table 86 Advanced Applicat ion > Classifier > Classifier Configurat ion ( cont inued) LABEL DESCRIPTION Weight Ent er a num ber bet ween 0 and 65535 t o specify t he rule’s weight . When t he m at ch order is in m anual m ode in t he Cla ssifie r Globa l Se t t in g screen, a higher weight m eans a higher priorit y.
  • Page 205 Chapter 19 Classifier Table 86 Advanced Applicat ion > Classifier > Classifier Configurat ion ( cont inued) LABEL DESCRIPTION MAC Address Select An y t o apply t he rule t o all MAC addresses. To specify a source, select M AC/ M a sk t o ent er t he source MAC address of t he packet in valid MAC address form at ( six hexadecim al charact er pairs) and t ype t he m ask for t he specified MAC address t o det erm ine which bit s a packet ’s MAC address should m at ch.
  • Page 206: Viewing And Editing Classifier Configuration

    Chapter 19 Classifier Table 86 Advanced Applicat ion > Classifier > Classifier Configurat ion ( cont inued) LABEL DESCRIPTION Click t his t o creat e a new ent ry or t o updat e an exist ing one. This saves your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
  • Page 207: Classifier Global Setting Configuration

    Chapter 19 Classifier Table 88 Com m on Et hernet Types and Prot ocol Num ber ETHERNET TYPE PROTOCOL NUMBER X.25 Level 3 0805 XNS Com pat 0807 Banyan Syst em s 0BAD BBN Sim net 5208 I BM SNA 80D5 AppleTalk AARP 80F3...
  • Page 208: Classifier Example

    Chapter 19 Classifier Table 90 Advanced Applicat ion > Classifier > Classifier Configurat ion > Classifier Global Set t ing LABEL DESCRIPTION Act ive Select t his t o allow t he Swit ch t o creat e a log when packet s m at ch a classifier rule during a defined t im e int erval.
  • Page 209 Chapter 19 Classifier Figure 142 Classifier: Exam ple EXAMPLE Aft er you have configured a classifier, you can configure a policy t o define act ion( s) on t he classified t raffic flow. See Chapt er 20 on page 210 for inform at ion on configuring a policy rule.
  • Page 210: Policy Rule

    HAPTER Policy Rule This chapt er shows you how t o configure policy rules. 20.1 Policy Rules Overview A classifier dist inguishes t raffic int o flows based on t he configured crit eria ( refer t o Chapt er 19 on page 201 for m ore inform at ion) .
  • Page 211 Chapter 20 Policy Rule Click Adva nce d Applica t ion > Policy Ru le in t he navigat ion panel t o display t he screen as shown. Figure 143 Advanced Applicat ion > Policy Rule The following t able describes t he labels in t his screen. Table 91 Advanced Applicat ion >...
  • Page 212 Chapter 20 Policy Rule Table 91 Advanced Applicat ion > Policy Rule ( cont inued) LABEL DESCRIPTION Param et ers Set t he fields below for t his policy. You only have t o set t he field( s) t hat is relat ed t o t he act ion( s) you configure in t he Act ion field.
  • Page 213: Policy Example

    Chapter 20 Policy Rule Table 91 Advanced Applicat ion > Policy Rule ( cont inued) LABEL DESCRIPTION Met ering Select En a ble t o act ivat e bandwidt h lim it at ion on t he t raffic flow( s) t hen set t he act ions t o be t aken on out- of- profile packet s.
  • Page 214 Chapter 20 Policy Rule Figure 144 Policy Exam ple EXAMPLE GS3700/XGS3700 Series User’s Guide...
  • Page 215: Queuing Method

    HAPTER Queuing Method This chapt er int roduces t he queuing m et hods support ed. 21.1 Queuing Method Overview Queuing is used t o help solve perform ance degradat ion when t here is net work congest ion. Use t he Qu e u in g M e t hod screen t o configure queuing algorit hm s for out going t raffic.
  • Page 216: Weighted Round Robin Scheduling (Wrr)

    Chapter 21 Queuing Method 21.1.3 Weighted Round Robin Scheduling (WRR) Round Robin Scheduling services queues on a rot at ing basis and is act ivat ed only when a port has m ore t raffic t han it can handle. A queue is given an am ount of bandwidt h irrespect ive of t he incom ing t raffic on t hat port .
  • Page 217 Chapter 21 Queuing Method Figure 146 Advanced Applicat ion > Queuing Met hod ( St acking m ode) The following t able describes t he labels in t his screen. Table 92 Advanced Applicat ion > Queuing Met hod LABEL DESCRIPTION Slot This field appears only in st acking m ode.
  • Page 218 Chapter 21 Queuing Method Table 92 Advanced Applicat ion > Queuing Met hod ( cont inued) LABEL DESCRIPTION Hybrid- This field is applicable only when you select W FQ or W RR. Select a queue ( Q0 t o Q7 ) t o have t he Swit ch use SPQ t o service t he subsequent queue( s) aft er Lowest- and including t he specified queue for t he 1000Base-T, 1000Base-X and 10 Gigabit Et hernet Queue...
  • Page 219: Vlan Stacking

    HAPTER VLAN Stacking This chapt er shows you how t o configure VLAN st acking on your Swit ch. See t he chapt er on VLANs for m ore background inform at ion on Virt ual LAN 22.1 VLAN Stacking Overview A service provider can use VLAN st acking t o allow it t o dist inguish m ult iple cust om ers VLANs, even t hose wit h t he sam e ( cust om er- assigned) VLAN I D, wit hin it s net work.
  • Page 220: Vlan Stacking Port Roles

    Chapter 22 VLAN Stacking Figure 147 VLAN St acking Exam ple 22.2 VLAN Stacking Port Roles Each port can have t hree VLAN st acking “ roles”, N or m a l, Acce ss Por t and Tun n e l Por t ( t he lat t er is for Gigabit port s only) .
  • Page 221: Frame Format

    Chapter 22 VLAN Stacking Type is a st andard Et hernet t ype code ident ifying t he fram e and indicat es t hat whet her t he fram e carries I EEE 802.1Q t ag inform at ion. SP TPI D ( Service Provider Tag Prot ocol I dent ifier) is t he service provider VLAN st acking t ag t ype.
  • Page 222 Chapter 22 VLAN Stacking Figure 148 Advanced Applicat ion > VLAN St acking ( St andalone m ode) Figure 149 Advanced Applicat ion > VLAN St acking ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 223: Port-Based Q-In-Q

    Chapter 22 VLAN Stacking The following t able describes t he labels in t his screen. Table 96 Advanced Applicat ion > VLAN St acking LABEL DESCRIPTION Act ive Select t his checkbox t o enable VLAN st acking on t he Swit ch. Slot This field appears only in st acking m ode.
  • Page 224 Chapter 22 VLAN Stacking Figure 150 Advanced Applicat ion > VLAN St acking > Port- based QinQ ( St andalone m ode) Figure 151 Advanced Applicat ion > VLAN St acking > Port- based QinQ ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 225: Selective Q-In-Q

    Chapter 22 VLAN Stacking The following t able describes t he labels in t his screen. Table 97 Advanced Applicat ion > VLAN St acking > Port - based QinQ LABEL DESCRIPTION Slot This field appears only in st acking m ode. Click t he drop- down list t o choose t he slot num ber of ( St acking t he Swit ch in a st ack.
  • Page 226 Chapter 22 VLAN Stacking The following t able describes t he labels in t his screen. Table 98 Advanced Applicat ion > VLAN St acking > Select ive QinQ LABEL DESCRIPTION Act ive Check t his box t o act ivat e t his rule. Nam e Ent er a descript ive nam e ( up t o 32 print able ASCI I charact ers) for ident ificat ion purposes.
  • Page 227: Multicast

    HAPTER Multicast This chapt er shows you how t o configure various m ult icast feat ures. 23.1 Multicast Overview Tradit ionally, I P packet s are t ransm it t ed in one of eit her t wo ways - Unicast ( 1 sender t o 1 recipient ) or Broadcast ( 1 sender t o everybody on t he net work) .
  • Page 228: Igmp Snooping

    Chapter 23 Multicast 23.1.3 IGMP Snooping The Swit ch can passively snoop on I GMP packet s t ransferred bet ween I P m ult icast rout ers/ swit ches and I P m ult icast host s t o learn t he I P m ult icast group m em bership. I t checks I GMP packet s passing t hrough it , picks out t he group regist rat ion inform at ion, and configures m ult icast ing accordingly.
  • Page 229: Mld Messages

    Chapter 23 Multicast one query from a rout er ( X) or MLD Done or Report m essage from any upst ream port , it will be broadcast t o all connect ed upst ream port s. Query Report Done 23.1.6 MLD Messages A m ult icast rout er or swit ch periodically sends general queries t o MLD host s t o updat e t he m ult icast forwarding t able.
  • Page 230: Ipv4 Multicast Status

    Chapter 23 Multicast The following t able describes t he labels in t his screen. Table 99 Advanced Applicat ion > Mult icast Set up LABEL DESCRIPTION I Pv4 Mult icast Click t he link t o open screens where you can configure I GMP snooping and I GMP filt ering for I Pv4.
  • Page 231 Chapter 23 Multicast Figure 155 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping ( St andalone m ode) Figure 156 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 232 Chapter 23 Multicast The following t able describes t he labels in t his screen. Table 101 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping LABEL DESCRIPTION I GMP Snooping Use t hese set t ings t o configure I GMP snooping. Act ive Select Act ive t o enable I GMP Snooping t o forward group m ult icast t raffic only t o port s t hat are m em bers of t hat group.
  • Page 233 Chapter 23 Multicast Table 101 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping ( cont inued) LABEL DESCRIPTION Norm al Leave Ent er an I GMP norm al leave t im eout value ( from 200 t o 6,348,800) in m iliseconds. Select t his opt ion t o have t he Swit ch use t his t im eout t o updat e t he forwarding t able for t he port .
  • Page 234: Igmp Snooping Vlan

    Chapter 23 Multicast 23.3.2 IGMP Snooping VLAN Click Adva nce d Applica t ion > M ult ica st > I Pv4 M ult ica st in t he navigat ion panel. Click t he I GM P Sn ooping link and t hen t he I GM P Snoopin g VLAN link t o display t he screen as shown. See Sect ion 23.1.4 on page 228 for m ore inform at ion on I GMP Snooping VLAN.
  • Page 235: Igmp Filtering Profile

    Chapter 23 Multicast Table 102 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping > I GMP Snooping VLAN ( cont inued) LABEL DESCRIPTION Click t his t o creat e a new ent ry or t o updat e an exist ing one. This saves your changes t o t he Swit ch’s run- t im e m em ory.
  • Page 236: Ipv6 Multicast Status

    Chapter 23 Multicast The following t able describes t he labels in t his screen. Table 103 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping > I GMP Filt ering Profile LABEL DESCRIPTION Profile Nam e Ent er a descript ive nam e for t he profile for ident ificat ion purposes.
  • Page 237: Mld Snooping-Proxy

    Chapter 23 Multicast The following t able describes t he labels in t his screen. Table 104 Advanced Applicat ion > Mult icast > I Pv6 Mult icast LABEL DESCRIPTION I ndex This is t he index num ber of t he ent ry. VI D This field displays t he m ult icast VLAN I D.
  • Page 238 Chapter 23 Multicast Figure 161 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > VLAN The following t able describes t he labels in t his screen. Table 106 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > VLAN LABEL DESCRIPTION VI D...
  • Page 239: Mld Snooping-Proxy Vlan Port Role Setting

    Chapter 23 Multicast Table 106 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > VLAN LABEL DESCRIPTION Last Mem ber Ent er t he am ount of t im e ( in m iliseconds) bet ween t he MLD group- specific queries sent Query I nt erval by an upst ream port when an MLD Done m essage is received.
  • Page 240 Chapter 23 Multicast Figure 162 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > VLAN > Port Role Set t ing ( St andalone m ode) Figure 163 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > VLAN > Port Role Set t ing ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 241: Mld Snooping-Proxy Filtering

    Chapter 23 Multicast The following t able describes t he labels in t his screen. Table 107 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > VLAN > Port Role Set t ing LABEL DESCRIPTION MLD Snooping-...
  • Page 242 Chapter 23 Multicast Figure 164 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Filt ering ( St andalone m ode) Figure 165 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Filt ering ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 243: Mld Snooping-Proxy Filtering Profile

    Chapter 23 Multicast The following t able describes t he labels in t his screen. Table 108 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Filt ering LABEL DESCRIPTION Act ive Select t his opt ion t o enable MLD filt ering on t he Swit ch. Slot ( St acking This field appears only in st acking m ode.
  • Page 244: Mvr Overview

    Chapter 23 Multicast The following t able describes t he labels in t his screen. Table 109 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Filt ering > Filt ering Profile LABEL DESCRIPTION Profile Nam e Ent er a descript ive nam e for t he profile for ident ificat ion purposes.
  • Page 245: Types Of Mvr Ports

    Chapter 23 Multicast Figure 167 MVR Net work Exam ple VLAN 1 Multicast VLAN VLAN 2 VLAN 3 23.5.1 Types of MVR Ports I n MVR, a source port is a port on t he Swit ch t hat can send and receive m ult icast t raffic in a m ult icast VLAN while a receiver port can only receive m ult icast t raffic.
  • Page 246: General Mvr Configuration

    Chapter 23 Multicast Figure 168 MVR Mult icast Television Exam ple VLAN 1 Multicast VLAN 23.6 General MVR Configuration Use t he M VR screen t o creat e m ult icast VLANs and select t he receiver port ( s) and a source port for each m ult icast VLAN.
  • Page 247 Chapter 23 Multicast Figure 170 Advanced Applicat ion > Mult icast > MVR ( St acking m ode) The following t able describes t he relat ed labels in t his screen. Table 110 Advanced Applicat ion > Mult icast > MVR LABEL DESCRIPTION Act ive...
  • Page 248: Mvr Group Configuration

    Chapter 23 Multicast Table 110 Advanced Applicat ion > Mult icast > MVR ( cont inued) LABEL DESCRIPTION Set t ings in t his row apply t o all port s. Use t his row only if you want t o m ake som e set t ings t he sam e for all port s. Use t his row first t o set t he com m on set t ings and t hen m ake adj ust m ent s on a port- by- port basis.
  • Page 249 Chapter 23 Multicast Figure 171 Advanced Applicat ion > Mult icast > MVR > Group Configurat ion The following t able describes t he labels in t his screen. Table 111 Advanced Applicat ion > Mult icast > MVR > Group Configurat ion LABEL DESCRIPTION Mult icast VLAN...
  • Page 250: Mvr Configuration Example

    Chapter 23 Multicast Table 111 Advanced Applicat ion > Mult icast > MVR > Group Configurat ion ( cont inued) LABEL DESCRIPTION Delet e Select t he ent ry( ies) t hat you want t o rem ove, t hen click t he D e le t e but t on t o rem ove t he select ed ent ry( ies) from t he t able.
  • Page 251 Chapter 23 Multicast Figure 173 MVR Configurat ion Exam ple EXAMPLE To set t he Swit ch t o forward t he m ult icast group t raffic t o t he subscribers, configure m ult icast group set t ings in t he Gr ou p Con figu r a t ion screen. The following figure shows an exam ple where t wo I Pv4 m ult icast groups ( N e w s and M ovie ) are configured for t he m ult icast VLAN 200.
  • Page 252 Chapter 23 Multicast Figure 175 MVR Group Configurat ion Exam ple EXAMPLE GS3700/XGS3700 Series User’s Guide...
  • Page 253: Authentication, Authorization And Accounting (Aaa)

    HAPTER This chapt er describes how t o configure aut hent icat ion, aut horizat ion and account ing set t ings on t he Swit ch. 24.1 Authentication, Authorization and Accounting (AAA) Aut hent icat ion is t he process of det erm ining who a user is and validat ing access t o t he Swit ch. The Swit ch can aut hent icat e users who t ry t o log in based on user account s configured on t he Swit ch it self.
  • Page 254: Radius And Tacacs

    Chapter 24 AAA 24.1.2 RADIUS and TACACS+ RADI US and TACACS+ are securit y prot ocols used t o aut hent icat e users by m eans of an ext ernal server inst ead of ( or in addit ion t o) an int ernal device user dat abase t hat is lim it ed t o t he m em ory capacit y of t he device.
  • Page 255 Chapter 24 AAA Figure 178 Advanced Applicat ion > AAA > RADI US Server Set up The following t able describes t he labels in t his screen. Table 113 Advanced Applicat ion > AAA > RADI US Server Set up LABEL DESCRIPTION Aut hent icat ion...
  • Page 256: Tacacs+ Server Setup

    Chapter 24 AAA Table 113 Advanced Applicat ion > AAA > RADI US Server Set up ( cont inued) LABEL DESCRIPTION I P Address Ent er t he I P address of an ext ernal RADI US account ing server in dot t ed decim al not at ion. UDP Port The default port of a RADI US account ing server for account ing is 1 8 1 3 .
  • Page 257: Aaa Setup

    Chapter 24 AAA The following t able describes t he labels in t his screen. Table 114 Advanced Applicat ion > AAA > TACACS+ Server Set up LABEL DESCRIPTION Aut hent icat ion Use t his sect ion t o configure your TACACS+ aut hent icat ion set t ings. Server Mode This field is only valid if you configure m ult iple TACACS+ servers.
  • Page 258 Chapter 24 AAA Figure 180 Advanced Applicat ion > AAA > AAA Set up The following t able describes t he labels in t his screen. Table 115 Advanced Applicat ion > AAA > AAA Set up LABEL DESCRIPTION Aut hent icat ion Use t his sect ion t o specify t he m et hods used t o aut hent icat e users accessing t he Swit ch.
  • Page 259 Chapter 24 AAA Table 115 Advanced Applicat ion > AAA > AAA Set up ( cont inued) LABEL DESCRIPTION Login These fields specify which dat abase t he Sw it ch should use ( first , second and t hird) t o aut hent icat e adm inist rat or account s ( users for Swit ch m anagem ent ) .
  • Page 260: Vendor Specific Attribute

    Chapter 24 AAA Table 115 Advanced Applicat ion > AAA > AAA Set up ( cont inued) LABEL DESCRIPTION Mode The Swit ch support s t wo m odes of recording login event s. Select : • st a r t - st op - t o have t he Swit ch send inform at ion t o t he account ing server when a user begins a session, during a user ’s session ( if it last s past t he Upda t e Pe r iod) , and when a user ends a session.
  • Page 261: Tunnel Protocol Attribute

    Chapter 24 AAA The following t able describes t he VSAs support ed on t he Swit ch. Not e t hat t hese at t ribut es only work when you enable aut horizat ion ( see Sect ion 24.2.3 on page 257) .
  • Page 262: Attributes Used For Authentication

    Chapter 24 AAA Refer t o RFC 2865 for m ore inform at ion about RADI US at t ribut es used for aut hent icat ion. Refer t o RFC 2866 and RFC 2869 for RADI US at t ribut es used for account ing. This sect ion list s t he at t ribut es used by aut hent icat ion and account ing funct ions on t he Swit ch.
  • Page 263 Chapter 24 AAA 24.3.2.1 Attributes Used for Accounting System Events NAS- I P- Address NAS- I dent ifier Acct- St at us-Type Acct- Session- I D - The form at of Acct- Session- I d is da t e + t im e + 8 - digit se qu e n t ia l n um be r, for exam ple, 2007041917210300000001.
  • Page 264 Chapter 24 AAA 24.3.2.3 Attributes Used for Accounting IEEE 802.1x Events The at t ribut es are list ed in t he following t able along wit h t he t im e of t he session t hey are sent : Table 120 RADI US At t ribut es - Exec Event s via Console ATTRIBUTE START...
  • Page 265: Ip Source Guard

    HAPTER IP Source Guard 25.1 IP Source Guard Overview I P source guard uses a binding t able t o dist inguish bet ween aut horized and unaut horized DHCP and ARP packet s in your net work. A binding cont ains t hese key at t ribut es: •...
  • Page 266: What You Need To Know

    Chapter 25 IP Source Guard • Use t he D H CP Sn ooping VLAN Con figu r e screen ( Sect ion 25.6.2 on page 277) t o enable DHCP snooping on each VLAN and t o specify whet her or not t he Swit ch adds DHCP relay agent opt ion 82 inform at ion t o DHCP request s t hat t he Swit ch relays t o a DHCP server for each VLAN.
  • Page 267: Ip Source Guard

    Chapter 25 IP Source Guard • DHCP snooping. Use t his t o filt er unaut horized DHCP packet s on t he net work and t o build t he binding t able dynam ically. • ARP inspect ion. Use t his t o filt er unaut horized AR P packet s on t he net work. I f you want t o use dynam ic bindings t o filt er unaut horized ARP packet s ( t ypical im plem ent at ion) , you have t o enable DHCP snooping before you enable ARP inspect ion.
  • Page 268: Ipv4 Source Guard Setup

    Chapter 25 IP Source Guard Table 121 I P Source Guard ( cont inued) LABEL DESCRIPTION I Pv6 Source Guard Click t he link t o open a screen where you can apply t he configured I Pv6 source guard Port Set up policy t o a port .
  • Page 269: Ipv4 Source Guard Static Binding

    Chapter 25 IP Source Guard 25.4 IPv4 Source Guard Static Binding Use t his screen t o m anage st at ic bindings for DHCP snooping and ARP inspect ion. St at ic bindings are uniquely ident ified by t he MAC address and VLAN I D. Each MAC address and VLAN I D can only be in one st at ic binding.
  • Page 270 Chapter 25 IP Source Guard The following t able describes t he labels in t his screen. Table 123 I P Source Guard > I Pv4 Source Guard Set up > St at ic Binding LABEL DESCRIPTION ARP Freeze ARP Freeze allows you t o aut om at ically creat e st at ic bindings from t he current ARP ent ries ( eit her dynam ically learned or st at ic ARP ent ries) unt il t he Swit ch’s binding t able is full.
  • Page 271: Dhcp Snooping

    Chapter 25 IP Source Guard Table 123 I P Source Guard > I Pv4 Source Guard Set up > St at ic Binding ( cont inued) LABEL DESCRIPTION Select an ent ry’s check box t o select a specific ent ry. Ot herwise, select t he check box in t he t able heading row t o select all ent ries.
  • Page 272 Chapter 25 IP Source Guard The following t able describes t he labels in t his screen. Table 124 I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping LABEL DESCRIPTION Dat abase St at us This sect ion displays t he current set t ings for t he DHCP snooping dat abase.
  • Page 273: Dhcp Snooping Configure

    Chapter 25 IP Source Guard Table 124 I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping ( cont inued) LABEL DESCRIPTION Failed writ es This field displays t he num ber of t im es t he Swit ch was unable t o updat e t he bindings in t he DHCP snooping dat abase.
  • Page 274 Chapter 25 IP Source Guard Figure 187 I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure The following t able describes t he labels in t his screen. Table 125 I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure LABEL DESCRIPTION Act ive...
  • Page 275: Dhcp Snooping Port Configure

    Chapter 25 IP Source Guard Table 125 I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure ( cont inued) LABEL DESCRIPTION Renew DHCP Ent er t he locat ion of a DHCP snooping dat abase, and click Re n e w if you want t he Snooping URL Swit ch t o load it .
  • Page 276 Chapter 25 IP Source Guard Figure 188 I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure> Port ( St andalone m ode) Figure 189 I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure> Port ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 277: Dhcp Snooping Vlan Configure

    Chapter 25 IP Source Guard The following t able describes t he labels in t his screen. Table 126 I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure > Port LABEL DESCRIPTION Slot ( St acking This field appears only in st acking m ode.
  • Page 278: Dhcp Snooping Vlan Port Configure

    Chapter 25 IP Source Guard The following t able describes t he labels in t his screen. Table 127 I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure > VLAN LABEL DESCRIPTION Show VLAN Use t his sect ion t o specify t he VLANs you want t o m anage in t he sect ion below.
  • Page 279: Arp Inspection Status

    Chapter 25 IP Source Guard The following t able describes t he labels in t his screen. Table 128 I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure > VLAN > Port LABEL DESCRIPTION VI D Ent er t he I D num ber of t he VLAN you want t o configure here.
  • Page 280: Arp Inspection Vlan Status

    Chapter 25 IP Source Guard Figure 192 I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion St at us The following t able describes t he labels in t his screen. Table 129 I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion St at us LABEL DESCRIPTION Tot al num ber of...
  • Page 281: Arp Inspection Log Status

    Chapter 25 IP Source Guard Figure 193 I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > VLAN St at us The following t able describes t he labels in t his screen. Table 130 I P Source Guard >...
  • Page 282: Arp Inspection Configure

    Chapter 25 IP Source Guard The following t able describes t he labels in t his screen. Table 131 I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > Log St at us LABEL DESCRIPTION Clearing log st at us t able...
  • Page 283 Chapter 25 IP Source Guard Figure 195 I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > Configure The following t able describes t he labels in t his screen. Table 132 I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > Configure LABEL DESCRIPTION Act ive...
  • Page 284: Arp Inspection Port Configure

    Chapter 25 IP Source Guard Table 132 I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > Configure ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
  • Page 285 Chapter 25 IP Source Guard Figure 197 I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > Configure > Port ( St acking m ode) The following t able describes t he labels in t his screen. Table 133 I P Source Guard >...
  • Page 286: Arp Inspection Vlan Configure

    Chapter 25 IP Source Guard 25.8.2 ARP Inspection VLAN Configure Use t his screen t o enable ARP inspect ion on each VLAN and t o specify when t he Swit ch generat es log m essages for receiving ARP packet s from each VLAN. To open t his screen, click Adva nce d Applica t ion >...
  • Page 287: Ipv6 Source Guard Overview

    Chapter 25 IP Source Guard 25.9 IPv6 Source Guard Overview The purpose of I Pv6 source guard is t o dist inguish bet ween aut horized and unaut horized users by using a binding t able t hat validat es t he source of I Pv6 t raffic. The binding t able can be m anually creat ed or be learned t hrough Dynam ic Host Configurat ion Prot ocol version 6 snooping ( DHCPv6 snooping) .
  • Page 288: Ipv6 Static Binding Setup

    Chapter 25 IP Source Guard The following t able describes t he labels in t his screen. Table 135 Advanced Applicat ion > I P Source Guard > I Pv6 Source Binding St at us ( St andalone m ode) LABEL DESCRIPTION Clear Dynam ic...
  • Page 289 Chapter 25 IP Source Guard Figure 200 Advanced Applicat ion > I P Source Guard > I Pv6 St at ic Binding Set up ( St andalone m ode) The following t able describes t he labels in t his screen. Table 136 Advanced Applicat ion >...
  • Page 290: Ipv6 Source Guard Policy Setup

    Chapter 25 IP Source Guard 25.12 IPv6 Source Guard Policy Setup Use t his screen t o have I Pv6 source guard forward valid I Pv6 addresses and/ or I Pv6 prefixes t hat are st ored in t he binding t able and allow or block dat a t raffic from all link- local addresses. To open t his screen, click Adva n ce d Applica t ion >...
  • Page 291: Ipv6 Source Guard Port Setup

    Chapter 25 IP Source Guard Table 137 Advanced Applicat ion > I P Source Guard > I Pv6 Source Guard Policy Set up ( St andalone m ode) LABEL DESCRIPTION Validat e Prefix This field displays t he Va lida t e Pr e fix st at us for t his I Pv6 source guard policy. Link Local This field displays t he Link Loca l t raffic st at us for t his I Pv6 source guard policy.
  • Page 292: Ipv6 Snooping Policy Setup

    Chapter 25 IP Source Guard Table 138 Advanced Applicat ion > I P Source Guard > I Pv6 Source Guard Port Set up ( St andalone m ode) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non-volat ile m em ory when you are done configuring.
  • Page 293: Ipv6 Snooping Vlan Setup

    Chapter 25 IP Source Guard Table 139 Advanced Applicat ion > I P Source Guard > I Pv6 Snooping Policy Set up ( St andalone m ode) LABEL DESCRIPTION Clear Click t his t o clear t he fields above. I ndex This field displays a sequent ial num ber for each I Pv6 snooping policy.
  • Page 294: Ipv6 Dhcp Trust Setup

    Chapter 25 IP Source Guard Table 140 Advanced Applicat ion > I P Source Guard > I Pv6 Snooping VLAN Set up ( St andalone m ode) LABEL DESCRIPTION Delet e Select an ent ry checkbox and click D e le t e t o rem ove t he specified ent ry. Cancel Click t his t o clear t he D e le t e check boxes above.
  • Page 295: Technical Reference

    Chapter 25 IP Source Guard The following t able describes t he labels in t his screen. Table 141 Advanced Applicat ion > I P Source Guard > I Pv6 DHCP Trust Set up ( St andalone m ode) LABEL DESCRIPTION Act ive Select t his t o specify whet her port s are t rust ed or unt rust ed port s for DHCP snooping.
  • Page 296 Chapter 25 IP Source Guard • The source MAC address and source I P address in t h e packet do not m at ch any of t he current bindings. • The packet is a RELEASE or DECLI NE packet , and t he source MAC address and source port do not m at ch any of t he current bindings.
  • Page 297: Arp Inspection Overview

    Chapter 25 IP Source Guard You can configure t his set t ing for each source VLAN. This set t ing is independent of t he DHCP relay set t ings ( Chapt er 43 on page 413) . 25.17.1.4 Configuring DHCP Snooping Follow t hese st eps t o configure DHCP snooping on t he Swit ch.
  • Page 298: Configuring Arp Inspection

    Chapter 25 IP Source Guard • They do not use t he sam e space in m em ory t hat regu lar MAC address filt ers use. • They appear only in t he ARP I n spe ct ion screens and com m ands, not in t he M AC Addr e ss Filt e r screens and com m ands.
  • Page 299: Loop Guard

    HAPTER Loop Guard This chapt er shows you how t o configure t he Swit ch t o guard against loops on t he edge of your net work. 26.1 Loop Guard Overview Loop guard allows you t o configure t he Swit ch t o shut down a port if it det ect s t hat packet s sent out on t hat port loop back t o t he Swit ch.
  • Page 300 Chapter 26 Loop Guard Figure 209 Swit ch in Loop St at e The loop guard feat ure checks t o see if a loop guard enabled port is connect ed t o a swit ch in loop st at e. This is accom plished by periodically sending a probe packet and seeing if t he packet ret urns on t he sam e port .
  • Page 301: Loop Guard Setup

    Chapter 26 Loop Guard 26.2 Loop Guard Setup Click Adva nce d Applica t ion > Loop Gu a r d in t he navigat ion panel t o display t he screen as shown. Not e: The loop guard feat ure can not be enabled on t he port s t hat have Spanning Tree Prot ocol ( RSTP , MRSTP or MSTP) enabled.
  • Page 302 Chapter 26 Loop Guard The following t able describes t he labels in t his screen. Table 142 Advanced Applicat ion > Loop Guard LABEL DESCRIPTION Act ive Select t his opt ion t o enable loop guard on t he Swit ch. The Swit ch generat es syslog, int ernal log m essages as well as SNMP t raps when it shut s down a port via t he loop guard feat ure.
  • Page 303: Vlan Mapping

    HAPTER VLAN Mapping This chapt er shows you how t o configure VLAN m apping on t he Swit ch. 27.1 VLAN Mapping Overview Wit h VLAN m apping enabled, t he Swit ch can m ap t he VLAN I D and priorit y level of packet s received from a privat e net work t o t hose used in t he service provider ’s net work.
  • Page 304 Chapter 27 VLAN Mapping Figure 215 VLAN Mapping ( St andalone m ode) Figure 216 VLAN Mapping ( St acking m ode) The following t able describes t he labels in t his screen. Table 143 VLAN Mapping LABEL DESCRIPTION Act ive Select t his opt ion t o enable VLAN m apping on t he Swit ch.
  • Page 305: Configuring Vlan Mapping

    Chapter 27 VLAN Mapping Table 143 VLAN Mapping ( cont inued) LABEL DESCRIPTION Act ive Select t his check box t o enable t he VLAN m apping feat ure on t his port . Clear t his check box t o disable t he VLAN m apping feat ure.
  • Page 306 Chapter 27 VLAN Mapping The following t able describes t he labels in t his screen. Table 144 VLAN Mapping Configurat ion LABEL DESCRIPTION Act ive Check t his box t o act ivat e t his rule. Nam e Ent er a descript ive nam e ( up t o 32 print able ASCI I charact ers) for ident ificat ion purposes.
  • Page 307: Layer 2 Protocol Tunneling

    HAPTER Layer 2 Protocol Tunneling This chapt er shows you how t o configure layer- 2 prot ocol t unneling on t he Swit ch. 28.1 Layer 2 Protocol Tunneling Overview Layer- 2 prot ocol t unneling ( L2PT) is used on t he service provider's edge devices. L2PT allows edge swit ches ( 1 and 2 in t he following figure) t o t unnel layer- 2 STP ( Spanning Tree Prot ocol) , CDP ( Cisco Discovery Prot ocol) and VTP ( VLAN Trunking Prot ocol) packet s bet ween cust om er swit ches ( A, B and C in t he following figure) connect ed t hrough t he service provider ’s net work.
  • Page 308: Layer-2 Protocol Tunneling Mode

    Chapter 28 Layer 2 Protocol Tunneling Figure 220 L2PT Net work Exam ple Service Provider's Network 28.1.1 Layer-2 Protocol Tunneling Mode Each port can have t wo layer- 2 prot ocol t unneling m odes, Acce ss and Tu n ne l. •...
  • Page 309 Chapter 28 Layer 2 Protocol Tunneling Figure 221 Advanced Applicat ion > Layer 2 Prot ocol Tunneling ( St andalone m ode) Figure 222 Advanced Applicat ion > Layer 2 Prot ocol Tunneling ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 310 Chapter 28 Layer 2 Protocol Tunneling The following t able describes t he labels in t his screen. Table 145 Advanced Applicat ion > Layer 2 Prot ocol Tunneling LABEL DESCRIPTION Act ive Select t his t o enable layer- 2 prot ocol t unneling on t he Swit ch. Dest inat ion Specify an MAC address wit h which t he Swit ch uses t o encapsulat e t he layer- 2 prot ocol MAC Address...
  • Page 311 Chapter 28 Layer 2 Protocol Tunneling Table 145 Advanced Applicat ion > Layer 2 Prot ocol Tunneling ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
  • Page 312: Sflow

    HAPTER sFlow This chapt er shows you how t o configure sFlow t o have t he Swit ch m onit or t raffic in a net work and send inform at ion t o an sFlow collect or for analysis. 29.1 sFlow Overview sFlow ( RFC 3176) is a st andard t echnology for m onit oring swit ched net works.
  • Page 313 Chapter 29 sFlow Figure 224 Advanced Applicat ion > sFlow ( St andalone m ode) Figure 225 Advanced Applicat ion > sFlow ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 314: Sflow Collector Configuration

    Chapter 29 sFlow The following t able describes t he labels in t his screen. Table 146 Advanced Applicat ion > sFlow LABEL DESCRIPTION Act ive Select t his t o enable t he sFlow agent on t he Swit ch. Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory.
  • Page 315 Chapter 29 sFlow Figure 226 Advanced Applicat ion > sFlow > Collect or The following t able describes t he labels in t his screen. Table 147 Advanced Applicat ion > sFlow > Collect or LABEL DESCRIPTION Collect or Ent er t he I P address of t he sFlow collect or. Address UDP Port Ent er a UDP port num ber t he Swit ch uses t o send sFlow dat agram t o t he collect or.
  • Page 316: Pppoe

    HAPTER PPPoE This chapt er describes how t he Swit ch gives a PPPoE t erm inat ion server addit ional inform at ion t hat t he server can use t o ident ify and aut hent icat e a PPPoE client . 30.1 PPPoE Intermediate Agent Overview A PPPoE I nt erm ediat e Agent ( PPPoE I A) is deployed bet ween a PPPoE server and PPPoE client s.
  • Page 317: Port State

    Chapter 30 PPPoE Table 150 PPPoE I A Rem ot e I D Sub- opt ion Form at SubOpt Lengt h Value 0x02 MAC Address or St ring ( 1 byt e) ( 1 byt e) ( 63 byt es) The 1 in t he first field ident ifies t his as an Agent Circuit I D sub- opt ion and 2 ident ifies t his as an Agent Rem ot e I D sub- opt ion.
  • Page 318: The Pppoe Screen

    Chapter 30 PPPoE Trust ed port s are connect ed t o PPPoE servers. • I f a PADO ( PPPoE Act ive Discovery Offer) , PADS ( PP PoE Act ive Discovery Session- confirm at ion) , or PADT ( PPPoE Act ive Discovery Term inat e) packet is sent from a PPPoE server and received on a t rust ed port , t he Swit ch forwards it t o all ot her port s.
  • Page 319 Chapter 30 PPPoE Figure 228 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent The following t able describes t he labels in t his screen. Table 153 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent LABEL DESCRIPTION Act ive...
  • Page 320: Pppoe Ia Per-Port

    Chapter 30 PPPoE 30.3.1 PPPoE IA Per-Port Use t his screen t o specify whet her individual port s are t rust ed or unt rust ed port s and have t he Swit ch add ext ra inform at ion t o PPPoE discovery packet s from PPPoE client s on a per- port basis. Not e: The Swit ch will drop all PPPoE packet s if you enable t he PPPoE I nt erm ediat e Agent on t he Sw it ch and t here are no t rust ed port s.
  • Page 321 Chapter 30 PPPoE Figure 230 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > Port ( St acking m ode) The following t able describes t he labels in t his screen. Table 154 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > Port LABEL DESCRIPTION Slot ( St acking...
  • Page 322: Pppoe Ia Per-Port Per-Vlan

    Chapter 30 PPPoE Table 154 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > Port ( cont inued) LABEL DESCRIPTION Rem ot e- id Ent er a st ring of up t o 63 ASCI I charact ers t hat t he Swit ch adds int o t he Agent Rem ot e I D sub- opt ion for PPPoE discovery packet s received on t his port .
  • Page 323: Pppoe Ia For Vlan

    Chapter 30 PPPoE The following t able describes t he labels in t his screen. Table 155 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > Port > VLAN LABEL DESCRIPTION Show Port Ent er a port num ber t o show t he PPPoE I nt erm ediat e Agent set t ings for t he specified VLAN( s) on t he port .
  • Page 324 Chapter 30 PPPoE Figure 233 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > VLAN The following t able describes t he labels in t his screen. Table 156 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > VLAN LABEL DESCRIPTION Show VLAN...
  • Page 325: Error Disable

    HAPTER Error Disable 31.1 Error Disable Overview This chapt er shows you how t o configure t he rat e lim it for cont rol packet s on a port , and set t he Swit ch t o t ake an act ion ( such as t o shut down a port or st op sending packet s) on a port when t he Swit ch det ect s a pre- configured error.
  • Page 326: The Error Disable Screen

    Chapter 31 Error Disable 31.2 The Error Disable Screen Use t his screen t o configure error disable relat ed set t ings. Click Adva n ce d Applica t ion > Er r disa ble in t he navigat ion panel t o open t he following screen. Figure 234 Advanced Applicat ion >...
  • Page 327 Chapter 31 Error Disable Figure 235 Advanced Applicat ion > Errdisable > Errdisable St at us ( St andalone m ode) Figure 236 Advanced Applicat ion > Errdisable > Errdisable St at us ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 328: Cpu Protection Configuration

    Chapter 31 Error Disable The following t able describes t he labels in t his screen. Table 158 Advanced Applicat ion > Errdisable > Errdisable St at us LABEL DESCRIPTION I nact ive- reason m ode reset Port List Ent er t he num ber of t he port ( s) ( separat ed by a com m a) on which you want t o reset inact ive- reason st at us.
  • Page 329 Chapter 31 Error Disable Not e: Aft er you configure t his screen, m ake sure you also enable error det ect ion for t he specific cont rol packet s in t he Adv a n ce d Applica t ion > Er r disa ble > Er r disa ble D e t e ct scr een.
  • Page 330: Error-Disable Detect Configuration

    Chapter 31 Error Disable The following t able describes t he labels in t his screen. Table 159 Advanced Applicat ion > Errdisable > CPU prot ect ion LABEL DESCRIPTION Reason Select t he t ype of cont rol packet you want t o configure here. Slot ( St acking This field appears only in st acking m ode.
  • Page 331: Error-Disable Recovery Configuration

    Chapter 31 Error Disable The following t able describes t he labels in t his screen. Table 160 Advanced Applicat ion > Errdisable > Errdisable Det ect LABEL DESCRIPTION Cause This field displays t he t ypes of cont rol packet t hat m ay cause CPU overload. Use t his row t o m ake t he set t ing t he sam e for all ent ries.
  • Page 332 Chapter 31 Error Disable Figure 241 Advanced Applicat ion > Errdisable > Errdisable Recovery ( St acking Mode) The following t able describes t he labels in t his screen. Table 161 Advanced Applicat ion > Errdisable > Errdisable Recovery LABEL DESCRIPTION Act ive...
  • Page 333: Mac Pinning

    HAPTER MAC Pinning This chapt er shows you how t o configure MAC pinning on t he Swit ch. 32.1 MAC Pinning Overview When t he Swit ch obt ains a connect ed device’s MAC address, it adds an ent ry in t he MAC address forwarding t able and uses t he t able t o det erm ine how t o forward fram es.
  • Page 334 Chapter 32 MAC Pinning Figure 242 Advanced Applicat ion > MAC Pinning ( St andalone m ode) Figure 243 Advanced Applicat ion > MAC Pinning ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 335 Chapter 32 MAC Pinning The following t able describes t he labels in t his screen. Table 162 Advanced Applicat ion > MAC Pinning LABEL DESCRIPTION Act ive Select t his opt ion t o t urn on t he MAC pinning funct ion on t he Swit ch. Slot ( St acking This field appears only in st acking m ode.
  • Page 336: Private Vlan

    HAPTER Private VLAN 33.1 Private VLAN Overview Use privat e VLAN if you want you t o block t raffic bet ween port s in t he sam e VLAN. Com m u n it y and I sola t e d VLANs are secondary privat e VLANs t hat m ust be associat ed wit h a Pr im a r y privat e VLAN.
  • Page 337: Configuration

    Chapter 33 Private VLAN Tagged Privat e VLANs can span swit ches but t runking port s m ust be VLAN- t runking port s - see Adva n ce d > VLAN > VLAN Por t Se t t in g. Table 164 Spanning PVLAN Graphic Key LABEL DESCRIPTION...
  • Page 338 Chapter 33 Private VLAN Click Adva nce d Applica t ion > Pr iva t e VLAN t o display t he following screen. Figure 244 Advanced Applicat ion > Privat e VLAN ( St andalone m ode) Figure 245 Advanced Applicat ion > Privat e VLAN ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 339 Chapter 33 Private VLAN The following t able describes t he labels in t his screen. Table 165 Advanced Applicat ion > Privat e VLAN LABEL DESCRIPTION Slot ( St acking This field appears only in st acking m ode. Click t he drop- down list t o choose t he slot m ode) num ber of t he Swit ch in a st ack.
  • Page 340: Green Ethernet

    HAPTER Green Ethernet This chapt er shows you how t o configure t he Swit ch t o reduce t he power consum ed by swit ch port s. 34.1 Green Ethernet Overview Green Et hernet reduces swit ch port power consum pt ion in t he following ways. •...
  • Page 341 Chapter 34 Green Ethernet Figure 246 Advanced Applicat ion > Green Et hernet ( St andalone m ode) Figure 247 Advanced Applicat ion > Green Et hernet ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 342 Chapter 34 Green Ethernet The following t able describes t he labels in t his screen. Table 166 Advanced Applicat ion > Green Et hernet LABEL DESCRIPTION Select t his t o act ivat e Energy Efficient Et hernet globally. Aut o Power Down Select t his t o act ivat e Aut o Power Down globally.
  • Page 343: Link Layer Discovery Protocol (Lldp)

    HAPTER Link Layer Discovery Protocol (LLDP) 35.1 LLDP Overview The LLDP ( Link Layer Discovery Prot ocol) is a layer 2 prot ocol. I t allows a net work device t o advert ise it s ident it y and capabilit ies on t he local net work. I t also allows t he device t o m aint ain and st ore inform at ion from adj acent devices which are direct ly connect ed t o t he net work device.
  • Page 344: Lldp-Med Overview

    Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 248 LLDP Overview 35.2 LLDP-MED Overview LLDP- MED ( Link Layer Discovery Prot ocol for Media Endpoint Devices) is an ext ension t o t he st andard LLDP developed by t he Telecom m unicat ions I ndust ry Associat ion ( TI A) TR- 41.4 subcom m it t ee which defines t he enhanced discovery capabilit ies, such as VoI P applicat ions, t o enable net work adm inist rat ors m anage t heir net work t opology applicat ion m ore efficient ly.
  • Page 345: Lldp Screens

    Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 249 LLDP- MED Overview 35.3 LLDP Screens Click Adva nce d Applica t ion > LLD P in t he navigat ion panel t o display t he screen as shown next . Figure 250 Advanced Applicat ion >...
  • Page 346: Lldp Local Status

    Chapter 35 Link Layer Discovery Protocol (LLDP) Table 167 Advanced Applicat ion > LLDP ( cont inued) LABEL DESCRIPTION LLDP- MED LLDP- MED Click here t o show a screen t o configure LLDP- MED ( Link Layer Discovery Prot ocol for Configurat ion Media Endpoint Devices) param et ers.
  • Page 347 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 252 Advanced Applicat ion > LLDP > LLDP Local St at us ( St acking m ode) The following t able describes t he labels in t his screen. Table 168 Advanced Applicat ion > LLDP > LLDP Local St at us LABEL DESCRIPTION Basic TLV...
  • Page 348: Lldp Local Port Status Detail

    Chapter 35 Link Layer Discovery Protocol (LLDP) Table 168 Advanced Applicat ion > LLDP > LLDP Local St at us LABEL DESCRIPTION Managem ent The Managem ent Address TLV ident ifies an address associat ed wit h t he local LLDP agent Address TLV t hat m ay be used t o reach higher layer ent it ies t o assist discovery by net work m anagem ent .
  • Page 349 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 253 Advanced Applicat ion > LLDP > LLDP Local St at us > LLDP Local Port St at us Det ail ( Basic TLV) GS3700/XGS3700 Series User’s Guide...
  • Page 350 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 254 Advanced Applicat ion > LLDP > LLDP Local St at us > LLDP Local Port St at us Det ail ( MED TLV) The following t able describes t he labels in t his screen. Table 169 Advanced Applicat ion >...
  • Page 351 Chapter 35 Link Layer Discovery Protocol (LLDP) Table 169 Advanced Applicat ion > LLDP > LLDP Local St at us > LLDP Local Port St at us Det ail LABEL DESCRIPTION Port- Prot ocol This displays t he I EEE 802.1 Port Prot ocol VLAN I D TLVs, which indicat es whet her t he VLAN I D TLV VLAN is enabled and support ed.
  • Page 352: Lldp Remote Status

    Chapter 35 Link Layer Discovery Protocol (LLDP) 35.5 LLDP Remote Status This screen displays a sum m ary of LLDP st at us for each LLDP connect ion t o a neighboring Swit ch. Click Adva nce d Applica t ion > LLD P > LLD P Re m ot e St a t us t o display t he screen as shown next .
  • Page 353 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 257 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( Basic TLV) The following t able describes t he labels in Basic TLV part of t he screen. Table 171 Advanced Applicat ion >...
  • Page 354 Chapter 35 Link Layer Discovery Protocol (LLDP) Table 171 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( Basic TLV) LABEL DESCRIPTION Syst em Nam e This displays t he syst em nam e of t he rem ot e device.
  • Page 355 Chapter 35 Link Layer Discovery Protocol (LLDP) The following t able describes t he labels in t he Dot 1 and Dot 3 part s of t he screen. Table 172 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( Dot 1 and Dot 3 TLV) LABEL DESCRIPTION...
  • Page 356 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 259 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( MED TLV) GS3700/XGS3700 Series User’s Guide...
  • Page 357 Chapter 35 Link Layer Discovery Protocol (LLDP) The following t able describes t he labels in t he MED TLV part of t he screen. Table 173 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( MED TLV) LABEL DESCRIPTION...
  • Page 358: Lldp Configuration

    Chapter 35 Link Layer Discovery Protocol (LLDP) Table 173 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( MED TLV) ( cont inued) LABEL DESCRIPTION I nvent ory TLV The m aj orit y of I P Phones lack support of m anagem ent prot ocols such as SNMP , so LLDP-...
  • Page 359 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 260 Advanced Applicat ion > LLDP > LLDP Configurat ion ( St andalone m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 360 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 261 Advanced Applicat ion > LLDP > LLDP Configurat ion ( St acking m ode) The following t able describes t he labels in t his screen. Table 174 Advanced Applicat ion > LLDP > LLDP Configurat ion LABEL DESCRIPTION Act ive...
  • Page 361: Lldp Configuration Basic Tlv Setting

    Chapter 35 Link Layer Discovery Protocol (LLDP) Table 174 Advanced Applicat ion > LLDP > LLDP Configurat ion LABEL DESCRIPTION Adm in St at us Select whet her LLDP t ransm ission and/ or recept ion is allowed on t his port . •...
  • Page 362: Lldp Configuration Basic Org-Specific Tlv Setting

    Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 263 Advanced Applicat ion > LLDP > LLDP Configurat ion> Basic TLV Set t ing ( St acking m ode) The following t able describes t he labels in t his screen. Table 175 Advanced Applicat ion >...
  • Page 363 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 264 Advanced Applicat ion > LLDP > LLDP Configurat ion> Org- specific TLV Set t ing ( St andalone m ode) Figure 265 Advanced Applicat ion > LLDP > LLDP Configurat ion> Org- specific TLV Set t ing ( St acking m ode) The following t able describes t he labels in t his screen.
  • Page 364: Lldp-Med Configuration

    Chapter 35 Link Layer Discovery Protocol (LLDP) Table 176 Advanced Applicat ion > LLDP > LLDP Configurat ion > Org- specific TLV Set t ing LABEL DESCRIPTION Port- Prot ocol Select t he check box( es) t o enable or disable t he sending of I EEE 802.1 Port and Prot ocol VLAN I D VLAN I D TLVs on t he port ( s) .
  • Page 365 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 266 Advanced Applicat ion > LLDP > LLDP- MED Configurat ion ( St andalone m ode) Figure 267 Advanced Applicat ion > LLDP > LLDP- MED Configurat ion ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 366: Lldp-Med Network Policy

    Chapter 35 Link Layer Discovery Protocol (LLDP) The following t able describes t he labels in t his screen. Table 177 Advanced Applicat ion > LLDP > LLDP- MED Configurat ion LABEL DESCRIPTION Slot ( St acking This field appears only in st acking m ode. Click t he drop- down list t o choose t he slot m ode) num ber of t he Swit ch in a st ack.
  • Page 367 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 269 Advanced Applicat ion > LLDP > LLDP- MED Net work Policy ( St acking m ode) The following t able describes t he labels in t his screen. Table 178 Advanced Applicat ion > LLDP > LLDP- MED Net work Policy LABEL DESCRIPTION Port...
  • Page 368: Lldp-Med Location

    Chapter 35 Link Layer Discovery Protocol (LLDP) Table 178 Advanced Applicat ion > LLDP > LLDP- MED Net work Policy LABEL DESCRIPTION DSCP This field displays t he DSCP value of t he net work policy. Select an ent ry’s check box t o select a specific ent ry. Ot herwise, select t he check box in t he t able heading row t o select all ent ries.
  • Page 369 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 271 Advanced Applicat ion > LLDP > LLDP- MED Locat ion ( St acking m ode) The following t able describes t he labels in t his screen. Table 179 Advanced Applicat ion > LLDP > LLDP- MED Locat ion LABEL DESCRIPTION Port...
  • Page 370 Chapter 35 Link Layer Discovery Protocol (LLDP) Table 179 Advanced Applicat ion > LLDP > LLDP- MED Locat ion LABEL DESCRIPTION Dat um Select t he appropriat e geodet ic dat um used by GPS. • WGS84 • NAD83- NAVD88 •...
  • Page 371 Chapter 35 Link Layer Discovery Protocol (LLDP) Table 179 Advanced Applicat ion > LLDP > LLDP- MED Locat ion LABEL DESCRIPTION Delet e Check t he locat ions t hat you want t o rem ove, t hen click t he D e le t e but t on. Cancel Click Ca n ce l t o clear t he select ed check boxes.
  • Page 372: Anti-Arpscan

    HAPTER Anti-Arpscan 36.1 Anti-Arpscan Overview Address Resolut ion Prot ocol ( ARP) , RFC 826, is a prot ocol used t o convert a net work- layer I P address t o a link- layer MAC address. ARP scan is used t o scan t he net work of a cert ain int erface for alive host s.
  • Page 373: Anti-Arpscan Status

    Chapter 36 Anti-Arpscan • Go t o Ba sic Se t t ing > Por t Se t up. Clear Act ive and click Apply. Then select Act ive and click Apply again. • Go t o Applica t ion > Er r dia ble > Er r disa ble Re cove r y and set t he int erval for Ant i- a r psca n .
  • Page 374: Anti-Arpscan Host Status

    Chapter 36 Anti-Arpscan 36.3 Anti-Arpscan Host Status Use t his screen t o view blocked host s and unblock ones connect ed t o cert ain port s. To open t his screen, click Adva nce d Applica t ion > Ant i- Ar psca n > H ost St a t us. Figure 273 Advanced Applicat ion >...
  • Page 375: Anti-Arpscan Configure

    Chapter 36 Anti-Arpscan Figure 274 Advanced Applicat ion > Ant i- Arpscan > Trust Host The following t able describes t he fields in t he above screen. Table 182 Advanced Applicat ion > Ant i- Arpscan > Trust Host LABEL DESCRIPTION Nam e...
  • Page 376 Chapter 36 Anti-Arpscan Figure 275 Advanced Applicat ion > Ant i- Arpscan > Configure The following t able describes t he fields in t he above screen. Table 183 Advanced Applicat ion > Ant i- Arpscan > Configure LABEL DESCRIPTION Act ive Select t his t o enable An t i- a r psca n on t he Swit ch.
  • Page 377 Chapter 36 Anti-Arpscan Table 183 Advanced Applicat ion > Ant i- Arpscan > Configure LABEL DESCRIPTION Trust ed St at e Select Un t r u st e d or Tr u st e d for t he associat ed port . Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory.
  • Page 378: Bpdu Guard

    HAPTER BPDU Guard 37.1 BPDU Guard Overview A BPDU ( Bridge Prot ocol Dat a Unit s) is a dat a fram e t hat cont ains inform at ion about STP . STP- aware swit ches exchange BPDUs periodically. The BPDU guard feat ure allows you t o prevent any new STP- aware swit ch from connect ing t o an exist ing net work and causing STP t opology changes in t he net work.
  • Page 379: Bpdu Guard Configuration

    Chapter 37 BPDU Guard Figure 276 Advanced Applicat ion > BPDU Guard St aus The following t able describes t he fields in t he above screen. Table 184 Advanced Applicat ion > BPDU Guard St aus LABEL DESCRIPTION BPDU guard globally This field displays whet her BPDU guard is act ivat ed on t he Swit ch.
  • Page 380 Chapter 37 BPDU Guard Figure 277 Advanced Applicat ion > BPDU Guard > BPDU Guard Configurat ion The following t able describes t he fields in t he above screen. Table 185 Advanced Applicat ion > BPDU Guard > BPDU Guard Configurat ion LABEL DESCRIPTION Act ive...
  • Page 381: Chapter 38 Oam

    HAPTER 38.1 OAM Overview Link layer Et hernet OAM ( Operat ions, Adm inist rat ion and Maint enance) as described in I EEE 802.3ah is a link m onit oring prot ocol. I t ut ilizes OAM Prot ocol Dat a Unit s or OAM PDUs t o t ransm it link st at us inform at ion bet ween direct ly connect ed Et hernet devices.
  • Page 382 Chapter 38 OAM Figure 278 Advanced Applicat ion > OAM St at us ( St andalone m ode) Figure 279 Advanced Applicat ion > OAM St at us ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 383: Oam Details

    Chapter 38 OAM The following t able describes t he fields in t he above screen. Table 186 Advanced Applicat ion > OAM St at us LABEL DESCRIPTION Slot ( St acking m ode) This field appears only in st acking m ode. Click t he drop- down list t o choose t he slot num ber of t he Swit ch in a st ack.
  • Page 384 Chapter 38 OAM Figure 280 Advanced Applicat ion > OAM St at us > OAM Det ails The following t able describes t he fields in t he above screen. Table 187 Advanced Applicat ion > OAM St at us > OAM Det ails LABEL DESCRIPTION Discovery...
  • Page 385 Chapter 38 OAM Table 187 Advanced Applicat ion > OAM St at us > OAM Det ails LABEL DESCRIPTION Mode This field displays t he OAM m ode. The device in act ive m ode ( t ypically t he service provider's device) cont rols t he device in passive m ode ( t ypically t he subscriber's device) .
  • Page 386 Chapter 38 OAM Table 187 Advanced Applicat ion > OAM St at us > OAM Det ails LABEL DESCRIPTION Discovery This field indicat es t he st at e in t he OAM discovery process. OAM- enabled devices use st at e t his process t o det ect each ot her and t o exchange inform at ion about t heir OAM configurat ion and capabilit ies.
  • Page 387: Oam Configuration

    Chapter 38 OAM 38.3 OAM Configuration Use t his screen t o t urn on Et hernet OAM on t he Swit ch and port ( s) and configure t he relat ed set t ings. I n t he OAM St a t u s screen click Con figu r a t ion t o display t he configurat ion screen as shown. Figure 281 Advanced Applicat ion >...
  • Page 388 Chapter 38 OAM Figure 282 Advanced Applicat ion > OAM > OAM Configurat ion ( St acking m ode) The following t able describes t he fields in t he above screen. Table 188 Advanced Applicat ion > OAM > OAM Configurat ion LABEL DESCRIPTION Act ive...
  • Page 389: Oam Remote Loopback

    Chapter 38 OAM Table 188 Advanced Applicat ion > OAM > OAM Configurat ion LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
  • Page 390: Zuld

    HAPTER ZULD 39.1 ZULD Overview A unidirect ional link is a connect ion where t he link is up on bot h ends, but only one end can receive packet s. This m ay happen if OAM was init ially enabled but t hen disabled, t here are m isconfigured t ransm it t ing or receiving lines or t he hardware is m alfunct ioning.
  • Page 391: Zuld Status

    Chapter 39 ZULD • Port s advert ise t heir unidirect ional link det ect i on capabilit y using OAMPDUs, so all connect ed devices m ust support OAM as well as ZULD. You need t o enable OAM on t he Swit ch by going t o Adva nce d Applica t ion >...
  • Page 392 Chapter 39 ZULD Figure 285 Advanced Applicat ion > ZULD St at us The following t able describes t he fields in t he above screen. Table 190 Advanced Applicat ion > ZULD St at us LABEL DESCRIPTION ZULD is..This shows whet her ZULD is enabled or disabled on t he Swit ch.
  • Page 393: Zuld Configuration

    Chapter 39 ZULD Table 190 Advanced Applicat ion > ZULD St at us LABEL DESCRIPTION Link St at e This field shows t he following link st at es: • Lin k dow n : This is an init ializat ion st at e, where t he port is not yet up. •...
  • Page 394 Chapter 39 ZULD Figure 286 Advanced Applicat ion > ZULD > Configurat ion The following t able describes t he fields in t he above screen. Table 191 Advanced Applicat ion > ZULD > Configurat ion LABEL DESCRIPTION Act ive Select t his t o enable ZULD on t he Swit ch.
  • Page 395 Chapter 39 ZULD Table 191 Advanced Applicat ion > ZULD > Configurat ion LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
  • Page 396: Static Route

    HAPTER Static Route This chapt er shows you how t o configure st at ic rout es. 40.1 Static Routing Overview The Swit ch usually uses t he default gat eway t o rout e out bound t raffic from com put ers on t he LAN t o t he I nt ernet .
  • Page 397: Configuring Ipv4 Static Routing

    Chapter 40 Static Route Figure 288 I P Applicat ion > St at ic Rout ing 40.3 Configuring IPv4 Static Routing Click t he link next t o I Pv4 St a t ic Rou t e in t he I P Applica t ion > St a t ic Rou t in g screen t o display t he screen as shown.
  • Page 398: Configuring Ipv6 Static Routing

    Chapter 40 Static Route Table 192 I P Applicat ion > St at ic Rout ing > I Pv4 St at ic Rout e ( cont inued) LABEL DESCRIPTION Click Add t o insert a new st at ic rout e t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
  • Page 399 Chapter 40 Static Route The following t able describes t he relat ed labels you use t o creat e a st at ic rout e. Table 193 I P Applicat ion > St at ic Rout ing > I Pv6 St at ic Rout e LABEL DESCRIPTION Rout e...
  • Page 400: Policy Routing

    HAPTER Policy Routing This chapt er shows you how t o configure policy rout ing rules. 41.1 Policy Route Overview Tradit ionally, rout ing is based on t he dest inat ion address only and t he Swit ch t akes t he short est pat h t o forward a packet .
  • Page 401: Policy Routing Rule Configuration

    Chapter 41 Policy Routing The following t able describes t he labels in t his screen. Table 194 I P Applicat ion > Policy Rout ing LABEL DESCRIPTION Act ive This field allows you t o act ivat e/ deact ivat e t his policy rout ing profile and rules in t he profile. Profile Nam e Ent er a descript ive nam e ( up t o 32 print able ASCI I charact ers) for ident ificat ion purposes.
  • Page 402 Chapter 41 Policy Routing Figure 292 I P Applicat ion > Policy Rout ing > Rule Configurat ion The following t able describes t he labels in t his screen. Table 195 I P Applicat ion > Policy Rout ing > Rule Configurat ion LABEL DESCRIPTION Profile Nam e...
  • Page 403 Chapter 41 Policy Routing Table 195 I P Applicat ion > Policy Rout ing > Rule Configurat ion ( cont inued) LABEL DESCRIPTION This field displays t he rule index num ber t hat you configure in t he Se qu e n ce field. Click an index num ber t o change t he rule’s St a t e m e n t .
  • Page 404: Differentiated Services

    HAPTER Differentiated Services This chapt er shows you how t o configure Different iat ed Services ( DiffServ) on t he Swit ch. 42.1 DiffServ Overview Qualit y of Service ( QoS) is used t o priorit ize source- t o- dest inat ion t raffic flows. All packet s in t he flow are given t he sam e priorit y.
  • Page 405: Two Rate Three Color Marker Traffic Policing

    Chapter 42 Differentiated Services various t raffic policies t o t he t raffic flows. For exam ple, one t raffic policy would be t o give higher drop precedence t o one t raffic flow over ot hers. I n our exam ple packet s in t he Br on ze t raffic flow are m ore likely t o be dropped when congest ion occurs t han t he packet s in t he Pla t inu m t raffic flow as t hey m ove across t he DiffServ net work.
  • Page 406: Trtcm - Color-Blind Mode

    Chapter 42 Differentiated Services 42.2.1 TRTCM - Color-blind Mode All packet s are evaluat ed against t he PI R. I f a packet exceeds t he PI R it is m arked red. Ot herwise it is evaluat ed against t he CI R. I f it exceeds t he CI R t hen it is m arked yellow. Finally, if it is below t he CI R t hen it is m arked green.
  • Page 407 Chapter 42 Differentiated Services Figure 297 I P Applicat ion > DiffServ ( St andalone m ode) Figure 298 I P Applicat ion > DiffServ ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 408: Configuring 2-Rate 3 Color Marker Settings

    Chapter 42 Differentiated Services The following t able describes t he labels in t his screen. Table 196 I P Applicat ion > DiffServ LABEL DESCRIPTION Act ive Select t his opt ion t o enable DiffServ on t he Swit ch. Slot ( St acking This field appears only in st acking m ode.
  • Page 409 Chapter 42 Differentiated Services Figure 299 I P Applicat ion > DiffServ > 2- rat e 3 Color Marker ( St andalone m ode) Figure 300 I P Applicat ion > DiffServ > 2- rat e 3 Color Marker ( St acking m ode) GS3700/XGS3700 Series User’s Guide...
  • Page 410: Dscp Profile

    Chapter 42 Differentiated Services The following t able describes t he labels in t his screen. Table 197 I P Applicat ion > DiffServ > 2- rat e 3 Color Marker LABEL DESCRIPTION Act ive Select t his t o act ivat e TRTCM ( Two Rat e Three Color Marker) on t he Swit ch. The Swit ch evaluat es and m arks t he packet s based on t he TRTCM set t ings.
  • Page 411: Dscp-To-Ieee 802.1P Priority Settings

    Chapter 42 Differentiated Services Figure 301 I P Applicat ion > DiffServ > 2- rat e 3 Color Marker > DSCP Profile The following t able describes t he labels in t his screen. Table 198 I P Applicat ion > DiffServ > 2- rat e 3 Color Marker > DSCP Profile LABEL DESCRIPTION Profile Nam e...
  • Page 412: Configuring Dscp Settings

    Chapter 42 Differentiated Services The following t able shows t he default DSCP- t o- I EEE802.1p m apping. Table 199 Default DSCP- I EEE 802.1p Mapping DSCP VALUE 0 – 7 8 – 15 16 – 23 24 – 31 32 –...
  • Page 413: Dhcp

    HAPTER DHCP This chapt er shows you how t o configure t he DHCP feat ure. 43.1 DHCP Overview DHCP ( Dynam ic Host Configurat ion Prot ocol RFC 2131 and RFC 2132) allows individual com put ers t o obt ain TCP/ I P configurat ion at st art- up from a server. You can configure t he Swit ch as a DHCP server or a DHCP relay agent .
  • Page 414: Dhcpv4 Status

    Chapter 43 DHCP and creat e opt ion 82 profiles. Click t he link next t o D H CPv6 t o open screens where you can configure DHCPv6 set t ings. Figure 303 I P Applicat ion > DHCP 43.3 DHCPv4 Status Click I P Applica t ion >...
  • Page 415: Dhcpv4 Relay

    Chapter 43 DHCP Figure 305 I P Applicat ion > DHCP > DHCPv4 > Server St at us Det ail The following t able describes t he labels in t his screen. Table 202 I P Applicat ion > DHCP > DHCPv4 > Server St at us Det ail LABEL DESCRIPTION St art I P Address...
  • Page 416: Dhcpv4 Relay Agent Information

    Chapter 43 DHCP The Swit ch can be configured as a global DHCP relay. This m eans t hat t he Swit ch forwards all DHCP request s from all dom ains t o t he sam e DHCP server. You can also configure t he Swit ch t o relay DHCP inform at ion based on t he VLAN m em bership of t he DHCP client s.
  • Page 417 Chapter 43 DHCP Figure 306 I P Applicat ion > DHCP > DHCPv4 > Opt ion 82 Profile The following t able describes t he labels in t his screen. Table 206 I P Applicat ion > DHCP > DHCPv4 > Opt ion 82 Profile LABEL DESCRIPTION Nam e...
  • Page 418: Configuring Dhcpv4 Global Relay

    Chapter 43 DHCP Table 206 I P Applicat ion > DHCP > DHCPv4 > Opt ion 82 Profile ( cont inued) LABEL DESCRIPTION Profile Nam e This field displays t he descript ive nam e of t he profile. Click t he nam e t o change t he set t ings. Circuit- I D Enable This field displays whet her t he Circuit I D sub- opt ion is added t o client DHCP request s.
  • Page 419 Chapter 43 DHCP Figure 308 I P Applicat ion > DHCP > DHCPv4 > Global > Port The following t able describes t he labels in t his screen. Table 208 I P Applicat ion > DHCP > DHCPv4 > Global > Port LABEL DESCRIPTION Port...
  • Page 420: Global Dhcp Relay Configuration Example

    Chapter 43 DHCP 43.4.5 Global DHCP Relay Configuration Example The follow figure shows a net work exam ple where t he Swit ch is used t o relay DHCP request s for t he VLAN 1 and VLAN 2 dom ains. There is only one DHCP server t hat services t he DHCP client s in bot h dom ains.
  • Page 421 Chapter 43 DHCP Figure 311 I P Applicat ion > DHCP > DHCPv4 > VLAN The following t able describes t he labels in t his screen. Table 209 I P Applicat ion > DHCP > DHCPv4 > VLAN LABEL DESCRIPTION VI D Ent er t he I D num ber of t he VLAN t o which t hese DHCP set t ings apply.
  • Page 422: Dhcpv4 Vlan Port Configure

    Chapter 43 DHCP Table 209 I P Applicat ion > DHCP > DHCPv4 > VLAN ( cont inued) LABEL DESCRIPTION Relay Use t his sect ion if you want t o configure t he Swit ch t o funct ion as a DHCP relay for t his VLAN.
  • Page 423: Example: Dhcp Relay For Two Vlans

    Chapter 43 DHCP The following t able describes t he labels in t his screen. Table 210 I P Applicat ion > DHCP > DHCPv4 > VLAN > Port LABEL DESCRIPTION VI D Ent er t he I D num ber of t he VLAN you want t o configure here. Port Ent er t he num ber of port ( s) t o which you want t o apply t he specified DHCP opt ion 82 profile.
  • Page 424: Dhcpv6 Status

    Chapter 43 DHCP Figure 313 DHCP Relay for Two VLANs DHCP:192.168.1.100 VLAN 1 VLAN 2 DHCP:172.16.10.100 For t he exam ple net work, configure t he VLAN Se t t ing screen as shown. Figure 314 DHCP Relay for Two VLANs Configurat ion Exam ple EXAMPLE 43.6 DHCPv6 Status Click I P Applica t ion >...
  • Page 425: Dhcpv6 Information

    Chapter 43 DHCP Figure 315 I P Applicat ion > DHCP > DHCPv6 The following t able describes t he labels in t his screen. Table 211 I P Applicat ion > DHCP > DHCPv6 LABEL DESCRIPTION Server St at us This sect ion displays configurat ion set t ings relat ed t o t he Swit ch’s DHCP server m ode.
  • Page 426: Dhcpv6 Prefix Delegation

    Chapter 43 DHCP The following t able describes t he labels in t his screen. Table 212 I P Applicat ion > DHCP > DHCPv6 > I nform at ion LABEL DESCRIPTION Act ive Select t his check box t o enable t he Swit ch t o get DHCPv6 and DNS server set t ings. VI D Ent er t he I D num ber of t he VLAN t o which t he DHCPv6 server belongs here.
  • Page 427 Chapter 43 DHCP Figure 317 I P Applicat ion > DHCP > DHCPv6 > Prefix Delegat ion The following t able describes t he labels in t his screen. Table 213 I P Applicat ion > DHCP > DHCPv6 > Prefix Delegat ion LABEL DESCRIPTION Client DUI D...
  • Page 428: Dhcpv6 Relay

    Chapter 43 DHCP 43.9 DHCPv6 Relay A DHCPv6 relay agent is on t he sam e net work as t he DHCPv6 client s and helps forward m essages bet ween t he DHCPv6 server ( t hat ’s in anot her net work) and t he DHCPv6 client s. The DHCPv6 relay agent can add t he rem ot e ident ificat ion ( rem ot e- I D) opt ion and t he int erface- I D opt ion t o t he Relay- Forward DHCPv6 m essages.
  • Page 429 Chapter 43 DHCP Table 214 I P Applicat ion > DHCP > DHCPv6> DHCPv6 Relay ( cont inued) LABEL DESCRIPTION I nt erface I D Select t his opt ion t o have t he Swit ch add t he int erface- I D opt ion in t he DHCPv6 request s from t he client s in t he specified VLAN before t he Swit ch forwards t hem t o a DHCPv6 server.
  • Page 430: Vrrp

    HAPTER VRRP This chapt er shows you how t o configure and m onit or t he Virt ual Rout er Redundancy Prot ocol ( VRRP) on t he Swit ch. 44.1 VRRP Overview Each host on a net work is configured t o send packet s t o a st at ically configured default gat eway ( t his Swit ch) .
  • Page 431: Vrrp Status

    Chapter 44 VRRP 44.2 VRRP Status Click I P Applica t ion > VRRP in t he navigat ion panel t o display t he VRRP St a t us screen as shown next . Figure 320 I P Applicat ion > VRRP St at us The following t able describes t he labels in t his screen.
  • Page 432 Chapter 44 VRRP Click I P Applica t ion , VRRP and click t he Configur a t ion link t o display t he VRRP Con figu r a t ion screen as shown next . Not e: You can only configure VRRP on int erfaces wit h unique VLAN I Ds. Not e: Rout ing dom ains wit h t he sam e VLAN I D are not displayed in t he t able indicat ed.
  • Page 433: Vrrp Parameters

    Chapter 44 VRRP 44.3.2 VRRP Parameters This sect ion describes t he VRRP param et ers. 44.3.2.1 Advertisement Interval The m ast er rout er sends out Hello m essages t o let t he ot her backup rout ers know t hat it is st ill up and running.
  • Page 434: Viewing Vrrp Summary

    Chapter 44 VRRP The following t able describes t he labels in t his screen. Table 217 I P Applicat ion > VRRP Configurat ion: VRRP Param et ers LABEL DESCRIPTION Act ive Select t his opt ion t o enable t his VRRP ent ry. Nam e Ent er a descript ive nam e ( up t o 32 print able ASCI I charact ers) for ident ificat ion purposes.
  • Page 435: Vrrp Configuration Examples

    Chapter 44 VRRP Table 218 I P Applicat ion > VRRP Configurat ion: Sum m ary ( cont inued) LABEL DESCRIPTION Nam e This field displays a descript ive nam e of an ent ry. Net work This field displays t he I P address and subnet m ask of an int erface. VRI D This field displays t he I D num ber of a virt ual rout er.
  • Page 436: Two Subnets Example

    Chapter 44 VRRP Figure 325 VRRP Exam ple 1: VRRP Param et er Set t ings on Swit ch A EXAMPLE Figure 326 VRRP Exam ple 1: VRRP Param et er Set t ings on Swit ch B EXAMPLE Aft er configuring and saving t he VRRP configurat ion, t he VRRP St a t u s screens for bot h swit ches are shown next .
  • Page 437 Chapter 44 VRRP Figure 329 VRRP Configurat ion Exam ple: Two Virt ual Rout er Net work 1 7 2 .1 6 .1 .1 1 7 2 .1 6 .1 .1 0 0 1 7 2 .1 6 .1 .1 0 You need t o configure t he VRRP Con figu r a t ion screen for virt ual rout er VR2 on each swit ch, while keeping t he VRRP configurat ion in exam ple 1 for virt ual rout er VR1 ( refer t o Sect ion 44.4.2 on...
  • Page 438 Chapter 44 VRRP Figure 332 VRRP Exam ple 2: VRRP St at us on Swit ch A EXAMPLE Figure 333 VRRP Exam ple 2: VRRP St at us on Swit ch B EXAMPLE GS3700/XGS3700 Series User’s Guide...
  • Page 439: Load Sharing

    HAPTER Load Sharing 45.1 Load Sharing Overview The Swit ch learns t he next- hop( s) using ARP and det erm ines rout ing pat h( s) for a dest inat ion. The Swit ch support s Equal- Cost Mult iPat h ( ECMP) t o forward packet s dest ined t o t he sam e device ( A for exam ple) t hrough different rout ing pat hs ( 1 , 2 and 3 ) of equal pat h cost .
  • Page 440 Chapter 45 Load Sharing The following t able describes t he labels in t his screen. Table 219 I P Applicat ion > Load Sharing LABEL DESCRIPTION Act ive Select t his opt ion t o enable Equal- Cost Mult iPat h ( ECMP) rout ing on t he Swit ch. Crit eria Select t he crit eria t he Swit ch uses t o det erm ine t he rout ing pat h for a packet .
  • Page 441: Arp Setup

    HAPTER ARP Setup 46.1 ARP Overview Address Resolut ion Prot ocol ( ARP) is a prot ocol for m apping an I nt ernet Prot ocol address ( I P address) t o a physical m achine address, also known as a Media Access Cont rol or MAC address, on t he local area net work.
  • Page 442 Chapter 46 ARP Setup I CMP reply from host B, it sends out an ARP request t o get host A’s MAC address and updat es t he ARP t able wit h host A’s ARP reply. The Swit ch t hen can forward host B’s I CMP reply t o host A. ARP Re que st ARP Re ply I CM P Re qu e st...
  • Page 443: Arp Setup

    Chapter 46 ARP Setup Therefore in t he following exam ple, t he Swit ch can learn host A’s MAC address from t he ARP request sent by host A. The Swit ch t hen forwards host B’s I CMP reply t o host A right aft er get t ing host B’s MAC address and I CMP reply.
  • Page 444 Chapter 46 ARP Setup Figure 336 I P Applicat ion > ARP Set up > ARP Learning The following t able describes t he labels in t his screen. Table 220 I P Applicat ion > ARP Set up > ARP Learning LABEL DESCRIPTION Slot ( St acking...
  • Page 445: Static Arp

    Chapter 46 ARP Setup 46.2.2 Static ARP Use t his screen t o creat e st at ic ARP ent ries t hat will display in t he M a na ge m e n t > ARP Ta ble screen and will not age out .
  • Page 446 Chapter 46 ARP Setup Table 221 I P Applicat ion > ARP Set up > St at ic ARP ( cont inued) LABEL DESCRIPTION Port This field displays t he port t o which t he device connect s. Select an ent ry’s check box t o select a specific ent ry. Ot herwise, select t he check box in t he t able heading row t o select all ent ries.
  • Page 447: Maintenance

    HAPTER Maintenance This chapt er explains how t o configure t he m aint enance screens t hat let you m aint ain t he firm ware and configurat ion files. 47.1 The Maintenance Screen Use t his screen t o m anage firm ware and your configurat ion files. Click M a na ge m e nt > M a int e na nce in t he navigat ion panel t o open t he following screen.
  • Page 448: Firmware Upgrade

    Chapter 47 Maintenance Table 222 Managem ent > Maint enance ( cont inued) LABEL DESCRIPTION Reboot Click Con fig 1 t o reboot t he syst em and load Con figu r a t ion 1 on t he Swit ch. Syst em Click Con fig 2 t o reboot t he syst em and load Con figu r a t ion 2 on t he Swit ch.
  • Page 449 Chapter 47 Maintenance Figure 340 Managem ent > Maint enance > Firm ware Upgrade ( St acking m ode) The t op of firm ware upgrade screen shows which firm ware version is current ly running on t he Swit ch. Type t he pat h and file nam e of t he firm ware file you wish t o upload t o t he Swit ch in t he File Pa t h t ext box or click Br ow se t o locat e it .
  • Page 450: Restore A Configuration File

    Chapter 47 Maintenance Table 223 Managem ent > Maint enance> Firm ware Upgrade ( cont inued) LABEL DESCRIPTION Version The Swit ch has t wo firm ware set s, Fir m w a r e 1 and Fir m w a r e 2 , residing in flash. •...
  • Page 451: Backup A Configuration File

    Chapter 47 Maintenance 47.4 Backup a Configuration File Backing up your Swit ch configurat ions allows you t o creat e various “ snapshot s” of your device from which you m ay rest ore at a lat er dat e. Back up your current Swit ch configurat ion t o a com put er using t he Ba ck up Configur a t ion screen.
  • Page 452: Save Configuration

    Chapter 47 Maintenance I n t he web configurat or, click t he Sa ve but t on in t he t op of t he screen t o m ake t he changes t ake effect . I f you want t o access t he Swit ch web configurat or again, you m ay need t o change t he I P address of your com put er t o be in t he sam e subnet as t hat of t he default Swit ch I P address ( 192.168.1.1) .
  • Page 453: Load Factory Default

    Chapter 47 Maintenance I n t he click t he St a ck in g D e fa u lt but t on t o clear all Swit ch configurat ion inform at ion you configured and ret urn t o t he st acking default s. Click OK t o reset all Swit ch configurat ions t o t he st acking default s.
  • Page 454 Chapter 47 Maintenance Figure 347 Managem ent > Maint enance > Tech- Support You m ay need WordPad or sim ilar soft ware t o see t he log report correct ly. The t able below describes t he fields in t he above screen. Table 224 Managem ent >...
  • Page 455: Ftp Command Line

    Chapter 47 Maintenance Table 224 Managem ent > Maint enance > Tech- Support LABEL DESCRIPTION Mbuf Click D ow n loa d t o see t he Mbuf log report . The log includes Mbuf over t hreshold inform at ion. This log report is st ored in flash m em ory. Click D ow n loa d t o see t he Read Only Mem ory ( ROM) log report .
  • Page 456: Ftp Command Line Procedure

    Chapter 47 Maintenance This is a sam ple FTP session saving t he current configurat ion t o a file called “ config.cfg” on your com put er. I f your ( T) FTP client does not allow you t o have a dest inat ion filenam e different t han t he source, you will need t o renam e t hem as t he Swit ch only recognizes “...
  • Page 457: Ftp Restrictions

    Chapter 47 Maintenance 47.9.4 FTP Restrictions FTP will not work when: • FTP service is disabled in t he Se r vice Acce ss Cont r ol screen. • The I P address( es) in t he Re m ot e M a na ge m e nt screen does not m at ch t he client I P address. I f it does not m at ch, t he Swit ch will disconnect t he FTP session im m ediat ely.
  • Page 458: Access Control

    HAPTER Access Control This chapt er describes how t o cont rol access t o t he Swit ch. 48.1 Access Control Overview A console port and FTP are allowed one session each, Telnet and SSH share nine sessions, up t o five Web sessions ( five different usernam es and passwords) and/ or lim it less SNMP access cont rol sessions are allowed.
  • Page 459: About Snmp

    Chapter 48 Access Control Figure 348 Managem ent > Access Cont rol The following t able describes t he labels in t his screen. Table 228 Managem ent > Access Cont rol LABEL DESCRIPTION SNMP Click t his link t o configure your SNMP set t ings. Logins Click t his link t o assign which users can access t he Swit ch via web configurat or at any one t im e.
  • Page 460: Snmp V3 And Security

    Chapter 48 Access Control net work m anagem ent funct ions. I t execut es applicat ions t hat cont rol and m onit or m anaged devices. The m anaged devices cont ain obj ect variables/ m anaged obj ect s t hat define each piece of inform at ion t o be collect ed about a Swit ch.
  • Page 461: Snmp Traps

    Chapter 48 Access Control 48.3.3 SNMP Traps The Swit ch sends t raps t o an SNMP m anager when an event occurs. The following t ables out line t he SNMP t raps by cat egory. An OI D ( Obj ect I D) t hat begins wit h “ 1 .3 .6 .1 .4 .1 .8 9 0 .1 .1 5 ” is defined in privat e MI Bs. Ot herwise, it is a st andard MI B OI D.
  • Page 462 Chapter 48 Access Control Table 230 SNMP Syst em Traps ( cont inued) OPTION OBJECT LABEL OBJECT ID DESCRIPTION errdisable zyErrdisableDet ect 1.3.6.1.4.1.890.1.15.3.24.4.1 This t rap is sent when an error is det ect ed on a port , such as a loop occurs or t he rat e lim it for specific cont rol packet s is exceeded.
  • Page 463 Chapter 48 Access Control Table 231 SNMP St acking Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION Change zySt ackingSlot ChangeI ndex 1.3.6.1.4.1.890.1.15.3.9 St acking change slot index. 7.4.13 zySt ackingPriorit yChange 1.3.6.1.4.1.890.1.15.3.9 St aking prorit y change. 7.4.14 zySt ackingTopologyChange 1.3.6.1.4.1.890.1.15.3.9 St aking t opology change.
  • Page 464 Chapter 48 Access Control Table 232 SNMP I nt erfaceTraps ( cont inued) OPTION OBJECT LABEL OBJECT ID DESCRIPTION zuld zyZuldUnidirect ionalDet ect ed 1.3.6.1.4.1.890.1.15.3.110.3.1 This t rap is sent when a unidirect ional link is det ect ed. zyZuldBidirect ionalRecovered 1.3.6.1.4.1.890.1.15.3.110.3.2 This t rap is sent when t he port which is shut down by ZULD becom es...
  • Page 465: Configuring Snmp

    Chapter 48 Access Control Table 235 SNMP Swit ch Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION st p STPNewRoot 1.3.6.1.2.1.17.0.1 This t rap is sent w hen t he STP root sw it ch changes. zyMrst pNewRoot 1.3.6.1.4.1.890.1.15.3.52.3.1 This t rap is sent when t he MRSTP root swit ch changes.
  • Page 466: Configuring Snmp Trap Group

    Chapter 48 Access Control The following t able describes t he labels in t his screen. Table 236 Managem ent > Access Cont rol > SNMP LABEL DESCRIPTION General Set t ing Use t his sect ion t o specify t he SNMP version and com m unit y ( password) values. Version Select t he SNMP version for t he Swit ch.
  • Page 467: Enabling/Disabling Sending Of Snmp Traps On A Port

    Chapter 48 Access Control Figure 351 Managem ent > Access Cont rol > SNMP > Trap Group The following t able describes t he labels in t his screen. Table 237 Managem ent > Access Cont rol > SNMP > Trap Group LABEL DESCRIPTION Trap Dest inat ion...
  • Page 468 Chapter 48 Access Control Figure 352 Managem ent > Access Cont rol > SNMP > Trap Group > Port ( St andalone m ode) Figure 353 Managem ent > Access Cont rol > SNMP > Trap Group > Port ( St acking m ode) The following t able describes t he labels in t his screen.
  • Page 469: Configuring Snmp User

    Chapter 48 Access Control Table 238 Managem ent > Access Cont rol > SNMP > Trap Group > Port ( cont inued) LABEL DESCRIPTION Port This field displays a port num ber. I n st acking m ode, t he first num ber represent s t he slot and t he second t he port num ber.
  • Page 470 Chapter 48 Access Control Table 239 Managem ent > Access Cont rol > SNMP > User ( cont inued) LABEL DESCRIPTION Securit y Level Select whet her you want t o im plem ent aut hent icat ion and/ or encrypt ion for SNMP com m unicat ion from t his user.
  • Page 471: Setting Up Login Accounts

    Chapter 48 Access Control Table 239 Managem ent > Access Cont rol > SNMP > User ( cont inued) LABEL DESCRIPTION Delet e Click D e le t e t o rem ove t he select ed ent ry from t he sum m ary t able. Cancel Click Ca nce l t o begin configuring t his screen afresh.
  • Page 472: Ssh Overview

    Chapter 48 Access Control Table 240 Managem ent > Access Cont rol > Logins ( cont inued) LABEL DESCRIPTION New Password Ent er your new syst em password. Ret ype t o Ret ype your new syst em password for confirm at ion confirm Edit Logins You m ay configure passwords for up t o four users.
  • Page 473: How Ssh Works

    Chapter 48 Access Control 48.6 How SSH works The following t able sum m arizes how a secure connect ion is est ablished bet ween t wo rem ot e host s. Figure 357 How SSH Works Host I dent ificat ion The SSH client sends a connect ion request t o t he SSH server.
  • Page 474: Ssh Implementation On The Switch

    Chapter 48 Access Control 48.7 SSH Implementation on the Switch Your Swit ch support s SSH version 2 using RSA aut hent icat ion and t hree encrypt ion m et hods ( DES, 3DES and Blowfish) . The SSH server is im plem ent ed on t he Swit ch for rem ot e m anagem ent and file t ransfer on port 22.
  • Page 475: Https Example

    Chapter 48 Access Control Not e: I f you disable H TTP in t he Se r vice Acce ss Con t r ol screen, t hen t he Swit ch blocks all HTTP connect ion at t em pt s. 48.9 HTTPS Example I f you haven’t changed t he default HTTPS port on t he Swit ch, t hen in your browser ent er “...
  • Page 476 Chapter 48 Access Control Figure 360 Securit y Cert ificat e Warning ( I nt ernet Explorer 7 or 8) Aft er you log in, you will see t he red address bar wit h t he m essage Ce r t ifica t e Er r or. Click on Ce r t ifica t e Er r or next t o t he address bar and click Vie w ce r t ifica t e s.
  • Page 477: Mozilla Firefox Warning Messages

    Chapter 48 Access Control Figure 362 Cert ificat e ( I nt ernet Explorer 7 or 8) 48.9.2 Mozilla Firefox Warning Messages When you at t em pt t o access t he Swit ch HTTPS server, a This Conne ct ion is Unt r ust e d screen m ay display.
  • Page 478: The Main Screen

    Chapter 48 Access Control Confirm t he HTTPS server URL m at ches. Click Confir m Se cur it y Ex ce pt ion t o proceed t o t he web configurat or login screen. Figure 364 Securit y Alert ( Mozilla Firefox) EXAMPLE 48.9.3 The Main Screen Aft er you accept t he cert ificat e and ent er t he login usernam e and password, t he Swit ch m ain screen...
  • Page 479: Service Access Control

    Chapter 48 Access Control Figure 365 Exam ple: Lock Denot ing a Secure Connect ion EXAMPLE 48.10 Service Access Control Service Access Cont rol allows you t o decide what services you m ay use t o access t he Swit ch. You m ay also change t he default service port and configure “...
  • Page 480: Remote Management

    Chapter 48 Access Control The following t able describes t he fields in t his screen. Table 241 Managem ent > Access Cont rol > Service Access Cont rol LABEL DESCRIPTION Services Services you m ay use t o access t he Swit ch are list ed here. Act ive Select t his opt ion for t he corresponding services t hat you want t o allow t o access t he Swit ch.
  • Page 481 Chapter 48 Access Control The following t able describes t he labels in t his screen. Table 242 Managem ent > Access Cont rol > Rem ot e Managem ent LABEL DESCRIPTION Ent ry This is t he client set index num ber. A “ client set ” is a group of one or m ore “ t rust ed com put ers”...
  • Page 482: Diagnostic

    HAPTER Diagnostic This chapt er explains t he D ia gnost ic screen. You can use t his screen t o help you ident ify problem s. 49.1 Diagnostic Click M a na ge m e nt > D ia gnost ic in t he navigat ion panel t o open t his screen. Use t his screen t o check syst em logs, ping I P addresses or perform port t est s.
  • Page 483 Chapter 49 Diagnostic The following t able describes t he labels in t his screen. Table 243 Managem ent > Diagnost ic LABEL DESCRIPTION Ping Test I Pv4 Select t his opt ion if you want t o ping an I Pv4 address, and select which t raffic flow ( in - ba n d or ou t - of- ba n d) t he Swit ch is t o send ping fram es.
  • Page 484 Chapter 49 Diagnostic Table 243 Managem ent > Diagnost ic ( cont inued) LABEL DESCRIPTION Pair st at us Ok : The physical connect ion bet ween t he wire- pair is okay. Ope n : There is no physical connect ion ( an open circuit det ect ed) bet ween t he wire- pair. Shor t : There is an short circuit det ect ed bet ween t he wire- pair.
  • Page 485: System Log

    HAPTER System Log 50.1 Overview A log m essage st ores t he inform at ion for viewing. 50.2 System Log Click M a na ge m e nt > Syst e m Log in t he navigat ion panel t o open t his screen. Use t his screen t o check current syst em logs.
  • Page 486: Syslog Setup

    HAPTER Syslog Setup This chapt er explains t he syslog screens. 51.1 Syslog Overview The syslog prot ocol allows devices t o send event not ificat ion m essages across an I P net work t o syslog servers t hat collect t he event m essages. A syslog- enabled device can generat e a syslog m essage and send it t o a syslog server.
  • Page 487 Chapter 51 Syslog Setup Figure 370 Managem ent > Syslog Set up The following t able describes t he labels in t his screen. Table 245 Managem ent > Syslog Set up LABEL DESCRIPTION Syslog Select Act ive t o t urn on syslog ( syst em logging) and t hen configure t he syslog set t ing Logging Type This colum n displays t he nam es of t he cat egories of logs t hat t he device can generat e.
  • Page 488 Chapter 51 Syslog Setup Table 245 Managem ent > Syslog Set up LABEL DESCRIPTION Click Add t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
  • Page 489: Cluster Management

    HAPTER Cluster Management This chapt er int roduces clust er m anagem ent . 52.1 Clustering Management Status Overview Clust er Managem ent allows you t o m anage swit ches t hrough one Swit ch, called t he clust er m anager.
  • Page 490: Cluster Management Status

    Chapter 52 Cluster Management Figure 371 Clust ering Applicat ion Exam ple 52.2 Cluster Management Status Click M a na ge m e nt > Clust e r M a na ge m e n t in t he navigat ion panel t o display t he following screen.
  • Page 491: Cluster Member Switch Management

    Chapter 52 Cluster Management The following t able describes t he labels in t his screen. Table 247 Managem ent > Clust er Managem ent LABEL DESCRIPTION St at us This field displays t he role of t his Swit ch wit hin t he clust er. M a n a ge r M e m be r ( you see t his if you access t his screen in t he clust er m em ber swit ch direct ly and not via t he clust er m anager)
  • Page 492: Uploading Firmware To A Cluster Member Switch

    Chapter 52 Cluster Management Figure 373 Clust er Managem ent : Clust er Mem ber Web Configurat or Screen EXAMPLE EXAMPLE 52.2.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP t o upload firm ware t o a clust er m em ber swit ch t hrough t he clust er m anager swit ch as shown in t he following exam ple.
  • Page 493: Clustering Management Configuration

    Chapter 52 Cluster Management The following t able explains som e of t he FTP param et ers. Table 248 FTP Upload t o Clust er Mem ber Exam ple FTP PARAMETER DESCRIPTION User Ent er “ adm in”. Password The web configurat or password default is 1234.
  • Page 494 Chapter 52 Cluster Management The following t able describes t he labels in t his screen. Table 249 Managem ent > Clust ering Managem ent > Configurat ion LABEL DESCRIPTION Clust ering Manager Act ive Select Act ive t o have t his Swit ch becom e t he clust er m anager swit ch. A clust er can only have one m anager.
  • Page 495: Mac Table

    HAPTER MAC Table This chapt er int roduces t he M AC Ta ble screen. 53.1 MAC Table Overview The M AC Ta ble screen ( a MAC t able is also known as a filt ering dat abase) shows how fram es are forwarded or filt ered across t he Swit ch’s port s.
  • Page 496: Viewing The Mac Table

    Chapter 53 MAC Table 53.2 Viewing the MAC Table Click M a na ge m e nt > M AC Ta ble in t he navigat ion panel t o display t he following screen. Use t his screen t o search specific MAC addresses. You can also direct ly add dynam ic MAC address( es) int o t he st at ic MAC forwarding t able or MAC filt ering t able from t he MAC t able using t his screen.
  • Page 497 Chapter 53 MAC Table Table 250 Managem ent > MAC Table ( cont inued) LABEL DESCRIPTION Cancel Click t his t o begin configuring t he search crit eria afresh. I ndex This is t he incom ing fram e index num ber. MAC Address This is t he MAC address of t he device from which t his incom ing fram e cam e.
  • Page 498: Ip Table

    HAPTER IP Table This chapt er int roduces t he I P t able. 54.1 IP Table Overview The I P Ta ble screen shows how packet s are forwarded or filt ered across t he Swit ch’s port s. When a device ( which m ay belong t o a VLAN group) sends a packet which is forwarded t o a port on t he Swit ch, t he I P address of t he device is shown on t he Swit ch’s I P Ta ble .
  • Page 499: Viewing The Ip Table

    Chapter 54 IP Table 54.2 Viewing the IP Table Click M a na ge m e nt > I P Ta ble in t he navigat ion panel t o display t he following screen. Figure 379 Managem ent > I P Table The following t able describes t he labels in t his screen.
  • Page 500: Arp Table

    HAPTER ARP Table This chapt er int roduces ARP Table. 55.1 ARP Table Overview Address Resolut ion Prot ocol ( ARP) is a prot ocol for m apping an I nt ernet Prot ocol address ( I P address) t o a physical m achine address, also known as a Media Access Cont rol or MAC address, on t he local area net work.
  • Page 501 Chapter 55 ARP Table Figure 380 Managem ent > ARP Table The following t able describes t he labels in t his screen. Table 252 Managem ent > ARP Table LABEL DESCRIPTION Condit ion Specify how you want t he Swit ch t o rem ove ARP ent ries when you click Flu sh . Select All t o rem ove all of t he dynam ic ent ries from t he ARP t able.
  • Page 502: Routing Table

    HAPTER Routing Table This chapt er int roduces t he rout ing t able. 56.1 Overview The rout ing t able cont ains t he rout e inform at ion t o t he net work( s) t hat t he Swit ch can reach. 56.2 Viewing the Routing Table Status Use t his screen t o view rout ing t able inform at ion.
  • Page 503: Path Mtu Table

    HAPTER Path MTU Table This chapt er int roduces t he I Pv6 Pat h MTU t able. 57.1 Path MTU Overview The largest size ( in byt es) of a packet t hat can be t ransferred over a dat a link is called t he m axim um t ransm ission unit ( MTU) .
  • Page 504: Configure Clone

    HAPTER Configure Clone This chapt er shows you how you can copy t he set t ings of one port ont o ot her port s. 58.1 Configure Clone Cloning allows you t o copy t he basic and advanced set t ings from a source port t o a dest inat ion port or port s.
  • Page 505 Chapter 58 Configure Clone Figure 383 Managem ent > Configure Clone ( St andalone) GS3700/XGS3700 Series User’s Guide...
  • Page 506 Chapter 58 Configure Clone Figure 384 Managem ent > Configure Clone ( St acking) The following t able describes t he labels in t his screen. Table 255 Managem ent > Configure Clone LABEL DESCRIPTION Source/ I n st acking m ode, a port is defined by a slot I D represent ing t he Swit ch in t he st ack and a Dest inat ion port num ber.
  • Page 507 Chapter 58 Configure Clone Table 255 Managem ent > Configure Clone ( cont inued) LABEL DESCRIPTION Advanced Select which port set t ings ( configured in t he Adva n ce d Applica t ion m enus) should be Applicat ion copied t o t he dest inat ion port s.
  • Page 508: Ipv6 Neighbor Table

    HAPTER IPv6 Neighbor Table This chapt er int roduces t he I Pv6 neighbor t able. 59.1 IPv6 Neighbor Table Overview An I Pv6 host is required t o have a neighbor t able. I f t here is an address t o be resolved or verified, t he Swit ch sends out a neighbor solicit at ion m essage.
  • Page 509 Chapter 59 IPv6 Neighbor Table Table 256 Managem ent > I Pv6 Neighbor Table ( cont inued) LABEL DESCRIPTION St at us This field displays whet her t he neighbor I Pv6 int erface is reachable. I n I Pv6, “ reachable” m eans an I Pv6 packet can be correct ly forwarded t o a neighbor node ( host or rout er) and t he neighbor can successfully receive and handle t he packet .
  • Page 510: Troubleshooting

    HAPTER Troubleshooting This chapt er offers som e suggest ions t o solve problem s you m ight encount er. The pot ent ial problem s are divided int o t he following cat egories. • Power, Hardware Connect ions, and LEDs •...
  • Page 511: Switch Access And Login

    Chapter 60 Troubleshooting One of t he LEDs does not behave as expect ed. Make sure you underst and t he norm al behavior of t he LED. See Sect ion 3.3 on page Check t he hardware connect ions. See Sect ion 3.1 on page I nspect your cables for dam age.
  • Page 512 Chapter 60 Troubleshooting • I f you changed t he I P address, use t he new I P addr e ss. • I f you changed t he I P address and have forgot t en i t , see t he t roubleshoot ing suggest ions for forgot t he I P address for t he Swit ch.
  • Page 513: Switch Configuration

    Chapter 60 Troubleshooting I cannot see som e of Adva n ce d Applica t ion subm enus at t he bot t om of t he navigat ion panel. The recom m ended screen resolut ion is 1024 by 768 pixels. Adj ust t he value in your com put er and t hen you should see t he rest of Adva nce d Applica t ion subm enus at t he bot t om of t he navigat ion panel.
  • Page 514: Common Services

    PP E N D I X Common Services The following t able list s som e com m only- used services and t heir associat ed prot ocols and port num bers. For a com prehensive list of port num bers, I CMP t ype/ code num bers and services, visit t he I ANA ( I nt ernet Assigned Num ber Aut horit y) web sit e.
  • Page 515: Appendix A Common Services

    Appendix A Common Services Table 257 Com m only Used Services ( cont inued) NAME PROTOCOL PORT(S) DESCRIPTION HTTPS HTTPS is a secured ht t p session oft en used in e- com m erce. I CMP User- Defined I nt ernet Cont rol Message Prot ocol is oft en used for diagnost ic or rout ing purposes.
  • Page 516 Appendix A Common Services Table 257 Com m only Used Services ( cont inued) NAME PROTOCOL PORT(S) DESCRIPTION SQL- NET 1521 St ruct ured Query Language is an int erface t o access dat a on m any different t ypes of dat abase syst em s, including m ainfram es, m idrange syst em s, UNI X syst em s and net work servers.
  • Page 517: Ipv6 Addressing

    PP E N D I X IPv6 Overview I Pv6 ( I nt ernet Prot ocol version 6) , is designed t o enhance I P address size and feat ures. The increase in I Pv6 address size t o 128 bit s ( from t he 32- bit I Pv4 address) allows up t o 3.4 x 10 addresses.
  • Page 518: Loopback Address

    Appendix B IPv6 Global Address A global address uniquely ident ifies a device on t he I nt ernet . I t is sim ilar t o a “ public I P address” in I Pv4. A global unicast address st art s wit h a 2 or 3. Unspecified Address An unspecified address ( 0: 0: 0: 0: 0: 0: 0: 0 or : : ) is used as t he source address when a device does not have it s own address.
  • Page 519: Subnet Masking

    Appendix B IPv6 Table 260 Reserved Mult icast Address ( cont inued) MULTICAST ADDRESS FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 Subnet Masking Bot h an I Pv6 address and I Pv6 subnet m ask com pose of 128- bit binary digit s, which are divided int o eight 16- bit blocks and writ t en in hexadecim al not at ion.
  • Page 520: Dhcp Relay Agent

    Appendix B IPv6 com bines it s int erface I D and global and subnet inform at ion advert ised from t he rout er. This is a rout able global I P address. DHCPv6 The Dynam ic Host Configurat ion Prot ocol for I Pv6 ( DHCPv6, RFC 3315) is a server- client prot ocol t hat allows a DHCP server t o assign and pass I Pv6 net work addresses, prefixes and ot her configurat ion inform at ion t o DHCP client s.
  • Page 521 Appendix B IPv6 such as t he syst em nam e. The int erface- I D opt ion provides slot num ber, port inform at ion and t he VLAN I D t o t he DHCPv6 server. The rem ot e- I D opt ion ( if any) is st ripped from t he Relay- Reply m essages before t he relay agent sends t he packet s t o t he client s.
  • Page 522: Multicast Listener Discovery

    Appendix B IPv6 det erm ine whet her t he dest inat ion address is on- link and can be reached direct ly wit hout passing t hrough a rout er. I f t he address is onlink, t he address is considered as t he next hop. Ot herwise, t he Swit ch det erm ines t he next- hop from t he default rout er list or rout ing t able.
  • Page 523 Appendix B IPv6 Example - Enabling IPv6 on Windows XP/2003/Vista By default , Windows XP and Windows 2003 support I Pv6. This exam ple shows you how t o use t he ipv6 install com m and on Windows XP/ 2003 t o enable I Pv6. This also displays how t o use t he ipconfig com m and t o see aut o- generat ed I P addresses.
  • Page 524 Appendix B IPv6 Click St a r t and t hen OK. Now your com put er can obt ain an I Pv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 support s I Pv6 by default . DHCPv6 is also enabled when you enable I Pv6 on a Windows 7 com put er.
  • Page 525 Appendix B IPv6 Click Close t o exit t he Loca l Ar e a Conn e ct ion St a t us screen. Select St a r t > All Pr ogr a m s > Acce ssor ie s > Com m a nd Pr om pt . Use t he ipconfig com m and t o check your dynam ic I Pv6 address.
  • Page 526: Customer Support

    PP E N D I X Customer Support I n t he event of problem s t hat cannot be solved by using t his m anual, you should cont act your vendor. I f you cannot cont act your vendor, t hen cont act a ZyXEL office for t he region in which you bought t he device.
  • Page 527 Appendix C Customer Support • ht t p: / / www.zyxel.kz Korea • ZyXEL Korea Corp. • ht t p: / / www.zyxel.kr Malaysia • ZyXEL Malaysia Sdn Bhd. • ht t p: / / www.zyxel.com .m y Pakistan • ZyXEL Pakist an ( Pvt .) Lt d.
  • Page 528 Appendix C Customer Support Belarus • ZyXEL BY • ht t p: / / www.zyxel.by Belgium • ZyXEL Com m unicat ions B.V. • ht t p: / / www.zyxel.com / be/ nl/ • ht t p: / / www.zyxel.com / be/ fr/ Bulgaria ZyXEL България...
  • Page 529 Appendix C Customer Support Italy • ZyXEL Com m unicat ions I t aly • ht t p: / / www.zyxel.it / Latvia • ZyXEL Lat via • ht t p: / / www.zyxel.com / l v / lv/ hom epage.sht m l Lithuania •...
  • Page 530 Appendix C Customer Support • ht t p: / / www.zyxel.se Switzerland • St uderus AG • ht t p: / / www.zyxel.ch/ Turkey • ZyXEL Turkey A.S. • ht t p: / / www.zyxel.com .t r • ZyXEL Com m unicat ions UK Lt d. •...
  • Page 531: North America

    Appendix C Customer Support • ht t p: / / www.zyxel.com / m e/ en/ North America • ZyXEL Com m unicat ions, I nc. - Nort h Am erica Headqua rt ers • ht t p: / / www.zyxel.com / us/ en/ Oceania Australia •...
  • Page 532 Appendix C Customer Support GS3700/XGS3700 Series User’s Guide...
  • Page 533: Legal Information

    PP E N D I X Legal Information Copyright Copyright © 2015 by ZyXEL Com m unicat ions Cor porat ion. The cont ent s of t his publicat ion m ay not be reproduced in any part or as a whole, t ranscribed, st ored in a ret rieval syst em , t ranslat ed int o any language, or t ransm it t ed in any form or by any m eans, elect ronic, m echanical, m agnet ic, opt ical, chem ical, phot ocopying, m anual, or ot herwise, wit hout t he prior writ t en perm ission of ZyXEL Com m unicat ions Corporat ion.
  • Page 534: Appendix D Legal Information

    Appendix D Legal Information List of National Codes COUNTRY ISO 3166 2 LETTER CODE COUNTRY ISO 3166 2 LETTER CODE Aust ria Liecht enst ein Belgium Lit huania Bulgaria Luxem bourg Croat ia Malt a Cyprus Net herlands Czech Republic Nor way Denm ark Poland...
  • Page 535 Appendix D Legal Information Environment Statment European Union - Disposal and Recycling Information WEEE Directive The sym bol below m eans t hat according t o local regulat ions your product and/ or it s bat t er y shall be disposed of separat ely from dom est ic wast e.
  • Page 536 Appendix D Legal Information Environmental Product Declaration GS3700/XGS3700 Series User’s Guide...
  • Page 537: Zyxel Limited Warranty

    Appendix D Legal Information 灣 以 訊息僅適用於產品銷售至 灣地 是甲類的資訊產品,在居 的環境中使用時, 能會造成射頻干擾,在 種情況 ,使用者會被要求採 某些適當的 策 第 二條 經型式認證合格之 率射頻電機,非經許 ,公司 商號或使用者均不得擅自變更頻率 大 率或變更原設計之特性及 能 第 四條 率射頻電機之使用不得影響飛航安 及干擾合法 信;經發現有干擾現象時,應立即停用,並改善至無干擾時方得繼續使用 前項合法 信,指依電信法規定作業之無線電 信 率射頻電機須忍 合法 信或工業 科學及醫療用電波輻射性電機設備之干擾 安 警告 為了您的安 ,請先閱讀以 警告及指示 : •...
  • Page 538 Appendix D Legal Information Open Source Licenses This product cont ains in part som e free soft ware dist ribut ed under GPL license t erm s and/ or GPL like licenses. Open source licenses are provided wit h t he firm ware package. You can download t he lat est firm ware at w ww.zyxel.com . To obt ain t he source code covered under t hose Licenses, please cont act support @zyxel.com .t w t o get it .
  • Page 539: Index

    Index Index Numbers ARP scan aut hent icat ion and RADI US 802.1P priorit y set up 802.3az aut horizat ion privilege levels set up aut om at ic VLAN regist rat ion access cont rol lim it at ions login account rem ot e m anagem ent back up, configurat ion file...
  • Page 540 Index and QoS edit ing 206, 207 exam ple daylight saving t im e overview default gat eway 201, 205, 206, 207 set up default I P address viewing 206, 207 DHCP cloning a port See port cloning client I P pool clust er m anagem ent configurat ion opt ions and swit ch passwords...
  • Page 541 Index 25, 455 DUI D file t ransfer procedure dynam ic link aggregat ion rest rict ions over WAN GARP egress port GARP ( Generic At t ribut e Regist rat ion Prot ocol) Energy Efficient Et hernet GARP t erm inology error disable det ect 326, 330 GARP t im er...
  • Page 542 Index I GMP filt ering profile 231, 237, 238, 241, 242 profiles L2PT I GMP leave t im eout access port fast m orm al configurat ion I GMP snooping encapsulat ion LACP MAC address I GMP t hrot t ling m ode ingress port overview...
  • Page 543 Index loop guard Mem ory Buffer how it works MGMT port port shut down MI B probe packet and SNMP loop guard, vs STP support ed MI Bs MI B ( Managem ent I nform at ion Base) m ini GBI C port s connect ion speed connect or t ype t ransceiver inst allat ion...
  • Page 544 Index Mult iple Spanning Tree Prot ocol policy rout ing benefit s Mult iple Spanning Tree Prot ocol, See MSTP . cost savings Mult iple STP load sharing Mult iple STP , see MSTP overview policy- based rout ing configurat ion Port Aggregat ion Prot ocol, see PAgP group configurat ion port aut hent icat ion...
  • Page 545 Index t rust ed port s t rust ed com put ers unt rust ed port s 162, 167 rem ot e port m irroring priorit y level Rem oving t he Fan Module priorit y, queue assignm ent 44, 451, 452, 453 reset t ing 451, 452, 453 product regist rat ion...
  • Page 546 Index 139, 141, 144, 146 prot ocol operat ions Hello Tim e securit y how it works 140, 141, 144, 146 set up Max Age t raps pat h cost 132, 140, 145 140, 145 users port priorit y version 3 and securit y port st at e versions support ed root port...
  • Page 547 Index t raps accept able fram e t ype dest inat ion aut om at ic regist rat ion TRTCM ingress filt ering and bandwidt h cont rol int roduct ion and DiffServ num ber of VLANs color- aware m ode port num ber color- blind m ode port set t ings...
  • Page 548 Index m ast er rout er net work exam ple 430, 435 param et ers preem pt m ode 433, 434 433, 434 priorit y st at us uplink gat eway uplink st at us Virt ual Rout er Virt ual Rout er I D VRI D warrant y not e...

This manual is also suitable for:

Xgs3700 series

Table of Contents