ZyXEL Communications GS1920v2 Series User Manual

ZyXEL Communications GS1920v2 Series User Manual

8/24/48-port gbe smart managed switch
Hide thumbs Also See for GS1920v2 Series:
Table of Contents

Advertisement

User's Guide
GS1920v2 Series
8/24/48-port GbE Smart Managed Switch
Default Login Details
LAN IP Address
User Name
Password
Copyright © 2018 Zyxel Communications Corporation
http://DHCP-assigned
IP or 192.168.1.1
admin
1234
Version 4.50 Edition 2, 08/2018

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications GS1920v2 Series

  • Page 1 User’s Guide GS1920v2 Series 8/24/48-port GbE Smart Managed Switch Version 4.50 Edition 2, 08/2018 Default Login Details LAN IP Address http://DHCP-assigned IP or 192.168.1.1 User Name admin Password 1234 Copyright © 2018 Zyxel Communications Corporation...
  • Page 2 • More Information Go to for product discussions. https:/ / b usine ssfo rum .zyxe l.c o m Go to to find other information on the Switch suppo rt.zyxe l.c o m GS1920v2 Series User’s Guide...
  • Page 3: Do C Um E Nt C O Nve Ntio Ns

    Figures in this user guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Generic Router Wireless Router / Access Point Generic Switch Smart TV Desktop Laptop IP Camera Printer Server GS1920v2 Series User’s Guide...
  • Page 4: Table Of Contents

    Loop Guard ............................258 Layer 2 Protocol Tunneling ........................ 262 PPPoE ..............................266 Error Disable ............................274 Private VLAN ............................281 Green Ethernet ........................... 283 Link Layer Discovery Protocol (LLDP) ....................285 OAM ..............................308 Static Route ............................316 GS1920v2 Series User’s Guide...
  • Page 5 Syslog Setup ............................372 Cluster Management ......................... 375 MAC Table ............................381 ARP Table ............................384 Path MTU Table ........................... 386 Configure Clone ..........................387 IPv6 Neighbor Table ........................... 390 Port Status ............................392 Troubleshooting ..........................398 GS1920v2 Series User’s Guide...
  • Page 6: Table Of Contents

    2.4 Wall Mounting (GS1920-8HPv2 Only) .................... 31 2.4.1 Installation Requirements ..................... 31 2.5 Rack Mounting ..........................32 2.5.1 Installation Requirements ..................... 33 2.5.2 Precautions ........................... 33 2.5.3 Attaching the Mounting Brackets to the Switch ............... 33 GS1920v2 Series User’s Guide...
  • Page 7 5.1 Overview ............................56 5.1.1 Creating a VLAN ........................56 5.1.2 Setting Port VID ........................57 5.1.3 Configuring Switch Management IP Address ..............58 C ha pte r 6 T uto ria ls ...............................60 6.1 Overview ............................60 GS1920v2 Series User’s Guide...
  • Page 8 8.10.4 IPv6 Interface Setup ......................98 8.10.5 IPv6 Link-Local Address Setup .................... 98 8.10.6 IPv6 Global Address Setup ....................99 8.10.7 IPv6 Neighbor Discovery Setup ..................100 8.10.8 IPv6 Neighbor Setup ......................101 8.10.9 DHCPv6 Client Setup ......................102 GS1920v2 Series User’s Guide...
  • Page 9 11.1.1 What You Can Do ......................129 11.1.2 What You Need To Know ....................129 11.2 Configuring Static Multicast Forwarding .................. 130 C ha pte r 12 Filte ring ..............................133 12.1 Filtering Overview ........................133 12.1.1 What You Can Do ......................133 GS1920v2 Series User’s Guide...
  • Page 10 16.1 Mirroring Overview ........................160 16.1.1 What You Can Do ......................160 16.2 Port Mirroring Setup ........................160 C ha pte r 17 L ink Ag g re g a tio n ..........................162 17.1 Link Aggregation Overview ...................... 162 GS1920v2 Series User’s Guide...
  • Page 11 21.1 Classifier Overview ........................185 21.1.1 What You Can Do ......................185 21.1.2 What You Need to Know ....................185 21.2 Classifier Status ..........................186 21.3 Classifier Configuration ......................186 21.3.1 Viewing and Editing Classifier Configuration Summary ..........190 GS1920v2 Series User’s Guide...
  • Page 12 24.5.2 MVR Configuration Example ................... 222 C ha pte r 25 AAA ..............................225 25.1 AAA Overview ........................... 225 25.1.1 What You Can Do ......................225 25.1.2 What You Need to Know ....................225 25.2 AAA Screens ..........................226 GS1920v2 Series User’s Guide...
  • Page 13 L a ye r 2 Pro to c o l T unne ling ......................262 28.1 Layer 2 Protocol Tunneling Overview ..................262 28.1.1 What You Can Do ......................262 28.1.2 What You Need to Know ....................262 GS1920v2 Series User’s Guide...
  • Page 14 L ink L a ye r Disc o ve ry Pro to c o l (L L DP) .....................285 33.1 LLDP Overview ..........................285 33.2 LLDP-MED Overview ........................286 33.3 LLDP Screens ..........................287 33.4 LLDP Local Status ........................288 33.4.1 LLDP Local Port Status Detail ..................289 33.5 LLDP Remote Status ........................292 GS1920v2 Series User’s Guide...
  • Page 15 37.1.2 What You Need to Know ....................323 37.2 DHCP Configuration ........................324 37.3 DHCPv4 Status ........................... 324 37.4 DHCPv4 Relay ..........................324 37.4.1 DHCPv4 Relay Agent Information ................... 325 37.4.2 DHCPv4 Option 82 Profile ....................326 GS1920v2 Series User’s Guide...
  • Page 16 40.1.1 What You Can Do ......................348 40.2 The Access Control Main Screen ....................348 40.3 Configuring SNMP ........................349 40.3.1 Configuring SNMP Trap Group ..................350 40.3.2 Enabling/Disabling Sending of SNMP Traps on a Port ........... 351 GS1920v2 Series User’s Guide...
  • Page 17 45.1 MAC Table Overview ........................ 381 45.1.1 What You Can Do ......................381 45.1.2 What You Need to Know ....................381 45.2 Viewing the MAC Table ......................382 C ha pte r 46 ARP T a b le ............................384 GS1920v2 Series User’s Guide...
  • Page 18 51.2 Switch Access and Login ......................399 51.3 Switch Configuration ........................401 Appendix A Customer Support ..................... 402 Appendix B Common Services ...................... 408 Appendix C IPv6..........................411 Appendix D Legal Information ...................... 419 Inde x ..............................423 GS1920v2 Series User’s Guide...
  • Page 19: Use R's G Uide

    A RT Use r’s G uide...
  • Page 20: Getting To Know Your Switch

    HA PTER G e tting to Kno w Yo ur Switc h 1.1 Intro duc tio n This chapter introduces the main features and applications of the Switch. The GS1920v2 Series consists of the following models: • GS1920-8HPv2 • GS1920-24v2 •...
  • Page 21: Mode Changing

    Switch will be overwritten with what you have configured in Nebula. When you change the Switch’s management mode from Nebula-manged mode to standalone mode, the Switch will reset to its factory-default settings. GS1920v2 Series User’s Guide...
  • Page 22 Fro m Ne b ula - m a na g e d to Sta nda lo ne To return to direct management standalone mode, just click to remove the Switch from the Unre g iste r organization/site in the Nebula web portal. The Switch will reboot and restore the factory default settings. GS1920v2 Series User’s Guide...
  • Page 23: Zon Utility

    GS1920-24HPv2 Power management mode - Classification GS1920-48HPv2 Power management mode - Consumption Scheduled PoE (PoE Time Range) 1.2 Applic a tio ns This section shows a few examples of using the Switch in various network environments. GS1920v2 Series User’s Guide...
  • Page 24: Backbone Application

    Switch. You can provide a super-fast uplink connection by using a Gigabit Ethernet/SFP port on the Switch. Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location. GS1920v2 Series User’s Guide...
  • Page 25: High Performance Switching Example

    With VLAN, a station cannot directly talk to or hear from stations that are not in the same group(s) unless such traffic first goes through a router. For more information on VLANs, refer to Chapter 9 on page 107. GS1920v2 Series User’s Guide...
  • Page 26: Ways To Manage The Switch

    Section 8.12 on page 104 or the NCC User’s Guide for detailed information about how to access the NCC and manage your Switch via the NCC. See the NCC User’s Guide for how to configure Nebula managed devices. GS1920v2 Series User’s Guide...
  • Page 27: Good Habits For Managing The Switch

    Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. GS1920v2 Series User’s Guide...
  • Page 28: Hardware Installation And Connection

    2.2 De skto p Insta lla tio n Pro c e dure Make sure the Switch is clean and dry. Remove the adhesive backing from the rubber feet. GS1920v2 Series User’s Guide...
  • Page 29: Desk Mounting (Gs1920-8Hpv2 Only)

    2.3.1 Insta lla tio n Re q uire m e nts • Two mounting brackets • Eight M3 flat head screws and a #2 Philips screwdriver • Four M4 flat head screws and a #2 Philips screwdriver • Four washers (inside diameter: 3.5mm; outside diameter: 11.5mm) GS1920v2 Series User’s Guide...
  • Page 30: Precautions

    Position the Switch in place and mark the places for drilling with the attached brackets. Drill holes at the marked places under the table. Line up the two screw holes on the bracket with the screw holes under the table. GS1920v2 Series User’s Guide...
  • Page 31: Wall Mounting (Gs1920-8Hpv2 Only)

    If not using screw anchors, use a screwdriver to insert the screws into the wall. Do not insert the screws all the way in - leave a gap of about 0.5 cm. Make sure the screws are fastened well enough to hold the weight of the Switch with the connection cables. GS1920v2 Series User’s Guide...
  • Page 32: Rack Mounting

    The Switch can be mounted on an EIA standard size, 19-inch rack or in a wiring closet with other equipment. Follow the steps below to mount your Switch on a standard EIA rack using a rack-mounting kit. GS1920v2 Series User’s Guide...
  • Page 33: Installation Requirements

    Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the rack. GS1920v2 Series User’s Guide...
  • Page 34 Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. Note: Make sure you tighten all the four screws to prevent the Switch from getting slanted. Repeat steps to attach the second mounting bracket on the other side of the rack. GS1920v2 Series User’s Guide...
  • Page 35: Hardware Panels

    Gigabit, the speed can be 10 Mbps, 100 Mbps or 1000 Mbps and the duplex mode can be half duplex or full duplex. An auto-negotiating port can detect and adjust to the optimum Ethernet speed (10/100/1000 Mbps) and duplex mode (full duplex or half duplex) of the connected device. GS1920v2 Series User’s Guide...
  • Page 36: Poe (Gs1920-8Hpv2 & Gs1920-24Hpv2 & Gs1920-48Hpv2)

    (MSA). See the SFF committee’s INF-8074i specification Rev 1.0 for details. You can change transceivers while the Switch is operating. You can use different transceivers to connect to Ethernet switches with different types of fiber-optic or even copper cable connectors. GS1920v2 Series User’s Guide...
  • Page 37 Note: Make sure the transceiver’s latch is pushed all the way down, so the transceiver can be pulled out successfully. Pull the transceiver out of the slot. Note: Do NOT pull the transceiver out by force. You could damage it. GS1920v2 Series User’s Guide...
  • Page 38: Poe Mode (Only Available For Gs1920-48Hpv2)

    View the LEDs to ensure proper functioning of the Switch and as an aid in troubleshooting (see Section 3.3 on page 40). 3.2 Re a r Pa ne l The following figures show the rear panels of the Switch. Rear Panel: GS1920-8HPv2 Fig ure 20 Rear Panel: GS1920-24v2 Fig ure 21 GS1920v2 Series User’s Guide...
  • Page 39: Grounding

    Wa rning ! C o nne c t the g ro und c a b le b e fo re yo u c o nne c t a ny o the r c a b le s o r wiring . Grounding Fig ure 25 GS1920v2 Series User’s Guide...
  • Page 40: Power Connector

    The Switch is uploading firmware. While the Switch is doing this, don’t turn off the power. Blinking Shows the actual location of the Switch between several devices in a rack. The default timer is 30 minutes when you are configuring the Switch. The locator is not functioning or malfunctioning. GS1920v2 Series User’s Guide...
  • Page 41 The Switch is transmitting/receiving to/from a 10 Mbps or a 100 Mbps Ethernet network. 25-28 (GS1920- 24v2/24HPv2) The link to a 10 Mbps or a 100 Mbps Ethernet network is up. The link to an Ethernet network is down. 45-48 (GS1920- 48v2/48HPv2) GS1920v2 Series User’s Guide...
  • Page 42 The Switch is transmitting/receiving data 1000 Mbps. Amber The uplink port is linking at 100 Mbps. Blinking The Switch is transmitting/receiving data 100 Mbps. There is no link or port, the uplink port is shut down. GS1920v2 Series User’s Guide...
  • Page 43: T E C Hnic A L Re Fe Re Nc E

    A RT T e c hnic a l Re fe re nc e...
  • Page 44: The Web Configurator

    Address field. Press [ENTER]. Your computer must be in the same subnet in order to access this website address. Also, you can use the ZON Utility to check your Switch’s IP address. The following screen appears. GS1920v2 Series User’s Guide...
  • Page 45 20). Visit NCC Fig ure 27 Alternatively, click to log into the web configurator to manage the Switch directly. The default L o g in username is and associated default password is a dm in 1234 GS1920v2 Series User’s Guide...
  • Page 46 Click to open a screen Pa sswo rd / SNMP where you can change the administrator and SNMP passwords simultaneously. Otherwise, click Ignore to close it. GS1920v2 Series User’s Guide...
  • Page 47 Get- and GetNext- G e t C o m m unity requests from the management station. string is only used by SNMP managers using SNMP version 2c or lower. G e t C o m m unity GS1920v2 Series User’s Guide...
  • Page 48: The Status Screen

    The following figure shows the navigating components of a web configurator screen. Web Configurator Home Screen for PoE model(s) (Status) Fig ure 32 - Click the menu items to open submenu links, and then click on a submenu link to open the screen in the main window. GS1920v2 Series User’s Guide...
  • Page 49 - Click this link to go to the ZON Management screen where you can see and manage Ne ig hb o r neighbor devices learned by the Switch. In the navigation panel, click a main link to reveal a list of submenu links. GS1920v2 Series User’s Guide...
  • Page 50 This link takes you to a screen where you can set priorities, PoE power-up settings and schedule so that the Switch is able to reserve and allocate power to certain PDs. Interface Setup This link takes you to a screen where you can configure settings for individual interface type and ID. GS1920v2 Series User’s Guide...
  • Page 51 This link takes you to a screen where you can configure protection against network loops that occur on the edge of your network. Layer 2 Protocol This link takes you to a screen where you can configure L2PT (Layer 2 Protocol Tunneling) Tunneling settings on the Switch. GS1920v2 Series User’s Guide...
  • Page 52: Change Your Password

    After you log in for the first time, it is recommended you change the default administrator password. Click > > to display the next screen. Ma na g e m e nt Ac c e ss C o ntro l L o g ins GS1920v2 Series User’s Guide...
  • Page 53: Saving Your Configuration

    Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the management port of the Switch. Filter all traffic to the CPU port. Disable all ports. Misconfigure the text configuration file. Forget the password and/or IP address. GS1920v2 Series User’s Guide...
  • Page 54: Resetting The Switch

    You have to log in with your password again after L o g o ut you log out. This is recommended after you finish a management session for security reasons. Web Configurator: Logout Screen Fig ure 34 GS1920v2 Series User’s Guide...
  • Page 55: Help

    4.8 He lp The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the link from a web configurator screen to view an online help description of that screen. He lp GS1920v2 Series User’s Guide...
  • Page 56: Initial Setup Example

    Fig ure 35 Click > > in the navigation panel and click the Adva nc e d Applic a tio n VL AN VL AN C o nfig ura tio n Sta tic link. VL AN Se tup GS1920v2 Series User’s Guide...
  • Page 57: Setting Port Vid

    VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on that port get sent to VLAN 2. GS1920v2 Series User’s Guide...
  • Page 58: Configuring Switch Management Ip Address

    5.1.3 C o nfig uring Switc h Ma na g e m e nt IP Addre ss The default management IP address of the Switch is 192.168.1.1. You can configure another IP address in a different subnet for management purposes. The following figure shows an example. GS1920v2 Series User’s Guide...
  • Page 59 This is the same as the VLAN ID you configure in the screen. Sta tic VL AN Click to save your changes back to the run- time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. GS1920v2 Series User’s Guide...
  • Page 60: Tutorials

    DHCP Client ( 1 and 100 DHCP Client ( 1 and 100 Access the Switch through by default. Log into the Switch by entering the username http:/ / 192.168.1.1 (default: ) and password (default: a dm in 1234 GS1920v2 Series User’s Guide...
  • Page 61 VL AN C o nfig ura tio n VL AN Po rt Se tup ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. Tutorial: Tag Untagged Frames Fig ure 40 GS1920v2 Series User’s Guide...
  • Page 62 5 because the DHCP server is connected to port 5. Keep ports 6 and 7 because they are Untruste d connected to DHCP clients. Click Apply Tutorial: Set the DHCP Server Port to Trusted Fig ure 42 GS1920v2 Series User’s Guide...
  • Page 63: How To Use Dhcpv4 Relay On The Switch

    This tutorial describes how to configure your Switch to forward DHCP client requests to a specific DHCP server. The DHCP server can then assign a specific IP address based on the information in the DHCP requests. GS1920v2 Series User’s Guide...
  • Page 64: Dhcp Relay Tutorial Introduction

    > and set the VLAN type to . Click to save the settings to Ba sic Se tting Switc h Se tup 802.1Q Apply the run-time memory. Tutorial: Set VLAN Type to 802.1Q Fig ure 46 GS1920v2 Series User’s Guide...
  • Page 65 2 to add a tag to incoming untagged frames received on that port so PVID that the frames are forwarded to the VLAN group that the tag defines. 10 Click to save your changes back to the run-time memory. Apply GS1920v2 Series User’s Guide...
  • Page 66: Configuring Dhcpv4 Relay

    Fig ure 50 Click the link in the upper right corner of the web configurator to save your configuration Sa ve permanently. The DHCP server can then assign a specific IP address based on the DHCP request. GS1920v2 Series User’s Guide...
  • Page 67: Troubleshooting

    You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. You clicked the link on the Switch to have your settings take effect. Sa ve GS1920v2 Series User’s Guide...
  • Page 68: Status And Zon

    Switch or click at the top right corner of the web Sta tus Sta tus configurator. The screen displays general device information, system status, and its IP addresses. Sta tus GS1920v2 Series User’s Guide...
  • Page 69 Version and the decimal is the version of the hardware change. For example, V2.0 is a hardware version for the Switch where 2 identifies the GS1920v2 Series, and .0 is the first hardware change. System Up Time This field displays how long the Switch has been running since it last restarted or was turned on.
  • Page 70: Zyxel One Network (Zon) Utility

    ZON Utility at www.zyxel.com and install it on a PC (Windows operating system). 7.3.1 Re q uire m e nts Before installing the ZON Utility on your PC, please make sure it meets the requirements listed below. GS1920v2 Series User’s Guide...
  • Page 71: Run The Zon Utility

    7.3.2 Run the ZO N Utility Double-click the ZON Utility to run it. The first time you run the ZON Utility, you will see if your device and firmware version support the ZON Utility. Click the button to close this screen. GS1920v2 Series User’s Guide...
  • Page 72 The release notes are in the firmware zip file on the Zyxel web site. ZON Utility Screen Fig ure 53 Select a network adapter to which your supported devices are connected. GS1920v2 Series User’s Guide...
  • Page 73 Select a device and then use the icons to perform actions. Some functions may not be available for your devices. Note: You must know the selected device admin password before taking actions on the device using the ZON utility icons. GS1920v2 Series User’s Guide...
  • Page 74 DESC RIPT IO N Type This field displays an icon of the kind of device discovered. Model This field displays the model name of the discovered device. Firmware Version This field displays the firmware version of the discovered device. GS1920v2 Series User’s Guide...
  • Page 75: Zon Neighbor Management Screen

    Switch. This allows you to plan and use within the power budget of the Switch. Remote Port This show the number of the neighbor device’s port which is connected to the Switch. Desc. This shows the description of the neighbor device’s port which is connected to the Switch. GS1920v2 Series User’s Guide...
  • Page 76 The Switch must support power sourcing (PSE) or the network device is a powered device (PD). • If multiple neighbor devices use the same port, the button is not available and Re se t will show “ ” instead. • You can only reset Zyxel products. GS1920v2 Series User’s Guide...
  • Page 77: Basic Setting

    8.2 Syste m Info rm a tio n In the navigation panel, click > to display the screen as shown. Use this screen Ba sic Se tting Syste m Info to view general system information. You can check the firmware version number. GS1920v2 Series User’s Guide...
  • Page 78 This field displays the percentage (%) of memory being used in this memory pool. Hardware Monitor Temperature The Switch has temperature sensors that are capable of detecting and reporting if the Unit temperature rises above the threshold. You may choose the temperature unit (Centigrade or Fahrenheit) in this field. GS1920v2 Series User’s Guide...
  • Page 79: General Setup

    Use this screen to configure general settings such as the system name and time. Click > Ba sic Se tting in the navigation panel to display the screen as shown. G e ne ra l Se tup GS1920v2 Series User’s Guide...
  • Page 80 C urre nt mm-dd) field after you click Da te Apply Time Zone Select the time difference between UTC (Universal Time Coordinated, formerly known as GMT, Greenwich Mean Time) and your time zone from the drop-down list box. GS1920v2 Series User’s Guide...
  • Page 81: Introduction To Vlans

    With VLAN, all broadcasts are confined to a specific broadcast domain. Note: VLAN is unidirectional; it only governs outgoing traffic. Chapter 9 on page 107 for information on port-based and 802.1Q tagged VLANs. GS1920v2 Series User’s Guide...
  • Page 82: Switch Setup

    Leave All Timer Leave All Timer sets the duration of the Leave All Period timer for GVRP in milliseconds. Each port has a single Leave All Period timer. Leave All Timer must be larger than Leave Timer. GS1920v2 Series User’s Guide...
  • Page 83: Ip Setup

    You can configure up to 64 IP addresses which are used to access and manage the Switch from the ports belonging to the pre-defined VLAN(s). Note: You must configure a VLAN first. Each VLAN can only have one management IP address. GS1920v2 Series User’s Guide...
  • Page 84 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to reset the fields to your previous configuration. C a nc e l GS1920v2 Series User’s Guide...
  • Page 85: Port Setup

    C a nc e l De le te 8.7 Po rt Se tup Use this screen to configure Switch port settings. Click > in the navigation panel Ba sic Se tting Po rt Se tup to display the configuration screen. GS1920v2 Series User’s Guide...
  • Page 86 GS1920v2 Series User’s Guide...
  • Page 87: Poe Status

    PoE removes the hassle of trying to find a nearby electric outlet to power up devices. Powered Device Examples Fig ure 64 You can also set priorities so that the Switch is able to reserve and allocate power to certain PDs. GS1920v2 Series User’s Guide...
  • Page 88: The Poe Status Screen

    8.8.1 T he Po E Sta tus Sc re e n To view the current amount of power that PDs are receiving from the Switch, click > Ba sic Se tting Po E Se tup Basic Setting > PoE Setup Fig ure 65 GS1920v2 Series User’s Guide...
  • Page 89: Poe Time Range Status

    Use this screen to see whether PoE is scheduled to be enabled on a port. Click the link in the screen. The following screen opens. Po E T im e Ra ng e Sta tus Ba sic Se tting > Po E Se tup GS1920v2 Series User’s Guide...
  • Page 90: Poe Setup

    Use this screen to set the priority levels, power-up mode and schedule for the Switch in distributing power to PDs. Click the link in the screen. The following screen opens. Po E Se tup Ba sic Se tting > Po E Se tup GS1920v2 Series User’s Guide...
  • Page 91 Note: Changes in this row are copied to all the ports as soon as you make them. Select this to provide power to a PD connected to the port. If left unchecked, the PD connected to the port cannot receive power from the Switch. GS1920v2 Series User’s Guide...
  • Page 92: Interface Setup

    An IPv6 address is configured on a per-interface basis. The interface can be a physical interface (for example, an Ethernet port) or a virtual interface (for example, a VLAN). The Switch supports the VLAN interface type for IPv6 at the time of writing. GS1920v2 Series User’s Guide...
  • Page 93: Ipv6

    8.10 IPv6 Use this screen to view the IPv6 interface status and configure Switch’s management IPv6 addresses. Click > in the navigation panel to display the IPv6 status screen as shown next. Ba sic Se tting IPv6 GS1920v2 Series User’s Guide...
  • Page 94: Ipv6 Interface Status

    Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the > screen. The following screen opens. Ba sic Se tting IPv6 Basic Setting > IPv6 > IPv6 Interface Status Fig ure 70 GS1920v2 Series User’s Guide...
  • Page 95 IA_NA before the lifetimes expire. This field displays the DHCPv6 T2 timer. If the time T2 is reached and the server does not respond, the Switch sends a Rebind message to any available server. GS1920v2 Series User’s Guide...
  • Page 96: Ipv6 Configuration

    Click the link to go to a screen where you can enable an IPv6 interface on the Switch. Setup IPv6 Addressing IPv6 Link- Click the link to go to a screen where you can configure the IPv6 link-local address for an Local interface. Address Setup GS1920v2 Series User’s Guide...
  • Page 97: Ipv6 Global Setup

    Cancel Click to begin configuring this screen afresh. C a nc e l Clear Click to reset the fields to the factory defaults. C le a r GS1920v2 Series User’s Guide...
  • Page 98: Ipv6 Interface Setup

    Use this screen to configure the interface’s link-local address and default gateway. Click the link next to in the screen to display the screen as shown next. IPv6 L ink- L o c a l Addre ss Se tup IPv6 C o nfig ura tio n GS1920v2 Series User’s Guide...
  • Page 99: Ipv6 Global Address Setup

    IPv6 G lo b a l Addre ss in the screen to display the screen as shown next. Se tup IPv6 C o nfig ura tio n Basic Setting > IPv6 > IPv6 Configuration > IPv6 Global Address Setup Fig ure 75 GS1920v2 Series User’s Guide...
  • Page 100: Ipv6 Neighbor Discovery Setup

    Ne ig hb o r Disc o ve ry Se tup IPv6 C o nfig ura tio n Basic Setting > IPv6 > IPv6 Configuration > IPv6 Neighbor Discovery Setup Fig ure 76 GS1920v2 Series User’s Guide...
  • Page 101: Ipv6 Neighbor Setup

    IPv6 Ne ig hb o r Se tup IPv6 C o nfig ura tio n screen to display the screen as shown next. Basic Setting > IPv6 > IPv6 Configuration > IPv6 Neighbor Setup Fig ure 77 GS1920v2 Series User’s Guide...
  • Page 102: Dhcpv6 Client Setup

    Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Click the link next to in the screen to display the screen as shown next. DHC Pv6 C lie nt Se tup IPv6 C o nfig ura tio n GS1920v2 Series User’s Guide...
  • Page 103 This field displays whether the Switch obtains a list of domain names from the DHCP server. Information This field displays the time interval (in seconds) at which the Switch exchanges other configuration Refresh information with a DHCPv6 server again. Minimum GS1920v2 Series User’s Guide...
  • Page 104: Dns

    The Switch is managed and provisioned automatically by the NCC (Nebula Control Center) when: • It is connected to the Internet • The feature is enabled Ne b ula C o ntro l C e nte r Disc o ve ry • It has been registered in the NCC. GS1920v2 Series User’s Guide...
  • Page 105: Nebula Center Control Discovery

    8.12.2 Ne b ula Switc h Re g istra tio n Click > to display this screen. Ba sic Se tting C lo ud Ma na g e m e nt > Ne b ula Switc h Re g istra tio n GS1920v2 Series User’s Guide...
  • Page 106 This screen has a QR code containing the Switch’s serial number and MAC address for handy NCC registration of the Switch using the Nebula Mobile app. First, download the app from the Google Play store for Android devices or the App Store for iOS devices and create an organization and site. GS1920v2 Series User’s Guide...
  • Page 107: Vlan

    A tagged frame is four bytes longer than an untagged frame and contains two bytes of TPID (Tag Protocol Identifier, residing within the type/length field of the Ethernet frame) and two bytes of TCI (Tag Control Information, starts after the source address field of the Ethernet frame). GS1920v2 Series User’s Guide...
  • Page 108 GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Enable this function to permit VLAN groups beyond the local Switch. GS1920v2 Series User’s Guide...
  • Page 109 VLAN trunking port(s). Port VLAN Trunking Fig ure 83 9.1.2.3 Se le c t the VL AN T ype Select a VLAN type in the > screen. Ba sic Se tting Switc h Se tup GS1920v2 Series User’s Guide...
  • Page 110: Vlan Status

    This is the number of VLANs that match the searching criteria and display in the list below. Search Results This field displays only when you use the button to look for certain VLANs. Se a rc h GS1920v2 Series User’s Guide...
  • Page 111: Vlan Details

    : added as a permanent entry Sta tic : manually added as a Voice VLAN Vo ic e : added via multicast VLAN registration : manually added as MAC-based VLAN MAC - b a se d GS1920v2 Series User’s Guide...
  • Page 112: Vlan Configuration

    Use this screen to configure a static VLAN for the Switch. Click the link in the Sta tic VL AN Se tup VL AN screen to display the screen as shown next. C o nfig ura tio n GS1920v2 Series User’s Guide...
  • Page 113 VLAN group. Fo rb idde n Tagging Select if you want the port to tag all outgoing frames transmitted with this VLAN T X T a g g ing Group ID. GS1920v2 Series User’s Guide...
  • Page 114: Configure Vlan Port Setting

    Use the VLAN Port Setup screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click the link in the screen. VL AN Po rt Se tup VL AN C o nfig ura tio n Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup Fig ure 89 GS1920v2 Series User’s Guide...
  • Page 115: Subnet Based Vlans

    IP subnet. For example, an ISP (Internet Services Provider) may divide different types of services it provides to customers into different IP subnets. Traffic for voice services is designated for IP subnet 172.16.1.0/24, GS1920v2 Series User’s Guide...
  • Page 116: Configuring Subnet Based Vlan

    Sub ne t Ba se d VL AN Se tup VL AN C o nfig ura tio n screen as shown. Note: Subnet based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. GS1920v2 Series User’s Guide...
  • Page 117 Click to begin configuring this screen afresh. C a nc e l Index This is the index number identifying this subnet based VLAN. Click on any of these numbers to edit an existing subnet based VLAN. GS1920v2 Series User’s Guide...
  • Page 118: Protocol Based Vlans

    6 and 7 will be in another group and have higher priority than ARP traffic, when they go through the uplink port to a backbone switch C. Protocol Based VLAN Application Example Fig ure 92 GS1920v2 Series User’s Guide...
  • Page 119: Configuring Protocol Based Vlan

    This is the index number identifying this protocol based VLAN. Click on any of these numbers to edit an existing protocol based VLAN. Active This field shows whether the protocol based VLAN is active or not. GS1920v2 Series User’s Guide...
  • Page 120: Voice Vlan

    Vo ic e VL AN Se tup VL AN C o nfig ura tio n shown. Advanced Application > VLAN > VLAN Configuration > Voice VLAN Setup Fig ure 94 GS1920v2 Series User’s Guide...
  • Page 121: Mac Based Vlan

    MAC address in the MAC-based VLAN setup screen. You can also delete a MAC-based VLAN entry in the same screen. Click the link in the screen to see the following screen. MAC Ba se d VL AN Se tup VL AN C o nfig ura tio n GS1920v2 Series User’s Guide...
  • Page 122: Port-Based Vlan Setup

    (an egress port is an outgoing port, that is, a port through which a data packet leaves) for both ports. GS1920v2 Series User’s Guide...
  • Page 123: Configure A Port-Based Vlan

    Switc h Se tup Adva nc e d > from the navigation panel to display the next screen. Applic a tio n VL AN Advanced Application > VLAN: Port Based VLAN Setup (All Connected) Fig ure 96 GS1920v2 Series User’s Guide...
  • Page 124 Chapter 9 VLAN Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation) Fig ure 97 GS1920v2 Series User’s Guide...
  • Page 125: Technical Reference

    Select the protocol. Leave the default value Type the VLAN ID of an existing VLAN. In our example we already created a static VLAN with an ID of 5. Type Leave the priority set to and click GS1920v2 Series User’s Guide...
  • Page 126 To add more ports to this protocol based VLAN. Click the index number of the protocol based VLAN entry. Click Change the value in the field to the next port you want to add. Po rt Click GS1920v2 Series User’s Guide...
  • Page 127: Static Mac Forwarding

    Chapter 19 on page 180 for more information on port security. Click > in the navigation panel to display the Adva nc e d Applic a tio n Sta tic MAC Fo rwa rding configuration screen as shown. GS1920v2 Series User’s Guide...
  • Page 128 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l GS1920v2 Series User’s Guide...
  • Page 129: Static Multicast Forwarding

    130 shows frames being forwarded to devices connected to port 3. Figure 102 on page 130 shows frames being forwarded to ports 2 and 3 within VLAN group 4. No Static Multicast Forwarding Fig ure 100 GS1920v2 Series User’s Guide...
  • Page 130: Configuring Static Multicast Forwarding

    Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). Click > to display the configuration screen as shown. Adva nc e d Applic a tio n Sta tic Multic a st Fo rwa rding GS1920v2 Series User’s Guide...
  • Page 131 This field displays the port(s) within a identified VLAN group to which frames containing the specified multicast MAC address will be forwarded. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. GS1920v2 Series User’s Guide...
  • Page 132 Table 46 Advanced Application > Static Multicast Forwarding (continued) L ABEL DESC RIPT IO N Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l GS1920v2 Series User’s Guide...
  • Page 133: Filtering

    Use this screen to create rules for traffic going through the Switch. Click > Adva nc e d Applic a tio n Filte ring in the navigation panel to display the screen as shown next. Advanced Application > Filtering Fig ure 104 GS1920v2 Series User’s Guide...
  • Page 134 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rule(s) that you want to remove and then click the button. De le te Cancel Click to clear the selected checkbox(es). C a nc e l GS1920v2 Series User’s Guide...
  • Page 135: Spanning Tree Protocol

    The Switch uses IEEE 802.1w RSTP (Rapid Spanning Tree Protocol) that allows faster convergence of the spanning tree than STP (while also being backwards compatible with STP-only aware bridges). In RSTP, topology change information is directly propagated throughout the network from the device that GS1920v2 Series User’s Guide...
  • Page 136 Data Units) transmitted from the root bridge. If a bridge does not get a Hello BPDU after a predefined interval (Max Age), the bridge assumes that the link to the root bridge is down. This bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a valid network topology. GS1920v2 Series User’s Guide...
  • Page 137 • Grouping of multiple bridges (or switching devices) into regions that appear as one single bridge on the network. • A VLAN can be mapped to a specific Multiple Spanning Tree Instance (MSTI). MSTI allows multiple VLANs to use the same spanning tree. GS1920v2 Series User’s Guide...
  • Page 138: Spanning Tree Protocol Status Screen

    > C o nfig ura tio n Adva nc e d Applic a tio n Spa nning T re e Pro to c o l Advanced Application > Spanning Tree Protocol > Configuration Fig ure 107 GS1920v2 Series User’s Guide...
  • Page 139: Configure Rapid Spanning Tree Protocol

    Click in the > screen. RST P Adva nc e d Applic a tio n Spa nning T re e Pro to c o l Advanced Application > Spanning Tree Protocol > RSTP Fig ure 108 GS1920v2 Series User’s Guide...
  • Page 140 Path cost is the cost of transmitting a frame on to a LAN through that port. It is recommended to assign this value according to the speed of the bridge. The slower the media, the higher the cost - see Table 48 on page 136 for more information. GS1920v2 Series User’s Guide...
  • Page 141: Rapid Spanning Tree Protocol Status

    This is the path cost from the root port on this Switch to the root switch. Port ID This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. GS1920v2 Series User’s Guide...
  • Page 142: Configure Multiple Rapid Spanning Tree Protocol

    To configure MRSTP, click in the > screen. See MRST P Adva nc e d Applic a tio n Spa nning T re e Pro to c o l Section 13.1 on page 135 for more information on MRSTP. GS1920v2 Series User’s Guide...
  • Page 143 LAN. If it is a root port, a new root port is selected from among the Switch ports attached to the network. The allowed range is 6 to 40 seconds. GS1920v2 Series User’s Guide...
  • Page 144: Multiple Rapid Spanning Tree Protocol Status

    Spa nning T re e Pro to c o l screen as shown next. See Section 13.1 on page 135 for more information on MRSTP. Note: This screen is only available after you activate MRSTP on the Switch. GS1920v2 Series User’s Guide...
  • Page 145 - The port learns MAC addresses and processes BPDUs, but does not forward L e a rning frames yet. • - The port is operating normally. It learns MAC addresses, processes BPDUs and Fo rwa rding forwards received frames. GS1920v2 Series User’s Guide...
  • Page 146: Configure Multiple Spanning Tree Protocol

    To configure MSTP, click in the > screen. See MST P Adva nc e d Applic a tio n Spa nning T re e Pro to c o l Multiple STP on page 137 for more information on MSTP. GS1920v2 Series User’s Guide...
  • Page 147 Chapter 13 Spanning Tree Protocol Advanced Application > Spanning Tree Protocol > MSTP Fig ure 112 GS1920v2 Series User’s Guide...
  • Page 148 - to remove all VLAN(s) from being mapped to this MST instance. C le a r Enabled VLAN(s) This field displays which VLAN(s) are mapped to this MST instance. Port This field displays the port number. GS1920v2 Series User’s Guide...
  • Page 149: Multiple Spanning Tree Protocol Port Configuration

    Spa nning T re e Pro to c o l > MST P > Po rt the status screen as shown next. See Multiple STP on page 137 for more information on MSTP. Advanced Application > Spanning Tree Protocol > MSTP > Port Fig ure 113 GS1920v2 Series User’s Guide...
  • Page 150: Multiple Spanning Tree Protocol Status

    Spa nning T re e Pro to c o l screen as shown next. See Multiple STP on page 137 for more information on MSTP. Note: This screen is only available after you activate MSTP on the Switch. GS1920v2 Series User’s Guide...
  • Page 151 This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. Configuration This field displays the configuration name for this MST region. Name Revision Number This field displays the revision number for this MST region. GS1920v2 Series User’s Guide...
  • Page 152 This field displays the path cost to the LAN segment to which the port is connected when the port is a designated port. Otherwise, it displays the path cost to the root bridge from the designated port for the LAN segament to which this port is connected, GS1920v2 Series User’s Guide...
  • Page 153: Technical Reference

    With MSTP, VLANs 1 and 2 are mapped to different spanning trees in the network. Thus traffic from the two VLANs travel on different paths. The following figure shows the network example using MSTP. MSTP Network Example Fig ure 116 VLAN 1 VLAN 2 GS1920v2 Series User’s Guide...
  • Page 154: Mst Region

    CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. GS1920v2 Series User’s Guide...
  • Page 155 Chapter 13 Spanning Tree Protocol MSTP and Legacy RSTP Network Example Fig ure 118 GS1920v2 Series User’s Guide...
  • Page 156: Bandwidth Control

    Click > in the navigation panel to bring up the screen as Adva nc e d Applic a tio n Ba ndwidth C o ntro l shown next. Advanced Application > Bandwidth Control Fig ure 119 GS1920v2 Series User’s Guide...
  • Page 157 Sa ve changes to the non-volatile memory when you are done configuring. Cancel Click to reset the fields. C a nc e l GS1920v2 Series User’s Guide...
  • Page 158: Broadcast Storm Control

    15.2 Bro a dc a st Sto rm C o ntro l Se tup Click > in the navigation panel to display the screen as Adva nc e d Applic a tio n Bro a dc a st Sto rm C o ntro l shown next. GS1920v2 Series User’s Guide...
  • Page 159 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to reset the fields. C a nc e l GS1920v2 Series User’s Guide...
  • Page 160: Mirroring

    Adva nc e d Applic a tio n > Mirro ring Mirro ring screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Advanced Application > Mirroring Fig ure 121 GS1920v2 Series User’s Guide...
  • Page 161 Sa ve to the non-volatile memory when you are done configuring. Cancel Click to reset the fields. C a nc e l GS1920v2 Series User’s Guide...
  • Page 162: Link Aggregation

    LACP also allows port redundancy, that is, if an operational port fails, then one of the “standby” ports become operational without user intervention. Please note that: GS1920v2 Series User’s Guide...
  • Page 163: Link Aggregation Status

    Section 17.1 on page 162 for more information. Advanced Application > Link Aggregation Status Fig ure 122 Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. GS1920v2 Series User’s Guide...
  • Page 164: Link Aggregation Setting

    Adva nc e d Applic a tio n L ink Ag g re g a tio n > L ink Ag g re g a tio n Se tting next. See Section 17.1 on page 162 for more information on link aggregation. GS1920v2 Series User’s Guide...
  • Page 165 This is the only screen you need to configure to enable static link aggregation. Aggregation Setting Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this option to activate a trunk group. GS1920v2 Series User’s Guide...
  • Page 166: Link Aggregation Control Protocol

    L ink Ag g re g a tio n L ink Ag g re g a tio n Se tting L AC P shown next. See Dynamic Link Aggregation on page 162 for more information on dynamic link aggregation. GS1920v2 Series User’s Guide...
  • Page 167 Table 65 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP L ABEL DESC RIPT IO N Link Note: Do not configure this screen unless you want to enable dynamic link Aggregation aggregation. Control Protocol Active Select this checkbox to enable Link Aggregation Control Protocol (LACP). GS1920v2 Series User’s Guide...
  • Page 168: Technical Reference

    Ma ke yo ur physic a l c o nne c tio ns are connected to the same destination. The following figure shows ports 2-5 on switch connected to switch Trunking Example - Physical Connections Fig ure 125 GS1920v2 Series User’s Guide...
  • Page 169 Click when you are done. Apply Trunking Example - Configuration Screen Fig ure 126 Your trunk group 1 ( ) configuration is now complete. GS1920v2 Series User’s Guide...
  • Page 170: Port Authentication

    At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. GS1920v2 Series User’s Guide...
  • Page 171: Mac Authentication

    18.2 Po rt Authe ntic a tio n C o nfig ura tio n To enable port authentication, first activate the port authentication method(s) (both on the Switch and the port(s)), then configure the RADIUS server settings in the screen. AAA > RADIUS Se rve r Se tup GS1920v2 Series User’s Guide...
  • Page 172: Activate Ieee 802.1X Security

    Use this screen to activate IEEE 802.1x security. In the screen click to display Po rt Authe ntic a tio n 802.1x the configuration screen as shown. Advanced Application > Port Authentication > 802.1x Fig ure 130 GS1920v2 Series User’s Guide...
  • Page 173: Guest Vlan

    VLAN. That is, unauthenticated users can have access to limited network resources in the same guest VLAN, such as the Internet. The rights granted to the Guest VLAN depends on how the network administrator configures switches or routers with the guest network feature. GS1920v2 Series User’s Guide...
  • Page 174 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. GS1920v2 Series User’s Guide...
  • Page 175: Activate Mac Authentication

    18.4 Ac tiva te MAC Authe ntic a tio n Use this screen to activate MAC authentication. In the screen click Po rt Authe ntic a tio n to display the configuration screen as shown. Authe ntic a tio n GS1920v2 Series User’s Guide...
  • Page 176 Note: If the in the screen is set to a lower value, then it Ag ing T im e Switc h Se tup supersedes this setting. See Section 8.5 on page Port This field displays a port number. GS1920v2 Series User’s Guide...
  • Page 177: Technical Reference

    Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’s network activity. RADIUS is a simple package exchange in which your switch acts as a message relay between the wired client and the network RADIUS server. GS1920v2 Series User’s Guide...
  • Page 178: Eap (Extensible Authentication Protocol) Authentication

    (CA). A certificate (also called digital IDs) can be used to authenticate users and a CA issues certificates and guarantees the identity of each certificate owner. • EAP-MD5 (Message-Digest Algorithm 5) GS1920v2 Series User’s Guide...
  • Page 179 However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. • LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. GS1920v2 Series User’s Guide...
  • Page 180: Port Security

    You can also enable the port security feature on a port. 19.2 Po rt Se c urity Se tup Click in the navigation panel to display the screen as shown. Adva nc e d Applic a tio n > Po rt Se c urity GS1920v2 Series User’s Guide...
  • Page 181 MAC address(es) is in the MAC address table on this port. Packets with no matching MAC address(es) are dropped. Clear this check box to disable the port security feature. The Switch forwards all packets on this port. GS1920v2 Series User’s Guide...
  • Page 182 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 183: Time Range

    20.2 C o nfig uring T im e Ra ng e Click in the navigation panel to display the screen as shown. Adva nc e d Applic a tio n > T im e Ra ng e Advanced Application > Time Range Fig ure 135 GS1920v2 Series User’s Guide...
  • Page 184 Delete Check the rule(s) that you want to remove and then click the button. De le te Cancel Click to clear the selected checkbox(es). C a nc e l GS1920v2 Series User’s Guide...
  • Page 185: Classifier

    Setting up QoS involves two separate steps: Configure classifiers to sort traffic into different flows. Configure policy rules to define actions to be performed on a classified traffic flow (refer to Chapter 22 on page 194 to configure policy rules). GS1920v2 Series User’s Guide...
  • Page 186: Classifier Status

    (or policy) to act upon the traffic that matches the rules. To configure policy rules, refer Chapter 22 on page 194. In the screen click to display the configuration screen as shown. C la ssifie r Sta tus C la ssifie r C o nfig ura tio n GS1920v2 Series User’s Guide...
  • Page 187 Chapter 21 Classifier Advanced Application > Classifier > Classifier Configuration Fig ure 137 GS1920v2 Series User’s Guide...
  • Page 188 For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. If you leave the field blank, the Switch automatically sets the mask to ff:ff:ff:ff:ff:ff. Ma sk GS1920v2 Series User’s Guide...
  • Page 189 The Switch loses these changes if it is turned off or loses power, so use the link on Sa ve the top navigation panel to save your changes to the non-volatile memory when you are done configuring. GS1920v2 Series User’s Guide...
  • Page 190: Viewing And Editing Classifier Configuration Summary

    ET HERNET T YPE PRO T O C O L NUMBER IP ETHII 0800 X.75 Internet 0801 NBS Internet 0802 ECMA Internet 0803 Chaosnet 0804 X.25 Level 3 0805 XNS Compat 0807 Banyan Systems 0BAD BBN Simnet 5208 GS1920v2 Series User’s Guide...
  • Page 191: Classifier Global Setting

    C o nfig ura tio n C la ssifie r G lo b a l Se tting Advanced Application > Classifier > Classifier Configuration > Classifier Global Setting Fig ure 139 GS1920v2 Series User’s Guide...
  • Page 192: Classifier Example

    The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. After you have configured a classifier, you can configure a policy (in the screen) to define Po lic y action(s) on the classified traffic flow. GS1920v2 Series User’s Guide...
  • Page 193 Classifier: Example Fig ure 140 GS1920v2 Series User’s Guide...
  • Page 194: Policy Rule

    Section 21.3 on page 186 for more C la ssifie r information. Click > in the navigation panel to display the screen as shown. Adva nc e d Applic a tio ns Po lic y Rule GS1920v2 Series User’s Guide...
  • Page 195 Set the fields below for this policy. You only have to set the field(s) that is related to the action(s) you configure in field. Ac tio n General VLAN ID Specify a VLAN ID number. Egress Port Type the number of an outgoing port. Priority Specify a priority level. GS1920v2 Series User’s Guide...
  • Page 196 This field displays the name(s) of the classifier to which this policy applies. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. GS1920v2 Series User’s Guide...
  • Page 197: Policy Example

    The figure below shows an example screen where you configure a policy to limit bandwidth on a Po lic y traffic flow classified using the classifier (refer to Section 21.5 on page 192). Exa m ple Policy Example Fig ure 142 GS1920v2 Series User’s Guide...
  • Page 198: Queuing Method

    A queue is a given an amount of bandwidth irrespective of the incoming traffic on that port. This queue then moves to the back of the list. The next queue is given an equal GS1920v2 Series User’s Guide...
  • Page 199: Configuring Queuing

    Use this screen to set priorities for the queues of the Switch. This distributes bandwidth across the different traffic queues. Click > in the navigation panel. Adva nc e d Applic a tio n Q ue uing Me tho d Advanced Application > Queuing Method Fig ure 143 GS1920v2 Series User’s Guide...
  • Page 200 Sa ve the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 201: Multicast

    IP addresses in the Class D range (224.0.0.0 to 239.255.255.255) are used for IP multicasting. Certain IP multicast numbers are reserved by IANA for special purposes (see the IANA website for more information). GS1920v2 Series User’s Guide...
  • Page 202 In the following MLD snooping-proxy example, all connected upstream ports (1 ~7) are treated as one interface. The connection between ports 8 and 9 is blocked by STP to break the loop. If there is one GS1920v2 Series User’s Guide...
  • Page 203 MVR. Join and leave reports from other multicast groups are managed by IGMP snooping. The following figure shows a network example. The subscriber VLAN ( ) information is hidden from the streaming media server, . In addition, the multicast VLAN information is only visible to the Switch and GS1920v2 Series User’s Guide...
  • Page 204 Switch). If there is another subscriber device connected to this port in the same subscriber VLAN, the receiving port will still be on the list of forwarding destination for the multicast traffic. Otherwise, the Switch removes the receiver port from the forwarding table. GS1920v2 Series User’s Guide...
  • Page 205: Multicast Setup

    Adva nc e d Applic a tio n > Multic a st > IPv4 Multic a st shows the IPv4 multicast group information. See Section 24.1 on page 201 for more information on multicasting. Advanced Application > Multicast > IPv4 Multicast Fig ure 147 GS1920v2 Series User’s Guide...
  • Page 206: Igmp Snooping

    IGMP Snooping to forward group multicast traffic only to ports that Ac tive are members of that group. Querier Select this option to allow the Switch to send IGMP General Query messages to the VLANs with the multicast hosts attached. GS1920v2 Series User’s Guide...
  • Page 207 This defines how many seconds the Switch waits for an IGMP report before removing an IGMP snooping membership entry when an IGMP leave message is received on this port from a host. Group Limited Select this option to limit the number of multicast groups this port is allowed to join. GS1920v2 Series User’s Guide...
  • Page 208: Igmp Snooping Vlan

    See IGMP Snooping Sno o ping IG MP Sno o ping VL AN and VLANs on page 202 for more information on IGMP Snooping VLAN. GS1920v2 Series User’s Guide...
  • Page 209 C le a r Index This is the index number of the IGMP snooping VLAN entry in the table. Click on an index number to view more details or change the settings. GS1920v2 Series User’s Guide...
  • Page 210: Igmp Filtering Profile

    Type the ending multicast IP address for a range of IP addresses that you want to belong to the IGMP filter profile. If you want to add a single multicast IP address, enter it in both the Sta rt Addre ss fields. Addre ss GS1920v2 Series User’s Guide...
  • Page 211: Ipv6 Multicast Status

    ML D Sno o ping - pro xy Adva nc e d Applic a tio n > Multic a st > IPv6 Multic a st display the screen as shown. See Section 24.1 on page 201 for more information on multicasting. GS1920v2 Series User’s Guide...
  • Page 212: Mld Snooping-Proxy Vlan

    Adva nc e d Applic a tio n > Multic a st > IPv6 Multic a st > ML D Sno o ping - pro xy screen to display the screen as shown. See Section 24.1 on page 201 for more information on multicasting. Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN Fig ure 153 GS1920v2 Series User’s Guide...
  • Page 213 Cancel Click to reset the fields to your previous configuration. C a nc e l Clear Click to reset the fields to the factory defaults. C le a r GS1920v2 Series User’s Guide...
  • Page 214: Mld Snooping-Proxy Vlan Port Role Setting

    See Section 24.1 on page 201 for more information pro xy > VL AN on multicasting. Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Port Role Setting Fig ure 154 GS1920v2 Series User’s Guide...
  • Page 215: Mld Snooping-Proxy Filtering

    Filte ring Adva nc e d screen to display the screen as shown. Applic a tio n > Multic a st > IPv6 Multic a st > ML D Sno o ping - pro xy GS1920v2 Series User’s Guide...
  • Page 216 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to reset the fields to your previous configuration. C a nc e l GS1920v2 Series User’s Guide...
  • Page 217: Mld Snooping-Proxy Filtering Profile

    Profile Name This field displays the descriptive name of the profile. Start Address This field displays the start of the multicast IPv6 address range. End Address This field displays the end of the multicast IPv6 address range. GS1920v2 Series User’s Guide...
  • Page 218: General Mvr Configuration

    Note: You can create up to five multicast VLANs and up to 256 multicast rules on the Switch. Note: Your Switch automatically creates a static VLAN (with the same VID) when you create a multicast VLAN in this screen. GS1920v2 Series User’s Guide...
  • Page 219 IGMP reports or MLD messages to all MVR source ports in the multicast Dyna m ic VLAN. Select to set the Switch not to send IGMP reports or MLD messages. C o m pa tib le Port This field displays the port number on the Switch. GS1920v2 Series User’s Guide...
  • Page 220: Mvr Group Configuration

    Use this screen to configure MVR IP multicast group address(es). Click the link in the G ro up C o nfig ura tio n screen. Note: A port can belong to more than one multicast VLAN. However, IP multicast group addresses in different multicast VLANs cannot overlap. GS1920v2 Series User’s Guide...
  • Page 221 You can select the check box in the table heading row De le te to select all profiles. To delete a rule(s) from a profile, select the rule(s) that you want to remove , then click the button. De le te GS1920v2 Series User’s Guide...
  • Page 222: Mvr Configuration Example

    . Computers A, B and C in VLAN 1 are able Mo vie to receive the traffic. MVR Configuration Example Fig ure 159 To configure the MVR settings on the Switch, create a multicast VLAN in the screen and set the receiver and source ports. GS1920v2 Series User’s Guide...
  • Page 223 The following figure shows an example where two IPv4 G ro up C o nfig ura tio n multicast groups ( ) are configured for the multicast VLAN 200. Ne ws Mo vie MVR Group Configuration Example-1 Fig ure 161 EXAMPLE GS1920v2 Series User’s Guide...
  • Page 224 Chapter 24 Multicast MVR Group Configuration Example-2 Fig ure 162 EXAMPLE GS1920v2 Series User’s Guide...
  • Page 225: Aaa

    Switch but user B cannot. The Switch can authorize users based on user accounts configured on the Switch itself or it can use an external server to authorize a large number of users. GS1920v2 Series User’s Guide...
  • Page 226: Aaa Screens

    RADIUS servers and Section 25.6.2 on page 233 for RADIUS attributes utilized by the authentication features on the Switch. Click on the link in the screen to view RADIUS Se rve r Se tup the screen as shown. GS1920v2 Series User’s Guide...
  • Page 227 Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external RADIUS server and the Switch. This key is not sent over the network. This key must be the same on the external RADIUS server and the Switch. GS1920v2 Series User’s Guide...
  • Page 228: Tacacs+ Server Setup

    Use this screen to configure your TACACS+ server settings. See RADIUS and TACACS+ on page 226 more information on TACACS+ servers. Click on the link in the screen to view T AC AC S+ Se rve r Se tup the screen as shown. GS1920v2 Series User’s Guide...
  • Page 229 Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. This key is not sent over the network. This key must be the same on the external TACACS+ server and the Switch. GS1920v2 Series User’s Guide...
  • Page 230: Aaa Setup

    Use this screen to configure authentication, authorization and accounting settings on the Switch. Click on the link in the screen to view the screen as shown. AAA Se tup Advanced Application > AAA > AAA Setup Fig ure 167 GS1920v2 Series User’s Guide...
  • Page 231 If you don’t select this and you have two accounting servers set up, then the Switch sends information to the first accounting server and if it doesn’t get a response from the accounting server then it tries the second accounting server. GS1920v2 Series User’s Guide...
  • Page 232: Technical Reference

    : A value you want to assign to the setting. Ve ndo r- da ta Note: Refer to the documentation that comes with your RADIUS server on how to configure VSAs for users authenticating via the RADIUS server. GS1920v2 Series User’s Guide...
  • Page 233: Supported Radius Attributes

    Refer to RFC 2865 for more information about RADIUS attributes used for authentication. This section lists the attributes used by authentication functions on the Switch. In cases where the attribute has a specific format associated with it, the format is specified. GS1920v2 Series User’s Guide...
  • Page 234: Attributes Used For Authentication

    25.6.3.3 Attrib ute s Use d b y the IEEE 802.1x Authe ntic a tio n User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type - This value is set to on the Switch. Ethe rne t(15) Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator GS1920v2 Series User’s Guide...
  • Page 235: Ip Source Guard

    • Use the screen (Section 26.7 on page 248) to look at the current list of MAC ARP Inspe c tio n Sta tus address filters that were created because the Switch identified an unauthorized ARP packet. GS1920v2 Series User’s Guide...
  • Page 236: What You Need To Know

    Table 99 Advanced Application > IP Source Guard L ABEL DESC RIPT IO N IPv4 Source Guard Click the link to open screens where you can view and manage static bindings, configure Setup DHCP snooping or ARP inspection and look at various statistics. GS1920v2 Series User’s Guide...
  • Page 237: Ipv4 Source Guard Setup

    To open this screen, click Adva nc e d Applic a tio n > IP So urc e G ua rd > IPv4 So urc e G ua rd Se tup > Sta tic Binding GS1920v2 Series User’s Guide...
  • Page 238 Click this to create the specified static binding or to update an existing one. Cancel Click this to reset the values above based on the last selected static binding or, if not applicable, to clear the fields above. Clear Click this to clear the fields above. GS1920v2 Series User’s Guide...
  • Page 239: Dhcp Snooping

    Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Adva nc e d Applic a tio n > IP So urc e G ua rd > IPv4 So urc e G ua rd Se tup > DHC P Sno o ping GS1920v2 Series User’s Guide...
  • Page 240 This field displays the location of the DHCP snooping database. Write delay timer This field displays how long (in seconds) the Switch tries to complete a specific update in the DHCP snooping database before it gives up. GS1920v2 Series User’s Guide...
  • Page 241 Last ignored bindings This section displays the number of times and the reasons the Switch ignored bindings counters the last time it read bindings from the DHCP binding database. You can clear these counters by restarting the Switch. GS1920v2 Series User’s Guide...
  • Page 242: Dhcp Snooping Configure

    Adva nc e d Applic a tio n > IP So urc e G ua rd > IPv4 So urc e G ua rd Se tup > DHC P Sno o ping > C o nfig ure GS1920v2 Series User’s Guide...
  • Page 243 Enter how long (10-65535 seconds) the Switch waits to update the DHCP snooping database the first time the current bindings change after an update. Once the next update is scheduled, additional changes in current bindings are automatically included in the next update. GS1920v2 Series User’s Guide...
  • Page 244: Dhcp Snooping Port Configure

    G ua rd Se tup > DHC P Sno o ping > C o nfig ure > Po rt Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Fig ure 173 Configure > Port GS1920v2 Series User’s Guide...
  • Page 245: Dhcp Snooping Vlan Configure

    Adva nc e d Applic a tio n > IP So urc e G ua rd > IPv4 So urc e G ua rd Se tup > DHC P Sno o ping > C o nfig ure > VL AN GS1920v2 Series User’s Guide...
  • Page 246: Dhcp Snooping Vlan Port Configure

    Adva nc e d Applic a tio n > IP So urc e G ua rd > IPv4 So urc e G ua rd Se tup > DHC P Sno o ping > C o nfig ure > VL AN > Po rt GS1920v2 Series User’s Guide...
  • Page 247 Select the entry(ies) that you want to remove in the column, then click the De le te De le te button to remove the selected entry(ies) from the table. Cancel Click this to clear the check boxes above. De le te GS1920v2 Series User’s Guide...
  • Page 248: Arp Inspection Status

    C a nc e l Change Pages Click to show the previous/next screen if all status information Pre vio us Pa g e Ne xt Pa g e cannot be seen in one screen. GS1920v2 Series User’s Guide...
  • Page 249: Arp Inspection Vlan Status

    Adva nc e d Applic a tio n > IP So urc e G ua rd > IPv4 So urc e G ua rd Se tup > ARP Inspe c tio n > L o g Sta tus GS1920v2 Series User’s Guide...
  • Page 250 ARP Inspe c tio n VL AN C o nfig ure log messages when ARP packets are discarded or forwarded based on the VLAN ID of the ARP packet. See Section 26.10.2 on page 253. Time This field displays when the log message was generated. GS1920v2 Series User’s Guide...
  • Page 251: Arp Inspection Configure

    C le a ring lo g sta tus ta b le ARP Inspe c tio n screen to clear the log and reset this counter. See Section 26.9 on page 249. L o g Sta tus GS1920v2 Series User’s Guide...
  • Page 252: Arp Inspection Port Configure

    Adva nc e d Applic a tio n > IP So urc e G ua rd > IPv4 So urc e G ua rd Se tup > ARP Inspe c tio n > C o nfig ure > Po rt Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Fig ure 180 Configure > Port GS1920v2 Series User’s Guide...
  • Page 253: Arp Inspection Vlan Configure

    Adva nc e d Applic a tio n > IP So urc e G ua rd > IPv4 So urc e G ua rd Se tup > ARP Inspe c tio n > C o nfig ure > VL AN GS1920v2 Series User’s Guide...
  • Page 254: Technical Reference

    26.11.1 DHC P Sno o ping O ve rvie w Use DHCP snooping to filter unauthorized DHCP packets on the network and to build the binding table dynamically. This can prevent clients from getting IP addresses from unauthorized DHCP servers. GS1920v2 Series User’s Guide...
  • Page 255 Each binding consists of 72 bytes, a space, and another checksum that is used to validate the binding when it is read. If the calculated checksum is not equal to the checksum in the file, that binding and all others after it are ignored. GS1920v2 Series User’s Guide...
  • Page 256: Arp Inspection Overview

    . Computer is in the same broadcast domain as computer and intercepts the ARP request for computer . Then, computer does the following things: • It pretends to be computer and responds to computer GS1920v2 Series User’s Guide...
  • Page 257 ARP inspection so that the Switch has enough time to build the binding table. Enable ARP inspection on each VLAN. Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. GS1920v2 Series User’s Guide...
  • Page 258: Loop Guard

    If a switch (not in loop state) connects to a switch in loop state, then it will be affected by the switch in loop state in the following way: • It will receive broadcast messages sent out from the switch in loop state. GS1920v2 Series User’s Guide...
  • Page 259 Switch. Loop Guard - Network Loop Fig ure 187 Note: After resolving the loop problem on your network you can re-activate the disabled port via the web configurator (see Section 8.7 on page 85). GS1920v2 Series User’s Guide...
  • Page 260: Loop Guard Setup

    If the switch that this port is connected is in loop state the Switch will shut down this port. Clear this check box to disable the loop guard feature. GS1920v2 Series User’s Guide...
  • Page 261 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 262: Layer 2 Protocol Tunneling

    In the following example, if you enable L2PT for STP, you can have switches in the same spanning tree, even though switch is not directly connected to switches . Topology change information can be propagated throughout the service provider’s network. GS1920v2 Series User’s Guide...
  • Page 263: Configuring Layer 2 Protocol Tunneling

    28.2 C o nfig uring L a ye r 2 Pro to c o l T unne ling Click > in the navigation panel to display the screen Adva nc e d Applic a tio n L a ye r 2 Pro to c o l T unne ling as shown. GS1920v2 Series User’s Guide...
  • Page 264 Select this option to have the Switch tunnel STP (Spanning Tree Protocol) packets so that STP can run properly across the service provider’s network and spanning trees can be set up based on bridge information from all (local and remote) networks. GS1920v2 Series User’s Guide...
  • Page 265 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 266: Pppoe

    Active Discovery Initialization) and PADR (PPPoE Active Discovery Request) packets from PPPoE clients. This tag is defined in RFC 2516 and has the following format for this feature. Table 115 PPPoE Intermediate Agent Vendor-specific Tag Format Tag_Type Tag_Len Value (0x0105) GS1920v2 Series User’s Guide...
  • Page 267 Circuit ID syntax in the screen, the Switch automatically PPPo E > Inte rm e dia te Ag e nt generates a Circuit ID string according to the default Circuit ID syntax which is defined in the DSL Forum GS1920v2 Series User’s Guide...
  • Page 268: Pppoe Screen

    Adva nc e d Applic a tio n PPPo E C lic k to go to the screen. He re Inte rm e dia te Ag e nt Advanced Application > PPPoE Intermediate Agent Fig ure 192 GS1920v2 Series User’s Guide...
  • Page 269: Pppoe Intermediate Agent

    Select a delimiter to separate the identifier-string, slot ID, port number and/or VLAN ID from each other. You can use a pound key ( ), semi-colon ( ), period ( ), comma ( ), forward slash ( ) or space. GS1920v2 Series User’s Guide...
  • Page 270: Pppoe Ia Per-Port

    Use this row to make the setting the same for all ports. Use this row first and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. GS1920v2 Series User’s Guide...
  • Page 271: Pppoe Ia Per-Port Per-Vlan

    VL AN Inte rm e dia te Ag e nt > Po rt Advanced Application > PPPoE > Intermediate Agent > Port > VLAN Fig ure 195 GS1920v2 Series User’s Guide...
  • Page 272: Pppoe Ia For Vlan

    Switch appends the Circuit ID and/or Remote ID to PPPoE discovery packets from a specific VLAN. Click the link in the screen to display the screen as shown. VL AN Inte rm e dia te Ag e nt Advanced Application > PPPoE > Intermediate Agent > VLAN Fig ure 196 GS1920v2 Series User’s Guide...
  • Page 273 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 274: Error Disable

    • Use the screen (Section 30.6 on page 279) to set the Switch to automatically Errdisa b le Re c o ve ry undo an action after the error is gone. GS1920v2 Series User’s Guide...
  • Page 275: Error Disable Screen

    Click the link next to in the C lic k he re Errdisa b le Sta tus Adva nc e d screen to display the screen as shown. Applic a tio n > Errdisa b le GS1920v2 Series User’s Guide...
  • Page 276 - lim ita tio n every one second. Rate This field displays how many control packets this port can receive or transmit per second. It can be adjusted in means no rate limit. C PU Pro te c tio n GS1920v2 Series User’s Guide...
  • Page 277: Cpu Protection Configuration

    > > Adva nc e d Applic a tio n Errdisa b le Errdisa b le De te c t screen. Advanced Application > Errdisable > CPU protection Fig ure 199 GS1920v2 Series User’s Guide...
  • Page 278: Error-Disable Detect Configuration

    Changes in this row are copied to all the entries as soon as you make them. Active Select this option to have the Switch detect if the configured rate limit for a specific control packet is exceeded and take the action selected below. GS1920v2 Series User’s Guide...
  • Page 279: Error-Disable Recovery Configuration

    Select this option to allow the Switch to wait for the specified time interval to activate a port or allow specific packets on a port, after the error was gone. Deselect this option to turn off this rule. Interval Enter the number of seconds (from 30 to 2592000) for the time interval. GS1920v2 Series User’s Guide...
  • Page 280 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 281: Private Vlan

    VLAN enabled. Otherwise, this VLAN is blocked from the whole network. 31.2 C o nfig uring Priva te VL AN Click > in the navigation panel to display the screen as shown. Adva nc e d Applic a tio n Priva te VL AN GS1920v2 Series User’s Guide...
  • Page 282 Delete Check the rule(s) that you want to remove and then click the button. De le te Cancel Click to clear the check boxes. C a nc e l GS1920v2 Series User’s Guide...
  • Page 283: Green Ethernet

    Adva nc e d Applic a tio n G re e n Ethe rne t Note: EEE, Auto Power Down and Short Reach are not supported on an uplink port. GS1920v2 Series User’s Guide...
  • Page 284 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 285: Link Layer Discovery Protocol (Lldp)

    • Power via MDI TLV (optional, For PoE models only) • Link Aggregation TLV (optional) • Maximum Frame Size TLV (optional) The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. GS1920v2 Series User’s Guide...
  • Page 286: Lldp-Med Overview

    Since LLDPDU updates status and configuration information periodically, network managers may check the result of provision via remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. GS1920v2 Series User’s Guide...
  • Page 287: Lldp Screens

    Click here to show a screen with the Switch’s LLDP information. Status LLDP Remote Click here to show a screen with LLDP information from the neighboring devices. Status LLDP Click here to show a screen to configure LLDP parameters. Configuration GS1920v2 Series User’s Guide...
  • Page 288: Lldp Local Status

    Adva nc e d Applic a tio n L L DP > L L DP to display the screen as shown next. L o c a l Sta tus Advanced Application > LLDP > LLDP Local Status Fig ure 208 GS1920v2 Series User’s Guide...
  • Page 289: Lldp Local Port Status Detail

    Adva nc e d Applic a tio n L L DP and then, click a port number, for example 1 in the local port column to display the > L L DP L o c a l Sta tus screen as shown next. GS1920v2 Series User’s Guide...
  • Page 290 Chapter 33 Link Layer Discovery Protocol (LLDP) Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail Fig ure 209 GS1920v2 Series User’s Guide...
  • Page 291 Exte nd Po we r via MDI PD • Inve nto ry Ma na g e m e nt Device Type This is the LLDP-MED device class. The Zyxel Switch device type is: • Network Connectivity GS1920v2 Series User’s Guide...
  • Page 292: Lldp Remote Status

    This displays the system name of the remote device. Management This displays the management address of the remote device. It could be the MAC address or Address IP address. You can click on the IP address hyperlink directly. GS1920v2 Series User’s Guide...
  • Page 293: Lldp Remote Port Status Detail

    - this displays how the chassis of the remote device is identified. C ha ssis ID Sub type • - this displays the chassis ID of the remote device. The chassis ID is identified by C ha ssis ID the chassis ID subtype. GS1920v2 Series User’s Guide...
  • Page 294 Ma na g e m e nt Addre ss • Inte rfa c e Num b e r Sub type • Inte rfa c e Num b e r • O b je c t Ide ntifie r GS1920v2 Series User’s Guide...
  • Page 295 Po rt- Pro to c o l VL AN ID • Po rt- Pro to c o l VL AN ID Suppo rte d • Po rt- Pro to c o l VL AN ID Ena b le d GS1920v2 Series User’s Guide...
  • Page 296 MDI Ena b le d • Pa ir C o ntro la b le • PSE Po we r Pa irs • Po we r C la ss Max Frame Size This displays the maximum supported frame size in octets. GS1920v2 Series User’s Guide...
  • Page 297 Chapter 33 Link Layer Discovery Protocol (LLDP) Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED Fig ure 213 TLV) GS1920v2 Series User’s Guide...
  • Page 298 - the Endpoint Device’s power priority (which the Network Connectivity Po we r Prio rity Device may use to prioritize which devices will remain in service during power shortages) • - power requirement, in fractions of Watts, in current configuration Po we r Va lue GS1920v2 Series User’s Guide...
  • Page 299: Lldp Configuration

    Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 300: Basic Tlv Setting

    Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. GS1920v2 Series User’s Guide...
  • Page 301: Org-Specific Tlv Setting

    Changes in this row are copied to all the ports as soon as you make them. Dot1 TLV Port-Protocol Select the check box(es) to enable or disable the sending of IEEE 802.1 Port and Protocol VLAN ID VLAN ID TLVs on the port(s). GS1920v2 Series User’s Guide...
  • Page 302: Lldp-Med Configuration

    Adva nc e d Applic a tio n L L DP > L L DP- MED C o nfig ura tio n Advanced Application > LLDP > LLDP-MED Configuration Fig ure 217 GS1920v2 Series User’s Guide...
  • Page 303: Lldp-Med Network Policy

    Adva nc e d Applic a tio n L L DP > L L DP- MED Ne two rk Po lic y (C lic k He re ) shown next. Advanced Application > LLDP > LLDP-MED Network Policy Fig ure 218 GS1920v2 Series User’s Guide...
  • Page 304: Lldp-Med Location

    > to display the screen as shown Adva nc e d Applic a tio n L L DP > L L DP- MED L o c a tio n (C lic k He re ) next. GS1920v2 Series User’s Guide...
  • Page 305 Enter the latitude information. The value should be from 0º to 90º. The negative value represents the South. • no rth • so uth Longitude Enter the longitude information. The value should be from 0º to 180º. The negative value represents the West. • we st • e a st GS1920v2 Series User’s Guide...
  • Page 306 State, County, City, Street, Number, ZIP code and additional information. ELIN Number This field shows the Emergency Location Identification Number (ELIN), which is used to identify endpoint devices when they issue emergency call services. The valid length is form 10 to 25 characters. GS1920v2 Series User’s Guide...
  • Page 307 Delete Check the locations that you want to remove, then click the button. De le te Cancel Click to clear the selected check boxes. C a nc e l GS1920v2 Series User’s Guide...
  • Page 308: Oam

    34.2 O AM Sta tus Use this screen to view the configuration of ports on which Ethernet OAM is enabled. Click Adva nc e d > in the navigation panel. Applic a tio n O AM GS1920v2 Series User’s Guide...
  • Page 309: Oam Details

    Use this screen to view OAM configuration details and operational status of a specific port. Click a number in the column in the screen to display the screen as shown next. Po rt O AM Sta tus GS1920v2 Series User’s Guide...
  • Page 310 Table 145 Advanced Application > OAM Status > OAM Details L ABEL DESC RIPT IO N Discovery This section displays OAM configuration details and operational status of the port on the Switch and/or the remote device. Local Client/ Remote Client configurations GS1920v2 Series User’s Guide...
  • Page 311 : The port is in loopback mode. L o o pb a c k : The port is discarding non-OAMPDUs because it is trying to or has put the remote Disc a rd device into loopback mode. GS1920v2 Series User’s Guide...
  • Page 312 This field displays the number of OAM PDUs sent by the Switch in response to requests. OAMPDU Tx Variable Response This field displays the number of OAM PDUs sent by the remote device in response to requests. OAMPDU Rx GS1920v2 Series User’s Guide...
  • Page 313: Oam Configuration

    Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this check box to enable Ethernet OAM on this port. Clear this check box to disable Ethernet OAM on the port. GS1920v2 Series User’s Guide...
  • Page 314: Oam Remote Loopback

    L ABEL DESC RIPT IO N Remote Loopback Test Port Enter the number of the port from which the Switch performs a remote-loopback test. Number of Define the allowable packet number of the loopback test frames. Packet GS1920v2 Series User’s Guide...
  • Page 315 Enable Sta rt Loopback Control PDUs to the remote device. Stop Click to terminate a remote-loopback test from the specified port by sending Disable Sto p Loopback Control PDUs to the remote device. GS1920v2 Series User’s Guide...
  • Page 316: Static Route

    317) to configure and enable an IPv4 static IPv4 Sta tic Ro ute route. 35.2 Sta tic Ro uting Click in the navigation panel to display the screen as shown. IP Applic a tio n > Sta tic Ro uting GS1920v2 Series User’s Guide...
  • Page 317: Ipv4 Static Route

    Enter the IP address of the gateway. The gateway is an immediate neighbor of your Switch that Address will forward the packet to the destination. The gateway must be a router on the same segment as your Switch. GS1920v2 Series User’s Guide...
  • Page 318 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l GS1920v2 Series User’s Guide...
  • Page 319: Differentiated Services

    The DSCP value determines the PHB (Per-Hop Behavior), that each packet gets as it is forwarded across the DiffServ network. Based on the marking rule different kinds of traffic can be marked for different priorities of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. GS1920v2 Series User’s Guide...
  • Page 320: Activating Diffserv

    36.2 Ac tiva ting DiffSe rv Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the Switch. Click > in the navigation panel to display the screen as shown. IP Applic a tio n DiffSe rv GS1920v2 Series User’s Guide...
  • Page 321: Dscp Settings

    36.3 DSC P Se tting s You can configure the DSCP to IEEE 802.1p mapping to allow the Switch to prioritize all traffic based on the incoming DSCP value according to the DiffServ to IEEE 802.1p mapping table. GS1920v2 Series User’s Guide...
  • Page 322: Configuring Dscp Settings

    Sa ve the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 323: Dhcp

    G lo b a l • - The Switch is configured on a VLAN by VLAN basis. The Switch can be configured to relay VL AN DHCP requests to different DHCP servers for clients in different VLAN. GS1920v2 Series User’s Guide...
  • Page 324: Dhcp Configuration

    (such as the IP address and subnet mask) between a DHCP client and a DHCP server. Once the DHCP client obtains an IP address and can connect to the network, network information renewal is done between the DHCP client and the DHCP server without the help of the Switch. GS1920v2 Series User’s Guide...
  • Page 325: Dhcpv4 Relay Agent Information

    There are two types of sub-option: “Agent Circuit ID Sub-option” and “Agent Remote ID Sub-option”. They have the following formats. Table 155 DHCP Relay Agent Circuit ID Sub-option Format SubOpt Code Length Value Slot ID, Port ID, VLAN ID, System Name or String (1 byte) (1 byte) GS1920v2 Series User’s Guide...
  • Page 326: Dhcpv4 Option 82 Profile

    > screen. Ba sic Se tting G e ne ra l Se tup Select this option for the Switch to add the system name to the client DHCP requests that it relays to a DHCP server. GS1920v2 Series User’s Guide...
  • Page 327: Configuring Dhcpv4 Global Relay

    IP Applic a tio n > DHC P > DHC Pv4 navigation panel and click the link to display the screen as shown. G lo b a l IP Application > DHCP > DHCPv4 > Global Fig ure 234 GS1920v2 Series User’s Guide...
  • Page 328: Dhcpv4 Global Relay Port Configure

    This saves your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the link on the top navigation panel to save your changes Sa ve to the non-volatile memory when you are done configuring. GS1920v2 Series User’s Guide...
  • Page 329: Global Dhcp Relay Configuration Example

    Switch to send additional information (such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. GS1920v2 Series User’s Guide...
  • Page 330: Configuring Dhcp Vlan Settings

    Select a pre-defined DHCP option 82 profile that the Switch applies to all ports in this VLAN. The Switch adds the Circuit ID sub-option and/or Remote ID sub-option specified in the profile to DHCP requests that it relays to a DHCP server. GS1920v2 Series User’s Guide...
  • Page 331: Dhcpv4 Vlan Port Configure

    Enter the number of port(s) to which you want to apply the specified DHCP option 82 profile. You can enter multiple ports separated by (no space) comma (,) or hyphen (-). For example, enter “3-5” for ports 3, 4, and 5. Enter “3,5,7” for ports 3, 5, and 7. GS1920v2 Series User’s Guide...
  • Page 332: Example: Dhcp Relay For Two Vlans

    (VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.100. DHCP Relay for Two VLANs Fig ure 240 For the example network, configure the screen as shown. VL AN Se tting GS1920v2 Series User’s Guide...
  • Page 333: Dhcpv6 Relay

    Use this screen to configure DHCPv6 relay settings for a specific VLAN on the Switch. Click IP Applic a tio n in the navigation panel to display the screen as shown. > DHC P > DHC Pv6 GS1920v2 Series User’s Guide...
  • Page 334 Delete Check the entry(ies) that you want to remove and then click the button. De le te Cancel Click to clear the selected check boxes. C a nc e l GS1920v2 Series User’s Guide...
  • Page 335: Arp Setup

    In the following example, the Switch does not have IP address and MAC address mapping information for hosts in its ARP table, and host wants to ping host . Host sends an ARP request to the GS1920v2 Series User’s Guide...
  • Page 336 In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. ARP- Re q ue st When the Switch is in ARP-Request learning mode, it updates the ARP table with both ARP replies, gratuitous ARP requests and ARP requests. GS1920v2 Series User’s Guide...
  • Page 337: Arp Setup

    Use this screen to configure each port’s ARP learning mode. Click the link next to in the ARP L e a rning > screen to display the screen as shown next. Applic a tio n ARP Se tup GS1920v2 Series User’s Guide...
  • Page 338 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 339: Maintenance

    Use this screen to manage firmware and your configuration files. Click > Ma na g e m e nt Ma inte na nc e the navigation panel to open the following screen. Management > Maintenance Fig ure 245 GS1920v2 Series User’s Guide...
  • Page 340: Erase Running-Configuration

    Era se Running - C o nfig ura tio n Switch configuration information you configured and return to the Zyxel default configuration settings. Click to reset all Switch configurations to the Zyxel default configuration settings. Erase Running-Configuration: Confirmation Fig ure 246 GS1920v2 Series User’s Guide...
  • Page 341: Save Configuration

    1 to 2 to reboot and load the last-saved custom default file on the C usto m De fa ult Switch. If you did not save a file in the web configurator, then the factory default file is C usto m De fa ult GS1920v2 Series User’s Guide...
  • Page 342: Firmware Upgrade

    The integer, 2, V2.x Ha rdwa re Ve rsio n identifies the GS1920v2 Series. See Section 7.2 on page 68 for more information about the Ha rdwa re field. Go to the Zyxel website to download the correct model firmware.
  • Page 343: Restore Configuration

    After you have specified the file, click . "config" is the name of the C ho o se File Re sto re configuration file on the Switch, so your backup configuration file is automatically renamed when you restore using this screen. GS1920v2 Series User’s Guide...
  • Page 344: Backup Configuration

    CLI command by typing “Show tech-support” command. Click > > to see the following screen. Ma na g e m e nt Ma inte na nc e T e c h- Suppo rt GS1920v2 Series User’s Guide...
  • Page 345 Switch is shutdown or during power outage. Memory Section Click to see the memory section log report. This log report is stored in flash Do wnlo a d memory. GS1920v2 Series User’s Guide...
  • Page 346: Technical Reference

    If your (T)FTP client does not allow you to have a destination filename different than the source, you will need to rename them as the Switch only recognizes “config” and “ras”. Be sure you keep unaltered copies of both files for later use. GS1920v2 Series User’s Guide...
  • Page 347: Ftp Command Line Procedure

    • The IP address(es) in the screen does not match the client IP address. If it does Re m o te Ma na g e m e nt not match, the Switch will disconnect the FTP session immediately. GS1920v2 Series User’s Guide...
  • Page 348: Access Control

    Use this screen to display the main screen. Click > in the navigation panel to display the main screen as shown. Ma na g e m e nt Ac c e ss C o ntro l GS1920v2 Series User’s Guide...
  • Page 349: Configuring Snmp

    Use this screen to configure your SNMP settings. Click > > to view the screen as shown. Ma na g e m e nt Ac c e ss C o ntro l SNMP Management > Access Control > SNMP Fig ure 253 GS1920v2 Series User’s Guide...
  • Page 350: Configuring Snmp Trap Group

    T ra p G ro up T ra p G ro up specify the types of SNMP traps that should be sent to each SNMP manager. Management > Access Control > SNMP > Trap Group Fig ure 254 GS1920v2 Series User’s Guide...
  • Page 351: Enabling/Disabling Sending Of Snmp Traps On A Port

    SNMP > T ra p G ro up Po rt whether a trap received on the port(s) would be sent to the SNMP manager. Management > Access Control > SNMP > Trap Group > Port Fig ure 255 GS1920v2 Series User’s Guide...
  • Page 352: Configuring Snmp User

    User Information Note: Use the username and password of the login accounts you specify in this screen to create accounts on the SNMP v3 manager. Username Specify the username of a login account on the Switch. GS1920v2 Series User’s Guide...
  • Page 353 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 354: Setting Up Login Accounts

    Retype your new system password for confirmation confirm Edit Logins You may configure passwords for up to four users. These users have read-only access. User Name Set a user name (up to 32 ASCII characters long). Password Enter your new system password. GS1920v2 Series User’s Guide...
  • Page 355: Service Access Control

    Services you may use to access the Switch are listed here. Telnet and SSH give access to a limited version of the Command Line Interface (CLI) to display information. Active Select this option for the corresponding services that you want to allow to access the Switch. GS1920v2 Series User’s Guide...
  • Page 356: Remote Management

    Switch. Click to return to the screen. Ac c e ss C o ntro l Ac c e ss C o ntro l Management > Access Control > Remote Management Fig ure 259 GS1920v2 Series User’s Guide...
  • Page 357: Technical Reference

    3. The next figure illustrates an SNMP management operation. SNMP is only available if TCP/IP is configured. SNMP Management Model Fig ure 260 An SNMP managed network consists of two main components: agents and a manager. GS1920v2 Series User’s Guide...
  • Page 358 • RFC 1155 SMI • RFC 2674 SNMPv2, SNMPv2c • RFC 1757 RMON • SNMPv2, SNMPv2c or later version, compliant with RFC 2011 SNMPv2 MIB for IP, RFC 2012 SNMPv2 MIB for TCP, RFC 2013 SNMPv2 MIB for UDP GS1920v2 Series User’s Guide...
  • Page 359 Table 180 SNMP AAA Traps O PT IO N O BJEC T L ABEL O BJEC T ID DESC RIPT IO N authentication authenticationFailure 1.3.6.1.6.3.1.1.5.5 This trap is sent when authentication fails due to incorrect user name and/or password. GS1920v2 Series User’s Guide...
  • Page 360: Ssh Overview

    SSH Communication Example Fig ure 261 40.7.2.1 Ho w SSH wo rks The following table summarizes how a secure connection is established between two remote hosts. GS1920v2 Series User’s Guide...
  • Page 361 Your Switch supports SSH version 2 using RSA authentication and three encryption methods (DES, 3DES and Blowfish). The SSH server is implemented on the Switch for remote management and file transfer on port 22. Only one SSH connection is allowed at a time. GS1920v2 Series User’s Guide...
  • Page 362: Introduction To Https

    If you haven’t changed the default HTTPS port on the Switch, then in your browser enter “https://Switch IP Address/” as the web site address where “Switch IP Address” is the IP address or domain name of the Switch you wish to access. GS1920v2 Series User’s Guide...
  • Page 363 After you log in, you will see the red address bar with the message . Click on C e rtific a te Erro r C e rtific a te next to the address bar and click Erro r Vie w c e rtific a te s GS1920v2 Series User’s Guide...
  • Page 364 T his C o nne c tio n is Unstruc te d display. If that is the case, click and then the button. I Unde rsta nd the Risks Add Exc e ptio n... GS1920v2 Series User’s Guide...
  • Page 365 Fig ure 268 Confirm the HTTPS server URL matches. Click to proceed to the web C o nfirm Se c urity Exc e ptio n configurator login screen. Security Alert (Mozilla Firefox) Fig ure 269 EXAMPLE GS1920v2 Series User’s Guide...
  • Page 366: Google Chrome Warning Messages

    After you accept the certificate and enter the login username and password, the Switch main screen appears. The lock displayed in the bottom right of the browser status bar or next to the website address denotes a secure connection. GS1920v2 Series User’s Guide...
  • Page 367 Chapter 40 Access Control Example: Lock Denoting a Secure Connection Fig ure 271 EXAMPLE GS1920v2 Series User’s Guide...
  • Page 368: Diagnostic

    Use this screen to ping IP Ma na g e m e nt Dia g no stic addresses, run a traceroute, perform port tests or show the Switch’s location between devices. Management > Diagnostic Fig ure 272 GS1920v2 Series User’s Guide...
  • Page 369 : There is an short circuit detected between the wire-pair. Sho rt : The Switch failed to run cable diagnostics on the cable connected this port. Unkno wn : The port is a fiber port or it is not active. Unsuppo rte d GS1920v2 Series User’s Guide...
  • Page 370 Enter a time interval (in minutes) and click to show the actual location of the Switch Blink between several devices in a rack. The default time interval is 30 minutes. Click to have the Switch terminate the blinking locater LED. Sto p GS1920v2 Series User’s Guide...
  • Page 371: System Log

    Click to clear the whole log, regardless of what is Re fre sh C le a r currently displayed on the screen. Click to save the log to your computer. Do wnlo a d GS1920v2 Series User’s Guide...
  • Page 372: Syslog Setup

    The syslog feature sends logs to an external syslog server. Use this screen to configure the device’s system logging settings and configure a list of external syslog servers. Click > in the navigation panel to display this screen. Ma na g e m e nt Syslo g GS1920v2 Series User’s Guide...
  • Page 373 Server Address Enter the IPv4 or IPv6 address of the syslog server. UDP Port The default syslog server port is 514. If your syslog server uses a different port, configure the one it uses here. GS1920v2 Series User’s Guide...
  • Page 374 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry(ies). De le te Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 375: Cluster Management

    • Use the screen (Section 44.2 on page 376) to view the role of the Switch within C luste r Ma na g e m e nt the cluster and to access a cluster member switch’s web configurator. GS1920v2 Series User’s Guide...
  • Page 376: Cluster Management Status

    (for example the cluster member switch password was changed or the switch was set as the Erro r manager and so left the member list, etc.) (the switch is disconnected - shows approximately 1.5 minutes after the link O ffline O ffline between cluster member and manager goes down) GS1920v2 Series User’s Guide...
  • Page 377: Clustering Management Configuration

    Switch’s run-time memory. The Switch loses these Apply changes if it is turned off or loses power, so use the link on the top navigation panel to Sa ve save your changes to the non-volatile memory when you are done configuring. GS1920v2 Series User’s Guide...
  • Page 378: Technical Reference

    This cluster member web configurator home page and the home page that you'd see if you accessed it directly are different. GS1920v2 Series User’s Guide...
  • Page 379 44.4.1.1 Uplo a ding Firm wa re to a C luste r Me m b e r Switc h You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. GS1920v2 Series User’s Guide...
  • Page 380 This is the name of the firmware file you want to upload to the cluster member 430AAHW0.bin switch. This is the cluster member switch’s firmware name as seen in the cluster fw-00-a0-c5-01-23-46 manager switch. This is the cluster member switch’s configuration file name as seen in the cluster config-00-a0-c5-01-23-46 manager switch. GS1920v2 Series User’s Guide...
  • Page 381: Mac Table

    Too much port flooding leads to network congestion. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. GS1920v2 Series User’s Guide...
  • Page 382: Viewing The Mac Table

    Use this screen to check whether the MAC address is dynamic or static. Click > in the navigation panel to display the following screen. Ma na g e m e nt MAC T a b le Management > MAC Table Fig ure 281 GS1920v2 Series User’s Guide...
  • Page 383 This is the port where the above MAC address is forwarded. Type This shows whether the MAC address is (learned by the Switch) or (manually dyna m ic sta tic entered in the screen). Sta tic MAC Fo rwa rding GS1920v2 Series User’s Guide...
  • Page 384: Arp Table

    Use the ARP table to view IP-to-MAC address mapping(s) and remove specific dynamic ARP entries. Click in the navigation panel to open the following screen. Ma na g e m e nt > ARP T a b le GS1920v2 Series User’s Guide...
  • Page 385 This shows for a static entry. Type This shows whether the IP address is dynamic (learned by the Switch) or static (manually configured in the screen). Ba sic Se tting > IP Se tup GS1920v2 Series User’s Guide...
  • Page 386: Path Mtu Table

    This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. GS1920v2 Series User’s Guide...
  • Page 387: Configure Clone

    Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click > to open the following screen. Ma na g e m e nt C o nfig ure C lo ne GS1920v2 Series User’s Guide...
  • Page 388 Chapter 48 Configure Clone Management > Configure Clone Fig ure 284 GS1920v2 Series User’s Guide...
  • Page 389 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l GS1920v2 Series User’s Guide...
  • Page 390: Ipv6 Neighbor Table

    This field displays the IPv6 address of the Switch or a neighboring device. This field displays the MAC address of the IPv6 interface on which the IPv6 address is configured or the MAC address of the neighboring device. GS1920v2 Series User’s Guide...
  • Page 391 • static (S): The interface address is statically configured. Interface This field displays the ID number of the IPv6 interface on which the IPv6 address is created or through which the neighboring device can be reached. GS1920v2 Series User’s Guide...
  • Page 392: Port Status

    It also shows the cable type ) for the combo ports. This field displays if the port is not connected to any C o ppe r Fib e r Do wn device. GS1920v2 Series User’s Guide...
  • Page 393: Port Details

    Click a number in the column in the screen to display individual port statistics. Use this Po rt Po rt Sta tus screen to check status and detailed performance data about an individual port on the Switch. GS1920v2 Series User’s Guide...
  • Page 394 It also shows the cable type ) for the combo ports. This field displays if the port is not connected to any C o ppe r Fib e r Do wn device. GS1920v2 Series User’s Guide...
  • Page 395 This field shows the number of packets received with a length that was out of range. Runt This field shows the number of packets received that were too short (shorter than 64 octets), including the ones with CRC errors. GS1920v2 Series User’s Guide...
  • Page 396: Port Utilization

    Q uic k L inks Sta tus Po rt Sta tus link tab. Utiliza tio n Management > Port Status > Utilization Fig ure 288 GS1920v2 Series User’s Guide...
  • Page 397 This field shows the transmission speed of data received on this port in kilobytes per second. Rx Utilization% This field shows the percentage of actual received frames on this port as a percentage of the L ink speed. GS1920v2 Series User’s Guide...
  • Page 398: Troubleshooting

    Section 51.1 on page 398. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the power adaptor or cord to the Switch. If the problem continues, contact the vendor. GS1920v2 Series User’s Guide...
  • Page 399: Switch Access And Login

    Reset the device to its factory defaults, and try to access the Switch with the default IP address. See Section 4.6 on page If the problem continues, contact the vendor, or try one of the advanced suggestions. GS1920v2 Series User’s Guide...
  • Page 400 Ac c e ss C o ntro l Re m o te Ma na g e m e nt Section 40.6 on page 356). Computers not belonging to the secured client set cannot get permission to access the Switch. GS1920v2 Series User’s Guide...
  • Page 401: Switch Configuration

    If you plug the power cable back to the Switch, it’ll reboot and load the configuration file that was used the last time. For example, if was used on the Switch before you accidentally unplugged the C o nfig 1 Switch, will be loaded when rebooting. C o nfig 1 GS1920v2 Series User’s Guide...
  • Page 402: Appendix A Customer Support

    C o rpo ra te He a dq ua rte rs (Wo rldwide ) T a iwa n • Zyxel Communications Corporation • http://www.zyxel.com Asia C hina • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • http://www.zyxel.cn India • Zyxel Technology India Pvt Ltd •...
  • Page 403 T a iwa n • Zyxel Communications Corporation • http://www.zyxel.com/tw/zh/ T ha ila nd • Zyxel Thailand Co., Ltd • http://www.zyxel.co.th Vie tna m • Zyxel Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Euro pe Austria • Zyxel Deutschland GmbH • http://www.zyxel.de Be la rus •...
  • Page 404 • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulg a ria • Zyxel България • http://www.zyxel.com/bg/bg/ C ze c h Re pub lic • Zyxel Communications Czech s.r.o • http://www.zyxel.cz De nm a rk • Zyxel Communications A/S • http://www.zyxel.dk Esto nia • Zyxel Estonia •...
  • Page 405 Ro m a nia • Zyxel Romania • http://www.zyxel.com/ro/ro Russia • Zyxel Russia • http://www.zyxel.ru Slo va kia • Zyxel Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spa in • Zyxel Communications ES Ltd • http://www.zyxel.es Swe de n • Zyxel Communications •...
  • Page 406 Appendix A Customer Support • http://www.zyxel.ch/ T urke y • Zyxel Turkey A.S. • http://www.zyxel.com.tr • Zyxel Communications UK Ltd. • http://www.zyxel.co.uk Ukra ine • Zyxel Ukraine • http://www.ua.zyxel.com L a tin Am e ric a Arg e ntina • Zyxel Communication Corporation •...
  • Page 407 Appendix A Customer Support No rth Am e ric a • Zyxel Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ O c e a nia Austra lia • Zyxel Communications Corporation • http://www.zyxel.com/au/en/ Afric a So uth Afric a • Nology (Pty) Ltd.
  • Page 408: Appendix B Common Services

    File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world wide web. GS1920v2 Series User’s Guide...
  • Page 409 Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). GS1920v2 Series User’s Guide...
  • Page 410 Its primary function is to allow users to log into remote host systems. TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. GS1920v2 Series User’s Guide...
  • Page 411: Appendix C Ipv6

    G lo b a l Addre ss A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. GS1920v2 Series User’s Guide...
  • Page 412 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 201 Reserved Multicast Address MUL T IC AST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 GS1920v2 Series User’s Guide...
  • Page 413 DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients. DHCPv6 servers and clients exchange DHCP messages using UDP. In IPv6, all network interfaces can be associated with several addresses. GS1920v2 Series User’s Guide...
  • Page 414 48) to generate its LAN IP address. Through sending Router Advertisements (RAs) regularly by multicast, the Switch passes the IPv6 prefix information to its LAN hosts. The hosts then can use the prefix to generate their IPv6 addresses. GS1920v2 Series User’s Guide...
  • Page 415 If the Switch cannot find an entry in the neighbor cache or the state for the neighbor is not reachable, it starts the address resolution process. This helps reduce the number of IPv6 solicitation and advertisement messages. GS1920v2 Series User’s Guide...
  • Page 416 > > > Sta rt C o ntro l Pa ne l Adm inistra tive T o o ls Se rvic e s Double click Dib b le r - a DHC Pv6 c lie nt GS1920v2 Series User’s Guide...
  • Page 417 L o c a l Are a C o nne c tio n Select the checkbox to enable it. Inte rne t Pro to c o l Ve rsio n 6 (T C P/ IPv6) Click to save the change. GS1920v2 Series User’s Guide...
  • Page 418 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 GS1920v2 Series User’s Guide...
  • Page 419 The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved.
  • Page 420: Appendix D Legal Information

    - If the system has multiple sources of power, disconnect power from the system by unplugging all power cables from the power supply. • CLASS 1 LASER PRODUCT • APPAREIL À LASER DE CLASS 1 • PRODUCT COMPLIES WITH 21 CFR 1040.10 AND 1040.11. • PRODUIT CONFORME SELON 21 CFR 1040.10 ET 1040.11. GS1920v2 Series User’s Guide...
  • Page 421 • 若接上不正確的電源變壓器會有爆炸的風險。。 • 請勿隨意更換產品內的電池。 • 如果更換不正確之電池型式,會有爆炸的風險,請依製造商說明書處理使用過之電池。 • 請將廢電池丟棄在適當的電器或電子設備回收處。 • 請勿將設備解體。 • 請勿阻礙設備的散熱孔,空氣對流不足將會造成設備損害。 • 請插在正確的電壓供給插座 ( 如 : 北美 / 台灣電壓 110V AC,歐洲是 230V AC)。 • 假若電源變壓器或電源變壓器的纜線損壞,請從插座拔除,若您還繼續插電使用,會有觸電死亡的風險。 • 請勿試圖修理電源變壓器或電源變壓器的纜線,若有毀損,請直接聯絡您購買的店家,購買一個新的電源變壓器。 • 請勿將此設備安裝於室外,此設備僅適合放置於室內。 • 請勿隨一般垃圾丟棄。 • 請參閱產品背貼上的設備額定功率。 • 請參考產品型錄或是彩盒上的作業溫度。 GS1920v2 Series User’s Guide...
  • Page 422 T ra de m a rks ZyNOS (Zyxel Network Operating System) and ZON (Zyxel One Network)are registered trademarks of Zyxel Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
  • Page 423: Inde X

    IEEE 802.1Q VLAN switched workgroup certifications how it works viewing learning mode overview CFI (Canonical Format Indicator) setup changing the password ARP (Address Resolution Protocol) Cisco Discovery Protocol, see CDP ARP inspection 236, 256 CIST ARP-Reply GS1920v2 Series User’s Guide...
  • Page 424 See port cloning DS field copyright DSCP network example CPU management port CPU protection service level current date DiffServ Code Points current time disclaimer customer support DNS (Domain Name System) Domain Name System DS (Differentiated Services) GS1920v2 Series User’s Guide...
  • Page 425 HTTPS filtering database, MAC table certificates firmware implementation upgrade 342, 379 public keys, private keys flow control HTTPS example back pressure IEEE802.3x forwarding delay frames IEEE 802.1x tagged GS1920v2 Series User’s Guide...
  • Page 426 ID information ping setup prefix traffic distribution algorithm prefix length traffic distribution type stateless autoconfiguration trunk group unspecified address Link Aggregation Control Protocol (LACP) IPv6 interface Link Layer Discovery Protocol DHCPv6 client LLDP enable GS1920v2 Series User’s Guide...
  • Page 427 MAC table MSTI (Multiple Spanning Tree Instance) display criteria MSTP 135, 137 how it works bridge ID sorting criteria configuration digest transfer type forwarding delay viewing Hello Time MAC-based VLAN hello time maintanence Max Age 148, 151 GS1920v2 Series User’s Guide...
  • Page 428 MAC address learning port operational state MAC address learning remote loopback overview remote-loopback setup one-time schedule port setup Operations, Administration and Maintenance port status Option 82 port details port utilization port utilization port VLAN ID, see PVID GS1920v2 Series User’s Guide...
  • Page 429 Round Robin Scheduling protocol based VLAN RSTP and IEEE 802.1Q tagging configuration application example rubber feet configuration example running configuration isolate traffic erase priority reset setup un-tagged packets PVID save configuration 53, 341 schedule one-time GS1920v2 Series User’s Guide...
  • Page 430 MAC address system information static MAC forwarding system reboot static multicast address static multicast forwarding static route enable metric static routes TACACS+ 225, 226 static VLAN advantages control setup tagging GS1920v2 Series User’s Guide...
  • Page 431 VLAN trunking VLAN Trunking Protocol, see VTP VLAN, protocol based, See protocol based VLAN Voice VLAN UDLD UniDirectional Link Detection, see UDLD untrusted ports DHCP snooping PPPoE IA user name default user profiles wall mounting warranty note GS1920v2 Series User’s Guide...
  • Page 432 Index web configurator getting help home login logout navigation panel weight, queuing Weighted Round Robin Scheduling (WRR) WRR (Weighted Round Robin Scheduling) ZON neighbor management ZON Utility ZyNOS (ZyXEL Network Operating System) ZyXEL Discovery Protocol GS1920v2 Series User’s Guide...

Table of Contents