Page 1 User’s Guide XS3800-28 28-port 10GbE L3 Managed Switch Version 4.70 Edition 1, 10/2020 Default Login Details Out-of-Band http://192.168.0.1 MGMT Port In-Band Ports http://DHCP-assigned IP http://192.168.1.1 User Name admin Password 1234 Copyright © 2020 Zyxel Communications Corporation...
Page 2 Click the help icon in any screen for help in configuring that screen and supplementary information. • More Information Go to for product discussions. https:/ / b usine ssfo rum .zyxe l.c o m Go to to find other information on the Switch suppo rt.zyxe l.c o m XS3800-28 User’s Guide...
Page 3: Do C Um E Nt C O Nve Ntio Ns
Figures in this user guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Generic Router Wireless Router / Access Point Generic Switch Smart TV Desktop Laptop IP Camera Printer Server XS3800-28 User’s Guide...
Page 4: Table Of Contents
IP Source Guard ..........................308 DHCP Snooping ..........................313 ARP Inspection ............................ 324 Loop Guard ............................342 VLAN Mapping ........................... 346 Layer 2 Protocol Tunneling ........................ 350 sFlow ..............................355 PPPoE ..............................359 Error Disable ............................368 XS3800-28 User’s Guide...
Page 5 Path MTU Table ........................... 589 Configure Clone ..........................590 IPv6 Neighbor Table ........................... 594 Port Status ............................596 Service Register ........................... 606 T ro ub le sho o ting a nd Appe ndic e s ....................608 Troubleshooting ..........................609 XS3800-28 User’s Guide...
Page 6: Table Of Contents
2.3.3 Attaching the Mounting Brackets to the Switch ............... 36 2.3.4 Mounting the Switch on a Rack ..................36 C ha pte r 3 Ha rdwa re Pa ne ls ..........................38 3.1 Front Panel Connections ....................... 38 XS3800-28 User’s Guide...
Page 7 5.1.3 Configure Switch Management IP Address ............... 66 C ha pte r 6 T uto ria ls ...............................69 6.1 Overview ............................69 6.2 How to Use DHCPv4 Snooping on the Switch ................69 6.3 How to Use DHCPv4 Relay on the Switch ..................73 XS3800-28 User’s Guide...
Page 8 8.9.6 IPv6 Link-Local Address Setup .................... 114 8.9.7 IPv6 Global Address Setup ....................114 8.9.8 IPv6 Neighbor Discovery Setup ..................116 8.9.9 IPv6 Router Discovery Setup ....................117 8.9.10 IPv6 Prefix Setup ........................ 118 8.9.11 IPv6 Neighbor Setup ......................119 XS3800-28 User’s Guide...
Page 9 10.2 Configure Static MAC Forwarding ................... 158 C ha pte r 11 Sta tic Multic a st Fo rwa rding ......................161 11.1 Overview ............................. 161 11.1.1 What You Can Do ......................161 11.1.2 What You Need To Know ....................161 XS3800-28 User’s Guide...
Page 10 Bro a dc a st Sto rm C o ntro l .........................196 15.1 Broadcast Storm Control Overview ..................196 15.1.1 What You Can Do ......................196 15.2 Broadcast Storm Control Setup ....................196 C ha pte r 16 Mirro ring ............................199 XS3800-28 User’s Guide...
Page 11 Po rt Se c urity ............................237 19.1 About Port Security ........................237 19.2 Port Security Setup ........................237 19.3 VLAN MAC Address Limit ......................239 C ha pte r 20 T im e Ra ng e ............................241 XS3800-28 User’s Guide...
Page 12 24.2 VLAN Stacking Port Roles ......................262 24.3 VLAN Tag Format ........................262 24.3.1 Frame Format ........................263 24.4 Configuring VLAN Stacking ....................... 263 24.4.1 Port-based Q-in-Q ......................265 24.4.2 Selective Q-in-Q ........................ 267 C ha pte r 25 Multic a st............................269 XS3800-28 User’s Guide...
Page 13 27.1.2 What You Need to Know ....................308 27.2 IP Source Guard .......................... 309 27.3 IPv4 Source Guard Setup ......................310 27.4 IPv4 Source Guard Static Binding ..................... 310 C ha pte r 28 DHC P Sno o ping ..........................313 XS3800-28 User’s Guide...
Page 14 C ha pte r 31 VL AN Ma pping ..........................346 31.1 VLAN Mapping Overview ......................346 31.1.1 VLAN Mapping Example ....................346 31.1.2 What You Can Do ......................347 31.2 Enable VLAN Mapping ......................347 31.2.1 VLAN Mapping Configure ....................348 XS3800-28 User’s Guide...
Page 15 35.6 Error-Disable Recovery Configuration ..................374 C ha pte r 36 VL AN Iso la tio n ..........................376 36.1 VLAN Isolation Overview ......................376 36.2 Configuring VLAN Isolation ......................376 C ha pte r 37 MAC Pinning .............................378 XS3800-28 User’s Guide...
Page 16 41.3 Anti-Arpscan Host Status ......................418 41.4 Anti-Arpscan Trust Host ......................419 41.5 Anti-Arpscan Configure ......................419 C ha pte r 42 BPDU G ua rd ............................422 42.1 BPDU Guard Overview ....................... 422 42.1.1 What You Can Do ......................422 XS3800-28 User’s Guide...
Page 17 47.1 Static Routing Overview ......................448 47.1.1 What You Can Do ......................448 47.2 Static Routing ..........................449 47.3 IPv4 Static Route ......................... 449 47.4 IPv6 Static Route ......................... 450 C ha pte r 48 Po lic y Ro uting ...........................452 XS3800-28 User’s Guide...
Page 18 51.3 Configuring IGMP ........................476 C ha pte r 52 DVMRP...............................478 52.1 DVMRP Overview ........................478 52.2 How DVMRP Works ........................478 52.2.1 DVMRP Terminology ......................479 52.3 Configuring DVMRP ........................479 52.3.1 DVMRP Configuration Error Messages ................480 XS3800-28 User’s Guide...
Page 19 55.1 VRRP Overview ........................... 507 55.2 VRRP Status ..........................508 55.3 VRRP Configuration ........................508 55.3.1 IP Interface Setup ......................508 55.3.2 VRRP Parameters ......................509 55.3.3 Configuring VRRP Parameters ..................510 55.3.4 Viewing VRRP Summary ....................511 XS3800-28 User’s Guide...
Page 20 58.8.1 HTTPS Certificates ......................537 58.9 Technical Reference ........................538 58.9.1 FTP Command Line ......................538 58.9.2 Filename Conventions ...................... 538 58.9.3 FTP Command Line Procedure ..................539 58.9.4 GUI-based FTP Clients ....................... 539 58.9.5 FTP Restrictions ........................539 XS3800-28 User’s Guide...
Page 21 63.1 Cluster Management Overview ....................574 63.1.1 What You Can Do ......................575 63.2 Cluster Management Status ..................... 575 63.3 Clustering Management Configuration .................. 576 63.4 Technical Reference ........................577 63.4.1 Cluster Member Switch Management ................578 XS3800-28 User’s Guide...
Page 22 C ha pte r 70 IPv6 Ne ig hb o r T a b le .........................594 70.1 IPv6 Neighbor Table Overview ....................594 70.2 Viewing the IPv6 Neighbor Table ..................... 594 C ha pte r 71 Po rt Sta tus ............................596 XS3800-28 User’s Guide...
Page 23 73.2 Switch Access and Login ......................610 73.3 Switch Configuration ........................612 Appendix A Customer Support ..................... 613 Appendix B Common Services ...................... 619 Appendix C IPv6..........................622 Appendix D Legal Information ...................... 630 Inde x ..............................635 XS3800-28 User’s Guide...
Page 24: Use R's G Uide
A RT Use r’s G uide...
Page 25: Getting To Know Your Switch
Switches of the same model and firmware version and allows you to remotely manage them from one switch using one single IP address. The Switch performs full layer-2 switching features and basic layer-3 routing features, such as static route, and IGMP. XS3800-28 User’s Guide...
Page 26: Multi-Gigabit
Multi-Gigabit (IEEE 802.3bz) solves these problems by additionally supporting 2.5 Gigabit and 5 Gigabit Ethernet connections over Cat 5e and higher Ethernet cables. Multi-Gigabit ports are also backward compatible with 100 Mbps and 1 Gigabit ports. XS3800-28 User’s Guide...
Page 27: Stacking Mode
Note: To set the Switch to stacking mode, go to the > > Ba sic Se tting Sta c king C o nfig ura tio n screen. Note: When the Switch is in stacking mode, it uses the default static IP address 192.168.1.1. XS3800-28 User’s Guide...
Page 28: Management Method
See the following steps or the Switch Quick Start Guide for how to do device registration. G o to the NC C to Re g iste r the Switc h Go to the Nebula web portal in one of three ways. XS3800-28 User’s Guide...
Page 29: Zon Utility
The following table shows which firmware version supports ZON and Neighbor Management (Smart Connect) for each Switch. The firmware on each Switch is identified by the firmware trunk version, followed by a unique model code and release number in brackets. For example, 4.70(ABML.0) is a XS3800-28 User’s Guide...
Page 30: Example Applications
Within the headquarters network, a company can use trunking to group several physical ports into one logical higher-capacity link. Trunking can be used if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link. XS3800-28 User’s Guide...
Page 31: Ieee 802.1Q Vlan Application Examples
Shared resources such as a server can be used by all ports in the same VLAN as the server. In the following figure only ports that need access to the server need to be part of VLAN 1. Ports can belong to other VLAN groups too. Shared Server Using VLAN Example Fig ure 6 XS3800-28 User’s Guide...
Page 32: Ipv6 Support
• Change the password. Use a password that is not easy to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it in a safe place. XS3800-28 User’s Guide...
Page 33 Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. XS3800-28 User’s Guide...
Page 34: Hardware Installation And Connection
Remove the adhesive backing from the rubber feet. Attach the rubber feet to each corner on the bottom of the Switch. These rubber feet help protect the Switch from shock or vibration and ensure space between devices when stacking. XS3800-28 User’s Guide...
Page 35: Mounting The Switch On A Rack
21.5 kg. • Make sure the position of the Switch does not make the rack unstable or top-heavy. Take all necessary precautions to anchor the rack securely before installing the unit. XS3800-28 User’s Guide...
Page 36: Attaching The Mounting Brackets To The Switch
Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the rack. Mounting the Switch on a Rack Fig ure 9 XS3800-28 User’s Guide...
Page 37 Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. Note: Make sure you tighten all the four screws to prevent the Switch from getting slanted. Repeat steps to attach the second mounting bracket on the other side of the rack. XS3800-28 User’s Guide...
Page 38: Hardware Panels
SFP+ module with one port active at a time. Ethernet ports support Multi-Gigabit (100 Mbps, 1 Gbps, 2.5 Gbps, 5 Gbps, and 10 Gbps). The figure below shows the front panel of the Switch. Front Panel: XS3800-28 Fig ure 10 The following table describes the ports.
Page 39: Ethernet Ports
Pluggable (SFP) Transceiver MultiSource Agreement (MSA). See the SFF committee’s INF-8074i specification Rev 1.0 for details. You can change transceivers or the DAC cables while the Switch is operating. You can use different transceivers to connect to Ethernet switches with different types of fiber connectors. XS3800-28 User’s Guide...
Page 40 Remove the dust plugs from the transceiver and cables (dust plug styles vary). Identify the signal transmission direction of the ﬁber cables and the transceiver. Insert the ﬁber cable into the transceiver. Latch in the Lock Position Fig ure 11 Transceiver Installation Example Fig ure 12 XS3800-28 User’s Guide...
Page 41 Switch and transceiver. Insert the dust plug into the ports on the transceiver and the cables. Removing the Fiber Cables Fig ure 14 Opening the Transceiver’s Latch Example Fig ure 15 Transceiver Removal Example Fig ure 16 XS3800-28 User’s Guide...
Page 42: Dual Personality Interfaces
• No flow control 3.2 Re a r Pa ne l The following figures show the rear panels of the Switch. The rear panels contain: • Two AC power receptacles ( Rear Panel: XS3800-28 Fig ure 18 XS3800-28 User’s Guide...
Page 43: Grounding
Attach the other end of the ground cable to a grounding bar located on the rack where you install the Switch or to an on-site grounding terminal. Attach Ground Cable to Grounding Bar or On-site Grounding Terminal Fig ure 20 XS3800-28 User’s Guide...
Page 44: Ac Power Connection
Use the following procedures to connect the Switch to a power source after you have installed it in a rack. Note: Use the included power cord for the AC power connection. Connect the female end of the power cord to the AC power socket. Connect the other end of the cord to a power outlet. XS3800-28 User’s Guide...
Page 45: Leds
SYS (System) Green The Switch is on and functioning properly. Blinking The Switch is rebooting and performing self-diagnostic tests. The Switch is functioning abnormally. The power is off or the system is not ready or malfunctioning. XS3800-28 User’s Guide...
Page 46 MG MT port is not connected to an Ethernet device, or the port is MG MT disabled. STACK ID The LED is showing the Stack ID number of the Switch. ID 0 means it is a standalone Switch. XS3800-28 User’s Guide...
Page 47: T E C Hnic A L Re Fe Re Nc E
A RT T e c hnic a l Re fe re nc e...
Page 48: Web Configurator
Also, you can use the ZON Utility to check your Switch’s IP address. See Section 4.3 on page 51 for more information on the ZON utility. The following screen appears. XS3800-28 User’s Guide...
Page 49 Pa sswo rd / SNMP where you can change the administrator password and SNMP community string simultaneously. Otherwise, click to close it. Ig no re Pa sswo rd/ SNMP Se tting Web Configurator: Warning Fig ure 23 XS3800-28 User’s Guide...
Page 50 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 51: Zyxel One Network (Zon) Utility
4.3.2 Run the ZO N Utility Double-click the ZON Utility to run it. The first time you run the ZON Utility, you will see if your device and firmware version support the ZON Utility. Click the button to close this screen. XS3800-28 User’s Guide...
Page 52 If your device is not listed here, see the device release notes for ZON m o de l a nd firm wa re ve rsio n Utility support. The release notes are in the firmware zip file on the Zyxel web site. ZON Utility Screen Fig ure 26 XS3800-28 User’s Guide...
Page 53 Select a device and then use the icons to perform actions. Some functions may not be available for your devices. Note: You must know the selected device admin password before taking actions on the device using the ZON Utility icons. XS3800-28 User’s Guide...
Page 54 This field displays an icon of the kind of device discovered. Model This field displays the model name of the discovered device. Firmware Version This field displays the firmware version of the discovered device. MAC Address This field displays the MAC address of the discovered device. XS3800-28 User’s Guide...
Page 55: Web Configurator Layout
4.4 We b C o nfig ura to r L a yo ut screen is the first screen that displays when you access the Web Configurator. Sta tus The following figure shows the navigating components of a Web Configurator screen. Web Configurator Layout Fig ure 31 XS3800-28 User’s Guide...
Page 56 Click this link to go to the screen where you can see and manage neighbor devices H – Ne ig hb o r learned by the Switch. In the navigation panel, click a main link to reveal a list of sub-menu links. XS3800-28 User’s Guide...
Page 57 MAC address learning, GARP and priority queues. IP Setup This link takes you to a screen where you can configure the IP address, subnet mask (necessary for Switch management) and set up to 128 IP routing domains. XS3800-28 User’s Guide...
Page 58 VLAN Stacking This link takes you to screens where you can activate and configure VLAN stacking. Multicast This link takes you to screen where you can configure various multicast features, IGMP snooping, MLD snooping-proxy and create multicast VLANs. XS3800-28 User’s Guide...
Page 59 IPv4 RIP timer, and the method of preventing routing loops. OSPF This link takes you to a screen where you can view the OSPF status and configure OSPF settings for IPv4. IGMP This link takes you to a screen where you can configure the IGMP settings. XS3800-28 User’s Guide...
Page 60: Change Your Password
After you log in for the first time, it is recommended you change the default administrator password. Click > > to display the next screen. Ma na g e m e nt Ac c e ss C o ntro l L o g ins XS3800-28 User’s Guide...
Page 61: Save Your Configuration
Delete the management VLAN (default is VLAN 1). Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the management port of the Switch. Filter all traffic to the CPU port. Disable all ports. Misconfigure the text configuration file. XS3800-28 User’s Guide...
Page 62: Reset The Switch
Type atlc after the “Enter Debug Mode” message. Wait for the “Starting XMODEM upload” message before activating XMODEM upload on your terminal. After a configuration file upload, type atgo to restart the Switch. XS3800-28 User’s Guide...
Page 63: Log Out Of The Web Configurator
Fig ure 34 4.9 He lp The Web Configurator’s online help has descriptions of individual screens and some supplementary information. Click the link from a Web Configurator screen to view an online help description of that screen. He lp XS3800-28 User’s Guide...
Page 64: Initial Setup Example
Fig ure 35 Click > > in the navigation panel and click the Adva nc e d Applic a tio n VL AN VL AN C o nfig ura tio n Sta tic link. VL AN Se tup XS3800-28 User’s Guide...
Page 65: Set Port Vid
Use PVID to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on that port get sent to VLAN 2. XS3800-28 User’s Guide...
Page 66: Configure Switch Management Ip Address
If the Switch fails to obtain an IP address from a DHCP server, the Switch will use 192.168.1.1 as the management IP address. You can configure another IP address in a different subnet for management purposes. The following figure shows an example. XS3800-28 User’s Guide...
Page 67 Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the Web Configurator. See Section 4.2 on page 48 for more information. Click > > in the navigation panel. Ba sic Se tting IP Se tup IP C o nfig ura tio n XS3800-28 User’s Guide...
Page 68 This is the same as the VLAN ID you configure in the screen. Sta tic VL AN Click to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XS3800-28 User’s Guide...
Page 69: Tutorials
DHCP Client ( 1 and 100 DHCP Client ( 1 and 100 Access the Switch through by default. Log into the Switch by entering the user name http:/ / 192.168.1.1 (default: ) and password (default: a dm in 1234 XS3800-28 User’s Guide...
Page 70 VL AN C o nfig ura tio n VL AN Po rt Se tup ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. Tutorial: Tag Untagged Frames Fig ure 40 XS3800-28 User’s Guide...
Page 71 T ruste d Se rve r T ruste d sta te 5 because the DHCP server is connected to port 5. Keep ports 6 and 7 because they are Untruste d connected to DHCP clients. Click Apply XS3800-28 User’s Guide...
Page 72 O ptio n82 Pro file Tutorial: Enable DHCP Snooping on this VLAN Fig ure 43 Click at the top right corner of the Web Configurator to save the configuration permanently. Sa ve XS3800-28 User’s Guide...
Page 73: How To Use Dhcpv4 Relay On The Switch
IP address (say 172.16.1.18) to DHCP client based on the system name, VLAN ID and port number in the DHCP request. Client connects to the Switch’s port 2 in VLAN 102. Tutorial: DHCP Relay Scenario Fig ure 45 XS3800-28 User’s Guide...
Page 74: Create A Vlan
Switch to remove VLAN tags before sending. T X T a g g ing Click to save the settings to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XS3800-28 User’s Guide...
Page 75 2 to add a tag to incoming untagged frames received on that port so PVID that the frames are forwarded to the VLAN group that the tag defines. 10 Click to save your changes back to the run-time memory. Apply XS3800-28 User’s Guide...
Page 76: Configure Dhcpv4 Relay
The DHCP server can then assign a specific IP address based on the DHCP request. 6.3.4 T ro ub le sho o ting Check client ’s IP address. If it did not receive the IP address 172.16.1.18, make sure: XS3800-28 User’s Guide...
Page 77: How To Use Auto Configuration Via A Dhcp Server On The Switch
Vendor Class Identifier on the Switch. Se tting up a T FT P Se rve r Select a directory on the TFTP server. Put the configuration files in that directory. XS3800-28 User’s Guide...
Page 78 IP Se tup IP C o nfig ura tio n O ptio n- 60 enter a Vendor Class Identifier in the field. In this example, we use “ZyxelCorp”. Click C la ss- ID Apply save your changes. XS3800-28 User’s Guide...
Page 79 For example, if you save the auto configuration setting to , you C o nfig 1 need to click the button next to the field. C o nfig 1 Re b o o t Syste m XS3800-28 User’s Guide...
Page 80 Check the screens to see if it is the configuration file you want to load. If it is not, go through the steps above to check your configurations. If it is, click at the top right corner of the Web Configurator to Sa ve save the configuration permanently. Tutorial: Save Fig ure 56 XS3800-28 User’s Guide...
Page 81: Status
Switch or click at the top right corner of the Web Sta tus Sta tus Configurator. The screen displays general device information, system status, and its IP addresses. Sta tus XS3800-28 User’s Guide...
Page 82 Timeout(mins) times out. After it times out you have to log in with your password again. Serial Number This field displays the serial number of this Switch. The serial number is used for device tracking and control. XS3800-28 User’s Guide...
Page 83: Neighbor Screen
This screen shows the neighboring device first recognized on an Ethernet port of the Switch. Device information is displayed in gray when the neighboring device is offline. Click > to see the following screen. Sta tus Ne ig hb o r XS3800-28 User’s Guide...
Page 84 Select an entry’s check box to select a specific port. Otherwise, select the check box in the table heading row to select all ports. Flush Click the button to remove information about neighbors learned on the selected Flush ports. XS3800-28 User’s Guide...
Page 85: Neighbor Detail
This shows the speed (either for 10 Mbps, for 100 Mbps, or for 1 Gbps) and 100M the duplex ( for full duplex or for half). This field displays if the port is not Do wn connected to any device. Remote XS3800-28 User’s Guide...
Page 86 This shows the description of the neighbor device’s port which is connected to the Switch. Location This shows the geographic location of the neighbor device. This field will show “ ” for – devices that do not support the ZON utility. XS3800-28 User’s Guide...
Page 87: Basic Setting
Ne b ula Switc h Re g istra tio n 8.2 Syste m Info rm a tio n In the navigation panel, click > to display the screen as shown. Use this screen Ba sic Se tting Syste m Info to view general system information. XS3800-28 User’s Guide...
Page 88 Chapter 8 Basic Setting Basic Setting > System Info (Standalone Mode) Fig ure 60 XS3800-28 User’s Guide...
Page 89 This field displays the minimum temperature measured at this sensor. Threshold This field displays the upper temperature limit at this sensor. Status This field displays for temperatures below the threshold and for those above. No rm a l Erro r XS3800-28 User’s Guide...
Page 90: System Information Stacking Hardware Monitor
8.2.1 Syste m Info rm a tio n Sta c king Ha rdwa re Mo nito r Click a slot number in the rmation screen to display more detailed hardware information on Syste m Info a Switch. XS3800-28 User’s Guide...
Page 91 This field displays this fan's maximum speed measured in RPM. This field displays this fan's minimum speed measured in RPM. “<41" is displayed for speeds too small to measure (under 2000 RPM). Threshold This field displays the minimum speed at which a normal fan should work. XS3800-28 User’s Guide...
Page 92: General Setup
Use this screen to configure general settings such as the system name and time. Click > Ba sic Se tting in the navigation panel to display the screen as shown. G e ne ra l Se tup Basic Setting > General Setup Fig ure 63 XS3800-28 User’s Guide...
Page 93 L a st Sunda y Ma rc h depends on your time zone. In Germany for instance, you would select because 2:00 Germany's time zone is one hour ahead of GMT or UTC (GMT+1). XS3800-28 User’s Guide...
Page 94: Introduction To Vlans
The VLAN Ba sic Se tting Switc h Se tup setup screens change depending on whether you choose in the field in 802.1Q Po rt Ba se d VL AN T ype this screen (in Standalone mode). XS3800-28 User’s Guide...
Page 95 MAC address learning reduces outgoing traffic broadcasts. For MAC address learning to occur on a port, the port must be active. Aging Time Enter a time from 10 to 1000000 seconds. This is how long all dynamically learned MAC addresses remain in the MAC address table before they age out (and must be relearned). XS3800-28 User’s Guide...
Page 96: Ip Setup
Click to begin configuring this screen afresh. C a nc e l 8.6 IP Se tup Use the screen to configure the default gateway device, the default domain name server and IP Se tup add IP domains. XS3800-28 User’s Guide...
Page 97: Ip Interfaces
This field displays the subnet mask of the Switch in the IP domain. This field displays the VLAN identification number of the IP domain on the Switch. Type This shows whether this IP address is dynamically assigned from a DHCP server or manually assigned ( Sta tic XS3800-28 User’s Guide...
Page 98: Ip Status Details
This is the VLAN identification number to which an IP routing domain belongs. IP Address This is the IP address of your Switch in dotted decimal notation for example 192.168.1.1. IP Subnet Mask This is the IP subnet mask of your Switch in dotted decimal notation for example 255.255.255.0. XS3800-28 User’s Guide...
Page 99: Ip Configuration
This displays the IP address of the primary and secondary DNS servers assigned by the DHCP server. 0.0.0.0 means no DNS server is assigned. 8.6.4 IP C o nfig ura tio n Use this screen to configure the default gateway device, the default domain name server and add IP domains. XS3800-28 User’s Guide...
Page 100 DHCP server. This allows the Switch to identify itself to the DHCP server. Class-ID Type a string of up to 32 characters to identify this Switch to the DHCP server. For example, Zyxel- XS3800-28 User’s Guide...
Page 101 Delete Click to remove the selected entry from the summary table. De le te Note: Deleting all IP subnets locks you out of the Switch. Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 102 IP address of the Switch in an IP routing domain. IP Subnet Enter the IP subnet mask of an IP routing domain in dotted decimal notation, for example, Mask 255.255.255.0. Enter the VLAN identification number to which an IP routing domain belongs. XS3800-28 User’s Guide...
Page 103: Network Proxy Configuration
Network Proxy Configuration Application Fig ure 70 As of this writing, this setting only allows communication between the Switch and the NCC. Basic Setting > IP Setup > IP Configuration > Network Proxy Configuration Fig ure 71 XS3800-28 User’s Guide...
Page 104: Port Setup
C a nc e l 8.7 Po rt Se tup Use this screen to configure Switch port settings. Click > in the navigation panel Ba sic Se tting Po rt Se tup to display the configuration screen. XS3800-28 User’s Guide...
Page 105 Chapter 8 Basic Setting Basic Setting > Port Setup (Standalone Mode) Fig ure 72 XS3800-28 User’s Guide...
Page 106 Name Type a descriptive name that identifies this port. You can enter up to 128 alpha-numerical characters. Note: Due to space limitations, the port name may be truncated in some Web Configurator screens. XS3800-28 User’s Guide...
Page 107: Interface Setup
Ethernet port) or a virtual interface (for example, a VLAN). The Switch supports the VLAN interface type for IPv6 at the time of writing. Use this screen to set IPv4 loopback interfaces for routing protocols or IPv6 interfaces on which you can XS3800-28 User’s Guide...
Page 108: Ipv6
De le te Cancel Click to clear the check boxes. C a nc e l 8.9 IPv6 Use this screen to view the IPv6 interface status and configure the Switch’s management IPv6 addresses. XS3800-28 User’s Guide...
Page 109: Ipv6 Status
8.9.2 IPv6 Inte rfa c e Sta tus Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the > screen. The following screen opens. Ba sic Se tting IPv6 XS3800-28 User’s Guide...
Page 110 IP address is preferred, which means it is a valid address and can be used as a sender or receiver address. Global Unicast This field displays the Switch’s global unicast address to identify this interface. Address(es) Joined Group This field displays the IPv6 multicast addresses of groups the Switch’s interface joins. Address(es) XS3800-28 User’s Guide...
Page 111: Ipv6 Configuration
8.9.3 IPv6 C o nfig ura tio n Use this screen to configure IPv6 settings on the Switch. Click the link in the IPv6 C o nfig ura tio n Ba sic > screen. The following screen opens. Se tting IPv6 XS3800-28 User’s Guide...
Page 112: Ipv6 Global Setup
IPv6 G lo b a l Se tup IPv6 screen to display the screen as shown next. C o nfig ura tio n Basic Setting > IPv6 > IPv6 Configuration > IPv6 Global Setup Fig ure 78 XS3800-28 User’s Guide...
Page 113: Ipv6 Interface Setup
This is the interface index number. Click on an index number to change the settings. Interface This is the name of the IPv6 interface you created. Active This field displays whether the IPv6 interface is activated or not. XS3800-28 User’s Guide...
Page 114: Ipv6 Link-Local Address Setup
Use this screen to configure the interface’s IPv6 global address. Click the link next to IPv6 G lo b a l Addre ss in the screen to display the screen as shown next. Se tup IPv6 C o nfig ura tio n XS3800-28 User’s Guide...
Page 115 This shows whether the interface ID of the global address is generated using the EUI-64 format. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XS3800-28 User’s Guide...
Page 116: Ipv6 Neighbor Discovery Setup
This is the interface index number. Click on an index number to change the settings. Interface This is the name of the IPv6 interface you created. DAD Attempts This field displays the number of consecutive neighbor solicitations the Switch sends for this interface. XS3800-28 User’s Guide...
Page 117: Ipv6 Router Discovery Setup
Note: The minimum time interval cannot be greater than three-quarters of the maximum time interval. Maximum Interval Specify the maximum time interval (from 4 to 1800 seconds) at which the Switch sends router advertisements for this interface. XS3800-28 User’s Guide...
Page 118: Ipv6 Prefix Setup
Use this screen to configure the Switch’s IPv6 prefix list for each interface. Click the link next to IPv6 Pre fix in the screen to display the screen as shown next. Se tup IPv6 C o nfig ura tio n Basic Setting > IPv6 > IPv6 Configuration > IPv6 Prefix Setup Fig ure 84 XS3800-28 User’s Guide...
Page 119: Ipv6 Neighbor Setup
Use this screen to create a static IPv6 neighbor entry in the Switch’s IPv6 neighbor table to store the neighbor information permanently. Click the link next to in the IPv6 Ne ig hb o r Se tup IPv6 C o nfig ura tio n screen to display the screen as shown next. XS3800-28 User’s Guide...
Page 120 Delete Check the entries that you want to remove and then click to remove the selected entries De le te from the summary table. Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 121: Dhcpv6 Client Setup
This field displays whether the Switch obtains a non-temporary IP address from the DHCPv6 server. Rapid-Commit This field displays whether the Switch obtains information from the DHCPv6 server by a rapid two- message exchange. This field displays whether the Switch obtains DNS server IPv6 addresses from the DHCPv6 server. XS3800-28 User’s Guide...
Page 122: Loopback Interface
Fig ure 87 8.10.1 IPv4 L o o pb a c k Inte rfa c e Use this screen to configure IPv4 loopback interfaces on the Switch. Basic Setting > Loopback Interface > IPv4 Loopback Interface Fig ure 88 XS3800-28 User’s Guide...
Page 123: Stacking
Note: Up to four Switches per stack are allowed. You can manage each Switch in the stack from a master Switch using its Web Configurator or console. Each Switch supports up to two stacking channels. The stacking ports used to form the same stacking XS3800-28 User’s Guide...
Page 124: Stacking Status
8.11.1 Sta c king Sta tus Click > in the navigation panel to display the screen as shown Ba sic Se tting Sta c king Sta c king Sta tus next. Basic Setting > Stacking > Stacking Status Fig ure 91 XS3800-28 User’s Guide...
Page 125: Stacking Slot
Ba sic Se tting Sta c king Sta c king Sta tus Sta c king Slo t Sta tus screen as shown next. Basic Setting > Stacking > Stacking Status > Slot Fig ure 92 XS3800-28 User’s Guide...
Page 126: Stacking Configuration
Sta c king C o nfig ura tio n Fo rc e Ma ste r to choose the master Switch. This master Switch will have the highest priority over all other stacked Mo de Switches even when they have same priority value. XS3800-28 User’s Guide...
Page 127 The second Switch master LED will then turn off, and its LED will blink while it is initializing. Please wait until it stops blinking, indicating that it has joined the stack. Repeat steps 4 to 6 to connect other Switches to the stack. XS3800-28 User’s Guide...
Page 128 Click to save the field. Apply Slo t ID Afte r Re b o o t Cancel Click to clear the field. C a nc e l Slo t ID Afte r Re b o o t XS3800-28 User’s Guide...
Page 129: Cloud Management
Switch on the NCC. Below is the process for upgrading firmware: Download firmware via the NCC. Upgrade the firmware and reboot. Note: While the Switch is rebooting, do NOT turn off the power. XS3800-28 User’s Guide...
Page 130: Nebula Switch Registration
This screen has a QR code containing the Switch’s serial number and MAC address for handy NCC registration of the Switch using the Nebula Mobile app. First, download the app from the Google Play store for Android devices or the App Store for iOS devices and create an organization and site. XS3800-28 User’s Guide...
Page 131: Vlan
You can specify a mask for the MAC address to create a MAC address filter and enter a weight to set the VLAN rule’s priority. 9.1.2 Wha t Yo u Ne e d to Kno w Read this section to know more about VLAN and how to configure the screens. XS3800-28 User’s Guide...
Page 132: Introduction To Ieee 802.1Q Tagged Vlans
Switches join VLANs by making a declaration. A declaration is made by issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message terminates all registrations. GARP timers set declaration timeout values. XS3800-28 User’s Guide...
Page 133 (A and B). C, D and E automatically allow frames with VLAN group tags 1 and 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking ports. Port VLAN Trunking Fig ure 97 XS3800-28 User’s Guide...
Page 134: Vlan Status
Use this screen to view and search all static VLAN groups. Click > from the Adva nc e d Applic a tio n VL AN navigation panel to display the screen as shown next. VL AN Sta tus XS3800-28 User’s Guide...
Page 135: Vlan Details
9.3.1 VL AN De ta ils Use this screen to view detailed port settings and status of the static VLAN group. Click an index number in the screen to display VLAN details. VL AN Sta tus XS3800-28 User’s Guide...
Page 136 This field shows the primary VLAN ID in the selected VLAN. VLAN Secondary This field shows the secondary VLAN ID in the selected VLAN. VLAN Type This field shows the type of private VLAN: Prim a ry C o m m unity Iso la te d XS3800-28 User’s Guide...
Page 137: Private Vlan Status
Use this screen to view IEEE 802.1Q VLAN parameters for the Switch. Click > Adva nc e d Applic a tio n VL AN > to see the following screen. VL AN C o nfig ura tio n XS3800-28 User’s Guide...
Page 138: Configure A Static Vlan
Use this screen to configure a static VLAN for the Switch. Click the link in the Sta tic VL AN Se tup VL AN screen to display the screen as shown next. C o nfig ura tio n XS3800-28 User’s Guide...
Page 139 Chapter 9 VLAN Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup (Standalone Fig ure 104 Mode) XS3800-28 User’s Guide...
Page 140 51–53 includes 51, 52 and 53, but 51,53 does not include 52. Secondary private VLANs can only be associated with one primary private VLAN. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XS3800-28 User’s Guide...
Page 141: Configure Vlan Port Settings
9.7 C o nfig ure VL AN Po rt Se tting s Use this screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click the link VL AN Po rt Se tup in the screen. VL AN C o nfig ura tio n XS3800-28 User’s Guide...
Page 142 Chapter 9 VLAN Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup (Standalone Mode) Fig ure 106 Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup (Stacking Mode) Fig ure 107 XS3800-28 User’s Guide...
Page 143: Subnet Based Vlans
Subnet based VLANs allow you to group traffic into logical VLANs based on the source IP subnet you specify. When a frame is received on a port, the Switch checks if a tag is added already and the IP XS3800-28 User’s Guide...
Page 144 VID of 300 for traffic received from IP subnet 10.1.1.0/24 (data services). All untagged incoming frames will be classified based on their source IP subnet and prioritized accordingly. That is video services receive the highest priority and data the lowest. Subnet Based VLAN Application Example Fig ure 108 XS3800-28 User’s Guide...
Page 145 Cancel Click to begin configuring this screen afresh. C a nc e l Index This is the index number identifying this subnet based VLAN. Click on any of these numbers to edit an existing subnet based VLAN. XS3800-28 User’s Guide...
Page 146: Protocol Based Vlans
9.9.1 C o nfig uring Pro to c o l Ba se d VL AN Click the link in the screen to display the configuration Pro to c o l Ba se d VL AN Se tup VL AN C o nfig ura tio n screen as shown. XS3800-28 User’s Guide...
Page 147 Enter the ID of a VLAN to which the port belongs. This must be an existing VLAN which you defined in the > > screen. Adva nc e d Applic a tio n VL AN Sta tic VL AN XS3800-28 User’s Guide...
Page 148 Select the protocol. Leave the default value Type the VLAN ID of an existing VLAN. In our example we already created a static VLAN with an ID of 5. Type Leave the priority set to and click XS3800-28 User’s Guide...
Page 149: Voice Vlan
ID from the Organizationally Unique Identifiers (OUI). Click the link in the screen to display the configuration screen as Vo ic e VL AN Se tup VL AN C o nfig ura tio n shown. XS3800-28 User’s Guide...
Page 150 Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the link on the top navigation panel Sa ve to save your changes to the non-volatile memory when you are done configuring. XS3800-28 User’s Guide...
Page 151: Mac Based Vlan
MAC Ba se d VL AN Se tup VL AN C o nfig ura tio n Advanced Application > VLAN > VLAN Configuration > MAC Based VLAN Setup Fig ure 115 XS3800-28 User’s Guide...
Page 152: Vendor Id Based Vlan
Click the link in the screen to see the following screen. Ve ndo r ID Ba se d VL AN Se tup VL AN C o nfig ura tio n XS3800-28 User’s Guide...
Page 153 This field displays the VLAN ID of the vendor ID based VLAN entry. Priority This field displays the priority level which is assigned to frames belonging to this vendor ID based VLAN. Weight This field displays the weight of the vendor ID based VLAN entry. XS3800-28 User’s Guide...
Page 154: Port-Based Vlan Setup
Click C o nne c te d Po rt Iso la te d Apply save your settings. The following screen shows users on a port-based, all-connected VLAN configuration. XS3800-28 User’s Guide...
Page 155 Chapter 9 VLAN Advanced Application > VLAN > Port Based VLAN Setup (All Connected) Fig ure 117 The following screen shows users on a port-based, port-isolated VLAN configuration. XS3800-28 User’s Guide...
Page 156 Switch management port. By default it forms a VLAN C PU with all Ethernet ports. If it does not form a VLAN with a particular port then the Switch cannot be managed from that port. XS3800-28 User’s Guide...
Page 157 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 158: Static Mac Forwarding
> in the navigation panel to display the Adva nc e d Applic a tio n Sta tic MAC Fo rwa rding configuration screen as shown. Advanced Application > Static MAC Forwarding (Standalone Mode) Fig ure 119 XS3800-28 User’s Guide...
Page 159 In stacking mode, the first number represents the slot ID and the second is the port number. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XS3800-28 User’s Guide...
Page 160 Table 56 Advanced Application > Static MAC Forwarding (continued) L ABEL DESC RIPT IO N Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 161: Static Multicast Forwarding
Figure 122 on page shows frames being forwarded to devices connected to port 3. Figure 123 on page 162 shows frames being forwarded to ports 2 and 3 within VLAN group 4. No Static Multicast Forwarding Fig ure 121 XS3800-28 User’s Guide...
Page 162: Configure Static Multicast Forwarding
Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific ports. Click > to display the configuration screen as shown. Adva nc e d Applic a tio n Sta tic Multic a st Fo rwa rding XS3800-28 User’s Guide...
Page 163 ). You may temporarily deactivate a rule without deleting it. Name This field displays the descriptive name for identification purposes for a static multicast MAC address-forwarding rule. MAC Address This field displays the multicast MAC address that identifies a multicast group. XS3800-28 User’s Guide...
Page 164 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 165: Filtering
Use this screen to create rules for traffic going through the Switch. Click > Adva nc e d Applic a tio n Filte ring in the navigation panel to display the screen as shown next. Advanced Application > Filtering Fig ure 125 XS3800-28 User’s Guide...
Page 166 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rules that you want to remove and then click the button. De le te Cancel Click to clear the selected check boxes. C a nc e l XS3800-28 User’s Guide...
Page 167: Spanning Tree Protocol
It allows a switch to interact with other (R)STP-compliant switches in your network to ensure that only one path exists between any two stations on the network. The Switch uses IEEE 802.1w RSTP (Rapid Spanning Tree Protocol) that allows faster convergence of the XS3800-28 User’s Guide...
Page 168 ST P Po rt Sta te s STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from XS3800-28 User’s Guide...
Page 169 • A VLAN can be mapped to a specific Multiple Spanning Tree Instance (MSTI). MSTI allows multiple VLANs to use the same spanning tree. • Load-balancing is possible as traffic from different VLANs can use distinct paths in a region. XS3800-28 User’s Guide...
Page 170: Spanning Tree Protocol Status
Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 171: Rapid Spanning Tree Protocol Status
Hello Time This is the time interval (in seconds) at which the root switch transmits a configuration (second) message. The root bridge determines He llo T im e Ma x Ag e Fo rwa rding De la y XS3800-28 User’s Guide...
Page 172 • – the Switch receives superior BPDUs on the port and blocks the port. Ro o t- inc o nsiste nt • – the Switch unblocks and allows the port to forward frames again. Fo rwa rding XS3800-28 User’s Guide...
Page 173: Configure Rapid Spanning Tree Protocol
> screen. RST P Adva nc e d Applic a tio n Spa nning T re e Pro to c o l Advanced Application > Spanning Tree Protocol > RSTP (Standalone Mode) Fig ure 131 XS3800-28 User’s Guide...
Page 174 2 * (Forward Delay – 1) >= Max Age >= 2 * (Hello Time + 1) SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XS3800-28 User’s Guide...
Page 175: Configure Multiple Spanning Tree Protocol
13.6 C o nfig ure Multiple Spa nning T re e Pro to c o l To configure MSTP, click in the > screen. MST P Adva nc e d Applic a tio n Spa nning T re e Pro to c o l XS3800-28 User’s Guide...
Page 176 Chapter 13 Spanning Tree Protocol Advanced Application > Spanning Tree Protocol > MSTP (Standalone Mode) Fig ure 133 XS3800-28 User’s Guide...
Page 177 Spa nning T re e Pro to c o l C o nfig ura tio n Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. The allowed range is 1 to 10 seconds. XS3800-28 User’s Guide...
Page 178 Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this check box to add this port to the MST instance. XS3800-28 User’s Guide...
Page 179: Multiple Spanning Tree Protocol Port Configuration
> > > in the navigation panel to display Adva nc e d Applic a tio n Spa nning T re e Pro to c o l MST P Po rt the status screen as shown next. XS3800-28 User’s Guide...
Page 180 DESC RIPT IO N MSTP Click to edit MSTP settings on the Switch. MST P SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XS3800-28 User’s Guide...
Page 181: Multiple Spanning Tree Protocol Status
Adva nc e d Applic a tio n Spa nning T re e Pro to c o l screen as shown next. Note: This screen is only available after you activate MSTP on the Switch. XS3800-28 User’s Guide...
Page 182 Chapter 13 Spanning Tree Protocol Advanced Application > Spanning Tree Protocol > Status: MSTP (Standalone Mode) Fig ure 137 XS3800-28 User’s Guide...
Page 183 This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. Configuration This field displays the configuration name for this MST region. Name Revision Number This field displays the revision number for this MST region. XS3800-28 User’s Guide...
Page 184 Otherwise, it displays the identifier of the designated bridge for the LAN segment to which this port is connected. Designated Port ID This field displays the priority and number of the bridge port (on the designated bridge), through which the designated bridge transmits the stored configuration messages. XS3800-28 User’s Guide...
Page 185: Configure Multiple Rapid Spanning Tree Protocol
> screen. MRST P Adva nc e d Applic a tio n Spa nning T re e Pro to c o l Advanced Application > Spanning Tree Protocol > MRSTP (Standalone Mode) Fig ure 139 XS3800-28 User’s Guide...
Page 186 LAN. If it is a root port, a new root port is selected from among the Switch ports attached to the network. The allowed range is 6 to 40 seconds. XS3800-28 User’s Guide...
Page 187: Multiple Rapid Spanning Tree Protocol Status
Adva nc e d Applic a tio n Spa nning T re e Pro to c o l screen as shown next. See Section 13.9 on page 187 for more information on MRSTP. XS3800-28 User’s Guide...
Page 188 He llo T im e Ma x Ag e Fo rwa rding De la y Max Age (second) This is the maximum time (in seconds) the Switch can wait without receiving a configuration message before attempting to reconfigure. XS3800-28 User’s Guide...
Page 189 This field displays the state of the port on which root guard is enabled. • – inconsistent – the Switch receives superior BPDUs on the port and blocks the port. Ro o t • – the Switch unblocks and allows the port to forward frames again. Fo rwa rding XS3800-28 User’s Guide...
Page 190: Technical Reference
Devices that belong to the same MST region are configured to have the same MSTP configuration identification settings. These include the following parameters: • Name of the MST region • Revision level as the unique number for the MST region XS3800-28 User’s Guide...
Page 191: Mst Instance
CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. XS3800-28 User’s Guide...
Page 192 Chapter 13 Spanning Tree Protocol MSTP and Legacy RSTP Network Example Fig ure 146 XS3800-28 User’s Guide...
Page 193: Bandwidth Control
14.2 Ba ndwidth C o ntro l Se tup Click > in the navigation panel to bring up the screen as Adva nc e d Applic a tio n Ba ndwidth C o ntro l shown next. XS3800-28 User’s Guide...
Page 194 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last four ports of your Switch) cannot be configured. They are reserved for stacking only. XS3800-28 User’s Guide...
Page 195 Sa ve changes to the non-volatile memory when you are done configuring. Cancel Click to reset the fields. C a nc e l XS3800-28 User’s Guide...
Page 196: Broadcast Storm Control
15.2 Bro a dc a st Sto rm C o ntro l Se tup Click > in the navigation panel to display the screen as Adva nc e d Applic a tio n Bro a dc a st Sto rm C o ntro l shown next. XS3800-28 User’s Guide...
Page 197 Select this check box to enable traffic storm control on the Switch. Clear this check box to disable this feature. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XS3800-28 User’s Guide...
Page 198 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to reset the fields. C a nc e l XS3800-28 User’s Guide...
Page 199: Mirroring
VLAN tagging and copied to the connected ports. Traffic are then carried over the specified remote port mirroring (RMirror) VLAN and sent to the destination device’s monitor port through the connected ports that connect to other switches. XS3800-28 User’s Guide...
Page 200: Local Port Mirroring
Use this Adva nc e d Applic a tio n Mirro ring Mirro ring screen to select a monitor port and specify the traffic flow to be copied to the monitor port. XS3800-28 User’s Guide...
Page 201 Chapter 16 Mirroring Advanced Application > Mirroring (Standalone Mode) Fig ure 151 XS3800-28 User’s Guide...
Page 202 Sa ve to the non-volatile memory when you are done configuring. Cancel Click to reset the fields. C a nc e l XS3800-28 User’s Guide...
Page 203: Remote Port Mirroring
Use this screen to configure the reflector port and specify the traffic flow to be copied to the monitor port when the Switch is the source device in remote port mirroring. Click the link in the screen. The following screen opens. So urc e RMirro r XS3800-28 User’s Guide...
Page 204 Chapter 16 Mirroring Advanced Application > Mirroring > RMirror > Source (Standalone Mode) Fig ure 154 Advanced Application > Mirroring > RMirror > Source (Stacking Mode) Fig ure 155 XS3800-28 User’s Guide...
Page 205: Destination
Use this screen to specify the RMirror VLAN and configure the monitor port when the Switch is the destination device in remote port mirroring. Click the link in the screen. The following screen opens. De stina tio n RMirro r XS3800-28 User’s Guide...
Page 206 Delete Check the rules that you want to remove in the column and then click the De le te De le te button. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 207: Connected Port
RMirror VLAN. Click the link in the screen. The following screen opens. C o nne c te d Po rt RMirro r Advanced Application > Mirroring > RMirror > Connected Port (Standalone Mode) Fig ure 158 XS3800-28 User’s Guide...
Page 208 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 209 DESC RIPT IO N VLAN This field displays the ID number of port mirroring VLAN over which the mirrored traffic is forwarded. Connected Port This field displays the number of ports that helps forward mirrored traffic to other connected switches. XS3800-28 User’s Guide...
Page 210: Link Aggregation
When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that is, if an XS3800-28 User’s Guide...
Page 211: Link Aggregation Status
L ink Ag g re g a tio n Sta tus screen displays by default. See Section 17.1 on page 210 for more information. Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. XS3800-28 User’s Guide...
Page 212 This field displays how these ports were added to the trunk group. It displays: • – if the ports are configured as static members of a trunk group. Sta tic • – if the ports are configured to join a trunk group via LACP. L AC P XS3800-28 User’s Guide...
Page 213: Link Aggregation Setting
L ink Ag g re g a tio n Se tting next. See Section 17.1 on page 210 for more information on link aggregation. Advanced Application > Link Aggregation > Link Aggregation Setting (Standalone Mode) Fig ure 161 XS3800-28 User’s Guide...
Page 214 This is the only screen you need to configure to enable static link aggregation. Aggregation Setting Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this option to activate a trunk group. XS3800-28 User’s Guide...
Page 215: Link Aggregation Control Protocol
L ink Ag g re g a tio n L ink Ag g re g a tio n Se tting L AC P shown next. See Dynamic Link Aggregation on page 210 for more information on dynamic link aggregation. XS3800-28 User’s Guide...
Page 216 Chapter 17 Link Aggregation Advanced Application > Link Aggregation > Link Aggregation Setting > LACP (Standalone Fig ure 163 Mode) XS3800-28 User’s Guide...
Page 217 The field identifies the link aggregation group, that is, one logical link containing multiple ports. LACP Active Select this option to enable LACP for a trunk. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XS3800-28 User’s Guide...
Page 218: Technical Reference
, select the traffic distribution algorithm used by this group and select the ports that should belong to this group as shown in the figure below. Click when you are done. Apply XS3800-28 User’s Guide...
Page 219 Chapter 17 Link Aggregation Trunking Example – Configuration Screen Fig ure 166 EXAMPLE Your trunk group 1 ( ) configuration is now complete. XS3800-28 User’s Guide...
Page 220: Port Authentication
AND MAC authentication. At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. XS3800-28 User’s Guide...
Page 221: What You Need To Know
Switch does not prompt the client for login credentials. The login credentials are based on the source MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. XS3800-28 User’s Guide...
Page 222: Port Authentication Configuration
Fig ure 169 18.3 Ac tiva te IEEE 802.1x Se c urity Use this screen to activate IEEE 802.1x security. In the screen click to display Po rt Authe ntic a tio n 802.1x the configuration screen as shown. XS3800-28 User’s Guide...
Page 223 Chapter 18 Port Authentication Advanced Application > Port Authentication > 802.1x (Standalone Mode) Fig ure 170 XS3800-28 User’s Guide...
Page 224 Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this to permit 802.1x authentication on this port. You must first allow 802.1x authentication on the Switch before configuring it on each port. XS3800-28 User’s Guide...
Page 225: Activate Mac Authentication
18.4 Ac tiva te MAC Authe ntic a tio n Use this screen to activate MAC authentication. In the screen click Po rt Authe ntic a tio n to display the configuration screen as shown. Authe ntic a tio n XS3800-28 User’s Guide...
Page 226 Chapter 18 Port Authentication Advanced Application > Port Authentication > MAC Authentication (Standalone Mode) Fig ure 172 XS3800-28 User’s Guide...
Page 227 MAC address as the password. Password Type the password the Switch sends along with the MAC address of a client for authentication with the RADIUS server. You can enter up to 32 printable ASCII characters. XS3800-28 User’s Guide...
Page 228: Guest Vlan
That is, unauthenticated users can have access to limited network resources in the same guest VLAN, such as the Internet. The rights granted to the Guest VLAN depends on how the network administrator configures switches or routers with the guest network feature. XS3800-28 User’s Guide...
Page 229 Use this screen to enable and assign a guest VLAN to a port. In the screen click Po rt Authe ntic a tio n to display the configuration screen as shown. G ue st Vla n Advanced Application > Port Authentication > Guest VLAN (Standalone Mode) Fig ure 175 XS3800-28 User’s Guide...
Page 230 Multi- Se c ure Multi-Secure Num If you set , specify the maximum number of users (between 1 and Ho st- m o de Multi- Se c ure 24) that the Switch will authenticate on this port. XS3800-28 User’s Guide...
Page 231: Compound Authentication
Switch along with a password configured specifically for MAC authentication on the Switch. In the screen click to display the configuration Po rt Authe ntic a tio n C o m po und Authe ntic a tio n Mo de screen as shown. XS3800-28 User’s Guide...
Page 232 Chapter 18 Port Authentication Advanced Application > Port Authentication > Compound Authentication Mode Fig ure 177 (Standalone Mode) XS3800-28 User’s Guide...
Page 233 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 234: Technical Reference
The following types of RADIUS messages are exchanged between the switch and the RADIUS server for user authentication: • Access-Request Sent by a switch requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. XS3800-28 User’s Guide...
Page 235: Eap (Extensible Authentication Protocol) Authentication
In addition, it is possible to impersonate an authentication server as MD5 authentication method does not perform mutual authentication. Finally, MD5 authentication method does not support data encryption with dynamic session key. You must configure WEP encryption keys for data encryption. • EAP-TLS (Transport Layer Security) XS3800-28 User’s Guide...
Page 236: Eapol (Eap Over Lan)
• EAPOL-Logoff This message will be sent when the wired client wants to be disconnected from the network. • EAPOL-Encapsulated-ASF-Alert This message is sent If the authentication process is not completed yet, and alerts needs to be forwarded. XS3800-28 User’s Guide...
Page 237: Port Security
19.2 Po rt Se c urity Se tup Click > in the navigation panel to display the screen as shown. Adva nc e d Applic a tio n Po rt Se c urity Advanced Application > Port Security (Standalone Mode) Fig ure 179 XS3800-28 User’s Guide...
Page 238 MAC addresses is in the MAC address table on this port. Packets with no matching MAC addresses are dropped. Clear this check box to disable the port security feature. The Switch forwards all packets on this port. XS3800-28 User’s Guide...
Page 239: Vlan Mac Address Limit
Adva nc e d Applic a tio n Po rt Se c urity Advanced Application > Port Security > VLAN MAC Address Limit (Standalone Mode) Fig ure 181 Advanced Application > Port Security > VLAN MAC Address Limit (Stacking Mode) Fig ure 182 XS3800-28 User’s Guide...
Page 240 Check the rules that you want to remove in the column and then click the De le te De le te button. Cancel Click to clear the selected check boxes in the column. C a nc e l De le te XS3800-28 User’s Guide...
Page 241: Time Range
20.2 C o nfig uring T im e Ra ng e Click > in the navigation panel to display the screen as shown. Adva nc e d Applic a tio n T im e Ra ng e Advanced Application > Time Range Fig ure 183 XS3800-28 User’s Guide...
Page 242 Delete Check the rules that you want to remove and then click the button. De le te Cancel Click to clear the selected check boxes. C a nc e l XS3800-28 User’s Guide...
Page 243: Classifier
Configure policy rules to define actions to be performed on a classified traffic flow (refer to Chapter 22 on page 252 to configure policy rules). You can also configure policy routing to forward a classified traffic flow to a different gateway for cost savings and load sharing. XS3800-28 User’s Guide...
Page 244: Classifier Status
(or policy) to act upon the traffic that matches the rules. In the screen click to display the configuration screen as shown. C la ssifie r Sta tus C la ssifie r C o nfig ura tio n XS3800-28 User’s Guide...
Page 245 Chapter 21 Classifier Advanced Application > Classifier > Classifier Configuration Fig ure 185 XS3800-28 User’s Guide...
Page 246 For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. If you leave the field blank, the Ma sk Switch automatically sets the mask to ff:ff:ff:ff:ff:ff. XS3800-28 User’s Guide...
Page 247 T C P IP Pro to c o l Number socket numbers. Select to apply the rule to all TCP/UDP protocol port numbers or select the second option and enter a TCP/UDP protocol port number. XS3800-28 User’s Guide...
Page 248: Viewing And Editing Classifier Configuration Summary
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 249: Classifier Global Setting Configuration
C o nfig ura tio n C la ssifie r G lo b a l Se tting Advanced Application > Classifier > Classifier Configuration > Classifier Global Setting Fig ure 187 XS3800-28 User’s Guide...
Page 250: Classifier Example
C a nc e l 21.5 C la ssifie r Exa m ple The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. XS3800-28 User’s Guide...
Page 251 Classifier: Example Fig ure 188 EXAMPLE After you have configured a classifier, you can configure a policy (in the screen) to define Po lic y actions on the classified traffic flow. XS3800-28 User’s Guide...
Page 252: Policy Rule
The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. XS3800-28 User’s Guide...
Page 253: Configuring Policy Rules
The following table describes the labels in this screen. Table 94 Advanced Application > Policy Rule L ABEL DESC RIPT IO N Active Select this option to enable the policy. Name Enter a descriptive name for identification purposes. XS3800-28 User’s Guide...
Page 254 Se nd the pa c ke t to the e g re ss po rt Metering Select to activate bandwidth limitation on the traffic flows then set the actions to be Ena b le taken on out-of-profile packets. XS3800-28 User’s Guide...
Page 255: Policy Example
The figure below shows an example screen where you configure a policy to limit bandwidth and Po lic y discard out-of-profile traffic on a traffic flow classified using the classifier (refer to Section 21.5 Exa m ple on page 250). XS3800-28 User’s Guide...
Page 256 Chapter 22 Policy Rule Policy Example Fig ure 190 EXAMPLE XS3800-28 User’s Guide...
Page 257: Queuing Method
This queue then moves to the back of the list. The next queue is given an equal amount of bandwidth, and then moves to the end of the list; and so on, depending on the number of queues being used. This works in a looping fashion until a queue is empty. XS3800-28 User’s Guide...
Page 258: Configuring Queuing
Use this screen to set priorities for the queues of the Switch. This distributes bandwidth across the different traffic queues. Click > in the navigation panel. Adva nc e d Applic a tio n Q ue uing Me tho d Advanced Application > Queuing Method (Standalone Mode) Fig ure 191 XS3800-28 User’s Guide...
Page 259 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XS3800-28 User’s Guide...
Page 260 Sa ve the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 261: Vlan Stacking
VLAN group. The service provider can separate these two VLANs within its network by adding tag 37 to distinguish customer and tag 48 to distinguish customer at edge device and then stripping those tags at edge device as the data frames leave the network. XS3800-28 User’s Guide...
Page 262: Vlan Stacking Port Roles
T unne l Po rt 24.3 VL AN T a g Fo rm a t A VLAN tag (service provider VLAN stacking or customer IEEE 802.1Q) consists of the following three fields. Table 96 VLAN Tag Format Type Priority XS3800-28 User’s Guide...
Page 263: Frame Format
Frame data VLAN ID Frame Check Sequence 24.4 C o nfig uring VL AN Sta c king Click > to display the screen as shown. Adva nc e d Applic a tio n VL AN Sta c king XS3800-28 User’s Guide...
Page 264 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last four ports of your Switch) cannot be configured. They are reserved for stacking only. XS3800-28 User’s Guide...
Page 265: Port-Based Q-In-Q
VLAN tag to them, even if they have different customer VLAN IDs. Click in the > screen to display the screen as Po rt- b a se d Q inQ Adva nc e d Applic a tio n VL AN Sta c king shown. XS3800-28 User’s Guide...
Page 266 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last four ports of your Switch) cannot be configured. They are reserved for stacking only. XS3800-28 User’s Guide...
Page 267: Selective Q-In-Q
Se le c tive Q inQ Adva nc e d Applic a tio n VL AN Sta c king shown. Advanced Application > VLAN Stacking > Selective QinQ (Standalone Mode) Fig ure 198 XS3800-28 User’s Guide...
Page 268 Check the rules that you want to remove in the column and then click the button. De le te De le te Cancel Click to clear the check boxes. C a nc e l De le te XS3800-28 User’s Guide...
Page 269: Multicast
MLD messages to other upstream ports. • Use the screens (Section 25.5 on page 288) to create multicast VLANs and select the receiver ports and a source port for each multicast VLAN. XS3800-28 User’s Guide...
Page 270: What You Need To Know
MLD snooping-proxy is a Zyxel-proprietary feature. IPv6 MLD proxy allows only one upstream interface on a switch, while MLD snooping-proxy supports more than one upstream port on a switch. The upstream port in MLD snooping-proxy can report group changes to a connected multicast router and forward XS3800-28 User’s Guide...
Page 271 MVR O ve rvie w Multicast VLAN Registration (MVR) is designed for applications (such as Media-on-Demand (MoD)) that use multicast traffic across an Ethernet ring-based service provider network. XS3800-28 User’s Guide...
Page 272 Switch, an entry is created in the forwarding table on the Switch. This maps the subscriber VLAN to the list of forwarding destinations for the specified multicast traffic. When the subscriber changes the channel or turns off the computer, an IGMP leave message is sent to XS3800-28 User’s Guide...
Page 273: Multicast Setup
Adva nc e d Applic a tio n Multic a st IPv4 Multic a st shows the IPv4 multicast group information. See Section 25.1 on page 269 for more information on multicasting. Advanced Application > Multicast > IPv4 Multicast Fig ure 203 XS3800-28 User’s Guide...
Page 274: Igmp Snooping
Multic a st IPv4 Multic a st the screen as shown. See Section 25.1 on page 269 for more information on multicasting. Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping (Standalone Mode) Fig ure 204 XS3800-28 User’s Guide...
Page 275 Querier Version IGMP snooping query works only when both host and Switch support the same IGMP version. Select to allow the Switch to send IGMPv2 queries only. Select to allow the Switch to send IGMPv3 queries only. XS3800-28 User’s Guide...
Page 276 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last four ports of your Switch) cannot be configured. They are reserved for stacking only. XS3800-28 User’s Guide...
Page 277 Switch from using the port as an IGMP query port. The Switch will not Edg e keep any record of an IGMP router being connected to this port. The Switch does not forward IGMP join or leave packets to this port. XS3800-28 User’s Guide...
Page 278: Igmp Snooping Vlan
Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 279: Igmp Filtering Profile
Sno o ping IG MP Filte ring Pro file Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping > IGMP Filtering Profile Fig ure 207 XS3800-28 User’s Guide...
Page 280: Ipv6 Multicast Status
The following table describes the fields in the above screen. Table 107 Advanced Application > Multicast > IPv6 Multicast L ABEL DESC RIPT IO N Index This is the index number of the entry. This field displays the multicast VLAN ID. XS3800-28 User’s Guide...
Page 281: Mld Snooping-Proxy
Adva nc e d Applic a tio n Multic a st IPv6 Multic a st ML D Sno o ping - pro xy screen to display the screen as shown. See Section 25.1 on page 269 for more information on multicasting. XS3800-28 User’s Guide...
Page 282 This value is used to calculate the amount of time an MLD snooping membership entry (learned only on the upstream port) can remain in the forwarding table. XS3800-28 User’s Guide...
Page 283: Mld Snooping-Proxy Vlan Port Role Setting
Adva nc e d Applic a tio n Multic a st IPv6 Multic a st ML D Sno o ping - > screen to display the screen as shown. See Section 25.1 on page 269 for more information pro xy VL AN on multicasting. XS3800-28 User’s Guide...
Page 284 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN > Port Role Fig ure 211 Setting (Standalone Mode) Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN > Port Role Fig ure 212 Setting (Stacking Mode) XS3800-28 User’s Guide...
Page 285: Mld Snooping-Proxy Filtering
Filte ring Adva nc e d > > > screen to display the screen as shown. Applic a tio n Multic a st IPv6 Multic a st ML D Sno o ping - pro xy XS3800-28 User’s Guide...
Page 286 Chapter 25 Multicast Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering Fig ure 213 (Standalone Mode) Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering Fig ure 214 (Stacking Mode) XS3800-28 User’s Guide...
Page 287: Mld Snooping-Proxy Filtering Profile
IPv6 Multic a st ML D Sno o ping - pro xy screen to display the screen as shown. Filte ring Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering > Fig ure 215 Filtering Profile XS3800-28 User’s Guide...
Page 288: General Mvr Configuration
Note: You can create up to five multicast VLANs and up to 256 multicast rules on the Switch. Note: Your Switch automatically creates a static VLAN (with the same VID) when you create a multicast VLAN in this screen. XS3800-28 User’s Guide...
Page 289 Chapter 25 Multicast Advanced Application > Multicast > MVR (Standalone Mode) Fig ure 216 XS3800-28 User’s Guide...
Page 290 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last four ports of your Switch) cannot be configured. They are reserved for stacking only. XS3800-28 User’s Guide...
Page 291: Mvr Group Configuration
Use this screen to configure MVR IP multicast group addresses. Click the link in the G ro up C o nfig ura tio n screen. Note: A port can belong to more than one multicast VLAN. However, IP multicast group addresses in different multicast VLANs cannot overlap. XS3800-28 User’s Guide...
Page 292 De le te selected entries from the table. If you delete a multicast VLAN, all multicast groups in this VLAN will also be removed. Cancel Select to clear the check boxes in the table. C a nc e l XS3800-28 User’s Guide...
Page 293: Mvr Configuration Example
The following figure shows an example where two IPv4 G ro up C o nfig ura tio n multicast groups ( ) are configured for the multicast VLAN 200. Ne ws Mo vie XS3800-28 User’s Guide...
Page 294 Chapter 25 Multicast MVR Group Configuration Example-1 Fig ure 221 EXAMPLE MVR Group Configuration Example-2 Fig ure 222 EXAMPLE XS3800-28 User’s Guide...
Page 295: Aaa
Accounting is the process of recording what a user is doing. The Switch can use an external server to track when users log in, log out, execute commands and so on. Accounting can also record system XS3800-28 User’s Guide...
Page 296: Aaa Screens
Fig ure 224 26.3 RADIUS Se rve r Se tup Use this screen to configure your RADIUS server settings. Click the link in the RADIUS Se rve r Se tup screen to view the screen as shown. XS3800-28 User’s Guide...
Page 297 Enter the IP address of an external RADIUS server in dotted decimal notation. UDP Port The default port of a RADIUS server for authentication is . You need not change this value 1812 unless your network administrator instructs you to do so. XS3800-28 User’s Guide...
Page 298: Tacacs+ Server Setup
26.4 T AC AC S+ Se rve r Se tup Use this screen to configure your TACACS+ server settings. Click on the link in the T AC AC S+ Se rve r Se tup screen to view the screen as shown. XS3800-28 User’s Guide...
Page 299 Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. This key is not sent over the network. This key must be the same on the external TACACS+ server and the Switch. XS3800-28 User’s Guide...
Page 300: Aaa Setup
Use this screen to configure authentication, authorization and accounting settings on the Switch. Click on the link in the screen to view the screen as shown. AAA Se tup Advanced Application > AAA > AAA Setup Fig ure 227 XS3800-28 User’s Guide...
Page 301 This is the amount of time in minutes before the Switch sends an update to the accounting server. This is only valid if you select the option for the entries. sta rt- sto p Exe c Do t1x XS3800-28 User’s Guide...
Page 302: Technical Reference
The Switch supports VSAs that allow you to perform the following actions based on user authentication: • Limit bandwidth on incoming or outgoing traffic for the port the user connects to. • Assign account privilege levels (See the CLI Reference Guide for more information on account privilege levels) for the authenticated user. XS3800-28 User’s Guide...
Page 303 VLAN settings are fixed and untagged. This will also set the port’s VID. The following table describes the values you need to configure. Note that these attributes only work when you enable authorization (see Section 26.5 on page 300). XS3800-28 User’s Guide...
Page 304: Supported Radius Attributes
– The format of the User-Name attribute is , where # is the privilege level (1 – 14). $e na b User-Password NAS-Identifier NAS-IP-Address 26.6.3.2 Attrib ute s Use d to L o g in Use rs User-Name User-Password NAS-Identifier NAS-IP-Address XS3800-28 User’s Guide...
Page 305: Attributes Used For Accounting
INT ERIM- UPDAT E ST O P User-Name    NAS-Identifier    NAS-IP-Address    Service-Type    Acct-Status-Type    Acct-Delay-Time    Acct-Session-Id    Acct-Authentic    XS3800-28 User’s Guide...
Page 306  NAS-Identifier    NAS-Port-Type    Acct-Status-Type    Acct-Delay-Time    Acct-Session-Id    Acct-Authentic    Acct-Input-Octets   Acct-Output-Octets   Acct-Session-Time   Acct-Input-Packets   XS3800-28 User’s Guide...
Page 307 Chapter 26 AAA Table 123 RADIUS Attributes – Exec Events via Console (continued) AT T RIBUT E ST ART INT ERIM- UPDAT E ST O P Acct-Output-Packets   Acct-Terminate-Cause    Acct-Input-Gigawords Acct-Output-Gigawords   XS3800-28 User’s Guide...
Page 308: Ip Source Guard
27.1.2 Wha t Yo u Ne e d to Kno w The Switch builds the binding table by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings). IP source guard consists of the following features: XS3800-28 User’s Guide...
Page 309: Ip Source Guard
Click the link to open a screen where you can enable a DHCPv6 snooping policy on a Setup specific VLAN interface. IPv6 DHCP Trust Setup Click the link to open a screen where you can specify which ports are trusted for DHCPv6 snooping. XS3800-28 User’s Guide...
Page 310: Ipv4 Source Guard Setup
To open this screen, click > > > Adva nc e d Applic a tio n IP So urc e G ua rd IPv4 So urc e G ua rd Se tup Sta tic Binding XS3800-28 User’s Guide...
Page 311 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > Static Binding Fig ure 230 (Standalone Mode) Advanced Application > IP Source Guard > IPv4 Source Guard Setup > Static Binding Fig ure 231 (Stacking Mode) XS3800-28 User’s Guide...
Page 312 Delete Select the entries that you want to remove, then click the button to remove the De le te selected entries from the table. Cancel Click this to clear the check boxes above. XS3800-28 User’s Guide...
Page 313: Dhcp Snooping
To open this screen, click > > > Adva nc e d Applic a tio n IP So urc e G ua rd IPv4 So urc e G ua rd Se tup DHC P Sno o ping XS3800-28 User’s Guide...
Page 314 This field displays how long (in seconds) the Switch waits to update the DHCP snooping database after the current bindings change. This section displays information about the current update and the next update of the DHCP snooping database. XS3800-28 User’s Guide...
Page 315 This field displays the number of bindings the Switch ignored because the port number was a trusted interface or does not exist anymore. Parse failures This field displays the number of bindings the Switch ignored because the Switch was unable to understand the binding in the DHCP binding database. XS3800-28 User’s Guide...
Page 316: Dhcp Snooping Configure
IPv4 So urc e G ua rd Se tup DHC P > Sno o ping C o nfig ure Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Fig ure 233 Configure XS3800-28 User’s Guide...
Page 317: Dhcp Snooping Port Configure
Adva nc e d Applic a tio n IP So urc e G ua rd IPv4 So urc e G ua rd Se tup DHC P > > Sno o ping C o nfig ure Po rt XS3800-28 User’s Guide...
Page 318 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XS3800-28 User’s Guide...
Page 319: Dhcp Snooping Vlan Configure
IPv4 So urc e G ua rd Se tup DHC P > > Sno o ping C o nfig ure VL AN Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Fig ure 236 Configure > VLAN XS3800-28 User’s Guide...
Page 320: Dhcp Snooping Vlan Port Configure
> > > Sno o ping C o nfig ure VL AN Po rt Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Fig ure 237 Configure > VLAN > Port XS3800-28 User’s Guide...
Page 321: Technical Reference
28.4.1 DHC P Sno o ping O ve rvie w Use DHCP snooping to filter unauthorized DHCP packets on the network and to build the binding table dynamically. This can prevent clients from getting IP addresses from unauthorized DHCP servers. XS3800-28 User’s Guide...
Page 322 Each binding consists of 72 bytes, a space, and another checksum that is used to validate the binding when it is read. If the calculated checksum is not equal to the checksum in the file, that binding and all others after it are ignored. XS3800-28 User’s Guide...
Page 323 Enable DHCP snooping on the Switch. Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. Configure trusted and untrusted ports, and specify the maximum number of DHCP packets that each port can receive per second. Configure static bindings. XS3800-28 User’s Guide...
Page 324: Arp Inspection
De le te Change Pages Click to show the previous or next screen if all status information Pre vio us Pa g e Ne xt Pa g e cannot be seen in one screen. XS3800-28 User’s Guide...
Page 325: Arp Inspection Vlan Status
> Adva nc e d Applic a tio n IP So urc e G ua rd IPv4 > > So urc e G ua rd Se tup ARP Inspe c tio n L o g Sta tus XS3800-28 User’s Guide...
Page 326: Arp Inspection Configure
Switch stores records of discarded ARP packets and global settings for the ARP inspection log. To open this screen, click > > > > Adva nc e d Applic a tio n IP So urc e G ua rd IPv4 So urc e G ua rd Se tup ARP Inspe c tio n XS3800-28 User’s Guide...
Page 327 Type how often (1 – 86400 seconds) the Switch sends a batch of syslog messages to the syslog server. Enter 0 if you want the Switch to send syslog messages immediately. See Syslo g for an example of the relationship between ra te Syslo g ra te L o g inte rva l XS3800-28 User’s Guide...
Page 328: Arp Inspection Port Configure
Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Fig ure 243 Configure > Port (Standalone Mode) Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Fig ure 244 Configure > Port (Stacking Mode) XS3800-28 User’s Guide...
Page 329: Arp Inspection Vlan Configure
Adva nc e d Applic a tio n > > > > > IP So urc e G ua rd IPv4 So urc e G ua rd Se tup ARP Inspe c tio n C o nfig ure VL AN XS3800-28 User’s Guide...
Page 330: Ipv6 Source Guard Overview
IPv6 traffic. The binding table can be manually created or be learned through Dynamic Host Configuration Protocol version 6 snooping (DHCPv6 snooping). IPv6 source guard can deny IPv6 traffic from an unknown source. The IPv6 source guard binding table includes: XS3800-28 User’s Guide...
Page 331: Ipv6 Source Binding Status
This field displays the source IP address in the binding. If the entry is blank, this field will not be checked in the binding. MAC Address This field displays the source MAC address in the binding. If the entry is blank, this field will not be checked in the binding. XS3800-28 User’s Guide...
Page 332: Ipv6 Static Binding Setup
Adva nc e d Applic a tio n IP So urc e G ua rd IPv6 Sta tic Binding Se tup Advanced Application > IP Source Guard > IPv6 Static Binding Setup (Standalone Mode) Fig ure 247 XS3800-28 User’s Guide...
Page 333 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Select an entry check box and click to remove the specified entry. De le te Cancel Click this to clear the check boxes above. De le te XS3800-28 User’s Guide...
Page 334: Ipv6 Source Guard Policy Setup
IPv6 source guard policy. L ink L o c a l Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XS3800-28 User’s Guide...
Page 335: Ipv6 Source Guard Port Setup
Adva nc e d Applic a tio n IP So urc e G ua rd IPv6 So urc e G ua rd Po rt Se tup Advanced Application > IP Source Guard > IPv6 Source Guard Port Setup (Standalone Fig ure 250 Mode) XS3800-28 User’s Guide...
Page 336: Ipv6 Snooping Policy Setup
IP So urc e G ua rd IPv6 Sno o ping Po lic y Se tup Note: If you do not select , then the Switch cannot perform DHCPv6 Pro to c o l Pre fix G le a n snooping. XS3800-28 User’s Guide...
Page 337: Ipv6 Snooping Vlan Setup
Use this screen to enable a DHCPv6 snooping policy on a specific VLAN interface. To open this screen, click > > Adva nc e d Applic a tio n IP So urc e G ua rd IPv6 Sno o ping VL AN Se tup XS3800-28 User’s Guide...
Page 338: Ipv6 Dhcp Trust Setup
Note: DHCPv6 solicit packets are sent from a DHCPv6 client to a DHCPv6 server. Reply packets from a DHCPv6 server connected to an untrusted port are discarded. Use port * to have all ports be Untruste d T ruste d XS3800-28 User’s Guide...
Page 339 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last four ports of your Switch) cannot be configured. They are reserved for stacking only. XS3800-28 User’s Guide...
Page 340: Technical Reference
ARP request for computer . Then, computer does the following things: • It pretends to be computer and responds to computer • It pretends to be computer and sends a message to computer XS3800-28 User’s Guide...
Page 341 ARP inspection so that the Switch has enough time to build the binding table. Enable ARP inspection on each VLAN. Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. XS3800-28 User’s Guide...
Page 342: Loop Guard
It will then re-broadcast those messages again. The following figure shows port on switch connected to switch . Switch has two ports, mistakenly connected to each other. It forms a loop. When broadcast or multicast packets leave port XS3800-28 User’s Guide...
Page 343 Loop Guard – Network Loop Fig ure 260 Note: After resolving the loop problem on your network you can re-activate the disabled port via the Web Configurator (see Section 8.7 on page 104) or via commands (See the CLI Reference Guide). XS3800-28 User’s Guide...
Page 344: Loop Guard Setup
Note: The loop guard feature cannot be enabled on the ports that have Spanning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Advanced Application > Loop Guard (Standalone Mode) Fig ure 261 Advanced Application > Loop Guard (Stacking Mode) Fig ure 262 XS3800-28 User’s Guide...
Page 345 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 346: Vlan Mapping
VLAN mapping rule. The Switch translates the VLAN ID from 12 into 123 before forwarding the packets. Any packets carrying a VLAN tag other than 12 (such as 10) and received on port 3 will be dropped. VLAN Mapping Example Fig ure 263 XS3800-28 User’s Guide...
Page 347: What You Can Do
Adva nc e d Applic a tio n VL AN Ma pping shown. Advanced Application > VLAN Mapping (Standalone Mode) Fig ure 264 Advanced Application > VLAN Mapping (Stacking Mode) Fig ure 265 XS3800-28 User’s Guide...
Page 348: Vlan Mapping Configure
Use VL AN Ma pping C o nfig ure VL AN Ma pping this screen to enable and edit the VLAN mapping rules. Advanced Application > VLAN Mapping > VLAN Mapping Configuration (Standalone Fig ure 266 Mode) XS3800-28 User’s Guide...
Page 349 Check the rules that you want to remove in the column and then click the De le te De le te button. Cancel Click to clear the check boxes. C a nc e l De le te XS3800-28 User’s Guide...
Page 350: Layer 2 Protocol Tunneling
2 protocol packets with a specific MAC address before sending them across the service provider’s network to other edge switches. Layer 2 Protocol Tunneling Network Scenario Fig ure 268 In the following example, if you enable L2PT for STP, you can have switches in the same XS3800-28 User’s Guide...
Page 351: Configuring Layer 2 Protocol Tunneling
32.2 C o nfig uring L a ye r 2 Pro to c o l T unne ling Click > in the navigation panel to display the screen Adva nc e d Applic a tio n L a ye r 2 Pro to c o l T unne ling as shown. XS3800-28 User’s Guide...
Page 352 Chapter 32 Layer 2 Protocol Tunneling Advanced Application > Layer 2 Protocol Tunneling (Standalone Mode) Fig ure 270 Advanced Application > Layer 2 Protocol Tunneling (Stacking Mode) Fig ure 271 XS3800-28 User’s Guide...
Page 353 2 protocol packets received on a tunnel port by changing the destination MAC address to the original one, and then forward them to an access port. If the services is not enabled on an access port, the protocol packets are dropped. XS3800-28 User’s Guide...
Page 354 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 355: Sflow
Application Fig ure 272 33.2 sFlo w Po rt C o nfig ura tio n Click > in the navigation panel to display the screen as shown. Adva nc e d Applic a tio n sFlo w XS3800-28 User’s Guide...
Page 356 Cancel Click to begin configuring this screen afresh. C a nc e l SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XS3800-28 User’s Guide...
Page 357: Sflow Collector Configuration
You may want to configure more than one collector if the traffic load to be monitored is more than one collector can manage. Advanced Application > sFlow > Collector Fig ure 275 XS3800-28 User’s Guide...
Page 358 Delete Check the rules that you want to remove in the column and then click the button. De le te De le te Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 359: Pppoe
34.1.2.1 PPPo E Inte rm e dia te Ag e nt T a g Fo rm a t If the PPPoE Intermediate Agent is enabled, the Switch adds a vendor-specific tag to PADI (PPPoE Active Discovery Initialization) and PADR (PPPoE Active Discovery Request) packets from PPPoE clients. XS3800-28 User’s Guide...
Page 360 Table 154 PPPoE IA Circuit ID Sub-option Format: Using Identifier String and Variables SubOpt Length Value 0x01 Identifier delimiter Slot ID delimiter Port No delimiter VLAN ID String (1 byte) (1 byte) (1 byte) (1 byte) (1 byte) (2 byte) (1 byte) (53 byte) bytes) XS3800-28 User’s Guide...
Page 361: Pppoe
Adva nc e d Applic a tio n PPPo E C lic k to go to the screen. He re Inte rm e dia te Ag e nt Advanced Application > PPPoE > Intermediate Agent Fig ure 276 XS3800-28 User’s Guide...
Page 362: Pppoe Intermediate Agent
Select a delimiter to separate the identifier-string, slot ID, port number and/or VLAN ID from each other. You can use a pound key ( ), semi-colon ( ), period ( ), comma ( ), forward slash ( ) or space. XS3800-28 User’s Guide...
Page 363: Pppoe Ia Per-Port
Switch and there are no trusted ports. Click the link in the screen to display the screen as shown. Po rt Inte rm e dia te Ag e nt Advanced Application > PPPoE > Intermediate Agent > Port (Standalone Mode) Fig ure 278 XS3800-28 User’s Guide...
Page 364 The Circuit ID you configure for a specific VLAN on a port (in the > Adva nc e d Applic a tio n PPPo E > > > screen) has the highest priority. Inte rm e dia te Ag e nt Po rt VL AN XS3800-28 User’s Guide...
Page 365: Pppoe Ia Per-Port Per-Vlan
In stacking mode, the first field is the slot ID and the second field is the port number. Show VLAN Use this section to specify the VLANs you want to configure in the section below. XS3800-28 User’s Guide...
Page 366: Pppoe Ia For Vlan
Switch appends the Circuit ID and/or Remote ID to PPPoE discovery packets from a specific VLAN. Click the link in the screen to display the screen as shown. VL AN Inte rm e dia te Ag e nt Advanced Application > PPPoE > Intermediate Agent > VLAN Fig ure 282 XS3800-28 User’s Guide...
Page 367 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 368: Error Disable
• Use the screen (Section 35.6 on page 374) to set the Switch to automatically Errdisa b le Re c o ve ry undo an action after the error is gone. XS3800-28 User’s Guide...
Page 369: Error Disable Settings
Click the link next to in the C lic k he re Errdisa b le Sta tus Adva nc e d > screen to display the screen as shown. Applic a tio n Errdisa b le XS3800-28 User’s Guide...
Page 370 Chapter 35 Error Disable Advanced Application > Errdisable > Errdisable Status (Standalone Mode) Fig ure 284 Advanced Application > Errdisable > Errdisable Status (Stacking Mode) Fig ure 285 XS3800-28 User’s Guide...
Page 371: Cpu Protection Configuration
Switch can receive or transmit on a port. Click the link next to in the C lic k He re C PU pro te c tio n > screen to display the screen as shown. Adva nc e d Applic a tio n Errdisa b le XS3800-28 User’s Guide...
Page 372 DESC RIPT IO N Reason Select the type of control packet you want to configure here. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XS3800-28 User’s Guide...
Page 373: Error-Disable Detect Configuration
Changes in this row are copied to all the entries as soon as you make them. Active Select this option to have the Switch detect if the configured rate limit for a specific control packet is exceeded and take the action selected below. XS3800-28 User’s Guide...
Page 374: Error-Disable Recovery Configuration
Use this row to make the setting the same for all entries. Use this row first and then make adjustments to each entry if necessary. Changes in this row are copied to all the entries as soon as you make them. XS3800-28 User’s Guide...
Page 375 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 376: Vlan Isolation
36.2 C o nfig uring VL AN Iso la tio n Click > in the navigation panel to display the screen as shown. Adva nc e d Applic a tio n Vla n Iso la tio n XS3800-28 User’s Guide...
Page 377 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rules that you want to remove and then click the button. De le te Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 378: Mac Pinning
37.2 MAC Pinning C o nfig ura tio n Use this screen to enable MAC pinning on the Switch and on specific ports. Click Adva nc e d Applic a tio n > in the navigation panel to open the following screen. MAC Pinning XS3800-28 User’s Guide...
Page 379 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last four ports of your Switch) cannot be configured. They are reserved for stacking only. XS3800-28 User’s Guide...
Page 380 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 381: Private Vlan
Table 167 PVLAN Graphic Key L ABEL DESC RIPT IO N P-VLAN 100 Primary private VLAN C-VLAN 101 Community private VLAN I-VLAN 102 Isolated private VLAN Tagged Private VLANs can span switches but trunking ports must be VLAN-trunking ports – see XS3800-28 User’s Guide...
Page 382: Configuration
VLAN IDs for VLANs. Sta tic VL AN Prim a ry Iso la te d C o m m unity Click > to display the following screen. Adva nc e d Applic a tio n Priva te VL AN XS3800-28 User’s Guide...
Page 383 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XS3800-28 User’s Guide...
Page 384 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 385: Green Ethernet
Adva nc e d Applic a tio n G re e n Ethe rne t Note: EEE, Auto Power Down and Short Reach are NOT supported on an uplink port. XS3800-28 User’s Guide...
Page 386 Chapter 39 Green Ethernet Advanced Application > Green Ethernet (Standalone Mode) Fig ure 296 XS3800-28 User’s Guide...
Page 387 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 388: Link Layer Discovery Protocol (Lldp)
The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. The next figure demonstrates that the network devices Switches and Routers (S and R) transmit and receive device information via LLDPDU and the network manager can query the information using XS3800-28 User’s Guide...
Page 389: Lldp-Med Overview
Since LLDPDU updates status and configuration information periodically, network managers may check the result of provision via remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. XS3800-28 User’s Guide...
Page 390: Lldp Settings
Click here to show a screen with the Switch’s LLDP information. Status LLDP Remote Click here to show a screen with LLDP information from the neighboring devices. Status LLDP Click here to show a screen to configure LLDP parameters. Configuration LLDP-MED XS3800-28 User’s Guide...
Page 391: Lldp Local Status
Adva nc e d Applic a tio n L L DP L L DP to display the screen as shown next. L o c a l Sta tus Advanced Application > LLDP > LLDP Local Status (Standalone Mode) Fig ure 301 XS3800-28 User’s Guide...
Page 392 This shows the System Capabilities enabled and supported on the local Switch. Capabilities TLV • – Bridge Syste m C a pa b ilitie s Suppo rte d • – Bridge Syste m C a pa b ilitie s Ena b le d XS3800-28 User’s Guide...
Page 393: Lldp Local Port Status Detail
Adva nc e d Applic a tio n L L DP > and then, click a port number, for example 1 in the local port column to display the L L DP L o c a l Sta tus screen as shown next. XS3800-28 User’s Guide...
Page 394 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (Basic TLV) Fig ure 303 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (MED TLV) Fig ure 304 XS3800-28 User’s Guide...
Page 395 • Exte nd Po we r via MDI PD • Inve nto ry Ma na g e m e nt Device Type This is the LLDP-MED device class. The Zyxel Switch device type is: • Network Connectivity XS3800-28 User’s Guide...
Page 396: Lldp Remote Status
Re m o te Po rt Sta tus De ta il Local Port This is the number of the Switch’s port that received LLDPDU from the remote device. In stacking mode, the first number represents the slot and the second the port number. XS3800-28 User’s Guide...
Page 397: Lldp Remote Port Status Detail
Inde x L L DP Re m o te Sta tus Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Basic Fig ure 307 TLV) XS3800-28 User’s Guide...
Page 398 Ma na g e m e nt Addre ss • Inte rfa c e Num b e r Sub type • Inte rfa c e Num b e r • O b je c t Ide ntifie r XS3800-28 User’s Guide...
Page 399 Po rt- Pro to c o l VL AN ID • Po rt- Pro to c o l VL AN ID Suppo rte d • Po rt- Pro to c o l VL AN ID Ena b le d XS3800-28 User’s Guide...
Page 400 MDI Ena b le d • Pa ir C o ntro lla b le • PSE Po we r Pa irs • Po we r C la ss Max Frame Size This displays the maximum supported frame size in octets. XS3800-28 User’s Guide...
Page 401 Chapter 40 Link Layer Discovery Protocol (LLDP) Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED Fig ure 309 TLV) XS3800-28 User’s Guide...
Page 402 – the Endpoint Device’s power priority (which the Network Connectivity Po we r Prio rity Device may use to prioritize which devices will remain in service during power shortages). • – power requirement, in fractions of Watts, in current configuration. Po we r Va lue XS3800-28 User’s Guide...
Page 403: Lldp Configuration
L L DP to display the screen as shown next. L L DP C o nfig ura tio n (C lic k He re ) Advanced Application > LLDP > LLDP Configuration (Standalone Mode) Fig ure 310 XS3800-28 User’s Guide...
Page 404 Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. XS3800-28 User’s Guide...
Page 405: Lldp Configuration Basic Tlv Setting
L L DP C o nfig ura tio n > to display the screen as shown next. (C lic k He re ) Ba sic T L V Se tting Advanced Application > LLDP > LLDP Configuration> Basic TLV Setting (Standalone Mode) Fig ure 312 XS3800-28 User’s Guide...
Page 406: Lldp Configuration Org-Specific Tlv Setting
L L DP L L DP > to display the screen as shown next. C o nfig ura tio n (C lic k He re ) O rg - spe c ific T L V Se tting XS3800-28 User’s Guide...
Page 407 ID TLVs on the ports. Port VLAN ID Select the check boxes to enable or disable the sending of IEEE 802.1 Port VLAN ID TLVs on the ports. All check boxes in this column are enabled by default. XS3800-28 User’s Guide...
Page 408: Lldp-Med Configuration
Adva nc e d Applic a tio n L L DP L L DP- MED C o nfig ura tio n Advanced Application > LLDP > LLDP-MED Configuration (Standalone Mode) Fig ure 316 XS3800-28 User’s Guide...
Page 409: Lldp-Med Network Policy
Click > > to display the screen as Adva nc e d Applic a tio n L L DP L L DP- MED Ne two rk Po lic y (C lic k He re ) shown next. XS3800-28 User’s Guide...
Page 410 - sig na ling Select to tag or untag in the network policy. • tagged • untagged VLAN Enter the VLAN ID number. It should be from 1 to 4094. For priority tagged frames, enter “0”. XS3800-28 User’s Guide...
Page 411: Lldp-Med Location
Click > > to display the screen as shown Adva nc e d Applic a tio n L L DP L L DP- MED L o c a tio n (C lic k He re ) next. XS3800-28 User’s Guide...
Page 412 Chapter 40 Link Layer Discovery Protocol (LLDP) Advanced Application > LLDP > LLDP-MED Location (Standalone Mode) Fig ure 320 XS3800-28 User’s Guide...
Page 413 Enter the latitude information. The value should be from 0º to 90º. • no rth • so uth Longitude Enter the longitude information. The value should be from 0º to 180º. • we st • e a st XS3800-28 User’s Guide...
Page 414 This field displays the location configuration information based on geographical coordinates Coordinates that includes longitude, latitude, altitude and datum. Civic Address This field displays the Civic Address for the remote device using information such as Country, State, County, City, Street, Number, ZIP code and additional information. XS3800-28 User’s Guide...
Page 415 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the locations that you want to remove, then click the button. De le te Cancel Click to clear the selected check boxes. C a nc e l XS3800-28 User’s Guide...
Page 416: Anti-Arpscan
ARP-requests from a host exceed the thresholds, the trusted port will not be closed. • If a port on the Switch is closed by , and you want to recover it, then do one of the Anti- a rpsc a n following: XS3800-28 User’s Guide...
Page 417: Anti-Arpscan Status
This shows whether is enabled or disabled on the Switch. Anti- a rpsc a n SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XS3800-28 User’s Guide...
Page 418: Anti-Arpscan Host Status
This displays the VLAN ID that shows which VLAN the blocked host is in. Port This displays the port number to which the blocked host is connected. State This shows if the ARP-request rate from this host is over the threshold. Forwarding Err- Disa b le hosts are not displayed. XS3800-28 User’s Guide...
Page 419: Anti-Arpscan Trust Host
, set port and host thresholds as well as configure ports to be Anti- Arpsc a n trusted or untrusted. To open this screen, click > > Adva nc e d Applic a tio n Anti- Arpsc a n C o nfig ure XS3800-28 User’s Guide...
Page 420 Chapter 41 Anti-Arpscan Advanced Application > Anti-Arpscan > Configure (Standalone Mode) Fig ure 326 Advanced Application > Anti-Arpscan > Configure (Stacking Mode) Fig ure 327 XS3800-28 User’s Guide...
Page 421 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XS3800-28 User’s Guide...
Page 422: Bpdu Guard
Use this screen to view whether BPDU guard is enabled on the Switch and the port status. Click > in the navigation panel. Adva nc e d Applic a tio n BPDU G ua rd Advanced Application > BPDU Guard Status (Standalone Mode) Fig ure 328 XS3800-28 User’s Guide...
Page 423: Bpdu Guard Configuration
Use this screen to turn on the BPDU guard feature on the Switch and ports. In the screen, click to display the configuration screen as shown. BPDU G ua rd Sta tus C o nfig ura tio n XS3800-28 User’s Guide...
Page 424 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last four ports of your Switch) cannot be configured. They are reserved for stacking only. XS3800-28 User’s Guide...
Page 425 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 426: Oam
O AM Re m o te L o o pb a c k 43.2 O AM Sta tus Use this screen to view the configuration of ports on which Ethernet OAM is enabled. Click Adva nc e d > in the navigation panel. Applic a tio n O AM XS3800-28 User’s Guide...
Page 427 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last four ports of your Switch) cannot be configured. They are reserved for stacking only. XS3800-28 User’s Guide...
Page 428: Oam Details
Use this screen to view OAM configuration details and operational status of a specific port. Click a number in the column in the screen to display the screen as shown next. Po rt O AM Sta tus XS3800-28 User’s Guide...
Page 429 : The port waits for the remote device to initiate OAM discovery; sends information Pa ssive PDUs; may send event notification PDUs; and may respond to variable request PDUs or loopback control PDUs. The Switch might not support some types of PDUs, as indicated in the fields below. XS3800-28 User’s Guide...
Page 430 This field displays the MAC address of the IEEE 802.3ah-enabled remote Ethernet device that is connected to the Switch. Vendor(oui) This field displays the Organizationally Unique Identifiers (OUI) representing the vendor of the IEEE 802.3ah-enabled remote Ethernet device that is connected to the Switch. XS3800-28 User’s Guide...
Page 431: Oam Configuration
Use this screen to turn on Ethernet OAM on the Switch and ports and configure the related settings. In the screen click to display the configuration screen as shown. O AM Sta tus C o nfig ura tio n XS3800-28 User’s Guide...
Page 432 DESC RIPT IO N Active Select this option to enable Ethernet OAM on the Switch. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XS3800-28 User’s Guide...
Page 433: Oam Remote Loopback
Use this screen to perform a remote loopback test. In the screen click O AM Sta tus Re m o te L o o pb a c k display the screen as shown. Advanced Application > OAM > OAM Remote Loopback (Standalone Mode) Fig ure 337 XS3800-28 User’s Guide...
Page 434 Enable Sta rt Loopback Control PDUs to the remote device. Stop Click to terminate a remote-loopback test from the specified port by sending Disable Sto p Loopback Control PDUs to the remote device. XS3800-28 User’s Guide...
Page 435: Zuld
44.1.2 Wha t Yo u Ne e d to Kno w • ZULD must be enabled on the Switch and the ports in order to detect unidirectional links by monitoring OAMPDUs. XS3800-28 User’s Guide...
Page 436: Zuld Status
Use this screen to see details of unidirectional and bidirectional links discovered by . To open this ZUL D screen, click > Adva nc e d Applic a tio n ZUL D Advanced Application > ZULD Status (Standalone Mode) Fig ure 340 XS3800-28 User’s Guide...
Page 437 Ag g re ssive Remote Operation This field displays whether ZULD is enabled or disabled on the connected device on this link. ZULD must be enabled on the connected device and on the port that is connecting to the Switch. XS3800-28 User’s Guide...
Page 438: Zuld Configuration
Use this screen to enable ZULD on a port, configure a mode and set the probe time. To open this screen, click > > Adva nc e d Applic a tio n ZUL D C o nfig ura tio n Advanced Application > ZULD > Configuration (Standalone Mode) Fig ure 342 XS3800-28 User’s Guide...
Page 439 (either on the Switch or the connected device) still has not received an OAMPDU, then declares that the link is unidirectional. ZUL D The allowed time range is from 5 – 65535 seconds. XS3800-28 User’s Guide...
Page 440 Sa ve save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XS3800-28 User’s Guide...
Page 441: Nlb
Switch should forward the incoming NLB traffic. • Use the screen (Section 45.3 on page 444) to map the IP address to the MAC address IP C o nfig ura tio n of a cluster for layer-3 forwarding. XS3800-28 User’s Guide...
Page 442: What You Need To Know
• Adva nc e d Applic a tio n Sta tic MAC Fo rwa rding > • Adva nc e d Applic a tio n Sta tic Multic a st Fo rwa rding > • Adva nc e d Applic a tio n Filte ring XS3800-28 User’s Guide...
Page 443 MAC Address This field displays the multicast or unicast MAC address of this rule. This field displays the VLAN group identification number. Port This field displays the ports to which the Switch will forward the incoming NLB traffic. XS3800-28 User’s Guide...
Page 444: Ip Configuration
Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the link on the top navigation panel to Sa ve save your changes to the non-volatile memory when you are done configuring. XS3800-28 User’s Guide...
Page 445 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 446: Wol Relay
Use this screen to configure settings on Wake On LAN relay. Click > Adva nc e d Applic a tio n Wo l Re la y open the following screen. Advanced Application > Wol Relay Fig ure 347 XS3800-28 User’s Guide...
Page 447 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 448: Static Route
(Section 47.3 on page 449) to configure and enable an IPv4 static IPv4 Sta tic Ro ute route. • Use the screen (Section 47.4 on page 450) to configure and enable an IPv6 static IPv6 Sta tic Ro ute route. XS3800-28 User’s Guide...
Page 449: Static Routing
Enter the IP address of the gateway. The gateway is an immediate neighbor of your Switch that Address will forward the packet to the destination. The gateway must be a router on the same segment as your Switch. XS3800-28 User’s Guide...
Page 450: Ipv6 Static Route
Click the link next to in the > screen to display the screen IPv6 Sta tic Ro ute IP Applic a tio n Sta tic Ro uting as shown. IP Application > Static Routing > IPv6 Static Route Fig ure 351 XS3800-28 User’s Guide...
Page 451 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 452: Policy Routing
Use this IP Applic a tio n Po lic y Ro uting screen to configure a policy routing profile, which can consist of multiple policy routing rules. IP Application > Policy Routing Fig ure 352 XS3800-28 User’s Guide...
Page 453: Policy Routing Rule Configuration
The Switch does not perform normal routing on packets that match any of the policy routes. Click in the > screen to display the screen as shown. Rule C o nfig ura tio n IP Applic a tio n Po lic y Ro uting XS3800-28 User’s Guide...
Page 454 Click an index Se q ue nc e number to change the rule’s Sta te m e nt State This field displays when the rule action is activated and when is it deactivated. pe rm it de ny XS3800-28 User’s Guide...
Page 455 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entries from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 456: Rip
Switch uses the route that has the lowest metric value. The following table lists the default administrative distance value of the route sources supported on the Switch. Table 203 Default Distance Value RO UT E SO URC E ADMINIST RAT IVE DIST ANC E Local Static XS3800-28 User’s Guide...
Page 457: Rip Configuration
The lower the administrative distance value is, the more preferable the routing protocol is. Note: You cannot set two routing protocols to have the same administrative distance. Index This field displays the index number of an IP interface. XS3800-28 User’s Guide...
Page 458 Sa ve to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 459: Ospf
A backbone router has an interface to the backbone. AS Boundary Router An AS boundary router exchanges routing information with routers in other ASs. The following figure depicts an OSPF network example. The backbone is area 0 with a backbone router. XS3800-28 User’s Guide...
Page 460: How Ospf Works
In most cases the default DR/BDR election is fine, but in some situations it must be controlled. In the following figure only router has direct connectivity with all the other routers on the network segment. Routers do not have a direct connection with each other. Therefore they should not be allowed XS3800-28 User’s Guide...
Page 461: Configuring Ospf
Click the link next to IP Applic a tio n O SPF to open screens where you can view IPv4 OSPF status and configure OSPF for IPv4. IPv4 O SPF IP Application > OSPF Fig ure 358 XS3800-28 User’s Guide...
Page 462: Ipv4 Ospf Status
The text box displays how often (in seconds) this screen refreshes. You may change the refresh interval by typing a new number in the text box and then clicking Se t Inte rva l Stop Click to end OSPF status polling. Sto p XS3800-28 User’s Guide...
Page 463 This field displays the time (in seconds) since the last LSA was sent. Seq # This field displays the link sequence number of the LSA. Checksum This field displays the checksum value of the LSA. Link Count This field displays the number of links in the LSA. XS3800-28 User’s Guide...
Page 464: Ipv4 Ospf Configuration
Select the check box to have the Switch advertise a default route to neighboring OSPF routers even if the Switch does not have one in its routing table. Metric Enter a route cost (between 0 and 16777215) for the default route. XS3800-28 User’s Guide...
Page 465: Configure Ipv4 Ospf Areas
The OSPF supports three levels of authentication: • – no authentication is used. No ne • – authenticate link state updates using an 8 printable ASCII character password. Sim ple • – authenticate link state updates using a 16 printable ASCII character password. XS3800-28 User’s Guide...
Page 466 Specify a cost (between 0 and 16777215) used to add a default route into a stub area for routes route cost which are external to an OSPF domain. If you do not set a route cost, no default route is added. XS3800-28 User’s Guide...
Page 467: View Ospf Area Information Table
RIP routing protocol and/or static routes need to exchange routing information with the Switch using OSPF routing protocol. A summary address is used to cover more than one routing entries in order to reduce the routing table size. XS3800-28 User’s Guide...
Page 468 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 469: Configuring Ipv4 Ospf Interfaces
Table 213 IP Application > OSPF > IPv4 OSPF > Configuration > Interface L ABEL DESC RIPT IO N Network Select an IP interface. Area ID Select the area ID (in an IP address format with dotted decimal notation) of an area to associate the interface to that area. XS3800-28 User’s Guide...
Page 470 This field displays the area ID (in an IP address format with dotted decimal notation) of an area to associate the interface to that area. Authentication This field displays the authentication method used ( Sa m e - a s- Are a No ne Sim ple XS3800-28 User’s Guide...
Page 471: Ipv4 Ospf Virtual-Links
Enter a descriptive name (up to 32 printable ASCII characters) for identification purposes. Area ID Select the area ID (in an IP address format with dotted decimal notation) of an area to associate the interface to that area. Peer Router ID Enter the ID of a peer border router. XS3800-28 User’s Guide...
Page 472 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l De le te XS3800-28 User’s Guide...
Page 473 This field displays the number of links in the LSA. Payload This field displays the router ID for LSA type 1 or 2, the next-hop router address for LSA type 8, and the IPv6 prefix of the route entry for other LSA types. XS3800-28 User’s Guide...
Page 474: Igmp
Multicast routers can also use IGMP to periodically check if multicast hosts still want to receive transmission from a multicast server. In other words, multicast routers check if any hosts on their network are still members of a specific multicast group. XS3800-28 User’s Guide...
Page 475: How Igmp Works
In the following figure multicast server (IP address ) and multicast server (IP address ) both send multicast traffic to the same 10.1.1.1 13.2.2.2 multicast group identified by the multicast IP address . In IGMP version 3 multicast host 225.1.1.1 XS3800-28 User’s Guide...
Page 476: Port-Based Igmp
Each entry in IP Applic a tio n IG MP the table is automatically created when you configure a new IP domain in the screen. IP Se tup IP Application > IGMP Fig ure 370 XS3800-28 User’s Guide...
Page 477 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 478: Dvmrp
DVMRP-enabled Layer-3 devices that do not have any hosts in their networks that belong to this multicast group send back a prune message (“ ”). If hosts later join the multicast group, a graft message (“ ”) to undo the prune is sent to the parent. XS3800-28 User’s Guide...
Page 479: Dvmrp Terminology
Configure DVMRP on the Switch when you wish it to act as a multicast router (“mrouter”). Click > in the navigation panel to display the screen as shown. Applic a tio n DVMRP IP Application > DVMRP Fig ure 372 XS3800-28 User’s Guide...
Page 480: Dvmrp Configuration Error Messages
When you disable IGMP, but DVMRP is still active you also see another warning screen. DVMRP: Unable to Disable IGMP Error Fig ure 374 Each IP routing domain DVMRP configuration must be in a different VLAN group; otherwise you see the XS3800-28 User’s Guide...
Page 481: Default Dvmrp Timer Values
Probe interval 10 sec Report interval 35 sec Route expiration time 140 sec Prune lifetime Variable (less than two hours) Prune retransmission time 3 sec with exponential back off Graft retransmission time 5 sec with exponential back off XS3800-28 User’s Guide...
Page 482: Differentiated Services
ToS-enabled network device will not conflict with the DSCP mapping. The DSCP value determines the PHB (Per-Hop Behavior), that each packet gets as it is forwarded across the DiffServ network. Based on the marking rule different kinds of traffic can be marked for different XS3800-28 User’s Guide...
Page 483: Activating Diffserv
53.2 Ac tiva ting DiffSe rv Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the selected ports. Click > in the navigation panel to display the screen as shown. IP Applic a tio n DiffSe rv XS3800-28 User’s Guide...
Page 484 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. XS3800-28 User’s Guide...
Page 485: Dscp-To-Ieee 802.1P Priority Settings
Table 221 IP Application > DiffServ > DSCP Setting L ABEL DESC RIPT IO N 0 … 63 This is the DSCP classification identification number. To set the IEEE 802.1p priority mapping, select the priority level from the drop-down list box. XS3800-28 User’s Guide...
Page 486 Sa ve the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 487: Dhcp
DHC P Se rve r G ua rd untrusted ports for DHCP packets. 54.1.2 Wha t Yo u Ne e d to Kno w Read on for concepts on DHCP that can help you configure the screens in this chapter. XS3800-28 User’s Guide...
Page 488: Dhcp Configuration
DHCP packets. IP Application > DHCP Fig ure 381 54.3 DHC Pv4 Sta tus Click > > in the navigation panel. The screen displays. IP Applic a tio n DHC P DHC Pv4 DHC P Sta tus XS3800-28 User’s Guide...
Page 489: Dhcpv4 Server Status Detail
DHCP server configuration to view the screen as shown. Use this screen to view details regarding DHCP server settings configured on the Switch. IP Application > DHCP > DHCPv4 > Server Status Detail Fig ure 383 XS3800-28 User’s Guide...
Page 490: Dhcpv4 Relay
Switch if you select this option. You can Re la y Ag e nt Info rm a tio n Syste m Na m e change the > Syste m Na m e Ba sic Se tting G e ne ra l Se tup XS3800-28 User’s Guide...
Page 491: Dhcpv4 Option 82 Profile
Use this screen to create DHCPv4 option 82 profiles. Click > > in the IP Applic a tio n DHC P DHC Pv4 navigation panel and click the link to display the screen as shown. O ptio n 82 Pro file XS3800-28 User’s Guide...
Page 492 Select this option to have the Switch add its MAC address to the client DHCP requests that it relays to a DHCP server. string Enter a string of up to 64 ASCII characters for the remote ID information in this field. Spaces are allowed. XS3800-28 User’s Guide...
Page 493: Configuring Dhcpv4 Global Relay
Select a pre-defined DHCPv4 option 82 profile that the Switch applies to all ports. The Switch adds the Circuit ID sub-option and/or Remote ID sub-option specified in the profile to DHCP requests that it relays to a DHCP server. XS3800-28 User’s Guide...
Page 494: Configure Dhcpv4 Global Relay Port
Click this to reset the values above based on the last selected entry or, if not applicable, to clear the fields above. Clear Click to reset the fields to the factory defaults. C le a r Index This field displays a sequential number for each entry. Click an index number to change the settings. XS3800-28 User’s Guide...
Page 495: Global Dhcp Relay Configuration Example
Switch to send additional information (such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. XS3800-28 User’s Guide...
Page 496: Dhcpv4 Vlan Setting
Note: You must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. See Section 5.1.3 on page 66 for information on how to do this. IP Application > DHCP > DHCPv4 > VLAN Fig ure 389 XS3800-28 User’s Guide...
Page 497 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Select the configuration entries you want to remove and click to remove them. De le te Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 498: Configure Dhcpv4 Vlan Port
This field displays the DHCP option 82 profile that the Switch applies to the ports in this VLAN. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XS3800-28 User’s Guide...
Page 499: Example: Dhcp Relay For Two Vlans
(VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.100. DHCP Relay for Two VLANs Fig ure 391 VLAN 1 VLAN 2 For the example network, configure the screen as shown. VL AN Se tting XS3800-28 User’s Guide...
Page 500: Dhcpv6 Status
A DHCPv6 server can assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients. Information This field displays when the entry supports display of the refresh time and DNS server; it Ye s shows when it does not. XS3800-28 User’s Guide...
Page 501: Dhcpv6 Information
• Any number of consecutive blocks of zeros can be replaced by a double colon. A double colon can only appear once in an IPv6 address. So ‘2001:0db8:0000:0000:1a2f:0000:0000:0015’ can be written as ‘2001:0db8::1a2f:0000:0000:0015’, ‘2001:0db8:0000:0000:1a2f::0015’, ‘2001:db8::1a2f:0:0:15’ or ‘2001:db8:0:0:1a2f::15’. XS3800-28 User’s Guide...
Page 502: Dhcpv6 Prefix Delegation
IP Applic a tio n DHC P DHC Pv6 Pre fix De le g a tio n as shown. IP Application > DHCP > DHCPv6 > Prefix Delegation Fig ure 395 XS3800-28 User’s Guide...
Page 503: Dhcpv6 Relay
Use this screen to configure DHCPv6 relay settings for a specific VLAN on the Switch. Click IP Applic a tio n > > > in the navigation panel to display the screen as shown. DHC P DHC Pv6 DHC Pv6 Re la y XS3800-28 User’s Guide...
Page 504 Interface ID This field displays whether the interface-ID option is added to DHCPv6 requests from clients in this VLAN. Remote ID This field displays whether the remote-ID option is added to DHCPv6 requests from clients in this VLAN. XS3800-28 User’s Guide...
Page 505: Dhcp Server Guard
T ruste d Untruste d does not discard DHCP packets on trusted ports for any reason. The Switch discards DHCP packets from untrusted ports when the packet is a DHCP server packet (for example, OFFER, ACK, or NACK). XS3800-28 User’s Guide...
Page 506 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to reset the fields to their last saved values. C a nc e l XS3800-28 User’s Guide...
Page 507: Vrrp
Switch , having a lower priority, is the backup router. Example 1 Fig ure 398 If switch (the master router) is unavailable, switch takes over. Traffic is then processed by switch XS3800-28 User’s Guide...
Page 508: Vrrp Status
IP Applic a tio n VRRP C o nfig ura tio n VRRP C o nfig ura tio n shown next. Note: You can only configure VRRP on interfaces with unique VLAN IDs. XS3800-28 User’s Guide...
Page 509: Vrrp Parameters
Cancel Click to discard all changes made in this table. C a nc e l 55.3.2 VRRP Pa ra m e te rs This section describes the VRRP parameters. XS3800-28 User’s Guide...
Page 510: Configuring Vrrp Parameters
DESC RIPT IO N Active Select this option to enable this VRRP entry. Name Enter a descriptive name (up to 32 printable ASCII characters) for identification purposes. Network Select an IP domain to which this VRRP entry applies. XS3800-28 User’s Guide...
Page 511: Viewing Vrrp Summary
Priority This field displays the priority level (1 to 255) of the entry. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XS3800-28 User’s Guide...
Page 512: Vrrp Configuration Examples
Configure the VRRP parameters in the VRRP C o nfig ura tio n screens on the switches as shown in the figures below. VRRP Example 1: VRRP Parameter Settings on Switch A Fig ure 404 EXAMPLE XS3800-28 User’s Guide...
Page 513: Two Subnets Example
Each switch is configured to backup a virtual router using VRRP. You wish to configure switch as the master router for virtual router and as a backup for virtual router . On the other hand, switch is the master for and a backup for XS3800-28 User’s Guide...
Page 514 Fig ure 409 EXAMPLE VRRP Example 2: VRRP Parameter Settings for VR2 on Switch B Fig ure 410 EXAMPLE After configuring and saving the VRRP configuration, the screens for both switches are VRRP Sta tus shown next. XS3800-28 User’s Guide...
Page 515 Chapter 55 VRRP VRRP Example 2: VRRP Status on Switch A Fig ure 411 EXAMPLE VRRP Example 2: VRRP Status on Switch B Fig ure 412 EXAMPLE XS3800-28 User’s Guide...
Page 516: Router Setup
56.2 C o nfig uring Ro ute r Se tup Click > in the navigation panel to display the screen as shown next. IP Applic a tio n Ro ute r Se tup IP Application > Router Setup Fig ure 413 XS3800-28 User’s Guide...
Page 517 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 518: Arp Setup
ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. 57.1.2.2 ARP L e a rning Mo de The Switch supports three ARP learning modes: ARP-Reply, Gratuitous-ARP, and ARP-Request. XS3800-28 User’s Guide...
Page 519 ARP to inform other devices in the same network to update their ARP table with the new mapping information. In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. XS3800-28 User’s Guide...
Page 520: Arp Setup
Use this screen to configure each port’s ARP learning mode. Click the link next to in the ARP L e a rning > screen to display the screen as shown next. Applic a tio n ARP Se tup XS3800-28 User’s Guide...
Page 521 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. XS3800-28 User’s Guide...
Page 522: Static Arp
IP Applic a tio n ARP Se tup screen as shown. IP Application > ARP Setup > Static ARP (Standalone Mode) Fig ure 417 IP Application > ARP Setup > Static ARP (Stacking Mode) Fig ure 418 XS3800-28 User’s Guide...
Page 523 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to clear the check boxes. C a nc e l XS3800-28 User’s Guide...
Page 524: Maintenance
58.2 Ma inte na nc e Se tting s Use this screen to manage firmware and your configuration files. Click > Ma na g e m e nt Ma inte na nc e the navigation panel to open the following screen. XS3800-28 User’s Guide...
Page 525 C o nfig ura tio n 2 Click to save the current configuration settings to a customized default file on C usto m De fa ult the Switch. This file can be used instead of the Zyxel factory default configuration file. XS3800-28 User’s Guide...
Page 526: Erase Running-Configuration
58.2.2 Sa ve C o nfig ura tio n Click to save the current configuration settings permanently to on the Switch. C o nfig 1 C o nfig ura tio n 1 These configurations are set up according to your network environment. XS3800-28 User’s Guide...
Page 527: Reboot System
Click the button to clear all Switch configuration information you configured and return Sta c king De fa ult to the stacking defaults. Click to continue or to abort. C a nc e l XS3800-28 User’s Guide...
Page 528: Factory Default
(next to ) on the Switch. You will then have to C usto m De fa ult Re b o o t Syste m make all your configurations again on the Switch. XS3800-28 User’s Guide...
Page 529: Firmware Upgrade
> to view the screen as shown next. Ma na g e m e nt Ma inte na nc e Firm wa re Upg ra de Management > Maintenance > Firmware Upgrade (Standalone Mode) Fig ure 425 XS3800-28 User’s Guide...
Page 530 (and model code) and MM/DD/YYYY creation Firm wa re 2 date. Current Boot Image This displays which firmware is currently in use on the Switch ( Firm wa re 1 Firm wa re 2) XS3800-28 User’s Guide...
Page 531: Restore Configuration
Backing up your Switch configurations allows you to create various “snap shots” of your device from which you may restore at a later date. Back up your current Switch configuration to a computer using the screen. Ba c kup C o nfig ura tio n XS3800-28 User’s Guide...
Page 532: Auto Configuration
Switch using the DHCP or HTTPS mode. This will overwrite the running configuration stored in the Switch’s RAM instead of the startup configuration stored in the Switch’s flash memory. Management > Maintenance > Auto Configuration Fig ure 429 XS3800-28 User’s Guide...
Page 533: Tech-Support
CLI command by typing “Show tech-support” command. Click > > to see the following screen. Ma na g e m e nt Ma inte na nc e T e c h- Suppo rt XS3800-28 User’s Guide...
Page 534 This log report is stored in flash Do wnlo a d memory. Mbuf Click to see the Mbuf log report. The log includes Mbuf over threshold Do wnlo a d information. This log report is stored in flash memory. XS3800-28 User’s Guide...
Page 535: Tech-Support Download
Certificates provide a way to exchange public keys for use in authentication. Click > > to open the following screen. Use this screen to import Ma na g e m e nt Ma inte na nc e C e rtific a te s the Switch's CA-signed certificates. XS3800-28 User’s Guide...
Page 536 Valid From This field displays the date that the certificate becomes applicable. Valid To This field displays the date that the certificate expires. XS3800-28 User’s Guide...
Page 537: Https Certificates
Se rvic e > > screen to open the following screen. Ma na g e m e nt Ma inte na nc e C e rtific a te s Management > Maintenance > Certificates > HTTPS Fig ure 433 XS3800-28 User’s Guide...
Page 538: Technical Reference
This is a sample FTP session showing the transfer of the computer file "firmware.bin" to the Switch. ftp> get config config.cfg This is a sample FTP session saving the current configuration to a file called “config.cfg” on your computer. XS3800-28 User’s Guide...
Page 539: Ftp Command Line Procedure
Initial Remote Directory Specify the default remote directory (path). Initial Local Directory Specify the default local directory (path). 58.9.5 FT P Re stric tio ns FTP will not work when: XS3800-28 User’s Guide...
Page 540 • The IP addresses in the screen does not match the client IP address. If it does Re m o te Ma na g e m e nt not match, the Switch will disconnect the FTP session immediately. XS3800-28 User’s Guide...
Page 541: Access Control
59.2 Ac c e ss C o ntro l Ma in Se tting s Use this screen to display the main screen. Click > in the navigation panel to display the main screen as shown. Ma na g e m e nt Ac c e ss C o ntro l XS3800-28 User’s Guide...
Page 542: Configure Snmp
Use this screen to configure your SNMP settings. Click > > to view the screen as shown. Ma na g e m e nt Ac c e ss C o ntro l SNMP Management > Access Control > SNMP Fig ure 435 XS3800-28 User’s Guide...
Page 543: Configure Snmp Trap Group
Use the screen to SNMP T ra p G ro up T ra p G ro up specify the types of SNMP traps that should be sent to each SNMP manager. XS3800-28 User’s Guide...
Page 544: Enable Or Disable Sending Of Snmp Traps On A Port
> screen, click to view the screen as shown. Use this screen to set SNMP T ra p G ro up Po rt whether a trap received on the ports would be sent to the SNMP manager. XS3800-28 User’s Guide...
Page 545 Use this row only if you want to make some of the settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. XS3800-28 User’s Guide...
Page 546: Configure Snmp User
DESC RIPT IO N User Information Note: Use the username and password of the login accounts you specify in this screen to create accounts on the SNMP v3 manager. Username Specify the username of a login account on the Switch. XS3800-28 User’s Guide...
Page 547 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entry from the summary table. De le te Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 548: Set Up Login Accounts
Web Configurator or the CLI. For more information on assigning privileges via the CLI see the Ethernet Switch CLI Reference Guide. User Name Set a user name (up to 32 ASCII characters long). XS3800-28 User’s Guide...
Page 549: Service Access Control
Table 259 Management > Access Control > Service Access Control L ABEL DESC RIPT IO N Services Services you may use to access the Switch are listed here. Active Select this option for the corresponding services that you want to allow to access the Switch. XS3800-28 User’s Guide...
Page 550: Remote Management
Ac c e ss C o ntro l Re m o te Ma na g e m e nt Click to return to the screen. Ac c e ss C o ntro l Ac c e ss C o ntro l XS3800-28 User’s Guide...
Page 551: Technical Reference
Click to begin configuring this screen afresh. C a nc e l 59.7 T e c hnic a l Re fe re nc e This section provides technical background information on the topics discussed in this chapter. XS3800-28 User’s Guide...
Page 552: About Snmp
SNMP v3 a nd Se c urity SNMP v3 enhances security for SNMP management. SNMP managers can be required to authenticate with agents before conducting SNMP management sessions. Security can be further enhanced by encrypting the SNMP messages sent from the managers. XS3800-28 User’s Guide...
Page 553 This trap is sent when the temperature is tOfRangeRecovered recovered from the out of range to normal operating range. voltage zyHwMonitorPowerSupplyVo 1.3.6.1.4.1.890.1.15.3.26.2.3 This trap is sent when the voltage goes ltageOutOfRange above or below the normal operating range. XS3800-28 User’s Guide...
Page 554 1.3.6.1.4.1.890.1.15.3.9.4.1 This trap is sent when users log in. zyAccessControlLogoutRec 1.3.6.1.4.1.890.1.15.3.9.4.2 This trap is sent when users log out. zyAccessControlLoginFail 1.3.6.1.4.1.890.1.15.3.9.4.3 This trap is sent when users fail in login. XS3800-28 User’s Guide...
Page 555 The trap is sent when entries in the remote database have any updates. Link Layer Discovery Protocol (LLDP), defined as IEEE 802.1ab, enables LAN devices that support LLDP to exchange their configured settings. This helps eliminate configuration mismatch issues. XS3800-28 User’s Guide...
Page 556 1.3.6.1.4.1.890.1.15.3.110.3.1 This trap is sent when a unidirectional link is detected. zyZuldBidirectionalRecovered 1.3.6.1.4.1.890.1.15.3.110.3.2 This trap is sent when the port which is shut down by ZULD becomes active again. XS3800-28 User’s Guide...
Page 557 1.3.6.1.2.1.80.0.3 This trap is sent when a ping test is completed. traceroute traceRouteTestFailed 1.3.6.1.2.1.81.0.2 This trap is sent when a traceroute test fails. traceRouteTestCompleted 1.3.6.1.2.1.81.0.3 This trap is sent when a traceroute test is completed. XS3800-28 User’s Guide...
Page 558: Ssh Overview
SSH Communication Example Fig ure 444 59.7.2.1 Ho w SSH Wo rks The following table summarizes how a secure connection is established between two remote hosts. XS3800-28 User’s Guide...
Page 559 Your Switch supports SSH version 2 using RSA authentication and three encryption methods (DES, 3DES and Blowfish). The SSH server is implemented on the Switch for remote management and file transfer on port 22. Only one SSH connection is allowed at a time. XS3800-28 User’s Guide...
Page 560: Introduction To Https
If you have not changed the default HTTPS port on the Switch, then in your browser enter “https://Switch IP Address/” as the web site address where “Switch IP Address” is the IP address or domain name of the Switch you wish to access. XS3800-28 User’s Guide...
Page 561 After you log in, you will see the red address bar with the message . Click on C e rtific a te Erro r C e rtific a te next to the address bar and click Erro r Vie w c e rtific a te s XS3800-28 User’s Guide...
Page 562 Yo ur c o nne c tio n is no t se c ure display. If that is the case, click and then the button. I Unde rsta nd the Risks Add Exc e ptio n... XS3800-28 User’s Guide...
Page 563 Security Alert (Mozilla Firefox) Fig ure 451 Confirm the HTTPS server URL matches. Click to proceed to the Web C o nfirm Se c urity Exc e ptio n Configurator login screen. Security Alert (Mozilla Firefox) Fig ure 452 EXAMPLE XS3800-28 User’s Guide...
Page 564: Google Chrome Warning Messages
After you accept the certificate and enter the login username and password, the Switch main screen appears. The lock displayed in the bottom right of the browser status bar or next to the website address denotes a secure connection. XS3800-28 User’s Guide...
Page 565 Chapter 59 Access Control Example: Lock Denoting a Secure Connection Fig ure 454 EXAMPLE XS3800-28 User’s Guide...
Page 566: Diagnostic
Use this screen to ping IP Ma na g e m e nt Dia g no stic addresses, run a traceroute, perform port tests or show the Switch’s location between devices. Management > Diagnostic (Standalone Mode) Fig ure 455 XS3800-28 User’s Guide...
Page 567 Type the source IP address that you want to ping in order to test a connection. Address Click to have the Switch ping the IP address. Ping Count Enter the number of ICMP Echo Request (ping) messages the Switch continuously sends. XS3800-28 User’s Guide...
Page 568 . Check the N/ A Pa ir sta tus O pe n Sho rt Dista nc e to fa ult This shows if the Switch chipset does not support to show the cable length. Unsuppo rte d XS3800-28 User’s Guide...
Page 569 Enter a time interval (in minutes) and click to show the actual location of the Switch Blink between several devices in a rack. The default time interval is 30 minutes. Click to have the Switch terminate the blinking locater LED. Sto p XS3800-28 User’s Guide...
Page 570: System Log
Click to clear the whole log, regardless of what is Re fre sh C le a r currently displayed on the screen. Click to save the log to your computer. Do wnlo a d XS3800-28 User’s Guide...
Page 571: Syslog Setup
The syslog feature sends logs to an external syslog server. Use this screen to configure the device’s system logging settings and configure a list of external syslog servers. Click > in the navigation panel to display this screen. Ma na g e m e nt Syslo g Se tup XS3800-28 User’s Guide...
Page 572 The default syslog server port is 514. If your syslog server uses a different port, configure the one it uses here. Log Level Select the severity levels of the logs that you want the device to send to this syslog server. The lower the number, the more critical the logs are. XS3800-28 User’s Guide...
Page 573 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click to remove the selected entries. De le te Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 574: Cluster Management
The switches being managed by the cluster manager Switch. In the following example, switch in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. Clustering Application Example Fig ure 459 XS3800-28 User’s Guide...
Page 575: What You Can Do
You can manage cluster member switches via the cluster manager Switch. Each number in the column is a hyperlink leading to the cluster member Switch’s Web Configurator. Inde x MacAddr This is the cluster member Switch’s hardware MAC address. Name This is the cluster member Switch’s Syste m Na m e XS3800-28 User’s Guide...
Page 576: Clustering Management Configuration
Ma na g e m e nt C luste r Ma na g e m e nt to display the next screen. C o nfig ura tio n Management > Cluster Management > Configuration Fig ure 461 XS3800-28 User’s Guide...
Page 577: Technical Reference
Click to begin configuring this screen afresh. C a nc e l 63.4 T e c hnic a l Re fe re nc e This section provides technical background information on the topics discussed in this chapter. XS3800-28 User’s Guide...
Page 578: Cluster Member Switch Management
63.4.1.1 Uplo a ding Firm wa re to a C luste r Me m b e r Switc h You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. XS3800-28 User’s Guide...
Page 579 This is the name of the firmware file you want to upload to the cluster member 460ABPI0.bin switch. This is the cluster member switch’s firmware name as seen in the cluster fw-00-a0-c5-01-23-46 manager switch. config-00-a0-c5-01-23-46 This is the cluster member switch’s configuration file name as seen in the cluster manager switch. XS3800-28 User’s Guide...
Page 580: Mac Table
MAC address. The Switch then learns the port that replies with the MAC address. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. XS3800-28 User’s Guide...
Page 581: Viewing The Mac Table
MAC forwarding table or MAC filtering table from the MAC table using this screen. Click > in the navigation panel to display the following screen. Ma na g e m e nt MAC T a b le Management > MAC Table Fig ure 465 XS3800-28 User’s Guide...
Page 582 Type This shows whether the MAC address is (learned by the Switch) or (manually dyna m ic sta tic entered in the screen). Sta tic MAC Fo rwa rding XS3800-28 User’s Guide...
Page 583: Ip Table
• If the Switch has already learned the port for this IP address, but the destination port is the same as the port it came in on, then it filters the packet. IP Table Flowchart Fig ure 466 XS3800-28 User’s Guide...
Page 584: Viewing The Ip Table
IP address belongs to the Switch. In stacking mode, the first number represents the slot and the second the port number. Type This shows whether the IP address is (learned by the Switch) or (belonging to the dyna m ic sta tic Switch). XS3800-28 User’s Guide...
Page 585: Arp Table
Use the ARP table to view IP-to-MAC address mappings and remove specific dynamic ARP entries. Click > in the navigation panel to open the following screen. Ma na g e m e nt ARP T a b le XS3800-28 User’s Guide...
Page 586 This field displays how long (in seconds) an entry can still remain in the ARP table before it ages out and needs to be relearned. This shows for a static entry. Type This shows the IP address is dynamic (learned by the Switch). XS3800-28 User’s Guide...
Page 587: Routing Table
Ma na g e m e nt Ro uting T a b le IPv4 Ro uting in the navigation panel to display the screen as shown. T a b le Management > Routing Table > IPv4 Routing Table Fig ure 470 XS3800-28 User’s Guide...
Page 588: Ipv6 Routing Table
This field displays the cost of the route. Type This field displays the method used to learn the route. – added as a static entry. ST AT IC – added as a local interface entry. C o nne c t XS3800-28 User’s Guide...
Page 589: Path Mtu Table
This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. XS3800-28 User’s Guide...
Page 590: Configure Clone
Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click > to open the following screen. Ma na g e m e nt C o nfig ure C lo ne XS3800-28 User’s Guide...
Page 591 Chapter 69 Configure Clone Management > Configure Clone (Standalone Mode) Fig ure 473 XS3800-28 User’s Guide...
Page 592 Chapter 69 Configure Clone Management > Configure Clone (Stacking Mode) Fig ure 474 XS3800-28 User’s Guide...
Page 593 Sa ve your changes to the non-volatile memory when you are done configuring. Cancel Click to begin configuring this screen afresh. C a nc e l XS3800-28 User’s Guide...
Page 594: Ipv6 Neighbor Table
This field displays the IPv6 address of the Switch or a neighboring device. This field displays the MAC address of the IPv6 interface on which the IPv6 address is configured or the MAC address of the neighboring device. XS3800-28 User’s Guide...
Page 595 Discovery protocol. Is it similar as IPv4 ARP (Address Resolution protocol). • static (S): The interface address is statically configured. Interface This field displays the ID number of the IPv6 interface on which the IPv6 address is created or through which the neighboring device can be reached. XS3800-28 User’s Guide...
Page 596: Port Status
You can also click L inks Sta tus Po rt Sta tus > to see the following screen. Ma na g e m e nt Po rt Sta tus XS3800-28 User’s Guide...
Page 597 Chapter 71 Port Status Management > Management > Port Status (Standalone Mode) Fig ure 477 Management > Port Status (Stacking Mode) Fig ure 478 XS3800-28 User’s Guide...
Page 598: Port Details
Click a number in the column in the screen to display individual port statistics. Use this Po rt Po rt Sta tus screen to check status and detailed performance data about an individual port on the Switch. XS3800-28 User’s Guide...
Page 599 FO RWARDING ST O P When LACP (Link Aggregation Control Protocol), STP, and dot1x are in blocking state, it displays Blo c king LACP This field shows if LACP is enabled on this port or not. XS3800-28 User’s Guide...
Page 600 This field shows the number of packets received that were too short (shorter than 64 octets), including the ones with CRC errors. Distribution This field shows the number of packets (including bad packets) received that were 64 octets in length. XS3800-28 User’s Guide...
Page 601: Ddmi
Po rt Sta tus Q uic k L inks Sta tus Po rt Sta tus then click the link tab. DDMI Management > Port Status > DDMI (Standalone Mode) Fig ure 480 XS3800-28 User’s Guide...
Page 602: Ddmi Details
Use this screen to view the real-time SFP (Small Form Factor Pluggable) transceiver information and operating parameters on the SFP port. The parameters include, for example, transmitting and receiving power, and module temperature. Click a number in the column in the screen to view current transceivers’ status. Po rt DDMI XS3800-28 User’s Guide...
Page 603 This displays the amount of power the SFP transceiver is transmitting. (dbm) RX Power This displays the amount of power the SFP transceiver is receiving from the fiber cable. (dbm) Current This displays the current status for each monitored DDMI parameter. XS3800-28 User’s Guide...
Page 604: Port Utilization
Q uic k L inks Sta tus Po rt Sta tus link tab. Utiliza tio n Management > Port Status > Utilization (Standalone Mode) Fig ure 483 XS3800-28 User’s Guide...
Page 605 This field shows the transmission speed of data received on this port in kilobytes per second. Rx Utilization% This field shows the percentage of actual received frames on this port as a percentage of the L ink speed. XS3800-28 User’s Guide...
Page 606: Service Register
Type This field displays whether you applied for a trial application ( ) or registered a service T ria l ) at myZyxel. It displays if the service license is not enabled. Sta nda rd N/ A XS3800-28 User’s Guide...
Page 607 Note: You can enable a standard license at myZyxel if the trial license expires. Update Click this button to renew service license information (such as the registration status and expiration day). Note: It is recommended you use this button after you register for a new service. XS3800-28 User’s Guide...
Page 608: T Ro Ub Le Sho O Ting A Nd Appe Ndic E S
A RT T ro ub le sho o ting a nd Appe ndic e s...
Page 609: Troubleshooting
Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the Switch off and on. Disconnect and re-connect the power adapter or cord to the Switch. If the problem continues, contact the vendor. XS3800-28 User’s Guide...
Page 610: Switch Access And Login
Make sure your computer is in the same subnet as the Switch. (If you know that there are routers between your computer and the Switch, skip this step.) Reset the device to its factory defaults, and try to access the Switch with the default IP address. See Section 4.7 on page XS3800-28 User’s Guide...
Page 611 Ac c e ss C o ntro l Re m o te Ma na g e m e nt Section 59.6 on page 550). Computers not belonging to the secured client set cannot get permission to access the Switch. XS3800-28 User’s Guide...
Page 612: Switch Configuration
If you plug the power cable back to the Switch, it will reboot and load the configuration file that was used the last time. For example, if was used on the Switch before you accidentally unplugged C o nfig 1 the Switch, will be loaded when rebooting. C o nfig 1 XS3800-28 User’s Guide...
Page 613: Appendix A Customer Support
C o rpo ra te He a dq ua rte rs (Wo rldwide ) T a iwa n • Zyxel Communications Corporation • http://www.zyxel.com Asia C hina • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • https://www.zyxel.com/cn/zh/ India • Zyxel Technology India Pvt Ltd.
Page 614 • Zyxel Communications Corporation • https://www.zyxel.com/tw/zh/ T ha ila nd • Zyxel Thailand Co., Ltd. • https://www.zyxel.com/th/th/ Vie tna m • Zyxel Communications Corporation-Vietnam Office • https://www.zyxel.com/vn/vi Euro pe Be la rus • Zyxel BY • https://www.zyxel.by Be lg ium •...
Page 615 Appendix A Customer Support • https://www.zyxel.com/be/fr/ Bulg a ria • Zyxel България • https://www.zyxel.com/bg/bg/ C ze c h Re pub lic • Zyxel Communications Czech s.r.o • https://www.zyxel.com/cz/cs/ De nm a rk • Zyxel Communications A/S • https://www.zyxel.com/dk/da/ Esto nia •...
Page 616 Ro m a nia • Zyxel Romania • https://www.zyxel.com/ro/ro Russia • Zyxel Russia • https://www.zyxel.com/ru/ru/ Slo va kia • Zyxel Communications Czech s.r.o. organizacna zlozka • https://www.zyxel.com/sk/sk/ Spa in • Zyxel Communications ES Ltd. • https://www.zyxel.com/es/es/ Swe de n • Zyxel Communications •...
Page 617 Appendix A Customer Support T urke y • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr/ • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en/ Ukra ine • Zyxel Ukraine • http://www.ua.zyxel.com So uth Am e ric a Arg e ntina • Zyxel Communications Corporation •...
Page 618 Appendix A Customer Support Middle Ea st • Zyxel Communications Corporation • https://www.zyxel.com/me/en/ No rth Am e ric a • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en/ O c e a nia Austra lia • Zyxel Communications Corporation •...
Page 619: Appendix B Common Services
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by email. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol – a client or server protocol for the world wide web. XS3800-28 User’s Guide...
Page 620 Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one email server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). XS3800-28 User’s Guide...
Page 621 Its primary function is to allow users to log into remote host systems. TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. XS3800-28 User’s Guide...
Page 622: Appendix C Ipv6
G lo b a l Addre ss A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. XS3800-28 User’s Guide...
Page 623 The following table describes the multicast addresses which are reserved and cannot be assigned to a multicast group. Table 293 Reserved Multicast Address MUL T IC AST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 XS3800-28 User’s Guide...
Page 624 IA_NA were obtained) a Renew message. If the time T2 is reached and the server does not respond, the client sends a Rebind message to any available server ( ). For an IA_TA, the XS3800-28 User’s Guide...
Page 625 (from the host) with a neighbor advertisement message. • Neighbor advertisement: A response from a node to announce its link-layer address. • Router solicitation: A request from a host to locate a router that can act as the default router and XS3800-28 User’s Guide...
Page 626 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. XS3800-28 User’s Guide...
Page 627 Select > > > Sta rt C o ntro l Pa ne l Adm inistra tive T o o ls Se rvic e s Double click Dib b le r – a DHC Pv6 c lie nt XS3800-28 User’s Guide...
Page 628 L o c a l Are a C o nne c tio n Select the check box to enable it. Inte rne t Pro to c o l Ve rsio n 6 (T C P/ IPv6) Click to save the change. XS3800-28 User’s Guide...
Page 629 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 XS3800-28 User’s Guide...
Page 630 The following information applies if you use the product within USA area. US Importer: Zyxel Communications, Inc, 1130 North Miller Street Anaheim, CA92806-2001, https://www.zyxel.com/us/en/ Fe de ra l C o m m unic a tio ns C o m m issio n (FC C ) EMC Sta te m e nt •...
Page 631: Appendix D Legal Information
– If the system has multiple sources of power, disconnect power from the system by unplugging all power cables from the power supply. • CLASS 1 LASER PRODUCT (for products with mini-GBIC slots or laser products, such as fiber-optic transceiver and GPON products). XS3800-28 User’s Guide...
Page 632 Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. XS3800-28 User’s Guide...
Page 633 Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. XS3800-28 User’s Guide...
Page 634 T ra de m a rks ZyNOS (Zyxel Network Operating System) and ZON (Zyxel One Network) are registered trademarks of Zyxel Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
Page 635: Inde X
Switch air circulation auto-crossover Ethernet port for cooling automatic VLAN registration All connected auto-negotiating port Setting Wizard Autonomous System anti-arpscan and OSPF blocked hosts 459, 478 host threshold Autonomous System (AS) XS3800-28 User’s Guide...
Page 636 Cat 5 cable saving Cat 5e cable configuration file Cat 6 cable backup Cat 6a cable 62, 531 restore save CE EMC statement Configure Clone screen Certificates screen console port XS3800-28 User’s Guide...
Page 637 DHCP relay disclaimer configure disposal and recycling information tutorial DHCP relay agent double-tagged frames DHCP relay option 82 DR (Designated Router) 493, 495 DHCP Relay screen DS (Differentiated Services) DHCP screen DSCP 69, 308, 321 DHCP snooping XS3800-28 User’s Guide...
Page 638 Errdisable Recovery screen flow control Errdisable screen back pressure errdisable status IEEE802.3x error disable forwarding control packets delay CPU protection frames detect tagged recovery untagged status freestanding installation error-disable recovery precautions 518, 585 Ethernet broadcast address XS3800-28 User’s Guide...
Page 639 HTTPS rack-mounting certificates transceiver implementation installation requirements public keys, private keys wall mounting HTTPS Certificates screen interface HTTPS example and OSPF Interface Setup screen interface, and OSPF Internal Router (IR) Internet Protocol version 6, see IPv6 XS3800-28 User’s Guide...
Page 640 IPv6 Global Setup screen L3 routing IPv6 interface basic features DHCPv6 client 210, 353 enable LACP global address system priority global unicast address timeout link-local address Layer 2 protocol tunneling, see L2PT link-local IP layer-2 switching neighbor discovery layer-3 routing XS3800-28 User’s Guide...
Page 641 Switch login password cluster management edit good habits Logins screen loop guard using FTP, see FTP examples using SNMP port shut down Web Configurator setup XS3800-28 User’s Guide...
Page 642 Neighbor Management (Smart Connect) bridge ID Neighbor screen configuration network applications configuration digest network management system (NMS) forwarding delay Hello Time NTP (RFC-1305) hello time Max Age max age max hops path cost port priority details revision level discovery status XS3800-28 User’s Guide...
Page 643 DHCPv4 VLAN 50, 548 administrator port security change address learning write down limit MAC address learning password change setup via Password / SNMP link Port Setup screen Path MTU Discovery port status Path MTU Table screen port details XS3800-28 User’s Guide...
Page 644 OSPF 62, 526, 527, 528 resetting product registration to custom default settings 526, 528 to factory default settings protocol based VLAN to stacking default settings example restore PVID configuration restore configuration restoring configuration XS3800-28 User’s Guide...
Page 645 MAC address service port static MAC forwarding sFlow Static MAC Forwarding screen configuration datagram static multicast forwarding overview Static Multicast Forwarding screen poll interval static route sample rate enable UDP port XS3800-28 User’s Guide...
Page 646 467, 468 connection interface summary address connection speed Switch installation DHCP client removal fanless-type usage precaution transceiver slot fan-type usage precaution translating RIP into OSPF switch lockout Trap Group screen Switch reset traps Switch Setup screen XS3800-28 User’s Guide...
Page 647 101, 102, 135, 136, 263 261, 263 VLAN stacking number of possible VIDs configuration priority frame example frame format VID (VLAN Identifier) 262, 265 port roles virtual links port-based Q-in-Q virtual links, and OSPF priority Virtual Local Area Network XS3800-28 User’s Guide...
Page 648 Zyxel online services center 48, 611 Web browser pop-up window Zyxel Unidirectional Link Detection (ZULD) Web Configurator getting help home login logout navigating components 56, 57 navigation panel online help usage prerequisite weight Windows OS version XS3800-28 User’s Guide...

ZyXEL Communications XS3800-28 User Manual

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications XS3800-28

Summary of Contents for ZyXEL Communications XS3800-28