Page 2
Go to nebula.zyxel.com support.zyxel.com to get this User’s Guide on how to configure the Switch using Nebula. • More Information Go to https://businessforum.zyxel.com for product discussions. Go to support.zyxel.com to find other information on the Switch. XMG1930 Series User’s Guide...
Figures in this user guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Generic Router Wireless Router / Access Point Generic Switch Smart TV Desktop Laptop IP Camera Printer Server XMG1930 Series User’s Guide...
2.4 Mounting the Switch on a Rack ....................31 2.4.1 Installation Requirements ..................... 31 2.4.2 Precautions ..........................31 2.4.3 Attaching the Mounting Brackets to the Switch ............... 32 2.4.4 Mounting the Switch on a Rack ..................32 Chapter 3 Hardware Panels..........................34 XMG1930 Series User’s Guide...
Page 7
4.9 Log Out of the Web Configurator ....................71 4.10 Help ..............................71 Chapter 5 Initial Setup Example .........................72 5.1 Overview ............................72 5.1.1 Create a VLAN ........................72 5.1.2 Set Port VID ..........................74 5.1.3 Configure Switch Management IP Address ............... 74 XMG1930 Series User’s Guide...
Page 8
8.8 Interface Setup ..........................107 8.9 IPv6 ..............................108 8.9.1 IPv6 Status ..........................108 8.9.2 IPv6 Interface Status ......................108 8.9.3 IPv6 Configuration ......................110 8.9.4 IPv6 Global Setup ........................ 111 8.9.5 IPv6 Interface Setup ......................112 XMG1930 Series User’s Guide...
Page 9
11.1.2 What You Need To Know ....................140 11.2 Static Multicast Forwarding Configuration ................141 11.3 Configure a Static Multicast MAC Address ................142 11.4 Configure a Static Multicast IPv4 Address ................143 Chapter 12 Filtering..............................145 XMG1930 Series User’s Guide...
Page 10
15.2 Broadcast Storm Control Setup ....................164 Chapter 16 Mirroring............................166 16.1 Mirroring Overview ........................166 16.2 Port Mirroring Setup ........................166 Chapter 17 Link Aggregation ..........................168 17.1 Link Aggregation Overview ....................... 168 17.1.1 What You Can Do ......................168 XMG1930 Series User’s Guide...
Page 11
21.2 Classifier Status ..........................189 21.3 Classifier Configuration ......................190 21.3.1 Viewing and Editing Classifier Configuration Summary ..........194 21.4 Classifier Global Setting Configuration ..................195 21.5 Classifier Example ........................196 Chapter 22 Policy Rule ............................198 XMG1930 Series User’s Guide...
Page 12
Chapter 26 DHCP Snooping ..........................221 26.1 DHCP Snooping Overview ......................221 26.1.1 What You Can Do ......................221 26.2 DHCP Snooping .......................... 221 26.3 DHCP Snooping Configure ......................224 26.3.1 DHCP Snooping Port Configure ..................226 XMG1930 Series User’s Guide...
Page 13
30.1.3 What You Can Do ......................247 30.2 Error-Disable Settings ........................248 30.3 Error-Disable Status ........................248 30.4 CPU Protection Configuration ....................250 30.5 Error-Disable Detect Configuration ..................251 30.6 Error-Disable Recovery Configuration ..................252 Chapter 31 Green Ethernet ..........................254 XMG1930 Series User’s Guide...
Page 14
35.1.2 What You Need to Know ....................284 35.2 DHCP Configuration ........................285 35.3 DHCPv4 Status ..........................285 35.4 DHCPv4 Relay ..........................286 35.4.1 DHCPv4 Relay Agent Information ................... 286 35.4.2 DHCPv4 Option 82 Profile ....................287 XMG1930 Series User’s Guide...
Page 16
42.1.1 What You Can Do ......................344 42.2 Cluster Management Status ..................... 345 42.3 Clustering Management Configuration .................. 346 42.4 Technical Reference ........................347 42.4.1 Cluster Member Switch Management ................347 Chapter 43 MAC Table ............................350 XMG1930 Series User’s Guide...
Page 17
48.2 Configure Clone ......................... 360 Chapter 49 IPv6 Neighbor Table.........................363 49.1 IPv6 Neighbor Table Overview ....................363 49.2 Viewing the IPv6 Neighbor Table ..................... 363 Chapter 50 Port Status ............................365 50.1 Overview ............................. 365 50.2 Port Status ............................ 365 XMG1930 Series User’s Guide...
Page 18
51.2 Switch Access and Login ......................375 51.3 Switch Configuration ........................376 Appendix A Customer Support ..................... 378 Appendix B Common Services ...................... 383 Appendix C IPv6..........................386 Appendix D Legal Information ...................... 395 Index ..............................400 XMG1930 Series User’s Guide...
Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The XMG1930 Series consists of the following models: • XMG1930-30 • XMG1930-30HP References to PoE model in this User's Guide only apply to XMG1930-30HP.
Note: Make sure to select the correct speed for the port in Basic Setting > Port Setup. 1.1.2 Management Modes NebulaFlex means you can set the Switch to operate in either standalone or cloud mode (but not both at the same time). XMG1930 Series User’s Guide...
Switch you have configured in Nebula. Note: If you change the ’s management mode from Nebula-managed mode to Switch standalone mode, the will reset to its factory-default settings. Switch XMG1930 Series User’s Guide...
Page 23
Switch is in Cloud mode, use the Local credentials password to login. Note: The Local credentials: Password can be found in Site-wide > Configure > General settings > Device configuration in the NCC portal. See the NCC User’s Guide for more information. XMG1930 Series User’s Guide...
The Switch can adjust the power supplied to each PD according to the PoE standard the PD supports. PoE standards are: • IEEE 802.3af Power over Ethernet (PoE) • IEEE 802.3at Power over Ethernet (PoE) + • IEEE 802.3bt Power over Ethernet (PoE) ++ XMG1930 Series User’s Guide...
Chapter 1 Getting to Know Your Switch The following table describes the PoE features of the Switch by model. Table 4 XMG1930 Series Model and PoE Features PoE FEATURES XMG1930-30HP IEEE 802.3af PoE IEEE 802.3at PoE+ IEEE 802.3bt PoE++ Power Management Mode...
Switch’s port or connect other switches to the Switch. In this example, all computers can share high-speed applications on the server. To expand the network, simply add more networking devices such as switches, routers, computers, print servers, and so on. Figure 4 Backbone Application XMG1930 Series User’s Guide...
This helps you switch to higher-speed LANs without the need for replacing all existing Ethernet cables and adapter cards, restructuring your network and complex maintenance. XMG1930 Series User’s Guide...
Switch through a cloud-based network management system. See the NCC User’s Guide for detailed information about how to access the NCC and manage your Switch through the NCC. See the NCC User’s Guide for how to configure Nebula managed devices. XMG1930 Series User’s Guide...
Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. XMG1930 Series User’s Guide...
• The Switches with fans are not suitable for use in locations where children are likely to be present. To start using the Switch, simply connect the power cables to turn it on. 2.3 Desktop Installation Procedure Make sure the Switch is clean and dry. Remove the adhesive backing from the rubber feet. XMG1930 Series User’s Guide...
21.5 kg. • Make sure the position of the Switch does not make the rack unstable or top-heavy. Take all necessary precautions to anchor the rack securely before installing the unit. XMG1930 Series User’s Guide...
Figure 10 Mounting the Switch on a Rack Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into XMG1930 Series User’s Guide...
Page 33
Chapter 2 Hardware Installation and Connection the rack. Note: Make sure you tighten all the four screws to prevent the Switch from getting slanted. Repeat steps to attach the second mounting bracket on the other side of the rack. XMG1930 Series User’s Guide...
RJ-45 PoE Ports IEEE802.3bt PoE++ 60 W ports. Port 21 – 24 Connect these ports to a PTZ (pan, tilt and zoom) camera, a WiFi 6 (802.11ax) router, a WiFi 6 (802.11ax) AP, or an Ethernet switch. XMG1930 Series User’s Guide...
Ethernet port are the same in order to connect. 3.1.1.1 Default Ethernet Negotiation Settings The factory default negotiation settings for the Gigabit ports on the Switch are: • Speed: Auto • Duplex: Auto • Flow control: Off • Link Aggregation: Disabled XMG1930 Series User’s Guide...
Align the transceiver in front of the slot opening. Make sure the latch is in the lock position (latch styles vary), then insert the transceiver into the slot with the exposed section of PCB board facing down. XMG1930 Series User’s Guide...
Page 37
If unsuccessful, contact Zyxel Support to prevent damage to your Switch and transceiver. XMG1930 Series User’s Guide...
Grounding is a safety measure to direct excess electric charge to the ground. It prevents damage to the Switch, and protects you from electrocution. Use the grounding screw on the rear panel and the ground wire of the AC power supply to ground the Switch. XMG1930 Series User’s Guide...
Page 39
Make sure the grounding terminal is connected to the buildings grounding electrode and has an earth resistance of less than 10 ohms, or according to your country’s electrical regulations. XMG1930 Series User’s Guide...
Connect the female end of the power cord to the AC power socket. Connect the other end of the cord to a power outlet. Disconnecting the Power The power input connectors can be disconnected from the power source individually. XMG1930 Series User’s Guide...
Page 41
Loosely wrap the clip on the retainer to the power cord. Push the pronged-end of the retainer clip into the Retainer Holder hole until it locks into place. Slide the clip up to the end of the power cord. XMG1930 Series User’s Guide...
Page 42
Chapter 3 Hardware Panels Close the clip tightly around the power cord until secure. XMG1930 Series User’s Guide...
PoE power usage is more than 95 percent of the power supplied budget. (XMG1930-30HP) Yellow PoE power usage is below 95 percent of the power supplied budget, but over 80 percent of the power supplied budget. XMG1930 Series User’s Guide...
Page 44
Power supplied to all PoE Ethernet ports meets the IEEE 802.3bt (XMG1930-30HP) standard. Green Power supplied to all PoE Ethernet ports meets the IEEE 802.3at standard. Yellow Power supplied to all PoE Ethernet ports meets the IEEE 802.3af standard. There is no power supplied. XMG1930 Series User’s Guide...
Page 45
The port is transmitting or receiving data at 1000M. 29 – 30 (XMG1930-30 / Blue The port has a successful 10G connection. XMG1930-30HP) Blinking The port is transmitting or receiving data at 10G. This link is disconnected. XMG1930 Series User’s Guide...
The Switch is a DHCP client by default. Type “http://DHCP-assigned IP” in the Location or Address field. Press [ENTER]. Also, you can use the ZON Utility to check your Switch’s IP address. See Section 4.3 on page 51 for more information on the ZON utility. The following screen appears. XMG1930 Series User’s Guide...
Page 48
Switch to Nebula Cloud management. Figure 25 Visit Nebula Alternatively, click Login to log into the Web Configurator to manage the Switch directly. The default user name is admin and associated default password is 1234. XMG1930 Series User’s Guide...
Page 49
Web Configurator and select Standard Mode. Click Password / SNMP to open a screen where you can change the administrator password and SNMP community string simultaneously. Otherwise, click Ignore to close it. XMG1930 Series User’s Guide...
Page 50
Select the SNMP version for the Switch. The SNMP version on the Switch must match the version on the SNMP manager. Choose SNMP version 2c (v2c), SNMP version 3 (v3) or both (v3v2c). Note: SNMP version 2c is backwards compatible with SNMP version 1. XMG1930 Series User’s Guide...
• Windows 8.1 (both 32-bit / 64-bit versions) • Windows 10 (both 32-bit / 64-bit versions) Note: To check for your Windows operating system version, right-click on My Computer > Properties on your computer. You should see this information in the General tab. XMG1930 Series User’s Guide...
ZON icon in the upper right of the screen. Then select the Supported model and firmware version link. If your device is not listed here, see the device release notes for ZON Utility support. The release notes are in the firmware zip file on the Zyxel web site. XMG1930 Series User’s Guide...
Page 53
Select a network adapter to which your supported devices are connected. Figure 31 Network Adapter Click the Go button for the ZON Utility to discover all supported devices in your network. Figure 32 Discovery The ZON Utility screen shows the devices discovered. XMG1930 Series User’s Guide...
Page 54
Zyxel website to your computer and unzipped it in advance. 8 Change Password Use this icon to change the admin password of the selected device. You must know the current admin password before changing to a new one. XMG1930 Series User’s Guide...
Switch and its ports. – • VLAN to create a static VLAN, assign ports to the VLAN and set the ports to tag or untag outgoing – frames. XMG1930 Series User’s Guide...
The Switch needs an IP address for it to be managed over the network. IP Subnet Mask The subnet mask specifies the network number portion of an IP address. Default Gateway Type the IP address of the default outgoing gateway in dotted decimal notation, for example 192.168.1.254. XMG1930 Series User’s Guide...
Page 57
Retype your new system password for confirmation. SNMP SNMP Select Enabled to let the Switch act as an SNMP agent, which allows a manager station to manage and monitor the Switch through the network. Select Disabled to turn this feature off. XMG1930 Series User’s Guide...
Page 58
Click Previous to show the previous screen. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Link Aggregation screen appears. Figure 37 Wizard > Basic > Step 3 Link Aggregation XMG1930 Series User’s Guide...
Page 59
This field displays the VLAN ID. IP Address The Switch needs an IP address for it to be managed over the network. IP Subnet Mask The subnet mask specifies the network number portion of an IP address. XMG1930 Series User’s Guide...
In Protection, you can set up loop guard and broadcast storm control. In order to set up loop guard, please do the following. Click Wizard > Protection > Step 1 Loop Guard to access this screen. XMG1930 Series User’s Guide...
Page 61
Select all ports to enable the loop guard feature on all ports. You can select a port by clicking it. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Broadcast Storm Control screen appears. XMG1930 Series User’s Guide...
Page 62
Specify how many broadcast packets the port receives per second. Previous Click Previous to show the previous screen. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Summary screen appears. XMG1930 Series User’s Guide...
Review the information and click Finish to create the task. Cancel Click Cancel to exit this screen without saving. 4.4.3 VLAN In VLAN, you can create VLAN, and tag VLAN settings. Click Wizard > VLAN > VLAN Setting to access this screen. XMG1930 Series User’s Guide...
Click Cancel to exit this screen without saving. 4.4.4 QoS In QoS, you can create QoS settings. In order to create QoS settings, please do the following. Click Wizard > QoS > QoS Setting to access this screen. XMG1930 Series User’s Guide...
Review the information and click Finish to create the task. Cancel Click Cancel to exit this screen without saving. 4.5 Web Configurator Layout The Status screen is the first screen that displays when you access the Web Configurator. XMG1930 Series User’s Guide...
Page 66
Click this link to log out of the Web Configurator. – Click this link to display web help pages. The help pages provide descriptions for all of the – configuration screens. Click this link to go to the Zyxel Community Biz Forum. – XMG1930 Series User’s Guide...
Page 67
PoE Setup For PoE models. This link takes you to a screen where you can set priorities, PoE power-up settings and schedule so that the Switch is able to reserve and allocate power to certain PDs. XMG1930 Series User’s Guide...
Page 68
This link takes you to a screen where you can configure protection against network loops that occur on the edge of your network. Layer 2 Protocol This link takes you to a screen where you can configure L2PT (Layer 2 Protocol Tunneling) Tunneling settings on the Switch. XMG1930 Series User’s Guide...
This link takes you to a screen where you can view the port statistics. 4.5.1 Change Your Password After you log in for the first time, it is recommended you change the default administrator password. Click Management > Access Control > Logins to display the next screen. XMG1930 Series User’s Guide...
Filter all traffic to the CPU port. Disable all ports. Misconfigure the text configuration file. Forget the password and/or IP address. Prevent all services from accessing the Switch. Change a service port number but forget it. XMG1930 Series User’s Guide...
Figure 46 Web Configurator: Logout Screen 4.10 Help The Web Configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a Web Configurator screen to view an online help description of that screen. XMG1930 Series User’s Guide...
In this example, you want to configure port 1 as a member of VLAN 2. Figure 47 Initial Setup Network Example: VLAN Click Advanced Application > VLAN > VLAN Configuration in the navigation panel and click the Static VLAN Setup link. XMG1930 Series User’s Guide...
Page 73
TX Tagging check box to set the Switch to remove VLAN tags before sending. Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XMG1930 Series User’s Guide...
If the Switch fails to obtain an IP address from a DHCP server, the Switch will use 192.168.1.1 as the management IP address. You can configure another IP address in a different subnet for management purposes. The following figure shows an example. XMG1930 Series User’s Guide...
Page 75
In the VID field, enter the ID of the VLAN group to which you want this management IP address to belong. This is the same as the VLAN ID you configure in the Static VLAN screen. XMG1930 Series User’s Guide...
Page 76
Chapter 5 Initial Setup Example Click Add to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XMG1930 Series User’s Guide...
DHCP request. Client A connects to the Switch’s port 2 in VLAN 102. Figure 50 Tutorial: DHCP Relay Scenario 6.2.2 Create a VLAN Follow the steps below to configure port 2 as a member of VLAN 102. Access the Web Configurator through the Switch’s management port. XMG1930 Series User’s Guide...
Page 78
Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending. Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XMG1930 Series User’s Guide...
Page 79
Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory. XMG1930 Series User’s Guide...
Click the Save link in the upper right of the Web Configurator to save your configuration permanently. The DHCP server can then assign a specific IP address based on the DHCP request. 6.2.4 Troubleshooting Check client A’s IP address. If it did not receive the IP address 172.16.1.18, make sure: XMG1930 Series User’s Guide...
Page 81
You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. You clicked the Save link on the Switch to have your settings take effect. XMG1930 Series User’s Guide...
7.2 Status The Status screen displays when you log into the Switch or click Status at the top right of the Web Configurator. The Status screen displays general device information, system status, and its IP addresses. XMG1930 Series User’s Guide...
Page 83
This field displays the serial number of this Switch. The serial number is used for device tracking and control. Registration This field displays the MAC address of the Switch that you must use to register at myZyxel.com or MAC Address the NCC (Nebula Control Center). XMG1930 Series User’s Guide...
This screen shows the neighboring device first recognized on an Ethernet port of the Switch. Device information is displayed in gray when the neighboring device is offline. Click Status > Neighbor to see the following screen. XMG1930 Series User’s Guide...
Page 85
Select an entry’s check box to select a specific port. Otherwise, select the check box in the table heading row to select all ports. Flush Click the Flush button to remove information about neighbors learned on the selected ports. XMG1930 Series User’s Guide...
Click the Cycle button to turn OFF the power of the neighbor device and turn it back ON again. A count down button (from 5 to 0) starts. Note: The Switch must support power sourcing (PSE) or the network device is a powered device (PD). Remote XMG1930 Series User’s Guide...
Page 87
The Switch must support power sourcing (PSE) or the network device is a powered device (PD). • If multiple neighbor devices use the same port, the Reset button is not available. • You can only reset Zyxel powered devices that support the ZON utility. XMG1930 Series User’s Guide...
121) to display links to Nebula Control Center Discovery and Nebula Switch Registration screens. 8.2 System Information In the navigation panel, click Basic Setting > System Info to display the screen as shown. Use this screen to view general system information. XMG1930 Series User’s Guide...
Page 89
This field displays the percentage (%) of memory being used in this memory pool. Hardware Monitor Temperature The Switch has temperature sensors that are capable of detecting and reporting if the Unit temperature rises above the threshold. You may choose the temperature unit (Centigrade or Fahrenheit) in this field. XMG1930 Series User’s Guide...
Error is displayed. 8.3 General Setup Use this screen to configure general settings such as the system name and time. Click Basic Setting > General Setup in the navigation panel to display the screen as shown. XMG1930 Series User’s Guide...
Page 91
Enter the new time in hour, minute and second format. The new time then appears in the (hh:mm:ss) Current Time field after you click Apply. Current Date This field displays the date you open this menu. XMG1930 Series User’s Guide...
With VLAN, a device cannot directly talk to or hear from devices that are not in the same groups; the traffic must first go through a router. In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and security among the subscribers. When properly configured, VLAN prevents one subscriber from accessing the network XMG1930 Series User’s Guide...
GARP Timer: Switches join VLANs by making a declaration. A declaration is made by issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message terminates all registrations. GARP timers set declaration timeout values. See the chapter on VLAN setup for more background information. XMG1930 Series User’s Guide...
The Switch needs an IP address for it to be managed over the network. The factory default IP address is 192.168.1.1. The subnet mask specifies the network number portion of an IP address. The factory default subnet mask is 255.255.255.0. XMG1930 Series User’s Guide...
Click this to release the dynamic IP address. 8.5.3 IP Status Details Use this screen to view IP status details. Click a number in the Index column in the IP Status screen to display the screen as shown next. XMG1930 Series User’s Guide...
Page 96
You should configure date and time in Basic Setting > General Setup. Lease Time End This displays the date and time that the current dynamic IP address assignment from the DHCP server will end. You should configure date and time in Basic Setting > General Setup. XMG1930 Series User’s Guide...
Cancel Click Cancel to reset the fields to your previous configuration. IP Interface Use these fields to create or edit IP routing domains on the Switch. XMG1930 Series User’s Guide...
121). Use this screen to enable communication between the Switch and NCC through the proxy server. Figure 66 Network Proxy Configuration Application As of this writing, this setting only allows communication between the Switch and the NCC. XMG1930 Series User’s Guide...
Click Cancel to reset the fields to your previous configuration. 8.6 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the configuration screen. XMG1930 Series User’s Guide...
Page 100
When the Switch’s auto-negotiation is turned off, a port uses the pre-configured speed and duplex mode when making a connection, thus requiring you to make sure that the settings of the peer port are the same in order to connect. XMG1930 Series User’s Guide...
You can also set priorities so that the Switch is able to reserve and allocate power to certain PDs. Note: The PoE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. XMG1930 Series User’s Guide...
Page 102
This field shows which ports can receive power from the Switch. • Disable – The PD connected to this port cannot get power supply. • Enable – The PD connected to this port can receive power. XMG1930 Series User’s Guide...
Use this screen to apply a schedule to the ports on the Switch. You must first configure a schedule in the Advanced Application > Time Range screen. Click the PoE Time Range Setup link in the Basic Setting > PoE Setup screen. The following screen opens. XMG1930 Series User’s Guide...
Use this screen to set the PoE power management mode, priority levels, power-up mode and the maximum amount of power for the connected PDs. Click the PoE Setup link in the Basic Setting > PoE Setup screen. The following screen opens. XMG1930 Series User’s Guide...
Page 105
Changes in this row are copied to all the ports as soon as you make them. Active Select this to provide power to a PD connected to the port. If left unchecked, the PD connected to the port cannot receive power from the Switch. XMG1930 Series User’s Guide...
Page 106
The Power Via MDI TLV allows PoE devices to advertise and discover the MDI power support capabilities of the sending port on the remote device. • Port Class • MDI Supported • MDI Enabled • Pair Controllable • PSE Power Pairs • Power Class XMG1930 Series User’s Guide...
Click Cancel to reset the fields to your previous configuration. Index This field displays the index number of an entry. Interface Type This field displays the type of interface. Interface ID This field displays the identification number of the interface. XMG1930 Series User’s Guide...
This field displays whether the IPv6 interface is activated or not. 8.9.2 IPv6 Interface Status Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the Basic Setting > IPv6 screen. The following screen opens. XMG1930 Series User’s Guide...
Page 109
IP address is preferred, which means it is a valid address and can be used as a sender or receiver address. Global Unicast This field displays the Switch’s global unicast address to identify this interface. Address(es) Joined Group This field displays the IPv6 multicast addresses of groups the Switch’s interface joins. Address(es) XMG1930 Series User’s Guide...
DHCPv6 Client and DNS information for this interface. 8.9.3 IPv6 Configuration Use this screen to configure IPv6 settings on the Switch. Click the IPv6 Configuration link in the Basic Setting > IPv6 screen. The following screen opens. XMG1930 Series User’s Guide...
Use this screen to configure the global IPv6 settings. Click the link next to IPv6 Global Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 77 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Global Setup XMG1930 Series User’s Guide...
This is the interface index number. Click on an index number to change the settings. Interface This is the name of the IPv6 interface you created. Active This field displays whether the IPv6 interface is activated or not. XMG1930 Series User’s Guide...
8.9.7 IPv6 Global Address Setup Use this screen to configure the interface’s IPv6 global address. Click the link next to IPv6 Global Address Setup in the IPv6 Configuration screen to display the screen as shown next. XMG1930 Series User’s Guide...
Page 114
This shows whether the interface ID of the global address is generated using the EUI-64 format. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XMG1930 Series User’s Guide...
This is the interface index number. Click on an index number to change the settings. Interface This is the name of the IPv6 interface you created. DAD Attempts This field displays the number of consecutive neighbor solicitations the Switch sends for this interface. XMG1930 Series User’s Guide...
Specify the maximum time interval (from 4 to 1800 seconds) at which the Switch sends router advertisements for this interface. Lifetime Specify how long (from 0 to 9000 seconds) the router in router advertisements can be used as a default router for this interface. XMG1930 Series User’s Guide...
Use this screen to configure the Switch’s IPv6 prefix list for each interface. Click the link next to IPv6 Prefix Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 83 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Prefix Setup XMG1930 Series User’s Guide...
Use this screen to create a static IPv6 neighbor entry in the Switch’s IPv6 neighbor table to store the neighbor information permanently. Click the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as shown next. XMG1930 Series User’s Guide...
Page 119
Delete Check the entries that you want to remove and then click Delete to remove the selected entries from the summary table. Cancel Click Cancel to clear the check boxes. XMG1930 Series User’s Guide...
This field displays whether the Switch obtains a list of domain names from the DHCP server. Information This field displays the time interval (in seconds) at which the Switch exchanges other configuration Refresh information with a DHCPv6 server again. Minimum XMG1930 Series User’s Guide...
Note: While the Switch is rebooting, do NOT turn off the power. Clear the check box to turn off NCC discovery on the Switch. The Switch will NOT discover the NCC and remain in standalone mode. XMG1930 Series User’s Guide...
This screen has a QR code containing the Switch’s serial number and MAC address for handy NCC registration of the Switch using the Nebula Mobile app. First, download the app from the Google Play store for Android devices or the App Store for iOS devices and create an organization and site. XMG1930 Series User’s Guide...
The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then that frame should not be forwarded as it is to XMG1930 Series User’s Guide...
Page 124
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Enable this function to permit VLAN groups beyond the local Switch. XMG1930 Series User’s Guide...
Page 125
At the time of writing, you can create static VLANs, Voice VLANs and Vendor ID-based VLANs on the Switch when the VLAN type is set to 802.1Q. When a packet is received, the Switch processes the VLAN rules in sequence. The sequence (priority) of the VLANs is: Vendor ID Based VLAN XMG1930 Series User’s Guide...
You can also tag all outgoing frames (that were previously untagged) from a port with the specified VID. 9.3 VLAN Status Use this screen to view and search all static VLAN groups. Click Advanced Application > VLAN from the navigation panel to display the VLAN Status screen as shown next. XMG1930 Series User’s Guide...
Click Previous or Next to show the previous or next screen if all status information cannot be seen in one screen. 9.3.1 VLAN Details Use this screen to view detailed port settings and status of the static VLAN group. Click an index number in the VLAN Status screen to display VLAN details. XMG1930 Series User’s Guide...
Click Click Here to configure the VLAN Port for the Switch. Voice VLAN Setup Click Click Here to configure the Voice VLAN for the Switch. Vendor ID Based VLAN Setup Click Click Here to configure the Vendor ID Based VLAN for the Switch. XMG1930 Series User’s Guide...
Select Fixed for the port to be a permanent member of this VLAN group. Select Forbidden if you want to prohibit the port from joining this VLAN group. Tagging Select TX Tagging if you want the port to tag all outgoing frames transmitted with this VLAN Group ID. XMG1930 Series User’s Guide...
Use this screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click the VLAN Port Setup link in the VLAN Configuration screen. Figure 95 Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup XMG1930 Series User’s Guide...
VLAN which enables the separation of voice and data traffic coming onto the Switch port. The Switch can determine whether a received packet is • an untagged voice packet when the incoming port is a fixed port for voice VLAN. XMG1930 Series User’s Guide...
Page 132
Click Clear to reset the fields to default settings. Voice VLAN OUI Setup OUI address Enter the IP phone manufacturer’s OUI MAC address. The first 3 bytes is the manufacturer identifier, the last 3 bytes is a unique station ID. XMG1930 Series User’s Guide...
As rules are processed one after the other, stating a priority order will let you choose which rule has to be applied first and which second. Click the Vendor ID Based VLAN Setup link in the VLAN Configuration screen to see the following screen. XMG1930 Series User’s Guide...
Page 134
This field displays the weight of the vendor ID based VLAN entry. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XMG1930 Series User’s Guide...
9.9.1 Configure a Port-Based VLAN Select Port Based as the VLAN Type in the Basic Setting > Switch Setup screen and then click Advanced Application > VLAN from the navigation panel to display the next screen. XMG1930 Series User’s Guide...
Page 136
Chapter 9 VLAN Figure 98 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation) Figure 99 Advanced Application > VLAN > Port Based VLAN Setup (All Connected) XMG1930 Series User’s Guide...
Page 137
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
Static MAC address forwarding together with port security allow only computers in the MAC address table on a port to access the Switch. Click Advanced Application > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. Figure 100 Advanced Application > Static MAC Forwarding XMG1930 Series User’s Guide...
Page 139
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XMG1930 Series User’s Guide...
(manual) multicast entries. The Switch will either flood the multicast frames to all ports (default) or drop them. Figure 101 on page 141 shows such unknown multicast frames flooded to all ports. With static multicast forwarding, you can forward these multicasts to ports within a VLAN group. XMG1930 Series User’s Guide...
Forwarding By that you want to receive the multicast. Static Multicast Click Click Here to configure static multicast addresses by the IP address of a multicast stream Forwarding By that you want to receive the multicast. XMG1930 Series User’s Guide...
(No). You may temporarily deactivate a rule without deleting it. Name This field displays the descriptive name for identification purposes for a static multicast MAC address-forwarding rule. MAC Address This field displays the multicast MAC address that identifies a multicast group. XMG1930 Series User’s Guide...
This saves your rule to the Switch’s run-time memory. The Switch loses this rule if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. XMG1930 Series User’s Guide...
Page 144
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XMG1930 Series User’s Guide...
12.2 Configure a Filtering Rule Use this screen to create rules for traffic going through the Switch. Click Advanced Application > Filtering in the navigation panel to display the screen as shown next. Figure 105 Advanced Application > Filtering XMG1930 Series User’s Guide...
Page 146
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rules that you want to remove and then click the Delete button. Cancel Click Cancel to clear the selected check boxes. XMG1930 Series User’s Guide...
In STP, a longer delay is required as the device that causes a topology change first notifies the root bridge that then notifies the network. Both RSTP and STP flush unwanted XMG1930 Series User’s Guide...
Page 148
STP Port States STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from XMG1930 Series User’s Guide...
Figure 106 Advanced Application > Spanning Tree Protocol This screen differs depending on which STP mode (RSTP or MSTP) you configure on the Switch. This screen is described in detail in the section that follows the configuration section for each STP mode. Click XMG1930 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 13.4 Rapid Spanning Tree Protocol Status Figure 108 Advanced Application > Spanning Tree Protocol XMG1930 Series User’s Guide...
Page 151
This field displays the path cost to the LAN segment to which the port is connected when the port is a designated port. Otherwise, it displays the path cost to the root bridge from the designated port for the LAN segment to which this port is connected. XMG1930 Series User’s Guide...
LAN. If it is a root port, a new root port is selected from among the Switch ports attached to the network. The allowed range is 6 to 40 seconds. XMG1930 Series User’s Guide...
Cancel Click Cancel to begin configuring this screen afresh. 13.6 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen. XMG1930 Series User’s Guide...
Page 154
Spanning Tree Protocol > Configuration screen to enable MSTP on the Switch. Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. The allowed range is 1 to 10 seconds. XMG1930 Series User’s Guide...
Page 155
Priority decides which port should be disabled when more than one port forms a loop in the Switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. XMG1930 Series User’s Guide...
Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XMG1930 Series User’s Guide...
Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. Note: This screen is only available after you activate MSTP on the Switch. Figure 112 Advanced Application > Spanning Tree Protocol > Status: MSTP XMG1930 Series User’s Guide...
Page 158
BPDUs. • Learning – The port learns MAC addresses and processes BPDUs, but does not forward frames yet. • Forwarding – The port is operating normally. It learns MAC addresses, processes BPDUs and forwards received frames. XMG1930 Series User’s Guide...
Figure 113 STP/RSTP Network Example With MSTP, VLANs 1 and 2 are mapped to different spanning trees in the network. Thus traffic from the two VLANs travel on different paths. The following figure shows the network example using MSTP. XMG1930 Series User’s Guide...
Therefore an MSTI does not span across MST regions. The following figure shows an example where there are two MST regions. Regions 1 and 2 have two spanning tree instances. Figure 115 MSTIs in Different Regions XMG1930 Series User’s Guide...
CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. Figure 116 MSTP and Legacy RSTP Network Example XMG1930 Series User’s Guide...
162) to limit the bandwidth for traffic going through the Switch. 14.2 Bandwidth Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. Figure 117 Advanced Application > Bandwidth Control XMG1930 Series User’s Guide...
Page 163
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XMG1930 Series User’s Guide...
(DLF) packets the Switch receives per second on the ports. 15.2 Broadcast Storm Control Setup Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. XMG1930 Series User’s Guide...
Page 165
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XMG1930 Series User’s Guide...
Click Advanced Application > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 119 Advanced Application > Mirroring XMG1930 Series User’s Guide...
Page 167
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XMG1930 Series User’s Guide...
When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that is, if an XMG1930 Series User’s Guide...
Section 17.1 on page 168 for more information. Figure 120 Advanced Application > Link Aggregation Status Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. XMG1930 Series User’s Guide...
LACP – if the ports are configured to join a trunk group through LACP. 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 168 for more information on link aggregation. XMG1930 Series User’s Guide...
Page 171
This is the only screen you need to configure to enable static link aggregation. Aggregation Setting Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this option to activate a trunk group. XMG1930 Series User’s Guide...
17.3.1 Link Aggregation Control Protocol Click Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Dynamic Link Aggregation on page 168 for more information on dynamic link aggregation. XMG1930 Series User’s Guide...
Page 173
Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. LACP Active Select this option to enable LACP for a trunk. Port This field displays the port number. XMG1930 Series User’s Guide...
T1, select the traffic distribution algorithm used by this group and select the ports that should belong to this group as shown in the figure below. Click Apply when you are done. XMG1930 Series User’s Guide...
Page 175
Chapter 17 Link Aggregation Figure 124 Trunking Example – Configuration Screen EXAMPLE Your trunk group 1 (T1) configuration is now complete. XMG1930 Series User’s Guide...
At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. XMG1930 Series User’s Guide...
Switch does not prompt the client for login credentials. The login credentials are based on the source MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. XMG1930 Series User’s Guide...
Select a port authentication method’s link in the screen that appears. Figure 127 Advanced Application > Port Authentication 18.3 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. In the Port Authentication screen click 802.1x to display the configuration screen as shown. XMG1930 Series User’s Guide...
Page 179
Switch tries again. If the client still does not respond to the second request, the Switch sends the client to the Guest VLAN. The client needs to send a new request to be authenticated by the Switch again. XMG1930 Series User’s Guide...
18.4 Activate MAC Authentication Use this screen to activate MAC authentication. In the Port Authentication screen click MAC Authentication to display the configuration screen as shown. Figure 129 Advanced Application > Port Authentication > MAC Authentication XMG1930 Series User’s Guide...
(A in the example) that is not IEEE 802.1x capable or fails to enter the correct user name and password can still access the port, but traffic from the user is forwarded to the guest VLAN. That is, unauthenticated users can have access to limited network resources in the same guest VLAN, XMG1930 Series User’s Guide...
Page 182
Figure 130 Guest VLAN Example Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication screen click Guest Vlan to display the configuration screen as shown. XMG1930 Series User’s Guide...
Page 183
Switch. You must also enable IEEE 802.1x authentication on the Switch and the associated ports. Enter the number that identifies the guest VLAN. Make sure this is a VLAN recognized in your network. XMG1930 Series User’s Guide...
Page 184
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
By default, MAC address learning is still enabled even though the port security is not activated. 19.3 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. Figure 132 Advanced Application > Port Security XMG1930 Series User’s Guide...
Page 186
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
187) to view or define a schedule on the Switch. 20.2 Configuring Time Range Click Advanced Application > Time Range in the navigation panel to display the screen as shown. Figure 133 Advanced Application > Time Range XMG1930 Series User’s Guide...
Page 188
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rules that you want to remove and then click the Delete button. Cancel Click Cancel to clear the selected check boxes. XMG1930 Series User’s Guide...
Configure policy rules to define actions to be performed on a classified traffic flow (refer to Chapter 22 on page 198 to configure policy rules). 21.2 Classifier Status Use this screen to view the classifiers configured on the Switch and how many times the traffic matches XMG1930 Series User’s Guide...
Use the Classifier Configuration screen to define the classifiers. After you define the classifier, you can specify actions (or policy) to act upon the traffic that matches the rules. In the Classifier Status screen click Classifier Configuration to display the configuration screen as shown. XMG1930 Series User’s Guide...
Page 192
For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. If you leave the Mask field blank, the Switch automatically sets the mask to ff:ff:ff:ff:ff:ff. Destination XMG1930 Series User’s Guide...
Page 193
Note: You must select either UDP or TCP in the IP Protocol field before you configure the Number socket numbers. Select Any to apply the rule to all TCP/UDP protocol port numbers or select the second option and enter a TCP/UDP protocol port number. Destination XMG1930 Series User’s Guide...
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XMG1930 Series User’s Guide...
POP3 21.4 Classifier Global Setting Configuration Use this screen to configure the match order and enable logging on the Switch. In the Classifier Configuration screen click Classifier Global Setting to display the configuration screen as shown. XMG1930 Series User’s Guide...
Cancel Click Cancel to begin configuring this screen afresh. 21.5 Classifier Example The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. XMG1930 Series User’s Guide...
Page 197
Chapter 21 Classifier Figure 138 Classifier: Example EXAMPLE After you have configured a classifier, you can configure a policy (in the Policy screen) to define actions on the classified traffic flow. XMG1930 Series User’s Guide...
Classifier screen. 22.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Click Advanced Application > Policy Rule in the navigation panel to display the screen as shown. XMG1930 Series User’s Guide...
Page 199
You can configure the desired bandwidth available to a traffic flow. Traffic that exceeds the maximum bandwidth allocated (in cases where the network is congested) is called out-of-profile traffic. Bandwidth Specify the bandwidth in kilobit per second (kbps). Enter a number between 1 and 1000000. XMG1930 Series User’s Guide...
Page 200
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XMG1930 Series User’s Guide...
The figure below shows an example Policy screen where you configure a policy to limit bandwidth and discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 21.5 on page 196). Figure 140 Policy Example XMG1930 Series User’s Guide...
This queue then moves to the back of the list. The next queue is given an equal amount of bandwidth, and then moves to the end of the list; and so on, depending on the number of queues being used. This works in a looping fashion until a queue is empty. XMG1930 Series User’s Guide...
Use this screen to set priorities for the queues of the Switch. This distributes bandwidth across the different traffic queues. Click Advanced Application > Queuing Method in the navigation panel. Figure 141 Advanced Application > Queuing Method XMG1930 Series User’s Guide...
Page 204
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
IP multicasting. Certain IP multicast numbers are reserved by IANA for special purposes (see the IANA website for more information). IGMP Snooping A Switch can passively snoop on IGMP packets transferred between IP multicast routers or switches and XMG1930 Series User’s Guide...
Click Advanced Application > Multicast > IPv4 Multicast to display the screen as shown. This screen shows the IPv4 multicast group information. See Section 24.1 on page 205 for more information on multicasting. Figure 143 Advanced Application > Multicast > IPv4 Multicast XMG1930 Series User’s Guide...
Table 96 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping LABEL DESCRIPTION IGMP Snooping Use these settings to configure IGMP snooping. Active Select Active to enable IGMP Snooping to forward group multicast traffic only to ports that are members of that group. XMG1930 Series User’s Guide...
Page 208
Specify the action to perform when the Switch receives a frame with a reserved multicast address. • Select Drop to discard the frames. • Select Flooding to send the frames to all ports. Port This field displays the port number. XMG1930 Series User’s Guide...
Page 209
Select Edge to stop the Switch from using the port as an IGMP query port. The Switch will not keep any record of an IGMP router being connected to this port. The Switch does not forward IGMP join or leave packets to this port. XMG1930 Series User’s Guide...
Enter the descriptive name of the VLAN for identification purposes. The string should not contain [ ? ], [ | ], [ ' ], [ " ] or [ , ]. Enter the ID of a static VLAN; the valid range is between 1 and 4094. XMG1930 Series User’s Guide...
Click Advanced Application > Multicast > IPv4 Multicast in the navigation panel. Click the IGMP Snooping link and then the IGMP Filtering Profile link to display the screen as shown. Figure 146 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping > IGMP Filtering Profile XMG1930 Series User’s Guide...
Page 212
To delete rules from a profile, select the rules that you want to remove in the Delete Rule column, then click the Delete button. Cancel Click Cancel to clear the Delete Profile or Delete Rule check boxes. XMG1930 Series User’s Guide...
Accounting is the process of recording what a user is doing. The Switch can use an external server to track when users log in, log out, execute commands and so on. Accounting can also record system related actions such as boot up and shut down times of the Switch. XMG1930 Series User’s Guide...
Click Advanced Application > AAA in the navigation panel to display the screen as shown. Figure 148 Advanced Application > AAA 25.3 RADIUS Server Setup Use this screen to configure your RADIUS server settings. Click the RADIUS Server Setup link in the AAA screen to view the screen as shown. XMG1930 Series User’s Guide...
Page 215
Enter the IP address of an external RADIUS server in dotted decimal notation. UDP Port The default port of a RADIUS server for authentication is 1812. You need not change this value unless your network administrator instructs you to do so. XMG1930 Series User’s Guide...
Click Cancel to begin configuring this screen afresh. 25.4 AAA Setup Use this screen to configure authentication, authorization and accounting settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. XMG1930 Series User’s Guide...
Page 217
Update This is the amount of time in minutes before the Switch sends an update to the accounting Period server. This is only valid if you select the start-stop option for the Exec or Dot1x entries. XMG1930 Series User’s Guide...
• Vendor-ID: An identification number assigned to the company by the IANA (Internet Assigned Numbers Authority). Zyxel’s vendor ID is 890. • Vendor-Type: A vendor specified attribute, identifying the setting you want to modify. • Vendor-data: A value you want to assign to the setting. XMG1930 Series User’s Guide...
Page 219
Tunnel-Medium-Type = 802(6) VLAN ID Tunnel-Private-Group-ID = Note: You must also create a VLAN with the specified VID on the Switch. Note: The bolded values in this table are fixed values as defined in RFC 3580. XMG1930 Series User’s Guide...
25.5.3.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 25.5.3.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type This value is set to Ethernet(15) on the Switch. – Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator XMG1930 Series User’s Guide...
DHCP option 82 profile to certain ports in a VLAN. 26.2 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > DHCP Snooping. XMG1930 Series User’s Guide...
Page 222
This field displays the location of the DHCP snooping database. Write delay timer This field displays how long (in seconds) the Switch tries to complete a specific update in the DHCP snooping database before it gives up. XMG1930 Series User’s Guide...
Page 223
This section displays the number of times and the reasons the Switch ignored bindings counters the last time it read bindings from the DHCP binding database. You can clear these counters by restarting the Switch or using CLI commands. See the CLI Reference Guide. XMG1930 Series User’s Guide...
DHCP server is located, and configure the DHCP snooping database. The DHCP snooping database stores the current bindings on a secure, external TFTP server so that they are still available after a restart. To open this screen, click Advanced Application > DHCP Snooping > Configure. XMG1930 Series User’s Guide...
Page 225
Enter how long (10 – 65535 seconds) the Switch waits to update the DHCP snooping database the first time the current bindings change after an update. Once the next update is scheduled, additional changes in current bindings are automatically included in the next update. XMG1930 Series User’s Guide...
You can also specify the maximum number for DHCP packets that each port (trusted or untrusted) can receive each second. To open this screen, click Advanced Application > DHCP Snooping > Configure > Port. Figure 153 Advanced Application > DHCP Snooping > Configure > Port XMG1930 Series User’s Guide...
DHCP relay agent option 82 information to DHCP requests that the Switch relays to a DHCP server for each VLAN. To open this screen, click Advanced Application > DHCP Snooping > Configure > VLAN. Figure 154 Advanced Application > DHCP Snooping > Configure > VLAN XMG1930 Series User’s Guide...
Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. To open this screen, click Advanced Application > DHCP Snooping > Configure > VLAN > Port. Figure 155 Advanced Application > DHCP Snooping > Configure > VLAN > Port XMG1930 Series User’s Guide...
Trusted ports are connected to DHCP servers or other switches. The Switch discards DHCP packets from trusted ports only if the rate at which DHCP packets arrive is too high. The Switch learns dynamic bindings from trusted ports. XMG1930 Series User’s Guide...
Page 230
• Slot ID (1 byte), port ID (1 byte), and source VLAN ID (2 bytes) • System name (up to 32 bytes) This information is stored in an Agent Information field in the option 82 field of the DHCP headers of client DHCP request frames. XMG1930 Series User’s Guide...
Page 231
Enable DHCP snooping on the Switch. Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. Configure trusted and untrusted ports, and specify the maximum number of DHCP packets that each port can receive per second. Configure static bindings. XMG1930 Series User’s Guide...
The following figure shows port N on switch A connected to switch B. Switch B has two ports, x and y, mistakenly connected to each other. It forms a loop. When broadcast or multicast packets leave port N XMG1930 Series User’s Guide...
Page 233
Switch. Figure 160 Loop Guard – Network Loop Note: After resolving the loop problem on your network you can re-activate the disabled port through the Web Configurator or through commands (See the CLI Reference Guide). XMG1930 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
Figure 162 Layer 2 Protocol Tunneling Network Scenario In the following example, if you enable L2PT for STP, you can have switches A, B, C and D in the same XMG1930 Series User’s Guide...
Incoming encapsulated layer 2 protocol packets received on a tunnel port are decapsulated and sent to an access port. 28.2 Configuring Layer 2 Protocol Tunneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. XMG1930 Series User’s Guide...
Page 237
VLAN configuration through the service provider’s network. LLDP Select this option to have the Switch tunnel LLDP (Link Layer Discovery Protocol) packets so that all network devices can advertise its identity and capabilities through the service provider’s network. XMG1930 Series User’s Guide...
Page 238
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
Read on for concepts on ARP that can help you configure the screen in this chapter. 29.1.2.1 PPPoE Intermediate Agent Tag Format If the PPPoE Intermediate Agent is enabled, the Switch adds a vendor-specific tag to PADI (PPPoE Active Discovery Initialization) and PADR (PPPoE Active Discovery Request) packets from PPPoE clients. XMG1930 Series User’s Guide...
Page 240
Table 113 PPPoE IA Circuit ID Sub-option Format: Using Identifier String and Variables SubOpt Length Value 0x01 Identifier delimiter Slot ID delimiter Port No delimiter VLAN ID String (1 byte) (1 byte) (1 byte) (1 byte) (1 byte) (2 byte) (1 byte) (53 byte) bytes) XMG1930 Series User’s Guide...
Use this screen to configure the PPPoE Intermediate Agent on the Switch. Click Advanced Application > PPPoE in the navigation panel to display the screen as shown. Click Click Here to go to the Intermediate Agent screen. Figure 165 Advanced Application > PPPoE > Intermediate Agent XMG1930 Series User’s Guide...
Select a delimiter to separate the identifier-string, slot ID, port number and/or VLAN ID from each other. You can use a pound key (#), semi-colon (;), period (.), comma (,), forward slash (/) or space. XMG1930 Series User’s Guide...
Use this row to make the setting the same for all ports. Use this row first and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. XMG1930 Series User’s Guide...
Use this screen to configure PPPoE IA settings that apply to a specific VLAN on a port. Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown. Figure 168 Advanced Application > PPPoE > Intermediate Agent > Port > VLAN XMG1930 Series User’s Guide...
Switch appends the Circuit ID and/or Remote ID to PPPoE discovery packets from a specific VLAN. Click the VLAN link in the Intermediate Agent screen to display the screen as shown. Figure 169 Advanced Application > PPPoE > Intermediate Agent > VLAN XMG1930 Series User’s Guide...
Page 246
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
• Use the Errdisable Recovery screen (Section 30.6 on page 252) to set the Switch to automatically undo an action after the error is gone. XMG1930 Series User’s Guide...
Click the Click here link next to Errdisable Status in the Advanced Application > Errdisable screen to display the screen as shown. XMG1930 Series User’s Guide...
Page 249
Switch to take the specified action. Active This field displays whether the control packets (ARP, BPDU, and/or IGMP) on the port is being detected or not. It also shows whether loop guard is enabled on the port. XMG1930 Series User’s Guide...
Note: After you configure this screen, make sure you also enable error detection for the specific control packets in the Advanced Application > Errdisable > Errdisable Detect screen. Figure 172 Advanced Application > Errdisable > CPU protection XMG1930 Series User’s Guide...
Changes in this row are copied to all the entries as soon as you make them. Active Select this option to have the Switch detect if the configured rate limit for a specific control packet is exceeded and take the action selected below. XMG1930 Series User’s Guide...
Select this check box to allow the Switch to wait for the specified time interval to activate a port or allow specific packets on a port, after the error was gone. Clear the check box to turn off this rule. XMG1930 Series User’s Guide...
Page 253
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
31.2 Configuring Green Ethernet Click Advanced Application > Green Ethernet in the navigation panel to display the screen as shown. Note: EEE, Auto Power Down and Short Reach are NOT supported on an uplink port. XMG1930 Series User’s Guide...
Page 255
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
IEEE 802.3 specific TLVs: • MAC/PHY Configuration/Status TLV (optional) • Link Aggregation TLV (optional) • Maximum Frame Size TLV (optional) The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. XMG1930 Series User’s Guide...
Since LLDPDU updates status and configuration information periodically, network managers may check the result of provision through remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. XMG1930 Series User’s Guide...
Click here to show a screen with the Switch’s LLDP information. Status LLDP Remote Click here to show a screen with LLDP information from the neighboring devices. Status LLDP Click here to show a screen to configure LLDP parameters. Configuration XMG1930 Series User’s Guide...
This screen displays a summary of LLDP status on this Switch. Click Advanced Application > LLDP > LLDP Local Status to display the screen as shown next. Figure 179 Advanced Application > LLDP > LLDP Local Status XMG1930 Series User’s Guide...
This screen displays detailed LLDP status for each port on this Switch. Click Advanced Application > LLDP > LLDP Local Status and then, click a port number, for example 1 in the local port column to display the screen as shown next. XMG1930 Series User’s Guide...
Page 261
Figure 180 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail XMG1930 Series User’s Guide...
Page 262
Network Policy • Location • Extend Power via MDI PSE • Extend Power via MDI PD • Inventory Management Device Type This is the LLDP-MED device class. The Zyxel Switch device type is: • Network Connectivity XMG1930 Series User’s Guide...
This displays a description for the port from which this LLDPDU was transmitted. System Name This displays the system name of the remote device. Management This displays the management address of the remote device. It could be the MAC address or Address IP address. XMG1930 Series User’s Guide...
This displays the time-to-live (TTL) multiplier of LLDP frames. The device information on the neighboring devices ages out and is discarded when its corresponding TTL expires. The TTL value is to multiply the TTL multiplier by the LLDP frames transmitting interval. Port Description This displays the remote port description. XMG1930 Series User’s Guide...
Page 265
• System Capabilities Enabled Management This displays the management address (IPv4 and IPv6) of the remote device. Address TLV • Management Address Subtype • Management Address • Interface Number Subtype • Interface Number • Object Identifier XMG1930 Series User’s Guide...
Page 266
This displays the IEEE 802.1 Port Protocol VLAN ID TLV, which indicates whether the VLAN ID VLAN ID TLV and whether it is enabled and supported on the port of remote Switch which sent the LLDPDU. • Port-Protocol VLAN ID • Port-Protocol VLAN ID Supported • Port-Protocol VLAN ID Enabled XMG1930 Series User’s Guide...
Page 267
• Port Class • MDI Supported • MDI Enabled • Pair Controllable • PSE Power Pairs • Power Class Max Frame Size This displays the maximum supported frame size in octets. XMG1930 Series User’s Guide...
Page 268
Chapter 32 Link Layer Discovery Protocol (LLDP) Figure 184 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED TLV) XMG1930 Series User’s Guide...
Page 269
Power Priority – the Endpoint Device’s power priority (which the Network Connectivity Device may use to prioritize which devices will remain in service during power shortages). • Power Value – power requirement, in fractions of Watts, in current configuration. XMG1930 Series User’s Guide...
Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. XMG1930 Series User’s Guide...
Select the check boxes to enable or to disable the sending of System Capabilities TLVs on the ports. System Description Select the check boxes to enable or to disable the sending of System Description TLVs on the ports. XMG1930 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
Cancel Click Cancel to begin configuring this screen afresh. 32.8 LLDP-MED Network Policy Click Advanced Application > LLDP > LLDP-MED Network Policy (Click Here) to display the screen as shown next. XMG1930 Series User’s Guide...
Page 274
This field displays the priority value of the network policy. DSCP This field displays the DSCP value of the network policy. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XMG1930 Series User’s Guide...
Civic Address includes Country, State, County, City, Street and other related information. Latitude Enter the latitude information. The value should be from 0º to 90º. The negative value represents the South. • north • south XMG1930 Series User’s Guide...
Page 276
This lists the index number of the location configuration. Click an index number to view or edit the location. Port This lists the port number of the location configuration. Location This field displays the location configuration information based on geographical coordinates Coordinates that includes longitude, latitude, altitude and datum. XMG1930 Series User’s Guide...
Page 277
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the locations that you want to remove, then click the Delete button. Cancel Click Cancel to clear the selected check boxes. XMG1930 Series User’s Guide...
When the download speed falls below 800 Mbp for ports that connect to 1 Gbps clients, use the Port Buffer screen to enable the Switch to improve the speed. 33.2 Port Buffer Setting To open this screen, click Advanced Application > Port Buffer. Figure 191 Advanced Application > Port Buffer XMG1930 Series User’s Guide...
Page 279
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the value in this screen to their last-saved value. XMG1930 Series User’s Guide...
• Use the IPv4 Static Route screen (Section 34.3 on page 281) to configure and enable an IPv4 static route. • Use the IPv6 Static Route screen (Section 34.4 on page 282) to configure and enable an IPv6 static route. XMG1930 Series User’s Guide...
Enter the IP address of the gateway. The gateway is an immediate neighbor of your Switch that Address will forward the packet to the destination. The gateway must be a router on the same segment as your Switch. XMG1930 Series User’s Guide...
34.4 IPv6 Static Route Click the link next to IPv6 Static Route in the IP Application > Static Routing screen to display the screen as shown. Figure 195 IP Application > Static Routing > IPv6 Static Route XMG1930 Series User’s Guide...
Page 283
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XMG1930 Series User’s Guide...
DHCP services you want to offer the DHCP clients on your network. Choose the configuration screen based on the following criteria: • Global The Switch forwards all DHCP requests to the same DHCP server. – XMG1930 Series User’s Guide...
This field displays the ID number of the VLAN for which the Switch acts as a DHCP relay agent. Current This field displays the source IP address of the DHCP requests that the Switch forwards to a DHCP Source server. Address XMG1930 Series User’s Guide...
Table 143 DHCP Relay Agent Information Option Format Code Length (82) i1, i2 and iN are DHCP relay agent sub-options, which contain additional information about the DHCP client. You need to define at least one sub-option. XMG1930 Series User’s Guide...
Enter a descriptive name for the profile for identification purposes. You can use up to 32 single- byte printable characters. Circuit-ID Use this section to configure the Circuit ID sub-option to include information that is specific to the relay agent (the Switch). XMG1930 Series User’s Guide...
Click Cancel to clear the selected check boxes. 35.4.3 Configuring DHCPv4 Global Relay Use this screen to configure global DHCPv4 relay. Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Global link to display the screen as shown. XMG1930 Series User’s Guide...
Use this screen to apply a different DHCP option 82 profile to certain ports on the Switch. To open this screen, click IP Application > DHCP > DHCPv4 > Global > Port. Figure 200 IP Application > DHCP > DHCPv4 > Global > Port XMG1930 Series User’s Guide...
The follow figure shows a network example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains. XMG1930 Series User’s Guide...
Application > DHCP > DHCPv4 in the navigation panel, then click the VLAN link In the DHCP Status screen that displays. Note: You must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. XMG1930 Series User’s Guide...
Page 292
This field displays the source IP address you configured for DHCP requests from clients on this VLAN. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XMG1930 Series User’s Guide...
This field displays the VLAN to which the ports belongs. Port This field displays the ports to which the Switch applies the settings. Profile Name This field displays the DHCP option 82 profile that the Switch applies to the ports in this VLAN. XMG1930 Series User’s Guide...
(VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.100. Figure 205 DHCP Relay for Two VLANs VLAN 1 VLAN 2 For the example network, configure the VLAN Setting screen as shown. Figure 206 DHCP Relay for Two VLANs Configuration Example EXAMPLE XMG1930 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to their last saved values. Clear Click Clear to reset the fields to the factory defaults. XMG1930 Series User’s Guide...
Page 296
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the entries that you want to remove and then click the Delete button. Cancel Click Cancel to clear the selected check boxes. XMG1930 Series User’s Guide...
ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. 36.1.2.2 ARP Learning Mode The Switch supports three ARP learning modes: ARP-Reply, Gratuitous-ARP, and ARP-Request. XMG1930 Series User’s Guide...
Page 298
ARP to inform other devices in the same network to update their ARP table with the new mapping information. In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. XMG1930 Series User’s Guide...
Figure 208 IP Application > ARP Setup 36.2.1 ARP Learning Use this screen to configure each port’s ARP learning mode. Click the link next to ARP Learning in the IP Application > ARP Setup screen to display the screen as shown next. XMG1930 Series User’s Guide...
Use this screen to create static ARP entries that will display in the Management > ARP Table screen and will not age out. Click the link next to Static ARP in the IP Application > ARP Setup screen to display the screen as shown. XMG1930 Series User’s Guide...
Page 301
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XMG1930 Series User’s Guide...
310) to see the Certificate screen and import the Switch's CA-signed certificates. 37.2 Maintenance Settings Use this screen to manage firmware and your configuration files. Click Management > Maintenance in the navigation panel to open the following screen. XMG1930 Series User’s Guide...
Page 303
Click Click Here to see the Tech-Support screen. You can set CPU and memory thresholds for log reports and download related log reports for issue analysis. Log reports include CPU history and utilization, crash and memory. Certificates Click Click Here to see the Certificate screen and import the Switch's CA-signed certificates. XMG1930 Series User’s Guide...
Click OK again and then wait for the Switch to restart. This takes up to 2 minutes. This does not affect the Switch’s configuration. Click Config 1 and follow steps 1 to 2 to reboot and load configuration one on the Switch. XMG1930 Series User’s Guide...
Custom Default (next to Reboot System) on the Switch. You will then have to make all your configurations again on the Switch. Figure 214 Load Custom Default: Confirmation XMG1930 Series User’s Guide...
Upgrade to load the new firmware. Select the Config Boot Image drop-down list box if you want to reboot the Switch and click Apply to apply the new firmware immediately. Click Upgrade to load the new firmware. XMG1930 Series User’s Guide...
Choose File or Browse to locate it. After you have specified the file, click Restore. "config" is the name of the configuration file on the Switch, so your backup configuration file is automatically renamed when you restore using this screen. XMG1930 Series User’s Guide...
Mbuf (Memory Buffer) log and crash reports for issue analysis by customer support should you have difficulty with your Switch. The Tech Support menu eases your effort in obtaining reports. Click Management > Maintenance > Tech-Support to see the following screen. XMG1930 Series User’s Guide...
Page 309
Click Download to see the memory section log report. This log report is stored in flash memory. Mbuf Click Download to see the Mbuf log report. The log includes Mbuf over threshold information. This log report is stored in flash memory. XMG1930 Series User’s Guide...
Certificates provide a way to exchange public keys for use in authentication. Click Management > Maintenance > Certificates to open the following screen. Use this screen to import the Switch's CA-signed certificates. Figure 220 Management > Maintenance > Certificates XMG1930 Series User’s Guide...
37.7.1 HTTPS Certificates Use this screen to view the HTTPS certificate details. Click a hyperlink in the Service column in the Management > Maintenance > Certificates screen to open the following screen. XMG1930 Series User’s Guide...
Switch setup, IP Setup, and so on. Once you have customized the Switch’s settings, they can be saved back to your computer under a filename of your choosing. ZyNOS (Zyxel Network Operating System sometimes referred to as the “ras” file) is the system firmware XMG1930 Series User’s Guide...
“config”. Likewise get config config.cfg transfers the configuration file on the Switch to your computer and renames it to “config.cfg”. See Table 158 on page 313 for more information on filename conventions. Enter quit to exit the ftp prompt. XMG1930 Series User’s Guide...
• FTP service is disabled in the Management > Access Control > Service Access Control screen. • The IP addresses in the Management > Access Control > Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. XMG1930 Series User’s Guide...
(RADIUS), system and SNMP user account information in the configuration file saved. 38.2 Access Control Main Settings Use this screen to display the main screen. Click Management > Access Control in the navigation panel to display the main screen as shown. XMG1930 Series User’s Guide...
Figure 223 Management > Access Control > SNMP Note: The string of any field in this screen should not contain [ ? ], [ | ], [ ' ], [ " ] or [ , ]. XMG1930 Series User’s Guide...
From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP traps that should be sent to each SNMP manager. Figure 224 Management > Access Control > SNMP > Trap Group XMG1930 Series User’s Guide...
The following table describes the labels in this screen. Table 164 Management > Access Control > SNMP > Trap Group > Port LABEL DESCRIPTION Option Select the trap type you want to configure here. Port This field displays a port number. XMG1930 Series User’s Guide...
SNMP v3 manager. Username Specify the user name of a login account on the Switch. The string should not contain [ ? ], [ | ], [ ' ], [ " ] or [ , ]. XMG1930 Series User’s Guide...
Page 320
Group This field displays the SNMP group to which this user belongs. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XMG1930 Series User’s Guide...
This is the default administrator account with the “admin” user name. You cannot change the default administrator user name. Old Password Type the existing system password (1234 is the default password when shipped). New Password Enter your new system password. XMG1930 Series User’s Guide...
“trusted computers” for each service in the Remote Management screen (discussed later). Click Access Control to go back to the main Access Control screen. Figure 228 Management > Access Control > Service Access Control XMG1930 Series User’s Guide...
Use this screen to specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click Management > Access Control > Remote Management to view the screen as shown next. Click Access Control to return to the Access Control screen. XMG1930 Series User’s Guide...
(as plain text or encrypted text) in the configuration file saved in Management > Maintenance > Save Configuration. Note: Make sure to enable Password Encryption to avoid displaying passwords as plain text in the configuration file. XMG1930 Series User’s Guide...
Page 325
Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring Account Security afresh. Display XMG1930 Series User’s Guide...
Switch into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions. It executes applications that control and monitor managed devices. XMG1930 Series User’s Guide...
Page 327
SNMP traps by category. Table 171 SNMP System Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION coldstart coldStart 1.3.6.1.6.3.1.1.5.1 This trap is sent when the Switch is turned on. warmstart warmStart 1.3.6.1.6.3.1.1.5.2 This trap is sent when the Switch restarts. XMG1930 Series User’s Guide...
Page 328
OBJECT LABEL OBJECT ID DESCRIPTION rmon RmonRisingAlarm 1.3.6.1.2.1.16.0.1 This trap is sent when a variable goes over the RMON "rising" threshold. RmonFallingAlarm 1.3.6.1.2.1.16.0.2 This trap is sent when the variable falls below the RMON "falling" threshold. XMG1930 Series User’s Guide...
The client automatically saves any new server public keys. In subsequent connections, the server public key is checked against the saved version on the client computer. XMG1930 Series User’s Guide...
HTTPS connection requests from an SSL-aware web browser go to port 443 (by default) on the Switch’s WS (web server). HTTP connection requests from a web browser go to port 80 (by default) on the Switch’s WS (web server). XMG1930 Series User’s Guide...
Page 331
When you attempt to access the Switch HTTPS server, a screen with the message "There is a problem with this website's security certificate." may display. If that is the case, click Continue to this website (not recommended) to proceed to the Web Configurator login screen. XMG1930 Series User’s Guide...
Page 332
After you log in, you will see the red address bar with the message Certificate Error. Click on Certificate Error next to the address bar and click View certificates. Figure 237 Certificate Error (Internet Explorer 11) EXAMPLE Click Install Certificate... and follow the on-screen instructions to install the certificate in your browser. XMG1930 Series User’s Guide...
Page 333
When you attempt to access the Switch HTTPS server, a Your connection is not secure screen may display. If that is the case, click I Understand the Risks and then the Add Exception... button. Figure 239 Security Alert (Mozilla Firefox) XMG1930 Series User’s Guide...
When you attempt to access the Switch HTTPS server, a Your connection is not private screen may display. If that is the case, click Advanced and then Proceed to x.x.x.x (unsafe) to proceed to the Web Configurator login screen. XMG1930 Series User’s Guide...
Page 335
After you accept the certificate and enter the login user name and password, the Switch main screen appears. The lock displayed in the bottom right of the browser status bar or next to the website address denotes a secure connection. XMG1930 Series User’s Guide...
Page 336
Figure 242 Example: Lock Denoting a Secure Connection EXAMPLE XMG1930 Series User’s Guide...
Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to ping IP addresses, run a traceroute, perform port tests or show the Switch’s location between devices. Figure 243 Management > Diagnostic XMG1930 Series User’s Guide...
Page 338
Short: There is an short circuit detected between the wire-pair. Unknown: The Switch failed to run cable diagnostics on the cable connected this port. Unsupported: The port is a fiber port or it is not active. XMG1930 Series User’s Guide...
Page 339
Enter a time interval (in minutes) and click Blink to show the actual location of the Switch between several devices in a rack. The default time interval is 30 minutes. Click Stop to have the Switch terminate the blinking locater LED. XMG1930 Series User’s Guide...
The summary table shows the time the log message was recorded and the reason the log message was generated. Click Refresh to update this screen. Click Clear to clear the whole log, regardless of what is currently displayed on the screen. Click Download to save the log to your computer. XMG1930 Series User’s Guide...
The syslog feature sends logs to an external syslog server. Use this screen to configure the device’s system logging settings and configure a list of external syslog servers. Click Management > Syslog Setup in the navigation panel to display this screen. XMG1930 Series User’s Guide...
Page 342
The default syslog server port is 514. If your syslog server uses a different port, configure the one it uses here. Log Level Select the severity levels of the logs that you want the device to send to this syslog server. The lower the number, the more critical the logs are. XMG1930 Series User’s Guide...
Page 343
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entries. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
42.1.1 What You Can Do • Use the Cluster Management Status screen (Section 42.2 on page 345) to view the role of the Switch within the cluster and to access a cluster member Switch’s Web Configurator. XMG1930 Series User’s Guide...
Error (for example the cluster member Switch password was changed or the Switch was set as the manager and so left the member list, and so on) Offline (the Switch is disconnected – Offline shows approximately 1.5 minutes after the link between cluster member and manager goes down) XMG1930 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. Clustering The following fields relate to the switches that are potential cluster members. Candidate XMG1930 Series User’s Guide...
Web Configurator home page. This cluster member Web Configurator home page and the home page that you would see if you accessed it directly are different. XMG1930 Series User’s Guide...
Page 348
Figure 249 Cluster Management: Cluster Member Web Configurator Screen example 42.4.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. XMG1930 Series User’s Guide...
Page 349
This is the name of the firmware file you want to upload to the cluster member 470ACAQ0.bin switch. This is the cluster member switch’s firmware name as seen in the cluster fw-00-a0-c5-01-23-46 manager switch. This is the cluster member switch’s configuration file name as seen in the cluster config-00-a0-c5-01-23-46 manager switch. XMG1930 Series User’s Guide...
MAC address. The Switch then learns the port that replies with the MAC address. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. XMG1930 Series User’s Guide...
MAC forwarding table or MAC filtering table from the MAC table using this screen. Click Management > MAC Table in the navigation panel to display the following screen. Figure 252 Management > MAC Table XMG1930 Series User’s Guide...
Page 352
This is the port where the above MAC address is forwarded. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Advanced Application > Static MAC Forwarding screen). XMG1930 Series User’s Guide...
• If the Switch has already learned the port for this IP address, but the destination port is the same as the port it came in on, then it filters the packet. Figure 253 IP Table Flowchart XMG1930 Series User’s Guide...
This is the port from which the above IP address was learned. This field displays CPU to indicate the IP address belongs to the Switch. Type This shows whether the IP address is dynamic (learned by the Switch) or static (belonging to the Switch). XMG1930 Series User’s Guide...
MAC address that replied. 45.2 Viewing the ARP Table Use the ARP table to view IP-to-MAC address mappings and remove specific dynamic ARP entries. Click Management > ARP Table in the navigation panel to open the following screen. XMG1930 Series User’s Guide...
Page 356
This shows 0 for a static entry. Type This shows whether the IP address is dynamic (learned by the Switch) or static (manually configured in the Basic Setting > IP Setup or IP Application > ARP Setup > Static ARP screen). XMG1930 Series User’s Guide...
Use this screen to view IPv4 routing table information. Click Management > Routing Table > IPv4 Routing Table in the navigation panel to display the screen as shown. Figure 257 Management > Routing Table > IPv4 Routing Table XMG1930 Series User’s Guide...
Metric This field displays the cost of the route. Type This field displays the method used to learn the route. STATIC – added as a static entry. Connect – added as a local interface entry. XMG1930 Series User’s Guide...
This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. XMG1930 Series User’s Guide...
This chapter shows you how you can copy the settings of one port onto other ports. 48.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. XMG1930 Series User’s Guide...
Page 361
Select which port settings (you configured in the Basic Setting menus) should be copied to the destination ports. Advanced Select which port settings (you configured in the Advanced Application menus) should be copied Application to the destination ports. XMG1930 Series User’s Guide...
Page 362
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1930 Series User’s Guide...
49.2 Viewing the IPv6 Neighbor Table Use this screen to view IPv6 neighbor information on the Switch. Click Management > IPv6 Neighbor Table in the navigation panel to display the screen as shown. Figure 261 Management > IPv6 Neighbor Table XMG1930 Series User’s Guide...
Page 364
• static (S): The interface address is statically configured. Interface This field displays the ID number of the IPv6 interface on which the IPv6 address is created or through which the neighboring device can be reached. XMG1930 Series User’s Guide...
If STP (Spanning Tree Protocol) is enabled, this field displays the STP state of the port. If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP. When LACP (Link Aggregation Control Protocol) and STP are in blocking state, it displays Blocking. XMG1930 Series User’s Guide...
50.2.1 Port Details Click a number in the Port column in the Port Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. XMG1930 Series User’s Guide...
Page 367
This field shows the number of received frames on this port. Errors This field shows the number of received errors on this port. Tx kB/s This field shows the number of kilobytes per second transmitted on this port. XMG1930 Series User’s Guide...
Page 368
This field shows the number of packets (including bad packets) received that were between 256 and 511 octets in length. 512 to This field shows the number of packets (including bad packets) received that were between 512 1023 and 1023 octets in length. XMG1930 Series User’s Guide...
This identifies the SFP port. Vendor This displays the vendor name of the optical transceiver. Part Number This displays the part number of the optical transceiver. Serial Number This displays the serial number of the optical transceiver. XMG1930 Series User’s Guide...
This displays the part number of the optical transceiver. Serial Number This displays the serial number of the optical transceiver. Revision This displays the revision number of the optical transceiver. Date Code This displays the date when the optical transceiver was manufactured. XMG1930 Series User’s Guide...
Alternatively, click Status from any Web Configurator screen and then the Port Status link in the Quick Links section of the Status screen to display the Port Status screen and then click the Utilization link tab. Figure 266 Management > Port Status > Utilization XMG1930 Series User’s Guide...
Page 372
This field shows the transmission speed of data received on this port in kilobytes per second. Rx Utilization% This field shows the percentage of actual received frames on this port as a percentage of the Link speed. XMG1930 Series User’s Guide...
Check the hardware connections. See Section 3.1 on page Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the power adapter or cord to the Switch. If the problem continues, contact the vendor. XMG1930 Series User’s Guide...
I cannot see or access the Login screen in the Web Configurator. Make sure you are using the correct IP address. • The default IP address is http://DHCP-assigned IP (when connecting to a DHCP server) or 192.168.1.1. XMG1930 Series User’s Guide...
Management > Access Control > Remote Management screen for telnet, HTTP and SSH (see Section 38.6 on page 323). Computers not belonging to the secured client set cannot get permission to access the Switch. 51.3 Switch Configuration I lost my configuration settings after I restart the Switch. XMG1930 Series User’s Guide...
Page 377
If you plug the power cable back to the Switch, it will reboot and load the configuration file that was used the last time. For example, if Config 1 was used on the Switch before you accidentally unplugged the Switch, Config 1 will be loaded when rebooting. XMG1930 Series User’s Guide...
In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a Zyxel office for the region in which you bought the device. For Zyxel Communications offices, see https://service-provider.zyxel.com/global/en/contact-us for the latest information.
Page 380
Appendix A Customer Support Czech Republic • Zyxel Communications Czech s.r.o • https://www.zyxel.com/cz/cs/ Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da/ Finland • Zyxel Communications • https://www.zyxel.com/fi/fi/ France • Zyxel France • https://www.zyxel.fr Germany • Zyxel Deutschland GmbH • https://www.zyxel.com/de/de/ Hungary •...
Page 381
Appendix A Customer Support • https://www.zyxel.com/ro/ro Russia • Zyxel Russia • https://www.zyxel.com/ru/ru/ Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • https://www.zyxel.com/sk/sk/ Spain • Zyxel Communications ES Ltd. • https://www.zyxel.com/es/es/ Sweden • Zyxel Communications • https://www.zyxel.com/se/sv/ Switzerland • Studerus AG •...
Page 382
Ecuador • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ South America • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ Middle East Israel • Zyxel Communications Corporation • http://il.zyxel.com/ North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en/ XMG1930 Series User’s Guide...
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by email. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol – a client or server protocol for the world wide web. XMG1930 Series User’s Guide...
Page 384
Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one email server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). XMG1930 Series User’s Guide...
Page 385
Its primary function is to allow users to log into remote host systems. TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. XMG1930 Series User’s Guide...
54 bits 64 bits Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. XMG1930 Series User’s Guide...
Page 387
The following table describes the multicast addresses which are reserved and cannot be assigned to a multicast group. Table 199 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 XMG1930 Series User’s Guide...
Page 388
IA_NA were obtained) a Renew message. If the time T2 is reached and the server does not respond, the client sends a Rebind message to any available server (S2). For an IA_TA, the XMG1930 Series User’s Guide...
Page 389
(from the host) with a neighbor advertisement message. • Neighbor advertisement: A response from a node to announce its link-layer address. • Router solicitation: A request from a host to locate a router that can act as the default router and XMG1930 Series User’s Guide...
Page 390
Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. XMG1930 Series User’s Guide...
Page 391
Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler – a DHCPv6 client. XMG1930 Series User’s Guide...
Page 392
To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) check box to enable it. Click OK to save the change. XMG1930 Series User’s Guide...
Page 393
Windows 10 supports IPv6 by default. DHCPv6 is enabled when you enable IPv6 on a Windows 10 PC. To enable IPv6 in Windows 10: Select Control Panel > Network and Sharing Center. On the left side of the Network and Sharing Center, select Change adapter settings. Right-click your network connection and select Properties. XMG1930 Series User’s Guide...
Page 394
• When you select Automatic (DHCP), the IP address settings and DNS server address setting are set automatically by your router. • When you select Manual, you can manually set your IP address settings and DNS server address. Now your computer can obtain an IPv6 address from a DHCPv6 server. XMG1930 Series User’s Guide...
Regulatory Notice and Statement United States of America The following information applies if you use the product within USA area. US Importer: Zyxel Communications, Inc, 1130 North Miller Street Anaheim, CA92806-2001, https://www.zyxel.com/us/en/ Federal Communications Commission (FCC) EMC Statement • This Switch complies with Part 15 of FCC rules. Operation is subject to the following two conditions: (1) This Switch may not cause harmful interference.
Page 396
– Unplug the power cable before removing the power supply. – If the system has multiple sources of power, disconnect power from the system by unplugging all power cables from the power supply. • CLASS 1 LASER PRODUCT • APPAREIL À LASER DE CLASS 1 XMG1930 Series User’s Guide...
Page 397
Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. XMG1930 Series User’s Guide...
Page 398
Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. XMG1930 Series User’s Guide...
Page 399
Register your product online at www.zyxel.com to receive email notices of firmware upgrades and related information. Trademarks The trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners. XMG1930 Series User’s Guide...
50, 321 back up configuration file aging time Backup Configuration screen air circulation bandwidth control 162, 163 for cooling egress rate All connected ingress rate Setting Wizard setup applications Bandwidth Control screen backbone basic settings bridging XMG1930 Series User’s Guide...
Page 401
DHCP cluster management configuration options and switch passwords Dynamic Host Configuration Protocol cluster manager 344, 346 modes cluster member 344, 346 Relay Agent Information format cluster member firmware upgrade setup XMG1930 Series User’s Guide...
Page 402
DHCPv6 Relay screen FCC interference statement diagnostics fiber cable ping connecting removal Digital Diagnostics Monitoring Interface file transfer using FTP disclaimer command example disposal and recycling information filename convention, configuration file names dual firmware images filtering dust plug XMG1930 Series User’s Guide...
Page 403
Innovation, Science and Economic Development short reach Canada ICES statement grounding installation for safety air circulation GVRP (GARP VLAN Registration Protocol) desktop freestanding rack-mounting transceiver installation scenarios Interface Setup screen hardware installation XMG1930 Series User’s Guide...
Page 404
IPv6 Interface Setup screen link aggregation (trunking) IPv6 Interface Status screen example IPv6 Link-Local Address Setup screen Link Aggregation Control Protocol (LACP) IPv6 Neighbor Setup screen XMG1930 Series User’s Guide...
Page 405
MDIX (Media Dependent Interface Crossover) examples Media Access Control port shut down setup Memory Buffer vs. STP Wizard and SNMP supported MIBs MIB (Management Information Base) mirroring ports models XS1930 MAC (Media Access Control) XMG1930 Series User’s Guide...
Page 406
Standard mode PoE (Power over Ethernet) NCC registration PoE features by model Nebula Cloud Management PoE Setup screen Nebula setup wizard select site PoE standards Nebula Switch Registration screen PoE Status screen XMG1930 Series User’s Guide...
Page 407
MAC address learning setup Port Setup screen port status port details and classifier port utilization priority setting port utilization QoS setting Port VID (PVID) queue weight port VLAN ID, see PVID queuing 202, 203 port VLAN trunking XMG1930 Series User’s Guide...
Page 409
148, 151 connection speed root port installation status 149, 150 removal terminology transceiver slot vs. loop guard Trap Group screen STP Path Cost traps straight-through Ethernet cable destination subnet masking troubleshooting Switch XMG1930 Series User’s Guide...
Page 410
VIDs priority frame warranty VID (VLAN Identifier) note Virtual Local Area Network Web browser pop-up window 47, 376 VLAN Web Configurator acceptable frame type getting help and IGMP snooping home automatic registration login creation 72, 77 XMG1930 Series User’s Guide...
Page 411
Switch IP address ZON utility use for troubleshooting ZyNOS (Zyxel Network Operating System) Zyxel AP Configurator (ZAC) Zyxel Discovery Protocol (ZDP) Zyxel Nebula Mobile App register the Switch Zyxel One Network (ZON) Utility XMG1930 Series User’s Guide...