Page 1 GS1920 Series Intelligent Layer 2 GbE Switch Version 4.10 Edition 1, 11/2013 Quick Start Guide User’s Guide Default Login Details IP Address https://192.168.1.1 User Name admin www.zyxel.com Password 1234 Copyright © 2013 ZyXEL Communications Corporation...
Page 2 Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate. GS1920 Series User’s Guide...
Page 3: Table Of Contents
IP Source Guard ...........................185 Loop Guard ............................208 Layer 2 Protocol Tunneling ........................212 PPPoE ..............................216 Error Disable ............................225 Green Ethernet ............................231 Link Layer Discovery Protocol (LLDP) ....................233 Static Route ............................257 Differentiated Services ........................260 DHCP ..............................264 ARP Setup ............................278 GS1920 Series User’s Guide...
Page 4 Contents Overview Maintenance ............................282 Access Control ............................289 Diagnostic ............................. 311 Syslog ..............................313 Cluster Management ..........................316 MAC Table .............................322 ARP Table .............................325 Path MTU Table ............................327 Configure Clone ............................328 Neighbor Table ............................331 Troubleshooting ............................333 GS1920 Series User’s Guide...
Page 5: Table Of Contents
3.1.1 Gigabit Ethernet Ports ......................26 3.1.2 Mini-GBIC Slots ........................27 3.1.3 LED Mode (only available for GS1920-48HP) .................29 3.2 Rear Panel ............................29 3.2.1 Power Connector ........................29 3.3 LEDs ...............................29 3.4 Reset to Factory Defaults ........................30 3.4.1 Side Panels ..........................31 GS1920 Series User’s Guide...
Page 6 7.1 Overview ............................53 7.1.1 What You Can Do ........................53 7.2 Port Status Summary ........................53 7.2.1 Status: Port Details ......................54 Chapter 8 Basic Setting ............................58 8.1 Overview ............................58 8.1.1 What You Can Do ........................58 8.2 System Information ........................58 GS1920 Series User’s Guide...
Page 7 9.7.1 Configure a Port-based VLAN ....................96 9.8 Technical Reference ..........................98 9.8.1 Create an IP-based VLAN Example ..................98 Chapter 10 Static MAC Forward Setup.......................100 10.1 Overview ............................100 10.1.1 What You Can Do ........................100 10.2 Configuring Static MAC Forwarding ..................100 GS1920 Series User’s Guide...
Page 8 Chapter 14 Bandwidth Control..........................126 14.1 Overview ............................126 14.1.1 What You Can Do ........................126 14.2 Bandwidth Control Setup ......................126 Chapter 15 Broadcast Storm Control .........................128 15.1 Broadcast Storm Control Overview ....................128 15.1.1 What You Can Do ........................128 GS1920 Series User’s Guide...
Page 9 19.2 Port Security Setup ........................145 Chapter 20 Classifier............................148 20.1 Overview ............................148 20.1.1 What You Can Do ........................148 20.1.2 What You Need to Know ......................148 20.2 Configuring the Classifier ......................148 20.2.1 Viewing and Editing Classifier Configuration ..............150 20.3 Classifier Example ........................152 GS1920 Series User’s Guide...
Page 10 24.2 AAA Screens ..........................175 24.3 RADIUS Server Setup .......................175 24.4 TACACS+ Server Setup ......................177 24.5 AAA Setup ............................179 24.6 Technical Reference ........................181 24.6.1 Vendor Specific Attribute .....................181 24.6.2 Supported RADIUS Attributes .....................183 24.6.3 Attributes Used for Authentication ..................183 GS1920 Series User’s Guide...
Page 11 27.2 Configuring Layer 2 Protocol Tunneling ..................213 Chapter 28 PPPoE ..............................216 28.1 PPPoE Intermediate Agent Overview ...................216 28.1.1 What You Can Do ........................216 28.1.2 What You Need to Know ......................216 28.2 The PPPoE Screen ........................219 28.3 PPPoE Intermediate Agent ......................219 GS1920 Series User’s Guide...
Page 12 31.8 LLDP-MED Network Policy ......................253 31.9 LLDP-MED Location ........................254 Chapter 32 Static Route ............................257 32.1 Static Route Overview ........................257 32.1.1 What You Can Do ........................257 32.2 Static Routing ..........................257 32.3 Configuring Static Routing ......................257 Chapter 33 Differentiated Services........................260 GS1920 Series User’s Guide...
Page 13 36.1 Overview ............................282 36.1.1 What You Can Do ........................282 36.2 The Maintenance Screen ......................282 36.2.1 Load Factory Default ......................283 36.2.2 Save Configuration ......................283 36.2.3 Reboot System ........................284 36.3 Firmware Upgrade ........................284 36.4 Restore a Configuration File ......................285 GS1920 Series User’s Guide...
Page 14 39.2 Syslog Setup ..........................313 39.3 Syslog Server Setup ........................314 Chapter 40 Cluster Management ........................316 40.1 Cluster Management Overview ....................316 40.1.1 What You Can Do ........................317 40.2 Cluster Management Status ......................317 40.3 Clustering Management Configuration ..................318 40.4 Technical Reference ........................320 GS1920 Series User’s Guide...
Page 15 46.1 Power, Hardware Connections, and LEDs ..................333 46.2 Switch Access and Login ......................334 46.3 Switch Configuration ........................336 Appendix A Customer Support ......................338 Appendix B Common Services ......................344 Appendix C IPv6 ..........................347 Appendix D Legal Information ......................355 GS1920 Series User’s Guide...
Page 16 Table of Contents Index ..............................358 GS1920 Series User’s Guide...
Page 17: User's Guide
User’s Guide...
Page 19: Getting To Know Your Switch
Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The GS1920 Series consist of the two following models: GS1920-48 and GS1920-48HP. Referring to PoE model(s) in this User's Guide only applies for GS1920-48HP.
Page 20: Bridging Example
Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode) is not feasible for most people due to the expense of replacing all existing Ethernet cables and adapter cards, restructuring your network and complex maintenance. The Switch can provide the same bandwidth GS1920 Series User’s Guide...
Page 21: Ieee 802.1Q Vlan Application Examples
Shared resources such as a server can be used by all ports in the same VLAN as the server. In the following figure only ports that need access to the server need to be part of VLAN 1. Ports can belong to other VLAN groups too. Figure 4 Shared Server Using VLAN Example GS1920 Series User’s Guide...
Page 22: Ways To Manage The Switch
Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. See Section 3.4 on page 30 for how to reset the Switch. GS1920 Series User’s Guide...
Page 23: Hardware Installation And Connection
• Four M5 flat head screws and a #2 Philips screwdriver. Failure to use the proper screws may damage the unit. 2.3.1.1 Precautions • Make sure the rack will safely support the combined weight of all the equipment it contains. GS1920 Series User’s Guide...
Page 24: Attaching The Mounting Brackets To The Switch
Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the rack. GS1920 Series User’s Guide...
Page 25 Figure 6 Mounting the Switch on a Rack Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. Repeat steps to attach the second mounting bracket on the other side of the rack. GS1920 Series User’s Guide...
Page 26: Hardware Panels
The mini-GBIC slots have priority over the Gigabit ports. This means that if a mini-GBIC slot and the corresponding GbE port are connected at the same time, the GbE port will be disabled. Note: The dual personality ports change to fiber mode directly when inserting the fiber module. GS1920 Series User’s Guide...
Page 27: Mini-Gbic Slots
Insert the transceiver into the slot with the exposed section of PCB board facing down. Press the transceiver firmly until it clicks into place. The Switch automatically detects the installed transceiver. Check the LEDs to verify that it is functioning properly. GS1920 Series User’s Guide...
Page 28 Remove the fiber optic cables from the transceiver. Open the transceiver’s latch (latch styles vary). Pull the transceiver out of the slot. Figure 11 Removing the Fiber Optic Cables Figure 12 Opening the Transceiver’s Latch Example Figure 13 Transceiver Removal Example GS1920 Series User’s Guide...
Page 29: Led Mode (Only Available For Gs1920-48Hp)
Each Ethernet port’s LED is changed back to act as a LNK/ACT LED by only) releasing the LED MODE button on the front panel. Green The system is turned on. The system is off or has failed. GS1920 Series User’s Guide...
Page 30: Reset To Factory Defaults
Press the button for more than five seconds until the SYS LED begins to blink and then release it. Wait for the Switch to restart (the SYS LED will be steady green again). This takes up to two minutes. GS1920 Series User’s Guide...
Page 31: Side Panels
IP address of your computer to be in the same subnet as that of the default Switch IP address (192.168.1.1). 3.4.1 Side Panels The reset button is located at the side of the Switch as shown. Figure 16 Side Panel: GS1920-48 Figure 17 Side Panel: GS1920-48HP GS1920 Series User’s Guide...
Page 32: Technical Reference
Technical Reference...
Page 34: The Web Configurator
The login screen appears. The default username is admin and associated default password is 1234. The date and time display as shown if you have not configured a time server nor manually entered a time and date in the General Setup screen. GS1920 Series User’s Guide...
Page 35: The Status Screen
A - Click the menu items to open submenu links, and then click on a submenu link to open the screen in the main window. B, C, D, E - These are quick links which allow you to perform certain tasks no matter which screen you are currently working in. GS1920 Series User’s Guide...
Page 36 This link takes you to a screen where you can configure general identification information about the Switch. Switch Setup This link takes you to a screen where you can set up global Switch parameters such as VLAN type, GARP and priority queues. GS1920 Series User’s Guide...
Page 37 This link takes you to screens where you can configure filtering of unauthorized DHCP and ARP packets in your network. Loop Guard This link takes you to a screen where you can configure protection against network loops that occur on the edge of your network. GS1920 Series User’s Guide...
Page 38: Change Your Password
MAC, status, type. 4.3.1 Change Your Password After you log in for the first time, it is recommended you change the default administrator password. Click Management > Access Control > Logins to display the next screen. GS1920 Series User’s Guide...
Page 39: Saving Your Configuration
Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the management port of the Switch. Filter all traffic to the CPU port. Disable all ports. Misconfigure the text configuration file. Forget the password and/or IP address. GS1920 Series User’s Guide...
Page 40: Resetting The Switch
Figure 21 Web Configurator: Logout Screen 4.8 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. GS1920 Series User’s Guide...
Page 41: Initial Setup Example
In this example, you want to configure port 1 as a member of VLAN 2. Figure 22 Initial Setup Network Example: VLAN Click Advanced Application > VLAN in the navigation panel and click the Static VLAN link. GS1920 Series User’s Guide...
Page 42: Setting Port Vid
VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on that port get sent to VLAN 2. GS1920 Series User’s Guide...
Page 43: Configuring Switch Management Ip Address
Connect your computer to any Ethernet port on the Switch. Make sure your computer is in the same subnet as the Switch. Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurator. See Section 4.2 on page 34 for more information. GS1920 Series User’s Guide...
Page 44 This is the same as the VLAN ID you configure in the Static VLAN screen. Click Add to save your changes back to the run- time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. GS1920 Series User’s Guide...
Page 45: Tutorials
1 and 100 DHCP Client (B) 1 and 100 DHCP Client (C) 1 and 100 Access the Switch through http://192.168.1.1 by default. Log into the Switch by entering the username (default: admin) and password (default: 1234). GS1920 Series User’s Guide...
Page 46 Go to Advanced Application > VLAN > VLAN Port Setting, and set the PVID of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. Figure 27 Tutorial: Tag Untagged Frames GS1920 Series User’s Guide...
Page 47 5 because the DHCP server is connected to port 5. Keep ports 6 and 7 Untrusted because they are connected to DHCP clients. Click Apply. Tutorial: Set the DHCP Server Port to Trusted Figure 29 GS1920 Series User’s Guide...
Page 48: How To Use Dhcp Relay On The Switch
In this example, you have configured your DHCP server (192.168.2.3) and want to have it assign a specific IP address (say 172.16.1.18) to DHCP client A based on the system name, VLAN ID and port number in the DHCP request. Client A connects to the Switch’s port 2 in VLAN 102. GS1920 Series User’s Guide...
Page 49: Creating A Vlan
Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click Apply to save the settings to the run-time memory. Figure 33 Tutorial: Set VLAN Type to 802.1Q Click Advanced Application > VLAN > Static VLAN. GS1920 Series User’s Guide...
Page 50 Figure 34 Tutorial: Create a Static VLAN Click the VLAN Status link in the Static VLAN screen and then the VLAN Port Setting link in the VLAN Status screen. Figure 35 Tutorial: Click the VLAN Port Setting Link GS1920 Series User’s Guide...
Page 51: Configuring Dhcp Relay
Enter the DHCP server’s IP address (192.168.2.3 in this example) in the Remote DHCP Server 1 field. Select default1 or default2 in the Option 82 Profile field. Click Apply to save your changes back to the run-time memory. GS1920 Series User’s Guide...
Page 52: Troubleshooting
You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. You clicked the Save link on the Switch to have your settings take effect. GS1920 Series User’s Guide...
Page 53: System Status And Port Status
54) to display individual port statistics. 7.2 Port Status Summary To view the port statistics, click Status in all web configurator screens to display the Status screen as shown next. Figure 38 Status (for PoE model(s)) GS1920 Series User’s Guide...
Page 54: Status: Port Details
7.2.1 Status: Port Details Click a number in the Port column in the Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. GS1920 Series User’s Guide...
Page 55 This field shows the number of kilobytes per second transmitted on this port. Rx KB/s This field shows the number of kilobytes per second received on this port. Up Time This field shows the total amount of time the connection has been up. GS1920 Series User’s Guide...
Page 56 1024 and 1518 octets in length. Giant This field shows the number of packets (including bad packets) received that were between 1519 octets and the maximum frame size. The maximum frame size varies depending on your switch model. GS1920 Series User’s Guide...
Page 57 Chapter 7 System Status and Port Status GS1920 Series User’s Guide...
Page 58: Basic Setting
(Section 8.9 on page 71) to view IPv6 status and IPv6 configuration. 8.2 System Information In the navigation panel, click Basic Setting > System Info to display the screen as shown. You can check the firmware version number. GS1920 Series User’s Guide...
Page 59 You may choose the temperature unit (Centigrade or Fahrenheit) in this field. Temperature BOARD, MAC and PHY refer to the location of the temperature sensors on the Switch printed circuit board. GS1920 Series User’s Guide...
Page 60: General Setup
Error is displayed. 8.3 General Setup Use this screen to configure general settings such as the system name and time. Click Basic Setting > General Setup in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 61 This field displays the date you open this menu. New Date (yyyy- Enter the new date in year, month and day format. The new date then appears in the mm-dd) Current Date field after you click Apply. GS1920 Series User’s Guide...
Page 62: Introduction To Vlans
In traditional switched environments, all broadcast packets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain. Note: VLAN is unidirectional; it only governs outgoing traffic. GS1920 Series User’s Guide...
Page 63: Switch Setup Screen
Join Timer sets the duration of the Join Period timer for GVRP in milliseconds. Each port has a Join Period timer. The allowed Join Time range is between 100 and 65535 milliseconds; the default is 200 milliseconds. See the chapter on VLAN setup for more background information. GS1920 Series User’s Guide...
Page 64: Ip Setup
192.168.1.1. The subnet mask specifies the network number portion of an IP address. The factory default subnet mask is 255.255.255.0. You can configure up to 64 IP addresses which are used to access and manage the Switch from the ports belonging to the pre-defined VLAN(s). GS1920 Series User’s Guide...
Page 65 Select this option if you don’t have a DHCP server or if you wish to assign static IP address information to the Switch. You need to fill in the following fields when you select this option. IP Address Enter the IP address of your Switch in dotted decimal notation for example 192.168.1.1. GS1920 Series User’s Guide...
Page 66: Port Setup
Click Cancel to clear the selected check boxes in the Delete column. 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the configuration screen. GS1920 Series User’s Guide...
Page 67 GS1920 Series User’s Guide...
Page 68: Poe Status
You can also set priorities so that the Switch is able to reserve and allocate power to certain PDs. Note: The POE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. GS1920 Series User’s Guide...
Page 69 This field shows which ports can receive power from the Switch. You can set this in Section 8.8.1 on page • Disable - The PD connected to this port cannot get power supply. • Enable - The PD connected to this port can receive power. GS1920 Series User’s Guide...
Page 70: Poe Setup
Use this screen to set the priority levels for the Switch in distributing power to PDs. Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen opens. Figure 47 Basic Setting > PoE Setup GS1920 Series User’s Guide...
Page 71: Interface Setup
Use this screen to set IPv6 interfaces on which you can configure an IPv6 address to access and manage the Switch. Click Basic Setting > Interface Setup in the navigation panel to display the configuration screen. GS1920 Series User’s Guide...
Page 72: Ipv6
Click Cancel to clear the Delete check boxes. 8.10 IPv6 Use this screen to view the IPv6 interface status and configure Switch’s management IPv6 addresses. Click Basic Setting > IPv6 in the navigation panel to display the IPv6 status screen as shown next. GS1920 Series User’s Guide...
Page 73: Ipv6 Interface Status
This field displays whether the IPv6 interface is activated or not. 8.10.1 IPv6 Interface Status Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the Basic Setting > IPv6 screen. The following screen opens. GS1920 Series User’s Guide...
Page 74 This field displays the Switch’s link-local IP address and prefix generated by the interface. It Address also shows whether the IP address is preferred, which means it is a valid address and can be used as a sender or receiver address. GS1920 Series User’s Guide...
Page 75 This field displays the address record when the Switch queries the DNS server to resolve domain names. Restart Click Click Here to send a new DHCP request to the DHCPv6 server and update the IPv6 DHCPv6 Client address and DNS information for this interface. GS1920 Series User’s Guide...
Page 76: Ipv6 Configuration
Click the link to go to a screen where you can configure the Switch DHCP settings. Setup 8.10.3 IPv6 Global Setup Use this screen to configure the global IPv6 settings. Click the link next to IPv6 Global Setup in the IPv6 Configuration screen to display the screen as shown next. GS1920 Series User’s Guide...
Page 77: Ipv6 Interface Setup
Use this screen to turn on or off an IPv6 interface and enable stateless autoconfiguration on it. Click the link next to IPv6 Interface Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 53 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Interface Setup GS1920 Series User’s Guide...
Page 78: Ipv6 Link-Local Address Setup
Manually configure a static IPv6 link-local address for the interface. Address Default Set the default gateway IPv6 address for the interface. When an interface cannot find a Gateway routing information for a frame’s destination, it forwards the packet to the default gateway. GS1920 Series User’s Guide...
Page 79: Ipv6 Global Address Setup
Cancel Click Cancel to begin configuring this screen afresh. Clear Click Clear to reset the fields to the factory defaults. Index This is the interface index number. Click on an index number to change the settings. GS1920 Series User’s Guide...
Page 80: Ipv6 Neighbor Discovery Setup
Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. GS1920 Series User’s Guide...
Page 81: Ipv6 Neighbor Setup
To have IPv6 function properly, you should configure a static VLAN with the same ID number in the Advanced Application > VLAN screens. Neighbor Specify the IPv6 address of the neighboring device which can be reached through the Address interface. GS1920 Series User’s Guide...
Page 82: Dhcpv6 Client Setup
Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Click the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 58 Basic Setting > IPv6 > IPv6 Configuration > DHCPv6 Client Setup GS1920 Series User’s Guide...
Page 83 This field displays whether the Switch obtains a list of domain names from the DHCP server. Information This field displays the time interval (in seconds) at which the Switch exchanges other configuration information with a DHCPv6 server again. Refresh Minimum GS1920 Series User’s Guide...
Page 84: Vlan
The remaining twelve bits define the VLAN ID, giving a possible maximum number of 4,096 VLANs. Note that user priority and VLAN ID are independent of each other. A frame with VID (VLAN Identifier) of null (0) is called a priority frame, meaning that only the priority GS1920 Series User’s Guide...
Page 85 Please refer to the following table for common IEEE 802.1Q VLAN terminology. Table 26 IEEE 802.1Q VLAN Terminology VLAN PARAMETER TERM DESCRIPTION VLAN Type Permanent VLAN This is a static VLAN created manually. Dynamic VLAN This is a VLAN configured by a GVRP registration/deregistration process. GS1920 Series User’s Guide...
Page 86: Port Vlan Trunking
1 and 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking port(s). Figure 59 Port VLAN Trunking 9.1.2.3 Select the VLAN Type Select a VLAN type in the Basic Setting > Switch Setup screen. Figure 60 Switch Setup > Select VLAN Type GS1920 Series User’s Guide...
Page 87: Vlan Status
This is the VLAN identification number that was configured in the Static VLAN screen. Elapsed Time This field shows how long it has been since a normal VLAN was registered or a static VLAN was set up. GS1920 Series User’s Guide...
Page 88: Vlan Details
9.3 Configure a Static VLAN Use this screen to configure and view 802.1Q VLAN parameters for the Switch. To configure a static VLAN, click Static VLAN in the VLAN Status screen to display the screen as shown next. GS1920 Series User’s Guide...
Page 89 Click Add to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. GS1920 Series User’s Guide...
Page 90: Configure Vlan Port Settings
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Select this check box to permit VLAN groups beyond the local Switch. Port This field displays the port number. GS1920 Series User’s Guide...
Page 91: Subnet Based Vlans
172.16.1.0/24 (voice services). You also have a subnet based VLAN with priority 5 and VID of 200 for traffic received from IP subnet 192.168.1.0/24 (video services). Lastly, you configure VLAN with priority 3 and VID of 300 for traffic received from IP subnet 10.1.1.0/24 (data services). All GS1920 Series User’s Guide...
Page 92: Configuring Subnet Based Vlan
Click Subnet Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. Note: Subnet based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. Figure 66 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN GS1920 Series User’s Guide...
Page 93: Protocol Based Vlans
VLAN. One advantage of using protocol based VLANs is that priority can be assigned to traffic of the same protocol. Note: Protocol based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. GS1920 Series User’s Guide...
Page 94: Configuring Protocol Based Vlan
Click Protocol Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. Note: Protocol-based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. Figure 68 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN GS1920 Series User’s Guide...
Page 95: Port-Based Vlan Setup
Port-based VLANs are specific only to the Switch on which they were created. Note: When you activate port-based VLAN, the Switch uses a default VLAN ID of 1. You cannot change it. GS1920 Series User’s Guide...
Page 96: Configure A Port-Based Vlan
Select Port Based as the VLAN Type in the Basic Setting > Switch Setup screen and then click Advanced Application > VLAN from the navigation panel to display the next screen. Figure 69 Port Based VLAN Setup (All Connected) GS1920 Series User’s Guide...
Page 97 Chapter 9 VLAN Figure 70 Port Based VLAN Setup (Port Isolation) GS1920 Series User’s Guide...
Page 98: Technical Reference
Select the protocol. Leave the default value IP. Type the VLAN ID of an existing VLAN. In our example we already created a static VLAN with an ID of 5. Type 5. Leave the priority set to 0 and click Add. GS1920 Series User’s Guide...
Page 99 To add more ports to this protocol based VLAN. Click the index number of the protocol based VLAN entry. Click 1 Change the value in the Port field to the next port you want to add. Click Add. GS1920 Series User’s Guide...
Page 100: Static Mac Forward Setup
Chapter 19 on page 145 for more information on port security. Click Advanced Application > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. Figure 72 Advanced Application > Static MAC Forwarding GS1920 Series User’s Guide...
Page 101 This field displays the port where the MAC address shown in the next field will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS1920 Series User’s Guide...
Page 102: Static Multicast Forward Setup
VLAN group. Figure shows frames being forwarded to devices connected to port 3. Figure 75 shows frames being forwarded to ports 2 and 3 within VLAN group 4. Figure 73 No Static Multicast Forwarding GS1920 Series User’s Guide...
Page 103: Configuring Static Multicast Forwarding
Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). Click Advanced Application > Static Multicast Forwarding to display the configuration screen as shown. Figure 76 Advanced Application > Static Multicast Forwarding GS1920 Series User’s Guide...
Page 104 This field displays the port(s) within a identified VLAN group to which frames containing the specified multicast MAC address will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS1920 Series User’s Guide...
Page 105: Filtering
12.2 Configure a Filtering Rule Use this screen to create rules for traffic going through the Switch. Click Advanced Application > Filtering in the navigation panel to display the screen as shown next. Figure 77 Advanced Application > Filtering GS1920 Series User’s Guide...
Page 106 This field displays the VLAN group identification number. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. GS1920 Series User’s Guide...
Page 107: Spanning Tree Protocol
(R)STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a switch to interact with other (R)STP -compliant switches in your network to ensure that only one path exists between any two stations on the network. GS1920 Series User’s Guide...
Page 108 Protocol Data Units) transmitted from the root bridge. If a bridge does not get a Hello BPDU after a predefined interval (Max Age), the bridge assumes that the link to the root bridge is down. This bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a valid network topology. GS1920 Series User’s Guide...
Page 109: Stp Port States
Figure 78 MRSTP Network Example Multiple STP Multiple Spanning Tree Protocol (IEEE 802.1s) is backward compatible with STP/RSTP and addresses the limitations of existing spanning tree protocols (STP and RSTP) in networks to include the following features: GS1920 Series User’s Guide...
Page 110: Spanning Tree Protocol Status Screen
Use the Spanning Tree Configuration screen to activate one of the STP modes on the Switch. Click Configuration in the Advanced Application > Spanning Tree Protocol. Figure 80 Advanced Application > Spanning Tree Protocol > Configuration GS1920 Series User’s Guide...
Page 111: Configure Rapid Spanning Tree Protocol
Use this screen to configure RSTP settings, see Section 13.1 on page 107 for more information on RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 81 Advanced Application > Spanning Tree Protocol > RSTP GS1920 Series User’s Guide...
Page 112 Priority decides which port should be disabled when more than one port forms a loop in a switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. GS1920 Series User’s Guide...
Page 113: Rapid Spanning Tree Protocol Status
(second) message. The root bridge determines Hello Time, Max Age and Forwarding Delay. Max Age (second) This is the maximum time (in seconds) the Switch can wait without receiving a configuration message before attempting to reconfigure. GS1920 Series User’s Guide...
Page 114: Configure Multiple Rapid Spanning Tree Protocol
Table 42 Advanced Application > Spanning Tree Protocol > MRSTP LABEL DESCRIPTION Status Click Status to display the MRSTP Status screen (see Figure 82 on page 113). Tree This is a read only index number of the STP trees. GS1920 Series User’s Guide...
Page 115 The slower the media, the higher the cost-see Table 37 on page 108 for more information. Tree Select which STP tree configuration this port should participate in. GS1920 Series User’s Guide...
Page 116: Multiple Rapid Spanning Tree Protocol Status
Forwarding Delay This is the time (in seconds) the root switch will wait before changing states (that is, (second) listening to learning to forwarding). Note: The listening state does not exist in RSTP. GS1920 Series User’s Guide...
Page 117: Configure Multiple Spanning Tree Protocol
This is the time since the spanning tree was last reconfigured. Change 13.8 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen. Section on page 109 for more information on MSTP. GS1920 Series User’s Guide...
Page 118 Select this to activate MSTP on the Switch. Clear this to disable MSTP on the Switch. Note: You must also activate Multiple Spanning Tree in the Advanced Application > Spanning Tree Protocol > Configuration screen to enable MSTP on the Switch. GS1920 Series User’s Guide...
Page 119 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. GS1920 Series User’s Guide...
Page 120: Multiple Spanning Tree Port Configuration
Click Advanced Application > Spanning Tree Protocol > MSTP > Port in the navigation panel to display the status screen as shown next. See Section on page 109 for more information on MSTP. Figure 86 Advanced Application > Spanning Tree Protocol > MSTP > Port GS1920 Series User’s Guide...
Page 121: Multiple Spanning Tree Protocol Status
Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section on page 109 for more information on MSTP. Note: This screen is only available after you activate MSTP on the Switch. GS1920 Series User’s Guide...
Page 122 This is the path cost from the root port on this Switch to the root switch. Port ID This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. GS1920 Series User’s Guide...
Page 123: Technical Reference
The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP or RSTP, the link for VLAN 2 will be blocked as STP and RSTP allow only one link in the network and block the redundant link. GS1920 Series User’s Guide...
Page 124: Mst Region
Devices that belong to the same MST region are configured to have the same MSTP configuration identification settings. These include the following parameters: • Name of the MST region • Revision level as the unique number for the MST region GS1920 Series User’s Guide...
Page 125: Mst Instance
MST instance are members of the CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. Figure 91 MSTP and Legacy RSTP Network Example GS1920 Series User’s Guide...
Page 126: Bandwidth Control
126) to limit the bandwidth for traffic going through the Switch. 14.2 Bandwidth Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. Figure 92 Advanced Application > Bandwidth Control GS1920 Series User’s Guide...
Page 127 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS1920 Series User’s Guide...
Page 128: Broadcast Storm Control
(DLF) packets the Switch receives per second on the ports. 15.2 Broadcast Storm Control Setup Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. GS1920 Series User’s Guide...
Page 129 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS1920 Series User’s Guide...
Page 130: Mirroring
Click Advanced Application > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 94 Advanced Application > Mirroring GS1920 Series User’s Guide...
Page 131 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS1920 Series User’s Guide...
Page 132: Link Aggregation
When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that GS1920 Series User’s Guide...
Page 133: Link Aggregation Status
Section 17.1 on page 132 for more information. Figure 95 Advanced Application > Link Aggregation Status Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. GS1920 Series User’s Guide...
Page 134: Link Aggregation Setting
LACP - if the ports are configured to join a trunk group via LACP. 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 132 for more information on link aggregation. GS1920 Series User’s Guide...
Page 135 Select dst-ip to distribute traffic based on the packet’s destination IP address. Select src-dst-ip to distribute traffic based on a combination of the packet’s source and destination IP addresses. Port This field displays the port number. GS1920 Series User’s Guide...
Page 136: Link Aggregation Control Protocol
Click Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Section on page 132 for more information on dynamic link aggregation. Figure 97 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP GS1920 Series User’s Guide...
Page 137: Technical Reference
Make your physical connections - make sure that the ports that you want to belong to the trunk group are connected to the same destination. The following figure shows ports 2-5 on switch A connected to switch B. GS1920 Series User’s Guide...
Page 138 Click Apply when you are done. Figure 99 Trunking Example - Configuration Screen Your trunk group 1 (T1) configuration is now complete. GS1920 Series User’s Guide...
Page 139: Port Authentication
At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. GS1920 Series User’s Guide...
Page 140: Port Authentication Configuration
Figure 101 Advanced Application > Port Authentication 18.3 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. In the Port Authentication screen click 802.1x to display the configuration screen as shown. GS1920 Series User’s Guide...
Page 141 Specify the number of seconds the Switch waits for client’s response before re-sending an identity request to the client. Supp-Timeout Specify the number of seconds the Switch waits for client’s response to a challenge secs request before sending another request. GS1920 Series User’s Guide...
Page 142: Guest Vlan
Figure 103 Guest VLAN Example VLAN 100 VLAN 102 Internet Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication > 802.1x screen click Guest Vlan to display the configuration screen as shown. GS1920 Series User’s Guide...
Page 143 Switch. You must also enable IEEE 802.1x authentication on the Switch and the associated ports. Enter the number that identifies the guest VLAN. Make sure this is a VLAN recognized in your network. GS1920 Series User’s Guide...
Page 144 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 145: Port Security
145) to enable port security and disable MAC address learning. You can also enable the port security feature on a port. 19.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 146 Clear this check box to disable the port security feature. The Switch forwards all packets on this port. Address MAC address learning reduces outgoing broadcast traffic. For MAC address learning to occur Learning on a port, the port itself must be active with address learning enabled. GS1920 Series User’s Guide...
Page 147 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 148: Classifier
(or policy) to act upon the traffic that matches the rules. To configure policy rules, refer to Chapter 21 on page 153. Click Advanced Application > Classifier in the navigation panel to display the configuration screen as shown. GS1920 Series User’s Guide...
Page 149 Select Any to apply the rule to all MAC addresses. Address To specify a destination, select the second choice and type a MAC address in valid MAC address format (six hexadecimal character pairs). Layer 3 Specify the fields below to configure a layer 3 classifier. GS1920 Series User’s Guide...
Page 150: Viewing And Editing Classifier Configuration
Classifier screen. To change the settings of a rule, click a number in the Index field. Note: When two rules conflict with each other, a higher layer rule has priority over lower layer rule. GS1920 Series User’s Guide...
Page 151 In the Internet Protocol there is a field, called “Protocol”, to identify the next level protocol. The following table shows some common protocol types and the corresponding protocol number. Refer http://www.iana.org/assignments/protocol-numbers for a complete list. Table 61 Common IP Protocol Types and Protocol Numbers PROTOCOL TYPE PROTOCOL NUMBER ICMP L2TP GS1920 Series User’s Guide...
Page 152: Classifier Example
The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. After you have configured a classifier, you can configure a policy (in the Policy screen) to define action(s) on the classified traffic flow. Figure 108 Classifier: Example GS1920 Series User’s Guide...
Page 153: Policy Rule
21.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to Section 20.2 on page 148 more information. Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 154 Type the number of an outgoing port. Priority Specify a priority level. Rate Limit You can configure the desired bandwidth available to a traffic flow. Traffic that exceeds the maximum bandwidth allocated (in cases where the network is congested) is dropped. GS1920 Series User’s Guide...
Page 155 Click Delete to remove the selected entry from the summary table. Delete Click Cancel to clear the Delete check boxes. Cancel This field displays the policy index number. Click an index number to edit the policy. GS1920 Series User’s Guide...
Page 156: Viewing And Editing Policy Configuration
The figure below shows an example Policy screen where you configure a policy to limit bandwidth on a traffic flow classified using the Example classifier (refer to Section 20.3 on page 152). Figure 111 Policy Example GS1920 Series User’s Guide...
Page 157: Queuing Method
A queue is a given an amount of bandwidth irrespective of the incoming traffic on that port. This queue then moves to the back of the list. The next queue is given GS1920 Series User’s Guide...
Page 158: Configuring Queuing
Use this screen to set priorities for the queues of the Switch. This distributes bandwidth across the different traffic queues. Click Advanced Application > Queuing Method in the navigation panel. Figure 112 Advanced Application > Queuing Method GS1920 Series User’s Guide...
Page 159 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 160: Multicast
IP multicast hosts to learn the IP multicast group membership. It checks IGMP packets passing through it, picks out the group registration information, and configures multicasting accordingly. IGMP snooping allows the Switch to learn multicast groups without you having to manually configure them. GS1920 Series User’s Guide...
Page 161 VLAN while a receiver port can only receive multicast traffic. Once configured, the Switch maintains a forwarding table that matches the multicast stream to the associated multicast group. MVR Modes You can set your Switch to operate in either dynamic or compatible mode. GS1920 Series User’s Guide...
Page 162: Multicast Setup
23.2 Multicast Setup Use this screen to configure IGMP for IPv4 or MLD for IPv6 and set up multicast VLANs. Click Advanced Application > Multicast in the navigation panel. Figure 115 Advanced Application > Multicast Setup GS1920 Series User’s Guide...
Page 163: Ipv4 Multicast Status
This field displays IP multicast group addresses. 23.3.1 IGMP Snooping Click the IGMP Snooping link in the Advanced Application > Multicast > IPv4 Multicast screen to display the screen as shown. See Section 23.1 on page 160 for more information on multicasting. GS1920 Series User’s Guide...
Page 164 01:00:0C:CC:CC:CC and 01:00:0C:CC:CC:CD, are also included in this group. Specify the action to perform when the Switch receives a frame with a reserved multicast address. Select Drop to discard the frame(s). Select Flooding to send the frame(s) to all ports. GS1920 Series User’s Guide...
Page 165 Select the name of the IGMP filtering profile to use for this port. Otherwise, select Profile Default to prohibit the port from joining any multicast group. You can create IGMP filtering profiles in the Multicast > IPv4 Multicast > IGMP Snooping > IGMP Filtering Profile screen. GS1920 Series User’s Guide...
Page 166: Igmp Snooping Vlan
IGMP Snooping link and then the IGMP Snooping VLAN link to display the screen as shown. See Section on page 161 for more information on IGMP Snooping VLAN. Figure 118 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping > IGMP Snooping VLAN GS1920 Series User’s Guide...
Page 167: Igmp Filtering Profile
A profile can be assigned to multiple ports. Click Advanced Application > Multicast > IPv4 Multicast in the navigation panel. Click the IGMP Snooping link and then the IGMP Filtering Profile link to display the screen as shown. GS1920 Series User’s Guide...
Page 168 To delete a rule(s) from a profile, select the rule(s) that you want to remove in the Delete Rule column, then click the Delete button. Cancel Click Cancel to clear the Delete Profile/Delete Rule check boxes. GS1920 Series User’s Guide...
Page 169: General Mvr Configuration
Enter the VLAN ID (1 to 4094) of the multicast VLAN. 802.1p Priority Select a priority level (0-7) with which the Switch replaces the priority in outgoing IGMP or MLD control packets (belonging to this multicast VLAN). GS1920 Series User’s Guide...
Page 170: Mvr Group Configuration
Use this screen to configure MVR IP multicast group address(es). Click the Group Configuration link in the MVR screen. Note: A port can belong to more than one multicast VLAN. However, IP multicast group addresses in different multicast VLANs cannot overlap. GS1920 Series User’s Guide...
Page 171 Delete button to remove the selected entry(ies) from the table. If you delete a multicast VLAN, all multicast groups in this VLAN will also be removed. Cancel Select Cancel to clear the checkbox(es) in the table. GS1920 Series User’s Guide...
Page 172: Mvr Configuration Example
Movie: 230.1.2.50 ~230.1.2.60 VLAN 1 Multicast VID 200 To configure the MVR settings on the Switch, create a multicast VLAN in the MVR screen and set the receiver and source ports. Figure 123 MVR Configuration Example EXAMPLE GS1920 Series User’s Guide...
Page 173 Group Configuration screen. The following figure shows an example where two IPv4 multicast groups (News and Movie) are configured for the multicast VLAN 200. Figure 124 MVR Group Configuration Example EXAMPLE Figure 125 MVR Group Configuration Example EXAMPLE GS1920 Series User’s Guide...
Page 174: Aaa
Switch but user B cannot. The Switch can authorize users based on user accounts configured on the Switch itself or it can use an external server to authorize a large number of users. GS1920 Series User’s Guide...
Page 175: Aaa Screens
RADIUS servers and Section 24.6.2 on page 183 for RADIUS attributes utilized by the authentication features on the Switch. Click on the RADIUS Server Setup link in the AAA screen to view the screen as shown. GS1920 Series User’s Guide...
Page 176 Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external RADIUS server and the Switch. This key is not sent over the network. This key must be the same on the external RADIUS server and the Switch. GS1920 Series User’s Guide...
Page 177: Tacacs+ Server Setup
Use this screen to configure your TACACS+ server settings. See Section on page 175 for more information on TACACS+ servers. Click on the TACACS+ Server Setup link in the AAA screen to view the screen as shown. GS1920 Series User’s Guide...
Page 178 Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. This key is not sent over the network. This key must be the same on the external TACACS+ server and the Switch. GS1920 Series User’s Guide...
Page 179: Aaa Setup
Click Cancel to begin configuring this screen afresh. 24.5 AAA Setup Use this screen to configure authentication and authorization settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. GS1920 Series User’s Guide...
Page 180 • Dot1x: Allow an IEEE 802.1x client to have different bandwidth limit or VLAN ID assigned via the external server. Active Select this to activate authorization for a specified event types. GS1920 Series User’s Guide...
Page 181: Technical Reference
(for example, the Switch). A company can create Vendor Specific Attributes (VSAs) to expand the functionality of a RADIUS server. The Switch supports VSAs that allow you to perform the following actions based on user authentication: GS1920 Series User’s Guide...
Page 182: Tunnel Protocol Attribute
You can configure tunnel protocol attributes on the RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication. The port VLAN settings are fixed and untagged. This will also set the port’s VID. The following table GS1920 Series User’s Guide...
Page 183: Supported Radius Attributes
- The format of the User-Name attribute is $enab#$, where # is the privilege level (1-14). User-Password NAS-Identifier NAS-IP-Address 24.6.3.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 24.6.3.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type GS1920 Series User’s Guide...
Page 184 Chapter 24 AAA - This value is set to Ethernet(15) on the Switch. Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator GS1920 Series User’s Guide...
Page 185: Ip Source Guard
ARP packets in each VLAN. • Use the ARP Inspection Log Status screen (Section 25.8 on page 198) to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. GS1920 Series User’s Guide...
Page 186: What You Need To Know
This field displays how many days, hours, minutes, and seconds the binding is valid; for example, 2d3h4m5s means the binding is still valid for 2 days, 3 hours, 4 minutes, and 5 seconds. This field displays infinity if the binding is always valid (for example, a static binding). GS1920 Series User’s Guide...
Page 187: Ip Source Guard Static Binding
ID as an existing static binding, the new static binding replaces the original one. To open this screen, click Advanced Application > IP Source Guard > Static Binding. Figure 132 Advanced Application > IP Source Guard > Static Binding GS1920 Series User’s Guide...
Page 188: Dhcp Snooping
Click this to clear the Delete check boxes above. 25.4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. GS1920 Series User’s Guide...
Page 189 This field displays how long (in seconds) the Switch waits to update the DHCP snooping database after the current bindings change. This section displays information about the current update and the next update of the DHCP snooping database. GS1920 Series User’s Guide...
Page 190 MAC address and VLAN ID. Invalid interfaces This field displays the number of bindings the Switch ignored because the port number was a trusted interface or does not exist anymore. GS1920 Series User’s Guide...
Page 191: Dhcp Snooping Configure
TFTP server so that they are still available after a restart. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure. GS1920 Series User’s Guide...
Page 192 IP address}/directory, if applicable/file name; for example, tftp://192.168.10.1/database.txt. Timeout interval Enter how long (10-65535 seconds) the Switch tries to complete a specific update in the DHCP snooping database before it gives up. GS1920 Series User’s Guide...
Page 193: Dhcp Snooping Port Configure
To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port. Figure 135 Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port GS1920 Series User’s Guide...
Page 194: Dhcp Snooping Vlan Configure
Switch relays to a DHCP server for each VLAN. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN. Figure 136 Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN GS1920 Series User’s Guide...
Page 195: Dhcp Snooping Vlan Port Configure
Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN > Port. Figure 137 Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN > Port GS1920 Series User’s Guide...
Page 196: Arp Inspection Status
MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection. GS1920 Series User’s Guide...
Page 197: Arp Inspection Vlan Status
25.7 ARP Inspection VLAN Status Use this screen to look at various statistics about ARP packets in each VLAN. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > VLAN Status. GS1920 Series User’s Guide...
Page 198: Arp Inspection Log Status
Use this screen to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status. GS1920 Series User’s Guide...
Page 199 In the ARP Inspection VLAN Configure screen, you can configure the Switch to generate log messages when ARP packets are discarded or forwarded based on the VLAN ID of the ARP packet. See Section 25.9.2 on page 203. Time This field displays when the log message was generated. GS1920 Series User’s Guide...
Page 200: Arp Inspection Configure
Click Clearing log status table in the ARP Inspection Log Status screen to clear the log and reset this counter. See Section 25.8 on page 198. GS1920 Series User’s Guide...
Page 201: Arp Inspection Port Configure
Use this screen to specify whether ports are trusted or untrusted ports for ARP inspection. You can also specify the maximum rate at which the Switch receives ARP packets on each untrusted port. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure > Port. GS1920 Series User’s Guide...
Page 202 1 second, then the Switch accepts a maximum of 15 ARP packets in every one- second interval. If the burst interval is 5 seconds, then the Switch accepts a maximum of 75 ARP packets in every five-second interval. Enter the length (1-15 seconds) of the burst interval. GS1920 Series User’s Guide...
Page 203: Arp Inspection Vlan Configure
This field displays the VLAN ID of each VLAN in the range specified above. If you configure the * VLAN, the settings are applied to all VLANs. Enabled Select Yes to enable ARP inspection on the VLAN. Select No to disable ARP inspection on the VLAN. GS1920 Series User’s Guide...
Page 204: Technical Reference
• The packet is a RELEASE or DECLINE packet, and the source MAC address and source port do not match any of the current bindings. • The rate at which DHCP packets arrive is too high. GS1920 Series User’s Guide...
Page 205 You can configure this setting for each source VLAN. This setting is independent of the DHCP relay settings (Chapter 34 on page 264). 25.10.1.4 Configuring DHCP Snooping Follow these steps to configure DHCP snooping on the Switch. GS1920 Series User’s Guide...
Page 206: Arp Inspection Overview
• They are stored only in volatile memory. • They do not use the same space in memory that regular MAC address filters use. • They appear only in the ARP Inspection screens, not in the MAC Address Filter screens. GS1920 Series User’s Guide...
Page 207 ARP inspection so that the Switch has enough time to build the binding table. Enable ARP inspection on each VLAN. Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. GS1920 Series User’s Guide...
Page 208: Loop Guard
If a switch (not in loop state) connects to a switch in loop state, then it will be affected by the switch in loop state in the following way: GS1920 Series User’s Guide...
Page 209 In this example, the probe packet is sent from port N and returns on another port. As long as loop guard is enabled on port N. The Switch will shut down port N if it detects that the probe packet has returned to the Switch. GS1920 Series User’s Guide...
Page 210: Loop Guard Setup
Click Advanced Application > Loop Guard in the navigation panel to display the screen as shown. Note: The loop guard feature can not be enabled on the ports that have Spanning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Figure 150 Advanced Application > Loop Guard GS1920 Series User’s Guide...
Page 211 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 212: Layer 2 Protocol Tunneling
To emulate a point-to-point topology between two customer switches at different sites, such as A and B, you can enable protocol tunneling on edge switches 1 and 2 for PAgP (Port Aggregation Protocol), LACP or UDLD (UniDirectional Link Detection). GS1920 Series User’s Guide...
Page 213: Configuring Layer 2 Protocol Tunneling
Incoming encapsulated layer 2 protocol packets received on a tunnel port are decapsulated and sent to an access port. 27.2 Configuring Layer 2 Protocol Tunneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 214 Select this option to have the Switch tunnel STP (Spanning Tree Protocol) packets so that STP can run properly across the service provider’s network and spanning trees can be set up based on bridge information from all (local and remote) networks. GS1920 Series User’s Guide...
Page 215 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 216: Pppoe
(Section 28.3.3 on page 223) to enable the PPPoE Intermediate Agent on a VLAN. 28.1.2 What You Need to Know Read on for concepts on ARP that can help you configure the screen in this chapter. GS1920 Series User’s Guide...
Page 217 VLAN ID on the PPPoE packet. The identifier-string, slot ID, port number and VLAN ID are separated from each other by a pound key (#), semi-colon (;), period (.), comma (,), forward slash (/) or space. An Agent Circuit ID Sub- GS1920 Series User’s Guide...
Page 218 Switch adds a vendor-specific tag to the packet and then forwards it to the trusted port(s). • The Switch discards PADO and PADS packets which are sent from a PPPoE server but received on an untrusted port. GS1920 Series User’s Guide...
Page 219: The Pppoe Screen
Select this option to enable the PPPoE intermediate agent globally on the Switch. access-node- Enter up to 20 ASCII characters to identify the PPPoE intermediate agent. Hyphens (-) and identifier spaces are also allowed. The default is the Switch’s host name. GS1920 Series User’s Guide...
Page 220: Pppoe Ia Per-Port
Note: The Switch will drop all PPPoE packets if you enable the PPPoE Intermediate Agent on the Switch and there are no trusted ports. Click the Port link in the Intermediate Agent screen to display the screen as shown. GS1920 Series User’s Guide...
Page 221 Switch automatically uses the PPPoE client’s MAC address. The Remote ID you configure for a specific VLAN on a port (in the Advanced Application > PPPoE > Intermediate Agent > Port > VLAN screen) has the highest priority. GS1920 Series User’s Guide...
Page 222: Pppoe Ia Per-Port Per-Vlan
Enter a string of up to 63 ASCII characters that the Switch adds into the Agent Circuit ID sub-option for this VLAN on the specified port. Spaces are allowed. The Circuit ID you configure here has the highest priority. GS1920 Series User’s Guide...
Page 223: Pppoe Ia For Vlan
Changes in this row are copied to all the VLANs as soon as you make them. Enabled Select this option to turn on the PPPoE Intermediate Agent on a VLAN. Circuit-id Select this option to make the Circuit ID settings for a specific VLAN take effect. GS1920 Series User’s Guide...
Page 224 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 225: Error Disable
Use this screen to view whether the Switch detected that control packets exceeded the rate limit configured for a port and related information. Click the Click Here link next to Errdisable Status link in the Advanced Application > Errdisable screen to display the screen as shown. GS1920 Series User’s Guide...
Page 226 - The Switch drops the additional control packets the port(s) has to handle in every one second. Rate This field displays how many control packets this port can receive or transmit per second. It can be adjusted in CPU Protection. 0 means no rate limit. GS1920 Series User’s Guide...
Page 227: Cpu Protection Configuration
Note: After you configure this screen, make sure you also enable error detection for the specific control packets in the Advanced Application > Errdisable > Errdisable Detect screen. Figure 162 Advanced Application > Errdisable > CPU protection GS1920 Series User’s Guide...
Page 228: Error-Disable Detect Configuration
Changes in this row are copied to all the entries as soon as you make them. Active Select this option to have the Switch detect if the configured rate limit for a specific control packet is exceeded and take the action selected below. GS1920 Series User’s Guide...
Page 229: Error-Disable Recovery Configuration
Use this screen to configure the Switch to automatically undo an action after the error is gone. Click the Click Here link next to Errdisable Recovery in the Advanced Application > Errdisable screen to display the screen as shown. Figure 164 Advanced Application > Errdisable > Errdisable Recovery GS1920 Series User’s Guide...
Page 230 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 231: Green Ethernet
30.2 Configuring Green Ethernet Click Advanced Application > Green Ethernet in the navigation panel to display the screen as shown. Note: EEE, Auto Power Down and Short Reach are not supported on an uplink port. GS1920 Series User’s Guide...
Page 232 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 233: Link Layer Discovery Protocol (Lldp)
The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. The next figure demonstrates that the network devices Switches and Routers (S and R) transmit and receive device information via LLDPPDU and the network manager can query the information using Simple Network Management Protocol (SNMP). GS1920 Series User’s Guide...
Page 234: Lldp-Med Overview
TLV to provision the endpoint device to such that the endpoint device’s network policy and location identification information is updated. Since LLDPPDU updates status and configuration information periodically, network managers may check the result of provision via remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. GS1920 Series User’s Guide...
Page 235: Lldp Screens
Click here to show a screen with LLDP information from the neighboring devices. Status LLDP Click here to show a screen to configure LLDP parameters. Configuration LLDP-MED LLDP-MED Click here to show a screen to configure LLDP-MED (Link Layer Discovery Protocol for Configuration Media Endpoint Devices) parameters. GS1920 Series User’s Guide...
Page 236: Lldp Local Status
This screen displays a summary of LLDP status on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) to display the screen as shown next. Figure 169 Advanced Application > LLDP > LLDP Local Status GS1920 Series User’s Guide...
Page 237: Lldp Local Port Status Detail
This screen displays detailed LLDP status for each port on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) > then, click a port number, for example 1 (Port) in the local port column to display the screen as shown next. GS1920 Series User’s Guide...
Page 238 Chapter 31 Link Layer Discovery Protocol (LLDP) Figure 170 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (Basic TLV) GS1920 Series User’s Guide...
Page 239 Chapter 31 Link Layer Discovery Protocol (LLDP) Figure 171 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (MED TLV) GS1920 Series User’s Guide...
Page 240 Capabilities This field displays which LLDP-MED TLV are capable to transmit on the Switch. • Network Policy • Location Device Type This is the LLDP-MED device class. The Zyxel Switch device type is: • Network Connectivity GS1920 Series User’s Guide...
Page 241: Lldp Remote Status
This is an alpha-numeric string that contains the specific identifier for the port from which this LLDPDU was transmitted. The port ID is identified by the port ID subtype. Port Description This displays a description for the port from which this LLDPDU was transmitted. GS1920 Series User’s Guide...
Page 242: Lldp Remote Port Status Detail
1, in the Index column in the LLDP Remote Status screen to display the screen as shown next. Figure 173 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Basic TLV) GS1920 Series User’s Guide...
Page 243 System Capabilities Supported • System Capabilities Enabled Management This displays the following management address parameters of the remote device. Address TLV • Management Address Subtype • Management Address • Interface Number Subtype • Interface Number • Object Identifier GS1920 Series User’s Guide...
Page 244 LLDP PDU. • Port-Protocol VLAN ID • Port-Protocol VLAN ID Supported • Port-Protocol VLAN ID Enabled Vlan Name TLV This shows the VLAN ID and name for remote device port. • VLAN ID • VLAN Name GS1920 Series User’s Guide...
Page 245 • Port Class • MDI Supported • MDI Enabled • Pair Controlable • PSE Power Pairs • Power Class Max Frame This displays the maximum supported frame size in octets. Size TLV GS1920 Series User’s Guide...
Page 246 Chapter 31 Link Layer Discovery Protocol (LLDP) Figure 175 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED TLV) GS1920 Series User’s Guide...
Page 247 This shows the location information of a caller by its: Identification • Coordinate-base LCI - latitude and longitude coordinates of the Location Configuration Information (LCI) • Civic LCI - IETF Geopriv Civic Address based Location Configuration Information • ELIN - (Emergency Location Identifier Number) GS1920 Series User’s Guide...
Page 248: Lldp Configuration
Power Value - power requirement, in fractions of Watts, in current configuration 31.6 LLDP Configuration Use this creen to configure global LLDP settings on the Switch. Click Advanced Application > LLDP > LLDP Configuration (Click Here) to display the screen as shown next. GS1920 Series User’s Guide...
Page 249 Select whether LLDP transmission and/or reception is allowed on this port. • Disable - not allowed • Tx-Only - transmit only • Rx-Only - receive only • Tx-Rx - transmit and receive Notification Select whether LLDP notification is enabled on this port. GS1920 Series User’s Guide...
Page 250: Lldp Configuration Basic Tlv Setting
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 251: Lldp Configuraion Basic Org-Specific Tlv Setting
Select to enable the sending of IEEE 802.3 Link Aggregation TLVs on the port(s). Aggregation MAC/PHY Select to enable the sending of IEEE 802.3 MAC/PHY Configuration/Status TLVs on the port(s). Max Frame Select to enable the sending of IEEE 802.3 Max Frame Size TLVs on the port(s). Size GS1920 Series User’s Guide...
Page 252: Lldp-Med Configuration
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 253: Lldp-Med Network Policy
This field displays the of index number of the network policy. Click an index number to Index edit the rule. This field displays the port number of the network policy. Port This field displays the application type of the network policy. Application Type GS1920 Series User’s Guide...
Page 254: Lldp-Med Location
Click Cancel to clear the selected checkboxes in the Delete column. 31.9 LLDP-MED Location Click Advanced Application > LLDP > LLDP-MED Location (Click Here) to display the screen as shown next. Figure 181 Advanced Application > LLDP > LLDP-MED Location GS1920 Series User’s Guide...
Page 255 • Street • Leading-Street-Direction • Street-Suffix • Trailing-Street-Suffix • House-Number • House-Number-Suffix • Landmark • Additional-Location • Name • Zip-Code • Building • Unit • Floor • Room-Number • Place-Type • Postal-Community-Name • Post-Office-Box • Additional-Code GS1920 Series User’s Guide...
Page 256 10 octets to 25 octets. Delete Check the locations that you want to remove in the Delete column, then click the Delete button. Cancel Click Cancel to clear the selected check boxes in the delete column. GS1920 Series User’s Guide...
Page 257: Static Route
Click IP Application > Static Routing in the navigation panel to display the screen as shown. Figure 182 IP Application > Static Routing 32.3 Configuring Static Routing Click IP Application > Static Routing > IPv4 Static Route in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 258 This field displays the descriptive name for this route. This is for identification purposes only. Destination This field displays the IP network address of the final destination. Address Subnet Mask This field displays the subnet mask for this destination. GS1920 Series User’s Guide...
Page 259 Switch that will forward the packet to the destination. Metric This field displays the cost of transmission for routing purposes. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS1920 Series User’s Guide...
Page 260: Differentiated Services
Figure 184 DiffServ: Differentiated Service Field DSCP (6 bits) CU (2 bits) DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. GS1920 Series User’s Guide...
Page 261: Activating Diffserv
S - Silver B - Bronze 33.2 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the Switch. Click IP Application > DiffServ in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 262: Dscp-To-Ieee 802.1P Priority Settings
The following table shows the default DSCP-to-IEEE802.1p mapping. Table 122 Default DSCP-IEEE 802.1p Mapping DSCP VALUE 0 – 7 8 – 15 16 – 23 24 – 31 32 – 39 40 – 47 48 – 55 56 – 63 IEEE 802.1p GS1920 Series User’s Guide...
Page 263: Configuring Dscp Settings
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 264: Dhcp
• Global - The Switch forwards all DHCP requests to the same DHCP server. • VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can be configured to relay DHCP requests to different DHCP servers for clients in different VLAN. GS1920 Series User’s Guide...
Page 265: Dhcp Configuration
DHCPv4 to open screens where you can enable and configure DHCPv4 relay settings and create option 82 profiles. Click the link next to DHCPv6 to open a screen where you can configure DHCPv6 relay settings. Figure 188 IP Application > DHCP GS1920 Series User’s Guide...
Page 266: Dhcpv4 Status
The DHCP Relay Agent Information feature adds an Agent Information field (also known as the Option 82 field) to DHCP requests. The Option 82 field is in the DHCP headers of client DHCP request frames that the Switch relays to a DHCP server. GS1920 Series User’s Guide...
Page 267: Dhcpv4 Option 82 Profile
34.4.2 DHCPv4 Option 82 Profile Use this screen to create DHCPv4 option 82 profiles. Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Option 82 Profile link to display the screen as shown. GS1920 Series User’s Guide...
Page 268 Select this option to have the Switch add its MAC address to the client DHCP requests that it relays to a DHCP server. string Enter a string of up to 64 ASCII characters for the remote ID information in this field. Spaces are allowed. GS1920 Series User’s Guide...
Page 269: Configuring Dhcpv4 Global Relay
Use this screen to configure global DHCPv4 relay. Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Global link to display the screen as shown. Figure 191 IP Application > DHCP > DHCPv4 > Global GS1920 Series User’s Guide...
Page 270: Dhcpv4 Global Relay Port Configure
The Switch adds the Circuit ID sub-option and/or Remote ID sub-option specified in the profile to DHCP requests that it relays to a DHCP server. The profile you select here has priority over the one you select in the DHCP > DHCPv4 > Global screen. GS1920 Series User’s Guide...
Page 271: Global Dhcp Relay Configuration Example
(default1 in this example) to set the Switch to send additional information (such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. GS1920 Series User’s Guide...
Page 272: Configuring Dhcpv4 Vlan Settings
Click IP Application > DHCP > DHCPv4 in the navigation panel, then click the VLAN link In the DHCP Status screen that displays. Note: You must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. GS1920 Series User’s Guide...
Page 273 This field displays Relay for the DHCP mode. DHCP Status For DHCP server configuration, this field displays the starting IP address and the size of the IP address pool. For DHCP relay configuration, this field displays the first remote DHCP server IP address. GS1920 Series User’s Guide...
Page 274: Dhcpv4 Vlan Port Configure
Click Clear to reset the fields to the factory defaults. Index This field displays a sequential number for each entry. Click an index number to change the settings. This field displays the VLAN to which the port(s) belongs. GS1920 Series User’s Guide...
Page 275: Example: Dhcp Relay For Two Vlans
(VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.100. Figure 197 DHCP Relay for Two VLANs DHCP:192.168.1.100 VLAN 1 VLAN 2 DHCP:172.16.10.100 For the example network, configure the VLAN Setting screen as shown. GS1920 Series User’s Guide...
Page 276: Dhcpv6 Relay
The interface-ID should not change even after the relay agent restarts. Use this screen to configure DHCPv6 relay settings for a specific VLAN on the Switch. Click IP Application > DHCP > DHCPv6 in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 277 This field displays whether the remote-ID option is added to DHCPv6 requests from clients in this VLAN. Delete Check the entry(ies) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. GS1920 Series User’s Guide...
Page 278: Arp Setup
In the following example, the Switch does not have IP address and MAC address mapping information for hosts A and B in its ARP table, and host A wants to ping host B. Host A sends an GS1920 Series User’s Guide...
Page 279 In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. ARP-Request When the Switch is in ARP-Request learning mode, it updates the ARP table with both ARP replies, gratuitous ARP requests and ARP requests. GS1920 Series User’s Guide...
Page 280: Arp Setup
Figure 200 IP Application > ARP Setup 35.2.1 ARP Learning Use this screen to configure each port’s ARP learning mode. Click the link next to ARP Learning in the IP Application > ARP Setup screen to display the screen as shown next. GS1920 Series User’s Guide...
Page 281 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 282: Maintenance
Table 136 Management > Maintenance LABEL DESCRIPTION Current This field displays which configuration (Configuration 1 or Configuration 2) is currently operating on the Switch. Firmware Click Click Here to go to the Firmware Upgrade screen. Upgrade GS1920 Series User’s Guide...
Page 283: Load Factory Default
Switch IP address (192.168.1.1). 36.2.2 Save Configuration Click Config 1 to save the current configuration settings permanently to Configuration 1 on the Switch. Click Config 2 to save the current configuration settings to Configuration 2 on the Switch. GS1920 Series User’s Guide...
Page 284: Reboot System
Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. Click Management > Maintenance > Firmware Upgrade to view the screen as shown next. GS1920 Series User’s Guide...
Page 285: Restore A Configuration File
To reboot, go to Management > Maintenance > Reboot System and click Config 1 or Config 2. 36.4 Restore a Configuration File Use this screen to restore a previously saved configuration from your computer to the Switch using the Restore Configuration screen. GS1920 Series User’s Guide...
Page 286: Backup A Configuration File
Choose a location to save the file on your computer from the Save in drop-down list box and type a descriptive name for it in the File name list box. Click Save to save the configuration file to your computer. GS1920 Series User’s Guide...
Page 287: Technical Reference
Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. 36.6.3 FTP Command Line Procedure Launch the FTP client on your computer. GS1920 Series User’s Guide...
Page 288: Gui-Based Ftp Clients
• FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. GS1920 Series User’s Guide...
Page 289: Access Control
“trusted computers” from which an administrator may use a service to manage the Switch. 37.2 The Access Control Main Screen Use this screen to display the main screen. Click Management > Access Control in the navigation panel to display the main screen as shown. GS1920 Series User’s Guide...
Page 290: Configuring Snmp
Enter the Get Community string, which is the password for the incoming Get- and GetNext- requests from the management station. The Get Community string is only used by SNMP managers using SNMP version 2c or lower. GS1920 Series User’s Guide...
Page 291: Configuring Snmp Trap Group
From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP traps that should be sent to each SNMP manager. Figure 210 Management > Access Control > SNMP > Trap Group GS1920 Series User’s Guide...
Page 292: Enabling/Disabling Sending Of Snmp Traps On A Port
From the SNMP > Trap Group screen, click Port to view the screen as shown. Use this screen to set whether a trap received on the port(s) would be sent to the SNMP manager. Figure 211 Management > Access Control > SNMP > Trap Group > Port GS1920 Series User’s Guide...
Page 293: Configuring Snmp User
User Information Note: Use the username and password of the login accounts you specify in this screen to create accounts on the SNMP v3 manager. Username Specify the username of a login account on the Switch. GS1920 Series User’s Guide...
Page 294 This field displays the encryption method used for SNMP communication with this user. Group This field displays the SNMP group to which this user belongs. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 295: Setting Up Login Accounts
Only the administrator has read/write access. Old Password Type the existing system password (1234 is the default password when shipped). New Password Enter your new system password. Retype to Retype your new system password for confirmation confirm GS1920 Series User’s Guide...
Page 296: Service Port Access Control
Table 145 Management > Access Control > Service Access Control LABEL DESCRIPTION Services Services you may use to access the Switch are listed here. Active Select this option for the corresponding services that you want to allow to access the Switch. GS1920 Series User’s Guide...
Page 297: Remote Management
Click Management > Access Control > Remote Management to view the screen as shown next. You can specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click Access Control to return to the Access Control screen. GS1920 Series User’s Guide...
Page 298 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 299: Technical Reference
In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext operations. Allows the manager to set values for object variables within an agent. Trap Used by the agent to inform the manager of some events. GS1920 Series User’s Guide...
Page 300 This trap is sent when the fan speed goes OfRange above or below the normal operating range. zyHwMonitorFANSpeedOut 1.3.6.1.4.1.890.1.15.3.26.2.6 This trap is sent when the fan speed is OfRangeRecovered recovered from the out of range to normal operating range. GS1920 Series User’s Guide...
Page 301 This trap is sent when the Switch’s real NotReachableRecovered time clock is up to date. intrusionlock zyPortIntrusionLock 1.3.6.1.4.1.890.1.15.3.61.3.2 This trap is sent when intrusion lock occurs on a port. loopguard zyLoopGuardLoopDetect 1.3.6.1.4.1.890.1.15.3.45.2.1 This trap is sent when loopguard shuts down a port. GS1920 Series User’s Guide...
Page 302 The trap is sent when entries in the remote database have any updates. Link Layer Discovery Protocol (LLDP), defined as IEEE 802.1ab, enables LAN devices that support LLDP to exchange their configured settings. This helps eliminate configuration mismatch issues. GS1920 Series User’s Guide...
Page 303 This trap is sent when the OfRangeRecovered transceiver supply voltage is recovered from the out of normal operating range. zyTransceiverDdmiTxBiasOutOf 1.3.6.1.4.1.890.1.15.3.84.3.10 This trap is sent when the RangeRecovered transmitter laser bias current is recovered from the out of normal operating range. GS1920 Series User’s Guide...
Page 304 1.3.6.1.2.1.80.0.3 This trap is sent when a ping test is completed. traceroute traceRouteTestFailed 1.3.6.1.2.1.81.0.2 This trap is sent when a traceroute test fails. traceRouteTestCompleted 1.3.6.1.2.1.81.0.3 This trap is sent when a traceroute test is completed. GS1920 Series User’s Guide...
Page 305: Introduction To Https
HTTPS connection requests from an SSL-aware web browser go to port 443 (by default) on the Switch’s WS (web server). HTTP connection requests from a web browser go to port 80 (by default) on the Switch’s WS (web server). GS1920 Series User’s Guide...
Page 306 When you attempt to access the Switch HTTPS server, a screen with the message "There is a problem with this website's security certificate." may display. If that is the case, click Continue to this website (not recommended) to proceed to the web configurator login screen. GS1920 Series User’s Guide...
Page 307 Certificate Error next to the address bar and click View certificates. Figure 220 Certificate Error (Internet Explorer 7 or 8) EXAMPLE Click Install Certificate... and follow the on-screen instructions to install the certificate in your browser. GS1920 Series User’s Guide...
Page 308 If that is the case, click I Understand the Risks and then the Add Exception... button. Figure 222 Security Alert (Mozilla Firefox) Confirm the HTTPS server URL matches. Click Confirm Security Exception to proceed to the web configurator login screen. GS1920 Series User’s Guide...
Page 309 Internet Explorer appears. The lock displayed in the bottom right of the browser status bar (in 6 or Internet Explorer Mozilla Firefox) or next to the address bar (in 7 or 8) denotes a secure connection. GS1920 Series User’s Guide...
Page 310 Chapter 37 Access Control Figure 224 Example: Lock Denoting a Secure Connection EXAMPLE GS1920 Series User’s Guide...
Page 311: Diagnostic
38.2 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests. Figure 225 Management > Diagnostic GS1920 Series User’s Guide...
Page 312 Enter a time interval (in minutes) and click Blink to show the actual location of the Switch between several devices in a rack. The default time interval is 30 minutes. Click Stop to have the Switch terminate the blinking locater LED. GS1920 Series User’s Guide...
Page 313: Syslog
39.2 Syslog Setup Use this screen to configure the device’s system logging settings. Click Management > Syslog in the navigation panel to display this screen. The syslog feature sends logs to an external syslog server. GS1920 Series User’s Guide...
Page 314: Syslog Server Setup
Click Cancel to begin configuring this screen afresh. 39.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to view the screen as shown next. Use this screen to configure a list of external syslog servers. GS1920 Series User’s Guide...
Page 315 This field displays the severity level of the logs that the device is to send to this syslog server. Delete Select an entry’s Delete check box and click Delete to remove the entry. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 316: Cluster Management
The switches being managed by the cluster manager switch. In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. Figure 228 Clustering Application Example GS1920 Series User’s Guide...
Page 317: What You Can Do
Index column is a hyperlink leading to the cluster member switch’s web configurator (see Figure 231 on page 320). MacAddr This is the cluster member switch’s hardware MAC address. Name This is the cluster member switch’s System Name. GS1920 Series User’s Guide...
Page 318: Clustering Management Configuration
40.3 Clustering Management Configuration Use this screen to configure clustering management. Click Management > Cluster Management > Configuration to display the next screen. Figure 230 Management > Cluster Management > Configuration EXAMPLE GS1920 Series User’s Guide...
Page 319 This is the cluster member switch’s model name. Remove Select this checkbox and then click the Remove button to remove a cluster member switch from the cluster. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 320: Technical Reference
Figure 231 Cluster Management: Cluster Member Web Configurator Screen example example 40.4.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. GS1920 Series User’s Guide...
Page 321 410AAHW0.bin member switch. This is the cluster member switch’s firmware name as seen in the cluster fw-00-a0-c5-01-23-46 manager switch. This is the cluster member switch’s configuration file name as seen in the config-00-a0-c5-01-23-46 cluster manager switch. GS1920 Series User’s Guide...
Page 322: Mac Table
Too much port flooding leads to network congestion. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. GS1920 Series User’s Guide...
Page 323: Viewing The Mac Table
41.2 Viewing the MAC Table Use this screen to check whether the MAC address is dynamic or static. Click Management > MAC Table in the navigation panel to display the following screen. Figure 234 Management > MAC Table GS1920 Series User’s Guide...
Page 324 This is the VLAN group to which this frame belongs. Port This is the port where the above MAC address is forwarded. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). GS1920 Series User’s Guide...
Page 325: Arp Table
MAC address that replied. 42.2 Viewing the ARP Table Use the ARP table to view IP-to-MAC address mapping(s) and remove specific dynamic ARP entries. Click Management > ARP Table in the navigation panel to open the following screen. GS1920 Series User’s Guide...
Page 326 This shows 0 for a static entry. Type This shows whether the IP address is dynamic (learned by the Switch) or static (manually configured in the Basic Setting > IP Setup or IP Application > ARP Setup > Static ARP screen). GS1920 Series User’s Guide...
Page 327: Path Mtu Table
This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. GS1920 Series User’s Guide...
Page 328: Configure Clone
This chapter shows you how you can copy the settings of one port onto other ports. 44.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. GS1920 Series User’s Guide...
Page 329 Select which port settings (you configured in the Basic Setting menus) should be copied to the destination port(s). Advanced Select which port settings (you configured in the Advanced Application menus) should be Application copied to the destination ports. GS1920 Series User’s Guide...
Page 330 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 331: Neighbor Table
This field displays the IPv6 address of the Switch or a neighboring device. Address This field displays the MAC address of the IPv6 interface on which the IPv6 address is configure or the MAC address of the neighboring device. GS1920 Series User’s Guide...
Page 332 • dynamic (D): The IP address to MAC address can be successfully resolved using IPv6 Neighbor Discovery protocol. Is it similar as IPv4 ARP (Address Resolution protocol). • static (S): The interface address is statically configured. GS1920 Series User’s Guide...
Page 333: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 3.3 on page Check the hardware connections. See Section 46.1 on page 333. Inspect your cables for damage. Contact the vendor to replace any damaged cables. GS1920 Series User’s Guide...
Page 334: Switch Access And Login
Reset the device to its factory defaults, and try to access the Switch with the default IP address. Section 3.4 on page 30. If the problem continues, contact the vendor, or try one of the advanced suggestions. GS1920 Series User’s Guide...
Page 335 Switch. To avoid unauthorized access, configure the secured client setting in the Management > Access Control > Remote Management screen. Computers not belonging to the secured client set cannot get permission to access the Switch. GS1920 Series User’s Guide...
Page 336: Switch Configuration
Click Save at the top right corner of the web configurator to save the configuration permanently. See also Section 36.5 on page 286 for more information about how to save your configuration. GS1920 Series User’s Guide...
Page 337 Chapter 46 Troubleshooting GS1920 Series User’s Guide...
Page 338: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 339 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de Belarus • ZyXEL BY • http://www.zyxel.by...
Page 340 Appendix A Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland • ZyXEL Communications •...
Page 341 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 342 Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ GS1920 Series User’s Guide...
Page 343 Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za GS1920 Series User’s Guide...
Page 344: Appendix B Common Services
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world wide web. GS1920 Series User’s Guide...
Page 345 Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). GS1920 Series User’s Guide...
Page 346 TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. GS1920 Series User’s Guide...
Page 347: Appendix C Ipv6
A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 167 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits GS1920 Series User’s Guide...
Page 348: Loopback Address
The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 169 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 GS1920 Series User’s Guide...
Page 349 (beginning with fe80). When the interface is connected to a network with a router and the Switch is set to automatically obtain an IPv6 network prefix from the router for the interface, it generates another address which GS1920 Series User’s Guide...
Page 350 The DHCP relay agent can add the remote identification (remote-ID) option and the interface-ID option to the Relay-Forward DHCPv6 messages. The remote-ID option carries a user-defined string, In IPv6, all network interfaces can be associated with several addresses. GS1920 Series User’s Guide...
Page 351 When the Switch needs to send a packet, it first consults the destination cache to determine the next hop. If there is no matching entry in the destination cache, the Switch uses the prefix list to GS1920 Series User’s Guide...
Page 352 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. GS1920 Series User’s Guide...
Page 353 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. GS1920 Series User’s Guide...
Page 354 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 GS1920 Series User’s Guide...
Page 355: Appendix D Legal Information
This publication is subject to change without notice. Trademarks ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
Page 356: Zyxel Limited Warranty
è composta l’apparecchiatura. Lo smaltimento abusivo del prodotto da parte del detentore comporta l’applicazione delle sanzioni amministrative previste dalla normativa vigente." CE Marking GS1920 Series User’s Guide...
Page 357 Appendix D Legal Information Environmental Product Declaration GS1920 Series User’s Guide...
Page 358 Class of Service (CoS) configuring classifier syslog messages 148, 150 and QoS trusted ports editing authentication example setup overview Authentication and Authorization, see AAA setup 148, 150 authorization viewing setup cloning a port See port cloning GS1920 Series User’s Guide...
Page 359 Ethernet settings DHCP configuration options relay example setup fan speed DHCP relay option 82 FCC interference statement DHCP snooping file transfer using FTP 45, 186, 204 configuring command example DHCP relay option 82 filename convention, configuration GS1920 Series User’s Guide...
Page 360 GVRP (GARP VLAN Registration Protocol) ARP inspection 186, 206 DHCP snooping 186, 204 static bindings IP subnet mask IPv6 hardware installation addressing EUI-64 hardware monitor global address hardware overview interface ID hello time link-local address hops Neighbor Discovery Protocol GS1920 Series User’s Guide...
Page 361 Link Layer Discovery Protocol (LLDP ) 233, 234 management port LLDP (Link Layer Discovery Protocol) managing the device LLDP-MED (Link Layer Discovery Protocol for Media good habits Endpoint Devices) using FTP. See FTP. lockout man-in-the-middle attacks login GS1920 Series User’s Guide...
Page 362 Multiple Rapid Spanning Tree Protocol port mirroring 130, 131 direction Multiple RSTP egress Multiple Spanning Tree Protocol, See MSTP 107, 109 ingress Multiple STP port redundancy port security configuration limit MAC address learning group configuration MAC address learning network example GS1920 Series User’s Guide...
Page 363 PVID (Priority Frame) service port Simple Network Management Protocol, see SNMP Small Form-factor Pluggable (SFP) SNMP agent and MIB and classifier authentication queue weight communities queuing management model manager network components queuing method 157, 159 object variables GS1920 Series User’s Guide...
Page 364 Hello Time transceivers 112, 113, 115, 116 how it works installation Max Age removal 112, 113, 115, 116 path cost traps 108, 113, 115 port priority destination 112, 115 port state trunk group root port trunking GS1920 Series User’s Guide...
Page 365 ZyNOS (ZyXEL Network Operating System) VLAN acceptable frame type automatic registration ingress filtering introduction 62, 84 number of VLANs port number port settings port-based VLAN port-based, all connected port-based, isolation port-based, wizard PVID static VLAN status 87, 88 GS1920 Series User’s Guide...
Page 366 Index GS1920 Series User’s Guide...

This manual is also suitable for:

Gs1920-48 Gs1920-48p

ZyXEL Communications GS1920 Series User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Getting to Know Your Switch

Chapter 2 Hardware Installation and Connection

Chapter 3 Hardware Panels

Part II: Technical Reference

Technical Reference

Chapter 4 The Web Configurator

Chapter 5 Initial Setup Example

Chapter 6 Tutorials

Chapter 7 System Status and Port Status

Chapter 8 Basic Setting

Chapter 9 VLAN

Chapter 10 Static MAC Forward Setup

Chapter 11 Static Multicast Forward Setup

Chapter 12 Filtering

Chapter 13 Spanning Tree Protocol

Chapter 14 Bandwidth Control

Chapter 15 Broadcast Storm Control

Chapter 16 Mirroring

Chapter 17 Link Aggregation

Chapter 18 Port Authentication

Chapter 19 Port Security

Chapter 20 Classifier

Chapter 21 Policy Rule

Chapter 22 Queuing Method

Chapter 23 Multicast

Chapter 24 AAA

Chapter 25 IP Source Guard

Chapter 26 Loop Guard

Chapter 27 Layer 2 Protocol Tunneling

Chapter 28 Pppoe

Chapter 29 Error Disable

Chapter 30 Green Ethernet

Chapter 31 Link Layer Discovery Protocol (LLDP)

Chapter 32 Static Route

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications GS1920 Series

Summary of Contents for ZyXEL Communications GS1920 Series