Page 2
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
GS-3012/GS-3012F User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase. During the warranty period and upon...
GS-3012/GS-3012F User’s Guide Interference Statements and Warnings FCC Interference Statement This switch complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This switch may not cause harmful interference. (2) This switch must accept any interference received, including interference that may cause undesired operations.
GS-3012/GS-3012F User’s Guide Customer Support If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation offices worldwide, in one of the following ways: Contacting Customer Support When you contact your customer support representative, have the following information ready: Product model and serial number.
Page 6
GS-3012/GS-3012F User’s Guide 7METHOD SUPPORT E-MAIL TELEPHONE WEB SITE REGULAR MAIL SALES E-MAIL FTP SITE LOCATION ZyXEL Communications A/S support@zyxel.no +47 22 80 61 80 www.zyxel.no Nils Hansens vei 13 NORWAY sales@zyxel.no +47 22 80 61 81 0667 Oslo Norway ZyXEL Communications info@pl.zyxel.com...
List of Tables................................xix List of Charts ................................xxi Preface .................................. xxii Part I ........................................ I Chapter 1 Getting to Know the GS-3012 Series .................... 1-1 Introduction ..........................1-1 Features..........................1-1 Applications ........................... 1-3 Part II ......................................II Chapter 2 Hardware Installation........................
Page 8
GS-3012/GS-3012F User’s Guide About System Statistics and Information................5-1 Port Status Summary ......................5-1 Chapter 6 Basic Setting..........................6-1 Introducing the Basic Setting Screens .................. 6-1 System Information ....................... 6-1 General Setup ........................6-3 Introduction to VLANs ......................6-6 Switch Setup Screen ......................6-6 IP Setup..........................
Page 9
GS-3012/GS-3012F User’s Guide Chapter 13 Mirroring ............................13-1 13.1 Introduction to Port Mirroring ....................13-1 13.2 Port Mirroring Configuration....................13-1 Chapter 14 Link Aggregation.......................... 14-1 14.1 Introduction to Link Aggregation ..................14-1 14.2 Link Aggregation Protocol Status ..................14-2 14.3 Link Aggregation Setup .......................
Page 10
GS-3012/GS-3012F User’s Guide 20.6 General MVR Configuration ....................20-7 20.7 MVR Group Configuration ....................20-9 Part VI ......................................VI Chapter 21 Routing Protocol .......................... 21-1 21.1 Static Route......................... 21-1 Chapter 22 DHCP Relay..........................22-1 22.1 DHCP Relay Overview ......................22-1 22.2...
Page 11
GS-3012/GS-3012F User’s Guide Chapter 27 Cluster Management ........................27-1 27.1 Introduction to Cluster Management..................27-1 27.2 Cluster Management Status ....................27-2 27.3 Configuring Cluster Management ..................27-4 Chapter 28 MAC Table ........................... 28-1 28.1 Introduction to MAC Table ....................28-1 28.2...
Page 12
GS-3012/GS-3012F User’s Guide 32.2 VLAN Databases......................... 32-1 32.3 Configuring Tagged VLAN ....................32-1 32.4 Global VLAN1Q Tagged VLAN Configuration Commands..........32-2 32.5 Port VLAN Commands ......................32-4 32.6 Enable VLAN........................32-7 32.7 Disable VLAN ........................32-7 32.8 Show VLAN Setting......................32-7 Part VIII .......................................
Page 17
GS-3012/GS-3012F User’s Guide Figure 31-10 CLI: Backup Configuration Example....................31-6 Figure 31-11 CLI: Restore Configuration Example ....................31-6 Figure 31-12 CLI: boot config Command Example ....................31-7 Figure 31-13 CLI: reload config Command Example....................31-7 Figure 31-14 CLI: Reset to the Factory Default Example ..................31-7 Figure 31-15 no mirror-port Command Example ....................
Page 18
GS-3012/GS-3012F User’s Guide Figure 32-9 no vlan Command Example......................... 32-7 Figure 32-10 show vlan Command Example ......................32-7 xviii Lists of Figures...
Category 5 wiring to each customer. About the GS-3012 There are two GS-3012 models. The GS-3012 DC model requires DC power supply input of -48 VDC to -60 VDC, 1.84A Max. The GS-3012 AC model requires 100~240VAC/1.5A power.
Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you.
This chapter describes the key features, benefits and applications of the GS-3012 series. 1.1 Introduction The GS-3012 and GS-3012F are layer 2 stand-alone Gigabit Ethernet switches. There are 100/1000 Mbps ports for electrical Ethernet connections and mini GBIC slots for optical uplink connections. See the appendices for details on the number of 100/1000 Mbps ports and mini GBIC slots on each model.
Port Mirroring allows you to analyze one port’s traffic from another. Security System management password protection Port-based VLAN IEEE 802.1Q VLAN 802.1x Authentication Limit dynamic port MAC address learning Static MAC address filtering Secure SHell communication protocol Getting to Know the GS-3012 Series...
In this example, all computers connected directly or indirectly to the GS can share super high-speed applications on the Gigabit server. To expand the network, simply add more networking devices such as switches, routers, firewalls, print servers etc. Getting to Know the GS-3012 Series...
Full-duplex mode operation only applies to point-to-point access (for example, when attaching the switch to a workstation, server, or another switch). When connecting to hubs, use a standard cascaded connection set at half-duplex operation. Getting to Know the GS-3012 Series...
Ports in the same VLAN group share the same broadcast domain thus increase network performance through reduced broadcast traffic. VLAN groups can be modified at any time by adding, moving or changing ports without any re-cabling. Getting to Know the GS-3012 Series...
In this example, only ports that need access to the server need belong to VLAN 1 while they can belong to other VLAN groups too. Figure 1-5 Shared Server Using VLAN Example Getting to Know the GS-3012 Series...
Hardware Installation and Connections Part II Hardware Installation and Connections This part acquaints you with installing the switch, instructs you on how to make the hardware connections and explains the front panel LEDs.
GS-3012/GS-3012F User’s Guide Chapter 2 Hardware Installation This chapter shows two switch installation scenarios. 2.1 Installation Scenarios The switch can be placed on a desktop or rack-mounted on a standard EIA rack. Use the rubber feet in a desktop installation and the brackets in a rack-mounted installation.
GS-3012/GS-3012F User’s Guide 2.1.2 Rack-Mounted Installation The switch can be mounted on an EIA standard size, 19-inch rack or in a wiring closet with other equipment. Follow the steps below to mount your switch on a standard EIA rack using a rack-mounting kit.
Only a qualified technician should service or disassemble this device. 3.2 Front Panel The following figure shows the front panel of the GS-3012. The front panel contains the switch LEDs, RJ-45 gigabit ports, mini GBIC ports and a console and management port for local management.
The switch has 100/1000Mbps auto-negotiating, auto-crossover Gigabit ports. The speed of the Gigabit ports can be 100Mbps or 1000Mbps and the duplex mode can be half duplex (for 100 Mbps) or full duplex. The GS-3012’s mini GBIC slots are paired with Gigabit ports. The GS-3012F’s Gigabit ports are paired with mini GBIC slots.
GS-3012/GS-3012F User’s Guide Auto-crossover All ports are auto-crossover, that is auto-MDIX ports (Media Dependent Interface Crossover), so you may use either a straight-through Ethernet cable or crossover Ethernet cable for all Gigabit port connections. Auto-crossover ports automatically sense whether they need to function as crossover or straight ports, so crossover cables can connect both computers and switches/hubs.
GS-3012/GS-3012F User’s Guide Figure 3-3 Transceiver Installation Example Figure 3-4 Installed Transceiver Transceiver Removal Use the following steps to remove a mini GBIC transceiver (SFP module). Open the transceiver’s latch (latch styles vary). Pull the transceiver out of the slot.
The following figure shows the rear panel of the GS-3012F. The rear panel contains the ventilation holes, a connector for external backup power supply (BPS), the power receptacle and the power switch (for DC model). The GS-3012 rear panels are similar. Hardware Connections...
GS-3012/GS-3012F User’s Guide Figure 3-7 GS-3012F Rear Panel: AC Model Figure 3-8 GS-3012F Rear Panel: DC Model 3.3.1 Power Connector Make sure you are using the correct power source as shown on the panel. To connect the power to the AC power model, insert the female end of power cord to the power receptacle on the rear panel.
GS-3012/GS-3012F User’s Guide Figure 3-9 GS-3012 Front Panel LEDs Figure 3-10 GS-3012F Front Panel LEDs The following table describes the LEDs on the front panel. Table 3-2 Front Panel LED Descriptions COLOR STATUS DESCRIPTION Green Blinking The system is receiving power from the backup power supply.
GS-3012/GS-3012F User’s Guide Table 3-2 Front Panel LED Descriptions COLOR STATUS DESCRIPTION There is a hardware failure. The system is functioning normally. Mini GBIC Slots Green The link to this port is up. The link to this port is not connected.
Page 47
GS-3012/GS-3012F User’s Guide You can access the command line interface using a terminal emulation program on a computer connected to the switch console port (see Section 3.2.1) or access the switch using Telnet. The next part of this guide discusses configuring the switch using the web configurator.
Getting Started Part III Getting Started This part introduces you to the web configurator, describes the Status and Port Details screens and shows you how to configure the Basic Setting screens.
GS-3012/GS-3012F User’s Guide Chapter 4 Introducing the Web Configurator This section introduces the configuration and functions of the web configurator. 4.1 Introduction The embedded web configurator allows you to manage the switch from anywhere through a standard browser such as Microsoft Internet Explorer or Netscape Navigator.
GS-3012/GS-3012F User’s Guide Click Status to view current device statistics. Click here for help on Navigation Panel. configuring a Click on a tab to Click Logout to exit screen. display related links. the web configurator. Figure 4-2 Web Configurator Home Screen (Status) In the navigation panel, click a main link to reveal a list of submenu links.
GS-3012/GS-3012F User’s Guide Table 4-1 Navigation Panel Sub-links Overview BASIC SETTING ADVANCED IP APPLICATION MANAGEMENT APPLICATION The following table lists the various web configurator screens within the sub-links. Table 4-2 Web Configurator Screen Sub-links Details BASIC SETTING ADVANCED APPLICATION IP APPLICATION...
GS-3012/GS-3012F User’s Guide Table 4-2 Web Configurator Screen Sub-links Details BASIC SETTING ADVANCED APPLICATION IP APPLICATION MANAGEMENT Port Authentication Status RADIUS Cluster Management Configuration 802.1x MAC Table Port Security ARP Table Queuing Method Classifier Policy Rule Multicast Multicast Status Multicast Setting IGMP Filtering Profile The following table summarizes these sub-links in the navigation panel.
GS-3012/GS-3012F User’s Guide Table 4-3 Navigation Panel Sub-link Descriptions LABEL DESCRIPTION Mirroring This link takes you to screens where you can copy traffic from one port or ports to another port in order that you can examine the traffic from the first port without interference...
GS-3012/GS-3012F User’s Guide Figure 4-3 Web Configurator: Change Password at Login 4.4 Switch Lockout You can be locked out from managing the switch if another administrator is currently logged in. You must wait until the other administrator has logged out before you can log in.
GS-3012/GS-3012F User’s Guide be reset to the default of 9600bps with 8 data bit, no parity, one stop bit and flow control set to none. The password will also be reset to “1234” and the IP address to 192.168.1.1. To upload the configuration file, do the following: Connect to the console port using a computer with terminal emulation software.
GS-3012/GS-3012F User’s Guide Figure 4-5 Web Configurator: Logout Screen 4.5.2 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen.
GS-3012/GS-3012F User’s Guide Chapter 5 System Status and Port Details This chapter describes the system status (web configurator home page) and port details screens. 5.1 About System Statistics and Information The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details.
GS-3012/GS-3012F User’s Guide Table 5-1 Status LABEL DESCRIPTION Port This identifies the Gigabit port. Click a port number to display the Port Details screen (refer to Section 5.2.1). Link This field displays the speed (either 10M for 10Mbps, 100M for 100Mbps or 1000M for 1000Mbps) and the duplex (F for full duplex or H for half duplex).
GS-3012/GS-3012F User’s Guide Figure 5-2 Status: Port Details The following table describes the labels in this screen. Table 5-2 Status: Port Details LABEL DESCRIPTION Port Info Port NO. This field identifies the Gigabit port described in this screen. Link This field shows whether the port connection is down, and the speed/duplex mode.
Page 62
GS-3012/GS-3012F User’s Guide Table 5-2 Status: Port Details LABEL DESCRIPTION Tx KB/s This field shows the number kilobytes per second transmitted on this port. Rx KB/s This field shows the number of kilobytes per second received on this port. Up Time This field shows the total amount of time the connection has been up.
Page 63
GS-3012/GS-3012F User’s Guide Table 5-2 Status: Port Details LABEL DESCRIPTION Runt This field shows the number of frames received that were too short (shorter than 64 octets), including the ones with CRC errors. Distribution This field shows the distribution of good packets (unicast, multicast and broadcast) received.
GS-3012/GS-3012F User’s Guide Chapter 6 Basic Setting This chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup and Port Setup screens. 6.1 Introducing the Basic Setting Screens The System Info screen displays general switch information (such as firmware version number) and hardware polling information (such as fan speeds).
GS-3012/GS-3012F User’s Guide Figure 6-1 System Info The following table describes the labels in this screen. Table 6-1 System Info LABEL DESCRIPTION System Name This field displays the switch 's model name. ZyNOS F/W This field displays the version number of the switch 's current firmware including the date Version created.
GS-3012/GS-3012F User’s Guide Table 6-1 System Info LABEL DESCRIPTION MAX This field displays the maximum temperature measured at this sensor. MIN This field displays the minimum temperature measured at this sensor. Threshold This field displays the upper temperature limit at this sensor.
GS-3012/GS-3012F User’s Guide Figure 6-2 General Setup Table 6-2 General Setup LABEL DESCRIPTION System Name Choose a descriptive name for identification purposes. This name consists of up to 32 printable characters; spaces are allowed. Location Enter the geographic location (up to 32 characters) of your switch.
Page 69
GS-3012/GS-3012F User’s Guide Table 6-2 General Setup LABEL DESCRIPTION Login Precedence Configure the local user accounts in the Access Control Logins screen. The RADIUS is an external server. Use this drop-down list box to select which database the switch should use (first) to authenticate a user.
GS-3012/GS-3012F User’s Guide 6.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group. With VLAN, a device cannot directly talk to or hear from devices that are not in the same group(s);...
GS-3012/GS-3012F User’s Guide The following table describes the labels in this screen. Table 6-3 Switch Setup LABEL DESCRIPTION EXAMPLE VLAN Type Choose 802.1Q or Port Based. The VLAN Setup screen changes depending on 802.1Q whether you choose 802.1Q VLAN Type or Port Based VLAN Type in this screen.
GS-3012/GS-3012F User’s Guide Table 6-3 Switch Setup LABEL DESCRIPTION EXAMPLE Typically used for controlled load, latency-sensitive traffic such as SNA (Systems Network Level 4 Architecture) transactions. Typically used for “excellent effort” or better than best effort and would include important business Level 3 traffic that can tolerate some delay.
GS-3012/GS-3012F User’s Guide Figure 6-4 IP Setup The following table describes the labels in this screen. Table 6-4 IP Setup LABEL DESCRIPTION Domain DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and Name Server vice versa.
Page 74
GS-3012/GS-3012F User’s Guide Table 6-4 IP Setup LABEL DESCRIPTION Default Select which traffic flow (In-Band or Out-of-band) the switch use to send packets with an unknown Management source or originate from the switch itself (such as SNMP traps). Select Out-of-band to have the switch send the packets to the out-of-band management port. This means that device(s) connected to the other port(s) do not receive these packets.
GS-3012/GS-3012F User’s Guide Table 6-4 IP Setup LABEL DESCRIPTION IP Subnet Enter the IP subnet mask in dotted decimal notation. Mask Type the VLAN group identification number. Default Enter the IP address of the default outgoing gateway in dotted decimal notation.
GS-3012/GS-3012F User’s Guide Figure 6-5 Port Setup The following table describes the fields in this screen. Table 6-5 Port Setup LABEL DESCRIPTION Port This is the port index number. Active Select this check box to enable a port. The factory default for all ports is enabled. A port must be enabled for data transmission to occur.
Page 77
GS-3012/GS-3012F User’s Guide Table 6-5 Port Setup LABEL DESCRIPTION Flow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and frame losses. Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port.
Page 79
Advanced Application 1 Part IV Advanced Application 1 This part shows you how to configure the VLAN, Static MAC Forwarding, Filtering, STP and Bandwidth Control Advanced Application screens.
GS-3012/GS-3012F User’s Guide Chapter 7 VLAN The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you how to configure 802.1Q tagged and port-based VLANs. See the General, Switch and IP Setup chapter for more information.
GS-3012/GS-3012F User’s Guide GARP GARP (Generic Attribute Registration Protocol) allows network switches to register and de-register attribute values with other GARP participants within a bridged LAN. GARP is a protocol that provides a generic mechanism for protocols that serve a more specific application, for example, GVRP.
GS-3012/GS-3012F User’s Guide 7.1.3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices.
GS-3012/GS-3012F User’s Guide Figure 7-3 802.1Q VLAN Status The following table describes the labels in this screen. Table 7-2 802.1Q VLAN Status LABEL DESCRIPTION The Number of This is the number of VLANs configured on the switch. VLAN Index This is the VLAN index number.
GS-3012/GS-3012F User’s Guide Table 7-2 802.1Q VLAN Status LABEL DESCRIPTION Previous/Next Page Click one of these buttons to show the previous/next screen if all status information cannot be seen in one screen. 7.2.1 802.1Q VLAN Port Settings To configure the 802.1Q VLAN settings on a port, click the VLAN Port Settings link in the VLAN Status screen.
GS-3012/GS-3012F User’s Guide Table 7-3 802.1Q VLAN Port Settings LABEL DESCRIPTION Ingress Check If this check box is selected for a port, the device discards incoming frames for VLANs that do not include this port in its member set. PVID Each port on the switch is capable of passing tagged or untagged frames.
GS-3012/GS-3012F User’s Guide Figure 7-5 802.1Q Static VLAN The following table describes the labels in this screen. Table 7-4 802.1Q Static VLAN LABEL DESCRIPTION Active Select this check box to enable the VLAN. Name Enter a descriptive name for this VLAN group for identification purposes.
GS-3012/GS-3012F User’s Guide Table 7-4 802.1Q Static VLAN LABEL DESCRIPTION Cancel Click Cancel to reset the fields to your previous configuration. Clear Click Clear to clear the fields to the factory defaults. 7.2.3 Viewing and Editing VLAN Settings To view a summary of the VLAN configuration, scroll down to the summary table at the bottom of the Static VLAN screen.
GS-3012/GS-3012F User’s Guide VID1 Example Screen Figure 7-7 VID 1 Example Screen 7.3 Introduction to Port-based VLANs Port-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. Port-based VLANs require allowed outgoing ports to be defined for each port. Therefore, if you wish to allow two subscriber ports to talk to each other, for example, between conference rooms in a hotel, you must define the egress (an egress port is an outgoing port, that is, a port through which a data packet leaves) for both ports.
GS-3012/GS-3012F User’s Guide Figure 7-9 Port Based VLAN Setup (Port isolation) The following table describes the labels in this screen. Table 7-6 Port Based VLAN Setup LABEL DESCRIPTION Setting Wizard Choose from All connected or Port isolation. All connected means all ports can communicate with each other, that is, there are no virtual LANs.
Page 92
GS-3012/GS-3012F User’s Guide Table 7-6 Port Based VLAN Setup LABEL DESCRIPTION Outgoing These are the egress ports; an egress port is an outgoing port, that is, a port through which a data packet leaves. If you wish to allow two subscriber ports to talk to each other, you must define the egress port for both ports.
GS-3012/GS-3012F User’s Guide Chapter 8 Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 8.1 Introduction to Static MAC Forward Setup A static MAC address entry is an address that has been manually entered in the MAC address learning table.
GS-3012/GS-3012F User’s Guide Table 8-1 Static MAC Forwarding LABEL DESCRIPTION Port Select a port where the MAC address entered in the previous field will be automatically forwarded. Click Add to save the new rule to the switch. It then displays in the summary table at the bottom of the screen.
GS-3012/GS-3012F User’s Guide Chapter 9 Filtering This chapter discusses static IP and MAC address port filtering. 9.1 Introduction to Filtering Filtering means sifting traffic going through the switch based on the source and/or destination MAC addresses and VLAN group (ID).
GS-3012/GS-3012F User’s Guide Table 9-1 Filtering LABEL DESCRIPTION Action Select Discard source to drop frame from the source MAC address (specified in the MAC field). The switch can still send frames to the MAC address. Select Discard destination to drop frames to the destination MAC address (specified in the MAC address).
Page 97
GS-3012/GS-3012F User’s Guide Table 9-2 Filtering: Summary Table LABEL DESCRIPTION Action This field displays the filter action. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkboxes in the Delete column.
GS-3012/GS-3012F User’s Guide Chapter 10 Spanning Tree Protocol This chapter introduces the Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP). 10.1 STP/RSTP Overview (R)STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a switch to interact with other (R)STP -compliant switches in your network to ensure that only one path exists between any two stations on the network.
GS-3012/GS-3012F User’s Guide 10.1.2 How STP Works After a bridge determines the lowest cost-spanning tree with STP, it enables the root port and the ports that are the designated ports for connected LANs, and disables all other ports that participate in STP. Network packets are therefore only forwarded between enabled ports, eliminating any possible network loops.
GS-3012/GS-3012F User’s Guide Figure 10-1 Spanning Tree Protocol: Status The following table describes the labels in this screen. Table 10-3 Spanning Tree Protocol: Status LABEL DESCRIPTION Spanning Tree Protocol This field displays Running if STP is activated. Otherwise, it displays Down.
GS-3012/GS-3012F User’s Guide Table 10-3 Spanning Tree Protocol: Status LABEL DESCRIPTION Port ID This is the priority and number of the port on the switch through which this switch must communicate with the root of the Spanning Tree. Topology Changed This is the number of times the spanning tree has been reconfigured.
GS-3012/GS-3012F User’s Guide Table 10-4 Spanning Tree Protocol: Configuration LABEL DESCRIPTION Active Select this check box to activate STP. Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The switch with the highest priority (lowest numeric value) becomes the STP root switch. If all switches have the same priority, the switch with the lowest MAC address will then become the root switch.
GS-3012/GS-3012F User’s Guide Chapter 11 Bandwidth Control This chapter shows you how you can set the maximum bandwidth allowed for traffic flows on a port using the Bandwidth Control setup screens. 11.1 Introduction to Bandwidth Control Bandwidth control means defining a maximum allowable bandwidth for incoming and/or out-going traffic flows on a port.
GS-3012/GS-3012F User’s Guide Figure 11-1 Bandwidth Control The following table describes the labels in this screen. Table 11-1 Bandwidth Control LABEL DESCRIPTION Active Select this check box to activate bandwidth control. Port This field displays the port number. Active Make sure to select this check box to activate your rule. You may temporarily deactivate a rule without deleting it by deselecting this check box.
Page 107
Advanced Application 2 Part V Advanced Application 2 This part shows you how to configure the Broadcast Storm Control, Mirroring, Link Aggregation, Port Authentication, Port Security, Queuing Method, Classifier, Policy Rule and Multicast Advanced Application screens.
GS-3012/GS-3012F User’s Guide Chapter 12 Broadcast Storm Control 12.1 Introducing Broadcast Storm Control Broadcast storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the switch receives per second on the ports. When the maximum number of allowable broadcast, multicast and/or DLF packets is reached per second, the subsequent packets are discarded.
GS-3012/GS-3012F User’s Guide Table 12-1 Broadcast Storm Control LABEL DESCRIPTION Active Select this check box to enable broadcast storm control on the switch. Port This field displays a port number. Broadcast Select this option and specify how many broadcast packets the port receives per second.
GS-3012/GS-3012F User’s Guide Chapter 13 Mirroring This chapter discusses the Mirror setup screens. 13.1 Introduction to Port Mirroring Port mirroring allows you to copy traffic going from one or all ports to another or all ports in order that you can examine the traffic from the monitor port (the port you copy the traffic to) without interference.
GS-3012/GS-3012F User’s Guide Table 13-1 Mirroring LABEL DESCRIPTION Active Clear this check box to deactivate port mirroring on the switch. Monitor Port The monitor port is the port you copy the traffic to in order to examine it in more detail without interfering with the traffic flow on the original port(s).
GS-3012/GS-3012F User’s Guide Chapter 14 Link Aggregation This chapter shows you how to logically aggregate physical links to form one logical, higher-bandwidth link. 14.1 Introduction to Link Aggregation Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link. You may want to trunk ports if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link.
GS-3012/GS-3012F User’s Guide [(0000,00-00-00-00-00-00,0000,00,0000)] [(0000,00-00-00-00-00-00,0000,00,0000)] Local switch 0000 00-00-00-00-00 0000 0000 System priority Local switch MAC address Port Priority Port Number Peer switch 0000 00-00-00-00-00 0000 0000 System priority MAC address Port Priority Port Number Figure 14-1 Aggregation ID 14.2 Link Aggregation Protocol Status Click Advanced Application, Link Aggregation in the navigation panel to display the Link Aggregation Protocol Status screen.
GS-3012/GS-3012F User’s Guide The following table describes the labels in this screen. Table 14-1 Link Aggregation: Link Aggregation Protocol Status LABEL DESCRIPTION Index This field displays the trunk ID to identify a trunk group, that is, one logical link containing multiple ports.
GS-3012/GS-3012F User’s Guide Figure 14-3 Link Aggregation: Configuration The following table describes the labels in this screen. Table 14-2 Link Aggregation: Configuration LABEL DESCRIPTION Link Aggregation Control Protocol Active Select this checkbox to enable Link Aggregation Control Protocol (LACP). System Priority LACP system priority is a number between 1 and 65, 535. The switch with the lowest system priority (and lowest port number if system priority is the same) becomes the LACP “server”.
Page 117
GS-3012/GS-3012F User’s Guide Table 14-2 Link Aggregation: Configuration LABEL DESCRIPTION Dynamic (LACP) Select this check box to enable LACP for a trunk. Port This field displays the port number. Group Select the trunk group to which a port belongs. LACP Timeout Timeout is the time interval between the individual port exchanges of LACP packets in order to check that the peer port in the trunk group is still up.
GS-3012/GS-3012F User’s Guide Chapter 15 Port Authentication This chapter describes the IEEE 802.1x authentication method and RADIUS server connection setup. 15.1 Introduction to Authentication IEEE 802.1x is an extended authentication protocol that allows support of RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile management on a network RADIUS server.
GS-3012/GS-3012F User’s Guide 15.2.1 Configuring RADIUS Server Settings From the Port Authentication screen, click RADIUS to display the configuration screen as shown. Figure 15-3 Port Authentication: RADIUS The following table describes the labels in this screen. Table 15-1 Port Authentication: RADIUS...
GS-3012/GS-3012F User’s Guide Figure 15-4 Port Authentication: 802.1x The following table describes the labels in this screen. Table 15-2 Port Authentication: 802.1x LABEL DESCRIPTION Active Select this check box to permit IEEE 802.1x authentication on the switch. You must first allow IEEE 802.1x authentication on the switch before configuring it on each port.
GS-3012/GS-3012F User’s Guide Chapter 16 Port Security This chapter shows you how to set up port security. 16.1 About Port Security Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the switch.
GS-3012/GS-3012F User’s Guide Table 16-1 Port Security LABEL DESCRIPTION Active Select this check box to enable the port security feature. Port This field displays a port number. Active Select this check box to enable port security on this port. Address Learning MAC address learning reduces outgoing broadcast traffic. For MAC address learning to occur on a port, the port itself must be active with address learning enabled.
GS-3012/GS-3012F User’s Guide Chapter 17 Queuing Method This chapter introduces SPQ and WFQ. 17.1 Introduction to Queuing Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic. See also Priority Queue Assignment in Switch Setup and 802.1p Priority in Port Setup for related information.
GS-3012/GS-3012F User’s Guide end of the list; and so on, depending on the number of queues being used. This works in a looping fashion until a queue is empty. Weighted Round Robin Scheduling (WRR) uses the same algorithm as round robin scheduling, but services queues based on their priority and queue weight (the number you configure in the Weight field –...
Page 127
GS-3012/GS-3012F User’s Guide Table 17-2 Queuing Method LABEL DESCRIPTION Port This label shows the port you are configuring. Method Select SPQ (Strict Priority Queuing) or WRR (Weighted Round Robin Scheduling). Strict Priority Queuing (SPQ) services queues based on priority only. When the highest priority queue empties, traffic on the next highest-priority queue begins.
GS-3012/GS-3012F User’s Guide Chapter 18 Classifier This chapter introduces and shows you how to configure the packet classifier on the switch. 18.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth.
GS-3012/GS-3012F User’s Guide Figure 18-1 Classifier The following table describes the labels in this screen. Table 18-1 Classifier LABEL DESCRIPTION Active Select this option to enable this rule. Name Enter a descriptive name for this rule for identifying purposes. 18-2...
Page 131
GS-3012/GS-3012F User’s Guide Table 18-1 Classifier LABEL DESCRIPTION Packet Format Specify the format of the packet. Choices are All, 802.3 tagged, 802.3 untagged, Ethernet II tagged and Ethernet II untagged. A value of 802.3 indicates that the packets are formatted according to the IEEE 802.3 standards.
GS-3012/GS-3012F User’s Guide Table 18-1 Classifier LABEL DESCRIPTION Socket Number You must select either UDP or TCP in the IP Protocol field before you configure the socket numbers. Select Any to apply the rule to all TCP/UDP protocol port numbers or select the second option and enter a TCP/UDP protocol port number.
GS-3012/GS-3012F User’s Guide Table 18-2 Classifier: Summary Table LABEL DESCRIPTION Cancel Click Cancel to clear the Delete check boxes. The following table shows some other common Ethernet types and the corresponding protocol number. Table 18-3 Common Ethernet Types and Protocol Number...
GS-3012/GS-3012F User’s Guide Chapter 19 Policy Rule This chapter shows you how to configure policy rules. 19.1 About Policy Rules A classifier distinguishes traffic into flows based on the configured criteria (refer to Chapter 18 for more information). A policy rule ensures that a traffic flow gets the requested treatment in the network.
GS-3012/GS-3012F User’s Guide Figure 19-1 Policy The following table describes the labels in this screen. 19-2 Policy Rule...
Page 137
GS-3012/GS-3012F User’s Guide Table 19-1 Policy LABEL DESCRIPTION Active Select this option to enable the policy. Name Enter a descriptive name for identification purposes. Classifier(s) This field displays the active classifier(s) you configure in the Classifier screen (refer to Chapter 18 ).
GS-3012/GS-3012F User’s Guide Table 19-1 Policy LABEL DESCRIPTION DiffServ Select No change to keep the TOS and/or DSCP fields in the packets. Select Set the packet’s TOS field to set the TOS field with the value you configure in the TOS field.
GS-3012/GS-3012F User’s Guide The following table describes the labels in this screen. Table 19-2 Policy: Summary Table LABEL DESCRIPTION Index This field displays the policy index number. Click an index number to edit the policy. Active This field displays Yes when policy is activated and No when is it deactivated.
GS-3012/GS-3012F User’s Guide Chapter 20 Multicast This chapter shows you how to configure various multicast features. 20.1 Multicast Overview Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast delivers IP packets to just a group of hosts on the network.
GS-3012/GS-3012F User’s Guide packets passing through it, picks out the group registration information, and configures multicasting accordingly. IGMP snooping allows the switch to learn multicast groups without you having to manually configure them. The switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of that group.
GS-3012/GS-3012F User’s Guide Figure 20-2 Multicast Setting The following table describes the labels in this screen. Table 20-2 Multicast Setting LABEL DESCRIPTION IGMP Snooping Select Active to enable IGMP snooping to forward group multicast traffic only to ports that are members of that group.
GS-3012/GS-3012F User’s Guide Table 20-2 Multicast Setting LABEL DESCRIPTION IGMP Querier The switch treats an IGMP query port as being connected to an IGMP multicast router (or Mode server). The switch forwards IGMP join or leave packets to an IGMP query port.
GS-3012/GS-3012F User’s Guide Table 20-3 Multicast: IGMP Filtering Profile LABEL DESCRIPTION Profile Name Enter a descriptive name for the profile for identification purposes. To configure additional rule(s) for a profile that you have already added, enter the profile name and specify a different IP multicast address range.
GS-3012/GS-3012F User’s Guide Figure 20-4 MVR Network Example 20.5.1 Types of MVR Ports In MVR, a source port is a port on the switch that can send and receive multicast traffic in a multicast VLAN while a receiver port can only receive multicast data. Once configured, the switch maintains a forwarding table that matches the multicast stream to the associated multicast group.
GS-3012/GS-3012F User’s Guide will still be on the list of forwarding destination for the multicast traffic. Otherwise, the switch removes the receiver port from the forwarding table. Figure 20-5 MVR Multicast Television Example 20.6 General MVR Configuration Use the MVR screen to create multicast VLANs and select the receiver port(s) and a source port for each multicast VLAN.
GS-3012/GS-3012F User’s Guide Figure 20-6 MVR The following table describes the related labels in this screen. Table 20-4 MVR LABEL DESCRIPTION Active Select this check box to enable MVR to allow one single multicast VLAN to be shared among different subscriber VLANs on the network.
GS-3012/GS-3012F User’s Guide Table 20-4 MVR LABEL DESCRIPTION None Select this option to set the port not to participate in MVR. No MVR multicast traffic is sent or received on this port. Tagging Select this checkbox if you want the port to tag the VLAN ID in all outgoing frames transmitted.
GS-3012/GS-3012F User’s Guide The following table describes the labels in this screen. Table 20-5 MVR Group Configuration LABEL DESCRIPTION Multicast VLAN ID Select a multicast VLAN ID (that you configured in the MVR screen) from the drop-down list box. Name Enter a descriptive name for identification purposes.
GS-3012/GS-3012F User’s Guide To configure the MVR settings on the switch, create a multicast group in the MVR screen and set the receiver and source ports. Figure 20-9 MVR Configuration Example To set the switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen.
GS-3012/GS-3012F User’s Guide Chapter 21 Routing Protocol This chapter shows you how to configure the routing functions. 21.1 Static Route Static routes tell the switch how to forward IP traffic when you configure the TCP/IP parameters manually. Click IP Application in the navigation panel and then Static Routing to display the screen as shown.
GS-3012/GS-3012F User’s Guide Table 21-1 Static Routing LABEL DESCRIPTION Metric The metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link.
GS-3012/GS-3012F User’s Guide Chapter 22 DHCP Relay This chapter describes the DHCP relay and shows you how to configure the DHCP Relay screen. 22.1 DHCP Relay Overview DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a DHCP server.
GS-3012/GS-3012F User’s Guide Figure 22-1 DHCP Relay The following table describes the labels in this screen. Table 22-1 DHCP Relay LABEL DESCRIPTION Active Select this check box to enable DHCP relay. Remote Enter the IP address of a DHCP server in dotted decimal notation.
GS-3012/GS-3012F User’s Guide Chapter 23 Maintenance This chapter explains how to configure the maintenance screens. The links on the upper right of the Maintenance screen lead to different screens that let you maintain the firmware and configuration files. 23.1 Maintenance Click Management and then Maintenance in the navigation panel to open the following screen.
GS-3012/GS-3012F User’s Guide 23.3 Restore a Configuration File Restore a previously saved configuration from your computer to the switch using the Restore Configuration screen. Figure 23-3 Restore Configuration Type the path and file name of the configuration file you wish to restore in the File Path text box or click Browse to display a Choose File screen from which you can locate it.
GS-3012/GS-3012F User’s Guide 23.5 Load Factory Defaults Press the Click Here button next to Load Factory Defaults to clear all switch configuration information you configured and return to the factory defaults. The following message appears. Figure 23-5 Confirm Load factory Defaults Click OK to go to the next screen.
GS-3012/GS-3012F User’s Guide Click OK to see the screen as shown in Figure 23-6. Click OK again and then wait for the switch to restart. This takes up to two minutes. This does not affect the switch’s configuration. 23.7 Command Line FTP This section shows some examples of uploading to or downloading files from the switch using FTP commands.
GS-3012/GS-3012F User’s Guide 23.7.2 FTP Command Line Procedure Launch the FTP client on your computer. Enter “open”, followed by a space and the IP address of your switch. Press [ENTER] when prompted for a username. Enter your password as requested (the default is “1234”).
GS-3012/GS-3012F User’s Guide Chapter 24 Access Control This chapter describes how to control access to the switch. 24.1 About Access Control Click Maintenance, Access Control from the navigation panel to display the screen as shown. From this screen you can configure SNMP, up to four web configurator administrators, enable/disable remote service access and configure trusted computers for remote access.
GS-3012/GS-3012F User’s Guide “Local administrator is configuring this device now!!! Connection to host lost.” Figure 24-2 Console Port Priority 24.3 About SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network switches. SNMP is a member of TCP/IP protocol suite. A manager station can manage and monitor the switch through the network via SNMP version one (SNMPv1) and/or SNMP version 2c.
GS-3012/GS-3012F User’s Guide SNMP itself is a simple request/response protocol based on the manager/agent model. The manager issues a request and the agent returns responses using the following protocol operations: Table 24-2 SNMP Commands COMMAND DESCRIPTION Allows the manager to retrieve an object variable from the agent.
GS-3012/GS-3012F User’s Guide 24.3.3 Configuring SNMP From the Access Control screen, display the SNMP screen. You can click Access Control to go back to the Access Control screen. Figure 24-4 Access Control: SNMP The following table describes the labels in this screen.
GS-3012/GS-3012F User’s Guide Click Access Control from the navigation panel and then click Logins from this screen. Figure 24-5 Access Control: Logins The following table describes the labels in this screen. Table 24-5 Access Control: Logins LABEL DESCRIPTION Administrator This is the default administrator account with the “admin” user name. You cannot change the default administrator user name.
GS-3012/GS-3012F User’s Guide 24.4 SSH Overview Unlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network.
GS-3012/GS-3012F User’s Guide 24.7 Introduction to HTTPS HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application-level protocol that enables secure transactions of data by ensuring confidentiality (an unauthorized party cannot read the transferred data), authentication (one party can identify the other party) and data integrity (you know if data has been changed).
GS-3012/GS-3012F User’s Guide 24.7.2 Internet Explorer Warning Messages When you attempt to access the switch HTTPS server, a Windows dialog box pops up asking if you trust the server certificate. Click View Certificate if you want to verify that the certificate is from the switch.
GS-3012/GS-3012F User’s Guide Figure 24-10 Security Certificate 1 (Netscape) Figure 24-11 Security Certificate 2 (Netscape) 24.7.4 Login Screen After you accept the certificate and login in, the switch main screen appears. The lock displayed in the bottom right of the browser status bar denotes a secure connection.
GS-3012/GS-3012F User’s Guide Figure 24-12 Status Screen (Internet Explorer) Figure 24-13 Status Screen (Netscape) 24.8 Service Access Control Service Access Control allows you to decide what services you may use to access the switch. You may also change the default service port and configure “trusted computer(s)” for each service in the Remote Management screen (discussed later).
GS-3012/GS-3012F User’s Guide Figure 24-14 Access Control: Service Access Control The following table describes the fields in this screen. Table 24-6 Access Control: Service Access Control LABEL DESCRIPTION Services Services you may use to access the switch are listed here.
GS-3012/GS-3012F User’s Guide Figure 24-15 Access Control: Remote Management The following table describes the labels in this screen. Table 24-7 Access Control: Remote Management LABEL DESCRIPTION Entry This is the client set index number. A “client set” is a group of one or more “trusted computers”...
GS-3012/GS-3012F User’s Guide Chapter 25 Diagnostic This chapter explains the Diagnostic screens. 25.1 Diagnostic Click Management and then Diagnostic in the navigation panel to display this screen. Use this screen to check system logs, ping IP addresses or perform loopback tests on a port.
GS-3012/GS-3012F User’s Guide Chapter 26 Syslog This chapter explains the syslog screens. 26.1 Syslog The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages. A syslog-enabled device can generate a syslog message and send it to a syslog server.
GS-3012/GS-3012F User’s Guide Figure 26-1 Syslog Setup The following table describes the labels in this screen. Table 26-2 Syslog Setup LABEL DESCRIPTION Syslog Select this check box to turn on syslog (system logging) and then configure the syslog settings. Logging type This column displays the names of the categories of logs that the device can generate.
GS-3012/GS-3012F User’s Guide Figure 26-2 Syslog Server Setup The following table describes the labels in this screen. Table 26-3 Syslog Server Setup LABEL DESCRIPTION Active Select this check box to have the device send logs to this syslog server. Clear the check box if you want to create a syslog server entry but not have the device send logs to it (you can edit the entry later).
Page 182
GS-3012/GS-3012F User’s Guide Table 26-3 Syslog Server Setup LABEL DESCRIPTION Cancel Click Cancel to begin configuring this screen afresh. 26-4 Syslog...
GS-3012/GS-3012F User’s Guide Chapter 27 Cluster Management This chapter introduces cluster management. 27.1 Introduction to Cluster Management Cluster Management allows you to manage switches through one switch, called the cluster manager. The switches must be directly connected and be in the same VLAN group so as to be able to communicate with one another.
GS-3012/GS-3012F User’s Guide 27.2 Cluster Management Status Click Management in the navigation panel and then Cluster Management to display the following screen. Figure 27-2 Cluster Management Status The following table describes the labels in this screen. Table 27-2 Cluster Management Status...
GS-3012/GS-3012F User’s Guide Table 27-2 Cluster Management Status LABEL DESCRIPTION Status This field displays: Online (the cluster member switch is accessible) Error (for example the cluster member switch password was changed or the switch was set as the manager and so left the member list, etc.) Offline (the switch is disconnected - Offline shows approximately 1.5 minutes after...
GS-3012/GS-3012F User’s Guide C:\> ftp <Cluster Manager IP address> Connected to 192.168.0.1. 220 GS-3012F FTP version 1.0 ready at Thu Jan 1 00:31:12 1970 User (192.168.0.1:(none)): admin 331 Enter PASS command Password: 230 Logged in ftp> ls 200 Port command okay...
GS-3012/GS-3012F User’s Guide Figure 27-5 Configuring Cluster Management The following table describes the labels in this screen. Table 27-4 Configuring Cluster Management LABEL DESCRIPTION Clustering Manager Active Select Active to have this switch become the cluster manager switch. A cluster can only have one manager.
Page 188
GS-3012/GS-3012F User’s Guide Table 27-4 Configuring Cluster Management LABEL DESCRIPTION Cancel Click Cancel to begin configuring this part of the screen afresh. Clustering The following fields relate to the switches that are potential cluster members. Candidate List A list of suitable candidates found by auto-discovery is shown here. The switches must be directly connected.
GS-3012/GS-3012F User’s Guide Chapter 28 MAC Table This chapter introduces MAC Table. 28.1 Introduction to MAC Table The MAC table shows how frames are forwarded or filtered across the switch’s ports. It shows what device MAC address, belonging to what VLAN group (if any) is forwarded to which port(s) and whether the MAC address is dynamic (learned by the switch) or static (manually entered in Static MAC Forwarding).
GS-3012/GS-3012F User’s Guide 28.2 Viewing MAC Table Click Management in the navigation panel and then MAC Table to display the following screen. Figure 28-2 MAC Table The following table describes the labels in this screen. Table 28-1 MAC Table LABEL...
GS-3012/GS-3012F User’s Guide Chapter 29 ARP Table This chapter introduces ARP Table. 29.1 Introduction to ARP Table Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network.
GS-3012/GS-3012F User’s Guide Figure 29-1 ARP Table The following table describes the labels in this screen. Table 29-1 ARP Table LABEL DESCRIPTION Index This is the ARP Table entry number. IP Address This is the learned IP address of a device connected to a switch port with corresponding MAC address below.
Page 193
Commands Part VII Commands This part gives information on the Command Line Interface (CLI).
GS-3012/GS-3012F User’s Guide Chapter 30 Introducing the Commands This chapter introduces the commands and gives a summary of commands available. 30.1 Overview In addition to the web configurator, you can use line commands to configure the switch. Use line commands for advanced switch diagnosis and troubleshooting.
When you turn on your switch, it performs several internal tests as well as line initialization. You can view the initialization information using the console port. After the initialization, the login screen displays (refer to Section 30.3). Copyright (c) 1994 - 2005 ZyXEL Communications Corp. initialize mgmt, ethernet address: 00:13:49:00:00:01 initialize switch, ethernet address: 00:13:49:00:00:02 Initializing switch unit 0...
GS-3012/GS-3012F User’s Guide Enter User Name : admin Enter Password : XXXX Figure 30-2 CLI: Login Screen 30.4 Command Syntax Conventions The rules of the commands are listed next. The command keywords are in courier new font. The required fields in a command are enclosed in angle brackets <>, for instance, means that ping <ip>...
GS-3012/GS-3012F User’s Guide ras> help Commands available: help exit history enable show ip <cr> show hardware-monitor <C|F> show system-information ping help ping <ip> [vlan <vlan-id>][..] ping <ip> <cr> traceroute help traceroute <ip> [vlan <vlan-id>][..] traceroute <ip> <cr> ssh <1|2> <[user@]dest-ip> [command </>] ssh <1|2>...
GS-3012/GS-3012F User’s Guide 30.6 Command Modes There are three CLI command modes: User, Enable and Configure. When you first log into the CLI, the initial command mode is the User mode. The User mode commands are a subset of the Enable mode commands. The User mode command prompt ends with an angle bracket (>).
GS-3012/GS-3012F User’s Guide In User mode, enter the command to log out of the CLI. exit 30.9 Command Summary The following sections summarize the commands available in the switch together with a brief description of each command. Commands listed in the tables are in the same order as they are displayed in the CLI. See the related section in the User’s Guide for more background information.
GS-3012/GS-3012F User’s Guide Table 30-2 Command Summary: Enable Mode COMMAND DESCRIPTION baudrate <1|2|3|4|5> Changes the console port speed. Choices are 1 (38400), 2 (19200), 3(9600), 4 (57600) and 5 (115200). boot config <index> Restarts the system with the specified configuration file (1 or 2).
GS-3012/GS-3012F User’s Guide Table 30-2 Command Summary: Enable Mode COMMAND DESCRIPTION classifier Displays all classifier related information. <name> Displays the specified classifier related information. cluster Displays cluster management status. candidates Displays cluster candidate information. Displays the status of the cluster member member(s).
GS-3012/GS-3012F User’s Guide Table 30-2 Command Summary: Enable Mode COMMAND DESCRIPTION igmp-query-mode Displays IGMP query mode settings on the port(s). Displays IP related information. Displays the switch’s current TCP sessions. Displays the switch’s current UDP sessions. ip arp Displays the ARP table.
Page 204
GS-3012/GS-3012F User’s Guide Table 30-2 Command Summary: Enable Mode COMMAND DESCRIPTION <port-list> Displays port security settings on the specified port(s). radius-server Displays RADIUS server settings. remote-management Displays all secured client information. Displays the specified secured client <index> information. Displays current operating configuration.
GS-3012/GS-3012F User’s Guide 30.9.3 Configure Mode The following table lists the commands in Configuration (or Config) mode. Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION admin-password <pw-string> Changes the administrator password. <confirm-string> Enables bandwidth control. bandwidth- control bcp- Enables Bridge Control Protocol Transparency.
Page 206
GS-3012/GS-3012F User’s Guide Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION cluster <vlan-id> Sets the cluster management VLAN ID. member <mac- Sets the cluster member switch’s hardware MAC address and address> password password. <password-str> name <cluster name> Configures a name to identify the cluster manager rcommand <mac-...
Page 207
GS-3012/GS-3012F User’s Guide Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION profile <name> Sets the range of multicast address(es) in a profile. start-address <ip> end-address <ip> igmp-snooping Enables IGMP snooping. Sets how to treat traffic from unknown-multicast- unknown multicast group.
Page 208
GS-3012/GS-3012F User’s Guide Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION name <name> mac Disables a static MAC address port filtering rule. <mac-addr> vlan <vlan-id> drop <src/dst/both> inactive mac-forward name <name> mac Configures a static MAC address forwarding rule. <mac-addr> vlan <vlan-id>...
Page 209
GS-3012/GS-3012F User’s Guide Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION option Disables the relay agent information option 82. https timeout Resets the session timeout to the default of 300 seconds. igmp-filtering Clears the IGMP filtering settings on the switch.
Page 210
GS-3012/GS-3012F User’s Guide Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION port-access- Disables port authentication on the authenticator switch. <port-list> Disables the re-authentication reauthenticate mechanism on the listed port(s). <port-list> Disables authentication on the listed ports. port-security Disables port security on the switch.
Page 211
GS-3012/GS-3012F User’s Guide Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION known-hosts Removes all remote hosts. known-hosts <host- Removes the specified remote ip> <cr> hosts from the list of all known hosts. known-hosts <host- Removes remote known hosts with ip> [1024|ssh-...
Page 212
GS-3012/GS-3012F User’s Guide Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION policy <name> classifier Configures a policy. A classifier distinguishes traffic into flows <classifier-list> < based on the configured criteria. A [vlan<vlan-id>] policy rule ensures that a traffic [egress-port <port- flow gets the requested treatment num>]...
Page 213
GS-3012/GS-3012F User’s Guide Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION <port-list> reauth- Specifies how often a client has to re-enter the username and period <reauth- password to stay connected to the period> specified port(s). port-security Enables port security on the switch.
Page 214
GS-3012/GS-3012F User’s Guide Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION ssh <socket-number> Allows SSH access on the specified service port. telnet <socket- Allows Telnet access on the specified service port. number> snmp-server [contact <system Sets the geographic location and the name of the person in charge contact>] [location...
GS-3012/GS-3012F User’s Guide Table 30-3 Command Summary: Configure Mode COMMAND DESCRIPTION type <system, Sets the device to generate a category of logs. interface, switch, authentication, ip> type <system, facility <0-7> Sets the facility (file) on the syslog server to which the switch sends a interface, switch, category of logs.
Page 216
GS-3012/GS-3012F User’s Guide Table 30-4 Command Summary: config-vlan Commands COMMAND DESCRIPTION fixed <port-list> Specifies the port(s) to be a permanent member of this VLAN group. forbidden <port- Specifies the port(s) you want to prohibit from joining this VLAN group. list>...
GS-3012/GS-3012F User’s Guide Table 30-4 Command Summary: config-vlan Commands COMMAND DESCRIPTION ip address Sets the default in-band interface to use a static IP address in this VLAN. inband-default dhcp-bootp The switch will use the default IP address of 0.0.0.0 if you do not configure a static IP address.
Page 218
GS-3012/GS-3012F User’s Guide Table 30-5 Command Summary: Interface COMMAND DESCRIPTION bpdu-control <peer|tunnel|discard|network> Sets how Bridge Protocol Data Units (BPDUs) are used in STP port states. cable_diagnostics Displays whether a cable is connected to the port (good) or not (open). dlf-limit Enables the Destination Lookup Failure (DLF) limit.
Page 219
GS-3012/GS-3012F User’s Guide Table 30-5 Command Summary: Interface COMMAND DESCRIPTION ingress-check Enables the device to discard incoming frames for VLANs that are not included in a port member set. intrusion-lock Enables intrusion lock on a port and a port cannot be connected again after you disconnected the cable.
GS-3012/GS-3012F User’s Guide Table 30-5 Command Summary: Interface COMMAND DESCRIPTION ingress-check Incoming traffic is not checked for VLAN tags. Disables intrusion-lock on a port so that a port can be connected intrusion-lock again after you disconnected the cable. mirror Disables port mirroring on the switch.
GS-3012/GS-3012F User’s Guide Table 30-6 Command Summary: mvr Commands COMMAND DESCRIPTION mvr <1-4094> Enters the MVR (Multicast VLAN Registration) configuration mode. exit Exist from the MVR configuration mode. group <name-str> Sets the multicast group range for the MVR. start-address <ip>...
GS-3012/GS-3012F User’s Guide Chapter 31 Command Examples This chapter describes some commands in more detail. 31.1 Overview These are commands that you may use frequently in maintaining your switch. 31.2 show Commands These are the commonly used commands. show 31.2.1...
GS-3012/GS-3012F User’s Guide ras> show hardware-monitor c Temperature Unit : (c) Temperature(%c) Current Threshold Status ----------------------------------------------------------- 40.0 40.0 30.5 85.0 Normal 35.0 36.0 29.0 85.0 Normal 33.0 33.0 29.5 85.0 Normal FAN Speed(RPM) Current Threshold Status -------------------------------------------------------- FAN1 5625 5716...
GS-3012/GS-3012F User’s Guide 31.2.6 show mac address-table Syntax: show mac address-table <all <sort>|static> Where = Specifies the sorting criteria (MAC, VID or port). <sort> This command displays the MAC address(es) stored in the switch. The following example shows a static MAC address table.
GS-3012/GS-3012F User’s Guide 31.4 traceroute Syntax: traceroute <ip> [in-band|out-of-band|vlan <vlan-id>][ttl <1-255>] [wait <1-60>] [queries <1-10>] where <ip> The IP address of an Ethernet device. [in-band|out-of- Specifies the network interface or the VLAN ID to which the Ethernet band|vlan <vlan- device belongs.
GS-3012/GS-3012F User’s Guide <ip> The IP address of a TFTP server on which you want to store the backup configuration file. <remote-file> Specifies the name of the configuration file. This command backs up the current configuration file on a TFTP server. The following example backs up the...
GS-3012/GS-3012F User’s Guide ras# boot config 2 Figure 31-12 CLI: boot config Command Example Use the reload config command to restart the system and use a different configuration file (if specified). The following example restarts the system to use the second configuration file.
GS-3012/GS-3012F User’s Guide ras(config)# no mirror-port Figure 31-15 no mirror-port Command Example 31.7.2 no https timeout Syntax: no https timeout Resets the https session timeout to default. An example is shown next. The session timeout is reset to 300 seconds.
GS-3012/GS-3012F User’s Guide 31.7.4 no port-access-authenticator Syntax: no port-access-authenticator no port-access-authenticator <port-list> reauthenticate no port-access-authenticator <port-list> where Disables port authentication on the switch. <port-list> Disables the re-authentication mechanism on the listed port(s). reauthenticate <port-list> Disables authentication on the listed ports.
GS-3012/GS-3012F User’s Guide Remove the remote host with IP address 172.165.1.9 and with an SSH-RSA encryption key from the list of known hosts. ras(config)# no ssh key rsa1 ras(config)# no ssh known-hosts 172.165.1.8 ras(config)# no ssh known-hosts 172.165.1.9 ssh-rsa Figure 31-19 no ssh Command Example 31.8 interface Commands...
GS-3012/GS-3012F User’s Guide Enable ports one, three, four and five for configuration. Set the BPDU control to tunnel, to forward BPDUs received on ports one, three, four and five. ras(config)# interface 1,3-5 ras(config-interface)# bpdu-control tunnel ras(config-interface)# Figure 31-21 interface bpdu-control Command Example 31.8.3...
GS-3012/GS-3012F User’s Guide Enable bandwidth control. Set the outgoing traffic bandwidth limit to 5000Kbps. Set the guaranteed bandwidth allowed for incoming traffic to 4000Kbps. Set the maximum bandwidth allowed for incoming traffic to 8000Kbps. ras(config)# interface port-channel 1 ras(config-interface)# bandwidth-limit...
GS-3012/GS-3012F User’s Guide gvrp GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Enable this function to permit VLANs groups beyond the local switch.
GS-3012/GS-3012F User’s Guide Enable tagged frame-types on the interface. ras(config)# interface port-channel 1,3-5 ras(config-interface)# ingress-check ras(config-interface)# frame-type tagged Figure 31-27 frame-type Command Example 31.8.9 vlan-trunking Syntax: vlan-trunking Enable VLAN Trunking on ports connected to other switches or routers (but not ports directly connected to end users) to allow frames belonging to unknown VLAN groups to pass through the switch.
GS-3012/GS-3012F User’s Guide Syntax: egress set <port-list> where <port-list> Sets the outgoing traffic port list for a port-based VLAN. This command adds a port into the port-based VLAN. When you use the port-based VLAN, all of the ports are members by default. You must use the no egress set command to remove ports if you do not want all ports to be members.
GS-3012/GS-3012F User’s Guide An example is shown next. Enable ports one, three, four and five for configuration. Set a name for the interfaces. ras(config)# interface port-channel 1,3-5 ras(config-interface)# name Test Figure 31-32 name Command Example 31.8.14 speed-duplex Syntax: speed-duplex <auto|10-half|10-full|100-half|100-full|1000-full>...
GS-3012/GS-3012F User’s Guide Chapter 32 IEEE 802.1Q Tagged VLAN Commands This chapter describes the IEEE 802.1Q Tagged VLAN and associated commands. 32.1 IEEE 802.1Q Tagged VLAN Overview See the VLAN chapter for more information on VLANs. There are two kinds of tagging: 1.
GS-3012/GS-3012F User’s Guide The following procedure shows you how to configure tagged VLAN. Use the IEEE 802.1Q tagged VLAN commands to configure tagged VLAN for the switch. Use the command to configure or create a VLAN on the switch. The switch vlan <vlan-id>...
GS-3012/GS-3012F User’s Guide ras# show vlan1q gvrp GVRP Support --------------------- gvrpEnable = YES Figure 32-4 show gvrp Command Example 32.4.4 Enable GVRP Syntax: vlan1q gvrp This command turns on GVRP in order to propagate VLAN information beyond the switch. 32.4.5...
GS-3012/GS-3012F User’s Guide frame-type <all|tagged> where <all|tagged> Specifies all Ethernet frames (tagged and untagged) or only tagged Ethernet frames. This command sets the specified port to accept all Ethernet frames or only those with an IEEE 802.1Q VLAN tag. The following example sets ports 1 to 5 to accept only tagged frames.
GS-3012/GS-3012F User’s Guide Enter to register the to the static VLAN table with fixed <port-list> <vlan-id> Enter to confirm registration of the to the static VLAN table with normal <port-list> <vlan-id> Enter to block a from joining the static VLAN table with forbidden <port-list>...
GS-3012/GS-3012F User’s Guide where <vlan-id> The VLAN ID [1 – 4094]. This command deletes the specified VLAN ID entry from the static VLAN table. The following example deletes entry 2 in the static VLAN table. ras(config)# no vlan 2 Figure 32-9 no vlan Command Example 32.6 Enable VLAN...
GS-3012/GS-3012F User’s Guide A Product Specifications These are the GS-3012 and GS-3012F product specifications. Chart 1 General Product Specifications IEEE802.3 10BASE-T Ethernet (twisted-pair copper) IEEE802.3u 100BASE-TX Fast Ethernet (twisted-pair copper) ANSI/IEEE802.3 Auto-negotiation IEEE802.3x Flow Control IEEE802.1p Priority Queues Standards IEEE802.1q VLAN IEEE802.1d Spanning Tree...
Page 249
GS-3012/GS-3012F User’s Guide Chart 1 General Product Specifications Media Interface Exchange All ports are auto-crossover (auto-MDI-X) and auto-negotiating. Chart 2 Performance and Management Specifications Back plane 12.8 Gbps 148800 PPS for 100BASE-TX 1488000PPS for 1000Base-X Packet Forwarding Rate Uplink packet forwarding rate depends on the uplink module used (see your module...
Page 250
Per Port: 1000, 100 (GS-3012F) Per GBIC Slot: LNK, ACT Per Management Port: 10, 100 Main switch: GS-3012: 438(W) x 300(D) x 45(H) mm Dimensions GS-3012F: 438(W) x 225(D) x 45(H) mm 19-inch rack-mount width, 1 U height Power Supply (AC Unit) 100 - 240VAC 50/60Hz 1.5A maximum internal universal power supply...
Page 251
GS-3012/GS-3012F User’s Guide Chart 3 Physical and Environmental Specifications T2A250VAC Fuse Rating Caution: For continued protection against risk of fire, replace only with the same type and fuse rating. Operating Temperature 0ºC ~45ºC (32ºF to 113ºF) Storage Temperature -25ºC ~70ºC (-13ºF to 158ºF)
GS-3012/GS-3012F User’s Guide B Index 802.1Q VLAN Type ..........6-7 Calssifier 802.3ad..............1-3 View summary..........18-4 Canonical Format Indicator ........7-1 CE ................iv Acceptable Frame Type ......... 7-6 Certification ............... iii Access Control ............. 24-1 CFI......See Canonical Format Indicator Address Learning ..........
Page 253
GS-3012/GS-3012F User’s Guide IEEE 802.1Q Tagged VLAN commands example Error Packet............5-4 ..............32-1 Ethernet Address............ 6-2 Syntax conventions ..........30-3 Ethernet MIBs RFC 1643 ........1-2 Command Line Interface .........VII Ethernet Port Test ..........25-1 Accessing ............30-1 Exposed Power wire length........3-1 Introduction ............30-1...
Page 256
GS-3012/GS-3012F User’s Guide Port Statistics ........See Port Details Remote Management......... 24-11 Port Status........5-1. See Port Details repair ................. iii Port Link Aggregation..........1-3 Resetting the Switch ..........4-6 Port VID ..............7-2 Restore Configuration .......... 23-2 Default for all ports ........7-1, 30-26 Revolutions Per Minute (RPM).......
Need help?
Do you have a question about the GS-3012 and is the answer not in the manual?
Questions and answers