ZyXEL Communications GS1920 Series User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Switch
  5. GS1920 Series
  6. User manual

ZyXEL Communications GS1920 Series User Manual

Intelligent layer 2 gbe switch
Hide thumbs Also See for GS1920 Series:
1
2
Table Of Contents
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
Table of Contents

Advertisement

Quick Links

See also: Troubleshooting Manual , Handbook
GS1920 Series
Intelligent Layer 2 GbE Switch
Version 4.30
Edition 1, 10/2015
Quick Start Guide
User's Guide
Default Login Details
LAN IP Address
User Name
Password
www.zyxel.com
http://192.168.1.1
admin
1234
Copyright © 2015 ZyXEL Communications Corporation

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the GS1920 Series and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for ZyXEL Communications GS1920 Series

Summary of Contents for ZyXEL Communications GS1920 Series

  • Page 1 GS1920 Series Intelligent Layer 2 GbE Switch Version 4.30 Edition 1, 10/2015 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 User Name admin Password 1234 www.zyxel.com Copyright © 2015 ZyXEL Communications Corporation...
  • Page 2 Related Documentation • Web Configurator Online Help Click the help icon in any screen for help in configuring that screen and supplementary information. • More Information Go to support.zyxel.com to find other information on the Switch. GS1920 Series User’s Guide...

  • Page 3: Table Of Contents

    AAA ...............................209 IP Source Guard ...........................220 Loop Guard ............................245 Layer 2 Protocol Tunneling ........................249 PPPoE ..............................253 Error Disable ............................261 Private VLAN ............................268 Green Ethernet ............................270 Link Layer Discovery Protocol (LLDP) ....................272 Static Route ............................297 Differentiated Services ..........................300 GS1920 Series User’s Guide...
  • Page 4 ARP Setup ............................316 Maintenance ............................320 Access Control ............................329 Diagnostic .............................347 System Log ............................350 Syslog Setup ............................351 Cluster Management ..........................354 MAC Table .............................360 ARP Table .............................363 Path MTU Table ............................365 Configure Clone ............................366 IPv6 Neighbor Table ..........................369 Troubleshooting ............................371 GS1920 Series User’s Guide...

  • Page 5: Table Of Contents

    3.1.1 Gigabit Ethernet Ports ......................26 3.1.2 Mini-GBIC Slots ........................27 3.1.3 LED Mode (only available for GS1920-48HP) .................29 3.2 Rear Panel ............................29 3.2.1 Power Connector ........................29 3.3 LEDs ...............................30 3.4 Reset to Factory Defaults ........................30 3.4.1 Side Panels ..........................31 GS1920 Series User’s Guide...
  • Page 6 Status and ZON ...........................53 7.1 Overview ............................53 7.1.1 What You Can Do ........................53 7.2 Status ..............................53 7.3 ZyXEL One Network (ZON) Utility Screen ..................55 7.4 ZON Neighbor Management Screen ....................56 7.5 Port Status ............................57 7.5.1 Port Details ...........................59 GS1920 Series User’s Guide...
  • Page 7 9.5 Configure VLAN Port Settings ......................98 9.6 Subnet Based VLANs ........................99 9.6.1 Configuring Subnet Based VLAN ..................100 9.7 Protocol Based VLANs ........................102 9.7.1 Configuring Protocol Based VLAN ..................102 9.8 Voice VLAN .............................104 9.9 MAC Based VLAN ...........................105 GS1920 Series User’s Guide...
  • Page 8 13.8.1 MSTP Port Configuration ....................133 13.9 Multiple Spanning Tree Protocol Status ..................135 13.10 Technical Reference ........................137 13.10.1 MSTP Network Example ....................137 13.10.2 MST Region ........................138 13.10.3 MST Instance ........................139 13.10.4 Common and Internal Spanning Tree (CIST) ..............139 GS1920 Series User’s Guide...
  • Page 9 18.1.2 What You Need to Know ......................155 18.1.3 MAC Authentication ......................156 18.2 Port Authentication Configuration ....................157 18.3 Activate IEEE 802.1x Security ....................157 18.3.1 Guest VLAN ........................158 18.4 Activate MAC Authentication ......................160 Chapter 19 Port Security .............................163 19.1 Port Security Overview .........................163 GS1920 Series User’s Guide...
  • Page 10 Multicast ............................184 24.1 Multicast Overview ........................184 24.1.1 What You Can Do ........................184 24.1.2 What You Need to Know ......................184 24.2 Multicast Setup ..........................188 24.3 IPv4 Multicast Status ........................188 24.3.1 IGMP Snooping ........................189 24.3.2 IGMP Snooping VLAN ......................191 GS1920 Series User’s Guide...
  • Page 11 26.6.2 DHCP Snooping VLAN Configure ..................231 26.6.3 DHCP Snooping VLAN Port Configure ................232 26.7 ARP Inspection Status .........................233 26.8 ARP Inspection VLAN Status ......................234 26.9 ARP Inspection Log Status ......................235 26.10 ARP Inspection Configure ......................237 26.10.1 ARP Inspection Port Configure ..................238 GS1920 Series User’s Guide...
  • Page 12 30.1.2 Error-Disable Recovery Overview ..................261 30.1.3 What You Can Do ........................261 30.2 Error Disable Screen ........................262 30.3 Error-Disable Status ........................262 30.4 CPU Protection Configuration ......................264 30.5 Error-Disable Detect Configuration ....................266 30.6 Error-Disable Recovery Configuration ..................266 Chapter 31 Private VLAN .............................268 GS1920 Series User’s Guide...
  • Page 13 35.1 Differentiated Services Overview ....................300 35.1.1 What You Can Do ........................300 35.1.2 What You Need to Know ......................300 35.2 Activating DiffServ ........................301 35.3 DSCP-to-IEEE 802.1p Priority Settings ..................302 35.3.1 Configuring DSCP Settings ....................303 Chapter 36 DHCP..............................304 36.1 DHCP Overview ..........................304 GS1920 Series User’s Guide...
  • Page 14 38.6 Tech-Support ..........................325 38.7 Technical Reference ........................326 38.7.1 FTP Command Line ......................326 38.7.2 Filename Conventions ......................327 38.7.3 FTP Command Line Procedure ..................327 38.7.4 GUI-based FTP Clients ......................328 38.7.5 FTP Restrictions .........................328 Chapter 39 Access Control ..........................329 GS1920 Series User’s Guide...
  • Page 15 43.2 Cluster Management Status ......................355 43.3 Clustering Management Configuration ..................356 43.4 Technical Reference ........................358 43.4.1 Cluster Member Switch Management ................358 Chapter 44 MAC Table ............................360 44.1 MAC Table Overview ........................360 44.1.1 What You Can Do ........................360 GS1920 Series User’s Guide...
  • Page 16 49.1 Power, Hardware Connections, and LEDs ..................371 49.2 Switch Access and Login ......................372 49.3 Switch Configuration ........................374 Appendix A Customer Support ......................375 Appendix B Common Services ......................381 Appendix C IPv6 ..........................384 Appendix D Legal Information ......................392 Index ..............................397 GS1920 Series User’s Guide...

  • Page 17: User's Guide

    User’s Guide...

  • Page 18: Getting To Know Your Switch

    H A PT ER Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The GS1920 Series consist of the four following models: • GS1920-24 • GS1920-24HP • GS1920-48 • GS1920-48HP Referring to PoE model(s) in this User's Guide only applies for GS1920-24HP and GS1920-48HP.

  • Page 19: Backbone Application

    Switch. You can provide a super-fast uplink connection by using a Gigabit Ethernet/mini-GBIC port on the Switch. Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location. GS1920 Series User’s Guide...

  • Page 20: High Performance Switching Example

    With VLAN, a station cannot directly talk to or hear from stations that are not in the same group(s) unless such traffic first goes through a router. For more information on VLANs, refer to Chapter 9 on page GS1920 Series User’s Guide...

  • Page 21: Ways To Manage The Switch

    • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it in a safe place. GS1920 Series User’s Guide...
  • Page 22 Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. See Section 3.4 on page 30 for how to reset the Switch. GS1920 Series User’s Guide...

  • Page 23: Hardware Installation And Connection

    • Four M5 flat head screws and a #2 Philips screwdriver. Failure to use the proper screws may damage the unit. 2.3.1.1 Precautions • Make sure the rack will safely support the combined weight of all the equipment it contains. GS1920 Series User’s Guide...

  • Page 24: Attaching The Mounting Brackets To The Switch

    Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the rack. GS1920 Series User’s Guide...
  • Page 25 Figure 6 Mounting the Switch on a Rack Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. Repeat steps to attach the second mounting bracket on the other side of the rack. GS1920 Series User’s Guide...

  • Page 26: Hardware Panels

    An auto-negotiating port can detect and adjust to the optimum Ethernet speed (10/100/1000 Mbps) and duplex mode (full duplex or half duplex) of the connected device. An auto-crossover (auto-MDI/MDI-X) port automatically works with a straight-through or crossover Ethernet cable. GS1920 Series User’s Guide...

  • Page 27: Mini-Gbic Slots

    To avoid possible eye injury, do not look into an operating fiber-optic module’s connectors. • Type: SFP connection interface • Connection speed: 1 Gigabit per second (Gbps) 3.1.2.1 Transceiver Installation Use the following steps to install a mini-GBIC transceiver (SFP module). GS1920 Series User’s Guide...
  • Page 28 Remove the fiber optic cables from the transceiver. Open the transceiver’s latch (latch styles vary). Pull the transceiver out of the slot. Figure 13 Removing the Fiber Optic Cables Figure 14 Opening the Transceiver’s Latch Example GS1920 Series User’s Guide...

  • Page 29: Led Mode (Only Available For Gs1920-48Hp)

    To connect power to the Switch, insert the female end of the power cord to the AC power receptacle on the rear panel. Connect the other end of the supplied power cord to a power outlet. Make sure that no objects obstruct the airflow of the fans (located on the side of the unit). GS1920 Series User’s Guide...

  • Page 30: Leds

    This means that you will lose all configurations that you had previously and the default Switch IP address, user name and password will be reset to 192.168.1.1, admin and 1234 respectively. GS1920 Series User’s Guide...

  • Page 31: Side Panels

    IP address of your computer to be in the same subnet as that of the default Switch IP address (192.168.1.1). 3.4.1 Side Panels The reset button is located at the side of the Switch as shown. Figure 20 Side Panel: GS1920-48 Figure 21 Side Panel: GS1920-24, GS1920-24HP, GS1920-48HP GS1920 Series User’s Guide...

  • Page 32: Technical Reference

    Technical Reference...

  • Page 33: The Web Configurator

    The login screen appears. The default username is admin and associated default password is 1234. The date and time display as shown if you have not configured a time server nor manually entered a time and date in the General Setup screen. GS1920 Series User’s Guide...

  • Page 34: The Status Screen

    The following figure shows the navigating components of a web configurator screen. Figure 23 Web Configurator Home Screen for PoE model(s) (Status) A - Click the menu items to open submenu links, and then click on a submenu link to open the screen in the main window. GS1920 Series User’s Guide...
  • Page 35 G - Click this link to go to the ZON Neighbor Management screen where you can see and manage neighbor devices learned by the Switch. In the navigation panel, click a main link to reveal a list of submenu links. Table 4 Navigation Panel Sub-links Overview BASIC SETTING ADVANCED APPLICATION IP APPLICATION MANAGEMENT GS1920 Series User’s Guide...
  • Page 36 This link takes you to screens where you can configure the Switch to group packets based on the specified criteria. Policy Rule This link takes you to a screen where you can configure the Switch to perform special treatment on the grouped packets. GS1920 Series User’s Guide...
  • Page 37 This link takes you to a screen where you can view the MAC addresses – IP address resolution table. Path MTU Table This link takes you to a screen where you can view the path MTU aging time, index, destination address, MTU, and expire settings. GS1920 Series User’s Guide...

  • Page 38: Change Your Password

    Click the Save link in the upper right hand corner of the web configurator to save your configuration to nonvolatile memory. Nonvolatile memory refers to the Switch’s storage that remains even if the Switch’s power is turned off. Note: Use the Save link when you are done with a configuration session. GS1920 Series User’s Guide...

  • Page 39: Switch Lockout

    When you see the message “Press any key to enter Debug Mode within 3 seconds...” press any key to enter debug mode. Type atlc after the “Enter Debug Mode” message. Wait for the “Starting XMODEM upload” message before activating XMODEM upload on your terminal. GS1920 Series User’s Guide...

  • Page 40: Logging Out Of The Web Configurator

    Figure 25 Web Configurator: Logout Screen 4.8 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. GS1920 Series User’s Guide...

  • Page 41: Initial Setup Example

    In this example, you want to configure port 1 as a member of VLAN 2. Figure 26 Initial Setup Network Example: VLAN Click Advanced Application > VLAN > VLAN Configuration in the navigation panel and click the Static VLAN Setup link. GS1920 Series User’s Guide...

  • Page 42: Setting Port Vid

    VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on that port get sent to VLAN 2. GS1920 Series User’s Guide...

  • Page 43: Configuring Switch Management Ip Address

    The default management IP address of the Switch is 192.168.1.1. You can configure another IP address in a different subnet for management purposes. The following figure shows an example. Figure 28 Initial Setup Example: Management IP Address GS1920 Series User’s Guide...
  • Page 44 This is the same as the VLAN ID you configure in the Static VLAN screen. Click Add to save your changes back to the run- time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. GS1920 Series User’s Guide...

  • Page 45: Tutorials

    1 and 100 DHCP Client (B) 1 and 100 DHCP Client (C) 1 and 100 Access the Switch through http://192.168.1.1 by default. Log into the Switch by entering the username (default: admin) and password (default: 1234). GS1920 Series User’s Guide...
  • Page 46 Go to Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup, and set the PVID of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. Figure 31 Tutorial: Tag Untagged Frames GS1920 Series User’s Guide...
  • Page 47 5 because the DHCP server is connected to port 5. Keep ports 6 and 7 Untrusted because they are connected to DHCP clients. Click Apply. Tutorial: Set the DHCP Server Port to Trusted Figure 33 GS1920 Series User’s Guide...

  • Page 48: How To Use Dhcpv4 Relay On The Switch

    In this example, you have configured your DHCP server (192.168.2.3) and want to have it assign a specific IP address (say 172.16.1.18) to DHCP client A based on the system name, VLAN ID and port number in the DHCP request. Client A connects to the Switch’s port 2 in VLAN 102. GS1920 Series User’s Guide...

  • Page 49: Creating A Vlan

    Click Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup. In the Static VLAN screen, select ACTIVE, enter a descriptive name (VLAN 102 for example) in the Name field and enter 102 in the VLAN Group ID field. GS1920 Series User’s Guide...
  • Page 50 Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory. GS1920 Series User’s Guide...

  • Page 51: Configuring Dhcpv4 Relay

    Enter the DHCP server’s IP address (192.168.2.3 in this example) in the Remote DHCP Server 1 field. Select default1 or default2 in the Option 82 Profile field. Click Apply to save your changes back to the run-time memory. GS1920 Series User’s Guide...

  • Page 52: Troubleshooting

    You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. You clicked the Save link on the Switch to have your settings take effect. GS1920 Series User’s Guide...

  • Page 53: Status And Zon

    7.2 Status The Status screen displays when you log into the Switch or click Status at the top right corner of the web configurator. The Status screen displays general device information, system status, and its IP addresses. GS1920 Series User’s Guide...
  • Page 54 After it times out you have to log in with your password again. Detail Click this link to go to the Basic Setting > System Info screen to check other detailed information, such as system resource usage and the Switch temperature, fan speeds or voltage. GS1920 Series User’s Guide...

  • Page 55: Zyxel One Network (Zon) Utility Screen

    ZON Utility screen and you can perform tasks like basic configuration of the devices and batch firmware upgrade in it. You can download the ZON Utility at www.zyxel.com and install it on a PC. The following figure shows the ZON Utility screen. GS1920 Series User’s Guide...

  • Page 56: Zon Neighbor Management Screen

    (turn the power off and then back on again), and reset to factory default settings in the Neighbor Management screen. For more information on LLDP, see (Section 33.1 on page 272). Click Status > Neighbor to see the following screen. Status > Neighbor Figure 44 GS1920 Series User’s Guide...

  • Page 57: Port Status

    7.5 Port Status This screen displays a port statistical summary with links to each port showing statistical details. To view the port statistics, click Status in all web configurator screens and then the Port Status link GS1920 Series User’s Guide...
  • Page 58 This field shows the number of received frames on this port. Errors This field shows the number of received errors on this port. Tx KB/s This field shows the number of kilobytes per second transmitted on this port. GS1920 Series User’s Guide...

  • Page 59: Port Details

    Click a number in the Port column in the Port Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. Figure 46 Port Status > Port Details GS1920 Series User’s Guide...
  • Page 60 This is the number of times a late collision is detected, that is, after 512 bits of the packets have already been transmitted. Error Packet The following fields display detailed information about packets received that were in error. RX CRC This field shows the number of packets received with CRC (Cyclic Redundant Check) error(s). GS1920 Series User’s Guide...
  • Page 61 1024 and 1518 octets in length. Giant This field shows the number of packets (including bad packets) received that were between 1519 octets and the maximum frame size. The maximum frame size varies depending on your switch model. GS1920 Series User’s Guide...

  • Page 62: Basic Setting

    90) to configure the default domain name server. 8.2 System Information In the navigation panel, click Basic Setting > System Info to display the screen as shown. Use this screen to view general system information. You can check the firmware version number. GS1920 Series User’s Guide...
  • Page 63 You may choose the temperature unit (Centigrade or Fahrenheit) in this field. Temperature BOARD, MAC and PHY refer to the location of the temperature sensors on the Switch printed circuit board. Current This shows the current temperature at this sensor. GS1920 Series User’s Guide...

  • Page 64: General Setup

    Error is displayed. 8.3 General Setup Use this screen to configure general settings such as the system name and time. Click Basic Setting > General Setup in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
  • Page 65 This field displays the date you open this menu. New Date (yyyy- Enter the new date in year, month and day format. The new date then appears in the mm-dd) Current Date field after you click Apply. GS1920 Series User’s Guide...

  • Page 66: Introduction To Vlans

    In traditional switched environments, all broadcast packets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain. Note: VLAN is unidirectional; it only governs outgoing traffic. GS1920 Series User’s Guide...

  • Page 67: Switch Setup

    GARP Timer: Switches join VLANs by making a declaration. A declaration is made by issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message terminates all registrations. GARP timers set declaration timeout values. See the chapter on VLAN setup for more background information. GS1920 Series User’s Guide...

  • Page 68: Ip Setup

    8.6 IP Setup Use the IP Setup screen to configure the Switch IP address, default gateway device, and the management VLAN ID. The default gateway specifies the IP address of the default gateway (next hop) for outgoing traffic. GS1920 Series User’s Guide...

  • Page 69: Management Ip Addresses

    Select this option if you don’t have a DHCP server or if you wish to assign static IP address information to the Switch. You need to fill in the following fields when you select this option. GS1920 Series User’s Guide...

  • Page 70: Port Setup

    Click Cancel to clear the selected check boxes in the Delete column. 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the configuration screen. GS1920 Series User’s Guide...
  • Page 71 Enter a descriptive name that identifies this port. You can enter up to 64 alpha-numerical characters. Note: Due to space limitation, the port name may be truncated in some web configurator screens. Type This field displays the capacity that the port can support. GS1920 Series User’s Guide...

  • Page 72: Poe Status

    In the figure below, the IP camera and IP phone get their power directly from the Switch. Aside from minimizing the need for cables and wires, PoE removes the hassle of trying to find a nearby electric outlet to power up devices. GS1920 Series User’s Guide...
  • Page 73 Note: The POE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. To view the current amount of power that PDs are receiving from the Switch, click Basic Setting > PoE Setup. Figure 53 Basic Setting > PoE Status GS1920 Series User’s Guide...

  • Page 74: Poe Time Range Status

    This field displays the maximum amount of power the PD could use from the Switch on this (mW) port. 8.8.1 PoE Time Range Status Use this screen to see whether PoE is scheduled to be enabled on a port. GS1920 Series User’s Guide...

  • Page 75: Poe Setup

    Use this screen to set the priority levels, power-up mode and schedule for the Switch in distributing power to PDs. Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen opens. GS1920 Series User’s Guide...
  • Page 76 Note: Changes in this row are copied to all the ports as soon as you make them. Select this to provide power to a PD connected to the port. If left unchecked, the PD connected to the port cannot receive power from the Switch. GS1920 Series User’s Guide...

  • Page 77: Interface Setup

    Use this screen to set IPv6 interfaces on which you can configure an IPv6 address to access and manage the Switch. Click Basic Setting > Interface Setup in the navigation panel to display the configuration screen. GS1920 Series User’s Guide...

  • Page 78: Ipv6

    Click Cancel to clear the check boxes. 8.10 IPv6 Use this screen to view the IPv6 interface status and configure Switch’s management IPv6 addresses. Click Basic Setting > IPv6 in the navigation panel to display the IPv6 status screen as shown next. GS1920 Series User’s Guide...

  • Page 79: Ipv6 Interface Status

    This field displays whether the IPv6 interface is activated or not. 8.10.1 IPv6 Interface Status Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the Basic Setting > IPv6 screen. The following screen opens. GS1920 Series User’s Guide...
  • Page 80 This field displays the Switch’s link-local IP address and prefix generated by the interface. It Address also shows whether the IP address is preferred, which means it is a valid address and can be used as a sender or receiver address. GS1920 Series User’s Guide...
  • Page 81 This field displays the address record when the Switch queries the DNS server to resolve domain names. Restart Click Click Here to send a new DHCP request to the DHCPv6 server and update the IPv6 DHCPv6 Client address and DNS information for this interface. GS1920 Series User’s Guide...

  • Page 82: Ipv6 Configuration

    Click the link to go to a screen where you can configure the Switch DHCP settings. Setup 8.10.3 IPv6 Global Setup Use this screen to configure the global IPv6 settings. Click the link next to IPv6 Global Setup in the IPv6 Configuration screen to display the screen as shown next. GS1920 Series User’s Guide...

  • Page 83: Ipv6 Interface Setup

    Use this screen to turn on or off an IPv6 interface and enable stateless autoconfiguration on it. Click the link next to IPv6 Interface Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 61 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Interface Setup GS1920 Series User’s Guide...

  • Page 84: Ipv6 Link-Local Address Setup

    Table 25 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Link-Local Address Setup LABEL DESCRIPTION Interface Select the IPv6 interface you want to configure. Link-Local Manually configure a static IPv6 link-local address for the interface. Address GS1920 Series User’s Guide...

  • Page 85: Ipv6 Global Address Setup

    Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 86: Ipv6 Neighbor Discovery Setup

    Specify the number of consecutive neighbor solicitations (from 0 to 600) the Switch sends for this interface. Enter 0 to turn off DAD. NS Interval Specify the time interval (from 1000 to 3600000 milliseconds) at which neighbor solicitations are re-sent for this interface. GS1920 Series User’s Guide...

  • Page 87: Ipv6 Neighbor Setup

    Click the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 65 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Neighbor Setup GS1920 Series User’s Guide...

  • Page 88: Dhcpv6 Client Setup

    Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Click the link next to DHCPv6 Client Setup in the IPv6 Configuration screen to display the screen as shown next. GS1920 Series User’s Guide...
  • Page 89 This field displays whether the Switch obtains a list of domain names from the DHCP server. Information This field displays the time interval (in seconds) at which the Switch exchanges other Refresh configuration information with a DHCPv6 server again. Minimum GS1920 Series User’s Guide...

  • Page 90: Dns

    This field displays priority of the DNS server address. Server Address This field displays the IP address of the DNS server. Source This field displays whether the DNS server address is configured manually (Static) or obtained automatically using DHCP/DHCPv6 (Dynamic). GS1920 Series User’s Guide...

  • Page 91: Vlan

    VLAN and provides the information that switches need to process the frame across the network. A tagged frame is four bytes longer than an untagged frame and contains two bytes of TPID (Tag Protocol Identifier, residing within the type/length field of the Ethernet frame) GS1920 Series User’s Guide...

  • Page 92: Forwarding Tagged And Untagged Frames

    GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Enable this function to permit VLAN groups beyond the local Switch. GS1920 Series User’s Guide...

  • Page 93: Port Vlan Trunking

    1 and 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking port(s). Figure 68 Port VLAN Trunking 9.1.2.3 Select the VLAN Type Select a VLAN type in the Basic Setting > Switch Setup screen. GS1920 Series User’s Guide...

  • Page 94: Vlan Status

    This is the number of VLANs that match the searching criteria and display in the list below. Search Results This field displays only when you use the Search button to look for certain VLANs. Index This is the VLAN index number. Click on an index number to view more VLAN details. GS1920 Series User’s Guide...

  • Page 95: Vlan Details

    This field shows how this VLAN was added to the Switch. Dynamic: using GVRP Static: added as a permanent entry Voice: manually added as a Voice VLAN MVR: added via multicast VLAN registration MAC-based: manually added as MAC-based VLAN GS1920 Series User’s Guide...

  • Page 96: Vlan Configuration

    Click Click Here to configure the MAC Based VLAN for the Switch. 9.4 Configure a Static VLAN Use this screen to configure a static VLAN for the Switch. Click the Static VLAN Setup link in the VLAN Configuration screen to display the screen as shown next. GS1920 Series User’s Guide...
  • Page 97 Select Fixed for the port to be a permanent member of this VLAN group. Select Forbidden if you want to prohibit the port from joining this VLAN group. Tagging Select TX Tagging if you want the port to tag all outgoing frames transmitted with this VLAN Group ID. GS1920 Series User’s Guide...

  • Page 98: Configure Vlan Port Settings

    Use the VLAN Port Setup screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click the VLAN Port Setup link in the VLAN Configuration screen. Figure 74 Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup GS1920 Series User’s Guide...

  • Page 99: Subnet Based Vlans

    IP subnet. For example, an ISP (Internet Services Provider) may divide different types of services it provides to customers into different IP subnets. Traffic for voice services is designated for IP subnet GS1920 Series User’s Guide...

  • Page 100: Configuring Subnet Based Vlan

    Click the Subnet Based VLAN Setup link in the VLAN Configuration screen to display the configuration screen as shown. Note: Subnet based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. GS1920 Series User’s Guide...
  • Page 101 Cancel Click Cancel to begin configuring this screen afresh. Index This is the index number identifying this subnet based VLAN. Click on any of these numbers to edit an existing subnet based VLAN. GS1920 Series User’s Guide...

  • Page 102: Protocol Based Vlans

    C. Figure 77 Protocol Based VLAN Application Example 9.7.1 Configuring Protocol Based VLAN Click the Protocol Based VLAN Setup link in the VLAN Configuration screen to display the configuration screen as shown. GS1920 Series User’s Guide...
  • Page 103 Port This field shows which port belongs to this protocol based VLAN. Name This field shows the name the protocol based VLAN. Ethernet-type This field shows which Ethernet protocol is part of this protocol based VLAN. GS1920 Series User’s Guide...

  • Page 104: Voice Vlan

    ID from the Organizationally Unique Identifiers (OUI). Click the Voice VLAN Setup link in the VLAN Configuration screen to display the configuration screen as shown. Figure 79 Advanced Application > VLAN > VLAN Configuration > Voice VLAN Setup GS1920 Series User’s Guide...

  • Page 105: Mac Based Vlan

    This feature allows users to change ports without having to reconfigure the VLAN. You can assign priority to the MAC-based VLAN and define a MAC to VLAN mapping table by entering a specified GS1920 Series User’s Guide...
  • Page 106 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. GS1920 Series User’s Guide...

  • Page 107: Port-Based Vlan Setup

    9.10.1 Configure a Port-Based VLAN Select Port Based as the VLAN Type in the Basic Setting > Switch Setup screen and then click Advanced Application > VLAN from the navigation panel to display the next screen. GS1920 Series User’s Guide...
  • Page 108 Chapter 9 VLAN Figure 81 Advanced Application > VLAN: Port Based VLAN Setup (All Connected) GS1920 Series User’s Guide...
  • Page 109 Chapter 9 VLAN Figure 82 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation) GS1920 Series User’s Guide...

  • Page 110: Technical Reference

    Select the protocol. Leave the default value IP. Type the VLAN ID of an existing VLAN. In our example we already created a static VLAN with an ID of 5. Type 5. Leave the priority set to 0 and click Add. GS1920 Series User’s Guide...
  • Page 111 To add more ports to this protocol based VLAN. Click the index number of the protocol based VLAN entry. Click 1. Change the value in the Port field to the next port you want to add. Click Add. GS1920 Series User’s Guide...

  • Page 112: Static Mac Forward Setup

    Switch. See Chapter 19 on page 163 for more information on port security. Click Advanced Application > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. GS1920 Series User’s Guide...
  • Page 113 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. GS1920 Series User’s Guide...

  • Page 114: Static Multicast Forward Setup

    Figure 86 on page 115 shows frames being forwarded to devices connected to port 3. Figure 87 on page 115 shows frames being forwarded to ports 2 and 3 within VLAN group 4. Figure 85 No Static Multicast Forwarding GS1920 Series User’s Guide...

  • Page 115: Configuring Static Multicast Forwarding

    Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). Click Advanced Application > Static Multicast Forwarding to display the configuration screen as shown. Figure 88 Advanced Application > Static Multicast Forwarding GS1920 Series User’s Guide...
  • Page 116 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. GS1920 Series User’s Guide...

  • Page 117: Filtering

    12.2 Configure a Filtering Rule Use this screen to create rules for traffic going through the Switch. Click Advanced Application > Filtering in the navigation panel to display the screen as shown next. Figure 89 Advanced Application > Filtering GS1920 Series User’s Guide...
  • Page 118 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rule(s) that you want to remove and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es). GS1920 Series User’s Guide...

  • Page 119: Spanning Tree Protocol

    (R)STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a switch to interact with other (R)STP -compliant switches in your network to ensure that only one path exists between any two stations on the network. GS1920 Series User’s Guide...

  • Page 120: Stp Terminology

    Protocol Data Units) transmitted from the root bridge. If a bridge does not get a Hello BPDU after a predefined interval (Max Age), the bridge assumes that the link to the root bridge is down. This bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a valid network topology. GS1920 Series User’s Guide...

  • Page 121: Stp Port States

    Figure 90 MRSTP Network Example Multiple STP Multiple Spanning Tree Protocol (IEEE 802.1s) is backward compatible with STP/RSTP and addresses the limitations of existing spanning tree protocols (STP and RSTP) in networks to include the following features: GS1920 Series User’s Guide...

  • Page 122: Spanning Tree Protocol Status Screen

    Use the Spanning Tree Configuration screen to activate one of the STP modes on the Switch. Click Configuration in the Advanced Application > Spanning Tree Protocol. Figure 92 Advanced Application > Spanning Tree Protocol > Configuration GS1920 Series User’s Guide...

  • Page 123: Configure Rapid Spanning Tree Protocol

    Use this screen to configure RSTP settings, see Section 13.1 on page 119 for more information on RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 93 Advanced Application > Spanning Tree Protocol > RSTP GS1920 Series User’s Guide...
  • Page 124 Priority decides which port should be disabled when more than one port forms a loop in a switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. GS1920 Series User’s Guide...

  • Page 125: Rapid Spanning Tree Protocol Status

    (second) message. The root bridge determines Hello Time, Max Age and Forwarding Delay. Max Age (second) This is the maximum time (in seconds) the Switch can wait without receiving a configuration message before attempting to reconfigure. GS1920 Series User’s Guide...

  • Page 126: Configure Multiple Rapid Spanning Tree Protocol

    LAN segament to which this port is connected, 13.6 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click MRSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 13.1 on page 119 for more information on MRSTP. GS1920 Series User’s Guide...
  • Page 127 Bridge Priority determines the root bridge, which in turn determines Hello Time, Max Age and Forwarding Delay. Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. The allowed range is 1 to 10 seconds. GS1920 Series User’s Guide...

  • Page 128: Multiple Rapid Spanning Tree Protocol Status

    Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 119 for more information on MRSTP. Note: This screen is only available after you activate MRSTP on the Switch. GS1920 Series User’s Guide...
  • Page 129 This is the number of times the spanning tree has been reconfigured. Times Time Since Last This is the time since the spanning tree was last reconfigured. Change Port This field displays the number of the port on the Switch. GS1920 Series User’s Guide...

  • Page 130: Configure Multiple Spanning Tree Protocol

    LAN segament to which this port is connected, 13.8 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen. Multiple STP on page 121 for more information on MSTP. GS1920 Series User’s Guide...
  • Page 131 Spanning Tree Protocol > Configuration screen to enable MSTP on the Switch. Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. The allowed range is 1 to 10 seconds. GS1920 Series User’s Guide...
  • Page 132 Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this check box to add this port to the MST instance. GS1920 Series User’s Guide...

  • Page 133: Mstp Port Configuration

    13.8.1 MSTP Port Configuration Click Advanced Application > Spanning Tree Protocol > MSTP > Port in the navigation panel to display the status screen as shown next. See Multiple STP on page 121 for more information on MSTP. GS1920 Series User’s Guide...
  • Page 134 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 135: Multiple Spanning Tree Protocol Status

    This ID is the same for Root and Our Bridge if the Switch is the root switch. Hello Time This is the time interval (in seconds) at which the root switch transmits a configuration (second) message. The root bridge determines Hello Time, Max Age and Forwarding Delay. GS1920 Series User’s Guide...
  • Page 136 BPDUs. • Learning - The port learns MAC addresses and processes BPDUs, but does not forward frames yet. • Forwarding - The port is operating normally. It learns MAC addresses, processes BPDUs and forwards received frames. GS1920 Series User’s Guide...

  • Page 137: Technical Reference

    The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP or RSTP, the link for VLAN 2 will be blocked as STP and RSTP allow only one link in the network and block the redundant link. GS1920 Series User’s Guide...

  • Page 138: Mst Region

    Devices that belong to the same MST region are configured to have the same MSTP configuration identification settings. These include the following parameters: • Name of the MST region • Revision level as the unique number for the MST region GS1920 Series User’s Guide...

  • Page 139: Mst Instance

    MST instance are members of the CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. Figure 103 MSTP and Legacy RSTP Network Example GS1920 Series User’s Guide...

  • Page 140: Bandwidth Control

    (Section 14.2 on page 140) to limit the bandwidth for traffic going through the Switch. 14.2 Bandwidth Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. GS1920 Series User’s Guide...
  • Page 141 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS1920 Series User’s Guide...

  • Page 142: Broadcast Storm Control

    (DLF) packets the Switch receives per second on the ports. 15.2 Broadcast Storm Control Setup Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. GS1920 Series User’s Guide...
  • Page 143 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS1920 Series User’s Guide...

  • Page 144: Mirroring

    16.2 Port Mirroring Setup Click Advanced Application > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. GS1920 Series User’s Guide...
  • Page 145 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS1920 Series User’s Guide...

  • Page 146: Link Aggregation

    When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that GS1920 Series User’s Guide...

  • Page 147: Link Aggregation Status

    Click Advanced Application > Link Aggregation in the navigation panel. The Link Aggregation Status screen displays by default. See Section 17.1 on page 146 for more information. Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. GS1920 Series User’s Guide...
  • Page 148 Refer to Link Aggregation ID on page 147 for more information on this field. The ID displays only when there is a port belonging to this trunk group and LACP is also enabled for this group. GS1920 Series User’s Guide...

  • Page 149: Link Aggregation Setting

    LACP - if the ports are configured to join a trunk group via LACP. 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 146 for more information on link aggregation. GS1920 Series User’s Guide...
  • Page 150 This is the only screen you need to configure to enable static link aggregation. Aggregation Setting Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this option to activate a trunk group. GS1920 Series User’s Guide...

  • Page 151: Link Aggregation Control Protocol

    17.3.1 Link Aggregation Control Protocol Click Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Dynamic Link Aggregation on page 146 for more information on dynamic link aggregation. GS1920 Series User’s Guide...
  • Page 152 Table 62 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP LABEL DESCRIPTION Link Note: Do not configure this screen unless you want to enable dynamic link aggregation. Aggregation Control Protocol Active Select this checkbox to enable Link Aggregation Control Protocol (LACP). GS1920 Series User’s Guide...

  • Page 153: Technical Reference

    Make your physical connections - make sure that the ports that you want to belong to the trunk group are connected to the same destination. The following figure shows ports 2-5 on switch A connected to switch B. GS1920 Series User’s Guide...
  • Page 154 Click Apply when you are done. Figure 111 Trunking Example - Configuration Screen Your trunk group 1 (T1) configuration is now complete. GS1920 Series User’s Guide...

  • Page 155: Port Authentication

    At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. GS1920 Series User’s Guide...

  • Page 156: Mac Authentication

    MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. Figure 113 MAC Authentication Process New Connection Authentication Request Authentication Reply Session Granted/Denied GS1920 Series User’s Guide...

  • Page 157: Port Authentication Configuration

    18.3 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. In the Port Authentication screen click 802.1x to display the configuration screen as shown. Figure 115 Advanced Application > Port Authentication > 802.1x GS1920 Series User’s Guide...

  • Page 158: Guest Vlan

    VLAN. That is, unauthenticated users can have access to limited network resources in the same guest VLAN, such as the Internet. The rights granted to the Guest VLAN depends on how the network administrator configures switches or routers with the guest network feature. GS1920 Series User’s Guide...
  • Page 159 Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication > 802.1x screen click Guest Vlan to display the configuration screen as shown. Figure 117 Advanced Application > Port Authentication > 802.1x > Guest VLAN GS1920 Series User’s Guide...

  • Page 160: Activate Mac Authentication

    Cancel Click Cancel to begin configuring this screen afresh. 18.4 Activate MAC Authentication Use this screen to activate MAC authentication. In the Port Authentication screen click MAC Authentication to display the configuration screen as shown. GS1920 Series User’s Guide...
  • Page 161 Switch uses the Aging Time configured in the Switch Setup screen. Note: If the Aging Time in the Switch Setup screen is set to a lower value, then it supersedes this setting. See Section 8.5 on page Port This field displays a port number. GS1920 Series User’s Guide...
  • Page 162 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 163: Port Security

    163) to enable port security and disable MAC address learning. You can also enable the port security feature on a port. 19.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
  • Page 164 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. GS1920 Series User’s Guide...
  • Page 165 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 166: Time Range

    166) to view or define a schedule on the Switch. 20.2 Configuring Time Range Click Advanced Application > Time Range in the navigation panel to display the screen as shown. Figure 120 Advanced Application > Time Range GS1920 Series User’s Guide...
  • Page 167 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rule(s) that you want to remove and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es). GS1920 Series User’s Guide...

  • Page 168: Classifier

    Configure policy rules to define actions to be performed on a classified traffic flow (refer to Chapter 22 on page 177 to configure policy rules). 21.2 Classifier Status Use this screen to to view the classifiers configured on the Switch and how many times the traffic matches the rules. GS1920 Series User’s Guide...

  • Page 169: Classifier Configuration

    (or policy) to act upon the traffic that matches the rules. To configure policy rules, refer to Chapter 22 on page 177. In the Classifier Status screen click Classifier Configuration to display the configuration screen as shown. GS1920 Series User’s Guide...
  • Page 170 Chapter 21 Classifier Figure 122 Advanced Application > Classifier > Classifier Configuration GS1920 Series User’s Guide...
  • Page 171 For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. If you leave the Mask field blank, the Switch automatically sets the mask to ff:ff:ff:ff:ff:ff. GS1920 Series User’s Guide...
  • Page 172 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields back to your previous configuration. Clear Click Clear to set the above fields back to the factory defaults. GS1920 Series User’s Guide...

  • Page 173: Viewing And Editing Classifier Configuration Summary

    ETHERNET TYPE PROTOCOL NUMBER IP ETHII 0800 X.75 Internet 0801 NBS Internet 0802 ECMA Internet 0803 Chaosnet 0804 X.25 Level 3 0805 XNS Compat 0807 Banyan Systems 0BAD BBN Simnet 5208 IBM SNA 80D5 AppleTalk AARP 80F3 GS1920 Series User’s Guide...

  • Page 174: Classifier Global Setting

    Use this screen to configure the match order and enable logging on the Switch. In the Classifier Configuration screen click Classifier Global Setting to display the configuration screen as shown. Figure 124 Advanced Application > Classifier > Classifier Configuration > Classifier Global Setting GS1920 Series User’s Guide...

  • Page 175: Classifier Example

    The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. After you have configured a classifier, you can configure a policy (in the Policy screen) to define action(s) on the classified traffic flow. GS1920 Series User’s Guide...
  • Page 176 Chapter 21 Classifier Figure 125 Classifier: Example GS1920 Series User’s Guide...

  • Page 177: Policy Rule

    22.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to Section 21.3 on page 169 more information. Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
  • Page 178 Type the number of an outgoing port. Priority Specify a priority level. Rate Limit You can configure the desired bandwidth available to a traffic flow. Traffic that exceeds the maximum bandwidth allocated (in cases where the network is congested) is dropped. GS1920 Series User’s Guide...
  • Page 179 This field displays the name(s) of the classifier to which this policy applies. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. GS1920 Series User’s Guide...

  • Page 180: Policy Example

    The figure below shows an example Policy screen where you configure a policy to limit bandwidth on a traffic flow classified using the Example classifier (refer to Section 21.5 on page 175). Figure 127 Policy Example GS1920 Series User’s Guide...

  • Page 181: Queuing Method

    A queue is a given an amount of bandwidth irrespective of the incoming traffic on that port. This queue then moves to the back of the list. The next queue is given GS1920 Series User’s Guide...

  • Page 182: Configuring Queuing

    Use this screen to set priorities for the queues of the Switch. This distributes bandwidth across the different traffic queues. Click Advanced Application > Queuing Method in the navigation panel. Figure 128 Advanced Application > Queuing Method GS1920 Series User’s Guide...
  • Page 183 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 184: Multicast

    IP addresses in the Class D range (224.0.0.0 to 239.255.255.255) are used for IP multicasting. Certain IP multicast numbers are reserved by IANA for special purposes (see the IANA website for more information). GS1920 Series User’s Guide...
  • Page 185 In the following MLD snooping-proxy example, all connected upstream ports (1 ~7) are treated as one interface. The connection between ports 8 and 9 is blocked by STP to break the loop. If there is GS1920 Series User’s Guide...
  • Page 186 The following figure shows a network example. The subscriber VLAN (1, 2 and 3) information is hidden from the streaming media server, S. In addition, the multicast VLAN information is only visible to the Switch and S. GS1920 Series User’s Guide...
  • Page 187 (in this case, an uplink port on the Switch). If there is another subscriber device connected to this port in the same subscriber VLAN, the receiving port will still be on the list of forwarding destination for the multicast traffic. Otherwise, the Switch removes the receiver port from the forwarding table. GS1920 Series User’s Guide...

  • Page 188: Multicast Setup

    Click Advanced Application > Multicast > IPv4 Multicast to display the screen as shown. This screen shows the IPv4 multicast group information. See Section 24.1 on page 184 for more information on multicasting. Figure 132 Advanced Application > Multicast > IPv4 Multicast GS1920 Series User’s Guide...

  • Page 189: Igmp Snooping

    Click the IGMP Snooping link in the Advanced Application > Multicast > IPv4 Multicast screen to display the screen as shown. See Section 24.1 on page 184 for more information on multicasting. Figure 133 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping GS1920 Series User’s Guide...
  • Page 190 This defines how many seconds the Switch waits for an IGMP report before removing an IGMP snooping membership entry when an IGMP leave message is received on this port from a host. GS1920 Series User’s Guide...

  • Page 191: Igmp Snooping Vlan

    Click Advanced Application > Multicast > IPv4 Multicast in the navigation panel. Click the IGMP Snooping link and then the IGMP Snooping VLAN link to display the screen as shown. See IGMP Snooping and VLANs on page 185 for more information on IGMP Snooping VLAN. GS1920 Series User’s Guide...
  • Page 192 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to your previous configuration. Clear Click Clear to reset the fields to the factory defaults. GS1920 Series User’s Guide...

  • Page 193: Igmp Filtering Profile

    To configure additional rule(s) for a profile that you have already added, enter the profile name and specify a different IP multicast address range. Start Address Type the starting multicast IP address for a range of multicast IP addresses that you want to belong to the IGMP filter profile. GS1920 Series User’s Guide...

  • Page 194: Ipv6 Multicast Status

    This field displays IP multicast group addresses. Group Timeout This field displays the time (in seconds) that elapses before the Switch removes a MLD group membership entry if it does not receive report messages from the port. GS1920 Series User’s Guide...

  • Page 195: Mld Snooping-Proxy

    24.4.2 MLD Snooping-proxy VLAN Click the VLAN link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy screen to display the screen as shown. See Section 24.1 on page 184 for more information on multicasting. GS1920 Series User’s Guide...
  • Page 196 This value should be exactly the same as what’s configured in the connected multicast router. This value is used to calculate the amount of time an MLD snooping membership entry (learned only on the upstream port) can remain in the forwarding table. GS1920 Series User’s Guide...

  • Page 197: Mld Snooping-Proxy Vlan Port Role Setting

    Click the Port Role Setting link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN screen to display the screen as shown. See Section 24.1 on page for more information on multicasting. GS1920 Series User’s Guide...
  • Page 198 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. GS1920 Series User’s Guide...

  • Page 199: Mld Snooping-Proxy Filtering

    24.4.4 MLD Snooping-proxy Filtering Use this screen to configure the Switch’s MLD filtering settings. Click the Filtering link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy screen to display the screen as shown. GS1920 Series User’s Guide...
  • Page 200 Select the name of the MLD filtering profile to use for this port. Otherwise, select Default to prohibit the port from joining any multicast group. You can create MLD filtering profiles in the Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering > Filtering Profile screen. GS1920 Series User’s Guide...

  • Page 201: Mld Snooping-Proxy Filtering Profile

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Clear Click Clear to reset the fields to the factory defaults. GS1920 Series User’s Guide...

  • Page 202: General Mvr Configuration

    Note: You can create up to five multicast VLANs and up to 256 multicast rules on the Switch. Note: Your Switch automatically creates a static VLAN (with the same VID) when you create a multicast VLAN in this screen. GS1920 Series User’s Guide...
  • Page 203 Select Dynamic to send IGMP reports or MLD messages to all MVR source ports in the multicast VLAN. Select Compatible to set the Switch not to send IGMP reports or MLD messages. Port This field displays the port number on the Switch. GS1920 Series User’s Guide...

  • Page 204: Mvr Group Configuration

    Use this screen to configure MVR IP multicast group address(es). Click the Group Configuration link in the MVR screen. Note: A port can belong to more than one multicast VLAN. However, IP multicast group addresses in different multicast VLANs cannot overlap. GS1920 Series User’s Guide...
  • Page 205 Delete button. You can select the check box in the table heading row to select all profiles. To delete a rule(s) from a profile, select the rule(s) that you want to remove , then click the Delete button. GS1920 Series User’s Guide...

  • Page 206: Mvr Configuration Example

    Figure 144 MVR Configuration Example News: 224.1.4.10 ~ 224.1.4.50 Movie: 230.1.2.50 ~230.1.2.60 VLAN 1 Multicast VID 200 To configure the MVR settings on the Switch, create a multicast VLAN in the MVR screen and set the receiver and source ports. GS1920 Series User’s Guide...
  • Page 207 To set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The following figure shows an example where two IPv4 multicast groups (News and Movie) are configured for the multicast VLAN 200. GS1920 Series User’s Guide...
  • Page 208 Chapter 24 Multicast Figure 146 MVR Group Configuration Example-1 EXAMPLE Figure 147 MVR Group Configuration Example-2 EXAMPLE GS1920 Series User’s Guide...

  • Page 209: Aaa

    Authorization is the process of determining what a user is allowed to do. Different user accounts may have higher or lower privilege levels associated with them. For example, user A may have the right to create new login accounts on the Switch but user B cannot. The Switch can authorize users GS1920 Series User’s Guide...

  • Page 210: Aaa Screens

    Switch. First, configure your authentication server settings (RADIUS, TACACS+ or both) and then set up the authentication priority, activate authorization. Click Advanced Application > AAA in the navigation panel to display the screen as shown. Figure 149 Advanced Application > AAA GS1920 Series User’s Guide...

  • Page 211: Radius Server Setup

    30 seconds, then the Switch waits for a response from the first RADIUS server for 15 seconds and then tries the second RADIUS server. Index This is a read-only number representing a RADIUS server entry. GS1920 Series User’s Guide...

  • Page 212: Tacacs+ Server Setup

    Use this screen to configure your TACACS+ server settings. See RADIUS and TACACS+ on page 210 for more information on TACACS+ servers. Click on the TACACS+ Server Setup link in the AAA screen to view the screen as shown. GS1920 Series User’s Guide...
  • Page 213 TACACS+ server and the Switch. Delete Check this box if you want to remove an existing TACACS+ server entry from the Switch. This entry is deleted when you click Apply. GS1920 Series User’s Guide...

  • Page 214: Aaa Setup

    Click Cancel to begin configuring this screen afresh. 25.5 AAA Setup Use this screen to configure authentication, authorization and accounting settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. GS1920 Series User’s Guide...
  • Page 215 • Dot1x: Allow an IEEE 802.1x client to have different bandwidth limit or VLAN ID assigned via the external server. Active Select this to activate authorization for a specified event types. GS1920 Series User’s Guide...

  • Page 216: Technical Reference

    RFC 2865 standard specifies a method for sending vendor-specific information between a RADIUS server and a network access device (for example, the Switch). A company can create Vendor Specific Attributes (VSAs) to expand the functionality of a RADIUS server. GS1920 Series User’s Guide...

  • Page 217: Tunnel Protocol Attribute

    You can configure tunnel protocol attributes on the RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication. The port VLAN settings are fixed and untagged. This will also set the port’s VID. The following table GS1920 Series User’s Guide...

  • Page 218: Supported Radius Attributes

    - The format of the User-Name attribute is $enab#$, where # is the privilege level (1-14). User-Password NAS-Identifier NAS-IP-Address 25.6.3.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 25.6.3.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type GS1920 Series User’s Guide...
  • Page 219 Chapter 25 AAA - This value is set to Ethernet(15) on the Switch. Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator GS1920 Series User’s Guide...

  • Page 220: Ip Source Guard

    MAC address filters that were created because the Switch identified an unauthorized ARP packet. • Use the ARP Inspection VLAN Status screen (Section 26.8 on page 234) to look at various statistics about ARP packets in each VLAN. GS1920 Series User’s Guide...

  • Page 221: What You Need To Know

    Table 96 Advanced Application > IP Source Guard LABEL DESCRIPTION IPv4 Source Click the link to open screens where you can view and manage static bindings, configure Guard Setup DHCP snooping or ARP inspection and look at various statistics. GS1920 Series User’s Guide...

  • Page 222: Ipv4 Source Guard Setup

    If you try to create a static binding with the same MAC address and VLAN ID as an existing static binding, the new static binding replaces the original one. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > Static Binding. GS1920 Series User’s Guide...
  • Page 223 Click this to create the specified static binding or to update an existing one. Cancel Click this to reset the values above based on the last selected static binding or, if not applicable, to clear the fields above. GS1920 Series User’s Guide...

  • Page 224: Dhcp Snooping

    Click Cancel to clear the check boxes. 26.5 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping. GS1920 Series User’s Guide...
  • Page 225 This section displays the current settings for the DHCP snooping database. You can configure them in the DHCP Snooping Configure screen. See Section 26.6 on page 227. Agent URL This field displays the location of the DHCP snooping database. GS1920 Series User’s Guide...
  • Page 226 This field displays the number of times the Switch was unable to update the bindings in the DHCP snooping database. Database detail First successful This field displays the first time the Switch accessed the DHCP snooping database access for any reason. GS1920 Series User’s Guide...

  • Page 227: Dhcp Snooping Configure

    TFTP server so that they are still available after a restart. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure. GS1920 Series User’s Guide...
  • Page 228 Enter how long (10-65535 seconds) the Switch waits to update the DHCP snooping database the first time the current bindings change after an update. Once the next update is scheduled, additional changes in current bindings are automatically included in the next update. GS1920 Series User’s Guide...

  • Page 229: Dhcp Snooping Port Configure

    You can also specify the maximum number for DHCP packets that each port (trusted or untrusted) can receive each second. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > Port. GS1920 Series User’s Guide...
  • Page 230 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. GS1920 Series User’s Guide...

  • Page 231: Dhcp Snooping Vlan Configure

    Use this section to specify the VLANs you want to manage in the section below. Start VID Enter the lowest VLAN ID you want to manage in the section below. End VID Enter the highest VLAN ID you want to manage in the section below. GS1920 Series User’s Guide...

  • Page 232: Dhcp Snooping Vlan Port Configure

    Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > VLAN > Port. Figure 160 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > VLAN > Port GS1920 Series User’s Guide...

  • Page 233: Arp Inspection Status

    MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection. GS1920 Series User’s Guide...

  • Page 234: Arp Inspection Vlan Status

    Use this screen to look at various statistics about ARP packets in each VLAN. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > VLAN Status. GS1920 Series User’s Guide...

  • Page 235: Arp Inspection Log Status

    Use this screen to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Log Status. GS1920 Series User’s Guide...
  • Page 236 In the ARP Inspection VLAN Configure screen, you can configure the Switch to generate log messages when ARP packets are discarded or forwarded based on the VLAN ID of the ARP packet. See Section 26.10.2 on page 240. Time This field displays when the log message was generated. GS1920 Series User’s Guide...

  • Page 237: Arp Inspection Configure

    Click Clearing log status table in the ARP Inspection Log Status screen to clear the log and reset this counter. See Section 26.9 on page 235. GS1920 Series User’s Guide...

  • Page 238: Arp Inspection Port Configure

    Switch receives ARP packets on each untrusted port. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Configure > Port. GS1920 Series User’s Guide...
  • Page 239 • The rate at which ARP packets arrive is too high. You can specify the maximum rate at which ARP packets can arrive on untrusted ports. Limit These settings have no effect on trusted ports. GS1920 Series User’s Guide...

  • Page 240: Arp Inspection Vlan Configure

    This field displays the VLAN ID of each VLAN in the range specified above. If you configure the * VLAN, the settings are applied to all VLANs. Enabled Select Yes to enable ARP inspection on the VLAN. Select No to disable ARP inspection on the VLAN. GS1920 Series User’s Guide...

  • Page 241: Technical Reference

    • The source MAC address and source IP address in the packet do not match any of the current bindings. • The packet is a RELEASE or DECLINE packet, and the source MAC address and source port do not match any of the current bindings. GS1920 Series User’s Guide...
  • Page 242 When the DHCP server responds, the Switch removes the information in the Agent Information field before forwarding the response to the original source. You can configure this setting for each source VLAN. This setting is independent of the DHCP relay settings (Chapter 36 on page 304). GS1920 Series User’s Guide...

  • Page 243: Arp Inspection Overview

    • They do not use the same space in memory that regular MAC address filters use. • They appear only in the ARP Inspection screens and commands, not in the MAC Address Filter screens and commands. GS1920 Series User’s Guide...
  • Page 244 ARP inspection so that the Switch has enough time to build the binding table. Enable ARP inspection on each VLAN. Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. GS1920 Series User’s Guide...

  • Page 245: Loop Guard

    If a switch (not in loop state) connects to a switch in loop state, then it will be affected by the switch in loop state in the following way: GS1920 Series User’s Guide...
  • Page 246 In this example, the probe packet is sent from port N and returns on another port. As long as loop guard is enabled on port N. The Switch will shut down port N if it detects that the probe packet has returned to the Switch. GS1920 Series User’s Guide...

  • Page 247: Loop Guard Setup

    Click Advanced Application > Loop Guard in the navigation panel to display the screen as shown. Note: The loop guard feature can not be enabled on the ports that have Spanning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Figure 173 Advanced Application > Loop Guard GS1920 Series User’s Guide...
  • Page 248 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 249: Layer 2 Protocol Tunneling

    To emulate a point-to-point topology between two customer switches at different sites, such as A and B, you can enable protocol tunneling on edge switches 1 and 2 for PAgP (Port Aggregation Protocol), LACP or UDLD (UniDirectional Link Detection). GS1920 Series User’s Guide...

  • Page 250: Configuring Layer 2 Protocol Tunneling

    Incoming encapsulated layer 2 protocol packets received on a tunnel port are decapsulated and sent to an access port. 28.2 Configuring Layer 2 Protocol Tunneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
  • Page 251 Note: Changes in this row are copied to all the ports as soon as you make them. Select this option to have the Switch tunnel CDP (Cisco Discovery Protocol) packets so that other Cisco devices can be discovered through the service provider’s network. GS1920 Series User’s Guide...
  • Page 252 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 253: Pppoe

    Active Discovery Initialization) and PADR (PPPoE Active Discovery Request) packets from PPPoE clients. This tag is defined in RFC 2516 and has the following format for this feature. Table 112 PPPoE Intermediate Agent Vendor-specific Tag Format Tag_Type Tag_Len Value (0x0105) GS1920 Series User’s Guide...
  • Page 254 If you do not configure a Circuit ID string for a specific VLAN on a port or for a specific port, and disable the flexible Circuit ID syntax in the PPPoE > Intermediate Agent screen, the Switch automatically generates a Circuit ID string according to the default Circuit ID syntax which is GS1920 Series User’s Guide...

  • Page 255: Pppoe Screen

    Use this screen to configure the PPPoE Intermediate Agent on the Switch. Click Advanced Application > PPPoE in the navigation panel to display the screen as shown. Click Click Here to go to the Intermediate Agent screen. Figure 177 Advanced Application > PPPoE Intermediate Agent GS1920 Series User’s Guide...

  • Page 256: Pppoe Intermediate Agent

    Select the variables that you want the Switch to generate and add in the Agent Circuit ID sub-option. The variable options include sp, sv, pv and spv which indicate combinations of slot-port, slot-VLAN, port-VLAN and slot-port-VLAN respectively. The Switch enters a zero into the PADI and PADR packets for the slot value. GS1920 Series User’s Guide...

  • Page 257: Pppoe Ia Per-Port

    Note: The Switch will drop all PPPoE packets if you enable the PPPoE Intermediate Agent on the Switch and there are no trusted ports. Click the Port link in the Intermediate Agent screen to display the screen as shown. Figure 179 Advanced Application > PPPoE > Intermediate Agent > Port GS1920 Series User’s Guide...

  • Page 258: Pppoe Ia Per-Port Per-Vlan

    29.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPPoE IA settings that apply to a specific VLAN on a port. Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown. GS1920 Series User’s Guide...

  • Page 259: Pppoe Ia For Vlan

    Use this screen to set whether the PPPoE Intermediate Agent is enabled on a VLAN and whether the Switch appends the Circuit ID and/or Remote ID to PPPoE discovery packets from a specific VLAN. Click the VLAN link in the Intermediate Agent screen to display the screen as shown. GS1920 Series User’s Guide...
  • Page 260 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 261: Error Disable

    • Use the Errdisable Recovery screen (Section 30.6 on page 266) to set the Switch to automatically undo an action after the error is gone. GS1920 Series User’s Guide...

  • Page 262: Error Disable Screen

    Click the Click here link next to Errdisable Status in the Advanced Application > Errdisable screen to display the screen as shown. GS1920 Series User’s Guide...
  • Page 263 Switch to take the specified action. Active This field displays whether the control packets (ARP, BPDU, and/or IGMP) on the port is being detected or not. It also shows whether loop guard is enabled on the port. GS1920 Series User’s Guide...

  • Page 264: Cpu Protection Configuration

    Advanced Application > Errdisable screen to display the screen as shown. Note: After you configure this screen, make sure you also enable error detection for the specific control packets in the Advanced Application > Errdisable > Errdisable Detect screen. GS1920 Series User’s Guide...
  • Page 265 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 266: Error-Disable Detect Configuration

    Use this screen to configure the Switch to automatically undo an action after the error is gone. Click the Click Here link next to Errdisable Recovery in the Advanced Application > Errdisable screen to display the screen as shown. GS1920 Series User’s Guide...
  • Page 267 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 268: Private Vlan

    Note: Make sure you keep at least one port in the promiscuous port list for a VLAN with private VLAN enabled. Otherwise, this VLAN is blocked from the whole network. 31.2 Configuring Private VLAN Click Advanced Application > Private VLAN in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
  • Page 269 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rule(s) that you want to remove and then click the Delete button. Cancel Click Cancel to clear the check boxes. GS1920 Series User’s Guide...

  • Page 270: Green Ethernet

    32.2 Configuring Green Ethernet Click Advanced Application > Green Ethernet in the navigation panel to display the screen as shown. Note: EEE, Auto Power Down and Short Reach are not supported on an uplink port. GS1920 Series User’s Guide...
  • Page 271 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 272: Link Layer Discovery Protocol (Lldp)

    The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. The next figure demonstrates that the network devices Switches and Routers (S and R) transmit and receive device information via LLDPDU and the network manager can query the information using Simple Network Management Protocol (SNMP). GS1920 Series User’s Guide...

  • Page 273: Lldp-Med Overview

    Since LLDPDU updates status and configuration information periodically, network managers may check the result of provision via remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. GS1920 Series User’s Guide...

  • Page 274: Lldp Screens

    Click here to show a screen with LLDP information from the neighboring devices. Status LLDP Click here to show a screen to configure LLDP parameters. Configuration LLDP-MED LLDP-MED Click here to show a screen to configure LLDP-MED (Link Layer Discovery Protocol for Configuration Media Endpoint Devices) parameters. GS1920 Series User’s Guide...

  • Page 275: Lldp Local Status

    This screen displays a summary of LLDP status on this Switch. Click Advanced Application > LLDP > LLDP Local Status to display the screen as shown next. Figure 193 Advanced Application > LLDP > LLDP Local Status GS1920 Series User’s Guide...

  • Page 276: Lldp Local Port Status Detail

    This screen displays detailed LLDP status for each port on this Switch. Click Advanced Application > LLDP > LLDP Local Status and then, click a port number, for example 1 in the local port column to display the screen as shown next. GS1920 Series User’s Guide...
  • Page 277 Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 194 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail GS1920 Series User’s Guide...
  • Page 278 Capabilities This field displays which LLDP-MED TLV are capable to transmit on the Switch. • Network Policy • Location Device Type This is the LLDP-MED device class. The ZyXEL Switch device type is: • Network Connectivity GS1920 Series User’s Guide...

  • Page 279: Lldp Remote Status

    This displays the system name of the remote device. Management This displays the management address of the remote device. It could be the MAC Address address or IP address. You can click on the IP address hyperlink directly. GS1920 Series User’s Guide...

  • Page 280: Lldp Remote Port Status Detail

    Table 131 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Basic TLV) LABEL DESCRIPTION Local Port This displays the number of the Switch’s port to which the remote device is connected. Basic TLV GS1920 Series User’s Guide...
  • Page 281 System Capabilities Supported • System Capabilities Enabled Management This displays the following management address parameters of the remote device. Address TLV • Management Address Subtype • Management Address • Interface Number Subtype • Interface Number • Object Identifier GS1920 Series User’s Guide...
  • Page 282 Table 132 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Dot1 and Dot3 TLV) LABEL DESCRIPTION Dot1 TLV Port VLAN ID This displays the VLAN ID of this port on the remote device. GS1920 Series User’s Guide...
  • Page 283 • Port Class • MDI Supported • MDI Enabled • Pair Controlable • PSE Power Pairs • Power Class Max Frame This displays the maximum supported frame size in octets. Size TLV GS1920 Series User’s Guide...
  • Page 284 Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 198 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED TLV) GS1920 Series User’s Guide...
  • Page 285 This shows the location information of a caller by its: Identification • Coordinate-base LCI - latitude and longitude coordinates of the Location Configuration Information (LCI) • Civic LCI - IETF Geopriv Civic Address based Location Configuration Information • ELIN - (Emergency Location Identifier Number) GS1920 Series User’s Guide...

  • Page 286: Lldp Configuration

    Power Value - power requirement, in fractions of Watts, in current configuration 33.6 LLDP Configuration Use this screen to configure global LLDP settings on the Switch. Click Advanced Application > LLDP > LLDP Configuration (Click Here) to display the screen as shown next. GS1920 Series User’s Guide...
  • Page 287 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. Port This displays the Switch’s port number. * means all ports. GS1920 Series User’s Guide...

  • Page 288: Lldp Configuration Basic Tlv Setting

    Use this screen to configure Basic TLV settings. Click Advanced Application > LLDP > LLDP Configuration (Click Here) > Basic TLV Setting to display the screen as shown next. Figure 200 Advanced Application > LLDP > LLDP Configuration> Basic TLV Setting GS1920 Series User’s Guide...

  • Page 289: Lldp Configuration Org-Specific Tlv Setting

    Click Cancel to begin configuring this screen afresh. 33.6.2 LLDP Configuration Org-specific TLV Setting Use this screen to configure organization-specific TLV settings. Click Advanced Application > LLDP > LLDP Configuration (Click Here) > Org-specific TLV Setting to display the screen as shown next. GS1920 Series User’s Guide...
  • Page 290 Configuration/Status TLVs on the port(s). All check boxes in this column are enabled by default. Max Frame Select the check box(es) to enable or disable the sending of IEEE 802.3 Max Frame Size Size TLVs on the port(s). GS1920 Series User’s Guide...

  • Page 291: Lldp-Med Configuration

    Cancel Click Cancel to begin configuring this screen afresh. 33.7 LLDP-MED Configuration Click Advanced Application > LLDP > LLDP-MED Configuration to display the screen as shown next. Figure 202 Advanced Application > LLDP > LLDP-MED Configuration GS1920 Series User’s Guide...

  • Page 292: Lldp-Med Network Policy

    Click Cancel to begin configuring this screen afresh. 33.8 LLDP-MED Network Policy Click Advanced Application > LLDP > LLDP-MED Network Policy (Click Here) to display the screen as shown next. Figure 203 Advanced Application > LLDP > LLDP-MED Network Policy GS1920 Series User’s Guide...

  • Page 293: Lldp-Med Location

    Check the rules that you want to remove, then click the Delete button. Cancel Click Cancel to clear the selected check boxes. 33.9 LLDP-MED Location Click Advanced Application > LLDP > LLDP-MED Location (Click Here) to display the screen as shown next. GS1920 Series User’s Guide...
  • Page 294 Enter the latitude information. The value should be from 0º to 90º. The negative value represents the South. • north • south Longitude Enter the longitude information. The value should be from 0º to 180º. The negative value represents the West. • west • east GS1920 Series User’s Guide...
  • Page 295 Country, State, County, City, Street, Number, ZIP code and additional information. ELIN Number This field shows the Emergency Location Identification Number (ELIN), which is used to identify endpoint devices when they issue emergency call services. The valid length is form 10 to 25 characters. GS1920 Series User’s Guide...
  • Page 296 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the locations that you want to remove, then click the Delete button. Cancel Click Cancel to clear the selected check boxes. GS1920 Series User’s Guide...

  • Page 297: Static Route

    To enable IPv4 static route, configure the static route settings in the IP Application > Static Routing > IPv4 Static Route screen. 34.3 IPv4 Static Route Click IP Application > Static Routing > IPv4 Static Route in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
  • Page 298 This field displays the subnet mask for this destination. Gateway This field displays the IP address of the gateway. The gateway is an immediate neighbor of Address your Switch that will forward the packet to the destination. GS1920 Series User’s Guide...
  • Page 299 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. GS1920 Series User’s Guide...

  • Page 300: Differentiated Services

    Figure 207 DiffServ: Differentiated Service Field DSCP (6 bits) CU (2 bits) DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. GS1920 Series User’s Guide...

  • Page 301: Activating Diffserv

    S - Silver B - Bronze 35.2 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the Switch. Click IP Application > DiffServ in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...

  • Page 302: Dscp-To-Ieee 802.1P Priority Settings

    35.3 DSCP-to-IEEE 802.1p Priority Settings You can configure the DSCP to IEEE 802.1p mapping to allow the Switch to prioritize all traffic based on the incoming DSCP value according to the DiffServ to IEEE 802.1p mapping table. GS1920 Series User’s Guide...

  • Page 303: Configuring Dscp Settings

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 304: Dhcp

    • Global - The Switch forwards all DHCP requests to the same DHCP server. • VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can be configured to relay DHCP requests to different DHCP servers for clients in different VLAN. GS1920 Series User’s Guide...

  • Page 305: Dhcp Configuration

    (such as the IP address and subnet mask) between a DHCP client and a DHCP server. Once the DHCP client obtains an IP address and can connect to the network, network information renewal is done between the DHCP client and the DHCP server without the help of the Switch. GS1920 Series User’s Guide...

  • Page 306: Dhcpv4 Relay Agent Information

    There are two types of sub-option: “Agent Circuit ID Sub-option” and “Agent Remote ID Sub- option”. They have the following formats. Table 147 DHCP Relay Agent Circuit ID Sub-option Format SubOpt Code Length Value Slot ID, Port ID, VLAN ID, System Name or String (1 byte) (1 byte) GS1920 Series User’s Guide...

  • Page 307: Dhcpv4 Option 82 Profile

    This is the system name you configure in the Basic Setting > General Setup screen. Select this option for the Switch to add the system name to the client DHCP requests that it relays to a DHCP server. GS1920 Series User’s Guide...

  • Page 308: Configuring Dhcpv4 Global Relay

    Use this screen to configure global DHCPv4 relay. Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Global link to display the screen as shown. Figure 214 IP Application > DHCP > DHCPv4 > Global GS1920 Series User’s Guide...

  • Page 309: Dhcpv4 Global Relay Port Configure

    The Switch adds the Circuit ID sub-option and/or Remote ID sub-option specified in the profile to DHCP requests that it relays to a DHCP server. The profile you select here has priority over the one you select in the DHCP > DHCPv4 > Global screen. GS1920 Series User’s Guide...

  • Page 310: Global Dhcp Relay Configuration Example

    (default1 in this example) to set the Switch to send additional information (such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. GS1920 Series User’s Guide...

  • Page 311: Configuring Dhcpv4 Vlan Settings

    Select a pre-defined DHCP option 82 profile that the Switch applies to all ports in this VLAN. Profile The Switch adds the Circuit ID sub-option and/or Remote ID sub-option specified in the profile to DHCP requests that it relays to a DHCP server. GS1920 Series User’s Guide...

  • Page 312: Dhcpv4 Vlan Port Configure

    Enter the number of port(s) to which you want to apply the specified DHCP option 82 profile. You can enter multiple ports separated by (no space) comma (,) or hyphen (-). For example, enter “3-5” for ports 3, 4, and 5. Enter “3,5,7” for ports 3, 5, and 7. GS1920 Series User’s Guide...

  • Page 313: Example: Dhcp Relay For Two Vlans

    (VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.100. Figure 220 DHCP Relay for Two VLANs DHCP: 192.168.1.100 VLAN 1 VLAN 2 DHCP: 172.16.10.100 For the example network, configure the VLAN Setting screen as shown. GS1920 Series User’s Guide...

  • Page 314: Dhcpv6 Relay

    The interface-ID should not change even after the relay agent restarts. Use this screen to configure DHCPv6 relay settings for a specific VLAN on the Switch. Click IP Application > DHCP > DHCPv6 in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
  • Page 315 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the entry(ies) that you want to remove and then click the Delete button. Cancel Click Cancel to clear the selected check boxes. GS1920 Series User’s Guide...

  • Page 316: Arp Setup

    In the following example, the Switch does not have IP address and MAC address mapping information for hosts A and B in its ARP table, and host A wants to ping host B. Host A sends an GS1920 Series User’s Guide...
  • Page 317 In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. ARP-Request When the Switch is in ARP-Request learning mode, it updates the ARP table with both ARP replies, gratuitous ARP requests and ARP requests. GS1920 Series User’s Guide...

  • Page 318: Arp Setup

    Figure 223 IP Application > ARP Setup 37.2.1 ARP Learning Use this screen to configure each port’s ARP learning mode. Click the link next to ARP Learning in the IP Application > ARP Setup screen to display the screen as shown next. GS1920 Series User’s Guide...
  • Page 319 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 320: Maintenance

    324) to save your configurations for later use. 38.2 The Maintenance Screen Use this screen to manage firmware and your configuration files. Click Management > Maintenance in the navigation panel to open the following screen. Figure 225 Management > Maintenance GS1920 Series User’s Guide...

  • Page 321: Erase Running-Configuration

    In the Maintenance screen, click the Click Here button next to Erase Running-Configuration to clear all Switch configuration information you configured and return to the factory defaults. Click OK to reset all Switch configurations to the factory defaults. Figure 226 Erase Running-Configuration: Confirmation GS1920 Series User’s Guide...

  • Page 322: Save Configuration

    Switch. 38.3 Firmware Upgrade Use the following screen to upgrade your Switch to the latest firmware. The Switch supports dual firmware images, Firmware 1 and Firmware 2. Use this screen to specify which image is updated GS1920 Series User’s Guide...
  • Page 323 Config Boot Image Select which firmware (Firmware 1 or Firmware 2) should load, click Apply and reboot the Switch to see changes, you will also see changes in the Current Boot Image field above as well. GS1920 Series User’s Guide...

  • Page 324: Restore A Configuration File

    Backing up your Switch configurations allows you to create various “snap shots” of your device from which you may restore at a later date. Back up your current Switch configuration to a computer using the Backup Configuration screen. GS1920 Series User’s Guide...

  • Page 325: Tech-Support

    Switch. The Tech Support menu eases your effort in obtaining reports. Click Management > Maintenance > Tech-Support to see the following screen. Figure 231 Management > Maintenance > Tech-Support GS1920 Series User’s Guide...

  • Page 326: Technical Reference

    This section provides technical background information on the topics discussed in this chapter. 38.7.1 FTP Command Line This section shows some examples of uploading to or downloading files from the Switch using FTP commands. First, understand the filename conventions. GS1920 Series User’s Guide...

  • Page 327: Filename Conventions

    Enter open, followed by a space and the IP address of your Switch. Press [ENTER] when prompted for a username. Enter your password as requested (the default is “1234”). Enter bin to set transfer mode to binary. GS1920 Series User’s Guide...

  • Page 328: Gui-Based Ftp Clients

    • FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. GS1920 Series User’s Guide...

  • Page 329: Access Control

    “trusted computers” from which an administrator may use a service to manage the Switch. 39.2 The Access Control Main Screen Use this screen to display the main screen. Click Management > Access Control in the navigation panel to display the main screen as shown. GS1920 Series User’s Guide...

  • Page 330: Configuring Snmp

    Enter the Get Community string, which is the password for the incoming Get- and GetNext- requests from the management station. The Get Community string is only used by SNMP managers using SNMP version 2c or lower. GS1920 Series User’s Guide...

  • Page 331: Configuring Snmp Trap Group

    Setting screen. Use the rest of the screen to select which traps the Switch sends to that SNMP manager. Type Select the categories of SNMP traps that the Switch is to send to the SNMP manager. GS1920 Series User’s Guide...

  • Page 332: Enabling/Disabling Sending Of Snmp Traps On A Port

    The following table describes the labels in this screen. Table 163 Management > Access Control > SNMP > Trap Group > Port LABEL DESCRIPTION Option Select the trap type you want to configure here. Port This field displays a port number. GS1920 Series User’s Guide...

  • Page 333: Configuring Snmp User

    User Information Note: Use the username and password of the login accounts you specify in this screen to create accounts on the SNMP v3 manager. Username Specify the username of a login account on the Switch. GS1920 Series User’s Guide...
  • Page 334 Group This field displays the SNMP group to which this user belongs. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. GS1920 Series User’s Guide...

  • Page 335: Setting Up Login Accounts

    This is the default administrator account with the “admin” user name. You cannot change the default administrator user name. Only the administrator has read/write access. Old Password Type the existing system password (1234 is the default password when shipped). New Password Enter your new system password. GS1920 Series User’s Guide...

  • Page 336: Service Access Control

    “trusted computer(s)” for each service in the Remote Management screen (discussed later). Click Access Control to go back to the main Access Control screen. Figure 238 Management > Access Control > Service Access Control GS1920 Series User’s Guide...

  • Page 337: Remote Management

    Click Management > Access Control > Remote Management to view the screen as shown next. You can specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click Access Control to return to the Access Control screen. GS1920 Series User’s Guide...

  • Page 338: Technical Reference

    Cancel Click Cancel to begin configuring this screen afresh. 39.7 Technical Reference This section provides technical background information on the topics discussed in this chapter. GS1920 Series User’s Guide...

  • Page 339: About Snmp

    Used by the agent to inform the manager of some events. SNMP v3 and Security SNMP v3 enhances security for SNMP management. SNMP managers can be required to authenticate with agents before conducting SNMP management sessions. GS1920 Series User’s Guide...

  • Page 340: Supported Mibs

    The trap is sent when entries in the remote database have any updates. Link Layer Discovery Protocol (LLDP), defined as IEEE 802.1ab, enables LAN devices that support LLDP to exchange their configured settings. This helps eliminate configuration mismatch issues. GS1920 Series User’s Guide...

  • Page 341: Introduction To Https

    SSL client (the computer which requests the HTTPS connection with the Switch), whereas the SSL client only should authenticate itself when the SSL server requires it to do so. Authenticating client certificates is optional and if selected means the SSL-client must send the GS1920 Series User’s Guide...
  • Page 342 When you attempt to access the Switch HTTPS server, a Windows dialog box pops up asking if you trust the server certificate. You see the following Security Alert screen in Internet Explorer. Select Yes to proceed to the web configurator login screen; if you select No, then web configurator access is blocked. GS1920 Series User’s Guide...
  • Page 343 Figure 243 Security Certificate Warning (Internet Explorer 7 or 8) After you log in, you will see the red address bar with the message Certificate Error. Click on Certificate Error next to the address bar and click View certificates. GS1920 Series User’s Guide...
  • Page 344 Mozilla Firefox Warning Messages When you attempt to access the Switch HTTPS server, a This Connection is Unstructed screen may display. If that is the case, click I Understand the Risks and then the Add Exception... button. GS1920 Series User’s Guide...
  • Page 345 Chapter 39 Access Control Figure 246 Security Alert (Mozilla Firefox) Confirm the HTTPS server URL matches. Click Confirm Security Exception to proceed to the web configurator login screen. Figure 247 Security Alert (Mozilla Firefox) EXAMPLE GS1920 Series User’s Guide...
  • Page 346 After you accept the certificate and enter the login username and password, the Switch main screen appears. The lock displayed in the bottom right of the browser status bar or next to the website address denotes a secure connection. Figure 248 Example: Lock Denoting a Secure Connection EXAMPLE GS1920 Series User’s Guide...

  • Page 347: Diagnostic

    Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to ping IP addresses, run a traceroute, perform port tests or show the Switch’s location between devices. Figure 249 Management > Diagnostic GS1920 Series User’s Guide...
  • Page 348 Short: There is an short circuit detected between the wire-pair. Unknown: The Switch failed to run cable diagnostics on the cable connected this port. Unsupported: The port is a fiber port or it is not active. GS1920 Series User’s Guide...
  • Page 349 Enter a time interval (in minutes) and click Blink to show the actual location of the Switch between several devices in a rack. The default time interval is 30 minutes. Click Stop to have the Switch terminate the blinking locater LED. GS1920 Series User’s Guide...

  • Page 350: System Log

    The summary table shows the time the log message was recorded and the reason the log message was generated. Click Refresh to update this screen. Click Clear to clear the whole log, regardless of what is currently displayed on the screen. Click Download to save the log to your computer. GS1920 Series User’s Guide...

  • Page 351: Syslog Setup

    The syslog feature sends logs to an external syslog server. Use this screen to configure the device’s system logging settings and configure a list of external syslog servers. Click Management > Syslog in the navigation panel to display this screen. GS1920 Series User’s Guide...
  • Page 352 Enter the IP address of the syslog server. Log Level Select the severity level(s) of the logs that you want the device to send to this syslog server. The lower the number, the more critical the logs are. GS1920 Series User’s Guide...
  • Page 353 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry(ies). Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 354: Cluster Management

    The switches being managed by the cluster manager switch. In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. Figure 252 Clustering Application Example GS1920 Series User’s Guide...

  • Page 355: What You Can Do

    Index column is a hyperlink leading to the cluster member switch’s web configurator (see Figure 255 on page 358). MacAddr This is the cluster member switch’s hardware MAC address. Name This is the cluster member switch’s System Name. GS1920 Series User’s Guide...

  • Page 356: Clustering Management Configuration

    43.3 Clustering Management Configuration Use this screen to configure clustering management. Click Management > Cluster Management > Configuration to display the next screen. Figure 254 Management > Cluster Management > Configuration EXAMPLE GS1920 Series User’s Guide...
  • Page 357 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Remove Click the Remove button to remove the selected cluster member switch(es) from the cluster. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 358: Technical Reference

    Figure 255 Cluster Management: Cluster Member Web Configurator Screen example example 43.4.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. GS1920 Series User’s Guide...
  • Page 359 430AAOA0.bin member switch. This is the cluster member switch’s firmware name as seen in the cluster fw-00-a0-c5-01-23-46 manager switch. This is the cluster member switch’s configuration file name as seen in the config-00-a0-c5-01-23-46 cluster manager switch. GS1920 Series User’s Guide...

  • Page 360: Mac Table

    Too much port flooding leads to network congestion. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. GS1920 Series User’s Guide...

  • Page 361: Viewing The Mac Table

    44.2 Viewing the MAC Table Use this screen to check whether the MAC address is dynamic or static. Click Management > MAC Table in the navigation panel to display the following screen. Figure 258 Management > MAC Table GS1920 Series User’s Guide...
  • Page 362 This is the VLAN group to which this frame belongs. Port This is the port where the above MAC address is forwarded. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). GS1920 Series User’s Guide...

  • Page 363: Arp Table

    MAC address that replied. 45.2 Viewing the ARP Table Use the ARP table to view IP-to-MAC address mapping(s) and remove specific dynamic ARP entries. Click Management > ARP Table in the navigation panel to open the following screen. GS1920 Series User’s Guide...
  • Page 364 This shows 0 for a static entry. Type This shows whether the IP address is dynamic (learned by the Switch) or static (manually configured in the Basic Setting > IP Setup or IP Application > ARP Setup > Static ARP screen). GS1920 Series User’s Guide...

  • Page 365: Path Mtu Table

    This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. GS1920 Series User’s Guide...

  • Page 366: Configure Clone

    This chapter shows you how you can copy the settings of one port onto other ports. 47.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. GS1920 Series User’s Guide...
  • Page 367 Chapter 47 Configure Clone Figure 261 Management > Configure Clone GS1920 Series User’s Guide...
  • Page 368 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...

  • Page 369: Ipv6 Neighbor Table

    This field displays the IPv6 address of the Switch or a neighboring device. Address This field displays the MAC address of the IPv6 interface on which the IPv6 address is configured or the MAC address of the neighboring device. GS1920 Series User’s Guide...
  • Page 370 • dynamic (D): The IP address to MAC address can be successfully resolved using IPv6 Neighbor Discovery protocol. Is it similar as IPv4 ARP (Address Resolution protocol). • static (S): The interface address is statically configured. GS1920 Series User’s Guide...

  • Page 371: Troubleshooting

    Make sure you understand the normal behavior of the LED. See Section 3.3 on page Check the hardware connections. See Section 49.1 on page 371. Inspect your cables for damage. Contact the vendor to replace any damaged cables. GS1920 Series User’s Guide...

  • Page 372: Switch Access And Login

    Reset the device to its factory defaults, and try to access the Switch with the default IP address. Section 3.4 on page 30. If the problem continues, contact the vendor, or try one of the advanced suggestions. GS1920 Series User’s Guide...
  • Page 373 Switch. To avoid unauthorized access, configure the secured client setting in the Management > Access Control > Remote Management screen. Computers not belonging to the secured client set cannot get permission to access the Switch. GS1920 Series User’s Guide...

  • Page 374: Switch Configuration

    Click Save at the top right corner of the web configurator to save the configuration permanently. See also Section 38.5 on page 324 for more information about how to save your configuration. GS1920 Series User’s Guide...

  • Page 375: Appendix A Customer Support

    • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
  • Page 376 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de Belarus • ZyXEL BY • http://www.zyxel.by...
  • Page 377 Appendix A Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech Republic • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland •...
  • Page 378 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
  • Page 379 Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Israel • ZyXEL Communication Corporation • http://il.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/me/en North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ GS1920 Series User’s Guide...
  • Page 380 Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za GS1920 Series User’s Guide...

  • Page 381: Appendix B Common Services

    File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world wide web. GS1920 Series User’s Guide...
  • Page 382 Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). GS1920 Series User’s Guide...
  • Page 383 TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. GS1920 Series User’s Guide...

  • Page 384: Appendix C Ipv6

    A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 187 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits GS1920 Series User’s Guide...

  • Page 385: Loopback Address

    The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 189 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 GS1920 Series User’s Guide...
  • Page 386 (beginning with fe80). When the interface is connected to a network with a router and the Switch is set to automatically obtain an IPv6 network prefix from the router for the interface, it generates another address which GS1920 Series User’s Guide...
  • Page 387 The DHCP relay agent can add the remote identification (remote-ID) option and the interface-ID option to the Relay-Forward DHCPv6 messages. The remote-ID option carries a user-defined string, In IPv6, all network interfaces can be associated with several addresses. GS1920 Series User’s Guide...
  • Page 388 When the Switch needs to send a packet, it first consults the destination cache to determine the next hop. If there is no matching entry in the destination cache, the Switch uses the prefix list to GS1920 Series User’s Guide...
  • Page 389 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. GS1920 Series User’s Guide...
  • Page 390 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. GS1920 Series User’s Guide...
  • Page 391 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 GS1920 Series User’s Guide...

  • Page 392: Appendix D Legal Information

    This publication is subject to change without notice. Trademarks ZyNOS (ZyXEL Network Operating System) and ZON (ZyXEL One Network)are registered trademarks of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.

  • Page 393: Safety Warnings

    • For PERMANENTLY CONNECTED EQUIPMENT, a readily accessible disconnect device shall be incorporated external to the equipment; • For PLUGGABLE EQUIPMENT, the socket-outlet shall be installed near the equipment and shall be easily accessible. GS1920 Series User’s Guide...
  • Page 394 återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. GS1920 Series User’s Guide...
  • Page 395 Appendix D Legal Information Environmental Product Declaration GS1920 Series User’s Guide...

  • Page 396: Zyxel Limited Warranty

    North American products. Trademarks ZyNOS (ZyXEL Network Operating System) and ZON (ZyXEL One Network)are registered trademarks of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.

  • Page 397: Index

    IEEE 802.1Q VLAN switched workgroup certifications how it works notices learning mode viewing overview setup CFI (Canonical Format Indicator) ARP (Address Resolution Protocol) changing the password ARP inspection 221, 243 Cisco Discovery Protocol, see CDP ARP-Reply CIST GS1920 Series User’s Guide...
  • Page 398 See port cloning DS field copyright DSCP network example CPU management port CPU protection service level current date DiffServ Code Points current time disclaimer customer support DNS (Domain Name System) Domain Name System DS (Differentiated Services) GS1920 Series User’s Guide...
  • Page 399 HTTPS filtering database, MAC table certificates firmware implementation upgrade public keys, private keys 323, 358 flow control HTTPS example back pressure IEEE802.3x forwarding delay frames IEEE 802.1x tagged activate untagged port authentication GS1920 Series User’s Guide...
  • Page 400 Link Aggregation Control Protocol (LACP) IPv6 interface Link Layer Discovery Protocol DHCPv6 client LLDP enable Basic TLV global address global settings global unicast address GS1920 Series User’s Guide...
  • Page 401 MSTP how it works 119, 121 bridge ID sorting criteria configuration digest transfer type forwarding delay viewing Hello Time MAC-based VLAN hello time maintanence Max Age 132, 136 configuration backup maximum hops firmware revision level GS1920 Series User’s Guide...
  • Page 402 PAGP ports password diagnostics 348, 349 administrator mirroring Path MTU speed/duplex Path MTU Discovery standby Per-Hop Behavior power voltage ping, test connection power connector power status PD priority PPPoE IA power management mode agent sub-options GS1920 Series User’s Guide...
  • Page 403 Simple Network Management Protocol, see SNMP Small Form-factor Pluggable (SFP) queuing method SNMP 181, 183 agent and MIB authentication communities management model rack-mounting manager RADIUS advantages network components and tunnel protocol attribute object variables GS1920 Series User’s Guide...
  • Page 404 392, 396 Max Age 124, 125, 128, 129 transceiver MultiSource Agreement (MSA) path cost 120, 125, 128 transceivers port priority 124, 128 installation port role 126, 130 removal port state 121, 126, 130 traps root port destination GS1920 Series User’s Guide...
  • Page 405 ZON neighbor management introduction ZON Utility 66, 91 number of VLANs ZyNOS (ZyXEL Network Operating System) port number ZyXEL Discovery Protocol port settings port-based VLAN port-based, all connected port-based, isolation port-based, wizard GS1920 Series User’s Guide...

Table of Contents

Save PDF