Page 1 GS2 2 1 0 Se r ie s I nt elligent Layer 2 GbE Swit ch Version 4.30 Edit ion 1, 10/ 2015 Quick Start Guide Use r ’s Gu ide D e fa u lt Login D e t a ils LAN I P Address ht t p: / / 192.168.1.1 User Nam e...
Page 2: Related Documentation
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User ’s Guide for a series of product s. Not all product s support all firm ware feat ures. Screenshot s and graphics in t his book m ay differ slight ly from your product due t o differences in your product firm ware or your com put er operat ing syst em .
Page 3 Contents Overview Contents Overview User’s Guide ............................18 Getting to Know Your Switch ........................19 Hardware Installation and Connection ....................24 Hardware Panels .............................27 Technical Reference ..........................33 The Web Configurator ..........................34 Initial Setup Example ..........................42 Tutorials ..............................46 Status and ZON ............................55 Basic Setting ............................64 VLAN ...............................93 Static MAC Forward Setup ........................
Page 4 Contents Overview OAM ..............................318 ZULD ..............................326 Static Route ............................330 Differentiated Services ..........................333 DHCP ..............................337 ARP Setup ............................349 Maintenance ............................353 Access Control ............................362 Diagnostic .............................385 System Log ............................388 Syslog Setup ............................389 Cluster Management ..........................392 MAC Table .............................398 ARP Table .............................401 Path MTU Table ............................403 Configure Clone ............................404 IPv6 Neighbor Table ..........................407 Troubleshooting ............................409...
Page 5 Table of Contents Table of Contents Contents Overview ..........................3 Table of Contents ..........................5 Part I: User’s Guide ..................18 Chapter 1 Getting to Know Your Switch......................19 1.1 Introduction ............................19 1.1.1 Backbone Application ......................20 1.1.2 Bridging Example ........................21 1.1.3 High Performance Switching Example ..................21 1.1.4 IEEE 802.1Q VLAN Application Examples ................22 1.2 Ways to Manage the Switch ......................23 1.3 Good Habits for Managing the Switch ....................23...
Page 6 Table of Contents Chapter 4 The Web Configurator ........................34 4.1 Overview ............................34 4.2 System Login ...........................34 4.3 The Status Screen ..........................35 4.3.1 Change Your Password ......................39 4.4 Saving Your Configuration ........................39 4.5 Switch Lockout ..........................40 4.6 Resetting the Switch ........................40 4.6.1 Reload the Configuration File ....................40 4.7 Logging Out of the Web Configurator ....................41 4.8 Help ..............................41...
Page 7 Table of Contents 8.1.1 What You Can Do ........................64 8.2 System Information ........................64 8.3 General Setup ..........................66 8.4 Introduction to VLANs ........................68 8.5 Switch Setup ............................69 8.6 IP Setup ............................70 8.6.1 Management IP Addresses .....................71 8.7 Port Setup ............................72 8.8 PoE Status ............................74 8.8.1 PoE Time Range Status ......................76 8.8.2 PoE Setup ..........................77 8.9 Interface Setup ..........................79...
Page 8 Table of Contents 9.11.1 Create an IP-based VLAN Example ..................112 Chapter 10 Static MAC Forward Setup....................... 114 10.1 Overview ............................114 10.1.1 What You Can Do ........................ 114 10.2 Configuring Static MAC Forwarding ..................... 114 Chapter 11 Static Multicast Forward Setup ....................... 116 11.1 Static Multicast Forward Setup Overview ..................
Page 9 Table of Contents 14.1 Bandwidth Control Overview ......................142 14.1.1 What You Can Do ........................142 14.2 Bandwidth Control Setup ......................142 Chapter 15 Broadcast Storm Control .........................144 15.1 Broadcast Storm Control Overview ....................144 15.1.1 What You Can Do ........................144 15.2 Broadcast Storm Control Setup .....................144 Chapter 16 Mirroring ............................146 16.1 Mirroring Overview ........................146...
Page 10 Table of Contents Chapter 20 Time Range ............................168 20.1 Time Range Overview ........................168 20.1.1 What You Can Do ........................168 20.2 Configuring Time Range .......................168 Chapter 21 Classifier............................170 21.1 Classifier Overview ........................170 21.1.1 What You Can Do ........................170 21.1.2 What You Need to Know ......................170 21.2 Classifier Status ..........................170 21.3 Classifier Configuration ........................171 21.3.1 Viewing and Editing Classifier Configuration Summary ............175...
Page 11 Table of Contents 24.4.2 MLD Snooping-proxy VLAN ....................197 24.4.3 MLD Snooping-proxy VLAN Port Role Setting ..............199 24.4.4 MLD Snooping-proxy Filtering .....................201 24.4.5 MLD Snooping-proxy Filtering Profile ..................203 24.5 General MVR Configuration ......................204 24.5.1 MVR Group Configuration ....................206 24.5.2 MVR Configuration Example ....................208 Chapter 25 AAA ..............................
Page 12 Table of Contents 26.13 IPv6 Static Binding Setup ......................245 26.14 IPv6 Source Guard Policy Setup ....................247 26.15 IPv6 Source Guard Port Setup ....................248 26.16 IPv6 Snooping Policy Setup .......................249 26.17 IPv6 Snooping VLAN Setup .......................251 26.18 IPv6 DHCP Trust Setup ......................252 26.19 Technical Reference ........................253 26.19.1 DHCP Snooping Overview ....................253 26.19.2 ARP Inspection Overview ....................255...
Page 13 Table of Contents 30.4 CPU Protection Configuration ......................276 30.5 Error-Disable Detect Configuration ....................278 30.6 Error-Disable Recovery Configuration ..................278 Chapter 31 Private VLAN .............................280 31.1 Private VLAN Overview ........................280 31.2 Configuring Private VLAN ......................280 Chapter 32 Green Ethernet..........................282 32.1 Green Ethernet Overview ......................282 32.2 Configuring Green Ethernet ......................282 Chapter 33 Link Layer Discovery Protocol (LLDP) ...................284...
Page 14 Table of Contents 35.1.1 What You Can Do ........................315 35.2 BPDU Guard Status ........................315 35.3 BPDU Guard Configuration ......................316 Chapter 36 OAM ..............................318 36.1 OAM Overview ..........................318 36.1.1 What You Can Do ........................318 36.2 OAM Status ...........................318 36.2.1 OAM Details ........................320 36.3 OAM Configuration ........................323 36.4 OAM Remote Loopback ........................324 Chapter 37...
Page 15 Table of Contents 40.3 DHCPv4 Status ..........................338 40.4 DHCPv4 Relay ..........................338 40.4.1 DHCPv4 Relay Agent Information ..................339 40.4.2 DHCPv4 Option 82 Profile ....................340 40.4.3 Configuring DHCPv4 Global Relay ..................341 40.4.4 DHCPv4 Global Relay Port Configure ................342 40.4.5 Global DHCP Relay Configuration Example ...............343 40.4.6 Configuring DHCPv4 VLAN Settings ................344 40.4.7 DHCPv4 VLAN Port Configure ...................345...
Page 16 Table of Contents 43.2 The Access Control Main Screen ....................362 43.3 Configuring SNMP ........................363 43.3.1 Configuring SNMP Trap Group ..................364 43.3.2 Enabling/Disabling Sending of SNMP Traps on a Port ............365 43.3.3 Configuring SNMP User ....................366 43.4 Setting Up Login Accounts ......................368 43.5 Service Access Control .......................369 43.6 Remote Management ......................370...
Page 17 Table of Contents 48.2 Viewing the MAC Table ........................399 Chapter 49 ARP Table ............................401 49.1 Overview ............................401 49.1.1 What You Can Do ........................401 49.1.2 What You Need to Know ......................401 49.2 Viewing the ARP Table ........................401 Chapter 50 Path MTU Table ..........................403 50.1 Path MTU Overview ........................403 50.2 Viewing the Path MTU Table ......................403 Chapter 51...
Page 18: User's Guide
User’s Guide...
Page 19: Getting To Know Your Switch
H A P TE R Getting to Know Your Switch 1.1 Introduction This chapt er int roduces t he m ain feat ures and applicat ions of t he Swit ch. The GS2210 Series consist s of t he following m odels: •...
Page 20: Backbone Application
Chapter 1 Getting to Know Your Switch version for GS2210- 8 where 4.10 is t he firm ware t runk version, AASP ident ifies t he GS2210- 8 and .0 is t he first release of t runk version 4.10. Table 2 Models and Port Feat ures SWITCH MODEL FIRMWARE VERSION...
Page 21: Bridging Example
Chapter 1 Getting to Know Your Switch Figure 1 Backbone Applicat ion 1.1.2 Bridging Example I n t his exam ple, t he Swit ch connect s different com pany depart m ent s ( RD and Sa le s) t o t he corporat e backbone.
Page 22: Ieee 802.1Q Vlan Application Examples
Chapter 1 Getting to Know Your Switch as ATM at m uch lower cost while st ill being able t o use exist ing adapt ers and swit ches. Moreover, t he current LAN st ruct ure can be ret ained as all port s can freely com m unicat e wit h each ot her. Figure 3 High Perform ance Swit ched Workgroup Applicat ion 1.1.4 IEEE 802.1Q VLAN Application Examples A VLAN ( Virt ual Local Area Net work) allows a physical net work t o be part it ioned int o m ult iple logical...
Page 23: Ways To Manage The Switch
Chapter 1 Getting to Know Your Switch 1.2 Ways to Manage the Switch Use any of t he following m et hods t o m anage t he Swit ch. • Web Configurat or. This is recom m ended for everyday m anagem ent of t he Swit ch using a ( support ed) web browser.
Page 24: Hardware Installation And Connection
H A P TE R Hardware Installation and Connection 2.1 Installation Scenarios This chapt er shows you how t o inst all and connect t he Swit ch. The Swit ch can be placed on a deskt op or rack- m ount ed on a st andard EI A rack. Use t he rubber feet in a deskt op inst allat ion and t he bracket s in a rack- m ount ed inst allat ion.
Page 25: Attaching The Mounting Brackets To The Switch
Chapter 2 Hardware Installation and Connection • Make sure t he posit ion of t he Swit ch does not m ake t he rack unst able or t op- heavy. Take all necessary precaut ions t o anchor t he rack securely before inst alling t he unit . 2.3.2 Attaching the Mounting Brackets to the Switch Posit ion a m ount ing bracket on one side of t he Swit ch, lining up t he four screw holes on t he bracket wit h t he screw holes on t he side of t he Swit ch.
Page 26 Chapter 2 Hardware Installation and Connection Figure 6 Mount ing t he Swit ch on a Rack Using a # 2 Philips screwdriver, inst all t he M5 flat head screws t hrough t he m ount ing bracket holes int o t he rack.
Page 27: Hardware Panels
H A P TE R Hardware Panels This chapt er describes t he front panel and rear panel of t he Swit ch and shows you how t o m ake t he hardware connect ions. 3.1 Front Panel The following figures show t he front panels of t he Swit ch. Figure 7 Front Panel: GS2210- 8 Figure 8 Front Panel: GS2210- 8HP Figure 9 Front Panel: GS2210- 24...
Page 28: Mini-Gbic Slots
Chapter 3 Hardware Panels An aut o- negot iat ing port can det ect and adj ust t o t he opt im um Et hernet speed ( 10/ 100/ 1000 Mbps) and duplex m ode ( full duplex or half duplex) of t he connect ed device. An aut o- crossover ( aut o- MDI / MDI -X) port aut om at ically works wit h a st raight- t hrough or crossover Et hernet cable.
Page 29: Transceiver Installation
Chapter 3 Hardware Panels • Type: SFP connect ion int erface • Connect ion speed: 1 Gigabit per second ( Gbps) 3.1.2.1 Transceiver Installation Use t he following st eps t o inst all a m ini- GBI C t ransceiver ( SFP m odule) . I nsert t he t ransceiver int o t he slot wit h t he exposed sect ion of PCB board facing down.
Page 30: Rear Panel
Chapter 3 Hardware Panels Figure 16 Opening t he Transceiver ’s Lat ch Exam ple Figure 17 Transceiver Rem oval Exam ple 3.1.3 LED Mode (only available for GS2210-48HP) Aft er you push t his but t on ( see Sect ion Figure 12 on page 27) t o act ive PoE on t he Swit ch, view t he LEDs t o ensure proper funct ioning of t he Swit ch and as an aid in t roubleshoot ing ( see...
Page 31: Console Port
Chapter 3 Hardware Panels Figure 23 Rear Panel: GS2210- 48HP 3.2.1 Console Port For local m anagem ent , you can use a com put er wit h t erm inal em ulat ion soft ware configured t o t he following param et ers: •...
Page 32 Chapter 3 Hardware Panels Table 4 LED Descript ions ( cont inued) COLOR STATUS DESCRIPTION A hardware failure is det ect ed. The syst em is funct ioning norm ally. LOCATOR Blue Blinking Shows t he act ual locat ion of t he Swit ch bet ween several devices in a rack. Et hernet Port s and PoE 1- 8 ( GS2210- 8/ Green...
Page 33: Technical Reference
Technical Reference...
Page 34: The Web Configurator
H A P TE R The Web Configurator 4.1 Overview This sect ion int roduces t he configurat ion and funct ions of t he web configurat or. The web configurat or is an HTML- based m anagem ent int erface t hat allows easy Swit ch set up and m anagem ent via I nt ernet browser.
Page 35: The Status Screen
Chapter 4 The Web Configurator Figure 24 Web Configurat or: Login Click OK t o view t he first web configurat or screen. 4.3 The Status Screen The St a t us screen is t he first screen t hat displays when you access t he web configurat or. This guide uses PoE m odel( s) screens as an exam ple.
Page 36 Chapter 4 The Web Configurator B - Click t his link t o updat e t he inform at ion in t he screen you are viewing current ly. C - Click t his link t o save your configurat ion int o t he Swit ch’s nonvolat ile m em ory. Nonvolat ile m em ory is t he configurat ion of your Swit ch t hat st ays t he sam e even if t he Swit ch’s power is t urned off.
Page 37 Chapter 4 The Web Configurator The following t able describes t he links in t he navigat ion panel. Table 6 Navigat ion Panel Links LINK DESCRIPTION Basic Set t ings Syst em I nfo This link t akes you t o a screen t hat displays general syst em inform at ion. General Set up This link t akes you t o a screen where you can configure general ident ificat ion inform at ion about t he Swit ch.
Page 38 Chapter 4 The Web Configurator Table 6 Navigat ion Panel Links ( cont inued) LINK DESCRIPTION Queuing Met hod This link t akes you t o a screen where you can configure queuing wit h associat ed queue weight s for each port . Mult icast This link t akes you t o screens where you can configure various m ult icast feat ures, I GMP snooping, MLD snooping- proxy and creat e m ult icast VLANs.
Page 39: Change Your Password
Chapter 4 The Web Configurator Table 6 Navigat ion Panel Links ( cont inued) LINK DESCRIPTION Syslog Set up This link t akes you t o a screen where you can set up syst em logs and a syst em log server. Clust er This link t akes you t o screens where you can configure clust ering m anagem ent and view it s Managem ent...
Page 40: Switch Lockout
Chapter 4 The Web Configurator Click t he Sa ve link in t he upper right hand corner of t he web configurat or t o save your configurat ion t o nonvolat ile m em ory. Nonvolat ile m em ory refers t o t he Swit ch’s st orage t hat rem ains even if t he Swit ch’s power is t urned off.
Page 41: Logging Out Of The Web Configurator
Chapter 4 The Web Configurator When you see t he m essage “ Press any key to enter Debug Mode within 3 seconds...” press any key t o ent er debug m ode. Type atlc aft er t he “ Enter Debug Mode” m essage. Wait for t he “...
Page 42: Initial Setup Example
H A P TE R Initial Setup Example 5.1 Overview This chapt er shows how t o set up t he Swit ch for an exam ple net work. The following list s t he configurat ion st eps for t he init ial set up: •...
Page 43: Setting Port Vid
Chapter 5 Initial Setup Example I n t he St a t ic VLAN screen, select ACTI VE, ent er a descript ive nam e in t he N a m e field and ent er 2 in t he VLAN Gr ou p I D field for t he V LAN 2 net work.
Page 44: Configuring Switch Management Ip Address
Chapter 5 Initial Setup Example Figure 29 I nit ial Set up Net work Exam ple: Port VI D Click Adva n ce d Applica t ion s > V LAN > VLAN Con figu r a t ion in t he navigat ion panel.
Page 45 Chapter 5 Initial Setup Example Connect your com put er t o any Et hernet port on t he Swit ch. Make sure your com put er is in t he sam e subnet as t he Swit ch. Open your web browser and ent er 192.168.1.1 ( t he default I P address) in t he address bar t o access t he web configurat or.
Page 46: Tutorials
H A P TE R Tutorials 6.1 Overview This chapt er provides som e exam ples of using t he web configurat or t o set up and use t he Swit ch. The t ut orials include: • How t o Use DHCPv4 Snooping on t he Swit ch •...
Page 47 Chapter 6 Tutorials Go t o Adva nce d Applica t ion > VLAN > VLAN Con figu r a t ion > St a t ic V LAN Se t up, and creat e a VLAN wit h I D of 100. Add port s 5, 6 and 7 in t he VLAN by select ing Fix e d in t he Cont r ol field as shown.
Page 48 Chapter 6 Tutorials Go t o Adva nce d Applica t ion > I P Sou r ce Gua r d > I Pv4 Sou r ce Gua r d Se t u p > D H CP Sn ooping > Configur e , act ivat e and specify VLAN 100 as t he DHCP VLAN as shown. Click Apply. Figure 34 Tut orial: Specify DHCP VLAN Click t he Por t link at t he t op right corner.
Page 49: How To Use Dhcpv4 Relay On The Switch
Chapter 6 Tutorials Go t o Adva nce d Applica t ion > I P Sou r ce Gua r d > I Pv4 Sou r ce Gua r d Se t u p > D H CP Sn ooping > Configur e > VLAN , show VLAN 100 by ent ering 100 in t he St a r t VI D and End VI D fields and click Apply.
Page 50: Dhcp Relay Tutorial Introduction
Chapter 6 Tutorials 6.3.1 DHCP Relay Tutorial Introduction I n t his exam ple, you have configured your DHCP server ( 192.168.2.3) and want t o have it assign a specific I P address ( say 172.16.1.18) t o DHCP client A based on t he syst em nam e, VLAN I D and port num ber in t he DHCP request .
Page 51 Chapter 6 Tutorials Figure 39 Tut orial: Set VLAN Type t o 802.1Q Click Adva nce d Applica t ion > VLAN > VLAN Con figu r a t ion > St a t ic VLAN Se t up. I n t he St a t ic VLAN screen, select ACTI VE, ent er a descript ive nam e ( VLAN 102 for exam ple) in t he N a m e field and ent er 102 in t he VLAN Gr ou p I D field.
Page 52 Chapter 6 Tutorials Figure 40 Tut orial: Creat e a St at ic VLAN Click t he VLAN Configur a t ion link in t he St a t ic V LAN Se t up screen and t hen t he VLAN Por t Se t up link in t he VLAN Configur a t ion screen.
Page 53: Configuring Dhcpv4 Relay
Chapter 6 Tutorials Figure 42 Tut orial: Add Tag for Fram es Received on Port 2 11 Click t he Sa ve link in t he upper right corner of t he web configurat or t o save your configurat ion perm anent ly.
Page 54: Troubleshooting
Chapter 6 Tutorials Figure 43 Tut orial: Set DHCP Server and Relay I nform at ion Click t he Sa ve link in t he upper right corner of t he web configurat or t o save your configurat ion perm anent ly.
Page 55: Status And Zon
H A P TE R Status and ZON 7.1 Overview This chapt er describes t he screens for Syst em St at us, ZON Ut ilit y, ZON Neighbor Managem ent , Port St at us, and Port Det ails. 7.1.1 What You Can Do •...
Page 56 Chapter 7 Status and ZON Figure 44 St at us ( for PoE m odel( s) ) The following t able describes t he labels in t his screen. Table 8 St at us LABEL DESCRIPTION Device I nform at ion Device Type This field displays t he m odel nam e of t his Swit ch.
Page 57: Zyxel One Network (Zon) Utility Screen
Chapter 7 Status and ZON Table 8 St at us ( cont inued) LABEL DESCRIPTION I Pv4 Address This field displays t he Swit ch’s current I Pv4 address. Subnet Mask This field displays t he Swit ch’s subnet m ask. Default This field displays t he I P address of t he Swit ch’s default gat eway.
Page 58: Zon Neighbor Management Screen
Chapter 7 Status and ZON Figure 45 ZON Ut ilit y Screen 7.4 ZON Neighbor Management Screen The ZON neighbor m anagem ent screen allows you t o view and m anage t he Swit ch’s neighboring devices m ore convenient ly. I t uses Layer Link Discovery Prot ocol ( LLDP) t o discover all neighbor devices connect ed t o t he Swit ch including non-ZyXEL devices.
Page 59: Port Status
Chapter 7 Status and ZON The following t able describes t he fields in t he above screen. Table 9 St at us > Neighbor LABEL DESCRIPTION Local Port This shows t he port of t he Swit ch, on which t he neighboring device is discovered. Desc.
Page 60 Chapter 7 Status and ZON in t he Quick Link s sect ion of t he St a t us screen t o display t he Por t St a t u s screen as shown next . You can also click M a n a ge m e n t > Por t St a t us t o see t he following screen. Figure 47 Port St at us ( for PoE m odel( s) ) The following t able describes t he labels in t his screen.
Page 61: Port Details
Chapter 7 Status and ZON Table 10 Port St at us ( cont inued) LABEL DESCRIPTION Rx KB/ s This field shows t he num ber of kilobyt es per second received on t his port . Up Tim e This field shows t he t ot al am ount of t im e in hours, m inut es and seconds t he port has been Clear Count er Select Por t , ent er a port num ber and t hen click Cle a r Cou nt e r t o erase t he recorded...
Page 62 Chapter 7 Status and ZON The following t able describes t he labels in t his screen. Table 11 Port St at us: Port Det ails LABEL DESCRIPTION Port I nfo Port NO. This field displays t he port num ber you are viewing. Nam e This field displays t he nam e of t he port .
Page 63 Chapter 7 Status and ZON Table 11 Port St at us: Port Det ails ( cont inued) LABEL DESCRIPTION Lengt h This field shows t he num ber of packet s received wit h a lengt h t hat was out of range. Runt This field shows t he num ber of packet s received t hat were t oo short ( short er t han 64 oct et s) , including t he ones wit h CRC errors.
Page 64: Basic Setting
H A P TE R Basic Setting 8.1 Overview This chapt er describes how t o configure t he Syst e m I n fo, Ge n e r a l Se t u p, Sw it ch Se t up, I P Se t up, Por t Se t u p, PoE, I nt e r fa ce Se t up and I Pv6 screens.
Page 65 Chapter 8 Basic Setting Figure 49 Basic Set t ing > Syst em I nfo ( for PoE m odel( s) only) The following t able describes t he labels in t his screen. Table 12 Basic Set t ing > Syst em I nfo LABEL DESCRIPTION Syst em Nam e...
Page 66: General Setup
Chapter 8 Basic Setting Table 12 Basic Set t ing > Syst em I nfo ( cont inued) LABEL DESCRIPTION Threshold This field displays t he upper t em perat ure lim it at t his sensor. St at us This field displays N or m a l for t em perat ures below t he t hreshold and Er r or for t hose above.
Page 67 Chapter 8 Basic Setting Figure 50 Basic Set t ing > General Set up The following t able describes t he labels in t his screen. Table 13 Basic Set t ing > General Set up LABEL DESCRIPTION Syst em Nam e Choose a descript ive nam e for ident ificat ion purposes.
Page 68: Introduction To Vlans
Chapter 8 Basic Setting Table 13 Basic Set t ing > General Set up ( cont inued) LABEL DESCRIPTION Tim e Zone Select t he t im e difference bet ween UTC ( Universal Tim e Coordinat ed, form erly known as GMT, Greenwich Mean Tim e) and your t im e zone from t he drop- down list box.
Page 69: Switch Setup
Chapter 8 Basic Setting Chapt er 9 on page 93 for inform at ion on port- based and 802.1Q t agged VLANs. 8.5 Switch Setup Click Ba sic Se t t ing > Sw it ch Se t up in t he navigat ion panel t o display t he screen as shown. The VLAN set up screens change depending on whet her you choose 8 0 2 .1 Q or Por t Ba se d in t he VLAN Type field in t his screen.
Page 70: Ip Setup
Chapter 8 Basic Setting Table 14 Basic Set t ing > Swit ch Set up ( cont inued) LABEL DESCRIPTION Join Tim er Join Tim er set s t he durat ion of t he Join Period t im er for GVRP in m illiseconds. Each port has a Join Pe r iod t im er.
Page 71: Management Ip Addresses
Chapter 8 Basic Setting 8.6.1 Management IP Addresses The Swit ch needs an I P address for it t o be m anaged over t he net work. The fact ory default I P address is 192.168.1.1. The subnet m ask specifies t he net work num ber port ion of an I P address. The fact ory default subnet m ask is 255.255.255.0.
Page 72: Port Setup
Chapter 8 Basic Setting Table 15 Basic Set t ing > I P Set up ( cont inued) LABEL DESCRIPTION I P Address Ent er t he I P address of your Swit ch in dot t ed decim al not at ion for exam ple 192.168.1.1.
Page 73 Chapter 8 Basic Setting Figure 53 Basic Set t ing > Port Set up The following t able describes t he labels in t his screen. Table 16 Basic Set t ing > Port Set up LABEL DESCRIPTION Port This is t he port index num ber. Set t ings in t his row apply t o all port s.
Page 74: Poe Status
Chapter 8 Basic Setting Table 16 Basic Set t ing > Port Set up ( cont inued) LABEL DESCRIPTION Speed/ Duplex Select t he speed and t he duplex m ode of t he Et hernet connect ion on t his port . Choices are Au t o- 1 0 0 0 M , 1 0 M / H a lf D u ple x , 1 0 M / Full D u ple x , 1 0 0 M / H a lf D u ple x , 1 0 0 M / Fu ll D u ple x and 1 0 0 0 M / Fu ll D u ple x ( Gigabit connect ions only) .
Page 75 Chapter 8 Basic Setting Figure 54 Powered Device Exam ples You can also set priorit ies so t hat t he Swit ch is able t o reserve and allocat e power t o cert ain PDs. Not e: The POE ( Pow er over Et her net ) devices t hat supply or receive power and t heir connect ed Et hernet cables m ust all be com plet ely indoors.
Page 76: Poe Time Range Status
Chapter 8 Basic Setting The following t able describes t he labels in t his screen. Table 17 Basic Set t ing > PoE St at us LABEL DESCRIPTION PoE St at us PoE Mode This field displays t he power m anagem ent m ode used by t he Swit ch, whet her it is in Cla ssifica t ion or Con su m pt ion m ode.
Page 77: Poe Setup
Chapter 8 Basic Setting Click t he PoE Tim e Ra nge St a t u s link in t he Ba sic Se t t ing > PoE St a t us screen. The following screen opens. Figure 56 Basic Set t ing > PoE Set up > PoE Tim e Range St at us The following t able describes t he labels in t his screen.
Page 78 Chapter 8 Basic Setting Figure 57 Basic Set t ing > PoE Set up The following t able describes t he labels in t his screen. Table 19 Basic Set t ing > PoE Set up LABEL DESCRIPTION PoE Mode Select t he power m anagem ent m ode you want t he Swit ch t o use.
Page 79: Interface Setup
Chapter 8 Basic Setting Table 19 Basic Set t ing > PoE Set up ( cont inued) LABEL DESCRIPTION PD Priorit y When t he t ot al power request ed by t he PDs exceeds t he t ot al PoE power budget on t he Swit ch, you can set t he PD priorit y t o allow t he Swit ch t o provide power t o port s wit h higher priorit y.
Page 80: Ipv6
Chapter 8 Basic Setting Figure 58 Basic Set t ing > I nt erface Set up The following t able describes t he labels in t his screen. Table 20 Basic Set t ing > I nt erface Set up LABEL DESCRIPTION I nt erface Type...
Page 81: Ipv6 Interface Status
Chapter 8 Basic Setting Figure 59 Basic Set t ing > I Pv6 The following t able describes t he labels in t his screen. Table 21 Basic Set t ing > I Pv6 LABEL DESCRIPTION I ndex This field displays t he index num ber of an I Pv6 int erface. Click on an index num ber t o view m ore int erface det ails.
Page 82 Chapter 8 Basic Setting Figure 60 Basic Set t ing > I Pv6 > I Pv6 I nt erface St at us The following t able describes t he labels in t his screen. Table 22 Basic Set t ing > I Pv6 > I Pv6 I nt erface St at us LABEL DESCRIPTION I Pv6 Act ive...
Page 83 Chapter 8 Basic Setting Table 22 Basic Set t ing > I Pv6 > I Pv6 I nt erface St at us ( cont inued) LABEL DESCRIPTION Global Unicast This field displays t he Swit ch’s global unicast address t o ident ify t his int erface. Address( es) Joined Group This field displays t he I Pv6 m ult icast addresses of groups t he Swit ch’s int erface j oins.
Page 84: Ipv6 Configuration
Chapter 8 Basic Setting 8.10.2 IPv6 Configuration Use t his screen t o configure I Pv6 set t ings on t he Swit ch. Click t he I Pv6 Con figu r a t ion link in t he Ba sic Se t t ing > I Pv6 screen. The following screen opens. Figure 61 Basic Set t ing >...
Page 85: Ipv6 Interface Setup
Chapter 8 Basic Setting Figure 62 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Global Set up The following t able describes t he labels in t his screen. Table 24 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Global Set up LABEL DESCRIPTION I Pv6 Hop Lim it...
Page 86: Ipv6 Link-Local Address Setup
Chapter 8 Basic Setting The following t able describes t he labels in t his screen. Table 25 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 I nt erface Set up LABEL DESCRIPTION I nt erface Select t he I Pv6 int erface you want t o configure.
Page 87: Ipv6 Global Address Setup
Chapter 8 Basic Setting Table 26 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Link- Local Address Set up ( cont inued) LABEL DESCRIPTION Default Set t he default gat eway I Pv6 address for t he int erface. When an int erface cannot find a Gat eway rout ing inform at ion for a fram e’s dest inat ion, it forwards t he packet t o t he default gat eway.
Page 88: Ipv6 Neighbor Discovery Setup
Chapter 8 Basic Setting Table 27 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Global Address Set up ( cont inued) LABEL DESCRIPTION Clear Click Cle a r t o reset t he fields t o t he fact ory default s. I ndex This is t he int erface index num ber.
Page 89: Ipv6 Neighbor Setup
Chapter 8 Basic Setting Table 28 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Neighbor Discovery Set up ( cont inued) LABEL DESCRIPTION Reachable Specify how long ( from 1000 t o 3600000 m illiseconds) a neighbor is considered reachable for Tim e t his int erface.
Page 90: Dhcpv6 Client Setup
Chapter 8 Basic Setting The following t able describes t he labels in t his screen. Table 29 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > I Pv6 Neighbor Set up LABEL DESCRIPTION I nt erface Type Select t he t ype of I Pv6 int erface for which you want t o configure.
Page 91 Chapter 8 Basic Setting Figure 68 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > DHCPv6 Client Set up The following t able describes t he labels in t his screen. Table 30 Basic Set t ing > I Pv6 > I Pv6 Configurat ion > DHCPv6 Client Set up LABEL DESCRIPTION I nt erface...
Page 92 Chapter 8 Basic Setting 8.11 DNS DNS ( Dom ain Nam e Syst em ) is for m apping a dom ain nam e t o it s corresponding I P address and vice versa. Use t he D N S screen t o configure and view t he default DNS servers on t he Swit ch. Figure 69 Basic Set t ing >...
Page 93: Vlan
H A P TE R VLAN 9.1 Overview This chapt er shows you how t o configure 802.1Q t agged and port- based VLANs. The t ype of screen you see here depends on t he VLAN Type you select ed in t he Sw it ch Se t up screen. 9.1.1 What You Can Do •...
Page 94: Forwarding Tagged And Untagged Frames
Chapter 9 VLAN and t wo byt es of TCI ( Tag Cont rol I nform at ion, st art s aft er t he source address field of t he Et hernet fram e) . The CFI ( Canonical Form at I ndicat or) is a single- bit flag, always set t o zero for Et hernet swit ches. I f a fram e received at an Et hernet port has a CFI set t o 1, t hen t hat fram e should not be forwarded as it is t o an unt agged port .
Page 95: Port Vlan Trunking
Chapter 9 VLAN Please refer t o t he following t able for com m on I EEE 802.1Q VLAN t erm inology. Table 32 I EEE 802.1Q VLAN Term inology VLAN PARAMETER TERM DESCRIPTION VLAN Type Perm anent VLAN This is a st at ic VLAN creat ed m anually.
Page 96: Static Vlan
Chapter 9 VLAN Figure 71 Swit ch Set up > Select VLAN Type Static VLAN Use a st at ic VLAN t o decide whet her an incom ing fram e on a port should be • sent t o a VLAN group as norm al depending on it s VL AN t ag. •...
Page 97: Vlan Details
Chapter 9 VLAN Table 33 Advanced Applicat ion > VLAN: VLAN St at us ( cont inued) LABEL DESCRIPTION VI D This is t he VLAN ident ificat ion num ber t hat was configured in t he St a t ic VLAN screen. Elapsed Tim e This field shows how long it has been since a norm al VLAN was regist ered or a st at ic VLAN was set up.
Page 98: Vlan Configuration
Chapter 9 VLAN 9.3 VLAN Configuration Use t his screen t o view I EEE 802.1Q VLAN param et ers for t he Swit ch. Click Adva nce d Applica t ion > VLAN > VLAN Configur a t ion t o see t he following screen. Figure 74 Advanced Applicat ion >...
Page 99 Chapter 9 VLAN Figure 75 Advanced Applicat ion > VLAN > VLAN Configurat ion > St at ic VLAN Set up The following t able describes t he relat ed labels in t his screen. Table 36 Advanced Applicat ion > VLAN > VLAN Configurat ion > St at ic VLAN Set up LABEL DESCRIPTION ACTI VE...
Page 100: Configure Vlan Port Settings
Chapter 9 VLAN Table 36 Advanced Applicat ion > VLAN > VLAN Configurat ion > St at ic VLAN Set up ( cont inued) LABEL DESCRIPTION Click Add t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
Page 101: Subnet Based Vlans
Chapter 9 VLAN The following t able describes t he labels in t his screen. Table 37 Advanced Applicat ion > VLAN > VLAN Configurat ion> VLAN Port Set up LABEL DESCRIPTION GVRP GVRP ( GARP VLAN Regist rat ion Prot ocol) is a regist rat ion prot ocol t hat defines a way for swit ches t o regist er necessary VLAN m em bers on port s across t he net work.
Page 102: Configuring Subnet Based Vlan
Chapter 9 VLAN 172.16.1.0/ 24, video for 192.168.1.0/ 24 and dat a for 10.1.1.0/ 24. The Swit ch can t hen be configured t o group incom ing t raffic based on t he source I P subnet of incom ing fram es. You configure a subnet based VLAN wit h priorit y 6 and VI D of 100 for t raffic received from I P subnet 172.16.1.0/ 24 ( voice services) .
Page 103 Chapter 9 VLAN Figure 78 Advanced Applicat ion > VLAN > VLAN Configurat ion > Subnet Based VLAN Set up The following t able describes t he labels in t his screen. Table 38 Advanced Applicat ion > VLAN > VLAN Configurat ion > Subnet Based VLAN Set up LABEL DESCRIPTION Act ive...
Page 104: Protocol Based Vlans
Chapter 9 VLAN Table 38 Advanced Applicat ion > VLAN > VLAN Configurat ion > Subnet Based VLAN Set up LABEL DESCRIPTION Act ive This field shows whet her t he subnet based VLAN is act ive or not . Nam e This field shows t he nam e t he subnet based VLAN.
Page 105 Chapter 9 VLAN Not e: Prot ocol- based VLAN applies t o un- t agged packet s and is applicable only when you use I EEE 802.1Q t agged VLAN. Figure 80 Advanced Applicat ion > VLAN > VLAN Configurat ion > Prot ocol Based VLAN Set up The following t able describes t he labels in t his screen.
Page 106: Voice Vlan
Chapter 9 VLAN Table 39 Advanced Applicat ion > VLAN > VLAN Configurat ion > Prot ocol Based VLAN Set up LABEL DESCRIPTION VI D This field shows t he VLAN I D of t he port . Priorit y This field shows t he priorit y which is assigned t o fram es belonging t o t his prot ocol based VLAN.
Page 107: Mac Based Vlan
Chapter 9 VLAN The following t able describes t he fields in t he above screen. Table 40 Advanced Applicat ion > VLAN > VLAN Configurat ion > Voice VLAN Set up LABEL DESCRIPTION Voice VLAN Global Set up Voice VLAN Click t he Voice VLAN radio but t on if you want t o enable t he Voice VLAN feat ure.
Page 108 Chapter 9 VLAN source MAC address in t he MAC- based VLAN set up screen. You can also delet e a MAC- based VLAN ent ry in t he sam e screen. Click t he M AC Ba se d VLAN Se t up link in t he VLAN Con figu r a t ion screen t o see t he following screen.
Page 109: Port-Based Vlan Setup
Chapter 9 VLAN 9.10 Port-Based VLAN Setup Port- based VLANs are VLANs where t he packet forwarding decision is based on t he dest inat ion MAC address and it s associat ed port . Port- based VLANs require allowed out going port s t o be defined for each port . Therefore, if you wish t o allow t wo subscriber port s t o t alk t o each ot her, for exam ple, bet ween conference room s in a hot el, you m ust define t he egress ( an egress port is an out going port , t hat is, a port t hrough which a dat a packet leaves) for bot h port s.
Page 110 Chapter 9 VLAN Figure 83 Advanced Applicat ion > VLAN: Port Based VLAN Set up ( All Connect ed) GS2210 Series User’s Guide...
Page 111 Chapter 9 VLAN Figure 84 Advanced Applicat ion > VLAN: Port Based VLAN Set up ( Port I solat ion) GS2210 Series User’s Guide...
Page 112: Technical Reference
Chapter 9 VLAN The following t able describes t he labels in t his screen. Table 42 Advanced Applicat ion > VLAN: Port Based VLAN Set up label Descript ion Set t ing Choose All conn e ct e d or Por t isola t ion. Wizard All con n e ct e d m eans all port s can com m unicat e wit h each ot her, t hat is, t here are no virt ual LANs.
Page 113 Chapter 9 VLAN Figure 85 Prot ocol Based VLAN Configurat ion Exam ple To add m ore port s t o t his prot ocol based VLAN. Click t he index num ber of t he prot ocol based VLAN ent ry. Click 1 . Change t he value in t he Por t field t o t he next port you want t o add.
Page 114: Static Mac Forward Setup
HAPTER Static MAC Forward Setup 10.1 Overview This chapt er discusses how t o configure forwarding rules based on MAC addresses of devices on your net work. Use t hese screens t o configure st at ic MAC address forwarding. 10.1.1 What You Can Do Use t he St a t ic M AC For w a r ding screen ( Sect ion 10.2 on page...
Page 115 Chapter 10 Static MAC Forward Setup Figure 86 Advanced Applicat ion > St at ic MAC Forwarding The following t able describes t he labels in t his screen. Table 43 Advanced Applicat ion > St at ic MAC Forwarding LABEL DESCRIPTION Act ive...
Page 116: Static Multicast Forward Setup
HAPTER Static Multicast Forward Setup 11.1 Static Multicast Forward Setup Overview This chapt er discusses how t o configure forwarding rules based on m ult icast MAC addresses of devices on your net work. Use t hese screens t o configure st at ic m ult icast address forwarding. 11.1.1 What You Can Do Use t he St a t ic M ult ica st For w a r d Se t up screen ( Sect ion 11.2 on page...
Page 117: Configuring Static Multicast Forwarding
Chapter 11 Static Multicast Forward Setup Figure 88 St at ic Mult icast Forwarding t o A Single Port Figure 89 St at ic Mult icast Forwarding t o Mult iple Port s 11.2 Configuring Static Multicast Forwarding Use t his screen t o configure rules t o forward specific m ult icast fram es, such as st ream ing or cont rol fram es, t o specific port ( s) .
Page 118 Chapter 11 Static Multicast Forward Setup The following t able describes t he labels in t his screen. Table 44 Advanced Applicat ion > St at ic Mult icast Forwarding LABEL DESCRIPTION Act ive Select t his check box t o act ivat e your rule. You m ay t em porarily deact ivat e a rule wit hout delet ing it by clearing t his check box.
Page 119: Filtering Overview
HAPTER Filtering 12.1 Filtering Overview This chapt er discusses MAC address port filt ering. Filt ering m eans sift ing t raffic going t hrough t he Swit ch based on t he source and/ or dest inat ion MAC addresses and VLAN group ( I D) .
Page 120 Chapter 12 Filtering The following t able describes t he relat ed labels in t his screen. Table 45 Advanced Applicat ion > Filt ering LABEL DESCRIPTION Act ive Make sure t o select t his check box t o act ivat e your rule. You m ay t em porarily deact ivat e a rule wit hout delet ing it by deselect ing t his check box.
Page 121: Spanning Tree Protocol
HAPTER Spanning Tree Protocol 13.1 Spanning Tree Protocol Overview The Swit ch support s Spanning Tree Prot ocol ( STP) , Rapid Spanning Tree Prot ocol ( RSTP) and Mult iple Spanning Tree Prot ocol ( MSTP) as defined in t he following st andards. •...
Page 122: Stp Terminology
Chapter 13 Spanning Tree Protocol The Swit ch uses I EEE 802.1w RSTP ( Rapid Spanning Tree Prot ocol) t hat allows fast er convergence of t he spanning t ree t han STP ( while also being backwards com pat ible wit h STP- only aware bridges) .
Page 123: Stp Port States
Chapter 13 Spanning Tree Protocol STP Port States STP assigns five port st at es t o elim inat e packet looping. A bridge port is not allowed t o go direct ly from blocking st at e t o forwarding st at e so as t o elim inat e t ransient loops. Table 47 STP Port St at es PORT STATE DESCRIPTION Disabled...
Page 124: Spanning Tree Protocol Status Screen
Chapter 13 Spanning Tree Protocol • One Com m on and I nt ernal Spanning Tree ( CI ST) t hat represent s t he ent ire net work’s connect ivit y. • Grouping of m ult iple bridges ( or swit ching devices) int o regions t hat appear as one single bridge on t he net work.
Page 125: Configure Rapid Spanning Tree Protocol
Chapter 13 Spanning Tree Protocol The following t able describes t he labels in t his screen. Table 48 Advanced Applicat ion > Spanning Tree Prot ocol > Configurat ion LABEL DESCRIPTION Spanning Tree You can act ivat e one of t he STP m odes on t he Swit ch. Mode Select Ra pid Spa n n in g Tr e e , M u lt iple Ra pid Spa n n in g Tr e e or M u lt iple Spa n n ing Tr e e .
Page 126 Chapter 13 Spanning Tree Protocol The following t able describes t he labels in t his screen. Table 49 Advanced Applicat ion > Spanning Tree Prot ocol > RSTP LABEL DESCRIPTION St at us Click St a t us t o display t he RSTP St a t u s screen ( see Figure 96 on page 127) .
Page 127: Rapid Spanning Tree Protocol Status
Chapter 13 Spanning Tree Protocol Table 49 Advanced Applicat ion > Spanning Tree Prot ocol > RSTP ( cont inued) LABEL DESCRIPTION Priorit y Configure t he priorit y for each port here. Priorit y decides which port should be disabled when m ore t han one port form s a loop in a swit ch.
Page 128 Chapter 13 Spanning Tree Protocol Table 50 Advanced Applicat ion > Spanning Tree Prot ocol > St at us: RSTP ( cont inued) LABEL DESCRIPTION Max Age ( second) This is t he m axim um t im e ( in seconds) t he Swit ch can wait wit hout receiving a configurat ion m essage before at t em pt ing t o reconfigure.
Page 129: Configure Multiple Rapid Spanning Tree Protocol
Chapter 13 Spanning Tree Protocol 13.6 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP , click M RSTP in t he Adva nce d Applica t ion > Spa n n in g Tr e e Pr ot ocol screen.
Page 130 Chapter 13 Spanning Tree Protocol Table 51 Advanced Applicat ion > Spanning Tree Prot ocol > MRSTP ( cont inued) LABEL DESCRIPTION Bridge Priorit y Bridge priorit y is used in det erm ining t he root swit ch, root port and designat ed port . The swit ch wit h t he highest priorit y ( lowest num eric value) becom es t he STP root swit ch.
Page 131: Multiple Rapid Spanning Tree Protocol Status
Chapter 13 Spanning Tree Protocol Table 51 Advanced Applicat ion > Spanning Tree Prot ocol > MRSTP ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
Page 132: Configure Multiple Spanning Tree Protocol
Chapter 13 Spanning Tree Protocol Table 52 Advanced Applicat ion > Spanning Tree Prot ocol > St at us: MRSTP ( cont inued) LABEL DESCRIPTION Forwarding Delay This is t he t im e ( in seconds) t he root swit ch will wait before changing st at es ( t hat is, ( second) list ening t o learning t o forwarding) .
Page 133 Chapter 13 Spanning Tree Protocol Figure 99 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP The following t able describes t he labels in t his screen. Table 53 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP LABEL DESCRIPTION Port...
Page 134 Chapter 13 Spanning Tree Protocol Table 53 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP ( cont inued) LABEL DESCRIPTION Hello Tim e This is t he t im e int erval in seconds bet ween BPDU ( Bridge Prot ocol Dat a Unit s) configurat ion m essage generat ions by t he root swit ch.
Page 135: Mstp Port Configuration
Chapter 13 Spanning Tree Protocol Table 53 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP ( cont inued) LABEL DESCRIPTION Act ive Select t his check box t o add t his port t o t he MST inst ance. Priorit y Configure t he priorit y for each port here.
Page 136 Chapter 13 Spanning Tree Protocol Figure 100 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP > Port The following t able describes t he labels in t his screen. Table 54 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP > Port LABEL DESCRIPTION MSTP...
Page 137: Multiple Spanning Tree Protocol Status
Chapter 13 Spanning Tree Protocol Table 54 Advanced Applicat ion > Spanning Tree Prot ocol > MSTP > Port ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory w hen you are done configuring.
Page 138 Chapter 13 Spanning Tree Protocol The following t able describes t he labels in t his screen. Table 55 Advanced Applicat ion > Spanning Tree Prot ocol > St at us: MSTP LABEL DESCRIPTION Configurat ion Click Con figu r a t ion t o specify which STP m ode you want t o act ivat e. Click M STP t o edit MSTP set t ings on t he Swit ch.
Page 139: Mstp Network Example
Chapter 13 Spanning Tree Protocol Table 55 Advanced Applicat ion > Spanning Tree Prot ocol > St at us: MSTP ( cont inued) LABEL DESCRIPTION Port Role This field displays t he role of t he port in STP . •...
Page 140: Mst Region
Chapter 13 Spanning Tree Protocol Figure 102 STP/ RSTP Net work Exam ple VLAN 1 VLAN 2 Wit h MSTP , VLANs 1 and 2 are m apped t o different spanning t rees in t he net work. Thus t raffic from t he t wo VLANs t ravel on different pat hs.
Page 141: Mst Instance
Chapter 13 Spanning Tree Protocol • VLAN- t o- MST I nst ance m apping 13.10.3 MST Instance An MST I nst ance ( MSTI ) is a spanning t ree inst ance. VLANs can be configured t o run on a specific MSTI .
Page 142: Bandwidth Control
HAPTER Bandwidth Control 14.1 Bandwidth Control Overview This chapt er shows you how you can cap t he m axim um bandwidt h using t he Ba ndw idt h Con t r ol screen. Bandwidt h cont rol m eans defining a m axim um allowable bandwidt h for incom ing and/ or out- going t raffic flows on a port .
Page 143 Chapter 14 Bandwidth Control Figure 106 Advanced Applicat ion > Bandwidt h Cont rol The following t able describes t he relat ed labels in t his screen. Table 56 Advanced Applicat ion > Bandwidt h Cont rol LABEL DESCRIPTION Act ive Select t his check box t o enable bandwidt h cont rol on t he Swit ch.
Page 144: Broadcast Storm Control
HAPTER Broadcast Storm Control 15.1 Broadcast Storm Control Overview This chapt er int roduces and shows you how t o configure t he broadcast st orm cont rol feat ure. Broadcast st orm cont rol lim it s t he num ber of broadcast , m ult icast and dest inat ion lookup failure ( DLF) packet s t he Swit ch receives per second on t he port s.
Page 145 Chapter 15 Broadcast Storm Control Figure 107 Advanced Applicat ion > Broadcast St orm Cont rol The following t able describes t he labels in t his screen. Table 57 Advanced Applicat ion > Broadcast St orm Cont rol LABEL DESCRIPTION Act ive Select t his check box t o enable t raffic st orm cont rol on t he Swit ch.
Page 146: Mirroring Overview
HAPTER Mirroring 16.1 Mirroring Overview This chapt er discusses port m irroring set up screens. Port m irroring allows you t o copy a t raffic flow t o a m onit or port ( t he port you copy t he t raffic t o) in order t hat you can exam ine t he t raffic from t he m onit or port wit hout int erference.
Page 147 Chapter 16 Mirroring Figure 108 Advanced Applicat ion > Mirroring The following t able describes t he labels in t his screen. Table 58 Advanced Applicat ion > Mirroring LABEL DESCRIPTION Act ive Select t his check box t o act ivat e port m irroring on t he Swit ch. Clear t his check box t o disable t he feat ure.
Page 148: Link Aggregation
HAPTER Link Aggregation 17.1 Link Aggregation Overview This chapt er shows you how t o logically aggregat e physical links t o form one logical, higher- bandwidt h link. Link aggregat ion ( t runking) is t he grouping of physical port s int o one logical higher- capacit y link. You m ay want t o t runk port s if for exam ple, it is cheaper t o use m ult iple lower- speed links t han t o under- ut ilize a high- speed, but m ore cost ly, single- port link.
Page 149: Link Aggregation Id
Chapter 17 Link Aggregation is, if an operat ional port fails, t hen one of t he “ st andby” port s becom e operat ional wit hout user int ervent ion. Please not e t hat : • You m ust connect all port s point- t o- point t o t he s am e Et hernet swit ch and configure t he port s for LACP t runking.
Page 150 Chapter 17 Link Aggregation Figure 109 Advanced Applicat ion > Link Aggregat ion St at us The following t able describes t he labels in t his screen. Table 61 Advanced Applicat ion > Link Aggregat ion St at us LABEL DESCRIPTION Group I D...
Page 151: Link Aggregation Setting
Chapter 17 Link Aggregation Table 61 Advanced Applicat ion > Link Aggregat ion St at us ( cont inued) LABEL DESCRIPTION Crit eria This shows t he out going t raffic dist ribut ion algorit hm used in t his t runk group. Packet s from t he sam e source and/ or t o t he sam e dest inat ion are sent over t he sam e link wit hin t he t runk.
Page 152 Chapter 17 Link Aggregation Figure 110 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing The following t able describes t he labels in t his screen. Table 62 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing LABEL DESCRIPTION Link...
Page 153: Link Aggregation Control Protocol
Chapter 17 Link Aggregation Table 62 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing ( cont inued) LABEL DESCRIPTION Crit eria Select t he out going t raffic dist ribut ion t ype. Packet s from t he sam e source and/ or t o t he sam e dest inat ion are sent over t he sam e link wit hin t he t runk.
Page 154 Chapter 17 Link Aggregation Figure 111 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing > LACP The following t able describes t he labels in t his screen. Table 63 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing > LACP LABEL DESCRIPTION Link...
Page 155: Static Trunking Example
Chapter 17 Link Aggregation Table 63 Advanced Applicat ion > Link Aggregat ion > Link Aggregat ion Set t ing > LACP ( cont inued) LABEL DESCRIPTION Syst em LACP syst em priorit y is a num ber bet ween 1 and 65,535. The swit ch wit h t he lowest syst em Priorit y priorit y ( and lowest port num ber if syst em priorit y is t he sam e) becom es t he LACP “...
Page 156 Chapter 17 Link Aggregation Figure 112 Trunking Exam ple - Physical Connect ions Con figu r e st a t ic t r un k ing - Click Adva nce d Applica t ion > Link Aggr e ga t ion > Lin k Aggr e ga t ion Se t t ing.
Page 157: Port Authentication
HAPTER Port Authentication 18.1 Port Authentication Overview This chapt er describes t he I EEE 802.1x and MAC aut hent icat ion m et hods. Port aut hent icat ion is a way t o validat e access t o port s on t he Swit ch t o client s based on an ext ernal server ( aut hent icat ion server) .
Page 158: Mac Authentication
Chapter 18 Port Authentication Figure 114 I EEE 802.1x Aut hent icat ion Process New Connection Login Info Request Login Credentials Authentication Request Authentication Reply Session Granted/Denied 18.1.3 MAC Authentication MAC aut hent icat ion works in a very sim ilar way t o I EEE 802.1x aut hent icat ion. The m ain difference is t hat t he Swit ch does not prom pt t he client for login credent ials.
Page 159: Port Authentication Configuration
Chapter 18 Port Authentication 18.2 Port Authentication Configuration To enable port aut hent icat ion, first act ivat e t he port aut hent icat ion m et hod( s) ( bot h on t he Swit ch and t he port ( s) ) , t hen configure t he RADI US server set t ings in t he AAA > RAD I US Se r ve r Se t up screen.
Page 160: Guest Vlan
Chapter 18 Port Authentication The following t able describes t he labels in t his screen. Table 64 Advanced Applicat ion > Port Aut hent icat ion > 802.1x LABEL DESCRIPTION Act ive Select t his check box t o perm it 802.1x aut hent icat ion on t he Swit ch. Note: You must first enable 802.1x authentication on the Switch before configuring it on each port.
Page 161 Chapter 18 Port Authentication Figure 118 Guest VLAN Exam ple VLAN 100 VLAN 102 Internet Use t his screen t o enable and assign a guest VLAN t o a port . I n t he Por t Aut he nt ica t ion > 8 0 2 .1 x screen click Gue st Vla n t o display t he configurat ion screen as shown.
Page 162: Activate Mac Authentication
Chapter 18 Port Authentication The following t able describes t he labels in t his screen. Table 65 Advanced Applicat ion > Port Aut hent icat ion > 802.1x > Guest VLAN LABEL DESCRIPTION Port This field displays a port num ber. Set t ings in t his row apply t o all port s.
Page 163 Chapter 18 Port Authentication Figure 120 Advanced Applicat ion > Port Aut hent icat ion > MAC Aut hent icat ion The following t able describes t he labels in t his screen. Table 66 Advanced Applicat ion > Port Aut hent icat ion > MAC Aut hent icat ion LABEL DESCRIPTION Act ive...
Page 164 Chapter 18 Port Authentication Table 66 Advanced Applicat ion > Port Aut hent icat ion > MAC Aut hent icat ion ( cont inued) LABEL DESCRIPTION Tim eout Specify t he am ount of t im e before t he Swit ch allows a client MAC address t hat fails aut hent icat ion t o t ry and aut hent icat e again.
Page 165: Port Security
HAPTER Port Security 19.1 Port Security Overview This chapt er shows you how t o set up port securit y. Port securit y allows only packet s wit h dynam ically learned MAC addresses and/ or configured st at ic MAC addresses t o pass t hrough a port on t he Swit ch.
Page 166 Chapter 19 Port Security Figure 121 Advanced Applicat ion > Port Securit y The following t able describes t he labels in t his screen. Table 67 Advanced Applicat ion > Port Securit y LABEL DESCRIPTION Port List Ent er t he num ber of t he port ( s) ( separat ed by a com m a) on which you want t o enable port securit y and disable MAC address learning.
Page 167 Chapter 19 Port Security Table 67 Advanced Applicat ion > Port Securit y ( cont inued) LABEL DESCRIPTION Act ive Select t his check box t o enable t he port securit y feat ure on t his port . The Swit ch forwards packet s whose MAC address( es) is in t he MAC address t able on t his port .
Page 168: Time Range
HAPTER Time Range 20.1 Time Range Overview You can set up one- t im e and recurring schedules for t im e- orient ed feat ures, such as PoE and classifier. The UAG support s one- t im e and recurring schedules. One- t im e schedules are effect ive only once, while recurring schedules usually repeat .
Page 169 Chapter 20 Time Range The following t able describes t he labels in t his screen. Table 68 Advanced Applicat ion > Tim e Range LABEL DESCRIPTION Nam e Ent er a descript ive nam e for t his rule for ident ifying purposes. Type Select Absolu t e t o creat e a one- t im e schedule.
Page 170: Classifier Overview
HAPTER Classifier 21.1 Classifier Overview This chapt er int roduces and shows you how t o configure t he packet classifier on t he Swit ch. I t also discusses Qualit y of Service ( QoS) and classifier concept s as em ployed by t he Swit ch. 21.1.1 What You Can Do •...
Page 171: Classifier Configuration
Chapter 21 Classifier Click Adva n ce d Applica t ion > Cla ssifie r in t he navigat ion panel t o display t he configurat ion screen as shown. Figure 123 Advanced Applicat ion > Classifier > Classifier St at us The following t able describes t he labels in t his screen.
Page 172 Chapter 21 Classifier Figure 124 Advanced Applicat ion > Classifier > Classifier Configurat ion GS2210 Series User’s Guide...
Page 173 Chapter 21 Classifier The following t able describes t he labels in t his screen. Table 70 Advanced Applicat ion > Classifier > Classifier Configurat ion LABEL DESCRIPTION Act ive Select t his opt ion t o enable t his rule. Nam e Ent er a descript ive nam e for t his rule for ident ifying purposes.
Page 174 Chapter 21 Classifier Table 70 Advanced Applicat ion > Classifier > Classifier Configurat ion ( cont inued) LABEL DESCRIPTION Layer 3 Specify t he fields below t o configure a layer 3 classifier. DSCP Select An y t o classify t raffic from any DSCP or select t he second opt ion and specify a DSCP ( DiffServ Code Point ) num ber bet ween 0 and 63 in t he field provided.
Page 175: Viewing And Editing Classifier Configuration Summary
Chapter 21 Classifier 21.3.1 Viewing and Editing Classifier Configuration Summary To view a sum m ary of t he classifier configurat ion, scroll down t o t he sum m ary t able at t he bot t om of t he Cla ssifie r screen. To change t he set t ings of a rule, click a num ber in t he I n de x field. Not e: When t wo rules conflict wit h each ot her, a higher layer rule has priorit y over lower layer r ule.
Page 176: Classifier Global Setting
Chapter 21 Classifier I n t he I nt ernet Prot ocol t here is a field, called “ Prot ocol”, t o ident ify t he next level prot ocol. The following t able shows som e com m on prot ocol t ypes and t he corresponding prot ocol num ber. Refer ht t p: / / www.iana.org/ assignm ent s/ prot ocol- num bers for a com plet e list .
Page 177: Classifier Example
Chapter 21 Classifier The following t able describes t he labels in t his screen. Table 75 Advanced Applicat ion > Classifier > Classifier Configurat ion > Classifier Global Set t ing LABEL DESCRIPTION Mat ch Select m a n u a l t o have classifier rules applied according t o t he weight of each rule you configured Order in Adva n ce d Applica t ion >...
Page 178 Chapter 21 Classifier Figure 127 Classifier: Exam ple GS2210 Series User’s Guide...
Page 179: Policy Rule
HAPTER Policy Rule 22.1 Policy Rules Overview This chapt er shows you how t o configure policy rules. A classifier dist inguishes t raffic int o flows based on t he configured crit eria ( refer t o Chapt er 21 on page 170 for m ore inform at ion) .
Page 180 Chapter 22 Policy Rule Figure 128 Advanced Applicat ion > Policy Rule The following t able describes t he labels in t his screen. Table 76 Advanced Applicat ion > Policy Rule LABEL DESCRIPTION Act ive Select t his opt ion t o enable t he policy. Nam e Ent er a descript ive nam e for ident ificat ion purposes.
Page 181 Chapter 22 Policy Rule Table 76 Advanced Applicat ion > Policy Rule ( cont inued) LABEL DESCRIPTION Bandwidt h Specify t he bandwidt h in kilobit per second ( Kbps) . Ent er a num ber bet ween 64 and 1000000.
Page 182: Policy Example
Chapter 22 Policy Rule Table 76 Advanced Applicat ion > Policy Rule ( cont inued) LABEL DESCRIPTION Delet e Click D e le t e t o rem ove t he select ed ent ry from t he sum m ary t able. Cancel Click Ca n ce l t o clear t he check boxes.
Page 183: Queuing Method
HAPTER Queuing Method 23.1 Queuing Method Overview This chapt er int roduces t he queuing m et hods support ed. Queuing is used t o help solve perform ance degradat ion when t here is net work congest ion. Use t he Qu e u in g M e t hod screen t o configure queuing algorit hm s for out going t raffic.
Page 184: Configuring Queuing
Chapter 23 Queuing Method an equal am ount of bandwidt h, and t hen m oves t o t he end of t he list ; and so on, depending on t he num ber of queues being used. This works in a looping fashion unt il a queue is em pt y. Weight ed Round Robin Scheduling ( WRR) uses t he sam e algorit hm as round robin scheduling, but services queues based on t heir priorit y and queue weight ( t he num ber you configure in t he queue W e igh t field) rat her t han a fixed am ount of bandwidt h.
Page 185 Chapter 23 Queuing Method The following t able describes t he labels in t his screen. Table 77 Advanced Applicat ion > Queuing Met hod LABEL DESCRIPTION Port This label shows t he port you are configuring. Set t ings in t his row apply t o all port s. Use t his row only if you want t o m ake som e set t ings t he sam e for all port s.
Page 186: Multicast Overview
HAPTER Multicast 24.1 Multicast Overview This chapt er shows you how t o configure various m ult icast feat ures. Tradit ionally, I P packet s are t ransm it t ed in one of eit her t wo ways - Unicast ( 1 sender t o 1 recipient ) or Broadcast ( 1 sender t o everybody on t he net work) .
Page 187: Igmp Snooping
Chapter 24 Multicast IGMP Snooping A Swit ch can passively snoop on I GMP packet s t ransferred bet ween I P m ult icast rout ers/ swit ches and I P m ult icast host s t o learn t he I P m ult icast group m em bership. I t checks I GMP packet s passing t hrough it , picks out t he group regist rat ion inform at ion, and configures m ult icast ing accordingly.
Page 188: Mld Messages
Chapter 24 Multicast one query from a rout er ( X) or MLD Done or Report m essage from any upst ream port , it will be broadcast t o all connect ed upst ream port s. Query Report Done MLD Messages A m ult icast rout er or swit ch periodically sends general queries t o MLD host s t o updat e t he m ult icast forwarding t able.
Page 189: Types Of Mvr Ports
Chapter 24 Multicast Figure 131 MVR Net work Exam ple VLAN 1 Multicast VLAN VLAN 2 VLAN 3 Types of MVR Ports I n MVR, a source port is a port on t he Swit ch t hat can send and receive m ult icast t raffic in a m ult icast VLAN while a receiver port can only receive m ult icast t raffic.
Page 190: Multicast Setup
Chapter 24 Multicast Figure 132 MVR Mult icast Television Exam ple VLAN 1 Multicast VLAN 24.2 Multicast Setup Use t his screen t o configure I GMP for I Pv4 or MLD for I Pv6 and set up m ult icast VLANs. Click Adva nce d Applica t ion >...
Page 191: Igmp Snooping
Chapter 24 Multicast The following t able describes t he labels in t his screen. Table 79 Advanced Applicat ion > Mult icast > I Pv4 Mult icast LABEL DESCRIPTION I ndex This is t he index num ber of t he ent ry. VI D This field displays t he m ult icast VLAN I D.
Page 192 Chapter 24 Multicast The following t able describes t he labels in t his screen. Table 80 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping LABEL DESCRIPTION I GMP Snooping Use t hese set t ings t o configure I GMP snooping. Act ive Select Act ive t o enable I GMP Snooping t o forward group m ult icast t raffic only t o port s t hat are m em bers of t hat group.
Page 193: Igmp Snooping Vlan
Chapter 24 Multicast Table 80 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping ( cont inued) LABEL DESCRIPTION Fast Leave Ent er an I GMP fast leave t im eout value ( from 200 t o 6,348,800) in m iliseconds. Select t his opt ion t o have t he Swit ch use t his t im eout t o updat e t he forwarding t able for t he port .
Page 194 Chapter 24 Multicast Figure 136 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping > I GMP Snooping VLAN The following t able describes t he labels in t his screen. Table 81 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping > I GMP Snooping VLAN LABEL DESCRIPTION...
Page 195: Igmp Filtering Profile
Chapter 24 Multicast Table 81 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping > I GMP Snooping VLAN ( cont inued) LABEL DESCRIPTION I ndex This is t he index num ber of t he I GMP snooping VLAN ent ry in t he t able. Click on an index num ber t o view m ore det ails or change t he set t ings.
Page 196: Ipv6 Multicast Status
Chapter 24 Multicast Table 82 Advanced Applicat ion > Mult icast > I Pv4 Mult icast > I GMP Snooping > I GMP Filt ering Profile ( cont inued) LABEL DESCRIPTION End Address Type t he ending m ult icast I P address for a range of I P addresses t hat you want t o belong t o t he I GMP filt er profile.
Page 197: Mld Snooping-Proxy
Chapter 24 Multicast 24.4.1 MLD Snooping-proxy Click t he M LD Sn ooping- pr ox y link in t he Adva nce d Applica t ion > M ult ica st > I Pv6 M ult ica st screen t o display t he screen as shown. See Sect ion 24.1 on page 186 for m ore inform at ion on m ult icast ing.
Page 198 Chapter 24 Multicast Figure 140 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > VLAN The following t able describes t he fields in t he above screen. Table 85 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > VLAN LABEL DESCRIPTION VI D...
Page 199: Mld Snooping-Proxy Vlan Port Role Setting
Chapter 24 Multicast Table 85 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > VLAN LABEL DESCRIPTION Last Mem ber Query Ent er t he am ount of t im e ( in m iliseconds) bet ween t he MLD group- specific queries I nt erval sent by an upst ream port when an MLD Done m essage is received.
Page 200 Chapter 24 Multicast Figure 141 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Port Role Set t ing The following t able describes t he fields in t he above screen. Table 86 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Port Role Set t ing LABEL DESCRIPTION...
Page 201: Mld Snooping-Proxy Filtering
Chapter 24 Multicast Table 86 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Port Role Set t ing LABEL DESCRIPTION Port Role A port on t he Swit ch can be eit her a D ow n st r e a m port or Upst r e a m port in MLD. A downst ream port connect s t o MLD host s and act s as a m ult icast rout er t o send MLD queries and list en t o t he MLD host ’s Report and Done m essages.
Page 202 Chapter 24 Multicast Figure 142 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Filt ering The following t able describes t he fields in t he above screen. Table 87 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Filt ering LABEL DESCRIPTION Act ive...
Page 203: Mld Snooping-Proxy Filtering Profile
Chapter 24 Multicast Table 87 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Filt ering LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
Page 204: General Mvr Configuration
Chapter 24 Multicast Table 88 Advanced Applicat ion > Mult icast > I Pv6 Mult icast > MLD Snooping- proxy > Filt ering Profile LABEL DESCRIPTION Profile Nam e This field displays t he descript ive nam e of t he profile. St art Address This field displays t he st art of t he m ult icast I Pv6 address range.
Page 205 Chapter 24 Multicast Figure 144 Advanced Applicat ion > Mult icast > MVR The following t able describes t he relat ed labels in t his screen. Table 89 Advanced Applicat ion > Mult icast > MVR LABEL DESCRIPTION Act ive Select t his check box t o enable MVR t o allow one single m ult icast VLAN t o be shared am ong different subscriber VLANs on t he net work.
Page 206: Mvr Group Configuration
Chapter 24 Multicast Table 89 Advanced Applicat ion > Mult icast > MVR ( cont inued) LABEL DESCRIPTION Set t ings in t his row apply t o all port s. Use t his row only if you want t o m ake som e set t ings t he sam e for all port s. Use t his row first t o set t he com m on set t ings and t hen m ake adj ust m ent s on a port- by- port basis.
Page 207 Chapter 24 Multicast Figure 145 Advanced Applicat ion > Mult icast > MVR > Group Configurat ion The following t able describes t he labels in t his screen. Table 90 Advanced Applicat ion > Mult icast > MVR > Group Configurat ion LABEL DESCRIPTION Mult icast VLAN I D...
Page 208: Mvr Configuration Example
Chapter 24 Multicast Table 90 Advanced Applicat ion > Mult icast > MVR > Group Configurat ion ( cont inued) LABEL DESCRIPTION Delet e Select t he ent ry( ies) t hat you want t o rem ove, t hen click t he D e le t e but t on t o rem ove t he select ed ent ry( ies) from t he t able.
Page 209 Chapter 24 Multicast Figure 147 MVR Configurat ion Exam ple EXAMPLE To set t he Swit ch t o forward t he m ult icast group t raffic t o t he subscribers, configure m ult icast group set t ings in t he Gr ou p Con figu r a t ion screen. The following figure shows an exam ple where t wo I Pv4 m ult icast groups ( N e w s and M ovie ) are configured for t he m ult icast VLAN 200.
Page 210 Chapter 24 Multicast Figure 148 MVR Group Configurat ion Exam ple- 1 EXAMPLE Figure 149 MVR Group Configurat ion Exam ple- 2 EXAMPLE GS2210 Series User’s Guide...
Page 211: Aaa Overview
HAPTER 25.1 AAA Overview This chapt er describes how t o configure aut hent icat ion, aut horizat ion and account ing set t ings on t he Swit ch. The ext ernal servers t hat perform aut hent icat ion, aut horizat ion and account ing funct ions are known as AAA servers.
Page 212: Local User Accounts
Chapter 25 AAA based on user account s configured on t he Swit ch it self or it can use an ext ernal server t o aut horize a large num ber of users. Account ing is t he process of recording what a user is doing. The Swit ch can use an ext ernal server t o t rack when users log in, log out , execut e com m ands and so on.
Page 213: Radius Server Setup
Chapter 25 AAA 25.3 RADIUS Server Setup Use t his screen t o configure your RADI US server set t ings. See RADI US and TACACS+ on page 212 for m ore inform at ion on RADI US servers and Sect ion 25.6.2 on page 220 for RADI US at t ribut es ut ilized by t he aut hent icat ion feat ures on t he Swit ch.
Page 214: Tacacs+ Server Setup
Chapter 25 AAA Table 92 Advanced Applicat ion > AAA > RADI US Server Set up ( cont inued) LABEL DESCRIPTION I P Address Ent er t he I P address of an ext ernal RADI US server in dot t ed decim al not at ion. UDP Port The default port of a RADI US server for aut hent icat ion is 1 8 1 2 .
Page 215 Chapter 25 AAA Figure 153 Advanced Applicat ion > AAA > TACACS+ Server Set up The following t able describes t he labels in t his screen. Table 93 Advanced Applicat ion > AAA > TACACS+ Server Set up LABEL DESCRIPTION Aut hent icat ion Use t his sect ion t o configure your TACACS+ aut hent icat ion set t ings.
Page 216: Aaa Setup
Chapter 25 AAA Table 93 Advanced Applicat ion > AAA > TACACS+ Server Set up ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non-volat ile m em ory when you are done configuring.
Page 217 Chapter 25 AAA Figure 154 Advanced Applicat ion > AAA > AAA Set up The following t able describes t he labels in t his screen. Table 94 Advanced Applicat ion > AAA > AAA Set up LABEL DESCRIPTION Aut hent icat ion Use t his sect ion t o specify t he m et hods used t o aut hent icat e users accessing t he Swit ch.
Page 218 Chapter 25 AAA Table 94 Advanced Applicat ion > AAA > AAA Set up ( cont inued) LABEL DESCRIPTION Login These fields specify which dat abase t he Swit ch should use ( first , second and t hird) t o aut hent icat e adm inist rat or account s ( users for Swit ch m anagem ent ) .
Page 219: Vendor Specific Attribute
Chapter 25 AAA Table 94 Advanced Applicat ion > AAA > AAA Set up ( cont inued) LABEL DESCRIPTION Mode The Swit ch support s t wo m odes of recording login event s. Select : • st a r t - st op - t o have t he Swit ch send inform at ion t o t he account ing server when a user begins a session, during a user ’s session ( if it last s past t he Upda t e Pe r iod) , and when a user ends a session.
Page 220: Tunnel Protocol Attribute
Chapter 25 AAA The following t able describes t he VSAs support ed on t he Swit ch. Table 95 Support ed VSAs FUNCTION ATTRIBUTE I ngress Bandwidt h Vendor-Id = 890 Assignm ent Vendor-Type = 1 Vendor-data = ingress rate (Kbps in decimal format) Egress Bandwidt h Vendor-Id = 890 Assignm ent...
Page 221: Attributes Used For Authentication
Chapter 25 AAA 25.6.3 Attributes Used for Authentication The following sect ions list t he at t ribut es sent from t he Swit ch t o t he RADI US server when perform ing aut hent icat ion. 25.6.3.1 Attributes Used for Authenticating Privilege Access User- Nam e - The form at of t he User- Nam e at t ribut e is $ e n a b# $ , where # is t he privilege level ( 1- 14) .
Page 222: Ip Source Guard
HAPTER IP Source Guard 26.1 IP Source Guard Overview Use I Pv4 and I Pv6 source guard t o filt er unaut horized DHCP and ARP packet s in your net work. I P source guard uses a binding t able t o dist inguish bet ween aut horized and unaut horized DHCP and ARP packet s in your net work.
Page 223: What You Need To Know
Chapter 26 IP Source Guard • Use t he ARP I n spe ct ion Log St a t u s screen ( Sect ion 26.9 on page 238) t o look at log m essages t hat were generat ed by ARP packet s and t hat have not been sent t o t he syslog server yet . •...
Page 224: Ipv4 Source Guard Setup
Chapter 26 IP Source Guard Figure 155 Advanced Applicat ion > I P Source Guard The following t able describes t he labels in t his screen. Table 97 Advanced Applicat ion > I P Source Guard LABEL DESCRIPTION I Pv4 Source Click t he link t o open screens where you can view and m anage st at ic bindings, configure Guard Set up DHCP snooping or ARP inspect ion and look at various st at ist ics.
Page 225: Ipv4 Source Guard Static Binding
Chapter 26 IP Source Guard The following t able describes t he labels in t his screen. Table 98 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up LABEL DESCRIPTION I ndex This field displays a sequent ial num ber for each binding. MAC Address This field displays t he source MAC address in t he binding.
Page 226 Chapter 26 IP Source Guard Figure 157 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > St at ic Binding The following t able describes t he labels in t his screen. Table 99 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > St at ic Binding LABEL DESCRIPTION ARP Freeze...
Page 227: Dhcp Snooping
Chapter 26 IP Source Guard Table 99 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > St at ic Binding LABEL DESCRIPTION Clear Click t his t o clear t he fields above. I ndex This field displays a sequent ial num ber for each binding.
Page 228 Chapter 26 IP Source Guard Figure 158 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping The following t able describes t he labels in t his screen. Table 100 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping LABEL DESCRIPTION Dat abase St at us...
Page 229 Chapter 26 IP Source Guard Table 100 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping LABEL DESCRIPTION Writ e delay t im er This field displays how long ( in seconds) t he Swit ch t ries t o com plet e a specific updat e in t he DHCP snooping dat abase before it gives up.
Page 230: Dhcp Snooping Configure
Chapter 26 IP Source Guard Table 100 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping LABEL DESCRIPTION Last ignored bindings This sect ion displays t he num ber of t im es and t he reasons t he Swit ch ignored count ers bindings t he last t im e it read bindings from t he DHCP binding dat abase.
Page 231 Chapter 26 IP Source Guard Figure 159 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure The following t able describes t he labels in t his screen. Table 101 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure LABEL DESCRIPTION...
Page 232: Dhcp Snooping Port Configure
Chapter 26 IP Source Guard Table 101 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure ( cont inued) ( cont inued) LABEL DESCRIPTION Renew DHCP Ent er t he locat ion of a DHCP snooping dat abase, and click Re n e w if you want t he Snooping URL Swit ch t o load it .
Page 233 Chapter 26 IP Source Guard Figure 160 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure > Port The following t able describes t he labels in t his screen. Table 102 Advanced Applicat ion >...
Page 234: Dhcp Snooping Vlan Configure
Chapter 26 IP Source Guard Table 102 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure > Port LABEL DESCRIPTION Server Trust ed st at e Select whet her t his port is a t rust ed port ( Tr ust e d) or an unt rust ed port ( Un t r u st e d) .
Page 235: Dhcp Snooping Vlan Port Configure
Chapter 26 IP Source Guard Table 103 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure > VLAN ( cont inued) LABEL DESCRIPTION End VI D Ent er t he highest VLAN I D you want t o m anage in t he sect ion below. Apply Click t his t o display t he specified range of VLANs in t he sect ion below.
Page 236: Arp Inspection Status
Chapter 26 IP Source Guard The following t able describes t he labels in t his screen. Table 104 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > DHCP Snooping > Configure > VLAN > Port LABEL DESCRIPTION VI D...
Page 237: Arp Inspection Vlan Status
Chapter 26 IP Source Guard Figure 163 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion The following t able describes t he labels in t his screen. Table 105 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion LABEL DESCRIPTION Tot al num ber of...
Page 238: Arp Inspection Log Status
Chapter 26 IP Source Guard Figure 164 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > VLAN St at us The following t able describes t he labels in t his screen. Table 106 Advanced Applicat ion >...
Page 239 Chapter 26 IP Source Guard Figure 165 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > Log St at us The following t able describes t he labels in t his screen. Table 107 Advanced Applicat ion >...
Page 240: Arp Inspection Configure
Chapter 26 IP Source Guard 26.10 ARP Inspection Configure Use t his screen t o enable ARP inspect ion on t he Swit ch. You can also configure t he lengt h of t im e t he Swit ch st ores records of discarded ARP packet s and global set t ings for t he ARP inspect ion log. To open t his screen, click Adva n ce d Applica t ion >...
Page 241: Arp Inspection Port Configure
Chapter 26 IP Source Guard Table 108 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > Configure ( cont inued) LABEL DESCRIPTION Syslog rat e Ent er t he m axim um num ber of syslog m essages t he Swit ch can send t o t he syslog server in one bat ch.
Page 242 Chapter 26 IP Source Guard Figure 167 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > Configure > Port The following t able describes t he labels in t his screen. Table 109 Advanced Applicat ion >...
Page 243: Arp Inspection Vlan Configure
Chapter 26 IP Source Guard Table 109 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > Configure > Port ( cont inued) LABEL DESCRIPTION Rat e ( pps) Specify t he m axim um rat e ( 1- 2048 packet s per second) at which t he Swit ch receives ARP packet s from each port .
Page 244: Ipv6 Source Guard Overview
Chapter 26 IP Source Guard Table 110 Advanced Applicat ion > I P Source Guard > I Pv4 Source Guard Set up > ARP I nspect ion > Configure > VLAN ( cont inued) LABEL DESCRIPTION Specify when t he Swit ch generat es log m essages for receiving ARP packet s from t he VLAN.
Page 245: Ipv6 Static Binding Setup
Chapter 26 IP Source Guard Figure 169 Advanced Applicat ion > I P Source Guard > I Pv6 Source Binding St at us The following t able describes t he labels in t his screen. Table 111 Advanced Applicat ion > I P Source Guard > I Pv6 Source Binding St at us LABEL DESCRIPTION Clear Dynam ic...
Page 246 Chapter 26 IP Source Guard source I Pv6 address / prefix can only be in one st at ic binding. I f you t ry t o creat e a st at ic binding wit h t he sam e source I Pv6 address / prefix as an exist ing st at ic binding, t he new st at ic binding replaces t he original one.
Page 247: Ipv6 Source Guard Policy Setup
Chapter 26 IP Source Guard Table 112 Advanced Applicat ion > I P Source Guard > I Pv6 St at ic Binding Set up ( cont inued) LABEL DESCRIPTION Port This field displays t he port num ber in t he binding. I f t his field is blank, t he binding applies t o all port s.
Page 248: Ipv6 Source Guard Port Setup
Chapter 26 IP Source Guard Table 113 Advanced Applicat ion > I P Source Guard > I Pv6 St at ic Binding Set up ( cont inued) LABEL DESCRIPTION Link Local Select Pe r m it t o allow dat a t raffic from all link- local addresses; ot herwise leave t he set t ing at D e n y.
Page 249: Ipv6 Snooping Policy Setup
Chapter 26 IP Source Guard Figure 172 Advanced Applicat ion > I P Source Guard > I Pv6 Source Guard Port Set up The following t able describes t he labels in t his screen. Table 114 Advanced Applicat ion > I P Source Guard > I Pv6 Source Guard Port Set up LABEL DESCRIPTION Port...
Page 250 Chapter 26 IP Source Guard valid I Pv6 address, DHCPv6 snooping builds t he binding t able dynam ically. To open t his screen, click Adva nce d Applica t ion > I P Sour ce Gu a r d > I Pv6 Sn ooping Policy Se t u p. Not e: I f you do not select Pr ot ocol and Pr e fix Gle a n , t hen t he Sw it ch cannot perform DHCPv6 snooping.
Page 251: Ipv6 Snooping Vlan Setup
Chapter 26 IP Source Guard Table 115 Advanced Applicat ion > I P Source Guard > I Pv6 Snooping Policy Set up ( cont inued) LABEL DESCRIPTION Delet e Select an ent ry checkbox and click D e le t e t o rem ove t he specified ent ry. Cancel Click t his t o clear t he check boxes above.
Page 252: Ipv6 Dhcp Trust Setup
Chapter 26 IP Source Guard 26.18 IPv6 DHCP Trust Setup Use t his screen t o specify which port s are t rust ed for DHCPv6 snooping. To open t his screen, click Adva nce d Applica t ion > I P Sour ce Gu a r d > I Pv6 D H CP Tr u st Se t u p. Not e: DHCPv6 solicit packet s are sent from a DHCPv6 client t o a DHCPv6 server.
Page 253: Dhcp Snooping Overview
Chapter 26 IP Source Guard Table 117 Advanced Applicat ion > I P Source Guard > I Pv6 DHCP Trust Set up LABEL DESCRIPTION Set t ings in t his row apply t o all port s. Use t his row only if you want t o m ake som e set t ings t he sam e for all port s. Use t his row first t o set t he com m on set t ings and t hen m ake adj ust m ent s on a port- by- port basis.
Page 254 Chapter 26 IP Source Guard • The packet is a RELEASE or DECLI NE packet , and t he source MAC address and source port do not m at ch any of t he current bindings. • The rat e at which DHCP packet s arrive is t oo high. 26.19.1.2 DHCP Snooping Database The Swit ch st ores t he binding t able in volat ile m em ory.
Page 255: Configuring Dhcp Snooping
Chapter 26 IP Source Guard 26.19.1.4 Configuring DHCP Snooping Follow t hese st eps t o configure DHCP snooping on t he Swit ch. Enable DHCP snooping on t he Swit ch. Enable DHCP snooping on each VLAN, and configure DHCP relay opt ion 82. Configure t rust ed and unt rust ed port s, and specify t he m axim um num ber of DHCP packet s t hat each port can receive per second.
Page 256: Configuring Arp Inspection
Chapter 26 IP Source Guard 26.19.2.2 Trusted vs. Untrusted Ports Every port is eit her a t rust ed port or an unt rust ed port for ARP inspect ion. This set t ing is independent of t he t rust ed/ unt rust ed set t ing for DHCP snooping. You can also specify t he m axim um rat e at which t he Swit ch receives ARP packet s on unt rust ed port s.
Page 257: Loop Guard
HAPTER Loop Guard 27.1 Loop Guard Overview This chapt er shows you how t o configure t he Swit ch t o guard against loops on t he edge of your net work. Loop guard allows you t o configure t he Swit ch t o shut down a port if it det ect s t hat packet s sent out on t hat port loop back t o t he Swit ch.
Page 258 Chapter 27 Loop Guard • I t will receive broadcast m essages sent out from t h e swit ch in loop st at e. • I t will receive it s own broadcast m essages t hat it sends out as t hey loop back. I t will t hen re- broadcast t hose m essages again.
Page 259: Loop Guard Setup
Chapter 27 Loop Guard Figure 181 Loop Guard - Net work Loop Not e: Aft er resolving t he loop problem on your net work you can re- act ivat e t he disabled port via t he web configurat or ( see Sect ion 8.7 on page 72) or via com m ands ( See t he CLI Reference Guide) .
Page 260 Chapter 27 Loop Guard The following t able describes t he labels in t his screen. Table 118 Advanced Applicat ion > Loop Guard LABEL DESCRIPTION Act ive Select t his opt ion t o enable loop guard on t he Swit ch. The Swit ch generat es syslog, int ernal log m essages as well as SNMP t raps when it shut s down a port via t he loop guard feat ure.
Page 261: Layer 2 Protocol Tunneling
HAPTER Layer 2 Protocol Tunneling 28.1 Layer 2 Protocol Tunneling Overview This chapt er shows you how t o configure layer 2 prot ocol t unneling on t he Swit ch. 28.1.1 What You Can Do Use t he La ye r 2 Pr ot ocol Tu n ne l screen ( Sect ion 28.2 on page 262) t o enable layer 2 prot ocol t unneling on t he Swit ch and specify a MAC address wit h which t he Swit ch uses t o encapsulat e t he...
Page 262: Layer 2 Protocol Tunneling Mode
Chapter 28 Layer 2 Protocol Tunneling Figure 184 L2PT Net work Exam ple Service Provider's Network 28.1.2.1 Layer 2 Protocol Tunneling Mode Each port can have t wo layer 2 prot ocol t unneling m odes, Acce ss and Tun n e l. •...
Page 263 Chapter 28 Layer 2 Protocol Tunneling Figure 185 Advanced Applicat ion > Layer 2 Prot ocol Tunneling The following t able describes t he labels in t his screen. Table 119 Advanced Applicat ion > Layer 2 Prot ocol Tunneling LABEL DESCRIPTION Act ive...
Page 264 Chapter 28 Layer 2 Protocol Tunneling Table 119 Advanced Applicat ion > Layer 2 Prot ocol Tunneling ( cont inued) LABEL DESCRIPTION Select t his opt ion t o have t he Swit ch t unnel STP ( Spanning Tree Prot ocol) packet s so t hat STP can run properly across t he service provider ’s net work and spanning t rees can be set up based on bridge inform at ion from all ( local and rem ot e) net works.
Page 265: Pppoe Intermediate Agent Overview
HAPTER PPPoE 29.1 PPPoE Intermediate Agent Overview This chapt er describes how t he Swit ch gives a PPPoE t erm inat ion server addit ional inform at ion t hat t he server can use t o ident ify and aut hent icat e a PPPoE client . A PPPoE I nt erm ediat e Agent ( PPPoE I A) is deployed bet ween a PPPoE server and PPPoE client s.
Page 266 Chapter 29 PPPoE The Tag_Type is 0x0105 for vendor- specific t ags, as defined in RFC 2516. The Tag_Len indicat es t he lengt h of Value, i1 and i2. The Value is t he 32- bit num ber 0x00000DE9, which st ands for t he “ADSL Forum ”...
Page 267: Port State
Chapter 29 PPPoE defined in t he DSL Forum Working Text ( WT) - 101. The default access node ident ifier is t he host nam e of t he PPPoE int erm ediat e agent and t he et h indicat es “ Et hernet ”. Table 124 PPPoE I A Circuit I D Sub- opt ion Form at : Defined in WT- 101 SubOpt Lengt h...
Page 268: Pppoe Intermediate Agent
Chapter 29 PPPoE 29.3 PPPoE Intermediate Agent Use t his screen t o configure t he Swit ch t o give a PPPoE t erm inat ion server addit ional subscriber inform at ion t hat t he server can use t o ident ify and aut hent icat e a PPPoE client . Click Adva nce d Applica t ion >...
Page 269: Pppoe Ia Per-Port
Chapter 29 PPPoE Table 125 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent ( cont inued) LABEL DESCRIPTION delim it er Select a delim it er t o separat e t he ident ifier- st ring, slot I D, port num ber and/ or VLAN I D from each ot her.
Page 270: Pppoe Ia Per-Port Per-Vlan
Chapter 29 PPPoE The following t able describes t he labels in t his screen. Table 126 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > Port LABEL DESCRIPTION Port This field displays t he port num ber. Use t his row t o m ake t he set t ing t he sam e for all port s.
Page 271: Pppoe Ia For Vlan
Chapter 29 PPPoE Figure 189 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > Port > VLAN The following t able describes t he labels in t his screen. Table 127 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > Port > VLAN LABEL DESCRIPTION Show Port...
Page 272 Chapter 29 PPPoE Figure 190 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > VLAN The following t able describes t he labels in t his screen. Table 128 Advanced Applicat ion > PPPoE > I nt erm ediat e Agent > VLAN LABEL DESCRIPTION Show VLAN...
Page 273: Error Disable
HAPTER Error Disable 30.1 Error Disable Overview This chapt er shows you how t o configure t he rat e lim it for cont rol packet s on a port , and set t he Swit ch t o t ake an act ion ( such as t o shut down a port or st op sending packet s) on a port when t he Swit ch det ect s a pre- configured error.
Page 274: Error Disable Screen
Chapter 30 Error Disable 30.2 Error Disable Screen Use t his screen t o go t o t he screens where you can configure error disable relat ed set t ings. Click Adva nce d Applica t ion > Er r disa ble in t he navigat ion panel t o open t he following screen. Figure 191 Advanced Applicat ion >...
Page 275 Chapter 30 Error Disable Figure 192 Advanced Applicat ion > Errdisable > Errdisable St at us The following t able describes t he labels in t his screen. Table 129 Advanced Applicat ion > Errdisable > Errdisable St at us LABEL DESCRIPTION I nact ive- reason...
Page 276: Cpu Protection Configuration
Chapter 30 Error Disable Table 129 Advanced Applicat ion > Errdisable > Errdisable St at us ( cont inued) LABEL DESCRIPTION Act ive This field displays whet her t he cont rol packet s ( ARP , BPDU, and/ or I GMP) on t he port is being det ect ed or not .
Page 277 Chapter 30 Error Disable Figure 193 Advanced Applicat ion > Errdisable > CPU prot ect ion The following t able describes t he labels in t his screen. Table 130 Advanced Applicat ion > Errdisable > CPU prot ect ion LABEL DESCRIPTION Reason...
Page 278: Error-Disable Detect Configuration
Chapter 30 Error Disable 30.5 Error-Disable Detect Configuration Use t his screen t o have t he Swit ch det ect whet her t he cont rol packet s exceed t he rat e lim it configured for a port and configure t he act ion t o t ake once t he lim it is exceeded. Click t he Click H e r e link next t o Er r disa ble D e t e ct link in t he Adva nce d Applica t ion >...
Page 279 Chapter 30 Error Disable Figure 195 Advanced Applicat ion > Errdisable > Errdisable Recovery The following t able describes t he labels in t his screen. Table 132 Advanced Applicat ion > Errdisable > Errdisable Recovery LABEL DESCRIPTION Act ive Select t his opt ion t o t urn on t he error- disable recovery funct ion on t he Swit ch.
Page 280: Private Vlan
3 1 3 0 HAPTER Private VLAN This chapt er shows you how t o configure t he Swit ch t o prevent com m unicat ions bet w een port s in a VLAN. 31.1 Private VLAN Overview Privat e VLAN allows you t o do port isolat ion wit hin a VLAN in a sim ple way. You specify which port ( s) in a VLAN is not isolat ed by adding it t o t he prom iscuous port list .
Page 281 Chapter 31 Private VLAN Figure 197 Advanced Applicat ion > Privat e VLAN The following t able describes t he labels in t his screen. Table 133 Advanced Applicat ion > Privat e VLAN LABEL DESCRIPTION Act ive Check t his box t o enable privat e VLAN in a VLAN. Nam e Ent er a descript ive nam e ( up t o 32 print able ASCI I charact ers) for ident ificat ion purposes.
Page 282: Green Ethernet
HAPTER Green Ethernet This chapt er shows you how t o configure t he Swit ch t o reduce t he power consum ed by swit ch port s. 32.1 Green Ethernet Overview Green Et hernet reduces swit ch port power consum pt ion in t he following ways. IEEE 802.3az Energy Efficient Ethernet (EEE) I f EEE is enabled, bot h sides of a link support EEE and t here is no t raffic, t he port ent ers Low Power I dle ( LPI ) m ode.
Page 283 Chapter 32 Green Ethernet Figure 198 Advanced Applicat ion > Green Et hernet The following t able describes t he labels in t his screen. Table 134 Advanced Applicat ion > Green Et hernet LABEL DESCRIPTION Select t his t o act ivat e Energy Efficient Et hernet globally. Aut o Power Select t his t o act ivat e Aut o Power Down globally.
Page 284: Lldp Overview
3 3 3 1 HAPTER Link Layer Discovery Protocol (LLDP) 33.1 LLDP Overview The LLDP ( Link Layer Discovery Prot ocol) is a layer 2 prot ocol. I t allows a net work device t o advert ise it s ident it y and capabilit ies on t he local net work. I t also allows t he device t o m aint ain and st ore inform at ion from adj acent devices which are direct ly connect ed t o t he net work device.
Page 285: Lldp-Med Overview
Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 199 LLDP Overview 33.2 LLDP-MED Overview LLDP- MED ( Link Layer Discovery Prot ocol for Media Endpoint Devices) is an ext ension t o t he st andard LLDP developed by t he Telecom m unicat ions I ndust ry Associat ion ( TI A) TR- 41.4 subcom m it t ee which defines t he enhanced discovery capabilit ies, such as VoI P applicat ions, t o enable net work adm inist rat ors m anage t heir net work t opology applicat ion m ore efficient ly.
Page 286: Lldp Screens
Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 200 LLDP- MED Overview 33.3 LLDP Screens Click Adva nce d Applica t ion > LLD P in t he navigat ion panel t o display t he screen as shown next . Figure 201 Advanced Applicat ion >...
Page 287: Lldp Local Status
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 135 Advanced Applicat ion > LLDP ( cont inued) LABEL DESCRIPTION LLDP- MED Click here t o show a screen t o configure LLDP- MED ( Link Layer Discovery Prot ocol for Net work Policy Media Endpoint Devices) net work policy param et ers.
Page 288: Lldp Local Port Status Detail
Chapter 33 Link Layer Discovery Protocol (LLDP) The following t able describes t he labels in t his screen. Table 136 Advanced Applicat ion > LLDP > LLDP Local St at us LABEL DESCRIPTION Basic TLV Chassis I D TLV This displays t he chassis I D of t he local Swit ch, t hat is t he Swit ch you’re configuring.
Page 289 Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 203 Advanced Applicat ion > LLDP > LLDP Local St at us > LLDP Local Port St at us Det ail GS2210 Series User’s Guide...
Page 290 Chapter 33 Link Layer Discovery Protocol (LLDP) The following t able describes t he labels in t his screen. Table 137 Advanced Applicat ion > LLDP > LLDP Local St at us > LLDP Local Port St at us Det ail LABEL DESCRIPTION Basic TLV...
Page 291: Lldp Remote Status
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 137 Advanced Applicat ion > LLDP > LLDP Local St at us > LLDP Local Port St at us Det ail LABEL DESCRIPTION Net work Policy This displays a net work policy for t he specified applicat ion. •...
Page 292: Lldp Remote Port Status Detail
Chapter 33 Link Layer Discovery Protocol (LLDP) 33.5.1 LLDP Remote Port Status Detail This screen displays det ailed LLDP st at us of t he rem ot e device conenct ed t o t he Swit ch. Click Adva nce d Applica t ion > LLD P > LLD P Re m ot e St a t u s ( Click H e r e ) and t hen click an index num ber, for exam ple 1, in t he I n de x colum n in t he LLD P Re m ot e St a t us screen t o display t he screen as shown next .
Page 293 Chapter 33 Link Layer Discovery Protocol (LLDP) Table 139 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( Basic TLV) LABEL DESCRIPTION Chassis I D TLV •...
Page 294 Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 206 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail> ( Dot 1 and Dot 3 TLV) The following t able describes t he labels in t he Dot 1 and Dot 3 part s of t he screen.
Page 295 Chapter 33 Link Layer Discovery Protocol (LLDP) Table 140 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( Dot 1 and Dot 3 TLV) LABEL DESCRIPTION Port- Prot ocol...
Page 296 Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 207 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( MED TLV) GS2210 Series User’s Guide...
Page 297 Chapter 33 Link Layer Discovery Protocol (LLDP) The following t able describes t he labels in t he MED TLV part of t he screen. Table 141 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( MED TLV) LABEL DESCRIPTION...
Page 298: Lldp Configuration
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 141 Advanced Applicat ion > LLDP > LLDP Rem ot e St at us > LLDP Rem ot e Port St at us Det ail ( MED TLV) LABEL DESCRIPTION I nvent ory TLV The m aj orit y of I P Phones lack support of m anagem ent prot ocols such as SNMP , so LLDP- MED invent ory TLVs are used t o provide t heir invent ory inform at ion t o t he Net work Connect ivit y Devices such as t he Swit ch.
Page 299 Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 208 Advanced Applicat ion > LLDP > LLDP Configurat ion The following t able describes t he labels in t his screen. Table 142 Advanced Applicat ion > LLDP > LLDP Configurat ion LABEL DESCRIPTION Act ive...
Page 300: Lldp Configuration Basic Tlv Setting
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 142 Advanced Applicat ion > LLDP > LLDP Configurat ion LABEL DESCRIPTION Use t his row t o m ake t he set t ing t he sam e for all port s. Use t his row first and t hen m ake adj ust m ent s t o each port if necessary.
Page 301: Lldp Configuration Org-Specific Tlv Setting
Chapter 33 Link Layer Discovery Protocol (LLDP) The following t able describes t he labels in t his screen. Table 143 Advanced Applicat ion > LLDP > LLDP Configurat ion > Basic TLV Set t ing LABEL DESCRIPTION Port This displays t he Swit ch’s port num ber. Use t his row t o m ake t he set t ing t he sam e for all port s.
Page 302 Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 210 Advanced Applicat ion > LLDP > LLDP Configurat ion> Org- specific TLV Set t ing The following t able describes t he labels in t his screen. Table 144 Advanced Applicat ion > LLDP > LLDP Configurat ion > Org- specific TLV Set t ing LABEL DESCRIPTION Port...
Page 303: Lldp-Med Configuration
Chapter 33 Link Layer Discovery Protocol (LLDP) Table 144 Advanced Applicat ion > LLDP > LLDP Configurat ion > Org- specific TLV Set t ing LABEL DESCRIPTION Power Via MDI N ot e : For PoE m odels only. The Power Via MDI TLV allows net work m anagem ent t o advert ise and discover t he MDI power support capabilit ies of t he sending port on t he rem ot e device.
Page 304: Lldp-Med Network Policy
Chapter 33 Link Layer Discovery Protocol (LLDP) The following t able describes t he labels in t his screen. Table 145 Advanced Applicat ion > LLDP > LLDP- MED Configurat ion LABEL DESCRIPTION Port This displays t he Swit ch’s port num ber. Select * t o configure all port s sim ult aneously. Use t his row t o m ake t he set t ing t he sam e for all port s.
Page 305: Lldp-Med Location
Chapter 33 Link Layer Discovery Protocol (LLDP) The following t able describes t he labels in t his screen. Table 146 Advanced Applicat ion > LLDP > LLDP- MED Net work Policy LABEL DESCRIPTION Port Ent er t he port num ber t o set up t he LLDP- MED net work policy. Applicat ion Type Select t he t ype of applicat ion used in t he net work policy.
Page 306 Chapter 33 Link Layer Discovery Protocol (LLDP) Figure 213 Advanced Applicat ion > LLDP > LLDP- MED Locat ion The following t able describes t he labels in t his screen. Table 147 Advanced Applicat ion > LLDP > LLDP- MED Locat ion LABEL DESCRIPTION Port...
Page 307 Chapter 33 Link Layer Discovery Protocol (LLDP) Table 147 Advanced Applicat ion > LLDP > LLDP- MED Locat ion LABEL DESCRIPTION Alt it ude Ent er t he alt it ude inform at ion. The value should be from - 2097151 t o 2097151 in m et ers or in floors.
Page 308 Chapter 33 Link Layer Discovery Protocol (LLDP) Table 147 Advanced Applicat ion > LLDP > LLDP- MED Locat ion LABEL DESCRIPTION Select an ent ry’s check box t o select a specific ent ry. Ot herwise, select t he check box in t he t able heading row t o select all ent ries.
Page 309: Anti-Arpscan
HAPTER Anti-Arpscan 34.1 Anti-Arpscan Overview Address Resolut ion Prot ocol ( ARP) , RFC 826, is a prot ocol used t o convert a net work- layer I P address t o a link- layer MAC address. ARP scan is used t o scan t he net work of a cert ain int erface for alive host s.
Page 310: Anti-Arpscan Status
Chapter 34 Anti-Arpscan • Go t o Ba sic Se t t ing > Por t Se t up. Clear Act ive and click Apply. Then select Act ive and click Apply again. • Go t o Applica t ion > Er r dia ble > Er r disa ble Re cove r y and set t he int erval for Ant i- a r psca n .
Page 311: Anti-Arpscan Trust Host
Chapter 34 Anti-Arpscan Figure 215 Advanced Applicat ion > Ant i- Arpscan > Host St at us The following t able describes t he labels in t his screen. Table 149 Advanced Applicat ion > Ant i-Arpscan > Host St at us LABEL DESCRIPTION Clear Filt ered...
Page 312: Anti-Arpscan Configure
Chapter 34 Anti-Arpscan The following t able describes t he labels in t his screen. Table 150 Advanced Applicat ion > Ant i-Arpscan > Trust Host LABEL DESCRIPTION Nam e Type a descript ive nam e of up t o 32 print able ASCI I charact ers t o ident ify t his host . Host I P Type t he I P address of t he host .
Page 313 Chapter 34 Anti-Arpscan Figure 217 Advanced Applicat ion > Ant i- Arpscan > Configure The following t able describes t he labels in t his screen. Table 151 Advanced Applicat ion > Ant i-Arpscan > Configure LABEL DESCRIPTION Act ive Select t his t o enable Ant i- a r psca n on t he Swit ch.
Page 314 Chapter 34 Anti-Arpscan Table 151 Advanced Applicat ion > Ant i-Arpscan > Configure ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
Page 315: Bpdu Guard
HAPTER BPDU Guard 35.1 BPDU Guard Overview A BPDU ( Bridge Prot ocol Dat a Unit s) is a dat a fram e t hat cont ains inform at ion about STP . STP- aware swit ches exchange BPDUs periodically. The BPDU guard feat ure allows you t o prevent any new STP- aware swit ch from connect ing t o an exist ing net work and causing STP t opology changes in t he net work.
Page 316: Bpdu Guard Configuration
Chapter 35 BPDU Guard Figure 218 Advanced Applicat ion > BPDU Guard St aus The following t able describes t he labels in t his screen. Table 152 Advanced Applicat ion > BPDU Guard St aus LABEL DESCRIPTION BPDU guard This field displays whet her BPDU guard is act ivat ed on t he Swit ch.
Page 317 Chapter 35 BPDU Guard Figure 219 Advanced Applicat ion > BPDU Guard > BPDU Guard Configurat ion The following t able describes t he labels in t his screen. Table 153 Advanced Applicat ion > BPDU Guard > BPDU Guard Configurat ion LABEL DESCRIPTION Act ive...
Page 318: Oam Overview
HAPTER 36.1 OAM Overview Link layer Et hernet OAM ( Operat ions, Adm inist rat ion and Maint enance) as described in I EEE 802.3ah is a link m onit oring prot ocol. I t ut ilizes OAM Prot ocol Dat a Unit s or OAM PDUs t o t ransm it link st at us inform at ion bet ween direct ly connect ed Et hernet devices.
Page 319 Chapter 36 OAM Figure 220 Advanced Applicat ion > OAM St aus The following t able describes t he labels in t his screen. Table 154 Advanced Applicat ion > OAM St aus LABEL DESCRIPTION Local This sect ion displays inform at ion about t he port s on t he Swit ch. Port This field displays t he num ber of t he port on t he Swit ch.
Page 320: Oam Details
Chapter 36 OAM 36.2.1 OAM Details Use t his screen t o view OAM configurat ion det ails and operat ional st at us of a specific port . Click a num ber in t he Por t colum n in t he OAM St a t us screen t o display t he screen as shown next . Figure 221 Advanced Applicat ion >...
Page 321 Chapter 36 OAM The following t able describes t he labels in t his screen. Table 155 Advanced Applicat ion > OAM St aus > OAM Det ails LABEL DESCRIPTION Discovery This sect ion displays OAM configurat ion det ails and operat ional st at us of t he port on t he Swit ch and/ or t he rem ot e device.
Page 322 Chapter 36 OAM Table 155 Advanced Applicat ion > OAM St aus > OAM Det ails ( cont inued) LABEL DESCRIPTION Discovery This field indicat es t he st at e in t he OAM discovery process. OAM- enabled devices use t his st at e process t o det ect each ot her and t o exchange inform at ion about t heir OAM configurat ion and capabilit ies.
Page 323: Oam Configuration
Chapter 36 OAM 36.3 OAM Configuration Use t his screen t o t urn on Et hernet OAM on t he Swit ch and port ( s) and configure t he relat ed set t ings. I n t he OAM St a t u s screen click Con figu r a t ion t o display t he configurat ion screen as shown. Figure 222 Advanced Applicat ion >...
Page 324: Oam Remote Loopback
Chapter 36 OAM Table 156 Advanced Applicat ion > OAM > OAM Configurat ion ( cont inued) LABEL DESCRIPTION Mode Specify t he OAM m ode on t he port . Select Act ive t o allow t he port t o issue and respond t o Et hernet OAM com m ands. Select Pa ssive t o allow t he port t o respond t o Et hernet OAM com m ands.
Page 325 Chapter 36 OAM Table 157 Advanced Applicat ion > OAM > OAM Rem ot e Loopback ( cont inued) LABEL DESCRIPTION Test Click Te st t o begin t he t est . Rem ot e Loopback Mode Port Ent er t he num ber of t he port from which t he Swit ch sends loopback cont rol PDUs t o init iat e or t erm inat e a rem ot e- loopack t est .
Page 326: Zuld
HAPTER ZULD 37.1 ZULD Overview A unidirect ional link is a connect ion where t he link is up on bot h ends, but only one end can receive packet s. This m ay happen if OAM was init ially enabled but t hen disabled, t here are m isconfigured t ransm it t ing or receiving lines or t he hardware is m alfunct ioning.
Page 327: Zuld Status
Chapter 37 ZULD • Port s advert ise t heir unidirect ional link det ect i on capabilit y using OAMPDUs, so all connect ed devices m ust support OAM as well as ZULD. You need t o enable OAM on t he Swit ch by going t o Adva nce d Applica t ion >...
Page 328: Zuld Configuration
Chapter 37 ZULD Table 158 Advanced Applicat ion > ZULD St at us ( cont inued) LABEL DESCRIPTION Mode This field indicat es what ZULD will do when a unidirect ional link is det ect ed. I n N or m a l m ode, ZULD only sends a syslog and t rap when it det ect s a unidirect ional link.
Page 329 Chapter 37 ZULD Figure 226 Advanced Applicat ion > ZULD > Configurat ion The following t able describes t he labels in t his screen. Table 159 Advanced Applicat ion > ZULD > Configurat ion LABEL DESCRIPTION Act ive Select t his t o enable ZULD on t he Swit ch. Port Use port * t o configure all port s t o have t he sam e set t ings.
Page 330: Static Route
HAPTER Static Route 38.1 Static Route Overview This chapt er shows you how t o configure st at ic rout es. The Swit ch uses I P for com m unicat ion wit h m anagem ent com put ers, for exam ple using HTTP , Telnet , SSH, or SNMP .
Page 331: Static Routing
Chapter 38 Static Route 38.2 Static Routing Click I P Applica t ion > St a t ic Rout in g in t he navigat ion panel t o display t he screen as shown. Figure 228 I P Applicat ion > St at ic Rout ing To enable I Pv4 st at ic rout e, configure t he st at ic rout e set t ings in t he I P Applica t ion >...
Page 332 Chapter 38 Static Route Table 160 I P Applicat ion > St at ic Rout ing > I Pv4 St at ic Rout e ( cont inued) LABEL DESCRIPTION Gat eway I P Ent er t he I P address of t he gat eway. The gat eway is an im m ediat e neighbor of your Swit ch Address t hat will forward t he packet t o t he dest inat ion.
Page 333: Differentiated Services
HAPTER Differentiated Services 39.1 Differentiated Services Overview This chapt er shows you how t o configure Different iat ed Services ( DiffServ) on t he Swit ch. Qualit y of Service ( QoS) is used t o priorit ize source- t o- dest inat ion t raffic flows. All packet s in t he flow are given t he sam e priorit y.
Page 334: Diffserv Network Example
Chapter 39 Differentiated Services The DSCP value det erm ines t he PHB ( Per- Hop Behavior) , t hat each packet get s as it is forwarded across t he DiffServ net work. Based on t he m arking rule different kinds of t raffic can be m arked for different priorit ies of forwarding.
Page 335: Dscp-To-Ieee 802.1P Priority Settings
Chapter 39 Differentiated Services Figure 232 I P Applicat ion > DiffServ The following t able describes t he labels in t his screen. Table 161 I P Applicat ion > DiffServ LABEL DESCRIPTION Act ive Select t his opt ion t o enable DiffServ on t he Swit ch. Port This field displays t he index num ber of a port on t he swit ch.
Page 336: Configuring Dscp Settings
Chapter 39 Differentiated Services The following t able shows t he default DSCP- t o- I EEE802.1p m apping. Table 162 Default DSCP- I EEE 802.1p Mapping DSCP VALUE 0 – 7 8 – 15 16 – 23 24 – 31 32 –...
Page 337: Dhcp Overview
HAPTER DHCP 40.1 DHCP Overview This chapt er shows you how t o configure t he DHCP feat ure. DHCP ( Dynam ic Host Configurat ion Prot ocol RFC 2131 and RFC 2132) allows individual com put ers t o obt ain TCP/ I P configurat ion at st art- up from a server. I f you configure t he Swit ch as a DHCP relay agent , t hen t he Swit ch forwards DHCP request s t o DHCP server on your net work.
Page 338: Dhcp Configuration
Chapter 40 DHCP 40.2 DHCP Configuration Click I P Applica t ion > D H CP in t he navigat ion panel t o display t he screen as shown. Click t he link next t o D H CPv4 t o open screens where you can enable and configure DHCPv4 relay set t ings and creat e opt ion 82 profiles.
Page 339: Dhcpv4 Relay Agent Information
Chapter 40 DHCP The Swit ch can be configured as a global DHCP relay. This m eans t hat t he Swit ch forwards all DHCP request s from all dom ains t o t he sam e DHCP server. You can also configure t he Swit ch t o relay DHCP inform at ion based on t he VLAN m em bership of t he DHCP client s.
Page 340: Dhcpv4 Option 82 Profile
Chapter 40 DHCP Table 168 DHCP Relay Agent Rem ot e I D Sub- opt ion Form at SubOpt Code Lengt h Value MAC Address or St ring ( 1 byt e) ( 1 byt e) The 1 in t he first field ident ifies t his as an Agent Circuit I D sub- opt ion and 2 ident ifies t his as an Agent Rem ot e I D sub- opt ion.
Page 341: Configuring Dhcpv4 Global Relay
Chapter 40 DHCP Table 169 I P Applicat ion > DHCP > DHCPv4 > Opt ion 82 Profile ( cont inued) LABEL DESCRIPTION st ring Ent er a st ring of up t o 64 ASCI I charact ers t hat t he Swit ch adds int o t he client DHCP request s.
Page 342: Dhcpv4 Global Relay Port Configure
Chapter 40 DHCP The following t able describes t he labels in t his screen. Table 170 I P Applicat ion > DHCP > DHCPv4 > Global LABEL DESCRIPTION Act ive Select t his check box t o enable DHCPv4 relay. Rem ot e DHCP Ent er t he I P address of a DHCPv4 server in dot t ed decim al not at ion.
Page 343: Global Dhcp Relay Configuration Example
Chapter 40 DHCP Table 171 I P Applicat ion > DHCP > DHCPv4 > Global > Port ( cont inued) LABEL DESCRIPTION Click t his t o creat e a new ent ry or t o updat e an exist ing one. This saves your changes t o t he Swit ch’s run- t im e m em ory.
Page 344: Configuring Dhcpv4 Vlan Settings
Chapter 40 DHCP Figure 240 DHCP Relay Configurat ion Exam ple EXAMPLE 40.4.6 Configuring DHCPv4 VLAN Settings Use t his screen t o configure your DHCP set t ings based on t he VLAN dom ain of t he DHCP client s. Click I P Applica t ion >...
Page 345: Dhcpv4 Vlan Port Configure
Chapter 40 DHCP Table 172 I P Applicat ion > DHCP > DHCPv4 > VLAN ( cont inued) LABEL DESCRIPTION Click t his t o creat e a new ent ry or t o updat e an exist ing one. This saves your changes t o t he Swit ch’s run- t im e m em ory.
Page 346: Example: Dhcp Relay For Two Vlans
Chapter 40 DHCP Table 173 I P Applicat ion > DHCP > DHCPv4 > VLAN > Port ( cont inued) LABEL DESCRIPTION Opt ion 82 Select a pre- defined DHCP opt ion 82 profile t hat t he Swit ch applies t o t he specified port ( s) Profile in t his VLAN.
Page 347: Dhcpv6 Relay
Chapter 40 DHCP Figure 244 DHCP Relay for Two VLANs Configurat ion Exam ple EXAMPLE 40.5 DHCPv6 Relay A DHCPv6 relay agent is on t he sam e net work as t he DHCPv6 client s and helps forward m essages bet ween t he DHCPv6 server and client s.
Page 348 Chapter 40 DHCP Figure 245 I P Applicat ion > DHCP > DHCPv6 The following t able describes t he labels in t his screen. Table 174 I P Applicat ion > DHCP > DHCPv6 LABEL DESCRIPTION VI D Ent er t he I D num ber of t he VLAN you want t o configure here. Helper Address Ent er t he rem ot e DHCPv6 server address for t he specified VLAN.
Page 349: Arp Setup
HAPTER ARP Setup 41.1 ARP Overview Address Resolut ion Prot ocol ( ARP) is a prot ocol for m apping an I nt ernet Prot ocol address ( I P address) t o a physical m achine address, also known as a Media Access Cont rol or MAC address, on t he local area net work.
Page 350 Chapter 41 ARP Setup ARP request t o t he Swit ch and t hen sends an I CMP request aft er get t ing t he ARP reply from t he Swit ch. The Swit ch finds no m at ched ent ry for host B in t he ARP t able and broadcast s t he ARP request t o all t he devices on t he LAN.
Page 351: Arp Learning
Chapter 41 ARP Setup Therefore in t he following exam ple, t he Swit ch can learn host A’s MAC address from t he ARP request sent by host A. The Swit ch t hen forwards host B’s I CMP reply t o host A right aft er get t ing host B’s MAC address and I CMP reply.
Page 352 Chapter 41 ARP Setup Figure 247 I P Applicat ion > ARP Set up > ARP Learning The following t able describes t he labels in t his screen. Table 175 I P Applicat ion > ARP Set up > ARP Learning LABEL DESCRIPTION Port...
Page 353: The Maintenance Screen
HAPTER Maintenance 42.1 Overview This chapt er explains how t o configure t he screens t hat let you m aint ain t he firm ware and configurat ion files. 42.1.1 What You Can Do • Use t he M a int e na nce screen ( Sect ion 42.2 on page 353) t o upload t he lat est firm ware.
Page 354: Erase Running-Configuration
Chapter 42 Maintenance The following t able describes t he labels in t his screen. Table 176 Managem ent > Maint enance LABEL DESCRIPTION Current This field displays which configurat ion ( Con figu r a t ion 1 or Con figu r a t ion 2 ) is current ly operat ing on t he Swit ch.
Page 355: Save Configuration
Chapter 42 Maintenance I n t he web configurat or, click t he Sa ve but t on in t he t op of t he screen t o m ake t he changes t ake effect . I f you want t o access t he Swit ch web configurat or again, you m ay need t o change t he I P address of your com put er t o be in t he sam e subnet as t hat of t he default Swit ch I P address ( 192.168.1.1) .
Page 356 Chapter 42 Maintenance when firm ware is uploaded using t he web configurat or and t o specify which im age is loaded when t he Swit ch st art s up. Make sure you have downloaded ( and unzipped) t he correct m odel firm ware and version t o your com put er before uploading t o t he device.
Page 357: Restore A Configuration File
Chapter 42 Maintenance Table 177 Managem ent > Maint enance > Firm ware Upgrade LABEL DESCRIPTION Apply Click Apply t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
Page 358: Tech-Support
Chapter 42 Maintenance Figure 253 Managem ent > Maint enance > Backup Configurat ion Follow t he st eps below t o back up t he current Swit ch configurat ion t o your com put er in t his screen. Click Ba ck up.
Page 359: Ftp Command Line
Chapter 42 Maintenance You m ay need WordPad or sim ilar soft ware t o see t he log report correct ly. The t able below describes t he fields in t he above screen. Table 178 Managem ent > Maint enance > Tech- Support LABEL DESCRIPTION Type a num ber ranging from 50 t o 100 in t he CPU t hreshold box, and t ype anot her...
Page 360: Filename Conventions
Chapter 42 Maintenance 42.7.2 Filename Conventions The configurat ion file ( also known as t he rom file or ROM) cont ains t he fact ory default set t ings in t he screens such as password, Swit ch set up, I P Set up, and so on. Once you have cust om ized t he Swit ch’s set t ings, t hey can be saved back t o your com put er under a filenam e of your choosing.
Page 361: Ftp Restrictions
Chapter 42 Maintenance Use put t o t ransfer files from t he com put er t o t he Swit ch, for exam ple, put firmware.bin ras t ransfers t he firm ware on your com put er ( firm ware.bin) t o t he Swit ch and renam es it t o “ ras”. Sim ilarly, put config.cfg config t ransfers t he configurat ion file on your com put er ( config.cfg) t o t he Swit ch and renam es it t o “...
Page 362: Access Control
HAPTER Access Control 43.1 Access Control Overview This chapt er describes how t o cont rol access t o t he Swit ch. A console port and FTP are allowed one session each, Telnet and SSH share nine sessions, up t o five Web sessions ( five different user nam es and passwords) and/ or lim it less SNMP access cont rol sessions are allowed.
Page 363: Configuring Snmp
Chapter 43 Access Control Figure 255 Managem ent > Access Cont rol 43.3 Configuring SNMP Use t his screen t o configure your SNMP set t ings. Click M a na ge m e nt > Acce ss Cont r ol > SN M P t o view t he screen as shown. Figure 256 Managem ent >...
Page 364: Configuring Snmp Trap Group
Chapter 43 Access Control Table 181 Managem ent > Access Cont rol > SNMP ( cont inued) LABEL DESCRIPTION Set Com m unit y Ent er t he Se t Com m u n it y, which is t he password for incom ing Set- request s from t he m anagem ent st at ion.
Page 365: Enabling/Disabling Sending Of Snmp Traps On A Port
Chapter 43 Access Control The following t able describes t he labels in t his screen. Table 182 Managem ent > Access Cont rol > SNMP > Trap Group LABEL DESCRIPTION Trap Dest inat ion Select one of your configured t rap dest inat ion I P addresses. These are t he I P addresses of t he SNMP m anagers.
Page 366: Configuring Snmp User
Chapter 43 Access Control The following t able describes t he labels in t his screen. Table 183 Managem ent > Access Cont rol > SNMP > Trap Group > Port LABEL DESCRIPTION Opt ion Select t he t rap t ype you want t o configure here. Port This field displays a port num ber.
Page 367 Chapter 43 Access Control Table 184 Managem ent > Access Cont rol > SNMP > User ( cont inued) LABEL DESCRIPTION Securit y Level Select whet her you want t o im plem ent aut hent icat ion and/ or encrypt ion for SNMP com m unicat ion from t his user.
Page 368: Setting Up Login Accounts
Chapter 43 Access Control Table 184 Managem ent > Access Cont rol > SNMP > User ( cont inued) LABEL DESCRIPTION Delet e Click D e le t e t o rem ove t he select ed ent ry from t he sum m ary t able. Cancel Click Ca n ce l t o begin configuring t his screen afresh.
Page 369: Service Access Control
Chapter 43 Access Control Table 185 Managem ent > Access Cont rol > Logins ( cont inued) LABEL DESCRIPTION Ret ype t o Ret ype your new syst em password for confirm at ion confirm Edit Logins You m ay configure passwords for up t o four users. These users have read- only access. You can give users higher privileges via t he CLI .
Page 370: Remote Management
Chapter 43 Access Control Figure 261 Managem ent > Access Cont rol > Service Access Cont rol The following t able describes t he fields in t his screen. Table 186 Managem ent > Access Cont rol > Service Access Cont rol LABEL DESCRIPTION Services...
Page 371: Technical Reference
Chapter 43 Access Control Figure 262 Managem ent > Access Cont rol > Rem ot e Managem ent The following t able describes t he labels in t his screen. Table 187 Managem ent > Access Cont rol > Rem ot e Managem ent LABEL DESCRIPTION Ent ry...
Page 372: About Snmp
Chapter 43 Access Control 43.7.1 About SNMP Sim ple Net work Managem ent Prot ocol ( SNMP) is an applicat ion layer prot ocol used t o m anage and m onit or TCP/ I P- based devices. SNMP is used t o exchange m anagem ent inform at ion bet ween t he net work m anagem ent syst em ( NMS) and a net work elem ent ( NE) .
Page 373: Supported Mibs
Chapter 43 Access Control Securit y can be furt her enhanced by encrypt ing t he SNMP m essages sent from t he m anagers. Encrypt ion prot ect s t he cont ent s of t he SNMP m essages. When t he cont ent s of t he SNMP m essages are encrypt ed, only t he int ended recipient s can read t hem .
Page 374 Chapter 43 Access Control Table 189 SNMP Syst em Traps ( cont inued) OPTION OBJECT LABEL OBJECT ID DESCRIPTION volt age zyHwMonit orPowerSupplyV 1.3.6.1.4.1.890.1.15.3.26.2.3 This t rap is sent when t he volt age goes olt ageOut OfRange above or below t he norm al operat ing range.
Page 375 Chapter 43 Access Control Table 189 SNMP Syst em Traps ( cont inued) OPTION OBJECT LABEL OBJECT ID DESCRIPTION loginrecord zyAccessCont rolLoginRecor 1.3.6.1.4.1.890.1.15.3.9.4.1 This t rap is sent when users log in. zyAccessCont rolLogout Rec 1.3.6.1.4.1.890.1.15.3.9.4.2 This t rap is sent when users log out . zyAccessCont rolLoginFail 1.3.6.1.4.1.890.1.15.3.9.4.3 This t rap is sent when users fail in login.
Page 376 Chapter 43 Access Control Table 190 SNMP I nt erface Traps ( cont inued) OPTION OBJECT LABEL OBJECT ID DESCRIPTION t ransceiver- ddm zyTransceiverDdm iTem perat ur 1.3.6.1.4.1.890.1.15.3.84.3.1 This t rap is sent when t he eOut OfRange t ransceiver t em perat ure is above or below t he norm al operat ing range.
Page 377 Chapter 43 Access Control Table 191 SNMP AAA Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION aut hent icat ion aut hent icat ionFailure 1.3.6.1.6.3.1.1.5.5 This t rap is sent when aut hent icat ion fails due t o incorrect user nam e and/ or password.
Page 378: Ssh Overview
Chapter 43 Access Control Table 193 SNMP Swit ch Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION st p STPNewRoot 1.3.6.1.2.1.17.0.1 This t rap is sent when t he STP root swit ch changes. zyMrst pNewRoot 1.3.6.1.4.1.890.1.15 This t rap is sent when t he MRSTP root swit ch .3.52.3.1 changes.
Page 379: Ssh Implementation On The Switch
Chapter 43 Access Control Figure 265 How SSH Works Host I dent ificat ion The SSH client sends a connect ion request t o t he SSH server. The server ident ifies it self wit h a host key. The client encrypt s a random ly generat ed session key wit h t he host key and server key and sends t he result back t o t he server.
Page 380: Introduction To Https
Chapter 43 Access Control 43.7.3 Introduction to HTTPS HTTPS ( HyperText Transfer Prot ocol over Secure Socket Layer, or HTTP over SSL) is a web prot ocol t hat encrypt s and decrypt s web pages. Secure Socket Layer ( SSL) is an applicat ion- level prot ocol t hat enables secure t ransact ions of dat a by ensuring confident ialit y ( an unaut horized part y cannot read t he t ransferred dat a) , aut hent icat ion ( one part y can ident ify t he ot her part y) and dat a int egrit y ( you know if dat a has been changed) .
Page 381 Chapter 43 Access Control When you at t em pt t o access t he Swit ch HTTPS server, a Windows dialog box pops up asking if you t rust t he server cert ificat e. You see t he following Se cur it y Ale r t screen in I nt ernet Explorer. Select Ye s t o proceed t o t he web configurat or login screen;...
Page 382: Mozilla Firefox Warning Messages
Chapter 43 Access Control Figure 269 Cert ificat e Error ( I nt ernet Explorer 7 or 8) EXAMPLE Click I nst a ll Ce r t ifica t e ... and follow t he on- screen inst ruct ions t o inst all t he cert ificat e in your browser.
Page 383 Chapter 43 Access Control Figure 271 Securit y Alert ( Mozilla Firefox) Confirm t he HTTPS server URL m at ches. Click Confir m Se cur it y Ex ce pt ion t o proceed t o t he web configurat or login screen.
Page 384: The Main Screen
Chapter 43 Access Control 43.7.3.2 The Main Screen Aft er you accept t he cert ificat e and ent er t he login usernam e and password, t he Swit ch m ain screen appears. The lock displayed in t he bot t om right of t he browser st at us bar or next t o t he websit e address denot es a secure connect ion.
Page 385: Diagnostic
HAPTER Diagnostic 44.1 Overview This chapt er explains t he D ia gnost ic screen. You can use t his screen t o help you ident ify problem s. 44.2 Diagnostic Click M a na ge m e nt > D ia gnost ic in t he navigat ion panel t o open t his screen. Use t his screen t o ping I P addresses, run a t racerout e, perform port t est s or show t he Swit ch’s locat ion bet ween devices.
Page 386 Chapter 44 Diagnostic The following t able describes t he labels in t his screen. Table 194 Managem ent > Diagnost ic LABEL DESCRIPTION Ping Test I Pv4 Select t his opt ion if you want t o ping an I Pv4 address, and select vla n t o specify t he I D num ber of t he VLAN t o which t he Swit ch is t o send ping request s.
Page 387 Chapter 44 Diagnostic Table 194 Managem ent > Diagnost ic ( cont inued) LABEL DESCRIPTION Cable lengt h This displays t he t ot al lengt h of t he Et hernet cable t hat is connect ed t o t he port when t he Pa ir st a t us is Ok and t he Swit ch chipset support s t his feat ure.
Page 388: System Log
HAPTER System Log 45.1 Overview A log m essage st ores t he inform at ion for viewing. 45.2 System Log Click M a na ge m e nt > Syst e m Log in t he navigat ion panel t o open t his screen. Use t his screen t o check current syst em logs.
Page 389: Syslog Overview
HAPTER Syslog Setup 46.1 Syslog Overview This chapt er explains t he syslog screens. The syslog prot ocol allows devices t o send event not ificat ion m essages across an I P net work t o syslog servers t hat collect t he event m essages. A syslog- enabled device can generat e a syslog m essage and send it t o a syslog server.
Page 390 Chapter 46 Syslog Setup Figure 276 Managem ent > Syslog Set up The following t able describes t he labels in t his screen. Table 196 Managem ent > Syslog Set up LABEL DESCRIPTION Syslog Select Act ive t o t urn on syslog ( syst em logging) and t hen configure t he syslog set t ing Logging Type This colum n displays t he nam es of t he cat egories of logs t hat t he device can generat e.
Page 391 Chapter 46 Syslog Setup Table 196 Managem ent > Syslog Set up LABEL DESCRIPTION Click Add t o save your changes t o t he Swit ch’s run- t im e m em ory. The Swit ch loses t hese changes if it is t urned off or loses power, so use t he Sa ve link on t he t op navigat ion panel t o save your changes t o t he non- volat ile m em ory when you are done configuring.
Page 392: Cluster Management
HAPTER Cluster Management 47.1 Cluster Management Overview This chapt er int roduces clust er m anagem ent . Clust er Managem ent allows you t o m anage swit ches t hrough one Swit ch, called t he clust er m anager.
Page 393: Cluster Management Status
Chapter 47 Cluster Management 47.1.1 What You Can Do • Use t he Clu st e r M a n a ge m e n t screen ( Sect ion 47.2 on page 393) t o view t he role of t he Swit ch wit hin t he clust er and t o access a clust er m em ber swit ch’s web configurat or.
Page 394: Clustering Management Configuration
Chapter 47 Cluster Management Table 198 Managem ent > Clust er Managem ent : St at us ( cont inued) LABEL DESCRIPTION Model This field displays t he m odel nam e. St at us This field displays: On lin e ( t he clust er m em ber swit ch is accessible) Er r or ( for exam ple t he clust er m em ber swit ch password was changed or t he swit ch was set as t he m anager and so left t he m em ber list , et c.) Offlin e ( t he swit ch is disconnect ed - Offlin e shows approxim at ely 1.5 m inut es aft er t he link...
Page 395 Chapter 47 Cluster Management The following t able describes t he labels in t his screen. Table 199 Managem ent > Clust er Managem ent > Configurat ion LABEL DESCRIPTION Clust ering Manager Act ive Select Act ive t o have t his Swit ch becom e t he clust er m anager swit ch. A clust er can only have one m anager.
Page 396: Cluster Member Switch Management
Chapter 47 Cluster Management 47.4 Technical Reference This sect ion provides t echnical background inform at ion on t he t opics discussed in t his chapt er. 47.4.1 Cluster Member Switch Management Go t o t he Clust e r ing M a n a ge m e n t St a t u s screen of t he clust er m anager swit ch and t hen select an I n de x hyperlink from t he list of m em bers t o go t o t hat clust er m em ber swit ch's web configurat or hom e page.
Page 397 Chapter 47 Cluster Management Figure 281 Exam ple: Uploading Firm ware t o a Clust er Mem ber Swit ch C:\>ftp 192.168.1.1 Connected to 192.168.1.1. 220 Switch FTP version 1.0 ready at Thu Jan 1 00:58:46 1970 User (192.168.0.1:(none)): admin 331 Enter PASS command Password: 230 Logged in...
Page 398: Mac Table
HAPTER MAC Table 48.1 MAC Table Overview This chapt er int roduces t he M AC Ta ble screen. The M AC Ta ble screen ( a MAC t able is also known as a filt ering dat abase) shows how fram es are forwarded or filt ered across t he Swit ch’s port s.
Page 399: Viewing The Mac Table
Chapter 48 MAC Table Figure 282 MAC Table Flowchart 48.2 Viewing the MAC Table Use t his screen t o check whet her t he MAC address is dynam ic or st at ic. Click M a na ge m e nt > M AC Ta ble in t he navigat ion panel t o display t he following screen. Figure 283 Managem ent >...
Page 400 Chapter 48 MAC Table The following t able describes t he labels in t his screen. Table 201 Managem ent > MAC Table LABEL DESCRIPTION Condit ion Select one of t he but t ons and click Se a r ch t o only display t he dat a which m at ches t he crit eria you specified.
Page 401: Arp Table
HAPTER ARP Table 49.1 Overview This chapt er int roduces ARP Table. Address Resolut ion Prot ocol ( ARP) is a prot ocol for m apping an I nt ernet Prot ocol address ( I P address) t o a physical m achine address, also known as a Media Access Cont rol or MAC address, on t he local area net work.
Page 402 Chapter 49 ARP Table Figure 284 Managem ent > ARP Table The following t able describes t he labels in t his screen. Table 202 Managem ent > ARP Table LABEL DESCRIPTION Condit ion Specify how you want t he Swit ch t o rem ove ARP ent ries w hen you click Flu sh . Select All t o rem ove all of t he dynam ic ent ries from t he ARP t able.
Page 403: Path Mtu Table
HAPTER Path MTU Table 50.1 Path MTU Overview This chapt er int roduces t he I Pv6 Pat h MTU t able. The largest size ( in byt es) of a packet t hat can be t ransferred over a dat a link is called t he m axim um t ransm ission unit ( MTU) .
Page 404: Configure Clone
HAPTER Configure Clone 51.1 Overview This chapt er shows you how you can copy t he set t ings of one port ont o ot her port s. 51.2 Configure Clone Cloning allows you t o copy t he basic and advanced set t ings from a source port t o a dest inat ion port or port s.
Page 405 Chapter 51 Configure Clone Figure 286 Managem ent > Configure Clone GS2210 Series User’s Guide...
Page 406 Chapter 51 Configure Clone The following t able describes t he labels in t his screen. Table 204 Managem ent > Configure Clone LABEL DESCRIPTION Source/ Ent er t he source port under t he Sou r ce label. This port ’s at t ribut es are copied. Dest inat ion Ent er t he dest inat ion port or port s under t he D e st ina t ion label.
Page 407: Ipv6 Neighbor Table
HAPTER IPv6 Neighbor Table 52.1 IPv6 Neighbor Table Overview This chapt er int roduces t he I Pv6 neighbor t able. An I Pv6 host is required t o have a neighbor t able. I f t here is an address t o be resolved or verified, t he Swit ch sends out a neighbor solicit at ion m essage.
Page 408 Chapter 52 IPv6 Neighbor Table Table 205 Managem ent > I Pv6 Neighbor Table ( cont inued) LABEL DESCRIPTION St at us This field displays whet her t he neighbor I Pv6 int erface is reachable. I n I Pv6, “ reachable” m eans an I Pv6 packet can be correct ly forwarded t o a neighbor node ( host or rout er) and t he neighbor can successfully receive and handle t he packet .
Page 409: Troubleshooting
HAPTER Troubleshooting This chapt er offers som e suggest ions t o solve problem s you m ight encount er. The pot ent ial problem s are divided int o t he following cat egories. • Power, Hardware Connect ions, and LEDs •...
Page 410: Switch Access And Login
Chapter 53 Troubleshooting Disconnect and re- connect t he power adapt or or cord t o t he Swit ch. I f t he problem cont inues, cont act t he vendor. 53.2 Switch Access and Login I forgot t he I P address for t he Swit ch. The default I P address is 1 9 2 .1 6 8 .1 .1 .
Page 411 Chapter 53 Troubleshooting I f t he problem cont inues, cont act t he vendor, or t ry one of t he advanced suggest ions. Adva n ce d Sugge st ions • Try t o access t he Swit ch using anot her service, su ch as Telnet . I f you can access t he Swit ch, check t he rem ot e m anagem ent set t ings t o find out why t he Swit ch does not respond t o HTTP .
Page 412: Switch Configuration
Chapter 53 Troubleshooting Click t he D ispla y but t on in t he Syst e m Log field in t he M a n a ge m e n t > D ia gnost ic screen t o check for unaut horized access t o your Swit ch.
Page 413: Customer Support
PP E N D I X Customer Support I n t he event of problem s t hat cannot be solved by using t his m anual, you should cont act your vendor. I f you cannot cont act your vendor, t hen cont act a ZyXEL office for t he region in which you bought t he device.
Page 414: Appendix A Customer Support
Appendix A Customer Support Korea • ZyXEL Korea Corp. • ht t p: / / www.zyxel.kr Malaysia • ZyXEL Malaysia Sdn Bhd. • ht t p: / / www.zyxel.com .m y Pakistan • ZyXEL Pakist an ( Pvt .) Lt d. •...
Page 415 Appendix A Customer Support Belgium • ZyXEL Com m unicat ions B.V. • ht t p: / / www.zyxel.com / be/ nl/ Bulgaria ZyXEL България • • ht t p: / / www.zyxel.com / bg/ bg/ Czech Republic • ZyXEL Com m unicat ions Czech s.r.o •...
Page 416 Appendix A Customer Support Lithuania • ZyXEL Lit huania • ht t p: / / www.zyxel.com / lt / lt / hom epage.sht m l Netherlands • ZyXEL Benelux • ht t p: / / www.zyxel.nl Norway • ZyXEL Com m unicat ions •...
Page 417: North America
Appendix A Customer Support Turkey • ZyXEL Turkey A.S. • ht t p: / / www.zyxel.com .t r • ZyXEL Com m unicat ions UK Lt d. • ht t p: / / www.zyxel.co.uk Ukraine • ZyXEL Ukraine • ht t p: / / www.ua.zyxel.com Latin America Argentina •...
Page 418 Appendix A Customer Support Oceania Australia • ZyXEL Com m unicat ions Corporat ion • ht t p: / / www.zyxel.com / au/ en/ Africa South Africa • Nology ( Pt y) Lt d. • ht t p: / / www.zyxel.co.za GS2210 Series User’s Guide...
Page 419: Common Services
PP E N D I X Common Services The following t able list s som e com m only- used services and t heir associat ed prot ocols and port num bers. For a com prehensive list of port num bers, I CMP t ype/ code num bers and services, visit t he I ANA ( I nt ernet Assigned Num ber Aut horit y) web sit e.
Page 420 Appendix B Common Services Table 206 Com m only Used Services ( cont inued) NAME PROTOCOL PORT(S) DESCRIPTION HTTP Hyper Text Transfer Prot ocol - a client / server prot ocol for t he world wide web. HTTPS HTTPS is a secured ht t p session oft en used in e- com m erce.
Page 421 Appendix B Common Services Table 206 Com m only Used Services ( cont inued) NAME PROTOCOL PORT(S) DESCRIPTION SMTP Sim ple Mail Transfer Prot ocol is t he m essage- exchange st andard for t he I nt ernet . SMTP enables you t o m ove m essages from one e- m ail server t o anot her.
Page 422: Ipv6 Addressing
PP E N D I X IPv6 Overview I Pv6 ( I nt ernet Prot ocol version 6) , is designed t o enhance I P address size and feat ures. The increase in I Pv6 address size t o 128 bit s ( from t he 32- bit I Pv4 address) allows up t o 3.4 x 10 addresses.
Page 423: Loopback Address
Appendix C IPv6 Global Address A global address uniquely ident ifies a device on t he I nt ernet . I t is sim ilar t o a “ public I P address” in I Pv4. A global unicast address st art s wit h a 2 or 3. Unspecified Address An unspecified address ( 0: 0: 0: 0: 0: 0: 0: 0 or : : ) is used as t he source address when a device does not have it s own address.
Page 424: Subnet Masking
Appendix C IPv6 Table 209 Reserved Mult icast Address ( cont inued) MULTICAST ADDRESS FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 Subnet Masking Bot h an I Pv6 address and I Pv6 subnet m ask com pose of 128- bit binary digit s, which are divided int o eight 16- bit blocks and writ t en in hexadecim al not at ion.
Page 425: Dhcp Relay Agent
Appendix C IPv6 com bines it s int erface I D and global and subnet inform at ion advert ised from t he rout er. This is a rout able global I P address. DHCPv6 The Dynam ic Host Configurat ion Prot ocol for I Pv6 ( DHCPv6, RFC 3315) is a server- client prot ocol t hat allows a DHCP server t o assign and pass I Pv6 net work addresses, prefixes and ot her configurat ion inform at ion t o DHCP client s.
Page 426 Appendix C IPv6 such as t he syst em nam e. The int erface- I D opt ion provides slot num ber, port inform at ion and t he VLAN I D t o t he DHCPv6 server. The rem ot e- I D opt ion ( if any) is st ripped from t he Relay- Reply m essages before t he relay agent sends t he packet s t o t he client s.
Page 427 Appendix C IPv6 det erm ine whet her t he dest inat ion address is on- link and can be reached direct ly wit hout passing t hrough a rout er. I f t he address is onlink, t he address is considered as t he next hop. Ot herwise, t he Swit ch det erm ines t he next- hop from t he default rout er list or rout ing t able.
Page 428 Appendix C IPv6 Double click D ibble r - a D H CPv6 clie nt . Click St a r t and t hen OK. Now your com put er can obt ain an I Pv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 support s I Pv6 by default .
Page 429 Appendix C IPv6 Click Close t o exit t he Loca l Ar e a Conn e ct ion St a t us screen. Select St a r t > All Pr ogr a m s > Acce ssor ie s > Com m a nd Pr om pt . Use t he ipconfig com m and t o check your dynam ic I Pv6 address.
Page 430: Legal Information
PP E N D I X Legal Information Copyright Copyright © 2015 by ZyXEL Com m unicat ions Cor porat ion. The cont ent s of t his publicat ion m ay not be reproduced in any part or as a whole, t ranscribed, st ored in a ret rieval syst em , t ranslat ed int o any language, or t ransm it t ed in any form or by any m eans, elect ronic, m echanical, m agnet ic, opt ical, chem ical, phot ocopying, m anual, or ot herwise, wit hout t he prior writ t en perm ission of ZyXEL Com m unicat ions Corporat ion.
Page 431: Appendix D Legal Information
Appendix D Legal Information CE EMC statement This is Class A Product . I n dom est ic environm ent t his product m ay cause radio int erference in w hich case t he user m ay be required t o t ake adequat e m easures.
Page 432 Appendix D Legal Information Environment Statment European Union - Disposal and Recycling Information WEEE Direct ive The sym bol below m eans t hat according t o local regulat ions your product and/ or it s bat t er y shall be disposed of separat ely from dom est ic wast e.
Page 433 Appendix D Legal Information Environmental Product Declaration GS2210 Series User’s Guide...
Page 434: Zyxel Limited Warranty
Appendix D Legal Information 灣以下訊息僅適用於產品銷售至灣地區這是甲類的資訊產品，在居住的環境中使用時，能會造成射頻干擾，在這種情況下，使用者會被要求採取某些適當的對策。 Viewing Certifications Go t o ht t p: / / www.zyxel.com t o view t his product ’s docum ent at ion and cert ificat ions. ZyXEL Limited Warranty ZyXEL warrant s t o t he original end user ( pur chaser) t hat t his product is free from any defect s in m at erial or workm anship for a specific period ( t he War rant y Period) from t he dat e of pur chase.
Page 435: Index
Index Index Numerics overview set up ARP ( Address Resolut ion Prot ocol) 802.1P priorit y ARP inspect ion 223, 255 ARP scan ARP- Reply ARP- Request aut hent icat ion set up account ing aut hent icat ion, aut horizat ion and account ing aut hent icat ion aut horizat ion Aut hent icat ion, Aut horizat ion and Account ing, see...
Page 436 Index copying port set t ings, See port cloning copyright CPU m anagem ent port cert ificat ions not ices CPU prot ect ion viewing current dat e current t im e CFI ( Canonical Form at I ndicat or) cust om er support changing t he password Cisco Discovery Prot ocol, see CDP...
Page 437 Index DSCP filt ering dat abase, MAC t able net work exam ple firm ware upgrade 356, 396 service level flow cont rol DiffServ Code Point s back pressure disclaim er I EEE802.3x forwarding delay DNS ( Dom ain Nam e Syst em ) fram es Dom ain Nam e Syst em t agged...
Page 438 Index cert ificat es Neighbor Discovery Prot ocol im plem ent at ion neighbor t able public keys, privat e keys ping prefix HTTPS exam ple prefix lengt h st at eless aut oconfigurat ion unspecified address I Pv6 int erface DHCPv6 client I EEE 802.1x enable...
Page 439 Index LEDs MAC address learning 69, 167 specify lim it link aggregat ion dynam ic MAC freeze I D inform at ion MAC t able set up display crit eria t raffic dist ribut ion algorit hm how it works t raffic dist ribut ion t ype sort ing crit eria t runk group...
Page 440 Index MRSTP discovery configurat ion discovery st at e st at us packet s st at ist ics PDU size MST I nst ance, See MSTI port configurat ion MST region port operat ional st at e MSTI 134, 141 rem ot e loopback MSTI ( Mult iple Spanning Tree I nst ance) rem ot e- loopback...
Page 441 Index port m irroring configurat ion exam ple isolat e t raffic port redundancy priorit y port securit y set up lim it MAC address learning un- t agged packet s MAC address learning PVI D overview set up port set up port st at us port det ails port VLAN I D, see PVI D...
Page 442 Index st at us st at ic MAC address running configurat ion st at ic MAC forwarding erase st at ic m ult icast address reset st at ic m ult icast forwarding st at ic rout e enable m et ric st at ic rout es st at ic VLAN 39, 355...
Page 443 Index set up severit y levels syst em inform at ion UDLD syst em reboot UniDirect ional Link Det ect ion, see UDLD unt rust ed port s DHCP snooping PPPoE I A user nam e default TACACS+ 211, 212 user profiles advant ages set up...
Page 444 Index VLAN Trunking Prot ocol, see VTP VLAN, prot ocol based, See prot ocol based VLAN Voice VLAN VT100 warrant y not e web configurat or get t ing help hom e login logout navigat ion panel weight , queuing Weight ed Round Robin Scheduling ( WRR) WRR ( Weight ed Round Robin Scheduling) ZON neighbor m anagem ent...

This manual is also suitable for:

Gs2210-8hp Gs2210-48hp Gs2210-24 Gs2210-24hp Gs2210-48

ZyXEL Communications GS2210-8 User Manual

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications GS2210-8

Summary of Contents for ZyXEL Communications GS2210-8