Page 1 GS-3012F/3012 Layer 2+ Gigabit Switch User’s Guide Version 3.80 7/2007 Edition 1 DEFAULT LOGIN IP Address http://192.168.1.1 User Name admin Password 1234 www.zyxel.com...
Page 3: About This User's Guide
Help us help you. Send all User Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan.
Page 4: Warnings And Notes
Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. Warnings tell you about things that could harm you or your device. Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
Page 5 Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The Switch icon is not an exact representation of your device. The Switch Server Telephone GS-3012/GS-3012F User’s Guide Computer Notebook computer DSLAM Firewall Router Document Conventions...
Page 6: Safety Warnings
Safety Warnings For your safety, be sure to read and follow all warning notices and instructions. • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. •...
Page 7 Safety Warnings GS-3012/GS-3012F User’s Guide...
Page 8 Safety Warnings GS-3012/GS-3012F User’s Guide...
Page 9: Table Of Contents
Introduction and Hardware ... 29 Getting to Know Your Switch ... 31 Basic Configuration ... 35 Hardware Installation and Connection ... 37 Hardware Overview ... 41 The Web Configurator ... 49 Initial Setup Example ... 59 System Status and Port Statistics ... 63 Basic Setting ...
Page 10 Contents Overview Access Control ... 233 Diagnostic ... 251 Syslog ... 253 Cluster Management ... 257 MAC Table ... 263 ARP Table ... 265 Configure Clone ... 267 Troubleshooting & Product Specifications ... 269 Troubleshooting ... 271 Product Specifications ... 275 Appendices and Index ...
Page 11: Table Of Contents
About This User's Guide ... 3 Document Conventions... 4 Safety Warnings... 6 Contents Overview ... 9 Table of Contents... 11 List of Figures ... 21 List of Tables... 25 Part I: Introduction and Hardware ... 29 Chapter 1 Getting to Know Your Switch... 31 1.1 Introduction ...
Page 12 Table of Contents Chapter 3 Hardware Overview... 41 3.1 Front Panel ... 41 3.1.1 Console Port ... 42 3.1.2 Gigabit Ports ... 42 3.1.3 Mini-GBIC Slots ... 43 3.1.4 Management Port ... 45 3.2 Rear Panel ... 45 3.2.1 Power Connector ... 45 3.3 LEDs ...
Page 13 7.4 Introduction to VLANs ... 73 7.5 Switch Setup Screen 7.6 IP Setup ... 75 7.6.1 Management IP Addresses ... 75 7.7 Port Setup ... 78 Part III: Advanced... 81 Chapter 8 VLAN ... 83 8.1 Introduction to IEEE 802.1Q Tagged VLANs 8.1.1 Forwarding Tagged and Untagged Frames ...
Page 14 Table of Contents 11.1.3 STP Port States ... 101 11.1.4 Multiple RSTP 11.1.5 Multiple STP ... 102 11.2 Spanning Tree Protocol Status Screen ... 104 11.3 Spanning Tree Configuration ... 105 11.4 Configure Rapid Spanning Tree Protocol 11.5 Rapid Spanning Tree Protocol Status 11.6 Configure Multiple Rapid Spanning Tree Protocol 11.7 Multiple Rapid Spanning Tree Protocol Status 11.8 Configure Multiple Spanning Tree Protocol...
Page 15 16.2.2 Activate MAC Authentication ... 134 Chapter 17 Port Security... 137 17.1 About Port Security ... 137 17.2 Port Security Setup ... 137 Chapter 18 Classifier... 141 18.1 About the Classifier and QoS ... 141 18.2 Configuring the Classifier ... 141 18.3 Viewing and Editing Classifier Configuration ...
Page 16 Table of Contents 21.6.2 MVR Modes ... 162 21.6.3 How MVR Works ... 162 21.7 General MVR Configuration ... 162 21.8 MVR Group Configuration ... 164 21.8.1 MVR Configuration Example ... 165 Chapter 22 Authentication & Accounting ... 169 22.1 Authentication, Authorization and Accounting ... 169 22.1.1 Local User Accounts ...
Page 17 Chapter 25 Two Rate Three Color Marker ... 207 25.1 DiffServ Overview ... 207 25.1.1 DSCP and Per-Hop Behavior ... 207 25.1.2 DiffServ Network Example ... 208 25.2 Two Rate Three Color Marker Traffic Policing ... 208 25.2.1 trTCM - Color-blind Mode ... 209 25.2.2 trTCM - Color-aware Mode ...
Page 18 Table of Contents 28.6 Restore a Configuration File 28.7 Backup a Configuration File 28.8 FTP Command Line ... 231 28.8.1 Filename Conventions ... 231 28.8.2 FTP Command Line Procedure ... 231 28.8.3 GUI-based FTP Clients ... 232 28.8.4 FTP Restrictions ... 232 Chapter 29 Access Control...
Page 19 32.1 Cluster Management Status Overview ... 257 32.2 Cluster Management Status ... 258 32.2.1 Cluster Member Switch Management ... 259 32.3 Clustering Management Configuration ... 260 Chapter 33 MAC Table... 263 33.1 MAC Table Overview ... 263 33.2 Viewing the MAC Table ... 264 Chapter 34 ARP Table ...
Page 20 Table of Contents GS-3012/GS-3012F User’s Guide...
Page 21: List Of Figures
List of Figures List of Figures Figure 1 Backbone Application ... 32 Figure 2 Bridging Application ... 32 Figure 3 High Performance Switched Workgroup Application ... 33 Figure 4 Shared Server Using VLAN Example ... 34 Figure 5 Attaching Rubber Feet ... 38 Figure 6 Attaching the Mounting Brackets ...
Page 22 List of Figures Figure 39 Advanced Application > VLAN > VLAN Port Setting ... 89 Figure 40 Subnet Based VLAN Application Example ... 90 Figure 41 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN ... 91 Figure 42 Port Based VLAN Setup (All Connected) ...
Page 23 List of Figures Figure 82 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN ... 159 Figure 83 Advanced Application > Multicast > Multicast Setting > IGMP Filtering Profile ... 160 Figure 84 MVR Network Example ... 161 Figure 85 MVR Multicast Television Example ...
Page 24 List of Figures Figure 125 Global DHCP Relay Network Example ... 222 Figure 126 DHCP Relay Configuration Example ... 222 Figure 127 IP Application > DHCP > VLAN ... 223 Figure 128 DHCP Relay for Two VLANs ... 224 Figure 129 DHCP Relay for Two VLANs Configuration Example ... 224 Figure 130 Management >...
Page 25: List Of Tables
List of Tables List of Tables Table 1 Front Panel Connections ... 42 Table 2 LED Descriptions ... 46 Table 3 Navigation Panel Sub-links Overview ... 51 Table 4 Web Configurator Screen Sub-links Details ... 52 Table 5 Navigation Panel Links ... 53 Table 6 Status ...
Page 26 List of Tables Table 39 Advanced Application > Port Authentication > 802.1x ... 134 Table 40 Advanced Application > Port Authentication > MAC Authentication ... 135 Table 41 Advanced Application > Port Security ... 138 Table 42 Advanced Application > Classifier ... 142 Table 43 Classifier: Summary Table ...
Page 27 List of Tables Table 82 IP Application > DHCP > Global ... 221 Table 83 IP Application > DHCP > VLAN ... 223 Table 84 Management > Maintenance ... 227 Table 85 Filename Conventions ... 231 Table 86 Access Control Overview ... 233 Table 87 SNMP Commands ...
Page 28 List of Tables GS-3012/GS-3012F User’s Guide...
Page 29: Introduction And Hardware
Introduction and Hardware Getting to Know Your Switch (31) Hardware Installation and Connection (37) Hardware Overview (41)
Page 31: Getting To Know Your Switch
H A P T E R Getting to Know Your Switch This chapter introduces the main features and applications of the Switch. 1.1 Introduction The GS-3012 and GS-3012F are layer 2 stand-alone Gigabit Ethernet switches. The GS-3012 has 12 100/1000 Mbps RJ-45 ports and four mini-GBIC slots for optical uplinking.
Page 32: Bridging Example
Chapter 1 Getting to Know Your Switch Figure 1 Backbone Application 1.1.2 Bridging Example In this example application the Switch connects different company departments (RD and Sales) to the corporate backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All users that need high bandwidth can connect to high-speed department servers via the Switch.
Page 33: Figure 3 High Performance Switched Workgroup Application
Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode) is not feasible for most people due to the expense of replacing all existing Ethernet cables and adapter cards, restructuring your network and complex maintenance. The Switch can provide the same bandwidth as ATM at much lower cost while still being able to use existing adapters and switches.
Page 34: Ways To Manage The Switch
Chapter 1 Getting to Know Your Switch Figure 4 Shared Server Using VLAN Example 1.2 Ways to Manage the Switch Use any of the following methods to manage the Switch. • Web Configurator. This is recommended for everyday management of the Switch using a (supported) web browser.
Page 35: Basic Configuration
Basic Configuration The Web Configurator (49) Initial Setup Example (59) System Status and Port Statistics (63) Basic Setting (69)
Page 37: Hardware Installation And Connection
H A P T E R Hardware Installation and This chapter shows you how to install and connect the Switch. 2.1 Installation Scenarios The Switch can be placed on a desktop or rack-mounted on a standard EIA rack. Use the rubber feet in a desktop installation and the brackets in a rack-mounted installation.
Page 38: Mounting The Switch On A Rack
Chapter 2 Hardware Installation and Connection Figure 5 Attaching Rubber Feet Do NOT block the ventilation holes. Leave space between devices when stacking. 2.3 Mounting the Switch on a Rack The Switch can be mounted on an EIA standard size, 19-inch rack or in a wiring closet with other equipment.
Page 39: Mounting The Switch On A Rack
Figure 6 Attaching the Mounting Brackets 2 Using a #2 Philips screwdriver, install the M3 flat head screws through the mounting bracket holes into the Switch. 3 Repeat steps Switch. 4 You may now mount the Switch on a rack. Proceed to the next section. 2.3.3 Mounting the Switch on a Rack 1 Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the...
Page 40 Chapter 2 Hardware Installation and Connection GS-3012/GS-3012F User’s Guide...
Page 41: Hardware Overview
H A P T E R This chapter describes the front panel and rear panel of the Switch and shows you how to make the hardware connections. 3.1 Front Panel The following figure shows the front panel of the GS-3012. The front panel contains the Switch LEDs, 8 RJ-45 gigabit ports, four dual personality interfaces each consisting of a mini- GBIC slot and an RJ-45 gigabit port as well as a console and management port for local management.
Page 42: Console Port
Chapter 3 Hardware Overview The following table describes the port labels on the front panel. Table 1 Front Panel Connections LABEL DESCRIPTION 8 100/1000 Connect these 1Gbps Electrical Ethernet ports to high-bandwidth backbone network Mbps RJ-45 Ethernet switches or use them to daisy-chain other switches. Ethernet Ports (GS-3012) 8 Mini-GBIC...
Page 43: Default Ethernet Negotiation Settings
Four of the 1000Base-T Ethernet ports are paired with a mini-GBIC slot to create a dual personality interface. The Switch uses up to one connection for each mini-GBIC and 1000Base-T Ethernet pair. The mini-GBIC slots have priority over the Gigabit ports. This means that if a mini-GBIC slot and the corresponding Gigabit port are connected at the same time, the Gigabit port will be disabled.
Page 44: Figure 10 Transceiver Installation Example
Chapter 3 Hardware Overview 3.1.3.1 Transceiver Installation Use the following steps to install a mini-GBIC transceiver (SFP module). 1 Insert the transceiver into the slot with the exposed section of PCB board facing down. 2 Press the transceiver firmly until it clicks into place. 3 The Switch automatically detects the installed transceiver.
Page 45: Management Port
Figure 14 Transceiver Removal Example 3.1.4 Management Port The MGMT (management) port is used for local management. Connect directly to this port using an Ethernet cable. You can configure the Switch via Telnet or the web configurator. The default IP address of the management port is 192.168.0.1 with a subnet mask of 255.255.255.0.
Page 46: Leds
Chapter 3 Hardware Overview To connect the power to the AC power model, insert the female end of power cord to the power receptacle on the rear panel. Connect the other end of the supplied power cord to a 100~240VAC/1.5A power outlet. Make sure that no objects obstruct the airflow of the fans (located on the side of the unit).
Page 47: Configuring The Switch
Table 2 LED Descriptions (continued) COLOR STATUS 1000 Green Blinking (GS- 3012F) 100 (GS- Amber Blinking 3012F) MGMT Green Blinking Amber Blinking 3.4 Configuring the Switch You may use the embedded web configurator or command line interface to configure the Switch.
Page 48 Chapter 3 Hardware Overview GS-3012/GS-3012F User’s Guide...
Page 49: The Web Configurator
H A P T E R The Web Configurator This section introduces the configuration and functions of the web configurator. 4.1 Introduction The web configurator is an HTML-based management interface that allows easy Switch setup and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions.
Page 50: The Status Screen
Chapter 4 The Web Configurator Figure 19 Web Configurator: Login 4 Click OK to view the first web configurator screen. 4.3 The Status Screen The Status screen is the first screen that displays when you access the web configurator. The following figure shows the navigating components of a web configurator screen. Figure 20 Web Configurator Home Screen (Status) A - Click the menu items to open submenu links, and then click on a submenu link to open the screen in the main window.
Page 51: Table 3 Navigation Panel Sub-Links Overview
E - Click this link to display web help pages. The help pages provide descriptions for all of the configuration screens. In the navigation panel, click a main link to reveal a list of submenu links. Table 3 Navigation Panel Sub-links Overview ADVANCED BASIC SETTING APPLICATION...
Page 52: Table 4 Web Configurator Screen Sub-Links Details
Chapter 4 The Web Configurator The following table lists the various web configurator screens within the sub-links. Table 4 Web Configurator Screen Sub-links Details ADVANCED BASIC SETTING APPLICATION System Info VLAN General Setup Switch Setup IP Setup Static MAC Forwarding Port Setup Filtering Spanning Tree Protocol...
Page 53: Table 5 Navigation Panel Links
The following table describes the links in the navigation panel. Table 5 Navigation Panel Links LINK DESCRIPTION Basic Settings System Info This link takes you to a screen that displays general system and hardware monitoring information. General Setup This link takes you to a screen where you can configure general identification information about the Switch.
Page 54: Change Your Password
Chapter 4 The Web Configurator Table 5 Navigation Panel Links (continued) LINK DESCRIPTION IP Source Guard This link takes you to screens where you can configure filtering of unauthorized DHCP and ARP packets in your network. Loop Guard This link takes you to a screen where you can configure protection against network loops that occur on the edge of your network.
Page 55: Saving Your Configuration
Figure 21 Change Administrator Login Password 4.4 Saving Your Configuration When you are done modifying the settings in a screen, click Apply to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off.
Page 56: Resetting The Switch
Chapter 4 The Web Configurator Be careful not to lock yourself and others out of the Switch. If you do lock yourself out, try using out-of-band management (via the management port) to configure the Switch. 4.6 Resetting the Switch If you lock yourself (and others) from the Switch or forget the administrator password, you will need to reload the factory-default configuration file or reset the Switch back to the factory defaults.
Page 57: Logging Out Of The Web Configurator
Figure 22 Resetting the Switch: Via the Console Port Bootbase Version: V3.1 | 03/08/2007 18:36:17 RAM:Size = 64 Mbytes DRAM POST: Testing: 65536K OK DRAM Test SUCCESS ! FLASH: Intel 64M ZyNOS Version: V3.80(LH.0)b4 | 05/31/2007 20:43:39 Press any key to enter debug mode within 3 seconds... Enter Debug Mode GS-3012>...
Page 58 Chapter 4 The Web Configurator GS-3012/GS-3012F User’s Guide...
Page 59: Initial Setup Example
H A P T E R This chapter shows how to set up the Switch for an example network. 5.1 Overview The following lists the configuration steps for the initial setup: • Create a VLAN • Set port VLAN ID •...
Page 60: Setting Port Vid
Chapter 5 Initial Setup Example 1 Click Advanced Application > VLAN in the navigation panel and click the Static VLAN link. 2 In the Static VLAN screen, select ACTIVE, enter a descriptive name in the Name field and enter 2 in the VLAN Group ID field for the VLAN2 network.
Page 61: Configuring Switch Management Ip Address
Figure 25 Initial Setup Network Example: Port VID 1 Click Advanced Applications > VLAN in the navigation panel. Then click the VLAN Port Setting link. 2 Enter 2 in the PVID field for port 1 and click Apply to save your changes back to the run- time memory.
Page 62 Chapter 5 Initial Setup Example 1 Connect your computer to any Ethernet port on the Switch. Make sure your computer is in the same subnet as the Switch. 2 Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurator.
Page 63: System Status And Port Statistics
H A P T E R System Status and Port This chapter describes the system status (web configurator home page) and port details screens. 6.1 Overview The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details.
Page 64: Status: Port Details
Chapter 6 System Status and Port Statistics Table 6 Status (continued) LABEL DESCRIPTION Link This field displays the speed (either 10M for 10Mbps, 100M for 100Mbps or 1000M for 1000Mbps) and the duplex (F for full duplex or H for half). It also shows the cable type (Copper or Fiber) for the combo ports.
Page 65: Figure 28 Status > Port Details
Figure 28 Status > Port Details The following table describes the labels in this screen. Table 7 Status: Port Details LABEL DESCRIPTION Port Info Port NO. This field displays the port number you are viewing. Name This field displays the name of the port. Link This field displays the speed (either 10M for 10Mbps, 100M for 100Mbps or 1000M for 1000Mbps) and the duplex (F for full duplex or H for half duplex).
Page 66 Chapter 6 System Status and Port Statistics Table 7 Status: Port Details (continued) LABEL DESCRIPTION Up Time This field shows the total amount of time the connection has been up. Tx Packet The following fields display detailed information about packets transmitted. TX Packet This field shows the number of good packets (unicast, multicast and broadcast) transmitted.
Page 67 Table 7 Status: Port Details (continued) LABEL DESCRIPTION 512-1023 This field shows the number of packets (including bad packets) received that were between 512 and 1023 octets in length. 1024- This field shows the number of packets (including bad packets) received that were 1518 between 1024 and 1518 octets in length.
Page 68 Chapter 6 System Status and Port Statistics GS-3012/GS-3012F User’s Guide...
Page 69: Basic Setting
H A P T E R This chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup and Port Setup screens. 7.1 Overview The System Info screen displays general Switch information (such as firmware version number) and hardware polling information (such as fan speeds). The General Setup screen allows you to configure general Switch identification information.
Page 70: Figure 29 Basic Setting > System Info
Chapter 7 Basic Setting Figure 29 Basic Setting > System Info The following table describes the labels in this screen. Table 8 Basic Setting > System Info LABEL DESCRIPTION System Name This field displays the descriptive name of the Switch for identification purposes. ZyNOS F/W This field displays the version number of the Switch 's current firmware including the Version...
Page 71: General Setup
Table 8 Basic Setting > System Info (continued) LABEL DESCRIPTION Current This field displays this fan's current speed in Revolutions Per Minute (RPM). This field displays this fan's maximum speed measured in Revolutions Per Minute (RPM). This field displays this fan's minimum speed measured in Revolutions Per Minute (RPM).
Page 72: Table 9 Basic Setting > General Setup
Chapter 7 Basic Setting The following table describes the labels in this screen. Table 9 Basic Setting > General Setup LABEL DESCRIPTION System Name Choose a descriptive name for identification purposes. This name consists of up to 64 printable characters; spaces are allowed. Location Enter the geographic location of your Switch.
Page 73: Introduction To Vlans
Table 9 Basic Setting > General Setup (continued) LABEL DESCRIPTION End Date Configure the day and time when Daylight Saving Time ends if you selected Daylight Saving Time. The time field uses the 24 hour format. Here are a couple of examples: Daylight Saving Time ends in the United States on the first Sunday of November.
Page 74: Figure 31 Basic Setting > Switch Setup
Chapter 7 Basic Setting Figure 31 Basic Setting > Switch Setup The following table describes the labels in this screen. Table 10 Basic Setting > Switch Setup LABEL DESCRIPTION VLAN Type Choose 802.1Q or Port Based. The VLAN Setup screen changes depending on whether you choose 802.1Q VLAN type or Port Based VLAN type in this screen.
Page 75: Ip Setup
Table 10 Basic Setting > Switch Setup (continued) LABEL DESCRIPTION Priority Queue Assignment IEEE 802.1p defines up to eight separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. Frames without an explicit priority tag are given the default priority of the ingress port.
Page 76: Figure 32 Basic Setting > Ip Setup
Chapter 7 Basic Setting Figure 32 Basic Setting > IP Setup The following table describes the labels in this screen. Table 11 Basic Setting > IP Setup LABEL Domain Name Server Default Management In-Band Management IP Address DHCP Client Static IP Address DESCRIPTION DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa.
Page 77 Table 11 Basic Setting > IP Setup (continued) LABEL DESCRIPTION IP Address Enter the IP address of your Switch in dotted decimal notation for example 192.168.1.1. IP Subnet Mask Enter the IP subnet mask of your Switch in dotted decimal notation for example 255.255.255.0.
Page 78: Port Setup
Chapter 7 Basic Setting Table 11 Basic Setting > IP Setup (continued) LABEL Delete Cancel 7.7 Port Setup Use this screen to configure Switch port settings.Click Basic Setting > Port Setup in the navigation panel to display the configuration screen. Figure 33 Basic Setting >...
Page 79 Table 12 Basic Setting > Port Setup (continued) LABEL DESCRIPTION Speed/Duplex Select the speed and the duplex mode of the Ethernet connection on this port. Choices are Auto, 10M/Half Duplex, 10M/Full Duplex, 100M/Half Duplex, 100M/ Full Duplex and 1000M/Full Duplex. Selecting Auto (auto-negotiation) allows one port to negotiate with a peer port automatically to obtain the connection speed and duplex mode that both ends support.
Page 80 Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide...
Page 81: Advanced
Advanced VLAN (83) Static MAC Forward Setup (95) Filtering (97) Spanning Tree Protocol (99) Bandwidth Control (117) Broadcast Storm Control (119) Mirroring (121) Link Aggregation (123) Port Authentication (131) Port Security (137) Classifier (141) Policy Rule (147) Queuing Method (153) Multicast (155) Authentication &...
Page 83: Vlan
H A P T E R The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you how to configure 802.1Q tagged and port-based VLANs. 8.1 Introduction to IEEE 802.1Q Tagged VLANs A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a frame across bridges - they are not confined to the switch on which they were created.
Page 84: Automatic Vlan Registration
Chapter 8 VLAN 8.2 Automatic VLAN Registration GARP and GVRP are the protocols used to automatically register VLAN membership across switches. 8.2.1 GARP GARP (Generic Attribute Registration Protocol) allows network switches to register and de- register attribute values with other GARP participants within a bridged LAN. GARP is a protocol that provides a generic mechanism for protocols that serve a more specific application, for example, GVRP.
Page 85: Port Vlan Trunking
8.3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices. Refer to the following figure.
Page 86: Static Vlan Status
Chapter 8 VLAN 8.5.1 Static VLAN Status Section 8.1 on page 83 Application > VLAN from the navigation panel to display the VLAN Status screen as shown next. Figure 36 Advanced Application > VLAN: VLAN Status The following table describes the labels in this screen. Table 14 Advanced Application >...
Page 87: Configure A Static Vlan
The following table describes the labels in this screen. Table 15 Advanced Application > VLAN > VLAN Detail LABEL DESCRIPTION VLAN Status Click this to go to the VLAN Status screen. This is the VLAN identification number that was configured in the Static VLAN screen.
Page 88: Configure Vlan Port Settings
Chapter 8 VLAN The following table describes the related labels in this screen. Table 16 Advanced Application > VLAN > Static VLAN LABEL DESCRIPTION ACTIVE Select this check box to activate the VLAN settings. Name Enter a descriptive name for the VLAN group for identification purposes. This name consists of up to 64 printable characters.
Page 89: Figure 39 Advanced Application > Vlan > Vlan Port Setting
Figure 39 Advanced Application > VLAN > VLAN Port Setting The following table describes the labels in this screen. Table 17 Advanced Application > VLAN > VLAN Port Setting LABEL DESCRIPTION GVRP GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network.
Page 90: Subnet Based Vlans
Chapter 8 VLAN Table 17 Advanced Application > VLAN > VLAN Port Setting (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 91: Configuring Subnet Based Vlan
8.7 Configuring Subnet Based VLAN Click Subnet Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. Subnet based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. Figure 41 Advanced Application >...
Page 92: Port-Based Vlan Setup
Chapter 8 VLAN Table 18 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN Setup LABEL DESCRIPTION Mask-Bits Enter the bit number of the subnet mask. To find the bit number, convert the subnet mask to binary format and add all the 1’s together. Take “255.255.255.0” for example. 255 converts to eight 1s in binary.
Page 93: Configure A Port-Based Vlan
In screens (such as IP Setup and Filtering) that require a VID, you must enter 1 as the VID. The port-based VLAN setup screen is shown next. The CPU management port forms a VLAN with all Ethernet ports. 8.8.1 Configure a Port-based VLAN Select Port Based as the VLAN Type in the Basic Setting >...
Page 94: Figure 43 Port Based Vlan Setup (Port Isolation)
Chapter 8 VLAN Figure 43 Port Based VLAN Setup (Port Isolation) The following table describes the labels in this screen. Table 19 Port Based VLAN Setup label Description Setting Wizard Choose All connected or Port isolation. All connected means all ports can communicate with each other, that is, there are no virtual LANs.
Page 95: Static Mac Forward Setup
H A P T E R Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 9.1 Overview This chapter discusses how to configure forwarding rules based on MAC addresses of devices on your network. 9.2 Configuring Static MAC Forwarding A static MAC address is an address that has been manually entered in the MAC address table.
Page 96: Table 20 Advanced Application > Static Mac Forwarding
Chapter 9 Static MAC Forward Setup The following table describes the labels in this screen. Table 20 Advanced Application > Static MAC Forwarding LABEL DESCRIPTION Active Select this check box to activate your rule. You may temporarily deactivate a rule without deleting it by clearing this check box.
Page 97: Filtering
H A P T E R This chapter discusses MAC address port filtering. 10.1 Configure a Filtering Rule Filtering means sifting traffic going through the Switch based on the source and/or destination MAC addresses and VLAN group (ID). Click Advanced Application > Filtering in the navigation panel to display the screen as shown next.
Page 98 Chapter 10 Filtering Table 21 Advanced Application > FIltering (continued) LABEL DESCRIPTION Action Select Discard source to drop the frames from the source MAC address (specified in the MAC field). The Switch can still send frames to the MAC address. Select Discard destination to drop the frames to the destination MAC address (specified in the MAC address).
Page 99: Spanning Tree Protocol
H A P T E R Spanning Tree Protocol The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) as defined in the following standards. • IEEE 802.1D Spanning Tree Protocol • IEEE 802.1w Rapid Spanning Tree Protocol •...
Page 100: How Stp Works
Chapter 11 Spanning Tree Protocol Path cost is the cost of transmitting a frame onto a LAN through that port. The recommended cost is assigned according to the speed of the link to which a port is attached. The slower the media, the higher the cost.
Page 101: Stp Port States
11.1.3 STP Port States STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from blocking state to forwarding state so as to eliminate transient loops. Table 23 STP Port States PORT STATE DESCRIPTION Disabled STP is disabled (default).
Page 102: Multiple Stp
Chapter 11 Spanning Tree Protocol 11.1.5 Multiple STP Multiple Spanning Tree Protocol (IEEE 802.1s) is backward compatible with STP/RSTP and addresses the limitations of existing spanning tree protocols (STP and RSTP) in networks to include the following features: • One Common and Internal Spanning Tree (CIST) that represents the entire network’s connectivity.
Page 103: Figure 48 Mstp Network Example
Figure 48 MSTP Network Example VLAN 1 11.1.5.2 MST Region An MST region is a logical grouping of multiple network devices that appears as a single device to the rest of the network. Each MSTP-enabled device can only belong to one MST region.
Page 104: Spanning Tree Protocol Status Screen
Chapter 11 Spanning Tree Protocol Figure 49 MSTIs in Different Regions 11.1.5.4 Common and Internal Spanning Tree (CIST) A CIST represents the connectivity of the entire network and it is equivalent to a spanning tree in an STP/RSTP. The CIST is the default MST instance (MSTID 0). Any VLANs that are not members of an MST instance are members of the CIST.
Page 105: Spanning Tree Configuration
Figure 51 Advanced Application > Spanning Tree Protocol This screen differs depending on which STP mode (RSTP, MRSTP or MSTP) you configure on the Switch. This screen is described in detail in the section that follows the configuration section for each STP mode. Click Configuration to activate one of the STP standards on the Switch.
Page 106: Configure Rapid Spanning Tree Protocol
Chapter 11 Spanning Tree Protocol 11.4 Configure Rapid Spanning Tree Protocol Use this screen to configure RSTP settings, see on RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 53 Advanced Application > Spanning Tree Protocol > RSTP The following table describes the labels in this screen.
Page 107: Rapid Spanning Tree Protocol Status
Table 25 Advanced Application > Spanning Tree Protocol > RSTP (continued) LABEL DESCRIPTION Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. The allowed range is 1 to 10 seconds.
Page 108: Figure 54 Advanced Application > Spanning Tree Protocol > Status: Rstp
Chapter 11 Spanning Tree Protocol This screen is only available after you activate RSTP on the Switch. Figure 54 Advanced Application > Spanning Tree Protocol > Status: RSTP The following table describes the labels in this screen. Table 26 Advanced Application > Spanning Tree Protocol > Status: RSTP LABEL Configuration Bridge...
Page 109: Configure Multiple Rapid Spanning Tree Protocol
11.6 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click MRSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 11.1 on page 99 Figure 55 Advanced Application > Spanning Tree Protocol > MRSTP The following table describes the labels in this screen. Table 27 Advanced Application >...
Page 110: Multiple Rapid Spanning Tree Protocol Status
Chapter 11 Spanning Tree Protocol Table 27 Advanced Application > Spanning Tree Protocol > MRSTP (continued) LABEL Max Age Forwarding Delay Port Active Priority Path Cost Tree Apply Cancel 11.7 Multiple Rapid Spanning Tree Protocol Status Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next.
Page 111: Configure Multiple Spanning Tree Protocol
Figure 56 Advanced Application > Spanning Tree Protocol > Status: MRSTP The following table describes the labels in this screen. Table 28 Advanced Application > Spanning Tree Protocol > Status: MRSTP LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you want to activate. Click MRSTP to edit MRSTP settings on the Switch.
Page 112: Figure 57 Advanced Application > Spanning Tree Protocol > Mstp
Chapter 11 Spanning Tree Protocol Figure 57 Advanced Application > Spanning Tree Protocol > MSTP GS-3012/GS-3012F User’s Guide...
Page 113: Table 29 Advanced Application > Spanning Tree Protocol > Mstp
The following table describes the labels in this screen. Table 29 Advanced Application > Spanning Tree Protocol > MSTP LABEL DESCRIPTION Status Click Status to display the MSTP Status screen (see Active Select this check box to activate MSTP on the Switch. Clear this checkbox to disable MSTP on the Switch.
Page 114: Multiple Spanning Tree Protocol Status
Chapter 11 Spanning Tree Protocol Table 29 Advanced Application > Spanning Tree Protocol > MSTP (continued) LABEL VLAN Range Enabled VLAN(s) Port Active Priority Path Cost Cancel Instance VLAN Active Port Delete Cancel 11.9 Multiple Spanning Tree Protocol Status Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next.
Page 115: Figure 58 Advanced Application > Spanning Tree Protocol > Status: Mstp
This screen is only available after you activate MSTP on the Switch. Figure 58 Advanced Application > Spanning Tree Protocol > Status: MSTP The following table describes the labels in this screen. Table 30 Advanced Application > Spanning Tree Protocol > Status: MSTP LABEL DESCRIPTION Configuration...
Page 116 Chapter 11 Spanning Tree Protocol Table 30 Advanced Application > Spanning Tree Protocol > Status: MSTP (continued) LABEL Forwarding Delay (second) Cost to Bridge Port ID Configuration Name Revision Number Configuration Digest Topology Changed Times Time Since Last Change Instance: Instance VLAN MSTI...
Page 117: Bandwidth Control
H A P T E R This chapter shows you how you can cap the maximum bandwidth using the Bandwidth Control screen. 12.1 Bandwidth Control Overview Bandwidth control means defining a maximum allowable bandwidth for incoming and/or out- going traffic flows on a port. 12.1.1 CIR and PIR The Committed Information Rate (CIR) is the guaranteed bandwidth for the incoming traffic flow on a port.
Page 118: Figure 59 Advanced Application > Bandwidth Control
Chapter 12 Bandwidth Control Figure 59 Advanced Application > Bandwidth Control The following table describes the related labels in this screen. Table 31 Advanced Application > Bandwidth Control LABEL DESCRIPTION Active Select this check box to enable bandwidth control on the Switch. Port This field displays the port number.
Page 119: Broadcast Storm Control
H A P T E R Broadcast Storm Control This chapter introduces and shows you how to configure the broadcast storm control feature. 13.1 Broadcast Storm Control Setup Broadcast storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the ports.
Page 120: Table 32 Advanced Application > Broadcast Storm Control
Chapter 13 Broadcast Storm Control The following table describes the labels in this screen. Table 32 Advanced Application > Broadcast Storm Control LABEL DESCRIPTION Active Select this check box to enable traffic storm control on the Switch. Clear this check box to disable this feature.
Page 121: Mirroring
H A P T E R This chapter discusses port mirroring setup screens. 14.1 Port Mirroring Setup Port mirroring allows you to copy a traffic flow to a monitor port (the port you copy the traffic to) in order that you can examine the traffic from the monitor port without interference. Click Advanced Application >...
Page 122: Table 33 Advanced Application > Mirroring
Chapter 14 Mirroring The following table describes the labels in this screen. Table 33 Advanced Application > Mirroring LABEL DESCRIPTION Active Select this check box to activate port mirroring on the Switch. Clear this check box to disable the feature. Monitor The monitor port is the port you copy the traffic to in order to examine it in more detail Port...
Page 123: Link Aggregation
H A P T E R This chapter shows you how to logically aggregate physical links to form one logical, higher- bandwidth link. 15.1 Link Aggregation Overview Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link.
Page 124: Link Aggregation Id
Chapter 15 Link Aggregation • You must connect all ports point-to-point to the same Ethernet switch and configure the ports for LACP trunking. • LACP only works on full-duplex links. • All ports in the same trunk group must have the same media type, speed, duplex mode and flow control settings.
Page 125: Link Aggregation Setting
Table 36 Advanced Application > Link Aggregation Status (continued) LABEL DESCRIPTION Synchronized These are the ports that are currently transmitting data as one logical link in this trunk Ports group. Aggregator ID Link Aggregator ID consists of the following: system priority, MAC address, key, port priority and port number.
Page 126: Link Aggregation Control Protocol
Chapter 15 Link Aggregation The following table describes the labels in this screen. Table 37 Advanced Application > Link Aggregation > Link Aggregation Setting LABEL DESCRIPTION Link This is the only screen you need to configure to enable static link aggregation. Aggregation Setting Group ID...
Page 127: Figure 64 Advanced Application > Link Aggregation > Link Aggregation Setting > Lacp
Figure 64 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP The following table describes the labels in this screen. Table 38 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP LABEL DESCRIPTION Link Note: Do not configure this screen unless you want to enable Aggregation Control Protocol...
Page 128: Static Trunking Example
Chapter 15 Link Aggregation Table 38 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP LABEL DESCRIPTION Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Page 129: Figure 66 Trunking Example - Configuration Screen
Chapter 15 Link Aggregation Figure 66 Trunking Example - Configuration Screen Your trunk group 1 (T1) configuration is now complete; you do not need to go to any additional screens. GS-3012/GS-3012F User’s Guide...
Page 130 Chapter 15 Link Aggregation GS-3012/GS-3012F User’s Guide...
Page 131: Port Authentication
H A P T E R This chapter describes the IEEE 802.1x and MAC authentication methods. 16.1 Port Authentication Overview Port authentication is a way to validate access to ports on the Switch to clients based on an external server (authentication server). The Switch supports the following methods for port authentication: •...
Page 132: Figure 67 Ieee 802.1X Authentication Process
Chapter 16 Port Authentication Figure 67 IEEE 802.1x Authentication Process New Connection Login Info Request Login Credentials 16.1.2 MAC Authentication MAC authentication works in a very similar way to IEEE 802.1x authentication. The main difference is that the Switch does not prompt the client for login credentials. The login credentials are based on the source MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch.
Page 133: Port Authentication Configuration
16.2 Port Authentication Configuration To enable port authentication, first activate the port authentication method(s) you want to use (both on the Switch and the port(s)) then configure the RADIUS server settings in the Auth and Acct > Radius Server Setup screen. Click Advanced Application >...
Page 134: Activate Mac Authentication
Chapter 16 Port Authentication The following table describes the labels in this screen. Table 39 Advanced Application > Port Authentication > 802.1x LABEL DESCRIPTION Active Select this check box to permit 802.1x authentication on the Switch. Note: You must first enable 802.1x authentication on the Switch Port This field displays the port number.
Page 135: Figure 71 Advanced Application > Port Authentication > Mac Authentication
Figure 71 Advanced Application > Port Authentication > MAC Authentication The following table describes the labels in this screen. Table 40 Advanced Application > Port Authentication > MAC Authentication LABEL DESCRIPTION Active Select this check box to permit MAC authentication on the Switch. Note: You must first enable MAC authentication on the Switch Name Prefix Type the prefix that is appended to all MAC addresses sent to the RADIUS server...
Page 136 Chapter 16 Port Authentication Table 40 Advanced Application > Port Authentication > MAC Authentication (continued) LABEL DESCRIPTION Use this row to make the setting the same for all ports. Use this row first and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you Active Select this checkbox to permit MAC authentication on this port.
Page 137: Port Security
H A P T E R This chapter shows you how to set up port security. 17.1 About Port Security Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the Switch. The Switch can learn up to 16K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 16K.
Page 138: Figure 72 Advanced Application > Port Security
Chapter 17 Port Security Figure 72 Advanced Application > Port Security The following table describes the labels in this screen. Table 41 Advanced Application > Port Security LABEL DESCRIPTION Active Select this option to enable port security on the Switch. Port This field displays the port number.
Page 139 Table 41 Advanced Application > Port Security (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 140 Chapter 17 Port Security GS-3012/GS-3012F User’s Guide...
Page 141: Classifier
H A P T E R This chapter introduces and shows you how to configure the packet classifier on the Switch. 18.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth.
Page 142: Figure 73 Advanced Application > Classifier
Chapter 18 Classifier Figure 73 Advanced Application > Classifier The following table describes the labels in this screen. Table 42 Advanced Application > Classifier LABEL DESCRIPTION Active Select this option to enable this rule. Name Enter a descriptive name for this rule for identifying purposes. Packet Specify the format of the packet.
Page 143 Table 42 Advanced Application > Classifier (continued) LABEL DESCRIPTION Ethernet Select an Ethernet type or select Other and enter the Ethernet type number in Type hexadecimal value. Refer to Source Select Any to apply the rule to all MAC addresses. Address To specify a source, select the second choice and type a MAC address in valid MAC address format (six hexadecimal character pairs).
Page 144: Viewing And Editing Classifier Configuration
Chapter 18 Classifier Table 42 Advanced Application > Classifier (continued) LABEL DESCRIPTION Cancel Click Cancel to reset the fields back to your previous configuration. Clear Click Clear to set the above fields back to the factory defaults. 18.3 Viewing and Editing Classifier Configuration To view a summary of the classifier configuration, scroll down to the summary table at the bottom of the Classifier screen.
Page 145: Classifier Example
Table 44 Common Ethernet Types and Protocol Numbers ETHERNET TYPE XNS Compat Banyan Systems BBN Simnet IBM SNA AppleTalk AARP In the Internet Protocol there is a field, called “Protocol”, to identify the next level protocol. The following table shows some common protocol types and the corresponding protocol number.
Page 146: Figure 75 Classifier: Example
Chapter 18 Classifier Figure 75 Classifier: Example GS-3012/GS-3012F User’s Guide...
Page 147: Policy Rule
H A P T E R This chapter shows you how to configure policy rules. 19.1 Policy Rules Overview A classifier distinguishes traffic into flows based on the configured criteria (refer to 18 on page 141 for more information). A policy rule ensures that a traffic flow gets the requested treatment in the network.
Page 148: Configuring Policy Rules
Chapter 19 Policy Rule 19.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to for more information. Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. Figure 76 Advanced Application > Policy Rule Section 18.2 on page 141 GS-3012/GS-3012F User’s Guide...
Page 149: Table 47 Advanced Application > Policy Rule
The following table describes the labels in this screen. Table 47 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option to enable the policy. Name Enter a descriptive name for identification purposes. Classifier(s) This field displays the active classifier(s) you configure in the Classifier screen. Select the classifier(s) to which this policy rule applies.
Page 150: Viewing And Editing Policy Configuration
Chapter 19 Policy Rule Table 47 Advanced Application > Policy Rule (continued) LABEL DESCRIPTION Outgoing Select Send the packet to the mirror port to send the packet to the mirror port. Select Send the packet to the egress port to send the packet to the egress port. Select Send the matching frames (broadcast or DLF, multicast, marked for dropping or to be sent to the CPU) to the egress port to send the broadcast, multicast, DLF, marked-to-drop or CPU frames to the egress port.
Page 151: Policy Example
19.4 Policy Example The figure below shows an example Policy screen where you configure a policy to limit bandwidth and discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 18.4 on page Figure 78 Policy Example GS-3012/GS-3012F User’s Guide Chapter 19 Policy Rule 145).
Page 152 Chapter 19 Policy Rule GS-3012/GS-3012F User’s Guide...
Page 153: Queuing Method
H A P T E R This chapter introduces the queuing methods supported. 20.1 Queuing Method Overview Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic. See also Priority Queue Assignment in Switch Setup and 802.1p Priority in Port Setup for related information.
Page 154: Configuring Queuing
Chapter 20 Queuing Method 20.2 Configuring Queuing Click Advanced Application > Queuing Method in the navigation panel. Figure 79 Advanced Application > Queuing Method The following table describes the labels in this screen. Table 49 Advanced Application > Queuing Method LABEL DESCRIPTION Port...
Page 155: Multicast
H A P T E R This chapter shows you how to configure various multicast features. 21.1 Multicast Overview Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast delivers IP packets to just a group of hosts on the network.
Page 156: Igmp Snooping And Vlans
Chapter 21 Multicast The Switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of that group. IGMP snooping generates no additional network traffic, allowing you to significantly reduce multicast traffic passing through your Switch.
Page 157: Figure 81 Advanced Application > Multicast > Multicast Setting
Figure 81 Advanced Application > Multicast > Multicast Setting The following table describes the labels in this screen. Table 51 Advanced Application > Multicast > Multicast Setting LABEL DESCRIPTION IGMP Snooping Use these settings to configure IGMP Snooping. Active Select Active to enable IGMP Snooping to forward group multicast traffic only to ports that are members of that group.
Page 158: Igmp Snooping Vlan
Chapter 21 Multicast Table 51 Advanced Application > Multicast > Multicast Setting (continued) LABEL Reserved Multicast Group Port Immed. Leave Group Limited Max Group Num. IGMP Filtering Profile IGMP Querier Mode Apply Cancel 21.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the Multicast Setting link and then the IGMP Snooping VLAN link to display the screen as shown.
Page 159: Figure 82 Advanced Application > Multicast > Multicast Setting > Igmp Snooping Vlan
Figure 82 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN The following table describes the labels in this screen. Table 52 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN LABEL DESCRIPTION Mode Select auto to have the Switch learn multicast group membership information of any VLANs automatically.
Page 160: Igmp Filtering Profile
Chapter 21 Multicast Table 52 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN LABEL Index Name Delete Cancel 21.5 IGMP Filtering Profile An IGMP filtering profile specifies a range of multicast groups that clients connected to the Switch are able to join.
Page 161: Mvr Overview
Table 53 Advanced Application > Multicast > Multicast Setting > IGMP Filtering Profile LABEL DESCRIPTION Click Add to save the profile to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 162: Mvr Modes
Chapter 21 Multicast 21.6.2 MVR Modes You can set your Switch to operate in either dynamic or compatible mode. In dynamic mode, the Switch sends IGMP leave and join reports to the other multicast devices (such as multicast routers or servers) in the multicast VLAN. This allows the multicast devices to update the multicast forwarding table to forward or not forward multicast traffic to the receiver ports.
Page 163: Figure 86 Advanced Application > Multicast > Multicast Setting > Mvr
Your Switch automatically creates a static VLAN (with the same VID) when you create a multicast VLAN in this screen. Figure 86 Advanced Application > Multicast > Multicast Setting > MVR The following table describes the related labels in this screen. Table 54 Advanced Application >...
Page 164: Mvr Group Configuration
Chapter 21 Multicast Table 54 Advanced Application > Multicast > Multicast Setting > MVR (continued) LABEL DESCRIPTION Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Page 165: Mvr Configuration Example
Figure 87 Advanced Application > Multicast > Multicast Setting > MVR: Group Configuration The following table describes the labels in this screen. Table 55 Advanced Application > Multicast > Multicast Setting > MVR: Group Configuration LABEL DESCRIPTION Multicast Select a multicast VLAN ID (that you configured in the MVR screen) from the drop- VLAN ID down list box.
Page 166: Figure 88 Mvr Configuration Example
Chapter 21 Multicast Figure 88 MVR Configuration Example To configure the MVR settings on the Switch, create a multicast group in the MVR screen and set the receiver and source ports. Figure 89 MVR Configuration Example To set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen.
Page 167: Figure 91 Mvr Group Configuration Example
Chapter 21 Multicast Figure 91 MVR Group Configuration Example GS-3012/GS-3012F User’s Guide...
Page 168 Chapter 21 Multicast GS-3012/GS-3012F User’s Guide...
Page 169: Authentication & Accounting
H A P T E R Authentication & Accounting This chapter describes how to configure authentication and accounting settings on the Switch. 22.1 Authentication, Authorization and Accounting Authentication is the process of determining who a user is and validating access to the Switch. The Switch can authenticate users who try to log in based on user accounts configured on the Switch itself.
Page 170: Radius And Tacacs
Chapter 22 Authentication & Accounting 22.1.2 RADIUS and TACACS+ RADIUS and TACACS+ are security protocols used to authenticate users by means of an external server instead of (or in addition to) an internal device user database that is limited to the memory capacity of the device.
Page 171: Figure 94 Advanced Application > Auth And Acct > Radius Server Setup
Figure 94 Advanced Application > Auth and Acct > RADIUS Server Setup The following table describes the labels in this screen. Table 57 Advanced Application > Auth and Acct > RADIUS Server Setup LABEL DESCRIPTION Authentication Use this section to configure your RADIUS authentication settings. Server Mode This field is only valid if you configure multiple RADIUS servers.
Page 172: Tacacs+ Server Setup
Chapter 22 Authentication & Accounting Table 57 Advanced Application > Auth and Acct > RADIUS Server Setup (continued) LABEL DESCRIPTION Delete Check this box if you want to remove an existing RADIUS server entry from the Switch. This entry is deleted when you click Apply. Apply Click Apply to save your changes to the Switch’s run-time memory.
Page 173: Figure 95 Advanced Application > Auth And Acct > Tacacs+ Server Setup
Figure 95 Advanced Application > Auth and Acct > TACACS+ Server Setup The following table describes the labels in this screen. Table 58 Advanced Application > Auth and Acct > TACACS+ Server Setup LABEL DESCRIPTION Authentication Use this section to configure your TACACS+ authentication settings. Server Mode This field is only valid if you configure multiple TACACS+ servers.
Page 174: Authentication And Accounting Setup
Chapter 22 Authentication & Accounting Table 58 Advanced Application > Auth and Acct > TACACS+ Server Setup (continued) LABEL DESCRIPTION Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. This key is not sent over the network.
Page 175: Figure 96 Advanced Application > Auth And Acct > Auth And Acct Setup
Figure 96 Advanced Application > Auth and Acct > Auth and Acct Setup The following table describes the labels in this screen. Table 59 Advanced Application > Auth and Acct > Auth and Acct Setup LABEL DESCRIPTION Authentication Use this section to specify the methods used to authenticate users accessing the Switch.
Page 176 Chapter 22 Authentication & Accounting Table 59 Advanced Application > Auth and Acct > Auth and Acct Setup (continued) LABEL DESCRIPTION Login These fields specify which database the Switch should use (first, second and third) to authenticate administrator accounts (users for Switch management). Configure the local user accounts in the Access Control >...
Page 177: Vendor Specific Attribute
Table 59 Advanced Application > Auth and Acct > Auth and Acct Setup (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 178: Supported Radius Attributes
Chapter 22 Authentication & Accounting Table 60 Supported VSAs FUNCTION Egress Bandwidth Assignment Privilege Assignment 22.2.4.1 Tunnel Protocol Attribute You can configure tunnel protocol attributes on the RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication.
Page 179: Attributes Used For Authentication
22.3.1 Attributes Used for Authentication The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication. 22.3.1.1 Attributes Used for Authenticating Privilege Access User-Name - the format of the User-Name attribute is $enab#$, where # is the privilege level (1- User-Password NAS-Identifier NAS-IP-Address...
Page 180: Table 62 Radius Attributes - Exec Events Via Console
Chapter 22 Authentication & Accounting 22.3.2.2 Attributes Used for Accounting Exec Events The attributes are listed in the following table along with the time that they are sent (the difference between Console and Telnet/SSH Exec events is that the Telnet/SSH events utilize the Calling-Station-Id attribute): Table 62 RADIUS Attributes - Exec Events via Console ATTRIBUTE...
Page 181 Table 64 RADIUS Attributes - Exec Events via Console ATTRIBUTE NAS-Port-Type Acct-Status-Type Acct-Delay-Time Acct-Session-Id Acct-Authentic Acct-Input-Octets Acct-Output-Octets Acct-Session-Time Acct-Input-Packets Acct-Output-Packets Acct-Terminate-Cause Acct-Input-Gigawords Acct-Output-Gigawords GS-3012/GS-3012F User’s Guide Chapter 22 Authentication & Accounting START INTERIM-UPDATE STOP...
Page 182 Chapter 22 Authentication & Accounting GS-3012/GS-3012F User’s Guide...
Page 183: Ip Source Guard
H A P T E R Use IP source guard to filter unauthorized DHCP and ARP packets in your network. 23.1 IP Source Guard Overview IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in your network. A binding contains these key attributes: •...
Page 184: Figure 97 Dhcp Snooping Database File Format
Chapter 23 IP Source Guard Trusted ports are connected to DHCP servers or other switches. The Switch discards DHCP packets from trusted ports only if the rate at which DHCP packets arrive is too high. The Switch learns dynamic bindings from trusted ports. The Switch will drop all DHCP requests if you enable DHCP snooping and there are no trusted ports.
Page 185: Configuring Dhcp Snooping
23.1.1.3 DHCP Relay Option 82 Information The Switch can add information to DHCP requests that it does not discard. This provides the DHCP server more information about the source of the requests. The Switch can add the following information: • Slot ID (1 byte), port ID (1 byte), and source VLAN ID (2 bytes) •...
Page 186: Configuring Arp Inspection
Chapter 23 IP Source Guard 23.1.2.1 ARP Inspection and MAC Address Filters When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet.
Page 187: Ip Source Guard
23.2 IP Source Guard Use this screen to look at the current bindings for DHCP snooping and ARP inspection. Bindings are used by DHCP snooping and ARP inspection to distinguish between authorized and unauthorized packets in the network. The Switch learns the bindings by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings).
Page 188: Figure 100 Ip Source Guard Static Binding
Chapter 23 IP Source Guard Figure 100 IP Source Guard Static Binding The following table describes the labels in this screen. Table 66 IP Source Guard Static Binding LABEL MAC Address IP Address VLAN Port Cancel Clear Index MAC Address IP Address Lease Type...
Page 189: Dhcp Snooping
23.4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. Figure 101 DHCP Snooping GS-3012/GS-3012F User’s Guide Chapter 23 IP Source Guard...
Page 190: Table 67 Dhcp Snooping
Chapter 23 IP Source Guard The following table describes the labels in this screen. Table 67 DHCP Snooping LABEL Database Status Agent URL Write delay timer Abort timer Agent running Delay timer expiry Abort timer expiry Last succeeded time Last failed time Last failed reason Total attempts Startup failures...
Page 191 Table 67 DHCP Snooping (continued) LABEL Successful writes Failed writes Database detail First successful access Last ignored bindings counters Binding collisions Invalid interfaces Parse failures Expired leases Unsupported vlans Last ignored time Total ignored bindings counters Binding collisions Invalid interfaces Parse failures Expired leases Unsupported vlans...
Page 192: Dhcp Snooping Configure
Chapter 23 IP Source Guard 23.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Switch (not on specific VLAN), specify the VLAN where the default DHCP server is located, and configure the DHCP snooping database. The DHCP snooping database stores the current bindings on a secure, external TFTP server so that they are still available after a restart.
Page 193: Dhcp Snooping Port Configure
Table 68 DHCP Snooping Configure (continued) LABEL Database Agent URL Timeout interval Write delay interval Renew DHCP Snooping URL Apply Cancel 23.5.1 DHCP Snooping Port Configure Use this screen to specify whether ports are trusted or untrusted ports for DHCP snooping. The Switch will drop all DHCP requests if you enable DHCP snooping and there are no trusted ports.
Page 194: Figure 103 Dhcp Snooping Port Configure
Chapter 23 IP Source Guard Figure 103 DHCP Snooping Port Configure The following table describes the labels in this screen. Table 69 DHCP Snooping Port Configure LABEL Port Server Trusted state Rate (pps) Apply Cancel DESCRIPTION This field displays the port number. If you configure the * port, the settings are applied to all of the ports.
Page 195: Dhcp Snooping Vlan Configure
23.5.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snooping on each VLAN and to specify whether or not the Switch adds DHCP relay agent option 82 information requests that the Switch relays to a DHCP server for each VLAN. To open this screen, click Advanced Application >...
Page 196: Arp Inspection Status
Chapter 23 IP Source Guard 23.6 ARP Inspection Status Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unauthorized ARP packet. When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet.
Page 197: Arp Inspection Log Status
Figure 106 ARP Inspection VLAN Status The following table describes the labels in this screen. Table 72 ARP Inspection VLAN Status LABEL Show VLAN range Enabled VLAN Selected VLAN Apply Received Request Reply Forwarded Dropped 23.6.2 ARP Inspection Log Status Use this screen to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet.
Page 198: Figure 107 Arp Inspection Log Status
Chapter 23 IP Source Guard Figure 107 ARP Inspection Log Status The following table describes the labels in this screen. Table 73 ARP Inspection Log Status LABEL Clearing log status table Total number of logs Index Port Sender Mac Sender IP Num Pkts Reason Time...
Page 199: Arp Inspection Configure
23.7 ARP Inspection Configure Use this screen to enable ARP inspection on the Switch. You can also configure the length of time the Switch stores records of discarded ARP packets and global settings for the ARP inspection log. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection >...
Page 200: Arp Inspection Port Configure
Chapter 23 IP Source Guard Table 74 ARP Inspection Configure (continued) LABEL Syslog rate Log interval Apply Cancel 23.7.1 ARP Inspection Port Configure Use this screen to specify whether ports are trusted or untrusted ports for ARP inspection. You can also specify the maximum rate at which the Switch receives ARP packets on each untrusted port.
Page 201: Arp Inspection Vlan Configure
The following table describes the labels in this screen. Table 75 ARP Inspection Port Configure LABEL Port Trusted State Limit Rate (pps) Burst interval (seconds) Apply Cancel 23.7.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiving ARP packets from each VLAN.
Page 202: Table 76 Arp Inspection Vlan Configure
Chapter 23 IP Source Guard The following table describes the labels in this screen. Table 76 ARP Inspection VLAN Configure LABEL VLAN Start VID End VID Apply Enabled Apply Cancel DESCRIPTION Use this section to specify the VLANs you want to manage in the section below.
Page 203: Loop Guard
H A P T E R This chapter shows you how to configure the Switch to guard against loops on the edge of your network. 24.1 Loop Guard Overview Loop guard allows you to configure the Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch.
Page 204: Figure 112 Switch In Loop State
Chapter 24 Loop Guard The following figure shows port N on switch A connected to switch B. Switch B is in loop state. When broadcast or multicast packets leave port N and reach switch B, they are sent back to port N on A as they are rebroadcast from B. Figure 112 Switch in Loop State The loop guard feature checks to see if a loop guard enabled port is connected to a switch in loop state.
Page 205: Loop Guard Setup
After resolving the loop problem on your network you can re-activate the disabled port via the web configurator (see commands (See the CLI Reference Guide). 24.2 Loop Guard Setup Click Advanced Application > Loop Guard in the navigation panel to display the screen as shown.
Page 206 Chapter 24 Loop Guard Table 77 Advanced Application > Loop Guard (continued) LABEL DESCRIPTION Active Select this check box to enable the loop guard feature on this port. The Switch sends probe packets from this port to check if the switch it is connected to is in loop state. If the switch that this port is connected is in loop state the Switch will shut down this port.
Page 207: Two Rate Three Color Marker
H A P T E R Two Rate Three Color Marker This chapter describes how Differentiated Services (DiffServ) fits into a quality of service strategy and shows you how to configure Two Rate Three Color Marker traffic policing on the Switch.
Page 208: Diffserv Network Example
Chapter 25 Two Rate Three Color Marker 25.1.2 DiffServ Network Example The following figure depicts a DiffServ network consisting of a group of directly connected DiffServ-compliant network devices. The boundary node (A in network classifies (marks with a DSCP value) the incoming packets into different traffic flows (Platinum, Gold, Silver, Bronze) based on the configured marking rules.
Page 209: Trtcm - Color-Blind Mode
• Green (low loss priority level) packets are forwarded. trTCM operates in one of two modes: color-blind or color-aware. In color-blind mode, packets are marked based on evaluating against the PIR and CIR regardless of if they have previously been marked or not. In the color-aware mode, packets are marked based on both existing color and evaluation against the PIR and CIR.
Page 210: Configuring Two Rate Three Color Marker Settings
Chapter 25 Two Rate Three Color Marker 25.2.3 Configuring Two Rate Three Color Marker Settings Use this screen to configure trTCM settings. Click the Advanced Application > trTCM to display the screen as shown next. You cannot enable both trTCM and Bandwidth Control at the same time. Figure 120 Advanced Application >...
Page 211 Table 78 Advanced Application > trTCM (continued) LABEL DESCRIPTION Active Select this to activate trTCM on the port. Commit Specify the Commit Information Rate (CIR) for this port. Rate Peak Specify the Peak Information Rate (PIR) for this port. Rate DSCP Use this section to specify the DSCP values that you want to assign to packets based on the color they are marked via trTCM.
Page 212 Chapter 25 Two Rate Three Color Marker GS-3012/GS-3012F User’s Guide...
Page 213: Ip Application
IP Application Static Route (215) DHCP (219)
Page 215: Static Route
H A P T E R This chapter shows you how to configure static routes. 26.1 Static Routing Overview The Switch uses IP for communication with management computers, for example using HTTP, telnet, SSH, or SNMP. Use IP static routes to have the Switch respond to remote management stations that are not reachable through the default gateway.
Page 216: Figure 122 Ip Application > Static Routing
Chapter 26 Static Route Figure 122 IP Application > Static Routing The following table describes the related labels you use to create a static route. Table 79 IP Application > Static Routing LABEL DESCRIPTION Active This field allows you to activate/deactivate this static route. Name Enter a descriptive name (up to 10 printable ASCII characters) for identification purposes.
Page 217 Table 79 IP Application > Static Routing (continued) LABEL DESCRIPTION Gateway This field displays the IP address of the gateway. The gateway is an immediate Address neighbor of your Switch that will forward the packet to the destination. Metric This field displays the cost of transmission for routing purposes. Delete Click Delete to remove the selected entry from the summary table.
Page 218 Chapter 26 Static Route GS-3012/GS-3012F User’s Guide...
Page 219: Dhcp
H A P T E R This chapter shows you how to configure the DHCP feature. 27.1 DHCP Overview DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configuration at start-up from a server. You can configure the Switch as a DHCP server or a DHCP relay agent.
Page 220: Dhcp Relay
Chapter 27 DHCP Figure 123 IP Application > DHCP Status The following table describes the labels in this screen. Table 80 IP Application > DHCP LABEL DESCRIPTION Relay Mode This field displays: • • • 27.3 DHCP Relay Configure DHCP relay on the Switch if the DHCP clients and the DHCP server are not in the same broadcast domain.
Page 221: Configuring Dhcp Global Relay
Table 81 Relay Agent Information FIELD LABELS VLAN ID Information 27.3.2 Configuring DHCP Global Relay Configure global DHCP relay in the DHCP Relay screen. Click IP Application > DHCP in the navigation panel and click the Global link to display the screen as shown. Figure 124 IP Application >...
Page 222: Global Dhcp Relay Configuration Example
Chapter 27 DHCP 27.3.3 Global DHCP Relay Configuration Example The follow figure shows a network example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains.
Page 223: Figure 127 Ip Application > Dhcp > Vlan
You must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. Section 7.6 on page 75 VLANs. Figure 127 IP Application > DHCP > VLAN The following table describes the labels in this screen. Table 83 IP Application >...
Page 224: Example: Dhcp Relay For Two Vlans
Chapter 27 DHCP Table 83 IP Application > DHCP > VLAN (continued) LABEL DESCRIPTION DHCP Status For DHCP relay configuration, this field displays the first remote DHCP server IP address. Delete Select the configuration entries you want to remove and click Delete to remove them. Cancel Click Cancel to clear the Delete check boxes.
Page 225: Management
Management Maintenance (227) Access Control (233) Diagnostic (251) Syslog (253) Cluster Management (257) MAC Table (263) ARP Table (265) Configure Clone (267)
Page 227: Maintenance
H A P T E R This chapter explains how to configure the screens that let you maintain the firmware and configuration files. 28.1 The Maintenance Screen Use this screen to manage firmware and your configuration files. Click Management > Maintenance in the navigation panel to open the following screen.
Page 228: Load Factory Default
Chapter 28 Maintenance Table 84 Management > Maintenance (continued) LABEL DESCRIPTION Save Click Config 1 to save the current configuration settings to Configuration 1 on the Configuration Switch. Click Config 2 to save the current configuration settings to Configuration 2 on the Switch.
Page 229: Reboot System
28.4 Reboot System Reboot System allows you to restart the Switch without physically turning the power off. It also allows you to load configuration one (Config 1) or configuration two (Config 2) when you reboot. Follow the steps below to reboot the Switch. 1 In the Maintenance screen, click the Config 1 button next to Reboot System to reboot and load configuration one.
Page 230: Restore A Configuration File
Chapter 28 Maintenance 28.6 Restore a Configuration File Restore a previously saved configuration from your computer to the Switch using the Restore Configuration screen. Figure 134 Management > Maintenance > Restore Configuration Type the path and file name of the configuration file you wish to restore in the File Path text box or click Browse to locate it.
Page 231: Ftp Command Line
28.8 FTP Command Line This section shows some examples of uploading to or downloading files from the Switch using FTP commands. First, understand the filename conventions. 28.8.1 Filename Conventions The configuration file (also known as the romfile or ROM) contains the factory default settings in the screens such as password, Switch setup, IP Setup, and so on.
Page 232: Gui-Based Ftp Clients
Chapter 28 Maintenance 5 Enter to set transfer mode to binary. 6 Use to transfer files from the computer to the Switch, for example, firmware.bin ras Switch and renames it to “ras”. Similarly, configuration file on your computer (config.cfg) to the Switch and renames it to “config”.
Page 233: Access Control
H A P T E R This chapter describes how to control access to the Switch. 29.1 Access Control Overview A console port and FTP are allowed one session each, Telnet and SSH share nine sessions, up to five Web sessions (five different usernames and passwords) and/or limitless SNMP access control sessions are allowed.
Page 234: About Snmp
Chapter 29 Access Control 29.3 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to manage and monitor TCP/IP-based devices. SNMP is used to exchange management information between the network management system (NMS) and a network element (NE). A manager station can manage and monitor the Switch through the network via SNMP version one (SNMPv1), SNMP version 2c or SNMP version 3.
Page 235: Snmp V3 And Security
29.3.1 SNMP v3 and Security SNMP v3 enhances security for SNMP management. SNMP managers can be required to authenticate with agents before conducting SNMP management sessions. Security can be further enhanced by encrypting the SNMP messages sent from the managers. Encryption protects the contents of the SNMP messages.
Page 236 Chapter 29 Access Control Table 88 SNMP System Traps (continued) OPTION OBJECT LABEL temperature TemperatureEventOn TemperatureEventClear voltage VoltageEventOn VoltageEventClear reset UncontrolledResetEventOn ControlledResetEventOn RebootEvent timesync RTCNotUpdatedEventOn RTCNotUpdatedEventClear intrusionlock IntrusionLockEventOn loopguard LoopguardEventOn OBJECT ID DESCRIPTION GS-3012F: This trap is sent when the 1.3.6.1.4.1.890.1.5.8.11.25.2.1 temperature goes above or below the normal operating range.
Page 237: Table 89 Snmp Interfacetraps
Table 89 SNMP InterfaceTraps OPTION OBJECT LABEL linkup linkUp LinkDownEventClear linkdown linkDown LinkDownEventOn autonegotiation AutonegotiationFailedEvent AutonegotiationFailedEvent Clear Table 90 AAA Traps OPTION OBJECT LABEL authentication authenticationFailure AuthenticationFailureEventOn GS-3012F: RADIUSNotReachableEvent RADIUSNotReachableEvent Clear GS-3012/GS-3012F User’s Guide OBJECT ID DESCRIPTION 1.3.6.1.6.3.1.1.5.4 This trap is sent when the Ethernet link is up.
Page 238: Table 91 Snmp Ip Traps
Chapter 29 Access Control Table 90 AAA Traps (continued) OPTION OBJECT LABEL accounting RADIUSAccountingNotReach ableEventOn RADIUSAccountingNotReach ableEventClear Table 91 SNMP IP Traps OPTION OBJECT LABEL ping pingProbeFailed pingTestFailed pingTestCompleted traceroute traceRoutePathChange traceRouteTestFailed traceRouteTestCompleted OBJECT ID DESCRIPTION GS-3012F: This trap is sent when there is no 1.3.6.1.4.1.890.1.5.8.11.25.2.1 response message from the RADIUS accounting server.
Page 239: Configuring Snmp
Table 92 SNMP Switch Traps OPTION OBJECT LABEL STPNewRoot MRSTPNewRoot MSTPNewRoot STPTopologyChange MRSTPTopologyChange MSTPTopologyChange mactable MacTableFullEventOn MacTableFullEventClear rmon RmonRisingAlarm RmonFallingAlarm 29.3.4 Configuring SNMP Click Management > Access Control > SNMP to view the screen as shown. Use this screen to configure your SNMP settings. GS-3012/GS-3012F User’s Guide OBJECT ID DESCRIPTION...
Page 240: Figure 138 Management > Access Control > Snmp
Chapter 29 Access Control Figure 138 Management > Access Control > SNMP The following table describes the labels in this screen. Table 93 Management > Access Control > SNMP LABEL General Setting Version Get Community Set Community Trap Community Trap Destination Version DESCRIPTION Use this section to specify the SNMP version and community (password) values.
Page 241: Configuring Snmp Trap Group
Table 93 Management > Access Control > SNMP (continued) LABEL DESCRIPTION Port Enter the port number upon which the manager listens for SNMP traps. Username Enter the username to be sent to the SNMP manager along with the SNMP v3 trap.
Page 242: Setting Up Login Accounts
Chapter 29 Access Control Figure 139 Management > Access Control > SNMP > Trap Group The following table describes the labels in this screen. Table 94 Management > Access Control > SNMP > Trap Group LABEL DESCRIPTION Trap Destination Select one of your configured trap destination IP addresses. These are the IP addresses of the SNMP managers.
Page 243: Figure 140 Management > Access Control > Logins
• A non-administrator (username is something other than admin) is someone who can view but not configure Switch settings. Click Management > Access Control > Logins to view the screen as shown next. Figure 140 Management > Access Control > Logins The following table describes the labels in this screen.
Page 244: Ssh Overview
Chapter 29 Access Control 29.4 SSH Overview Unlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network. Figure 141 SSH Communication Example 29.5 How SSH works The following table summarizes how a secure connection is established between two remote...
Page 245: Ssh Implementation On The Switch
2 Encryption Method Once the identification is verified, both the client and server must agree on the type of encryption method to use. 3 Authentication and Data Transmission After the identification is verified and data encryption activated, a secure tunnel is established between the client and the server.
Page 246: Https Example
Chapter 29 Access Control Figure 143 HTTPS Implementation If you disable HTTP in the Service Access Control screen, then the Switch blocks all HTTP connection attempts. 29.8 HTTPS Example If you haven’t changed the default HTTPS port on the Switch, then in your browser enter “https://Switch IP Address/”...
Page 247: Netscape Navigator Warning Messages
29.8.2 Netscape Navigator Warning Messages When you attempt to access the Switch HTTPS server, a Website Certified by an Unknown Authority screen pops up asking if you trust the server certificate. Click Examine Certificate if you want to verify that the certificate is from the Switch. If Accept this certificate temporarily for this session is selected, then click OK to continue in Netscape.
Page 248: Service Port Access Control
Chapter 29 Access Control Figure 147 Example: Lock Denoting a Secure Connection 29.9 Service Port Access Control Service Access Control allows you to decide what services you may use to access the Switch. You may also change the default service port and configure “trusted computer(s)” for each service in the Remote Management screen (discussed later).
Page 249: Remote Management
The following table describes the fields in this screen. Table 96 Management > Access Control > Service Access Control LABEL DESCRIPTION Services Services you may use to access the Switch are listed here. Active Select this option for the corresponding services that you want to allow to access the Switch.
Page 250 Chapter 29 Access Control Table 97 Management > Access Control > Remote Management (continued) LABEL DESCRIPTION Start Address Configure the IP address range of trusted computers from which you can manage this Switch. End Address The Switch checks if the client IP address of a computer requesting a service or protocol matches the range set here.
Page 251: Diagnostic
H A P T E R This chapter explains the Diagnostic screen. 30.1 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests. Figure 150 Management >...
Page 252 Chapter 30 Diagnostic GS-3012/GS-3012F User’s Guide...
Page 253: Syslog
H A P T E R This chapter explains the syslog screens. 31.1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages. A syslog-enabled device can generate a syslog message and send it to a syslog server.
Page 254: Syslog Server Setup
Chapter 31 Syslog Figure 151 Management > Syslog The following table describes the labels in this screen. Table 100 Management > Syslog LABEL Syslog Logging Type Active Facility Apply Cancel 31.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to view the screen as shown next. Use this screen to configure a list of external syslog servers.
Page 255: Figure 152 Management > Syslog > Syslog Server Setup
Figure 152 Management > Syslog > Syslog Server Setup The following table describes the labels in this screen. Table 101 Management > Syslog > Syslog Server Setup LABEL DESCRIPTION Active Select this check box to have the device send logs to this syslog server. Clear the check box if you want to create a syslog server entry but not have the device send logs to it (you can edit the entry later).
Page 256 Chapter 31 Syslog GS-3012/GS-3012F User’s Guide...
Page 257: Cluster Management
H A P T E R This chapter introduces cluster management. 32.1 Cluster Management Status Overview Cluster Management allows you to manage switches through one Switch, called the cluster manager. The switches must be directly connected and be in the same VLAN group so as to be able to communicate with one another.
Page 258: Cluster Management Status
Chapter 32 Cluster Management Figure 153 Clustering Application Example 32.2 Cluster Management Status Click Management > Cluster Management in the navigation panel to display the following screen. A cluster can only have one manager. Figure 154 Management > Cluster Management: Status GS-3012/GS-3012F User’s Guide...
Page 259: Cluster Member Switch Management
The following table describes the labels in this screen. Table 103 Management > Cluster Management: Status LABEL DESCRIPTION Status This field displays the role of this Switch within the cluster. Manager Member (you see this if you access this screen in the cluster member switch directly and not via the cluster manager) None (neither a manager nor a member of a cluster) Manager...
Page 260: Clustering Management Configuration
Chapter 32 Cluster Management 32.2.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. Figure 156 Example: Uploading Firmware to a Cluster Member Switch C:\>ftp 192.168.1.1 Connected to 192.168.1.1.
Page 261: Figure 157 Management > Cluster Management > Configuration
Figure 157 Management > Cluster Management > Configuration The following table describes the labels in this screen. Table 105 Management > Cluster Management > Configuration LABEL DESCRIPTION Clustering Manager Active Select Active to have this Switch become the cluster manager switch. A cluster can only have one manager.
Page 262 Chapter 32 Cluster Management Table 105 Management > Cluster Management > Configuration (continued) LABEL Apply Cancel Clustering Candidate List Password Cancel Refresh The next summary table shows the information for the clustering members configured. Index MacAddr Name Model Remove Cancel DESCRIPTION Click Apply to save your changes to the Switch’s run-time memory.
Page 263: Mac Table
H A P T E R This chapter introduces the MAC Table screen. 33.1 MAC Table Overview The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered across the Switch’s ports. It shows what device MAC address, belonging to what VLAN group (if any) is forwarded to which port(s) and whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen).
Page 264: Viewing The Mac Table
Chapter 33 MAC Table 33.2 Viewing the MAC Table Click Management > MAC Table in the navigation panel to display the following screen. Figure 159 Management > MAC Table The following table describes the labels in this screen. Table 106 Management > MAC Table LABEL DESCRIPTION Sort by...
Page 265: Arp Table
H A P T E R This chapter introduces ARP Table. 34.1 ARP Table Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network.
Page 266: Figure 160 Management > Arp Table
Chapter 34 ARP Table Figure 160 Management > ARP Table The following table describes the labels in this screen. Table 107 Management > ARP Table LABEL DESCRIPTION Index This is the ARP Table entry number. IP Address This is the learned IP address of a device connected to a Switch port with corresponding MAC address below.
Page 267: Configure Clone
H A P T E R This chapter shows you how you can copy the settings of one port onto other ports. 35.1 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports.
Page 268: Table 108 Management > Configure Clone
Chapter 35 Configure Clone The following table describes the labels in this screen. Table 108 Management > Configure Clone LABEL DESCRIPTION Source/ Enter the source port under the Source label. This port’s attributes are copied. Destination Enter the destination port or ports under the Destination label. These are the ports Port which are going to have the same attributes as the source port.
Page 269: Troubleshooting & Product Specifications
Troubleshooting & Product Specifications Troubleshooting (271) Product Specifications (275)
Page 271: Troubleshooting
H A P T E R This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • Switch Access and Login 36.1 Power, Hardware Connections, and LEDs The Switch does not turn on.
Page 272: Switch Access And Login
Chapter 36 Troubleshooting 36.2 Switch Access and Login I forgot the IP address for the Switch. 1 The default IP address is 192.168.1.1. 2 Use the console port to log in to the Switch. 3 Use the MGMT port to log in to the Switch, the default IP address of the MGMT port is 192.168.0.1.
Page 273 I can see the Login screen, but I cannot log in to the Switch. 1 Make sure you have entered the user name and password correctly. The default user name is admin, and the default password is 1234. These fields are case-sensitive, so make sure [Caps Lock] is not on.
Page 274 Chapter 36 Troubleshooting GS-3012/GS-3012F User’s Guide...
Page 275: Product Specifications
H A P T E R Product Specifications The following tables summarize the Switch’s hardware and firmware features. Table 109 Hardware Specifications SPECIFICATION Dimensions Weight Power Specification Power Consumption Interfaces LEDs Operating Environment GS-3012/GS-3012F User’s Guide DESCRIPTION Standard 19” rack mountable GS-3012F: 438 mm (W) x 225 mm (D) x 45 mm (H) GS-3012: 438 mm (W) x 300 mm (D) x 45 mm (H) GS-3012F: 3.1 Kg...
Page 276: Table 110 Firmware Specifications
Chapter 37 Product Specifications Table 109 Hardware Specifications Storage Environment Ground Wire Gauge Power Wire Gauge Fuse Specification Table 110 Firmware Specifications FEATURE Default IP Address Default Subnet Mask Administrator User Name Default Password Number of Login Accounts Configurable on the Switch VLAN MAC Address Filter DHCP (Dynamic Host...
Page 277 Table 110 Firmware Specifications FEATURE Static Route Multicast VLAN Registration (MVR) IP Multicast STP (Spanning Tree Protocol) / RSTP (Rapid STP) Loop Guard IP Source Guard Link Aggregation Port Authentication and Security Authentication and Accounting Device Management Port Cloning Syslog Firmware Upgrade Configuration Backup &...
Page 278: Table 111 Feature Specifications
Chapter 37 Product Specifications Table 111 Feature Specifications Layer 2 Bridging Features Switching VLAN Port Aggregation Port mirroring Bandwidth control Layer 3 IP Capability Features Routing protocols IP services Security The following list, which is not exhaustive, illustrates the standards supported in the Switch. Table 112 Standards Supported STANDARD RFC 826...
Page 279 Table 112 Standards Supported (continued) STANDARD RFC 1112 RFC 1155 RFC 1157 RFC 1213 RFC 1305 RFC 1441 RFC 1493 RFC 1643 RFC 1757 RFC 1901 RFC 2138 RFC 2139 RFC 2236 RFC 2698 RFC 2865 RFC 2674 RFC 3046 RFC 3164 RFC 3376 RFC 3414...
Page 280 Chapter 37 Product Specifications GS-3012/GS-3012F User’s Guide...
Page 281: Appendices And Index
Appendices and Index IP Addresses and Subnetting (283) Common Services (293) Legal Information (297) Customer Support (301) Index (307)
Page 283: Introduction To Ip Addresses
P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 284: Figure 162 Network Number And Host Id
Appendix A IP Addresses and Subnetting Figure 162 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask. Subnet Masks A subnet mask is used to determine which bits are part of the network number, and which bits are part of the host ID (using a logical AND operation).
Page 285: Table 114 Subnet Masks
Subnet masks are expressed in dotted decimal notation just like IP addresses. The following examples show the binary and decimal notation for 8-bit, 16-bit, 24-bit and 29-bit subnet masks. Table 114 Subnet Masks BINARY OCTET 8-bit mask 11111111 16-bit mask 11111111 24-bit mask 11111111...
Page 286: Figure 163 Subnetting Example: Before Subnetting
Appendix A IP Addresses and Subnetting Table 116 Alternative Subnet Mask Notation (continued) SUBNET MASK 255.255.255.192 255.255.255.224 255.255.255.240 255.255.255.248 255.255.255.252 Subnetting You can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the company network for security reasons.
Page 287: Figure 164 Subnetting Example: After Subnetting
Figure 164 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of 2 possible hosts (a host ID of all zeroes is the subnet’s address itself, all ones is the subnet’s broadcast address).
Page 288: Table 118 Subnet 2
Appendix A IP Addresses and Subnetting Table 118 Subnet 2 IP/SUBNET MASK IP Address IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.64 Broadcast Address: 192.168.1.127 Table 119 Subnet 3 IP/SUBNET MASK IP Address IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.128 Broadcast Address:...
Page 289: Table 122 24-Bit Network Number Subnet Planning
Table 121 Eight Subnets (continued) SUBNET SUBNET ADDRESS Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number. Table 122 24-bit Network Number Subnet Planning NO. “BORROWED” HOST BITS The following table is a summary for subnet planning on a network with a 16-bit network number.
Page 290: Configuring Ip Addresses
Appendix A IP Addresses and Subnetting Table 123 16-bit Network Number Subnet Planning (continued) NO. “BORROWED” HOST BITS Configuring IP Addresses Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
Page 291: Figure 165 Conflicting Computer Ip Addresses Example
IP Address Conflicts Each device on a network must have a unique IP address. Devices with duplicate IP addresses on the same network will not be able to access the Internet or other resources. The devices may also be unreachable through the network. Conflicting Computer IP Addresses Example More than one device can not use the same IP address.
Page 292: Figure 167 Conflicting Computer And Router Ip Addresses Example
Appendix A IP Addresses and Subnetting Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address. In the following example, the computer and the router’s LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet.
Page 293: Appendix B Common Services
P P E N D I X The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/code numbers and services, visit the IANA (Internet Assigned Number Authority) web site. •...
Page 294 Appendix B Common Services Table 124 Commonly Used Services (continued) NAME H.323 HTTP HTTPS ICMP IGMP (MULTICAST) User-Defined MSN Messenger NEW-ICQ NEWS NNTP PING POP3 PPTP PPTP_TUNNEL (GRE) RCMD REAL_AUDIO REXEC RLOGIN PROTOCOL PORT(S) DESCRIPTION File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail.
Page 295 Table 124 Commonly Used Services (continued) NAME PROTOCOL RTELNET RTSP TCP/UDP SFTP SMTP SNMP TCP/UDP SNMP-TRAPS TCP/UDP SQL-NET TCP/UDP STRM WORKS SYSLOG TACACS TELNET TFTP VDOLIVE GS-3012/GS-3012F User’s Guide Appendix B Common Services PORT(S) DESCRIPTION Remote Telnet. The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet.
Page 296 Appendix B Common Services GS-3012/GS-3012F User’s Guide...
Page 298: Zyxel Limited Warranty
Appendix C Legal Information FCC Warning This device has been tested and found to comply with the limits for a Class A digital switch, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This device generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications.
Page 299 condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
Page 300 Appendix C Legal Information GS-3012/GS-3012F User’s Guide...
Page 301: Appendix D Customer Support
• Sales E-mail: sales@zyxel.com.tw • Telephone: +886-3-578-3942 • Fax: +886-3-578-2439 • Web: www.zyxel.com, www.europe.zyxel.com • FTP: ftp.zyxel.com, ftp.europe.zyxel.com • Regular Mail: ZyXEL Communications Corp., 6 Innovation Road II, Science Park, Hsinchu 300, Taiwan Costa Rica • Support E-mail: soporte@zyxel.co.cr • Sales E-mail: sales@zyxel.co.cr •...
Page 302 Appendix D Customer Support • Regular Mail: ZyXEL Communications, Czech s.r.o., Modranská 621, 143 01 Praha 4 - Modrany, Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk • Telephone: +45-39-55-07-00 • Fax: +45-39-55-07-07 • Web: www.zyxel.dk • Regular Mail: ZyXEL Communications A/S, Columbusvej, 2860 Soeborg, Denmark Finland •...
Page 303 India • Support E-mail: support@zyxel.in • Sales E-mail: sales@zyxel.in • Telephone: +91-11-30888144 to +91-11-30888153 • Fax: +91-11-30888149, +91-11-26810715 • Web: http://www.zyxel.in • Regular Mail: India - ZyXEL Technology India Pvt Ltd., II-Floor, F2/9 Okhla Phase -1, New Delhi 110020, India Japan •...
Page 304 Appendix D Customer Support • Regular Mail: ZyXEL Communications Inc., 1130 N. Miller St., Anaheim, CA 92806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no • Telephone: +47-22-80-61-80 • Fax: +47-22-80-61-81 • Web: www.zyxel.no • Regular Mail: ZyXEL Communications A/S, Nils Hansens vei 13, 0667 Oslo, Norway Poland •...
Page 305 • Telephone: +44-1344-303044, 08707-555779 (UK only) • Fax: +44-1344-303034 • Web: www.zyxel.co.uk • FTP: ftp.zyxel.co.uk • Regular Mail: ZyXEL Communications UK Ltd., 11 The Courtyard, Eastern Road, Bracknell, Berkshire RG12 2XB, United Kingdom (UK) [Document Title] Appendix D Customer Support...
Page 306 Appendix D Customer Support [Document Title]...
Page 307: Index
Numerics 802.1P priority AAA (Authentication, Authorization and Accounting) access control limitations login account remote management service port SNMP accounting setup address learning, MAC Address Resolution Protocol (ARP) administrator password aggregator ID 125, 126 aging time airflow ALM LED alternative subnet mask notation applications backbone bridging...
Page 308 Index and switch passwords cluster manager 257, 261 cluster member 257, 262 cluster member firmware upgrade network example setup specification status switch models web configurator cluster manager cluster member Committed Information Rate (CIR) Common and Internal Spanning Tree, See CIST configuration change running config configuration file...
Page 309 front panel file transfer procedure restrictions over WAN GARP GARP (Generic Attribute Registration Protocol) GARP terminology GARP timer 74, 84 general features general setup getting help Gigabit ports GMT (Greenwich Mean Time) GS-3012 models GS-3012F models GVRP 84, 89 and port assignment GVRP (GARP VLAN Registration Protocol) hardware installation hardware monitor...
Page 310 Index login password login account Administrator non-administrator login accounts configuring via web configurator multiple number of login password loop guard examples port shut down setup vs STP MAC (Media Access Control) MAC address 70, 265 maximum number per port MAC address learning 74, 91, 95, 138 specify limit MAC authentication...
Page 311 network management system (NMS) NTP (RFC-1305) password administrator Peak Information Rate (PIR) PHB (Per-Hop Behavior) ping, test connection PIR (Peak Information Rate) policy 149, 150 and classifier and DiffServ configuration example overview rules 147, 148 viewing policy configuration port authentication and RADIUS IEEE802.1x 133, 172, 174...
Page 312 Index service trusted computers resetting 56, 228 to factory default settings restoring configuration 56, 230 RFC 3164 Round Robin Scheduling routing protocols RSTP rubber feet safety certifications safety warnings save configuration 55, 228 screen summary Secure Shell See SSH security service access control service port Simple Network Management Protocol, see SNMP...
Page 313 system log system reboot TACACS+ 169, 170 setup TACACS+ (Terminal Access Controller Access- Control System Plus) tagged VLAN temperature temperature indicator terminal emulation time current time zone Time (RFC-868) time server time service protocol format trademarks transceiver MultiSource Agreement (MSA) transceivers installation removal...
Page 314 Index WRR (Weighted Round Robin Scheduling) ZyNOS (ZyXEL Network Operating System) GS-3012/GS-3012F User’s Guide...

This manual is also suitable for:

Gs-3012 Gs-3012f

ZyXEL Communications GS-3012F/3012 User Manual

Chapter 1 Getting to Know Your Switch

Chapter 2 Hardware Installation and Connection

Chapter 3 Hardware Overview

Chapter 4 The Web Configurator

Chapter 5 Initial Setup Example

Chapter 6 System Status and Port Statistics

Chapter 7 Basic Setting

Chapter 8 VLAN

Chapter 9 Static MAC Forward Setup

Chapter 10 Filtering

Chapter 11 Spanning Tree Protocol

Chapter 12 Bandwidth Control

Chapter 13 Broadcast Storm Control

Chapter 14 Mirroring

Chapter 15 Link Aggregation

Chapter 16 Port Authentication

Chapter 17 Port Security

Chapter 18 Classifier

Chapter 19 Policy Rule

Chapter 20 Queuing Method

Quick Links

Troubleshooting

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for ZyXEL Communications GS-3012F/3012

Summary of Contents for ZyXEL Communications GS-3012F/3012