ZyXEL Communications XGS4600 Series User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Switch
  5. XGS4600 Series
  6. User manual

ZyXEL Communications XGS4600 Series User Manual

Layer 3 managed stackable gigabit ethernet switch
Hide thumbs Also See for XGS4600 Series:
1
2
3
Table Of Contents
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
Table of Contents

Advertisement

Quick Links

Download this manual
User's Guide
XGS4600 Series
Layer 3 Managed Stackable Gigabit Ethernet Switch
Default Login Details
Out-of-Band
MGMT Port
In-Band Ports
User Name
Password
Copyright © 2020 Zyxel Communications Corporation
http://192.168.0.1
http://DHCP-assigned IP
or
http://192.168.1.1
admin
1234
Version 4.70 Edition 1, 12/2020

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the XGS4600 Series and is the answer not in the manual?

Questions and answers

Related Manuals for ZyXEL Communications XGS4600 Series

Summary of Contents for ZyXEL Communications XGS4600 Series

  • Page 1 User’s Guide XGS4600 Series Layer 3 Managed Stackable Gigabit Ethernet Switch Default Login Details Version 4.70 Edition 1, 12/2020 Out-of-Band http://192.168.0.1 MGMT Port In-Band Ports http://DHCP-assigned IP http://192.168.1.1 User Name admin Password 1234 Copyright © 2020 Zyxel Communications Corporation...
  • Page 2 • Web Configurator Online Help Click the help icon in any screen for help in configuring that screen and supplementary information. • More Information Go to https://businessforum.zyxel.com for product discussions. Go to support.zyxel.com to find other information on the Switch XGS4600 Series User’s Guide...

  • Page 3: Document Conventions

    Figures in this user guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Generic Router Wireless Router / Access Point Generic Switch Smart TV Desktop Laptop IP Camera Printer Server XGS4600 Series User’s Guide...

  • Page 4: Table Of Contents

    IP Source Guard ..........................296 DHCP Snooping ..........................301 ARP Inspection ............................ 312 Loop Guard ............................330 VLAN Mapping ........................... 334 Layer 2 Protocol Tunneling ........................ 338 sFlow ..............................343 PPPoE ..............................347 Error-Disable ............................356 XGS4600 Series User’s Guide...
  • Page 5 ARP Table ............................579 Routing Table ............................581 Path MTU Table ........................... 584 Configure Clone ..........................585 IPv6 Neighbor Table ........................... 589 Port Status ............................591 Service Register ........................... 602 Troubleshooting and Appendices ....................604 Troubleshooting ..........................605 XGS4600 Series User’s Guide...

  • Page 6: Table Of Contents

    2.3.3 Attaching the Mounting Brackets to the Switch ............... 32 2.3.4 Mounting the Switch on a Rack ..................32 Chapter 3 Hardware Panels..........................34 3.1 Front Panel Connections ....................... 34 3.1.1 Ethernet Ports ......................... 35 3.1.2 SFP/SFP+ Slots ......................... 35 XGS4600 Series User’s Guide...
  • Page 7 6.1 Overview ............................65 6.2 How to Use DHCPv4 Snooping on the Switch ................65 6.3 How to Use DHCPv4 Relay on the Switch ..................69 6.3.1 DHCP Relay Tutorial Introduction ..................69 6.3.2 Create a VLAN ........................70 XGS4600 Series User’s Guide...
  • Page 8 8.9.9 IPv6 Router Discovery Setup ....................108 8.9.10 IPv6 Prefix Setup ........................ 110 8.9.11 IPv6 Neighbor Setup ......................111 8.9.12 DHCPv6 Client Setup ......................112 8.10 Loopback Interface ........................114 8.10.1 IPv4 Loopback Interface ....................114 XGS4600 Series User’s Guide...
  • Page 9 Static Multicast Forwarding......................150 11.1 Overview ............................. 150 11.1.1 What You Can Do ......................150 11.1.2 What You Need To Know ....................150 11.2 Configure Static Multicast Forwarding ..................151 Chapter 12 Filtering..............................153 12.1 Filtering Overview ........................153 XGS4600 Series User’s Guide...
  • Page 10 15.1.1 What You Can Do ......................184 15.2 Broadcast Storm Control Setup ....................184 Chapter 16 Mirroring............................187 16.1 Mirroring Overview ........................187 16.1.1 Remote Port Mirroring ....................... 191 16.1.2 Source ..........................191 16.1.3 Destination ......................... 193 16.1.4 Connected Port ........................ 195 XGS4600 Series User’s Guide...
  • Page 11 19.3 VLAN MAC Address Limit ......................227 Chapter 20 Time Range............................229 20.1 Time Range Overview ........................ 229 20.1.1 What You Can Do ......................229 20.2 Configuring Time Range ......................229 Chapter 21 Classifier............................231 21.1 Classifier Overview ........................231 XGS4600 Series User’s Guide...
  • Page 12 25.1 Multicast Overview ........................257 25.1.1 What You Can Do ......................257 25.1.2 What You Need to Know ....................258 25.2 Multicast Setup ........................... 261 25.3 IPv4 Multicast Status ........................261 25.3.1 IGMP Snooping ........................262 XGS4600 Series User’s Guide...
  • Page 13 Chapter 28 DHCP Snooping ..........................301 28.1 DHCP Snooping Overview ......................301 28.1.1 What You Can Do ......................301 28.2 DHCP Snooping .......................... 301 28.3 DHCP Snooping Configure ......................304 28.3.1 DHCP Snooping Port Configure ..................306 XGS4600 Series User’s Guide...
  • Page 14 31.1.2 What You Can Do ......................335 31.2 Enable VLAN Mapping ......................335 31.2.1 VLAN Mapping Configure ....................336 Chapter 32 Layer 2 Protocol Tunneling ......................338 32.1 Layer 2 Protocol Tunneling Overview ..................338 32.1.1 What You Can Do ......................338 XGS4600 Series User’s Guide...
  • Page 15 VLAN Isolation ..........................363 36.1 VLAN Isolation Overview ......................363 36.2 Configuring VLAN Isolation ......................363 Chapter 37 MAC Pinning.............................365 37.1 MAC Pinning Overview ......................365 37.2 MAC Pinning Configuration ...................... 365 Chapter 38 Private VLAN .............................368 XGS4600 Series User’s Guide...
  • Page 16 41.5 Anti-Arpscan Configure ......................406 Chapter 42 BPDU Guard ............................409 42.1 BPDU Guard Overview ....................... 409 42.1.1 What You Can Do ......................409 42.2 BPDU Guard Status ........................409 42.3 BPDU Guard Configuration ....................... 410 Chapter 43 OAM ..............................413 XGS4600 Series User’s Guide...
  • Page 17 47.3 IPv4 Static Route ......................... 436 47.4 IPv6 Static Route ......................... 437 Chapter 48 Policy Routing...........................439 48.1 Policy Route Overview ....................... 439 48.1.1 Benefits ..........................439 48.2 Configuring Policy Routing Profile ..................... 439 48.2.1 Policy Routing Rule Configuration .................. 440 XGS4600 Series User’s Guide...
  • Page 18 51.3 Configuring IGMP ........................472 Chapter 52 DVMRP...............................474 52.1 DVMRP Overview ........................474 52.2 How DVMRP Works ........................474 52.2.1 DVMRP Terminology ......................475 52.3 Configuring DVMRP ........................475 52.3.1 DVMRP Configuration Error Messages ................476 XGS4600 Series User’s Guide...
  • Page 19 55.1 VRRP Overview ........................... 501 55.2 VRRP Status ..........................502 55.3 VRRP Configuration ........................502 55.3.1 IP Interface Setup ......................502 55.3.2 VRRP Parameters ......................503 55.3.3 Configuring VRRP Parameters ..................504 55.3.4 Viewing VRRP Summary ....................505 XGS4600 Series User’s Guide...
  • Page 20 58.8.1 HTTPS Certificates ......................531 58.9 Technical Reference ........................532 58.9.1 FTP Command Line ......................532 58.9.2 Filename Conventions ...................... 532 58.9.3 FTP Command Line Procedure ..................533 58.9.4 GUI-based FTP Clients ....................... 533 58.9.5 FTP Restrictions ........................533 XGS4600 Series User’s Guide...
  • Page 21 63.1 Cluster Management Overview ....................568 63.1.1 What You Can Do ......................569 63.2 Cluster Management Status ..................... 569 63.3 Clustering Management Configuration .................. 570 63.4 Technical Reference ........................571 63.4.1 Cluster Member Switch Management ................571 XGS4600 Series User’s Guide...
  • Page 22 Configure Clone..........................585 69.1 Overview ............................. 585 69.2 Configure Clone ......................... 585 Chapter 70 IPv6 Neighbor Table.........................589 70.1 IPv6 Neighbor Table Overview ....................589 70.2 Viewing the IPv6 Neighbor Table ..................... 589 Chapter 71 Port Status ............................591 XGS4600 Series User’s Guide...
  • Page 23 73.2 Switch Access and Login ......................606 73.3 Switch Configuration ........................607 Appendix A Customer Support ..................... 609 Appendix B Common Services ...................... 615 Appendix C IPv6..........................618 Appendix D Legal Information ...................... 627 Index ..............................632 XGS4600 Series User’s Guide...

  • Page 24: User's Guide

    User’s Guide...

  • Page 25: Getting To Know Your Switch

    The Switch can work in stacking mode and directly connect to other switches. The switches then operate together and act as a single switch or a virtual chassis. The stackable switches can be managed from a master switch in the stack. XGS4600 Series User’s Guide...

  • Page 26: Zon Utility

    You can provide a super-fast uplink connection by using a Gigabit Ethernet or SFP port on the Switch. Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location. XGS4600 Series User’s Guide...

  • Page 27: High Performance Switching Example

    Switch. Use the 10 Gigabit uplink ports to provide high speed access to a data server and the Internet. The uplink ports support a fiber-optic connection which alleviates the distance limitations of copper cabling. XGS4600 Series User’s Guide...

  • Page 28: Ieee 802.1Q Vlan Application Examples

    Shared resources such as a server can be used by all ports in the same VLAN as the server. In the following figure only ports that need access to the server need to be part of VLAN 1. Ports can belong to other VLAN groups too. Figure 5 Shared Server Using VLAN Example XGS4600 Series User’s Guide...

  • Page 29: Ipv6 Support

    Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. XGS4600 Series User’s Guide...

  • Page 30: Hardware Installation And Connection

    Remove the adhesive backing from the rubber feet. Attach the rubber feet to each corner on the bottom of the Switch. These rubber feet help protect the Switch from shock or vibration and ensure space between devices when stacking. XGS4600 Series User’s Guide...

  • Page 31: Mounting The Switch On A Rack

    21.5 kg. • Make sure the position of the Switch does not make the rack unstable or top-heavy. Take all necessary precautions to anchor the rack securely before installing the unit. XGS4600 Series User’s Guide...

  • Page 32: Attaching The Mounting Brackets To The Switch

    Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the rack. Figure 8 Mounting the Switch on a Rack XGS4600 Series User’s Guide...
  • Page 33 Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. Note: Make sure you tighten all the four screws to prevent the Switch from getting slanted. Repeat steps to attach the second mounting bracket on the other side of the rack. XGS4600 Series User’s Guide...

  • Page 34: Hardware Panels

    Four 1000Base-T Ports: Connect these ports to a computer, an Ethernet switch or router. • Four SFP Slots: Use Small Form-Factor Pluggable (SFP) transceivers in these ports for fiber connections to an Ethernet switch or router. XGS4600 Series User’s Guide...

  • Page 35: Ethernet Ports

    Use a transceiver to connect a fiber cable to the Switch. The Switch does not come with transceivers. You must use transceivers that comply XGS4600 Series User’s Guide...
  • Page 36 Remove the dust plugs from the transceiver and cables (dust plug styles vary). Identify the signal transmission direction of the fiber cables and the transceiver. Insert the fiber cable into the transceiver. Figure 12 Latch in the Lock Position XGS4600 Series User’s Guide...
  • Page 37 If unsuccessful, contact Zyxel Support to prevent damage to your Switch and transceiver. Insert the dust plug into the ports on the transceiver and the cables. Figure 15 Removing the Fiber Cables Figure 16 Opening the Transceiver’s Latch Example XGS4600 Series User’s Guide...

  • Page 38: Dual Personality Interfaces

    The following figures show the rear panels of the Switch. The rear panels contain: • Two power modules with power receptacles (A and B) • XGS4600-52F: A console port for configuring the Switch using the command line interface Figure 18 Rear Panel: XGS4600-32 XGS4600 Series User’s Guide...

  • Page 39: Grounding

    Note: The specification for surge or ESD protection assumes that the Switch is properly grounded. Remove the M4 ground screw from the Switch’s rear panel. Secure a green or yellow ground cable (16 AWG or smaller) to the Switch's rear panel using the M4 ground screw. XGS4600 Series User’s Guide...
  • Page 40 10 ohms, or according to your country’s electrical regulations. Figure 24 Connecting to the Building’s Main Grounding Electrode If you are uncertain that suitable grounding is available, contact the appropriate electrical inspection XGS4600 Series User’s Guide...

  • Page 41: Ac Power Connection (Ac Models Only)

    (bare) wire can be seen or touched. Exposed power wire is dangerous. Use extreme care when connecting a DC power source to the device. To connect a power supply: XGS4600 Series User’s Guide...

  • Page 42: Leds

    The Switch is acting as a non-master member in a stack or it is in standalone mode. Amber There is an error occurred when the Switch is selected as the master member in a stack. 10/100/1000Base-T Ethernet Ports XGS4600 Series User’s Guide...
  • Page 43 The MGMT port is not connected to an Ethernet device, or the port is disabled. STACK ID The LED is showing the Stack ID number of the Switch. ID 0 means it is a standalone Switch. XGS4600 Series User’s Guide...

  • Page 44: Technical Reference

    Technical Reference...

  • Page 45: Web Configurator

    Also, you can use the ZON Utility to check your Switch’s IP address. See Section 4.3 on page 48 for more information on the ZON utility. The following screen appears. XGS4600 Series User’s Guide...
  • Page 46 Web Configurator. Click Password / SNMP to open a screen where you can change the administrator password and SNMP community string simultaneously. Otherwise, click Ignore to close it. Password/SNMP Setting Figure 26 Web Configurator: Warning XGS4600 Series User’s Guide...
  • Page 47 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 48: Zyxel One Network (Zon) Utility

    Double-click the ZON Utility to run it. The first time you run the ZON Utility, you will see if your device and firmware version support the ZON Utility. Click the OK button to close this screen. XGS4600 Series User’s Guide...
  • Page 49 If your device is not listed here, see the device release notes for ZON Utility support. The release notes are in the firmware zip file on the Zyxel web site. Figure 29 ZON Utility Screen XGS4600 Series User’s Guide...
  • Page 50 Select a device and then use the icons to perform actions. Some functions may not be available for your devices. Note: You must know the selected device admin password before taking actions on the device using the ZON Utility icons. XGS4600 Series User’s Guide...
  • Page 51 This field displays an icon of the kind of device discovered. Model This field displays the model name of the discovered device. Firmware Version This field displays the firmware version of the discovered device. MAC Address This field displays the MAC address of the discovered device. XGS4600 Series User’s Guide...

  • Page 52: Web Configurator Layout

    The Status screen is the first screen that displays when you access the Web Configurator. This guide uses the XGS4600-32F and XGS4600-52F screens as examples. The screens may vary slightly for different models. The following figure shows the navigating components of a Web Configurator screen. XGS4600 Series User’s Guide...
  • Page 53 Click this link to go to the Neighbor screen where you can see and manage neighbor devices – learned by the Switch. In the navigation panel, click a main link to reveal a list of sub-menu links. XGS4600 Series User’s Guide...
  • Page 54 MAC address learning, GARP and priority queues. IP Setup This link takes you to a screen where you can configure the IP address, subnet mask (necessary for Switch management) and set up to 128 IP routing domains. XGS4600 Series User’s Guide...
  • Page 55 (Remote Authentication Dial-In User Service) or TACACS+ (Terminal Access Controller Access- Control System Plus). IP Source Guard This link takes you to screens where you can configure filtering of unauthorized DHCP and ARP packets in your network. XGS4600 Series User’s Guide...
  • Page 56 This link takes you to a screen where you can configure the DVMRP (Distance Vector Multicast Routing Protocol) settings. DiffServ This link takes you to screens where you can enable DiffServ, configure marking rules and set DSCP-to-IEEE802.1p mappings. XGS4600 Series User’s Guide...

  • Page 57: Change Your Password

    This link takes you to a screen where you can view the status of your service registrations and upgrade licenses. 4.4.1 Change Your Password After you log in for the first time, it is recommended you change the default administrator password. Click Management > Access Control > Logins to display the next screen. XGS4600 Series User’s Guide...

  • Page 58: Save Your Configuration

    Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the management port of the Switch. Filter all traffic to the CPU port. Disable all ports. Misconfigure the text configuration file. Forget the password and/or IP address. Prevent all services from accessing the Switch. XGS4600 Series User’s Guide...

  • Page 59: Reset The Switch

    Type atlc after the “Enter Debug Mode” message. Wait for the “Starting XMODEM upload” message before activating XMODEM upload on your terminal. After a configuration file upload, type atgo to restart the Switch. XGS4600 Series User’s Guide...

  • Page 60: Log Out Of The Web Configurator

    Figure 37 Web Configurator: Logout Screen 4.9 Help The Web Configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a Web Configurator screen to view an online help description of that screen. XGS4600 Series User’s Guide...

  • Page 61: Initial Setup Example

    In this example, you want to configure port 1 as a member of VLAN 2. Figure 38 Initial Setup Network Example: VLAN Click Advanced Application > VLAN > VLAN Configuration in the navigation panel and click the Static VLAN Setup link. XGS4600 Series User’s Guide...

  • Page 62: Set Port Vid

    VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on that port get sent to VLAN 2. Figure 39 Initial Setup Network Example: Port VID XGS4600 Series User’s Guide...

  • Page 63: Configure Switch Management Ip Address

    Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the Web Configurator. See Section 4.2 on page 45 for more information. Click Basic Setting > IP Setup > IP Configuration in the navigation panel. XGS4600 Series User’s Guide...
  • Page 64 This is the same as the VLAN ID you configure in the Static VLAN screen. Click Add to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XGS4600 Series User’s Guide...

  • Page 65: Tutorials

    1 and 100 DHCP Client (B) 1 and 100 DHCP Client (C) 1 and 100 Access the Switch through http://192.168.1.1 by default. Log into the Switch by entering the user name (default: admin) and password (default: 1234). XGS4600 Series User’s Guide...
  • Page 66 Go to Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup, and set the PVID of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. Figure 43 Tutorial: Tag Untagged Frames XGS4600 Series User’s Guide...
  • Page 67 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Trusted state field for port 5 because the DHCP server is connected to port 5. Keep ports 6 and 7 Untrusted because they are connected to DHCP clients. Click Apply. XGS4600 Series User’s Guide...
  • Page 68 If you want to add more information in the DHCP request packets such as source VLAN ID or system name, you can also select an Option82 Profile in the entry. Figure 46 Tutorial: Enable DHCP Snooping on this VLAN XGS4600 Series User’s Guide...

  • Page 69: How To Use Dhcpv4 Relay On The Switch

    IP address (say 172.16.1.18) to DHCP client A based on the system name, VLAN ID and port number in the DHCP request. Client A connects to the Switch’s port 2 in VLAN 102. Figure 48 Tutorial: DHCP Relay Scenario XGS4600 Series User’s Guide...

  • Page 70: Create A Vlan

    Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending. Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XGS4600 Series User’s Guide...
  • Page 71 Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory. XGS4600 Series User’s Guide...

  • Page 72: Configure Dhcpv4 Relay

    Figure 53 Tutorial: Set DHCP Server and Relay Information Click the Save link in the upper right of the Web Configurator to save your configuration permanently. The DHCP server can then assign a specific IP address based on the DHCP request. XGS4600 Series User’s Guide...

  • Page 73: Troubleshooting

    Switch load this auto configuration file, two conditions listed above must be met. Please refer to the following steps to see how to set up a Vendor Class Identifier on the Switch. Setting up a TFTP Server Select a directory on the TFTP server. Put the configuration files in that directory. XGS4600 Series User’s Guide...
  • Page 74 Basic Setting > IP Setup > IP Configuration screen, select the check box in the Option-60 field, and enter a Vendor Class Identifier in the Class-ID field. In this example, we use “ZyxelCorp”. Click Apply to save your changes. XGS4600 Series User’s Guide...
  • Page 75 Click the same button next to Reboot System field to reboot the Switch, and load the auto configuration setting as configured before. For example, if you save the auto configuration setting to Config 1, you need to click the Config 1 button next to the Reboot System field. XGS4600 Series User’s Guide...
  • Page 76 Check the screens to see if it is the configuration file you want to load. If it is not, go through the steps above to check your configurations. If it is, click Save at the top right corner of the Web Configurator to save the configuration permanently. Figure 59 Tutorial: Save XGS4600 Series User’s Guide...

  • Page 77: Status

    7.2 Status The Status screen displays when you log into the Switch or click Status at the top right of the Web Configurator. The Status screen displays general device information, system status, and its IP addresses. XGS4600 Series User’s Guide...
  • Page 78 This field displays the serial number of this Switch. The serial number is used for device tracking and control. Registration This field displays the MAC address of the Switch that you must use to register at myZyxel.com or MAC Address the NCC (Nebula Control Center). XGS4600 Series User’s Guide...

  • Page 79: Neighbor Screen

    This screen shows the neighboring device first recognized on an Ethernet port of the Switch. Device information is displayed in gray when the neighboring device is offline. Click Status > Neighbor to see the following screen. XGS4600 Series User’s Guide...

  • Page 80: Neighbor Detail

    Click the Flush button to remove information about neighbors learned on the selected ports. 7.2.2 Neighbor Detail Use this screen to view detailed information about the neighboring devices. Device information is displayed in gray when the neighboring device is currently offline. XGS4600 Series User’s Guide...
  • Page 81 This shows the model name of the neighbor device. This field will show “–” for devices that do not support the ZON utility. Firmware This shows the firmware version of the neighbor device. This field will show “–” for devices that do not support the ZON utility. XGS4600 Series User’s Guide...
  • Page 82 This shows the description of the neighbor device’s port which is connected to the Switch. Location This shows the geographic location of the neighbor device. This field will show “–” for devices that do not support the ZON utility. XGS4600 Series User’s Guide...

  • Page 83: Basic Setting

    115) to view and configure stacking system for the Switch. 8.2 System Information In the navigation panel, click Basic Setting > System Info to display the screen as shown. Use this screen to view general system information. XGS4600 Series User’s Guide...
  • Page 84 Chapter 8 Basic Setting Figure 63 Basic Setting > System Info (Standalone Mode) Figure 64 Basic Setting > System Info (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 85 This field displays the maximum voltage measured at this point. This field displays the minimum voltage measured at this point. Threshold This field displays the percentage tolerance of the voltage with which the Switch still works. XGS4600 Series User’s Guide...

  • Page 86: System Information Stacking Hardware Monitor

    8.2.1 System Information Stacking Hardware Monitor Click a slot number in the System Information screen to display more detailed hardware information on a Switch. Figure 65 Basic Setting > System Info > Hardware Monitor (Stacking Mode) XGS4600 Series User’s Guide...

  • Page 87: General Setup

    Active indicates the Switch is currently operating from the power source. Otherwise, N/A is displayed. 8.3 General Setup Use this screen to configure general settings such as the system name and time. Click Basic Setting > General Setup in the navigation panel to display the screen as shown. XGS4600 Series User’s Guide...
  • Page 88 Enter the new time in hour, minute and second format. The new time then appears in the (hh:min:ss) Current Time field after you click Apply. Current Date This field displays the date you open this menu. XGS4600 Series User’s Guide...

  • Page 89: Introduction To Vlans

    VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain. In traditional switched environments, all broadcast packets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain. XGS4600 Series User’s Guide...

  • Page 90: Switch Setup

    802.1Q or Port Based in the VLAN Type field in this screen. Figure 67 Basic Setting Switch Setup (Standalone Mode) Figure 68 Basic Setting > Switch Setup (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 91 Priority 2 This is for “spare bandwidth”. Priority 1 This is typically used for non-critical “background” traffic such as bulk transfers that are allowed but that should not affect other applications and users. XGS4600 Series User’s Guide...

  • Page 92: Ip Setup

    Note: You must configure a VLAN first. Each VLAN can have multiple management IP addresses, and you can log into the Switch through different management IP addresses simultaneously. 8.6.2 IP Status Figure 69 Basic Setting > IP Status XGS4600 Series User’s Guide...

  • Page 93: Ip Status Details

    IP Address This is the IP address of your Switch in dotted decimal notation for example 192.168.1.1. IP Subnet Mask This is the IP subnet mask of your Switch in dotted decimal notation for example 255.255.255.0. XGS4600 Series User’s Guide...

  • Page 94: Ip Configuration

    This displays the IP address of the primary and secondary DNS servers assigned by the DHCP server. 0.0.0.0 means no DNS server is assigned. 8.6.4 IP Configuration Use this screen to configure the default gateway device, the default domain name server and add IP domains. XGS4600 Series User’s Guide...
  • Page 95 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to your previous configuration. XGS4600 Series User’s Guide...
  • Page 96 This field displays the VLAN identification number of the IP domain on the Switch. Type This field displays the type of IP address status. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XGS4600 Series User’s Guide...

  • Page 97: Port Setup

    Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the configuration screen. Figure 73 Basic Setting > Port Setup (Standalone Mode) Figure 74 Basic Setting > Port Setup (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 98 Select Rx to allow the connected device to send a pause signal to the Switch. The Switch will temporarily stop sending signals. Otherwise, select Disable. 802.1p Priority This priority value is added to incoming frames without a (802.1p) priority queue tag. XGS4600 Series User’s Guide...

  • Page 99: Interface Setup

    Use this screen to set IPv4 loopback interfaces for routing protocols or IPv6 interfaces on which you can configure an IPv6 address to access and manage the Switch. Click Basic Setting > Interface Setup in the navigation panel to display the configuration screen. Figure 75 Basic Setting > Interface Setup XGS4600 Series User’s Guide...

  • Page 100: Ipv6

    Use this screen to view the IPv6 interface status and configure the Switch’s management IPv6 addresses. 8.9.1 IPv6 Status Click Basic Setting > IPv6 in the navigation panel to display the IPv6 status screen as shown next. Figure 76 Basic Setting > IPv6 XGS4600 Series User’s Guide...

  • Page 101: Ipv6 Interface Status

    Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the Basic Setting > IPv6 screen. The following screen opens. Figure 77 Basic Setting > IPv6 > IPv6 Interface Status XGS4600 Series User’s Guide...
  • Page 102 Rebind when the Switch does not receive a response from the original DHCPv6 server and sends out a Rebind message to another DHCPv6 server. This field displays the DHCPv6 server’s unique ID. Address This field displays the Switch’s global address which is assigned by the DHCPv6 server. XGS4600 Series User’s Guide...

  • Page 103: Ipv6 Configuration

    Click the link to go to a screen where you can configure the IPv6 router discovery settings. Discovery Setup IPv6 Prefix Setup Click the link to go to a screen where you can configure the Switch’s IPv6 prefix list. XGS4600 Series User’s Guide...

  • Page 104: Ipv6 Global Setup

    Click Clear to reset the fields to the factory defaults. 8.9.5 IPv6 Interface Setup Use this screen to turn on or off an IPv6 interface. Click the link next to IPv6 Interface Setup in the IPv6 Configuration screen to display the screen as shown next. XGS4600 Series User’s Guide...

  • Page 105: Ipv6 Link-Local Address Setup

    Use this screen to configure the interface’s link-local address and default gateway. Click the link next to IPv6 Link-Local Address Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 81 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Link-Local Address Setup XGS4600 Series User’s Guide...

  • Page 106: Ipv6 Global Address Setup

    Use this screen to configure the interface’s IPv6 global address. Click the link next to IPv6 Global Address Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 82 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Global Address Setup XGS4600 Series User’s Guide...

  • Page 107: Ipv6 Neighbor Discovery Setup

    8.9.8 IPv6 Neighbor Discovery Setup Use this screen to configure neighbor discovery settings for each interface. Click the link next to IPv6 Neighbor Discovery Setup in the IPv6 Configuration screen to display the screen as shown next. XGS4600 Series User’s Guide...

  • Page 108: Ipv6 Router Discovery Setup

    8.9.9 IPv6 Router Discovery Setup Use this screen to configure router discovery settings for each interface. Click the link next to IPv6 Router Discovery Setup in the IPv6 Configuration screen to display the screen as shown next. XGS4600 Series User’s Guide...
  • Page 109 This is the interface index number. Click an index number to change the settings. Interface This is the name of the IPv6 interface you created. Flags This field displays whether IPv6 hosts use DHCPv6 to obtain IPv6 stateful addresses (M) and/ or additional configuration settings (O). XGS4600 Series User’s Guide...

  • Page 110: Ipv6 Prefix Setup

    Specify how long (from 0 to 4294967295 seconds) the prefix is valid for on-link determination. Preferred Lifetime Specify how long (from 0 to 4294967295 seconds) that addresses generated from the prefix remain preferred. The preferred lifetime cannot exceed the valid lifetime. XGS4600 Series User’s Guide...

  • Page 111: Ipv6 Neighbor Setup

    Click the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 86 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Neighbor Setup XGS4600 Series User’s Guide...

  • Page 112: Dhcpv6 Client Setup

    Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Click the link next to DHCPv6 Client Setup in the IPv6 Configuration screen to display the screen as shown next. XGS4600 Series User’s Guide...
  • Page 113 This field displays whether the Switch obtains a list of domain names from the DHCP server. Information This field displays the time interval (in seconds) at which the Switch exchanges other configuration Refresh information with a DHCPv6 server again. Minimum XGS4600 Series User’s Guide...

  • Page 114: Loopback Interface

    Enter the IP address of your Switch in dotted decimal notation, for example, 192.168.1.1. This is the IP address of the Switch in an IP routing domain. IP Subnet Mask Enter the IP subnet mask of an IP routing domain in dotted decimal notation, for example, 255.255.255.0. XGS4600 Series User’s Guide...

  • Page 115: Stacking

    You can manage each Switch in the stack from a master Switch using its Web Configurator or console. Each Switch supports up to two stacking channels. Use the master Switch to assign a ‘slot ID’ for each ‘linecard’ non-master Switch. ‘Slot’ refers to a Switch in the ‘virtual chassis’ stack. XGS4600 Series User’s Guide...

  • Page 116: Stacking Status

    ‘Slot’ refers to a Switch in the ‘virtual chassis’ stack. This field displays the slot ID of the stacked Switch. You can click the ID number to go to the Stacking Slot Status screen. Name This field displays the model name of the stacked Switch XGS4600 Series User’s Guide...

  • Page 117: Stacking Slot

    This field displays the slot ID of the Switch. Stacking This field displays whether the Switch is active in the stacking system. Role This field displays whether the stacked Switch is a master, backup or linecard Switch XGS4600 Series User’s Guide...

  • Page 118: Stacking Configuration

    Switch with the longest up-time is selected. Uptime is measured in increments of 10 minutes. The Switch with the higher number of increments is selected. If they have the same uptime, then the Switch with the lowest MAC address will be the master. XGS4600 Series User’s Guide...
  • Page 119 Repeat steps 4 to 6 to connect other Switches to the stack. When the Switch is in Stacking mode, the Web Configurator will change port and VLAN port settings to support the stacking mode. Click Basic Setting > Stacking > Configuration to see the following screen. XGS4600 Series User’s Guide...
  • Page 120 Freeze or select an ID in the Slot ID After Reboot list box. Apply Click Apply to save the Slot ID After Reboot field. Cancel Click Cancel to clear the Slot ID After Reboot field. XGS4600 Series User’s Guide...

  • Page 121: Vlan

    You can specify a mask for the MAC address to create a MAC address filter and enter a weight to set the VLAN rule’s priority. 9.1.2 What You Need to Know Read this section to know more about VLAN and how to configure the screens. XGS4600 Series User’s Guide...

  • Page 122: Introduction To Ieee 802.1Q Tagged Vlans

    Switches join VLANs by making a declaration. A declaration is made by issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message terminates all registrations. GARP timers set declaration timeout values. XGS4600 Series User’s Guide...
  • Page 123 (A and B). C, D and E automatically allow frames with VLAN group tags 1 and 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking ports. Figure 95 Port VLAN Trunking XGS4600 Series User’s Guide...

  • Page 124: Vlan Status

    You can also tag all outgoing frames (that were previously untagged) from a port with the specified VID. 9.3 VLAN Status Use this screen to view and search all static VLAN groups. Click Advanced Application > VLAN from the navigation panel to display the VLAN Status screen as shown next. XGS4600 Series User’s Guide...

  • Page 125: Vlan Details

    Click Previous or Next to show the previous or next screen if all status information cannot be seen in one screen. 9.3.1 VLAN Details Use this screen to view detailed port settings and status of the static VLAN group. Click an index number in the VLAN Status screen to display VLAN details. XGS4600 Series User’s Guide...

  • Page 126: Private Vlan Status

    MVR – added through Multicast VLAN Registration (MVR) 9.4 Private VLAN Status Use this screen to view all private VLANs created on the Switch. Click Advanced Application > VLAN > Private VLAN Status to see the following screen. XGS4600 Series User’s Guide...

  • Page 127: Vlan Configuration

    Click Click Here to configure the Subnet Based VLAN for the Switch. Protocol Based VLAN Setup Click Click Here to configure the Protocol Based VLAN for the Switch. Voice VLAN Setup Click Click Here to configure the Voice VLAN for the Switch. XGS4600 Series User’s Guide...

  • Page 128: Configure A Static Vlan

    Use this screen to configure a static VLAN for the Switch. Click the Static VLAN Setup link in the VLAN Configuration screen to display the screen as shown next. Figure 102 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 129 51–53 includes 51, 52 and 53, but 51,53 does not include 52. Secondary private VLANs can only be associated with one primary private VLAN. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XGS4600 Series User’s Guide...

  • Page 130: Configure Vlan Port Settings

    Click Cancel to clear the check boxes. 9.7 Configure VLAN Port Settings Use this screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click the VLAN Port Setup link in the VLAN Configuration screen. XGS4600 Series User’s Guide...
  • Page 131 Chapter 9 VLAN Figure 104 Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup (Standalone Mode) Figure 105 Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup (Stacking Mode) XGS4600 Series User’s Guide...

  • Page 132: Subnet Based Vlans

    Subnet based VLANs allow you to group traffic into logical VLANs based on the source IP subnet you specify. When a frame is received on a port, the Switch checks if a tag is added already and the IP XGS4600 Series User’s Guide...

  • Page 133: Configuring Subnet Based Vlan

    Figure 106 Subnet Based VLAN Application Example 9.8.1 Configuring Subnet Based VLAN Click the Subnet Based VLAN Setup link in the VLAN Configuration screen to display the configuration screen as shown. XGS4600 Series User’s Guide...
  • Page 134 This is the index number identifying this subnet based VLAN. Click on any of these numbers to edit an existing subnet based VLAN. Active This field shows whether the subnet based VLAN is active or not. XGS4600 Series User’s Guide...

  • Page 135: Protocol Based Vlans

    C. Figure 108 Protocol Based VLAN Application Example 9.9.1 Configuring Protocol Based VLAN Click the Protocol Based VLAN Setup link in the VLAN Configuration screen to display the configuration screen as shown. XGS4600 Series User’s Guide...
  • Page 136 Enter the ID of a VLAN to which the port belongs. This must be an existing VLAN which you defined in the Advanced Application > VLAN > Static VLAN screen. Priority Select the priority level that the Switch will assign to frames belonging to this VLAN. XGS4600 Series User’s Guide...
  • Page 137 Select the protocol. Leave the default value IP. Type the VLAN ID of an existing VLAN. In our example we already created a static VLAN with an ID of 5. Type 5. Leave the priority set to 0 and click Add. XGS4600 Series User’s Guide...

  • Page 138: Voice Vlan

    You can set priority level to the Voice VLAN and add MAC address of IP phones from specific manufacturers by using its ID from the Organizationally Unique Identifiers (OUI). Click the Voice VLAN Setup link in the VLAN Configuration screen to display the configuration screen as shown. XGS4600 Series User’s Guide...
  • Page 139 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this section afresh. Index This field displays the index number of the Voice VLAN. XGS4600 Series User’s Guide...

  • Page 140: Mac Based Vlan

    Type an ID (from 1 to 4094) for the VLAN that is associated with the MAC-based VLAN entry. Priority Type a priority (0 to 7) that the Switch assigns to frames belonging to this VLAN. The higher the numeric value you assign, the higher the priority for this MAC-based VLAN entry. XGS4600 Series User’s Guide...

  • Page 141: Vendor Id Based Vlan

    As rules are processed one after the other, stating a priority order will let you choose which rule has to be applied first and which second. Click the Vendor ID Based VLAN Setup link in the VLAN Configuration screen to see the following screen. XGS4600 Series User’s Guide...
  • Page 142 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XGS4600 Series User’s Guide...

  • Page 143: Port-Based Vlan Setup

    If VLAN members need to communicate directly with each other, then select All Connected. Select Port Isolated if you want to restrict users from communicating directly. Click Apply to save your settings. The following screen shows users on a port-based, all-connected VLAN configuration. XGS4600 Series User’s Guide...
  • Page 144 Chapter 9 VLAN Figure 115 Advanced Application > VLAN > Port Based VLAN Setup (All Connected) The following screen shows users on a port-based, port-isolated VLAN configuration. XGS4600 Series User’s Guide...
  • Page 145 (its outgoing port). CPU refers to the Switch management port. By default it forms a VLAN with all Ethernet ports. If it does not form a VLAN with a particular port then the Switch cannot be managed from that port. XGS4600 Series User’s Guide...
  • Page 146 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 147: Static Mac Forwarding

    This may reduce the need for broadcasting. Click Advanced Application > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. Figure 117 Advanced Application > Static MAC Forwarding (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 148 In stacking mode, the first number represents the slot ID and the second is the port number. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XGS4600 Series User’s Guide...
  • Page 149 Chapter 10 Static MAC Forwarding Table 54 Advanced Application > Static MAC Forwarding (continued) LABEL DESCRIPTION Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XGS4600 Series User’s Guide...

  • Page 150: Static Multicast Forwarding

    Figure 120 on page shows frames being forwarded to devices connected to port 3. Figure 121 on page 151 shows frames being forwarded to ports 2 and 3 within VLAN group 4. Figure 119 No Static Multicast Forwarding XGS4600 Series User’s Guide...

  • Page 151: Configure Static Multicast Forwarding

    Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific ports. Click Advanced Application > Static Multicast Forwarding to display the configuration screen as shown. Figure 122 Advanced Application > Static Multicast Forwarding XGS4600 Series User’s Guide...
  • Page 152 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XGS4600 Series User’s Guide...

  • Page 153: Filtering

    12.2 Configure a Filtering Rule Use this screen to create rules for traffic going through the Switch. Click Advanced Application > Filtering in the navigation panel to display the screen as shown next. Figure 123 Advanced Application > Filtering XGS4600 Series User’s Guide...
  • Page 154 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rules that you want to remove and then click the Delete button. Cancel Click Cancel to clear the selected check boxes. XGS4600 Series User’s Guide...

  • Page 155: Spanning Tree Protocol

    It allows a switch to interact with other (R)STP-compliant switches in your network to ensure that only one path exists between any two stations on the network. The Switch uses IEEE 802.1w RSTP (Rapid Spanning Tree Protocol) that allows faster convergence of the XGS4600 Series User’s Guide...
  • Page 156 STP Port States STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from XGS4600 Series User’s Guide...
  • Page 157 • A VLAN can be mapped to a specific Multiple Spanning Tree Instance (MSTI). MSTI allows multiple VLANs to use the same spanning tree. • Load-balancing is possible as traffic from different VLANs can use distinct paths in a region. XGS4600 Series User’s Guide...

  • Page 158: Spanning Tree Protocol Status

    Use the Spanning Tree Configuration screen to activate one of the STP modes on the Switch. Click Configuration in the Advanced Application > Spanning Tree Protocol. Figure 127 Advanced Application > Spanning Tree Protocol > Configuration XGS4600 Series User’s Guide...

  • Page 159: Rapid Spanning Tree Protocol Status

    RSTP. Note: This screen is only available after you activate RSTP on the Switch. Figure 128 Advanced Application > Spanning Tree Protocol (Standalone Mode) Figure 129 Advanced Application > Spanning Tree Protocol (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 160 LAN segment to which this port is connected. Designated Port ID This field displays the priority and number of the bridge port (on the designated bridge), through which the designated bridge transmits the stored configuration messages. XGS4600 Series User’s Guide...

  • Page 161: Configure Rapid Spanning Tree Protocol

    Use this screen to configure RSTP settings, see Section 13.1 on page 155 for more information on RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 130 Advanced Application > Spanning Tree Protocol > RSTP (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 162 LAN. If it is a root port, a new root port is selected from among the Switch ports attached to the network. The allowed range is 6 to 40 seconds. XGS4600 Series User’s Guide...

  • Page 163: Configure Multiple Spanning Tree Protocol

    Cancel Click Cancel to begin configuring this screen afresh. 13.6 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen. XGS4600 Series User’s Guide...
  • Page 164 Chapter 13 Spanning Tree Protocol Figure 132 Advanced Application > Spanning Tree Protocol > MSTP (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 165 Spanning Tree Protocol > Configuration screen to enable MSTP on the Switch. Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. The allowed range is 1 to 10 seconds. XGS4600 Series User’s Guide...
  • Page 166 Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this check box to add this port to the MST instance. XGS4600 Series User’s Guide...

  • Page 167: Multiple Spanning Tree Protocol Port Configuration

    Click Cancel to clear the selected check boxes. 13.6.1 Multiple Spanning Tree Protocol Port Configuration Click Advanced Application > Spanning Tree Protocol > MSTP > Port in the navigation panel to display the status screen as shown next. XGS4600 Series User’s Guide...
  • Page 168 Chapter 13 Spanning Tree Protocol Figure 134 Advanced Application > Spanning Tree Protocol > MSTP > Port (Standalone Mode) Figure 135 Advanced Application > Spanning Tree Protocol > MSTP > Port (Stacking Mode) XGS4600 Series User’s Guide...

  • Page 169: Multiple Spanning Tree Protocol Status

    13.7 Multiple Spanning Tree Protocol Status Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. Note: This screen is only available after you activate MSTP on the Switch. XGS4600 Series User’s Guide...
  • Page 170 Chapter 13 Spanning Tree Protocol Figure 136 Advanced Application > Spanning Tree Protocol (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 171 This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. Configuration This field displays the configuration name for this MST region. Name Revision Number This field displays the revision number for this MST region. XGS4600 Series User’s Guide...
  • Page 172 LAN segment to which this port is connected. Designated Port ID This field displays the priority and number of the bridge port (on the designated bridge), through which the designated bridge transmits the stored configuration messages. XGS4600 Series User’s Guide...

  • Page 173: Configure Multiple Rapid Spanning Tree Protocol

    Forwarding – the Switch unblocks and allows the port to forward frames again. 13.8 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click MRSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 138 Advanced Application > Spanning Tree Protocol > MRSTP (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 174 LAN. If it is a root port, a new root port is selected from among the Switch ports attached to the network. The allowed range is 6 to 40 seconds. XGS4600 Series User’s Guide...

  • Page 175: Multiple Rapid Spanning Tree Protocol Status

    13.9 Multiple Rapid Spanning Tree Protocol Status Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.9 on page 175 for more information on MRSTP. XGS4600 Series User’s Guide...
  • Page 176 (second) message. The root bridge determines Hello Time, Max Age and Forwarding Delay. Max Age (second) This is the maximum time (in seconds) the Switch can wait without receiving a configuration message before attempting to reconfigure. XGS4600 Series User’s Guide...
  • Page 177 This field displays the state of the port on which root guard is enabled. • Root – inconsistent – the Switch receives superior BPDUs on the port and blocks the port. • Forwarding – the Switch unblocks and allows the port to forward frames again. XGS4600 Series User’s Guide...

  • Page 178: Technical Reference

    Devices that belong to the same MST region are configured to have the same MSTP configuration identification settings. These include the following parameters: • Name of the MST region • Revision level as the unique number for the MST region XGS4600 Series User’s Guide...

  • Page 179: Mst Instance

    CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. XGS4600 Series User’s Guide...
  • Page 180 Chapter 13 Spanning Tree Protocol Figure 145 MSTP and Legacy RSTP Network Example XGS4600 Series User’s Guide...

  • Page 181: Bandwidth Control

    Note: The sum of CIRs cannot be greater than or equal to the uplink bandwidth. 14.2 Bandwidth Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. XGS4600 Series User’s Guide...
  • Page 182 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last two ports of your Switch) cannot be configured. They are reserved for stacking only. XGS4600 Series User’s Guide...
  • Page 183 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XGS4600 Series User’s Guide...

  • Page 184: Broadcast Storm Control

    (DLF) packets the Switch receives per second on the ports. 15.2 Broadcast Storm Control Setup Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. XGS4600 Series User’s Guide...
  • Page 185 Select this check box to enable traffic storm control on the Switch. Clear this check box to disable this feature. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XGS4600 Series User’s Guide...
  • Page 186 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XGS4600 Series User’s Guide...

  • Page 187: Mirroring

    VLAN tagging and copied to the connected ports. Traffic are then carried over the specified remote port mirroring (RMirror) VLAN and sent to the destination device’s monitor port through the connected ports that connect to other switches. XGS4600 Series User’s Guide...
  • Page 188 Click Advanced Application > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. XGS4600 Series User’s Guide...
  • Page 189 Chapter 16 Mirroring Figure 150 Advanced Application > Mirroring (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 190 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XGS4600 Series User’s Guide...

  • Page 191: Remote Port Mirroring

    Use this screen to configure the reflector port and specify the traffic flow to be copied to the monitor port when the Switch is the source device in remote port mirroring. Click the Source link in the RMirror screen. The following screen opens. XGS4600 Series User’s Guide...
  • Page 192 Chapter 16 Mirroring Figure 153 Advanced Application > Mirroring > RMirror > Source (Standalone Mode) Figure 154 Advanced Application > Mirroring > RMirror > Source (Stacking Mode) XGS4600 Series User’s Guide...

  • Page 193: Destination

    Use this screen to specify the RMirror VLAN and configure the monitor port when the Switch is the destination device in remote port mirroring. Click the Destination link in the RMirror screen. The following screen opens. XGS4600 Series User’s Guide...
  • Page 194 Delete Check the rules that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 195: Connected Port

    RMirror VLAN. Click the Connected Port link in the RMirror screen. The following screen opens. Figure 157 Advanced Application > Mirroring > RMirror > Connected Port (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 196 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...
  • Page 197 VLAN This field displays the ID number of port mirroring VLAN over which the mirrored traffic is forwarded. Connected Port This field displays the number of ports that helps forward mirrored traffic to other connected switches. XGS4600 Series User’s Guide...

  • Page 198: Link Aggregation

    When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that is, if an XGS4600 Series User’s Guide...

  • Page 199: Link Aggregation Status

    Section 17.1 on page 198 for more information. Figure 159 Advanced Application > Link Aggregation Status Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. XGS4600 Series User’s Guide...

  • Page 200: Link Aggregation Setting

    LACP – if the ports are configured to join a trunk group through LACP. 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 198 for more information on link aggregation. XGS4600 Series User’s Guide...
  • Page 201 Figure 160 Advanced Application > Link Aggregation > Link Aggregation Setting (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 202 This is the only screen you need to configure to enable static link aggregation. Aggregation Setting Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this option to activate a trunk group. XGS4600 Series User’s Guide...

  • Page 203: Link Aggregation Control Protocol

    17.3.1 Link Aggregation Control Protocol Click Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Dynamic Link Aggregation on page 198 for more information on dynamic link aggregation. XGS4600 Series User’s Guide...
  • Page 204 Chapter 17 Link Aggregation Figure 162 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 205 The field identifies the link aggregation group, that is, one logical link containing multiple ports. LACP Active Select this option to enable LACP for a trunk. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XGS4600 Series User’s Guide...

  • Page 206: Technical Reference

    T1, select the traffic distribution algorithm used by this group and select the ports that should belong to this group as shown in the figure below. Click Apply when you are done. XGS4600 Series User’s Guide...
  • Page 207 Chapter 17 Link Aggregation Figure 165 Trunking Example – Configuration Screen EXAMPLE Your trunk group 1 (T1) configuration is now complete. XGS4600 Series User’s Guide...

  • Page 208: Port Authentication

    • Use the MAC Authentication screen (Section 18.4 on page 213) to activate MAC authentication. • Use the Guest Vlan screen (Section 18.5 on page 216) to enable and assign a guest VLAN to a port. XGS4600 Series User’s Guide...

  • Page 209: What You Need To Know

    Switch does not prompt the client for login credentials. The login credentials are based on the source MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. XGS4600 Series User’s Guide...

  • Page 210: Port Authentication Configuration

    Select a port authentication method’s link in the screen that appears. Figure 168 Advanced Application > Port Authentication 18.3 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. In the Port Authentication screen click 802.1x to display the configuration screen as shown. XGS4600 Series User’s Guide...
  • Page 211 Chapter 18 Port Authentication Figure 169 Advanced Application > Port Authentication > 802.1x (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 212 Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this to permit 802.1x authentication on this port. You must first allow 802.1x authentication on the Switch before configuring it on each port. XGS4600 Series User’s Guide...

  • Page 213: Activate Mac Authentication

    Cancel Click Cancel to begin configuring this screen afresh. 18.4 Activate MAC Authentication Use this screen to activate MAC authentication. In the Port Authentication screen click MAC Authentication to display the configuration screen as shown. XGS4600 Series User’s Guide...
  • Page 214 Chapter 18 Port Authentication Figure 171 Advanced Application > Port Authentication > MAC Authentication (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 215 Type the password the Switch sends along with the MAC address of a client for authentication with the RADIUS server. You can enter up to 32 printable ASCII characters except [ ? ], [ | ], [ ' ], [ " ] or [ , ]. XGS4600 Series User’s Guide...

  • Page 216: Guest Vlan

    That is, unauthenticated users can have access to limited network resources in the same guest VLAN, such as the Internet. The access granted to the Guest VLAN depends on how the network administrator configures switches or routers with the guest network feature. XGS4600 Series User’s Guide...
  • Page 217 Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication screen click Guest Vlan to display the configuration screen as shown. Figure 174 Advanced Application > Port Authentication > Guest VLAN (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 218 Select Multi-Secure to authenticate each user that connects to this port. Multi-Secure Num If you set Host-mode to Multi-Secure, specify the maximum number of users (between 1 and 24) that the Switch will authenticate on this port. XGS4600 Series User’s Guide...

  • Page 219: Compound Authentication

    • In MAC authentication, the login credentials are based on the source MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. In the Port Authentication screen click Compound Authentication Mode to display the configuration screen as shown. XGS4600 Series User’s Guide...
  • Page 220 Chapter 18 Port Authentication Figure 176 Advanced Application > Port Authentication > Compound Authentication Mode (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 221 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 222: Technical Reference

    The following types of RADIUS messages are exchanged between the switch and the RADIUS server for user authentication: • Access-Request Sent by a switch requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. XGS4600 Series User’s Guide...

  • Page 223: Eap (Extensible Authentication Protocol) Authentication

    In addition, it is possible to impersonate an authentication server as MD5 authentication method does not perform mutual authentication. Finally, MD5 authentication method does not support data encryption with dynamic session key. You must configure WEP encryption keys for data encryption. • EAP-TLS (Transport Layer Security) XGS4600 Series User’s Guide...

  • Page 224: Eapol (Eap Over Lan)

    This message will be sent when the wired client wants to be disconnected from the network. • EAPOL-Encapsulated-ASF-Alert This message is sent If the authentication process is not completed yet, and alerts needs to be forwarded. XGS4600 Series User’s Guide...

  • Page 225: Port Security

    19.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. Figure 178 Advanced Application > Port Security (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 226 MAC addresses is in the MAC address table on this port. Packets with no matching MAC addresses are dropped. Clear this check box to disable the port security feature. The Switch forwards all packets on this port. XGS4600 Series User’s Guide...

  • Page 227: Vlan Mac Address Limit

    Address Limit in the Advanced Application > Port Security screen to display the screen as shown. Figure 180 Advanced Application > Port Security > VLAN MAC Address Limit (Standalone Mode) Figure 181 Advanced Application > Port Security > VLAN MAC Address Limit (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 228 Delete Check the rules that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected check boxes in the Delete column. XGS4600 Series User’s Guide...

  • Page 229: Time Range

    229) to view or define a schedule on the Switch. 20.2 Configuring Time Range Click Advanced Application > Time Range in the navigation panel to display the screen as shown. Figure 182 Advanced Application > Time Range XGS4600 Series User’s Guide...
  • Page 230 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rules that you want to remove and then click the Delete button. Cancel Click Cancel to clear the selected check boxes. XGS4600 Series User’s Guide...

  • Page 231: Classifier

    Configure policy rules to define actions to be performed on a classified traffic flow (refer to Chapter 22 on page 240 to configure policy rules). You can also configure policy routing to forward a classified traffic flow to a different gateway for cost savings and load sharing. XGS4600 Series User’s Guide...

  • Page 232: Classifier Status

    Use the Classifier Configuration screen to define the classifiers. After you define the classifier, you can specify actions (or policy) to act upon the traffic that matches the rules. In the Classifier Status screen click Classifier Configuration to display the configuration screen as shown. XGS4600 Series User’s Guide...
  • Page 233 Chapter 21 Classifier Figure 184 Advanced Application > Classifier > Classifier Configuration XGS4600 Series User’s Guide...
  • Page 234 Select Any to classify traffic from any inner priority level or select the second option and specify a Priority priority level in the field provided. Ethernet Select an Ethernet type or select Other and enter the Ethernet type number in hexadecimal value. Type Source XGS4600 Series User’s Guide...
  • Page 235 “11111111.11111111.11111111.00000000”, and counting up the number of ones in this case results in 24. Destination Enter a destination IP address in dotted decimal notation. Address/ Specify the address prefix by entering the number of ones in the subnet mask. Address Prefix XGS4600 Series User’s Guide...

  • Page 236: Viewing And Editing Classifier Configuration Summary

    The field displays the priority of the rule when the match order is in manual mode. A higher weight means a higher priority. Name This field displays the descriptive name for this rule. This is for identification purpose only. XGS4600 Series User’s Guide...

  • Page 237: Classifier Global Setting Configuration

    POP3 21.4 Classifier Global Setting Configuration Use this screen to configure the match order and enable logging on the Switch. In the Classifier Configuration screen click Classifier Global Setting to display the configuration screen as shown. XGS4600 Series User’s Guide...

  • Page 238: Classifier Example

    Cancel Click Cancel to begin configuring this screen afresh. 21.5 Classifier Example The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. XGS4600 Series User’s Guide...
  • Page 239 Figure 187 Classifier: Example EXAMPLE After you have configured a classifier, you can configure a policy (in the Policy screen) to define actions on the classified traffic flow. XGS4600 Series User’s Guide...

  • Page 240: Policy Rule

    DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. XGS4600 Series User’s Guide...

  • Page 241: Configuring Policy Rules

    Figure 188 Advanced Application > Policy Rule The following table describes the labels in this screen. Table 92 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option to enable the policy. Name Enter a descriptive name for identification purposes. XGS4600 Series User’s Guide...
  • Page 242 Select Send the packet to the egress port to send the packet to the egress port. Metering Select Enable to activate bandwidth limitation on the traffic flows then set the actions to be taken on out-of-profile packets. XGS4600 Series User’s Guide...

  • Page 243: Policy Example

    The figure below shows an example Policy screen where you configure a policy to limit bandwidth and discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 21.5 on page 238). XGS4600 Series User’s Guide...
  • Page 244 Chapter 22 Policy Rule Figure 189 Policy Example EXAMPLE XGS4600 Series User’s Guide...

  • Page 245: Queuing Method

    This queue then moves to the back of the list. The next queue is given an equal amount of bandwidth, and then moves to the end of the list; and so on, depending on the number of queues being used. This works in a looping fashion until a queue is empty. XGS4600 Series User’s Guide...

  • Page 246: Configuring Queuing

    Use this screen to set priorities for the queues of the Switch. This distributes bandwidth across the different traffic queues. Click Advanced Application > Queuing Method in the navigation panel. Figure 190 Advanced Application > Queuing Method (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 247 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS4600 Series User’s Guide...
  • Page 248 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 249: Vlan Stacking

    VLAN group. The service provider can separate these two VLANs within its network by adding tag 37 to distinguish customer A and tag 48 to distinguish customer B at edge device 1 and then stripping those tags at edge device 2 as the data frames leave the network. XGS4600 Series User’s Guide...

  • Page 250: Vlan Stacking Port Roles

    Note: Static VLAN Tx Tagging MUST be enabled on a port where you choose Tunnel Port. 24.3 VLAN Tag Format A VLAN tag (service provider VLAN stacking or customer IEEE 802.1Q) consists of the following three fields. Table 94 VLAN Tag Format Type Priority XGS4600 Series User’s Guide...

  • Page 251: Frame Format

    Length and type of Ethernet frame (SP)TPID (Service Provider) Tag Protocol IDentifier Data Frame data VLAN ID Frame Check Sequence 24.4 Configuring VLAN Stacking Click Advanced Application > VLAN Stacking to display the screen as shown. XGS4600 Series User’s Guide...
  • Page 252 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last two ports of your Switch) cannot be configured. They are reserved for stacking only. XGS4600 Series User’s Guide...

  • Page 253: Port-Based Q-In-Q

    Port-based Q-in-Q lets the Switch treat all frames received on the same port as the same VLAN flows and add the same outer VLAN tag to them, even if they have different customer VLAN IDs. Click Port-based QinQ in the Advanced Application > VLAN Stacking screen to display the screen as shown. XGS4600 Series User’s Guide...
  • Page 254 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last two ports of your Switch) cannot be configured. They are reserved for stacking only. XGS4600 Series User’s Guide...

  • Page 255: Selective Q-In-Q

    Q-in-Q rules, the Switch applies the port-based Q- in-Q rules to them. Click Selective QinQ in the Advanced Application > VLAN Stacking screen to display the screen as shown. Figure 197 Advanced Application > VLAN Stacking > Selective QinQ (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 256 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rules that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. XGS4600 Series User’s Guide...

  • Page 257: Multicast

    MLD messages to other upstream ports. • Use the MVR screens (Section 25.5 on page 276) to create multicast VLANs and select the receiver ports and a source port for each multicast VLAN. XGS4600 Series User’s Guide...

  • Page 258: What You Need To Know

    MLD snooping-proxy is a Zyxel-proprietary feature. IPv6 MLD proxy allows only one upstream interface on a switch, while MLD snooping-proxy supports more than one upstream port on a switch. The upstream port in MLD snooping-proxy can report group changes to a connected multicast router and forward XGS4600 Series User’s Guide...
  • Page 259 Done message to the router or switch. If the leave mode is not set to Immediate, the router or switch sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. XGS4600 Series User’s Guide...
  • Page 260 The following figure shows a multicast television example where a subscriber device (such as a computer) in VLAN 1 receives multicast traffic from the streaming media server, S, through the Switch. Multiple subscriber devices can connect through a port configured as the receiver on the Switch. XGS4600 Series User’s Guide...

  • Page 261: Multicast Setup

    25.3 IPv4 Multicast Status Click Advanced Application > Multicast > IPv4 Multicast to display the screen as shown. This screen shows the IPv4 multicast group information. See Section 25.1 on page 257 for more information on multicasting. XGS4600 Series User’s Guide...

  • Page 262: Igmp Snooping

    Click the IGMP Snooping link in the Advanced Application > Multicast > IPv4 Multicast screen to display the screen as shown. See Section 25.1 on page 257 for more information on multicasting. Figure 203 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 263 The Switch sends a leave message with its MAC address to the multicast router or switch only when it receives the leave message from the last host in a multicast group. XGS4600 Series User’s Guide...
  • Page 264 Select this option to set the Switch to remove this port from the multicast tree when an IGMP version 2 leave message is received on this port. Select this option if there is only one host connected to this port. XGS4600 Series User’s Guide...
  • Page 265 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 266: Igmp Snooping Vlan

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to your previous configuration. XGS4600 Series User’s Guide...

  • Page 267: Igmp Filtering Profile

    Type the ending multicast IP address for a range of IP addresses that you want to belong to the IGMP filter profile. If you want to add a single multicast IP address, enter it in both the Start Address and End Address fields. XGS4600 Series User’s Guide...

  • Page 268: Ipv6 Multicast Status

    25.4.1 MLD Snooping-proxy Click the MLD Snooping-proxy link in the Advanced Application > Multicast > IPv6 Multicast screen to display the screen as shown. See Section 25.1 on page 257 for more information on multicasting. XGS4600 Series User’s Guide...

  • Page 269: Mld Snooping-Proxy Vlan

    Table 107 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN LABEL DESCRIPTION Enter the ID number of the VLAN on which you want to enable MLD snooping-proxy and configure related settings. Upstream XGS4600 Series User’s Guide...
  • Page 270 This field displays the ID number of the VLAN group. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XGS4600 Series User’s Guide...

  • Page 271: Mld Snooping-Proxy Vlan Port Role Setting

    > VLAN screen to display the screen as shown. See Section 25.1 on page 257 for more information on multicasting. Figure 210 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN > Port Role Setting (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 272 Report or Done messages when receiving queries from a multicast router. Otherwise, select None if the port is not joining a multicast group or does not belong to this VLAN. XGS4600 Series User’s Guide...

  • Page 273: Mld Snooping-Proxy Filtering

    Use this screen to configure the Switch’s MLD filtering settings. Click the Filtering link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy screen to display the screen as shown. Figure 212 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 274 Select the name of the MLD filtering profile to use for this port. Otherwise, select Default to prohibit the port from joining any multicast group. You can create MLD filtering profiles in the Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering > Filtering Profile screen. XGS4600 Series User’s Guide...

  • Page 275: Mld Snooping-Proxy Filtering Profile

    Clear Click Clear to reset the fields to the factory defaults. Profile Name This field displays the descriptive name of the profile. Start Address This field displays the start of the multicast IPv6 address range. XGS4600 Series User’s Guide...

  • Page 276: General Mvr Configuration

    Note: You can create up to five multicast VLANs and up to 256 multicast rules on the Switch. Note: Your Switch automatically creates a static VLAN (with the same VID) when you create a multicast VLAN in this screen. XGS4600 Series User’s Guide...
  • Page 277 Chapter 25 Multicast Figure 215 Advanced Application > Multicast > MVR (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 278 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last two ports of your Switch) cannot be configured. They are reserved for stacking only. XGS4600 Series User’s Guide...

  • Page 279: Mvr Group Configuration

    Use this screen to configure MVR IP multicast group addresses. Click the Group Configuration link in the MVR screen. Note: A port can belong to more than one multicast VLAN. However, IP multicast group addresses in different multicast VLANs cannot overlap. XGS4600 Series User’s Guide...
  • Page 280 Select the entries that you want to remove, then click the Delete button to remove the selected entries from the table. If you delete a multicast VLAN, all multicast groups in this VLAN will also be removed. Cancel Select Cancel to clear the check boxes in the table. XGS4600 Series User’s Guide...

  • Page 281: Mvr Configuration Example

    To set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The following figure shows an example where two IPv4 multicast groups (News and Movie) are configured for the multicast VLAN 200. XGS4600 Series User’s Guide...
  • Page 282 Chapter 25 Multicast Figure 220 MVR Group Configuration Example-1 EXAMPLE Figure 221 MVR Group Configuration Example-2 EXAMPLE XGS4600 Series User’s Guide...

  • Page 283: Aaa

    Switch itself or it can use an external server to authorize a large number of users. Accounting is the process of recording what a user is doing. The Switch can use an external server to XGS4600 Series User’s Guide...

  • Page 284: Aaa Screens

    First, configure your authentication server settings (RADIUS, TACACS+ or both) and then set up the authentication priority, activate authorization. Click Advanced Application > AAA in the navigation panel to display the screen as shown. Figure 223 Advanced Application > AAA XGS4600 Series User’s Guide...

  • Page 285: Radius Server Setup

    RADIUS servers. For example, if you set the timeout value to 30 seconds, then the Switch waits for a response from the first RADIUS server for 15 seconds and then tries the second RADIUS server. XGS4600 Series User’s Guide...

  • Page 286: Tacacs+ Server Setup

    Click Cancel to begin configuring this screen afresh. 26.4 TACACS+ Server Setup Use this screen to configure your TACACS+ server settings. Click on the TACACS+ Server Setup link in the AAA screen to view the screen as shown. XGS4600 Series User’s Guide...
  • Page 287 Delete Check this box if you want to remove an existing TACACS+ server entry from the Switch. This entry is deleted when you click Apply. Accounting Use this section to configure your TACACS+ accounting settings. Server XGS4600 Series User’s Guide...

  • Page 288: Aaa Setup

    Use this screen to configure authentication, authorization and accounting settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. Figure 226 Advanced Application > AAA > AAA Setup XGS4600 Series User’s Guide...
  • Page 289 Update Period This is the amount of time in minutes before the Switch sends an update to the accounting server. This is only valid if you select the start-stop option for the Exec or Dot1x entries. XGS4600 Series User’s Guide...

  • Page 290: Technical Reference

    Attributes (VSAs) to expand the functionality of a RADIUS server. The Switch supports VSAs that allow you to perform the following actions based on user authentication: • Limit bandwidth on incoming or outgoing traffic for the port the user connects to. XGS4600 Series User’s Guide...
  • Page 291 VLAN settings are fixed and untagged. This will also set the port’s VID. The following table describes the values you need to configure. Note that these attributes only work when you enable authorization (see Section 26.5 on page 288). XGS4600 Series User’s Guide...

  • Page 292: Supported Radius Attributes

    26.6.3.1 Attributes Used for Authenticating Privilege Access User-Name – The format of the User-Name attribute is $enab#$, where # is the privilege level (1 – 14). User-Password NAS-Identifier NAS-IP-Address 26.6.3.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address XGS4600 Series User’s Guide...

  • Page 293: Attributes Used For Accounting

    ATTRIBUTE START INTERIM-UPDATE STOP User-Name    NAS-Identifier    NAS-IP-Address    Service-Type    Acct-Status-Type    Acct-Delay-Time    Acct-Session-Id    Acct-Authentic    XGS4600 Series User’s Guide...
  • Page 294 NAS-Identifier    NAS-Port-Type    Acct-Status-Type    Acct-Delay-Time    Acct-Session-Id    Acct-Authentic    Acct-Input-Octets   Acct-Output-Octets   Acct-Session-Time   Acct-Input-Packets   XGS4600 Series User’s Guide...
  • Page 295 Chapter 26 AAA Table 121 RADIUS Attributes – Exec Events through Console (continued) ATTRIBUTE START INTERIM-UPDATE STOP Acct-Output-Packets   Acct-Terminate-Cause  Acct-Input-Gigawords   Acct-Output-Gigawords   XGS4600 Series User’s Guide...

  • Page 296: Ip Source Guard

    DHCP snooping and ARP inspection. 27.1.2 What You Need to Know The Switch builds the binding table by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings). IP source guard consists of the following features: XGS4600 Series User’s Guide...

  • Page 297: Ip Source Guard

    Click the link to open a screen where you can specify which ports are trusted for DHCPv6 snooping. 27.3 IPv4 Source Guard Setup Use this screen to look at the current bindings for DHCP snooping and ARP inspection. Bindings are used XGS4600 Series User’s Guide...

  • Page 298: Ipv4 Source Guard Static Binding

    If you try to create a static binding with the same MAC address and VLAN ID as an existing static binding, the new static binding replaces the original one. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > Static Binding. XGS4600 Series User’s Guide...
  • Page 299 Figure 229 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > Static Binding (Standalone Mode) Figure 230 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > Static Binding (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 300 Delete Select the entries that you want to remove, then click the Delete button to remove the selected entries from the table. Cancel Click this to clear the check boxes above. XGS4600 Series User’s Guide...

  • Page 301: Dhcp Snooping

    DHCP option 82 profile to certain ports in a VLAN. DHCP Snooping 28.2 Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping. XGS4600 Series User’s Guide...
  • Page 302 This field displays how long (in seconds) the Switch waits to update the DHCP snooping database after the current bindings change. This section displays information about the current update and the next update of the DHCP snooping database. XGS4600 Series User’s Guide...
  • Page 303 MAC address and VLAN ID. Invalid interfaces This field displays the number of bindings the Switch ignored because the port number was a trusted interface or does not exist anymore. XGS4600 Series User’s Guide...

  • Page 304: Dhcp Snooping Configure

    TFTP server so that they are still available after a restart. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure. XGS4600 Series User’s Guide...
  • Page 305 When the Switch loads dynamic bindings from a DHCP snooping database, it does not discard the current dynamic bindings first. If there is a conflict, the Switch keeps the dynamic binding in volatile memory and updates the Binding collisions counter in the DHCP Snooping screen. XGS4600 Series User’s Guide...

  • Page 306: Dhcp Snooping Port Configure

    To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > Port. Figure 233 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping > Configure > Port (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 307 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XGS4600 Series User’s Guide...

  • Page 308: Dhcp Snooping Vlan Configure

    Cancel Click this to reset the values in this screen to their last-saved values. Change Pages Click Previous or Next to show the previous/next screen if all status information cannot be seen in one screen. XGS4600 Series User’s Guide...

  • Page 309: Dhcp Snooping Vlan Port Configure

    This field displays the VLAN to which the ports belongs. Port This field displays the ports to which the Switch applies the settings. In stacking mode, the first number represents the slot and the second the port number. XGS4600 Series User’s Guide...

  • Page 310: Technical Reference

    The DHCP snooping database maintains the dynamic bindings for DHCP snooping and ARP inspection in a file on an external TFTP server. If you set up the DHCP snooping database, the Switch can reload the dynamic bindings from the DHCP snooping database after the Switch restarts. XGS4600 Series User’s Guide...
  • Page 311 Enable DHCP snooping on the Switch. Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. Configure trusted and untrusted ports, and specify the maximum number of DHCP packets that each port can receive per second. Configure static bindings. XGS4600 Series User’s Guide...

  • Page 312: Arp Inspection

    Click this to remove the selected entries. Cancel Click this to clear the Delete check boxes above. Change Pages Click Previous Page or Next Page to show the previous or next screen if all status information cannot be seen in one screen. XGS4600 Series User’s Guide...

  • Page 313: Arp Inspection Vlan Status

    Use this screen to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Log Status. XGS4600 Series User’s Guide...

  • Page 314: Arp Inspection Configure

    Use this screen to enable ARP inspection on the Switch. You can also configure the length of time the Switch stores records of discarded ARP packets and global settings for the ARP inspection log. To open XGS4600 Series User’s Guide...
  • Page 315 Type how often (1 – 86400 seconds) the Switch sends a batch of syslog messages to the syslog server. Enter 0 if you want the Switch to send syslog messages immediately. See Syslog rate for an example of the relationship between Syslog rate and Log interval. XGS4600 Series User’s Guide...

  • Page 316: Arp Inspection Port Configure

    Figure 242 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Configure > Port (Standalone Mode) Figure 243 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Configure > Port (Stacking Mode) XGS4600 Series User’s Guide...

  • Page 317: Arp Inspection Vlan Configure

    Use this screen to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiving ARP packets from each VLAN. To open this screen, click Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection > Configure > VLAN. XGS4600 Series User’s Guide...

  • Page 318: Ipv6 Source Guard Overview

    IPv6 traffic. The binding table can be manually created or be learned through Dynamic Host Configuration Protocol version 6 snooping (DHCPv6 snooping). IPv6 source guard can deny IPv6 traffic from an unknown source. The IPv6 source guard binding table includes: XGS4600 Series User’s Guide...

  • Page 319: Ipv6 Source Binding Status

    Index This field displays a sequential number for each binding. Source Address This field displays the source IP address in the binding. If the entry is blank, this field will not be checked in the binding. XGS4600 Series User’s Guide...

  • Page 320: Ipv6 Static Binding Setup

    IPv6 address / prefix as an existing static binding, the new static binding replaces the original one. To open this screen, click Advanced Application > IP Source Guard > IPv6 Static Binding Setup. Figure 246 Advanced Application > IP Source Guard > IPv6 Static Binding Setup (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 321 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Select an entry check box and click Delete to remove the specified entry. Cancel Click this to clear the Delete check boxes above. XGS4600 Series User’s Guide...

  • Page 322: Ipv6 Source Guard Policy Setup

    This field displays the Validate Address status for this IPv6 source guard policy. Validate Prefix This field displays the Validate Prefix status for this IPv6 source guard policy. Link Local This field displays the Link Local traffic status for this IPv6 source guard policy. XGS4600 Series User’s Guide...

  • Page 323: Ipv6 Source Guard Port Setup

    To open this screen, click Advanced Application > IP Source Guard > IPv6 Source Guard Port Setup. Figure 249 Advanced Application > IP Source Guard > IPv6 Source Guard Port Setup (Standalone Mode) XGS4600 Series User’s Guide...

  • Page 324: Ipv6 Snooping Policy Setup

    DHCPv6 snooping builds the binding table dynamically. To open this screen, click Advanced Application > IP Source Guard > IPv6 Snooping Policy Setup. Note: If you do not select Protocol and Prefix Glean, then the Switch cannot perform DHCPv6 snooping. XGS4600 Series User’s Guide...

  • Page 325: Ipv6 Snooping Vlan Setup

    Click this to clear the Delete check boxes above. 29.9 IPv6 Snooping VLAN Setup Use this screen to enable a DHCPv6 snooping policy on a specific VLAN interface. To open this screen, click Advanced Application > IP Source Guard > IPv6 Snooping VLAN Setup. XGS4600 Series User’s Guide...

  • Page 326: Ipv6 Dhcp Trust Setup

    Note: DHCPv6 solicit packets are sent from a DHCPv6 client to a DHCPv6 server. Reply packets from a DHCPv6 server connected to an untrusted port are discarded. Use port * to have all ports be Untrusted or Trusted. XGS4600 Series User’s Guide...
  • Page 327 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last two ports of your Switch) cannot be configured. They are reserved for stacking only. XGS4600 Series User’s Guide...

  • Page 328: Technical Reference

    • It pretends to be computer A and responds to computer B. • It pretends to be computer B and sends a message to computer A. As a result, all the communication between computer A and computer B passes through computer X. XGS4600 Series User’s Guide...
  • Page 329 ARP inspection so that the Switch has enough time to build the binding table. Enable ARP inspection on each VLAN. Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. XGS4600 Series User’s Guide...

  • Page 330: Loop Guard

    The following figure shows port N on switch A connected to switch B. Switch B has two ports, x and y, mistakenly connected to each other. It forms a loop. When broadcast or multicast packets leave port N XGS4600 Series User’s Guide...
  • Page 331 Switch. Figure 259 Loop Guard – Network Loop Note: After resolving the loop problem on your network you can re-activate the disabled port through the Web Configurator or through commands (See the CLI Reference Guide). XGS4600 Series User’s Guide...

  • Page 332: Loop Guard Setup

    Note: The loop guard feature cannot be enabled on the ports that have Spanning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Figure 260 Advanced Application > Loop Guard (Standalone Mode) Figure 261 Advanced Application > Loop Guard (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 333 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 334: Vlan Mapping

    VLAN mapping rule. The Switch translates the VLAN ID from 12 into 123 before forwarding the packets. Any packets carrying a VLAN tag other than 12 (such as 10) and received on port 3 will be dropped. Figure 262 VLAN Mapping Example XGS4600 Series User’s Guide...

  • Page 335: What You Can Do

    31.2 Enable VLAN Mapping Click Advanced Application and then VLAN Mapping in the navigation panel to display the screen as shown. Figure 263 Advanced Application > VLAN Mapping (Standalone Mode) Figure 264 Advanced Application > VLAN Mapping (Stacking Mode) XGS4600 Series User’s Guide...

  • Page 336: Vlan Mapping Configure

    Click the VLAN Mapping Configure link in the VLAN Mapping screen to display the screen as shown. Use this screen to enable and edit the VLAN mapping rules. Figure 265 Advanced Application > VLAN Mapping > VLAN Mapping Configuration (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 337 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rules that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. XGS4600 Series User’s Guide...

  • Page 338: Layer 2 Protocol Tunneling

    Figure 267 Layer 2 Protocol Tunneling Network Scenario In the following example, if you enable L2PT for STP, you can have switches A, B, C and D in the same XGS4600 Series User’s Guide...

  • Page 339: Configuring Layer 2 Protocol Tunneling

    Incoming encapsulated layer 2 protocol packets received on a tunnel port are decapsulated and sent to an access port. 32.2 Configuring Layer 2 Protocol Tunneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. XGS4600 Series User’s Guide...
  • Page 340 Chapter 32 Layer 2 Protocol Tunneling Figure 269 Advanced Application > Layer 2 Protocol Tunneling (Standalone Mode) Figure 270 Advanced Application > Layer 2 Protocol Tunneling (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 341 Select this option to have the Switch send LACP packets to a peer to dynamically create and manage trunk groups. UDLD Select this option to have the Switch send UDLD packets to a peer’s port it connected to monitor the physical status of a link. XGS4600 Series User’s Guide...
  • Page 342 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 343: Sflow

    For example, you can use it to know which IP address or which type of traffic caused network congestion. Figure 271 sFlow Application 33.2 sFlow Port Configuration Click Advanced Application > sFlow in the navigation panel to display the screen as shown. XGS4600 Series User’s Guide...
  • Page 344 Cancel Click Cancel to begin configuring this screen afresh. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XGS4600 Series User’s Guide...

  • Page 345: Sflow Collector Configuration

    You may want to configure more than one collector if the traffic load to be monitored is more than one collector can manage. Figure 274 Advanced Application > sFlow > Collector XGS4600 Series User’s Guide...
  • Page 346 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rules that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 347: Pppoe

    Read on for concepts on ARP that can help you configure the screen in this chapter. 34.1.2.1 PPPoE Intermediate Agent Tag Format If the PPPoE Intermediate Agent is enabled, the Switch adds a vendor-specific tag to PADI (PPPoE Active Discovery Initialization) and PADR (PPPoE Active Discovery Request) packets from PPPoE clients. XGS4600 Series User’s Guide...
  • Page 348 Table 152 PPPoE IA Circuit ID Sub-option Format: Using Identifier String and Variables SubOpt Length Value 0x01 Identifier delimiter Slot ID delimiter Port No delimiter VLAN ID String (1 byte) (1 byte) (1 byte) (1 byte) (1 byte) (2 byte) (1 byte) (53 byte) bytes) XGS4600 Series User’s Guide...

  • Page 349: Pppoe

    Use this screen to configure the PPPoE Intermediate Agent on the Switch. Click Advanced Application > PPPoE in the navigation panel to display the screen as shown. Click Click Here to go to the Intermediate Agent screen. Figure 275 Advanced Application > PPPoE > Intermediate Agent XGS4600 Series User’s Guide...

  • Page 350: Pppoe Intermediate Agent

    Select a delimiter to separate the identifier-string, slot ID, port number and/or VLAN ID from each other. You can use a pound key (#), semi-colon (;), period (.), comma (,), forward slash (/) or space. XGS4600 Series User’s Guide...

  • Page 351: Pppoe Ia Per-Port

    Switch and there are no trusted ports. Click the Port link in the Intermediate Agent screen to display the screen as shown. Figure 277 Advanced Application > PPPoE > Intermediate Agent > Port (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 352 PPPoE discovery packets received on this port. Spaces are allowed. The Circuit ID you configure for a specific VLAN on a port (in the Advanced Application > PPPoE > Intermediate Agent > Port > VLAN screen) has the highest priority. XGS4600 Series User’s Guide...

  • Page 353: Pppoe Ia Per-Port Per-Vlan

    Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown. Figure 279 Advanced Application > PPPoE > Intermediate Agent > Port > VLAN (Standalone Mode) Figure 280 Advanced Application > PPPoE > Intermediate Agent > Port > VLAN (Stacking Mode) XGS4600 Series User’s Guide...

  • Page 354: Pppoe Ia For Vlan

    Switch appends the Circuit ID and/or Remote ID to PPPoE discovery packets from a specific VLAN. Click the VLAN link in the Intermediate Agent screen to display the screen as shown. Figure 281 Advanced Application > PPPoE > Intermediate Agent > VLAN XGS4600 Series User’s Guide...
  • Page 355 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 356: Error-Disable

    • Use the Errdisable Recovery screen (Section 35.6 on page 362) to set the Switch to automatically undo an action after the error is gone. XGS4600 Series User’s Guide...

  • Page 357: Error-Disable Settings

    Click the Click here link next to Errdisable Status in the Advanced Application > Errdisable screen to display the screen as shown. XGS4600 Series User’s Guide...
  • Page 358 Chapter 35 Error-Disable Figure 283 Advanced Application > Errdisable > Errdisable Status (Standalone Mode) Figure 284 Advanced Application > Errdisable > Errdisable Status (Stacking Mode) XGS4600 Series User’s Guide...

  • Page 359: Cpu Protection Configuration

    Advanced Application > Errdisable screen to display the screen as shown. Note: After you configure this screen, make sure you also enable error detection for the specific control packets in the Advanced Application > Errdisable > Errdisable Detect XGS4600 Series User’s Guide...
  • Page 360 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last two ports of your Switch) cannot be configured. They are reserved for stacking only. XGS4600 Series User’s Guide...

  • Page 361: Error-Disable Detect Configuration

    • inactive-reason – The Switch drops all the specified control packets (such as BPDU) on the port. • rate-limitation – The Switch drops the additional control packets the ports has to handle in every one second. XGS4600 Series User’s Guide...

  • Page 362: Error-Disable Recovery Configuration

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 363: Vlan Isolation

    Note: Make sure you keep at least one port in the promiscuous port list for a VLAN with VLAN Isolation enabled. Otherwise, this VLAN is blocked from the whole network. 36.2 Configuring VLAN Isolation Click Advanced Application > Vlan Isolation in the navigation panel to display the screen as shown. XGS4600 Series User’s Guide...
  • Page 364 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the rules that you want to remove and then click the Delete button. Cancel Click Cancel to clear the check boxes. XGS4600 Series User’s Guide...

  • Page 365: Mac Pinning

    Switch’s MAC forwarding table. 37.2 MAC Pinning Configuration Use this screen to enable MAC pinning on the Switch and on specific ports. Click Advanced Application > MAC Pinning in the navigation panel to open the following screen. XGS4600 Series User’s Guide...
  • Page 366 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last two ports of your Switch) cannot be configured. They are reserved for stacking only. XGS4600 Series User’s Guide...
  • Page 367 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 368: Private Vlan

    Table 165 PVLAN Graphic Key LABEL DESCRIPTION P-VLAN 100 Primary private VLAN C-VLAN 101 Community private VLAN I-VLAN 102 Isolated private VLAN Tagged Private VLANs can span switches but trunking ports must be VLAN-trunking ports – see XGS4600 Series User’s Guide...

  • Page 369: Configuration

    38.1.1 Configuration You must go to the Static VLAN screen first to create VLAN IDs for Primary, Isolated or Community VLANs. Click Advanced Application > Private VLAN to display the following screen. XGS4600 Series User’s Guide...
  • Page 370 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS4600 Series User’s Guide...
  • Page 371 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 372: Green Ethernet

    39.2 Configuring Green Ethernet Click Advanced Application > Green Ethernet in the navigation panel to display the screen as shown. Note: EEE, Auto Power Down and Short Reach are NOT supported on an uplink port. XGS4600 Series User’s Guide...
  • Page 373 Chapter 39 Green Ethernet Figure 295 Advanced Application > Green Ethernet (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 374 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 375: Link Layer Discovery Protocol (Lldp)

    IEEE 802.3 specific TLVs: • MAC/PHY Configuration/Status TLV (optional) • Link Aggregation TLV (optional) • Maximum Frame Size TLV (optional) The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. XGS4600 Series User’s Guide...

  • Page 376: Lldp-Med Overview

    Since LLDPDU updates status and configuration information periodically, network managers may check the result of provision through remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. XGS4600 Series User’s Guide...

  • Page 377: Lldp Settings

    Click here to show a screen with the Switch’s LLDP information. Status LLDP Remote Click here to show a screen with LLDP information from the neighboring devices. Status LLDP Click here to show a screen to configure LLDP parameters. Configuration XGS4600 Series User’s Guide...

  • Page 378: Lldp Local Status

    This screen displays a summary of LLDP status on this Switch. Click Advanced Application > LLDP > LLDP Local Status to display the screen as shown next. Figure 300 Advanced Application > LLDP > LLDP Local Status (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 379 This shows the firmware version of the Switch. Description TLV System This shows the System Capabilities enabled and supported on the local Switch. Capabilities TLV • System Capabilities Supported – Bridge • System Capabilities Enabled – Bridge XGS4600 Series User’s Guide...

  • Page 380: Lldp Local Port Status Detail

    This screen displays detailed LLDP status for each port on this Switch. Click Advanced Application > LLDP > LLDP Local Status and then, click a port number, for example 1 in the local port column to display the screen as shown next. XGS4600 Series User’s Guide...
  • Page 381 Figure 302 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (Basic TLV) Figure 303 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (MED TLV) XGS4600 Series User’s Guide...
  • Page 382 Network Policy • Location • Extend Power via MDI PSE • Extend Power via MDI PD • Inventory Management Device Type This is the LLDP-MED device class. The Zyxel Switch device type is: • Network Connectivity XGS4600 Series User’s Guide...

  • Page 383: Lldp Remote Status

    The index number shows the number of remote devices that are connected to the Switch. Click on an index number to view the detailed LLDP status for this remote device in the LLDP Remote Port Status Detail screen. XGS4600 Series User’s Guide...

  • Page 384: Lldp Remote Port Status Detail

    Application > LLDP > LLDP Remote Status (Click Here) and then click an index number, for example 1, in the Index column in the LLDP Remote Status screen to display the screen as shown next. Figure 306 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Basic TLV) XGS4600 Series User’s Guide...
  • Page 385 System Capabilities Supported • System Capabilities Enabled Management This displays the management address of the remote device. Address TLV • Management Address Subtype • Management Address • Interface Number Subtype • Interface Number • Object Identifier XGS4600 Series User’s Guide...
  • Page 386 This displays the IEEE 802.1 Port Protocol VLAN ID TLV, which indicates whether the VLAN ID VLAN ID TLV and whether it is enabled and supported on the port of remote Switch which sent the LLDPDU. • Port-Protocol VLAN ID • Port-Protocol VLAN ID Supported • Port-Protocol VLAN ID Enabled XGS4600 Series User’s Guide...
  • Page 387 • Port Class • MDI Supported • MDI Enabled • Pair Controllable • PSE Power Pairs • Power Class Max Frame Size This displays the maximum supported frame size in octets. XGS4600 Series User’s Guide...
  • Page 388 Chapter 40 Link Layer Discovery Protocol (LLDP) Figure 308 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED TLV) XGS4600 Series User’s Guide...
  • Page 389 Power Priority – the Endpoint Device’s power priority (which the Network Connectivity Device may use to prioritize which devices will remain in service during power shortages). • Power Value – power requirement, in fractions of Watts, in current configuration. XGS4600 Series User’s Guide...

  • Page 390: Lldp Configuration

    Use this screen to configure global LLDP settings on the Switch. Click Advanced Application > LLDP > LLDP Configuration (Click Here) to display the screen as shown next. Figure 309 Advanced Application > LLDP > LLDP Configuration (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 391 Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. XGS4600 Series User’s Guide...

  • Page 392: Lldp Configuration Basic Tlv Setting

    Use this screen to configure Basic TLV settings. Click Advanced Application > LLDP > LLDP Configuration (Click Here) > Basic TLV Setting to display the screen as shown next. Figure 311 Advanced Application > LLDP > LLDP Configuration> Basic TLV Setting (Standalone Mode) XGS4600 Series User’s Guide...

  • Page 393: Lldp Configuration Org-Specific Tlv Setting

    Click Cancel to begin configuring this screen afresh. 40.6.2 LLDP Configuration Org-specific TLV Setting Use this screen to configure organization-specific TLV settings. Click Advanced Application > LLDP > LLDP Configuration (Click Here) > Org-specific TLV Setting to display the screen as shown next. XGS4600 Series User’s Guide...
  • Page 394 ID TLVs on the ports. Port VLAN ID Select the check boxes to enable or disable the sending of IEEE 802.1 Port VLAN ID TLVs on the ports. All check boxes in this column are enabled by default. XGS4600 Series User’s Guide...

  • Page 395: Lldp-Med Configuration

    Click Cancel to begin configuring this screen afresh. 40.7 LLDP-MED Configuration Click Advanced Application > LLDP > LLDP-MED Configuration to display the screen as shown next. Figure 315 Advanced Application > LLDP > LLDP-MED Configuration (Standalone Mode) XGS4600 Series User’s Guide...

  • Page 396: Lldp-Med Network Policy

    Cancel Click Cancel to begin configuring this screen afresh. 40.8 LLDP-MED Network Policy Click Advanced Application > LLDP > LLDP-MED Network Policy (Click Here) to display the screen as shown next. XGS4600 Series User’s Guide...
  • Page 397 • streaming-video • video-signaling Select to tag or untag in the network policy. • tagged • untagged VLAN Enter the VLAN ID number. It should be from 1 to 4094. For priority tagged frames, enter “0”. XGS4600 Series User’s Guide...

  • Page 398: Lldp-Med Location

    Check the rules that you want to remove, then click the Delete button. Cancel Click Cancel to clear the selected check boxes. 40.9 LLDP-MED Location Click Advanced Application > LLDP > LLDP-MED Location (Click Here) to display the screen as shown next. XGS4600 Series User’s Guide...
  • Page 399 Chapter 40 Link Layer Discovery Protocol (LLDP) Figure 319 Advanced Application > LLDP > LLDP-MED Location (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 400 Latitude Enter the latitude information. The value should be from 0º to 90º. • north • south Longitude Enter the longitude information. The value should be from 0º to 180º. • west • east XGS4600 Series User’s Guide...
  • Page 401 This field displays the location configuration information based on geographical coordinates Coordinates that includes longitude, latitude, altitude and datum. Civic Address This field displays the Civic Address for the remote device using information such as Country, State, County, City, Street, Number, ZIP code and additional information. XGS4600 Series User’s Guide...
  • Page 402 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the locations that you want to remove, then click the Delete button. Cancel Click Cancel to clear the selected check boxes. XGS4600 Series User’s Guide...

  • Page 403: Anti-Arpscan

    ARP-requests from a host exceed the thresholds, the trusted port will not be closed. • If a port on the Switch is closed by Anti-arpscan, and you want to recover it, then do one of the following: XGS4600 Series User’s Guide...

  • Page 404: Anti-Arpscan Status

    Anti-Arpscan is..This shows whether Anti-arpscan is enabled or disabled on the Switch. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XGS4600 Series User’s Guide...

  • Page 405: Anti-Arpscan Host Status

    This displays the VLAN ID that shows which VLAN the blocked host is in. Port This displays the port number to which the blocked host is connected. State This shows Err-Disable if the ARP-request rate from this host is over the threshold. Forwarding hosts are not displayed. XGS4600 Series User’s Guide...

  • Page 406: Anti-Arpscan Trust Host

    Click this to clear the check boxes above. 41.5 Anti-Arpscan Configure Use this screen to enable Anti-Arpscan, set port and host thresholds as well as configure ports to be trusted or untrusted. To open this screen, click Advanced Application > Anti-Arpscan > Configure. XGS4600 Series User’s Guide...
  • Page 407 Chapter 41 Anti-Arpscan Figure 325 Advanced Application > Anti-Arpscan > Configure (Standalone Mode) Figure 326 Advanced Application > Anti-Arpscan > Configure (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 408 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XGS4600 Series User’s Guide...

  • Page 409: Bpdu Guard

    Use this screen to view whether BPDU guard is enabled on the Switch and the port status. Click Advanced Application > BPDU Guard in the navigation panel. Figure 327 Advanced Application > BPDU Guard Status (Standalone Mode) XGS4600 Series User’s Guide...

  • Page 410: Bpdu Guard Configuration

    This shows whether the port is shut down (Err-disable) or able to transmit packets (Forwarding). 42.3 BPDU Guard Configuration Use this screen to turn on the BPDU guard feature on the Switch and ports. In the BPDU Guard Status screen, click Configuration to display the configuration screen as shown. XGS4600 Series User’s Guide...
  • Page 411 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last two ports of your Switch) cannot be configured. They are reserved for stacking only. XGS4600 Series User’s Guide...
  • Page 412 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 413: Oam

    (Section 43.4 on page 420) to perform remote-loopback tests. 43.2 OAM Status Use this screen to view the configuration of ports on which Ethernet OAM is enabled. Click Advanced Application > OAM in the navigation panel. XGS4600 Series User’s Guide...
  • Page 414 This field displays the port number. In stacking mode, the first number represents the slot ID and the second is the port number. Please note that the default stacking ports (the last two ports of your Switch) cannot be configured. They are reserved for stacking only. XGS4600 Series User’s Guide...

  • Page 415: Oam Details

    43.2.1 OAM Details Use this screen to view OAM configuration details and operational status of a specific port. Click a number in the Port column in the OAM Status screen to display the screen as shown next. XGS4600 Series User’s Guide...
  • Page 416 Passive: The port waits for the remote device to initiate OAM discovery; sends information PDUs; may send event notification PDUs; and may respond to variable request PDUs or loopback control PDUs. The Switch might not support some types of PDUs, as indicated in the fields below. XGS4600 Series User’s Guide...
  • Page 417 This field displays the MAC address of the IEEE 802.3ah-enabled remote Ethernet device that is connected to the Switch. Vendor(oui) This field displays the Organizationally Unique Identifiers (OUI) representing the vendor of the IEEE 802.3ah-enabled remote Ethernet device that is connected to the Switch. XGS4600 Series User’s Guide...

  • Page 418: Oam Configuration

    OAMPDU Rx 43.3 OAM Configuration Use this screen to turn on Ethernet OAM on the Switch and ports and configure the related settings. In the OAM Status screen click Configuration to display the configuration screen as shown. XGS4600 Series User’s Guide...
  • Page 419 LABEL DESCRIPTION Active Select this option to enable Ethernet OAM on the Switch. SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of the Switch in a stack. XGS4600 Series User’s Guide...

  • Page 420: Oam Remote Loopback

    43.4 OAM Remote Loopback Use this screen to perform a remote loopback test. In the OAM Status screen click Remote Loopback to display the screen as shown. Figure 336 Advanced Application > OAM > OAM Remote Loopback (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 421 Click Start to initiate a remote-loopback test from the specified port by sending Enable Loopback Control PDUs to the remote device. Stop Click Stop to terminate a remote-loopback test from the specified port by sending Disable Loopback Control PDUs to the remote device. XGS4600 Series User’s Guide...

  • Page 422: Zuld

    425) to enable ZULD on a port, configure a mode and set the probe time. 44.1.2 What You Need to Know • ZULD must be enabled on the Switch and the ports in order to detect unidirectional links by monitoring OAMPDUs. XGS4600 Series User’s Guide...

  • Page 423: Zuld Status

    44.2 ZULD Status Use this screen to see details of unidirectional and bidirectional links discovered by ZULD. To open this screen, click Advanced Application > ZULD. Figure 339 Advanced Application > ZULD Status (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 424 Remote Operation This field displays whether ZULD is enabled or disabled on the connected device on this link. ZULD must be enabled on the connected device and on the port that is connecting to the Switch. XGS4600 Series User’s Guide...

  • Page 425: Zuld Configuration

    Use this screen to enable ZULD on a port, configure a mode and set the probe time. To open this screen, click Advanced Application > ZULD > Configuration. Figure 341 Advanced Application > ZULD > Configuration (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 426 (either on the Switch or the connected device) still has not received an OAMPDU, then ZULD declares that the link is unidirectional. The allowed time range is from 5 – 65535 seconds. XGS4600 Series User’s Guide...
  • Page 427 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XGS4600 Series User’s Guide...

  • Page 428: Nlb

    Switch should forward the incoming NLB traffic. • Use the IP Configuration screen (Section 45.3 on page 431) to map the IP address to the MAC address of a cluster for layer-3 forwarding. XGS4600 Series User’s Guide...

  • Page 429: What You Need To Know

    Click Advanced Application > NLB in the navigation panel to display the screen as shown. Note: The following screens cannot have duplicate settings as the Advanced Application > NLB screen. • Advanced Application > Static MAC Forwarding • Advanced Application > Static Multicast Forwarding • Advanced Application > Filtering XGS4600 Series User’s Guide...
  • Page 430 This field displays the multicast or unicast MAC address of this rule. This field displays the VLAN group identification number. Port This field displays the ports to which the Switch will forward the incoming NLB traffic. XGS4600 Series User’s Guide...

  • Page 431: Ip Configuration

    Click Add to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. XGS4600 Series User’s Guide...
  • Page 432 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XGS4600 Series User’s Guide...

  • Page 433: Wol Relay

    Switch’s Wake On LAN relay feature allows you to send magic packets to devices across different subnets. 46.2 Wol Relay Use this screen to configure settings on Wake On LAN relay. Click Advanced Application > Wol Relay to open the following screen. Figure 346 Advanced Application > Wol Relay XGS4600 Series User’s Guide...
  • Page 434 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XGS4600 Series User’s Guide...

  • Page 435: Static Route

    • Use the IPv4 Static Route screen (Section 47.3 on page 436) to configure and enable an IPv4 static route. • Use the IPv6 Static Route screen (Section 47.4 on page 437) to configure and enable an IPv6 static route. XGS4600 Series User’s Guide...

  • Page 436: Static Routing

    Enter the IP address of the gateway. The gateway is an immediate neighbor of your Switch that Address will forward the packet to the destination. The gateway must be a router on the same segment as your Switch. XGS4600 Series User’s Guide...

  • Page 437: Ipv6 Static Route

    47.4 IPv6 Static Route Click the link next to IPv6 Static Route in the IP Application > Static Routing screen to display the screen as shown. Figure 350 IP Application > Static Routing > IPv6 Static Route XGS4600 Series User’s Guide...
  • Page 438 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XGS4600 Series User’s Guide...

  • Page 439: Policy Routing

    Click IP Application > Policy Routing in the navigation panel to display the screen as shown. Use this screen to configure a policy routing profile, which can consist of multiple policy routing rules. Figure 351 IP Application > Policy Routing XGS4600 Series User’s Guide...

  • Page 440: Policy Routing Rule Configuration

    The Switch does not perform normal routing on packets that match any of the policy routes. Click Rule Configuration in the IP Application > Policy Routing screen to display the screen as shown. XGS4600 Series User’s Guide...
  • Page 441 This field displays the rule index number that you configure in the Sequence field. Click an index number to change the rule’s Statement. State This field displays permit when the rule action is activated and deny when is it deactivated. XGS4600 Series User’s Guide...
  • Page 442 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entries from the summary table. Cancel Click Cancel to clear the check boxes. XGS4600 Series User’s Guide...

  • Page 443: Rip

    The lower the administrative distance value is, the more preferable the routing protocol is. If two routes have the same administrative distance value, the Switch uses the route that has the lowest metric value. The following table lists the default administrative distance value of the route sources supported on the Switch. XGS4600 Series User’s Guide...

  • Page 444: Configuring Ipv4 Rip

    Click IP Application > RIP > IPv4 RIP in the navigation panel to display the screen as shown. You cannot manually configure a new entry. Each entry in the table is automatically created when you configure a new IP domain in the IP Setup screen. Figure 354 IP Application > RIP > IPv4 RIP XGS4600 Series User’s Guide...
  • Page 445 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 446: Configuring Ipv6 Rip

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. Index This field displays the index number of an IPv6 interface. XGS4600 Series User’s Guide...
  • Page 447 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 448: Ospf

    The following table describes the four classes of OSPF routers. Table 205 OSPF: Router Types TYPE DESCRIPTION Internal Router (IR) An Internal or intra-area router is a router in an area. Area Border Router (ABR) An Area Border Router connects two or more areas. XGS4600 Series User’s Guide...

  • Page 449: How Ospf Works

    In most cases the default DR/BDR election is fine, but in some situations it must be controlled. In the following figure only router A has direct connectivity with all the other routers on the network segment. XGS4600 Series User’s Guide...

  • Page 450: Configuring Ospf

    IPv4 OSPF to open screens where you can view IPv4 OSPF status and configure OSPF for IPv4. Click the link next to IPv6 OSPF to open screens where you can view IPv6 OSPF status and configure OSPF for IPv6. Figure 358 IP Application > OSPF XGS4600 Series User’s Guide...

  • Page 451: Ipv4 Ospf Status

    The text box displays how often (in seconds) this screen refreshes. You may change the refresh interval by typing a new number in the text box and then clicking Set Interval. Stop Click Stop to end OSPF status polling. XGS4600 Series User’s Guide...
  • Page 452 This field displays the time (in seconds) since the last LSA was sent. Seq # This field displays the link sequence number of the LSA. Checksum This field displays the checksum value of the LSA. Link Count This field displays the number of links in the LSA. XGS4600 Series User’s Guide...

  • Page 453: Ipv4 Ospf Configuration

    Select Active to advertise a default route in your OSPF network if there is one in the routing table. information When no matching route is found in the routing table, the default route will be used to forward Originate traffic. XGS4600 Series User’s Guide...

  • Page 454: Configure Ipv4 Ospf Areas

    The OSPF supports three levels of authentication: • None – no authentication is used. • Simple – authenticate link state updates using an 8 printable ASCII character password. • MD5 – authenticate link state updates using a 16 printable ASCII character password. XGS4600 Series User’s Guide...
  • Page 455 Specify a cost (between 0 and 16777215) used to add a default route into a stub area for routes route cost which are external to an OSPF domain. If you do not set a route cost, no default route is added. XGS4600 Series User’s Guide...

  • Page 456: View Ospf Area Information Table

    RIP routing protocol and/or static routes need to exchange routing information with the Switch using OSPF routing protocol. A summary address is used to cover more than one routing entries in order to reduce the routing table size. XGS4600 Series User’s Guide...
  • Page 457 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 458: Configuring Ipv4 Ospf Interfaces

    Table 212 IP Application > OSPF > IPv4 OSPF > Configuration > Interface LABEL DESCRIPTION Network Select an IP interface. Area ID Select the area ID (in an IP address format with dotted decimal notation) of an area to associate the interface to that area. XGS4600 Series User’s Guide...
  • Page 459 This field displays the area ID (in an IP address format with dotted decimal notation) of an area to associate the interface to that area. Authentication This field displays the authentication method used (Same-as-Area, None, Simple or MD5). XGS4600 Series User’s Guide...

  • Page 460: Ipv4 Ospf Virtual-Links

    Area ID Select the area ID (in an IP address format with dotted decimal notation) of an area to associate the interface to that area. Peer Router ID Enter the ID of a peer border router. XGS4600 Series User’s Guide...
  • Page 461 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. XGS4600 Series User’s Guide...

  • Page 462: Ipv6 Ospf Status

    The text box displays how often (in seconds) this screen refreshes. You may change the refresh interval by typing a new number in the text box and then clicking Set Interval. Stop Click Stop to end OSPF status polling. XGS4600 Series User’s Guide...
  • Page 463 This field displays the number of links in the LSA. Payload This field displays the router ID for LSA type 1 or 2, the next-hop router address for LSA type 8, and the IPv6 prefix of the route entry for other LSA types. XGS4600 Series User’s Guide...

  • Page 464: Ipv6 Ospf Configuration

    Enter a 32-bit ID (that uses the format of an IPv4 address in dotted decimal notation) that uniquely identifies an area. A value of 0.0.0.0 indicates that this is a backbone (also known as Area 0). You can create only one backbone area on the Switch. XGS4600 Series User’s Guide...

  • Page 465: Ipv6 Ospf Redistribution

    RIP routing protocol and/or static routes need to exchange routing information with the Switch using OSPF routing protocol. In the IPv6 OSPF Configuration screen, click Redistribute to display the OSPF Redistribution screen. Figure 368 IP Application > OSPF > IPv6 OSPF > Configuration > Redistribute XGS4600 Series User’s Guide...

  • Page 466: Ipv6 Ospf Interfaces

    VLAN interface, an OSPF interface entry is automatically created. In the IPv6 OSPF Configuration screen, click Interface to display the OSPF Interface screen. Figure 369 IP Application > OSPF > IPv6 OSPF > Configuration > Interface XGS4600 Series User’s Guide...

  • Page 467: Ipv6 Ospf Virtual-Links

    Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to begin configuring this screen afresh. 50.13 IPv6 OSPF Virtual-Links Configure and view virtual link settings in this screen. XGS4600 Series User’s Guide...
  • Page 468 This field displays the ID (that uses the format of an IP address in dotted decimal notation) of a peer border router. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XGS4600 Series User’s Guide...
  • Page 469 Table 219 IP Application > OSPF > IPv6 OSPF > Configuration > Virtual-Link (continued) LABEL DESCRIPTION Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. XGS4600 Series User’s Guide...

  • Page 470: Igmp

    Multicast routers can also use IGMP to periodically check if multicast hosts still want to receive transmission from a multicast server. In other words, multicast routers check if any hosts on their network are still members of a specific multicast group. XGS4600 Series User’s Guide...

  • Page 471: How Igmp Works

    In the following figure multicast server X (IP address 10.1.1.1) and multicast server Z (IP address 13.2.2.2) both send multicast traffic to the same multicast group identified by the multicast IP address 225.1.1.1. In IGMP version 3 multicast host A can XGS4600 Series User’s Guide...

  • Page 472: Port-Based Igmp

    Click IP Application > IGMP in the navigation panel to display the screen as shown next. Each entry in the table is automatically created when you configure a new IP domain in the IP Setup screen. Figure 375 IP Application > IGMP XGS4600 Series User’s Guide...
  • Page 473 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 474: Dvmrp

    DVMRP-enabled Layer-3 devices that do not have any hosts in their networks that belong to this multicast group send back a prune message (“P”). If hosts later join the multicast group, a graft message (“G”) to undo the prune is sent to the parent. XGS4600 Series User’s Guide...

  • Page 475: Dvmrp Terminology

    Configure DVMRP on the Switch when you wish it to act as a multicast router (“mrouter”). Click IP Application > DVMRP in the navigation panel to display the screen as shown. Figure 377 IP Application > DVMRP XGS4600 Series User’s Guide...

  • Page 476: Dvmrp Configuration Error Messages

    When you disable IGMP, but DVMRP is still active you also see another warning screen. Figure 379 DVMRP: Unable to Disable IGMP Error Each IP routing domain DVMRP configuration must be in a different VLAN group; otherwise you see the XGS4600 Series User’s Guide...

  • Page 477: Default Dvmrp Timer Values

    10 sec Report interval 35 sec Route expiration time 140 sec Prune lifetime Variable (less than 2 hours) Prune retransmission time 3 sec with exponential back off Graft retransmission time 5 sec with exponential back off XGS4600 Series User’s Guide...

  • Page 478: Differentiated Services

    ToS-enabled network device will not conflict with the DSCP mapping. The DSCP value determines the PHB (Per-Hop Behavior), that each packet gets as it is forwarded across the DiffServ network. Based on the marking rule different kinds of traffic can be marked for different XGS4600 Series User’s Guide...

  • Page 479: Activating Diffserv

    Figure 382 DiffServ Network 53.2 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the selected ports. Click IP Application > DiffServ in the navigation panel to display the screen as shown. XGS4600 Series User’s Guide...
  • Page 480 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. XGS4600 Series User’s Guide...

  • Page 481: Dscp-To-Ieee 802.1P Priority Settings

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 482: Dhcp

    495) to configure DHCPv6 and DNS server settings on the Switch. • Use the DHCPv6 Prefix Delegation screen (Section 54.7 on page 496) to configure DHCPv6 client and IPv6 prefix settings for a specific VLAN on the Switch. XGS4600 Series User’s Guide...

  • Page 483: What You Need To Know

    82 profiles. Click the link next to DHCPv6 to open a screen where you can configure DHCPv6 relay settings. Click the link next to DHCP Server Guard to open a screen where you can specify whether ports are trusted or untrusted ports for DHCP packets. Figure 386 IP Application > DHCP XGS4600 Series User’s Guide...

  • Page 484: Dhcpv4 Status

    Click IP Application > DHCP > DHCPv4 in the navigation panel and then click an existing index number of a DHCP server configuration to view the screen as shown. Use this screen to view details regarding DHCP server settings configured on the Switch. XGS4600 Series User’s Guide...

  • Page 485: Dhcpv4 Relay

    The Switch can be configured as a global DHCP relay. This means that the Switch forwards all DHCP requests from all domains to the same DHCP server. You can also configure the Switch to relay DHCP information based on the VLAN membership of the DHCP clients. XGS4600 Series User’s Guide...

  • Page 486: Dhcpv4 Relay Agent Information

    (1 byte) (1 byte) The 1 in the first field identifies this as an Agent Circuit ID sub-option and two identifies this as an Agent Remote ID sub-option. The next field specifies the length of the field. XGS4600 Series User’s Guide...

  • Page 487: Dhcpv4 Option 82 Profile

    Select this option to have the Switch add its MAC address to the client DHCP requests that it relays to a DHCP server. string Enter a string of up to 64 ASCII characters for the remote ID information in this field. Spaces are allowed. XGS4600 Series User’s Guide...

  • Page 488: Configuring Dhcpv4 Global Relay

    Select a pre-defined DHCPv4 option 82 profile that the Switch applies to all ports. The Switch adds the Circuit ID sub-option and/or Remote ID sub-option specified in the profile to DHCP requests that it relays to a DHCP server. XGS4600 Series User’s Guide...

  • Page 489: Configure Dhcpv4 Global Relay Port

    This field displays a sequential number for each entry. Click an index number to change the settings. Port This field displays the port(s) to which the Switch applies the settings. In stacking mode, the first number represents the slot and the second the port number. XGS4600 Series User’s Guide...

  • Page 490: Global Dhcp Relay Configuration Example

    Switch to send additional information (such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. Figure 393 DHCP Relay Configuration Example EXAMPLE XGS4600 Series User’s Guide...

  • Page 491: Dhcpv4 Vlan Setting

    Specify the size, or count of the IP address pool. The Switch can issue from 1 to 253 IP addresses IP Pool to DHCP clients. IP Subnet Enter the subnet mask for the client IP pool. Mask Default Enter the IP address of the default gateway device. Gateway XGS4600 Series User’s Guide...

  • Page 492: Configure Dhcpv4 Vlan Port

    54.4.7 Configure DHCPv4 VLAN Port Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. To open this screen, click IP Application > DHCP > DHCPv4 > VLAN > Port. XGS4600 Series User’s Guide...
  • Page 493 Delete Select the entries that you want to remove, then click the Delete button to remove the selected entries from the table. Cancel Click this to clear the check boxes above. XGS4600 Series User’s Guide...

  • Page 494: Example: Dhcp Relay For Two Vlans

    (VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.100. Figure 396 DHCP Relay for Two VLANs VLAN 1 VLAN 2 For the example network, configure the VLAN Setting screen as shown. Figure 397 DHCP Relay for Two VLANs Configuration Example EXAMPLE XGS4600 Series User’s Guide...

  • Page 495: Dhcpv6 Status

    Use this screen to configure DHCPv6 and DNS server settings on the Switch. Click IP Application > DHCP > DHCPv6 > Information in the navigation panel to display the screen as shown. Figure 399 IP Application > DHCP > DHCPv6 > Information XGS4600 Series User’s Guide...

  • Page 496: Dhcpv6 Prefix Delegation

    Use this screen to configure DHCPv6 client and IPv6 prefix settings for a specific VLAN on the Switch. Click IP Application > DHCP > DHCPv6 > Prefix Delegation in the navigation panel to display the screen as shown. XGS4600 Series User’s Guide...
  • Page 497 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Check the entries that you want to remove and then click the Delete button. Cancel Click Cancel to clear the selected check boxes. XGS4600 Series User’s Guide...

  • Page 498: Dhcpv6 Relay

    ‘2001:db8:0:0:1a2f::15’. Options Interface ID Select this option to have the Switch add the interface-ID option in the DHCPv6 requests from the clients in the specified VLAN before the Switch forwards them to a DHCPv6 server. XGS4600 Series User’s Guide...

  • Page 499: Dhcp Server Guard

    Use this screen to specify whether ports are trusted or untrusted ports for DHCP packets. Click IP Application > DHCP > DHCP Server Guard in the navigation panel to display the screen as shown. Figure 402 IP Application > DHCP > DHCP Server Guard (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 500 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to their last saved values. XGS4600 Series User’s Guide...

  • Page 501: Vrrp

    VR1 (192.168.1.20) as the default gateway. If switch A has a higher priority, it is the master router. Switch B, having a lower priority, is the backup router. Figure 404 Example 1 If switch A (the master router) is unavailable, switch B takes over. Traffic is then processed by switch B. XGS4600 Series User’s Guide...

  • Page 502: Vrrp Status

    Before configuring VRRP, first create an IP interface (or routing domain) in the IP Setup screen. Click IP Application, VRRP and click the Configuration link to display the VRRP Configuration screen as shown next. Note: You can only configure VRRP on interfaces with unique VLAN IDs. XGS4600 Series User’s Guide...

  • Page 503: Vrrp Parameters

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to discard all changes made in this table. 55.3.2 VRRP Parameters This section describes the VRRP parameters. XGS4600 Series User’s Guide...

  • Page 504: Configuring Vrrp Parameters

    LABEL DESCRIPTION Active Select this option to enable this VRRP entry. Name Enter a descriptive name (up to 32 printable ASCII characters) for identification purposes. Network Select an IP domain to which this VRRP entry applies. XGS4600 Series User’s Guide...

  • Page 505: Viewing Vrrp Summary

    This field displays the priority level (1 to 255) of the entry. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XGS4600 Series User’s Guide...

  • Page 506: Vrrp Configuration Examples

    You want to set switch A as the master router. Configure the VRRP parameters in the VRRP Configuration screens on the switches as shown in the figures below. Figure 410 VRRP Example 1: VRRP Parameter Settings on Switch A EXAMPLE XGS4600 Series User’s Guide...

  • Page 507: Two Subnets Example

    You wish to configure switch A as the master router for virtual router VR1 and as a backup for virtual router VR2. On the other hand, switch B is the master for VR2 and a backup for VR1. XGS4600 Series User’s Guide...
  • Page 508 Figure 415 VRRP Example 2: VRRP Parameter Settings for VR2 on Switch A EXAMPLE Figure 416 VRRP Example 2: VRRP Parameter Settings for VR2 on Switch B EXAMPLE After configuring and saving the VRRP configuration, the VRRP Status screens for both switches are shown next. XGS4600 Series User’s Guide...
  • Page 509 Chapter 55 VRRP Figure 417 VRRP Example 2: VRRP Status on Switch A EXAMPLE Figure 418 VRRP Example 2: VRRP Status on Switch B EXAMPLE XGS4600 Series User’s Guide...

  • Page 510: Router Setup

    56.2 Configuring Router Setup Click IP Application > Router Setup in the navigation panel to display the screen as shown next. Figure 419 IP Application > Router Setup XGS4600 Series User’s Guide...
  • Page 511 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 512: Arp Setup

    ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. 57.1.2.2 ARP Learning Mode The Switch supports three ARP learning modes: ARP-Reply, Gratuitous-ARP, and ARP-Request. XGS4600 Series User’s Guide...
  • Page 513 ARP to inform other devices in the same network to update their ARP table with the new mapping information. In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. XGS4600 Series User’s Guide...

  • Page 514: Arp Setup

    Figure 420 IP Application > ARP Setup 57.2.1 ARP Learning Use this screen to configure each port’s ARP learning mode. Click the link next to ARP Learning in the IP Application > ARP Setup screen to display the screen as shown next. XGS4600 Series User’s Guide...
  • Page 515 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. XGS4600 Series User’s Guide...

  • Page 516: Static Arp

    Click the link next to Static ARP in the IP Application > ARP Setup screen to display the screen as shown. Figure 423 IP Application > ARP Setup > Static ARP (Standalone Mode) Figure 424 IP Application > ARP Setup > Static ARP (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 517 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the check boxes. XGS4600 Series User’s Guide...

  • Page 518: Maintenance

    529) to see the Certificate screen and import the Switch's CA-signed certificates. 58.2 Maintenance Settings Use this screen to manage firmware and your configuration files. Click Management > Maintenance in the navigation panel to open the following screen. XGS4600 Series User’s Guide...
  • Page 519 Click Config 2 to save the current configuration settings to Configuration 2 on the Switch. Click Custom Default to save the current configuration settings to a customized default file on the Switch. This file can be used instead of the Zyxel factory default configuration file. XGS4600 Series User’s Guide...

  • Page 520: Erase Running-Configuration

    Switch IP address (192.168.1.1 or DHCP-assigned IP). 58.2.2 Save Configuration Click Config 1 to save the current configuration settings permanently to Configuration 1 on the Switch. These configurations are set up according to your network environment. XGS4600 Series User’s Guide...

  • Page 521: Reboot System

    Follow the steps below to reset the Switch back to the stacking defaults. The master Switch login information will not be reset. Click the Stacking Default button to clear all Switch configuration information you configured and return to the stacking defaults. Click OK to continue or Cancel to abort. XGS4600 Series User’s Guide...

  • Page 522: Factory Default

    Note: If you did not save a Custom Default file in the Web Configurator or CLI using copy running-config custom-default, then the factory default file is restored after you press click Custom Default (next to Reboot System) on the Switch. You will then have to make all your configurations again on the Switch. XGS4600 Series User’s Guide...

  • Page 523: Firmware Upgrade

    Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. Click Management > Maintenance > Firmware Upgrade to view the screen as shown next. Figure 431 Management > Maintenance > Firmware Upgrade (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 524 Firmware 1 shows its version number (and model code) and MM/DD/YYYY creation date. • Firmware 2 shows its version number (and model code) and MM/DD/YYYY creation date. Current Boot Image This displays which firmware is currently in use on the Switch (Firmware 1 or Firmware 2). XGS4600 Series User’s Guide...

  • Page 525: Restore Configuration

    Backing up your Switch configurations allows you to create various “snap shots” of your device from which you may restore at a later date. Back up your current Switch configuration to a computer using the Backup Configuration screen. XGS4600 Series User’s Guide...

  • Page 526: Auto Configuration

    Switch using the DHCP or HTTPS mode. This will overwrite the running configuration stored in the Switch’s RAM instead of the startup configuration stored in the Switch’s flash memory. Figure 435 Management > Maintenance > Auto Configuration XGS4600 Series User’s Guide...

  • Page 527: Tech-Support

    Switch. The Tech Support menu eases your effort in obtaining reports and it is also available in CLI command by typing “Show tech-support” command. Click Management > Maintenance > Tech-Support to see the following screen. XGS4600 Series User’s Guide...
  • Page 528 Click Download to see the memory section log report. This log report is stored in flash memory. Mbuf Click Download to see the Mbuf log report. The log includes Mbuf over threshold information. This log report is stored in flash memory. XGS4600 Series User’s Guide...

  • Page 529: Tech-Support Download

    Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. Click Management > Maintenance > Certificates to open the following screen. Use this screen to import the Switch's CA-signed certificates. XGS4600 Series User’s Guide...
  • Page 530 Valid From This field displays the date that the certificate becomes applicable. Valid To This field displays the date that the certificate expires. XGS4600 Series User’s Guide...

  • Page 531: Https Certificates

    Use this screen to view the HTTPS certificate details. Click a hyperlink in the Service column in the Management > Maintenance > Certificates screen to open the following screen. Figure 439 Management > Maintenance > Certificates > HTTPS XGS4600 Series User’s Guide...

  • Page 532: Technical Reference

    This is a sample FTP session showing the transfer of the computer file "firmware.bin" to the Switch. ftp> get config config.cfg This is a sample FTP session saving the current configuration to a file called “config.cfg” on your computer. XGS4600 Series User’s Guide...

  • Page 533: Ftp Command Line Procedure

    Transfer files in either ASCII (plain text format) or in binary mode. Configuration and firmware files should be transferred in binary mode. Initial Remote Directory Specify the default remote directory (path). Initial Local Directory Specify the default local directory (path). 58.9.5 FTP Restrictions FTP will not work when: XGS4600 Series User’s Guide...
  • Page 534 • FTP service is disabled in the Service Access Control screen. • The IP addresses in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. XGS4600 Series User’s Guide...

  • Page 535: Access Control

    “trusted computers” from which an administrator may use a service to manage the Switch. 59.2 Access Control Main Settings Use this screen to display the main screen. Click Management > Access Control in the navigation panel to display the main screen as shown. XGS4600 Series User’s Guide...

  • Page 536: Configure Snmp

    Switch. 59.3 Configure SNMP Use this screen to configure your SNMP settings. Click Management > Access Control > SNMP to view the screen as shown. Figure 441 Management > Access Control > SNMP XGS4600 Series User’s Guide...

  • Page 537: Configure Snmp Trap Group

    59.3.1 Configure SNMP Trap Group From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP traps that should be sent to each SNMP manager. XGS4600 Series User’s Guide...

  • Page 538: Enable Or Disable Sending Of Snmp Traps On A Port

    59.3.2 Enable or Disable Sending of SNMP Traps on a Port From the SNMP > Trap Group screen, click Port to view the screen as shown. Use this screen to set whether a trap received on the ports would be sent to the SNMP manager. XGS4600 Series User’s Guide...
  • Page 539 Use this row only if you want to make some of the settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. XGS4600 Series User’s Guide...

  • Page 540: Configure Snmp User

    Note: Use the user name and password of the login accounts you specify in this screen to create accounts on the SNMP v3 manager. Username Specify the user name of a login account on the Switch. XGS4600 Series User’s Guide...
  • Page 541 Group This field displays the SNMP group to which this user belongs. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XGS4600 Series User’s Guide...

  • Page 542: Set Up Login Accounts

    This is the default administrator account with the “admin” user name. You cannot change the default administrator user name. Old Password Type the existing system password (1234 is the default password when shipped). New Password Enter your new system password. Retype to Retype your new system password for confirmation. confirm XGS4600 Series User’s Guide...

  • Page 543: Service Access Control

    “trusted computers” for each service in the Remote Management screen (discussed later). Click Access Control to go back to the main Access Control screen. Figure 447 Management > Access Control > Service Access Control XGS4600 Series User’s Guide...

  • Page 544: Remote Management

    Use this screen to specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click Management > Access Control > Remote Management to view the screen as shown next. Click Access Control to return to the Access Control screen. XGS4600 Series User’s Guide...

  • Page 545: Technical Reference

    Cancel Click Cancel to begin configuring this screen afresh. 59.7 Technical Reference This section provides technical background information on the topics discussed in this chapter. XGS4600 Series User’s Guide...

  • Page 546: About Snmp

    SNMP v3 and Security SNMP v3 enhances security for SNMP management. SNMP managers can be required to authenticate with agents before conducting SNMP management sessions. Security can be further enhanced by encrypting the SNMP messages sent from the managers. XGS4600 Series User’s Guide...
  • Page 547 This trap is sent when the temperature is OfRangeRecovered .3.26.2.7 recovered from the out of range to normal operating range. voltage zyHwMonitorPowerSupplyVolt 1.3.6.1.4.1.890.1.15 This trap is sent when the voltage goes ageOutOfRange .3.26.2.3 above or below the normal operating range. XGS4600 Series User’s Guide...
  • Page 548 This trap is sent when the port is turned on to covered .3.59.4.6 recover from a short circuit. zyPoePowerPortOverSystemBu 1.3.6.1.4.1.890.1.15 This trap is sent when the port is turned on to dgetRecovered .3.59.4.7 recover from an over system budget. XGS4600 Series User’s Guide...
  • Page 549 Table 267 SNMP Interface Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION linkup linkUp 1.3.6.1.6.3.1.1.5.4 This trap is sent when the Ethernet link is up. linkdown linkDown 1.3.6.1.6.3.1.1.5.3 This trap is sent when the Ethernet link is down. XGS4600 Series User’s Guide...
  • Page 550 Storm-control zyPortStormControlTrap 1.3.6.1.4.1.890.1.15. This trap is sent when storm control is 3.78.2.1 detected on a specific port. A packet filter action has been applied on the interface. XGS4600 Series User’s Guide...
  • Page 551 1.3.6.1.2.1.80.0.3 This trap is sent when a ping test is completed. traceroute traceRouteTestFailed 1.3.6.1.2.1.81.0.2 This trap is sent when a traceroute test fails. traceRouteTestCompleted 1.3.6.1.2.1.81.0.3 This trap is sent when a traceroute test is completed. XGS4600 Series User’s Guide...

  • Page 552: Ssh Overview

    Figure 450 SSH Communication Example 59.7.2.1 How SSH Works The following table summarizes how a secure connection is established between two remote hosts. XGS4600 Series User’s Guide...
  • Page 553 Your Switch supports SSH version 2 using RSA authentication and three encryption methods (DES, 3DES and Blowfish). The SSH server is implemented on the Switch for remote management and file transfer on port 22. Only one SSH connection is allowed at a time. XGS4600 Series User’s Guide...

  • Page 554: Introduction To Https

    If you have not changed the default HTTPS port on the Switch, then in your browser enter “https://Switch IP Address/” as the web site address where “Switch IP Address” is the IP address or domain name of the Switch you wish to access. XGS4600 Series User’s Guide...
  • Page 555 Figure 454 Security Certificate Warning (Internet Explorer 11) After you log in, you will see the red address bar with the message Certificate Error. Click on Certificate Error next to the address bar and click View certificates. XGS4600 Series User’s Guide...
  • Page 556 Mozilla Firefox Warning Messages When you attempt to access the Switch HTTPS server, a Your connection is not secure screen may display. If that is the case, click I Understand the Risks and then the Add Exception... button. XGS4600 Series User’s Guide...
  • Page 557 Figure 457 Security Alert (Mozilla Firefox) Confirm the HTTPS server URL matches. Click Confirm Security Exception to proceed to the Web Configurator login screen. Figure 458 Security Alert (Mozilla Firefox) EXAMPLE XGS4600 Series User’s Guide...

  • Page 558: Google Chrome Warning Messages

    After you accept the certificate and enter the login user name and password, the Switch main screen appears. The lock displayed in the bottom right of the browser status bar or next to the website address denotes a secure connection. XGS4600 Series User’s Guide...
  • Page 559 Chapter 59 Access Control Figure 460 Example: Lock Denoting a Secure Connection EXAMPLE XGS4600 Series User’s Guide...

  • Page 560: Diagnostic

    Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to ping IP addresses, run a traceroute, perform port tests or show the Switch’s location between devices. Figure 461 Management > Diagnostic (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 561 Type the IP address or host name of a device that you want to ping in order to test a Name connection. Click Ping to have the Switch ping the IP address. Count Enter the number of ICMP Echo Request (ping) messages the Switch continuously sends. Trace Route Test XGS4600 Series User’s Guide...
  • Page 562 Pair status is Ok and the Switch chipset supports this feature. This shows N/A if the Pair status is Open or Short. Check the Distance to fault. This shows Unsupported if the Switch chipset does not support to show the cable length. XGS4600 Series User’s Guide...
  • Page 563 Enter a time interval (in minutes) and click Blink to show the actual location of the Switch between several devices in a rack. The default time interval is 30 minutes. Click Stop to have the Switch terminate the blinking locater LED. XGS4600 Series User’s Guide...

  • Page 564: System Log

    The summary table shows the time the log message was recorded and the reason the log message was generated. Click Refresh to update this screen. Click Clear to clear the whole log, regardless of what is currently displayed on the screen. Click Download to save the log to your computer. XGS4600 Series User’s Guide...

  • Page 565: Syslog Setup

    The syslog feature sends logs to an external syslog server. Use this screen to configure the device’s system logging settings and configure a list of external syslog servers. Click Management > Syslog Setup in the navigation panel to display this screen. XGS4600 Series User’s Guide...
  • Page 566 Click Add to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. XGS4600 Series User’s Guide...
  • Page 567 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click Delete to remove the selected entries. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 568: Cluster Management

    The switches being managed by the cluster manager Switch. In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. Figure 465 Clustering Application Example XGS4600 Series User’s Guide...

  • Page 569: What You Can Do

    Error (for example the cluster member Switch password was changed or the Switch was set as the manager and so left the member list, and so on) Offline (the Switch is disconnected – Offline shows approximately 1.5 minutes after the link between cluster member and manager goes down) XGS4600 Series User’s Guide...

  • Page 570: Clustering Management Configuration

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. Clustering The following fields relate to the switches that are potential cluster members. Candidate XGS4600 Series User’s Guide...

  • Page 571: Technical Reference

    Web Configurator home page. This cluster member Web Configurator home page and the home page that you would see if you accessed it directly are different. XGS4600 Series User’s Guide...
  • Page 572 Figure 468 Cluster Management: Cluster Member Web Configurator Screen example 63.4.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. XGS4600 Series User’s Guide...
  • Page 573 This is the name of the firmware file you want to upload to the cluster member 460ABPI0.bin switch. This is the cluster member switch’s firmware name as seen in the cluster fw-00-a0-c5-01-23-46 manager switch. This is the cluster member switch’s configuration file name as seen in the cluster config-00-a0-c5-01-23-46 manager switch. XGS4600 Series User’s Guide...

  • Page 574: Mac Table

    MAC address. The Switch then learns the port that replies with the MAC address. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. XGS4600 Series User’s Guide...

  • Page 575: Viewing The Mac Table

    MAC forwarding table or MAC filtering table from the MAC table using this screen. Click Management > MAC Table in the navigation panel to display the following screen. Figure 471 Management > MAC Table XGS4600 Series User’s Guide...
  • Page 576 This is the port from which the above MAC address was learned. In stacking mode, the first number represents the slot and the second the port number. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). XGS4600 Series User’s Guide...

  • Page 577: Ip Table

    • If the Switch has already learned the port for this IP address, but the destination port is the same as the port it came in on, then it filters the packet. Figure 472 IP Table Flowchart XGS4600 Series User’s Guide...

  • Page 578: Viewing The Ip Table

    IP address belongs to the Switch. In stacking mode, the first number represents the slot and the second the port number. Type This shows whether the IP address is dynamic (learned by the Switch) or static (belonging to the Switch). XGS4600 Series User’s Guide...

  • Page 579: Arp Table

    MAC address that replied. 66.2 Viewing the ARP Table Use the ARP table to view IP-to-MAC address mappings and remove specific dynamic ARP entries. Click Management > ARP Table in the navigation panel to open the following screen. XGS4600 Series User’s Guide...
  • Page 580 This shows 0 for a static entry. Type This shows whether the IP address is dynamic (learned by the Switch) or static (manually configured in the Basic Setting > IP Setup or IP Application > ARP Setup > Static ARP screen). XGS4600 Series User’s Guide...

  • Page 581: Routing Table

    Use this screen to view IPv4 routing table information. Click Management > Routing Table > IPv4 Routing Table in the navigation panel to display the screen as shown. Figure 476 Management > Routing Table > IPv4 Routing Table XGS4600 Series User’s Guide...

  • Page 582: Ipv6 Routing Table

    This field displays the IPv6 address of the gateway that helps forward the packet to the destination. Interface This field displays the descriptive name of the IPv6 interface that is used to forward the packets to the destination. XGS4600 Series User’s Guide...
  • Page 583 This field displays the method used to learn the route. STATIC – added as a static entry. Connect – added as a local interface entry. RIP – added as a RIP entry. OSPF – added as an OSPF entry. XGS4600 Series User’s Guide...

  • Page 584: Path Mtu Table

    This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. XGS4600 Series User’s Guide...

  • Page 585: Configure Clone

    This chapter shows you how you can copy the settings of one port onto other ports. 69.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. XGS4600 Series User’s Guide...
  • Page 586 Chapter 69 Configure Clone Figure 479 Management > Configure Clone (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 587 Chapter 69 Configure Clone Figure 480 Management > Configure Clone (Stacking Mode) XGS4600 Series User’s Guide...
  • Page 588 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4600 Series User’s Guide...

  • Page 589: Ipv6 Neighbor Table

    This field displays the IPv6 address of the Switch or a neighboring device. This field displays the MAC address of the IPv6 interface on which the IPv6 address is configured or the MAC address of the neighboring device. XGS4600 Series User’s Guide...
  • Page 590 • static (S): The interface address is statically configured. Interface This field displays the ID number of the IPv6 interface on which the IPv6 address is created or through which the neighboring device can be reached. XGS4600 Series User’s Guide...

  • Page 591: Port Status

    Status in all Web Configurator screens and then the Port Status link in the Quick Links section of the Status screen to display the Port Status screen as shown next. You can also click Management > Port Status to see the following screen. XGS4600 Series User’s Guide...
  • Page 592 Chapter 71 Port Status Figure 483 Management > Port Status (Standalone Mode) Figure 484 Management > Port Status (Stacking Mode) XGS4600 Series User’s Guide...

  • Page 593: Port Details

    71.3.1 Port Details Click a number in the Port column in the Port Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. XGS4600 Series User’s Guide...
  • Page 594 Chapter 71 Port Status Figure 485 Management > Port Status > Port Details (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 595 This field shows if LACP is enabled on this port or not. TxPkts This field shows the number of transmitted frames on this port. RxPkts This field shows the number of received frames on this port. XGS4600 Series User’s Guide...
  • Page 596 This field shows the number of packets (including bad packets) received that were 64 octets in length. 65 to 127 This field shows the number of packets (including bad packets) received that were between 65 and 127 octets in length. XGS4600 Series User’s Guide...

  • Page 597: Ddmi

    Switch in a stack. Port This identifies the SFP port. In stacking mode, the first number represents the slot ID and the second is the port number. Vendor This displays the vendor name of the optical transceiver. XGS4600 Series User’s Guide...

  • Page 598: Ddmi Details

    SFP port. The parameters include, for example, transmitting and receiving power, and module temperature. Click a number in the Port column in the DDMI screen to view current transceivers’ status. Figure 489 Management > Port Status > DDMI > DDMI Details (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 599 This displays the level of voltage being supplied to the SFP transceiver. TX Bias (mA) This displays the milliamps (mA) being supplied to the SFP transceiver’s Laser Diode Transmitter. TX Power This displays the amount of power the SFP transceiver is transmitting. (dbm) XGS4600 Series User’s Guide...

  • Page 600: Port Utilization

    Alternatively, click Status from any Web Configurator screen and then the Port Status link in the Quick Links section of the Status screen to display the Port Status screen and then click the Utilization link tab. Figure 491 Management > Port Status > Utilization (Standalone Mode) XGS4600 Series User’s Guide...
  • Page 601 This field shows the transmission speed of data received on this port in kilobytes per second. Rx Utilization% This field shows the percentage of actual received frames on this port as a percentage of the Link speed. XGS4600 Series User’s Guide...

  • Page 602: Service Register

    This field displays whether the service license is enabled at myZyxel (Licensed) or not (Not Licensed). Type Trial indicates a 30-day trial service license is currently applied on the Switch. Standard indicates a service license is registered at www.myzyxel.com. N/A is displayed if the service license is not registered. XGS4600 Series User’s Guide...
  • Page 603 Note: You can enable a standard license at myZyxel if the trial license expires. Update Click this button to renew service license information (such as the registration status and expiration day). Note: It is recommended you use this button after you register for a new service. XGS4600 Series User’s Guide...

  • Page 604: Troubleshooting And Appendices

    Troubleshooting and Appendices...

  • Page 605: Troubleshooting

    Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the power adapter or cord to the Switch (in AC models or if the AC power supply is connected in AC/DC models). If the problem continues, contact the vendor. XGS4600 Series User’s Guide...

  • Page 606: Switch Access And Login

    Switch, skip this step.) Reset the device to its factory defaults, and try to access the Switch with the default IP address. See Section 4.7 on page If the problem continues, contact the vendor, or try the advanced suggestion. XGS4600 Series User’s Guide...

  • Page 607: Switch Configuration

    Management > Access Control > Remote Management screen for telnet, HTTP and SSH (see Section 59.6 on page 544). Computers not belonging to the secured client set cannot get permission to access the Switch. 73.3 Switch Configuration I lost my configuration settings after I restart the Switch. XGS4600 Series User’s Guide...
  • Page 608 If you plug the power cable back to the Switch, it will reboot and load the configuration file that was used the last time. For example, if Config 1 was used on the Switch before you accidentally unplugged the Switch, Config 1 will be loaded when rebooting. XGS4600 Series User’s Guide...

  • Page 609: Appendix A Customer Support

    • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications Corporation • http://www.zyxel.com Asia China • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • https://www.zyxel.com/cn/zh/ India • Zyxel Technology India Pvt Ltd. • https://www.zyxel.com/in/en/ Kazakhstan •...
  • Page 610 • Zyxel Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • Zyxel Communications Corporation • https://www.zyxel.com/tw/zh/ Thailand • Zyxel Thailand Co., Ltd. • https://www.zyxel.com/th/th/ Vietnam • Zyxel Communications Corporation-Vietnam Office • https://www.zyxel.com/vn/vi Europe Belarus • Zyxel BY • https://www.zyxel.by Belgium • Zyxel Communications B.V. • https://www.zyxel.com/be/nl/...
  • Page 611 Appendix A Customer Support • https://www.zyxel.com/be/fr/ Bulgaria • Zyxel България • https://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • https://www.zyxel.com/cz/cs/ Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da/ Estonia • Zyxel Estonia • https://www.zyxel.com/ee/et/ Finland • Zyxel Communications • https://www.zyxel.com/fi/fi/ France •...
  • Page 612 • Zyxel Communications Poland • https://www.zyxel.com/pl/pl/ Romania • Zyxel Romania • https://www.zyxel.com/ro/ro Russia • Zyxel Russia • https://www.zyxel.com/ru/ru/ Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • https://www.zyxel.com/sk/sk/ Spain • Zyxel Communications ES Ltd. • https://www.zyxel.com/es/es/ Sweden • Zyxel Communications • https://www.zyxel.com/se/sv/ Switzerland •...
  • Page 613 Appendix A Customer Support Turkey • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr/ • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en/ Ukraine • Zyxel Ukraine • http://www.ua.zyxel.com South America Argentina • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ Brazil • Zyxel Communications Brasil Ltda. • https://www.zyxel.com/br/pt/ Colombia •...
  • Page 614 Appendix A Customer Support Middle East • Zyxel Communications Corporation • https://www.zyxel.com/me/en/ North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en/ Oceania Australia • Zyxel Communications Corporation • https://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • https://www.zyxel.com/za/en/...

  • Page 615: Appendix B Common Services

    File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by email. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol – a client or server protocol for the world wide web. XGS4600 Series User’s Guide...
  • Page 616 Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one email server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). XGS4600 Series User’s Guide...
  • Page 617 Its primary function is to allow users to log into remote host systems. TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. XGS4600 Series User’s Guide...

  • Page 618: Appendix C Ipv6

    54 bits 64 bits Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. XGS4600 Series User’s Guide...
  • Page 619 The following table describes the multicast addresses which are reserved and cannot be assigned to a multicast group. Table 296 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 XGS4600 Series User’s Guide...
  • Page 620 IA_NA were obtained) a Renew message. If the time T2 is reached and the server does not respond, the client sends a Rebind message to any available server (S2). For an IA_TA, the XGS4600 Series User’s Guide...
  • Page 621 (from the host) with a neighbor advertisement message. • Neighbor advertisement: A response from a node to announce its link-layer address. • Router solicitation: A request from a host to locate a router that can act as the default router and XGS4600 Series User’s Guide...
  • Page 622 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. XGS4600 Series User’s Guide...
  • Page 623 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler – a DHCPv6 client. XGS4600 Series User’s Guide...
  • Page 624 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) check box to enable it. Click OK to save the change. XGS4600 Series User’s Guide...
  • Page 625 Windows 10 supports IPv6 by default. DHCPv6 is enabled when you enable IPv6 on a Windows 10 PC. To enable IPv6 in Windows 10: Select Control Panel > Network and Sharing Center. On the left side of the Network and Sharing Center, select Change adapter settings. Right-click your network connection and select Properties. XGS4600 Series User’s Guide...
  • Page 626 • When you select Automatic (DHCP), the IP address settings and DNS server address setting are set automatically by your router. • When you select Manual, you can manually set your IP address settings and DNS server address. Now your computer can obtain an IPv6 address from a DHCPv6 server. XGS4600 Series User’s Guide...

  • Page 627: Appendix D Legal Information

    Regulatory Notice and Statement United States of America The following information applies if you use the product within USA area. US Importer: Zyxel Communications, Inc, 1130 North Miller Street Anaheim, CA92806-2001, https://www.zyxel.com/us/en/ Federal Communications Commission (FCC) EMC Statement • This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference.
  • Page 628 – If the system has multiple sources of power, disconnect power from the system by unplugging all power cables from the power supply. • CLASS 1 LASER PRODUCT (for products with mini-GBIC slots or laser products, such as fiber-optic transceiver and GPON products). XGS4600 Series User’s Guide...
  • Page 629 Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. XGS4600 Series User’s Guide...
  • Page 630 Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. XGS4600 Series User’s Guide...
  • Page 631 Register your product online at www.zyxel.com to receive email notices of firmware upgrades and related information. Trademarks ZyNOS (Zyxel Network Operating System) and ZON (Zyxel One Network) are registered trademarks of Zyxel Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.

  • Page 632: Index

    Switch All connected auto-crossover Ethernet port Setting Wizard automatic VLAN registration anti-arpscan blocked hosts Autonomous System host threshold and OSPF status Autonomous System (AS) 448, 474 trusted hosts applications bridging fiber uplink IEEE 802.1Q VLAN XGS4600 Series User’s Guide...
  • Page 633 CFI (Canonical Format Indicator) copyright changing the password Cisco Discovery Protocol, see CDP CPU management port CIST CPU protection Class of Service crossover Ethernet cable classifier current date and QoS current time editing customer support example XGS4600 Series User’s Guide...
  • Page 634 DHCP Unique IDentifier default timer setting DHCP Unique IDentifier (DUID) error message DHCP-assigned IP graft DHCPv4 how it works global relay implementation global relay example probe Option 82 prune option 82 profiles report Relay Agent Information XGS4600 Series User’s Guide...
  • Page 635 General Setup screen exchange RIP and OSPF information 456, 465 getting help external authentication server gigabit ports GMT (Greenwich Mean Time) gratuitous ARP green Ethernet and uplink port fan speed 86, 87 XGS4600 Series User’s Guide...
  • Page 636 IGMP (Internet Group Management Protocol) IPv4/IPv6 dual stack IGMP filtering IPv6 29, 618 profile addressing profiles enable in Windows 10 IGMP leave timeout enable in Windows 2003 fast enable in Windows 7 normal enable in Windows Vista XGS4600 Series User’s Guide...
  • Page 637 449, 451, 462 configuration LLDP basic TLV global settings local port status organization-specific TLV status of remote device Java permission 45, 607 JavaScript 45, 607 LLDP (Link Layer Discovery Protocol) LLDP screen LLDP-MED classes of endpoint devices XGS4600 Series User’s Guide...
  • Page 638 ARP inspection MLD proxy MAC freeze MLD snooping MAC table MLD snooping-proxy display criteria filtering how it works filtering profile sorting criteria port role transfer type VLAN ID viewing monitor port 188, 190 MAC-based VLAN XGS4600 Series User’s Guide...
  • Page 639 MVR (Multicast VLAN Registration) OSPF redistribution 456, 465 myZyxel overheating prevention Neighbor Detail screen Neighbor Discovery Protocol (NDP) PAgP Neighbor screen password administrator 47, 542 network applications change network management system (NMS) write down NTP (RFC-1305) XGS4600 Series User’s Guide...
  • Page 640 187, 190 direction priority level egress queue assignment ingress priority queue assignment port redundancy priority, and OSPF Port screen product registration DHCPv4 Global Relay protocol based VLAN DHCPv4 VLAN example port security PVID address learning XGS4600 Series User’s Guide...
  • Page 641 520, 522 service access control to stacking default settings service port restore sFlow configuration configuration restore configuration datagram restoring configuration overview Reverse Path Forwarding (RPF) poll interval Reverse Path Multicasting (RPM) sample rate XGS4600 Series User’s Guide...
  • Page 642 MAC forwarding DHCP client Static MAC Forwarding screen fanless-type usage precaution static multicast forwarding fan-type usage precaution Static Multicast Forwarding screen switch lockout static route Switch reset enable Switch Setup screen metric syslog 329, 565 XGS4600 Series User’s Guide...
  • Page 643 460, 467 translating RIP into OSPF 457, 466 virtual links, and OSPF Trap Group screen Virtual Local Area Network traps Virtual Router destination status troubleshooting Virtual Router (VR) trunk group Virtual Router Redundancy Protocol (VRRP) trunking VLAN XGS4600 Series User’s Guide...
  • Page 644 250, 253 port-based Q-in-Q weight priority Windows OS version selective Q-in-Q check VLAN terminology WRR (Weighted Round Robin Scheduling) VLAN trunking VLAN Trunking Protocol, see VTP VLAN-unaware devices XGS4600 Series User’s Guide...
  • Page 645 ZULD (Zyxel Unidirectional Link Detection) ZyNOS (Zyxel Network Operating System) 532, 631 Zyxel AP Configurator (ZAC) Zyxel Discovery Protocol (ZDP) Zyxel One Network (ZON) Utility Zyxel online services center Zyxel Unidirectional Link Detection (ZULD) XGS4600 Series User’s Guide...

This manual is also suitable for:

Xgs4600-32Xgs4600-32fXgs4600-52f

Table of Contents