ZyXEL Communications XGS2220 Series User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Switch
  5. XGS2220 Series
  6. User manual

ZyXEL Communications XGS2220 Series User Manual

30/54-port gbe/sfp smart managed layer-3 switch
Hide thumbs
1
2
3
Table Of Contents
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
Table of Contents

Advertisement

Quick Links

Download this manual
User's Guide
XGS2220 Series
30/54-port GbE/SFP Smart Managed Layer-3 Switch
Default Login Details
LAN IP Address
User Name
Password
Copyright © 2022 Zyxel and/or its affiliates. All Rights Reserved.
http://setup.zyxel
or
http://DHCP-assigned IP
or
http://192.168.1.1
admin
1234
Version 4.80 Edition 1, 07/2022

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the XGS2220 Series and is the answer not in the manual?

Questions and answers

Related Manuals for ZyXEL Communications XGS2220 Series

Summary of Contents for ZyXEL Communications XGS2220 Series

  • Page 1 User’s Guide XGS2220 Series 30/54-port GbE/SFP Smart Managed Layer-3 Switch Default Login Details Version 4.80 Edition 1, 07/2022 LAN IP Address http://setup.zyxel http://DHCP-assigned IP http://192.168.1.1 User Name admin Password 1234 Copyright © 2022 Zyxel and/or its affiliates. All Rights Reserved.
  • Page 2 Nebula Control Center to get this User’s Guide on how to configure the Switch using Nebula • More Information Go to https://businessforum.zyxel.com for product discussions. Go to support.zyxel.com to find other information on the Switch XGS2220 Series User’s Guide...

  • Page 3: Document Conventions

    Figures in this user guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Generic Router Wireless Router / Access Point Generic Switch Smart TV Desktop Laptop IP Camera Printer Server XGS2220 Series User’s Guide...

  • Page 4: Table Of Contents

    Switch Setup ............................198 Syslog Setup ............................201 Time Range ............................204 PORT ..............................207 Auto PD Recovery ..........................208 Flex Link ..............................213 Green Ethernet ........................... 216 Link Aggregation ..........................218 Link Layer Discovery Protocol (LLDP) ....................226 XGS2220 Series User’s Guide...
  • Page 5 Anti-Arpscan ............................468 BPDU Guard ............................474 Storm Control ............................477 Error-Disable ............................479 IP Source Guard ..........................485 DHCP Snooping ..........................489 ARP Inspection ............................ 500 Port Authentication ..........................518 Port Security ............................530 MAINTENANCE ............................ 533 XGS2220 Series User’s Guide...
  • Page 6 Contents Overview Networked AV Mode ......................... 556 Troubleshooting and Appendices ....................616 Troubleshooting ..........................617 XGS2220 Series User’s Guide...

  • Page 7: Table Of Contents

    2.4 Mounting the Switch on a Rack ....................41 2.4.1 Installation Requirements ..................... 41 2.4.2 Precautions ..........................41 2.4.3 Attaching the Mounting Brackets to the Switch ............... 42 2.4.4 Mounting the Switch on a Rack ..................42 XGS2220 Series User’s Guide...
  • Page 8 4.9 Reset the Switch ..........................97 4.9.1 Reboot the Switch ........................ 97 4.9.2 Reload the Configuration File ....................98 4.10 Log Out of the Web Configurator ....................98 4.11 Help ..............................99 Chapter 5 Initial Setup Example ........................100 XGS2220 Series User’s Guide...
  • Page 9 Chapter 10 IP Table..............................125 10.1 IP Table Overview ........................125 10.2 Viewing the IP Table ........................126 Chapter 11 IPv6 Neighbor Table.........................127 11.1 IPv6 Neighbor Table Overview ....................127 11.2 Viewing the IPv6 Neighbor Table ..................... 127 XGS2220 Series User’s Guide...
  • Page 10 16.2 IPv4 Routing Table ........................145 16.3 IPv6 Routing Table ........................146 Chapter 17 System Information ..........................147 17.0.1 What You Can Do ......................147 17.1 System Information ........................147 Chapter 18 System Log............................150 18.1 System Log Overview ......................... 150 XGS2220 Series User’s Guide...
  • Page 11 24.3 IPv6 Global Setup ........................173 24.4 IPv6 Interface Setup ........................174 24.4.1 Edit an IPv6 Interface ......................175 24.5 IPv6 Link-Local Address Setup ....................175 24.5.1 Edit an IPv6 Link-Local Address ..................176 24.6 IPv6 Global Address Setup ......................177 XGS2220 Series User’s Guide...
  • Page 12 27.2 Switch Setup ..........................198 Chapter 28 Syslog Setup .............................201 28.1 Syslog Overview .......................... 201 28.1.1 What You Can Do ......................201 28.2 Syslog Setup ..........................201 28.2.1 Add/Edit a Syslog Server ....................203 Chapter 29 Time Range............................204 XGS2220 Series User’s Guide...
  • Page 13 34.5 Technical Reference ........................224 34.5.1 Static Trunking Example ....................224 Chapter 35 Link Layer Discovery Protocol (LLDP) .....................226 35.1 LLDP Overview ..........................226 35.2 LLDP-MED Overview ........................227 35.2.1 What You Can Do – LLDP ....................228 XGS2220 Series User’s Guide...
  • Page 14 Chapter 39 ZULD..............................266 39.1 ZULD Overview ..........................266 39.1.1 What You Can Do ......................266 39.1.2 What You Need to Know ....................266 39.2 ZULD Status ..........................267 39.3 ZULD Setup ........................... 268 Chapter 40 SWITCHING............................270 XGS2220 Series User’s Guide...
  • Page 15 45.5.1 Add IGMP Filtering Profile ....................293 45.5.2 Add IGMP Filtering Rule ....................293 45.6 IPv6 Multicast Status ........................294 45.7 MLD Snooping-proxy ........................295 45.8 MLD Snooping-proxy VLAN ....................... 295 45.8.1 Add/Edit MLD Snooping-proxy VLAN ................296 XGS2220 Series User’s Guide...
  • Page 16 48.1.2 What You Need to Know ....................323 48.2 Activating DiffServ ........................324 48.3 DSCP-to-IEEE 802.1p Priority Settings ..................325 48.3.1 Configuring DSCP Settings ....................326 Chapter 49 Queuing Method..........................327 49.1 Queuing Method Overview ...................... 327 XGS2220 Series User’s Guide...
  • Page 17 53.9.1 Add/Edit Multiple Spanning Tree ..................357 53.10 Multiple Spanning Tree Protocol Port Setup ................358 53.11 Technical Reference ........................ 359 53.11.1 MSTP Network Example ....................360 53.11.2 MST Region ........................360 53.11.3 MST Instance ........................361 XGS2220 Series User’s Guide...
  • Page 18 56.12.1 Add/Edit a MAC Based VLAN ..................384 56.13 Vendor ID Based VLAN ......................385 56.13.1 Add/Edit a Vendor ID Based VLAN ................385 56.14 Port-Based VLAN Setup ......................386 56.15 Configure a Port-Based VLAN ....................387 XGS2220 Series User’s Guide...
  • Page 19 61.1.2 What You Need to Know ....................405 61.2 ARP Learning ..........................407 61.3 Static ARP ............................ 408 61.3.1 Add/Edit Static ARP ......................409 Chapter 62 DHCP ..............................411 62.1 DHCP Overview .......................... 411 62.1.1 What You Can Do ......................411 XGS2220 Series User’s Guide...
  • Page 20 65.5.2 Supported RADIUS Attributes ................... 439 65.5.3 Attributes Used for Authentication .................. 439 65.5.4 Attributes Used for Accounting ..................440 Chapter 66 Access Control..........................443 66.1 Access Control Overview ......................443 66.1.1 What You Can Do ......................443 XGS2220 Series User’s Guide...
  • Page 21 69.2 Anti-Arpscan Status ........................469 69.3 Anti-Arpscan Host Status ......................469 69.4 Anti-Arpscan Setup ........................470 69.5 Anti-Arpscan Trust Host ......................472 69.5.1 Add/Edit Anti-Arpscan Trust Hosts ................... 472 Chapter 70 BPDU Guard ............................474 70.1 BPDU Guard Overview ....................... 474 XGS2220 Series User’s Guide...
  • Page 22 74.5 DHCP Snooping VLAN Setup ..................... 495 74.6 DHCP Snooping VLAN Port Setup ..................... 496 74.6.1 Add/EDIT DHCP Snooping VLAN Ports ................496 74.7 Technical Reference ........................497 74.7.1 DHCP Snooping Overview ....................497 Chapter 75 ARP Inspection ..........................500 XGS2220 Series User’s Guide...
  • Page 23 76.6.3 EAP (Extensible Authentication Protocol) Authentication ........... 528 76.6.4 EAPOL (EAP over LAN) ...................... 529 Chapter 77 Port Security............................530 77.1 Port Security Overview ....................... 530 77.2 About Port Security ........................530 77.3 Port Security Setup ........................530 XGS2220 Series User’s Guide...
  • Page 24 79.5 What You Can Do ........................558 79.6 System Information ........................558 79.7 SYSTEM ............................560 79.8 What You Can Do ........................560 79.9 Cloud Management ........................561 79.10 General Setup ........................... 563 79.11 IP Setup ............................565 XGS2220 Series User’s Guide...
  • Page 25 79.37 Access Control .......................... 606 79.37.1 What You Can Do ......................607 79.38 Service Access Control ......................607 79.39 Remote Management ......................608 79.40 Storm Control ..........................609 79.41 MAINTENANCE .......................... 610 79.42 What You Can Do ........................611 XGS2220 Series User’s Guide...
  • Page 26 80.2 Switch Access and Login ......................618 80.3 Switch Configuration ........................620 Appendix A Customer Support ..................... 621 Appendix B Common Services ...................... 626 Appendix C IPv6..........................629 Appendix D Legal Information ...................... 638 Index ..............................643 XGS2220 Series User’s Guide...

  • Page 27: User's Guide

    User’s Guide...

  • Page 28: Getting To Know Your Switch

    H A P T E R Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The XGS2220 Series consists of the following models: • XGS2220-30 • XGS2220-30HP • XGS2220-30F • XGS2220-54 •...

  • Page 29: Multi-Gigabit

    Chapter 1 Getting to Know Your Switch Table 1 XGS2220 Series Comparison Table (continued) FEATURE XGS2220-30 XGS2220-30HP XGS2220-30F XGS2220-54 XGS2220-54HP XGS2220-54FP 10/100/1000 Mbps PoE Ports 100/1000 Mbps SFP Interface 1/10 Gbps SFP+ Interface 1000 Mbps / 2.5/5/ 10 Gbps Ethernet Ports 1000 Mbps / 2.5/5/...

  • Page 30: Management Modes

    Use the Web Configurator to configure and manage the Switch directly in standalone mode or use Nebula Control Center (NCC) to configure and manage the Switch in cloud mode. The Nebula Control Center (NCC) is an alternative cloud-based network management system that allows you to remotely XGS2220 Series User’s Guide...

  • Page 31: Mode Changing

    To manage your Switch through Nebula, connect the Switch to the Internet, and register it to a site and organization at the Nebula web portal (https://nebula.zyxel.com). See the following steps or the Switch Quick Start Guide for registering the Switch. XGS2220 Series User’s Guide...
  • Page 32 Switch is in Cloud mode, use the Local credentials password to login. Note: The Local credentials: Password can be found in Site-wide > Configure > General settings > Device configuration in the NCC portal. See the NCC User’s Guide for more information. XGS2220 Series User’s Guide...

  • Page 33: Zon Utility

    You can download the ZON Utility at www.zyxel.com and install it on a PC (Windows operation system). For more information on ZON Utility see Section 4.3 on page XGS2220 Series User’s Guide...

  • Page 34: Web Configurator Networked Av Mode

    • IEEE 802.3at Power over Ethernet (PoE) + • IEEE 802.3bt Power over Ethernet (PoE) ++ The following table describes the PoE features of the Switch by model. Table 4 XGS2220 Series Models and PoE Features POE FEATURES XGS2220-30HP XGS2220-54HP XGS2220-54FP IEEE 802.3at PoE+...

  • Page 35: Example Applications

    The following example figure shows a Switch supplying PoE (Power over Ethernet) to Powered Devices (PDs) such as an IP camera, a wireless router, an IP telephone and a general outdoor router that are not within reach of a power outlet. Figure 4 PoE Example Application XGS2220 Series User’s Guide...

  • Page 36: Backbone Example Application

    You can provide a super-fast uplink connection by using a Gigabit Ethernet or SFP port on the Switch. Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location. XGS2220 Series User’s Guide...

  • Page 37: High Performance Switching Example

    Stations on a logical network belong to one or more groups. With VLAN, a station cannot directly talk to or hear from stations that are not in the same groups unless such traffic first goes through a router. XGS2220 Series User’s Guide...

  • Page 38: Ipv6 Support

    Switch through a cloud-based network management system. See the NCC User’s Guide for detailed information about how to access the NCC and manage your Switch through the NCC. See the NCC User’s Guide for how to configure Nebula managed devices. XGS2220 Series User’s Guide...

  • Page 39: Good Habits For Managing The Switch

    Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. XGS2220 Series User’s Guide...

  • Page 40: Hardware Installation And Connection

    • The Switches with fans are not suitable for use in locations where children are likely to be present. To start using the Switch, simply connect the power cables to turn it on. 2.3 Freestanding Installation Procedure Make sure the Switch is clean and dry. Remove the adhesive backing from the rubber feet. XGS2220 Series User’s Guide...

  • Page 41: Mounting The Switch On A Rack

    21.5 kg. • Make sure the position of the Switch does not make the rack unstable or top-heavy. Take all necessary precautions to anchor the rack securely before installing the unit. XGS2220 Series User’s Guide...

  • Page 42: Attaching The Mounting Brackets To The Switch

    Figure 11 Mounting the Switch on a Rack Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into XGS2220 Series User’s Guide...
  • Page 43 Chapter 2 Hardware Installation and Connection the rack. Note: Make sure you tighten all the four screws to prevent the Switch from getting slanted. Repeat steps to attach the second mounting bracket on the other side of the rack. XGS2220 Series User’s Guide...

  • Page 44: Hardware Panels

    The following figures show the front panels of the Switch. Figure 12 Front Panel: XGS2220-30 Figure 13 Front Panel: XGS2220-30HP Figure 14 Front Panel: XGS2220-30F Figure 15 Front Panel: XGS2220-54 Figure 16 Front Panel: XGS2220-54HP Figure 17 Front Panel: XGS2220-54FP XGS2220 Series User’s Guide...

  • Page 45: Gigabit Ethernet Ports

    An auto-crossover (auto-MDI/MDI-X) port automatically works with a straight-through or crossover Ethernet cable. When auto-negotiation is turned on, an Ethernet port negotiates with the peer automatically to determine the connection speed and duplex mode. If the peer Ethernet port does not support auto- XGS2220 Series User’s Guide...

  • Page 46: Sfp/Sfp+ Slots

    3.1.2.1 Transceiver Installation Use the following steps to install a transceiver. Attach an ESD preventive wrist strap to your wrist and to a bare metal surface. XGS2220 Series User’s Guide...
  • Page 47 Note: Make sure the transceiver’s latch is pushed all the way down, so the transceiver can be pulled out successfully. Pull the latch, or use your thumb and index finger to grasp the tabs on both sides of the transceiver, and carefully slide it out of the slot. XGS2220 Series User’s Guide...

  • Page 48: Console Port

    This USB Type C connector is for troubleshooting only. 3.2 Rear Panel The following figures show the rear panels of the Switch. The rear panels contain: Figure 24 Rear Panel: XGS2220-30 Figure 25 Rear Panel: XGS2220-30HP XGS2220 Series User’s Guide...

  • Page 49: Grounding

    Note: The specification for surge or ESD protection assumes that the Switch is properly grounded. Remove the M4 ground screw from the Switch’s rear panel. Secure a green or yellow ground cable (16 AWG or smaller) to the Switch's rear panel using the M4 ground screw. XGS2220 Series User’s Guide...
  • Page 50 10 ohms, or according to your country’s electrical regulations. Figure 32 Connecting to the Building’s Main Grounding Electrode If you are uncertain that suitable grounding is available, contact the appropriate electrical inspection XGS2220 Series User’s Guide...

  • Page 51: Ac Power Connection

    Install the retainer clip to prevent accidental removal of the power cord. Loosely wrap the clip on the retainer to the power cord. Push the pronged-end of the retainer clip into the Retainer Holder hole until it locks into place. XGS2220 Series User’s Guide...
  • Page 52 Chapter 3 Hardware Panels Slide the clip up to the end of the power cord. Close the clip tightly around the power cord until secure. XGS2220 Series User’s Guide...

  • Page 53: Leds

    The Switch is acting as a standalone switch or the master in stacking. Yellow An error occurred when the Switch is selected as the master member in a stack. The Switch is acting as a non-master member in a stack. XGS2220 Series User’s Guide...
  • Page 54 Power supplied to all PoE Ethernet ports meets the IEEE 802.3bt standard. (XGS2220-30HP) Green Power supplied to all PoE Ethernet ports meets the IEEE 802.3at 41 – 50 / IEEE 802.3af standards. There is no power supplied. (XGS2220-54HP / XGS2220-54FP) XGS2220 Series User’s Guide...
  • Page 55 27 – 30 (XGS2220-30 / Green The port has a successful 1000M connection. XGS2220-30HP / Blinking The port is transmitting or receiving data at 1000M. XGS2220-30F) This link is disconnected. 51 – 54 (XGS2220-54 / XGS2220-54HP / XGS2220-54FP) XGS2220 Series User’s Guide...

  • Page 56: Technical Reference

    Technical Reference...

  • Page 57: Web Configurator

    Address field. Press [ENTER]. Your computer must be in the same subnet in order to access this website address. Also, you can use the ZON Utility to check your Switch’s IP address. See Section 4.3 on page 62 for more information on the ZON utility. The Login screen appears. XGS2220 Series User’s Guide...
  • Page 58 Switch to Nebula Cloud management. Figure 34 Visit Nebula Click Login to log into the Web Configurator to manage the Switch directly. The default user name is admin and associated default password is 1234. The Select Mode screen appears. XGS2220 Series User’s Guide...
  • Page 59 Once you click the Finish button, the settings configured in the Setup Wizard screen will overwrite the existing settings. Otherwise, click the Exit button. If you want to open the Setup Wizard screen later, click the Wizard icon in the upper right hand corner of the Web Configurator in Networked AV mode. XGS2220 Series User’s Guide...
  • Page 60 If you log into the Web Configurator and select Networked AV Mode, open the screen in the Wizard > Step 2 Password to change the administrator password and SNMP community string. Click Finish on the last step of the Wizard to save your settings. Password/SNMP Setting Figure 37 Web Configurator: Warning XGS2220 Series User’s Guide...
  • Page 61 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 62: Zyxel One Network (Zon) Utility

    Double-click the ZON Utility to run it. The first time you run the ZON Utility, you will see if your device and firmware version support the ZON Utility. Click the OK button to close this screen. XGS2220 Series User’s Guide...
  • Page 63 If your device is not listed here, see the device release notes for ZON Utility support. The release notes are in the firmware zip file on the Zyxel web site. Figure 40 ZON Utility Screen Select a network adapter to which your supported devices are connected. XGS2220 Series User’s Guide...
  • Page 64 Select a device and then use the icons to perform actions. Some functions may not be available for your devices. Note: You must know the selected device admin password before taking actions on the device using the ZON Utility icons. XGS2220 Series User’s Guide...
  • Page 65 This field displays an icon of the kind of device discovered. Model This field displays the model name of the discovered device. Firmware Version This field displays the firmware version of the discovered device. MAC Address This field displays the MAC address of the discovered device. XGS2220 Series User’s Guide...

  • Page 66: Networked Av Mode Wizard

    Networked AV mode settings, and view finished results. In order to set up your IP or DNS, please do the following. Click Wizard > Basic Settings > Next > Step 1 IP to access this screen. XGS2220 Series User’s Guide...
  • Page 67 Enter a domain name server IP address in order to be able to use a domain name instead of an IP address. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Password screen appears. XGS2220 Series User’s Guide...
  • Page 68 Set Community Enter the Set Community string, which is the password for the incoming Set- requests from the management station. The Set Community string is only used by SNMP managers using SNMP version 2c or lower. XGS2220 Series User’s Guide...
  • Page 69 RJ45 ports. Previous Click Previous to show the previous screen. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Summary screen appears. XGS2220 Series User’s Guide...
  • Page 70 Set Community This field displays the Set Community string. Trap Community This field displays the Trap Community string. Networked AV – Basic Settings Networked AV This field displays the VLAN ID for the AVoIP network. VLAN XGS2220 Series User’s Guide...

  • Page 71: Advanced Settings

    Networked AV service to a VLAN, select and assign port role, link aggregation (trunking), and view finished results. In order to set up your IP or DNS, please do the following. Click Wizard > Advanced Settings > Step 1 IP to access this screen. XGS2220 Series User’s Guide...
  • Page 72 Enter a domain name server IP address in order to be able to use a domain name instead of an IP address. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Password screen appears. XGS2220 Series User’s Guide...
  • Page 73 Set Community Enter the Set Community string, which is the password for the incoming Set- requests from the management station. The Set Community string is only used by SNMP managers using SNMP version 2c or lower. XGS2220 Series User’s Guide...
  • Page 74 You must enter a different VLAN ID in the Networked AV VLAN field to be able to assign (Optional) another subnet mask that specifies the network number portion of an IP address. Select Ports and Assign a Port Role XGS2220 Series User’s Guide...
  • Page 75 Table 19 Wizard > Advanced Settings > Step 4 Summary LABEL DESCRIPTION Setup IP Host Name This field displays a host name. IP Interface This field displays whether the WAN interface is using a DHCP IP address or a static IP address. XGS2220 Series User’s Guide...

  • Page 76: Wizard

    Click Cancel to exit this screen without saving. 4.5 Wizard The Setup Wizard contains the following parts: • Basic to configure the Switch IP address, DNS server, system password, SNMP community and link – aggregation (trunking). XGS2220 Series User’s Guide...

  • Page 77: Basic

    In Basic, you can set up IP/DNS, set up your password, SNMP community, link aggregation, and view finished results. In order to set up your IP/DNS, please do the following. Click Wizard > Basic > Step 1 IP to access this screen. XGS2220 Series User’s Guide...
  • Page 78 Enter a domain name server IP address in order to be able to use a domain name instead of an IP address. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Password screen appears. XGS2220 Series User’s Guide...
  • Page 79 Set Community Enter the Set Community string, which is the password for the incoming Set- requests from the management station. The Set Community string is only used by SNMP managers using SNMP version 2c or lower. XGS2220 Series User’s Guide...
  • Page 80 Select LACP if the ports are configured to join a trunk group through LACP. Previous Click Previous to show the previous screen. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Summary screen appears. XGS2220 Series User’s Guide...
  • Page 81 Trap Community This field displays the Trap Community string. Link Aggregation Group This field displays the group number. Type This field displays Static or LACP of this group. Member This field displays the members of this group. XGS2220 Series User’s Guide...

  • Page 82: Protection

    Select all ports to enable the loop guard feature on all ports. You can select a port by clicking it. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Broadcast Storm Control screen appears. XGS2220 Series User’s Guide...
  • Page 83 Specify how many broadcast packets the port receives per second. Previous Click Previous to show the previous screen. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Summary screen appears. XGS2220 Series User’s Guide...

  • Page 84: Vlan

    Review the information and click Finish to create the task. Cancel Click Cancel to exit this screen without saving. 4.5.3 VLAN In VLAN, you can create VLAN, and tag VLAN settings. Click Wizard > VLAN > VLAN Setting to access this screen. XGS2220 Series User’s Guide...

  • Page 85: Qos

    Click Cancel to exit this screen without saving. 4.5.4 QoS In QoS, you can create QoS settings. In order to create QoS settings, please do the following. Click Wizard > QoS > QoS Setting to access this screen. XGS2220 Series User’s Guide...

  • Page 86: Web Configurator Layout

    Review the information and click Finish to create the task. Cancel Click Cancel to exit this screen without saving. 4.6 Web Configurator Layout The DASHBOARD screen is the first screen that displays when you access the Web Configurator. XGS2220 Series User’s Guide...
  • Page 87 Click this icon to display web help pages. The help pages provide descriptions for all of the – configuration screens. Click this icon to go to the Zyxel Community Biz Forum. – Click this icon to log out of the Web Configurator. – XGS2220 Series User’s Guide...
  • Page 88 This link takes you to a screen where you can configure hardware monitor related features such Monitor Setup as SFP Detect. Interface Setup This link takes you to a screen where you can configure settings for individual interface type and XGS2220 Series User’s Guide...
  • Page 89 This link takes you to screens where you can configure LLDP-MED parameters. This link takes you to screens where you can enable Ethernet OAM on the Switch, view the config- uration of ports on which Ethernet OAM is enabled and perform remote-loopback tests. XGS2220 Series User’s Guide...
  • Page 90 Click the link to unfold the following sub-link menu. Protocol Spanning This link takes you to a screen where you can view the STP status in the different STP modes (RSTP, Tree MRSTP or MSTP) you can configure on the Switch. Protocol Status XGS2220 Series User’s Guide...
  • Page 91 This link takes you to screens where you can view DHCPv4 relay status, mode, and configure Relay DHCPv4 relay settings. DHCPv6 This link takes you to a screen where you can enable and configure DHCPv6 relay. Relay XGS2220 Series User’s Guide...
  • Page 92 Click the link to unfold the following sub-link menu. Guard IPv6 Static The link takes you to screens where you can view IPv6 static binding status and manually create Binding IPv6 source guard static binding entries. XGS2220 Series User’s Guide...
  • Page 93 This link takes you to a screen to reboot the Switch without turning the power off. Tech-Support This link takes you to a screen where you can download related log reports for issue analysis. Log reports include CPU history and utilization, crash and memory. XGS2220 Series User’s Guide...
  • Page 94 This link takes you to a screen where you can upload a stored device configuration file. Configuration Backup This link takes you to a screen where you can save your Switch’s configurations (settings) for Configuration later use. XGS2220 Series User’s Guide...

  • Page 95: Tables And Lists

    When viewing a list, you can click on an index number to view more details about the entry. If the list has more than one page, click the arrow button to navigate to different pages of entries. XGS2220 Series User’s Guide...

  • Page 96: Change Your Password

    4.6.2 Change Your Password After you log in for the first time, it is recommended you change the default administrator password. Click SYSTEM > Logins to display the next screen. Figure 67 Change Administrator Login Password XGS2220 Series User’s Guide...

  • Page 97: Save Your Configuration

    RESTORE button to restore the factory default file. 4.9.1 Reboot the Switch Press the RESET button to reboot the Switch without turning the power off. See Section 3.3 on page 53 more information about the LED behavior. XGS2220 Series User’s Guide...

  • Page 98: Reload The Configuration File

    4.10 Log Out of the Web Configurator Click Logout in a screen to exit the Web Configurator. You have to log in with your password again after you log out. This is recommended after you finish a management session for security reasons. XGS2220 Series User’s Guide...

  • Page 99: Help

    The Web Configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help icon on a Web Configurator screen to view an online help description (shown as below) of that screen. Figure 70 Online Web Help XGS2220 Series User’s Guide...

  • Page 100: Initial Setup Example

    In this example, you want to configure port 1 as a member of VLAN 2. Figure 71 Initial Setup Network Example: VLAN Go to the SWITCHING > VLAN > VLAN Setup > Static VLAN screen. Click Add/Edit. XGS2220 Series User’s Guide...

  • Page 101: Set Port Vid

    Use PVID to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on XGS2220 Series User’s Guide...

  • Page 102: Configure Switch Management Ip Address

    If the Switch fails to obtain an IP address from a DHCP server, the Switch will use 192.168.1.1 as the management IP address. You can configure another IP address in a different subnet for management purposes. The following figure shows an example. XGS2220 Series User’s Guide...
  • Page 103 Switch is using a DHCP-assigned IP or static IP address. This requires your PC to be directly connected to the Switch. Go to the SYSTEM > IP Setup > IP Setup screen. Click Add/Edit. The following screen appears. XGS2220 Series User’s Guide...
  • Page 104 In this example, enter VLAN ID 2. This is the same as the VLAN ID you configure in the Static VLAN screen. Click Apply to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XGS2220 Series User’s Guide...

  • Page 105: Tutorials

    1 and 100 DHCP Client (B) 1 and 100 DHCP Client (C) 1 and 100 Access the Switch through http://192.168.1.1 by default. Log into the Switch by entering the user name (default: admin) and password (default: 1234). XGS2220 Series User’s Guide...
  • Page 106 Go to SWITCHING > VLAN > VLAN Setup > VLAN Port Setup, and set the PVID of the ports 4, 5 and 6 to 100. This tags untagged incoming frames on ports 4, 5 and 6 with the tag 100. Click Apply. XGS2220 Series User’s Guide...
  • Page 107 Go to SECURITY > IPv4 Source Guard > DHCP Snooping > DHCP Snp. Port Setup. Select Trusted in the Server Trusted state field for port 4 because the DHCP server is connected to port 4. Keep ports 5 and 6 Untrusted because they are connected to DHCP clients. Click Apply. XGS2220 Series User’s Guide...
  • Page 108 Click Save at the top right of the Web Configurator to save the configuration permanently. 10 To check if DHCP snooping works, go to SECURITY > IPv4 Source Guard > IP Source Guard, you should see an IP assignment with the type DHCP-Snooping as shown. XGS2220 Series User’s Guide...

  • Page 109: How To Use Dhcpv4 Relay On The Switch

    Follow the steps below to configure port 2 as a member of VLAN 102. Access the Web Configurator through the Switch’s management port. Go to SYSTEM > Switch Setup and set the VLAN Type to 802.1Q. Click Apply to save the settings to the run-time memory. XGS2220 Series User’s Guide...
  • Page 110 Go to SWITCHING > VLAN > VLAN Setup > Static VLAN. Click Add/Edit. The following screen appears. Enable the switch button to set this VLAN to Active. Enter a descriptive name (VLAN 102 for example) in the Name field and enter “102” in the VLAN Group ID field. XGS2220 Series User’s Guide...
  • Page 111 Go to VLAN > VLAN Setup >VLAN Port Setup. Enter “102” in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. XGS2220 Series User’s Guide...

  • Page 112: Configure Dhcpv4 Relay

    Click Apply to save your changes back to the run-time memory. Click the Save link in the upper right of the Web Configurator to save your configuration permanently. The DHCP server can then assign a specific IP address based on the DHCP request. XGS2220 Series User’s Guide...

  • Page 113: Troubleshooting

    Switch load this auto configuration file, two conditions listed above must be met. Please refer to the following steps to see how to set up a Vendor Class Identifier on the Switch. Setting up a TFTP Server Select a directory on the TFTP server. Put the configuration files in that directory. XGS2220 Series User’s Guide...
  • Page 114 SYSTEM > IP Setup > IP Setup > Add/Edit screen, select the check box in the Option-60 field. Enter a Vendor Class Identifier in the Class-ID field, and specify the VLAN interface in the VID field. In this example, we use “ZyxelCorp” and VID 1. Click Apply. XGS2220 Series User’s Guide...
  • Page 115 Config 1, you need to click the Config 1 button in the Reboot System screen. Figure 79 Tutorial: Save Configuration Figure 80 Tutorial: Save Configuration and Reboot System Go to the MONITOR > System Log screen to see if auto configuration was performed successfully. XGS2220 Series User’s Guide...
  • Page 116 Check the screens to see if it is the configuration file you want to load. If it is not, go through the steps above to check your configurations. If it is, click Save at the top right corner of the Web Configurator to save the configuration permanently. XGS2220 Series User’s Guide...

  • Page 117: Dashboard

    This screen displays general device information, system status, system resource usage, and port status. This guide uses XGS2220-54FP screens as an example. The screens may vary slightly for different models. Click DASHBOARD in the navigation panel to open the following screen. XGS2220 Series User’s Guide...
  • Page 118 This field displays the hardware version of the Switch. Version System MAC This field displays the MAC address of the Switch. Address Registration This is the MAC address reserved for NCC registration. Use this MAC address to register the Switch on NCC. Address XGS2220 Series User’s Guide...
  • Page 119 The Switch has temperature sensors that are capable of detecting and reporting if the temperature rises above the threshold. This displays the Switch’s current device temperature level. Click to go to the MONITOR > System Information screen to check the detailed information. XGS2220 Series User’s Guide...

  • Page 120: Port Status

    The quick links in the Quick Link section provide shortcuts to specific configuration screens. You can use the quick links to directly access the screens that you would frequently use. You can also decide which quick links to be put on the DASHBOARD screen using the Edit button. XGS2220 Series User’s Guide...
  • Page 121 The setup panel displays after you click the Edit button. Figure 86 Quick Link Selection (example PoE model) Select the quick links you want and click Apply. The selected quick links will be displayed in the Quick Link section on the DASHBOARD screen. XGS2220 Series User’s Guide...

  • Page 122: Monitor

    The following chapters introduces the configurations of the links under the MONITOR navigation panel. Quick links to chapters: • ARP Table • IP Table • IPv6 Neighbor Table • MAC Table • Neighbor • Path MTU Table • Port Status • Routing Table • System Information • System Log XGS2220 Series User’s Guide...

  • Page 123: Arp Table

    MAC address that replied. 9.2 Viewing the ARP Table Use the ARP table to view IP-to-MAC address mappings and remove specific dynamic ARP entries. Click MONITOR > ARP Table in the navigation panel to open the following screen. XGS2220 Series User’s Guide...
  • Page 124 This shows 0 for a static entry. Type This shows whether the IP address is dynamic (learned by the Switch) or static (manually configured in SYSTEM > IP Setup > IP Setup or NETWORKING > ARP Setup > Static ARP). XGS2220 Series User’s Guide...

  • Page 125: Ip Table

    • If the Switch has already learned the port for this IP address, but the destination port is the same as the port it came in on, then it filters the packet. Figure 88 IP Table Flowchart XGS2220 Series User’s Guide...

  • Page 126: Viewing The Ip Table

    Click this button to display and arrange the data according to IP address. Click this button to display and arrange the data according to VLAN group. Port Click this button to display and arrange the data according to port number. XGS2220 Series User’s Guide...

  • Page 127: Ipv6 Neighbor Table

    11.2 Viewing the IPv6 Neighbor Table Use this screen to view IPv6 neighbor information on the Switch. Click MONITOR > IPv6 Neighbor Table in the navigation panel to display the screen as shown. Figure 90 MONITOR > IPv6 Neighbor Table XGS2220 Series User’s Guide...
  • Page 128 Click this button to display and arrange the data according to IPv6 address. Click this button to display and arrange the data according to MAC address. Interface Click this button to display and arrange the data according to IPv6 interface. XGS2220 Series User’s Guide...

  • Page 129: Mac Table

    MAC address. The Switch then learns the port that replies with the MAC address. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. XGS2220 Series User’s Guide...

  • Page 130: Viewing The Mac Table

    MAC forwarding table or MAC filtering table from the MAC table using this screen. Click MONITOR > MAC Table in the navigation panel to display the following screen. Figure 92 MONITOR > MAC Table XGS2220 Series User’s Guide...
  • Page 131 This is the port where the above MAC address is forwarded. Type This shows whether the MAC address is Dynamic (learned by the Switch) or Static (manually entered in the SWITCHING > Static MAC Forwarding screen). XGS2220 Series User’s Guide...

  • Page 132: Neighbor

    Use the Neighbor Details screen (Section 13.2.1 on page 133) to view more detailed information on the Switch’s neighbor devices. 13.2 Neighbor Click MONITOR > Neighbor to see the following screen. Figure 93 MONITOR > Neighbor (example PoE model) XGS2220 Series User’s Guide...

  • Page 133: Neighbor Details

    Use this screen to view detailed information about the neighboring devices. Device information is displayed in gray when the neighboring device is currently offline. Up to 10 neighboring device records per Ethernet port can be retained in this screen even when the XGS2220 Series User’s Guide...
  • Page 134 This shows the speed (either 10M for 10 Mbps, 100M for 100 Mbps, 1G for 1 Gbps, 2.5G for 2.5 Gbps, 5G for 5 Gbps, or 10G for 10 Gbps) and the duplex (F for full duplex or H for half). This field displays Down if the port is not connected to any device. XGS2220 Series User’s Guide...
  • Page 135 You can only reset Zyxel powered devices that support the ZON utility. Flush Click the Flush button on the port tab to remove information about neighbors learned on a specific ports. Flush All Click the Flush All button to remove information about neighbors learned on all ports. XGS2220 Series User’s Guide...

  • Page 136: Path Mtu Table

    This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. XGS2220 Series User’s Guide...

  • Page 137: Port Status

    MONITOR > Port Status to display the Port Status screen as shown next. You can also click the Port Status link in the Quick Link section of the DASHBOARD screen to see the following screen. Figure 96 MONITOR > Port Status XGS2220 Series User’s Guide...

  • Page 138: Port Details

    Click an index in the Port column in the MONITOR > Port Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. XGS2220 Series User’s Guide...
  • Page 139 This field shows the number of received frames on this port. Errors This field shows the number of received errors on this port. Tx kB/s This field shows the number of kilobytes per second transmitted on this port. XGS2220 Series User’s Guide...
  • Page 140 This field shows the number of packets (including bad packets) received that were between 128 and 255 octets in length. 256 to 511 This field shows the number of packets (including bad packets) received that were between 256 and 511 octets in length. XGS2220 Series User’s Guide...

  • Page 141: Ddmi

    15.2.1 DDMI Details Use this screen to view the real-time SFP (Small Form Factor Pluggable) transceiver information and operating parameters on the SFP port. The parameters include, for example, transmitting and receiving power, and module temperature. XGS2220 Series User’s Guide...
  • Page 142 DDMI Information Type This displays the DDMI parameter. Temperature This displays the temperature inside the SFP transceiver in degrees Celsius or Fahrenheit. (C/F) Voltage (V) This displays the level of voltage being supplied to the SFP transceiver. XGS2220 Series User’s Guide...

  • Page 143: Port Utilization

    Gbps, or 10G for 10 Gbps) and the duplex (F for full duplex or H for half). It also shows the cable type (Copper or Fiber) for the combo ports. This field displays Down if the port is not connected to any device. XGS2220 Series User’s Guide...
  • Page 144 This field shows the transmission speed of data received on this port in kilobytes per second. Rx Utilization% This field shows the percentage of actual received frames on this port as a percentage of the Link speed. XGS2220 Series User’s Guide...

  • Page 145: Routing Table

    This field displays the index number. Destination This field displays the destination IP routing domain. Gateway This field displays the IP address of the gateway device. Interface This field displays the IP address of the IPv4 Interface. XGS2220 Series User’s Guide...

  • Page 146: Ipv6 Routing Table

    Metric This field displays the cost of the route. Type This field displays the method used to learn the route. STATIC – added as a static entry. Connect – added as a local interface entry. XGS2220 Series User’s Guide...

  • Page 147: System Information

    Switch. 17.1 System Information In the navigation panel, click MONITOR > System Information to display the screen as shown. Use this screen to view general system information. Figure 103 MONITOR > System Information XGS2220 Series User’s Guide...
  • Page 148 The power supply for each voltage has a sensor that is capable of detecting and reporting if the voltage falls out of the tolerance range. Status Normal indicates that the voltage is within an acceptable operating range at this point; otherwise Error is displayed. XGS2220 Series User’s Guide...
  • Page 149 This field displays the maximum voltage measured at this point. This field displays the minimum voltage measured at this point. Threshold This field displays the percentage tolerance of the voltage with which the Switch still works. XGS2220 Series User’s Guide...

  • Page 150: System Log

    Note: When a log reaches the maximum number of log messages, new log messages automatically overwrite existing log messages, starting with the oldest existing log message first. Figure 104 MONITOR > System Log XGS2220 Series User’s Guide...
  • Page 151 The summary table shows the time the log message was recorded and the reason the log message was generated. Click Refresh to update this screen. Click Clear to clear the whole log, regardless of what is currently displayed on the screen. Click Download to save the log to your computer. XGS2220 Series User’s Guide...

  • Page 152: System

    The following chapters introduces the configurations of the links under the SYSTEM navigation panel. Quick links to chapters: • Cloud Management • General Setup • Hardware Monitor Setup • Interface Setup • IP Setup • IPv6 • Logins • SNMP • Switch Setup • Syslog Setup • Time Range XGS2220 Series User’s Guide...

  • Page 153: Cloud Management

    • It is connected to the Internet. • The Nebula Control Center (NCC) Discovery feature is enabled. • It has been registered in the NCC. 20.2 Nebula Center Control Discovery Click SYSTEM > Cloud Management to display this screen. XGS2220 Series User’s Guide...
  • Page 154 Chapter 20 Cloud Management Figure 105 SYSTEM > Cloud Management XGS2220 Series User’s Guide...
  • Page 155 NCC registration of the Switch using the Nebula Mobile app. Follow the wizard in the Nebula Mobile app to scan the QR code to register the Switch on NCC and add the Switch into a site. XGS2220 Series User’s Guide...
  • Page 156 Chapter 20 Cloud Management If Nebula Control Center (NCC) Discovery is disabled, the Switch will NOT discover the NCC and remain in Standalone mode. XGS2220 Series User’s Guide...

  • Page 157: General Setup

    Enter the geographic location of your Switch. You can use up to 128 printable ASCII characters; spaces are allowed. Contact Person's Enter the name of the person in charge of this Switch. You can use up to 32 printable ASCII Name characters; spaces are allowed. XGS2220 Series User’s Guide...
  • Page 158 UTC). So in the European Union you would select Last, Sunday, October and the last field depends on your time zone. In Germany for instance, you would select 2:00 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). XGS2220 Series User’s Guide...

  • Page 159: Hardware Monitor Setup

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...
  • Page 160 Chapter 21 General Setup You will see SFP warning icons next to the FANs in the MONITOR > System Information screen when SFP Detect has triggered the fans. Figure 108 Hardware Monitor: SFP Module Temperature Warning XGS2220 Series User’s Guide...

  • Page 161: Interface Setup

    Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new interface or edit a selected one. Delete Click Delete to remove the selected interfaces. XGS2220 Series User’s Guide...

  • Page 162: Add/Edit Interfaces

    Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 163: Ip Setup

    You can configure up to 128 IP domains which are used to access and manage the Switch from the ports belonging to the pre-defined VLANs. Note: You must configure a VLAN first. Each VLAN can have multiple management IP addresses, and you can log into the Switch through different management IP addresses simultaneously. XGS2220 Series User’s Guide...

  • Page 164: Ip Status

    23.2.1 IP Status Details Use this screen to view IP status details. Click a number in the Index column in the SYSTEM > IP Setup > IP Status screen to display the screen as shown next. XGS2220 Series User’s Guide...
  • Page 165 IP Address This is the IP address of your Switch in dotted decimal notation for example 192.168.1.1. IP Subnet Mask This is the IP subnet mask of your Switch in dotted decimal notation for example 255.255.255.0. XGS2220 Series User’s Guide...

  • Page 166: Ip Setup

    Type the IP address of the default outgoing gateway in dotted decimal notation, for example Gateway 192.168.1.254. Domain Name Enter a domain name server IPv4 address in order to be able to use a domain name instead of Server 1/2 an IP address. XGS2220 Series User’s Guide...

  • Page 167: Add/Edit Ip Interfaces

    Use this screen to add or edit IP interfaces. Click Add/Edit, or select an entry and click Add/Edit in the SYSTEM > IP Setup > IP Setup screen to display this screen. Figure 115 SYSTEM > IP Setup > IP Setup > Add/Edit XGS2220 Series User’s Guide...

  • Page 168: Network Proxy Configuration

    153). Use this screen to enable communication between the Switch and NCC through the proxy server. Figure 116 Network Proxy Configuration Application As of this writing, this setting only allows communication between the Switch and the NCC. XGS2220 Series User’s Guide...
  • Page 169 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to your previous configuration. XGS2220 Series User’s Guide...

  • Page 170: Ipv6

    184) to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. 24.2 IPv6 Status Click SYSTEM > IPv6 > IPv6 Status in the navigation panel to display the IPv6 status screen as shown next. XGS2220 Series User’s Guide...

  • Page 171: Ipv6 Interface Status Details

    24.2.1 IPv6 Interface Status Details Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the SYSTEM > IPv6 > IPv6 Status screen. The following screen opens. XGS2220 Series User’s Guide...
  • Page 172 This field displays the Switch’s link-local IP address and prefix generated by the interface. It also Address shows whether the IP address is preferred, which means it is a valid address and can be used as a sender or receiver address. XGS2220 Series User’s Guide...

  • Page 173: Ipv6 Global Setup

    Click Restart to send a new DHCP request to the DHCPv6 server and update the IPv6 address and DHCPv6 Client DNS information for this interface. 24.3 IPv6 Global Setup Use this screen to configure the global IPv6 settings. Click SYSTEM > IPv6 > IPv6 Global Setup to display the screen as shown next. XGS2220 Series User’s Guide...

  • Page 174: Ipv6 Interface Setup

    Use this screen to view and configure an IPv6 interface you create in the SYSTEM > Interface Setup screen. Click SYSTEM > IPv6 > IPv6 Interface Setup to display the screen as shown next. Figure 121 SYSTEM > IPv6 > IPv6 Interface Setup XGS2220 Series User’s Guide...

  • Page 175: Edit An Ipv6 Interface

    Use this screen to view and configure the interface’s link-local address and default gateway. Click SYSTEM > IPv6 > IPv6 Addressing > IPv6 Link-Local Address Setup to display the screen as shown next. Note: You should first create an IPv6 interface in the SYSTEM > Interface Setup screen. XGS2220 Series User’s Guide...

  • Page 176: Edit An Ipv6 Link-Local Address

    Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. XGS2220 Series User’s Guide...

  • Page 177: Ipv6 Global Address Setup

    This shows whether the interface ID of the global address is generated using the EUI-64 format. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XGS2220 Series User’s Guide...

  • Page 178: Add/Edit An Ipv6 Global Address

    24.7 IPv6 Neighbor Discovery Setup Use this screen to configure neighbor discovery settings for each interface. Click SYSTEM > IPv6 > IPv6 Neighbor Discovery > IPv6 Neighbor Discovery Setup to display the screen as shown next. XGS2220 Series User’s Guide...

  • Page 179: Edit An Ipv6 Neighbor Discovery

    IPv6 address is already in use before assigning it to an interface. Specify the number of consecutive neighbor solicitations (from 0 to 600) the Switch sends for this interface. Enter 0 to turn off DAD. XGS2220 Series User’s Guide...

  • Page 180: Ipv6 Router Discovery Setup

    This field displays whether the Switch sends router advertisements and responses to router solicitations on this interface (ON) or not (OFF). Select an entry’s check box to select a specific entry. Edit Click Edit to edit the selected entry. XGS2220 Series User’s Guide...

  • Page 181: Edit Ipv6 Router Discovery

    Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 182: Ipv6 Prefix Setup

    Add/Edit in the SYSTEM > IPv6 > IPv6 Neighbor Discovery > IPv6 Prefix Setup screen to display this screen. Figure 132 SYSTEM > IPv6 > IPv6 Neighbor Discovery > IPv6 Prefix Setup > Add/Edit XGS2220 Series User’s Guide...

  • Page 183: Ipv6 Neighbor Setup

    This field displays the MAC address of the neighboring device which can be reached through the interface. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XGS2220 Series User’s Guide...

  • Page 184: Add/Edit Ipv6 Neighbor

    24.11 DHCPv6 Client Setup Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Click SYSTEM > IPv6 > DHCPv6 Client Setup to display the screen as shown next. XGS2220 Series User’s Guide...

  • Page 185: Edit Dhcpv6 Client

    Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Select an entry and click Edit in the SYSTEM > IPv6 > DHCPv6 Client Setup screen to display this screen. Figure 136 SYSTEM > IPv6 > DHCPv6 Client Setup > Edit XGS2220 Series User’s Guide...
  • Page 186 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 187: Logins

    Note: The input string in any field of this screen should not contain [ ? ], [ | ], [ ' ], [ " ] or [ , ]. In the Password fields, [ space ] is also not allowed. XGS2220 Series User’s Guide...
  • Page 188 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 189: Snmp

    • Use the SNMP Trap Port screen (Section 26.5 on page 194) to enable/disable sending SNMP traps on a port. 26.2 Configure SNMP Use this screen to configure your SNMP settings. Click SYSTEM > SNMP to view the screen as shown. XGS2220 Series User’s Guide...
  • Page 190 Use this section to configure where to send SNMP traps from the Switch. Index This is the index of a trap destination. Version Specify the version of the SNMP trap messages. Enter the IP addresses of up to four managers to send your SNMP traps to. XGS2220 Series User’s Guide...

  • Page 191: Configure Snmp User

    Use this screen to create SNMP users for authentication with managers using SNMP v3 and associate them to SNMP groups. An SNMP user is an SNMP manager. Click Add/Edit, or select an entry and click Add/Edit in the SYSTEM > SNMP > SNMP User screen to view the screen. XGS2220 Series User’s Guide...
  • Page 192 – Members of this group have read and write rights, meaning that the user can create and edit the MIBs on the Switch, except the user account and AAA configuration. read-only – Members of this group have read rights only, meaning the user can collect information from the Switch. XGS2220 Series User’s Guide...

  • Page 193: Configure Snmp Trap Group

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 194: Enable Or Disable Sending Of Snmp Traps On A Port

    Cancel Click Cancel to begin configuring this screen afresh. 26.6 Technical Reference This section provides technical background information on the topics discussed in this chapter. XGS2220 Series User’s Guide...

  • Page 195: About Snmp

    SNMP v3 and Security SNMP v3 enhances security for SNMP management. SNMP managers can be required to authenticate with agents before conducting SNMP management sessions. Security can be further enhanced by encrypting the SNMP messages sent from the managers. XGS2220 Series User’s Guide...
  • Page 196 The trap is sent when entries in the remote database have any updates. Link Layer Discovery Protocol (LLDP), defined as IEEE 802.1ab, enables LAN devices that support LLDP to exchange their configured settings. This helps eliminate configuration mismatch issues. XGS2220 Series User’s Guide...
  • Page 197 OBJECT LABEL OBJECT ID DESCRIPTION rmon RmonRisingAlarm 1.3.6.1.2.1.16.0.1 This trap is sent when a variable goes over the RMON "rising" threshold. RmonFallingAlarm 1.3.6.1.2.1.16.0.2 This trap is sent when the variable falls below the RMON "falling" threshold. XGS2220 Series User’s Guide...

  • Page 198: Switch Setup

    Click SYSTEM > Switch Setup in the navigation panel to display the screen as shown. The VLAN setup screens change depending on whether you choose 802.1Q or Port Based in the VLAN Type field in this screen. XGS2220 Series User’s Guide...
  • Page 199 Leave All Leave All Timer sets the duration of the Leave All Period timer for GVRP in milliseconds. Each port Timer has a single Leave All Period timer. Leave All Timer must be larger than Leave Timer. XGS2220 Series User’s Guide...
  • Page 200 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 201: Syslog Setup

    The syslog feature sends logs to an external syslog server. Use this screen to configure the device’s system logging settings and configure a list of external syslog servers. Click SYSTEM > Syslog Setup in the navigation panel to display this screen. XGS2220 Series User’s Guide...
  • Page 202 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new entry or edit a selected one. Delete Click Delete to remove the selected entries. XGS2220 Series User’s Guide...

  • Page 203: Add/Edit A Syslog Server

    Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 204: Time Range

    This field displays the descriptive name for this rule. This is for identification purpose only. You can enter up to 32 printable ASCII characters except [ ? ], [ | ], [ ' ], [ " ] or [ , ]. XGS2220 Series User’s Guide...

  • Page 205: Add/Edit Time Range

    Alternatively, select Periodic to create a recurring schedule. Recurring schedules begin at a specific start time and end at a specific stop time on selected days of the week (Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, and Saturday). Recurring schedules are useful for defining the workday and off-work hours. XGS2220 Series User’s Guide...
  • Page 206 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 207: Port

    • Auto PD Recovery (for PoE models only) • Flex Link • Green Ethernet • Link Aggregation • Link Layer Discovery Protocol (LLDP) • • PoE Setup (for PoE models only) • Port Setup • ZULD XGS2220 Series User’s Guide...

  • Page 208: Auto Pd Recovery

    The PD may stop responding to the Switch’s detection over ping or LLDP during firmware upgrade. Disable the Auto PD Recovery function to prevent damage to the PD caused by a power cutoff during firmware upgrade. Note: The following screens are available for the PoE models only. XGS2220 Series User’s Guide...
  • Page 209 Polling Interval Specify the number of seconds the Switch waits for a response before sending another ping (sec) request. For example, the Switch will try to detect the PD status by performing ping requests every 20 seconds. XGS2220 Series User’s Guide...

  • Page 210: Activate The Automatic Pd Recovery

    Click this to reset the values in this screen to their last-saved values. 31.2.1 Activate the Automatic PD Recovery Follow the steps below to activate the automatic PD recovery. In the PORT > Auto PD Recovery screen, activate the feature. XGS2220 Series User’s Guide...
  • Page 211 When you select LLDP, the Switch monitors the PD status by checking incoming LLDP packets every 30 seconds from the PD (default value of transmit interval for LLDP feature). Likewise, the Switch sends out LLDP packets to the PD every 30 seconds to update the MONITOR > Neighbor screen. XGS2220 Series User’s Guide...
  • Page 212 PD before firmware upgrade is finished, it may permanently damage the PD or require a hard reset to recover it. It is strongly advised to disable the Switch's Auto PD Recovery function before upgrading the PD's firmware. This will prevent damage caused by a power cutoff. XGS2220 Series User’s Guide...

  • Page 213: Flex Link

    214) to configure flex links for back up links on the Switch. 32.2 Flex Link Status Click PORT > Flex Link > Flex Link Status to display this screen. Figure 153 PORT > Flex Link > Flex Link Status XGS2220 Series User’s Guide...

  • Page 214: Flex Link Setup

    BLOCKING state and the primary port will go into FORWARDING state after the Preemption Delay Time interval. Preemption Delay This displays the preemption delay time configured for this flex link pair. Time XGS2220 Series User’s Guide...

  • Page 215: Add/Edit Flex Link

    Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 216: Green Ethernet

    Note: This feature is only available on copper ports. Check boxes of SFP ports are grayed out and cannot be selected. Note: EEE, Auto Power Down and Short Reach are NOT supported on an uplink port. XGS2220 Series User’s Guide...
  • Page 217 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 218: Link Aggregation

    When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that is, if an XGS2220 Series User’s Guide...

  • Page 219: Link Aggregation Status

    Click PORT > Link Aggregation > Link Aggregation Status in the navigation panel to display the screen as shown. See Section 34.1 on page 218 for more information. Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. XGS2220 Series User’s Guide...
  • Page 220 This field displays how these ports were added to the trunk group. It displays: • Static – if the ports are configured as static members of a trunk group. • LACP – if the ports are configured to join a trunk group through LACP. XGS2220 Series User’s Guide...

  • Page 221: Link Aggregation Setting

    This is the only screen you need to configure to enable static link aggregation. Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this to activate a trunk group. XGS2220 Series User’s Guide...

  • Page 222: Link Aggregation Control Protocol

    Click PORT > Link Aggregation > Link Aggregation Control Protocol to display the screen shown next. See Dynamic Link Aggregation on page 218 for more information on dynamic link aggregation. Note: Do NOT configure this screen unless you want to enable dynamic link aggregation. XGS2220 Series User’s Guide...
  • Page 223 The field identifies the link aggregation group, that is, one logical link containing multiple ports. LACP Active Select this option to enable LACP for a trunk. Use this section to configure LACP timeout on ports. Port This field displays the port number. XGS2220 Series User’s Guide...

  • Page 224: Technical Reference

    – activate trunk group T1, select the traffic distribution algorithm used by this group and select the ports that should belong to this group as shown in the figure below. Click Apply when you are done. XGS2220 Series User’s Guide...
  • Page 225 Chapter 34 Link Aggregation Figure 161 Trunking Example – Configuration Screen Your trunk group 1 (T1) configuration is now complete. XGS2220 Series User’s Guide...

  • Page 226: Link Layer Discovery Protocol (Lldp)

    • Power via MDI TLV (optional, For PoE models only) • Link Aggregation TLV (optional) • Maximum Frame Size TLV (optional) The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. XGS2220 Series User’s Guide...

  • Page 227: Lldp-Med Overview

    Since LLDPDU updates status and configuration information periodically, network managers may check the result of provision through remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. XGS2220 Series User’s Guide...

  • Page 228: What You Can Do - Lldp

    Discovery Protocol for Media Endpoint Devices) location parameters. 35.3 LLDP Local Status This screen displays a summary of LLDP status on this Switch. Click PORT > LLDP > LLDP > LLDP Local Status to display the screen as shown next. XGS2220 Series User’s Guide...
  • Page 229 Management Address Subtype – ipv4 or all-802 • Interface Number Subtype – unknown • Interface Number – 0 (not supported) • Object Identifier – 0 (not supported) LLDP Port Information This displays the local port information. XGS2220 Series User’s Guide...

  • Page 230: Lldp Local Port Status Detail

    This screen displays detailed LLDP status for each port on this Switch. Click PORT > LLDP > LLDP > LLDP Local Status and then, click a port number, for example 1 in the local port column to display the screen as shown next. XGS2220 Series User’s Guide...
  • Page 231 Chapter 35 Link Layer Discovery Protocol (LLDP) Figure 165 PORT > LLDP > LLDP > LLDP Local Status > LLDP Local Port Status Detail XGS2220 Series User’s Guide...
  • Page 232 Capabilities TLV This field displays which LLDP-MED TLV are capable to transmit on the Switch. • Network Policy • Location • Extend Power via MDI PSE • Extend Power via MDI PD • Inventory Management XGS2220 Series User’s Guide...

  • Page 233: Lldp Remote Status

    The chassis ID is identified by the chassis ID subtype. For example, the MAC address of the remote device. Port ID This is an alpha-numeric string that contains the specific identifier for the port from which this LLDPDU was transmitted. The port ID is identified by the port ID subtype. XGS2220 Series User’s Guide...

  • Page 234: Lldp Remote Port Status Detail

    Chassis ID Subtype – This displays how the chassis of the remote device is identified. • Chassis ID – This displays the chassis ID of the remote device. The chassis ID is identified by the chassis ID subtype. XGS2220 Series User’s Guide...
  • Page 235 This displays whether the system capabilities are enabled and supported on the remote Capabilities TLV device. • System Capabilities Supported • System Capabilities Enabled Figure 168 PORT > LLDP > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Dot1 and Dot3 TLV) XGS2220 Series User’s Guide...
  • Page 236 The Power Via MDI TLV allows network management to advertise and discover the MDI power support capabilities of the sending port on the remote device. • Port Class • MDI Supported • MDI Enabled • Pair Controllable • PSE Power Pairs • Power Class XGS2220 Series User’s Guide...
  • Page 237 • Extend Power via MDI PSE • Extend Power via MDI PD • Inventory Management Device Type LLDP-MED endpoint device classes: • Endpoint Class I • Endpoint Class II • Endpoint Class III • Network Connectivity XGS2220 Series User’s Guide...

  • Page 238: Lldp Setup

    • Serial Number • Asset ID 35.5 LLDP Setup Use this screen to configure global LLDP settings on the Switch. Click PORT > LLDP > LLDP > LLDP Setup to display the screen as shown next. XGS2220 Series User’s Guide...
  • Page 239 Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. XGS2220 Series User’s Guide...

  • Page 240: Basic Tlv Setting

    Select the check boxes to enable or disable the sending of Management Address TLVs on Address the ports. Port Description Select the check boxes to enable or disable the sending of Port Description TLVs on the ports. XGS2220 Series User’s Guide...

  • Page 241: Org-Specific Tlv Setting

    Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. Dot1 TLV XGS2220 Series User’s Guide...

  • Page 242: Lldp-Med Setup

    Click Cancel to begin configuring this screen afresh. 35.8 LLDP-MED Setup Click PORT > LLDP > LLDP MED > LLDP-MED Setup to display the screen as shown next. Figure 173 PORT > LLDP > LLDP MED > LLDP-MED Setup XGS2220 Series User’s Guide...

  • Page 243: Lldp-Med Network Policy

    This field displays the DSCP value of the network policy. Priority This field displays the priority value of the network policy. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XGS2220 Series User’s Guide...

  • Page 244: Add/Edit Lldp-Med Network Policy

    DSCP Enter the DSCP value of the network policy. The value is defined from 0 through 63 with the 0 representing use of the default DSCP value. Priority Enter the priority value for the network policy. XGS2220 Series User’s Guide...

  • Page 245: Lldp-Med Location

    Delete Select the locations that you want to remove, then click Delete. 35.10.1 Add/Edit LLDP-MED Location To access this screen, click the Add/Edit button or select an entry from the list and click the Add/Edit button. XGS2220 Series User’s Guide...
  • Page 246 Geographical based coordinates includes latitude, longitude, altitude and datum. Civic Address includes Country, State, County, City, Street and other related information. Latitude Enter the latitude information. The value should be from 0º to 90º. • north • south XGS2220 Series User’s Guide...
  • Page 247 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 248: Oam

    (Section 36.4 on page 254) to perform remote-loopback tests. 36.2 OAM Status Use this screen to view the configuration of ports on which Ethernet OAM is enabled. Click PORT > OAM > OAM Status in the navigation panel. XGS2220 Series User’s Guide...

  • Page 249: Oam Details

    Use this screen to view OAM configuration details and operational status of a specific port. Click an number in the Port column in the PORT > OAM > OAM Status screen to display the screen as shown next. XGS2220 Series User’s Guide...
  • Page 250 Table 122 PORT > OAM > OAM Status > OAM Details LABEL DESCRIPTION Port No This field displays the port number. Discovery This section displays OAM configuration details and operational status of the port on the Switch and/or the remote device. XGS2220 Series User’s Guide...
  • Page 251 This field indicates the current state of the parser. Forward: The port is forwarding packets normally. Loopback: The port is in loopback mode. Discard: The port is discarding non-OAM PDUs because it is trying to or has put the remote device into loopback mode. XGS2220 Series User’s Guide...
  • Page 252 This field displays the number of OAM PDUs sent by the Switch in response to requests. OAMPDU Tx Variable Response This field displays the number of OAM PDUs sent by the remote device in response to OAMPDU Rx requests. XGS2220 Series User’s Guide...

  • Page 253: Oam Setup

    Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS2220 Series User’s Guide...

  • Page 254: Oam Remote Loopback

    36.4 OAM Remote Loopback Use this screen to perform a remote loopback test. Click PORT > OAM > OAM Remote Loopback to display the screen as shown. Figure 181 PORT > OAM > OAM Remote Loopback XGS2220 Series User’s Guide...
  • Page 255 Click Start to initiate a remote-loopback test from the specified port by sending Enable Loopback Control PDUs to the remote device. Stop Click Stop to terminate a remote-loopback test from the specified port by sending Disable Loopback Control PDUs to the remote device. XGS2220 Series User’s Guide...

  • Page 256: Poe Setup

    You can also set priorities so that the Switch is able to reserve and allocate power to certain PDs. Note: The PoE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. XGS2220 Series User’s Guide...
  • Page 257 This field shows which ports can receive power from the Switch. • Disable – The PD connected to this port cannot get power supply. • Enable – The PD connected to this port can receive power. XGS2220 Series User’s Guide...

  • Page 258: Poe Setup

    Use this screen to set the PoE power management mode, priority levels, power-up mode and the maximum amount of power for the connected PDs. Click the PoE Setup tab in the PORT > PoE Setup screen. The following screen opens. XGS2220 Series User’s Guide...
  • Page 259 Select ON to guarantee continuous power supply to the connected PDs while the Switch is restarting after a warm reboot. The Switch will NOT perform a power cycle on the connected PDs. If you do a cold reboot, the Switch also restarts the connected PDs. XGS2220 Series User’s Guide...
  • Page 260 Select High to set the Switch to assign the remaining power to the port after all critical priority ports are served. Select Low to set the Switch to assign the remaining power to the port after all critical and high priority ports are served. XGS2220 Series User’s Guide...
  • Page 261 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 262: Poe Time Range Setup

    37.3.1 Add/Edit PoE Time Range To access this screen, click the Add/Edit button or select an entry from the list and click the Add/Edit button. Figure 186 PORT > PoE Setup > PoE Time Range Setup > Add/Edit XGS2220 Series User’s Guide...
  • Page 263 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 264: Port Setup

    Type a descriptive name that identifies this port. You can enter up to 128 printable ASCII characters except [ ? ], [ | ], [ ' ] or [ " ]. Note: Due to space limitations, the port name may be truncated in some Web Configurator screens. XGS2220 Series User’s Guide...
  • Page 265 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 266: Zuld

    OAM as well as ZULD. You need to enable OAM on the Switch by going to PORT > OAM > OAM Setup and enable the switch in the Active field. OAM must be enabled on other connected XGS2220 Series User’s Guide...

  • Page 267: Zuld Status

    This shows whether ZULD is enabled or disabled on the Switch. Port This field displays the port number. Active This field displays whether ZULD is enabled on the port or not. ZULD must be enabled to detect an unidirectional link by monitoring OAMPDUs. XGS2220 Series User’s Guide...

  • Page 268: Zuld Setup

    This is the port number of the port on the connected device to which the port of the Switch is connected. 39.3 ZULD Setup Use this screen to enable ZULD on a port, configure a mode and set the probe time. To open this screen, click PORT > ZULD > ZULD Setup. XGS2220 Series User’s Guide...
  • Page 269 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XGS2220 Series User’s Guide...

  • Page 270: Switching

    Differentiated Services • Queuing Method • Priority Queue • Bandwidth Control • sFlow • Spanning Tree Protocol • Static MAC Filtering • Static MAC Forwarding • VLAN • VLAN Isolation • VLAN Mapping • VLAN Stacking XGS2220 Series User’s Guide...

  • Page 271: Layer 2 Protocol Tunneling

    Figure 191 Layer 2 Protocol Tunneling Network Scenario In the following example, if you enable L2PT for STP, you can have switches A, B, C and D in the same XGS2220 Series User’s Guide...

  • Page 272: Configuring Layer 2 Protocol Tunneling

    Incoming encapsulated layer 2 protocol packets received on a tunnel port are decapsulated and sent to an access port. 41.2 Configuring Layer 2 Protocol Tunneling Click SWITCHING > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 273 (local and remote) networks. Select this option to have the Switch tunnel VTP (VLAN Trunking Protocol) packets so that all customer switches can use consistent VLAN configuration through the service provider’s network. XGS2220 Series User’s Guide...
  • Page 274 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 275: Loop Guard

    • The switch (not in loop state) will receive broadcast messages sent out from the switch in loop state. • The switch (not in loop state) will receive its own broadcast messages that it sends out as they loop back. It will then re-broadcast those messages again. XGS2220 Series User’s Guide...
  • Page 276 Switch. Figure 197 Loop Guard – Network Loop Note: After resolving the loop problem on your network you can re-activate the disabled port through the Web Configurator or through commands (See the CLI Reference Guide). XGS2220 Series User’s Guide...

  • Page 277: Loop Guard Setup

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 278: Mac Pinning

    Switch’s MAC forwarding table. 43.2 MAC Pinning Configuration Use this screen to enable MAC pinning on the Switch and on specific ports. Click SWITCHING > MAC Pinning in the navigation panel to open the following screen. XGS2220 Series User’s Guide...
  • Page 279 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 280: Mirroring

    44.2 Local Port Mirroring Click SWITCHING > Mirroring > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. XGS2220 Series User’s Guide...
  • Page 281 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XGS2220 Series User’s Guide...

  • Page 282: Multicast

    MLD messages to other upstream ports. • Use the MLD Snooping-proxy VLAN screen (Section 45.8 on page 295) to enable and configure MLD snooping-proxy settings on the VLANs you specified. XGS2220 Series User’s Guide...

  • Page 283: What You Can Do - Mvr

    The Switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of that group. IGMP snooping generates no additional network traffic, allowing you to significantly reduce multicast traffic passing through your Switch. XGS2220 Series User’s Guide...
  • Page 284 The connection between ports 8 and 9 is blocked by STP to break the loop. If there is one query from a router (X) or MLD Done or Report message from any upstream port, it will be broadcast to all connected upstream ports. XGS2220 Series User’s Guide...
  • Page 285 In dynamic mode, the Switch sends IGMP leave and join reports to the other multicast devices (such as multicast routers or servers) in the multicast VLAN. This allows the multicast devices to update the multicast forwarding table to forward or not forward multicast traffic to the receiver ports. XGS2220 Series User’s Guide...

  • Page 286: Ipv4 Multicast Status

    Click SWITCHING > Multicast > IPv4 Multicast > IPv4 Multicast Status to display the screen as shown. This screen shows the IPv4 multicast group information. See Section 45.1 on page 282 for more information on multicasting. Figure 203 SWITCHING > Multicast > IPv4 Multicast > IPv4 Multicast Status XGS2220 Series User’s Guide...

  • Page 287: Igmp Snooping

    Click SWITCHING > Multicast > IPv4 Multicast > IGMP Snooping to display the screen as shown. See Section 45.1 on page 282 for more information on multicasting. Figure 204 SWITCHING > Multicast > IPv4 Multicast > IGMP Snooping XGS2220 Series User’s Guide...
  • Page 288 IGMP query port on the specified VLANs. Use a dash to specify consecutive VLANs and a comma (no spaces) to specify non-consecutive VLANs. For example, 51–53 includes 51, 52 and 53, but 51,53 does not include 52. XGS2220 Series User’s Guide...
  • Page 289 Enter the number of multicast groups this port is allowed to join. Once a port is registered in the Number specified number of multicast groups, any new IGMP join report frames is dropped on this port. XGS2220 Series User’s Guide...

  • Page 290: Igmp Snooping Vlan

    IGMP Snooping and VLANs on page 284 for more information on IGMP Snooping VLAN. Note: You can perform IGMP snooping on up to 16 VLANs. Figure 205 SWITCHING > Multicast > IPv4 Multicast > IGMP Snooping VLAN XGS2220 Series User’s Guide...

  • Page 291: Add/Edit Igmp Snooping Vlans

    This screen allows you to add an IGMP snooping VLAN or edit an existing one. To access this screen, click the Add/Edit button or select an entry from the list and click the Add/Edit button. Figure 206 SWITCHING > Multicast > IPv4 Multicast > IGMP Snooping VLAN > Add/Edit XGS2220 Series User’s Guide...

  • Page 292: Igmp Filtering Profile

    This field displays the end of the multicast address range. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add Profile Click this to add a new IGMP filtering profile. XGS2220 Series User’s Guide...

  • Page 293: Add Igmp Filtering Profile

    Click Cancel to not save the configuration you make and return to the last screen. 45.5.2 Add IGMP Filtering Rule Click Add Rule in the SWITCHING > Multicast > IPv4 Multicast > IGMP Filtering Profile screen to access this screen. XGS2220 Series User’s Guide...

  • Page 294: Ipv6 Multicast Status

    Table 143 SWITCHING > Multicast > IPv6 Multicast > IPv6 Multicast Status LABEL DESCRIPTION Index This is the index number of the entry. This field displays the multicast VLAN ID. Port This field displays the port number that belongs to the multicast group. XGS2220 Series User’s Guide...

  • Page 295: Mld Snooping-Proxy

    Click Cancel to begin configuring this screen afresh. 45.8 MLD Snooping-proxy VLAN Click SWITCHING > Multicast > IPv6 Multicast > VLAN screen to display the screen as shown. See Section 45.1 on page 282 for more information on multicasting. XGS2220 Series User’s Guide...

  • Page 296: Add/Edit Mld Snooping-Proxy Vlan

    The screen allows you to enable and configure MLD Snooping-proxy settings on a VLAN you specified. Click Add/Edit in the SWITCHING > Multicast > IPv6 Multicast > VLAN screen to display this screen. Figure 213 SWITCHING > Multicast > IPv6 Multicast > VLAN > Add/Edit XGS2220 Series User’s Guide...
  • Page 297 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 298: Mld Snooping-Proxy Port Role Setting

    Report or Done messages when receiving queries from a multicast router. Otherwise, select None if the port is not joining a multicast group or does not belong to this VLAN. XGS2220 Series User’s Guide...

  • Page 299: Mld Snooping-Proxy Filtering

    Click Cancel to reset the fields to your previous configuration. 45.10 MLD Snooping-proxy Filtering Use this screen to configure the Switch’s MLD filtering settings. Click the SWITCHING > Multicast > IPv6 Multicast > Filtering screen to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 300 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to your previous configuration. XGS2220 Series User’s Guide...

  • Page 301: Mld Snooping-Proxy Filtering Profile

    Use this screen to create an MLD filtering profile and set the range of the multicast addresses. Click Add Profile in the SWITCHING > Multicast > IPv6 Multicast > Filtering Profile to display the screen as shown. XGS2220 Series User’s Guide...

  • Page 302: Add Mld Snooping-Proxy Filtering Rule

    Use this screen to create a multicast addresses range rule of the MLD filtering profile. Click Add Rule in the SWITCHING > Multicast > IPv6 Multicast > Filtering Profile to display this screen. Figure 218 SWITCHING > Multicast > IPv6 Multicast > Filtering Profile > Add Rule XGS2220 Series User’s Guide...

  • Page 303: General Mvr Configuration

    This field displays the descriptive name for this setting. Mode This field displays the MVR mode. Source Port This field displays the source port numbers. Receiver Port This field displays the receiver port numbers. 802.1p Priority This field displays the priority level. XGS2220 Series User’s Guide...

  • Page 304: Add/Edit Mvr

    Enter a descriptive name (up to 32 printable ASCII characters except [ ? ], [ | ], [ ' ], [ " ], or [ , ]) for identification purposes. Multicast VLAN ID Enter the VLAN ID (1 to 4094) of the multicast VLAN. XGS2220 Series User’s Guide...

  • Page 305: Mvr Group Setup

    Use this screen to view and configure MVR IP multicast group settings. Click SWITCHING > Multicast > MVR > Group Setup to access this screen. Note: A port can belong to more than one multicast VLAN. However, IP multicast group addresses in different multicast VLANs cannot overlap. XGS2220 Series User’s Guide...

  • Page 306: Add/Edit Mvr Group

    Use this screen to configure MVR IP multicast group addresses. To access this screen, click the Add/Edit button or select an entry from the list and click the Add/Edit button. Figure 222 SWITCHING > Multicast > MVR > Group Setup > Add/Edit XGS2220 Series User’s Guide...

  • Page 307: Mvr Configuration Example

    Figure 223 MVR Configuration Example To configure the MVR settings on the Switch, click the Add/Edit button in the SWITCHING > Multicast > MVR screen. Create a multicast VLAN and set the receiver and source ports. XGS2220 Series User’s Guide...
  • Page 308 SWITCHING > Multicast > MVR > Group Setup screen and configure multicast group settings. The following figure shows an example where two IPv4 multicast groups (News and Movie) are configured for the multicast VLAN 200. Figure 225 MVR Group Configuration Example – Add XGS2220 Series User’s Guide...
  • Page 309 Chapter 45 Multicast Figure 226 MVR Group Configuration Example – View XGS2220 Series User’s Guide...

  • Page 310: Static Multicast Forwarding

    (manual) multicast entries. The Switch will either flood the multicast frames to all ports (default) or drop them. Figure 227 on page 311 shows such unknown multicast frames flooded to all ports. With static multicast forwarding, you can forward these multicasts to ports within a VLAN group. XGS2220 Series User’s Guide...

  • Page 311: Static Multicast Forwarding By Mac

    Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new rule or edit a selected one. Delete Click Delete to remove the selected rules. XGS2220 Series User’s Guide...

  • Page 312: Add/Edit Static Multicast Forwarding By Mac

    46.3 Configure a Static Multicast IPv4 Address Use this screen to configure static multicast IPv4 addresses for ports to receive the multicast stream. Click SWITCHING > Multicast > Static Multicast Forwarding By IP to display the screen as shown next. XGS2220 Series User’s Guide...

  • Page 313: Add/Edit A Static Multicast Address By Ip

    Enter a descriptive name (up to 32 printable ASCII characters except [ ? ], [ | ], [ ' ], [ " ] or [ , ]) for this static multicast IPv4 address forwarding rule. This is for identification only. IP Address Enter a multicast IPv4 address (224.0.0.0 – 239.255.255.255) which identifies the multicast group. XGS2220 Series User’s Guide...
  • Page 314 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 315: Pppoe

    Read on for concepts on ARP that can help you configure the screen in this chapter. 47.1.2.1 PPPoE Intermediate Agent Tag Format If the PPPoE Intermediate Agent is enabled, the Switch adds a vendor-specific tag to PADI (PPPoE Active Discovery Initialization) and PADR (PPPoE Active Discovery Request) packets from PPPoE clients. XGS2220 Series User’s Guide...
  • Page 316 Table 163 PPPoE IA Circuit ID Sub-option Format: Using Identifier String and Variables SubOpt Length Value 0x01 Identifier delimiter Slot ID delimiter Port No delimiter VLAN ID String (1 byte) (1 byte) (1 byte) (1 byte) (1 byte) (2 byte) (1 byte) (53 byte) bytes) XGS2220 Series User’s Guide...

  • Page 317: Pppoe Intermediate Agent

    Use this screen to configure the Switch to give a PPPoE termination server additional subscriber information that the server can use to identify and authenticate a PPPoE client. Click SWITCHING > PPPoE Intermediate Agent to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 318 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 319: Pppoe Ia Port

    Use this row to make the setting the same for all ports. Use this row first and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. XGS2220 Series User’s Guide...

  • Page 320: Pppoe Ia Port Vlan

    47.4 PPPoE IA Port VLAN Use this screen to configure PPPoE IA settings that apply to a specific VLAN on a port. Click SWITCHING > PPPoE Intermediate Agent > PPPoE IA Port VLAN to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 321 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 322: Pppoe Ia Vlan

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 323: Differentiated Services

    ToS-enabled network device will not conflict with the DSCP mapping. The DSCP value determines the PHB (Per-Hop Behavior), that each packet gets as it is forwarded across the DiffServ network. Based on the marking rule different kinds of traffic can be marked for different XGS2220 Series User’s Guide...

  • Page 324: Activating Diffserv

    Platinum traffic flow as they move across the DiffServ network. Figure 237 DiffServ Network 48.2 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the selected ports. Click SWITCHING > QoS > Diffserv to display the screen as shown. XGS2220 Series User’s Guide...

  • Page 325: Dscp-To-Ieee 802.1P Priority Settings

    The following table shows the default DSCP-to-IEEE802.1p mapping. Table 170 Default DSCP-IEEE 802.1p Mapping DSCP VALUE 0 – 7 8 – 15 16 – 23 24 – 31 32 – 39 40 – 47 48 – 55 56 – 63 IEEE 802.1p XGS2220 Series User’s Guide...

  • Page 326: Configuring Dscp Settings

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 327: Queuing Method

    Round Robin Scheduling services queues on a rotating basis and is activated only when a port has more traffic than it can handle. A queue is given an amount of bandwidth irrespective of the incoming traffic XGS2220 Series User’s Guide...

  • Page 328: Configuring Queuing

    Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS2220 Series User’s Guide...
  • Page 329 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 330: Priority Queue

    330) to configure the priority level-to-physical queue mapping. 50.2 Assign Priority Queue Use this screen to assign priority level to each queue. Click SWITCHING > QoS > Priority Queue to open this screen. Figure 241 SWITCHING > QoS > Priority Queue XGS2220 Series User’s Guide...
  • Page 331 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XGS2220 Series User’s Guide...

  • Page 332: Bandwidth Control

    Click SWITCHING > QoS > Bandwidth Control in the navigation panel to bring up the screen as shown next. Note: The CIR should be less than the PIR. Note: The sum of CIRs cannot be greater than or equal to the uplink bandwidth. XGS2220 Series User’s Guide...
  • Page 333 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XGS2220 Series User’s Guide...

  • Page 334: Sflow

    For example, you can use it to know which IP address or which type of traffic caused network congestion. Figure 243 sFlow Application 52.2 sFlow Port Configuration Click SWITCHING > sFlow in the navigation panel to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 335 Note: Configure UDP port 6343 (the default) on a NAT router to allow port forwarding if the collector is behind a NAT router. Configure a firewall rule for UDP port 6343 (the default) to allow incoming traffic if the collector is behind a firewall. XGS2220 Series User’s Guide...

  • Page 336: Sflow Collector Configuration

    Click Delete to remove the selected entries. 52.3.1 Add/Edit sFlow Collector Click Add/Edit, or select an entry and click Add/Edit in the SWITHCING > sFlow > Collector screen to display this screen. Figure 246 SWITCHING > sFlow > Collector > Add/Edit XGS2220 Series User’s Guide...
  • Page 337 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 338: Spanning Tree Protocol

    It allows a switch to interact with other (R)STP-compliant switches in your network to ensure that only one path exists between any two stations on the network. The Switch uses IEEE 802.1w RSTP (Rapid Spanning Tree Protocol) that allows faster convergence of the XGS2220 Series User’s Guide...
  • Page 339 STP Port States STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from XGS2220 Series User’s Guide...
  • Page 340 • A VLAN can be mapped to a specific Multiple Spanning Tree Instance (MSTI). MSTI allows multiple VLANs to use the same spanning tree. • Load-balancing is possible as traffic from different VLANs can use distinct paths in a region. XGS2220 Series User’s Guide...

  • Page 341: Spanning Tree Protocol Status

    (32 bits) of path cost values. If the link speeds within the system are averagely smaller than 1 Gbps, you should select Short mode since Short mode have path cost values more detailed defined for link speeds under1 Gbps. The path cost values are described in the following tables. XGS2220 Series User’s Guide...
  • Page 342 4000 More than 5 Gbps 2000 Use the this screen to activate one of the STP modes on the Switch. Click SWITCHING > Spanning Tree Protocol > Spanning Tree Setup to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 343 Select this mode to manually set the auto path costs for each link speed. Enter the path cost value for each link speed. The range is from 1 – 2000000. It is recommended to assign this value according to link speeds. The slower the speed, the higher the cost. XGS2220 Series User’s Guide...

  • Page 344: Rapid Spanning Tree Protocol Status

    See Section 53.1 on page 338 more information on RSTP. Note: This screen is only available after you activate RSTP on the Switch. Figure 250 SWITCHING > Spanning Tree Protocol > Spanning Tree Protocol Status: RSTP XGS2220 Series User’s Guide...
  • Page 345 LAN segment to which this port is connected. Designated Port ID This field displays the priority and number of the bridge port (on the designated bridge), through which the designated bridge transmits the stored configuration messages. XGS2220 Series User’s Guide...

  • Page 346: Configure Rapid Spanning Tree Protocol

    Section 53.1 on page 338 for more information on RSTP. Click SWITCHING > Spanning Tree Protocol > RSTP in the navigation panel to display the screen as shown. Figure 251 SWITCHING > Spanning Tree Protocol > RSTP XGS2220 Series User’s Guide...
  • Page 347 With root guard enabled, a port is blocked when the Switch receives a superior BPDU on it. The Switch allows traffic to pass through this port again when the switch connected to the port stops to send superior BPDUs. XGS2220 Series User’s Guide...

  • Page 348: Multiple Rapid Spanning Tree Protocol Status

    Click SWITCHING > Spanning Tree Protocol > Spanning Tree Protocol Status in the navigation panel to display the status screen as shown next. See Section 53.6 on page 348 for more information on MRSTP. Note: This screen is only available after you activate MRSTP on the Switch. XGS2220 Series User’s Guide...
  • Page 349 This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. Topology This is the number of times the spanning tree has been reconfigured. Changed Times XGS2220 Series User’s Guide...

  • Page 350: Configure Multiple Rapid Spanning Tree Protocol

    Forwarding – the Switch unblocks and allows the port to forward frames again. 53.7 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click SWITCHING > Spanning Tree Protocol > MRSTP in the navigation panel to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 351 Bridge Priority determines the root bridge, which in turn determines Hello Time, Max Age and Forwarding Delay. Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. The allowed range is 1 to 10 seconds. XGS2220 Series User’s Guide...
  • Page 352 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 353: Multiple Spanning Tree Protocol Status

    Click SWITCHING > Spanning Tree Protocol > Spanning Tree Protocol Status in the navigation panel to display the status screen as shown next. Note: This screen is only available after you activate MSTP on the Switch. Figure 254 SWITCHING > Spanning Tree Protocol > Spanning Tree Protocol Status: MSTP XGS2220 Series User’s Guide...
  • Page 354 This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the MST instance. Port This field displays the number of the port on the Switch. XGS2220 Series User’s Guide...

  • Page 355: Configure Multiple Spanning Tree Protocol

    Forwarding – the Switch unblocks and allows the port to forward frames again. 53.9 Configure Multiple Spanning Tree Protocol To configure MSTP, click SWITCHING > Spanning Tree Protocol > MSTP in the navigation panel to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 356 Configuration Enter a descriptive name (up to 32 printable ASCII characters except [ ? ], [ | ], [ ' ], [ " ], or [ , Name ]) of an MST region. XGS2220 Series User’s Guide...

  • Page 357: Add/Edit Multiple Spanning Tree

    53.9.1 Add/Edit Multiple Spanning Tree Click Add/Edit, or select an entry and click Add/Edit in the SWITCHING > Spanning Tree Protocol > MSTP screen to display this screen. Figure 256 SWITCHING > Spanning Tree Protocol > MSTP > Add/Edit XGS2220 Series User’s Guide...

  • Page 358: Multiple Spanning Tree Protocol Port Setup

    Click Cancel to not save the configuration you make and return to the last screen. 53.10 Multiple Spanning Tree Protocol Port Setup Click SWITCHING > Spanning Tree Protocol > MSTP > MSTP Port Setup to display the screen as shown next. XGS2220 Series User’s Guide...

  • Page 359: Technical Reference

    Cancel Click Cancel to begin configuring this screen afresh. 53.11 Technical Reference This section provides technical background information on the topics discussed in this chapter. XGS2220 Series User’s Guide...

  • Page 360: Mstp Network Example

    Devices that belong to the same MST region are configured to have the same MSTP configuration identification settings. These include the following parameters: • Name of the MST region • Revision level as the unique number for the MST region • VLAN-to-MST Instance mapping XGS2220 Series User’s Guide...

  • Page 361: Mst Instance

    CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. Figure 261 MSTP and Legacy RSTP Network Example XGS2220 Series User’s Guide...

  • Page 362: Static Mac Filtering

    MAC Address This field displays the source or destination MAC address with the VLAN identification number to which the MAC address belongs. This field displays the VLAN group identification number. Action This field displays Discard source, Discard destination, or Discard both depending on what you configured above. XGS2220 Series User’s Guide...

  • Page 363: Add/Edit A Static Mac Filtering Rule

    Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 364: Static Mac Forwarding

    This field displays whether this static MAC address forwarding rule is active. You may temporarily deactivate a rule without deleting it. Name This field displays the descriptive name for identification purposes for this static MAC address- forwarding rule. XGS2220 Series User’s Guide...

  • Page 365: Add/Edit Static Mac Forwarding Rules

    Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 366: Vlan

    You can specify a mask for the MAC address to create a MAC address filter and enter a weight to set the VLAN rule’s priority. 56.1.2 What You Need to Know Read this section to know more about VLAN and how to configure the screens. XGS2220 Series User’s Guide...

  • Page 367: Introduction To Ieee 802.1Q Tagged Vlans

    Switches join VLANs by making a declaration. A declaration is made by issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message terminates all registrations. GARP timers set declaration timeout values. XGS2220 Series User’s Guide...
  • Page 368 (A and B). C, D and E automatically allow frames with VLAN group tags 1 and 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking ports. Figure 266 Port VLAN Trunking XGS2220 Series User’s Guide...

  • Page 369: Vlan Status

    You can also tag all outgoing frames (that were previously untagged) from a port with the specified VID. 56.3 VLAN Status Use this screen to view and search all static VLAN groups. Click SWITCHING > VLAN > VLAN Status from the navigation panel to display the screen as shown next. XGS2220 Series User’s Guide...

  • Page 370: Vlan Details

    Static – added as a permanent VLAN 56.3.1 VLAN Details Use this screen to view detailed port settings and status of the static VLAN group. Click an index number in the VLAN Status screen to display VLAN details. XGS2220 Series User’s Guide...

  • Page 371: Configure A Static Vlan

    Use this screen to view and configure a static VLAN for the Switch. Click SWITCHING > VLAN > VLAN Setup > Static VLAN to display the screen as shown next. Figure 270 SWITCHING > VLAN > VLAN Setup > Static VLAN XGS2220 Series User’s Guide...

  • Page 372: Add/Edit A Static Vlan

    Enter a descriptive name for the VLAN group for identification purposes. This name consists of up to 64 printable ASCII characters. The string should not contain [ ? ], [ | ], [ ' ], [ " ] or [ , ]. XGS2220 Series User’s Guide...

  • Page 373: Vlan Port Setup

    Click Cancel to not save the configuration you make and return to the last screen. 56.5 VLAN Port Setup Use this screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click SWITCHING > VLAN > VLAN Setup > VLAN Port Setup to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 374 VLAN groups to pass through the Switch. Isolation Select this to allows this port to communicate only with the CPU management port and the ports on which the isolation feature is NOT enabled. XGS2220 Series User’s Guide...

  • Page 375: Configure Gvrp

    Note: Changes in this row are copied to all the ports as soon as you make them. GVRP Select this check box to allow GVRP on this port. XGS2220 Series User’s Guide...

  • Page 376: Subnet Based Vlans

    VID of 300 for traffic received from IP subnet 10.1.1.0/24 (data services). All untagged incoming frames will be classified based on their source IP subnet and prioritized accordingly. That is video services receive the highest priority and data the lowest. Figure 274 Subnet Based VLAN Application Example XGS2220 Series User’s Guide...

  • Page 377: Configuring Subnet Based Vlan

    Click Delete to remove the selected entry. 56.8.1 Add/Edit Subnet Based VLAN Click Add/Edit, or select an entry and click Add/Edit in the SWITCHING > VLAN > Subnet Based VLAN Setup screen to display this screen. XGS2220 Series User’s Guide...

  • Page 378: Protocol Based Vlans

    You configure a protocol based VLAN A with priority 3 for ARP traffic received on port 1, 2 and 3. You also have a protocol based VLAN B with priority 2 for Apple Talk traffic received on port 6 and 7. All XGS2220 Series User’s Guide...

  • Page 379: Configuring Protocol Based Vlan

    Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new entry or edit a selected one. Delete Click Delete to remove the selected entry. XGS2220 Series User’s Guide...

  • Page 380: Add/Edit A Protocol Based Vlan

    This example shows you how to create an IP VLAN which includes ports 1, 4 and 8. Follow these steps using the screen below: Activate this protocol based VLAN. Type the port number you want to include in this protocol based VLAN. Type 1. XGS2220 Series User’s Guide...

  • Page 381: Voice Vlan

    You can set priority level to the Voice VLAN and add MAC address of IP phones from specific manufacturers by using its ID from the Organizationally Unique Identifiers (OUI). Click SWITCHING > VLAN > Voice VLAN Setup to display the configuration screen as shown. XGS2220 Series User’s Guide...

  • Page 382: Add/Edit A Voice Vlan

    Click Delete to remove the selected entry. 56.11.1 Add/Edit a Voice VLAN Click Add/Edit, or select an entry and click Add/Edit in the SWITCHING > VLAN > Voice VLAN Setup screen to display the configuration screen. XGS2220 Series User’s Guide...

  • Page 383: Mac Based Vlan

    MAC address in the MAC-based VLAN setup screen. You can also delete a MAC-based VLAN entry in the same screen. Click SWITCHING > VLAN > MAC Based VLAN Setup to see the following screen. Figure 283 SWITCHING > VLAN > MAC Based VLAN Setup XGS2220 Series User’s Guide...

  • Page 384: Add/Edit A Mac Based Vlan

    Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 385: Vendor Id Based Vlan

    Click Delete to remove the selected entry. 56.13.1 Add/Edit a Vendor ID Based VLAN Click Add/Edit, or select an entry and click Add/Edit in the SWITCHING > VLAN > Vendor ID Based VLAN Setup to see this screen. XGS2220 Series User’s Guide...

  • Page 386: Port-Based Vlan Setup

    (an egress port is an outgoing port, that is, a port through which a data packet leaves) for both ports. XGS2220 Series User’s Guide...

  • Page 387: Configure A Port-Based Vlan

    The following screen shows users on a port-based, all-connected VLAN configuration. Figure 287 SWITCHING > VLAN > Port Based VLAN Setup (All Connected) The following screen shows users on a port-based, port-isolated VLAN configuration. XGS2220 Series User’s Guide...
  • Page 388 CPU refers to the Switch management port. By default it forms a VLAN with all Ethernet ports. If it does not form a VLAN with a particular port then the Switch cannot be managed from that port. XGS2220 Series User’s Guide...
  • Page 389 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 390: Vlan Isolation

    Note: Make sure you keep at least one port in the promiscuous port list for a VLAN with VLAN Isolation enabled. Otherwise, this VLAN is blocked from the whole network. 57.2 Configuring VLAN Isolation Click SWITCHING > VLAN Isolation in the navigation panel to display the screen as shown. XGS2220 Series User’s Guide...

  • Page 391: Add/Edit A Vlan Isolation Rule

    Enter the number of the ports that can communicate with any ports in the same VLAN. Other ports belonging to this VLAN will be added to the isolation list and can only send and receive traffic from the ports you specify here. XGS2220 Series User’s Guide...
  • Page 392 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 393: Vlan Mapping

    Any packets carrying a VLAN tag other than 12 (such as 10) and received on port 3 will be dropped. Figure 292 VLAN Mapping Example 58.1.2 What You Can Do • Use the VLAN Mapping screen (Section 58.2 on page 394) to enable VLAN mapping on the Switch and XGS2220 Series User’s Guide...

  • Page 394: Enable Vlan Mapping

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 395: Vlan Mapping Setup

    Click Add/Edit, or select an entry and click Add/Edit in the SWITCHING > VLAN Mapping > VLAN Mapping Setup to display this screen. Use this screen to enable and edit the VLAN mapping rules. Figure 295 SWITCHING > VLAN Mapping > VLAN Mapping Setup > Add/Edit XGS2220 Series User’s Guide...
  • Page 396 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 397: Vlan Stacking

    VLAN group. The service provider can separate these two VLANs within its network by adding tag 37 to distinguish customer A and tag 48 to distinguish customer B at edge device 1 and then stripping those tags at edge device 2 as the data frames leave the network. XGS2220 Series User’s Guide...

  • Page 398: Vlan Stacking Port Roles

    Note: Static VLAN Tx Tagging MUST be enabled on a port where you choose Tunnel. 59.3 VLAN Tag Format A VLAN tag (service provider VLAN stacking or customer IEEE 802.1Q) consists of the following three fields. Table 219 VLAN Tag Format Type Priority XGS2220 Series User’s Guide...

  • Page 399: Frame Format

    Len/Etype Length and type of Ethernet frame (SP)TPID (Service Provider) Tag Protocol IDentifier Data Frame data VLAN ID Frame Check Sequence 59.4 Configuring VLAN Stacking Click SWITCHING > VLAN Stacking to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 400 In order to support VLAN stacking on a port, the port must be able to allow frames of 1526 Bytes (1522 Bytes + 4 Bytes for the second tag) to pass through it. XGS2220 Series User’s Guide...

  • Page 401: Port-Based Q-In-Q

    VLAN tag to them, even if they have different customer VLAN IDs. Click SWITCHING > VLAN Stacking > Port-Based QinQ to display the screen as shown. Figure 298 SWITCHING > VLAN Stacking > Port-Based QinQ XGS2220 Series User’s Guide...

  • Page 402: Selective Q-In-Q

    This shows whether this rule is activated or not. Name This is the descriptive name for this rule. Port This is the port number to which this rule is applied. CVID This is the customer VLAN ID in the incoming packets. XGS2220 Series User’s Guide...

  • Page 403: Add/Edit Selective Q-In-Q

    Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 404: Networking

    H A P T E R NETWORKING The following chapters introduces the configurations of the links under the NETWORKING navigation panel. Quick links to chapters: • ARP Setup • DHCP • Static Route XGS2220 Series User’s Guide...

  • Page 405: Arp Setup

    MAC address that replied. 61.1.2.2 ARP Learning Mode The Switch supports three ARP learning modes: ARP-Reply, Gratuitous-ARP, and ARP-Request. ARP-Reply The Switch in ARP-Reply learning mode updates the ARP table only with the ARP replies to the ARP XGS2220 Series User’s Guide...
  • Page 406 In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. ARP-Request When the Switch is in ARP-Request learning mode, it updates the ARP table with both ARP replies, gratuitous ARP requests and ARP requests. XGS2220 Series User’s Guide...

  • Page 407: Arp Learning

    ICMP reply. 61.2 ARP Learning Use this screen to configure each port’s ARP learning mode. Click NETWORKING > ARP Setup > ARP Learning in the navigation panel to display the screen as shown next. XGS2220 Series User’s Guide...

  • Page 408: Static Arp

    Use this screen to view and configure static ARP entries that will display in the MONITOR > ARP Table screen and will not age out. Click NETWORKING > ARP Setup > Static ARP to display the screen as shown. XGS2220 Series User’s Guide...

  • Page 409: Add/Edit Static Arp

    Use this screen to add/edit static ARP entries. Click Add/Edit, or select an entry and click Add/Edit in the NETWORKING > ARP Setup > Static ARP to display this screen. Figure 303 NETWORKING > ARP Setup > Static ARP > Add/Edit XGS2220 Series User’s Guide...
  • Page 410 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 411: Dhcp

    If there is already a DHCP server on your network, then you can configure the Switch as a DHCP relay agent. When the Switch receives a request from a computer on your network, it contacts the DHCP server for the necessary IP information, and then relays the assigned information back to the computer. XGS2220 Series User’s Guide...

  • Page 412: Dhcpv4 Relay Status

    Address 62.3 DHCPv4 Option 82 Profile Use this screen to view and configure DHCPv4 option 82 profiles. Click NETWORKING > DHCP > DHCPv4 Relay > DHCP Option 82 Profile link to display the screen as shown. XGS2220 Series User’s Guide...

  • Page 413: Add/Edit A Dhcpv4 Option 82 Profile

    Figure 306 NETWORKING > DHCP > DHCPv4 Relay > DHCP Option 82 Profile > Add/Edit Note: The string of any field in this screen should not contain [ ? ], [ | ], [ ' ], [ " ] or [ , ]. XGS2220 Series User’s Guide...

  • Page 414: Configuring Dhcpv4 Smart Relay

    Click Cancel to not save the configuration you make and return to the last screen. 62.4 Configuring DHCPv4 Smart Relay Use this screen to configure global DHCPv4 relay. Click NETWORKING > DHCP > DHCPv4 Relay > DHCP Smart Relay to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 415 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new entry or edit a selected one. Delete Click Delete to remove the selected entries. XGS2220 Series User’s Guide...

  • Page 416: Add/Edit Dhcpv4 Global Relay Port

    The follow figure shows a network example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains. XGS2220 Series User’s Guide...
  • Page 417 (such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. Click Apply after you finish the configuration. Figure 310 DHCP Relay Configuration Example XGS2220 Series User’s Guide...

  • Page 418: Dhcpv4 Vlan Setting

    Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new entry or edit a selected one. Delete Click Delete to remove the selected entries. XGS2220 Series User’s Guide...

  • Page 419: Add/Edit Dhcpv4 Vlan Setting

    Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. Click the Add/Edit button in the Port section of the NETWORKING > DHCP > DHCPv4 Relay > DHCP Relay VLAN Setting screen to access this screen. XGS2220 Series User’s Guide...

  • Page 420: Dhcpv6 Relay

    Use this screen to view and configure DHCPv6 relay settings for a specific VLAN on the Switch. Click NETWORKING > DHCP > DHCPv6 Relay in the navigation panel to display the screen as shown. Figure 314 NETWORKING > DHCP > DHCPv6 Relay XGS2220 Series User’s Guide...

  • Page 421: Add/Edit Dhcpv6 Relay

    ‘2001:db8:0:0:1a2f::15’. Interface ID Enable the switch button to have the Switch add the interface-ID option in the DHCPv6 requests from the clients in the specified VLAN before the Switch forwards them to a DHCPv6 server. XGS2220 Series User’s Guide...

  • Page 422: Dhcp Server Guard

    Figure 316 NETWORKING > DHCP > DHCP Server Guard The following table describes the labels in this screen. Table 239 NETWORKING > DHCP > DHCP Server Guard LABEL DESCRIPTION DHCP Server Guard Active Enable the switch button to enable DHCP Server Guard. Port Setting XGS2220 Series User’s Guide...
  • Page 423 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to their last saved values. XGS2220 Series User’s Guide...

  • Page 424: Static Route

    • Use the IPv4 Static Route screen (Section 63.2 on page 425) to configure and enable an IPv4 static route. • Use the IPv6 Static Route screen (Section 63.3 on page 426) to configure and enable an IPv6 static route. XGS2220 Series User’s Guide...

  • Page 425: Ipv4 Static Route

    Click Add/Edit, or select an entry and click Add/Edit in the NETWORKING > Static Routing > IPv4 Static Route screen to display this screen. Figure 319 NETWORKING > Static Routing > IPv4 Static Route > Add/Edit XGS2220 Series User’s Guide...

  • Page 426: Ipv6 Static Route

    This field displays the IPv6 subnet prefix and prefix length of the final destination. Destination / Prefix Length Next Hop This field displays the IPv6 address of the gateway that helps forward the packet to the destination. XGS2220 Series User’s Guide...

  • Page 427: Add/Edit Ipv6 Static Route

    Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 428: Security

    Access Control • Classifier • Policy Rule • Anti-Arpscan • BPDU Guard • Storm Control • Error-Disable • IP Source Guard • DHCP Snooping • ARP Inspection • IPv6 Source Guard • Port Authentication • Port Security XGS2220 Series User’s Guide...

  • Page 429: Aaa

    Switch itself or it can use an external server to authorize a large number of users. Accounting is the process of recording what a user is doing. The Switch can use an external server to XGS2220 Series User’s Guide...

  • Page 430: Radius Server Setup

    All communication between the client (the Switch) authentication. and the TACACS server is encrypted. 65.2 RADIUS Server Setup Use this screen to configure your RADIUS server settings. Click SECURITY > AAA > RADIUS Server Setup to view the screen as shown. XGS2220 Series User’s Guide...
  • Page 431 Specify a password (up to 32 alphanumeric characters except [ ? ], [ | ], [ ' ], [ " ] or [ , ]) as the key to be shared between the external RADIUS server and the Switch. This key is not sent over the network. This key must be the same on the external RADIUS server and the Switch. XGS2220 Series User’s Guide...

  • Page 432: Tacacs+ Server Setup

    Cancel Click Cancel to begin configuring this screen afresh. 65.3 TACACS+ Server Setup Use this screen to configure your TACACS+ server settings. Click SECURITY > AAA > TACACS+ Server Setup to view the screen as shown. XGS2220 Series User’s Guide...
  • Page 433 Enter the IP address of an external TACACS+ server in dotted decimal notation. TCP Port The default port of a TACACS+ server for authentication is 49. You need not change this value unless your network administrator instructs you to do so. XGS2220 Series User’s Guide...

  • Page 434: Aaa Setup

    Click Cancel to begin configuring this screen afresh. 65.4 AAA Setup Use this screen to configure authentication, authorization and accounting settings on the Switch. Click SECURITY > AAA > AAA Setup to view the screen as shown. XGS2220 Series User’s Guide...
  • Page 435 TACACS+ server for security enhancement. The shared secret will be stored on the Switch in an encrypted format and displayed as ‘*’ in the SECURITY > AAA > RADIUS Server Setup and SECURITY > AAA > TACACS+ Server Setup screens. XGS2220 Series User’s Guide...
  • Page 436 Select whether you want to use radius or tacacs+ for authorization of specific types of events. RADIUS is the only method for IEEE 802.1x authorization. Accounting Use this section to configure accounting settings on the Switch. XGS2220 Series User’s Guide...

  • Page 437: Technical Reference

    (for example, the Switch). A company can create Vendor Specific Attributes (VSAs) to expand the functionality of a RADIUS server. The Switch supports VSAs that allow you to perform the following actions based on user authentication: XGS2220 Series User’s Guide...
  • Page 438 VLAN settings are fixed and untagged. This will also set the port’s VID. The following table describes the values you need to configure. Note that these attributes only work when you enable authorization (see Section 65.4 on page 434). XGS2220 Series User’s Guide...

  • Page 439: Supported Radius Attributes

    65.5.3.1 Attributes Used for Authenticating Privilege Access User-Name – The format of the User-Name attribute is $enab#$, where # is the privilege level (1 – 14). User-Password NAS-Identifier NAS-IP-Address 65.5.3.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address XGS2220 Series User’s Guide...

  • Page 440: Attributes Used For Accounting

    ATTRIBUTE START INTERIM-UPDATE STOP User-Name    NAS-Identifier    NAS-IP-Address    Service-Type    Acct-Status-Type    Acct-Delay-Time    Acct-Session-Id    Acct-Authentic    XGS2220 Series User’s Guide...
  • Page 441 NAS-Identifier    NAS-Port-Type    Acct-Status-Type    Acct-Delay-Time    Acct-Session-Id    Acct-Authentic    Acct-Input-Octets   Acct-Output-Octets   Acct-Session-Time   Acct-Input-Packets   XGS2220 Series User’s Guide...
  • Page 442 Table 252 RADIUS Attributes – Exec Events through Console (continued) ATTRIBUTE START INTERIM-UPDATE STOP Acct-Output-Packets   Acct-Terminate-Cause  Acct-Input-Gigawords   Acct-Output-Gigawords   XGS2220 Series User’s Guide...

  • Page 443: Access Control

    “trusted computers” for each service in the SECURITY > Access Control > Remote Management screen (discussed later). Click SECURITY > Access Control > Service Access Control to display the following screen. XGS2220 Series User’s Guide...

  • Page 444: Remote Management

    Use this screen to specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click SECURITY > Access Control > Remote Management to view the screen as shown next. XGS2220 Series User’s Guide...

  • Page 445: Account Security

    Use this screen to encrypt all passwords configured in the Switch. This setting will affect how the password is shown (as plain text or encrypted text) in the configuration file saved in MAINTENANCE > Configuration > Save Configuration. XGS2220 Series User’s Guide...
  • Page 446 Note: The passwords will appear as encrypted text when Password Encryption is Active. Click SECURITY > Access Control > Account Security to view the screen as shown next. Figure 328 SECURITY > Access Control > Account Security XGS2220 Series User’s Guide...

  • Page 447: Technical Reference

    Figure 329 SSH Communication Example 66.5.1.1 How SSH Works The following table summarizes how a secure connection is established between two remote hosts. XGS2220 Series User’s Guide...
  • Page 448 Your Switch supports SSH version 2 using RSA authentication and three encryption methods (DES, 3DES and Blowfish). The SSH server is implemented on the Switch for remote management and file transfer on port 22. Only one SSH connection is allowed at a time. XGS2220 Series User’s Guide...

  • Page 449: Introduction To Https

    HTTP connection requests from a web browser go to port 80 (by default) on the Switch’s WS (web server). Figure 331 HTTPS Implementation Note: If you disable HTTP in the Service Access Control screen, then the Switch blocks all HTTP connection attempts. XGS2220 Series User’s Guide...
  • Page 450 If that is the case, click I Understand the Risks and then the Add Exception... button. Figure 332 Security Alert (Mozilla Firefox) Confirm the HTTPS server URL matches. Click Confirm Security Exception to proceed to the Web Configurator login screen. XGS2220 Series User’s Guide...

  • Page 451: Google Chrome Warning Messages

    When you attempt to access the Switch HTTPS server, a Your connection is not private screen may display. If that is the case, click Advanced and then Proceed to x.x.x.x (unsafe) to proceed to the Web Configurator login screen. Figure 334 Security Alert (Google Chrome 99.0.4844.82) XGS2220 Series User’s Guide...
  • Page 452 After you accept the certificate and enter the login user name and password, the Switch main screen appears. The lock displayed in the bottom right of the browser status bar or next to the website address denotes a secure connection. Figure 335 Example: Lock Denoting a Secure Connection XGS2220 Series User’s Guide...

  • Page 453: Classifier

    Configure policy rules to define actions to be performed on a classified traffic flow (refer to Chapter 68 on page 462 to configure policy rules). You can also configure policy routing to forward a classified traffic flow to a different gateway for cost savings and load sharing. XGS2220 Series User’s Guide...

  • Page 454: Classifier Status

    Use this screen to view and configure the classifiers. After you define the classifier, you can specify actions (or policy) to act upon the traffic that matches the rules. Click SECURITY > ACL > Classifier Setup to display the configuration screen as shown. XGS2220 Series User’s Guide...
  • Page 455 In the Internet Protocol there is a field, called “Protocol”, to identify the next level protocol. The following table shows some common protocol types and the corresponding protocol number. Refer to http:// www.iana.org/assignments/protocol-numbers for a complete list. Table 260 Common IP Protocol Types and Protocol Numbers PROTOCOL TYPE PROTOCOL NUMBER ICMP XGS2220 Series User’s Guide...

  • Page 456: Add/Edit A Classifier

    Click Add/Edit, or select an entry and click Add/Edit in the SECURITY > ACL > Classifier Setup screen to display this screen. Figure 338 SECURITY > ACL > Classifier > Classifier Setup > Add/Edit XGS2220 Series User’s Guide...
  • Page 457 For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. If you leave the Mask field blank, the Switch automatically sets the mask to ff:ff:ff:ff:ff:ff. XGS2220 Series User’s Guide...
  • Page 458 Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. XGS2220 Series User’s Guide...

  • Page 459: Classifier Global Setting

    2, class a or class B takes priority over the classifier with the name of class 1 or class A. Logging Active Enable the switch button to allow the Switch to create a log when packets match a classifier rule during a defined time interval. XGS2220 Series User’s Guide...

  • Page 460: Classifier Example

    Cancel Click Cancel to begin configuring this screen afresh. 67.5 Classifier Example The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. XGS2220 Series User’s Guide...
  • Page 461 Chapter 67 Classifier Figure 340 Classifier: Example After you have configured a classifier, you can configure a policy (in the SECURITY > ACL > Policy Rule screen) to define actions on the classified traffic flow. XGS2220 Series User’s Guide...

  • Page 462: Policy Rule

    DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. XGS2220 Series User’s Guide...

  • Page 463: Policy Rules

    You must first configure a classifier in the SECURITY > ACL > Classifier > Classifier Setup screen. Click Add/Edit, or select an entry and click Add/Edit in the SECURITY > ACL > Policy Rule screen to display this screen. XGS2220 Series User’s Guide...
  • Page 464 This field displays the active classifiers you configure in the SECURITY > ACL > Classifier > Classifier Setup screen. Select the classifiers to which this policy rule applies. To select more than one classifier, press [SHIFT] and select the choices at the same time. XGS2220 Series User’s Guide...
  • Page 465 Select Replace the 802.1p priority field with the inner 802.1p priority value to replace the packet’s 802.1p priority field with the existing customer priority level carried in the frames and put the packets in the designated queue. XGS2220 Series User’s Guide...

  • Page 466: Policy Example

    The figure below shows an example SECURITY > ACL > Policy Rule screen where you configure a policy to limit bandwidth and discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 67.5 on page 460). XGS2220 Series User’s Guide...
  • Page 467 Chapter 68 Policy Rule Figure 343 Policy Example XGS2220 Series User’s Guide...

  • Page 468: Anti-Arpscan

    ARP-requests from a host exceed the thresholds, the trusted port will not be closed. • If a port on the Switch is closed by Anti-arpscan, and you want to recover it, then do one of the following: XGS2220 Series User’s Guide...

  • Page 469: Anti-Arpscan Status

    This field displays whether the port can forward traffic normally (Forwarding) or is disabled (Err-Disable). 69.3 Anti-Arpscan Host Status Use this screen to view blocked hosts and unblock ones connected to certain ports. To open this screen, click SECURITY > Anti-Arpscan > Anti-Arpscan Host Status. XGS2220 Series User’s Guide...

  • Page 470: Anti-Arpscan Setup

    69.4 Anti-Arpscan Setup Use this screen to enable Anti-Arpscan, set port and host thresholds as well as configure ports to be trusted or untrusted. To open this screen, click SECURITY > Anti-Arpscan > Anti-Arpscan Setup. XGS2220 Series User’s Guide...
  • Page 471 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS2220 Series User’s Guide...

  • Page 472: Anti-Arpscan Trust Host

    Use this screen to add/edit trusted hosts identified by IP address and subnet mask. Click Add/Edit, or select an entry and click Add/Edit in the SECURITY > Anti-Arpscan > Anti-Arpscan Trust Host screen to view this screen. XGS2220 Series User’s Guide...
  • Page 473 Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 474: Bpdu Guard

    Use this screen to view whether BPDU guard is enabled on the Switch and the port status. Click SECURITY > BPDU Guard > BPDU Guard Status to view the following screen. Figure 349 SECURITY > BPDU Guard > BPDU Guard Status XGS2220 Series User’s Guide...

  • Page 475: Bpdu Guard Setup

    The following table describes the fields in the above screen. Table 271 SECURITY > BPDU Guard > BPDU Guard Setup LABEL DESCRIPTION Active Enable the switch button to enable BPDU guard on the Switch. Port This field displays the port number. XGS2220 Series User’s Guide...
  • Page 476 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 477: Storm Control

    477) to limit the number of broadcast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the ports. 71.2 Storm Control Setup Click SECURITY > Storm Control in the navigation panel to display the screen as shown next. XGS2220 Series User’s Guide...
  • Page 478 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XGS2220 Series User’s Guide...

  • Page 479: Error-Disable

    • Use the Errdisable Recovery screen (Section 72.5 on page 483) to set the Switch to automatically undo an action after the error is gone. XGS2220 Series User’s Guide...

  • Page 480: Error-Disable Status

    The following table describes the labels in this screen. Table 273 SECURITY > Errdisable > Errdisable Status LABEL DESCRIPTION Inactive-reason mode reset Port Enter the number of the ports (separated by a comma) on which you want to reset inactive- reason status. XGS2220 Series User’s Guide...

  • Page 481: Cpu Protection Setup

    Switch can receive or transmit on a port. Click SECURITY > Errdisable > CPU Protection to display the screen as shown. Note: After you configure this screen, make sure you also enable error detection for the specific control packets in the SECURITY > Errdisable > Errdisable Detect screen. XGS2220 Series User’s Guide...

  • Page 482: Error-Disable Detect Setup

    Use this screen to have the Switch detect whether the control packets exceed the rate limit configured for a port and configure the action to take once the limit is exceeded. Click SECURITY > Errdisable > Errdisable Detect to display the screen as shown. XGS2220 Series User’s Guide...

  • Page 483: Error-Disable Recovery Setup

    Click Cancel to begin configuring this screen afresh. 72.5 Error-Disable Recovery Setup Use this screen to configure the Switch to automatically undo an action after the error is gone. Click SECURITY > Errdisable > Errdisable Recovery to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 484 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 485: Ip Source Guard

    DHCP snooping and ARP inspection. 73.1.2 What You Need to Know The Switch builds the binding table by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings). IP source guard consists of the following features: XGS2220 Series User’s Guide...

  • Page 486: Ipv4 Source Guard

    If you try to create a static binding with the same MAC address and VLAN ID as an existing static binding, the new static binding replaces the original one. To open this screen, click SECURITY > IPv4 Source Guard > IP Source Guard > Static Binding. XGS2220 Series User’s Guide...
  • Page 487 Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new entry or edit a selected one. Delete Click Delete to remove the selected entries. XGS2220 Series User’s Guide...

  • Page 488: Add/Edit Ipv4 Source Guard Static Binding

    Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XGS2220 Series User’s Guide...

  • Page 489: Dhcp Snooping

    (Section 74.6 on page 496) to apply a different DHCP option 82 profile to certain ports in a VLAN. 74.2 DHCP Snooping Status Use this screen to look at various statistics about the DHCP snooping database. XGS2220 Series User’s Guide...
  • Page 490 This field displays when (in seconds) the Switch is going to update the DHCP snooping Expiry database again. It displays Not Running if the current bindings have not changed since the last update. Last Succeeded This field displays the last time the Switch updated the DHCP snooping database Time successfully. XGS2220 Series User’s Guide...
  • Page 491 You can clear these counters by restarting the Switch or using CLI commands. See the Ethernet Switch CLI Reference Guide. Binding Collisions This field displays the number of bindings the Switch has ignored because the Switch already had a binding with the same MAC address and VLAN ID. XGS2220 Series User’s Guide...

  • Page 492: Dhcp Snooping Setup

    Note: The input string of any field in this screen should not contain [ ? ], [ | ], [ ' ], [ " ], or [ , ]. Figure 360 SECURITY > IPv4 Source Guard > DHCP Snooping > DHCP Snp. Setup XGS2220 Series User’s Guide...

  • Page 493: Dhcp Snooping Port Setup

    Cancel Click this to reset the values in this screen to their last-saved values. 74.4 DHCP Snooping Port Setup Use this screen to specify whether ports are trusted or untrusted ports for DHCP snooping. XGS2220 Series User’s Guide...
  • Page 494 • The packet is a RELEASE or DECLINE packet, and the source MAC address and source port do not match any of the current bindings. • The rate at which DHCP packets arrive is too high. XGS2220 Series User’s Guide...

  • Page 495: Dhcp Snooping Vlan Setup

    This displays the number of VLAN search results. VLANs This field displays the VLAN ID of each VLAN in the range specified above. If you configure the * VLAN, the settings are applied to all VLANs. XGS2220 Series User’s Guide...

  • Page 496: Dhcp Snooping Vlan Port Setup

    Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. Click Add/Edit, or select an entry and click Add/Edit in the SECURITY > IPv4 Source Guard > DHCP Snooping > DHCP Snp. VLAN Port Setup screen to display this screen. XGS2220 Series User’s Guide...

  • Page 497: Technical Reference

    Every port is either a trusted port or an untrusted port for DHCP snooping. This setting is independent of the trusted or untrusted setting for ARP inspection. You can also specify the maximum number for DHCP packets that each port (trusted or untrusted) can receive each second. XGS2220 Series User’s Guide...
  • Page 498 The Switch can add the following information: • Slot ID (1 byte), port ID (1 byte), and source VLAN ID (2 bytes) • System name (up to 32 bytes) XGS2220 Series User’s Guide...
  • Page 499 Enable DHCP snooping on the Switch. Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. Configure trusted and untrusted ports, and specify the maximum number of DHCP packets that each port can receive per second. Configure static bindings. XGS2220 Series User’s Guide...

  • Page 500: Arp Inspection

    Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Delete Click this to remove the selected entries. Cancel Click this to clear the Delete check boxes above. XGS2220 Series User’s Guide...

  • Page 501: Arp Inspection Vlan Status

    Use this screen to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. To open this screen, click SECURITY > IPv4 Source Guard > ARP Inspection > ARP Insp. Log Status. XGS2220 Series User’s Guide...

  • Page 502: Arp Inspection Setup

    Use this screen to enable ARP inspection on the Switch. You can also configure the length of time the Switch stores records of discarded ARP packets and global settings for the ARP inspection log. To open this screen, click SECURITY > IPv4 Source Guard > ARP Inspection > ARP Insp. Setup. XGS2220 Series User’s Guide...
  • Page 503 Four invalid ARP packets per second, Syslog Rate is 5, Log Interval is 1: the Switch sends 4 syslog messages every second. • Six invalid ARP packets per second, Syslog Rate is 5, Log Interval is 2: the Switch sends 5 syslog messages every 2 seconds. XGS2220 Series User’s Guide...

  • Page 504: Arp Inspection Port Setup

    Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS2220 Series User’s Guide...

  • Page 505: Arp Inspection Vlan Setup

    ARP packets from each VLAN. To open this screen, click SECURITY > IPv4 Source Guard > ARP Inspection > ARP Insp. VLAN Setup. Figure 371 SECURITY > IPv4 Source Guard > ARP Inspection > ARP Insp. VLAN Setup XGS2220 Series User’s Guide...

  • Page 506: Ipv6 Source Guard

    Switch that do not match an entry in the IPSG binding table, the Switch will drop these packets. The Switch forwards matching traffic normally. The IPv6 source guard related screens are available in standalone mode. XGS2220 Series User’s Guide...

  • Page 507: Ipv6 Source Binding Status

    This field displays infinity if the binding is always valid (for example, a static binding). Type This field displays how the Switch learned the binding. S: This static binding was learned from information provided manually by an administrator. DH: This dhcp-snooping binding was learned by snooping DHCP packets. XGS2220 Series User’s Guide...

  • Page 508: Ipv6 Static Binding

    Use this screen to manually create an IPv6 source guard binding table entry and manage IPv6 static bindings. Click Add/Edit, or select an entry and click Add/Edit in the SECURITY > IPv6 Source Guard > IPv6 Static Binding > IPv6 Static Binding screen to display this screen. XGS2220 Series User’s Guide...

  • Page 509: Ipv6 Source Guard Policy

    VLAN ID, port number, and MAC address will be forwarded. If this binding entry is a IPv6 address, the traffic will be denied. • If you select both Validate Prefix and Validate Address then traffic matching either IPv6 address or prefix will be forwarded. XGS2220 Series User’s Guide...

  • Page 510: Add/Edit An Ipv6 Source Guard Policy

    Select Validate Address to have IPv6 source guard forward valid addresses that are stored in the binding table. Validate Prefix Select Validate Prefix to have IPv6 source guard forward valid prefixes that are stored in the binding table. XGS2220 Series User’s Guide...

  • Page 511: Ipv6 Source Guard Port Setup

    Note: Changes in this row are copied to all the ports as soon as you make them. Policy Name Select an IPv6 source guard policy that the Switch will apply to this port. XGS2220 Series User’s Guide...

  • Page 512: Ipv6 Snooping Policy Setup

    Use this screen to dynamically create an IPv6 source guard binding table using a DHCPv6 snooping policy. Click Add/Edit, or select an entry and click Add/Edit in the SECURITY > IPv6 Source Guard > IPv6 Snooping > IPv6 Snooping Policy Setup screen to display this screen. XGS2220 Series User’s Guide...

  • Page 513: Ipv6 Snooping Vlan Setup

    The following table describes the labels in this screen. Table 300 SECURITY > IPv6 Source Guard > IPv6 Snooping > IPv6 Snp. VLAN Setup LABEL DESCRIPTION Index This field displays a sequential number for each binding. Interface This field displays the VLAN interface. XGS2220 Series User’s Guide...

  • Page 514: Add/Edit An Ipv6 Snooping Vlan

    Note: DHCPv6 solicit packets are sent from a DHCPv6 client to a DHCPv6 server. Reply packets from a DHCPv6 server connected to an untrusted port are discarded. Use port * to have all ports be Untrusted or Trusted. XGS2220 Series User’s Guide...
  • Page 515 • The packet is a DHCPv6 server packet (for example, ADVERTISE, REPLY, or RELAY-REPLY). • The source MAC address and source IP address in the packet do not match any of the current bindings. XGS2220 Series User’s Guide...

  • Page 516: Technical Reference

    MAC address filter remains in the Switch. These MAC address filters are different than regular MAC address filters. • They are stored only in volatile memory. • They do not use the same space in memory that regular MAC address filters use. XGS2220 Series User’s Guide...
  • Page 517 ARP inspection so that the Switch has enough time to build the binding table. Enable ARP inspection on each VLAN. Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. XGS2220 Series User’s Guide...

  • Page 518: Port Authentication

    At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. XGS2220 Series User’s Guide...

  • Page 519: What You Need To Know

    Switch does not prompt the client for login credentials. The login credentials are based on the source MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. XGS2220 Series User’s Guide...

  • Page 520: Activate Ieee 802.1X Security

    AAA > RADIUS Server Setup screen. 76.2 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. Click SECURITY > Port Authentication > 802.1x to display the configuration screen as shown. Figure 386 SECURITY > Port Authentication > 802.1x XGS2220 Series User’s Guide...

  • Page 521: Activate Mac Authentication

    Cancel Click Cancel to begin configuring this screen afresh. 76.3 Activate MAC Authentication Use this screen to activate MAC authentication. Click SECURITY > Port Authentication > MAC Authentication to display the configuration screen as shown. XGS2220 Series User’s Guide...
  • Page 522 Select the case (Upper or Lower) the RADIUS server requires for letters in MAC addresses used as the account user name (and password). Password Type Select Static to have the Switch send the password you specify below or MAC-Address to use the client MAC address as the password. XGS2220 Series User’s Guide...

  • Page 523: Guest Vlan

    That is, unauthenticated users can have access to limited network resources in the same guest VLAN, such as the Internet. The access granted to the Guest VLAN depends on how the network administrator configures switches or routers with the guest network feature. XGS2220 Series User’s Guide...
  • Page 524 Changes in this row are copied to all the ports as soon as you make them. Active Select this check box to enable the guest VLAN feature on this port. Clients that fail authentication are placed in the guest VLAN and can receive limited services. XGS2220 Series User’s Guide...

  • Page 525: Compound Authentication

    • In MAC authentication, the login credentials are based on the source MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. Click SECURITY > Port Authentication > Compound Authentication Mode to display the configuration screen as shown. XGS2220 Series User’s Guide...

  • Page 526: Technical Reference

    The IEEE 802.1x is a standard for authentication as well as providing additional accounting and control features. It can be implemented both on wired and wireless networks. It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: XGS2220 Series User’s Guide...

  • Page 527: Radius

    Access-Request message. The following types of RADIUS messages are exchanged between the switch and the RADIUS server for user accounting: • Accounting-Request Sent by the switch requesting accounting. XGS2220 Series User’s Guide...

  • Page 528: Eap (Extensible Authentication Protocol) Authentication

    This makes user identity vulnerable to passive attacks. A digital certificate is an electronic ID card that authenticates the sender’s identity. However, to implement EAPTLS, you need a Certificate Authority (CA) to handle certificates, which imposes a management overhead. • EAP-TTLS (Tunneled Transport Layer Service) XGS2220 Series User’s Guide...

  • Page 529: Eapol (Eap Over Lan)

    This message will be sent when the wired client wants to be disconnected from the network. • EAPOL-Encapsulated-ASF-Alert This message is sent If the authentication process is not completed yet, and alerts needs to be forwarded. XGS2220 Series User’s Guide...

  • Page 530: Port Security

    By default, MAC address learning is still enabled even though the port security is not activated. 77.3 Port Security Setup Click SECURITY > Port Security in the navigation panel to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 531 Use this row only if you want to make some of the settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS2220 Series User’s Guide...
  • Page 532 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 533: Maintenance

    Section 66.5.2 on page 449 for more information about HTTPS. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. XGS2220 Series User’s Guide...

  • Page 534: Https Certificates

    78.2.1 HTTPS Certificates Use this screen to view the HTTPS certificate details. Click a hyperlink in the Service column in the MAINTENANCE > Certificates screen to open the following screen. XGS2220 Series User’s Guide...

  • Page 535: Technical Reference

    Switch setup, IP Setup, and so on. Once you have customized the Switch’s settings, they can be saved back to your computer under a filename of your choosing. ZyNOS (Zyxel Network Operating System sometimes referred to as the “ras” file) is the system firmware XGS2220 Series User’s Guide...

  • Page 536: Ftp Command Line Procedure

    Enter open, followed by a space and the IP address of your Switch. Press [ENTER] when prompted for a user name. Enter your password as requested (the default is “1234”). Enter bin to set transfer mode to binary. XGS2220 Series User’s Guide...

  • Page 537: Gui-Based Ftp Clients

    The switches must be directly connected and be in the same VLAN group so as to be able to communicate with one another. Table 311 Zyxel Clustering Management Specifications Maximum number of cluster members Cluster Member Models Must be compatible with Zyxel cluster management implementation. XGS2220 Series User’s Guide...

  • Page 538: What You Can Do

    Use this screen to view the role of the Switch within the cluster and to access a cluster member Switch’s Web Configurator. Click MAINTENANCE > Cluster Management in the navigation panel to display the following screen. Note: A cluster can only have one manager. XGS2220 Series User’s Guide...

  • Page 539: Clustering Management Setup

    Offline (the Switch is disconnected – Offline shows approximately 1.5 minutes after the link between cluster member and manager goes down) 78.6 Clustering Management Setup Use this screen to configure clustering management. Click MAINTENANCE > Cluster Management > Cluster Management Setup to display the next screen. XGS2220 Series User’s Guide...
  • Page 540 This is the index number of a cluster member switch. MAC Address This is the cluster member switch’s hardware MAC address. Name This is the cluster member switch’s System Name. Model This is the cluster member switch’s model name. XGS2220 Series User’s Guide...

  • Page 541: Technical Reference

    Index hyperlink from the list of members to go to that cluster member switch's Web Configurator home page. This cluster member Web Configurator home page and the home page that you would see if you accessed it directly are different. XGS2220 Series User’s Guide...
  • Page 542 297 bytes received in 0.00Seconds 297000.00Kbytes/sec. ftp> bin 200 Type I OK ftp> put 470ACAQ0.bin fw-00-a0-c5-01-23-46 200 Port command okay 150 Opening data connection for STOR fw-00-a0-c5-01-23-46 226 File received OK ftp: 262144 bytes sent in 0.63Seconds 415.44Kbytes/sec. ftp> XGS2220 Series User’s Guide...

  • Page 543: Restore Configuration

    Backing up your Switch configurations allows you to create various “snap shots” of your device from which you may restore at a later date. Use this screen to back up your current Switch configuration to a computer. XGS2220 Series User’s Guide...

  • Page 544: Auto Configuration

    Switch using the DHCP or HTTPS mode. This will overwrite the running configuration stored in the Switch’s RAM instead of the startup configuration stored in the Switch’s flash memory. To access this screen, click MAINTENANCE > Configuration > Auto Configuration in the navigation panel. Figure 403 MAINTENANCE > Configuration > Auto Configuration XGS2220 Series User’s Guide...

  • Page 545: Erase Running-Configuration

    Switch to the factory defaults, the user name, password, system logs, memory logs, baud rate and SSH service are not removed. To access this screen, click MAINTENANCE > Configuration > Erase Running Configuration in the navigation panel. XGS2220 Series User’s Guide...

  • Page 546: Save Configuration

    Note: If a customized default file was not saved, clicking Custom Default in the MAINTENANCE > Reboot System screen loads the factory default configuration on the Switch. Alternatively, click Save on the top right in any screen to save the configuration changes to the current configuration. XGS2220 Series User’s Guide...

  • Page 547: Configure Clone

    Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click MAINTENANCE > Configuration > Configure Clone to open the following screen. Figure 407 MAINTENANCE > Configuration > Configure Clone XGS2220 Series User’s Guide...

  • Page 548: Diagnostic

    Click Cancel to begin configuring this screen afresh. 78.14 Diagnostic Click MAINTENANCE > Diagnostic in the navigation panel to open this screen. Use this screen to ping IP addresses, run a traceroute, perform port tests or show the Switch’s location between devices. XGS2220 Series User’s Guide...
  • Page 549 Type the source IP address that you want to ping in order to test a connection. Address Click Ping to have the Switch ping the IP address. Count Enter the number of ICMP Echo Request (ping) messages the Switch continuously sends. Trace Route Test XGS2220 Series User’s Guide...

  • Page 550: Firmware Upgrade

    Switch on the NCC. On the NCC web portal, go to Site-wide > Configure > Firmware management to schedule the firmware upgrade time. Note: While the Switch is rebooting, do NOT turn off the power. XGS2220 Series User’s Guide...
  • Page 551 Click the Config Boot Image drop-down list box to select the boot image (Firmware1 or Firmware2) you want the Switch to use when rebooting, click Apply. Restart the Switch (manually or using the MAINTENANCE > Reboot System screen) to apply the firmware image you selected. XGS2220 Series User’s Guide...

  • Page 552: Reboot System

    Click MAINTENANCE > Reboot System to view the screen as shown next. Figure 410 MAINTENANCE > Reboot System Click the Config 1, Config 2, Factory Default, or Custom Default button to reboot and load that configuration file. The confirmation screen displays. XGS2220 Series User’s Guide...

  • Page 553: Tech-Support

    CLI command by typing “Show tech-support” command. Click MAINTENANCE > Tech-Support to see the following screen. Figure 412 MAINTENANCE > Tech-Support You may need WordPad or similar software to see the log report correctly. The table below describes XGS2220 Series User’s Guide...

  • Page 554: Tech-Support Download

    Click Cancel to begin configuring this screen afresh. 78.17.1 Tech-Support Download When you click Download to save your current Switch configuration to a computer, the following screen appears. When the log report has downloaded successfully, click Back to return to the previous screen. XGS2220 Series User’s Guide...
  • Page 555 Chapter 78 MAINTENANCE Figure 413 MAINTENANCE > Tech-Support: Download XGS2220 Series User’s Guide...

  • Page 556: Chapter 79 Networked Av Mode

    AV information, Nebula Cloud Control status, and a link to go to the IP Setup screen (Section 79.11 on page 565). The SUMMARY screen displays when you log into the Switch in Networked AV mode. XGS2220 Series User’s Guide...
  • Page 557 It displays Drop on VLAN when the frames are discarded on the specified VLANs. Power Usage(W) For PoE models. This chart displays the used PoE Watts over the total number of Watts provided on this Switch. XGS2220 Series User’s Guide...

  • Page 558: Monitor

    79.6 System Information In the navigation panel, click MONITOR > System Information to display the screen as shown. Use this screen to view general system information. You can check the firmware version number and monitor the Switch temperature. XGS2220 Series User’s Guide...
  • Page 559 This field displays the total number of bytes in this memory pool. Used (byte) This field displays the number of bytes being used in this memory pool. Utilization This field displays the percentage (%) of memory being used in this memory pool. Hardware Monitor XGS2220 Series User’s Guide...

  • Page 560: System

    565) to configure the default gateway device, the default domain name server and add IP domains. • Use the Logins screen (Section 79.12 on page 567) to change the system password, configure passwords for up to four users and set their privilege level. XGS2220 Series User’s Guide...

  • Page 561: Cloud Management

    • It is connected to the Internet. • The Nebula Control Center Discovery feature is enabled. • It has been registered in the NCC. Click SYSTEM > Cloud Management in the navigation panel to display this screen. XGS2220 Series User’s Guide...
  • Page 562 Chapter 79 Networked AV Mode Figure 418 SYSTEM > Cloud Management XGS2220 Series User’s Guide...

  • Page 563: General Setup

    Switch on NCC. 79.10 General Setup Use this screen to configure general settings such as the system name and time. Click SYSTEM > General Setup in the navigation panel to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 564 Enter the period in minutes between each time server synchronization. The Switch checks the Interval time server after every synchronization interval. Current Time This field displays the time you open this menu (or refresh the menu). XGS2220 Series User’s Guide...

  • Page 565: Ip Setup

    Note: The Switch allows you to set a static IP interface in the same subnet that already has a DHCP-assigned IP interface on the Switch. The Switch will use the static IP you set and the DHCP-assigned IP will be set to 0.0.0.0. XGS2220 Series User’s Guide...

  • Page 566: Add/Edit Ip Interfaces

    Click Delete to remove the selected IP interfaces. 79.11.1 Add/Edit IP Interfaces Use this screen to add or edit IP interfaces. Click Add/Edit, or select an entry and click Add/Edit in the SYSTEM > IP Setup screen to display this screen. XGS2220 Series User’s Guide...

  • Page 567: Logins

    • A non-administrator (user name is something other than admin) is someone who can view and/or configure Switch settings. The configuration right varies depending on the user’s privilege level. Click SYSTEM> Logins to view the screen as shown. XGS2220 Series User’s Guide...
  • Page 568 Set a user name (up to 32 printable ASCII characters except [ ? ], [ | ], [ ' ], [ " ], or [ , ]). Password Enter your new system password. Retype to Retype your new system password for confirmation. confirm XGS2220 Series User’s Guide...

  • Page 569: Configure Snmp

    Switch into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions. It executes applications that control and monitor managed devices. XGS2220 Series User’s Guide...
  • Page 570 Click SYSTEM> SNMP > SNMP to view the screen as shown. Figure 424 SYSTEM > SNMP Note: The string of any field in this screen should not contain [ ? ], [ | ], [ ' ], [ " ] or [ , ]. XGS2220 Series User’s Guide...

  • Page 571: Configure Snmp User

    Use this screen to create SNMP users for authentication with managers using SNMP v3 and associate them to SNMP groups. An SNMP user is an SNMP manager. Click SYSTEM > SNMP > SNMP User to view the screen as shown. XGS2220 Series User’s Guide...

  • Page 572: Add/Edit Snmp User

    Figure 426 SYSTEM > SNMP > SNMP User > Add/Edit Note: The input string of any field in this screen should not contain [ ? ], [ | ], [ ' ], [ " ], or [ , ]. XGS2220 Series User’s Guide...

  • Page 573: Configure Snmp Trap Group

    79.15 Configure SNMP Trap Group Use this screen to specify the types of SNMP traps that should be sent to each SNMP manager. Click SYSTEM > SNMP > SNMP Trap Group to view the screen as shown. XGS2220 Series User’s Guide...

  • Page 574: Enable Or Disable Sending Of Snmp Traps On A Port

    79.16 Enable or Disable Sending of SNMP Traps on a Port Click SYSTEM > SNMP > SNMP Trap Port to view the screen as shown. Use this screen to set whether a trap received on the ports would be sent to the SNMP manager. XGS2220 Series User’s Guide...

  • Page 575: Port

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 79.17 PORT The following sections introduce the PORT screens. XGS2220 Series User’s Guide...

  • Page 576: Link Aggregation

    Use the Link Aggregation Status screen to view ports you have configured to be in the trunk group, ports that are currently transmitting data as one logical link in the trunk group and so on. Click PORT > Link Aggregation > Link Aggregation Status in the navigation panel to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 577 This field displays how these ports were added to the trunk group. It displays: • Static – if the ports are configured as static members of a trunk group. • LACP – if the ports are configured to join a trunk group through LACP. XGS2220 Series User’s Guide...

  • Page 578: Link Aggregation Setting

    This is the only screen you need to configure to enable static link aggregation. Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this to activate a trunk group. XGS2220 Series User’s Guide...

  • Page 579: Link Aggregation Control Protocol

    “standby” ports become operational without user intervention. Click PORT > Link Aggregation > Link Aggregation Control Protocol to display the screen shown next. Note: Do NOT configure this screen unless you want to enable dynamic link aggregation. XGS2220 Series User’s Guide...
  • Page 580 The field identifies the link aggregation group, that is, one logical link containing multiple ports. LACP Active Select this option to enable LACP for a trunk. Use this section to configure LACP timeout on ports. Port This field displays the port number. XGS2220 Series User’s Guide...

  • Page 581: Poe Status

    Note: The PoE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. Figure 433 PoE Example Application To view the current amount of power that PDs are receiving from the Switch, click PORT > PoE Setup > PoE Status. XGS2220 Series User’s Guide...
  • Page 582 This field shows which ports can receive power from the Switch. You can set this in Section 79.23 on page 583. • Disable – The PD connected to this port cannot get power supply. • Enable – The PD connected to this port can receive power. XGS2220 Series User’s Guide...

  • Page 583: Poe Setup

    Use this screen to set the PoE power management mode, priority levels, power-up mode and the maximum amount of power for the connected PDs. Click PORT > PoE Setup > PoE Setup, the following screen opens. XGS2220 Series User’s Guide...
  • Page 584 Changes in this row are copied to all the ports as soon as you make them. Active Select this to provide power to a PD connected to the port. If left unchecked, the PD connected to the port cannot receive power from the Switch. XGS2220 Series User’s Guide...
  • Page 585 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 586: Port Setup

    Type a descriptive name that identifies this port. You can enter up to 128 printable ASCII characters except [ ? ], [ | ], [ ' ] or [ " ]. Note: Due to space limitations, the port name may be truncated in some Web Configurator screens. XGS2220 Series User’s Guide...
  • Page 587 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS2220 Series User’s Guide...

  • Page 588: Switching

    Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS2220 Series User’s Guide...

  • Page 589: Multicast

    Switch are able to join. 79.28 IPv4 Multicast Status Click SWITCHING > Multicast > IPv4 Multicast Status to display the screen as shown. This screen shows the IPv4 multicast group information. Figure 438 SWITCHING > Multicast > IPv4 Multicast Status XGS2220 Series User’s Guide...

  • Page 590: Igmp Snooping

    IGMP snooping generates no additional network traffic, allowing you to significantly reduce multicast traffic passing through your Switch. Click SWITCHING > Multicast > IGMP Snooping to display the screen as shown. XGS2220 Series User’s Guide...
  • Page 591 IGMP snooping query works only when both host and Switch support the same IGMP version. Select v2 to allow the Switch to send IGMPv2 queries only. Select v3 to allow the Switch to send IGMPv3 queries only. XGS2220 Series User’s Guide...
  • Page 592 Specify the action to perform when the Switch receives a frame with a reserved multicast address. • Select Flooding to send the frames to all ports. • Select Drop to discard the frames. Use this section to configure IGMP Snooping on each port. Port This field displays the port number. XGS2220 Series User’s Guide...
  • Page 593 Select the name of the IGMP filtering profile to use for this port. Otherwise, select Default to Profile prohibit the port from joining any multicast group. You can create IGMP filtering profiles in the SWITCHING > Multicast > IGMP Filtering Profile screen. XGS2220 Series User’s Guide...

  • Page 594: Igmp Snooping Vlan

    VLANs other than those explicitly added as an IGMP snooping VLAN. Click SWITCHING > Multicast > IGMP Snooping VLAN to display the screen as shown. Note: You can perform IGMP snooping on up to 16 VLANs. Figure 440 SWITCHING > Multicast > IGMP Snooping VLAN XGS2220 Series User’s Guide...

  • Page 595: Add/Edit Igmp Snooping Vlans

    This screen allows you to add an IGMP snooping VLAN or edit an existing one. To access this screen, click the Add/Edit button or select an entry from the list and click the Add/Edit button. Figure 441 SWITCHING > Multicast > IGMP Snooping VLAN > Add/Edit XGS2220 Series User’s Guide...

  • Page 596: Igmp Filtering Profile

    This field displays the end of the multicast address range. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add Profile Click this to add a new IGMP filtering profile. XGS2220 Series User’s Guide...

  • Page 597: Add Igmp Filtering Profile

    Click Cancel to not save the configuration you make and return to the last screen. 79.31.2 Add IGMP Filtering Rule Click Add Rule in the SWITCHING > Multicast > IGMP Filtering Profile screen to access this screen. XGS2220 Series User’s Guide...

  • Page 598: Vlan

    (Section 79.35 on page 605) to configure the static VLAN (IEEE 802.1Q) settings on a port. 79.32.2 What You Need to Know Read this section to know more about VLAN and how to configure the screens. XGS2220 Series User’s Guide...
  • Page 599 802.1Q VLAN-aware switch, the Switch first decides where to forward the frame, and then inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is VLAN 1 for all ports, but this can be changed. XGS2220 Series User’s Guide...
  • Page 600 This is a VLAN configured by a GVRP registration or de-registration process. VLAN Administrative Registration Fixed Fixed registration ports are permanent VLAN members. Control Registration Ports with registration forbidden are forbidden to join the specified Forbidden VLAN. Normal Registration Ports dynamically join a VLAN using GVRP. XGS2220 Series User’s Guide...

  • Page 601: Vlan Status

    Figure 447 Port VLAN Trunking 79.33 VLAN Status Use this screen to view and search all static VLAN groups. Click SWITCHING > VLAN > VLAN Status from the navigation panel to display the screen as shown next. XGS2220 Series User’s Guide...

  • Page 602: Vlan Details

    Static – added as a permanent VLAN 79.33.1 VLAN Details Use this screen to view detailed port settings and status of the static VLAN group. Click an index number in the VLAN Status screen to display VLAN details. XGS2220 Series User’s Guide...

  • Page 603: Configure A Static Vlan

    You can also tag all outgoing frames (that were previously untagged) from a port with the specified VID. Use this screen to view and configure a static VLAN for the Switch. Click SWITCHING > VLAN > Static VLAN to display the screen as shown next. XGS2220 Series User’s Guide...

  • Page 604: Add/Edit A Static Vlan

    Use this screen to configure a static VLAN for the Switch. Click Add/Edit, or select an entry and click Add/Edit in the SWITCHING > VLAN > Static VLAN screen to display this screen. Figure 451 SWITHCING > VLAN > Static VLAN > Add/Edit XGS2220 Series User’s Guide...

  • Page 605: Vlan Port Setup

    Use this screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click SWITCHING > VLAN > VLAN Port Setup to display the screen as shown. Figure 452 SWITCHING > VLAN > VLAN Port Setup XGS2220 Series User’s Guide...

  • Page 606: Security

    (five different user names and passwords) and/or limitless SNMP access control sessions are allowed. Table 354 Access Control Overview Console Port Telnet SNMP One session Share up to 9 sessions One session Up to 5 accounts No limit XGS2220 Series User’s Guide...

  • Page 607: What You Can Do

    Table 355 SECURITY > Access Control > Service Access Control LABEL DESCRIPTION Services Services you may use to access the Switch are listed here. Active Enable the switch button for the corresponding services that you want to allow to access the Switch. XGS2220 Series User’s Guide...

  • Page 608: Remote Management

    Use this screen to specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click SECURITY > Access Control > Remote Management to view the screen as shown next. Figure 454 SECURITY > Access Control > Remote Management XGS2220 Series User’s Guide...

  • Page 609: Storm Control

    DLF packets in your network. You can specify limits for each packet type on each port. Click SECURITY > Storm Control in the navigation panel to display the screen as shown next. XGS2220 Series User’s Guide...

  • Page 610: Maintenance

    Cancel Click Cancel to reset the fields. 79.41 MAINTENANCE This section explains how to configure the screens that let you maintain the firmware and configuration files. XGS2220 Series User’s Guide...

  • Page 611: What You Can Do

    Backing up your Switch configurations allows you to create various “snap shots” of your device from which you may restore at a later date. Use this screen to back up your current Switch configuration to a computer. XGS2220 Series User’s Guide...

  • Page 612: Save Configuration

    Alternatively, click Save on the top right in any screen to save the configuration changes to the current configuration. Note: Clicking the Apply button after making configuration does NOT save the changes permanently. All unsaved changes are erased after you reboot the Switch. XGS2220 Series User’s Guide...

  • Page 613: Firmware Upgrade

    Current Configuration, a Custom Default or the Factory Default configuration when you reboot. Follow the steps below to reboot the Switch. Click MAINTENANCE > Reboot System to view the screen as shown next. XGS2220 Series User’s Guide...

  • Page 614: Tech-Support

    CLI command by typing “Show tech-support” command. Click MAINTENANCE > Tech-Support to see the following screen. Figure 463 MAINTENANCE > Tech-Support You may need WordPad or similar software to see the log report correctly. The table below describes XGS2220 Series User’s Guide...

  • Page 615: Tech-Support Download

    When you click Download to save your current Switch configuration to a computer, the following screen appears. When the log report has downloaded successfully, click Back to return to the previous screen. Figure 464 MAINTENANCE > Tech-Support: Download XGS2220 Series User’s Guide...

  • Page 616: Part Iii: Troubleshooting And Appendices

    Troubleshooting and Appendices...

  • Page 617: Chapter 80 Troubleshooting

    Check the hardware connections. See Section 3.1 on page Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the power adapter or cord to the Switch. If the problem continues, contact the vendor. XGS2220 Series User’s Guide...

  • Page 618: Switch Access And Login

    Use the NCC (Nebula Control Center) or the ZON utility to find the IP address. The Switch must be registered and added to a site in Nebula in order for it to be managed using Nebula. XGS2220 Series User’s Guide...
  • Page 619 • Try to access the Switch using another service, such as Telnet. If you can access the Switch, check the remote management settings to find out why the Switch does not respond to HTTP. Pop-up Windows, JavaScripts and Java Permissions In order to use the Web Configurator you need to allow: XGS2220 Series User’s Guide...

  • Page 620: Switch Configuration

    If you plug the power cable back to the Switch, it will reboot and load the configuration file that was used the last time. For example, if Config 1 was used on the Switch before you accidentally unplugged the Switch, Config 1 will be loaded when rebooting. XGS2220 Series User’s Guide...

  • Page 621: Appendix A Customer Support

    In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a Zyxel office for the region in which you bought the device. For Zyxel Communications offices, see https://service-provider.zyxel.com/global/en/contact-us for the latest information.
  • Page 622 • Zyxel Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • Zyxel Communications Corporation • https://www.zyxel.com/tw/zh/ Thailand • Zyxel Thailand Co., Ltd. • https://www.zyxel.com/th/th/ Vietnam • Zyxel Communications Corporation-Vietnam Office • https://www.zyxel.com/vn/vi Europe Belarus • Zyxel BY • https://www.zyxel.by Bulgaria • Zyxel България • https://www.zyxel.com/bg/bg/...
  • Page 623 Appendix A Customer Support Czech Republic • Zyxel Communications Czech s.r.o • https://www.zyxel.com/cz/cs/ Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da/ Finland • Zyxel Communications • https://www.zyxel.com/fi/fi/ France • Zyxel France • https://www.zyxel.fr Germany • Zyxel Deutschland GmbH • https://www.zyxel.com/de/de/ Hungary •...
  • Page 624 Appendix A Customer Support • https://www.zyxel.com/ro/ro Russia • Zyxel Russia • https://www.zyxel.com/ru/ru/ Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • https://www.zyxel.com/sk/sk/ Spain • Zyxel Communications ES Ltd. • https://www.zyxel.com/es/es/ Sweden • Zyxel Communications • https://www.zyxel.com/se/sv/ Switzerland • Studerus AG •...
  • Page 625 Ecuador • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ South America • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ Middle East Israel • Zyxel Communications Corporation • http://il.zyxel.com/ North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en/ XGS2220 Series User’s Guide...

  • Page 626: Appendix B Common Services

    File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by email. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol – a client or server protocol for the world wide web. XGS2220 Series User’s Guide...
  • Page 627 Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one email server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). XGS2220 Series User’s Guide...
  • Page 628 Its primary function is to allow users to log into remote host systems. TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. XGS2220 Series User’s Guide...

  • Page 629: Appendix C Ipv6

    54 bits 64 bits Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. XGS2220 Series User’s Guide...
  • Page 630 The following table describes the multicast addresses which are reserved and cannot be assigned to a multicast group. Table 363 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 XGS2220 Series User’s Guide...
  • Page 631 IA_NA were obtained) a Renew message. If the time T2 is reached and the server does not respond, the client sends a Rebind message to any available server (S2). For an IA_TA, the XGS2220 Series User’s Guide...
  • Page 632 (from the host) with a neighbor advertisement message. • Neighbor advertisement: A response from a node to announce its link-layer address. • Router solicitation: A request from a host to locate a router that can act as the default router and XGS2220 Series User’s Guide...
  • Page 633 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. XGS2220 Series User’s Guide...
  • Page 634 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler – a DHCPv6 client. XGS2220 Series User’s Guide...
  • Page 635 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) check box to enable it. Click OK to save the change. XGS2220 Series User’s Guide...
  • Page 636 Windows 10 supports IPv6 by default. DHCPv6 is enabled when you enable IPv6 on a Windows 10 PC. To enable IPv6 in Windows 10: Select Control Panel > Network and Sharing Center. On the left side of the Network and Sharing Center, select Change adapter settings. Right-click your network connection and select Properties. XGS2220 Series User’s Guide...
  • Page 637 • When you select Automatic (DHCP), the IP address settings and DNS server address setting are set automatically by your router. • When you select Manual, you can manually set your IP address settings and DNS server address. Now your computer can obtain an IPv6 address from a DHCPv6 server. XGS2220 Series User’s Guide...

  • Page 638: Appendix D Legal Information

    Regulatory Notice and Statement United States of America The following information applies if you use the product within USA area. US Importer: Zyxel Communications, Inc, 1130 North Miller Street Anaheim, CA92806-2001, https://www.zyxel.com/us/en/ Federal Communications Commission (FCC) EMC Statement • This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference.
  • Page 639 – Unplug the power cable before removing the power supply. – If the system has multiple sources of power, disconnect power from the system by unplugging all power cables from the power supply. • CLASS 1 LASER PRODUCT • APPAREIL À LASER DE CLASS 1 XGS2220 Series User’s Guide...
  • Page 640 Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. XGS2220 Series User’s Guide...
  • Page 641 Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. XGS2220 Series User’s Guide...
  • Page 642 Register your product online at www.zyxel.com to receive email notices of firmware upgrades and related information. Trademarks The trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners. XGS2220 Series User’s Guide...

  • Page 643: Index

    PD recovery enable aging time restart air circulation use LLDP or ping for cooling auto-crossover port All connected automatic PD recovery Setting Wizard create anti-arpscan automatic VLAN registration 367, 600 blocked hosts auto-MDIX port host threshold status XGS2220 Series User’s Guide...
  • Page 644 CFI (Canonical Format Indicator) 367, 599 CPU management port changing the password CPU protection Cisco Discovery Protocol, see CDP crossover Ethernet cable CIST Current Configuration Class of Service XGS2220 Series User’s Guide...
  • Page 645 (ESD) global relay global relay example EMC statement option 82 profiles 412, 413 Environment Statement DHCPv6 Errdisable Detect screen enable in Windows 10 Errdisable Recovery screen enable in Windows XP errdisable status DHCPv6 client error disable XGS2220 Series User’s Guide...
  • Page 646 265, 587 hello time IEEE802.3x 265, 587 hops forwarding HTTPS delay certificates frames implementation tagged 374, 606 public keys, private keys untagged 374, 606 HTTPS Certificates screen freestanding installation HTTPS example precautions XGS2220 Series User’s Guide...
  • Page 647 IPv6 multicast routing domain status status IPv6 Neighbor Setup screen 183, 184 IP address IPv6 Neighbor Table screen Switch management IPv6 screen IP Setup screen IPv6 static route IP source guard configuration ARP inspection 485, 516 XGS2220 Series User’s Guide...
  • Page 648 (trunking) Link Aggregation Control Protocol (LACP) Link Aggregation screen Wizard MAC (Media Access Control) 148, 559 Link Aggregation Setting screen MAC address 123, 148, 559 Link Aggregation Status screen maximum number per port XGS2220 Series User’s Guide...
  • Page 649 Media Access Control Multi-Gigabit (IEEE 802.3bz) 148, 559 Memory Buffer Multi-Gigabit port Multi-Tenant Unit and SNMP 195, 570 supported MIBs configuration 303, 304 MIB (Management Information Base) network example 195, 570 mirroring ports MVR (Multicast VLAN Registration) XGS2220 Series User’s Guide...
  • Page 650 Organizationally Unique Identifiers (OUI) voltage range Org-specific TLV Setting screen Port Aggregation Protocol, see PAgP overheating port authentication prevention guest VLAN IEEE802.1x MAC authentication method port cloning 547, 548 PAgP advanced settings 547, 548 basic settings 547, 548 password XGS2220 Series User’s Guide...
  • Page 651 (PD) 34, 256 reboot PPPoE IA load configuration agent sub-options 552, 613 drop PPPoE packets reboot system 552, 613 port state registration sub-option format product tag format Registration MAC address trusted ports Regulatory Notice and Statement XGS2220 Series User’s Guide...
  • Page 652 SPQ (Strict Priority Queuing) Service Access Control screen Setup Wizard encryption methods parts 66, 76 how it works implementation Setup Wizard screen SSH (Secure Shell) sFlow configuration SSL (Secure Socket Layer) datagram stacking mode overview Standalone mode XGS2220 Series User’s Guide...
  • Page 653 STP Path Cost connection speed straight-through Ethernet cable installation subnet based VLANs removal subnet masking traps Summary screen destination 190, 571 supply voltage troubleshooting Switch trunk group DHCP client XGS2220 Series User’s Guide...
  • Page 654 398, 400 priority frame 367, 599 port-based Q-in-Q priority VID (VLAN Identifier) 367, 599 selective Q-in-Q Virtual Local Area Network VLAN terminology 368, 600 VLAN VLAN trunking 374, 606 acceptable frame type 374, 606 XGS2220 Series User’s Guide...
  • Page 655 Windows OS version check Wizard link aggregation WRR (Weighted Round Robin Scheduling) ZON Utility compatible OS fields description icon description installation requirements introduction minimum hardware requirements network adapter select password prompt supported firmware version XGS2220 Series User’s Guide...

This manual is also suitable for:

Xgs2220-54hpXgs2220-54fpXgs2220-54Xgs2220-30hpXgs2220-30

Table of Contents

Save PDF