ZyXEL Communications XGS3600 Series Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Switch
  5. XGS3600 Series
  6. Manual

ZyXEL Communications XGS3600 Series Manual

Gbe l2 switch with 10g gbe uplink
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
XGS3600 Series
XGS3600-26F / XGS3600-28 / XGS3600-28F
GbE L2 Switch with 10G GbE uplink
Version 1.00
Edition 1, 03/2015
User's Guide
Default Login Details
IP Address
http://192.168.0.1 (MGMT port)
http://192.168.1.1 (In-band ports)
User Name
Password
admin
1234
Copyright © 2015 ZyXEL Communications Corporation

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the XGS3600 Series and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for ZyXEL Communications XGS3600 Series

Summary of Contents for ZyXEL Communications XGS3600 Series

  • Page 1 XGS3600-26F / XGS3600-28 / XGS3600-28F GbE L2 Switch with 10G GbE uplink Version 1.00 Edition 1, 03/2015 User’s Guide Default Login Details IP Address http://192.168.0.1 (MGMT port) http://192.168.1.1 (In-band ports) User Name admin Password 1234 Copyright © 2015 ZyXEL Communications Corporation...
  • Page 2 IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.

  • Page 3: Table Of Contents

    3-3.4.2 System Status ............................... 74 3-3.4.3 Port Status ..............................75 3-3.4.4 Port Statistics ............................... 77 3-4 S ............................79 PANNING 3-4.1 Bridge Settings ........................... 79 3-4.2 MSTI Mapping ........................... 82 3-4.3 MSTI Priorities ..........................84 3-4.4 CIST Ports ............................85 XGS3600 Series User's Guide...
  • Page 4 3-13 GVRP..............................175 3-13.1 Configuration ..........................175 3-13.2 Statistics ............................178 3-14 Q S ................................ 180 3-14.1 Port Classification ......................... 180 3-14.2 Port Policing ..........................183 3-14.3 Queue Policers ..........................184 3-14.4 Port Scheduler ..........................186 XGS3600 Series User's Guide...
  • Page 5 4-6.2 Radius Overview ..........................290 4-6.3 Radius Details ..........................292 4-7 P ............................293 ECURITY 4-7.1 Limit Control ............................ 293 4-7.2 Switch Status ............................ 297 4-7.3 Port Status ............................299 4-8 A ..........................300 CCESS ANAGEMENT 4-8.1 Configuration ........................... 300 XGS3600 Series User's Guide...
  • Page 6 H ..................................328 I ..................................328 L ..................................330 M ..................................330 N ..................................332 O ..................................332 P ..................................333 Q ..................................334 R..................................334 S ..................................334 T ..................................336 U ..................................337 V ..................................338 XGS3600 Series User's Guide...

  • Page 7: Introduction

    In this user’s manual, it will not only tell you how to install and connect your network system but configure and monitor the XGS3600 Series through the built-in CLI and web by (RS-232) serial interface and Ethernet ports step-by-step. Many explanations in detail of hardware and software functions are shown as well as the examples of the operation for web-based interface and command-line interface (CLI).
  • Page 8 Overview of this user’s manual Chapter 1 “Operation of Web-based Management”  Chapter 2 “System Configuration”  Chapter 3 “Configuration”  Chapter 4 “Security”  Chapter 5 “Maintenance”  XGS3600 Series User's Guide...

  • Page 9: Chapter 1 Operation Of Web-Based Management

    To optimize the display effect, we recommend you use Microsoft IE 6.0 above, Netscape V7.1 above or FireFox V1.00 above and have the resolution 1024x768. The switch supported neutral web browser interface XGS3600 Series User's Guide...
  • Page 10 If you do not have DHCP server to provide IP addresses to the switch, the Switch's default IP is 192.168.1.1 Figure 1 The login page XGS3600 Series User's Guide...

  • Page 11: Chapter 2 System Configuration

    2. Specify the contact information for the system administrator as well as the name and location of the switch. Also indicate the local time zone by configuring the appropriate offset. 3. Click Refresh Figure 2-1.1: System Information XGS3600 Series User's Guide...
  • Page 12 XGS3600 Series User's Guide...
  • Page 13 Flash size:  The size of the flash memory in this switch. Bridge FDB size :  To display the bridge FDB size information. Transmit Queue :  To display the device’s transmit hardware priority queue information. XGS3600 Series User's Guide...

  • Page 14: 2-1.2 Configuration

    0 to 255. System Location :  The physical location of this node(e.g., telephone closet, 3rd floor). The allowed string length is 0 to 255, and the allowed content is the ASCII characters from 32 to 126. XGS3600 Series User's Guide...

  • Page 15: 2-1.3 Cpu Load

    Figure 2-1.3: CPU Load Parameter description: Auto-refresh  To evoke the auto-refresh icon then the device will refresh the log automatically. The under “from” and “to” was displayed what you set on the “From” and “To” field information. XGS3600 Series User's Guide...

  • Page 16: Time

    Figure 2-2.1: The time configuration Parameter description: Clock Source:  To click what clock source for the XGS3600 Series. You can select “Use local Settings” or “Use NTP Server” for XGS3600 Series time clock source. Local Time:  Show the current time of the system.
  • Page 17 To configure when Daylight saving start date and time, the format is “YYYY-MM- DD HH:MM”.  To configure when Daylight saving end date and time, the format is “YYYY-MM- DD HH:MM”. The under “from” and “to” was displayed what you set on the “From” and “To” field information. XGS3600 Series User's Guide...

  • Page 18: 2-2.2 Ntp

    IPv4 address. For example, '::192.1.2.34'. Buttons  These buttons are displayed on the NTP page: Apply – Click to apply changes. Reset - Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 19: Account

    To type the password. The allowed string length is 0 to 255, and the allowed content is the ASCII characters from 32 to 126. Password (again)  To type the password again. You must type the same password again in the field. XGS3600 Series User's Guide...
  • Page 20 (software upload, factory defaults and etc.) need user privilege level 15. Generally, the privilege level 15 can be used for an administrator account, privilege level 10 for a standard user account and privilege level 5 for a guest account. XGS3600 Series User's Guide...

  • Page 21: 2-3.2 Privilege Level

    Security Spanning Tree System Trap Event VCL VLANs Voice VLAN Privilege Levels from 1 to 15 . Web Interface To configure Privilege Level in the web interface: 1. Click SYSTEM, Account, and Privilege Level. 2. Specify the Privilege parameter. 3. Click Apply. Figure2- 3.2: The Privilege Level configuration XGS3600 Series User's Guide...
  • Page 22 Maintenance: System Reboot, System Restore Default, Configuration Save, Export/Import Configuration and Firmware upgrade. Privilege Levels  Every group has an authorization Privilege level. User Privilege should be same or greater than the authorization Privilege level to have the access to that group. XGS3600 Series User's Guide...

  • Page 23: 2-4.1 Ipv4

    Web Interface To configure an IP address in the web interface: 1. Click System, IP Configuration. 2. Specify the IPv4 settings, and enable DNS proxy service if required. 3. Click Apply. Figure2- 4.1: The IP configuration XGS3600 Series User's Guide...
  • Page 24 Provide the managed VLAN ID. The allowed range is 1 to 4095. DNS Proxy :  When DNS proxy is enabled, DUT will relay DNS requests to the current configured DNS server on DUT, and reply as a DNS resolver to the client device on the network. XGS3600 Series User's Guide...

  • Page 25: 2-4.2 Ipv6

    '::' is a special syntax that can be used as a shorthand way of representing multiple 16-bit groups of contiguous zeros; but it can only appear once. It can also represent a legally valid IPv4 address. . For example, '::192.1.2.34'. XGS3600 Series User's Guide...

  • Page 26: Syslog

    Possible modes are: Enabled: Enable server mode operation. Disabled: Disable server mode operation. Server Address :  Indicates the IPv4 host address of syslog server. If the switch provide DNS XGS3600 Series User's Guide...
  • Page 27 Individually enable or disable the sending of syslog message to the syslog server for a specific Syslog Type. Facility :  Indicate the facility for sending syslog message for a specific Syslog Type. Only local_use_0 to local_use_7 can be assigned to one Syslog Type. XGS3600 Series User's Guide...

  • Page 28: 2-5.2 Log

    Error: Error level of the system log. All: All levels.  ID (>= 1) of the system log entry. Time  It will display the log record by device time. The time of the system log entry. Message  XGS3600 Series User's Guide...
  • Page 29 It will display the log detail message. The message of the system log entry. Upper right icon (Refresh, clear,….)  You can click them for refresh the system log or clear them by manual, others for next/up page or entry. XGS3600 Series User's Guide...

  • Page 30: 2-5.3 Detailed Log

    Message  The detailed message of the system log entry. Upper right icon (Refresh, clear,….)  You can click them for refresh the system log or clear them by manual, others for next/up page or entry. XGS3600 Series User's Guide...

  • Page 31: Snmp

    Disable: Disable SNMP state operation. Default: Enable. Engine ID :  SNMPv3 engine ID. syntax: 0-9,a-f,A-F, min 5 octet, max 32 octet, fifth octet can't input 00. IF change the Engine ID that will clear all original user. XGS3600 Series User's Guide...

  • Page 32: 2-6.2 Configuration

    SNMPv1 or SNMPv2c community string. In addition to community string, a particular range of source addresses can be used to restrict source subnet. Mode:  Indicates the Set Community mode operation. Possible modes are: Enabled: Enable Set Community. Disabled: Disable Set Community. XGS3600 Series User's Guide...

  • Page 33: 2-6.3 Communities

    Source IP  Indicates the SNMP access source address. A particular range of source addresses can be used to restrict source subnet when combined with source mask. Source Mask  Indicates the SNMP access source address mask XGS3600 Series User's Guide...

  • Page 34: 2-6.4 Users

    MD5: An optional flag to indicate that this user uses MD5 authentication protocol. SHA: An optional flag to indicate that this user uses SHA authentication protocol. The value of security level cannot be modified if entry already exists. That XGS3600 Series User's Guide...
  • Page 35 DES: An optional flag to indicate that this user uses DES authentication protocol. Privacy Password  A string identifying the privacy password phrase. The allowed string length is 8 to 32, and the allowed content is ASCII characters from 33 to 126. XGS3600 Series User's Guide...

  • Page 36: 2-6.5 Groups

    33 to 126. Group Name  A string identifying the group name that this entry should belong to. The allowed string length is 1 to 32, and the allowed content is ASCII characters from 33 to 126. XGS3600 Series User's Guide...

  • Page 37: 2-6.6 Views

    The OID defining the root of the subtree to add to the named view. The allowed OID length is 1 to 128. The allowed string content is digital number or asterisk(*). Apply  To click the Apply icon to save the configuration to ROM. XGS3600 Series User's Guide...

  • Page 38: 2-6.7 Access

    The name of the MIB view defining the MIB objects for which this request may request the current values. The allowed string length is 1 to 32, and the allowed content is ASCII characters from 33 to 126. XGS3600 Series User's Guide...
  • Page 39 The name of the MIB view defining the MIB objects for which this request may potentially set new values. The allowed string length is 1 to 32, and the allowed content is ASCII characters from 33 to 126. XGS3600 Series User's Guide...

  • Page 40: 2-6.8 Tarp

    Check <Delete> entry then check <Apply> button, the entry will be delete. Trap Version:  Indicates the SNMP trap supported version. Possible versions are: SNMP v2c: Set SNMP trap supported version 2c. SNMP v3: Set SNMP trap supported version 3. Server IP:  XGS3600 Series User's Guide...
  • Page 41 DES: An optional flag to indicate that this user uses DES authentication protocol. Privacy Password:  A string identifying the privacy password phrase. The allowed string length is 8 to 32, and the allowed content is ASCII characters from 33 to 126. XGS3600 Series User's Guide...

  • Page 42: Chapter 3. Configuration

    To configure an Current Port Configuration in the web interface: 1. Click Configuration, Port, then Configuration 2. Specify the Speed Configured, Flow Control , Maximum Frame sze , Excessive Collision mode and Power Control. 3. Click Apply. XGS3600 Series User's Guide...
  • Page 43 This is the logical port number for this row. Link :  The current link state is displayed graphically. Green indicates the link is up and red that it is down. Current Link Speed :  XGS3600 Series User's Guide...
  • Page 44 Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. Upper right icon (Refresh)  You can click them for refresh the Port link Status by manual XGS3600 Series User's Guide...

  • Page 45: 3-1.2 Port Description

    3. Click Apply. Figure 3-1.2: The Port Configuration Parameter description: Port :  This is the logical port number for this row. Description :  Enter up to 47 characters to be descriptive name for identifies this port. XGS3600 Series User's Guide...
  • Page 46 Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 47: 3-1.3 Port Telephone

    This page displays current port telephone number. Web Interface To configure an Port Telephone in the web interface: 1. Click Configuration, Port, then Port telephone. 2. Specify the telephone number. 3. Click Apply. Figure 3-1.3: The Port Telephone XGS3600 Series User's Guide...
  • Page 48  Enter up to 32 characters to be telephone number for identifies this port. Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 49: 3-1.4 Traffic Overview

    The number of received and transmitted bytes per port. Errors  The number of frames received in error and the number of incomplete transmissions per port. Drops  The number of frames discarded due to ingress or egress congestion. XGS3600 Series User's Guide...
  • Page 50 To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, Clear):  You can click them for refresh the Port Statistics information by manual. Others click Clear to clean up all Port Statistics. XGS3600 Series User's Guide...

  • Page 51: 3-1.5 Detailed Statistics

    Figure 3-1.5: The Port Detail Statistics Overview Parameter description: Auto-refresh:  To evoke the auto-refresh to refresh the Port Statistics information automatically. Upper left scroll bar:  To scroll which port to display the Port statistics with “Port-0”, “Port-1... XGS3600 Series User's Guide...
  • Page 52 The number of received frames filtered by the forwarding process. Short frames are frames that are smaller than 64 bytes. Long frames are frames that are longer than the configured maximum frame length for this port. Transmit Error Counters Tx Drops :  XGS3600 Series User's Guide...
  • Page 53 The number of frames dropped due to excessive or late collisions. Auto-refresh:  To evoke the auto-refresh to refresh the Queuing Counters automatically. Upper right icon (Refresh, clear)  You can click them for refresh the Port Detail Statistics or clear them by manual. XGS3600 Series User's Guide...

  • Page 54: 3-1.6 Qos Statistics

    The logical port for the settings contained in the same row. Qn :  There are 8 QoS queues per port. Q0 is the lowest priority queue. Rx/Tx :  The number of received and transmitted packets per queue. XGS3600 Series User's Guide...
  • Page 55 Auto-refresh:  To evoke the auto-refresh to refresh the Queuing Counters automatically. Upper right icon (Refresh, clear)  You can click them for refresh the Queuing Counters or clear them by manual. XGS3600 Series User's Guide...

  • Page 56: 3-1.7 Sfp Information

    1310nm, 1550nm and so on. Norminal Bit Rate:  Display the maximum baud rate of the fiber module supported, for instance, 10M, 100M, 1G and so on. Vendor OUI:  Displays the vendor IEEE company ID. XGS3600 Series User's Guide...
  • Page 57 It should be maintained down to the minimum transmitted power minus cable plant loss (insertion loss or passive loss) per the appropriate standard. Absolute accuracy beyond this minimum required received input optical power range is vendor specific. XGS3600 Series User's Guide...

  • Page 58: Acl

    3-2 ACL The XGS3600 Series switch access control list (ACL) is probably the most commonly used object in the IOS. It is used for packet filtering but also for selecting types of traffic to be analyzed, forwarded, or influenced in some way. The ACLs are divided into EtherTypes. IPv4, ARP protocol, MAC and VLAN parameters etc.
  • Page 59 Select which port frames are redirected on. The allowed values are Disabled or a specific port number. The default value is "Disabled". Shutdown :  Specify the port shut down operation of this port. The allowed values are: XGS3600 Series User's Guide...
  • Page 60 Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. Upper right icon (Refresh, clear)  You can click them for refresh the ACL Port Configuration or clear them by manual. XGS3600 Series User's Guide...

  • Page 61: 3-2.2 Rate Limiters

    The allowed values are: 0-131071 in pps or 0, 100, 200, 300, ..., 1000000 in kbps. Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 62: 3-2.3 Access Control List

    Specify the relevant criteria to be matched for this rule, and set the actions to take when a rule is matched (such as Rate Limiter, Port Copy, Logging, and Shutdown). Figure 3-2.3: The Access Control List Configuration XGS3600 Series User's Guide...
  • Page 63 Frames that hit the ACE are redirected to the port number specified here. The allowed range is the same as the switch port number range. Disabled indicates that the port redirect operation is disabled. Shutdown :  XGS3600 Series User's Guide...
  • Page 64 Specify the VLAN ID filter for this ACE. Any: No VLAN ID filter is specified. (VLAN ID filter status is "don't-care".) Specific: If you want to filter a specific VLAN ID with this ACE, choose this XGS3600 Series User's Guide...
  • Page 65 Network: Target IP filter is set to Network. Specify the target IP address and target IP mask in the Target IP Address and Target IP Mask fields that appear. Target IP Address  When "Host" or "Network" is selected for the target IP filter, you can enter a XGS3600 Series User's Guide...
  • Page 66 Specify the IP protocol filter for this ACE. Any: No IP protocol filter is specified ("don't-care"). Specific: If you want to filter a specific IP protocol filter with this ACE, choose this value. A field for entering an IP protocol filter appears. XGS3600 Series User's Guide...
  • Page 67 When "Host" or "Network" is selected for the source IP filter, you can enter a specific SIP address in dotted decimal notation. SIP Mask  When "Network" is selected for the source IP filter, you can enter a specific SIP mask in dotted decimal notation. DIP Filter  XGS3600 Series User's Guide...
  • Page 68 ACE, you can enter a specific TCP/UDP source range value. A field for entering a TCP/UDP source value appears. TCP/UDP Source No.  When "Specific" is selected for the TCP/UDP source filter, you can enter a XGS3600 Series User's Guide...
  • Page 69 0: TCP frames where the PSH field is set must not be able to match this entry. 1: TCP frames where the PSH field is set must be able to match this entry. Any: Any value is allowed ("don't-care"). XGS3600 Series User's Guide...
  • Page 70 To evoke the auto-refresh to refresh the information automatically. Upper right icon (Refresh, clear, Remove All)  You can click them for refresh the ACL configuration or clear them by manual. Others remove all to clean up all ACL configurations on the table. XGS3600 Series User's Guide...

  • Page 71: 3-2.4 Acl Status

    IPv4/TCP: The ACE will match IPv4 frames with TCP protocol. IPv4/Other: The ACE will match IPv4 frames, which are not ICMP/UDP/TCP. IPv6: The ACE will match all IPv6 standard frames. Action :  Indicates the forwarding action of the ACE. XGS3600 Series User's Guide...
  • Page 72 Auto-refresh:  To evoke the auto-refresh to refresh the information automatically. Upper right icon (Refresh)  You can click them for refresh the ACL status information by manual. XGS3600 Series User's Guide...

  • Page 73: Aggregation

    3. Click the Apply to save the setting 4. If you want to cancel the setting then you need to click the reset button. It will revert to previously saved values. Figure 3-3.1.1: The Aggregation Mode Configuration XGS3600 Series User's Guide...
  • Page 74 Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 75: 3-3.2 Aggregation View

    Aggregated Ports :  The active ports in this static trunk group. Inactive Ports :  The inactive ports in this static trunk group. Ports that is not aggregated may be due to link-down, management disabled, speed/duplex mismatched. XGS3600 Series User's Guide...

  • Page 76: 3-3.3 Port View

    Indicates why a static group port member is not activated. Possible values may include : Linkdown, ACL, Loop(Loop Protection), ErrDis(Error Disable), StaticTrunk(Aggregation Disable). Ports not configured in any static group or active member ports will be blank on this field. Re-Enable :  XGS3600 Series User's Guide...
  • Page 77 If speed mismatch exists in a static group, only ports with the highest speed remain enabled. Once a port is disabled by static aggregation, Re-Enable is the only way to activate it. XGS3600 Series User's Guide...

  • Page 78: 3-3.4 Lacp

    3. Scroll the Role with Active or Passive. Default is Active 4. Click the Apply to save the setting 5. If you want to cancel the setting then you need to click the reset button. It will revert to previously saved values XGS3600 Series User's Guide...
  • Page 79 The Key value incurred by the port, range 1-65535 . The Auto setting will set the key as appropriate by the physical link speed, 10Mb = 1, 100Mb = 2, 1Gb = 3. Using the Specific setting, a user-defined value can be entered. Ports with XGS3600 Series User's Guide...
  • Page 80 Passive will wait for a LACP packet from a partner (speak if spoken to). Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 81: 3-3.4.2 System Status

    Shows which ports are a part of this aggregation for this switch/stack. The format is: "Switch ID:Port". Auto-refresh:  To evoke the auto-refresh to refresh the information automatically. Upper right icon (Refresh)  You can click them for refresh the LACP System status information by manual. XGS3600 Series User's Guide...

  • Page 82: 3-3.4.3 Port Status

    The switch port number. LACP :  'Yes' means that LACP is enabled and the port link is up. 'No' means that LACP is not enabled or that the port link is down. 'Backup' means that the port could XGS3600 Series User's Guide...
  • Page 83 The partner's port number connected to this port. Auto-refresh:  To evoke the auto-refresh to refresh the information automatically. Upper right icon (Refresh) :  You can click them for refresh the LACP port status information by manual. XGS3600 Series User's Guide...

  • Page 84: 3-3.4.4 Port Statistics

    Port :  The switch port number. LACP Received :  Shows how many LACP frames have been received at each port. LACP Transmitted :  Shows how many LACP frames have been sent from each port. XGS3600 Series User's Guide...
  • Page 85 Shows how many unknown or illegal LACP frames have been discarded at each port. Auto-refresh:  To evoke the auto-refresh to refresh the information automatically. Upper right icon (Refresh, Clear)  You can click them for refresh the LACP port statistics information or clear by manual. XGS3600 Series User's Guide...

  • Page 86: Spanning Tree

    Advanced settings 4. Click the Apply to save the setting 5. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values XGS3600 Series User's Guide...
  • Page 87 Transmit Hold Count :  The number of BPDU's a bridge port can send per second. When exceeded, transmission of the next BPDU will be delayed. Valid values are in the range 1 to 10 BPDU's per second. XGS3600 Series User's Guide...
  • Page 88 The time to pass before a port in the error-disabled state can be enabled. Valid values are between 30 and 86400 seconds (24 hours). Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 89: 3-4.2 Msti Mapping

    MSTI's (Intra-region). The name is at most 32 characters. Configuration Revision :  The revision of the MSTI configuration named above. This must be an integer between 0 and 65535. XGS3600 Series User's Guide...
  • Page 90 MSTI should just be left empty. (I.e. not having any VLANs mapped to it.) Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 91: 3-4.3 Msti Priorities

    MSTI instance number, concatenated with the 6-byte MAC address of the switch forms a Bridge Identifier. Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 92: 3-4.4 Cist Ports

    4. Click the Apply to save the setting 5. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-4.4: The STP CIST Port Configuration XGS3600 Series User's Guide...
  • Page 93 If enabled, causes the port to disable itself upon receiving valid BPDU's. Contrary to the similar bridge setting, the port Edge status does not affect this setting. A port entering error-disabled state due to this setting is subject to the XGS3600 Series User's Guide...
  • Page 94 Transition to the forwarding state is faster for point-to-point LANs than for shared media. Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 95: 3-4.5 Msti Ports

    5. Click the Apply to save the setting 6. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-4.5: The MSTI Port Configuration XGS3600 Series User's Guide...
  • Page 96 The switch port number of the corresponding STP CIST (and MSTI) port. Path Cost :  Controls the path cost incurred by the port. The Auto setting will set the path cost as appropriate by the physical link speed, using the 802.1D recommended XGS3600 Series User's Guide...
  • Page 97 Controls the port priority. This can be used to control priority of ports having identical port cost. (See above). Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 98: 3-4.6 Bridge Status

    The time since last Topology Change occurred. Auto-refresh:  To evoke the auto-refresh to refresh the information automatically. Upper right icon (Refresh)  You can click them for refresh the STP Bridges status information by manual. XGS3600 Series User's Guide...

  • Page 99: 3-4.7 Port Status

    The current STP port role of the CIST port. The port role can be one of the following values: AlternatePort, Backup Port, RootPort, DesignatedPort Disabled. CIST State :  The current STP port state of the CIST port. The port state can be one of the following XGS3600 Series User's Guide...
  • Page 100 The time since the bridge port was last initialized. Auto-refresh:  To evoke the auto-refresh to refresh the information automatically. Upper right icon (Refresh)  You can click them for refresh the STP Port status information by manual. XGS3600 Series User's Guide...

  • Page 101: 3-4.8 Port Statistics

    The number of illegal Spanning Tree BPDU's received (and discarded) on the port. Auto-refresh:  To evoke the auto-refresh to refresh the information automatically. Upper right icon (Refresh, Clear)  You can click them for refresh the STP Statistics information or clear by manual. XGS3600 Series User's Guide...

  • Page 102: Mrstp

    Every MRSTP instance need to have a unique instance ID. State :  Controls whether an MRSTP instance is enabled or not. To really enable an MRSTP instance, the MRSTP Global State must also be enabled. XGS3600 Series User's Guide...
  • Page 103  Available value range: 4-30sec. The same definition was as in the RSTP protocol. Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 104: 3-5.2 Port Configuration

    4. Click the Apply to save the setting 5. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-5.2: The MRSTP Port Configuration. Parameter description: Port:  XGS3600 Series User's Guide...
  • Page 105 The benefit of this operation is to make the port quickly get back to act as an RSTP port . Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 106: 3-5.3 Port Status

    It is set by a network administrator to prevent bridges external to a core region of the network influencing the spanning tree active topology, possibly because those bridges are not under the full control of the XGS3600 Series User's Guide...
  • Page 107 To display the port admin P2P status. If you don’t set any value then it will show default value is Auto. Auto-refresh:  To evoke the auto-refresh to refresh the information automatically. Upper right icon (Refresh)  You can click them for refresh the MRSTP port status information by manual. XGS3600 Series User's Guide...

  • Page 108: Igmp Snooping

    5. Click the Apply to save the setting 6. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-5.1: The IGMP Snooping Configuration. XGS3600 Series User's Guide...
  • Page 109 Parameter description: Snooping Enabled:  Enable the Global IGMP Snooping. Unregistered IPMCv4 Flooding enabled :  Enable unregistered IPMCv4 traffic flooding. IGMP SSM Range :  XGS3600 Series User's Guide...
  • Page 110 Enable to limit the number of multicast groups to which a switch port can belong. Buttons  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 111: 3-5.2 Vlan Configuration

    IGMP-Auto. Rv :  Robustness Variable. The Robustness Variable allows tuning for the expected packet loss on a network. The allowed range is 1 to 255; default robustness variable value is 2. QI :  XGS3600 Series User's Guide...
  • Page 112 “|<<” to update the table starting from the first entry in the VLAN table, i.e. the entry with the lowest VLAN ID. Others click “>> “ to update the table, starting with the entry after the last entry currently displayed. XGS3600 Series User's Guide...

  • Page 113: 3-5.3 Port Group Filtering

    The logical port for the settings.. Filtering Groups :  The IP Multicast Group that will be filtered. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 114: 3-5.4 Status

    Figure 3-5.4: The IGMP Snooping Status. Parameter description: VLAN ID :  The VLAN ID of the entry. Querier Version :  Working Querier Version currently. Host Version :  Working Host Version currently. Querier Status :  XGS3600 Series User's Guide...
  • Page 115 Indicate whether specific port is a router port or not. Auto-refresh  To evoke the auto-refresh icon then the device will refresh the log automatically. Upper right icon (Refresh, clear)  You can click them for refresh the Status or clear them by manual. XGS3600 Series User's Guide...

  • Page 116: 3-5.5 Group Information

    To evoke the auto-refresh icon then the device will refresh the log automatically. Upper right icon (Refresh, <<, >> )  You can click them for refresh the IGMP Group Status by manual, others for next/up page or entry.. XGS3600 Series User's Guide...

  • Page 117: 3-5.6 Ipv4 Ssm Information

    The will use the last entry of the currently displayed table as a basis for the next lookup. When the end is reached the text "No more entries" is shown in the displayed table. Use the button to start over. IGMPv3 Information Table Columns XGS3600 Series User's Guide...
  • Page 118 To evoke the auto-refresh icon then the device will refresh the log automatically. Upper right icon (Refresh, <<, >> )  You can click them for refresh the IGMP Group Status by manual, others for next/up page or entry.. XGS3600 Series User's Guide...

  • Page 119: Mld Snooping

    3. Scroll to select the Throtting mode with unlimited or 1 to 10 4. Click the Apply to save the setting 5. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values XGS3600 Series User's Guide...
  • Page 120 Figure 3-6.1: The MLD Snooping Basic Configuration. XGS3600 Series User's Guide...
  • Page 121 Enable to limit the number of multicast groups to which a switch port can belong. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 122: 3-6.2 Vlan Configuration

    Query Interval. The Query Interval is the interval between General Queries sent by the Querier. The allowed range is 1 to 31744 seconds; default query interval is 125 seconds. QRI :  Query Response Interval. The Maximum Response Delay used to calculate the Maximum XGS3600 Series User's Guide...
  • Page 123 You can click them for refresh the IGMP Group Status by manual, others for next/up page or entry.. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 124: 3-6.3 Port Group Filtering

    The logical port for the settings. You can evoke to enable the port to join filtering Group Filtering Groups  The IP Multicast Group that will be filtered. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 125: 3-6.4 Status

    4. Click “ Clear“ to clear the MLD Snooping Status.. Figure 3-6.4: The MLD Snooping Status Parameter description: VLAN ID :  The VLAN ID of the entry. Querier Version :  Working Querier Version currently. XGS3600 Series User's Guide...
  • Page 126 To evoke the auto-refresh icon then the device will refresh the log automatically. Upper right icon (Refresh, <<, >> )  You can click them for refresh the IGMP Group Status by manual, others for next/up page or entry.. XGS3600 Series User's Guide...

  • Page 127: 3-6.5 Group Information

    Use the button to start over. MLD Snooping Information Table Columns VLAN ID :  VLAN ID of the group. Groups :  Group address of the group displayed. Port Members :  Ports under this group. XGS3600 Series User's Guide...
  • Page 128 To evoke the auto-refresh icon then the device will refresh the log automatically. Upper right icon (Refresh, <<, >> ):  You can click them for refresh the IGMP Group Status by manual, others for next/up page or entry.. XGS3600 Series User's Guide...

  • Page 129: 3-6.6 Ipv6 Ssm Information

    Source Address :  IP Address of the source. Currently, system limits the total number of IP source addresses for filtering to be 128. Type :  Indicates the Type. It can be either Allow or Deny. XGS3600 Series User's Guide...

  • Page 130: Mvr

    3. Click the Apply to save the setting 4. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-7.1: The MVR Configuration XGS3600 Series User's Guide...
  • Page 131 Specify the MVR port type on the port. Immediate Leave :  Enable the fast leave on the port. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 132: 3-7.2 Port Group Allow

    Click ”add new Allow Group” to add a new entry to the Group Allow table. Specify the Port, and Allow Group of the new entry. Click "Apply". Buttons  Apply: Click to apply changes. Reset: Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 133: 3-7.3 Groups Information

    To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, <<, >> ):  You can click them for refresh the MVR Group information by manual, others for next/up page or entry. XGS3600 Series User's Guide...

  • Page 134: 3-7.4 Statistics

    To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, <<, >> ):  You can click them for refresh the MVR Group information by manual, others for next/up page or entry. XGS3600 Series User's Guide...

  • Page 135: Lldp

    2. Modify LLDP timing parameters 3. Set the required mode for transmitting or receiving LLDP messages 4. Specify the information to include in the TLV field of advertised messages 5. Click Apply Figure 3-8.1: The LLDP Configuration XGS3600 Series User's Guide...
  • Page 136 LLDP statistics.). CDP TLVs are mapped onto LLDP neighbors’ table as shown below. CDP TLV "Device ID" is mapped to the LLDP "Chassis ID" field. CDP TLV "Address" is mapped to the LLDP "Management Address" field. The CDP XGS3600 Series User's Guide...
  • Page 137  Optional TLV: When checked the "management address" is included in LLDP information transmitted. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 138: 3-8.2 Lldp Neighbours

    System Capabilities :  System Capabilities describes the neighbour unit's capabilities. The possible capabilities are: 1. Other 2. Repeater 3. Bridge 4. WLAN Access Point 5. Router 6. Telephone 7. DOCSIS cable device 8. Station only XGS3600 Series User's Guide...
  • Page 139 IP address. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the LLDP Neighbours information by manual. XGS3600 Series User's Guide...

  • Page 140: 3-8.3 Lldp-Med Configuration

    3. Modify Coordinates Location psrameters 4. Fill Civic Address Location parameters 5. Add new policy 6. Click Apply, will show following Policy Port Configuration 7. Select Policy ID for each port 8. Click Apply Figure 3-8.3: The LLDP-MED Configuration XGS3600 Series User's Guide...
  • Page 141 An altitude = 0.0 is meaningful even outside a building, and represents ground level at the given latitude and longitude. Inside a building, 0.0 represents the floor level associated with ground level at the main entrance. Map Datum :  XGS3600 Series User's Guide...
  • Page 142 Landmark or vanity address - Example: Columbia University. Additional location info :  Additional location info - Example: South Wing. Name :  Name (residence and office occupant) - Example: Flemming Jahn. Zip code :  XGS3600 Series User's Guide...
  • Page 143 This network policy is potentially advertised and associated with multiple sets of application types supported on a given port. The application types specifically addressed are: 1. Voice 2. Guest Voice 3. Softphone Voice 4. Video Conferencing 5. Streaming Video XGS3600 Series User's Guide...
  • Page 144 Untagged indicates that the device is using an untagged frame format and as such does not include a tag header as defined by IEEE 802.1Q-2003. In this case, both the VLAN ID and the Layer 2 priority fields are ignored and only the DSCP value has relevance. XGS3600 Series User's Guide...
  • Page 145 The set of policies that shall apply to a given port. The set of policies is selected by check marking the checkboxes that corresponds to the policies. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 146: 3-8.4 Lldp-Med Neighbours

    Endpoint Device Class. For-example will any LLDP-MED Endpoint Device claiming compliance as a Media Endpoint (Class II) also support all aspects of TIA-1057 applicable to Generic Endpoints (Class I), and any LLDP-MED Endpoint Device claiming XGS3600 Series User's Guide...
  • Page 147 3. Guest Voice - to support a separate limited feature-set voice service for guest users and visitors with their own IP Telephony handsets and other similar appliances supporting interactive voice services. XGS3600 Series User's Guide...
  • Page 148 DSCP :  DSCP is the DSCP value to be used to provide Diffserv node behavior for the specified application type as defined in IETF RFC 2474. Contain one of 64 code point values (0 through 63). XGS3600 Series User's Guide...

  • Page 149: 3-8.5 Port Statistics

    Shows the number of new entries deleted since switch reboot. Total Neighbours Entries Dropped :  Shows the number of LLDP frames dropped due to the entry table being full. Total Neighbours Entries Aged Out :  XGS3600 Series User's Guide...
  • Page 150 To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, Clear):  You can click them for refresh the LLDP Port Statistics information by manual. Or press clear to clean up the entries. XGS3600 Series User's Guide...

  • Page 151: Filtering Data Base

    3. Click Apply. Static MAC Table Configuration 1. Click configuration and Add new Static entry . 2. Specify the VLAN IP and Mac address ,Port Members. 3. Click Apply. Figure 3- 9.1: The MAC Address Table Configuration XGS3600 Series User's Guide...
  • Page 152 Adding a New Static Entry :  Click to add a new entry to the static MAC table. Specify the VLAN ID, MAC address, and port members for the new entry. Click "Apply". XGS3600 Series User's Guide...
  • Page 153 Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 154: 3- 9.2 Dynamic Mac Table

    Upper right icon (Refresh, Clear, <<, >>):  You can click them for refresh the MAC address entries by manual.or press clear to clean up the MAC table. Others press << or >> to upper or down page of the table. XGS3600 Series User's Guide...

  • Page 155: Vlan

    Indicates the name of the VLAN. Maximum length of the VLAN Name String is 32. All ASCII printable characters (except double quotation,less-than sign,greater-than sign) can be used to form the VLAN Name. Port Members :  XGS3600 Series User's Guide...
  • Page 156 Upper right icon (Refresh, |<<, >>):  You can click them for refresh the VLAN entries by manual. Or press clear to clean up the VLAN table. Others press |<< or >> to upper or down page of the table. XGS3600 Series User's Guide...

  • Page 157: 3-10.2 Ports

    Access, Trunk, or Hybrid. Web Interface To configure VLAN Port configuration in the web interface: 1. Click VLAN Port Configuration. 2. Specify the VLAN Port Configuration parameters. 3. Click Apply. Figure 3-10.2: The VLAN Port Configuration XGS3600 Series User's Guide...
  • Page 158 2. if a tagged frame contains the TPID of any value except 0x8100, 0x88a8 and Ethertype, it is forwarded and also tagged with PVID. 3. if the TPID of the tagged frame is 0x88A8 or Ethertype, it will be discarded. XGS3600 Series User's Guide...
  • Page 159 1. If the TPID of the tagged frame is either 0x88a8 or Ethertype for Custom S-ports. Ethertype for Custom S-ports, the frame is forwarded. Otherwise, the frame is discarded. 2. This mode will not add a tag. XGS3600 Series User's Guide...
  • Page 160 The port must be a member of the same VLAN as the Port VLAN ID. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 161: 3-10.3 Switch Status

    VLAN member ports. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the VLAN entries by manual. XGS3600 Series User's Guide...

  • Page 162: 3-10.4 Port Status

    If Port Type is Unaware, all frames are classified to the Port VLAN ID and tags are not removed. C-port is Customer Port. S-port is Service port. Custom S-port is S-port with Custom TPID. Ingress Filtering :  Shows the ingress filtering on a port. This parameter affects VLAN ingress processing. If XGS3600 Series User's Guide...
  • Page 163 Direct conflict between user modules. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the VLAN Port Status information by manual. XGS3600 Series User's Guide...

  • Page 164: 3-10.5 Private Vlans

    "Cancel" to return to the editing and make a correction. The Private VLAN is enabled when you click "Apply". The “Delete” button can be used to undo the addition of new Private VLANs. Buttons:  XGS3600 Series User's Guide...
  • Page 165 Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 166: 3-10.5.2 Port Isolation

    When unchecked, port isolation is disabled on that port. By default, port isolation is disabled on all ports. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 167: 3-10.6 Mac-Based Vlan

    To delete a MAC-based VLAN entry, check this box and press save. The entry will be deleted on the selected switch in the stack. MAC Address :  Indicates the MAC address. VLAN ID :  XGS3600 Series User's Guide...
  • Page 168 The “Delete” button can be used to undo the addition of new MAC-based VLANs. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 169: 3-10.6.2 Status

    Port members of the MAC-based VLAN entry. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the MAC-based VLAN Membership information by manual. XGS3600 Series User's Guide...

  • Page 170: 3-10.7 Protocol -Based Vlan

    To delete a Protocol to Group Name map entry, check this box. The entry will be deleted on the switch during the next apply. Frame Type :  Frame Type can have one of the following values: Ethernet SNAP XGS3600 Series User's Guide...
  • Page 171 Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. Upper right icon (Refresh):  You can click them for refresh the Protocol Group Mapping information by manual. XGS3600 Series User's Guide...

  • Page 172: 3-10.7.2 Group To Vlan

    Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  XGS3600 Series User's Guide...
  • Page 173 You can click them for refresh the Protocol Group Mapping information by manual. XGS3600 Series User's Guide...

  • Page 174: Vlan Translation

    Group). Legal values for a VLAN ID are 1 through 4095. The Delete button can be used to undo the addition of new entry.  Buttons : XGS3600 Series User's Guide...
  • Page 175 Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Refresh: Click to refresh the page immediately. Apply: Click to apply changes. Reset: Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 176: 3-11.2 Vid Translation Mapping

    Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Refresh: Click to refresh the page immediately. Apply: Click to apply changes. Reset: Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 177: Garp

    The settings relate to the currently selected stack unit, as reflected by the page header. Web Interface To configure GARP Port Configuration in the web interface: 1. Click GARP configure. 2. Specify GARP Configuration Parameters. 3. Click Apply. Figure 3-12.1: The GARP Port Configuration XGS3600 Series User's Guide...
  • Page 178 Currently only supported application is GVRP. Attribute Type :  Currently only supported Attribute Type is VLAN. GARP Applicant  This configuration is used to configure the Applicant state machine behavior for GARP on a particular port locally. XGS3600 Series User's Guide...
  • Page 179 In this mode the Applicant state machine will not participate in the protocol operation. The default configuration is normal participant. Buttons:  Save – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 180: 3-12.2 Statistics

    The Port column shows the list of all ports for which per port GARP statistics are shown. Peer MAC :  Peer MAC is MAC address of the neighbour Switch from with GARP frame is received. Failed Count :  XGS3600 Series User's Guide...
  • Page 181 GARP fail to register count. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the GARP Port Statistics information by manual. XGS3600 Series User's Guide...

  • Page 182: Gvrp

    The settings relate to the currently selected stack unit, as reflected by the page header. Web Interface To configure GVRP Port Configuration in the web interface: 1. Click GVRP configure. 2. Specify GVRP Configuration Parameters.. 3. Click Apply. Figure 3-13.1: The GVRP Global Configuration XGS3600 Series User's Guide...
  • Page 183 The Port column shows the list of ports for which you can configure per port GVRP settings. There are two configuration settings which can be configured on per port bases.  GVRP Mode:  GVRP rrole: 1. GVRP Mode XGS3600 Series User's Guide...
  • Page 184  You can click them for refresh the GVRP Global configuration information by manual. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 185: 3-13.2 Statistics

    Parameter description: Port :  The Port coulmn shows the list of ports for which you can see port counters and statistics. Join Tx Count :  Explain Join tx Count here... Leave Tx Count :  XGS3600 Series User's Guide...
  • Page 186 Explain Leave Tx Count here... Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the GVRP Port Statistics information by manual. XGS3600 Series User's Guide...

  • Page 187: Qos

    3. Click the Apply to save the setting 4. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-14.1: The QoS Configuration XGS3600 Series User's Guide...
  • Page 188 There is a one to one mapping between QoS class, queue and priority. A QoS class of 0 (zero) has the lowest priority. If the QoS class has been dynamically changed, then the actual QoS class is shown in parentheses after the configured QoS class. XGS3600 Series User's Guide...
  • Page 189 Click on the mode in order to configure the mode and/or mapping. DSCP Based :  Click to Enable DSCP Based QoS Ingress Port Classification. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 190: 3-14.2 Port Policing

    Controls the unit of measure for the policer rate as kbps, Mbps, fps or kfps . The default value is "kbps". Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 191: 3-14.3 Queue Policers

    Figure 3-16.3: The QoS Ingress Port Policers Configuration Parameter description: Port :  The port number for which the configuration below applies. Enabled :  Controls whether the queue policer is enabled on this switch port. XGS3600 Series User's Guide...
  • Page 192 This field is only shown if at least one of the queue policers is enabled. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 193: 3-14.4 Port Scheduler

    To display the QoS Port Schedulers in the web interface: 1. Click Configuration, QoS, Port Schedulers 2. Display the QoS Egress Port Schedulers Figure 3-14.4: The QoS Egress Port Schedules Click the Port index to set the QoS Egress Port Schedulers XGS3600 Series User's Guide...
  • Page 194 XGS3600 Series User's Guide...
  • Page 195 100-1000000 when the "Unit" is "kbps", and it is restricted to 1-10000 when the "Unit" is "Mbps". Queue Shaper Unit :  Controls the unit of measure for the queue shaper rate as "kbps" or "Mbps". The default XGS3600 Series User's Guide...
  • Page 196 Controls the unit of measure for the port shaper rate as "kbps" or "Mbps". The default value is "kbps". . Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 197: 3-14.5 Port Shaping

    To display the QoS Port Shapers in the web interface: 1. Click Configuration, QoS, Port Shapers 2. Display the QoS Egress Port Shapers Figure 3-14.5: The QoS Egress Port Shapers Click the Port index to set the QoS Egress Port Shapers XGS3600 Series User's Guide...
  • Page 198 XGS3600 Series User's Guide...
  • Page 199 100-1000000 when the "Unit" is "kbps", and it is restricted to 1-10000 when the "Unit" is "Mbps". Queue Shaper Unit :  Controls the unit of measure for the queue shaper rate as "kbps" or "Mbps". The default value is "kbps". Queue Shaper Excess :  XGS3600 Series User's Guide...
  • Page 200 Controls the unit of measure for the port shaper rate as "kbps" or "Mbps". The default value is "kbps". . Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 201: 3-14.6 Port Tag Remarking

    Click the Port index to set the QoS Port Tag Remarking Parameter description: Port :  The logical port for the settings contained in the same row. Click on the port number in order to configure tag remarking. Mode :  XGS3600 Series User's Guide...
  • Page 202 Controls the mapping of the classified (QoS class, DP level) to (PCP, DEI) values when the mode is set to Mapped. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. Cancel – Click to cancel the changes. XGS3600 Series User's Guide...

  • Page 203: 3-14.7 Port Dscp

    4. Click the Apply to save the setting 5. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-14.7: The QoS Port DSCP Configuration XGS3600 Series User's Guide...
  • Page 204 There are two configuration parameters available in Ingress: 1. Translate : To Enable the Ingress Translation click the checkbox 2. Classify: Classification for a port have 4 different values • Disable: No Ingress DSCP Classification. XGS3600 Series User's Guide...
  • Page 205 Remap: DSCP from analyzer is remapped and frame is remarked with remapped DSCP value. Buttons: • Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 206: 3-14.8 Dscp-Based Qos

    Controls whether a specific DSCP value is trusted. Only frames with trusted DSCP values are mapped to a specific QoS class and Drop Precedence Level. Frames with untrusted DSCP values are treated as a non-IP frame. XGS3600 Series User's Guide...
  • Page 207 QoS Class value can be any of (0-7) DPL : • Drop Precedence Level (0-3) Buttons: • Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 208: 3-14.9 Dscp Translation

    4. Click the Apply to save the setting 5. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-14.9: The DSCP Translation Configuration Parameter description: XGS3600 Series User's Guide...
  • Page 209 Remap: Select the DSCP value from select menu to which you want to remap. DSCP value ranges from 0 to 63. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 210: 3-14.10 Dscp Classification

    Select DSCP value (0-63) from DSCP menu to map DSCP to corresponding QoS Class and DPL value Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 211: 3-14.11 Qos Control List Configuration

    Ethernet: Only Ethernet frames (with Ether Type 0x600-0xFFFF) are allowed. LLC: Only (LLC) frames are allowed. SNAP: Only (SNAP) frames are allowed IPv4: The QCE will match only IPV4 frames. IPv6: The QCE will match only IPV6 frames. XGS3600 Series User's Guide...
  • Page 212 Tag Value of Tag field can be 'Any', 'Untag' or 'Tag' VID Valid value of VLAN ID can be any value in the range 1-4095 or 'Any'; user can enter either a specific value or a range of VIDs XGS3600 Series User's Guide...
  • Page 213 'Any'. DSCP values are in the range 0-63 including BE, CS1-CS7, EF or AF11-AF43 Sport Source TCP/UDP port:(0-65535) or 'Any', specific or port range applicable for IP protocol UDP/TCP Dport Destination TCP/UDP port:(0-65535) or 'Any', specific or port range applicable for IP protocol UDP/TCP XGS3600 Series User's Guide...
  • Page 214 DP Valid DP Level can be (0-3)", default- basic classification DSCP Valid DSCP value can be (0-63, BE, CS1-CS7, EF or AF11-AF43) Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 215: 3-14.12 Qcl Status

    DPL: Drop Precedence Level; if a frame matches the QCE then DP level will set to value displayed under DPL column. DSCP: If a frame matches the QCE then DSCP will be classified with the value displayed XGS3600 Series User's Guide...
  • Page 216 To evoke the auto-refresh icon then the device will refresh the information automatically. Resolve Conflict :  Click it to resolve the conflict issue. Upper right icon (Refresh):  You can click them for refresh the QCL information by manual. XGS3600 Series User's Guide...

  • Page 217: 3-14.13 Storm Control

    5. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-14.13: The Storm Control Configuration Parameter description: Port :  The port number for which the configuration below applies. XGS3600 Series User's Guide...
  • Page 218 Controls the unit of measure for the storm control rate as kbps, Mbps, fps or kfps . The default value is "kbps". Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 219: 3-14.14 Wred

    3. Specify Min. Threshold, Max. DP 1, Max. DP 2, Max. DP 3 4. Click the Apply to save the setting 5. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values XGS3600 Series User's Guide...
  • Page 220 Controls the drop probability for frames marked with Drop Precedence Level 3 when the average queue filling level is 100%. This value is restricted to 0-100. Buttons  Apply: Click to apply changes. Reset: Click to undo any changes made locally and revert XGS3600 Series User's Guide...

  • Page 221: Evc

    NNI port VLAN configuration. The range is from 1 through 4094. IVID  The Internal/classified VLAN ID in the PB network. The range is from 1 through 4094. Learning  The learning mode for the EVC controls whether source MAC addresses are learned for XGS3600 Series User's Guide...
  • Page 222 : Deletes the EVC. : Adds new EVC. Buttons  Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Refresh: Click to refresh the page. Remove All: Click to remove all EVCs. XGS3600 Series User's Guide...

  • Page 223: 3-15.2 Ports

    3. Click the Apply to save the setting 4. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-15.2: The EVC Ports XGS3600 Series User's Guide...
  • Page 224 Coloured: The DEI is 1 for yellow frames and 0 for green frames. Fixed: The DEI value is determined by ECE rules. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 225: 3-15.3 Bandwidth Profile

    Number of Entries :  The number of entries per page. The allowed range is from 2 through 128. Policer ID :  The Policer ID is used to identify one of the 128 policers. State :  XGS3600 Series User's Guide...
  • Page 226 The Excess Burst Size of the bandwidth profile. The allowed range is from 0 through 100000 bytes. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 227: 3-15.4 Ece

    The possible range is from 1 through 128. UNI Matching UNI Ports :  The list of User Network Interfaces for the ECE. Tag Type :  The tag type for the ECE. The possible values are: XGS3600 Series User's Guide...
  • Page 228 UNI-to-NNI: Unidirectional from UNI to NNI. NNI-to-UNI: Unidirectional from NNI to UNI. EVC ID :  The EVC ID for the ECE. The ECE is only active when mapping to an existing EVC. Possible values are: XGS3600 Series User's Guide...
  • Page 229 : Moves the ECE up the list. : Moves the ECE down the list. : Deletes the ECE. : The lowest plus sign adds a new entry at the bottom of the ECE listings. ECE Control List Configuration UNI Ports XGS3600 Series User's Guide...
  • Page 230 A field for entering a range appears. Inner VLAN ID Value :  When "Specific" is selected for the VLAN ID filter, you can enter a specific value. The allowed value is from 0 through 4094. XGS3600 Series User's Guide...
  • Page 231 Any: No EVC ID filter is specified. (EVC ID filter status is "don't-care".) Specific: If you want to filter a specific EVC ID with this ECE, choose this value. A field for entering a specific value appears. EVC ID Value :  XGS3600 Series User's Guide...
  • Page 232 C-tag: An inner C-tag is inserted. S-tag: An inner S-tag is inserted. S-custom-tag: An inner tag is inserted and the tag type is determined by the VLAN port configuration of the NNI. Inner Tag VLAN ID :  XGS3600 Series User's Guide...
  • Page 233 The inner tag DEI value for the ECE. The allowed value is 0 or 1. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 234: 3-15.5 Evc Statistics

    The number of yellow transmitted. Rx Red  The number of red received. Rx Discarded  The number of discarded in the ingress queue system. Tx Discarded  The number of discarded in the egress queue system. XGS3600 Series User's Guide...

  • Page 235: 3-15.6 Eve Statistics

    The number of yellow transmitted. Rx Red  The number of red received. Rx Discarded  The number of discarded in the ingress queue system. Tx Discarded  The number of discarded in the egress queue system. XGS3600 Series User's Guide...

  • Page 236: Loop Protection

    2. Scroll all parameters and evoke the Enable 3. Click the Apply to save the setting 4. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3-16.1: The Configuration XGS3600 Series User's Guide...
  • Page 237 Controls whether the port is actively generating loop protection PDU's, or whether it is just passively looking for looped PDU's. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 238: 3-16.2 Status

    2. If you want to update the most new information, please select “Auto-refresh” Figure 3-16.2: The Status Parameter description: Port  The switch port number of the logical port. Action  The currently configured port action. Transmit  The currently configured port transmit mode. XGS3600 Series User's Guide...
  • Page 239 The number of loops detected on this port. Status  The current loop protection status of the port. Loop  Whether a loop is currently detected on the port. Time of Last Loop  The time of the last loop event detected. XGS3600 Series User's Guide...

  • Page 240: Mirroring

    Select mirror mode. Rx only Frames received on this port are mirrored on the mirror port. Frames transmitted are not mirrored. Tx only Frames transmitted on this port are mirrored on the mirror port. Frames received XGS3600 Series User's Guide...
  • Page 241 Because of this, mode for the selected mirror port is limited to Disabled or Rx only. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 242: Trap Event Severity

    <0> Emergency: System is unusable. <1> Alert: Action must be taken immediately. <2> Critical: Critical conditions. <3> Error: Error conditions. <4> Warning: Warning conditions. <5> Notice: Normal but significant conditions. <6> Information: Information messages. <7> Debug: Debug-level messages. Buttons:  XGS3600 Series User's Guide...
  • Page 243 Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 244: Smtp Configuration

    Severity :  Indicates what kind of message will send to mail server. Possible modes are: <0> Emergency: System is unusable. <1> Alert: Action must be taken immediately. <2> Critical: Critical conditions. <3> Error: Error conditions. XGS3600 Series User's Guide...
  • Page 245 Email Address 1-6 :  Specify the email address of the receiver. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 246: Ah Oam

    4. Click the Apply to save the setting 5. If you want to cancel the setting then you need to click the Reset button. It will revert to previously saved values Figure 3- 20.1: The Link OAM Port Configuration XGS3600 Series User's Guide...
  • Page 247 Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 248: 3-20.2 Event Config

    Error Window for 'Symbol Period Error Event' must be an integer value between 1-60 and its default value is '1'. Whereas Error Threshold must be between 0-0xffffffff and its default value is '0'. XGS3600 Series User's Guide...
  • Page 249  You can click them for refresh the refresh and clear information by manual. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 250: 3-20.3 Port Status

    The field will show the status of this configuration is retrieved from the PHY. This feature is not available to be configured by the user. Remote Loopback Support :  If status is enabled, DTE is capable of OAM remote loopback mode. The field will show enabled. XGS3600 Series User's Guide...
  • Page 251 . Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the refresh information by manual. XGS3600 Series User's Guide...

  • Page 252: 3-20.4 Link Events

    The default value is one frame error. 2) The lower bound is zero frame errors. 3) The upper bound is unspecified. Frame Errors :  The field shows this four-octet field indicates the number of detected errored frames in the period. XGS3600 Series User's Guide...
  • Page 253 The field shows this two-octet field indicates the number of errored frame seconds in the period is required to be equal to or greater than in order for the event to be generated, encoded as a 16-bit unsigned integer. XGS3600 Series User's Guide...
  • Page 254 32bit unsigned integer.. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, clear):  You can click them for refresh the refresh or clear information by manual. XGS3600 Series User's Guide...

  • Page 255: 3-20.5 Statistics

    Sequence Number field that is identical to the previously transmitted Event Notification OAMPDU Sequence Number. Rx and Tx Loopback Control :  A count of the number of Loopback Control OAMPDUs received and transmitted on this interface. XGS3600 Series User's Guide...
  • Page 256 A count of the number of Critical event PDU's received and transmitted on this interface. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, clear):  You can click them for refresh the refresh or clear information by manual. XGS3600 Series User's Guide...

  • Page 257: Ethernet Oam

    Evc: This is a MEP in the EVC Domain. 'Flow Instance' is a EVC Mode :  In the field you can scroll to select “Mep” or “ Mip”. MEP: This is a Maintenance Entity End Point. MIP: This is a Maintenance Entity Intermediate Point. Direction :  XGS3600 Series User's Guide...
  • Page 258 Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. Upper right icon (Refresh):  You can click them for refresh the refresh information by manual. XGS3600 Series User's Guide...

  • Page 259: Eps

    Evc: This will create an EPS in the EVC Domain. 'W/P Flow' is an EVC. Mpls: Future use (needs to upgrade FW then will support it) Architecture:  The field you can scroll to select architecture of EPS as”1+1” or “1:1”. 1+1 : This will create a 1+1 EPS. XGS3600 Series User's Guide...
  • Page 260 Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. Upper right icon (Refresh):  You can click them for refresh the refresh information by manual. XGS3600 Series User's Guide...

  • Page 261: Erps

    Port 0 SF MEP (E SF MEP):  The field you need to assign the East Signal Fail reporting MEP. Port 1 SF MEP (W SF MEP):  XGS3600 Series User's Guide...
  • Page 262 Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. Upper right icon (Refresh):  You can click them for refresh the refresh information by manual. XGS3600 Series User's Guide...

  • Page 263: Chapter 4. Security

    2. Select “Enabled” of the specific port in the Mode of Port Mode Configuration. 3. Select Maximum Dynamic Clients (0, 1, 2, Unlimited) of the specific port in the Mode of Port Mode Configuration. 4. Click Apply. Figure 4-1.1: The IP Source Guard Configuration XGS3600 Series User's Guide...
  • Page 264 Specify IP Source Guard is enabled on which ports. Only when both Global Mode and Port Mode on a given port are enabled, IP Source Guard is enabled on this given port. Max Dynamic Clients :  XGS3600 Series User's Guide...
  • Page 265 0, it means only allow the IP packets forwarding that are matched in static entries on the specific port. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 266: 4-1.2 Static Table

    Port, VLAN ID, IP address, and IP Mask for the new entry. Click "Apply". Buttons:  Apply– Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 267: 4-1.3 Dynamic Table

    To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, <<, >> ):  You can click them for refresh the Dynamic IP Source Guard Table by manual, others for next/up page or entry. XGS3600 Series User's Guide...

  • Page 268: Arp Inspection

    Mode on a given port are enabled, ARP Inspection is enabled on this given port. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. Translate dynamic to static-: Click to translate all dynamic entries to static entries. XGS3600 Series User's Guide...

  • Page 269: 4-2.2 Static Table

    Port, VLAN ID, MAC address, and IP address for the new entry. Click "Apply". Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 270: 4-2.3 Dynamic Table

    To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, <<, >> ):  You can click them for refresh the Dynamic ARP Inspection Table by manual, others for next/up page or entry XGS3600 Series User's Guide...

  • Page 271: Dhcp Snooping

    Disabled: Disable DHCP snooping mode operation. Port Mode :  Indicate the DHCP snooping port mode. Possible port modes are: Trusted: Configures the port as trusted source of the DHCP messages. XGS3600 Series User's Guide...

  • Page 272: 4-3.2 Statistics

    The number of NAK (option 53 with value 6) packets received and transmitted. Rx and Tx Release :  The number of release (option 53 with value 7) packets received and transmitted. Rx and Tx Inform :  XGS3600 Series User's Guide...
  • Page 273 To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, Clear ):  You can click them for refresh the DHCP Snooping Port Statistics by manual, others for clear to clean up the entries. XGS3600 Series User's Guide...

  • Page 274: Dhcp Relay

    VLAN ID :  Enter the source VLAN ID for which the DHCP Relay settings apply. Enter 0 if you want to configure the default settings for all VLAN. Option82 Profile :  XGS3600 Series User's Guide...
  • Page 275 DHCP Option82 Profile. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 276: 4-4.2 Profile

    Option82 sub-option. Possible option mode are: Private: [0x01][len][slot][port][vid-2 bytes][string 0-23 char]. [0x02][len][Clent MAC-6 bytes] Option82: [0x01][len][0-23 char][delimiter][eth][delimiter][slot][delimiter][port][delimiter][vlan]. [0x02][len -Max :63][Port desc 47][delimiter][Port Tel 32 char] Info (Circuit ID) :  0 - 23 characters normal ASCII Types. XGS3600 Series User's Guide...
  • Page 277 Option Mode must be Option82. Possible Delimiter are: space Index :  This field displays the index number of the entry. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 278: 4-4.3 Statistics

    Receive Bad Remote ID :  The number of packets whose Remote ID option did not match known Remote ID. Client Statistics Transmit to Client :  The number of relayed packets from server to client. XGS3600 Series User's Guide...
  • Page 279 To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, Clear ):  You can click them for refresh the DHCP Relay Statistics by manual, others for clear to clean up the entries. XGS3600 Series User's Guide...

  • Page 280: Nas

    8. Checked RADIUS-Assigned VLAN Enabled. 9. Checked Guest VLAN Enabled. 10. Specify Guest VLAN ID. 11. Specify Max. Reauth. Count. 12. Checked Allow Guest VLAN if EAPOL Seen. 13. Click Apply. Figure 4-5.1: The Network Access Server Configuration XGS3600 Series User's Guide...
  • Page 281 Determine the period, in seconds, after which a connected client must be reauthenticated. This is only active if the Reauthentication Enabled checkbox is checked. Valid values are in the range 1 to 3600 seconds. EAPOL Timeout :  XGS3600 Series User's Guide...
  • Page 282 RADIUS attributes to take advantage of this feature (see RADIUS-Assigned VLAN Enabled below for a detailed description). The "RADIUS-Assigned VLAN Enabled" checkbox provides a quick way to globally enable/disable RADIUS-server assigned VLAN functionality. When checked, the individual XGS3600 Series User's Guide...
  • Page 283 (RFC3748). Frames sent between the switch and the RADIUS server is RADIUS packets. RADIUS packets also encapsulate EAP PDUs together with other attributes like the switch's IP address, name, and the supplicant's port number on the switch. EAP is very XGS3600 Series User's Guide...
  • Page 284 In Multi 802.1X it is not possible to use the multicast BPDU MAC address as destination MAC address for EAPOL frames sent from the switch towards the supplicant, since that would cause all supplicants attached to the port to reply to requests sent from the switch. XGS3600 Series User's Guide...
  • Page 285 When RADIUS-Assigned VLAN is both globally enabled and enabled (checked) for a given port, the switch reacts to VLAN ID information carried in the RADIUS Access-Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated. XGS3600 Series User's Guide...
  • Page 286 EAPOL Request Identity frames at the rate given by EAPOL Timeout. Once in the Guest VLAN, the port is considered authenticated, and all attached clients on the port are allowed access on this VLAN. The switch will not transmit an EAPOL Success XGS3600 Series User's Guide...
  • Page 287 Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. Upper right icon (Refresh):  You can click them for refresh the NAS Configuration by manual. XGS3600 Series User's Guide...

  • Page 288: 4-5.2 Switch Status

    MAC- based authentication. Last ID :  The user name (supplicant identity) carried in the most recently received Response Identity EAPOL frame for EAPOL-based authentication, and the source MAC address from the XGS3600 Series User's Guide...
  • Page 289 Guest VLANs here. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the NAS Switch Status by manual. XGS3600 Series User's Guide...

  • Page 290: 4-5.3 Port Status

    Port Counters EAPOL Counters :  These supplicant frame counters are available for the following administrative states: • Force Authorized • Force Unauthorized • Port-based 802.1X • Single 802.1X • Multi 802.1X Backend Server Counters :  XGS3600 Series User's Guide...
  • Page 291 If an authentication fails for one or the other reason, the client will remain in the unauthenticated state for Hold Time seconds. Last Authentication :  Shows the date and time of the last authentication of the client (successful as well as unsuccessful). XGS3600 Series User's Guide...
  • Page 292 To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, Clear):  You can click them for refresh the NAS Statistics by manual. Others you can click clear to clean up all entries. XGS3600 Series User's Guide...

  • Page 293: Aaa

    To configure a TACACS+ Authentication Server Configuration of AAA in the web interface: 1. Check “Enabled”. 2. Specify IP address or Hostname for TACACS+ Server. 3. Specify Authentication Port for TACACS+ Server (Default is 49). 4. Specify the Secret with TACACS+ Server. Figure 4-6.1.1: The Common Server Configuration XGS3600 Series User's Guide...
  • Page 294 The Dead Time, which can be set to a number between 0 and 3600 seconds, is the period during which the switch will not send new requests to a server that has failed to respond to a previous request. This will stop the switch from continually trying to contact a server that XGS3600 Series User's Guide...
  • Page 295 The table has one row for each TACACS+ Authentication Server and a number of columns, which are:  The TACACS+ Authentication Server number for which the configuration below applies. Enabled :  Enable the TACACS+ Authentication Server by checking this box. IP Address/Hostname :  XGS3600 Series User's Guide...
  • Page 296 The secret - up to 29 characters long - shared between the TACACS+ Authentication Server and the switch stack. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 297: 4-6.2 Radius Overview

    This state is only reachable when more than one server is enabled. RADIUS Accounting Servers  The RADIUS server number. Click to navigate to detailed statistics for this server. IP Address :  XGS3600 Series User's Guide...
  • Page 298 This state is only reachable when more than one server is enabled. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the RADIUS Status by manual. XGS3600 Series User's Guide...

  • Page 299: 4-6.3 Radius Details

    To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, Clear):  You can click them for refresh the RADIUS Statistics information by manual. Others you can click the clear to clean up all entries. XGS3600 Series User's Guide...

  • Page 300: Port Security

    1. Select “Enabled” in the Mode of Configuration. Port 2. Specify the maximum number of MAC addresses in the Limit of Port Configuration. 3. Set Action (Trap, Shutdown, Trap & Shutdown) 4. Click Apply. Figure 4-7.1: The Port Security Limit Control Configuration XGS3600 Series User's Guide...
  • Page 301 If checked, secured MAC addresses are subject to aging as discussed under Aging Period . Aging Period :  If Aging Enabled is checked, then the aging period is controlled with this input. If other modules are using the underlying port security for securing MAC addresses, they may XGS3600 Series User's Guide...
  • Page 302 This column shows the current state of the port as seen from the Limit Control's point of view. The state takes one of four values: Disabled: Limit Control is either globally disabled or disabled on the port. Ready: The limit is not yet reached. This can be shown for all actions. XGS3600 Series User's Guide...
  • Page 303 Upper right icon (Refresh):  You can click them for refresh the Port Security information by manual. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 304: 4-7.2 Switch Status

    To configure a Port Security Switch Status Configuration in the web interface: 1. Checked “Auto-refresh” Figure 4-7.2: The Port Security Switch Status Parameter description: User Module Legend :  The legend shows all user modules that may request Port Security services. XGS3600 Series User's Guide...
  • Page 305 (-). Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the Port Security Switch Status information by manual. XGS3600 Series User's Guide...

  • Page 306: 4-7.3 Port Status

    (-) will be shown. Auto-refresh :  To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh):  You can click them for refresh the Port Security Port Status information by manual. XGS3600 Series User's Guide...

  • Page 307: Access Management

    Indicates that the host can access the switch from HTTP/HTTPS interface if the host IP address matches the IP address range provided in the entry. SNMP :  Indicates that the host can access the switch from SNMP interface if the host IP address XGS3600 Series User's Guide...
  • Page 308 Indicates that the host can access the switch from TELNET/SSH interface if the host IP address matches the IP address range provided in the entry. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 309: 4-8.2 Statistics

    To evoke the auto-refresh icon then the device will refresh the information automatically. Upper right icon (Refresh, Clear):  You can click them for refresh the Access Management Statistics information by manual. Others you can click the clear button to clean up all entries. XGS3600 Series User's Guide...

  • Page 310: Ssh

    Indicates the SSH mode operation. Possible modes are: Enabled: Enable SSH mode operation. Disabled: Disable SSH mode operation. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 311: Https

    Automatic Redirect :  Indicates the HTTPS redirect mode operation. Automatically redirect web browser to HTTPS when HTTPS mode is enabled. Possible modes are: Enabled: Enable HTTPS redirect mode operation. Disabled: Disable HTTPS redirect mode operation. XGS3600 Series User's Guide...

  • Page 312: Auth Method

    This is only possible if the Authentication Method is set to a value other than 'none' or 'local'. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 313: Pppoe Ia

    Keep: Keep the original Vendor-specific information when a PPPoE message that already contains it is received. Drop: Drop the packet when a PPPoE message that already contains Vendor-specific information is received. XGS3600 Series User's Guide...
  • Page 314 Option Mode must is TR-101. Possible Delimiter are: space Index :  This field displays the index number of the entry. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 315: Error Disable

    Enter a number from 0 to 256 to specify how many control packets this port can receive or transmit per second. 0 means no rate limit. Buttons:  Apply – Click to apply changes. Reset- Click to undo any changes made locally and revert to previously saved values. XGS3600 Series User's Guide...

  • Page 316: 4-13.2 Errdisable Detect

    The Switch drops the additional control packets the port has to handle in every one second. Buttons:  Apply – Click to apply changes. Cancel- Click Cancel to begin configuring the fields afresh. XGS3600 Series User's Guide...

  • Page 317: 4-13.3 Errdisable Recovery

    Deselect this option to turn off this rule. Interval :  Enter the number of seconds (from 30 to 2592000) for the time interval. Buttons:  Apply – Click to apply changes. Cancel- Click Cancel to begin configuring the fields afresh. XGS3600 Series User's Guide...

  • Page 318: 4-8.2 Errdisable Status

    Figure 4-8.2: The Errdisable Status Parameter description: Port :  This field displays the port number. Protecting Status :  Protecting Status. Auto-refresh :  Check this box to enable an automatic refresh of the page at regular intervals. XGS3600 Series User's Guide...

  • Page 319: Chapter 5. Maintenance

    You can restart the stack switch on this page. After restart, the stack switch will boot normally. Buttons:  Yes – Click to “Yes” then the device will restart. No- Click to undo any restart action. XGS3600 Series User's Guide...

  • Page 320: Firmware

    The front LED flashes Green/Off with a frequency of 10 Hz while the firmware update is in progress. Do not restart or power off the device at this time or the switch may fail to function afterwards. XGS3600 Series User's Guide...

  • Page 321: 5-2.2 Firmware Selection

    The flash index name of the firmware image. The name of primary (preferred) image is image, the alternate image is named image.bk. Version :  The version of the firmware image. Date :  The date where the firmware was produced. XGS3600 Series User's Guide...
  • Page 322 3. The firmware version and date information may be empty for older firmware releases. This does not constitute an error. XGS3600 Series User's Guide...

  • Page 323: Save / Restore

    This section describes how to save the Switch Start configuration. Any current configuration files will be saved as XML format. Web Interface To configure a Save Start Configuration in the web interface: 1. Chick Save Start. 2. Click Yes. Figure 5-3.2: The Save Start configuration Parameter description: XGS3600 Series User's Guide...

  • Page 324: 5-3.3 Save User

    XML format. Web Interface To configure a Restore User Configuration in the web interface: 1. Chick Restore User. 2. Click Yes. Figure 5-3.4: The Restore the Backup Configuration Parameter description: XGS3600 Series User's Guide...

  • Page 325: Export / Import

    XML format. Web Interface To configure an Export Config Configuration in the web interface: 1. Chick Save configuration. 2. Save the file in your device. Figure 5-4.1: The Restore the Backup Configuration XGS3600 Series User's Guide...

  • Page 326: 5-4.2 Import Config

    Browse :  Click the “Browse...” button to search the Configuration URL and filename. Upload:  Click the “Upload” button then the switch will start to upload the configuration from configuration stored location PC or Server. XGS3600 Series User's Guide...

  • Page 327: Diagnostics

    64 bytes from ::10.10.132.20: icmp_seq=0, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=1, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=2, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=3, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=4, time=0ms Sent 5 packets, received 5 OK, 0 bad XGS3600 Series User's Guide...

  • Page 328: 5-5.2 Ping6

    64 bytes from 10.10.132.20: icmp_seq=2, time=0ms 64 bytes from 10.10.132.20: icmp_seq=3, time=0ms 64 bytes from 10.10.132.20: icmp_seq=4, time=0ms Sent 5 packets, received 5 OK, 0 bad You can configure the following properties of the issued ICMP packets: XGS3600 Series User's Guide...

  • Page 329: 5-5.3 Veriphy

    Parameter description: Port :  The port where you are requesting VeriPHY Cable Diagnostics. Cable Status :  Port: Port number. Pair: The status of the cable pair. Length: The length (in meters) of the cable pair. XGS3600 Series User's Guide...

  • Page 330: Glossary Of Web-Based Management

    A. Glossary of Web-based Management ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application.
  • Page 331 Only valid ARP requests and responses can go through the switch device. Auto-Negotiation Auto-negotiation is the process where two different devices establish the mode of operation and the speed settings that can be shared by those devices for a link. XGS3600 Series User's Guide...
  • Page 332 IP address or other assignment policies. Specifically the option works by setting two sub- options: Circuit ID (option 1) and Remote ID (option2). The Circuit ID sub-option is supposed to include information specific to which circuit the request came in on. The XGS3600 Series User's Guide...
  • Page 333 FTP is an acronym for File Transfer Protocol. It is a transfer protocol that uses the Transmission Control Protocol (TCP) and provides file writing and reading. It also provides directory service and security features. Fast Leave XGS3600 Series User's Guide...
  • Page 334 The VLAN interface is pruned from the multicast tree for the multicast group specified in the original leave message. Fast-leave processing ensures optimal bandwidth management for all hosts on a switched network, even when multiple multicast groups are in use simultaneously. This processing applies to IGMP and MLD. XGS3600 Series User's Guide...
  • Page 335 ICMP messages generally contain information about routing difficulties or simple exchanges such as time-stamp or echo transactions. For example, the PING command uses ICMP to test an Internet connection. XGS3600 Series User's Guide...
  • Page 336 DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host. XGS3600 Series User's Guide...
  • Page 337 MAC table if no frame with the corresponding SMAC address have been seen after a configurable age time. MEP is an acronym for Maintenance Entity Endpoint and is an endpoint in a Maintenance XGS3600 Series User's Guide...
  • Page 338 (In this context, mirroring a frame is the same as copying the frame.) Both incoming (source) and outgoing (destination) frames can be mirrored to the mirror port. XGS3600 Series User's Guide...
  • Page 339 These TLVs are known as optional TLVs. If an optional TLVs is disabled the corresponding information is not included in the LLDP frame. OUI is the organizationally unique identifier. An OUI address is a globally unique identifier XGS3600 Series User's Guide...
  • Page 340 POP3 are the two most prevalent Internet standard protocols for e-mail retrieval. Virtually all modern e-mail clients and servers support both. Private VLAN In a private VLAN, communication between ports in that private VLAN is not permitted. A VLAN can be configured as a private VLAN. XGS3600 Series User's Guide...
  • Page 341 In 1998, the IEEE with document 802.1w introduced an evolution of STP: the Rapid Spanning Tree Protocol, which provides for faster spanning tree convergence after a topology change. Standard IEEE 802.1D-2004 now incorporates RSTP and obsoletes STP, while at the same time being backwards-compatible with STP. XGS3600 Series User's Guide...
  • Page 342 SSH was to replace the earlier rlogin, TELNET and rsh protocols, which did not provide strong authentication or guarantee confidentiality (Wikipedia). SSM In SyncE this is an abbreviation for Synchronization Status Message and is containing a QL indication. XGS3600 Series User's Guide...
  • Page 343 Then, the client user can enter commands through the Telnet program just as if they were entering commands directly on the server console. TFTP TFTP is an acronym for Trivial File Transfer Protocol. It is transfer protocol that uses the XGS3600 Series User's Guide...
  • Page 344 IPTV, Voice over IP (VoIP), and Trivial File Transfer Protocol (TFTP). User Priority User Priority is a 3-bit field storing the priority level for the 802.1Q frame. It is also known as PCP. XGS3600 Series User's Guide...
  • Page 345 Voice VLAN is VLAN configured specially for voice traffic. By adding the ports with voice devices attached to voice VLAN, we can perform QoS-related configuration for voice data, ensuring the transmission priority of voice traffic and voice quality. XGS3600 Series User's Guide...
  • Page 346 ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
  • Page 347 • Fuse Warning! Replace a fuse only with a fuse of the same type and rating. • The POE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. XGS3600 Series User's Guide...
  • Page 348 è composta l’apparecchiatura. Lo smaltimento abusivo del prodotto da parte del detentore comporta l’applicazione delle sanzioni amministrative previste dalla normativa vigente." XGS3600 Series User's Guide...
  • Page 349 Environmental Product Declaration Taiwanese BSMI (Bureau of Standards, Metrology and Inspection) A Warning: XGS3600 Series User's Guide...
  • Page 350 This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. To obtain the source code covered under those Licenses, please contact support@zyxel.com.tw to get it. XGS3600 Series User's Guide...

This manual is also suitable for:

Xgs3600-26fXgs3600-28Xgs3600-28f

Table of Contents