Page 2
Go to nebula.zyxel.com support.zyxel.com to get this User’s Guide on how to configure the Switch using Nebula. • More Information Go to https://community.zyxel.com/en for product discussions. Go to support.zyxel.com to find other information on the Switch. XMG1915 Series User’s Guide...
Figures in this user guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Generic Router Wireless Router / Access Point Generic Switch Smart TV Desktop Laptop IP Camera Printer Server XMG1915 Series User’s Guide...
Switch Setup ............................166 Syslog Setup ............................168 Time Range ............................171 PORT ..............................174 Green Ethernet ........................... 175 Link Aggregation ..........................177 Link Layer Discovery Protocol (LLDP) ....................186 PoE Setup ............................. 207 Port Setup ............................214 XMG1915 Series User’s Guide...
Page 5
Static Route ............................304 SECURITY .............................. 309 AAA ..............................310 Access Control ............................ 318 Storm Control ............................327 Error-Disable ............................329 DHCP Snooping ..........................335 Port Security ............................347 MAINTENANCE ............................ 350 Troubleshooting and Appendices ....................371 Troubleshooting ..........................372 XMG1915 Series User’s Guide...
2.5 Mounting the Switch on a Rack ....................34 2.5.1 Installation Requirements ..................... 34 2.5.2 Precautions ..........................35 2.5.3 Attaching the Mounting Brackets to the Switch ............... 35 2.5.4 Mounting the Switch on a Rack ..................35 Chapter 3 Hardware Panels..........................37 XMG1915 Series User’s Guide...
Page 7
4.10 Help ..............................77 Chapter 5 Initial Setup Example .........................78 5.1 Overview ............................78 5.1.1 Create a VLAN ........................78 5.1.2 Set Port VID ..........................79 5.1.3 Configure Switch Management IP Address ............... 80 Chapter 6 Tutorials ...............................83 XMG1915 Series User’s Guide...
Page 8
Chapter 12 MAC Table ............................103 12.1 MAC Table Overview ......................... 103 12.1.1 What You Can Do ......................103 12.1.2 What You Need to Know ....................103 12.2 Viewing the MAC Table ......................104 Chapter 13 Neighbor ............................106 XMG1915 Series User’s Guide...
Page 9
Chapter 18 System Log............................122 18.1 System Log Overview ......................... 122 18.2 System Log ..........................122 Chapter 19 SYSTEM ..............................123 Chapter 20 Cloud Management ........................124 20.1 Cloud Management Overview ....................124 20.2 Nebula Center Control Discovery .................... 124 XMG1915 Series User’s Guide...
Page 11
29.1 Time Range Overview ........................ 171 29.1.1 What You Can Do ......................171 29.2 Configuring Time Range ......................171 29.2.1 Add/Edit Time Range ....................... 172 Chapter 30 PORT ..............................174 Chapter 31 Green Ethernet ..........................175 31.1 Green Ethernet Overview ......................175 XMG1915 Series User’s Guide...
Page 12
34.1 PoE Status (for PoE models only) ....................207 34.2 PoE Setup ............................. 209 34.3 PoE Time Range Setup ....................... 212 34.3.1 Add/Edit PoE Time Range ....................213 Chapter 35 Port Setup............................214 35.1 Port Setup ............................ 214 XMG1915 Series User’s Guide...
Page 13
41.1.1 What You Can Do ......................231 41.1.2 What You Need to Know ....................231 41.2 Activating DiffServ ........................232 41.3 DSCP-to-IEEE 802.1p Priority Settings ..................233 41.3.1 Configuring DSCP Settings ....................234 Chapter 42 Queuing Method..........................235 XMG1915 Series User’s Guide...
Page 14
Chapter 46 Static MAC Filtering..........................261 46.1 Static MAC Filtering Overview ....................261 46.1.1 What You Can Do ......................261 46.2 Configure a Static MAC Filtering Rule ..................261 46.2.1 Add/Edit a Static MAC Filtering Rule ................262 XMG1915 Series User’s Guide...
Page 15
50.1.2 What You Need to Know ....................284 50.2 ARP Learning ..........................286 50.3 Static ARP ............................ 287 50.3.1 Add/Edit Static ARP ......................288 Chapter 51 DHCP ..............................290 51.1 DHCP Overview .......................... 290 51.1.1 What You Can Do ......................290 XMG1915 Series User’s Guide...
Page 16
54.4.1 Vendor Specific Attribute ....................315 54.4.2 Supported RADIUS Attributes ................... 316 54.4.3 Attributes Used for Authentication .................. 316 54.4.4 Attributes Used for Accounting ..................316 Chapter 55 Access Control..........................318 55.1 Access Control Overview ......................318 XMG1915 Series User’s Guide...
Page 17
58.6 DHCP Snooping VLAN Port Setup ..................... 343 58.6.1 Add/EDIT DHCP Snooping VLAN Ports ................343 58.7 Technical Reference ........................344 58.7.1 DHCP Snooping Overview ....................344 Chapter 59 Port Security............................347 59.1 Port Security Overview ....................... 347 59.2 About Port Security ........................347 XMG1915 Series User’s Guide...
Page 18
61.1 Power, Hardware Connections, and LEDs ................372 61.2 Switch Access and Login ......................373 61.3 Switch Configuration ........................375 61.4 PoE Supply ........................... 375 61.5 Nebula Registration ........................376 Appendix A Customer Support ..................... 377 XMG1915 Series User’s Guide...
Page 19
Table of Contents Appendix B Common Services ...................... 382 Appendix C IPv6..........................385 Appendix D Legal Information ...................... 393 Index ..............................398 XMG1915 Series User’s Guide...
H A P T E R Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The XMG1915 Series consists of the following models: • XMG1915-10E • XMG1915-10EP • XMG1915-18EP References to PoE model in this User's Guide only apply to XMG1915-10EP and XMG1915-18EP.
Chapter 1 Getting to Know Your Switch Table 1 XMG1915 Series Comparison Table (continued) FEATURES XMG1915-10E XMG1915-10EP XMG1915-18EP Reset to Factory Default Function Note: Press the RESTORE button for more than 6 seconds. See the following table for the cables required and distance limitation to attain the corresponding speed.
Click Get Started in the Nebula web portal. Enter your myZyxel account information. You will be redirected to another screen where you can sign up for a myZyxel account if you do not have one. Create an organization and a site (using the Nebula setup wizard) or select an existing site. XMG1915 Series User’s Guide...
Page 24
Configurator password (Local GUI) http://DHCP-assigned IP a configured static IP address Note: The Web Configurator (Local GUI) of Cloud mode supports limited features for troubleshooting use only. Standalone admin 1234 http://setup.zyxel mode Configurator http://DHCP-assigned IP http://192.168.1.1 XMG1915 Series User’s Guide...
• IEEE 802.3at Power over Ethernet (PoE) + • IEEE 802.3bt Power over Ethernet (PoE) ++ The following table describes the PoE features of the Switch by PoE standard. Table 4 XMG1915 Series Models and PoE Features POE FEATURES XMG1915-10EP XMG1915-18EP IEEE 802.3af PoE...
Chapter 1 Getting to Know Your Switch Table 4 XMG1915 Series Models and PoE Features (continued) POE FEATURES XMG1915-10EP XMG1915-18EP Power Management Mode Consumption mode (default) / Consumption mode (default) / Classification mode Classification mode PoE Power Budget 130 W...
Switch’s port or connect other switches to the Switch. In this example, all computers can share high-speed applications on the server. To expand the network, simply add more networking devices such as switches, routers, computers, print servers, and so on. Figure 3 Backbone Application XMG1915 Series User’s Guide...
This helps you switch to higher-speed LANs without the need for replacing all existing Ethernet cables and adapter cards, restructuring your network and complex maintenance. Figure 5 High Performance Switched Workgroup Application XMG1915 Series User’s Guide...
See Chapter 60 on page 355. • ZON Utility. ZON Utility is a program designed to help you deploy and perform initial setup on a network more efficiently. See Section 4.3 on page XMG1915 Series User’s Guide...
Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. XMG1915 Series User’s Guide...
• The Switches with fans are not suitable for use in locations where children are likely to be present. To start using the Switch, simply connect the power cables to turn it on. 2.3 Freestanding Installation Procedure Make sure the Switch is clean and dry. Remove the adhesive backing from the rubber feet. XMG1915 Series User’s Guide...
• The distance between the screws: 176 mm. The following figure shows the screw specifications used for wall mounting. • D = 7.00 mm • H = 2.00 mm • L= 15.50 mm • d = 3.50 mm XMG1915 Series User’s Guide...
Page 33
Align the holes on the back of the Switch with the screws on the wall. Hang the Switch on the screws. Note: Make sure there is enough clearance between the wall and the Switch to allow ventilation. XMG1915 Series User’s Guide...
Follow the steps below to mount your Switch on a standard EIA rack using a rack-mounting kit. Note: Make sure there is enough clearance between each equipment on the rack for air circulation. 2.5.1 Installation Requirements • Two mounting brackets. XMG1915 Series User’s Guide...
Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the rack. XMG1915 Series User’s Guide...
Page 36
Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. Note: Make sure you tighten all the four screws to prevent the Switch from getting slanted. Repeat steps to attach the second mounting bracket on the other side of the rack. XMG1915 Series User’s Guide...
A PoE port is an Ethernet port that can supply power to a connected device. Connect these 10EP / XMG1915- ports to a PoE-enabled IP camera / IP phone / AP, or an Ethernet switch. 18EP) XMG1915 Series User’s Guide...
Ethernet port are the same in order to connect. 3.1.1.1 Default Ethernet Negotiation Settings The factory default negotiation settings for the Gigabit ports on the Switch are: • Speed: Auto • Duplex: Auto • Flow control: Off • Link Aggregation: Disabled XMG1915 Series User’s Guide...
Align the transceiver in front of the slot opening. Make sure the latch is in the lock position (latch styles vary), then insert the transceiver into the slot with the exposed section of PCB board facing down. XMG1915 Series User’s Guide...
Page 40
If unsuccessful, contact Zyxel Support to prevent damage to your Switch and transceiver. XMG1915 Series User’s Guide...
Grounding is a safety measure to direct excess electric charge to the ground. It prevents damage to the Switch, and protects you from electrocution. Use the grounding screw on the rear panel and the ground wire of the AC power supply to ground the Switch. XMG1915 Series User’s Guide...
Page 42
Make sure the grounding terminal is connected to the buildings grounding electrode and has an earth resistance of less than 10 ohms, or according to your country’s electrical regulations. XMG1915 Series User’s Guide...
Connect the other end of the supplied power cord to a power outlet. Installing the Retainer Clip (for XMG1915-10E and XMG1915-10EP) Install the retainer clip to prevent accidental removal of the power cord. Remove the Retainer Holder screw from the rear panel. XMG1915 Series User’s Guide...
Page 44
Chapter 3 Hardware Panels Wrap the retainer clip on the power cord. Align the retainer clip holes with the Retainer Holder hole and fasten the screw to secure it. XMG1915 Series User’s Guide...
Page 45
Install the retainer clip to prevent accidental removal of the power cord. Loosely wrap the clip on the retainer to the power cord. Push the pronged-end of the retainer clip into the Retainer Holder hole until it locks into place. XMG1915 Series User’s Guide...
Page 46
Chapter 3 Hardware Panels Slide the clip up to the end of the power cord. Close the clip tightly around the power cord until secure. XMG1915 Series User’s Guide...
(XMG1915-18EP) Yellow The link to a 100M Ethernet network is up. Blinking The Switch is transmitting/receiving to/from a 100M Ethernet network. The link to an Ethernet network is down or the port is administratively shut down. XMG1915 Series User’s Guide...
Page 48
(XMG1915-10E / Green The port has a successful 1000M connection. XMG1915-10EP) Blinking The port is transmitting or receiving data at 1000M. 17 – 18 This link is disconnected or the port is administratively shut (XMG1915-18EP) down. XMG1915 Series User’s Guide...
[ENTER]. Your computer must be in the same subnet in order to access this website address. Also, you can use the ZON Utility to check your Switch’s IP address. See Section 4.3 on page 53 for more information on the ZON utility. The Login screen appears. XMG1915 Series User’s Guide...
Page 51
Switch to Nebula Cloud management. Figure 26 Visit Nebula Alternatively, click Login to log into the Web Configurator to manage the Switch directly. The default user name is admin and associated default password is 1234. XMG1915 Series User’s Guide...
Page 52
Web Configurator. Click Password / SNMP to open a screen where you can change the administrator password and SNMP community string simultaneously. Otherwise, click Ignore to close it. Password/SNMP Setting Figure 27 Web Configurator: Warning Figure 28 Web Configurator: Password/SNMP XMG1915 Series User’s Guide...
You can download the ZON Utility at https://www.zyxel.com/global/en/form/zon-utility-download and unzip it first before installing it in a computer (Windows operating system). XMG1915 Series User’s Guide...
Double-click the ZON Utility to run it. The first time you run the ZON Utility, you will see if your device and firmware version support the ZON Utility. Click the OK button to close this screen. XMG1915 Series User’s Guide...
Page 55
If your device is not listed here, see the device release notes for ZON Utility support. The release notes are in the firmware zip file on the Zyxel web site. Figure 30 ZON Utility Screen Select a network adapter to which your supported devices are connected. XMG1915 Series User’s Guide...
Page 56
Select a device and then use the icons to perform actions. Some functions may not be available for your devices. Note: You must know the selected device admin password before taking actions on the device using the ZON Utility icons. XMG1915 Series User’s Guide...
Page 57
This field displays an icon of the kind of device discovered. Model This field displays the model name of the discovered device. Firmware Version This field displays the firmware version of the discovered device. MAC Address This field displays the MAC address of the discovered device. XMG1915 Series User’s Guide...
• VLAN to create a static VLAN, assign ports to the VLAN and set the ports to tag or untag outgoing – frames. • QoS to determine a port’s IEEE 802.1p priority level for QoS. – XMG1915 Series User’s Guide...
In Basic, you can set up IP/DNS, set up your password, SNMP community, link aggregation, and view finished results. In order to set up your IP/DNS, please do the following. Click Wizard > Basic > Step 1 IP to access this screen. XMG1915 Series User’s Guide...
Page 60
Enter a domain name server IP address in order to be able to use a domain name instead of an IP address. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Password screen appears. XMG1915 Series User’s Guide...
Page 61
Set Community Enter the Set Community string, which is the password for the incoming Set- requests from the management station. The Set Community string is only used by SNMP managers using SNMP version 2c or lower. XMG1915 Series User’s Guide...
Page 62
Select LACP if the ports are configured to join a trunk group through LACP. Previous Click Previous to show the previous screen. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Summary screen appears. XMG1915 Series User’s Guide...
Page 63
Get Community This field displays the Get Community string. Set Community This field displays the Set Community string. Trap Community This field displays the Trap Community string. Link Aggregation Group This field displays the group number. XMG1915 Series User’s Guide...
Select all ports to enable the loop guard feature on all ports. You can select a port by clicking it. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. XMG1915 Series User’s Guide...
Page 65
Specify how many broadcast packets the port receives per second. Previous Click Previous to show the previous screen. Next Click Next to show the next screen. Cancel Click Cancel to exit this screen without saving. After clicking Next, the Summary screen appears. XMG1915 Series User’s Guide...
Review the information and click Finish to create the task. Cancel Click Cancel to exit this screen without saving. 4.4.3 VLAN In VLAN, you can create VLAN, and tag VLAN settings. Click Wizard > VLAN > VLAN Setting to access this screen. XMG1915 Series User’s Guide...
Click Cancel to exit this screen without saving. 4.4.4 QoS In QoS, you can create QoS settings. In order to create QoS settings, please do the following. Click Wizard > QoS > QoS Setting to access this screen. XMG1915 Series User’s Guide...
Review the information and click Finish to create the task. Cancel Click Cancel to exit this screen without saving. 4.5 Web Configurator Layout The DASHBOARD screen is the first screen that displays when you access the Web Configurator. XMG1915 Series User’s Guide...
Page 69
Click this icon to display web help pages. The help pages provide descriptions for all of the – configuration screens. Click this icon to go to the Zyxel Community Biz Forum. – Click this icon to log out of the Web Configurator. – XMG1915 Series User’s Guide...
Page 70
This link takes you to a screen where you can configure general identification information about the Switch. Hardware This link takes you to a screen where you can configure hardware monitor related features such Monitor Setup as SFP Detect. (XMG1915- 18EP) XMG1915 Series User’s Guide...
Page 71
SWITCHING Loop Guard This link takes you to a screen where you can configure protection against network loops that occur on the edge of your network. Mirroring Click the link to unfold the following sub-link menu. XMG1915 Series User’s Guide...
Page 72
VLANs based on the source MAC address of the packet. This eliminates the need to reconfigure the Switch when you change ports. The Switch will forward the packets based on the source MAC address you set up previously. XMG1915 Series User’s Guide...
Page 73
The link takes you to a screen where you can import the Switch's CA-signed certificates. Cluster Man- This link takes you to a screen where you can configure clustering management and view its sta- agement tus. Configuration Click the link to unfold the following sub-link menu. XMG1915 Series User’s Guide...
In some configuration screens, the Add/Edit button is replaced by the Edit button. This means you can only edit the existing entries in the table. Delete To remove entries, select the entries and click Delete. XMG1915 Series User’s Guide...
4.5.2 Change Your Password After you log in for the first time, it is recommended you change the default administrator password. Click SYSTEM > Logins to display the next screen. Figure 48 Change Administrator Login Password XMG1915 Series User’s Guide...
Press the RESTORE button for 2 to 6 seconds to have the Switch automatically reboot. Press the RESTORE button for more than 6 seconds to have the Switch restore the factory default file. Section 3.3 on page 47 for more information about the LED behavior. XMG1915 Series User’s Guide...
The Web Configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help icon on a Web Configurator screen to view an online help description (shown as below) of that screen. Figure 50 Online Web Help XMG1915 Series User’s Guide...
In this example, you want to configure port 1 as a member of VLAN 2. Figure 51 Initial Setup Network Example: VLAN Go to the SWITCHING > VLAN > VLAN Setup > Static VLAN screen. Click Add/Edit. XMG1915 Series User’s Guide...
Use PVID to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on XMG1915 Series User’s Guide...
If the Switch fails to obtain an IP address from a DHCP server, the Switch will use 192.168.1.1 as the management IP address. You can configure another IP address in a different subnet for management purposes. The following figure shows an example. XMG1915 Series User’s Guide...
Page 81
Switch is using a DHCP-assigned IP or static IP address. This requires your PC to be directly connected to the Switch. Go to the SYSTEM > IP Setup > IP Setup screen. Click Add/Edit. The following screen appears. XMG1915 Series User’s Guide...
Page 82
In this example, enter VLAN ID 2. This is the same as the VLAN ID you configure in the Static VLAN screen. Click Apply to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XMG1915 Series User’s Guide...
1 and 100 Access the Switch through http://192.168.1.1 by default. Log into the Switch by entering the user name (default: admin) and password (default: 1234). Go to SWITCHING > VLAN > VLAN Setup > Static VLAN. Click Add/Edit. XMG1915 Series User’s Guide...
Page 84
Go to SWITCHING > VLAN > VLAN Setup > VLAN Port Setup, and set the PVID of the ports 4, 5 and 6 to 100. This tags untagged incoming frames on ports 4, 5 and 6 with the tag 100. Click Apply. XMG1915 Series User’s Guide...
Page 85
Go to SECURITY > DHCP Snooping > DHCP Snp. Port Setup. Select Trusted in the Server Trusted state field for port 4 because the DHCP server is connected to port 4. Keep ports 5 and 6 Untrusted because they are connected to DHCP clients. Click Apply. XMG1915 Series User’s Guide...
Page 86
Click Save at the top right of the Web Configurator to save the configuration permanently. 10 To check if DHCP snooping works, go to SECURITY > IPv4 Source Guard > IP Source Guard, you should see an IP assignment with the type DHCP-Snooping as shown. XMG1915 Series User’s Guide...
Follow the steps below to configure port 2 as a member of VLAN 102. Access the Web Configurator through the Switch’s management port. Go to SYSTEM > Switch Setup and set the VLAN Type to 802.1Q. Click Apply to save the settings to the run-time memory. XMG1915 Series User’s Guide...
Page 88
(VLAN 102 for example) in the Name field and enter “102” in the VLAN Group ID field. Set port 2 to be a permanent member of this VLAN by selecting Fixed in the Control field. XMG1915 Series User’s Guide...
Check client A’s IP address. If it did not receive the IP address 172.16.1.18, make sure: Client A is connected to the Switch’s port 2 in VLAN 102. You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. XMG1915 Series User’s Guide...
Page 90
Chapter 6 Tutorials You clicked the Save link on the Switch to have your settings take effect. XMG1915 Series User’s Guide...
This screen displays general device information, system status, system resource usage, and port status. This guide uses XMG1915-18EP screens as an example. The screens may vary slightly for different models. Click DASHBOARD in the navigation panel to open the following screen. XMG1915 Series User’s Guide...
Page 92
This field displays the serial number of this Switch. The serial number is used for device tracking Number and control. Hardware This field displays the hardware version of the Switch. Version System MAC This field displays the MAC address of the Switch. Address XMG1915 Series User’s Guide...
Page 93
Switch can provide to the connected PDs. It also shows the percentage of PoE power usage. When PoE usage reaches 100%, the Switch will shut down PDs one-by-one according to the PD priority which you configured in PORT > PoE Setup > PoE Setup. XMG1915 Series User’s Guide...
The quick links in the Quick Link section provide shortcuts to specific configuration screens. You can use the quick links to directly access the screens that you would frequently use. You can also decide which quick links to be put on the DASHBOARD screen using the Edit button. XMG1915 Series User’s Guide...
Page 95
The setup panel displays after you click the Edit button. Figure 60 Quick Link Selection (example PoE model) Select the quick links you want and click Apply. The selected quick links will be displayed in the Quick Link section on the DASHBOARD screen. XMG1915 Series User’s Guide...
The following chapters introduces the configurations of the links under the MONITOR navigation panel. Quick links to chapters: • ARP Table • IP Table • IPv6 Neighbor Table • MAC Table • Neighbor • Path MTU Table • Port Status • Routing Table • System Information • System Log XMG1915 Series User’s Guide...
MAC address that replied. 9.2 Viewing the ARP Table Use the ARP table to view IP-to-MAC address mappings and remove specific dynamic ARP entries. Click MONITOR > ARP Table in the navigation panel to open the following screen. XMG1915 Series User’s Guide...
Page 98
This shows 0 for a static entry. Type This shows whether the IP address is dynamic (learned by the Switch) or static (manually configured in SYSTEM > IP Setup > IP Setup or NETWORKING > ARP Setup > Static ARP). XMG1915 Series User’s Guide...
• If the Switch has already learned the port for this IP address, but the destination port is the same as the port it came in on, then it filters the packet. Figure 62 IP Table Flowchart XMG1915 Series User’s Guide...
Click this button to display and arrange the data according to IP address. Click this button to display and arrange the data according to VLAN group. Port Click this button to display and arrange the data according to port number. XMG1915 Series User’s Guide...
This field displays the IPv6 address of the Switch or a neighboring device. This field displays the MAC address of the IPv6 interface on which the IPv6 address is configured or the MAC address of the neighboring device. XMG1915 Series User’s Guide...
Page 102
Click this button to display and arrange the data according to IPv6 address. Click this button to display and arrange the data according to MAC address. Interface Click this button to display and arrange the data according to IPv6 interface. XMG1915 Series User’s Guide...
MAC address. The Switch then learns the port that replies with the MAC address. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. XMG1915 Series User’s Guide...
MAC forwarding table or MAC filtering table from the MAC table using this screen. Click MONITOR > MAC Table in the navigation panel to display the following screen. Figure 66 MONITOR > MAC Table XMG1915 Series User’s Guide...
Page 105
This is the port where the above MAC address is forwarded. Type This shows whether the MAC address is Dynamic (learned by the Switch) or Static (manually entered in the SWITCHING > Static MAC Forwarding screen). XMG1915 Series User’s Guide...
(Section 13.2.1 on page 107) to view more detailed information on the Switch’s neighbor devices. 13.2 Neighbor Click MONITOR > Neighbor to see the following screen. Figure 67 MONITOR > Neighbor > Neighbor (example PoE model) XMG1915 Series User’s Guide...
When the maximum number of neighboring device records per Ethernet port is reached, new device records automatically overwrite existing offline device records, starting with the oldest existing offline device record first. Click MONITOR > Neighbor > Neighbor Details to see the following screen. XMG1915 Series User’s Guide...
Page 108
ZON utility. This shows the MAC address of the neighbor device. Firmware This shows the firmware version of the neighbor device. This field will show “–” for devices that do not support the ZON utility. XMG1915 Series User’s Guide...
Page 109
You can only reset Zyxel powered devices that support the ZON utility. Flush Click the Flush button on the port tab to remove information about neighbors learned on a specific ports. Flush All Click the Flush All button to remove information about neighbors learned on all ports. XMG1915 Series User’s Guide...
This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. XMG1915 Series User’s Guide...
MONITOR > Port Status to display the Port Status screen as shown next. You can also click the Port Status link in the Quick Link section of the DASHBOARD screen to see the following screen. Figure 70 MONITOR > Port Status > Port Status XMG1915 Series User’s Guide...
Click an index in the Port column in the MONITOR > Port Status > Port Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. XMG1915 Series User’s Guide...
Page 113
This field shows the number of received frames on this port. Errors This field shows the number of received errors on this port. Tx kB/s This field shows the number of kilobytes per second transmitted on this port. XMG1915 Series User’s Guide...
Page 114
This field shows the number of packets (including bad packets) received that were between 128 and 255 octets in length. 256 to 511 This field shows the number of packets (including bad packets) received that were between 256 and 511 octets in length. XMG1915 Series User’s Guide...
15.2.1 DDMI Details Use this screen to view the real-time SFP (Small Form Factor Pluggable) transceiver information and operating parameters on the SFP port. The parameters include, for example, transmitting and receiving power, and module temperature. XMG1915 Series User’s Guide...
Page 116
This displays the amount of power the SFP transceiver is transmitting. (dbm) RX Power This displays the amount of power the SFP transceiver is receiving from the fiber cable. (dbm) Current This displays the current status for each monitored DDMI parameter. XMG1915 Series User’s Guide...
This field shows the transmission speed of data received on this port in kilobytes per second. Rx Utilization% This field shows the percentage of actual received frames on this port as a percentage of the Link speed. XMG1915 Series User’s Guide...
This field displays the index number. Destination This field displays the destination IP routing domain. Gateway This field displays the IP address of the gateway device. Interface This field displays the IP address of the IPv4 Interface. XMG1915 Series User’s Guide...
Metric This field displays the cost of the route. Type This field displays the method used to learn the route. STATIC – added as a static entry. Connect – added as a local interface entry. XMG1915 Series User’s Guide...
ZyNOS F/W This displays the version number of the Switch 's current firmware including the date created. Version Ethernet This refers to the Ethernet MAC (Media Access Control) address of the Switch. Address XMG1915 Series User’s Guide...
Page 121
This shows the current temperature at this sensor. This field displays the maximum temperature measured at this sensor. This field displays the minimum temperature measured at this sensor. Threshold This field displays the upper temperature limit at this sensor. XMG1915 Series User’s Guide...
The summary table shows the time the log message was recorded and the reason the log message was generated. Click Refresh to update this screen. Click Clear to clear the whole log, regardless of what is currently displayed on the screen. Click Download to save the log to your computer. XMG1915 Series User’s Guide...
The following chapters introduces the configurations of the links under the SYSTEM navigation panel. Quick links to chapters: • Cloud Management • General Setup • Hardware Monitor Setup • Interface Setup • IP Setup • IPv6 • Logins • SNMP • Switch Setup • Syslog Setup • Time Range XMG1915 Series User’s Guide...
• The Nebula Control Center (NCC) Discovery feature is enabled. • It has been registered in the NCC. 20.2 Nebula Center Control Discovery Click SYSTEM > Cloud Management to display this screen. Figure 79 SYSTEM > Cloud Management XMG1915 Series User’s Guide...
Page 125
Follow the wizard in the Nebula Mobile app to scan the QR code to register the Switch on NCC and add the Switch into a site. If Nebula Control Center (NCC) Discovery is disabled, the Switch will NOT discover the NCC and remain in Standalone mode. XMG1915 Series User’s Guide...
Enter the geographic location of your Switch. You can use up to 128 printable ASCII characters; spaces are allowed. Contact Person's Enter the name of the person in charge of this Switch. You can use up to 32 printable ASCII Name characters; spaces are allowed. XMG1915 Series User’s Guide...
Page 127
UTC). So in the European Union you would select Last, Sunday, October and the last field depends on your time zone. In Germany for instance, you would select 2:00 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). XMG1915 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new interface or edit a selected one. Delete Click Delete to remove the selected interfaces. XMG1915 Series User’s Guide...
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
Note: You must configure a VLAN first. Each VLAN can have multiple management IP addresses, and you can log into the Switch through different management IP addresses simultaneously. 23.2 IP Status Click SYSTEM > IP Setup > IP Status to display the screen as shown. XMG1915 Series User’s Guide...
23.2.1 IP Status Details Use this screen to view IP status details. Click a number in the Index column in the SYSTEM > IP Setup > IP Status screen to display the screen as shown next. XMG1915 Series User’s Guide...
Page 133
This is the IP subnet mask of your Switch in dotted decimal notation for example 255.255.255.0. Lease Time This displays the length of time in seconds that this interface can use the current dynamic IP address from the DHCP server. XMG1915 Series User’s Guide...
Type the IP address of the default outgoing gateway in dotted decimal notation, for example Gateway 192.168.1.254. Domain Name Enter a domain name server IPv4 address in order to be able to use a domain name instead of Server 1/2 an IP address. XMG1915 Series User’s Guide...
Use this screen to add or edit IP interfaces. Click Add/Edit, or select an entry and click Add/Edit in the SYSTEM > IP Setup > IP Setup screen to display this screen. Figure 88 SYSTEM > IP Setup > IP Setup > Add/Edit XMG1915 Series User’s Guide...
124). Use this screen to enable communication between the Switch and NCC through the proxy server. Figure 89 Network Proxy Configuration Application As of this writing, this setting only allows communication between the Switch and the NCC. XMG1915 Series User’s Guide...
Page 137
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to your previous configuration. XMG1915 Series User’s Guide...
152) to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. 24.2 IPv6 Status Click SYSTEM > IPv6 > IPv6 Status in the navigation panel to display the IPv6 status screen as shown next. XMG1915 Series User’s Guide...
24.2.1 IPv6 Interface Status Details Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the SYSTEM > IPv6 > IPv6 Status screen. The following screen opens. XMG1915 Series User’s Guide...
Page 140
This field displays the Switch’s link-local IP address and prefix generated by the interface. It also Address shows whether the IP address is preferred, which means it is a valid address and can be used as a sender or receiver address. XMG1915 Series User’s Guide...
Click Restart to send a new DHCP request to the DHCPv6 server and update the IPv6 address and DHCPv6 Client DNS information for this interface. 24.3 IPv6 Global Setup Use this screen to configure the global IPv6 settings. Click SYSTEM > IPv6 > IPv6 Global Setup to display the screen as shown next. XMG1915 Series User’s Guide...
Table 53 SYSTEM > IPv6 > IPv6 Interface Setup LABEL DESCRIPTION Index This is the interface index number. Interface This is the name of the IPv6 interface you created. Active This field displays whether the IPv6 interface is activated or not. XMG1915 Series User’s Guide...
Use this screen to view and configure the interface’s link-local address and default gateway. Click SYSTEM > IPv6 > IPv6 Addressing > IPv6 Link-Local Address Setup to display the screen as shown next. Note: You should first create an IPv6 interface in the SYSTEM > Interface Setup screen. XMG1915 Series User’s Guide...
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
24.6.1 Add/Edit an IPv6 Global Address Use this screen to configure the interface’s IPv6 global address. Click Add/Edit, or select an entry and click Add/Edit in the SYSTEM > IPv6 Addressing > IPv6 Global Address Setup screen to display this screen. XMG1915 Series User’s Guide...
DESCRIPTION Index This is the interface index number. Interface This is the name of the IPv6 interface you created. DAD Attempts This field displays the number of consecutive neighbor solicitations the Switch sends for this interface. XMG1915 Series User’s Guide...
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
Use this screen to configure router discovery settings for each interface. Select an entry and click Edit in the SYSTEM > IPv6 > IPv6 Neighbor Discovery > IPv6 Router Discovery Setup screen to display the screen as shown next. XMG1915 Series User’s Guide...
24.9 IPv6 Prefix Setup Use this screen to configure the Switch’s IPv6 prefix list for each interface. Click SYSTEM > IPv6 > IPv6 Neighbor Discovery > IPv6 Prefix Setup to display the screen as shown next. XMG1915 Series User’s Guide...
Table 64 SYSTEM > IPv6 > IPv6 Neighbor Discovery > IPv6 Prefix Setup > Add/Edit LABEL DESCRIPTION Interface Select the IPv6 interface you want to configure. Prefix Set the IPv6 prefix that the Switch includes in router advertisements for this interface. XMG1915 Series User’s Guide...
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new entry or edit a selected one. Delete Click Delete to remove the selected entries. XMG1915 Series User’s Guide...
24.11 DHCPv6 Client Setup Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Click SYSTEM > IPv6 > DHCPv6 Client Setup to display the screen as shown next. XMG1915 Series User’s Guide...
Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Select an entry and click Edit in the SYSTEM > IPv6 > DHCPv6 Client Setup screen to display this screen. Figure 109 SYSTEM > IPv6 > DHCPv6 Client Setup > Edit XMG1915 Series User’s Guide...
Page 154
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
Note: The input string in any field of this screen should not contain [ ? ], [ | ], [ ' ], [ " ] or [ , ]. In the Password fields, [ space ] is also not allowed. XMG1915 Series User’s Guide...
Page 156
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
• Use the SNMP Trap Port screen (Section 26.5 on page 162) to enable/disable sending SNMP traps on a port. 26.2 Configure SNMP Use this screen to configure your SNMP settings. Click SYSTEM > SNMP to view the screen as shown. XMG1915 Series User’s Guide...
Page 158
Use this section to configure where to send SNMP traps from the Switch. Index This is the index of a trap destination. Version Specify the version of the SNMP trap messages. Enter the IP addresses of up to four managers to send your SNMP traps to. XMG1915 Series User’s Guide...
Use this screen to create SNMP users for authentication with managers using SNMP v3 and associate them to SNMP groups. An SNMP user is an SNMP manager. Click Add/Edit, or select an entry and click Add/Edit in the SYSTEM > SNMP > SNMP User screen to view the screen. XMG1915 Series User’s Guide...
Page 160
– Members of this group have read and write rights, meaning that the user can create and edit the MIBs on the Switch, except the user account and AAA configuration. read-only – Members of this group have read rights only, meaning the user can collect information from the Switch. XMG1915 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
Cancel Click Cancel to begin configuring this screen afresh. 26.6 Technical Reference This section provides technical background information on the topics discussed in this chapter. XMG1915 Series User’s Guide...
SNMP v3 and Security SNMP v3 enhances security for SNMP management. SNMP managers can be required to authenticate with agents before conducting SNMP management sessions. Security can be further enhanced by encrypting the SNMP messages sent from the managers. XMG1915 Series User’s Guide...
Page 164
The trap is sent when entries in the remote database have any updates. Link Layer Discovery Protocol (LLDP), defined as IEEE 802.1ab, enables LAN devices that support LLDP to exchange their configured settings. This helps eliminate configuration mismatch issues. XMG1915 Series User’s Guide...
Page 165
This trap is sent when the STP topology changes. rmon RmonRisingAlarm 1.3.6.1.2.1.16.0.1 This trap is sent when a variable goes over the RMON "rising" threshold. RmonFallingAlarm 1.3.6.1.2.1.16.0.2 This trap is sent when the variable falls below the RMON "falling" threshold. XMG1915 Series User’s Guide...
Click SYSTEM > Switch Setup in the navigation panel to display the screen as shown. The VLAN setup screens change depending on whether you choose 802.1Q or Port Based in the VLAN Type field in this screen. XMG1915 Series User’s Guide...
Page 167
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
The syslog feature sends logs to an external syslog server. Use this screen to configure the device’s system logging settings and configure a list of external syslog servers. Click SYSTEM > Syslog Setup in the navigation panel to display this screen. XMG1915 Series User’s Guide...
Page 169
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new entry or edit a selected one. Delete Click Delete to remove the selected entries. XMG1915 Series User’s Guide...
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
This field displays the descriptive name for this rule. This is for identification purpose only. You can enter up to 32 printable ASCII characters except [ ? ], [ | ], [ ' ], [ " ] or [ , ]. XMG1915 Series User’s Guide...
Alternatively, select Periodic to create a recurring schedule. Recurring schedules begin at a specific start time and end at a specific stop time on selected days of the week (Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, and Saturday). Recurring schedules are useful for defining the workday and off-work hours. XMG1915 Series User’s Guide...
Page 173
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
The following chapters introduces the configurations of the links under the PORT navigation panel. Quick links to chapters: • Green Ethernet • Link Aggregation • Link Layer Discovery Protocol (LLDP) • PoE Setup (for PoE models only) • Port Setup XMG1915 Series User’s Guide...
Click PORT > Green Ethernet in the navigation panel to display the screen as shown. Note: This feature is only available on copper ports. Check boxes of SFP ports are grayed out and cannot be selected. Note: EEE and Auto Power Down are NOT supported on an uplink port. XMG1915 Series User’s Guide...
Page 176
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that is, if an XMG1915 Series User’s Guide...
Page 178
Table 90 Link Aggregation Algorithm Types Limitation MODEL LINK AGGREGATION ALGORITHM TYPES (MAXIMUM) XMG1915 Series Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. XMG1915 Series User’s Guide...
Link Aggregator ID consists of the following: system priority, MAC address, key, port priority and port number. The ID displays only when there is a port belonging to this trunk group and LACP is also enabled for this group. XMG1915 Series User’s Guide...
LACP – if the ports are configured to join a trunk group through LACP. 32.3 Link Aggregation Setting Click PORT > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 32.1 on page 177 for more information on link aggregation. XMG1915 Series User’s Guide...
Page 181
This is the only screen you need to configure to enable static link aggregation. Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this to activate a trunk group. XMG1915 Series User’s Guide...
Click PORT > Link Aggregation > Link Aggregation Control Protocol to display the screen shown next. See Dynamic Link Aggregation on page 177 for more information on dynamic link aggregation. Note: Do NOT configure this screen unless you want to enable dynamic link aggregation. XMG1915 Series User’s Guide...
Page 183
The field identifies the link aggregation group, that is, one logical link containing multiple ports. LACP Active Select this option to enable LACP for a trunk. Use this section to configure LACP timeout on ports. Port This field displays the port number. XMG1915 Series User’s Guide...
– activate trunk group T1, select the traffic distribution algorithm used by this group and select the ports that should belong to this group as shown in the figure below. Click Apply when you are done. XMG1915 Series User’s Guide...
Page 185
Chapter 32 Link Aggregation Figure 127 Trunking Example – Configuration Screen Your trunk group 1 (T1) configuration is now complete. XMG1915 Series User’s Guide...
• Power via MDI TLV (optional, For PoE models only) • Link Aggregation TLV (optional) • Maximum Frame Size TLV (optional) The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. XMG1915 Series User’s Guide...
Since LLDPDU updates status and configuration information periodically, network managers may check the result of provision through remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. XMG1915 Series User’s Guide...
Discovery Protocol for Media Endpoint Devices) location parameters. 33.3 LLDP Local Status This screen displays a summary of LLDP status on this Switch. Click PORT > LLDP > LLDP > LLDP Local Status to display the screen as shown next. XMG1915 Series User’s Guide...
Page 189
Management Address Subtype – ipv4 or all-802 • Interface Number Subtype – unknown • Interface Number – 0 (not supported) • Object Identifier – 0 (not supported) LLDP Port Information This displays the local port information. XMG1915 Series User’s Guide...
Local Status and then, click a port number, for example 1 in the local port column to display the screen as shown next. Figure 131 PORT > LLDP > LLDP > LLDP Local Status > LLDP Local Port Status Details XMG1915 Series User’s Guide...
Page 191
• Extend Power via MDI PD • Inventory Management Network Policy This displays a network policy for the specified application. • Voice • Voice-Signaling • Guest-Voice • Guest-Voice-Signaling • Softphone-Voice • Video-Conferencing • Streaming-Video • Video-Signaling XMG1915 Series User’s Guide...
This displays a description for the port from which this LLDPDU was transmitted. System Name This displays the system name of the remote device. Management This displays the management address of the remote device. It could be the MAC address or Address IP address. XMG1915 Series User’s Guide...
Port Description – This displays the remote port description. System Name System Name – This displays the system name of the remote device. System System Description – This displays the system description of the remote device. Description TLV XMG1915 Series User’s Guide...
Page 194
Table 98 PORT > LLDP > LLDP > LLDP Remote Status > LLDP Remote Port Status Details (Dot1 and Dot3 TLV) LABEL DESCRIPTION Dot1 TLV Port VLAN ID Port VLAN ID – This displays the VLAN ID of this port on the remote device. XMG1915 Series User’s Guide...
Page 195
The Power Via MDI TLV allows network management to advertise and discover the MDI power support capabilities of the sending port on the remote device. • Port Class • MDI Supported • MDI Enabled • Pair Controllable • PSE Power Pairs • Power Class XMG1915 Series User’s Guide...
Page 196
• Extend Power via MDI PSE • Extend Power via MDI PD • Inventory Management Device Type LLDP-MED endpoint device classes: • Endpoint Class I • Endpoint Class II • Endpoint Class III • Network Connectivity XMG1915 Series User’s Guide...
• Serial Number • Asset ID 33.5 LLDP Setup Use this screen to configure global LLDP settings on the Switch. Click PORT > LLDP > LLDP > LLDP Setup to display the screen as shown next. XMG1915 Series User’s Guide...
Page 198
Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. XMG1915 Series User’s Guide...
Select the check boxes to enable or disable the sending of Management Address TLVs on Address the ports. Port Description Select the check boxes to enable or disable the sending of Port Description TLVs on the ports. XMG1915 Series User’s Guide...
Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. XMG1915 Series User’s Guide...
Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. XMG1915 Series User’s Guide...
Select the rules that you want to remove, then click Delete. 33.9.1 Add/Edit LLDP-MED Network Policy To access this screen, click the Add/Edit button or select an entry from the list and click the Add/Edit button. XMG1915 Series User’s Guide...
Cancel Click Cancel to not save the configuration you make and return to the last screen. 33.10 LLDP-MED Location Click PORT > LLDP > LLDP MED > LLDP-MED Location to display the screen as shown next. XMG1915 Series User’s Guide...
Delete Select the locations that you want to remove, then click Delete. 33.10.1 Add/Edit LLDP-MED Location To access this screen, click the Add/Edit button or select an entry from the list and click the Add/Edit button. XMG1915 Series User’s Guide...
Page 205
Geographical based coordinates includes latitude, longitude, altitude and datum. Civic Address includes Country, State, County, City, Street and other related information. Latitude Enter the latitude information. The value should be from 0º to 90º. • north • south XMG1915 Series User’s Guide...
Page 206
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
Note: The PoE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. To view the current amount of power that PDs are receiving from the Switch, click PORT > PoE Setup > PoE Status. XMG1915 Series User’s Guide...
Page 208
This field shows which ports can receive power from the Switch. • Disable – The PD connected to this port cannot get power supply. • Enable – The PD connected to this port can receive power. XMG1915 Series User’s Guide...
Use this screen to set the PoE power management mode, priority levels, power-up mode and the maximum amount of power for the connected PDs. Click the PoE Setup tab in the PORT > PoE Setup screen. The following screen opens. XMG1915 Series User’s Guide...
Page 210
Enter a number ranging from 1 to 99 to set the threshold. The Switch will generate a trap and/or Threshold (%) log when the actual PoE usage is higher than the specified threshold. Port This is the port index number. XMG1915 Series User’s Guide...
Page 211
Specify the maximum amount of power the PD could use from the Switch on this port. If you leave (mW) this field blank, the Switch refers to the standard or default maximum power for each class. Note: The setting you enter here will NOT take effect when the power-up mode is set to 802.3bt. XMG1915 Series User’s Guide...
This field displays the name of the schedule which is applied to the port. Profiles PoE is enabled at the specified time or date. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XMG1915 Series User’s Guide...
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XMG1915 Series User’s Guide...
Page 215
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
• The switch (not in loop state) will receive broadcast messages sent out from the switch in loop state. • The switch (not in loop state) will receive its own broadcast messages that it sends out as they loop back. It will then re-broadcast those messages again. XMG1915 Series User’s Guide...
Page 218
Switch. Figure 153 Loop Guard – Network Loop Note: After resolving the loop problem on your network you can re-activate the disabled port through the Web Configurator or through commands (See the CLI Reference Guide). XMG1915 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
Click SWITCHING > Mirroring > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 155 SWITCHING > Mirroring > Mirroring XMG1915 Series User’s Guide...
Page 221
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XMG1915 Series User’s Guide...
You can set the Switch to filter the multicast group join reports on a per-port basis by configuring an IGMP filtering profile and associating the profile to a port. XMG1915 Series User’s Guide...
This is the index number of the entry. This field displays the multicast VLAN ID. Port This field displays the port number that belongs to the multicast group. Multicast Group This field displays IP multicast group addresses. XMG1915 Series User’s Guide...
Otherwise, select No-Change to not replace the priority. Unknown Multicast Specify the action to perform when the Switch receives an unknown multicast frame. Select Frame Drop to discard the frames. Select Flooding to send the frames to all ports. XMG1915 Series User’s Guide...
Page 225
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to create a new entry or edit a selected one. Delete Click Delete to remove the selected entries. XMG1915 Series User’s Guide...
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
(manual) multicast entries. The Switch will either flood the multicast frames to all ports (default) or drop them. Figure 160 on page 229 shows such unknown multicast frames flooded to all ports. With static multicast forwarding, you can forward these multicasts to ports within a VLAN group. XMG1915 Series User’s Guide...
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new rule or edit a selected one. Delete Click Delete to remove the selected rules. XMG1915 Series User’s Guide...
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
ToS-enabled network device will not conflict with the DSCP mapping. The DSCP value determines the PHB (Per-Hop Behavior), that each packet gets as it is forwarded across the DiffServ network. Based on the marking rule different kinds of traffic can be marked for different XMG1915 Series User’s Guide...
Platinum traffic flow as they move across the DiffServ network. Figure 164 DiffServ Network 41.2 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the selected ports. Click SWITCHING > QoS > Diffserv to display the screen as shown. XMG1915 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
Round Robin Scheduling services queues on a rotating basis and is activated only when a port has more traffic than it can handle. A queue is given an amount of bandwidth irrespective of the incoming traffic XMG1915 Series User’s Guide...
Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XMG1915 Series User’s Guide...
Page 237
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
238) to configure the priority level-to-physical queue mapping. 43.2 Assign Priority Queue Use this screen to assign priority level to each queue. Click SWITCHING > QoS > Priority Queue to open this screen. Figure 168 SWITCHING > QoS > Priority Queue XMG1915 Series User’s Guide...
Page 239
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XMG1915 Series User’s Guide...
240) to limit the bandwidth for traffic going through the Switch. 44.2 Bandwidth Control Setup Click SWITCHING > QoS > Bandwidth Control in the navigation panel to bring up the screen as shown next. Figure 169 SWITCHING > QoS > Bandwidth Control XMG1915 Series User’s Guide...
Page 241
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XMG1915 Series User’s Guide...
In STP, a longer delay is required as the device that causes a topology change first notifies the root bridge that then notifies the network. Both RSTP and STP flush unwanted XMG1915 Series User’s Guide...
Page 243
STP Port States STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from XMG1915 Series User’s Guide...
This screen differs depending on which STP mode (RSTP or MSTP) you configure on the Switch. This screen is described in detail in the section that follows the configuration section for each STP mode. Use the XMG1915 Series User’s Guide...
AUTO PATH COST VALUE Up to 10 Mbps 2000000 Up to 100 Mbps 200000 Up to 1 Gbps 20000 Up to 2.5 Gbps 8000 Up to 5 Gbps 4000 Up to 10 Gbps 2000 More than 10 Gbps XMG1915 Series User’s Guide...
Page 246
Use the this screen to activate one of the STP modes on the Switch. Click SWITCHING > Spanning Tree Protocol > Spanning Tree Setup to display the screen as shown. Figure 171 SWITCHING > Spanning Tree Protocol > Spanning Tree Setup XMG1915 Series User’s Guide...
Click SWITCHING > Spanning Tree Protocol > Spanning Tree Protocol Status in the navigation panel to display the status screen as shown next. See Section 45.1 on page 242 more information on RSTP. Note: This screen is only available after you activate RSTP on the Switch. XMG1915 Series User’s Guide...
Page 248
BPDUs. • LEARNING – The port learns MAC addresses and processes BPDUs, but does NOT forward frames yet. • FORWARDING – The port is operating normally. It learns MAC addresses, processes BPDUs and forwards received frames. XMG1915 Series User’s Guide...
Use this screen to configure RSTP settings, see Section 45.1 on page 242 for more information on RSTP. Click SWITCHING > Spanning Tree Protocol > RSTP in the navigation panel to display the screen as shown. XMG1915 Series User’s Guide...
Page 250
LAN. If it is a root port, a new root port is selected from among the Switch ports attached to the network. The allowed range is 6 to 40 seconds. XMG1915 Series User’s Guide...
Click SWITCHING > Spanning Tree Protocol > Spanning Tree Protocol Status in the navigation panel to display the status screen as shown next. Note: This screen is only available after you activate MSTP on the Switch. XMG1915 Series User’s Guide...
Page 252
This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. Configuration This field displays the configuration name for this MST region. Name Revision Number This field displays the revision number for this MST region. XMG1915 Series User’s Guide...
Page 253
This field displays the path cost to the LAN segment to which the port is connected when the port is a designated port. Otherwise, it displays the path cost to the root bridge from the designated port for the LAN segment to which this port is connected. XMG1915 Series User’s Guide...
The allowed range is 4 to 30 seconds. As a general rule: Note: 2 * (Forward Delay 1) >= Max Age >= 2 * (Hello Time + 1) – XMG1915 Series User’s Guide...
Click Delete to remove the selected instances. 45.7.1 Add/Edit Multiple Spanning Tree Click Add/Edit, or select an entry and click Add/Edit in the SWITCHING > Spanning Tree Protocol > MSTP > Multiple Spanning Tree Protocol screen to display this screen. XMG1915 Series User’s Guide...
Page 256
Priority decides which port should be disabled when more than one port forms a loop in the Switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. XMG1915 Series User’s Guide...
With MSTP, VLANs 1 and 2 are mapped to different spanning trees in the network. Therefore traffic from the two VLANs travel on different paths. The following figure shows the network example using MSTP. Figure 179 MSTP Network Example XMG1915 Series User’s Guide...
CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. XMG1915 Series User’s Guide...
Page 260
Chapter 45 Spanning Tree Protocol Figure 181 MSTP and Legacy RSTP Network Example XMG1915 Series User’s Guide...
This field displays Discard source, Discard destination, or Discard both depending on what you configured above. Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. XMG1915 Series User’s Guide...
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
Static MAC address forwarding together with port security allow only computers in the MAC address table on a port to access the Switch. Click SWITCHING > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. Figure 184 SWITCHING > Static MAC Forwarding XMG1915 Series User’s Guide...
You can enter up to 32 printable ASCII characters except [ ? ], [ | ], [ ' ], [ " ] or [ , ]. MAC Address Enter the MAC address in valid MAC address format, that is, six hexadecimal character pairs. Note: Static MAC addresses do NOT age out. Enter the VLAN identification number. XMG1915 Series User’s Guide...
Page 265
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
Ethernet frame) and 2 bytes (16 Bits) of TCI (Tag Control Information, starts after the source address field of the Ethernet frame). The TCI field consists of three fields: User Priority, CFI (Canonical Format Indicator), and VLAN ID. XMG1915 Series User’s Guide...
Page 267
VLAN groups in the end devices (A and B). C, D and E automatically allow frames with VLAN group tags 1 and 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking ports. XMG1915 Series User’s Guide...
Page 268
• sent to a VLAN group as normal depending on its VLAN tag. • sent to a group whether it has a VLAN tag or not. • blocked from a VLAN group regardless of its VLAN tag. XMG1915 Series User’s Guide...
Static: added as a permanent entry. 48.3.1 VLAN Details Use this screen to view detailed port settings and status of the static VLAN group. Click an index number in the VLAN Status screen to display VLAN details. XMG1915 Series User’s Guide...
Table 145 SWITCHING > VLAN > VLAN Setup > Static VLAN LABEL DESCRIPTION This field displays the ID number of the VLAN group. Active This field indicates whether the VLAN settings are enabled or disabled. Name This field displays the descriptive name for this VLAN group. XMG1915 Series User’s Guide...
Enter the VLAN ID for this static entry; the valid range is between 1 and 4094. Note: Do NOT add a VLAN ID that has been used in the SWITCHING > VLAN > Voice VLAN Setup. Port The port number identifies the port you are configuring. XMG1915 Series User’s Guide...
Use this screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click SWITCHING > VLAN > VLAN Setup > VLAN Port Setup to display the screen as shown. Figure 192 SWITCHING > VLAN > VLAN Setup > VLAN Port Setup XMG1915 Series User’s Guide...
• a tagged voice packet when the incoming port and VLAN tag belongs to a voice VLAN. It then checks the source packet’s MAC address against an OUI list. If a match is found, the packet is considered as a voice packet. XMG1915 Series User’s Guide...
Page 274
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new entry or edit a selected one. Delete Click Delete to remove the selected entry. XMG1915 Series User’s Guide...
MAC-based VLAN and define a MAC to VLAN mapping table by entering a specified source MAC address in the MAC-based VLAN setup screen. You can also delete a MAC-based VLAN entry in the same screen. Click SWITCHING > VLAN > MAC Based VLAN Setup to see the following screen. XMG1915 Series User’s Guide...
Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. XMG1915 Series User’s Guide...
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the table heading row to select all entries. Add/Edit Click Add/Edit to add a new entry or edit a selected one. Delete Click Delete to remove the selected entry. XMG1915 Series User’s Guide...
Click Cancel to not save the configuration you make and return to the last screen. 48.9 Port-Based VLAN Setup Port-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. XMG1915 Series User’s Guide...
If VLAN members need to communicate directly with each other, then select All Connected. Select Port Isolated if you want to restrict users from communicating directly. Click Apply to save your settings. The following screen shows users on a port-based, all-connected VLAN configuration. XMG1915 Series User’s Guide...
Page 280
Chapter 48 VLAN Figure 199 SWITCHING > VLAN > Port Based VLAN Setup (All Connected) The following screen shows users on a port-based, port-isolated VLAN configuration. XMG1915 Series User’s Guide...
Page 281
(its outgoing port). CPU refers to the Switch management port. By default it forms a VLAN with all Ethernet ports. If it does not form a VLAN with a particular port then the Switch cannot be managed from that port. XMG1915 Series User’s Guide...
Page 282
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
H A P T E R NETWORKING The following chapters introduces the configurations of the links under the NETWORKING navigation panel. Quick links to chapters: • ARP Setup • DHCP • Static Route XMG1915 Series User’s Guide...
ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. 50.1.2.2 ARP Learning Mode The Switch supports three ARP learning modes: ARP-Reply, Gratuitous-ARP, and ARP-Request. XMG1915 Series User’s Guide...
Page 285
ARP to inform other devices in the same network to update their ARP table with the new mapping information. In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. XMG1915 Series User’s Guide...
ICMP reply. 50.2 ARP Learning Use this screen to configure each port’s ARP learning mode. Click NETWORKING > ARP Setup > ARP Learning in the navigation panel to display the screen as shown next. XMG1915 Series User’s Guide...
Use this screen to view and configure static ARP entries that will display in the MONITOR > ARP Table screen and will not age out. Click NETWORKING > ARP Setup > Static ARP to display the screen as shown. XMG1915 Series User’s Guide...
Use this screen to add/edit static ARP entries. Click Add/Edit, or select an entry and click Add/Edit in the NETWORKING > ARP Setup > Static ARP to display this screen. Figure 203 NETWORKING > ARP Setup > Static ARP > Add/Edit XMG1915 Series User’s Guide...
Page 289
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
DHCP services you want to offer the DHCP clients on your network. Choose the configuration screen based on the following criteria: • Smart Relay The Switch forwards all DHCP requests to the same DHCP server. – XMG1915 Series User’s Guide...
The Switch can be configured as a global DHCP relay. This means that the Switch forwards all DHCP requests from all domains to the same DHCP server. You can also configure the Switch to relay DHCP information based on the VLAN membership of the DHCP clients. XMG1915 Series User’s Guide...
(1 byte) (1 byte) The 1 in the first field identifies this as an Agent Circuit ID sub-option and two identifies this as an Agent Remote ID sub-option. The next field specifies the length of the field. XMG1915 Series User’s Guide...
Figure 206 NETWORKING > DHCP > DHCPv4 Relay > DHCP Option 82 Profile > Add/Edit Note: The string of any field in this screen should not contain [ ? ], [ | ], [ ' ], [ " ] or [ , ]. XMG1915 Series User’s Guide...
Click Cancel to not save the configuration you make and return to the last screen. 51.5 Configuring DHCPv4 Smart Relay Use this screen to configure global DHCPv4 relay. Click NETWORKING > DHCP > DHCPv4 Relay > DHCP Smart Relay to display the screen as shown. XMG1915 Series User’s Guide...
Use this screen to apply a different DHCP option 82 profile to certain ports on the Switch. To open this screen, Click Add/Edit, or select an entry and click Add/Edit in the Port section of the NETWORKING > DHCP > DHCPv4 Relay > DHCP Smart Relay screen. XMG1915 Series User’s Guide...
The follow figure shows a network example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains. XMG1915 Series User’s Guide...
Page 297
(such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. Click Apply after you finish the configuration. Figure 210 DHCP Relay Configuration Example XMG1915 Series User’s Guide...
Use this screen to add/edit your DHCP settings based on the VLAN domain of the DHCP clients. Click the Add/Edit button in the DHCP Relay VLAN Setting section of the NETWORKING > DHCP > DHCPv4 Relay > DHCP Relay VLAN Setting screen to access this screen. XMG1915 Series User’s Guide...
Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. Click the Add/Edit button in the Port section of the NETWORKING > DHCP > DHCPv4 Relay > DHCP Relay VLAN Setting screen to access this screen. XMG1915 Series User’s Guide...
VLAN. The system is set up to forward DHCP requests from the dormitory rooms (VLAN 1) to the DHCP server with an IP address of 192.168.1.100. Requests from the academic buildings (VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.100. XMG1915 Series User’s Guide...
Relay-Forward DHCPv6 messages. The remote-ID option carries a user-defined string, such as the system name. The interface-ID option provides slot number, port information and the VLAN ID to the DHCPv6 server. The remote-ID option (if any) is stripped from the Relay-Reply messages before the XMG1915 Series User’s Guide...
Use this screen to add/edit DHCPv6 relay settings for a specific VLAN on the Switch. Click Add/Edit, or select an entry and click Add/Edit in the NETWORKING > DHCP > DHCPv6 Relay screen to display this screen. Figure 217 NETWORKING > DHCP > DHCPv6 Relay > Add/Edit XMG1915 Series User’s Guide...
Page 303
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
This figure shows a Telnet session coming in from network N1. The Switch sends reply traffic to default gateway R1 which routes it back to the manager’s computer. The Switch needs a static route to tell it to use router R2 to send traffic to an SNMP trap server on network N2. XMG1915 Series User’s Guide...
This field displays the IP address of the gateway. The gateway is an immediate neighbor of your Address Switch that will forward the packet to the destination. Metric This field displays the cost of transmission for routing purposes. XMG1915 Series User’s Guide...
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
52.3.1 Add/Edit IPv6 Static Route Click Add/Edit, or select an entry and click Add/Edit in the NETWORKING > Static Routing > IPv6 Static Route to display this screen. Figure 223 NETWORKING > Static Routing > IPv6 Static Route > Add/Edit XMG1915 Series User’s Guide...
Page 308
Clear Click Clear to clear the fields to the factory defaults. Cancel Click Cancel to not save the configuration you make and return to the last screen. XMG1915 Series User’s Guide...
H A P T E R SECURITY The following chapters introduces the configurations of the links under the SECURITY navigation panel. Quick links to chapters: • • Access Control • Storm Control • Error-Disable • DHCP Snooping • Port Security XMG1915 Series User’s Guide...
Accounting is the process of recording what a user is doing. The Switch can use an external server to track when users log in, log out, execute commands and so on. Accounting can also record system related actions such as boot up and shut down times of the Switch. XMG1915 Series User’s Guide...
54.2 RADIUS Server Setup Use this screen to configure your RADIUS server settings. Click SECURITY > AAA > RADIUS Server Setup to view the screen as shown. Figure 225 SECURITY > AAA > RADIUS Server Setup XMG1915 Series User’s Guide...
Page 312
RADIUS accounting server and the Switch. This key is not sent over the network. This key must be the same on the external RADIUS accounting server and the Switch. XMG1915 Series User’s Guide...
54.3 AAA Setup Use this screen to configure authentication, authorization and accounting settings on the Switch. Click SECURITY > AAA > AAA Setup to view the screen as shown. Figure 226 SECURITY > AAA > AAA Setup XMG1915 Series User’s Guide...
Page 314
Mode This should show ‘-’ by default. Method RADIUS is the only method for recording System type of event. XMG1915 Series User’s Guide...
Note: Refer to the documentation that comes with your RADIUS server on how to configure VSAs for users authenticating through the RADIUS server. The following table describes the VSAs supported on the Switch. Note that these attributes only work when you enable authorization (see Section 54.3 on page 313). XMG1915 Series User’s Guide...
The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication. 54.4.3.1 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 54.4.4 Attributes Used for Accounting The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication. XMG1915 Series User’s Guide...
Page 317
Chapter 54 AAA 54.4.4.1 Attributes Used for Accounting System Events NAS-IP-Address NAS-Identifier Acct-Status-Type Acct-Session-ID – The format of Acct-Session-Id is date+time+8-digit sequential number, for example, 2007041917210300000001. (date: 2007/04/19, time: 17:21:03, serial number: 00000001) Acct-Delay-Time XMG1915 Series User’s Guide...
“trusted computers” for each service in the SECURITY > Access Control > Remote Management screen (see Section 55.3 on page 319 for more information). Click SECURITY > Access Control > Service Access Control to display the following screen. XMG1915 Series User’s Guide...
Use this screen to specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click SECURITY > Access Control > Remote Management to view the screen as shown next. XMG1915 Series User’s Guide...
Use this screen to encrypt all passwords configured in the Switch. This setting will affect how the password is shown (as plain text or encrypted text) in the configuration file saved in MAINTENANCE > Configuration > Save Configuration. XMG1915 Series User’s Guide...
Page 321
Note: The passwords will appear as encrypted text when Password Encryption is Active. Click SECURITY > Access Control > Account Security to view the screen as shown next. Figure 229 SECURITY > Access Control > Account Security XMG1915 Series User’s Guide...
Figure 230 SSH Communication Example 55.5.1.1 How SSH Works The following table summarizes how a secure connection is established between two remote hosts. XMG1915 Series User’s Guide...
Page 323
Blowfish). The SSH server is implemented on the Switch for remote management and file transfer on port 22. Only one SSH connection is allowed at a time. 55.5.1.3 Requirements for Using SSH You must install an SSH client program on a client computer (Windows or Linux operating system) that is XMG1915 Series User’s Guide...
If you have not changed the default HTTPS port on the Switch, then in your browser enter “https://Switch IP Address/” as the web site address where “Switch IP Address” is the IP address or domain name of the Switch you wish to access. XMG1915 Series User’s Guide...
Page 325
If that is the case, click I Understand the Risks and then the Add Exception... button. Figure 233 Security Alert (Mozilla Firefox) Confirm the HTTPS server URL matches. Click Confirm Security Exception to proceed to the Web Configurator login screen. Figure 234 Security Alert (Mozilla Firefox) XMG1915 Series User’s Guide...
After you accept the certificate and enter the login user name and password, the Switch main screen appears. The lock displayed in the bottom right of the browser status bar or next to the website address denotes a secure connection. Figure 236 Example: Lock Denoting a Secure Connection XMG1915 Series User’s Guide...
327) to limit the number of broadcast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the ports. 56.2 Storm Control Setup Click SECURITY > Storm Control in the navigation panel to display the screen as shown next. XMG1915 Series User’s Guide...
Page 328
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. XMG1915 Series User’s Guide...
• Use the Errdisable Recovery screen (Section 57.5 on page 333) to set the Switch to automatically undo an action after the error is gone. XMG1915 Series User’s Guide...
This field displays whether the control packets (ARP, BPDU, and/or IGMP) detecting are enabled or not. It also shows whether loop guard is enabled on the port. You can configure these settings under SECURITY > Errdisable > Errdisable Detect and SWITCHING > Loop Guard screen. XMG1915 Series User’s Guide...
Note: After you configure this screen, make sure you also enable error detection for the specific control packets in the SECURITY > Errdisable > Errdisable Detect screen. Figure 239 SECURITY > Errdisable > CPU Protection XMG1915 Series User’s Guide...
Changes in this row are copied to all the entries as soon as you make them. Active Select this option to have the Switch detect if the configured rate limit for a specific control packet is exceeded and take the action selected below. XMG1915 Series User’s Guide...
Select this check box to allow the Switch to wait for the specified time interval to activate a port or allow specific packets on a port, after the error was gone. Clear the check box to turn off this rule. Interval Enter the number of seconds (from 30 to 2592000) for the time interval. XMG1915 Series User’s Guide...
Page 334
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
With DHCP snooping, the Switch blocks all DHCP server packets (DHCP OFFER/ACK) coming from the untrusted ports (UT). The Switch only forwards the DHCP server packets from the trusted port (T). This assures that DHCP clients on your network only receive IP addresses assigned by the authorized DHCP server (A). XMG1915 Series User’s Guide...
82 profile to certain ports in a VLAN. 58.2 DHCP Snooping Status Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click SECURITY > DHCP Snooping > DHCP Snp. Status. XMG1915 Series User’s Guide...
Page 337
Last Succeeded This field displays the last time the Switch updated the DHCP snooping database Time successfully. Last Failed Time This field displays the last time the Switch updated the DHCP snooping database unsuccessfully. XMG1915 Series User’s Guide...
Page 338
MAC address and VLAN ID. Invalid Interfaces This field displays the number of bindings the Switch has ignored because the port number was a trusted interface or does not exist anymore. XMG1915 Series User’s Guide...
Enable the switch button to enable DHCP snooping on the Switch. You still have to enable DHCP snooping on specific VLAN and specify trusted ports. Note: If DHCP is enabled and there are no trusted ports, DHCP requests will not succeed. XMG1915 Series User’s Guide...
DHCP server. You can also specify the maximum number for DHCP packets that each port (trusted or untrusted) can receive each second. To open this screen, click SECURITY > DHCP Snooping > DHCP Snp. Port Setup. XMG1915 Series User’s Guide...
Page 341
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XMG1915 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XMG1915 Series User’s Guide...
Click Add/Edit, or select an entry and click Add/Edit in the SECURITY > DHCP Snooping > DHCP Snp. VLAN Port Setup screen to display this screen. Figure 248 SECURITY > DHCP Snooping > DHCP Snp. VLAN Port Setup > Add/Edit XMG1915 Series User’s Guide...
Untrusted ports are connected to subscribers. The Switch discards DHCP packets from untrusted ports in the following situations: • The packet is a DHCP server packet (for example, OFFER, ACK, or NACK). • The rate at which DHCP packets arrive is too high. XMG1915 Series User’s Guide...
Page 345
You can configure this setting for each source VLAN. This setting is independent of the DHCP relay settings. 58.7.1.4 Configuring DHCP Snooping Follow these steps to configure DHCP snooping on the Switch. Enable DHCP snooping on the Switch. Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. XMG1915 Series User’s Guide...
Page 346
Chapter 58 DHCP Snooping Configure trusted and untrusted ports, and specify the maximum number of DHCP packets that each port can receive per second. Configure static bindings. XMG1915 Series User’s Guide...
By default, MAC address learning is still enabled even though the port security is not activated. 59.3 Port Security Setup Click SECURITY > Port Security in the navigation panel to display the screen as shown. XMG1915 Series User’s Guide...
Page 348
Use this row only if you want to make some of the settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XMG1915 Series User’s Guide...
Page 349
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XMG1915 Series User’s Guide...
Section 55.5.2 on page 324 for more information about HTTPS. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. XMG1915 Series User’s Guide...
60.2.1 HTTPS Certificates Use this screen to view the HTTPS certificate details. Click a hyperlink in the Service column in the MAINTENANCE > Certificates screen to open the following screen. XMG1915 Series User’s Guide...
This section provides technical background information on the topics discussed in this chapter. 60.3.1 FTP Command Line This section shows some examples of uploading to or downloading files from the Switch using FTP commands. First, understand the filename conventions. XMG1915 Series User’s Guide...
60.3.3 FTP Command Line Procedure Launch the FTP client on your computer. Enter open, followed by a space and the IP address of your Switch. Press [ENTER] when prompted for a user name. XMG1915 Series User’s Guide...
• FTP service is disabled in the SECURITY > Access Control > Service Access Control screen. • The IP addresses in the SECURITY > Access Control > Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. XMG1915 Series User’s Guide...
• Use the Cluster Management Setup screen (Section 60.6 on page 356) to configure clustering management. 60.5 Cluster Management Status Use this screen to view the role of the Switch within the cluster and to access a cluster member Switch’s Web Configurator. XMG1915 Series User’s Guide...
Offline (the Switch is disconnected – Offline shows approximately 1.5 minutes after the link between cluster member and manager goes down) 60.6 Clustering Management Setup Use this screen to configure clustering management. Click MAINTENANCE > Cluster Management > Cluster Management Setup to display the next screen. XMG1915 Series User’s Guide...
Page 357
This is the cluster member switch’s System Name. Model This is the cluster member switch’s model name. Click the Add/Edit button to open the Add/Edit screen. Use this screen to configure a clustering candidate for the Switch. XMG1915 Series User’s Guide...
Index hyperlink from the list of members to go to that cluster member switch's Web Configurator home page. This cluster member Web Configurator home page and the home page that you would see if you accessed it directly are different. XMG1915 Series User’s Guide...
Page 359
297 bytes received in 0.00Seconds 297000.00Kbytes/sec. ftp> bin 200 Type I OK ftp> put 470ACAQ0.bin fw-00-a0-c5-01-23-46 200 Port command okay 150 Opening data connection for STOR fw-00-a0-c5-01-23-46 226 File received OK ftp: 262144 bytes sent in 0.63Seconds 415.44Kbytes/sec. ftp> XMG1915 Series User’s Guide...
Backing up your Switch configurations allows you to create various “snap shots” of your device from which you may restore at a later date. Use this screen to back up your current Switch configuration to a computer. XMG1915 Series User’s Guide...
All unsaved changes are erased after you reboot the Switch. 60.12 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click MAINTENANCE > Configuration > Configure Clone to open the following screen. XMG1915 Series User’s Guide...
Page 363
SWITCHING Select which switching features (you configured in the SWITCHING menus) should be copied to the destination ports. Otherwise, select the SWITCHING check box in the table heading row to select all features for a category. XMG1915 Series User’s Guide...
The following table describes the labels in this screen. Table 204 MAINTENANCE > Diagnostic LABEL DESCRIPTION Ping Test IPv4 Select this option if you want to ping an IPv4 address. Otherwise, select – to send ping requests to all VLANs on the Switch. XMG1915 Series User’s Guide...
Switch will upgrade the firmware immediately. If the firmware does not need to be upgraded, but there is newer firmware available for the Switch, then it will be upgraded according to the firmware upgrade schedule for the Switch on the NCC. XMG1915 Series User’s Guide...
Page 366
Click the Config Boot Image drop-down list box to select the boot image (Firmware1 or Firmware2) you want the Switch to use when rebooting, click Apply. Restart the Switch (manually or using the MAINTENANCE > Reboot System screen) to apply the firmware image you selected. XMG1915 Series User’s Guide...
Click MAINTENANCE > Reboot System to view the screen as shown next. Figure 268 MAINTENANCE > Reboot System Click the Config 1, Config 2, Factory Default, or Custom Default button to reboot and load that configuration file. The confirmation screen displays. XMG1915 Series User’s Guide...
Mbuf (Memory Buffer) log and crash reports for issue analysis by customer support should you have difficulty with your Switch. Click MAINTENANCE > Tech-Support to see the following screen. Figure 270 MAINTENANCE > Tech-Support XMG1915 Series User’s Guide...
Switch models. This report is stored in flash memory. 60.16.1 Tech-Support Download When you click Download to save your current Switch configuration to a computer, the following screen appears. When the log report has downloaded successfully, click Back to return to the previous screen. XMG1915 Series User’s Guide...
Make sure you understand the normal behavior of the LED. See Section 3.3 on page Check the hardware connections. See Section 3.1 on page Inspect your cables for damage. Contact the vendor to replace any damaged cables. If the problem continues, contact the vendor. XMG1915 Series User’s Guide...
Note: This requires your computer to be directly connected to the Switch. Make sure your computer is able to connect to a DNS server through the Switch. If this does not work, you have to reset the device to its factory defaults. See Section 4.8 on page XMG1915 Series User’s Guide...
Page 374
SECURITY > Access Control > Remote Management screen for telnet, HTTP and SSH (see Section 55.3 on page 319). Computers not belonging to the secured client set cannot get permission to access the Switch. XMG1915 Series User’s Guide...
PORT > PoE Setup > PoE Setup. Use the correct type of Ethernet cable for the corresponding PoE standard you are using. Make sure the Active check box for the port supplying PoE power to PDs is enabled. XMG1915 Series User’s Guide...
LEDs on page 47 for more information on LED behavior. This means the Switch is operating in standalone mode. Nebula Control Center Discovery is disabled in SYSTEM > Cloud Management > Nebula Control Center Discovery in the Web Configurator. XMG1915 Series User’s Guide...
• Date that you received your device. • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications (Taiwan) Co., Ltd. • https://www.zyxel.com Asia China • Zyxel Communications Corporation–China Office •...
Page 379
Appendix A Customer Support • https://www.zyxel.com/bg/bg Czech Republic • Zyxel Communications Czech s.r.o. • https://www.zyxel.com/cz/cs Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da Finland • Zyxel Communications • https://www.zyxel.com/fi/fi France • Zyxel France • https://www.zyxel.com/fr/fr Germany • Zyxel Deutschland GmbH. • https://www.zyxel.com/de/de Hungary •...
Page 380
• Zyxel Communications A/S • https://www.zyxel.com/se/sv Switzerland • Studerus AG • https://www.zyxel.com/ch/de-ch • https://www.zyxel.com/fr/fr Turkey • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en-gb Ukraine • Zyxel Ukraine • https://www.zyxel.com/ua/uk-ua South America Argentina • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co Brazil •...
Page 381
Ecuador • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co South America • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co Middle East Israel • Zyxel Communications Corp. • https://il.zyxel.com North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en-us XMG1915 Series User’s Guide...
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by email. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol – a client or server protocol for the world wide web. XMG1915 Series User’s Guide...
Page 383
Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one email server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). XMG1915 Series User’s Guide...
Page 384
Its primary function is to allow users to log into remote host systems. TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. XMG1915 Series User’s Guide...
54 bits 64 bits Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. XMG1915 Series User’s Guide...
Page 386
The following table describes the multicast addresses which are reserved and cannot be assigned to a multicast group. Table 210 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 XMG1915 Series User’s Guide...
Page 387
IA_NA were obtained) a Renew message. If the time T2 is reached and the server does not respond, the client sends a Rebind message to any available server (S2). For an IA_TA, the XMG1915 Series User’s Guide...
Page 388
(from the host) with a neighbor advertisement message. • Neighbor advertisement: A response from a node to announce its link-layer address. • Router solicitation: A request from a host to locate a router that can act as the default router and XMG1915 Series User’s Guide...
Page 389
Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. XMG1915 Series User’s Guide...
Page 391
On the left side of the Network & Internet, select Ethernet. Then select the Ethernet network you are connected to. Under IP assignment, select Edit. Under Edit IP settings, select Automatic (DHCP) or Manual. Then click Save. XMG1915 Series User’s Guide...
Page 392
• When you select Automatic (DHCP), the IP address settings and DNS server address setting are set automatically by your router. • When you select Manual, you can manually set your IP address settings and DNS server address. Now your computer can obtain an IPv6 address from a DHCPv6 server. XMG1915 Series User’s Guide...
Regulatory Notice and Statement United States of America The following information applies if you use the product within USA area. US Importer: Zyxel Communications, Inc, 1130 North Miller Street Anaheim, CA92806-2001, https://www.zyxel.com/us/en/ Federal Communications Commission (FCC) EMC Statement • This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference.
Page 394
Do not put the device in a place that is humid, dusty or has extreme temperatures as these conditions may harm your device. • Please refer to the device back label, datasheet, box specifications or catalog information for the power rating of the device and operating temperature. XMG1915 Series User’s Guide...
Page 395
Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. XMG1915 Series User’s Guide...
Page 396
Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. XMG1915 Series User’s Guide...
Page 397
Register your product online at www.zyxel.com to receive email notices of firmware upgrades and related information. Trademarks The trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners. XMG1915 Series User’s Guide...
Bandwidth Control screen All connected basic setup tutorial Setting Wizard binding table applications build backbone BPDUs bridging fiber uplink Bridge Protocol Data Units (BPDUs) IEEE 802.1Q VLAN bridging application XMG1915 Series User’s Guide...
Page 399
DHCP server Config 1 block Config 2 DHCP snooping 83, 335, 344 configure configuration DHCP relay option 82 back up trusted ports change running config untrusted ports saving DHCP snooping database configuration file backup DHCP Status screen XMG1915 Series User’s Guide...
Page 400
Dynamic Host Configuration Protocol for IPv6 file names (DHCPv6) filtering dynamic link aggregation rules filtering database, MAC table Filtering screen firmware upgrade 359, 366 egress port ZyNOS egress rate Firmware Upgrade screen electrical inspection authority XMG1915 Series User’s Guide...
Page 401
129, 130 Internet Protocol version 6, see IPv6 configuration hardware installation routing domain status hardware monitor IP address hardware overview Switch management hello time IP Setup screen hops IP Status Detail screen HTTPS IP subnet mask certificates XMG1915 Series User’s Guide...
Page 403
IP address status management mode management port MTU (Multi-Tenant Unit) managing the Switch multicast cluster management 802.1 priority good habits IP addresses setup using FTP, see FTP using SNMP multicast IP address Web Configurator multicast MAC address XMG1915 Series User’s Guide...
Page 404
Wizard port utilization display write down port utilization password change Port VID (PVID) through Password / SNMP link port VLAN ID, see PVID password encryption port VLAN trunking activate XMG1915 Series User’s Guide...
Page 405
RSTP Quality of Service configuration queue weight rubber feet queuing 235, 236 attach running configuration erase queuing method 235, 237 reset Quick Start Guide steps for registering the Switch safety precautions using the Switch XMG1915 Series User’s Guide...
Page 406
3 and security status 244, 247 versions supported terminology SNMP agent vs. loop guard enable through Wizard STP Path Cost SNMP traps straight-through Ethernet cable supported 164, 165 subnet masking SNMP version select Switch XMG1915 Series User’s Guide...
Page 407
IGMP snooping removal creation 78, 87 traps 266, 267 destination ingress filtering troubleshooting introduction 166, 266, 267 number of VLANs trunk group port number Trunk Tagged port port settings XMG1915 Series User’s Guide...
Page 408
274, 275 voltage range port wall mounting wall-mount warranty note Web browser pop-up window 50, 374 Web Configurator getting help home login logout navigating components navigation panel online help usage prerequisite weight WRR (Weighted Round Robin Scheduling) XMG1915 Series User’s Guide...