Page 1 Dimension GS-3012F Gigabit Ethernet Switch Version 3.60 (LR.0) 5/2005 User’s Guide...
Page 2 Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patents rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice.
Page 3: Zyxel Limited Warranty
Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
Page 4: Interference Statements And Warnings
Certifications Go to www.zyxel.com Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. Select the certification you wish to view from this page. Registration Register your product online for free future product updates and information at www.zyxel.com...
Page 6: Customer Support
GS-3012F User’s Guide Customer Support If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation offices worldwide, in one of the following ways: Contacting Customer Support When you contact your customer support representative, have the following information ready: ♦...
Page 7: Table Of Contents
Customer Support ..............................vi List of Figures ................................. xiii List of Tables................................xvii Preface ................................... xix Part I....................................I Chapter 1 Getting to Know the GS-3012F ..................... 1-1 Introduction............................1-1 Features ..............................1-1 Applications ............................1-3 Part II.................................... II Chapter 2 Hardware Installation........................
Page 8 GS-3012F User’s Guide Chapter 6 Basic Setting..........................6-1 Introducing the Basic Setting Screens....................6-1 System Information..........................6-1 General Setup............................6-3 Introduction to VLANs..........................6-5 IGMP Snooping ............................. 6-5 Switch Setup Screen ..........................6-5 IP Setup ..............................6-8 Port Setup............................6-10 Part IV ..................................IV...
Page 9 GS-3012F User’s Guide 13.1 Introduction to Port Mirroring....................... 13-1 13.2 Port Mirroring Configuration ........................ 13-1 Chapter 14 Link Aggregation.......................... 14-1 14.1 Introduction to Link Aggregation......................14-1 14.2 Link Aggregation Protocol Status ......................14-2 14.3 Link Aggregation Setup ........................14-3 Chapter 15 Port Authentication ........................
Page 10 GS-3012F User’s Guide 20.2 Configuring Policy Rules ........................20-1 20.3 Viewing and Editing Policy Configuration .................... 20-4 20.4 Policy Example ............................ 20-5 Chapter 21 DHCP Relay..........................21-1 21.1 Overview.............................. 21-1 21.2 DHCP Relay Configuration........................21-1 Part VI ..................................VI Chapter 22 Routing Protocol ..........................
Page 11 GS-3012F User’s Guide 28.2 Accessing the CLI..........................28-1 28.3 The Login Screen ..........................28-2 28.4 Command Syntax Conventions......................28-3 28.5 Getting Help............................28-3 28.6 Command Modes ..........................28-5 28.7 Using Command History ........................28-5 28.8 Saving Your Configuration ........................28-5 28.9...
Page 13: List Of Figures
Figure 3-4 Opening the Transceiver’s Latch Example ....................3-4 Figure 3-5 Transceiver Removal Example ........................ 3-4 Figure 3-6 GS-3012F Rear Panel: AC Model......................3-5 Figure 3-7 GS-3012F Rear Panel: DC Model ......................3-5 Figure 3-8 Front Panel LEDs............................. 3-6 Figure 4-1 Web Configurator: login ........................... 4-1 Figure 4-2 Web Configurator Home Screen (Status) ....................
Page 14 GS-3012F User’s Guide Figure 11-1 Bandwidth Control ..........................11-1 Figure 12-1 Broadcast Storm Control........................12-1 Figure 13-1 Mirroring ............................... 13-1 Figure 14-1 Aggregation ID ............................. 14-2 Figure 14-2 Link Aggregation: Link Aggregation Protocol Status ................14-2 Figure 14-3 Link Aggregation: Configuration......................14-4 Figure 15-1 RADIUS Server ............................
Page 15 GS-3012F User’s Guide Figure 25-2 Cluster Management Status ........................ 25-2 Figure 25-3 Cluster Member Web Configuration Screen ..................25-3 Figure 25-4 Example: Uploading Firmware to a Cluster Member Switch ............... 25-4 Figure 25-5 Configuring Cluster Management ......................25-5 Figure 26-1 MAC Table Flowchart........................... 26-1 Figure 26-2 MAC Table ............................
Page 16 GS-3012F User’s Guide Figure 29-31 egress set Command Example...................... 29-15 Figure 29-32 qos priority Command Example....................... 29-16 Figure 29-33 name Command Example ....................... 29-16 Figure 29-34 speed-duplex Command Example....................29-17 Figure 30-1 Tagged VLAN Configuration and Activation Example................30-2 Figure 30-2 CPU VLAN Configuration and Activation Example ................30-2 Figure 30-3 GARP STATUS Command Example....................
Page 17 GS-3012F User’s Guide List of Tables Table 3-1 GS-3012F: Front Panel ..........................3-1 Table 3-2 Front Panel LED Descriptions ........................3-6 Table 4-1 Navigation Panel Sub-links Overview ....................... 4-2 Table 4-2 Web Configurator Screen Sub-links Details ....................4-3 Table 4-3 Navigation Panel Sub-link Descriptions ....................4-4 Table 5-1 Status.................................
Page 18 Table 23-1 Filename Conventions ........................... 23-4 Table 23-2 General Commands for GUI-based FTP Clients ................... 23-5 Table 24-1 Diagnostic .............................. 24-1 Table 25-1 ZyXEL Clustering Management Specifications..................25-1 Table 25-2 Cluster Management Status ........................25-2 Table 25-3 FTP Upload to Cluster member Example....................25-4 Table 25-4 Configuring Cluster Management......................
Page 19: Preface
About the GS-3012F There are two GS-3012F models. The GS-3012F DC model requires DC power supply input of -48 VDC to -60 VDC, 1.2A Max. The GS-3012F AC model requires 100~240VAC/1.5A power. All figures in this guide display the GS-3012F AC model unless specifically noted otherwise.
Page 20: Related Documentation
The online HTML help shows you how to use the web configurator to configure individual screens. More background information can be found in this UG. ZyXEL Web Site The ZyXEL download library at www.zyxel.com contains additional support documentation as well as an online glossary of networking terms. User Guide Feedback Help us help you.
Page 21: Part I
Features and Applications Part I Features and Applications This part acquaints you with the features and applications of the GS-3012F.
Page 23: Getting To Know The Gs-3012F
1.2.1 Hardware Features Power The GS-3012F DC model requires DC power supply input of -48 VDC to -60 VDC, 1.2A Max. The GS-3012F AC model requires 100~240VAC/1.5A power. 12 Mini GBIC Slots These are slots for mini GBIC (Gigabit Interface Converter) transceivers. These allow the GS-3012F to connect to another WAN switch or daisy-chain to other switches.
Page 24: Firmware Features
GS-3012F User’s Guide One Management Port Use the RJ-45 management port for local switch management only. Fans The fans cool the GS-3012F sufficiently to allow reliable operation of the switch in even poorly ventilated rooms or basements. 1.2.2 Firmware Features...
Page 25: Applications
The GS-3012F supports rate limiting in 1Mbps increments allowing you to create different service plans The GS-3012F supports IGMP snooping enabling group multicast traffic to be only forwarded to ports that are members of that group; thus allowing you to significantly reduce multicast traffic passing through your switch.
Page 26: Figure 1-1 Backbone Application
You can provide a super- fast uplink connection by installing the transceiver(s) in the mini GBIC slots on the GS-3012F. Moreover, the switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location.
Page 27: Figure 1-2 Bridging Application
Ethernet cables and adapter cards, restructuring your network and complex maintenance. The GS-3012F can provide the same bandwidth as FDDI and ATM at much lower cost while still being able to use existing adapters and switches. Moreover, the current LAN structure can be retained as all ports can freely communicate with each other.
Page 28: Figure 1-3 High Performance Switched Workgroup Application
Ports in the same VLAN group share the same broadcast domain thus increase network performance through reduced broadcast traffic. VLAN groups can be modified at any time by adding, moving or changing ports without any re-cabling. Getting to Know the GS-3012F...
Page 29: Figure 1-4 Vlan Workgroup Application
Shared resources such as a server can be used by all ports in the same VLAN as the server, as shown in the following example. In this example, only ports that need access to the server need belong to VLAN 3 while they can belong to other VLAN groups too. Getting to Know the GS-3012F...
Page 30: Figure 1-5 Shared Server Using Vlan Example
GS-3012F User’s Guide Figure 1-5 Shared Server Using VLAN Example Getting to Know the GS-3012F...
Page 31: Hardware Installation And Connections
Hardware Installation and Connections Part II Hardware Installation and Connections This part acquaints you with installation scenarios of the GS-3012F, instructs you on how to make the hardware connections and explains the front panel LEDs.
Page 33: Chapter 2 Hardware Installation
GS-3012F User’s Guide Chapter 2 Hardware Installation This chapter shows two switch installation scenarios. 2.1 Installation Scenarios The switch can be placed on a desktop or rack-mounted on a standard EIA rack. Use the rubber feet in a desktop installation and the brackets in a rack-mounted installation.
Page 34: Figure 2-2 Attaching Mounting Brackets And Screws
GS-3012F User’s Guide 2.1.2 Rack-Mounted Installation The switch can be mounted on an EIA standard size, 19-inch rack or in a wiring closet with other equipment. Follow the steps below to mount your switch on a standard EIA rack using a rack-mounting kit.
Page 35: Figure 2-3 Mounting The Es To An Eia Standard 19-Inch Rack
GS-3012F User’s Guide Figure 2-3 Mounting the ES to an EIA standard 19-inch rack Hardware Installation...
Page 37: Chapter 3 Hardware Connections
Only a qualified technician should service or disassemble this device. 3.2 Front Panel The following figure shows the front panel of the GS-3012F. The front panel contains the switch LEDs, 12 mini GBIC ports, four RJ-45 Gigabit ports, and a console and management port for local management.
Page 38: Gigabit Ports
No parity, 8 data bits, 1 stop bit No flow control Connect the male 9-pin end of the console cable to the console port of the GS-3012F switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer.
Page 39: Figure 3-2 Transceiver Installation Example
GS-3012F User’s Guide To avoid possible eye injury, do not look into an operating fiber-optic module’s connectors. Type: SFP connection interface Connection speed: 1 Gigabit per second (Gbps) Transceiver Installation Use the following steps to install a mini GBIC transceiver (SFP module).
Page 40: Figure 3-4 Opening The Transceiver's Latch Example
GS-3012F User’s Guide Transceiver Removal Use the following steps to remove a mini GBIC transceiver (SFP module). Open the transceiver’s latch (latch styles vary). Pull the transceiver out of the slot. Figure 3-4 Opening the Transceiver’s Latch Example Figure 3-5 Transceiver Removal Example 3.2.4...
Page 41: Rear Panel
Make sure you are using the correct power source as shown on the panel. To connect the power to the GS-3012F AC unit, insert the female end of power cord to the power receptacle on the rear panel. Connect the other end of the supplied power cord to a 100~240VAC/1.5A power outlet. Make sure that no objects obstruct the airflow of the fans (located on the side of the unit).
Page 42: Figure 3-8 Front Panel Leds
GS-3012F User’s Guide Figure 3-8 Front Panel LEDs The following table describes the LEDs on the front panel. Table 3-2 Front Panel LED Descriptions COLOR STATUS DESCRIPTION Green Blinking The system is receiving power from the backup power supply. The backup power supply is connected and active.
Page 43: Configuring The Gs-3012F
The port is connected at 100Mbps. The port is not connected at 100Mbps or to an Ethernet device. 3.5 Configuring the GS-3012F You may use the embedded web configurator or command line interface to configure the switch. If you’re using the web configurator, you need Internet Explorer 5.5 and later or Netscape Navigator 6 and later.
Page 45: Getting Started
Getting Started Part III Getting Started This part introduces you to the web configurator, describes the Status and Port Details screens and shows you how to configure the Basic Setting screens.
Page 47: Introducing The Web Configurator
GS-3012F User’s Guide Chapter 4 Introducing the Web Configurator This section introduces the configuration and functions of the web configurator. 4.1 Introduction The embedded web configurator allows you to manage the switch from anywhere through a standard browser such as Microsoft Internet Explorer or Netscape Navigator.
Page 48: Figure 4-2 Web Configurator Home Screen (Status)
GS-3012F User’s Guide Click Status to view current device statistics. Click here for help on Navigation Panel. configuring a Click on a tab to Click Logout to exit screen. display related links. the web configurator. Figure 4-2 Web Configurator Home Screen (Status) In the navigation panel, click a main link to reveal a list of submenu links.
Page 49: Table 4-2 Web Configurator Screen Sub-Links Details
GS-3012F User’s Guide The following table lists the various web configurator screens within the sub-links. Table 4-2 Web Configurator Screen Sub-links Details BASIC SETTING ADVANCED ROUTING PROTOCOL MANAGEMENT APPLICATIONS System Info VLAN Status Static Routing Maintenance General Setup VLAN Port Setting...
Page 50: Table 4-3 Navigation Panel Sub-Link Descriptions
GS-3012F User’s Guide Table 4-2 Web Configurator Screen Sub-links Details BASIC SETTING ADVANCED ROUTING PROTOCOL MANAGEMENT APPLICATIONS 802.1x Port Security Access Control SNMP Logins Service Access Control Remote Management Queuing Method Classifier Policy Rule DHCP Relay The following table summarizes these sub-links in the navigation panel.
Page 51: Change Your Password
GS-3012F User’s Guide Table 4-3 Navigation Panel Sub-link Descriptions LABEL DESCRIPTION Link Aggregation This link takes you to a screen where you can logically trunk physical links to form one logical, higher-bandwidth link. Port Authentication This link takes you to a screen where you can configure RADIUS (Remote Authentication Dial-In User Service), a protocol for user authentication that allows you to use an external server to validate an unlimited number of users.
Page 52: Switch Lockout
GS-3012F User’s Guide Figure 4-3 Web Configurator: Change Password at Login 4.4 Switch Lockout You are locked out from managing the switch if another administrator is currently logged in. You must wait until he/she has logged out before you can log in.
Page 53: Figure 4-4 Resetting The Switch: Via Console Port
GS-3012F User’s Guide be reset to the default of 9600bps with 8 data bit, no parity, one stop bit and flow control set to none. The password will also be reset to “1234” and the IP address to 192.168.1.1. To upload the configuration file, do the following: Connect to the console port using a computer with terminal emulation software.
Page 54 GS-3012F User’s Guide 4.5.2 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. Introducing the Web Configurator...
Page 55: System Status And Port Details
GS-3012F User’s Guide Chapter 5 System Status and Port Details This chapter describes the system status (web configurator home page) and port details screens. 5.1 About System Statistics and Information The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details.
Page 56: Port Details
GS-3012F User’s Guide Table 5-1 Status LABEL DESCRIPTION Port This identifies the Gigabit port. Click a port number to display the Port Details screen (refer to Section 5.2.1). Link This field displays the speed (either 10M for 10Mbps, 100M for 100Mbps or 1000M for 1000Mbps) and the duplex (F for full duplex or H for half duplex).
Page 57: Figure 5-2 Status: Port Details
GS-3012F User’s Guide Figure 5-2 Status: Port Details The following table describes the labels in this screen. Table 5-2 Status: Port Details LABEL DESCRIPTION Port Info Port NO. This field identifies the Gigabit port described in this screen. Link This field shows whether the port connection is down, and the speed/duplex mode.
Page 58 GS-3012F User’s Guide Table 5-2 Status: Port Details LABEL DESCRIPTION Tx KB/s This field shows the number kilobytes per second transmitted on this port. Rx KB/s This field shows the number of kilobytes per second received on this port. Up Time This field shows the total amount of time the connection has been up.
Page 59 GS-3012F User’s Guide Table 5-2 Status: Port Details LABEL DESCRIPTION Runt This field shows the number of frames received that were too short (shorter than 64 octets), including the ones with CRC errors. Distribution This field shows the distribution of good packets (unicast, multicast and broadcast) received.
Page 61: Chapter 6 Basic Setting
GS-3012F User’s Guide Chapter 6 Basic Setting This chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup and Port Setup screens. 6.1 Introducing the Basic Setting Screens The System Info screen displays general switch information (such as firmware version number) and hardware polling information (such as fan speeds).
Page 62: Table 6-1 System Info
GS-3012F User’s Guide The following table describes the labels in this screen. Table 6-1 System Info LABEL DESCRIPTION System Name This field displays the switch 's model name. ZyNOS F/W This field displays the version number of the switch 's current firmware including the date Version created.
Page 63: General Setup
GS-3012F User’s Guide Table 6-1 System Info LABEL DESCRIPTION Threshold This field displays the minimum voltage at which the switch should work. Status Normal indicates that the voltage is within an acceptable operating range at this point; otherwise Error is displayed.
Page 64 GS-3012F User’s Guide Table 6-2 General Setup LABEL DESCRIPTION Location Enter the geographic location (up to 32 characters) of your switch. Contact Person's Enter the name (up to 32 characters) of the person in charge of this switch. Name Login Precedence Configure the local user accounts in the Access Control Logins screen.
Page 65: Introduction To Vlans
GS-3012F User’s Guide Table 6-2 General Setup LABEL DESCRIPTION Cancel Click Cancel to start configuring the screen again. 6.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group. With VLAN, a device cannot directly talk to or hear from devices that are not in the same group(s);...
Page 66: Figure 6-3 Switch Setup
GS-3012F User’s Guide Figure 6-3 Switch Setup The following table describes the labels in this screen. Table 6-3 Switch Setup LABEL DESCRIPTION EXAMPLE VLAN Type Choose 802.1Q or Port Based from the drop-down list box. The VLAN Setup 802.1Q screen changes depending on whether you choose 802.1Q VLAN Type or Port Based VLAN Type in this screen.
Page 67 GS-3012F User’s Guide Table 6-3 Switch Setup LABEL DESCRIPTION EXAMPLE GARP Timer: Switches join VLANs by making a declaration. A declaration is made by issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message terminates all registrations.
Page 68: Ip Setup
GS-3012F User’s Guide 6.7 IP Setup Use the IP Setup screen to configure the switch IP address, default gateway device, the default domain name server and the management VLAN ID. The default gateway specifies the IP address of the default gateway (next hop) for outgoing traffic.
Page 69 GS-3012F User’s Guide Table 6-4 IP Setup LABEL DESCRIPTION Default Select which traffic flow (In-Band or Out-of-band) the switch use to send packets with an unknown Management source or originate from the switch itself (such as SNMP traps). Select Out-of-band to have the switch send the packets to the out-of-band management port. This means that device(s) connected to the other port(s) do not receive these packets.
Page 70: Port Setup
GS-3012F User’s Guide Table 6-4 IP Setup LABEL DESCRIPTION IP Subnet Enter the IP subnet mask in dotted decimal notation. Mask Type the VLAN group identification number. Default Enter the IP address of the default outgoing gateway in dotted decimal notation.
Page 71: Figure 6-5 Port Setup
GS-3012F User’s Guide Figure 6-5 Port Setup The following table describes the fields in this screen. Table 6-5 Port Setup LABEL DESCRIPTION Port This is the port index number. Active Select this check box to enable a port. The factory default for all ports is enabled. A port must be enabled for data transmission to occur.
Page 72 GS-3012F User’s Guide Table 6-5 Port Setup LABEL DESCRIPTION Flow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and frame losses. Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port.
Page 73: Advanced Application
Advanced Application 1 Part IV Advanced Application 1 This part shows you how to configure the VLAN, Static MAC Forwarding, Filtering, STP and Bandwidth Control Advanced Application screens.
Page 75: Chapter 7 Vlan
GS-3012F User’s Guide Chapter 7 VLAN The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you how to configure 802.1Q tagged and port-based VLANs. See the General, Switch and IP Setup chapter for more information.
Page 76: Garp Timers
GS-3012F User’s Guide GARP GARP (Generic Attribute Registration Protocol) allows network switches to register and de-register attribute values with other GARP participants within a bridged LAN. GARP is a protocol that provides a generic mechanism for protocols that serve a more specific application, for example, GVRP.
Page 77: Q Vlan
GS-3012F User’s Guide 7.1.3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices.
Page 78: Figure 7-3 802.1Q Vlan Status
GS-3012F User’s Guide Figure 7-3 802.1Q VLAN Status The following table describes the labels in this screen. Table 7-2 802.1Q VLAN Status LABEL DESCRIPTION The Number of This is the number of VLANs configured on the switch. VLAN Index This is the VLAN index number.
Page 79: Figure 7-4 802.1Q Vlan Port Settings
GS-3012F User’s Guide Table 7-2 802.1Q VLAN Status LABEL DESCRIPTION Previous/Next Page Click one of these buttons to show the previous/next screen if all status information cannot be seen in one screen. 7.2.1 802.1Q VLAN Port Settings To configure the 802.1Q VLAN settings on a port, click the VLAN Port Settings link in the VLAN Status screen.
Page 80: Q Static Vlan
GS-3012F User’s Guide Table 7-3 802.1Q VLAN Port Settings LABEL DESCRIPTION Ingress Check If this check box is selected for a port, the device discards incoming frames for VLANs that do not include this port in its member set. PVID Each port on the switch is capable of passing tagged or untagged frames.
Page 81: Figure 7-5 802.1Q Static Vlan
GS-3012F User’s Guide Figure 7-5 802.1Q Static VLAN The following table describes the labels in this screen. Table 7-4 802.1Q Static VLAN LABEL DESCRIPTION Active Select this check box to enable the VLAN. Name Enter a descriptive name for this VLAN group for identification purposes.
Page 82: Figure 7-6 Static Vlan: Summary Table
GS-3012F User’s Guide Table 7-4 802.1Q Static VLAN LABEL DESCRIPTION Cancel Click Cancel to reset the fields to your previous configuration. Clear Click Clear to clear the fields to the factory defaults. 7.2.3 Viewing and Editing VLAN Settings To view a summary of the VLAN configuration, scroll down to the summary table at the bottom of the Static VLAN screen.
Page 83: Introduction To Port-Based Vlans
GS-3012F User’s Guide VID1 Example Screen Figure 7-7 VID1 Example Screen 7.3 Introduction to Port-based VLANs Port-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. Port-based VLANs require allowed outgoing ports to be defined for each port. Therefore, if you wish to allow two subscriber ports to talk to each other, for example, between conference rooms in a hotel, you must define the egress (an egress port is an outgoing port, that is, a port through which a data packet leaves) for both ports.
Page 84: Figure 7-8 Port Based Vlan Setup (All Connected)
GS-3012F User’s Guide Figure 7-8 Port Based VLAN Setup (All Connected) 7-10 VLAN...
Page 85: Figure 7-9 Port Based Vlan Setup (Port Isolation)
GS-3012F User’s Guide Figure 7-9 Port Based VLAN Setup (Port isolation) The following table describes the labels in this screen. Table 7-6 Port Based VLAN Setup LABEL DESCRIPTION Setting Wizard Choose from All connected or Port isolation. All connected means all ports can communicate with each other, that is, there are no virtual LANs.
Page 86 GS-3012F User’s Guide Table 7-6 Port Based VLAN Setup LABEL DESCRIPTION Outgoing These are the egress ports; an egress port is an outgoing port, that is, a port through which a data packet leaves. If you wish to allow two subscriber ports to talk to each other, you must define the egress port for both ports.
Page 87: Static Mac Forward Setup
GS-3012F User’s Guide Chapter 8 Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 8.1 Introduction to Static MAC Forward Setup A static MAC address entry is an address that has been manually entered in the MAC address learning table.
Page 88: Viewing And Editing Static Mac Forwarding Rules
GS-3012F User’s Guide Table 8-1 Static MAC Forwarding LABEL DESCRIPTION Port Select a port where the MAC address entered in the previous field will be automatically forwarded. Click Add to save the new rule to the switch. It then displays in the summary table at the bottom of the screen.
Page 89: Chapter 9 Filtering
GS-3012F User’s Guide Chapter 9 Filtering This chapter discusses static IP and MAC address port filtering. 9.1 Introduction to Filtering Filtering means sifting traffic going through the switch based on the source and/or destination MAC addresses and VLAN group (ID).
Page 90: Viewing And Editing Filter Rules
GS-3012F User’s Guide Table 9-1 Filtering LABEL DESCRIPTION Action Select Discard source to drop frame from the source MAC address (specified in the MAC field). The switch can still send frames to the MAC address. Select Discard destination to drop frames to the destination MAC address (specified in the MAC address).
Page 91 GS-3012F User’s Guide Table 9-2 Filtering: Summary Table LABEL DESCRIPTION Action This field displays the filter action. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkboxes in the Delete column.
Page 93: Chapter 10 Spanning Tree Protocol
GS-3012F User’s Guide Chapter 10 Spanning Tree Protocol This chapter introduces the Spanning Tree Protocol (STP). 10.1 Introduction to Spanning Tree Protocol (STP) STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a switch to interact with other STP-compliant switches in your network to ensure that only one route exists between any two stations on the network.
Page 94: Stp Status
GS-3012F User’s Guide Once a stable network topology has been established, all bridges listen for Hello BPDUs (Bridge Protocol Data Units) transmitted from the root bridge. If a bridge does not get a Hello BPDU after a predefined interval (Max Age), the bridge assumes that the link to the root bridge is down.
Page 95: Figure 10-1 Spanning Tree Protocol: Status
GS-3012F User’s Guide Figure 10-1 Spanning Tree Protocol: Status The following table describes the labels in this screen. Table 10-3 Spanning Tree Protocol: Status LABEL DESCRIPTION Spanning Tree Protocol This field displays Running if STP is activated. Otherwise, it displays Down.
Page 96: Figure 10-2 Spanning Tree Protocol: Configuration
GS-3012F User’s Guide Table 10-3 Spanning Tree Protocol: Status LABEL DESCRIPTION Port ID This is the priority and number of the port on the switch through which this switch must communicate with the root of the Spanning Tree. Topology Changed This is the number of times the spanning tree has been reconfigured.
Page 97: Table 10-4 Spanning Tree Protocol: Configuration
GS-3012F User’s Guide Table 10-4 Spanning Tree Protocol: Configuration LABEL DESCRIPTION Active Select this check box to activate STP. Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The switch with the highest priority (lowest numeric value) becomes the STP root switch. If all switches have the same priority, the switch with the lowest MAC address will then become the root switch.
Page 99: Chapter 11 Bandwidth Control
GS-3012F User’s Guide Chapter 11 Bandwidth Control This chapter shows you how you can cap the maximum bandwidth allowed from specific source(s) to specified destination(s) using the Bandwidth Control setup screen. 11.1 Introduction to Bandwidth Control Bandwidth control means defining a maximum allowable bandwidth for incoming and/or out-going traffic flows on a port.
Page 100 GS-3012F User’s Guide Table 11-1 Bandwidth Control LABEL DESCRIPTION Ingress Rate Specify the maximum bandwidth allowed in megabits per second (Mbps) for the incoming traffic flow on a port. Enter a number between 1 and 1000. Egress Rate Specify the maximum bandwidth allowed in megabits per second (Mbps) for the out-going traffic flow on a port.
Page 101 Advanced Application 2 Part V Advanced Application 2 This part shows you how to configure the Broadcast Storm Control, Mirroring, Link Aggregation, Port Authentication, Port Security, Access Control and Queuing Method Advanced Application screens.
Page 103: Broadcast Storm Control
GS-3012F User’s Guide Chapter 12 Broadcast Storm Control 12.1 Introducing Broadcast Storm Control Broadcast storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the switch receives per second on the ports. When the maximum number of allowable broadcast, multicast and/or DLF packets is reached per second, the subsequent packets are discarded.
Page 104: Table 12-1 Broadcast Storm Control
GS-3012F User’s Guide Table 12-1 Broadcast Storm Control LABEL DESCRIPTION Active Select this check box to enable broadcast storm control on the switch. Port This field displays a port number. Broadcast Select this option and specify how many broadcast packets the port receives per second.
Page 105: Chapter 13 Mirroring
GS-3012F User’s Guide Chapter 13 Mirroring This chapter discusses the Mirror setup screens. 13.1 Introduction to Port Mirroring Port mirroring allows you to copy traffic going from one or all ports to another or all ports in order that you can examine the traffic from the monitor port (the port you copy the traffic to) without interference.
Page 106: Table 13-1 Mirroring
GS-3012F User’s Guide Table 13-1 Mirroring LABEL DESCRIPTION Active Clear this check box to deactivate port mirroring on the switch. Monitor Port The monitor port is the port you copy the traffic to in order to examine it in more detail without interfering with the traffic flow on the original port(s).
Page 107: Chapter 14 Link Aggregation
14.1.1 Dynamic Link Aggregation The GS-3012F adheres to the 802.3ad standard for static and dynamic (LACP) port trunking. The GS-3012F supports the link aggregation IEEE802.3ad standard. This standard describes the Link Aggregate Control Protocol (LACP), which is a protocol that dynamically creates and manages trunk groups.
Page 108: Link Aggregation Protocol Status
GS-3012F User’s Guide [(0000,00-00-00-00-00-00,0000,00,0000)] [(0000,00-00-00-00-00-00,0000,00,0000)] Local switch 0000 00-00-00-00-00 0000 0000 System priority Local switch MAC address Port Priority Port Number Peer switch 0000 00-00-00-00-00 0000 0000 System priority MAC address Port Priority Port Number Figure 14-1 Aggregation ID 14.2 Link Aggregation Protocol Status Click Advanced Application, Link Aggregation in the navigation panel to display the Link Aggregation Protocol Status screen.
Page 109: Link Aggregation Setup
GS-3012F User’s Guide The following table describes the labels in this screen. Table 14-1 Link Aggregation: Link Aggregation Protocol Status LABEL DESCRIPTION Index This field displays the trunk ID to identify a trunk group, that is, one logical link containing multiple ports.
Page 110: Figure 14-3 Link Aggregation: Configuration
GS-3012F User’s Guide Figure 14-3 Link Aggregation: Configuration The following table describes the labels in this screen. Table 14-2 Link Aggregation: Configuration LABEL DESCRIPTION Link Aggregation Control Protocol Active Select this checkbox to enable Link Aggregation Control Protocol (LACP). System Priority LACP system priority is a number between 1 and 65, 535. The switch with the lowest system priority (and lowest port number if system priority is the same) becomes the LACP “server”.
Page 111 GS-3012F User’s Guide Table 14-2 Link Aggregation: Configuration LABEL DESCRIPTION Dynamic (LACP) Select this check box to enable LACP for a trunk. Port This field displays the port number. Group Select the trunk group to which a port belongs. LACP Timeout Timeout is the time interval between the individual port exchanges of LACP packets in order to check that the peer port in the trunk group is still up.
Page 113: Chapter 15 Port Authentication
Figure 15-1 RADIUS Server 15.2 Configuring Port Authentication To enable port authentication, first activate IEEE802.1x security (both on the GS-3012F and the port(s)) then configure the RADIUS server settings. Click Port Authentication under Advanced Application in the navigation panel to display the screen as shown.
Page 114: Figure 15-3 Port Authentication: Radius
GS-3012F User’s Guide 15.2.1 Configuring RADIUS Server Settings From the Port Authentication screen, click RADIUS to display the configuration screen as shown. Figure 15-3 Port Authentication: RADIUS The following table describes the labels in this screen. Table 15-1 Port Authentication: RADIUS...
Page 115: Figure 15-4 Port Authentication: 802.1X
GS-3012F User’s Guide Figure 15-4 Port Authentication: 802.1x The following table describes the labels in this screen. Table 15-2 Port Authentication: 802.1x LABEL DESCRIPTION Active Select this check box to permit 802.1x authentication on the switch. You must first allow 802.1x authentication on the switch before configuring it on each port.
Page 117: Chapter 16 Port Security
GS-3012F User’s Guide Chapter 16 Port Security This chapter shows you how to set up port security. 16.1 About Port Security Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the switch. The switch can learn up to 16K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 16K.
Page 118 GS-3012F User’s Guide Table 16-1 Port Security LABEL DESCRIPTION Active Select this check box to enable port security on this port. Address Learning MAC address learning reduces outgoing broadcast traffic. For MAC address learning to occur on a port, the port itself must be active with address learning enabled.
Page 119: Chapter 17 Access Control
GS-3012F User’s Guide Chapter 17 Access Control This chapter describes how to control access to the switch. 17.1 About Access Control Click Advanced Application, Access Control from the navigation panel to display the screen as shown. From this screen you can configure SNMP, up to four web configurator administrators, enable/disable remote service access and configure trusted computers for remote access.
Page 120: About Snmp
An SNMP managed network consists of two main components: agents and a manager. An agent is a management software module that resides in a managed switch (the GS-3012F). An agent translates the local management information from the managed switch into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions.
Page 121: Supported Mibs
RFC 1155 SMI SNMPv2, SNMPv2c Bridge extension MIBs RFC 2674 17.3.2 SNMP Traps The GS-3012F sends traps to an SNMP manager when an event occurs. SNMP traps supported are outlined in the following table. Table 17-3 SNMP Traps GENERIC TRAP SPECIFIC TRAP...
Page 122: Figure 17-4 Access Control: Snmp
GS-3012F User’s Guide Figure 17-4 Access Control: SNMP The following table describes the labels in this screen. Table 17-4 Access Control: SNMP LABEL DESCRIPTION Get Community Enter the get community, which is the password for the incoming Get- and GetNext- requests from the management station.
Page 123: Figure 17-5 Access Control: Logins
GS-3012F User’s Guide Figure 17-5 Access Control: Logins The following table describes the labels in this screen. Table 17-5 Access Control: Logins LABEL DESCRIPTION Administrator This is the default administrator account with the “admin” user name. You cannot change the default administrator user name.
Page 124: Ssh Overview
GS-3012F User’s Guide 17.4 SSH Overview Unlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network.
Page 125: Introduction To Https
GS-3012F User’s Guide 17.7 Introduction to HTTPS HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application-level protocol that enables secure transactions of data by ensuring confidentiality (an unauthorized party cannot read the transferred data), authentication (one party can identify the other party) and data integrity (you know if data has been changed).
Page 126: Figure 17-9 Security Alert Dialog Box (Internet Explorer)
GS-3012F User’s Guide 17.7.2 Internet Explorer Warning Messages When you attempt to access the switch HTTPS server, a Windows dialog box pops up asking if you trust the server certificate. Click View Certificate if you want to verify that the certificate is from the switch.
Page 127: Figure 17-10 Security Certificate 1 (Netscape)
GS-3012F User’s Guide Figure 17-10 Security Certificate 1 (Netscape) Figure 17-11 Security Certificate 2 (Netscape) 17.7.4 Login Screen After you accept the certificate and login in, the switch main screen appears. The lock displayed in the bottom right of the browser status bar denotes a secure connection.
Page 128: Service Access Control
Figure 17-13 Main Screen (Netscape) 17.8 Service Access Control Service Access Control allows you to decide what services you may use to access the GS-3012F. You may also change the default service port and configure “trusted computer(s)” for each service in the Remote Management screen (discussed later).
Page 129: Remote Management
Services you may use to access the GS-3012F are listed here. Active Select this option for the corresponding services that you want to allow to access the GS-3012F. Service Port For Telnet, SSH, FTP, HTTP or HTTPS services, you may change the default service port by typing the new port number in the Service Port field.
Page 130: Table 17-7 Access Control: Remote Management
GS-3012F User’s Guide The following table describes the labels in this screen. Table 17-7 Access Control: Remote Management LABEL DESCRIPTION Entry This is the client set index number. A “client set” is a group of one or more “trusted computers” from which an administrator may use a service to manage the switch.
Page 131: Chapter 18 Queuing Method
GS-3012F User’s Guide Chapter 18 Queuing Method This chapter introduces SPQ and WFQ. 18.1 Introduction to Queuing Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic. See also Priority Queue Assignment in Switch Setup and 802.1p Priority in Port Setup for related information.
Page 132: Configuring Queuing
GS-3012F User’s Guide end of the list; and so on, depending on the number of queues being used. This works in a looping fashion until a queue is empty. Weighted Round Robin Scheduling (WRR) uses the same algorithm as round robin scheduling, but services queues based on their priority and queue weight (the number you configure in the Weight field –...
Page 133 GS-3012F User’s Guide LABEL DESCRIPTION Port This label shows the port you are configuring. Method Select SPQ (Strict Priority Queuing) or WRR (Weighted Round Robin Scheduling). Strict Priority Queuing (SPQ) services queues based on priority only. When the highest priority queue empties, traffic on the next highest-priority queue begins.
Page 135: Chapter 19 Classifier
Chapter 19 Classifier This chapter introduces and shows you how to configure the packet classifier on the GS-3012F. 19.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth.
Page 136: Figure 19-1 Classifier
GS-3012F User’s Guide Figure 19-1 Classifier The following table describes the labels in this screen. Table 19-1 Classifier LABEL DESCRIPTION Active Select this option to enable this rule. Name Enter a descriptive name for this rule for identifying purposes. 19-2...
Page 137 GS-3012F User’s Guide Table 19-1 Classifier LABEL DESCRIPTION Packet Format Specify the format of the packet. Choices are All, 802.3 tagged, 802.3 untagged, Ethernet II tagged and Ethernet II untagged. A value of 802.3 indicates that the packets are formatted according to the IEEE 802.3 standards.
Page 138: Viewing And Editing Classifier Configuration
GS-3012F User’s Guide Table 19-1 Classifier LABEL DESCRIPTION option and enter a TCP/UDP protocol port number. Destination IP Address/Address Enter a destination IP address in dotted decimal notation. Prefix Specify the address prefix by entering the number of ones in the subnet mask.
Page 139: Classifier Example
GS-3012F User’s Guide Table 19-3 Common Ethernet Types and Protocol Number ETHERNET TYPE PROTOCOL NUMBER IP ETHII 0800 X.75 Internet 0801 NBS Internet 0802 ECMA Internet 0803 Chaosnet 0804 X.25 Level 3 0805 XNS Compat 0807 Banyan Systems 0BAD BBN Simnet...
Page 140: Figure 19-3 Classifier: Example
GS-3012F User’s Guide Figure 19-3 Classifier: Example 19-6 Classifier...
Page 141: Chapter 20 Policy Rule
GS-3012F User’s Guide Chapter 20 Policy Rule This chapter shows you how to configure policy rules. 20.1 About Policy Rules A classifier distinguishes traffic into flows based on the configured criteria (refer to Chapter 19 for more information). A policy rule ensures that a traffic flow gets the requested treatment in the network.
Page 142: Figure 20-1 Policy
GS-3012F User’s Guide Figure 20-1 Policy The following table describes the labels in this screen. 20-2 Policy Rule...
Page 143 GS-3012F User’s Guide Table 20-1 Policy LABEL DESCRIPTION Active Select this option to enable the policy. Name Enter a descriptive name for identification purposes. Classifier(s) This field displays the active classifier(s) you configure in the Classifier screen (refer to Chapter 19 ).
Page 144: Viewing And Editing Policy Configuration
GS-3012F User’s Guide Table 20-1 Policy LABEL DESCRIPTION DiffServ Select No change to keep the TOS and/or DSCP fields in the packets. Select Set the packet’s TOS field to set the TOS field with the value you configure in the TOS field.
Page 145: Policy Example
GS-3012F User’s Guide LABEL DESCRIPTION Index This field displays the policy index number. Click an index number to edit the policy. Active This field displays Yes when policy is activated and No when is it deactivated. Name This field displays the descriptive name for this policy. This is for identification purposes only.
Page 146: Figure 20-3 Policy Example
GS-3012F User’s Guide Figure 20-3 Policy Example 20-6 Policy Rule...
Page 147: Chapter 21 Dhcp Relay
GS-3012F User’s Guide Chapter 21 DHCP Relay This chapter describes the DHCP relay and shows you how to configure the DHCP Relay screen. 21.1 Overview DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a DHCP server.
Page 148 GS-3012F User’s Guide Figure 21-1 DHCP Relay The following table describes the labels in this screen. Table 21-1 DHCP Relay LABEL DESCRIPTION Active Select this check box to enable DHCP relay. Remote Enter the IP address of a DHCP server in dotted decimal notation.
Page 149 Routing Protocol and Management Part VI Routing Protocol and Management This part describes the Routing Protocol and Management screens.
Page 151: Chapter 22 Routing Protocol
This chapter shows you how to configure the routing functions. 22.1 Static Route Static routes tell the GS-3012F how to forward IP traffic when you configure the TCP/IP parameters manually. Click Routing Protocol in the navigation panel and then Static Routing to display the screen as shown.
Page 152: Figure 22-2 Static Routing: Summary Table
GS-3012F User’s Guide Table 22-1 Static Routing LABEL DESCRIPTION Metric The metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link.
Page 153: Chapter 23 Maintenance
GS-3012F User’s Guide Chapter 23 Maintenance This chapter explains how to configure the maintenance screens. The links on the upper right of the Maintenance screen lead to different screens that let you maintain the firmware and configuration files. 23.1 Maintenance Click Management and then Maintenance in the navigation panel to open the following screen.
Page 154: Restore A Configuration File
GS-3012F User’s Guide 23.3 Restore a Configuration File Restore a previously saved configuration from your computer to the switch using the Restore Configuration screen. Figure 23-3 Restore Configuration Type the path and file name of the configuration file you wish to restore in the File Path text box or click Browse to display a Choose File screen from which you can locate it.
Page 155: Load Factory Defaults
GS-3012F User’s Guide 23.5 Load Factory Defaults Press the Click Here button next to Load Factory Defaults to clear all switch configuration information you configured and return to the factory defaults. The following message appears. Figure 23-5 Confirm Load factory Defaults Click OK to go to the next screen.
Page 156: Table 23-1 Filename Conventions
IP Setup, etc. Once you have customized the switch's settings, they can be saved back to your computer under a filename of your choosing. ZyNOS (ZyXEL Network Operating System sometimes referred to as the “ras” file) is the system firmware and has a “bin” filename extension.
Page 157: Table 23-2 General Commands For Gui-Based Ftp Clients
GS-3012F User’s Guide renames it “config”. Likewise “get config config.cfg” transfers the configuration file on the switch to your computer and renames it “config.cfg.” See earlier in this chapter for more information on filename conventions. Enter “quit” to exit the ftp prompt.
Page 159: Chapter 24 Diagnostic
GS-3012F User’s Guide Chapter 24 Diagnostic This chapter explains the Diagnostic screens. 24.1 Diagnostic Click Management and then Diagnostic in the navigation panel to display this screen. Use this screen to check system logs, ping IP addresses or perform loopback tests on a port.
Page 161: Chapter 25 Cluster Management
In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. Figure 25-1 Clustering Application Example Cluster management may also be referred to as “iStacking” in other ZyXEL documentation. Cluster Management 25-1...
Page 162: Cluster Management Status
GS-3012F User’s Guide 25.2 Cluster Management Status Click Management in the navigation panel and then Cluster Management to display the following screen. Figure 25-2 Cluster Management Status The following table describes the labels in this screen. Table 25-2 Cluster Management Status...
Page 163: Figure 25-3 Cluster Member Web Configuration Screen
GS-3012F User’s Guide Table 25-2 Cluster Management Status LABEL DESCRIPTION Status This field displays: Online (the cluster member switch is accessible) Error (for example the cluster member switch password was changed or the switch was set as the manager and so left the member list, etc.) Offline (the switch is disconnected - Offline shows approximately 1.5 minutes after...
Page 164: Configuring Cluster Management
GS-3012F User’s Guide C:\>ftp <Cluster Manager IP address> Connected to <Cluster Manager IP address> 220 GS-3012F FTP version 1.0 ready at Thu Jan 1 00:45:06 1970 User : [Enter] 331 Enter PASS command Password: <1234 is the default password> 230 Logged in ftp>...
Page 165: Figure 25-5 Configuring Cluster Management
GS-3012F User’s Guide Figure 25-5 Configuring Cluster Management The following table describes the labels in this screen. Table 25-4 Configuring Cluster Management LABEL DESCRIPTION Clustering Manager Active Select Active to have this switch become the cluster manager switch. A cluster can only have one manager.
Page 166 GS-3012F User’s Guide Table 25-4 Configuring Cluster Management LABEL DESCRIPTION Cancel Click Cancel to begin configuring this part of the screen afresh. Clustering The following fields relate to the switches that are potential cluster members. Candidate List A list of suitable candidates found by auto-discovery is shown here. The switches must be directly connected.
Page 167: Chapter 26 Mac Table
GS-3012F User’s Guide Chapter 26 MAC Table This chapter introduces MAC Table. 26.1 Introduction to MAC Table The MAC table shows how frames are forwarded or filtered across the switch’s ports. It shows what device MAC address, belonging to what VLAN group (if any) is forwarded to which port(s) and whether the MAC address is dynamic (learned by the switch) or static (manually entered in Static MAC Forwarding).
Page 168: Viewing Mac Table
GS-3012F User’s Guide 26.2 Viewing MAC Table Click Management in the navigation panel and then MAC Table to display the following screen. The MAC Table can hold up to 16K entries. Figure 26-2 MAC Table The following table describes the labels in this screen.
Page 169: Chapter 27 Arp Table
GS-3012F User’s Guide Chapter 27 ARP Table This chapter introduces ARP Table. 27.1 Introduction to ARP Table Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network.
Page 170: Figure 27-1 Arp Table
GS-3012F User’s Guide Figure 27-1 ARP Table The following table describes the labels in this screen. Table 27-1 ARP Table LABEL DESCRIPTION Index This is the ARP Table entry number. IP Address This is the learned IP address of a device connected to a switch port with corresponding MAC address below.
Page 171 CLI Commands Part VII Commands This part gives information on the Command Line Interface (CLI).
Page 173: Introducing The Commands
Dimension GS-3012F Gigabit Ethernet Switch Chapter 28 Introducing the Commands This chapter introduces the commands and gives a summary of commands available. 28.1 Overview In addition to the web configurator, you can use line commands to configure the switch. Use line commands for advanced switch diagnosis and troubleshooting.
Page 174: The Login Screen
When you turn on your switch, it performs several internal tests as well as line initialization. You can view the initialization information using the console port. After the initialization, the login screen displays (refer to Section 28.3). Copyright (c) 1994 - 2004 ZyXEL Communications Corp. initialize mgmt, ethernet address: 00:13:49:11:22:33 initialize switch, ethernet address: 00:13:49:11:22:34 Initializing switch unit 0...
Page 175: Command Syntax Conventions
Dimension GS-3012F Gigabit Ethernet Switch Enter User Name : admin Enter Password : XXXX Figure 28-2 CLI: Login Screen 28.4 Command Syntax Conventions The rules of the commands are listed next. The command keywords are in courier new font. The required fields in a command are enclosed in angle brackets <>, for instance, means that ping <ip>...
Page 176: Detailed Command Information
Dimension GS-3012F Gigabit Ethernet Switch GS-3012F> help Commands available: help logout exit history enable show ip <cr> show hardware-monitor <C|F> show system-information ping <ip|host-name> <cr> ping <ip|host-name> [vlan <vlan-id>][..] ping help traceroute <ip|host-name> <cr> traceroute <ip|host-name> [vlan <vlan-id>][..] traceroute help ssh <1|2>...
Page 177: Command Modes
Dimension GS-3012F Gigabit Ethernet Switch 28.6 Command Modes There are three CLI command modes: User, Enable and Configure. When you first log into the CLI, the initial command mode is the User mode. The User mode commands are a subset of the Enable mode commands. The User mode command prompt ends with an angle bracket (>).
Page 178: Command Summary
Dimension GS-3012F Gigabit Ethernet Switch 28.9 Command Summary The following sections summarize the commands available in the switch together with a brief description of each command. Commands listed in the tables are in the same order as they are displayed in the CLI. See the related section in the User’s Guide for more background information.
Page 179: Table 28-2 Command Summary: Enable Mode
Dimension GS-3012F Gigabit Ethernet Switch Table 28-2 Command Summary: Enable Mode COMMAND DESCRIPTION help Displays help information. logout Exits Enable (or privileged) mode. Exits Enable (or privileged) mode. exit history Displays a list of command(s) that you have previously executed.
Page 180 Dimension GS-3012F Gigabit Ethernet Switch Table 28-2 Command Summary: Enable Mode COMMAND DESCRIPTION port-access- Displays all port authentication settings. authenticator [port-list] Displays port authentication settings on the specified port(s). port-security Displays all port security settings. Displays port security settings on the [port-list] specified port(s).
Page 181 Dimension GS-3012F Gigabit Ethernet Switch Table 28-2 Command Summary: Enable Mode COMMAND DESCRIPTION known-hosts Displays known SSH hosts information. Displays the SSH public and private keys <rsa1|rsa|dsa> Displays current SSH session(s). session https Displays the HTTPS information. session Displays current HTTPS session(s).
Page 182: Table 28-3 Command Summary: Configure Mode
Dimension GS-3012F Gigabit Ethernet Switch Table 28-2 Command Summary: Enable Mode COMMAND DESCRIPTION tftp config <ip> Restores configuration with the specified filename from the specified TFTP server. <remote-file> flash <ip> Restores firmware via TFTP. <remote-file> Sends a Ping request to an Ethernet ping <ip|host-name>...
Page 183 Dimension GS-3012F Gigabit Ethernet Switch Table 28-3 Command Summary: Configure Mode COMMAND DESCRIPTION mac-forward name <name> mac Enables the specified MAC <mac-addr> vlan address, belonging to a VLAN <vlan-id> interface group (if any) forwarded through <interface-id> an interface(s). inactive name <name> mac Removes the specified MAC <mac-addr>...
Page 184 Dimension GS-3012F Gigabit Ethernet Switch Table 28-3 Command Summary: Configure Mode COMMAND DESCRIPTION <port-list> Disables the re-authentication reauthenticate mechanism on the listed port(s). <port-list> Disables authentication on the listed ports. port-security <port-list> Disables port security on the specified ports. <port-list> learn...
Page 185 Dimension GS-3012F Gigabit Ethernet Switch Table 28-3 Command Summary: Configure Mode COMMAND DESCRIPTION option Disables the relay agent information option 82. information System name is not appended to option 82 information field. cluster Disables cluster management on the switch. member <mac- Removes the cluster member.
Page 186 Dimension GS-3012F Gigabit Ethernet Switch Table 28-3 Command Summary: Configure Mode COMMAND DESCRIPTION name <name> mac Disables a static MAC address forwarding rule. <mac-addr> vlan <vlan-id> interface <interface-id> inactive mac-filter name <name> mac Configures a static MAC address port filtering rule.
Page 187 Dimension GS-3012F Gigabit Ethernet Switch Table 28-3 Command Summary: Configure Mode COMMAND DESCRIPTION classifier <name> Configures a classifier. A classifier groups traffic into data flows <[packet-format according to specific criteria such <802.3untag|802.3ta as the source address, destination address, source port number,...
Page 188 Dimension GS-3012F Gigabit Ethernet Switch Table 28-3 Command Summary: Configure Mode COMMAND DESCRIPTION policy <name> classifier Configures a policy. A classifier distinguishes traffic into flows <classifier-list> < based on the configured criteria. A [vlan<vlan-id>] policy rule ensures that a traffic [egress-port <port-...
Page 189 Dimension GS-3012F Gigabit Ethernet Switch Table 28-3 Command Summary: Configure Mode COMMAND DESCRIPTION <port-list> Sets a subscriber to periodically re-enter his or her username and reauthenticate password to stay connected to a specified port. <port-list> reauth- Specifies how often a client has to re-enter the username and period <reauth-...
Page 190 Dimension GS-3012F Gigabit Ethernet Switch Table 28-3 Command Summary: Configure Mode COMMAND DESCRIPTION timesync <daytime|time|ntp> Sets the time server protocol. server <ip> Sets the IP address of your time server. loginPrecedence <LocalOnly | Select which database the switch should use (first) to authenticate a LocalRADIUS | user.
Page 191: Table 28-4 Command Summary: Config-Vlan Commands
Dimension GS-3012F Gigabit Ethernet Switch Table 28-3 Command Summary: Configure Mode COMMAND DESCRIPTION ssh <socket-number> Allows SSH access on the specified service port. https <socket- Allows HTTPS access on the specified service port. number> remote- <index> start-addr Specifies a group of trusted...
Page 192 Dimension GS-3012F Gigabit Ethernet Switch Table 28-4 Command Summary: config-vlan Commands COMMAND DESCRIPTION fixed <port-list> Specifies the port(s) to be a permanent member of this VLAN group. forbidden <port- Specifies the port(s) you want to prohibit from joining this VLAN group.
Page 193: Table 28-5 Command Summary: Interface
Dimension GS-3012F Gigabit Ethernet Switch Table 28-4 Command Summary: config-vlan Commands COMMAND DESCRIPTION <ip-address> Allows the switch to be managed using this specified IP address. <mask> manageable <ip-address> Sets the IP address and subnet mask of the switch in the specified VLAN for <mask>...
Page 194 Dimension GS-3012F Gigabit Ethernet Switch Table 28-5 Command Summary: Interface COMMAND DESCRIPTION <wt1> <wt2> ... <wt8> Sets the interface to use WRR queuing. A weight value of one to eight is given to each variable from wt 1 to wt 8.
Page 195 Dimension GS-3012F Gigabit Ethernet Switch Table 28-5 Command Summary: Interface COMMAND DESCRIPTION speed-duplex <auto|10-half|10-full|100- Sets the duplex mode (half, full) half|100-full|1000-full> and speed (10/100/1000 Mbps) of the connection on the interface. Selecting auto (auto- negotiation) makes one port able to negotiate with a peer...
Page 197: Chapter 29 Command Examples
Dimension GS-3012F Gigabit Ethernet Switch Chapter 29 Command Examples This chapter describes some commands in more detail. 29.1 Overview These are commands that you may use frequently in maintaining your switch. 29.2 show Commands These are the commonly used commands.
Page 198: Figure 29-2 Show Hardware-Monitor Command Example
Dimension GS-3012F Gigabit Ethernet Switch GS-3012F> show hardware-monitor c Temperature Unit : (c) Temperature Current Threshold Status 32.0 32.0 26.0 65.0 Normal 30.0 30.0 25.0 65.0 Normal 31.0 31.0 26.0 65.0 Normal FAN Speed(RPM) Current Threshold Status FAN1 5716 5810...
Page 199: Figure 29-4 Show Logging Command Example
Dimension GS-3012F Gigabit Ethernet Switch GS-3012F# show logging 50 Thu Jan 1 00:01:54 1970 PP05 -WARN SNMP TRAP 3: link up 51 Thu Jan 1 00:03:04 1970 PINI -WARN SNMP TRAP 0: cold start 52 Thu Jan 1 00:03:04 1970 PP0e -WARN...
Page 200: Ping
Dimension GS-3012F Gigabit Ethernet Switch 29.2.6 show mac address-table Syntax: show mac address-table <all <sort>|static> Where = Specifies the sorting criteria (MAC, VID or port). <sort> This command displays the MAC address(es) stored in the switch. The following example shows a static MAC address table.
Page 201: Enabling Rstp
Dimension GS-3012F Gigabit Ethernet Switch Syntax: traceroute <ip> [in-band|out-of-band|vlan <vlan-id>][ttl <1-255>] [wait <1-60>] [queries <1-10>] where <ip> The IP address of an Ethernet device. [in-band|out-of- Specifies the network interface or the VLAN ID to which the Ethernet band|vlan <vlan- device belongs.
Page 202: Figure 29-10 Cli: Backup Configuration Example
This command restores a configuration file on the switch. The following example uploads the configuration file ) from the TFTP server ( ) to the switch. test.cfg 172.23.19.96 GS-3012F# copy tftp config 1 172.23.19.96 test.cfg Restoring (599)Bytes Done! GS-3012F# Figure 29-11 CLI: Restore Configuration Example 29.6.3...
Page 203: Example No Commands
Dimension GS-3012F Gigabit Ethernet Switch GS-3012F# boot config 2 Figure 29-12 CLI: boot config Command Example Use the reload config command to restart the system and use a different configuration file (if specified). The following example restarts the system to use the second configuration file.
Page 204: Figure 29-15 No Mirror-Port Command Example
Dimension GS-3012F Gigabit Ethernet Switch GS-3012F(config)# no mirror-port Figure 29-15 no mirror-port Command Example 29.7.2 no https timeout Syntax: no https timeout Resets the https session timeout to default. An example is shown next. The session timeout is reset to 300 seconds.
Page 205: Figure 29-17 No Trunk Command Example
Dimension GS-3012F Gigabit Ethernet Switch GS-3012F(config)# no trunk T1 GS-3012F(config)# no trunk T3 lacp GS-3012F(config)# no trunk T5 interface 1,3-5 Figure 29-17 no trunk Command Example 29.7.4 no port-access-authenticator Syntax: no port-access-authenticator no port-access-authenticator <port-list> reauthenticate no port-access-authenticator <port-list> where Disables port authentication on the switch.
Page 206: Interface Commands
GS-3012F(config)# no ssh key rsa1 GS-3012F(config)# no ssh known-hosts 172.165.1.8 GS-3012F(config)# no ssh known-hosts 172.165.1.9 ssh-rsa Figure 29-19 no ssh Command Example 29.8 interface Commands These are some commonly used commands that belong to the interface group of commands.
Page 207: Figure 29-21 Interface Bpdu-Control Command Example
Dimension GS-3012F Gigabit Ethernet Switch <peer|tunnel|d Type peer to process any BPDUs received on these ports. iscard|network Type tunnel to forward BPDUs received on these ports. >= Type discard to drop any BPDUs received on these ports. Type network to process and forward BPDUs with a VLAN tag and to process untagged BPDUs.
Page 208: Figure 29-23 Bandwidth-Limit Command Example
Dimension GS-3012F Gigabit Ethernet Switch Enables bandwidth control on the switch. <Mbps> Sets the maximum bandwidth allowed for outgoing traffic (egress) or incoming traffic (ingress) on the switch. An example is shown next. Enable port one for configuration. Enable bandwidth control.
Page 209: Figure 29-25 Gvrp Command Example
Dimension GS-3012F Gigabit Ethernet Switch 29.8.6 gvrp Syntax: gvrp GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Enable this function to permit VLANs groups beyond the local switch.
Page 210: Figure 29-27 Frame-Type Command Example
Dimension GS-3012F Gigabit Ethernet Switch frame-type <all|tagged> where <all|tagged> Choose to accept both tagged and untagged incoming frames or just tagged incoming frames on a port. An example is shown next. Enable ports one, three, four and five for configuration.
Page 211: Figure 29-29 Spq Command Example
Enable Weighted Round Robin queuing on the interface. Set the queue weights from Q0 to Q7. GS-3012F# configure GS-3012F(config)# interface 2,6-12 GS-3012F(config-interface)# wrr GS-3012F(config-interface)# wrr 8 7 6 5 4 3 2 1 Figure 29-30 wrr Command Example 29.8.12 egress set Syntax: egress set <port-list>...
Page 212: Figure 29-32 Qos Priority Command Example
Dimension GS-3012F Gigabit Ethernet Switch 29.8.13 qos priority Syntax: qos priority <0 .. 7> where <0 .. 7> Sets the quality of service priority for an interface(s). An example is shown next. Enable ports one, three, four and five for configuration.
Page 213: Figure 29-34 Speed-Duplex Command Example
Dimension GS-3012F Gigabit Ethernet Switch <auto|10- Sets the duplex mode (half, full) and speed (10/100/1000 Mbps) of the half|10- connection on the interface. Selecting auto (auto-negotiation) makes one port full|100- able to negotiate with a peer automatically to obtain the connection speed half|100- and duplex mode that both ends support.
Page 215: Chapter 30 Ieee 802.1Q Tagged Vlan Commands
Dimension GS-3012F Gigabit Ethernet Switch Chapter 30 IEEE 802.1Q Tagged VLAN Commands This chapter describes the IEEE 802.1Q Tagged VLAN and associated commands. 30.1 IEEE 802.1Q Tagged VLAN Overview See the VLAN chapter for more information on VLANs. There are two kinds of tagging: 1.
Page 216: Global Vlan1Q Tagged Vlan Configuration Commands
Dimension GS-3012F Gigabit Ethernet Switch The following procedure shows you how to configure tagged VLAN. Use the IEEE 802.1Q tagged VLAN commands to configure tagged VLAN for the switch. • Use the command to configure or create a VLAN on the switch. The switch vlan <vlan-id>...
Page 217: Figure 30-3 Garp Status Command Example
The following example sets the Join Timer to 300 milliseconds, the Leave Timer to 800 milliseconds and the Leave All Timer to 11000 milliseconds. GS-3012F (config)# garp join 300 leave 800 leaveall 11000 30.4.3 GVRP Timer...
Page 218: Port Vlan Commands
Dimension GS-3012F Gigabit Ethernet Switch This command shows the switch’s GVRP settings. An example is shown next. GS-3012F # show vlan1q gvrp GVRP Support --------------------- gvrpEnable = YES GVRP Support Figure 30-4 garp status Command Example 30.4.4 Enable GVRP Syntax: vlan1q gvrp This command turns on GVRP in order to propagate VLAN information beyond the switch.
Page 219: Figure 30-6 Frame Type Command Example
Dimension GS-3012F Gigabit Ethernet Switch 30.5.2 Set Acceptable Frame Type Syntax: frame-type <all|tagged> where <all|tagged> Specifies all Ethernet frames (tagged and untagged) or only tagged Ethernet frames. This command sets the specified port to accept all Ethernet frames or only those with an IEEE 802.1Q VLAN tag.
Page 220: Figure 30-8 Modifying Static Vlan Example
Dimension GS-3012F Gigabit Ethernet Switch where <vlan-id> The VLAN ID [1 – 4094]. <name-str> A name to identify the SVLAN entry. <port-list> = This is the switch port list. Enter to register the to the static VLAN table with fixed <port-list>...
Page 221: Enable Vlan
Dimension GS-3012F Gigabit Ethernet Switch 30.5.5 Delete VLAN ID Syntax: no vlan <vlan-id> where <vlan-id> The VLAN ID [1 – 4094]. This command deletes the specified VLAN ID entry from the static VLAN table. The following example deletes entry 2 in the static VLAN table.
Page 222: Figure 30-10 Show Vlan Command Example
Dimension GS-3012F Gigabit Ethernet Switch For the section of the last column, “T“ is a tagged port, “U” is an untagged port. TagCtl GS-3012F# show vlan 802.1Q VLAN Static Entry: idx. Name Active AdCtl / TagCtl ---- ------------ ---- -------- ------------------------...
Page 223: Appendices And Index
Appendices and Index Part VIII Appendices and Index This part contains an appendix and an index. VIII...
Page 225: A Product Specifications
GS-3012F User’s Guide A Product Specifications These are the GS-3012F product specifications. Chart 1 General Product Specifications IEEE802.3 10BASE-T Ethernet (twisted-pair copper) IEEE802.3u 100BASE-TX Fast Ethernet (twisted-pair copper) ANSI/IEEE802.3 Auto-negotiation IEEE802.3x Flow Control IEEE802.1p Priority Queues Standards IEEE802.1q VLAN IEEE802.1d Spanning Tree IEEE 802.1x Authentication...
Page 226 GS-3012F User’s Guide Chart 2 Performance and Management Specifications 148800 PPS for 100BASE-TX 1488000PPS for 1000Base-X Packet Forwarding Rate Uplink packet forwarding rate depends on the uplink module used (see your module manual) Switching Method Store-and-forward MAC Address Table 16 K entries...
Page 227 GS-3012F User’s Guide Chart 3 Physical and Environmental Specifications Weight Main switch: 6Kg Main switch: BPS, PWR, SYS, ALM, Per Port: LNK, ACT Per GBIC Slot: LNK, ACT Per Management Port: 10, 100 Main switch: Dimensions 438(W) x 300(D) x 44.45(H) mm (17.3(W) x 8.9(D) x 2.6(H) inches), 19-inch rack-mount width, 1 U height...
Page 229 GS-3012F User’s Guide B Index 802.1Q VLAN Type..........6-6 Calssifier 802.3ad ..............1-3 View summary ..........19-4 Canonical Format Indicator ........7-1 CE ................iv Certification ............. iv CFI ......See Canonical Format Indicator Change Login Password......... 4-5 Acceptable Frame Type ......... 7-6 CI Commands ............
Page 230 GS-3012F User’s Guide Contact Person's Name...........6-4 GUI-based ............23-5 Contacting Customer Support ........v procedure............23-4 Copyright..............ii restrictions over WAN ........23-5 Cost to Bridge............10-3 Filename Conventions..........23-4 Customer Support............v Filter Setup .............9-1 Filtering ..............9-1 View rules ............9-2 Filtering database .......See MAC Table Firmware Upgrade..........23-1...
Page 231 GS-3012F User’s Guide Hardware Monitor LACP Fans ..............6-2 Timeout ............14-5 Temperature ............6-2 LACP Status............14-2 Temperature unit ..........6-2 Leave All Timer ............. 6-7 Volatge ............... 6-2 Leave Timer ............6-7 Hello Time ..........10-3, 10-5 LED Descriptions........... 3-6 Help ................
Page 232 GS-3012F User’s Guide Port Statistics........See Port Details Port Status ........5-1. See Port Details Port Link Aggregation..........1-3 Navigation Panel Links ..........4-4 Port VID ..............7-2 Network Applications Default for all ports .........7-1, 28-22 Bridging..............1-4 Port-based VLANs ..........7-9 Backbone ............1-3 Configure............7-9 High Performance Switched Workgroup ...1-5 Power Connector ............3-5...
Page 233 GS-3012F User’s Guide Root bridge............10-1 Static MAC Forward Setup........8-1 Round Robin Scheduling ........18-1 Static MAC Forwarding......... 8-1 RSTP (Rapid STP) ..........1-3 Static Route Rubber Feet ............2-1 Setup ..............22-1 Runt................ 5-5 Summary table ..........22-2 Rx KB/s............5-2, 5-4...
Page 234 .............2-1 VID......7-4, 9-2. See VLAN Identifier VLAN..............7-1 Explicit Tagging ..........30-1 XMODEM upload..........4-7 Forwarding ............7-1 ID (VID) ............30-1 Implicit Tagging ..........30-1 Introduction ............6-5 Port-based............7-9 ZyNOS (ZyXEL Network Operating System) ..23-4 Priority frame .............7-1 ZyNOS Firmware version ........6-2 Index...
Page 235: Index
GS-3012F User’s Guide ZyXEL Limited Warranty........iii ZyXEL Web Site............ xvi Note ..............iii Index...

ZyXEL Communications Dimension GS-3012F User Manual

Chapter 1 Getting to Know the GS-3012F

Chapter 2 Hardware Installation

Chapter 3 Hardware Connections

Chapter 4 Introducing the Web Configurator

Chapter 5 System Status and Port Details

Chapter 6 Basic Setting

Chapter 7 VLAN

Chapter 8 Static MAC Forward Setup

Chapter 9 Filtering

Chapter 10 Spanning Tree Protocol

Chapter 11 Bandwidth Control

Chapter 12 Broadcast Storm Control

Chapter 13 Mirroring

Chapter 14 Link Aggregation

Chapter 15 Port Authentication

Chapter 16 Port Security

Chapter 17 Access Control

Chapter 18 Queuing Method

Chapter 19 Classifier

Chapter 20 Policy Rule

Chapter 21 DHCP Relay

Chapter 22 Routing Protocol

Chapter 23 Maintenance

Chapter 24 Diagnostic

Chapter 25 Cluster Management

Chapter 26 MAC Table

Chapter 27 ARP Table

Quick Links

Need help?

Questions and answers

Related Manuals for ZyXEL Communications Dimension GS-3012F

Summary of Contents for ZyXEL Communications Dimension GS-3012F