Page 1 XGS-4526/4528F/4728F Intelligent Layer 3+ Switch Default Login Details IP Address http://192.168.0.1 (Out-of-band MGMT port) http://192.168.1.1 (In-band ports) User Name admin Password 1234 www.zyxel.com Firmware Version 4.00 Edition 1, 03/2011 www.zyxel.com Copyright © 2011 ZyXEL Communications Corporation...
Page 3: About This User's Guide
Refer to the included CD for support documents. Documentation Feedback Send your comments, questions or suggestions to: techwriters@zyxel.com.tw Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com.
Page 4 • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. XGS-4526/4528F/4728F User’s Guide...
Page 5: Document Conventions
Syntax Conventions • The XGS-4526/4528F/4728F may be referred to as the “Switch”, the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Page 6 Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The Switch icon is not an exact representation of your device. The Switch Computer Notebook computer Server DSLAM Firewall Telephone Switch Router XGS-4526/4528F/4728F User’s Guide...
Page 7: Safety Warnings
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. XGS-4526/4528F/4728F User’s Guide...
Page 8 Safety Warnings XGS-4526/4528F/4728F User’s Guide...
Page 9: Table Of Contents
IP Source Guard ........................259 Loop Guard ..........................283 VLAN Mapping ........................287 Layer 2 Protocol Tunneling ...................... 291 sFlow ............................295 PPPoE ............................. 299 Error Disable ..........................309 Private VLAN ........................... 315 Static Route ..........................319 Policy Routing .......................... 323 XGS-4526/4528F/4728F User’s Guide...
Page 10 Diagnostic ..........................423 Syslog ............................425 Cluster Management ....................... 435 MAC Table ..........................443 IP Table ............................ 447 ARP Table ..........................451 Routing Table ........................... 453 Configure Clone ........................455 Troubleshooting ........................457 Product Specifications ......................463 XGS-4526/4528F/4728F User’s Guide...
Page 11: Table Of Contents
2.2.3 Mounting the Switch on a Rack .................. 35 Chapter 3 Hardware Overview......................... 37 3.1 Front Panel Connections ....................37 3.1.1 Dual Personality Interfaces ..................38 3.1.2 1000Base-T Ports ...................... 38 3.1.3 Mini-GBIC Slots ......................39 3.2 Rear Panel ........................... 41 XGS-4526/4528F/4728F User’s Guide...
Page 12 Table of Contents 3.2.1 XGS-4526 ........................41 3.2.2 XGS-4528F or XGS-4728F ..................41 3.2.3 Uplink Module ......................42 3.2.4 Rear Panel Connections .................... 42 3.2.5 Power Connector ....................... 43 3.2.6 External Backup Power Supply Connector ..............44 3.2.7 Console Port ......................44 3.3 LEDs...
Page 13 9.1 Introduction to IEEE 802.1Q Tagged VLANs ..............117 9.1.1 Forwarding Tagged and Untagged Frames ...............117 9.2 Automatic VLAN Registration ....................118 9.2.1 GARP ........................118 9.2.2 GVRP ........................118 9.3 Port VLAN Trunking ......................119 9.4 Select the VLAN Type ...................... 120 9.5 Static VLAN ........................120 XGS-4526/4528F/4728F User’s Guide...
Page 14 13.6 Configure Multiple Rapid Spanning Tree Protocol ............158 13.7 Multiple Rapid Spanning Tree Protocol Status ............160 13.8 Configure Multiple Spanning Tree Protocol ..............162 13.8.1 Multiple Spanning Tree Protocol Port Configuration ..........165 13.9 Multiple Spanning Tree Protocol Status ..............166 XGS-4526/4528F/4728F User’s Guide...
Page 15 18.2.3 Activate MAC Authentication ................. 194 Chapter 19 Port Security.......................... 197 19.1 About Port Security ......................197 19.2 Port Security Setup ......................198 19.3 VLAN MAC Address Limit ....................199 Chapter 20 Classifier..........................201 20.1 About the Classifier and QoS ..................201 XGS-4526/4528F/4728F User’s Guide...
Page 16 24.1.2 IGMP Filtering ......................227 24.1.3 IGMP Snooping ..................... 228 24.1.4 IGMP Snooping and VLANs ................... 228 24.2 Multicast Status ......................228 24.3 Multicast Setting ......................229 24.4 IGMP Snooping VLAN ....................232 24.5 IGMP Filtering Profile ..................... 233 XGS-4526/4528F/4728F User’s Guide...
Page 17 26.6.1 ARP Inspection VLAN Status ................. 275 26.6.2 ARP Inspection Log Status ..................276 26.7 ARP Inspection Configure ....................277 26.7.1 ARP Inspection Port Configure ................279 26.7.2 ARP Inspection VLAN Configure ................280 Chapter 27 Loop Guard..........................283 XGS-4526/4528F/4728F User’s Guide...
Page 18 Error Disable ......................... 309 32.1 CPU Protection Overview ....................309 32.2 Error-Disable Recovery Overview ................... 309 32.3 The Error Disable Screen ....................310 32.4 CPU Protection Configuration ..................310 32.5 Error-Disable Detect Configuration ..................311 32.6 Error-Disable Recovery Configuration ................313 XGS-4526/4528F/4728F User’s Guide...
Page 19 37.4.1 View OSPF Area Information Table ............... 339 37.5 Configuring OSPF Redistribution ................... 339 37.6 Configuring OSPF Interfaces ..................341 37.7 OSPF Virtual-Links ....................... 343 Chapter 38 IGMP............................345 38.1 IGMP Overview ....................... 345 38.1.1 How IGMP Works ....................346 XGS-4526/4528F/4728F User’s Guide...
Page 20 41.4.3 Global DHCP Relay Configuration Example ............366 41.5 Configuring DHCP VLAN Settings ................367 41.5.1 Example: DHCP Relay for Two VLANs ..............369 Chapter 42 VRRP ............................371 42.1 VRRP Overview ......................371 42.2 VRRP Status ........................372 XGS-4526/4528F/4728F User’s Guide...
Page 21 45.8.4 FTP Restrictions ....................395 Chapter 46 Access Control........................397 46.1 Access Control Overview .................... 397 46.2 The Access Control Main Screen ..................397 46.3 About SNMP ........................398 46.3.1 SNMP v3 and Security ................... 399 46.3.2 Supported MIBs ....................399 XGS-4526/4528F/4728F User’s Guide...
Page 22 49.2.1 Cluster Member Switch Management ..............437 49.3 Clustering Management Configuration ................440 Chapter 50 MAC Table..........................443 50.1 MAC Table Overview ...................... 443 50.2 Viewing the MAC Table ....................444 Chapter 51 IP Table ..........................447 51.1 IP Table Overview ......................447 XGS-4526/4528F/4728F User’s Guide...
Page 23 55.1 Power, Hardware Connections, and LEDs ..............457 55.2 Switch Access and Login ....................458 55.3 Switch Configuration ......................461 Chapter 56 Product Specifications ......................463 Appendix A Common Services..................... 473 Appendix B Legal Information ....................477 Index............................481 XGS-4526/4528F/4728F User’s Guide...
Page 24 Table of Contents XGS-4526/4528F/4728F User’s Guide...
Page 25: User's Guide
User’s Guide...
Page 27: Getting To Know Your Switch
12 Gigabit stacking ports. By integrating router functions, the Switch performs wire-speed layer-3 routing in addition to layer-2 switching. The XGS-4526 comes with 20 100/1000 Mbps Ethernet ports and 4 GbE dual personality interfaces. The XGS-4528F or XGS-4728F comes with 24 GbE dual personality interfaces.
Page 28: High Performance Switching Example
Trunking can be used if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link. Figure 2 High Performance Switching 10 Gbps Trunk Branch XGS-4526/4528F/4728F User’s Guide...
Page 29: Gigabit Ethernet To The Desktop
Ports in the same VLAN group share the same frame broadcast domain, thus increasing network performance by reducing broadcast traffic. VLAN groups can be modified at any time by adding, moving or changing ports without any re- cabling. XGS-4526/4528F/4728F User’s Guide...
Page 30: Ipv6 Support
• DHCPv6 client and relay • Multicast Listener Discovery (MLD) snooping and proxy For more information on IPv6, refer to the CLI Reference Guide. 1.2 Ways to Manage the Switch Use any of the following methods to manage the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 31: Good Habits For Managing The Switch
If you forget your password, you will have to reset the Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. XGS-4526/4528F/4728F User’s Guide...
Page 32 Chapter 1 Getting to Know Your Switch XGS-4526/4528F/4728F User’s Guide...
Page 33: Hardware Installation And Connection
Remove the adhesive backing from the rubber feet. Attach the rubber feet to each corner on the bottom of the Switch. These rubber feet help protect the Switch from shock or vibration and ensure space between devices when stacking. Figure 5 Attaching Rubber Feet XGS-4526/4528F/4728F User’s Guide...
Page 34: Chapter 2 Hardware Installation And Connection
2.2.2 Attaching the Mounting Brackets to the Switch Position a mounting bracket on one side of the Switch, lining up the four screw holes on the bracket with the screw holes on the side of the Switch. Figure 6 Attaching the Mounting Brackets XGS-4526/4528F/4728F User’s Guide...
Page 35: Mounting The Switch On A Rack
Figure 7 Mounting the Switch on a Rack Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. Repeat steps to attach the second mounting bracket on the other side of the rack. XGS-4526/4528F/4728F User’s Guide...
Page 36 Chapter 2 Hardware Installation and Connection XGS-4526/4528F/4728F User’s Guide...
Page 37: Hardware Overview
This chapter describes the front panel and rear panel of the Switch and shows you how to make the hardware connections. 3.1 Front Panel Connections The figure below shows the front panel of the Switch. Figure 8 Front Panel: XGS-4526 RJ-45 Gigabit / Mini- 100/1000 Mbps RJ-45 GBIC Dual Personality...
Page 38: Dual Personality Interfaces
An auto-negotiating port can detect and adjust to the optimum Ethernet speed (100/1000 Mbps) and duplex mode (full duplex or half duplex) of the connected device. An auto-crossover (auto-MDI/MDI-X) port automatically works with a straight- through or crossover Ethernet cable. XGS-4526/4528F/4728F User’s Guide...
Page 39: Mini-Gbic Slots
Use the following steps to install a mini GBIC transceiver (SFP or XFP module). Insert the transceiver into the slot with the exposed section of PCB board facing down. Figure 11 Transceiver Installation Example Press the transceiver firmly until it clicks into place. XGS-4526/4528F/4728F User’s Guide...
Page 40 Use the following steps to remove a mini GBIC transceiver (SFP module). Open the transceiver’s latch (latch styles vary). Figure 13 Opening the Transceiver’s Latch Example Pull the transceiver out of the slot. Figure 14 Transceiver Removal Example XGS-4526/4528F/4728F User’s Guide...
Page 41: Rear Panel
• An RJ-45 out-of-band management port (D) • An RS-232 management console port (E) • A connector for the power receptacle (F) • A power switch (G) (DC power input model only). Figure 16 Rear Panel - AC Model XGS-4526/4528F/4728F User’s Guide...
Page 42: Uplink Module
Connect to a computer using an RJ-45 Ethernet cable for local Port configuration of the Switch. Console Port Only connect this port to your computer (using an RS-232 cable) if you want to configure the Switch using the command line interface (CLI) via the console port. XGS-4526/4528F/4728F User’s Guide...
Page 43: Power Connector
Note: When installing the power wire, push it wire firmly into the terminal as deep as possible and make sure that no exposed (bare) wire can be seen or touched. Exposed power wire is dangerous. Use extreme care when connecting a DC power source to the device. To connect a power supply: XGS-4526/4528F/4728F User’s Guide...
Page 44: External Backup Power Supply Connector
• No flow control Connect the male 9-pin end of the RS-232 console cable to the console port of the Switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer. XGS-4526/4528F/4728F User’s Guide...
Page 45: Leds
The link to a 10/1000 Mbps Ethernet network is up. Amber Blinking The system is transmitting/receiving to/from a 100 Mbps Ethernet network. The link to a 100 Mbps Ethernet network is up. The link to an Ethernet network is down. 1000Base-X Mini-GBIC Slots ( XGS-4526/4528F/4728F User’s Guide...
Page 46 Chapter 3 Hardware Overview Table 3 LEDs (continued) COLO STATUS DESCRIPTION 1-24 or Green The port has a successful connection. 21-24 Blinking The port is receiving or transmitting data. This link is disconnected. XGS-4526/4528F/4728F User’s Guide...
Page 47: The Web Configurator
Type “http://” and the IP address of the Switch (for example, the default management IP address is 192.168.1.1 through an in-band (non-MGMT) port and 192.168.0.1 through the MGMT port) in the Location or Address field. Press [ENTER]. XGS-4526/4528F/4728F User’s Guide...
Page 48: The Web Configurator Layout
4.3 The Web Configurator Layout The Status screen is the first screen that displays when you access the web configurator. This guide uses the XGS-4728F screens as an example. The screens may vary slightly for different models. XGS-4526/4528F/4728F User’s Guide...
Page 49 C - Click this link to go to the status page of the Switch. D - Click this link to log out of the web configurator. E - Click this link to display web help pages. The help pages provide descriptions for all of the configuration screens. XGS-4526/4528F/4728F User’s Guide...
Page 50 (necessary for Switch management) and DNS (domain name server) and set up to 64 IP routing domains. Port Setup This link takes you to screens where you can configure speed, flow control and priority settings for individual Switch ports. Advanced Application XGS-4526/4528F/4728F User’s Guide...
Page 51 This link takes you to screens where you can configure filtering of Guard unauthorized DHCP and ARP packets in your network. Loop Guard This link takes you to a screen where you can configure protection against network loops that occur on the edge of your network. XGS-4526/4528F/4728F User’s Guide...
Page 52 This link takes you to screens where you can change the system login password and configure SNMP and remote management. Diagnostic This link takes you to screens where you can view system logs and can test port(s). XGS-4526/4528F/4728F User’s Guide...
Page 53: Change Your Password
4.3.1 Change Your Password After you log in for the first time, it is recommended you change the default administrator password. Click Management > Access Control > Logins to display the next screen. Figure 21 Change Administrator Login Password XGS-4526/4528F/4728F User’s Guide...
Page 54: Saving Your Configuration
Switch. 4.6 Resetting the Switch If you lock yourself (and others) from the Switch or forget the administrator password, you will need to reload the factory-default configuration file or reset the Switch back to the factory defaults. XGS-4526/4528F/4728F User’s Guide...
Page 55: Reload The Configuration File
FLASH: Intel 64M ZyNOS Version: V4.00(BBC.0)b1 | 10/14/2010 17:32:18 Press any key to enter debug mode within 3 seconds........Enter Debug Mode ras> atlc Starting XMODEM upload (CRC mode)..CCCCCCCCCCCCCCCC Total 393216 bytes received. Erasing..............ras> atgo XGS-4526/4528F/4728F User’s Guide...
Page 56: Logging Out Of The Web Configurator
Figure 23 Web Configurator: Logout Screen 4.8 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. XGS-4526/4528F/4728F User’s Guide...
Page 57: Initial Setup Example
In the example network, since the RD network is already in the same IP interface as the Switch, you don’t need to create an IP interface for it. However, if you want to have the Sales network on a different routing domain, you need to create a XGS-4526/4528F/4728F User’s Guide...
Page 58 Click Basic Setting and IP Setup in the navigation panel. Configure the related fields in the IP Setup screen. EXAMPLE For the Sales network, enter 192.168.2.1 as the IP address and 255.255.255.0 as the subnet mask. XGS-4526/4528F/4728F User’s Guide...
Page 59: Configuring Dhcp Server Settings
Switch’s power is turned off. 5.1.3 Creating a VLAN VLANs confine broadcast frames to the VLAN group in which the port(s) belongs. You can do this with port-based VLAN or tagged static VLAN with fixed port members. XGS-4526/4528F/4728F User’s Guide...
Page 60 Name field and enter 2 in the VLAN Group ID field for the VLAN2 network. EXAMPLE Note: The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to the same VLAN ID. XGS-4526/4528F/4728F User’s Guide...
Page 61: Setting Port Vid
Setting link. Enter 2 in the PVID field for port 1 and click Apply to save your changes back to the run-time EXAMPLE memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XGS-4526/4528F/4728F User’s Guide...
Page 62: Enabling Rip
In the Version field, select RIP-1 for the RIP packet format that is universally EXAMPLE supported. Click Apply to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XGS-4526/4528F/4728F User’s Guide...
Page 63: Tutorials
VLAN network (V). Create a VLAN containing ports 5, 6 and 7. Connect a computer M to the Switch’s MGMT port. Figure 27 Tutorial: DHCP Snooping Tutorial Overview Note: For related information about DHCP snooping, see Section 26.1 on page 259. XGS-4526/4528F/4728F User’s Guide...
Page 64 Go to Advanced Application > VLAN > Static VLAN, and create a VLAN with ID of 100. Add ports 5, 6 and 7 in the VLAN by selecting Fixed in the Control field as shown. Deselect Tx Tagging because you don’t want outgoing traffic to contain this VLAN tag. Click Add. XGS-4526/4528F/4728F User’s Guide...
Page 65 7 with the tag 100. Go to Advanced Application > IP Source Guard > DHCP snooping > Configure, activate and specify VLAN 100 as the DHCP VLAN as shown. Click Apply. Click the Port link at the top right corner. XGS-4526/4528F/4728F User’s Guide...
Page 66 VLAN ID or system name, you can also select the Option82 and Information fields in the entry. See Section 26.1.1.3 on page 261. Click Save at the top right corner of the web configurator to save the configuration permanently. XGS-4526/4528F/4728F User’s Guide...
Page 67: How To Use Dhcp Relay On The Switch
DHCP requests. 6.2.1 DHCP Relay Tutorial Introduction In this example, you have configured your DHCP server (192.168.2.3) and want to have it assign a specific IP address (say 172.16.1.18) and gateway information to XGS-4526/4528F/4728F User’s Guide...
Page 68: Creating A Vlan
Access the web configurator through the Switch’s management port. Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click Apply to save the settings to the run-time memory. Click Advanced Application > VLAN > Static VLAN. XGS-4526/4528F/4728F User’s Guide...
Page 69 Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending. Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XGS-4526/4528F/4728F User’s Guide...
Page 70 VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory. 11 Click the Save link in the upper right corner of the web configurator to save your configuration permanently. XGS-4526/4528F/4728F User’s Guide...
Page 71: Configuring Dhcp Relay
Check the client A’s IP address. If it did not receive the IP address 172.16.1.18, make sure: Client A is connected to the Switch’s port 2 in VLAN 102. You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 72: How To Use Pppoe Ia On The Switch
Table 7 Settings in this Tutorial PORT PPPOE IA PORT SWITCH VLAN CIRCUIT-ID REMOTE-ID CONNECTED TRUSTED Port 5 (to C) userC 00134900000A Untrusted Port 12 (to B) Trusted Port 11 (to A) Trusted Port 12 (to S) Trusted XGS-4526/4528F/4728F User’s Guide...
Page 73: Configuring Switch A
Select Untrusted for port 5 and enter userC as Circuit-id and 00134900000A as Remote-id. Select Trusted for port 12 and then leave the other fields empty. Click Apply. Then Click Intermediate Agent on the top of the screen. XGS-4526/4528F/4728F User’s Guide...
Page 74 The Intermediate Agent screen appears. Click VLAN on the top of the screen. Enter 1 for both Start VID and End VID since both the Switch and PPPoE server are in VLAN 1 in this example. Click Apply. XGS-4526/4528F/4728F User’s Guide...
Page 75: Configuring Switch B
VLAN 1 and pass to the PPPoE server. Click Apply. 6.3.2 Configuring Switch B The example uses another XGS-4728F as switch B. Click Advanced Application > PPPoE > Intermediate Agent. Select Active then click Apply. Click Port on the top of the screen. XGS-4526/4528F/4728F User’s Guide...
Page 76 Chapter 6 Tutorials Select Trusted for ports 11 and 12 and then click Apply. Then Click Intermediate Agent on the top of the screen. The Intermediate Agent screen appears. Click VLAN on the top of the screen. XGS-4526/4528F/4728F User’s Guide...
Page 77: How To Use Error Disable And Recovery On The Switch
6.4 How to Use Error Disable and Recovery on the Switch This tutorial shows you how to shut down a port when: • there is a loop occurred • too many ARP requests (over 100 packets per second) received on a port XGS-4526/4528F/4728F User’s Guide...
Page 78 First, click Advanced Application > Loop Guard. Select the Active option in the first section to enable loop guard on the Switch. Then select the Active option of the first entry (port *) to enable loop guard for all ports. Click Apply. XGS-4526/4528F/4728F User’s Guide...
Page 79 100 as the rate limit (packets per second) for the first entry (port *) to apply the setting to all ports. Then click Apply. Click Advanced Application > Errdisable > Errdisable Detect, select Active for cause ARP and inactive-port as the mode. Then click Apply. XGS-4526/4528F/4728F User’s Guide...
Page 80: How To Set Up A Guest Vlan
Internet through the default gateway attached to port 10, but are not allowed to access other network resources, such as the mail server or local data base. VLAN 1 Internet Guest VLAN 200 Ports 1, 2, 3 and 10 XGS-4526/4528F/4728F User’s Guide...
Page 81: Creating A Guest Vlan
Select Fixed to configure ports 1, 2, 3 and 10 to be permanent members of this VLAN. Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending frames out of these ports. XGS-4526/4528F/4728F User’s Guide...
Page 82 Enter 200 in the PVID field for ports 1, 2, 3 and 10 to add a tag to incoming untagged frames received on these ports so that the frames are forwarded to the VLAN group that the tag defines. XGS-4526/4528F/4728F User’s Guide...
Page 83: Enabling Ieee 802.1X Port Authentication
6.5.2 Enabling IEEE 802.1x Port Authentication Follow the steps below to enable port authentication to validate access to ports 1~8 to clients based on a RADIUS server. Click Advanced Application > Port Authentication and then the Click Here link for 802.1x. XGS-4526/4528F/4728F User’s Guide...
Page 84: Enabling Guest Vlan
Select the first Active checkbox to enable 802.1x authentication on the Switch. Select the Active checkboxes for ports 1 to 8 to turn on 802.1x authentication on the selected ports. Click Apply. 6.5.3 Enabling Guest VLAN Click the Guest Vlan link in the 802.1x screen. XGS-4526/4528F/4728F User’s Guide...
Page 85: How To Do Port Isolation In A Vlan
6.6 How to Do Port Isolation in a VLAN You want to prevent communications between specific ports in a VLAN but still allow them to access the Internet or network resources in the same VLAN. You use XGS-4526/4528F/4728F User’s Guide...
Page 86: Creating A Vlan
Access the web configurator through the Switch’s management port. Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click Apply to save the settings to the run-time memory. Click Advanced Application > VLAN > Static VLAN. XGS-4526/4528F/4728F User’s Guide...
Page 87 Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending frames out of these ports. Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. XGS-4526/4528F/4728F User’s Guide...
Page 88 VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory. 11 Click the Save link in the upper right corner of the web configurator to save your configuration permanently. XGS-4526/4528F/4728F User’s Guide...
Page 89: Creating A Private Vlan Rule
Click the Save link in the upper right corner of the web configurator to save your configuration permanently. From port 2, 3, or 4, you should be able to access the device that attachs to port 5, such as a server or default gateway. XGS-4526/4528F/4728F User’s Guide...
Page 90: How To Configure Routing Policy
Access the web configurator through the Switch’s management port. Go to Advanced Application > Classifier and select Active. Enter a descriptive name (“DSCP58” in this example). Select the second option of DSCP and enter 58 in the field provided. XGS-4526/4528F/4728F User’s Guide...
Page 91: Create A Policy Routing Rule
DSCP58 to gateway R2. Click IP Application > Policy Routing. Select Active and enter a descriptive name for this profile (“To_R2” for example). Click Add to save the settings to the run-time memory. XGS-4526/4528F/4728F User’s Guide...
Page 92 Enter the IP address of gateway R2 in the Next Hop field (“10.1.2.3” in this example). Click Add to save the settings to the run-time memory. Click the Save link in the upper right corner of the web configurator to save your configuration permanently. XGS-4526/4528F/4728F User’s Guide...
Page 93: Technical Reference
Technical Reference...
Page 95: System Status And Port Statistics
The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details. 7.2 Port Status Summary To view the port statistics, click Status in all web configurator screens to display the Status screen as shown next. Figure 30 Status XGS-4526/4528F/4728F User’s Guide...
Page 96: Chapter 7 System Status And Port Statistics
This field shows the total amount of time in hours, minutes and seconds the port has been up. Clear Counter Type a port number, select Port and then click Clear Counter to erase the recorded statistical information for that port, or select Any to clear statistics for all ports. XGS-4526/4528F/4728F User’s Guide...
Page 97: Status: Port Details
This field displays the speed (either 10M for 10Mbps, 100M for 100Mbpsl, 1000M for 1000 Mbps, and 10G for 10 Gbps) and the duplex (F for full duplex or H for half duplex). It also shows the cable type (Copper or Fiber). XGS-4526/4528F/4728F User’s Guide...
Page 98 This is the number of times a late collision is detected, that is, after 512 bits of the packets have already been transmitted. Error Packet The following fields display detailed information about packets received that were in error. XGS-4526/4528F/4728F User’s Guide...
Page 99 This field shows the number of packets (including bad packets) received that were between 1519 octets and the maximum frame size. The maximum frame size varies depending on your switch model. See Chapter 56 on page 463. XGS-4526/4528F/4728F User’s Guide...
Page 100 Chapter 7 System Status and Port Statistics XGS-4526/4528F/4728F User’s Guide...
Page 101: Basic Setting
DNS (domain name server) for management purposes. The Port Setup screen allows you to enable or disable a port on the Switch and configure the port settings, such as the speed and duplex mode. XGS-4526/4528F/4728F User’s Guide...
Page 102: System Information
BOARD, PHY, and MAC refer to the location of the temperature sensors on the Switch printed circuit board. Current This shows the current temperature at this sensor. This field displays the maximum temperature measured at this sensor. This field displays the minimum temperature measured at this sensor. XGS-4526/4528F/4728F User’s Guide...
Page 103 This field displays the minimum voltage measured at this point. Threshold This field displays the percentage tolerance of the voltage with which the Switch still works. Status Normal indicates that the voltage is within an acceptable operating range at this point; otherwise Error is displayed. XGS-4526/4528F/4728F User’s Guide...
Page 104: General Setup
Type the geographic location of your Switch. You can use up to 32 printable ASCII characters; spaces are allowed. Contact Type the name of the person in charge of this Switch. You can use up to Person's Name 32 printable ASCII characters; spaces are allowed. XGS-4526/4528F/4728F User’s Guide...
Page 105 European Union you would select Last, Sunday, March and the last field depends on your time zone. In Germany for instance, you would select 2:00 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). XGS-4526/4528F/4728F User’s Guide...
Page 106: Introduction To Vlans
With VLAN, all broadcasts are confined to a specific broadcast domain. Note: VLAN is unidirectional; it only governs outgoing traffic. Chapter 9 on page 117 for information on port-based and 802.1Q tagged VLANs. XGS-4526/4528F/4728F User’s Guide...
Page 107: Smart Isolation
Designated port: 8 You should enable RSTP or MRSTP before you can use smart isolation on the Switch. If the network topology changes, the Switch automatically updates the isolated port list with the latest designated port information. XGS-4526/4528F/4728F User’s Guide...
Page 108: Switch Setup Screen
Chapter 9 on page 117 for more information. Bridge Control Select Active to allow the Switch to handle bridging control protocols Protocol (STP, for example). You also need to define how to treat a BPDU in the Transparency Port Setup screen. XGS-4526/4528F/4728F User’s Guide...
Page 109 Typically used for network control traffic such as router configuration messages. Level 6 Typically used for voice traffic that is especially sensitive to jitter (jitter is the variations in delay). Level 5 Typically used for video that consumes high bandwidth and is sensitive to jitter. XGS-4526/4528F/4728F User’s Guide...
Page 110: Ip Setup
IP address without additional routers. You can configure multiple routing domains on the same VLAN as long as the IP address ranges for the domains do not overlap. To change the IP address of the XGS-4526/4528F/4728F User’s Guide...
Page 111 Select In-Band to have the Switch send the packets to all ports except the management port (labelled MGMT) to which connected device(s) do not receive these packets. Management IP Address Use these fields to set the settings for the out-of-band management port. XGS-4526/4528F/4728F User’s Guide...
Page 112 This field displays the VLAN identification number of the IP domain on the Switch. Delete Click Delete to remove the selected entry from the summary table. Note: Deleting all IP subnets locks you out of the Switch. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 113: Port Setup
Note: Due to space limitations, the port name may be truncated in some web configurator screens. Type This field displays 10/100/1000M for a 1000Base-T connection, 10G for a 10 Gigabit Ethernet connection, and 12G for a 10GBase-CX4 connection in the XGS-4528F or XGS-4728F. XGS-4526/4528F/4728F User’s Guide...
Page 114 Select Network to process a BPDU with no VLAN tag and forward a tagged BPDU. CX4 Cable For the XGS-4526, this field is available when you install an EM-412 module in the Switch’s optional uplink module slot (see Section 3.2 on page 41).
Page 115 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 116 Chapter 8 Basic Setting XGS-4526/4528F/4728F User’s Guide...
Page 117: Vlan
3 Bits 1 Bit 12 bits 9.1.1 Forwarding Tagged and Untagged Frames Each port on the Switch is capable of passing tagged or untagged frames. To forward a frame from an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware XGS-4526/4528F/4728F User’s Guide...
Page 118: Automatic Vlan Registration
Please refer to the following table for common IEEE 802.1Q VLAN terminology. Table 15 IEEE 802.1Q VLAN Terminology VLAN TERM DESCRIPTION PARAMETER VLAN Type Permanent VLAN This is a static VLAN created manually. Dynamic VLAN This is a VLAN configured by a GVRP registration/ deregistration process. XGS-4526/4528F/4728F User’s Guide...
Page 119: Port Vlan Trunking
VLAN group tags. However, with VLAN Trunking enabled on a port(s) in each intermediary switch you only need to create VLAN groups in the end devices (A and B). C, D and E automatically XGS-4526/4528F/4728F User’s Guide...
Page 120: Select The Vlan Type
• sent to a group whether it has a VLAN tag or not. • blocked from a VLAN group regardless of its VLAN tag. You can also tag all outgoing frames (that were previously untagged) from a port with the specified VID. XGS-4526/4528F/4728F User’s Guide...
Page 121: Vlan Status
GVRP, static - added as a permanent entry or other - added in another way such as via Multicast VLAN Registration (MVR). Change Pages Click Previous or Next to show the previous/next screen if all status information cannot be seen in one screen. XGS-4526/4528F/4728F User’s Guide...
Page 122: Vlan Details
Multicast VLAN Registration (MVR). 9.5.3 Configure a Static VLAN Use this screen to configure and view 802.1Q VLAN parameters for the Switch. Section 9.1 on page 117 for more information on static VLAN. To configure a XGS-4526/4528F/4728F User’s Guide...
Page 123 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS-4526/4528F/4728F User’s Guide...
Page 124: Configure Vlan Port Settings
See Section 9.1 on page 117 for more information on static VLAN. Click the VLAN Port Setting link in the VLAN Status screen. Figure 42 Advanced Application > VLAN > VLAN Port Setting XGS-4526/4528F/4728F User’s Guide...
Page 125 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 126: Subnet Based Vlans
That is, video services receive the highest priority and data the lowest. Figure 43 Subnet Based VLAN Application Example Tagged Frames Internet Untagged Frames 10.1.1.0/24 172.16.1.0/24 192.168.1.0/24 VID = 300 VID = 100 VID = 200 XGS-4526/4528F/4728F User’s Guide...
Page 127: Configuring Subnet Based Vlan
Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Active Check this box to activate the IP subnet VLAN you are creating or editing. Name Enter up to 32 alphanumeric characters to identify this subnet based VLAN. XGS-4526/4528F/4728F User’s Guide...
Page 128: Protocol Based Vlans
VLAN. One advantage of using protocol based VLANs is that priority can be assigned to traffic of the same protocol. Note: Protocol based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. XGS-4526/4528F/4728F User’s Guide...
Page 129: Configuring Protocol Based Vlan
Figure 45 Protocol Based VLAN Application Example 9.9 Configuring Protocol Based VLAN Click Protocol Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. Figure 46 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN XGS-4526/4528F/4728F User’s Guide...
Page 130 This field shows the priority which is assigned to frames belonging to this protocol based VLAN. Delete Click this to delete the protocol based VLANs which you marked for deletion. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 131: Create An Ip-Based Vlan Example
To add more ports to this protocol based VLAN. Click the index number of the protocol based VLAN entry. Click 1 Change the value in the Port field to the next port you want to add. Click Add. XGS-4526/4528F/4728F User’s Guide...
Page 132: Port-Based Vlan Setup
Connected or Port Isolated from the drop-down list depending on your VLAN and VLAN security requirements. If VLAN members need to communicate directly with each other, then select All Connected. Select Port Isolated if you want to restrict users from communicating directly. Click Apply to save your settings. XGS-4526/4528F/4728F User’s Guide...
Page 133 Chapter 9 VLAN The following screen shows users on a port-based, all-connected VLAN configuration. Figure 48 Advanced Application > VLAN > Port Based VLAN Setup (All Connected) XGS-4526/4528F/4728F User’s Guide...
Page 134 Chapter 9 VLAN The following screen shows users on a port-based, port-isolated VLAN configuration. Figure 49 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation) XGS-4526/4528F/4728F User’s Guide...
Page 135 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 136 Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide...
Page 137: Static Mac Forward Setup
Static MAC address forwarding together with port security allows only computers in the MAC address table on a port to access the Switch. See Chapter 19 on page for more information on port security. XGS-4526/4528F/4728F User’s Guide...
Page 138 MAC address-forwarding rule. MAC Address This field displays the MAC address that will be forwarded and the VLAN identification number to which the MAC address belongs. This field displays the ID number of the VLAN group. XGS-4526/4528F/4728F User’s Guide...
Page 139 This field displays the port where the MAC address shown in the next field will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 140 Chapter 10 Static MAC Forward Setup XGS-4526/4528F/4728F User’s Guide...
Page 141: Static Multicast Forward Setup
24.3 on page 229). Figure 51 shows such unknown multicast frames flooded to all ports. With static multicast forwarding, you can forward these multicasts to port(s) within a VLAN group. Figure 52 shows frames being forwarded to devices XGS-4526/4528F/4728F User’s Guide...
Page 142: Configuring Static Multicast Forwarding
Figure 52 Static Multicast Forwarding to A Single Port Figure 53 Static Multicast Forwarding to Multiple Ports 11.2 Configuring Static Multicast Forwarding Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). XGS-4526/4528F/4728F User’s Guide...
Page 143 Cancel Click Cancel to reset the fields to their last saved values. Clear Click Clear to begin configuring this screen afresh. Index Click an index number to modify a static multicast MAC address rule for port(s). XGS-4526/4528F/4728F User’s Guide...
Page 144 This field displays the port(s) within a identified VLAN group to which frames containing the specified multicast MAC address will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 145: Filtering
Make sure to select this check box to activate your rule. You may temporarily deactivate a rule without deleting it by deselecting this check box. Name Type a descriptive name (up to 32 printable ASCII characters) for this rule. This is for identification only. XGS-4526/4528F/4728F User’s Guide...
Page 146 This field displays the VLAN group identification number. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. XGS-4526/4528F/4728F User’s Guide...
Page 147: Spanning Tree Protocol
Both RSTP and STP flush unwanted learned addresses from the filtering database. In RSTP, the port states are Discarding, Learning, and Forwarding. Note: In this user’s guide, “STP” refers to both STP and RSTP. 13.1.1 STP Terminology The root bridge is the base of the spanning tree. XGS-4526/4528F/4728F User’s Guide...
Page 148: How Stp Works
Hello BPDU after a predefined interval (Max Age), the bridge assumes that the link to the root bridge is down. This bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a valid network topology. XGS-4526/4528F/4728F User’s Guide...
Page 149: Stp Port States
In the following example, there are two RSTP instances (MRSTP 1 and MRSTP2) on switch A. Figure 56 MRSTP Network Example To set up MRSTP, activate MRSTP on the Switch and specify which port(s) belong to which spanning tree. XGS-4526/4528F/4728F User’s Guide...
Page 150: Multiple Stp
If the switches are using STP or RSTP, the link for VLAN 2 will be blocked as STP and RSTP allow only one link in the network and block the redundant link. Figure 57 STP/RSTP Network Example VLAN 1 VLAN 2 XGS-4526/4528F/4728F User’s Guide...
Page 151 An MST Instance (MSTI) is a spanning tree instance. VLANs can be configured to run on a specific MSTI. Each created MSTI is identified by a unique number (known as an MST ID) known internally to a region. Thus an MSTI does not span across MST regions. XGS-4526/4528F/4728F User’s Guide...
Page 152 MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. Figure 60 MSTP and Legacy RSTP Network Example XGS-4526/4528F/4728F User’s Guide...
Page 153: Spanning Tree Protocol Status Screen
13.3 Spanning Tree Configuration Use the Spanning Tree Configuration screen to activate one of the STP modes on the Switch. Click Configuration in the Advanced Application > Spanning Tree Protocol. Figure 62 Advanced Application > Spanning Tree Protocol > Configuration XGS-4526/4528F/4728F User’s Guide...
Page 154: Configure Rapid Spanning Tree Protocol
Use this screen to configure RSTP settings, see Section 13.1 on page 147 for more information on RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 63 Advanced Application > Spanning Tree Protocol > RSTP XGS-4526/4528F/4728F User’s Guide...
Page 155 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS-4526/4528F/4728F User’s Guide...
Page 156: Rapid Spanning Tree Protocol Status
Click Cancel to begin configuring this screen afresh. 13.5 Rapid Spanning Tree Protocol Status Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 147 more information on RSTP. XGS-4526/4528F/4728F User’s Guide...
Page 157 Switch must communicate with the root of the Spanning Tree. Topology This is the number of times the spanning tree has been reconfigured. Changed Times Time Since Last This is the time since the spanning tree was last reconfigured. Change XGS-4526/4528F/4728F User’s Guide...
Page 158: Configure Multiple Rapid Spanning Tree Protocol
Select this check box to activate an STP tree. Clear this checkbox to disable an STP tree. Note: You must also activate Multiple Rapid Spanning Tree in the Advanced Application > Spanning Tree Protocol > Configuration screen to enable MRSTP on the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 159 Note: An edge port becomes a non-edge port as soon as it receives a Bridge Protocol Data Unit (BPDU). XGS-4526/4528F/4728F User’s Guide...
Page 160: Multiple Rapid Spanning Tree Protocol Status
See Section 13.1 on page 147 more information on MRSTP. Note: This screen is only available after you activate MRSTP on the Switch. Figure 66 Advanced Application > Spanning Tree Protocol > Status: MRSTP XGS-4526/4528F/4728F User’s Guide...
Page 161 Switch must communicate with the root of the Spanning Tree. Topology This is the number of times the spanning tree has been reconfigured. Changed Times Time Since Last This is the time since the spanning tree was last reconfigured. Change XGS-4526/4528F/4728F User’s Guide...
Page 162: Configure Multiple Spanning Tree Protocol
13.8 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 13.1.5 on page 150 for more information on MSTP. Figure 67 Advanced Application > Spanning Tree Protocol > MSTP XGS-4526/4528F/4728F User’s Guide...
Page 163 Click Cancel to begin configuring this screen afresh. Instance Use this section to configure MSTI (Multiple Spanning Tree Instance) settings. Instance Enter the number you want to use to identify this MST instance on the Switch. The Switch supports instance numbers 0-16. XGS-4526/4528F/4728F User’s Guide...
Page 164 This field displays the ID of an MST instance. VLAN This field displays the VID (or VID ranges) to which the MST instance is mapped. Active Port This field display the ports configured to participate in the MST instance. XGS-4526/4528F/4728F User’s Guide...
Page 165: Multiple Spanning Tree Protocol Port Configuration
Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS-4526/4528F/4728F User’s Guide...
Page 166: Multiple Spanning Tree Protocol Status
See Section 13.1.5 on page 150 more information on MSTP. Note: This screen is only available after you activate MSTP on the Switch. Figure 69 Advanced Application > Spanning Tree Protocol > Status: MSTP XGS-4526/4528F/4728F User’s Guide...
Page 167 This Switch may also be the root bridge. Bridge ID This is the unique identifier for this bridge, consisting of bridge priority plus MAC address. This ID is the same for Root and Our Bridge if the Switch is the root switch. XGS-4526/4528F/4728F User’s Guide...
Page 168 This is the path cost from the root port in this MST instance to the regional root switch. Port ID This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the MST instance. XGS-4526/4528F/4728F User’s Guide...
Page 169: Bandwidth Control
CIR will be marked for drop. Note: The CIR should be less than the PIR. Note: The sum of CIRs cannot be greater than or equal to the uplink bandwidth. XGS-4526/4528F/4728F User’s Guide...
Page 170: Bandwidth Control Setup
The sum of commit rates cannot be greater than or equal to the uplink bandwidth. Active Select this check box to activate peak rate limits on this port. Peak Specify the maximum bandwidth allowed in kilobits per second (Kbps) for Rate the incoming traffic flow on a port. XGS-4526/4528F/4728F User’s Guide...
Page 171 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 172 Chapter 14 Bandwidth Control XGS-4526/4528F/4728F User’s Guide...
Page 173: Broadcast Storm Control
DLF packets in your network. You can specify limits for each packet type on each port. Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. Figure 71 Advanced Application > Broadcast Storm Control XGS-4526/4528F/4728F User’s Guide...
Page 174 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 175: Mirroring
Click Advanced Application > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 72 Advanced Application > Mirroring XGS-4526/4528F/4728F User’s Guide...
Page 176 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 177: Link Aggregation
The Switch adheres to the IEEE 802.3ad standard for static and dynamic (LACP) port trunking. The Switch supports the link aggregation IEEE802.3ad standard. This standard describes the Link Aggregation Control Protocol (LACP), which is a protocol that dynamically creates and manages trunk groups. XGS-4526/4528F/4728F User’s Guide...
Page 178: Link Aggregation Id
Table 40 Link Aggregation ID: Peer Switch SYSTEM PORT PORT MAC ADDRESS PRIORITY PRIORITY NUMBER 0000 00-00-00-00-00-00 0000 0000 Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. XGS-4526/4528F/4728F User’s Guide...
Page 179: Link Aggregation Status
Refer to Section 17.2.1 on page 178 for more information on this field. The ID displays only when there is a port belonging to this trunk group and LACP is also enabled for this group. XGS-4526/4528F/4728F User’s Guide...
Page 180 This field displays how these ports were added to the trunk group. It displays: • Static - if the ports are configured as static members of a trunk group. • LACP - if the ports are configured to join a trunk group via LACP. XGS-4526/4528F/4728F User’s Guide...
Page 181: Link Aggregation Setting
This is the only screen you need to configure to enable static link Aggregation aggregation. Setting Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this option to activate a trunk group. XGS-4526/4528F/4728F User’s Guide...
Page 182 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 183: Link Aggregation Control Protocol
Click in the Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Section 17.2 on page 177 for more information on dynamic link aggregation. Figure 75 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP XGS-4526/4528F/4728F User’s Guide...
Page 184: Static Trunking Example
Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 17.6 Static Trunking Example This example shows you how to create a static port trunk group for ports 2-5. XGS-4526/4528F/4728F User’s Guide...
Page 185 Click Apply when you are done. Figure 77 Trunking Example - Configuration Screen EXAMPLE Your trunk group 1 (T1) configuration is now complete. XGS-4526/4528F/4728F User’s Guide...
Page 186 Chapter 17 Link Aggregation XGS-4526/4528F/4728F User’s Guide...
Page 187: Port Authentication
When the client provides the login At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. XGS-4526/4528F/4728F User’s Guide...
Page 188: Mac Authentication
MAC authentication works in a very similar way to IEEE 802.1x authentication. The main difference is that the Switch does not prompt the client for login credentials. The login credentials are based on the source MAC address of the XGS-4526/4528F/4728F User’s Guide...
Page 189: Port Authentication Configuration
AAA > Radius Server Setup screen. To activate a port authentication method, click Advanced Application > Port Authentication in the navigation panel. Select a port authentication method in the screen that appears. Figure 80 Advanced Application > Port Authentication XGS-4526/4528F/4728F User’s Guide...
Page 190: Activate Ieee 802.1X Security
Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this checkbox to permit 802.1x authentication on this port. You must first allow 802.1x authentication on the Switch before configuring it on each port. XGS-4526/4528F/4728F User’s Guide...
Page 191: Guest Vlan
VLAN. That is, unauthenticated users can have access to limited network resources in the same guest VLAN, such as the Internet. The XGS-4526/4528F/4728F User’s Guide...
Page 192 Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication > 802.1x screen click Guest Vlan to display the configuration screen as shown. Figure 83 Advanced Application > Port Authentication > 802.1x > Guest VLAN XGS-4526/4528F/4728F User’s Guide...
Page 193 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 194: Activate Mac Authentication
If you leave this field blank, then only the MAC address of the client is forwarded to the RADIUS server. Password Type the password the Switch sends along with the MAC address of a client for authentication with the RADIUS server. You can enter up to 32 printable ASCII characters. XGS-4526/4528F/4728F User’s Guide...
Page 195 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 196 Chapter 18 Port Authentication XGS-4526/4528F/4728F User’s Guide...
Page 197: Port Security
4728F can learn up to 16K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 16K. The XGS-4526 or XGS-4528F can learn up to 8K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 8K.
Page 198: Port Security Setup
Use this row only if you want to make some of the settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS-4526/4528F/4728F User’s Guide...
Page 199: Vlan Mac Address Limit
MAC addresses ages out. MAC address aging out time can be set in the Switch Setup screen. The valid range is from “0” to “16384” in the XGS-4728F and from “0” to “8192” in the XGS-4526 or XGS-4528F. “0” means this feature is disabled.
Page 200 Switch Setup screen. The valid range is from “0” to “16384” in the XGS-4728F and from “0” to “8192” in the XGS-4526 or XGS-4528F. “0” means this feature is disabled. Click Add to save your changes to the Switch’s run-time memory. The...
Page 201: Classifier
Use the Classifier screen to define the classifiers. After you define the classifier, you can specify actions (or policy) to act upon the traffic that matches the rules. To configure policy rules, refer to Chapter 21 on page 207. XGS-4526/4528F/4728F User’s Guide...
Page 202 Ethernet II tagged and Ethernet II untagged. A value of 802.3 indicates that the packets are formatted according to the IEEE 802.3 standards. A value of Ethernet II indicates that the packets are formatted according to RFC 894, Ethernet II encapsulation. XGS-4526/4528F/4728F User’s Guide...
Page 203 TCP/UDP protocol port number. Destination Enter a destination IP address in dotted decimal notation. Address/ Specify the address prefix by entering the number of ones in the subnet mask. Address Prefix XGS-4526/4528F/4728F User’s Guide...
Page 204: Viewing And Editing Classifier Configuration
This field displays Yes when the rule is activated and No when it is deactivated. Name This field displays the descriptive name for this rule. This is for identification purposes only. Rule This field displays a summary of the classifier rule’s settings. XGS-4526/4528F/4728F User’s Guide...
Page 205 0805 XNS Compat 0807 Banyan Systems 0BAD BBN Simnet 5208 IBM SNA 80D5 AppleTalk AARP 80F3 Some of the most common IP ports are: Table 52 Common IP Ports PORT PORT NAME NUMBER Telnet SMTP HTTP POP3 XGS-4526/4528F/4728F User’s Guide...
Page 206: Classifier Example
Figure 89 Classifier: Example EXAMPLE After you have configured a classifier, you can configure a policy to define action(s) on the classified traffic flow. See Chapter 21 on page 207 for information on configuring a policy rule. XGS-4526/4528F/4728F User’s Guide...
Page 207: Policy Rule
DS field. DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. DSCP (6 bits) Unused (2 bits) XGS-4526/4528F/4728F User’s Guide...
Page 208: Configuring Policy Rules
DSCP values and the configured policies. 21.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to Section 20.2 on page 201 for more information. XGS-4526/4528F/4728F User’s Guide...
Page 209 Figure 90 Advanced Application > Policy Rule The following table describes the labels in this screen. Table 53 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option to enable the policy. Name Enter a descriptive name for identification purposes. XGS-4526/4528F/4728F User’s Guide...
Page 210 Select Replace the IP TOS with the 802.1p priority value to replace the TOS field with the value you configure in the Priority field. Select Set the Diffserv Codepoint field in the frame to set the DSCP field with the value you configure in the DSCP field. XGS-4526/4528F/4728F User’s Guide...
Page 211: Viewing And Editing Policy Configuration
To view a summary of the classifier configuration, scroll down to the summary table at the bottom of the Policy screen. To change the settings of a rule, click a number in the Index field. Figure 91 Advanced Application > Policy Rule: Summary Table XGS-4526/4528F/4728F User’s Guide...
Page 212 This field displays the name you have assigned to this policy. Classifier(s) This field displays the name(s) of the classifier to which this policy applies. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 213: Policy Example
The figure below shows an example Policy screen where you configure a policy to limit bandwidth and discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 20.4 on page 206). Figure 92 Policy Example EXAMPLE XGS-4526/4528F/4728F User’s Guide...
Page 214 Chapter 21 Policy Rule XGS-4526/4528F/4728F User’s Guide...
Page 215: Queuing Method
By default, the weight for Q0 is 1, for Q1 is 2, for Q2 is 3, and so on. The weights range from 1 to 15 and the actual guaranteed bandwidth is calculated as follows: XGS-4526/4528F/4728F User’s Guide...
Page 216: Weighted Round Robin Scheduling (Wrr)
Queues with larger weights get more service than queues with smaller weights. This queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied. XGS-4526/4528F/4728F User’s Guide...
Page 217: Configuring Queuing
Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS-4526/4528F/4728F User’s Guide...
Page 218 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 219: Vlan Stacking
(SPN) customers with VPN tunnels between their head offices and branch offices respectively. Both have an identical VLAN tag for their VLAN group. The service provider can separate these two VLANs within its network by adding tag 37 to XGS-4526/4528F/4728F User’s Guide...
Page 220: Vlan Stacking Port Roles
VLAN (using the outer VLAN tag defined by the Service Provider’s (SP) VLAN ID (VID)). Note: Static VLAN Tx Tagging MUST be enabled on a port where you choose Tunnel Port. XGS-4526/4528F/4728F User’s Guide...
Page 221: Vlan Tag Format
VID is the VLAN ID. SP VID is the VID for the second (service provider’s) VLAN tag. 23.3.1 Frame Format The frame format for an untagged Ethernet frame, a single-tagged 802.1Q frame (customer) and a “double-tagged” 802.1Q frame (service provider) is shown next. XGS-4526/4528F/4728F User’s Guide...
Page 222: Configuring Vlan Stacking
(SP)TPI (Service Provider) Tag Protocol Data Frame data IDentifier VLAN ID Frame Check Sequence 23.4 Configuring VLAN Stacking Click Advanced Applications > VLAN Stacking to display the screen as shown. Figure 95 Advanced Application > VLAN Stacking XGS-4526/4528F/4728F User’s Guide...
Page 223: Port-Based Q-In-Q
23.4.1 Port-based Q-in-Q Port-based Q-in-Q lets the Switch treat all frames received on the same port as the same VLAN flows and add the same outer VLAN tag to them, even they have different customer VLAN IDs. XGS-4526/4528F/4728F User’s Guide...
Page 224: Selective Q-In-Q
Click Cancel to begin configuring this screen afresh. 23.4.2 Selective Q-in-Q Selective Q-in-Q is VLAN-based. It allows the Switch to add different outer VLAN tags to the incoming frames received on one port according to their inner VLAN tags. XGS-4526/4528F/4728F User’s Guide...
Page 225 Click Cancel to begin configuring this screen afresh. Index This is the number of the selective VLAN stacking rule. Active This shows whether this rule is activated or not. Name This is the descriptive name for this rule. XGS-4526/4528F/4728F User’s Guide...
Page 226 This is the service provider’s priority level in the packets. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 227: Multicast
(such as content information distribution) based on service plans and types of subscription. You can set the Switch to filter the multicast group join reports on a per-port basis by configuring an IGMP filtering profile and associating the profile to a port. XGS-4526/4528F/4728F User’s Guide...
Page 228: Igmp Snooping
This is the index number of the entry. This field displays the multicast VLAN ID. Port This field displays the port number that belongs to the multicast group. Multicast Group This field displays IP multicast group addresses. XGS-4526/4528F/4728F User’s Guide...
Page 229: Multicast Setting
Switch removes an IGMP group membership entry if it does not receive report messages from the port. 802.1p Priority Select a priority level (0-7) to which the Switch changes the priority in outgoing IGMP control packets. Otherwise, select No-Change to not replace the priority. XGS-4526/4528F/4728F User’s Guide...
Page 230 This defines how many seconds the Switch waits for an IGMP report before removing an IGMP snooping membership entry when an IGMP leave message is received on this port from a host. XGS-4526/4528F/4728F User’s Guide...
Page 231 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 232: Igmp Snooping Vlan
Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. XGS-4526/4528F/4728F User’s Guide...
Page 233: Igmp Filtering Profile
(in the Multicast Setting screen). Clients connected to those ports are then able to join the multicast groups specified in the profile. Each port can be assigned a single profile. A profile can be assigned to multiple ports. XGS-4526/4528F/4728F User’s Guide...
Page 234 Click Clear to clear the fields to the factory defaults. Profile Name This field displays the descriptive name of the profile. Start Address This field displays the start of the multicast address range. End Address This field displays the end of the multicast address range. XGS-4526/4528F/4728F User’s Guide...
Page 235: Mvr Overview
VLAN 3 24.6.1 Types of MVR Ports In MVR, a source port is a port on the Switch that can send and receive multicast traffic in a multicast VLAN while a receiver port can only receive multicast traffic. XGS-4526/4528F/4728F User’s Guide...
Page 236: Mvr Modes
VLAN, the receiving port will still be on the list of forwarding destination for the multicast traffic. Otherwise, the Switch removes the receiver port from the forwarding table. Figure 103 MVR Multicast Television Example VLAN 1 Multicast VLAN XGS-4526/4528F/4728F User’s Guide...
Page 237: General Mvr Configuration
VLANs on the network. Name Enter a descriptive name (up to 32 printable ASCII characters) for identification purposes. Multicast VLAN Enter the VLAN ID (1 to 4094) of the multicast VLAN. XGS-4526/4528F/4728F User’s Guide...
Page 238 This field displays the priority level. Delete To delete a multicast VLAN(s), select the rule(s) that you want to remove in the Delete column, then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 239: Mvr Group Configuration
Enter the same IP address as the Start Address field if you want to configure only one IP address for a multicast group. Refer to Section 24.1.1 on page 227 for more information on IP multicast addresses. XGS-4526/4528F/4728F User’s Guide...
Page 240: Mvr Configuration Example
VID 200 to receive multicast traffic (the News and Movie channels) from the remote streaming media server, S. Computers A, B and C in VLAN 1 are able to receive the traffic. Figure 106 MVR Configuration Example News: 224.1.4.10 ~ 224.1.4.50 Movie: 230.1.2.50 ~230.1.2.60 VLAN 1 Multicast VID 200 XGS-4526/4528F/4728F User’s Guide...
Page 241 Figure 107 MVR Configuration Example EXAMPLE To set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The XGS-4526/4528F/4728F User’s Guide...
Page 242 Chapter 24 Multicast following figure shows an example where two multicast groups (News and Movie) are configured for the multicast VLAN 200. Figure 108 MVR Group Configuration Example EXAMPLE Figure 109 MVR Group Configuration Example EXAMPLE XGS-4526/4528F/4728F User’s Guide...
Page 243: Aaa
The external servers that perform authentication, authorization and accounting functions are known as AAA servers. The Switch supports RADIUS (Remote Authentication Dial-In User Service, see Section 25.1.2 on page 244) and TACACS+ (Terminal Access Controller Access-Control System Plus, see Section XGS-4526/4528F/4728F User’s Guide...
Page 244: Local User Accounts
The AAA screens allow you to enable authentication, authorization, accounting or all of them on the Switch. First, configure your authentication and accounting server settings (RADIUS, TACACS+ or both) and then set up the authentication priority, activate authorization and configure accounting settings. XGS-4526/4528F/4728F User’s Guide...
Page 245: Radius Server Setup
RADIUS attributes utilized by the authentication and accounting features on the Switch. Click on the RADIUS Server Setup link in the AAA screen to view the screen as shown. Figure 112 Advanced Application > AAA > RADIUS Server Setup XGS-4526/4528F/4728F User’s Guide...
Page 246 Enter the IP address of an external RADIUS accounting server in dotted decimal notation. UDP Port The default port of a RADIUS accounting server for accounting is 1813. You need not change this value unless your network administrator instructs you to do so. XGS-4526/4528F/4728F User’s Guide...
Page 247: Tacacs+ Server Setup
244 for more information on TACACS+ servers. Click on the TACACS+ Server Setup link in the Authentication and Accounting screen to view the screen as shown. Figure 113 Advanced Application > AAA > TACACS+ Server Setup XGS-4526/4528F/4728F User’s Guide...
Page 248 Enter the IP address of an external TACACS+ accounting server in dotted decimal notation. TCP Port The default port of a TACACS+ accounting server is 49. You need not change this value unless your network administrator instructs you to do XGS-4526/4528F/4728F User’s Guide...
Page 249: Aaa Setup
Use this screen to configure authentication, authorization and accounting settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. Figure 114 Advanced Application > AAA > AAA Setup XGS-4526/4528F/4728F User’s Guide...
Page 250 Select radius to have the Switch check the administrator accounts configured via the RADIUS Server. Select tacacs+ to have the Switch check the administrator accounts configured via the TACACS+ Server. Authorization Use this section to configure authorization settings on the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 251 This field is only configurable for Commands type of event. Select the threshold command privilege level for which the Switch should send accounting information. The Switch will send accounting information when commands at the level you specify and higher are executed on the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 252: Vendor Specific Attribute
The following table describes the VSAs supported on the Switch. Note that these attributes only work when you enable authorization (see Section 25.2.3 on page 249). Table 72 Supported VSAs FUNCTION ATTRIBUTE Ingress Bandwidth Vendor-Id = 890 Assignment Vendor-Type = 1 Vendor-data = ingress rate (Kbps in decimal format) XGS-4526/4528F/4728F User’s Guide...
Page 253: Tunnel Protocol Attribute
Tunnel-Type = VLAN(13) Tunnel-Medium-Type = 802(6) Tunnel-Private-Group-ID = VLAN ID Note: You must also create a VLAN with the specified VID on the Switch. Note: The bolded values in this table are fixed values as defined in RFC 3580. XGS-4526/4528F/4728F User’s Guide...
Page 254: Supported Radius Attributes
- the format of the User-Name attribute is $enab#$, where # is the privilege level (1-14) User-Password NAS-Identifier NAS-IP-Address 25.3.1.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 25.3.1.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type XGS-4526/4528F/4728F User’s Guide...
Page 255: Attributes Used For Accounting
(the difference between Console and Telnet/SSH Exec events is that the Telnet/SSH events utilize the Calling-Station-Id attribute): Table 74 RADIUS Attributes - Exec Events via Console ATTRIBUTE START INTERIM-UPDATE STOP User-Name NAS-Identifier NAS-IP-Address Service-Type Acct-Status-Type Acct-Delay-Time Acct-Session-Id Acct-Authentic Acct-Session-Time Acct-Terminate-Cause XGS-4526/4528F/4728F User’s Guide...
Page 256 The attributes are listed in the following table along with the time of the session they are sent: Table 76 RADIUS Attributes - Exec Events via Console ATTRIBUTE START INTERIM-UPDATE STOP User-Name NAS-IP-Address NAS-Port Class Called-Station-Id Calling-Station-Id NAS-Identifier NAS-Port-Type Acct-Status-Type Acct-Delay-Time Acct-Session-Id Acct-Authentic Acct-Input-Octets Acct-Output-Octets Acct-Session-Time Acct-Input-Packets Acct-Output-Packets Acct-Terminate-Cause XGS-4526/4528F/4728F User’s Guide...
Page 257 Chapter 25 AAA Table 76 RADIUS Attributes - Exec Events via Console ATTRIBUTE START INTERIM-UPDATE STOP Acct-Input-Gigawords Acct-Output- Gigawords XGS-4526/4528F/4728F User’s Guide...
Page 258 Chapter 25 AAA XGS-4526/4528F/4728F User’s Guide...
Page 259: Ip Source Guard
• ARP inspection. Use this to filter unauthorized ARP packets on the network. If you want to use dynamic bindings to filter unauthorized ARP packets (typical implementation), you have to enable DHCP snooping before you enable ARP inspection. XGS-4526/4528F/4728F User’s Guide...
Page 260: Dhcp Snooping Overview
The DHCP snooping database maintains the dynamic bindings for DHCP snooping and ARP inspection in a file on an external TFTP server. If you set up the DHCP snooping database, the Switch can reload the dynamic bindings from the DHCP snooping database after the Switch restarts. XGS-4526/4528F/4728F User’s Guide...
Page 261 (Chapter 41 on page 361). 26.1.1.4 Configuring DHCP Snooping Follow these steps to configure DHCP snooping on the Switch. Enable DHCP snooping on the Switch. Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. XGS-4526/4528F/4728F User’s Guide...
Page 262: Arp Inspection Overview
These MAC address filters are different than regular MAC address filters (Chapter 12 on page 145). • They are stored only in volatile memory. • They do not use the same space in memory that regular MAC address filters use. XGS-4526/4528F/4728F User’s Guide...
Page 263: Ip Source Guard
Use this screen to look at the current bindings for DHCP snooping and ARP inspection. Bindings are used by DHCP snooping and ARP inspection to distinguish between authorized and unauthorized packets in the network. The Switch learns XGS-4526/4528F/4728F User’s Guide...
Page 264: Ip Source Guard Static Binding
Static bindings are uniquely identified by the MAC address and VLAN ID. Each MAC address and VLAN ID can only be in one static binding. If you try to create a static binding with the same MAC address and VLAN ID as an existing static binding, the XGS-4526/4528F/4728F User’s Guide...
Page 265 This binding was learned from information provided manually by an administrator. VLAN This field displays the source VLAN ID in the binding. Port This field displays the port number in the binding. If this field is blank, the binding applies to all ports. XGS-4526/4528F/4728F User’s Guide...
Page 266: Dhcp Snooping
Click this to clear the Delete check boxes above. 26.4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. Figure 119 DHCP Snooping XGS-4526/4528F/4728F User’s Guide...
Page 267 DHCP snooping database for any reason. Startup failures This field displays the number of times the Switch could not create or read the DHCP snooping database when the Switch started up or a new URL is configured for the DHCP snooping database. XGS-4526/4528F/4728F User’s Guide...
Page 268 Switch already had a binding with the same MAC address and VLAN ID. Invalid interfaces This field displays the number of bindings the Switch has ignored because the port number was a trusted interface or does not exist anymore. XGS-4526/4528F/4728F User’s Guide...
Page 269: Dhcp Snooping Configure
TFTP server so that they are still available after a restart. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure. Figure 120 DHCP Snooping Configure XGS-4526/4528F/4728F User’s Guide...
Page 270 The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XGS-4526/4528F/4728F User’s Guide...
Page 271: Dhcp Snooping Port Configure
You can also specify the maximum number for DHCP packets that each port (trusted or untrusted) can receive each second. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port. Figure 121 DHCP Snooping Port Configure XGS-4526/4528F/4728F User’s Guide...
Page 272: Dhcp Snooping Vlan Configure
Use this screen to enable DHCP snooping on each VLAN and to specify whether or not the Switch adds DHCP relay agent option 82 information (Chapter 41 on page 361) to DHCP requests that the Switch relays to a DHCP server for each VLAN. To XGS-4526/4528F/4728F User’s Guide...
Page 273 The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XGS-4526/4528F/4728F User’s Guide...
Page 274: Arp Inspection Status
Delete Select this and click Delete to remove the specified entry. Delete Click this to remove the selected entries. Cancel Click this to clear the Delete check boxes above. XGS-4526/4528F/4728F User’s Guide...
Page 275: Arp Inspection Vlan Status
This field displays the total number of ARP packets the Switch forwarded for the VLAN since the Switch last restarted. Dropped This field displays the total number of ARP packets the Switch discarded for the VLAN since the Switch last restarted. XGS-4526/4528F/4728F User’s Guide...
Page 276: Arp Inspection Log Status
The Switch consolidates identical log messages generated by ARP packets in the log consolidation interval into one log message. You can configure this interval in the ARP Inspection Configure screen. See Section 26.7 on page 277. XGS-4526/4528F/4728F User’s Guide...
Page 277: Arp Inspection Configure
Switch stores records of discarded ARP packets and global settings for the ARP inspection log. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure. Figure 126 ARP Inspection Configure XGS-4526/4528F/4728F User’s Guide...
Page 278 The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XGS-4526/4528F/4728F User’s Guide...
Page 279: Arp Inspection Port Configure
Rate and Burst Interval settings have no effect on trusted ports. Rate (pps) Specify the maximum rate (1-2048 packets per second) at which the Switch receives ARP packets from each port. The Switch discards any additional ARP packets. Enter 0 to disable this limit. XGS-4526/4528F/4728F User’s Guide...
Page 280: Arp Inspection Vlan Configure
Click this to display the specified range of VLANs in the section below. This field displays the VLAN ID of each VLAN in the range specified above. If you configure the * VLAN, the settings are applied to all VLANs. XGS-4526/4528F/4728F User’s Guide...
Page 281 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. XGS-4526/4528F/4728F User’s Guide...
Page 282 Chapter 26 IP Source Guard XGS-4526/4528F/4728F User’s Guide...
Page 283: Loop Guard
If a switch (not in loop state) connects to a switch in loop state, then it will be affected by the switch in loop state in the following way: • It will receive broadcast messages sent out from the switch in loop state. XGS-4526/4528F/4728F User’s Guide...
Page 284 The following figure illustrates three switches forming a loop. A sample path of the loop guard probe packet is also shown. In this example, the probe packet is sent from port N and returns on another port. As long as loop guard is enabled on XGS-4526/4528F/4728F User’s Guide...
Page 285: Loop Guard Setup
Click Advanced Application > Loop Guard in the navigation panel to display the screen as shown. Note: The loop guard feature can not be enabled on the ports that have Spanning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Figure 133 Advanced Application > Loop Guard XGS-4526/4528F/4728F User’s Guide...
Page 286 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 287: Vlan Mapping
VLAN ID from 12 into 123 before forwarding the packets. Any packets carrying a VLAN tag other than 12 (such as 10) and received on port 3 will be dropped. Figure 134 VLAN mapping example Service Provider Network Port 3 XGS-4526/4528F/4728F User’s Guide...
Page 288: Enabling Vlan Mapping
Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 289: Configuring Vlan Mapping
Click Cancel to reset the fields to your previous configuration. Index This is the number of the VLAN mapping entry in the table. Active This shows whether this entry is activated or not. Name This is the descriptive name for this rule. XGS-4526/4528F/4728F User’s Guide...
Page 290 This is the priority level that replaces the customer priority level in the tagged packets. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 291: Layer 2 Protocol Tunneling
B, C and D. Topology change information can be propagated throughout the service provider’s network. To emulate a point-to-point topology between two customer switches at different sites, such as A and B, you can enable protocol tunneling on edge switches 1 and XGS-4526/4528F/4728F User’s Guide...
Page 292: Layer-2 Protocol Tunneling Mode
• The Tunnel port is an egress port at the edge of the service provider's network and connected to another service provider’s switch. Incoming encapsulated layer-2 protocol packets received on a tunnel port are decapsulated and sent to an access port. XGS-4526/4528F/4728F User’s Guide...
Page 293: Configuring Layer 2 Protocol Tunneling
Note: All the edge switches in the service provider’s network should be set to use the same MAC address for encapsulation. Port This field displays the port number. XGS-4526/4528F/4728F User’s Guide...
Page 294 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 295: Sflow
For example, you can use it to know which IP address or which type of traffic caused network congestion. Figure 140 sFlow Application sFlow Agent sFlow Collector XGS-4526/4528F/4728F User’s Guide...
Page 296: Sflow Port Configuration
Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this to allow the Switch to monitor traffic on this port and generate and send sFlow datagram to the specified collector. XGS-4526/4528F/4728F User’s Guide...
Page 297: Sflow Collector Configuration
You may want to configure more than one collector if the traffic load to be monitored is more than one collector can manage. Figure 142 Advanced Application > sFlow > Collector XGS-4526/4528F/4728F User’s Guide...
Page 298 This field displays port number the Switch uses to send sFlow datagram to the collector. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 299: Pppoe
Tag_Len indicates the length of Value, i1 and i2. The Value is the 32-bit number 0x00000DE9, which stands for the “ADSL Forum” IANA entry. i1 and i2 are PPPoE intermediate agent sub-options, which contain additional information about the PPPoE client. XGS-4526/4528F/4728F User’s Guide...
Page 300: Sub-Option Format
Table 98 PPPoE IA Circuit ID Sub-option Format: Using Identifier String and Variables SubOpt Length Value 0x01 Identifier delimiter Slot ID delimiter Port No delimiter VLAN ID String (1 byte) (1 byte) (1 byte) (1 byte) (1 byte) (2 byte) (1 byte) (4 bytes) (53 byte) XGS-4526/4528F/4728F User’s Guide...
Page 301: Port State
Switch adds a vendor-specific tag to the packet and then forwards it to the trusted port(s). • The Switch discards PADO and PADS packets which are sent from a PPPoE server but received on an untrusted port. XGS-4526/4528F/4728F User’s Guide...
Page 302: The Pppoe Screen
PPPoE client. Click Advanced Application > PPPoE > Intermediate Agent in the navigation panel to display the screen as shown. Figure 144 Advanced Application > PPPoE > Intermediate Agent XGS-4526/4528F/4728F User’s Guide...
Page 303: Pppoe Ia Per-Port
Click Cancel to begin configuring this screen afresh. 31.3.1 PPPoE IA Per-Port Use this screen to specify whether individual ports are trusted or untrusted ports and have the Switch add extra information to PPPoE discovery packets from PPPoE clients on a per-port basis. XGS-4526/4528F/4728F User’s Guide...
Page 304 Use this row to make the setting the same for all ports. Use this row first and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS-4526/4528F/4728F User’s Guide...
Page 305: Pppoe Ia Per-Port Per-Vlan
Cancel Click Cancel to begin configuring this screen afresh. 31.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPPoE IA settings that apply to a specific VLAN on a port. XGS-4526/4528F/4728F User’s Guide...
Page 306 Enter a string of up to 63 ASCII characters that the Switch adds into the Agent Circuit ID sub-option for this VLAN on the specified port. Spaces are allowed. The Circuit ID you configure here has the highest priority. XGS-4526/4528F/4728F User’s Guide...
Page 307: Pppoe Ia For Vlan
Switch appends the Circuit ID and/or Remote ID to PPPoE discovery packets from a specific VLAN. Click the VLAN link in the Intermediate Agent screen to display the screen as shown. Figure 147 Advanced Application > PPPoE > Intermediate Agent > VLAN XGS-4526/4528F/4728F User’s Guide...
Page 308 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 309: Error Disable
With error-disable recovery, you can set the disabled port(s) to become active or start receiving the packets again after the time interval you specify. XGS-4526/4528F/4728F User’s Guide...
Page 310: The Error Disable Screen
Note: After you configure this screen, make sure you also enable error detection for the specific control packets in the Advanced Application > Errdisable > Errdisable Detect screen. Figure 149 Advanced Application > Errdisable > CPU protection XGS-4526/4528F/4728F User’s Guide...
Page 311: Error-Disable Detect Configuration
Click the Click Here link next to Errdisable Detect link in the Advanced Application > Errdisable screen to display the screen as shown. Figure 150 Advanced Application > Errdisable > Errdisable Detect XGS-4526/4528F/4728F User’s Guide...
Page 312 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 313: Error-Disable Recovery Configuration
Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 314 Chapter 32 Error Disable XGS-4526/4528F/4728F User’s Guide...
Page 315: Private Vlan
Isolated ports: 2 ~ 6 Promiscuous port: 10 Note: Make sure you keep at least one port in the promiscuous port list for a VLAN with private VLAN enabled. Otherwise, this VLAN is blocked from the whole network. XGS-4526/4528F/4728F User’s Guide...
Page 316: Configuring Private Vlan
This shows whether this rule is activated or not. Name This is the descriptive name for this rule. VLAN This is the VLAN to which this rule is applied. Promiscuous This shows the port(s) that can communicate with any ports in the same Ports VLAN. XGS-4526/4528F/4728F User’s Guide...
Page 317 Table 107 Advanced Application > Private VLAN (continued) LABEL DESCRIPTION Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 318 Chapter 33 Private VLAN XGS-4526/4528F/4728F User’s Guide...
Page 319: Static Route
(R1). You create one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the Switch. Figure 154 Example of Static Routing Topology Internet XGS-4526/4528F/4728F User’s Guide...
Page 320: Configuring Static Routing
Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. Clear Click Clear to set the above fields back to the factory defaults. XGS-4526/4528F/4728F User’s Guide...
Page 321 Switch that will forward the packet to the destination. Metric This field displays the cost of transmission for routing purposes. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 322 Chapter 34 Static Route XGS-4526/4528F/4728F User’s Guide...
Page 323: Policy Routing
• Cost Savings – Policy routing allows organizations to distribute interactive traffic on high-bandwidth, high-cost paths while using low-cost paths for batch traffic. • Load Sharing – Network administrators can use policy routing to distribute traffic among multiple paths. XGS-4526/4528F/4728F User’s Guide...
Page 324: Configuring Policy Routing Profile
Profile Name This field displays the descriptive name for this profile. This is for identification purposes only. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 325: Policy Routing Rule Configuration
The Switch does not perform normal routing on packets that match any of the policy routes. Click Rule Configuration in the IP Application > Policy Routing screen to display the screen as shown. Figure 157 IP Application > Policy Routing > Rule Configuration XGS-4526/4528F/4728F User’s Guide...
Page 326 This field displays the name of the classifier to which this policy applies. Rule Delete Select the policy routing rule(s) that you want to remove. Delete Click Delete to remove the selected entry(ies) from the summary table. Cancel Click Cancel to clear the Rule Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 327: Rip
The lower the administrative distance value is, the more preferable the routing protocol is. If two routes have the same administrative distance value, the Switch XGS-4526/4528F/4728F User’s Guide...
Page 328: Configuring Rip
See Section 36.1.1 on page 327 for more information about administrative distance. Note: You cannot set two routing protocols to have the same administrative distance. Index This field displays the index number of an IP interface. XGS-4526/4528F/4728F User’s Guide...
Page 329 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 330 Chapter 36 RIP XGS-4526/4528F/4728F User’s Guide...
Page 331: Ospf
(also known as area 0). The backbone is the transit area to route packets between two areas. A stub area, at the edge of an AS is not a transit area since there is only one connection to the stub area. XGS-4526/4528F/4728F User’s Guide...
Page 332: How Ospf Works
LSAs (Link State Advertisements). 37.1.3 Interfaces and Virtual Links An OSPF interface is a link between a layer-3 device and an OSPF network. An interface has state information, an IP address and subnet mask associated with it. XGS-4526/4528F/4728F User’s Guide...
Page 333: Ospf And Router Elections
DR or BDR and assign a priority of 1 to router A to make sure that it does become the DR. 37.1.5 Configuring OSPF To configure OSPF on the Switch, do the following tasks: Enable OSPF XGS-4526/4528F/4728F User’s Guide...
Page 334: Ospf Status
This field displays whether OSPF is activated (Running) or not (Down). Interface The text box displays the OSPF status of the interface(s) on the Switch. Neighbor The text box displays the status of the neighboring router participating in the OSPF network. XGS-4526/4528F/4728F User’s Guide...
Page 335 This field displays the MAC address of a device. Link State Database Link ID This field displays the ID of a router or subnet. ADV Router This field displays the IP address of the layer-3 device that sends the LSAs. XGS-4526/4528F/4728F User’s Guide...
Page 336: Ospf Configuration
OSPF is disabled by default. Select this option to enable it. Router ID Router ID uniquely identifies the Switch in an OSPF. Enter a unique ID (that uses the format of an IP address in dotted decimal notation) for the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 337: Configure Ospf Areas
The OSPF supports three levels of authentication: • None – no authentication is used. • Simple – authenticate link state updates using an 8 printable ASCII character password. • MD5 – authenticate link state updates using a 16 printable ASCII character password. XGS-4526/4528F/4728F User’s Guide...
Page 338 Specify a cost (between 0 and 16777215) used to add a default route into Route a stub area for routes which are external to an OSPF domain. If you do not Cost set a route cost, no default route is added. XGS-4526/4528F/4728F User’s Guide...
Page 339: View Ospf Area Information Table
RIP routing protocol and/or static routes need to exchange routing information with the Switch using OSPF routing protocol. A summary address is used to cover more than one routing entries in order to reduce the routing table size. XGS-4526/4528F/4728F User’s Guide...
Page 340 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 341: Configuring Ospf Interfaces
OSPF interface entry is automatically created. See Section 37.1 on page 331 for more information on OSPF. In the OSPF Configuration screen, click Interface to display the OSPF Interface screen. Figure 166 IP Application > OSPF Configuration > OSPF Interface XGS-4526/4528F/4728F User’s Guide...
Page 342 This field displays the area ID (in an IP address format with dotted decimal notation) of an area to associate the interface to that area. Authenticati This field displays the authentication method used (Same-as-Area, None, Simple or MD5). XGS-4526/4528F/4728F User’s Guide...
Page 343: Ospf Virtual-Links
Area ID Select the area ID (in an IP address format with dotted decimal notation) of an area to associate the interface to that area. Peer Router Enter the ID of a peer border router. XGS-4526/4528F/4728F User’s Guide...
Page 344 When the Authentication field displays MD5, this field displays the identification number of the key used. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 345: Igmp
Multicast groups are identified by IP addresses in the Class D range (224.0.0.0 to 239.255.255.255). A multicast server sends packets addressed to a particular multicast group (multicast IP address). XGS-4526/4528F/4728F User’s Guide...
Page 346: How Igmp Works
IGMP report from any members, it stops sending multicast traffic to that group. This change helps shorten the leave convergence time, in other words, the amount of time that a multicast router believes that there are group members XGS-4526/4528F/4728F User’s Guide...
Page 347: Port-Based Igmp
The Switch sends IGMP Query packets to all ports. The Switch then listens for IGMP Report packets, and it records which port the messages came from. It then delivers multicast traffic to only those ports from which it received a request to join a multicast group. XGS-4526/4528F/4728F User’s Guide...
Page 348: Configuring Igmp
Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 349: Dvmrp
DVMRP-enabled Layer-3 devices that do not have any hosts in their networks that belong to this multicast group send back a prune message (“P”). If hosts later join the multicast group, a graft message (“G”) to undo the prune is sent to the parent. XGS-4526/4528F/4728F User’s Guide...
Page 350: Dvmrp Terminology
Configure DVMRP on the Switch when you wish it to act as a multicast router (“mrouter”). Click IP Application > DVMRP in the navigation panel to display the screen as shown. Figure 174 IP Application > DVMRP XGS-4526/4528F/4728F User’s Guide...
Page 351: Dvmrp Configuration Error Messages
You must have IGMP enabled when you enable DVMRP; otherwise you see the screen as in the next figure. Figure 175 DVMRP: IGMP Not Set Error When you disable IGMP, but DVMRP is still active you also see another warning screen. Figure 176 DVMRP: Unable to Disable IGMP Error XGS-4526/4528F/4728F User’s Guide...
Page 352: Default Dvmrp Timer Values
DEFAULT VALUE Probe interval 10 sec Report interval 35 sec Route expiration time 140 sec Prune lifetime Variable (less than two hours) Prune retransmission 3 sec with exponential back time Graft retransmission 5 sec with exponential back time XGS-4526/4528F/4728F User’s Guide...
Page 353: Differentiated Services
ToS-enabled network device will not conflict with the DSCP mapping. The DSCP value determines the PHB (Per-Hop Behavior), that each packet gets as it is forwarded across the DiffServ network. Based on the marking rule different XGS-4526/4528F/4728F User’s Guide...
Page 354: Diffserv Network Example
Two Rate Three Color Marker (TRTCM, defined in RFC 2698) is a type of traffic policing that identifies packets by comparing them to two user-defined rates: the Committed Information Rate (CIR) and the Peak Information Rate (PIR). The CIR XGS-4526/4528F/4728F User’s Guide...
Page 355: Trtcm - Color-Blind Mode
High Packet Medium Packet Loss Loss 40.2.2 TRTCM - Color-aware Mode In color-aware mode the evaluation of the packets uses the existing packet loss priority. TRTCM can increase a packet loss priority of a packet but it cannot XGS-4526/4528F/4728F User’s Guide...
Page 356: Activating Diffserv
40.3 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the selected port(s). Click IP Application > DiffServ in the navigation panel to display the screen as shown. Figure 182 IP Application > DiffServ XGS-4526/4528F/4728F User’s Guide...
Page 357: Configuring 2-Rate 3 Color Marker Settings
Click Cancel to begin configuring this screen afresh. 40.3.1 Configuring 2-Rate 3 Color Marker Settings Use this screen to configure TRTCM settings. Click the 2-rate 3 Color Marker link in the DiffServ screen to display the screen as shown next. XGS-4526/4528F/4728F User’s Guide...
Page 358 Note: Changes in this row are copied to all the ports as soon as you make them. Active Select this to activate TRTCM on the port. XGS-4526/4528F/4728F User’s Guide...
Page 359: Dscp-To-Ieee 802.1P Priority Settings
The following table shows the default DSCP-to-IEEE802.1p mapping. Table 128 Default DSCP-IEEE 802.1p Mapping DSCP VALUE 0 – 7 8 – 15 16 – 23 24 – 31 32 – 39 40 – 47 48 – 55 56 – 63 IEEE 802.1p XGS-4526/4528F/4728F User’s Guide...
Page 360: Configuring Dscp Settings
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 361: Dhcp
The screen you should use for configuration depends on the DHCP services you want to offer the DHCP clients on your network. Choose the configuration screen based on the following criteria: • Global - The Switch forwards all DHCP requests to the same DHCP server. XGS-4526/4528F/4728F User’s Guide...
Page 362: Dhcp Status
VLAN - followed by a VLAN ID if it is configured as a relay agent for specific VLAN(s). 41.3 DHCP Server Status Detail Click IP Application > DHCP in the navigation panel and then click an existing index number of a DHCP server configuration to view the screen as shown. Use XGS-4526/4528F/4728F User’s Guide...
Page 363 This field displays the MAC address of the DHCP client. Address It may also display SELF OCCUPIED ADDRESS if the IP address cannot be used for DHCP because it is already assigned to the Switch itself. Hostname This field displays the system name of the client. XGS-4526/4528F/4728F User’s Guide...
Page 364: Dhcp Relay
(1 byte) This is the port that the DHCP client is connected to. VLAN ID (2 bytes) This is the VLAN that the port belongs to. Information (up to 64 bytes) This optional, read-only field is set according to system name set in Basic Settings > General Setup. XGS-4526/4528F/4728F User’s Guide...
Page 365: Configuring Dhcp Global Relay
Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 366: Global Dhcp Relay Configuration Example
Switch to send additional information (such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. Figure 189 DHCP Relay Configuration Example EXAMPLE XGS-4526/4528F/4728F User’s Guide...
Page 367: Configuring Dhcp Vlan Settings
Enter the ID number of the VLAN to which these DHCP settings apply. DHCP Status Select whether the Switch should function as a DHCP Server or Relay for the specified VID. If you select Server then fields related to DHCP relay configuration are grayed out and vice versa. XGS-4526/4528F/4728F User’s Guide...
Page 368 For DHCP relay configuration, this field displays the first remote DHCP server IP address. Delete Select the configuration entries you want to remove and click Delete to remove them. Cancel Click Cancel to clear the Delete check boxes. XGS-4526/4528F/4728F User’s Guide...
Page 369: Example: Dhcp Relay For Two Vlans
IP address of 192.168.1.100. Requests from the academic buildings (VLAN 2) are sent to the other DHCP server with an IP address of 172.23.10.100. Figure 191 DHCP Relay for Two VLANs DHCP:192.168.1.100 VLAN 1 VLAN 2 DHCP:172.23.10.100 XGS-4526/4528F/4728F User’s Guide...
Page 370 Chapter 41 DHCP For the example network, configure the VLAN Setting screen as shown. Figure 192 DHCP Relay for Two VLANs Configuration Example EXAMPLE XGS-4526/4528F/4728F User’s Guide...
Page 371: Vrrp
The following figure shows a VRRP network example with the switches (A and B) implementing one virtual router VR1 to ensure the link between the host X and the uplink gateway G. Host X is configured to use VR1 (192.168.1.20) as the XGS-4526/4528F/4728F User’s Guide...
Page 372: Vrrp Status
This field displays the index number of a rule. Network This field displays the IP address and the subnet mask bits of an IP routing domain that is associated to a virtual router. VRID This field displays the ID number of the virtual router. XGS-4526/4528F/4728F User’s Guide...
Page 373: Vrrp Configuration
Section 8.6 on page 110 for more information). Click IP Application, VRRP and click the Configuration link to display the VRRP Configuration screen as shown next. Note: You can only configure VRRP on interfaces with unique VLAN IDs. XGS-4526/4528F/4728F User’s Guide...
Page 374 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to discard all changes made in this table. XGS-4526/4528F/4728F User’s Guide...
Page 375: Vrrp Parameters
Disable preempt mode to prevent this from happening. By default, a layer 3 device with the same IP address as the virtual router will become the master router regardless of the preempt mode. XGS-4526/4528F/4728F User’s Guide...
Page 376: Configuring Vrrp Parameters
Enter the IP address of the primary virtual router in dotted decimal notation. Secondary Virtual This field is optional. Enter the IP address of a secondary virtual router in dotted decimal notation. This field is ignored when you enter 0.0.0.0. XGS-4526/4528F/4728F User’s Guide...
Page 377: Configuring Vrrp Parameters
This field displays the priority level (1 to 255) of the entry. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. 42.4 VRRP Configuration Examples The following sections show two VRRP configuration examples on the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 378: One Subnet Network Example
VRRP Configuration screens on the switches as shown in the figures below. Figure 199 VRRP Example 1: VRRP Parameter Settings on Switch A EXAMPLE Figure 200 VRRP Example 1: VRRP Parameter Settings on Switch B EXAMPLE XGS-4526/4528F/4728F User’s Guide...
Page 379: Two Subnets Example
Figure 203 VRRP Configuration Example: Two Virtual Router Network 172.21.1.1 172.21.1.100 172.21.1.10 You need to configure the VRRP Configuration screen for virtual router VR2 on each switch, while keeping the VRRP configuration in example 1 for virtual router XGS-4526/4528F/4728F User’s Guide...
Page 380 After configuring and saving the VRRP configuration, the VRRP Status screens for both switches are shown next. Figure 206 VRRP Example 2: VRRP Status on Switch A EXAMPLE Figure 207 VRRP Example 2: VRRP Status on Switch B EXAMPLE XGS-4526/4528F/4728F User’s Guide...
Page 381: Arp Learning
ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. 43.1.2 ARP Learning Mode The Switch supports three ARP learning modes: ARP-Reply, Gratuitous-ARP, and ARP-Request. XGS-4526/4528F/4728F User’s Guide...
Page 382 MAC address field is set to the broadcast address. There will be no reply to a gratuitous ARP request. A device may send a gratuitous ARP packet to detect IP collisions. If a device restarts or its MAC address is changed, it can also use gratuitous ARP to inform XGS-4526/4528F/4728F User’s Guide...
Page 383 ARP request sent by host A. The Switch then forwards host B’s ICMP reply to host A right after getting host B’s MAC address and ICMP reply. ARP Request ARP Reply ICMP Request ARP Request ARP Reply ICMP Request ICMP Reply ICMP Reply XGS-4526/4528F/4728F User’s Guide...
Page 384: Configuring Arp Learning
Select Gratuitous-ARP to have the Switch update its ARP table with either an ARP reply or a gratuitous ARP request. Select ARP-Request to have the Switch update the ARP table with both ARP replies, gratuitous ARP requests and ARP requests. XGS-4526/4528F/4728F User’s Guide...
Page 385 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 386 Chapter 43 ARP Learning XGS-4526/4528F/4728F User’s Guide...
Page 387: Load Sharing
With ECMP, packets are routed through the paths of equal cost according to the hash algorithm output. 44.2 Configuring Load Sharing Click IP Application > Load Sharing in the navigation panel to display the screen as shown next. Figure 209 IP Application > Load Sharing XGS-4526/4528F/4728F User’s Guide...
Page 388 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 389: Maintenance
Click Click Here to go to the Restore Configuration screen. Configurati Backup Click Click Here to go to the Backup Configuration screen. Configurati Load Click Click Here to reset the configuration to the factory default settings. Factory Default XGS-4526/4528F/4728F User’s Guide...
Page 390: Load Factory Default
IP address of your computer to be in the same subnet as that of the default Switch IP address (192.168.1.1). 45.3 Save Configuration Click Config 1 to save the current configuration settings permanently to Configuration 1 on the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 391: Reboot System
Make sure you have downloaded (and unzipped) the correct model firmware and version to your computer before uploading to the device. Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. XGS-4526/4528F/4728F User’s Guide...
Page 392: Restore A Configuration File
Path text box or click Browse to display the Choose File screen from which you can locate it. After you have specified the file, click Restore. "config" is the name of the configuration file on the Switch, so your backup configuration file is automatically renamed when you restore using this screen. XGS-4526/4528F/4728F User’s Guide...
Page 393: Backup A Configuration File
The configuration file (also known as the romfile or ROM) contains the factory default settings in the screens such as password, Switch setup, IP Setup, and so on. Once you have customized the Switch’s settings, they can be saved back to your computer under a filename of your choosing. XGS-4526/4528F/4728F User’s Guide...
Page 394: Ftp Command Line Procedure
Enter open, followed by a space and the IP address of your Switch. Press [ENTER] when prompted for a username (the default is “admin”). Enter your password as requested (the default is “1234”). Enter bin to set transfer mode to binary. XGS-4526/4528F/4728F User’s Guide...
Page 395: Gui-Based Ftp Clients
• FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. XGS-4526/4528F/4728F User’s Guide...
Page 396 Chapter 45 Maintenance XGS-4526/4528F/4728F User’s Guide...
Page 397: Access Control
See the Ethernet Switch CLI Reference Guide for more information on disabling multi-login. 46.2 The Access Control Main Screen Click Management > Access Control in the navigation panel to display the main screen as shown. Figure 216 Management > Access Control XGS-4526/4528F/4728F User’s Guide...
Page 398: About Snmp
Switch. Examples of variables include number of packets received, node port status and so on. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. XGS-4526/4528F/4728F User’s Guide...
Page 399: Snmp V3 And Security
• RFC 1155 SMI • RFC 2674 SNMPv2, SNMPv2c • RFC 1757 RMON • SNMPv2, SNMPv2c or later version, compliant with RFC 2011 SNMPv2 MIB for IP, RFC 2012 SNMPv2 MIB for TCP, RFC 2013 SNMPv2 MIB for UDP XGS-4526/4528F/4728F User’s Guide...
Page 400: Snmp Traps
This trap is sent when the fan 1.2.1 speed goes above or below the normal operating range. 1.3.6.1.4.1.890.1.5.8.39.3 1.2.1 1.3.6.1.4.1.890.1.5.8.46.3 1.2.1 FanSpeedEventClear 1.3.6.1.4.1.890.1.5.8.52.3 This trap is sent when the fan 1.2.2 speed returns to the normal operating range. 1.3.6.1.4.1.890.1.5.8.39.3 1.2.2 1.3.6.1.4.1.890.1.5.8.46.3 1.2.2 XGS-4526/4528F/4728F User’s Guide...
Page 401 This trap is sent when the 1.2.1 Switch resets by an administrator through a 1.3.6.1.4.1.890.1.5.8.39.3 management interface. 1.2.1 1.3.6.1.4.1.890.1.5.8.46.3 1.2.1 RebootEvent 1.3.6.1.4.1.890.1.5.1.1.2 This trap is sent when the Switch reboots by an administrator through a management interface. XGS-4526/4528F/4728F User’s Guide...
Page 402 1.3.6.1.4.1.890.1.5.8.52.1 This trap is sent when the 30.4.2 Switch ceases the action taken on a port, such as shutting down 1.3.6.1.4.1.890.1.5.8.39.1 the port or discarding packets 30.4.2 on the port, after the specified recovery interval. 1.3.6.1.4.1.890.1.5.8.46.1 30.4.2 XGS-4526/4528F/4728F User’s Guide...
Page 403 The trap is sent when entries in the remote database have any updates. Link Layer Discovery Protocol (LLDP), defined as IEEE 802.1ab, enables LAN devices that support LLDP to exchange their configured settings. This helps eliminate configuration mismatch issues. XGS-4526/4528F/4728F User’s Guide...
Page 404 This trap is sent when there is ntOn 1.2.1 no response message from the RADIUS server. 1.3.6.1.4.1.890.1.5.8.39.3 1.2.1 1.3.6.1.4.1.890.1.5.8.46.3 1.2.1 RADIUSNotReachableEve 1.3.6.1.4.1.890.1.5.8.52.3 This trap is sent when the ntClear 1.2.2 RADIUS server can be reached. 1.3.6.1.4.1.890.1.5.8.39.3 1.2.2 1.3.6.1.4.1.890.1.5.8.46.3 1.2.2 XGS-4526/4528F/4728F User’s Guide...
Page 405 1.3.6.1.2.1.80.0.3 This trap is sent when a ping test is completed. traceroute traceRouteTestFailed 1.3.6.1.2.1.81.0.2 This trap is sent when a traceroute test fails. traceRouteTestCompleted 1.3.6.1.2.1.81.0.3 This trap is sent when a traceroute test is completed. XGS-4526/4528F/4728F User’s Guide...
Page 406 This trap is sent when more 1.2.1 than 99% of the MAC table is used. 1.3.6.1.4.1.890.1.5.8.39.3 1.2.1 1.3.6.1.4.1.890.1.5.8.46.3 1.2.1 MacTableFullEventClear 1.3.6.1.4.1.890.1.5.8.52.3 This trap is sent when less than 1.2.2 95% of the MAC table is used. 1.3.6.1.4.1.890.1.5.8.39.3 1.2.2 1.3.6.1.4.1.890.1.5.8.46.3 1.2.2 XGS-4526/4528F/4728F User’s Guide...
Page 407: Configuring Snmp
Select the SNMP version for the Switch. The SNMP version on the Switch must match the version on the SNMP manager. Choose SNMP version 2c (v2c), SNMP version 3 (v3) or both (v3v2c). Note: SNMP version 2c is backwards compatible with SNMP version 1. XGS-4526/4528F/4728F User’s Guide...
Page 408 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 409: Configuring Snmp Trap Group
Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 410: Configuring Snmp User
Switch. Authentication Select an authentication algorithm. MD5 (Message Digest 5) and SHA (Secure Hash Algorithm) are hash algorithms used to authenticate SNMP data. SHA authentication is generally considered stronger than MD5, but is slower. XGS-4526/4528F/4728F User’s Guide...
Page 411 This field displays the encryption method used for SNMP communication with this user. Group This field displays the SNMP group to which this user belongs. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 412: Setting Up Login Accounts
Only the administrator has read/write access. Old Password Type the existing system password (1234 is the default password when shipped). New Password Enter your new system password. Retype to Retype your new system password for confirmation confirm XGS-4526/4528F/4728F User’s Guide...
Page 413: Ssh Overview
Unlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network. Figure 222 SSH Communication Example XGS-4526/4528F/4728F User’s Guide...
Page 414: How Ssh Works
Encryption Method Once the identification is verified, both the client and server must agree on the type of encryption method to use. XGS-4526/4528F/4728F User’s Guide...
Page 415: Ssh Implementation On The Switch
SSL-client must send the Switch a certificate. You must apply for a certificate for the browser from a Certificate Authority (CA) that is a trusted CA on the Switch. Please refer to the following figure. XGS-4526/4528F/4728F User’s Guide...
Page 416: Https Example
When you attempt to access the Switch HTTPS server, a Windows dialog box pops up asking if you trust the server certificate. Click View Certificate if you want to verify that the certificate is from the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 417: Netscape Navigator Warning Messages
Unknown Authority screen pops up asking if you trust the server certificate. Click Examine Certificate if you want to verify that the certificate is from the Switch. If Accept this certificate temporarily for this session is selected, then click OK to continue in Netscape. XGS-4526/4528F/4728F User’s Guide...
Page 418 Chapter 46 Access Control Select Accept this certificate permanently to import the Switch’s certificate into the SSL client. Figure 226 Security Certificate 1 (Netscape) EXAMPLE EXAMPLE EXAMPLE Figure 227 Security Certificate 2 (Netscape) EXAMPLE XGS-4526/4528F/4728F User’s Guide...
Page 419: The Main Screen
Figure 228 Example: Lock Denoting a Secure Connection 46.10 Service Port Access Control Service Access Control allows you to decide what services you may use to access the Switch. You may also change the default service port and configure “trusted XGS-4526/4528F/4728F User’s Guide...
Page 420: Remote Management
Cancel Click Cancel to begin configuring this screen afresh. 46.11 Remote Management From the Access Control screen, display the Remote Management screen as shown next. XGS-4526/4528F/4728F User’s Guide...
Page 421 The Switch immediately disconnects the session if it does not match. Telnet/FTP/ Select services that may be used for managing the Switch from the HTTP/ICMP/ specified trusted computers. SNMP/SSH/ HTTPS XGS-4526/4528F/4728F User’s Guide...
Page 422 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 423: Diagnostic
The following table describes the labels in this screen. Table 157 Management > Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi-line text box. Click Clear to empty the text box and reset the syslog entry. XGS-4526/4528F/4728F User’s Guide...
Page 424 Type the IP address of a device that you want to ping in order to test a connection. Click Ping to have the Switch ping the IP address (in the field to the left). Ethernet Port Enter a port number and click Port Test to perform an internal Test loopback test. XGS-4526/4528F/4728F User’s Guide...
Page 425: Syslog
Error: There is an error condition on the system. Warning: There is a warning condition on the system. Notice: There is a normal but significant condition on the system. Informational: The syslog contains an informational message. Debug: The message is intended for debug-level purposes. XGS-4526/4528F/4728F User’s Guide...
Page 426: Syslog Setup
The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 427: Syslog Server Setup
This field displays the severity level of the logs that the device is to send to this syslog server. Delete Select an entry’s Delete check box and click Delete to remove the entry. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 428: Syslog Messages
802.1x Authorization failure [User- Name <username>] SP_SYSLOG_TYPE_AAA SYSLOG_WARNING 802.1x Authentication - retransmit EAPOL-START packet [User-Name <username>] [NAS-Port <port>] SP_SYSLOG_TYPE_AAA SYSLOG_WARNING 802.1x RADIUS server timeout [User- Name <username>] [NAS-Port <port>] SP_SYSLOG_TYPE_AAA SYSLOG_WARNING 802.1x - Invalid Tunnel-Type <type> [User-Name <username>] [NAS-Port <port>] XGS-4526/4528F/4728F User’s Guide...
Page 429 RADIUS Accounting server <index> is unreachable SP_SYSLOG_TYPE_AAA SYSLOG_WARNING RADIUS Authentication - change RADIUS server from <index> to <index> SP_SYSLOG_TYPE_AAA SYSLOG_WARNING RADIUS server <index> is unreachable SP_SYSLOG_TYPE_AAA SYSLOG_WARNING RADIUS server <index> becomes reachable SP_SYSLOG_TYPE_AAA SYSLOG_WARNING Invalid Service Type: USER [<username>] XGS-4526/4528F/4728F User’s Guide...
Page 430 Threshold(<threshold>) On Port <port>, Current Value : <value> SP_SYSLOG_TYPE_INTE SYSLOG_NOTICE Bias Over Alarm High RFACE Threshold(<threshold>) On Port <port>, Current Value : <value> SP_SYSLOG_TYPE_INTE SYSLOG_NOTICE Bias Over Warn High RFACE Threshold(<threshold>) On Port <port>, Current Value : <value> XGS-4526/4528F/4728F User’s Guide...
Page 431 <port> has been cleared SP_SYSLOG_TYPE_SWIT SYSLOG_ALERT System has reset without management command SP_SYSLOG_TYPE_SWIT SYSLOG_ALERT Another image was booted SP_SYSLOG_TYPE_SWIT SYSLOG_CRITICAL <1.2VIN | 1.8VIN | 3.3VIN | 2.5VIN> voltage value <value> is lower than its limit voltage value XGS-4526/4528F/4728F User’s Guide...
Page 432 SP_SYSLOG_TYPE_SWIT SYSLOG_INFO Save system configuration successfully SP_SYSLOG_TYPE_SWIT SYSLOG_INFO Save system configuration <index> successfully SP_SYSLOG_TYPE_SWIT SYSLOG_INFO Save system configuration failed SP_SYSLOG_TYPE_SWIT SYSLOG_INFO Upgrade system firmware successfully SP_SYSLOG_TYPE_SWIT SYSLOG_INFO Upgrade system firmware failed SP_SYSLOG_TYPE_SWIT SYSLOG_INFO Restore system configuration successfully XGS-4526/4528F/4728F User’s Guide...
Page 433 <MAC address> vlan <VLAN ID> ip <IP address> port <port> count <count> last update time <timestamp> SP_SYSLOG_TYPE_SWIT SYSLOG_WARNING MAC address table is full SP_SYSLOG_TYPE_SWIT SYSLOG_WARNING MAC address table is recovered to normal state SP_SYSLOG_TYPE_SWIT SYSLOG_WARNING Hardware host table is full XGS-4526/4528F/4728F User’s Guide...
Page 434 <index> and MD Index <index> has <XconCCM defect|ErrorCCM defect|RemoteCCM defect|MACstatus defect|RDICCM defect> SP_SYSLOG_TYPE_SWIT SYSLOG_WARNING RMON falling alarm SP_SYSLOG_TYPE_SWIT SYSLOG_WARNING PoE overload event (port <port>) SP_SYSLOG_TYPE_SWIT SYSLOG_WARNING PoE short-circuit event (port <port>) SP_SYSLOG_TYPE_SWIT SYSLOG_WARNING PoE over system budget event (port <port>) XGS-4526/4528F/4728F User’s Guide...
Page 435: Cluster Management
Cluster member models must be compatible with ZyXEL cluster management implementation. Cluster Manager The cluster manager is the Switch through which you manage the cluster member switches. Cluster Members Cluster members are the switches being managed by the cluster manager switch. XGS-4526/4528F/4728F User’s Guide...
Page 436: Cluster Management Status
Figure 234 Clustering Application Example 49.2 Cluster Management Status Click Management > Cluster Management in the navigation panel to display the following screen. Note: A cluster can only have one manager. Figure 235 Management > Cluster Management XGS-4526/4528F/4728F User’s Guide...
Page 437: Cluster Member Switch Management
Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch's web configurator home page. This cluster member web XGS-4526/4528F/4728F User’s Guide...
Page 438 Chapter 49 Cluster Management configurator home page and the home page that you'd see if you accessed it directly are different. Figure 236 Cluster Management: Cluster Member Web Configurator Screen XGS-4526/4528F/4728F User’s Guide...
Page 439 This is the cluster member switch’s firmware name as seen fw-00-a0-c5-01-23-46 in the cluster manager switch. config-00-a0-c5-01-23-46 This is the cluster member switch’s configuration file name as seen in the cluster manager switch. XGS-4526/4528F/4728F User’s Guide...
Page 440: Clustering Management Configuration
VLAN group to belong to the same cluster. Switches that are not in the same VLAN group are not visible in the Clustering Candidates list. This field is ignored if the Clustering Manager is using Port- based VLAN. XGS-4526/4528F/4728F User’s Guide...
Page 441 Model This is the cluster member switch’s model name. Remove Select this checkbox and then click the Remove button to remove a cluster member switch from the cluster. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 442 Chapter 49 Cluster Management XGS-4526/4528F/4728F User’s Guide...
Page 443: Mac Table
• If the Switch has already learned the port for this MAC address, then it forwards the frame to that port. • If the Switch has not already learned the port for this MAC address, then the frame is flooded to all ports. Too much port flooding leads to network congestion. XGS-4526/4528F/4728F User’s Guide...
Page 444: Viewing The Mac Table
Use this screen to search specific MAC addresses. You can also directly add dynamic MAC address(es) into the static MAC forwarding table or MAC filtering table from the MAC table using this screen. Figure 240 Management > MAC Table XGS-4526/4528F/4728F User’s Guide...
Page 445 This is the VLAN group to which this frame belongs. Port This is the port from which the above MAC address was learned. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). XGS-4526/4528F/4728F User’s Guide...
Page 446 Chapter 50 MAC Table XGS-4526/4528F/4728F User’s Guide...
Page 447: Ip Table
• If the Switch has already learned the port for this IP address, then it forwards the packet to that port. • If the Switch has not already learned the port for this IP address, then the packet is flooded to all ports. Too much port flooding leads to network congestion. XGS-4526/4528F/4728F User’s Guide...
Page 448: Viewing The Ip Table
Port Click this button to display and arrange the data according to port number. Index This field displays the index number. IP Address This is the IP address of the device from which the incoming packets came. XGS-4526/4528F/4728F User’s Guide...
Page 449 This is the port from which the above IP address was learned. This field displays CPU to indicate the IP address belongs to the Switch. Type This shows whether the IP address is dynamic (learned by the Switch) or static (belonging to the Switch). XGS-4526/4528F/4728F User’s Guide...
Page 450 Chapter 51 IP Table XGS-4526/4528F/4728F User’s Guide...
Page 451: Arp Table
MAC address, swaps the sender and target pairs, and unicasts the answer directly back to the requesting machine. ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. XGS-4526/4528F/4728F User’s Guide...
Page 452: The Arp Table Screen
This field displays the port to which the device connects. CPU means this learned IP address is the Switch’s management IP address. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). XGS-4526/4528F/4728F User’s Guide...
Page 453: Routing Table
This field displays the cost of the route. Type This field displays the method used to learn the route; OSPF - added as an OSPF interface, RIP - learned from incoming RIP packets or STATIC - added as a static entry. XGS-4526/4528F/4728F User’s Guide...
Page 454 Chapter 53 Routing Table XGS-4526/4528F/4728F User’s Guide...
Page 455: Configure Clone
54.1 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. Figure 245 Management > Configure Clone XGS-4526/4528F/4728F User’s Guide...
Page 456 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS-4526/4528F/4728F User’s Guide...
Page 457: Troubleshooting
Disconnect and re-connect the power adaptor or cord to the Switch (in AC models or if the AC power supply is connected in AC/DC models). If the problem continues, contact the vendor. The ALM LED is on. XGS-4526/4528F/4728F User’s Guide...
Page 458: Switch Access And Login
Use the MGMT port to log in to the Switch, the default IP address of the MGMT port is 192.168.0.1. If this does not work, you have to reset the device to its factory defaults. See Section 4.6 on page XGS-4526/4528F/4728F User’s Guide...
Page 459 • Try to access the Switch using another service, such as Telnet. If you can access the Switch, check the remote management settings to find out why the Switch does not respond to HTTP. I can see the Login screen, but I cannot log in to the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 460 Management > Access Control > Remote Management screen for telnet, HTTP and SSH (see Section 46.11 on page 420). Computers not belonging to the secured client set cannot get permission to access the Switch. XGS-4526/4528F/4728F User’s Guide...
Page 461: Switch Configuration
Switch’s nonvolatile memory each time you make changes. Click Save at the top right corner of the web configurator to save the configuration permanently. See also Section 45.3 on page 390 for more information about how to save your configuration. XGS-4526/4528F/4728F User’s Guide...
Page 462 Chapter 55 Troubleshooting XGS-4526/4528F/4728F User’s Guide...
Page 463: Product Specifications
DC: -36 VDC ~ -72 VDC 2.3 A max, 80 W consumption. There is no tolerance for the DC input voltage. One Backup Power Supply (BPS) connector Interfaces XGS-4526: 20 Gigabit Ethernet (GbE) copper ports plus 4 Dual Personality interfaces. XGS-4528F or XGS-4728F: 24 Gigabit Ethernet (GbE) Dual Personality interfaces.
Page 464 FCC Part 15 (Class A), CE EMC (Class A) Table 172 Firmware Specifications FEATURE DESCRIPTION Default IP Address In band: 192.168.1.1 Out of band (Management port): 192.168.0.1 Default Subnet Mask 255.255.255.0 (24 bits) Administrator User admin Name Default Password 1234 XGS-4526/4528F/4728F User’s Guide...
Page 465 (the port you copy the traffic to) without interference. Static Route Static routes tell the Switch how to forward IP traffic when you configure the TCP/IP parameters manually. XGS-4526/4528F/4728F User’s Guide...
Page 466 MAC addresses and/or configured static MAC addresses to pass through a port on the Switch. Authentication, The Switch supports authentication, authorization and Authorization and accounting services via RADIUS and TACACS+ AAA servers. Accounting XGS-4526/4528F/4728F User’s Guide...
Page 467 You can configure the Switch to update the ARP table with with an ARP reply or a gratuitous ARP request and/or an APR request. Load Sharing Load sharing allows the Switch to forward packets destined to the same device through different routing paths of equal path cost. XGS-4526/4528F/4728F User’s Guide...
Page 468 Chapter 56 Product Specifications Table 173 Switching Specifications Layer 2 Bridging 8K MAC addresses in the XGS-4526 or XGS-4528F; 16K MAC Features addresses in the XGS-4728F Static MAC address filtering by source/destination Broadcast storm control Static MAC address forwarding Switching...
Page 469 IP Capability IPV4 support Features 128 IP routing domains 2K IP address table in the XGS-4526 or XGS-4528F; 8K IP address table in the XGS-4728F 512 routing paths in the XGS-4526 or XGS-4528F; 8K routing paths in the XGS-4728F Wire speed IP forwarding...
Page 470 Daytime Protocol RFC 868 Time Protocol RFC 894 Ethernet II Encapsulation RFC 1058 RIP-1 (Routing Information Protocol) RFC 1112 IGMP v1 RFC 1155 RFC 1157 SNMPv1: Simple Network Management Protocol version 1 RFC 1213 SNMP MIB II XGS-4526/4528F/4728F User’s Guide...
Page 471 Flow Control IEEE 802.3z 1000BASE-X For optical fiber link 1000BASE-SX/LX. RFC 2516 A method for transmitting PPP over Ethernet (PPPoE) RFC 3176 sFlow RFC 3415 View-based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP) XGS-4526/4528F/4728F User’s Guide...
Page 472 Chapter 56 Product Specifications XGS-4526/4528F/4728F User’s Guide...
Page 473: Appendix A Common Services
Border Gateway Protocol. BOOTP_CLIENT DHCP Client. BOOTP_SERVER DHCP Server. CU-SEEME 7648 A popular videoconferencing solution from White Pines Software. 24032 TCP/UDP Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. XGS-4526/4528F/4728F User’s Guide...
Page 474 Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service. PING User-Defined Packet INternet Groper is a protocol that sends out ICMP echo requests to test whether or not a remote host is reachable. XGS-4526/4528F/4728F User’s Guide...
Page 475 TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. SYSLOG Syslog allows you to send system logs to a UNIX server. TACACS Login Host Protocol used for (Terminal Access Controller Access Control System). XGS-4526/4528F/4728F User’s Guide...
Page 476 TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. XGS-4526/4528F/4728F User’s Guide...
Page 477: Appendix B Legal Information
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Page 478 Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada. CLASS 1 LASER PRODUCT APPAREIL A LASER DE CLASS 1 PRODUCT COMPLIES WITH 21 CFR 1040.10 AND 1040.11. PRODUIT CONFORME SELON 21 CFR 1040.10 ET 1040.11. XGS-4526/4528F/4728F User’s Guide...
Page 479 Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. XGS-4526/4528F/4728F User’s Guide...
Page 480 Appendix B Legal Information XGS-4526/4528F/4728F User’s Guide...
Page 481: Index
ARP (Address Resolution Protocol) 381, 451 ARP inspection 259, 262 certifications and MAC filter notices configuring viewing syslog messages CFI (Canonical Format Indicator) trusted ports changing the password AS Boundary Router Cisco Discovery Protocol, see CDP authentication CIST and OSPF XGS-4526/4528F/4728F User’s Guide...
Page 482 See port cloning DR (Designated Router) copyright DS (Differentiated Services) CPU management port DSCP CPU protection DSCP-to-IEEE802.1p mapping configuration service level overview what it does current date DSCP (DiffServ Code Point) current time DVMRP XGS-4526/4528F/4728F User’s Guide...
Page 483 FCC interference statement hardware overview file transfer using FTP hello time command example hops filename convention, configuration HTTPS configuration certificates file names implementation filtering public keys, private keys rules XGS-4526/4528F/4728F User’s Guide...
Page 484 OSPF Link Aggregate Control Protocol (LACP) Internal Router (IR) link aggregation Internet Protocol version 6, see IPv6 dynamic introduction ID information setup 181, 183 capability status interface 110, 373 traffic distribution algorithm routing domain traffic distribution type XGS-4526/4528F/4728F User’s Guide...
Page 485 MST region maintenance network example current configuration path cost main screen port priority Management Information Base (MIB) revision level management port MSTP (Multiple Spanning Tree Protocol) managing the device XGS-4526/4528F/4728F User’s Guide...
Page 486 IGMP how it works port based VLAN type interface 332, 334, 341 port cloning 455, 456 link state database 332, 335 advanced settings 455, 456 network example basic settings 455, 456 XGS-4526/4528F/4728F User’s Guide...
Page 487 VLAN remote management configuration service isolated port trusted computers overview resetting promiscuous port 54, 390 to factory default settings product registration restoring configuration 54, 392 protocol based VLAN Reverse Path Forwarding (RPF) XGS-4526/4528F/4728F User’s Guide...
Page 488 Simple Network Management Protocol, see link aggregation SNMP OSPF SNMP port 31, 398 agent port details and MIB power authentication 410, 411 156, 160, 166 communities VLAN management model VRRP manager 147, 294, 468 XGS-4526/4528F/4728F User’s Guide...
Page 489 Two Rate Three Color Marker, see TRTCM system reboot Type of Service (ToS) TACACS+ UDLD setup UniDirectional Link Detection, see UDLD TACACS+ (Terminal Access Controller Access- Control System Plus) untrusted ports ARP inspection tagged VLAN DHCP snooping temperature XGS-4526/4528F/4728F User’s Guide...
Page 490 108, 120 VLAN (Virtual Local Area Network) VLAN mapping warranty activating note configuration web configurator 31, 47 example getting help priority level layout tagged login traffic flow logout untagged navigation panel VLAN ID weight, queuing VLAN number XGS-4526/4528F/4728F User’s Guide...
Page 491 Index Weighted Round Robin Scheduling (WRR) WFQ (Weighted Fair Queuing) WRR (Weighted Round Robin Scheduling ZyNOS (ZyXEL Network Operating System) XGS-4526/4528F/4728F User’s Guide...

This manual is also suitable for:

Xgs-4528f Xgs-4728f Xgs-4528f/xgs-4526

ZyXEL Communications XGS-4526 User Manual

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Getting to Know Your Switch

Chapter 2 Hardware Installation and Connection

Chapter 3 Hardware Overview

Chapter 4 The Web Configurator

Chapter 5 Initial Setup Example

Chapter 6 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 7 System Status and Port Statistics

Chapter 8 Basic Setting

Chapter 9 VLAN

Chapter 10 Static MAC Forward Setup

Chapter 11 Static Multicast Forward Setup

Chapter 12 Filtering

Chapter 13 Spanning Tree Protocol

Chapter 14 Bandwidth Control

Chapter 15 Broadcast Storm Control

Chapter 16 Mirroring

Chapter 17 Link Aggregation

Chapter 18 Port Authentication

Chapter 19 Port Security

Chapter 20 Classifier

Chapter 21 Policy Rule

Chapter 22 Queuing Method

Chapter 23 VLAN Stacking

Chapter 24 Multicast

Chapter 25 AAA

Chapter 26 IP Source Guard

Chapter 27 Loop Guard

Chapter 28 VLAN Mapping

Chapter 29 Layer 2 Protocol Tunneling

Chapter 30 Sflow

Chapter 31 Pppoe

Chapter 32 Error Disable

Chapter 33 Private VLAN

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications XGS-4526

Summary of Contents for ZyXEL Communications XGS-4526