ZyXEL Communications MGS3600-24F User Manual

page of 397

/ 397
Contents
Table of Contents
Bookmarks

Table of Contents

Quick Links

User's Guide

MGS3600-24F/XGS3600-26F/XGS3600-28F

Table of Contents

Chapters

Table of Contents

Need help?

Do you have a question about the MGS3600-24F and is the answer not in the manual?

Questions and answers

Summary of Contents for ZyXEL Communications MGS3600-24F

Page 1 User’s Guide MGS3600-24F/XGS3600-26F/XGS3600-28F...
Page 2: About This User's Guide
MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ ’ UIDE BOUT UIDE About This User’s Guide Intended Audience This manual is intended for people who want to configure the switch using the web configurator. Related Documents Command Line Interface (CLI) Reference Guide  The Command Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands to configure the switch.
Page 3: Customer Support
MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ ’ UIDE BOUT UIDE The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com. Download Library  Search for the latest product updates and documentation from this link. Read the Tech Doc Overview to find out how to efficiently use the User Guide, Quick Start Guide and Command Line Interface Reference Guide in order to better understand how to use your product.
Page 4 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ ’ UIDE BOUT UIDE Date that you received your device.  Brief description of the problem and the steps you took to solve it. ...
Page 5: Document Conventions
Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions The MGS3600-24F, XGS3600-26F and XGS3600-26F may be referred to as the “MGS3600-24F”, “XGS3600-26F”, “XGS3600-28F”,  “switch”, the “device”, the “system” or the “product” in this User’s Guide. Differentiation is made where needed.
Page 6 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE OCUMENT ONVENTIONS Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The switch icon is not an exact representation of your device. The Switch Computer Notebook computer Server DSLAM Firewall...
Page 7: Safety Warnings
MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE AFETY ARNINGS Safety Warnings Do NOT use this product near water, for example, in a wet basement or near a swimming pool.  Do NOT expose your device to dampness, dust or corrosive liquids.  Do NOT store things on the device.
Page 8 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE AFETY ARNINGS Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and elec- tronic equipment should be treated separately.
Page 9: Table Of Contents
MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE ONTENTS VERVIEW Front Matter Front Matter Introduction ..................................1-2 Ways to Manage the Switch ............................1-3 Good Habits for Managing the Switch ...........................1-4 Front Matter Free Standing Installation ..............................2-2 Rack-Mounted Installation .............................2-4 Rack-mounted Installation Requirements ........................2-4 Precautions ................................2-4 Attaching the Mounting Brackets to the Switch......................2-5...
Page 10 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Front Panel Connections ...............................3-2 Dual Personality Interfaces ............................3-5 1000Base-T Ports ..............................3-6 Default Ethernet Settings ............................3-6 Mini-GBIC Slots................................3-7 Transceiver Installation ............................3-8 Transceiver Removal .............................3-9 Power Connectors..............................3-10 Console Port ................................3-12 LEDs ..................................3-13 Front Matter Overview..................................4-2 Traffic Overview................................4-3 Status: Port Details ................................4-5 Front Matter Overview..................................5-2...
Page 11 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE What You Can Do ..............................5-3 System Information................................5-4 General Setup................................5-7 VLANs....................................5-10 IP Setup ..................................5-12 Management IP Addresses............................5-12 Port Configuration................................5-15 Front Matter Front Matter System Configuration ..............................6-5 System Information................................6-6 Information .................................6-6 Configuration................................6-9 CPU Load...................................6-10 Time....................................6-11 Manual ..................................6-11...
Page 12 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE NTP ....................................6-13 Account..................................6-14 Users..................................6-14 Privilege Level................................6-16 IP ....................................6-17 IPv4 ....................................6-17 IPv6 ....................................6-19 SYSLOG ..................................6-20 Configuration................................6-20 Log .....................................6-21 Detailed Log ................................6-22 SNMP ....................................6-23 System ..................................6-23 Communities ................................6-24 Users..................................6-25 Groups ..................................6-27 Views..................................6-28...
Page 13 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Access..................................6-29 Trap....................................6-31 Front Matter Configuration .................................7-2 Port ....................................7-3 Configuration................................7-3 Port Description................................7-5 Traffic Overview .................................7-6 Detailed Statistics...............................7-7 QoS Statistics................................7-9 SFP Information .................................7-10 ACL....................................7-12 Ports...................................7-12 Rate Limiters ................................7-14 Access Control List ..............................7-15 ACL Status .................................7-21 Aggregation ...................................7-23 XIII...
Page 14 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Static Trunk ................................7-23 LACP..................................7-25 Spanning Tree ................................7-29 Bridge Settings................................7-30 MSTI Mapping................................7-32 MSTI Priorities................................7-33 CIST Ports..................................7-34 MSTI Ports .................................7-36 Bridge Status................................7-37 Port Status .................................7-39 Port Statistics ................................7-40 MRSTP ..................................7-41 Instances..................................7-41 Port Configuration ..............................7-44 Port Status .................................7-46 IGMP and MLD Snooping..............................7-48...
Page 15 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE VLAN Configuration ..............................7-50 Port Group Filtering..............................7-52 Status ..................................7-53 Group Information ..............................7-55 IPv4 and IPv6 SSM Information ..........................7-56 MVR....................................7-57 Configuration................................7-57 Groups Information ..............................7-59 Statistics..................................7-60 LLDP....................................7-61 LLDP Configuration..............................7-61 LLDP Neighbors.................................7-64 LLDP MED Configuration............................7-65 LLDP MED Neighbors..............................7-71 Port Statistics ................................7-74 Configuration................................7-76...
Page 16 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE VLAN .....................................7-79 VLAN Membership ..............................7-79 Ports...................................7-80 Switch Status ................................7-82 Port Status .................................7-83 Private VLANs................................7-84 MAC-Based VLAN ..............................7-86 Protocol-Based VLAN ..............................7-88 GARP and MRP................................7-90 Configuration................................7-90 Statistics..................................7-92 GVRP and MVRP ................................7-93 Configuration................................7-93 Statistics..................................7-95 QoS....................................7-96 Port Classification ..............................7-96 Port Policing ................................7-99...
Page 17 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Queue Policing................................7-101 Port Scheduler and Port Shaping..........................7-102 Port Tag Remarking ..............................7-104 Port DSCP..................................7-106 DSCP Based QoS..............................7-107 DSCP Translation ..............................7-108 DSCP Classification ..............................7-109 QoS Control List.................................7-110 QCL Status.................................7-114 WRED ..................................7-116 sFlow Agent ...................................7-118 Collector ..................................7-118 Sampler..................................7-120 Mirroring..................................7-121 Trap Event Severity ...............................7-122...
Page 18 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Port Config .................................7-124 Event Config................................7-126 Port Status .................................7-128 Link Events.................................7-130 Statistics..................................7-133 Ethernet OAM ................................7-135 EPS....................................7-137 EPRS .....................................7-139 Security Security..................................8-2 IP Source Guard ................................8-3 Configuration................................8-3 Static Table ................................8-4 Dynamic Table ................................8-5 ARP Inspection ................................8-6 Configuration................................8-6 Static Table ................................8-7...
Page 19 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Dynamic Table ................................8-8 DHCP Snooping ................................8-9 Configuration................................8-9 Statistics..................................8-10 DHCP Relay ..................................8-12 Configuration................................8-12 Statistics..................................8-13 NAS ....................................8-15 Configuration................................8-15 Switch Status ................................8-22 Port Status .................................8-23 AAA....................................8-25 Configuration................................8-25 RADIUS Overview..............................8-28 RADIUS Details................................8-29 Port Security ..................................8-33 Limit Control ................................8-33...
Page 20 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Switch Status ................................8-36 Port Status .................................8-38 Access Management ..............................8-40 Configuration................................8-40 Statistics..................................8-42 SSH ....................................8-43 HTTPS ...................................8-44 AUTH Method ................................8-45 Maintenance Restart Device ................................9-2 Firmware..................................9-3 Firmware Upgrade ..............................9-3 Firmware Selection ..............................9-4 Save/Restore .................................9-5 Factory Defaults .................................9-5 Save Start ..................................9-6...
Page 21 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Restore User ................................9-8 Export/Import .................................9-9 Export Config ................................9-9 Import Config................................9-10 Diagnostics ..................................9-11 Ping ....................................9-11 Ping6 ..................................9-12 Front Matter Front Matter Power, Hardware Connections and LEDs ........................10-3 Switch Access and Login...............................10-4 Switch Configuration..............................10-6 Front Matter Hardware Specifications ..............................11-2...
Page 22 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE EMI/Safety Specifications ..............................11-19 Front Matter Glossary of Web Based Management ...........................A-1 Common Services .................................B-1 Legal Information ................................C-1 XXII...
Page 23: Introduction
MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE ABLE OF ONTENTS About This User’s Guide Intended Audience.................................ii Related Documents ...............................ii Documentation Feedback..............................ii Customer Support................................iii Document Conventions Safety Warnings Front Matter Front Matter Introduction ..................................1-2 XXIII...
Page 24: Ways To Manage The Switch
MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Ways to Manage the Switch ............................1-3 Good Habits for Managing the Switch ...........................1-4 Front Matter Free Standing Installation ..............................2-2 Rack-Mounted Installation .............................2-4 Rack-mounted Installation Requirements ........................2-4 Precautions ................................2-4 Attaching the Mounting Brackets to the Switch......................2-5 Mounting the Switch on a Rack..........................2-6 Front Matter Front Panel Connections ...............................3-2...
Page 25 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Transceiver Removal .............................3-9 Power Connectors..............................3-10 AC Power Connection ............................3-10 DC Power Connection ............................3-11 Console Port ................................3-12 LEDs ..................................3-13 Front Matter Overview..................................4-2 Traffic Overview................................4-3 Status: Port Details ................................4-5 Front Matter Overview..................................5-2 What You Can Do ..............................5-3 System Information................................5-4 General Setup................................5-7...
Page 26 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE IP Setup ..................................5-12 Management IP Addresses............................5-12 Port Configuration................................5-15 Front Matter Front Matter System Configuration ..............................6-5 System Information................................6-6 Information .................................6-6 Parameter description............................6-6 Configuration................................6-9 Parameter description............................6-9 CPU Load...................................6-10 Time....................................6-11 Manual ..................................6-11 Parameter description............................6-11 NTP ....................................6-13 XXVI...
Page 27 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Parameter description............................6-13 Account..................................6-14 Users..................................6-14 Parameter description............................6-14 Privilege Level................................6-16 Parameter description............................6-16 IP ....................................6-17 IPv4 ....................................6-17 Parameter description............................6-17 IPv6 ....................................6-19 Parameter description............................6-19 SYSLOG ..................................6-20 Configuration................................6-20 Parameter description............................6-20 Log .....................................6-21 Parameter description............................6-21 Detailed Log ................................6-22 XXVII...
Page 28 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Parameter description............................6-22 SNMP ....................................6-23 System ..................................6-23 Parameter description............................6-23 Communities ................................6-24 Parameter description............................6-24 Users..................................6-25 Parameter description............................6-25 Groups ..................................6-27 Parameter description............................6-27 Views..................................6-28 Parameter description............................6-28 Access..................................6-29 Parameter description............................6-29 Trap....................................6-31 Front Matter Configuration .................................7-2 XXVIII...
Page 29 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Port ....................................7-3 Configuration................................7-3 Parameter description............................7-3 Port Description................................7-5 Parameter description............................7-5 Traffic Overview .................................7-6 Parameter description............................7-6 Detailed Statistics...............................7-7 Parameter description............................7-7 QoS Statistics................................7-9 Parameter description............................7-9 SFP Information .................................7-10 Parameter description............................7-10 ACL....................................7-12 Ports...................................7-12 Parameter description............................7-12 Rate Limiters ................................7-14 XXIX...
Page 30 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Parameter description............................7-14 Access Control List ..............................7-15 Parameter description............................7-15 ACE Conditions...............................7-15 ACE Actions ..............................7-20 ACL Status .................................7-21 Parameter description............................7-21 Aggregation ...................................7-23 Static Trunk ................................7-23 Parameter description............................7-23 Aggregation Mode Configuration ........................7-23 Aggregation Group Configuration ........................7-24 LACP..................................7-25 Configuration ..............................7-25 Parameter description .............................7-25...
Page 31 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Port Status ................................7-27 Parameter description............................7-27 Port Statistics..............................7-28 Parameter description............................7-28 Spanning Tree ................................7-29 Bridge Settings................................7-30 Parameter description............................7-30 Basic Settings ..............................7-30 Advanced Settings ............................7-31 MSTI Mapping................................7-32 Parameter description............................7-32 Configuration Identification..........................7-32 MSTI Mapping..............................7-32 MSTI Priorities................................7-33 Parameter description............................7-33 CIST Ports..................................7-34 Parameter description............................7-34...
Page 32 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE MSTI Ports .................................7-36 Parameter description............................7-36 Bridge Status................................7-37 Parameter description............................7-37 Port Status .................................7-39 Parameter description............................7-39 Port Statistics ................................7-40 Parameter description............................7-40 MRSTP ..................................7-41 Instances..................................7-41 Parameter description............................7-41 MRSTP Instance Configuration........................7-41 MRSTP Instance Status..........................7-42 Port Configuration ..............................7-44 Parameter description............................7-44 Port Status .................................7-46 Parameter description............................7-46...
Page 33 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE IGMP and MLD Snooping..............................7-48 Basic Configuration ..............................7-48 Parameter description............................7-48 IGMP or MLD Snooping Configuration......................7-48 Port Related Configuration..........................7-49 VLAN Configuration ..............................7-50 Parameter description............................7-50 Port Group Filtering..............................7-52 Parameter description............................7-52 Status ..................................7-53 Parameter description............................7-53 Group Information ..............................7-55 Parameter description............................7-55 IPv4 and IPv6 SSM Information ..........................7-56...
Page 34 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Parameter description............................7-57 Groups Information ..............................7-59 Parameter description............................7-59 Statistics..................................7-60 Parameter description............................7-60 LLDP....................................7-61 LLDP Configuration..............................7-61 Parameter description............................7-61 LLDP Neighbors.................................7-64 Parameter description............................7-64 LLDP MED Configuration............................7-65 Parameter description............................7-65 Fast Start Repeat Count ..........................7-65 Coordinates Location ............................7-66 Civic Address Location............................7-66 Policies................................7-68 Policy Port Configuration..........................7-70...
Page 35 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE LLDP MED Neighbors..............................7-71 Parameter description............................7-71 Port Statistics ................................7-74 Parameter description............................7-74 Global Counters ..............................7-74 Local Counters ..............................7-74 Configuration................................7-76 Parameter description............................7-76 Aging Configuration............................7-76 MAC Table Learning ............................7-76 Static MAC Table Configuration........................7-77 Dynamic MAC Table ..............................7-78 Parameter description............................7-78 VLAN .....................................7-79 VLAN Membership ..............................7-79...
Page 36 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Parameter description............................7-80 Switch Status ................................7-82 Parameter description............................7-82 Port Status .................................7-83 Parameter description............................7-83 Private VLANs................................7-84 Private VLANs Membership..........................7-84 Parameter description............................7-84 Port Isolation...............................7-84 Parameter description............................7-85 MAC-Based VLAN ..............................7-86 Configuration ..............................7-86 Parameter description............................7-86 Status..................................7-87 Parameter description............................7-87 Protocol-Based VLAN ..............................7-88 Protocol to Group..............................7-88...
Page 37 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Parameter description............................7-88 Group to VLAN ..............................7-89 Parameter description............................7-89 GARP and MRP................................7-90 Configuration................................7-90 Parameter description............................7-90 Statistics..................................7-92 Parameter description............................7-92 GVRP and MVRP ................................7-93 Configuration................................7-93 Parameter description............................7-93 Global Configuration ............................7-93 Port Configuration ............................7-93 Statistics..................................7-95 Parameter description............................7-95 QoS....................................7-96 Port Classification ..............................7-96...
Page 38 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Parameter description............................7-96 Port Classification page ..........................7-96 QoS Ingress Port Tag Classification page ......................7-97 Port Policing ................................7-99 Parameter description............................7-99 Queue Policing................................7-101 Parameter description............................7-101 Port Scheduler and Port Shaping..........................7-102 Parameter description............................7-102 Queue Shaper..............................7-102 Queue Scheduler ............................7-102 Port Shaper ..............................7-103 Port Tag Remarking ..............................7-104...
Page 39 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Port DSCP..................................7-106 Parameter description............................7-106 DSCP Based QoS..............................7-107 Parameter description............................7-107 DSCP Translation ..............................7-108 Parameter description............................7-108 DSCP Classification ..............................7-109 Parameter description............................7-109 QoS Control List.................................7-110 Parameter description............................7-110 QCE Conditions ..............................7-110 QCE Actions..............................7-113 QCL Status.................................7-114 Parameter description............................7-114 WRED ..................................7-116 Parameter description............................7-117 sFlow Agent ...................................7-118...
Page 40 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Collector ..................................7-118 Parameter description............................7-118 Sampler..................................7-120 Parameter description............................7-120 Mirroring..................................7-121 Parameter description............................7-121 Trap Event Severity ...............................7-122 Parameter description............................7-122 SMTP Configuration ..............................7-123 Parameter description............................7-123 802.3ah OAM.................................7-124 Port Config .................................7-124 Parameter description............................7-124 Event Config................................7-126 Parameter description............................7-126 Port Status .................................7-128 Parameter description............................7-128...
Page 41 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Link Events.................................7-130 Parameter description............................7-130 Local and Remote Frame Error Status ......................7-130 Local and Remote Frame Period Status ......................7-130 Local and Remote Symbol Period Status .......................7-131 Local and Remote Event Seconds Summary Status ..................7-132 Statistics..................................7-133 Parameter description............................7-133 Ethernet OAM ................................7-135...
Page 42 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Configuration................................8-3 Parameter description............................8-3 IP Source Guard Configuration ........................8-3 Port Mode Configuration ..........................8-3 Static Table ................................8-4 Parameter description............................8-4 Dynamic Table ................................8-5 Parameter description............................8-5 ARP Inspection ................................8-6 Configuration................................8-6 Parameter description............................8-6 ARP Inspection Configuration .........................8-6 Port Mode Configuration ..........................8-6 Static Table ................................8-7...
Page 43 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE DHCP Snooping ................................8-9 Configuration................................8-9 Parameter description............................8-9 DHCP Snooping Configuration ........................8-9 Port Mode Configuration ..........................8-9 Statistics..................................8-10 Parameter description............................8-10 DHCP Relay ..................................8-12 Configuration................................8-12 Parameter description............................8-12 Statistics..................................8-13 Parameter description............................8-13 Server Statistics ..............................8-13 Client Statistics..............................8-14 NAS ....................................8-15 Configuration................................8-15 Parameter description............................8-15...
Page 44 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE System Configuration............................8-15 Port Mode Configuration ..........................8-17 Switch Status ................................8-22 Parameter description............................8-22 Port Status .................................8-23 Parameter description............................8-23 Port State ................................8-23 Port Counters ..............................8-23 Attached MAC Addresses ..........................8-24 AAA....................................8-25 Configuration................................8-25 Parameter description............................8-25 Common Server Configuration........................8-25 TACACS+ Authorization and Accounting Configuration .................8-26 RADIUS Authentication Server Configuration....................8-26...
Page 45 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE RADIUS Overview..............................8-28 Parameter description............................8-28 RADIUS Details................................8-29 Parameter description............................8-29 RADIUS Authentication Statistics ........................8-29 RADIUS Accounting Statistics ........................8-31 Port Security ..................................8-33 Limit Control ................................8-33 Parameter description............................8-33 System Configuration............................8-33 Port Configuration ............................8-34 Switch Status ................................8-36 Parameter description............................8-36 User Module Legend............................8-36 Port Status ..............................8-36...
Page 46 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Access Management ..............................8-40 Configuration................................8-40 Parameter description............................8-40 Statistics..................................8-42 Parameter description............................8-42 SSH ....................................8-43 Parameter description............................8-43 HTTPS ...................................8-44 Parameter description............................8-44 AUTH Method ................................8-45 Parameter description............................8-45 Maintenance Restart Device ................................9-2 Firmware..................................9-3 Firmware Upgrade ..............................9-3 Firmware Selection ..............................9-4 Parameter description............................9-4 XLVI...
Page 47: Power, Hardware Connections And Leds
MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Save/Restore .................................9-5 Factory Defaults .................................9-5 Save Start ..................................9-6 Save User ..................................9-7 Restore User ................................9-8 Export/Import .................................9-9 Export Config ................................9-9 Import Config................................9-10 Diagnostics ..................................9-11 Ping ....................................9-11 Parameter description............................9-11 Ping6 ..................................9-12 Parameter description............................9-12 Front Matter Front Matter Power, Hardware Connections and LEDs ........................10-3...
Page 48: Switch Access And Login
MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Switch Access and Login...............................10-4 Switch Configuration..............................10-6 Front Matter Hardware Specifications ..............................11-2 Key Features ..............................11-2 Interface................................11-3 LED Indicators ..............................11-4 General ................................11-5 Firmware Specifications..............................11-7 Port Control.................................11-7 QoS..................................11-8 L2 Switching ...............................11-9 Security and Synchronization ..........................11-12 OAM..................................11-13 Robustness and Power Saving...........................11-14 Management...............................11-15...
Page 49: Glossary Of Web Based Management
MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE EMI/Safety Specifications ..............................11-19 Front Matter Appendix A Glossary of Web Based Management ...........................A-1 A ..................................A-1 C ..................................A-3 D ..................................A-4 E ..................................A-6 F..................................A-7 H ..................................A-8 I...................................A-9 L..................................A-11 M..................................A-12 N ..................................A-14 O ..................................A-15 P ..................................A-16 XLIX...
Page 50: Common Services
MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE Q ..................................A-18 R ..................................A-19 S ..................................A-20 T..................................A-23 U ..................................A-25 V ..................................A-26 Appendix B Common Services .................................B-1 Appendix C Legal Information ................................C-1 Copyright ................................C-1 Disclaimer ...............................C-1 Trademarks ..............................C-1 Certifications ...............................C-1 Federal Communications Commission (FCC) Interference Statement ............C-1...
Page 51 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE CE Mark Warning:............................C-2 Taiwanese BSMI (Bureau of Standards, Metrology and Inspection) A Warning:..........C-2 Notices ................................C-2 Viewing Certifications............................C-3 ZyXEL Limited Warranty.............................C-3 Note.................................C-3 Registration ..............................C-3...
Page 52 Part I: Front Matter...
Page 53 Front Matter Chapter 1...
Page 54 1.1 Introduction This chapter introduces the main features and applications of the switch. The switch comes in the following models: MGS3600-24F 20-port GbE Fiber L2 Switch with Four GbE Combo Ports  XGS3600-26F 20-port GbE Fiber L2 Switch with Four GbE Combo Ports and Two 10G Fiber Ports ...
Page 55: Ways To Manage The Switch
Command Line Interface. Line commands offer an alternative to the Web Configurator and may be necessary to configure advanced fea-  tures. See the CLI Reference Guide. SNMP. The device can be monitored and/or managed by an SNMP manager. See “SNMP” on page 6-23.  MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 56: Good Habits For Managing The Switch
Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-con- figure the switch. You could simply restore your last configuration. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 57 Front Matter Chapter 2...
Page 58: Free Standing Installation
Attach the rubber feet to each corner on the bottom of the switch. These rubber feet help protect the switch from shock or vibration and ensure space between devices when stacking. Figure 2-1. MGS3600-24F/XGS3600-26F/XGS3600-28F Attaching Rubber Feet Note: Do NOT block the ventilation holes. Leave space between devices when stacking.
Page 59 ATTER Note: For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front and 3.4 inches (8 cm) at the back of the switch. This is espe- cially important for enclosed rack installations. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 60: Rack-Mounted Installation
Make sure the rack will safely support the combined weight of all the equipment it contains.  Make sure the position of the switch does not make the rack unstable or top heavy. Take all necessary precautions to anchor the rack  securely before installing the unit. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 61: Attaching The Mounting Brackets To The Switch
Position a mounting bracket on one side of the switch, lining up the four screw holes on the bracket with the screw holes on the side of the switch. Figure 2-2. MGS3600-24F/XGS3600-26F/XGS3600-28F Attaching the Mounting Brackets Using a #2 Phillips screwdriver, install the M3 flat head screws through the mounting bracket holes into the switch.
Page 62: Mounting The Switch On A Rack
Position a mounting bracket (that is already attached to the switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the rack. Figure 2-3. MGS3600-24F/XGS3600-26F/XGS3600-28F Mounting the Switch on a Rack Using a #2 Phillips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack.
Page 63 Front Matter Chapter 3...
Page 64: Front Panel Connections
This chapter describes the front panel of the switch. CONSOLE XGS3600-24F -48V PWR AC 1000 PWR AC LINK/ACT MGMT AC INPUT 100-240VAC DC INPUT 48VDC Figure 3-1. MGS3600-24F Front Panel CONSOLE XGS3600-26F -48V PWR AC 1000 PWR AC LINK/ACT MGMT DC INPUT 48VDC AC INPUT 100-240VAC Figure 3-2.
Page 65 Connect these interfaces to local servers, routers or switches. Each interface consists of a pair of ports — one SFP (100/1000 Mb) port and one RJ-45 (10/ 100/1000Base-T) port. Only one port may be active at a time. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 66 RS-232 Management Port Connect this port to an RS-232 interface to configure the switch using the command line interface (CLI). RJ-45 Management Port  Connect this Ethernet port to the out-of-band remote management network. (10/100/1000 Mbps) MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 67: Dual Personality Interfaces
1000Base-T port or the mini-GBIC port. The mini-GBIC ports have priority over the 1000Base-T ports. This means that if a mini-GBIC port and the corresponding 1000Base-T port are connected at the same time, the 1000Base-T port will be disabled. MGS3600-24F/XGS3600-26F/XGS3600-28F ’...
Page 68: Base-T Ports
An auto-crossover (auto-MDI/MDI-X) port automatically works with a straight through or crossover Ethernet cable. 3.1.2.1 Default Ethernet Settings The factory default negotiation settings for the Ethernet ports on the switch are: Speed: Auto  Duplex: Auto  Flow control: Off  MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 69: Mini-Gbic Slots
 Connection speed: 1 Gigabit per second (Gbps) or 10 Gbps for the 2 uplink ports on the XGS3600-26F only  WARNING: To avoid possible eye injury, do not look into an operating fiber optic module’s connectors. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 70: Transceiver Installation
Insert the transceiver into the slot with the exposed section of PCB board facing down. Figure 3-4. Transceiver Installation Example Press the transceiver firmly until it clicks into place. The switch automatically detects the installed transceiver. Check the LEDs to verify that it is functioning properly. Figure 3-5. Installed Transceiver MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 71: Transceiver Removal
Use the following steps to remove a mini GBIC transceiver (SFP module). Open the transceiver’s latch (styles vary). Figure 3-6. Opening the Transceiver’s Latch Example Pull the transceiver out of the slot. Figure 3-7. Transceiver Removal Example MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 72: Power Connectors
AC Power Connection Connect the female end of the power cord to the power socket of your switch. Connect the other end of the cord to a power outlet. MGS3600-24F/XGS3600-26F/XGS3600-28F 3-10 ’ UIDE...
Page 73: Dc Power Connection
Connect one end of a power wire to the switch’s -48V (input) pin and tighten the captive screw. Connect the other end of the power wire to the negative terminal on the power supply. Insert the terminal block plug in the switch’s terminal block header. MGS3600-24F/XGS3600-26F/XGS3600-28F 3-11 ’...
Page 74: Console Port
No flow control  Connect the male 9-pin end of the RS-232 console cable to the console port of the switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer. MGS3600-24F/XGS3600-26F/XGS3600-28F 3-12 ’ UIDE...
Page 75: Leds
Green The 1000 Mbps link is up. Amber The 100 Mbps link is up. Green/Amber Blinking The system is transmitting/receiving data. The link to an Ethernet network is down.  100/1000 Mbps mini-GBIC Ethernet Ports ( MGS3600-24F/XGS3600-26F/XGS3600-28F 3-13 ’ UIDE...
Page 76 1/10 GbE mini-GBIC Ethernet Uplink Ports ( 25, 26 Green The 1 Gbps link is up. Amber The 10 Gbps link is up. Green/Amber Blinking The system is transmitting/receiving data. The link to an Ethernet network is down. MGS3600-24F/XGS3600-26F/XGS3600-28F 3-14 ’ UIDE...
Page 77: Front Matter
Front Matter Chapter 4...
Page 78: Overview
This chapter describes how to show an overview of the traffic flowing on all ports and detailed statistics for each port. Use the: Traffic Overview screen to see an overview of the traffic flowing on all ports.  Detailed Statistics screen to see individual port statistics.  MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 79: Traffic Overview
4.2 Traffic Overview Use the Traffic Overview sub-menu to see the traffic statistics for all switch ports. To show an overview of traffic statistics, click Configuration > Port > Traffic Overview. Figure 4-1. Configuration > Port > Traffic Overview MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 80 These fields show the number of frames received in error and the number of incomplete transmis- sions per port. Drops These fields show the number of frames discarded due to ingress or egress congestion. Filtered This field shows the number of received frames filtered by the switch forwarding process. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 81: Status: Port Details
Statistics. 2. Select the port number from the Port Index drop-down box to show detailed port statistics for that port. Figure 4-2. Configuration > Port > Detailed Statistics The following table describes the labels in this screen. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 82 Rx Undersize This field shows the number of frames smaller than 64 bytes received with valid CRCs. Rx Oversize This field shows the number of frames bigger than the configured maximum frame size received with valid CRCs. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 83 This field shows the number of received frames filtered by the forwarding process. Transmit Error Counters Tx Drops This field shows the number of frames dropped due to output buffer congestion. Tx Late/Exc. Coll. This field shows the number of frames dropped due to excessive or late collisions. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 84: Front Matter
Front Matter Chapter 5...
Page 85: Overview
Click this button to page back through the entries. >>:  Click this button to page forward through the entries. >>|:  Click this button to go to the last entry. Save:  Click this button to save changes. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 86: What You Can Do
> IPv4 screen to configure the switch IPv4 address, default gateway device, the default domain name server and the  management VLAN ID. Use the Configuration > Port > Configuration screen to configure switch port settings.  MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 87: System Information
MAC address, and switch serial number. This information helps support personnel to diagnose a malfunction. Click System > System Information > Information to show the System Information screen. Figure 5-1. System > System Information > Information The following table describes the labels in this screen. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 88 This shows the serial number of the device. Host IP Address This shows the IP address of the device. Subnet Mask This shows the subnet mask of the device. Gateway IP Address This shows the IP address that the device uses for its gateway. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 89 This shows the speeds of fan 1, 2 and 3. Powers This shows the voltage supplied by the internal AC power supply and the external DC power input. Temperature 1 to 4 This shows the temperature of four important chips in the device. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 90: General Setup
Figure 5-2. System > System Information > Configuration Use the Time sub-menu to set the time manually or configure NTP. To manually configure the time: Click System > Time > Manual. The Time Configuration screen appears. Enter the time parameters. Click Save. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 91 This field contains the user-defined system name. This is usually the fully-qualified domain name (FQDN). This must begin with a letter, end with a letter or digit and have letters, dig- its or hyphens in between. The maximum length of text is 255 characters. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 92 Use this field to configure the end of daylight saving time. The top To field is active if the By dates radio button is selected in Daylight Savings Type otherwise the bottom To field is active. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 93: Vlans
Use the VLAN Membership sub-menu to add, delete or modify VLANs. To configure VLAN membership: 1. Click Configuration > VLAN > VLAN membership. 2. Click Add New VLAN. 3. Configure the parameters. 4. Click Save. MGS3600-24F/XGS3600-26F/XGS3600-28F 5-10 ’ UIDE...
Page 94 Use this field to configure the name of VLAN. The VLAN name can only contain alphabetic or numeric characters and should contain at least one alphabetic character. Port Members Use these check boxes to configure membership for each VLAN ID. No ports are mem- bers by default. MGS3600-24F/XGS3600-26F/XGS3600-28F 5-11 ’ UIDE...
Page 95: Ip Setup
The switch gets its management IPv4 configuration via DHCP by default. If there is no DHCP server, the switch uses the static IP configuration. To set the IPv4 configuration: 1. Click System > > IPv4. 2. Specify the IPv4 settings, and enable the DNS Proxy service if required. 3. Click Save. MGS3600-24F/XGS3600-26F/XGS3600-28F 5-12 ’ UIDE...
Page 96 Use this field to set the management IPv4 address of this switch. IP Mask Use this field to set the IPv4 mask of this switch. IP Gateway Use this field to set the IPv4 address of the default gateway. MGS3600-24F/XGS3600-26F/XGS3600-28F 5-13 ’ UIDE...
Page 97 DNS resolver to DNS clients connected to the device. Only valid DNS requests are relayed to the DNS server on behalf of DNS clients connected to the device. This helps to protect DNS clients against attack. MGS3600-24F/XGS3600-26F/XGS3600-28F 5-14 ’...
Page 98: Port Configuration
ATTER 5.6 Port Configuration Use the Configuration sub-menu to configure the speed, flow control and power-saving characteristics of each port. To configure a port: 1. Click Configuration > Port > Configuration. 2. Specify the port parameters. MGS3600-24F/XGS3600-26F/XGS3600-28F 5-15 ’ UIDE...
Page 99 RONT ATTER 3. Click Save. Figure 5-6. Configuration > Port > Configuration The following table describes the labels in this screen. MGS3600-24F/XGS3600-26F/XGS3600-28F 5-16 ’ UIDE...
Page 100 (FCS) allowed for the port. Excessive Collision Mode Use this drop-down box to configure port transmit collision behavior. Possible collision modes are: Discard: Discard frame after 16 collisions (default).  Restart: Restart backoff algorithm after 16 collisions.  MGS3600-24F/XGS3600-26F/XGS3600-28F 5-17 ’ UIDE...
Page 101 Use this drop-down box to configure power-saving options. Possible power control modes are: Disabled: All power saving mechanisms disabled.  ActiPHY: Link down power saving enabled.  PerfectReach: Link up power saving enabled.  Enabled: Both link up and link down power savings enabled.  MGS3600-24F/XGS3600-26F/XGS3600-28F 5-18 ’ UIDE...
Page 102 Part II: Front Matter...
Page 103 RONT ATTER Overview This user's manual explains how to install, configure and manage the MGS3600-24F/XGS3600-26F/XGS3600-28F using the web interface via Ethernet ports. MGS3600-24F/XGS3600-26F/XGS3600-28F switches are affordable, next generation, L2+ managed switches that provide a reliable infrastruc- ture for your business network. These switches have intelligent features that improve the availability of critical business applications, protect sensi- tive information, and optimize network bandwidth.
Page 104: Initial Configuration
Initial Configuration The MGS3600-24F/XGS3600-26F/XGS3600-28F allows only one administrator to configure the system at any given time. If more than one user logs in as admin, only the first user to log in is allowed to configure the system; other users can only monitor the system. Non-admin users can only ever monitor the system.
Page 105 Front Matter Chapter 6...
Page 106: System Configuration
RONT ATTER 6.1 System Configuration This chapter describes the System Information, Time, Account, IP, Syslog and SNMP sub-menus. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 107: Information
This field shows the user-defined system name. This is usually the fully-qualified domain name (FQDN). System Date:  This field shows the system time of the device. The format is YYYY-MM-DD HH:MM:SS. System Uptime:  This field shows the accumulated time since the device was powered up. BIOS Version:  MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 108 This shows the total number of entries that the device can hold in its forwarding database. Transmit Queue:  This shows the number of hardware priority transmit queues per port on this device. Maximum Frame Size:  MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 109 This shows the speeds of fan 1, 2 and 3. Powers:  This shows the voltage supplied by the internal AC power supply and the external DC power input. Temperature 1 to 4:  This shows the temperature of four important chips in the device. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 110: Configuration
The maximum length of text is 255 characters. System Location:  This shows the location of the device (e.g. telephone closet, 3rd floor). The maximum length of text is 255 characters and each character can have an ASCII code of 32 to 126. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 111: Cpu Load
Use this screen to see a graph (rendered by SVG) of how the CPU is being used. The load is shown as a points that are the average load over 100 ms, 1 second and 10 second intervals. To see the CPU Load, Click System > System Information > Load. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-10 ’ UIDE...
Page 112: Time
From times. Time Set Offset:  Use this field to configure the daylight saving time offset. If this is non-zero, the From fields must be configured to enable daylight saving mode. Daylight Savings Type:  MGS3600-24F/XGS3600-26F/XGS3600-28F 6-11 ’ UIDE...
Page 113  Use this field to configure the end of daylight saving time. The top field is active if the By dates radio button is selected in Daylight Sav- ings Type otherwise the bottom field is active. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-12 ’ UIDE...
Page 114 'fe80::215:c5ff:fe03:4dc7'. The double colon symbol '::' is a shorthand way of representing multiple strings of contiguous zeros, but it can only appear once. The double colon symbol can also be used to represent an IPv4 address. For example, '::192.1.2.34'. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-13 ’...
Page 115: Account
Use this field to enter the password. Passwords can be up to 255 characters, each of which with ASCII codes between 32 to 126. Password (again):  Use this field to confirm the password. Privilege Level:  MGS3600-24F/XGS3600-26F/XGS3600-28F 6-14 ’ UIDE...
Page 116 10 has read-write access. System maintenance (software upload, factory defaults, etc.) needs user privilege level 15. Privilege level 15 is used for an administrator account, privilege level 10 for a standard user account and privilege level 5 for a guest account. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-15 ’...
Page 117: Privilege Level
Use these fields to configure the authorization privilege level of each group. Every group has an authorization privilege level for the following sub groups: configuration read-only, configuration/execute read-write, status/statistics read-only, status/statistics read-write (e.g. for clearing of statistics). The user's privilege must be the same or greater than the authorization privilege level to have access to that group. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-16 ’...
Page 118: Ipv4
 Use this field to set the IPv4 mask of this switch. Inband IP Gateway or Outband IP Gateway:  Use this field to set the IPv4 address of the default gateway. Inband VLAN ID:  MGS3600-24F/XGS3600-26F/XGS3600-28F 6-17 ’ UIDE...
Page 119 Use this check box to enable or disable the DNS Proxy. When DNS Proxy is enabled the device appears as a DNS resolver to DNS clients connected to the device. Only valid DNS requests are relayed to the DNS server on behalf of DNS clients connected to the device. This helps to protect DNS clients against attack. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-18 ’...
Page 120: Ipv6
Prefix:  Use this field to set the IPv6 prefix of this switch. The allowed range is 1 to 128. Gateway:  Use this field to set the IPv6 gateway address of this switch. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-19 ’ UIDE...
Page 121: Syslog
Syslog Level:  Use this drop-down box to configure the severity level of the messages that are sent to the syslog server. Possible levels are: Emergency, Alert, Critical, Error, Warning, Notice, Informational and Debug. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-20 ’ UIDE...
Page 122 This shows the level of the system log entry. Possible levels are Emergency, Alert, Critical, Error, Warning, Notice, Informational and Debug. Time:  This shows the time that the log entry was made. Message:  This shows a summary of the log entry. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-21 ’ UIDE...
Page 123: Detailed Log
2. Select an ID to see a detailed view of that entry. Parameter description  Use this drop-down box to select the ID of the system log entry. Message:  This shows the details of a log entry. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-22 ’ UIDE...
Page 124: Snmp
Use this field to configure the SNMPv3 Engine ID. The Engine ID is a hexadecimal number between 5 and 32 octets long. The fifth octet must not be 00. All users are cleared if the Engine ID is changed. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-23 ’...
Page 125: Communities
Use this field to limit access to the SNMP agent in this switch by IP source address. Source Mask:  Use this field to limit access to the SNMP agent in this switch by IP source subnet. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-24 ’ UIDE...
Page 126: Users
An optional flag to indicate that this user uses the MD5 authentication protocol.  SHA: An optional flag to indicate that this user uses the SHA authentication protocol.  The authentication protocol of an existing entry can’t be changed. Authentication Password:  MGS3600-24F/XGS3600-26F/XGS3600-28F 6-25 ’ UIDE...
Page 127 An optional flag to indicate that this user uses the DES authentication protocol.  Privacy Password:  Use this field to configure an privacy password phrase. Passwords are 8 to 32 characters long. Each character can be an ASCII code from 33 to 126. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-26 ’ UIDE...
Page 128: Groups
Use this field to configure a security name. Security names can be up to 32 characters, each of which with ASCII codes from 33 to 126. Group Name:  Use this field to configure a group name. Group names can be up to 32 characters, each of which with ASCII codes from 33 to 126. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-27 ’ UIDE...
Page 129: Views
In general for every excluded view, there should be another included view to cover the OID subtree of the excluded view entry. OID Subtree:  Use this field to configure the root of the view. The allowed OID length is 1 to 128 characters. Each node can be a whole decimal number or an asterisk(*). MGS3600-24F/XGS3600-26F/XGS3600-28F 6-28 ’ UIDE...
Page 130: Access
Use this drop-down box to configure the security level of a new entry. Possible security levels are: NoAuth, NoPriv: No authentication and no privacy.  Auth, NoPriv: Authentication and no privacy.  Auth, Priv: Authentication and privacy.  MGS3600-24F/XGS3600-26F/XGS3600-28F 6-29 ’ UIDE...
Page 131 Read View Name:  Use this drop-down box to configure the SNMP view used to read MIB values. Write View Name:  Use this drop-down box to configure the SNMP view used to read and write MIB values. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-30 ’ UIDE...
Page 132: Trap
Use this drop-down box to configure the severity level of the messages that are sent as traps. Possible levels are: Emergency, Alert, Criti- cal, Error, Warning, Notice, Informational and Debug. Security Level:  Use this drop-down box to configure the security level of a new entry. Possible security levels are: NoAuth, NoPriv: No authentication and no privacy.  MGS3600-24F/XGS3600-26F/XGS3600-28F 6-31 ’ UIDE...
Page 133 An optional flag to indicate that this user uses the DES authentication protocol.  Privacy Password:  Use this field to configure an privacy password phrase. Passwords are 8 to 32 characters long. Each character can be an ASCII code from 33 to 126. MGS3600-24F/XGS3600-26F/XGS3600-28F 6-32 ’ UIDE...
Page 134 Front Matter Chapter 7...
Page 135: Configuration
RONT ATTER 7.1 Configuration This chapter describes the sub-menus used to configure the core functions of this device. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 136: Port
The Current Rx column indicates whether pause frames on the port are obeyed, and the Current Tx column indicates whether pause frames on the port are transmitted. If the configured link speed is auto, the MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 137 Use this drop-down box to configure power-saving options. Possible power control modes are: Disabled: All power saving mechanisms disabled.  ActiPHY: Link down power saving enabled.  PerfectReach: Link up power saving enabled.  Enabled: Both link up and link down power savings enabled.  MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 138: Port Description
2. Enter some text in the Description field. 3. Click Apply. Parameter description Port:  This field shows the port number for this row. Description:  Use this field to configure a user-defined label for the port. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 139: Traffic Overview
These fields show the number of frames received in error and the number of incomplete transmissions per port. Drops:  These fields show the number of frames discarded due to ingress or egress congestion. Filtered:  This field shows the number of received frames filtered by the switch forwarding process. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 140: Detailed Statistics
Receive and Transmit Size Counters These fields show the number of received and transmitted (good and bad) packets categorzed by size. Receive and Transmit Queue Counters These fields show the number of received and transmitted packets per input and output queue. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 141 Transmit Error Counters Tx Drops:  This field shows the number of frames dropped due to output buffer congestion. Tx Late/Exc. Coll.:  This field shows the number of frames dropped due to excessive or late collisions. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 142: Qos Statistics
This field shows the port number for this row. Rx/Tx:  These fields show the number of received and transmitted packets per queue. Qn is queue number n, where n is 0 to 7 and Q0 is the high- est priority queue. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 143: Sfp Information
This field shows the manufacturer's company name. Vendor P/N:  This field shows the product name. Vendor Rev (Revision):  This field shows the module revision. Vendor SN (Serial Number):  This field shows the manufacturer's serial number. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-10 ’ UIDE...
Page 144 Mon1(Bias) mA:  This field shows the bias current of SFP module. Mon2(TX PWR):  This field shows the transmit power of SFP module. Mon3(RX PWR):  This field shows the receiver power of SFP module. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-11 ’ UIDE...
Page 145: Ports
Use this field to configure the policy to apply to this port. The allowed values are 0 through 255. The default value is 0 which means no pol- icy is applied. Action:  Use this drop-down box to Permit (default) or Deny forwarding of traffic. Rate Limiter ID:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-12 ’ UIDE...
Page 146 Use this drop-down box to shut down the port if any traffic is received. Choose Disabled to disable this action or choose Enabled to shut- down port(s). Counter:  This field shows the number of frames that have triggered the default ACL action. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-13 ’ UIDE...
Page 147: Rate Limiters
3. Click Save. Parameter description Rate Limiter ID:  This field shows the rate limiter ID number for this row. Rate:  Use this field to configure a rate limit of 0 to 131071 packets per second. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-14 ’ UIDE...
Page 148: Access Control List
The items shown on the ACE Configuration page depend on the conditions selected. E.g. select a Frame Type Ethernet Type and the Ether- net Type Parameters item appears. The items that don’t change are as follows. Ingress Port:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-15 ’ UIDE...
Page 149 The ACE matches any unicast address.  Specific: This option is available when the Frame Type Ethernet Type. Choose this option and then complete DMAC Value field to  match a specific destination MAC address. VLAN Parameters VLAN ID Filter:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-16 ’ UIDE...
Page 150 Request: The ACE matches non-ARP/RARP requests (not opcode 1, 2, 3 or 4).  Other; Reply: The ACE matches non-ARP/RARP replies (not opcode 1, 2, 3 or 4).  Sender IP Filter Target IP Filter:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-17 ’ UIDE...
Page 151 Use this drop-down box to configure which protocol in the IP header matches this ACE. Choose to configure this ACE to ignore the protocol. Choose ICMP, or choose Other and then complete the IP Protocol Value field match another protocol. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-18 ’ UIDE...
Page 152 Source Port No. Dest. Port No. field to match a specific source or destination port. Choose Range and then complete the Source Port Range Dest. Port Range field to match a range of source or destination ports. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-19 ’ UIDE...
Page 153 Use this drop-down box to shutdown the ingress port(s) if the ACE matches. Choose Disabled to disable this action or choose Enabled to shut- down port(s). Counter:  This field shows the number of frames that have matched the ACE. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-20 ’ UIDE...
Page 154: Acl Status
This field shows whether the ACE is configured to Permit Deny forwarding matching traffic. Rate Limiter:  This field shows how the rate limiter ID is configured in the ACE. Disabled means the action is disabled. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-21 ’ UIDE...
Page 155 This field shows whether the ACE is configured to forward the first frame that match the ACE to the CPU. Counter:  This field shows the number of frames that have matched the ACE. Conflict:  This field shows whether the ACE has not been applied to the hardware due to hardware limitations. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-22 ’ UIDE...
Page 156: Aggregation
This section consists of Hash Code Contributors that determine how traffic is divided amongst the member ports of established trunks. Source MAC Address:  Use this check box to add the source MAC address to the hash. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-23 ’ UIDE...
Page 157 This field shows the trunk’s group ID for this row. Normal means no aggregation. Port Members:  Use these radio buttons to configure which trunk a port belongs to. Note: Each port in a trunk must be full duplex with the same speed. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-24 ’ UIDE...
Page 158: Lacp
1 to 65535. Role:  Use this drop-down box to configure whether the port only responds to LACP packets (Passive) or sends LACP packets every second with- out waiting to receive them first (Active). MGS3600-24F/XGS3600-26F/XGS3600-28F 7-25 ’ UIDE...
Page 159: System Status
This field shows the Key that the partner has assigned to this aggregation ID. Last changed:  This field shows the time since this aggregation changed. Local Ports:  This field shows which ports are a members of this aggregation on this switch. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-26 ’ UIDE...
Page 160: Port Status
This field shows the Aggregation ID assigned to this aggregation group. Partner System ID:  This field shows the partner's System ID (MAC address). Partner Port:  This field shows the partner port number connected to this port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-27 ’ UIDE...
Page 161: Port Statistics
This field shows how many LACP frames have been received at each port. LACP Transmitted:  This field shows how many LACP frames have been sent from each port. Discarded:  This field shows how many unknown or illegal LACP frames have been discarded at each port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-28 ’ UIDE...
Page 162: Spanning Tree
Bridge. If a bridge does not get a Hello BPDU after a predefined interval (Maximum Age), the bridge assumes that the link to the Root Bridge is down. This bridge will then initiate negotiations with other bridges to reconfigure the network to reestablish a valid network topology. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-29 ’...
Page 163: Bridge Settings
Use this field to configure the maximum age of the information transmitted by the bridge when it is the Root Bridge. MaxAge must be between 6 and 40 seconds and must not be more than (Forward Delay - 1) * 2. Maximum Hop Count:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-30 ’ UIDE...
Page 164: Advanced Settings
Port Error Recovery Timeout:  Use this check box to configure the time that must pass before a port in the error-disabled state is automatically re-enabled. Valid values are between 30 and 86400 seconds (24 hours). MGS3600-24F/XGS3600-26F/XGS3600-28F 7-31 ’ UIDE...
Page 165: Msti Mapping
Use this field to configure a comma and/or a space separated list of VLANs mapped to the MSTI. A VLAN can only be mapped to one MSTI. An unused MSTI should just be left empty (i.e. not having any VLANs mapped to it). MGS3600-24F/XGS3600-26F/XGS3600-28F 7-32 ’...
Page 166: Msti Priorities
 Use this field to configure the bridge priority. Lower values have better priority. The bridge priority plus the MSTI instance number, concate- nated with the 6-byte MAC address of the switch forms a Bridge Identifier. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-33 ’ UIDE...
Page 167: Cist Ports
(non-STP device) is attached to this port. Auto Edge:  Check this check box to enable automatic edge detection, so the operEdge flag is reset if a BPDU is received. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-34 ’ UIDE...
Page 168 Use this drop-down box to configure whether the port is connected to point-to-point or shared media. Choose Forced True for point-to-point media, choose Forced False for shared media or choose Auto to let the switch decide. Transition to the forwarding state is faster for point- to-point media. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-35 ’ UIDE...
Page 169: Msti Ports
1 to 200000000. Priority:  Use this drop-down box to configure the priority of this port when STP must decide between identical path costs. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-36 ’ UIDE...
Page 170: Bridge Status
Internal Root Bridge. (For the CIST instance only). Topology Flag:  This field shows the current state of the topology change flag of this bridge instance. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-37 ’ UIDE...
Page 171 This field shows whether the port is connected to point-to-point or shared media. Transition to the forwarding state is faster for point-to-point media. Uptime  This field shows the time since the bridge port was last initialized. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-38 ’ UIDE...
Page 172: Port Status
DesignatedPort or Disabled. CIST State:  This field shows the STP port state. The port state can be Blocking, Learning or Forwarding. Uptime:  This field shows the time since the bridge port was last initialized. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-39 ’ UIDE...
Page 173: Port Statistics
 This field shows the number of unknown Spanning Tree BPDUs received and discarded on the port. Discarded Illegal:  This field shows the number of illegal Spanning Tree BPDUs received and discarded on the port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-40 ’ UIDE...
Page 174: Mrstp
Use this drop-down box to configure whether this instance uses or RSTP. Priority:  Use this drop-down box to configure the priority. Lower values mean higher priority. The bridge priority plus concatenated with the MAC address of the switch forms a Bridge Identifier. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-41 ’ UIDE...
Page 175  This field shows the bridge priority of this bridge instance. Root ID:  This field shows the bridge ID of root bridge. Root Priority  This field shows the bridge priority of the root bridge. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-42 ’ UIDE...
Page 176 This field shows hello time inherited from the root bridge. Topology Change Count  This field shows the topology change count since this instance was operationally enabled. Time Since Last Topology Change (sec)  This field shows how long ago the topology changed. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-43 ’ UIDE...
Page 177: Port Configuration
Use this drop-down box to configure whether the port is connected to point-to-point or shared media. Choose Forced True for point-to-point media, choose Forced False for shared media or choose Auto to let the switch decide. Transition to the forwarding state is faster for point- to-point media. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-44 ’ UIDE...
Page 178 ATTER Migrate Check  Use this check box to force this port to send RSTP BPDUs instead of a legacy STP BPDUs. This enables a port to quickly get back to acting as an RSTP port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-45 ’ UIDE...
Page 179: Port Status
This field shows the operational cost incurred by this port when MRSTP calculates the lowest path cost through this port to the root bridge. Priority:  This field shows the priority of this port when MRSTP must decide between identical path costs. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-46 ’ UIDE...
Page 180 This field shows whether the port is configured as being connected to point-to-point or shared media. Forced True means point-to-point media, Forced False means shared media and Auto means the switch decides. Transition to the forwarding state is faster for point-to-point media. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-47 ’ UIDE...
Page 181: Igmp And Mld Snooping
Basic configuration parameters consist of global and port-specific parameters for IGMP and MLD snooping. IGMP or MLD Snooping Configuration Snooping Enabled:  Use this check box to globally enable or disable IGMP or MLD snooping. Unregistered IPMCv4 IPMCv6 Flooding Enabled:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-48 ’ UIDE...
Page 182 Use this drop-down box to enable or disable the limit on the number of multicast groups a switch port can belong to. Configure Unlimited disable the limit or a value of to restrict the number of groups to that value. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-49 ’ UIDE...
Page 183: Vlan Configuration
 Use this field to configure the Query Interval to a value from 1 to 31744 (default 125) seconds. The Query Interval is the time between Gen- eral Queries sent by the querier. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-50 ’ UIDE...
Page 184 Use this field to configure the Unsolicited Report Interval to a value from 0 to 31744 (default 1) in seconds. The Unsolicited Report Interval is the time between repetitions of a host's initial report of membership in a group. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-51 ’...
Page 185: Port Group Filtering
3. Configure the parameters. 4. Click Save. Parameter description Port:  Use this drop-down box to configure which port will be filtered. Filtering Groups:  Use this field to configure which multicast group will be filtered. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-52 ’ UIDE...
Page 186: Status
This field shows the number of version 1 and 2 reports received. V3 Reports Received:  This field shows the number of IGMP version 3 reports received. V1 Leaves Received:  This field shows the number of MLD version 1 leaves received. V2 Leaves Received:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-53 ’ UIDE...
Page 187 This field shows which ports lead towards the multicast router or IGMP querier. Static means this port is a router port. Dynamic means this port can learn to be a router port. Both means this port is statically configured and can learn to be a router port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-54 ’ UIDE...
Page 188: Group Information
This field shows the VLAN ID for this row. Groups:  This field shows the multicast group address for this row. Port Members:  This field shows the ports that are connected to members of this group. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-55 ’ UIDE...
Page 189: Ipv4 And Ipv6 Ssm Information
Source Address:  This field shows the IP Address of the source. The switch can filter up to 128 IP source addresses. Type:  This field shows whether this multicast group is allowed on this VLAN/port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-56 ’ UIDE...
Page 190: Configuration
VLAN ID:  Use this field to configure the subscriber VLAN ID. Port:  This field shows the port number for this row. Mode:  Use this drop-down box to enable or disable MVR on this port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-57 ’ UIDE...
Page 191  Use this drop-down box to configure whether this port is connected to a multicast source or a multicast receiver. Immediate Leave:  Use this drop-down box to enable or disable fast leave on this port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-58 ’ UIDE...
Page 192: Groups Information
This field shows the VLAN ID for this row. Groups:  This field shows the multicast group address for this row. Port Members:  This field shows the ports that are connected to members of this group. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-59 ’ UIDE...
Page 193: Statistics
V2 Reports Received V3 Reports Received:  This field shows the number of IGMP version 1, 2 and 3 reports received. V2 Leaves Received:  This field shows the number of IGMP version 2 leaves received. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-60 ’ UIDE...
Page 194: Lldp
Use this field to configure the minimum time this switch waits to inform neighbors of a configuration change. Valid values are from 1 to 8192 seconds but Tx Delay cannot be longer than 1/4 of Tx Interval. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-61 ’...
Page 195 LLDP neighbors' table. If all ports have CDP awareness disabled the switch forwards CDP frames received from neighbor devices. If at least one port has CDP awareness enabled all CDP frames are terminated by the switch. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-62 ’...
Page 196 Descr, Name, Descr, Sys Capa Mgmt Addr:  Use these check boxes to configure whether port descriptions, the system name, the system description, system capabilities and manage- ment address are included in the LLDP information sent. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-63 ’ UIDE...
Page 197: Lldp Neighbors
Reserved. When a capability is enabled, the capability is followed by (+). If the capa- bility is disabled, the capability is followed by (-). System Description:  This field shows the system description of the neighbor unit. Management Address:  This field shows the management address of the neighbor. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-64 ’ UIDE...
Page 198: Lldp Med Configuration
LLDP-MED fast start frame is sent to mitigate the risk of frame loss. When an LLDP-MED device is detected, the switch temporarily increases the rate at which LLDP-MED frames are sent to one per second, so VoIP devices become available quickly in an emergency. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-65 ’...
Page 199 The two-letter ISO 3166 country code in capital ASCII letters - Example: DK, DE or US. State:  National subdivisions (state, canton, region, province, prefecture). County:  County, parish, gun (Japan), district. City:  City, township, shi (Japan) - Example: Copenhagen. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-66 ’ UIDE...
Page 200 Additional location info:  Additional location info - Example: South Wing. Name:  Name (residence and office occupant) - Example: Flemming Jahn. Zip code:  Postal/zip code - Example: 2791. Building:  Building (structure) - Example: Low Library. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-67 ’ UIDE...
Page 201 VoIP environments that frequently result in voice quality degradation or loss of service. Policies are only intended for use with applications that have specific 'real-time' network policy requirements, such as interactive voice and/or video services. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-68 ’...
Page 202 This is for network topologies that separate voice media and signalling policies.  Guest Voice: This supports a limited feature-set voice service for guests with their own IP phones.  Guest Voice Signalling: This is for network topologies that separate guest voice media and signalling policies.  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-69 ’ UIDE...
Page 203 This table of ports and policies appears after adding a policy. Port:  This field shows the port number for this row. Policy Id:  Use these check boxes to configure which policies apply to this port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-70 ’ UIDE...
Page 204: Lldp Med Neighbors
Generic Endpoints (Class I), and any LLDP-MED Endpoint Device claiming compliance as a Communication Device (Class III) will also support all aspects of TIA-1057 applicable to both Media Endpoints (Class II) and Generic Endpoints (Class I). MGS3600-24F/XGS3600-26F/XGS3600-28F 7-71 ’...
Page 205 This field shows what the neighboring device can do. The possible capabilities are: LLDP-MED capabilities  Network Policy  Location Identification  Extended Power via MDI - PSE  Extended Power via MDI - PD  Inventory  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-72 ’ UIDE...
Page 206  This field shows the IEEE 802.1Q tag priority of (default priority) to for this policy. DSCP:  This field shows an RFC 2474 differentiated services code point of (default best-effort forwarding) to for this policy. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-73 ’ UIDE...
Page 207: Port Statistics
This field shows the number of entries deleted due to the Time-To-Live expiring. Local Counters Local Port:  This field shows the port on which LLDP frames are received or transmitted. Tx Frames:  This field shows the number of LLDP frames transmitted on the port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-74 ’ UIDE...
Page 208 This field shows how many entries have been removed from the neighbor table because their Time-To-Live (TTL) has expired. Each LLDP frame contains a TTL TLV field. If no new LLDP frame is received within the TTL, the LLDP information is removed, and the Age-Outs coun- ter is incremented. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-75 ’...
Page 209: Configuration
802.1X. Each port update the CAM (or learn new entries) based upon the following options. Port Members  These fields show the ports to be configured. Auto:  Check this radio button to ensure learning is done as soon as a frame with unknown source MAC address is received. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-76 ’ UIDE...
Page 210: Static Mac Table Configuration
Use this field to configure the VLAN ID of the entry. MAC Address:  Use this field to configure the MAC address of the entry. Port Members:  Use these check boxes to configure which ports are members of the entry. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-77 ’ UIDE...
Page 211: Dynamic Mac Table
This field shows the VLAN ID of the entry. MAC address:  This field shows the MAC address of the entry. Port Members:  These check boxes show the ports that are members of the entry. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-78 ’ UIDE...
Page 212: Vlan Membership
Use this field to configure the name of VLAN. The VLAN name can only contain alphabetic or numeric characters and should contain at least one alphabetic character. Port Members:  Use these check box es to configure membership for each VLAN ID. No ports are members by default. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-79 ’ UIDE...
Page 213: Ports
Use this drop-down box to configure what kind of frames this port accepts. Choose (default) to accept all frames, choose Tagged accept only tagged frames or choose Untagged to accept only untagged frames. Egress Rule:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-80 ’ UIDE...
Page 214 PVID:  Use this field to configure the port VLAN identifier (default 1). Note: The port must be a member of the same VLAN as the Port VLAN ID. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-81 ’ UIDE...
Page 215: Switch Status
The 802.1s Multiple Spanning Tree protocol (MSTP) uses VLANs to create multiple spanning trees in a network, which signifi-  cantly improves network resource utilization while maintaining a loop-free environment. VLAN ID:  This field shows the identity of this particular VLAN. VLAN Membership:  These check boxes show membership for each VLAN ID. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-82 ’ UIDE...
Page 216: Port Status
Conflicts:  This shows whether or not this port is involved in a conflict. The following conflicts can occur. Functional Conflicts between features.  Conflicts due to hardware limitations.  Direct conflict between user modules.  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-83 ’ UIDE...
Page 217: Private Vlans
Use these check boxes to configure membership for each VLAN ID. No ports are members by default. Port Isolation Use the Port Isolation sub-menu to configure ports so they can only communicate with the uplink ports. To configure Port Isolation: MGS3600-24F/XGS3600-26F/XGS3600-28F 7-84 ’ UIDE...
Page 218 Private VLANs > Port Isolation. 2. Configure the parameters. 3. Click Save. Parameter description Port Number:  Use these check boxes to configure which ports are isolated. Port isolation is disabled on all ports by default. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-85 ’ UIDE...
Page 219: Mac-Based Vlan
MAC Address:  Use this field to configure any unicast MAC address for the MAC-based VLAN entry. No broadcast or multicast MAC addresses are allowed. VLAN ID:  Use this field to configure the VLAN identity. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-86 ’ UIDE...
Page 220 MAC Address:  This field shows the MAC address for this entry. VLAN ID:  This field shows the VLAN identity for this entry. Port Members:  This field shows the port members for the entry. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-87 ’ UIDE...
Page 221: Protocol-Based Vlan
IEEE 802 physical network layers, as well as with non-IEEE 802 physical network layers such as FDDI that use 802.2 LLC. Value:  Use these fields to configure the protocol numbers for one of the following Frame Types. Ethernet: This field is an EtherType from 0x0600 to 0xffff.  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-88 ’ UIDE...
Page 222: Group To Vlan
 Use this field to configure the VLAN ID to which Group Name will be mapped. Port Members:  Use these check boxes to configure membership for each VLAN ID. No ports are members by default. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-89 ’ UIDE...
Page 223: Garp And Mrp
GARP/MRP for all switch ports. To configure GARP/MRP: 1. Click Configuration > GARP > Configuration. 2. Configure the parameters. 3. Click Save. Parameter description Port:  This shows the port number of this row. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-90 ’ UIDE...
Page 224 Use this drop-down box to configure the Applicant state machine behavior for GARP/MRP on this port to: normal-participant: In this default mode the Applicant state machine will operate normally in GARP/MRP protocol exchanges.  non-participant: In this mode the Applicant state machine will not participate in the protocol operation.  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-91 ’ UIDE...
Page 225: Statistics
This field shows the port number of this row. Peer MAC:  This field shows the MAC address of the neighbor switch from which a GARP/MRP frame has been received. Failed Count:  This field shows the number of packets that couldn't be sent. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-92 ’ UIDE...
Page 226: Gvrp And Mvrp
Parameter description Global Configuration GVRP/MVRP Mode:  Use this drop-down box to Enable Disable (default) GVRP/MVRP mode on this port. Port Configuration Port:  This field shows the port number of this row. GVRP/MVRP Mode:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-93 ’ UIDE...
Page 227 RONT ATTER Use this drop-down box to Enable Disable (default) GVRP/MVRP mode on this port. GVRP/MVRP rrole:  Use this drop-down box to configure the restricted role to Enable Disable on this port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-94 ’ UIDE...
Page 228: Statistics
This field shows the port number of this row. Join Tx Count:  This field shows the number of join events sent from this port. Leave Tx Count:  This field shows the number of number of leave events sent from this port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-95 ’ UIDE...
Page 229: Port Classification
Port Classification. 2. Configure the parameters. 3. Click Save. 4. Click a Tag Class to configure ingress tag classification for this port. 5. Configure the parameters. 6. Click Save. Parameter description Port Classification page Port:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-96 ’ UIDE...
Page 230: Qos Ingress Port Tag Classification Page
Use this drop-down box to Enable Disable tag classification. PCP:  This field shows the default Priority Code Point for untagged frames. DEI:  This field shows the default Drop Eligibility Indicator for untagged frames. QoS class:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-97 ’ UIDE...
Page 231 QoS class, queue and priority. A QoS class of zero has the lowest priority. DP level:  Use this drop-down box to configure the default Drop Precedence Level for frames not classified in any other way. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-98 ’ UIDE...
Page 232: Port Policing
Check these check boxes to enable unicast, multicast and broadcast frames to be policed. Flooding:  Check these check boxes to configure flooded frames to be policed. Learning:  Check these check boxes to police the rate at which the switch can add entries to its CAM. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-99 ’ UIDE...
Page 233 ATTER Flow Control:  Check these check boxes to send pause frames instead of dropping frames when the policed data rate is reached. Pause frames are only sent if the port is in flow control mode. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-100 ’ UIDE...
Page 234: Queue Policing
Check these check boxes to enable queue policers on this port. Rate Unit:  Use these fields and drop-down boxes to limit the data rate (default is 500) for this queue. This value is restricted to 100 to 1000000 kbps or 1 to 13200 Mbps. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-101 ’ UIDE...
Page 235: Port Scheduler And Port Shaping
Check this check box to allow the queue to use excess bandwidth. Queue Scheduler These parameters appear when Scheduler Mode is Weighted. Weight:  Use this field to configure the weight (default is 17) for this queue. This value is restricted to 1 to 100. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-102 ’ UIDE...
Page 236: Port Shaper
Check this check box to a enable port shaper on this port. Rate Unit:  Use these fields and drop-down boxes to limit the data rate (default is 500) for this queue. This value is restricted to 100 to 1000000 kbps or 1 to 13200 Mbps. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-103 ’ UIDE...
Page 237: Port Tag Remarking
Use this drop-down box to configure the default Priority Code Point. Default DEI:  Use this drop-down box to configure the default Drop Eligibility Indicator. DP level Configuration These parameters appear when Tag Remarking Mode is Mapped. Classified DP Level:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-104 ’ UIDE...
Page 238: Qos Class, Dp Level) To (Pcp, Dei) Mapping
This field shows the Drop Precedence Level for this row. PCP:  Use this drop-down box to configure the Priority Code Point written to egress frames. DEI:  Use this drop-down box to configure the Drop Eligibility Indicator written to egress frames. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-105 ’ UIDE...
Page 239: Port Dscp
Use this drop-down box to configure how packets leaving the switch have their DSCP fields changed. Disable: Don’t rewrite any packets.  Enable: Rewrite the DSCP field without re-mapping it.  Remap: Rewrite the DSCP with the re-mapped DSCP.  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-106 ’ UIDE...
Page 240: Dscp Based Qos
Check this check box to trust this DSCP value. QoS Class:  Use this drop-down box to configure the QoS class for this row. DPL:  Use this drop-down box to configure the Drop Precedence Level for this row. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-107 ’ UIDE...
Page 241: Dscp Translation
Use this drop-down box to configure the translated DSCP that is used for QoS class and DPL mapping of incoming packets. Ingress Classify:  Check this check box to specify this DSCP be used to classify incoming packets Egress Remap:  Use this drop-down box to configure which DSCP is used on egress packets. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-108 ’ UIDE...
Page 242: Dscp Classification
DSCP Classification. 2. Configure the Parameters. 3. Click Save. Parameter description QoS Class:  This field shows the QoS Class for this row. DSCP:  Use this drop-down box to configure a DSCP for this row. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-109 ’ UIDE...
Page 243: Qos Control List
The items that don’t change are as follows. Port Members:  Use these check boxes to configure which ports can contribute traffic to be inspected by this QCE. All ports are enabled by default. Tag:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-110 ’ UIDE...
Page 244 LLC: The QCE matches LLC frames.  SNAP: The QCE matches SNAP frames.  IPv4: The QCE matches any IPv4 packets.  IPv6: The QCE matches any IPv6 packets.  Ethernet Type Parameters EtherType Filter:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-111 ’ UIDE...
Page 245 Use this drop-down box to configure which source IP address field values matches this QCE. Choose to configure this QCE to ignore the source IP address field. Choose Specific and then complete the Value Mask fields to match all source IP addresses within a net- work. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-112 ’ UIDE...
Page 246 DPL:  Use this drop-down box to configure which drop precedence level is set if this QCE is triggered. DSCP:  Use this drop-down box to configure which DSCP is set if this QCE is triggered. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-113 ’ UIDE...
Page 247: Qcl Status
This group of fields shows the classification action taken on ingress frames if the QCE is triggered. Class: This shows which queue frames are put in if this QCE is triggered.  This shows which drop precedence level is set if this QCE is triggered.  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-114 ’ UIDE...
Page 248 This shows which DSCP is set if this QCE is triggered.  Conflict:  This field shows whether the QCE has not been applied to the hardware due to hardware limitations. Resolve Conflict:  Click this button to resolve a conflict. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-115 ’ UIDE...
Page 249: Wred
Min. Threshold is the average queue filling level where the queues randomly start dropping frames. The drop probability for frames marked with Drop Precedence Level n increases linearly from zero (at Min. Threshold average queue filling level) to Max. DP n (at 100% average queue filling level). MGS3600-24F/XGS3600-26F/XGS3600-28F 7-116 ’...
Page 250  Use this field to configure the drop probability for frames marked with Drop Precedence Level 1, 2 or 3 when the average queue filling level is 100%. This value is restricted to between 0 and 100. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-117 ’...
Page 251: Sflow Agent
 Use this field to configure which UDP port (default 6343) sFlow samples are sent. Time out:  Use this field to configure how long the sFlow agent in the switch sends samples. Datagram Size:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-118 ’ UIDE...
Page 252 RONT ATTER Use this field to configure the maximum UDP datagram size (default 1400 bytes) used for sending samples. This must be from 1500 bytes. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-119 ’ UIDE...
Page 253: Sampler
Use this field to configure the amount of the frame header (default 128 bytes) that is sampled. This must be from bytes. Polling Interval:  Use this field to configure how often counters are sampled. This can be from (disabled) to 3600 seconds. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-120 ’ UIDE...
Page 254: Mirroring
For a given port, a frame is only transmitted once. It is therefore not possible to mirror Tx frames on the mirror port. Because of this, the mode for the selected mirror port is limited to Disabled only. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-121 ’ UIDE...
Page 255: Trap Event Severity
3. Click Save. Parameter description Group Name:  The field shows the type of events that can be logged. Severity Level:  Use this drop-down box to configure the event severity required to cause events to be logged. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-122 ’ UIDE...
Page 256: Smtp Configuration
Use this field to configure the SMTP sender name. Return-Path:  Use this field to configure the SMTP return email address. Email Address 1-6:  Use this fields to configure the destination email addresses to send events to. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-123 ’ UIDE...
Page 257: Ah Oam
Save. Parameter description Port:  This field shows the port number for this row. OAM Enabled:  Check this check box to enable OAM on this port. OAM Mode:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-124 ’ UIDE...
Page 258 MIB Retrieval Support:  Use this check box to configure whether this port supports polling of various Link OAM based MIB variables. Loopback Operation:  Check this check box to start a loopback operation on this port. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-125 ’ UIDE...
Page 259: Event Config
Threshold) for that time window. The time period is specified in the Window (100 msec) field as the number of symbols that can be received in this time period on the underlying physical layer. Frame Period Error Event:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-126 ’ UIDE...
Page 260 Use this field to configure the threshold that must be reached during the window period for a link event to be generated. RxPacket Threshold:  Use this field to configure the number of events that must be collected during the window period before the peer is notified. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-127 ’ UIDE...
Page 261: Port Status
This field shows whether the port is capable of OAM remote loopback mode. Link Monitoring Support:  This field shows whether the port can interpret link events. MIB Retrieval Support:  This field shows whether the ports can send Variable Response OAMPDUs. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-128 ’ UIDE...
Page 262 TLV changes. Upon reception of an Information TLV from a peer, an OAM client may use this field to decide if it needs to be pro- cessed. An Information TLV that is identical to the previous Information TLV doesn't need to be parsed as nothing in it has changed. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-129 ’...
Page 263: Link Events
This four-octet field shows the number of Error Frame Event TLVs that have been generated since the OAM sub-layer was reset. Local and Remote Frame Period Status Frame Period Error Event Timestamp:  This two-octet field shows when the event was generated in 100-millisecond units. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-130 ’ UIDE...
Page 264 This eight-octet field shows the number of error symbols that have been detected since the OAM sub-layer was reset. Symbol Frame Period Error Events:  This four-octet field shows the number of Error Symbol Period Event TLVs that have been generated since the OAM sub-layer was reset. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-131 ’ UIDE...
Page 265 This four-octet field shows the number of error frame seconds that have been detected since the OAM sub-layer was reset. Event Seconds Summary Event Total:  This four-octet field shows the number of Errored Frame Seconds Summary Event TLVs that have been generated since the OAM sub-layer was reset. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-132 ’ UIDE...
Page 266: Statistics
This field shows the number of Variable Response OAMPDUs received and transmitted on this interface. Rx and Tx Org Specific PDU's:  This field shows the number of Organization Specific OAMPDUs transmitted on this interface. Rx and Tx Unsupported Codes:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-133 ’ UIDE...
Page 267 This field shows the number of dying gasp events received and transmitted on this interface. Rx and Tx Critical Event PDU's:  This field shows the number of critical event PDUs received and transmitted on this interface. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-134 ’ UIDE...
Page 268: Ethernet Oam
 Mode:  Use this drop-down box to configure this maintenance point as a (Maintenance Intermediate Point). Direction:  Use this drop-down box to configure whether this maintenance point monitors Ingress Egress traffic. Residence Port:  MGS3600-24F/XGS3600-26F/XGS3600-28F 7-135 ’ UIDE...
Page 269 This MAC:  This field shows the MEP device MAC address. This is used by other MEPs when unicast is selected. Alarm:  The shows the MEP alarm data. There is an active alarm on the MEP. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-136 ’ UIDE...
Page 270 W flow:  Use this field to configure the working flow. P flow:  Use this field to configure the protecting flow. W SF MEP:  Use this field to configure the working Signal Fail reporting MEP. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-137 ’ UIDE...
Page 271 Use this field to configure the protecting Signal Fail reporting MEP. APS MEP:  Use this field to configure the APS PDU handling MEP. Alarm:  The shows the MEP alarm data. There is an active alarm on the MEP. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-138 ’ UIDE...
Page 272: Eprs
Use this field to configure the port 1 APS PDU handling MEP. If the ring has only one connected port, configure this with to disable it. Ring Type:  Use this field to configure the type of the protecting ring as a major ring or sub-ring. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-139 ’ UIDE...
Page 273 For major rings, this value is the same as the protection group ID for this ring. Alarm:  The shows the MEP alarm data. There is an active alarm on the MEP. MGS3600-24F/XGS3600-26F/XGS3600-28F 7-140 ’ UIDE...
Page 274 Security Chapter 8...
Page 275: Security
RONT ATTER 8.1 Security Use the Security menu to enhance the security of the LAN. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 276: Ip Source Guard
Use this drop-down box to configure a maximum of up to dynamic clients that can be learned on this port. If this field is 0, only packets with source addresses in the static table are forwarded via this port. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 277: Static Table
Use this drop-down box to configure the port number for this row. VLAN ID:  Use this field to configure the VLAN ID for this row. IP Address IP Mask:  Use these fields to configure the network of the source IP addresses allowed. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 278: Dynamic Table
This field shows the VLAN ID in which the IP traffic is permitted. IP Address:  This field shows the source IP addresses learned on this port. MAC Address:  This field shows the source MAC address associated with source IP addresses learned on this port. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 279: Arp Inspection
Use this drop-down box to globally enable or disable ARP Inspection. Port Mode Configuration Port:  This field shows the port number for this row. Mode:  Use this drop-down box to enable or disable ARP Inspection on this port. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 280: Static Table
Use this field to configure the VLAN ID for this row. MAC Address IP Address:  Use this field to configure the source MAC address to source IP address binding that is used to validate ARP request packets. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 281: Dynamic Table
This field shows the VLAN ID in which ARP traffic is permitted. MAC Address:  This field shows the source MAC address associated with source IP addresses learned on this port. IP Address:  This field shows the source IP addresses learned on this port. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 282: Dhcp Snooping
This field shows the port number for this row. Mode:  Use this drop-down box to configure this port as a Trusted or Untrusted. DHCP request messages are forwarded to trusted ports and DHCP replies are only accepted from trusted ports. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 283: Statistics
This field shows the number of inform (option 53 with value 8) packets received and transmitted. Rx and Tx Lease Query:  This field shows the number of lease query (option 53 with value 10) packets received and transmitted. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-10 ’ UIDE...
Page 284 This field shows the number of lease unknown (option 53 with value 12) packets received and transmitted. Rx and Tx Lease Active:  This field shows the number of lease active (option 53 with value 13) packets received and transmitted. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-11 ’ UIDE...
Page 285: Dhcp Relay
Use this drop-down box to configure whether option 82 is inserted into forwarded DHCP messages and removed from DHCP messages for- warded to DHCP clients. Relay Information Policy:  Use this drop-down box to configure whether to Replace Keep relay agent information in messages that already have this information, or Drop such DHCP packets. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-12 ’ UIDE...
Page 286: Statistics
This field shows the number of packets whose Circuit ID option didn’t match a known circuit ID. Receive Bad Remote ID:  This field shows the number of packets whose Remote ID option didn’t match a known Remote ID. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-13 ’ UIDE...
Page 287 Keep Agent Option:  This field shows the number of packets whose relay agent information was retained. Drop Agent Option:  This field shows the number of packets that were dropped for containing relay agent information. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-14 ’ UIDE...
Page 288: Configuration
(see Aging Period below). EAPOL Timeout:  Use this field to configure the retransmission time seconds) for Request Identity EAPOL frames. This has no effect for MAC-based ports. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-15 ’ UIDE...
Page 289 The RADIUS server must also be configured to transmit special RADIUS attributes to take advantage of this feature. Guest VLAN Enabled:  Use this check box to globally enable 802.1X-unaware clients to be made members of the guest VLAN after an administrator-defined time- out. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-16 ’ UIDE...
Page 290 The switch simply encapsulates the EAP part of the frame into the relevant type (EAPOL or RADIUS) and forwards it. When authentication is MGS3600-24F/XGS3600-26F/XGS3600-28F 8-17 ’...
Page 291 EAPOL Start or EAPOL Response Identity frame sent by the supplicant. An exception to this is when no supplicants are attached. In this case, the switch sends EAPOL Request Identity frames using the BPDU multicast MAC address as destination - to wake up any MGS3600-24F/XGS3600-26F/XGS3600-28F 8-18 ’...
Page 292 8 octets in the attribute’s value must be identical and consist of ASCII characters in the range '0' to '3', which translates into the desired QoS Class in the range 0 to 3. RADIUS-Assigned VLAN Enabled:  MGS3600-24F/XGS3600-26F/XGS3600-28F 8-19 ’ UIDE...
Page 293 Port-based 802.1X  Single 802.1X  Multi 802.1X  To troubleshoot VLAN assignments, use the Configuration > VLAN > VLAN Membership Port Status sub-menus to see which mod- ules have (temporarily) overridden the current port VLAN configuration. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-20 ’ UIDE...
Page 294 These buttons are only enabled when authentication is globally enabled and the port's Admin State is in an EAPOL-based or MAC-based mode. Clicking these buttons will not cause settings changed on the page to take effect. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-21 ’...
Page 295: Switch Status
This field shows the VLAN ID that the NAS has put the port in. The field is blank if the Port VLAN ID is not overridden by NAS. If the VLAN ID is assigned by the RADIUS server, (RADIUS-assigned) is appended to the VLAN ID. If the port is moved to the Guest VLAN, (Guest) appended to the VLAN ID. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-22 ’ UIDE...
Page 296: Port Status
(Guest) appended to the VLAN ID. Port Counters EAPOL Counters:  These supplicant frame counters are available for the Force Authorized, Force Unauthorized, Port-based 802.1X, Single 802.1X and Multi 802.1X administrative states. Backend Server Counters:  MGS3600-24F/XGS3600-26F/XGS3600-28F 8-23 ’ UIDE...
Page 297 As long as the backend server hasn’t successfully authenticated the client, it is unauthenticated. If an authentication fails, the client remains in the unauthenticated state for Hold Time seconds. Last Authentication:  This field shows the date and time of the last successful or unsuccessful authentication of the client. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-24 ’ UIDE...
Page 298: Configuration
This will stop the switch from continually trying to contact a server that it has already determined as dead. Setting the Dead Time to a value greater than 0 (zero) will enable this feature, but only if more than one server has been configured. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-25 ’...
Page 299: Radius Accounting Server Configuration
The secret - up to 29 characters long - shared between the RADIUS Authentication Server and the switch stack. RADIUS Accounting Server Configuration The table has one row for each RADIUS Accounting Server and a number of columns, which are:  The RADIUS Accounting Server number for which the configuration below applies. Enabled:  MGS3600-24F/XGS3600-26F/XGS3600-28F 8-26 ’ UIDE...
Page 300 The TCP port to use on the TACACS+ Authentication Server. If the port is set to 0 (zero), the default port (49) is used on the TACACS+ Authentication Server. Secret:  The secret - up to 29 characters long - shared between the TACACS+ Authentication Server and the switch stack. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-27 ’ UIDE...
Page 301: Radius Overview
The server has temporarily been disabled, but will get re-enabled when the dead-time expires. The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-28 ’...
Page 302: Radius Details
Bad authenticators or Message Authenticator attributes or unknown types are not included as malformed access responses. Bad Authenticators:  The number of RADIUS Access-Response packets containing invalid authenticators or Message Authenticator attributes received from the server. Unknown Types:  MGS3600-24F/XGS3600-26F/XGS3600-28F 8-29 ’ UIDE...
Page 303 The time interval (measured in milliseconds) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from the RADIUS authentication server. The granularity of this measurement is 100 ms. A value of 0 ms indicates that there hasn't been round-trip communication with the server yet. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-30 ’...
Page 304: Radius Accounting Statistics
The number of accounting timeouts to the server. After a timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-31 ’...
Page 305 The time interval (measured in milliseconds) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from the RADIUS authentication server. The granularity of this measurement is 100 ms. A value of 0 ms indicates that there hasn't been round-trip communication with the server yet. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-32 ’...
Page 306: Port Security
MAC addresses, they may have other requirements to the aging period. The underlying port security will use the shorter requested aging period of all modules that use the functionality. The Aging Period can be set to a number between 10 and 10,000,000 seconds. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-33 ’...
Page 307 There are three ways to re-open the port: Boot the stack or elect a new master the switch,  Disable and re-enable Limit Control on the port or the stacks witch,  MGS3600-24F/XGS3600-26F/XGS3600-28F 8-34 ’ UIDE...
Page 308 If a port is shutdown by this module, you may reopen it by clicking this button, which will only be enabled if this is the case. For other meth- ods, refer to Shutdown in the Action section. Note: Clicking the reopen button causes the page to be refreshed, so non-committed changes will be lost MGS3600-24F/XGS3600-26F/XGS3600-28F 8-35 ’ UIDE...
Page 309: Switch Status
Each of the user modules has a column that shows whether that module has enabled Port Security or not. A '-' means that the correspond- ing user module is not enabled, whereas a letter indicates that the user module abbreviated by that letter (see Abbr) has enabled port secu- rity. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-36 ’...
Page 310 (-). Indicates the number of currently learned MAC addresses (forwarding as well as blocked) on the port. If no user modules are enabled on the port, a dash (-) will be shown. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-37 ’...
Page 311: Port Status
MAC address will be removed from the MAC table. Otherwise a new age period will begin. If aging is disabled or a user module has decided to hold the MAC address indefinitely, a dash (-) will be shown. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-38 ’...
Page 312 RONT ATTER MGS3600-24F/XGS3600-26F/XGS3600-28F 8-39 ’ UIDE...
Page 313: Access Management
Indicates the end IP address for the access management entry. HTTP/HTTPS:  Indicates that the host can access the switch from HTTP/HTTPS interface if the host IP address matches the IP address range provided in the entry. SNMP:  MGS3600-24F/XGS3600-26F/XGS3600-28F 8-40 ’ UIDE...
Page 314 Indicates that the host can access the switch from SNMP interface if the host IP address matches the IP address range provided in the entry. TELNET/SSH:  Indicates that the host can access the switch from TELNET/SSH interface if the host IP address matches the IP address range provided in the entry. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-41 ’ UIDE...
Page 315: Statistics
Number of received packets from the interface when access management mode is enabled. Allowed Packets:  Number of allowed packets from the interface when access management mode is enabled Discarded Packets:  Number of discarded packets from the interface when access management mode is enabled. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-42 ’ UIDE...
Page 316 > SSH. Parameter description Mode:  Use this drop-down box to Enable Disable SSH. Buttons:  Save - Click to save changes. Reset - Click to undo any changes made locally and revert to previously saved values. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-43 ’ UIDE...
Page 317: Https
> HTTPS. Parameter description Mode:  Use this drop-down box to Enable Disable HTTPS. Automatic Redirect:  Use this drop-down box to Enable Disable HTTPS automatically redirect web browsers to HTTPS when HTTPS mode is enabled. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-44 ’ UIDE...
Page 318: Auth Method
Check this check box to enable fallback to local authentication. If none of the configured authentication servers are available, the local user database is used for authentication. This is only possible if the Authentication Method is set to a value other than none or local. MGS3600-24F/XGS3600-26F/XGS3600-28F 8-45 ’...
Page 319 Maintenance Chapter 9...
Page 320: Restart Device
Use the Maintenance menu to restart the switch, upgrade the firmware; save, restore, import or export switch configuration; or perform network diagnostics. 9.1 Restart Device Use the Restart Device sub-menu to reboot the switch. To restart the switch, click Maintenance > Restart Device, and follow the onscreen prompts. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 321: Firmware
While the firmware is being updated, Web access appears to be defunct. The front LED flashes Green/Off with a frequency of 10 Hz while the firmware update is in progress. Do not restart or power off the device at this time or the switch may fail to function afterwards. MGS3600-24F/XGS3600-26F/XGS3600-28F ’...
Page 322: Firmware Selection
If the alternate image is active (due to a corruption of the primary image or by manual intervention), uploading a new firmware image to the device will automatically use the primary image slot and activate this. The firmware version and date information may be empty for older firmware releases. This does not constitute an error. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 323: Save/Restore
To reset the switch to factory default configuration: 1. Click Maintenance > Save/Restore > Factory Defaults. 2. Follow the onscreen prompts to complete the process. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 324: Save Start
Save Start sub-menu to save the switch’s configuration, so this configuration is used after a power cycle. To save the configuration: 1. Click Maintenance > Save/Restore > Save Start. 2. Follow the onscreen prompts to complete the process. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 325: Save User
Save User sub-menu to save the switch’s configuration to the backup user part of the flash memory. To save the configuration: 1. Click Maintenance > Save/Restore > Save User. 2. Follow the onscreen prompts to complete the process. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 326: Restore User
Restore User sub-menu to restore the switch’s configuration from the backup user part of the flash memory. To restore the configuration: 1. Click Maintenance > Save/Restore > Restore User. 2. Follow the onscreen prompts to complete the process. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 327: Export/Import
9.4.1 Export Config Use the Export Config sub-menu to save the switch’s configuration to an XML file. To save the configuration: 1. Click Maintenance > Export/Import > Export Config. 2. Follow the onscreen prompts to complete the process. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 328: Import Config
To import the configuration: 1. Click Maintenance > Export/Import > Import Config. 2. Browse to the new configuration file. 3. Click Upload to upload the configuration file to the switch. 4. Follow the onscreen prompts to complete the process. MGS3600-24F/XGS3600-26F/XGS3600-28F 9-10 ’ UIDE...
Page 329: Diagnostics
2. Configure the parameters. 3. Click Start. Parameter description IP Address:  Use this field to configure the IP address of the host to ping. Ping Size:  Use this field to configure the ICMP packet size. MGS3600-24F/XGS3600-26F/XGS3600-28F 9-11 ’ UIDE...
Page 330 Parameter description IP Address:  Use this field to configure the IPv6 address of the host to ping. Ping Size:  Use this field to configure an ICMPv6 payload size from 8 bytes to 1400 bytes. MGS3600-24F/XGS3600-26F/XGS3600-28F 9-12 ’ UIDE...
Page 331 Part III: Front Matter...
Page 332 Front Matter Chapter 10...
Page 333 4. Turn the switch off and on (in DC models or if the DC power supply is connected in AC/DC models). 5. Disconnect and re-connect the power adaptor or cord to the switch (in AC models or if the AC power supply is connected in AC/DC models). 6. If the problem continues, contact the vendor. MGS3600-24F/XGS3600-26F/XGS3600-28F 10-3 ’...
Page 334: Switch Access And Login
6. If the problem continues, contact the vendor, or try one of the advanced suggestions. Advanced Suggestions Try to access the switch using another service, such as Telnet. If you can access the switch, check the remote management settings to find out why the switch does not respond to HTTP. MGS3600-24F/XGS3600-26F/XGS3600-28F 10-4 ’ UIDE...
Page 335 > Configuration and limit the range of IP addresses allowed access to trusted hosts. See “Access Management” on page 40. Computers with IP addresses outside permitted ranges cannot access the management interface of the switch. MGS3600-24F/XGS3600-26F/XGS3600-28F 10-5 ’ UIDE...
Page 336: Switch Configuration
I lost my configuration settings after I restarted the switch. Make sure you save your configuration into the switch’s nonvolatile memory each time you make changes. Click Maintenance > Save/Restore > Save Start to save the configuration permanently. See “Save/Restore” on page 5. MGS3600-24F/XGS3600-26F/XGS3600-28F 10-6 ’ UIDE...
Page 337 Front Matter Chapter 11...
Page 338: Hardware Specifications
Packet buffer size 4 MB MAC table 32 K Switching capacity 14880 pps at 10 Mbps 148810 pps at 100 Mbps 1488095 pps at 1 Gbps with 64-byte packets Total switch capacity 88 Gbps Forwarding rate 50.5 Mpps MGS3600-24F/XGS3600-26F/XGS3600-28F 11-2 ’ UIDE...
Page 339 1 x Out-of-band management port (10/100/1000Base-T) Standards IEEE 802.3 10Base-T Ethernet IEEE 802.3u 100Base-TX Ethernet IEEE 802.3ab 1000Base-T Ethernet IEEE 802.3z 1000Base-X Ethernet IEEE 802.3x flow control IEEE 802.3az Energy Efficient Ethernet support (only RJ-45 interfaces) IEEE 802.1p CoS support MGS3600-24F/XGS3600-26F/XGS3600-28F 11-3 ’ UIDE...
Page 340: Led Indicators
Steady green: power on Unlit: power off of fail SFP LED (P1 - 24) Steady green: 1000 Mbps link-up Steady amber: 100 Mbps link-up Flash green/yellow: activity (receiving or transmitting data) Unlit green/amber: port disconnected or link failed MGS3600-24F/XGS3600-26F/XGS3600-28F 11-4 ’ UIDE...
Page 341 Three fans on the rear panel. One fan is dedicated to the power supply. Reset button Push button accessed through right-hand ventilation slots Dimensions 19", 1U High, 442 x 211 x 44mm (W x D x H) Weight MGS3600-24F/XGS3600-26F/XGS3600-28F 11-5 ’ UIDE...
Page 342 Redundant 85 W AC and DC power inputs: 100 ~ 240 V AC in (via 3-pin socket); 12 V, 5 A minimum out  48 V DC in (via 3-pin terminal block); 12 V, 5 A minimum out  MGS3600-24F/XGS3600-26F/XGS3600-28F 11-6 ’ UIDE...
Page 343: Firmware Specifications
Table 11-5: Port Control EATURE ESCRIPTION Port speed, duplex mode, flow ctrl Port frame size Jumbo frames Port state Administrative status Port status Link monitoring Port Statistics MIB counters Port VeriPHY Cable diagnostics Dual media TP/SFP auto- detection MGS3600-24F/XGS3600-26F/XGS3600-28F 11-7 ’ UIDE...
Page 344 Administrative status Port status Link monitoring Port Statistics MIB counters Port VeriPHY Cable diagnostics Dual media TP/SFP auto- detection Table 11-7: QoS EATURE ESCRIPTION Traffic classes 8 active priorities Port default priority User priority Input priority mapping MGS3600-24F/XGS3600-26F/XGS3600-28F 11-8 ’ UIDE...
Page 345: L2 Switching
Global/VCAP (ACL) policers Port egress shaper Queue egress shapers DiffServ (RFC2474) re-mark- Tag re-marking QoS (WRED) L2 Switching Table 11-8: L2 Switching EATURE ESCRIPTION IEEE 802.1D bridge Automatic MAC address learning / aging Static MAC addresses MGS3600-24F/XGS3600-26F/XGS3600-28F 11-9 ’ UIDE...
Page 346 Up to 12 instances (without trunking) RSTP/MRSTP port set as non-edge port automatically if STP port configured RSTP/MRSTP loop detection IEEE 802.3ad Link Aggregation Control Protocol (LACP) Static link aggregation BPDU Guard and restricted role Transparency MGS3600-24F/XGS3600-26F/XGS3600-28F 11-10 ’ UIDE...
Page 347 Voice VLAN DHCP Client Snooping Option 82 relay DHCP v6 Client Client, proxy Inspection Port mirroring Protection 1+1 port protection 1:1 port protection G.8032 ring protection v1/v2 Up to 12 instances (XGS3600-26F only) IP MAC binding MGS3600-24F/XGS3600-26F/XGS3600-28F 11-11 ’ UIDE...
Page 348: Security And Synchronization
Guest VLAN RADIUS Accounting, authentication and accounting MAC address limit TACACS+ Accounting, authentication and accounting Web & CLI authentication Authorization 15 user levels Filtering, policing, port copy IP source guard Remote Switched Port Ana- lyzer (RSPAN) MGS3600-24F/XGS3600-26F/XGS3600-28F 11-12 ’ UIDE...
Page 349 Discovery process, information, event notification and loopback Flow OAM Ingress and egress IEEE 802.1ag Connectivity Fault Management (FM): Fault Management (CFM) continuity check & remote defect indication (ETH-CC + ETH-RDI)  loopback (ETH-LB)  link trace (ETH-LT)  MGS3600-24F/XGS3600-26F/XGS3600-28F 11-13 ’ UIDE...
Page 350: Robustness And Power Saving
 MIP: FM: link trace PDU (LTM) respond  FM: loop back PDU (LBM) respond  Robustness and Power Saving Table 11-11: Robustness and Power Saving EATURE ESCRIPTION Cold start Warm start OWER AVING ActivePHY PerfectReach MGS3600-24F/XGS3600-26F/XGS3600-28F 11-14 ’ UIDE...
Page 351 Thermal protection Management Table 11-12: Management EATURE ESCRIPTION HTTP server All parameters are configurable via console port & telnet Management access filtering HTTPS SSH v2 IPv6 management System syslog Software update via web SNMP v1/v2/v3 agent MGS3600-24F/XGS3600-26F/XGS3600-28F 11-15 ’ UIDE...
Page 352 TIA 1057 LLDP-MED Cisco Discovery Protocol (CDP) sFlow Configuration download/ upload Dual image MIBs Table 11-13: MIBs EATURE ESCRIPTION RFC 2674 VLAN MIB IEEE 802.1Q bridge MIB 2008 RFC 1213 MIB II RFC 1215 TRAPS MIB MGS3600-24F/XGS3600-26F/XGS3600-28F 11-16 ’ UIDE...
Page 353 RFC 3636 802.30 MAU MIB RFC 4133 Entity MIB version RFC 3411 SNMP Manage- ment Frameworks RFC 3414 User-based Secu- rity Model for SNMPv3 RFC 3415 View-based access Control Model for SNMP IEEE 802.1 MSTP MIB MGS3600-24F/XGS3600-26F/XGS3600-28F 11-17 ’ UIDE...
Page 354 STD) IEEE 802.1X (PAE MIB included in a clause of the STD) TIA 1057 LLDP-MED (MIB is part of the STD) Private MIB framework ZyXEL private MIB For every function MGS3600-24F/XGS3600-26F/XGS3600-28F 11-18 ’ UIDE...
Page 355 RONT ATTER 11.3 EMI/Safety Specifications The following table summarizes the switch’s EMI/safety specifications. Table 11-14: EMI/Safety Specifications ITEM DESCRIPTION REMARK Safety BSMI BSMI RoHS Level A MGS3600-24F/XGS3600-26F/XGS3600-28F 11-19 ’ UIDE...
Page 356 Operation Cold (low temperature) Test Operation Dry Heat (High temperature) Test Operation Temperature Cycles Test E-cap Lifetime Test 43800 hours Thermal Shock Test Damp Heat Steady State Test Thermal Profile Test ESD Simulation Test report High/Low Temperature Start Test MGS3600-24F/XGS3600-26F/XGS3600-28F 11-20 ’ UIDE...
Page 357 REMARK Environmental specifi- 2002/95/EC (RoHS) Restriction of Hazardous cations Substances Directive 2002/96/EC (WEEE) (WEEE) Waste Electrical and Electronic Equipment Directive European Parliament and Council Directive 94/ 62/EC of 20 December 1994 on packaging and packaging waste MGS3600-24F/XGS3600-26F/XGS3600-28F 11-21 ’ UIDE...
Page 358 Part IV: Front Matter...
Page 359 128, 192, or 256 bits. AES is used as the encryption key protocol in the 802.11i standard to improve WLAN security. Aggregation Aggregation is the use of multiple ports in parallel to increase the link speed beyond the limits of a single port and to increase redundancy for higher availability. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 360 ARP caches. This feature is used to block such attacks. Only valid ARP requests and responses can go through the switch device. Auto-Negotiation Auto-negotiation is the process where two different devices establish the mode of operation and the speed settings that can be shared by those devices for a link. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 361 CC (Continuity Check) is a MEP function that is able to detect loss of continuity in a network by transmitting CCM frames to a peer MEP. CCM (Continuity Check Message) is an OAM frame transmitted from a MEP to its peer MEP that is used to implement CC functionality. CDP is an acronym for Cisco Discovery Protocol. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 362 The Circuit ID is 4 bytes in length and its format is {vlan_id}{module_id}{port_no}. The vlan_id is the first two bytes. The module_id is the third byte (in standalone switches it always equal 0, in stackable switches it means switch ID). The port_no is the fourth byte. MGS3600-24F/XGS3600-26F/XGS3600-28F ’...
Page 363: Dotted Decimal Notation
0 and 255. DSCP DSCP (Differentiated Services Code Point) is a field in the header of IP packets for packet classification purposes. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 364 EPS (Ethernet Protection Switching), more recently known as Ethernet Linear Protection Switching provides redundancy for point-to-point links as defined in ITU/T G.8031. Ethernet Type Ethernet Type or EtherType is a field in the Ethernet MAC header. It is used to indicate which protocol is being transported in an Ethernet frame. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 365: Fast Leave
The VLAN interface is pruned from the multicast tree for the multicast group specified in the original leave mes- sage. Fast leave processing ensures optimal bandwidth management for all hosts on a switched network, even when multiple multicast groups are in use simultaneously. This processing applies to IGMP and MLD. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 366 HTTPS is really just the use of Secure Sockets Layer (SSL) as a sublayer under its regular HTTP (HTTPS uses port 443 instead of HTTP port 80 in its interactions with TCP). SSL uses a 128-bit key size for the RC4 stream encryption algorithm, which is considered an adequate degree of encryption for commercial exchange. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 367: Igmp Querier
IMAP (Internet Message Access Protocol) is used by email clients to retrieve email messages from a mail server. IMAP has several advantages over another popular mail retrieval protocol, Post Office Protocol version 3 (POP3). IMAP enables multiple access to each mailbox, retrieval of any MIME part of an email and server-side searches. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 368 IP Source Guard IP Source Guard is used to prevent attackers from spoofing their IP addresses by dropping packets that don’t have source IP addresses allocated via DHCP or configured manually in the DHCP Snooping table. MGS3600-24F/XGS3600-26F/XGS3600-28F A-10 ’ UIDE...
Page 369 LLDP-MED is an extension of IEEE 802.1ab and is defined by the telecommunication industry association (TIA-1057). LOC is an acronym for Loss Of Connectivity and is detected by a MEP and is indicating lost connectivity in the network. LOC can be used as a switch criteria by EPS. MGS3600-24F/XGS3600-26F/XGS3600-28F A-11 ’...
Page 370: Mac Table
MLD is an acronym for Multicast Listener Discovery for IPv6. MLD is used by IPv6 routers to discover multicast listeners on a directly attached link, much as IGMP is used in IPv4. The protocol is embedded in ICMPv6 instead of using a separate protocol. MGS3600-24F/XGS3600-26F/XGS3600-28F A-12 ’...
Page 371 The main reason for using MVR is to save bandwidth by preventing duplicate multicast streams being sent in the core network, instead the stream(s) are received on the MVR-VLAN and forwarded to the VLANs where hosts have requested it/them (Wikipedia). MGS3600-24F/XGS3600-26F/XGS3600-28F A-13 ’...
Page 372 NFS supports sharing of files, printers, and other resources as persistent storage over a computer network. NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. NTP uses UDP (datagrams) as transport layer. MGS3600-24F/XGS3600-26F/XGS3600-28F A-14 ’...
Page 373 OUI is the organizationally unique identifier. An OUI address is a globally unique identifier assigned to a vendor by IEEE. You can determine which vendor a device belongs to according to the OUI address which forms the first 24 bits of a MAC address. MGS3600-24F/XGS3600-26F/XGS3600-28F A-15 ’...
Page 374 SMTP, and a mail handler receives it on your recipient's behalf. Then the mail is read using POP or IMAP. IMAP4 and POP3 are the two most prev- alent Internet standard protocols for e-mail retrieval. Virtually all modern e-mail clients and servers support both. MGS3600-24F/XGS3600-26F/XGS3600-28F A-16 ’...
Page 375 In a private VLAN, communication between ports in that private VLAN is not permitted. A VLAN can be configured as a private VLAN. PTP is an acronym for Precision Time Protocol, a network protocol for synchronizing the clocks of computer systems. MGS3600-24F/XGS3600-26F/XGS3600-28F A-17 ’...
Page 376 A communications network transports a multitude of applications and data, including high-quality video and delay-sensitive data such as real-time voice. Networks must provide secure, predictable, measurable, and sometimes guaranteed services. Achieving the required QoS becomes the secret to a successful end-to-end business solution. Therefore, QoS is the set of techniques to manage network resources. MGS3600-24F/XGS3600-26F/XGS3600-28F A-18 ’ UIDE...
Page 377 In 1998, the IEEE with document 802.1w introduced an evolution of STP: the Rapid Spanning Tree Protocol, which provides for faster spanning tree convergence after a topology change. Standard IEEE 802.1D-2004 now incorporates RSTP and obsoletes STP, while at the same time being backwards-compatible with STP. MGS3600-24F/XGS3600-26F/XGS3600-28F A-19 ’...
Page 378 SNMP is an acronym for Simple Network Management Protocol. It is part of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol for network management. SNMP allow diverse network objects to participate in a network management architecture. It enables network manage- ment systems to learn network problems by receiving traps or change notices from network devices implementing SNMP. MGS3600-24F/XGS3600-26F/XGS3600-28F A-20 ’...
Page 379 SSM In SyncE this is an abbreviation for Synchronization Status Message and is containing a QL indication. Spanning Tree Protocol is an OSI layer-2 protocol which ensures a loop free topology for any bridged LAN. The original STP protocol is now obso- lete by RSTP. MGS3600-24F/XGS3600-26F/XGS3600-28F A-21 ’...
Page 380 CLI commands. SyncE SyncE Is an abbreviation for Synchronous Ethernet. This functionality is used to make a network 'clock frequency' synchronized. Not to be con- fused with real time clock synchronized (IEEE 1588). MGS3600-24F/XGS3600-26F/XGS3600-28F A-22 ’ UIDE...
Page 381: Tag Priority
Common network applications that use TCP include the World Wide Web (WWW), e-mail, and File Transfer Protocol (FTP). TELNET TELNET is an acronym for TELetype NETwork. It is a terminal emulation protocol that uses the Transmission Control Protocol (TCP) and provides a virtual connection between TELNET server and TELNET client. MGS3600-24F/XGS3600-26F/XGS3600-28F A-23 ’ UIDE...
Page 382 TFTP TFTP is an acronym for Trivial File Transfer Protocol. It is transfer protocol that uses the User Datagram Protocol (UDP) and provides file writing and reading, but it does not provide directory service and security features. MGS3600-24F/XGS3600-26F/XGS3600-28F A-24 ’...
Page 383 Common network applications that use UDP include the Domain Name System (DNS), streaming media applications such as IPTV, Voice over IP (VoIP), and Trivial File Transfer Protocol (TFTP). User Priority User Priority is a 3-bit field storing the priority level for the 802.1Q frame. It is also known as PCP. MGS3600-24F/XGS3600-26F/XGS3600-28F A-25 ’ UIDE...
Page 384: Voice Vlan
Voice VLAN is VLAN configured specially for voice traffic. By adding the ports with voice devices attached to voice VLAN, we can perform QoS- related configuration for voice data, ensuring the transmission priority of voice traffic and voice quality. MGS3600-24F/XGS3600-26F/XGS3600-28F A-26 ’...
Page 385 The IPSEC AH (Authentication Header) tunneling protocol uses this service. (IPSEC_TUNNEL) AIM/New-ICQ 5190 AOL's Internet Messenger service. It is also used as a listening port by ICQ. AUTH Authentication protocol used by some servers. Border Gateway Protocol. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 386 Internet Control Message Protocol is often used for diagnostic or routing pur- poses. 4000 This is a popular Internet chat program. IGMP  User-Defined Internet Group Multicast Protocol is used when sending packets to a specific (MULTICAST) group of hosts. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 387 PPTP (Point-to-Point Tunneling Protocol) enables secure transfer of data over (GRE) public networks. This is the data channel. RCMD Remote Command Service. REAL_AUDIO 7070 A streaming audio service that enables real time sound over the web. REXEC Remote Execution Daemon. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 388 TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. SYSLOG Syslog allows you to send system logs to a UNIX server. TACACS Login Host Protocol used for (Terminal Access Controller Access Control Sys- tem). MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 389 This publication is subject to change without notice. Trademarks ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publica- tion are used for identification purposes only and may be properties of their respective owners.
Page 390: Fcc Warning
Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. This Class A digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada. CLASS 1 LASER PRODUCT APPAREIL A LASER DE CLASS 1 MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 391: Zyxel Limited Warranty
To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http:// www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. MGS3600-24F/XGS3600-26F/XGS3600-28F ’ UIDE...
Page 392 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE NDEX 7-37 Bridge Instance 7-30 Bridge Priority 8-25 Activate Alternate Image 7-34 7-44 Admin Edge 7-44 Admin P2P 7-62 CDP Aware 8-17 Admin State 7-64 Chassis ID 7-26 Aggr ID 7-39 CIST Role 8-16 8-33 Aging Period...
Page 393 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE 7-97 7-105 7-111 7-17 7-111 EtherType Filter 7-19 Dest. Port Filter Excessive Collision Mode Device Name 6-17 DHCP Client 7-19 DIP Filter 8-45 Fallback 7-128 Discovery State 8-26 Fallback to Local Authorization 7-16 DMAC Filter 7-111...
Page 394 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE 7-25 Hardware-Mechanical Version LACP Key 7-23 7-28 Hash Code Contributors LACP Received 7-42 7-25 Hello-Time LACP Role 8-16 7-28 Hold Time LACP Transmitted 8-24 Host IP Address Last Authentication 8-22 Host MAC Address Last ID 7-99...
Page 395 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE 7-128 7-31 Port Error Recovery Timeout 7-45 Migrate Check Power Control Model Name Powers 7-129 6-19 MTU Size Prefix 7-129 6-26 6-32 Multiplexer State Privacy Password 7-57 6-26 6-32 MVR Mode Privacy Protocol 6-14 Privilege Level...
Page 396 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE 8-12 7-19 Relay Mode SIP Filter 8-12 7-111 Relay Server SMAC 7-128 7-16 Remote Loopback Support SMAC Filter 7-64 6-23 Remote Port ID SNMP State 7-135 7-48 7-50 Residence Port Snooping Enabled 7-115 6-24 Resolve Conflict...
Page 397 MGS3600-24F/XGS3600-26F/XGS3600-28F U ’ UIDE 7-20 6-28 TCP SYN View Type 7-20 7-140 TCP URG Virtual Channel 8-41 7-16 TELNET VLAN ID Filter 7-82 Temperature 1 to 4 VLAN User 7-49 Throttling 6-11 Time Set Offset 6-11 Time Zone Offset 7-137...

This manual is also suitable for:

Xgs3600-26f Xgs3600-28f

ZyXEL Communications MGS3600-24F User Manual

C O Contents Verview Front Matter

Front Matter

Table of Contents

Table of Contents

Table of Contents

Front Matter

Front Matter

Front Matter

Front Matter

Maintenance

Front Matter

Quick Links

Chapters

Need help?

Questions and answers

Related Manuals for ZyXEL Communications MGS3600-24F

Summary of Contents for ZyXEL Communications MGS3600-24F