Page 2
Related Documentation • CLI Reference Guide The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to configure the Switch. Note: It is recommended you use the Web Configurator to configure the Switch. GS2210 Series User’s Guide...
3.1.1 Gigabit Ethernet Ports ......................26 3.1.2 Mini-GBIC Slots ........................27 3.1.3 LED Mode (only available for GS2210-48HP) .................29 3.2 Rear Panel ............................29 3.2.1 Console Port ..........................29 3.2.2 Power Connector ........................29 3.3 LEDs ...............................30 Part II: Technical Reference................31 GS2210 Series User’s Guide...
Page 6
7.2 ZyXEL One Network (ZON) Utility Screen ..................52 7.3 ZON Neighbor Management Screen ....................53 7.4 Port Status Summary ........................55 7.4.1 Status: Port Details ......................56 Chapter 8 Basic Setting ............................60 8.1 Overview ............................60 8.1.1 What You Can Do ........................60 GS2210 Series User’s Guide...
Page 7
9.8 Port-based VLAN Setup .......................99 9.8.1 Configure a Port-based VLAN ....................99 9.9 Voice VLAN .............................102 9.10 MAC-based VLAN .........................104 9.11 Technical Reference ........................105 9.11.1 Create an IP-based VLAN Example ..................105 Chapter 10 Static MAC Forward Setup.......................107 GS2210 Series User’s Guide...
Page 8
13.11.1 MSTP Network Example ....................130 13.11.2 MST Region ........................131 13.11.3 MST Instance ........................132 13.11.4 Common and Internal Spanning Tree (CIST) ..............132 Chapter 14 Bandwidth Control..........................133 14.1 Overview ............................133 14.1.1 What You Can Do ........................133 14.2 Bandwidth Control Setup ......................133 GS2210 Series User’s Guide...
Page 9
Port Security .............................153 19.1 Port Security Overview .........................153 19.1.1 What You Can Do ........................153 19.2 Port Security Setup ........................153 Chapter 20 Classifier............................156 20.1 Overview ............................156 20.1.1 What You Can Do ........................156 20.1.2 What You Need to Know ......................156 GS2210 Series User’s Guide...
Page 10
23.5.5 MLD Snooping-proxy VLAN Filtering Profile ...............185 23.6 General MVR Configuration ......................186 23.6.1 MVR Group Configuration ....................188 23.6.2 MVR Configuration Example ....................190 Chapter 24 AAA ..............................192 24.1 AAA Overview ..........................192 24.1.1 What You Can Do ........................192 GS2210 Series User’s Guide...
Page 11
26.1.1 What You Can Do ........................226 26.1.2 What You Need to Know ......................226 26.2 Loop Guard Setup .........................228 Chapter 27 Layer 2 Protocol Tunneling......................230 27.1 Layer 2 Protocol Tunneling Overview ..................230 27.1.1 What You Can Do ........................230 GS2210 Series User’s Guide...
Page 12
32.2 LLDP-MED Overview ........................252 32.3 LLDP Screens ..........................253 32.4 LLDP Local Status ........................254 32.4.1 LLDP Local Port Status Detail ....................255 32.5 LLDP Remote Status ........................259 32.5.1 LLDP Remote Port Status Detail ..................260 32.6 LLDP Configuration ........................266 GS2210 Series User’s Guide...
Page 13
35.4.5 Global DHCP Relay Configuration Example ...............290 35.5 Configuring DHCPv4 VLAN Settings ..................291 35.5.1 DHCPv4 VLAN Port Configure ...................293 35.5.2 Example: DHCP Relay for Two VLANs ................294 35.6 DHCPv6 Relay ..........................295 Chapter 36 ARP Setup ............................297 36.1 ARP Overview ..........................297 GS2210 Series User’s Guide...
Page 14
38.4 Setting Up Login Accounts ......................316 38.5 Service Port Access Control .......................317 38.6 Remote Management ......................318 38.7 Technical Reference ........................319 38.7.1 About SNMP ........................320 38.7.2 SSH Overview ........................326 38.7.3 Introduction to HTTPS ......................328 Chapter 39 Diagnostic ............................333 GS2210 Series User’s Guide...
Page 15
43.1.2 What You Need to Know ......................347 43.2 Viewing the ARP Table ........................347 Chapter 44 Path MTU Table ..........................349 44.1 Path MTU Overview ........................349 44.2 Viewing the Path MTU Table ......................349 Chapter 45 Configure Clone..........................350 45.1 Overview ............................350 45.2 Configure Clone ...........................350 GS2210 Series User’s Guide...
Page 16
47.1 Power, Hardware Connections, and LEDs ..................355 47.2 Switch Access and Login ......................356 47.3 Switch Configuration ........................358 Appendix A Customer Support ......................359 Appendix B Common Services ......................365 Appendix C IPv6 ..........................368 Appendix D Legal Information ......................376 Index ..............................379 GS2210 Series User’s Guide...
H A PT ER Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The GS2210 Series consist of the four following models: • GS2210-24 • GS2210-24HP • GS2210-48 • GS2210-48HP Referring to PoE model(s) in this User's Guide only applies for GS2210-24HP and GS2210-48HP.
Switch. You can provide a super-fast uplink connection by using a Gigabit Ethernet/mini-GBIC port on the Switch. Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location. GS2210 Series User’s Guide...
With VLAN, a station cannot directly talk to or hear from stations that are not in the same group(s) unless such traffic first goes through a router. For more information on VLANs, refer to Chapter 9 on page GS2210 Series User’s Guide...
Do the following things regularly to make the Switch more secure and to manage the Switch more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. GS2210 Series User’s Guide...
Page 22
Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. GS2210 Series User’s Guide...
• Four M5 flat head screws and a #2 Philips screwdriver. Failure to use the proper screws may damage the unit. 2.3.1.1 Precautions • Make sure the rack will safely support the combined weight of all the equipment it contains. GS2210 Series User’s Guide...
Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the rack. GS2210 Series User’s Guide...
Page 25
Figure 6 Mounting the Switch on a Rack Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. Repeat steps to attach the second mounting bracket on the other side of the rack. GS2210 Series User’s Guide...
The Switch uses up to one connection for each mini-GBIC and 1000Base-T Ethernet pair. The mini-GBIC slots have priority over the Gigabit ports. This means that if a mini-GBIC slot and the corresponding GbE port are connected at the same time, the GbE port will be disabled. GS2210 Series User’s Guide...
3.1.2.1 Transceiver Installation Use the following steps to install a mini-GBIC transceiver (SFP module). Insert the transceiver into the slot with the exposed section of PCB board facing down. Press the transceiver firmly until it clicks into place. GS2210 Series User’s Guide...
Page 28
Remove the fiber optic cables from the transceiver. Open the transceiver’s latch (latch styles vary). Pull the transceiver out of the slot. Figure 13 Removing the Fiber Optic Cables Figure 14 Opening the Transceiver’s Latch Example Figure 15 Transceiver Removal Example GS2210 Series User’s Guide...
Connect the male 9-pin end of the console cable to the console port of the Switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer. 3.2.2 Power Connector Note: Make sure you are using the correct power source as shown on the panel. GS2210 Series User’s Guide...
24HP) and 45- 50 (GS1920- Amber The uplink port is linking at 100 Mbps. 48/48HP) Blinking The system activity is transmitting/receiving data 100 Mbps. There is no link or port, the uplink port is shut down. GS2210 Series User’s Guide...
The login screen appears. The default username is admin and associated default password is 1234. The date and time display as shown if you have not configured a time server nor manually entered a time and date in the General Setup screen. GS2210 Series User’s Guide...
B - Click this link to save your configuration into the Switch’s nonvolatile memory. Nonvolatile memory is the configuration of your Switch that stays the same even if the Switch’s power is turned off. C - Click this link to go to the status page of the Switch. GS2210 Series User’s Guide...
Page 34
VLAN type, GARP and priority queues. IP Setup This link takes you to a screen where you can configure the IP address, subnet mask (necessary for Switch management) and DNS (domain name server) and set up to 64 IP routing domains. GS2210 Series User’s Guide...
Page 35
This link takes you to a screen where you can configure protection against network loops that occur on the edge of your network. Layer 2 Protocol This link takes you to a screen where you can configure L2PT (Layer 2 Protocol Tunneling) Tunneling settings on the Switch. GS2210 Series User’s Guide...
MAC address, status and type. 4.3.1 Change Your Password After you log in for the first time, it is recommended you change the default administrator password. Click Management > Access Control > Logins to display the next screen. GS2210 Series User’s Guide...
Delete the management VLAN (default is VLAN 1). Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the management port of the Switch. Filter all traffic to the CPU port. Disable all ports. GS2210 Series User’s Guide...
4.7 Logging Out of the Web Configurator Click Logout in a screen to exit the web configurator. You have to log in with your password again after you log out. This is recommended after you finish a management session for security reasons. GS2210 Series User’s Guide...
Figure 23 Web Configurator: Logout Screen 4.8 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. GS2210 Series User’s Guide...
In this example, you want to configure port 1 as a member of VLAN 2. Figure 24 Initial Setup Network Example: VLAN Click Advanced Application > VLAN > VLAN Configuration in the navigation panel and click the Static VLAN Setup link. GS2210 Series User’s Guide...
VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on that port get sent to VLAN 2. GS2210 Series User’s Guide...
Connect your computer to any Ethernet port on the Switch. Make sure your computer is in the same subnet as the Switch. Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurator. See Section 4.2 on page 32 for more information. GS2210 Series User’s Guide...
Page 43
This is the same as the VLAN ID you configure in the Static VLAN screen. Click Add to save your changes back to the run- time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. GS2210 Series User’s Guide...
1 and 100 DHCP Client (B) 1 and 100 DHCP Client (C) 1 and 100 Access the Switch through http://192.168.1.1 by default. Log into the Switch by entering the username (default: admin) and password (default: 1234). GS2210 Series User’s Guide...
Page 45
Go to Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup, and set the PVID of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. GS2210 Series User’s Guide...
Page 46
Go to Advanced Application > IP Source Guard > DHCP snooping > Configure, activate and specify VLAN 100 as the DHCP VLAN as shown. Click Apply. Tutorial: Specify DHCP VLAN Figure 30 Click the Port link at the top right corner. GS2210 Series User’s Guide...
Page 47
6 or 7, the computer will not able to get an IP address. 10 To check if DHCP snooping works, go to Advanced Application > IP Source Guard, you should see an IP assignment with the type dhcp-snooping as shown. GS2210 Series User’s Guide...
DHCP Server Port 2 192.168.2.3 PVID=102 VLAN 102 172.16.1.18 6.3.2 Creating a VLAN Follow the steps below to configure port 2 as a member of VLAN 102. Access the web configurator through the Switch’s management port. GS2210 Series User’s Guide...
Page 49
Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending. Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. GS2210 Series User’s Guide...
Page 50
VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory. Figure 38 Tutorial: Add Tag for Frames Received on Port 2 GS2210 Series User’s Guide...
You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. You clicked the Save link on the Switch to have your settings take effect. GS2210 Series User’s Guide...
ZON Utility screen and you can perform tasks like basic configuration of the devices and batch firmware upgrade in it. You can download the ZON Utility at www.zyxel.com and install it on a PC. The following figure shows the ZON Utility screen. GS2210 Series User’s Guide...
(turn the power off and then back on again), and reset to factory default settings in the Neighbor Management screen. For more information on LLDP, see (Section 32.2 on page 252). Click Status > Neighbor to see the following screen GS2210 Series User’s Guide...
Page 54
This field will show “-” for non-ZyXEL devices. This shows the MAC address of the neighbor device in the remote network. This field will show “-” for non-ZyXEL devices. GS2210 Series User’s Guide...
• You can only reset ZyXEL products. 7.4 Port Status Summary To view the port statistics, click Status in all web configurator screens to display the Status screen as shown next. Figure 42 Status (for PoE model(s)) GS2210 Series User’s Guide...
7.4.1 Status: Port Details Click a number in the Port column in the Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. GS2210 Series User’s Guide...
Page 57
This field shows if LACP is enabled on this port or not. TxPkts This field shows the number of transmitted frames on this port RxPkts This field shows the number of received frames on this port GS2210 Series User’s Guide...
Page 58
This field shows the number of packets (including bad packets) received that were between 256 and 511 octets in length. 512-1023 This field shows the number of packets (including bad packets) received that were between 512 and 1023 octets in length. GS2210 Series User’s Guide...
Page 59
1024 and 1518 octets in length. Giant This field shows the number of packets (including bad packets) received that were between 1519 octets and the maximum frame size. The maximum frame size varies depending on your switch model. GS2210 Series User’s Guide...
(Section 8.8 on page 70) to view IPv6 status and IPv6 configuration. 8.2 System Information In the navigation panel, click Basic Setting > System Info to display the screen as shown. You can check the firmware version number. GS2210 Series User’s Guide...
Page 61
This field displays the minimum temperature measured at this sensor. Threshold This field displays the upper temperature limit at this sensor. Status This field displays Normal for temperatures below the threshold and Error for those above. GS2210 Series User’s Guide...
Use this screen to configure general settings such as the system name and time. Click Basic Setting > General Setup in the navigation panel to display the screen as shown. Figure 45 Basic Setting > General Setup GS2210 Series User’s Guide...
Page 63
(1 A.M. GMT or UTC). So in the European Union you would select Last, Sunday, March and the last field depends on your time zone. In Germany for instance, you would select 2:00 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). GS2210 Series User’s Guide...
Click Basic Setting > Switch Setup in the navigation panel to display the screen as shown. The VLAN setup screens change depending on whether you choose 802.1Q or Port Based in the VLAN Type field in this screen. Refer to Chapter 9 on page 86 for more information on VLAN. GS2210 Series User’s Guide...
Page 65
Leave All Timer Leave All Timer sets the duration of the Leave All Period timer for GVRP in milliseconds. Each port has a single Leave All Period timer. Leave All Timer must be larger than Leave Timer. GS2210 Series User’s Guide...
The factory default subnet mask is 255.255.255.0. You can configure up to 64 IP addresses which are used to access and manage the Switch from the ports belonging to the pre-defined VLAN(s). Note: You must configure a VLAN first. GS2210 Series User’s Guide...
Page 67
IP Address Enter the IP address of your Switch in dotted decimal notation for example 192.168.1.1. IP Subnet Mask Enter the IP subnet mask of your Switch in dotted decimal notation for example 255.255.255.0. GS2210 Series User’s Guide...
Click Cancel to clear the selected check boxes in the Delete column. 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the configuration screen. GS2210 Series User’s Guide...
You can also set priorities so that the Switch is able to reserve and allocate power to certain PDs. Note: The POE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. GS2210 Series User’s Guide...
Page 71
This field shows which ports can receive power from the Switch. You can set this in Section 8.8.1 on page • Disable - The PD connected to this port cannot get power supply. • Enable - The PD connected to this port can receive power. GS2210 Series User’s Guide...
Use this screen to set the priority levels for the Switch in distributing power to PDs. Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen opens. Figure 51 Basic Setting > PoE Setup GS2210 Series User’s Guide...
Use this screen to set IPv6 interfaces on which you can configure an IPv6 address to access and manage the Switch. Click Basic Setting > Interface Setup in the navigation panel to display the configuration screen. GS2210 Series User’s Guide...
Click Cancel to clear the Delete check boxes. 8.10 IPv6 Use this screen to view the IPv6 interface status and configure Switch’s management IPv6 addresses. Click Basic Setting > IPv6 in the navigation panel to display the IPv6 status screen as shown next. GS2210 Series User’s Guide...
8.10.1 IPv6 Interface Status Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the Basic Setting > IPv6 screen. The following screen opens. GS2210 Series User’s Guide...
Page 76
This field displays the Switch’s link-local IP address and prefix generated by the interface. It Address also shows whether the IP address is preferred, which means it is a valid address and can be used as a sender or receiver address. GS2210 Series User’s Guide...
Page 77
This field displays the address record when the Switch queries the DNS server to resolve domain names. Restart Click Click Here to send a new DHCP request to the DHCPv6 server and update the IPv6 DHCPv6 Client address and DNS information for this interface. GS2210 Series User’s Guide...
Click the link to go to a screen where you can configure the Switch DHCP settings. Setup 8.10.3 IPv6 Global Setup Use this screen to configure the global IPv6 settings. Click the link next to IPv6 Global Setup in the IPv6 Configuration screen to display the screen as shown next. GS2210 Series User’s Guide...
Use this screen to turn on or off an IPv6 interface and enable stateless autoconfiguration on it. Click the link next to IPv6 Interface Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 57 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Interface Setup GS2210 Series User’s Guide...
Manually configure a static IPv6 link-local address for the interface. Address Default Set the default gateway IPv6 address for the interface. When an interface cannot find a Gateway routing information for a frame’s destination, it forwards the packet to the default gateway. GS2210 Series User’s Guide...
Cancel Click Cancel to begin configuring this screen afresh. Clear Click Clear to reset the fields to the factory defaults. Index This is the interface index number. Click on an index number to change the settings. GS2210 Series User’s Guide...
Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. GS2210 Series User’s Guide...
To have IPv6 function properly, you should configure a static VLAN with the same ID number in the Advanced Application > VLAN screens. Neighbor Specify the IPv6 address of the neighboring device which can be reached through the Address interface. GS2210 Series User’s Guide...
Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Click the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 62 Basic Setting > IPv6 > IPv6 Configuration > DHCPv6 Client Setup GS2210 Series User’s Guide...
Page 85
This field displays whether the Switch obtains a list of domain names from the DHCP server. Information This field displays the time interval (in seconds) at which the Switch exchanges other Refresh configuration information with a DHCPv6 server again. Minimum GS2210 Series User’s Guide...
VLAN and provides the information that switches need to process the frame across the network. A tagged frame is four bytes longer than an untagged frame and contains two bytes of TPID (Tag Protocol Identifier, residing within the type/length field of the Ethernet frame) GS2210 Series User’s Guide...
Page 87
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Enable this function to permit VLAN groups beyond the local Switch. GS2210 Series User’s Guide...
1 and 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking port(s). Figure 63 Port VLAN Trunking 9.1.2.3 Select the VLAN Type Select a VLAN type in the Basic Setting > Switch Setup screen. GS2210 Series User’s Guide...
This is the VLAN identification number that was configured in the Static VLAN screen. Elapsed Time This field shows how long it has been since a normal VLAN was registered or a static VLAN was set up. GS2210 Series User’s Guide...
This field shows how this VLAN was added to the Switch. Dynamic: using GVRP Static: added as a permanent entry Voice: manually added as a Voice VLAN MVR: added via multicast VLAN registration MAC-based: manually added as MAC-based VLAN GS2210 Series User’s Guide...
Click Click Here to configure the MAC Based VLAN for the Switch. 9.4 Configure a Static VLAN Use this screen to configure a static VLAN for the Switch. Click Static VLAN in the VLAN Status screen to display the screen as shown next. GS2210 Series User’s Guide...
Click Add to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. GS2210 Series User’s Guide...
Use the VLAN Port Seup screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click the VLAN Port Setup link in the VLAN Configuration screen. Figure 69 Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup GS2210 Series User’s Guide...
IP subnet. For example, an ISP (Internet Services Provider) may divide different types of services it provides to customers into different IP subnets. Traffic for voice services is designated for IP subnet GS2210 Series User’s Guide...
Click Subnet Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. Note: Subnet based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. GS2210 Series User’s Guide...
Page 96
Cancel Click Cancel to begin configuring this screen afresh. Index This is the index number identifying this subnet based VLAN. Click on any of these numbers to edit an existing subnet based VLAN. GS2210 Series User’s Guide...
C. Figure 72 Protocol Based VLAN Application Example 9.7.1 Configuring Protocol Based VLAN Click Protocol Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. GS2210 Series User’s Guide...
Page 98
This field shows which port belongs to this protocol based VLAN. Name This field shows the name the protocol based VLAN. Ethernet Type This field shows which Ethernet protocol is part of this protocol based VLAN. GS2210 Series User’s Guide...
9.8.1 Configure a Port-based VLAN Select Port Based as the VLAN Type in the Basic Setting > Switch Setup screen and then click Advanced Application > VLAN from the navigation panel to display the next screen. GS2210 Series User’s Guide...
Page 100
Chapter 9 VLAN Figure 74 Port Based VLAN Setup (All Connected) GS2210 Series User’s Guide...
Page 101
Chapter 9 VLAN Figure 75 Port Based VLAN Setup (Port Isolation) GS2210 Series User’s Guide...
You can set priority level to the Voice VLAN and add MAC address of IP phones from specific manufacturers by using its ID from the Organizationally Unique Identifiers (OUI). Click Voice VLAN in the VLAN Configuration screen to display the configuration screen as shown. GS2210 Series User’s Guide...
Page 103
Cancel Click Cancel to begin configuring this screen afresh. Index This field displays the index number of the Voice VLAN. OUI address This field displays the OUI address of the Voice VLAN. GS2210 Series User’s Guide...
MAC address of the data packet that is looked up when untagged packets arrive at the Switch. Type an ID (from 1 to 4094) for the VLAN ID that is associated with the MAC- based VLAN entry. GS2210 Series User’s Guide...
Select the protocol. Leave the default value IP. Type the VLAN ID of an existing VLAN. In our example we already created a static VLAN with an ID of 5. Type 5. Leave the priority set to 0 and click Add. GS2210 Series User’s Guide...
Page 106
To add more ports to this protocol based VLAN. Click the index number of the protocol based VLAN entry. Click 1 Change the value in the Port field to the next port you want to add. Click Add. GS2210 Series User’s Guide...
Chapter 19 on page 153 for more information on port security. Click Advanced Application > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. Figure 79 Advanced Application > Static MAC Forwarding GS2210 Series User’s Guide...
Page 108
This field displays the port where the MAC address shown in the next field will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS2210 Series User’s Guide...
VLAN group. Figure shows frames being forwarded to devices connected to port 3. Figure 82 shows frames being forwarded to ports 2 and 3 within VLAN group 4. Figure 80 No Static Multicast Forwarding GS2210 Series User’s Guide...
Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). Click Advanced Application > Static Multicast Forwarding to display the configuration screen as shown. Figure 83 Advanced Application > Static Multicast Forwarding GS2210 Series User’s Guide...
Page 111
This field displays the port(s) within a identified VLAN group to which frames containing the specified multicast MAC address will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS2210 Series User’s Guide...
12.2 Configure a Filtering Rule Use this screen to create rules for traffic going through the Switch. Click Advanced Application > Filtering in the navigation panel to display the screen as shown next. Figure 84 Advanced Application > Filtering GS2210 Series User’s Guide...
Page 113
This field displays the VLAN group identification number. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. GS2210 Series User’s Guide...
(R)STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a switch to interact with other (R)STP -compliant switches in your network to ensure that only one path exists between any two stations on the network. GS2210 Series User’s Guide...
Page 115
Protocol Data Units) transmitted from the root bridge. If a bridge does not get a Hello BPDU after a predefined interval (Max Age), the bridge assumes that the link to the root bridge is down. This bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a valid network topology. GS2210 Series User’s Guide...
Figure 85 MRSTP Network Example Multiple STP Multiple Spanning Tree Protocol (IEEE 802.1s) is backward compatible with STP/RSTP and addresses the limitations of existing spanning tree protocols (STP and RSTP) in networks to include the following features: GS2210 Series User’s Guide...
Use the Spanning Tree Configuration screen to activate one of the STP modes on the Switch. Click Configuration in the Advanced Application > Spanning Tree Protocol. Figure 87 Advanced Application > Spanning Tree Protocol > Configuration GS2210 Series User’s Guide...
Use this screen to configure RSTP settings, see Section 13.1 on page 114 for more information on RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 88 Advanced Application > Spanning Tree Protocol > RSTP GS2210 Series User’s Guide...
Page 119
Priority decides which port should be disabled when more than one port forms a loop in a switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. GS2210 Series User’s Guide...
(second) message. The root bridge determines Hello Time, Max Age and Forwarding Delay. Max Age (second) This is the maximum time (in seconds) the Switch can wait without receiving a configuration message before attempting to reconfigure. GS2210 Series User’s Guide...
13.6 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click MRSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 13.1 on page 114 for more information on MRSTP. Figure 90 Advanced Application > Spanning Tree Protocol > MRSTP GS2210 Series User’s Guide...
Page 122
Priority decides which port should be disabled when more than one port forms a loop in a switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. GS2210 Series User’s Guide...
This ID is the same for Root and Our Bridge if the Switch is the root switch. Hello Time This is the time interval (in seconds) at which the root switch transmits a configuration (second) message. The root bridge determines Hello Time, Max Age and Forwarding Delay. GS2210 Series User’s Guide...
This is the time since the spanning tree was last reconfigured. Change 13.8 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen. Section on page 116 for more information on MSTP. GS2210 Series User’s Guide...
Page 125
Select this to activate MSTP on the Switch. Clear this to disable MSTP on the Switch. Note: You must also activate Multiple Spanning Tree in the Advanced Application > Spanning Tree Protocol > Configuration screen to enable MSTP on the Switch. GS2210 Series User’s Guide...
Page 126
Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. GS2210 Series User’s Guide...
Click Advanced Application > Spanning Tree Protocol > MSTP > Port in the navigation panel to display the status screen as shown next. See Section on page 116 for more information on MSTP. Figure 93 Advanced Application > Spanning Tree Protocol > MSTP > Port GS2210 Series User’s Guide...
Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section on page 116 for more information on MSTP. Note: This screen is only available after you activate MSTP on the Switch. GS2210 Series User’s Guide...
Page 129
This is the path cost from the root port on this Switch to the root switch. Port ID This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. GS2210 Series User’s Guide...
The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP or RSTP, the link for VLAN 2 will be blocked as STP and RSTP allow only one link in the network and block the redundant link. GS2210 Series User’s Guide...
Devices that belong to the same MST region are configured to have the same MSTP configuration identification settings. These include the following parameters: • Name of the MST region • Revision level as the unique number for the MST region GS2210 Series User’s Guide...
MST instance are members of the CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. Figure 98 MSTP and Legacy RSTP Network Example GS2210 Series User’s Guide...
(Section 14.2 on page 133) to limit the bandwidth for traffic going through the Switch. 14.2 Bandwidth Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. GS2210 Series User’s Guide...
Page 134
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS2210 Series User’s Guide...
(DLF) packets the Switch receives per second on the ports. 15.2 Broadcast Storm Control Setup Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. GS2210 Series User’s Guide...
Page 136
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS2210 Series User’s Guide...
Click Advanced Application > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 101 Advanced Application > Mirroring GS2210 Series User’s Guide...
Page 138
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS2210 Series User’s Guide...
When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that GS2210 Series User’s Guide...
Section 17.1 on page 139 for more information. Figure 102 Advanced Application > Link Aggregation Status Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. GS2210 Series User’s Guide...
LACP - if the ports are configured to join a trunk group via LACP. 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 139 for more information on link aggregation. GS2210 Series User’s Guide...
Page 142
This is the only screen you need to configure to enable static link aggregation. Aggregation Setting Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this option to activate a trunk group. GS2210 Series User’s Guide...
Click Cancel to begin configuring this screen afresh. 17.4 Link Aggregation Control Protocol Click Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Section on page 139 for more information on dynamic link aggregation. GS2210 Series User’s Guide...
Page 144
The LACP “server” controls the operation of LACP setup. Enter a number to set the priority of an active port using Link Aggregation Control Protocol (LACP). The smaller the number, the higher the priority level. Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. GS2210 Series User’s Guide...
Aggregation Setting. In this screen activate trunk group T1, select the traffic distribution algorithm used by this group and select the ports that should belong to this group as shown in the figure below. Click Apply when you are done. GS2210 Series User’s Guide...
Page 146
Chapter 17 Link Aggregation Figure 106 Trunking Example - Configuration Screen Your trunk group 1 (T1) configuration is now complete. GS2210 Series User’s Guide...
At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. GS2210 Series User’s Guide...
Figure 108 Advanced Application > Port Authentication 18.3 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. In the Port Authentication screen click 802.1x to display the configuration screen as shown. GS2210 Series User’s Guide...
Page 149
Specify the number of seconds the Switch waits for client’s response before re-sending an identity request to the client. Supp-Timeout Specify the number of seconds the Switch waits for client’s response to a challenge secs request before sending another request. GS2210 Series User’s Guide...
Figure 110 Guest VLAN Example VLAN 100 VLAN 102 Internet Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication > 802.1x screen click Guest Vlan to display the configuration screen as shown. GS2210 Series User’s Guide...
Page 151
Switch. You must also enable IEEE 802.1x authentication on the Switch and the associated ports. Enter the number that identifies the guest VLAN. Make sure this is a VLAN recognized in your network. GS2210 Series User’s Guide...
Page 152
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
153) to enable port security and disable MAC address learning. You can also enable the port security feature on a port. 19.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
Page 154
Clear this check box to disable the port security feature. The Switch forwards all packets on this port. Address MAC address learning reduces outgoing broadcast traffic. For MAC address learning to occur Learning on a port, the port itself must be active with address learning enabled. GS2210 Series User’s Guide...
Page 155
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
(or policy) to act upon the traffic that matches the rules. To configure policy rules, refer to Chapter 21 on page 161. Click Advanced Application > Classifier in the navigation panel to display the configuration screen as shown. GS2210 Series User’s Guide...
Page 157
Select Any to apply the rule to all MAC addresses. Address To specify a destination, select the second choice and type a MAC address in valid MAC address format (six hexadecimal character pairs). Layer 3 Specify the fields below to configure a layer 3 classifier. GS2210 Series User’s Guide...
Classifier screen. To change the settings of a rule, click a number in the Index field. Note: When two rules conflict with each other, a higher layer rule has priority over lower layer rule. GS2210 Series User’s Guide...
Page 159
In the Internet Protocol there is a field, called “Protocol”, to identify the next level protocol. The following table shows some common protocol types and the corresponding protocol number. Refer http://www.iana.org/assignments/protocol-numbers for a complete list. Table 66 Common IP Protocol Types and Protocol Numbers PROTOCOL TYPE PROTOCOL NUMBER ICMP L2TP GS2210 Series User’s Guide...
The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. After you have configured a classifier, you can configure a policy (in the Policy screen) to define action(s) on the classified traffic flow. Figure 115 Classifier: Example GS2210 Series User’s Guide...
21.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to Section 20.2 on page 156 more information. Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
Page 162
Type the number of an outgoing port. Priority Specify a priority level. Rate Limit You can configure the desired bandwidth available to a traffic flow. Traffic that exceeds the maximum bandwidth allocated (in cases where the network is congested) is dropped. GS2210 Series User’s Guide...
Page 163
Click Delete to remove the selected entry from the summary table. Delete Click Cancel to clear the Delete check boxes. Cancel This field displays the policy index number. Click an index number to edit the policy. GS2210 Series User’s Guide...
The figure below shows an example Policy screen where you configure a policy to limit bandwidth on a traffic flow classified using the Example classifier (refer to Section 20.3 on page 160). Figure 118 Policy Example GS2210 Series User’s Guide...
A queue is a given an amount of bandwidth irrespective of the incoming traffic on that port. This queue then moves to the back of the list. The next queue is given GS2210 Series User’s Guide...
Use this screen to set priorities for the queues of the Switch. This distributes bandwidth across the different traffic queues. Click Advanced Application > Queuing Method in the navigation panel. Figure 119 Advanced Application > Queuing Method GS2210 Series User’s Guide...
Page 167
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
(see the IANA website for more information). IGMP Snooping A Switch can passively snoop on IGMP packets transferred between IP multicast routers/switches and IP multicast hosts to learn the IP multicast group membership. It checks IGMP packets passing GS2210 Series User’s Guide...
Page 169
In the following MLD snooping-proxy example, all connected upstream ports (1 ~7) are treated as one interface. The connection between ports 8 and 9 is blocked by STP to break the loop. If there is GS2210 Series User’s Guide...
Page 170
The following figure shows a network example. The subscriber VLAN (1, 2 and 3) information is hidden from the streaming media server, S. In addition, the multicast VLAN information is only visible to the Switch and S. GS2210 Series User’s Guide...
Page 171
(in this case, an uplink port on the Switch). If there is another subscriber device connected to this port in the same subscriber VLAN, the receiving port will still be on the list of forwarding destination for the multicast traffic. Otherwise, the Switch removes the receiver port from the forwarding table. GS2210 Series User’s Guide...
Click Advanced Application > Multicast > IPv4 Multicast to display the screen as shown. This screen shows the IPv4 multicast group information. See Section 23.1 on page 168 for more information on multicasting. Figure 123 Advanced Application > Multicast > IPv4 Multicast GS2210 Series User’s Guide...
IGMP group membership entry if it does not receive report messages from the port. 802.1p Priority Select a priority level (0-7) to which the Switch changes the priority in outgoing IGMP control packets. Otherwise, select No-Change to not replace the priority. GS2210 Series User’s Guide...
Page 174
Max Group Num. Enter the number of multicast groups this port is allowed to join. Once a port is registered in the specified number of multicast groups, any new IGMP join report frame(s) is dropped on this port. GS2210 Series User’s Guide...
Click Advanced Application > Multicast > IPv4 Multicast in the navigation panel. Click the IGMP Snooping link and then the IGMP Snooping VLAN link to display the screen as shown. See Section on page 169 for more information on IGMP Snooping VLAN. GS2210 Series User’s Guide...
Page 176
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to your previous configuration. GS2210 Series User’s Guide...
To configure additional rule(s) for a profile that you have already added, enter the profile name and specify a different IP multicast address range. Start Address Type the starting multicast IP address for a range of multicast IP addresses that you want to belong to the IGMP filter profile. GS2210 Series User’s Guide...
This field displays IP multicast group addresses. Group Timout This field displays the time (in seconds) that elapses before the Switch removes a MLD group membership entry if it does not receive report messages from the port. GS2210 Series User’s Guide...
23.5.2 MLD Snooping-proxy VLAN Click the VLAN link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy screen to display the screen as shown. See Section 23.1 on page 168 for more information on multicasting. GS2210 Series User’s Guide...
Page 180
T = (QI*RV) + MRD, where T = Timeout, QI = Query Interval, RV = Robustness Variable, and MRD = Maximum Response Delay. When an MLD Done message is received, the Switch sets the entry’s lifetime to be the product of Last Member Query Interval and Robustness Variable GS2210 Series User’s Guide...
Click the Port Role Setting link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN screen to display the screen as shown. See Section 23.1 on page for more information on multicasting. GS2210 Series User’s Guide...
Page 182
Report or Done messages when receiving queries from a multicast router. Otherwise, select None if the port is not joining a multicast group or does not belong to this VLAN. GS2210 Series User’s Guide...
23.5.4 MLD Snooping-proxy VLAN Filtering Use this screen to configure the Switch’s MLD filtering settings. Click the Filtering link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy screen to display the screen as shown. GS2210 Series User’s Guide...
Page 184
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to your previous configuration. GS2210 Series User’s Guide...
Profile Name This field displays the descriptive name of the profile. Start Address This field displays the start of the multicast IPv6 address range. End Address This field displays the end of the multicast IPv6 address range. GS2210 Series User’s Guide...
Note: You can create up to five multicast VLANs and up to 256 multicast rules on the Switch. Note: Your Switch automatically creates a static VLAN (with the same VID) when you create a multicast VLAN in this screen. GS2210 Series User’s Guide...
Page 187
Select this option to set this port as the MVR source port that sends and receives multicast traffic. All source ports must belong to a single multicast VLAN. Receiver Port Select this option to set this port as a receiver port that only receives multicast traffic. GS2210 Series User’s Guide...
Use this screen to configure MVR IP multicast group address(es). Click the Group Configuration link in the MVR screen. Note: A port can belong to more than one multicast VLAN. However, IP multicast group addresses in different multicast VLANs cannot overlap. GS2210 Series User’s Guide...
Page 189
Delete button to remove the selected entry(ies) from the table. If you delete a multicast VLAN, all multicast groups in this VLAN will also be removed. Cancel Select Cancel to clear the checkbox(es) in the table. GS2210 Series User’s Guide...
Movie: 230.1.2.50 ~230.1.2.60 VLAN 1 Multicast VID 200 To configure the MVR settings on the Switch, create a multicast VLAN in the MVR screen and set the receiver and source ports. Figure 136 MVR Configuration Example EXAMPLE GS2210 Series User’s Guide...
Page 191
Group Configuration screen. The following figure shows an example where two IPv4 multicast groups (News and Movie) are configured for the multicast VLAN 200. Figure 137 MVR Group Configuration Example EXAMPLE Figure 138 MVR Group Configuration Example EXAMPLE GS2210 Series User’s Guide...
Switch but user B cannot. The Switch can authorize users based on user accounts configured on the Switch itself or it can use an external server to authorize a large number of users. GS2210 Series User’s Guide...
RADIUS servers and Section 24.6.2 on page 201 for RADIUS attributes utilized by the authentication features on the Switch. Click on the RADIUS Server Setup link in the AAA screen to view the screen as shown. GS2210 Series User’s Guide...
Page 194
Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external RADIUS server and the Switch. This key is not sent over the network. This key must be the same on the external RADIUS server and the Switch. GS2210 Series User’s Guide...
Use this screen to configure your TACACS+ server settings. See Section on page 193 for more information on TACACS+ servers. Click on the TACACS+ Server Setup link in the AAA screen to view the screen as shown. GS2210 Series User’s Guide...
Page 196
Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. This key is not sent over the network. This key must be the same on the external TACACS+ server and the Switch. GS2210 Series User’s Guide...
Click Cancel to begin configuring this screen afresh. 24.5 AAA Setup Use this screen to configure authentication and authorization settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. GS2210 Series User’s Guide...
Page 198
Method 2 and Method 3 fields. Select local to have the Switch check the access privilege configured for local authentication. Select radius or tacacs+ to have the Switch check the access privilege via the external servers. GS2210 Series User’s Guide...
Page 199
If you don’t select this and you have two accounting servers set up, then the Switch sends information to the first accounting server and if it doesn’t get a response from the accounting server then it tries the second accounting server. GS2210 Series User’s Guide...
• Vendor-Type: A vendor specified attribute, identifying the setting you want to modify. • Vendor-data: A value you want to assign to the setting. Note: Refer to the documentation that comes with your RADIUS server on how to configure VSAs for users authenticating via the RADIUS server. GS2210 Series User’s Guide...
Refer to RFC 2865 for more information about RADIUS attributes used for authentication. This section lists the attributes used by authentication functions on the Switch. In cases where the attribute has a specific format associated with it, the format is specified. GS2210 Series User’s Guide...
24.6.3.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 24.6.3.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type - This value is set to Ethernet(15) on the Switch. Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator GS2210 Series User’s Guide...
ARP packets in each VLAN. • Use the ARP Inspection Log Status screen (Section 25.8 on page 216) to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. GS2210 Series User’s Guide...
This field displays how many days, hours, minutes, and seconds the binding is valid; for example, 2d3h4m5s means the binding is still valid for 2 days, 3 hours, 4 minutes, and 5 seconds. This field displays infinity if the binding is always valid (for example, a static binding). GS2210 Series User’s Guide...
ID as an existing static binding, the new static binding replaces the original one. To open this screen, click Advanced Application > IP Source Guard > Static Binding. Figure 145 Advanced Application > IP Source Guard > Static Binding GS2210 Series User’s Guide...
Click this to clear the Delete check boxes above. 25.4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. GS2210 Series User’s Guide...
Page 207
This field displays how long (in seconds) the Switch waits to update the DHCP snooping database after the current bindings change. This section displays information about the current update and the next update of the DHCP snooping database. GS2210 Series User’s Guide...
Page 208
MAC address and VLAN ID. Invalid interfaces This field displays the number of bindings the Switch ignored because the port number was a trusted interface or does not exist anymore. GS2210 Series User’s Guide...
TFTP server so that they are still available after a restart. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure. GS2210 Series User’s Guide...
Page 210
IP address}/directory, if applicable/file name; for example, tftp://192.168.10.1/database.txt. Timeout interval Enter how long (10-65535 seconds) the Switch tries to complete a specific update in the DHCP snooping database before it gives up. GS2210 Series User’s Guide...
To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port. Figure 148 Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port GS2210 Series User’s Guide...
Page 212
Switch relays to a DHCP server for each VLAN. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN. Figure 149 Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN GS2210 Series User’s Guide...
Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN > Port. Figure 150 Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN > Port GS2210 Series User’s Guide...
MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection. GS2210 Series User’s Guide...
25.7 ARP Inspection VLAN Status Use this screen to look at various statistics about ARP packets in each VLAN. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > VLAN Status. GS2210 Series User’s Guide...
Use this screen to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status. GS2210 Series User’s Guide...
Page 217
In the ARP Inspection VLAN Configure screen, you can configure the Switch to generate log messages when ARP packets are discarded or forwarded based on the VLAN ID of the ARP packet. See Section 25.9.2 on page 221. Time This field displays when the log message was generated. GS2210 Series User’s Guide...
Click Clearing log status table in the ARP Inspection Log Status screen to clear the log and reset this counter. See Section 25.8 on page 216. GS2210 Series User’s Guide...
Use this screen to specify whether ports are trusted or untrusted ports for ARP inspection. You can also specify the maximum rate at which the Switch receives ARP packets on each untrusted port. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure > Port. GS2210 Series User’s Guide...
Page 220
1 second, then the Switch accepts a maximum of 15 ARP packets in every one- second interval. If the burst interval is 5 seconds, then the Switch accepts a maximum of 75 ARP packets in every five-second interval. Enter the length (1-15 seconds) of the burst interval. GS2210 Series User’s Guide...
This field displays the VLAN ID of each VLAN in the range specified above. If you configure the * VLAN, the settings are applied to all VLANs. Enabled Select Yes to enable ARP inspection on the VLAN. Select No to disable ARP inspection on the VLAN. GS2210 Series User’s Guide...
• The packet is a RELEASE or DECLINE packet, and the source MAC address and source port do not match any of the current bindings. • The rate at which DHCP packets arrive is too high. GS2210 Series User’s Guide...
Page 223
You can configure this setting for each source VLAN. This setting is independent of the DHCP relay settings (Chapter 35 on page 283). 25.10.1.4 Configuring DHCP Snooping Follow these steps to configure DHCP snooping on the Switch. GS2210 Series User’s Guide...
• They do not use the same space in memory that regular MAC address filters use. • They appear only in the ARP Inspection screens and commands, not in the MAC Address Filter screens and commands. GS2210 Series User’s Guide...
Page 225
ARP inspection so that the Switch has enough time to build the binding table. Enable ARP inspection on each VLAN. Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. GS2210 Series User’s Guide...
If a switch (not in loop state) connects to a switch in loop state, then it will be affected by the switch in loop state in the following way: GS2210 Series User’s Guide...
Page 227
In this example, the probe packet is sent from port N and returns on another port. As long as loop guard is enabled on port N. The Switch will shut down port N if it detects that the probe packet has returned to the Switch. GS2210 Series User’s Guide...
Click Advanced Application > Loop Guard in the navigation panel to display the screen as shown. Note: The loop guard feature can not be enabled on the ports that have Spanning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Figure 163 Advanced Application > Loop Guard GS2210 Series User’s Guide...
Page 229
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
To emulate a point-to-point topology between two customer switches at different sites, such as A and B, you can enable protocol tunneling on edge switches 1 and 2 for PAgP (Port Aggregation Protocol), LACP or UDLD (UniDirectional Link Detection). GS2210 Series User’s Guide...
Incoming encapsulated layer 2 protocol packets received on a tunnel port are decapsulated and sent to an access port. 27.2 Configuring Layer 2 Protocol Tunneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
Page 232
Select this option to have the Switch tunnel STP (Spanning Tree Protocol) packets so that STP can run properly across the service provider’s network and spanning trees can be set up based on bridge information from all (local and remote) networks. GS2210 Series User’s Guide...
Page 233
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
Active Discovery Initialization) and PADR (PPPoE Active Discovery Request) packets from PPPoE clients. This tag is defined in RFC 2516 and has the following format for this feature. Table 103 PPPoE Intermediate Agent Vendor-specific Tag Format Tag_Type Tag_Len Value (0x0105) GS2210 Series User’s Guide...
Page 235
If you do not configure a Circuit ID string for a specific VLAN on a port or for a specific port, and disable the flexible Circuit ID syntax in the PPPoE > Intermediate Agent screen, the Switch automatically generates a Circuit ID string according to the default Circuit ID syntax which is GS2210 Series User’s Guide...
Use this screen to configure the PPPoE Intermediate Agent on the Switch. Click Advanced Application > PPPoE in the navigation panel to display the screen as shown. Click Click Here to go to the Intermediate Agent screen. Figure 167 Advanced Application > PPPoE Intermediate Agent GS2210 Series User’s Guide...
Switch, the Switch will use the string specified in the access-node- identifier field. identifier- Specify a string that the Switch adds in the Agent Circuit ID sub-option. You can enter up to string 53 ASCII characters. Spaces are allowed. GS2210 Series User’s Guide...
Use this row to make the setting the same for all ports. Use this row first and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. GS2210 Series User’s Guide...
28.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPPoE IA settings that apply to a specific VLAN on a port. Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown. GS2210 Series User’s Guide...
Page 240
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
Use this screen to view whether the Switch detected that control packets exceeded the rate limit configured for a port and related information. Click the Click Here link next to Errdisable Status link in the Advanced Application > Errdisable screen to display the screen as shown. GS2210 Series User’s Guide...
Page 243
- The Switch drops the additional control packets the port(s) has to handle in every one second. Rate This field displays how many control packets this port can receive or transmit per second. It can be adjusted in CPU Protection. 0 means no rate limit. GS2210 Series User’s Guide...
Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. GS2210 Series User’s Guide...
• inactive-reason - The Switch drops all the specified control packets (such as BPDU) on the port. • rate-limitation - The Switch drops the additional control packets the port(s) has to handle in every one second. GS2210 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
Note: Make sure you keep at least one port in the promiscuous port list for a VLAN with private VLAN enabled. Otherwise, this VLAN is blocked from the whole network. 30.2 Configuring Private VLAN Click Advanced Application > Private VLAN in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
Page 248
This shows the port(s) that can communicate with any ports in the same VLAN. Ports Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. GS2210 Series User’s Guide...
31.2 Configuring Green Ethernet Click Advanced Application > Green Ethernet in the navigation panel to display the screen as shown. Note: EEE, Auto Power Down and Short Reach are not supported on an uplink port. GS2210 Series User’s Guide...
Page 250
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. The next figure demonstrates that the network devices Switches and Routers (S and R) transmit and receive device information via LLDPPDU and the network manager can query the information using Simple Network Management Protocol (SNMP). GS2210 Series User’s Guide...
TLV to provision the endpoint device to such that the endpoint device’s network policy and location identification information is updated. Since LLDPPDU updates status and configuration information periodically, network managers may check the result of provision via remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. GS2210 Series User’s Guide...
Click here to show a screen with LLDP information from the neighboring devices. Status LLDP Click here to show a screen to configure LLDP parameters. Configuration LLDP-MED LLDP-MED Click here to show a screen to configure LLDP-MED (Link Layer Discovery Protocol for Configuration Media Endpoint Devices) parameters. GS2210 Series User’s Guide...
This screen displays a summary of LLDP status on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) to display the screen as shown next. Figure 183 Advanced Application > LLDP > LLDP Local Status GS2210 Series User’s Guide...
This screen displays detailed LLDP status for each port on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) > then, click a port number, for example 1 (Port) in the local port column to display the screen as shown next. GS2210 Series User’s Guide...
Page 256
Chapter 32 Link Layer Discovery Protocol (LLDP) Figure 184 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (Basic TLV) GS2210 Series User’s Guide...
Page 257
Chapter 32 Link Layer Discovery Protocol (LLDP) Figure 185 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (MED TLV) GS2210 Series User’s Guide...
Page 258
Capabilities This field displays which LLDP-MED TLV are capable to transmit on the Switch. • Network Policy • Location Device Type This is the LLDP-MED device class. The Zyxel Switch device type is: • Network Connectivity GS2210 Series User’s Guide...
This is an alpha-numeric string that contains the specific identifier for the port from which this LLDPDU was transmitted. The port ID is identified by the port ID subtype. Port Description This displays a description for the port from which this LLDPDU was transmitted. GS2210 Series User’s Guide...
1, in the Index column in the LLDP Remote Status screen to display the screen as shown next. Figure 187 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Basic TLV) GS2210 Series User’s Guide...
Page 261
System Capabilities Supported • System Capabilities Enabled Management This displays the following management address parameters of the remote device. Address TLV • Management Address Subtype • Management Address • Interface Number Subtype • Interface Number • Object Identifier GS2210 Series User’s Guide...
Page 262
LLDP PDU. • Port-Protocol VLAN ID • Port-Protocol VLAN ID Supported • Port-Protocol VLAN ID Enabled Vlan Name TLV This shows the VLAN ID and name for remote device port. • VLAN ID • VLAN Name GS2210 Series User’s Guide...
Page 263
• Port Class • MDI Supported • MDI Enabled • Pair Controlable • PSE Power Pairs • Power Class Max Frame This displays the maximum supported frame size in octets. Size TLV GS2210 Series User’s Guide...
Page 264
Chapter 32 Link Layer Discovery Protocol (LLDP) Figure 189 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED TLV) GS2210 Series User’s Guide...
Page 265
This shows the location information of a caller by its: Identification • Coordinate-base LCI - latitude and longitude coordinates of the Location Configuration Information (LCI) • Civic LCI - IETF Geopriv Civic Address based Location Configuration Information • ELIN - (Emergency Location Identifier Number) GS2210 Series User’s Guide...
Power Value - power requirement, in fractions of Watts, in current configuration 32.6 LLDP Configuration Use this creen to configure global LLDP settings on the Switch. Click Advanced Application > LLDP > LLDP Configuration (Click Here) to display the screen as shown next. GS2210 Series User’s Guide...
Page 267
Select whether LLDP transmission and/or reception is allowed on this port. • Disable - not allowed • Tx-Only - transmit only • Rx-Only - receive only • Tx-Rx - transmit and receive Notification Select whether LLDP notification is enabled on this port. GS2210 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
Status TLVs on the port(s). All check boxes in this column are enabled by default. Max Frame Select check box to enable or disable the sending of IEEE 802.3 Max Frame Size TLVs on Size the port(s). GS2210 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
Click Cancel to begin entering the information afresh. Index This field displays the of index number of the network policy. Click an index number to edit the rule. Port This field displays the port number of the network policy. GS2210 Series User’s Guide...
Check the rules that you want to remove in the delete column, then click the Delete button. Cancel Click Cancel to clear the selected checkboxes in the Delete column. 32.9 LLDP-MED Location Click Advanced Application > LLDP > LLDP-MED Location (Click Here) to display the screen as shown next. GS2210 Series User’s Guide...
Page 273
Enter the latitude information. The value should be from -90º to 90º. The negative value represents the South. • north • south Longitude Enter the longitude information. The value should be from -180º to 180º. The negative vlaue represents the West. • west • east GS2210 Series User’s Guide...
Page 274
Country, State, County, City, Street, Number, ZIP code and additional information. ELIN Number This field shows the Emergency Location Identification Number (ELIN), which is used to identify endpoint devices when they issue emergency call services. The valid length is form 10 octets to 25 octets. GS2210 Series User’s Guide...
Page 275
Table 129 Advanced Application > LLDP > LLDP-MED Location LABEL DESCRIPTION Delete Check the locations that you want to remove in the Delete column, then click the Delete button. Cancel Click Cancel to clear the selected check boxes in the delete column. GS2210 Series User’s Guide...
• Use the Static Routing screen (Section 33.2 on page 277) to check if IPv4 static route is activated. • Use the IPv4 Static Route screen (Section 33.3 on page 277) to activate/deactivate this static route. GS2210 Series User’s Guide...
Enter the subnet mask for this destination. Routing is always based on network number. If Mask you need to specify a route to a single host, use a subnet mask of 255.255.255.255 in the subnet mask field to force the network number to be identical to the host ID. GS2210 Series User’s Guide...
Page 278
Switch that will forward the packet to the destination. Metric This field displays the cost of transmission for routing purposes. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS2210 Series User’s Guide...
Figure 199 DiffServ: Differentiated Service Field DSCP (6 bits) CU (2 bits) DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. GS2210 Series User’s Guide...
S - Silver B - Bronze 34.2 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the Switch. Click IP Application > DiffServ in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
• Global - The Switch forwards all DHCP requests to the same DHCP server. • VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can be configured to relay DHCP requests to different DHCP servers for clients in different VLAN. GS2210 Series User’s Guide...
DHCPv4 to open screens where you can enable and configure DHCPv4 relay settings and create option 82 profiles. Click the link next to DHCPv6 to open a screen where you can configure DHCPv6 relay settings. Figure 203 IP Application > DHCP GS2210 Series User’s Guide...
The DHCP Relay Agent Information feature adds an Agent Information field (also known as the Option 82 field) to DHCP requests. The Option 82 field is in the DHCP headers of client DHCP request frames that the Switch relays to a DHCP server. GS2210 Series User’s Guide...
35.4.2 DHCPv4 Option 82 Profile Use this screen to create DHCPv4 option 82 profiles. Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Option 82 Profile link to display the screen as shown. GS2210 Series User’s Guide...
Page 287
Select this option to have the Switch add its MAC address to the client DHCP requests that it relays to a DHCP server. string Enter a string of up to 64 ASCII characters for the remote ID information in this field. Spaces are allowed. GS2210 Series User’s Guide...
Use this screen to configure global DHCPv4 relay. Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Global link to display the screen as shown. Figure 206 IP Application > DHCP > DHCPv4 > Global GS2210 Series User’s Guide...
The Switch adds the Circuit ID sub-option and/or Remote ID sub-option specified in the profile to DHCP requests that it relays to a DHCP server. The profile you select here has priority over the one you select in the DHCP > DHCPv4 > Global screen. GS2210 Series User’s Guide...
(default1 in this example) to set the Switch to send additional information (such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. GS2210 Series User’s Guide...
DHCP Status screen that displays. Note: You must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. See Section 5.2 on page 42 information on how to do this. GS2210 Series User’s Guide...
Page 292
This field displays Relay for the DHCP mode. DHCP Status For DHCP server configuration, this field displays the starting IP address and the size of the IP address pool. For DHCP relay configuration, this field displays the first remote DHCP server IP address. GS2210 Series User’s Guide...
Click Clear to reset the fields to the factory defaults. Index This field displays a sequential number for each entry. Click an index number to change the settings. This field displays the VLAN to which the port(s) belongs. GS2210 Series User’s Guide...
(VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.100. Figure 212 DHCP Relay for Two VLANs DHCP:192.168.1.100 VLAN 1 VLAN 2 DHCP:172.16.10.100 For the example network, configure the VLAN Setting screen as shown. GS2210 Series User’s Guide...
The interface-ID should not change even after the relay agent restarts. Use this screen to configure DHCPv6 relay settings for a specific VLAN on the Switch. Click IP Application > DHCP > DHCPv6 in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
Page 296
This field displays whether the remote-ID option is added to DHCPv6 requests from clients in this VLAN. Delete Check the entry(ies) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. GS2210 Series User’s Guide...
In the following example, the Switch does not have IP address and MAC address mapping information for hosts A and B in its ARP table, and host A wants to ping host B. Host A sends an GS2210 Series User’s Guide...
Page 298
In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. ARP-Request When the Switch is in ARP-Request learning mode, it updates the ARP table with both ARP replies, gratuitous ARP requests and ARP requests. GS2210 Series User’s Guide...
Figure 215 IP Application > ARP Setup 36.2.1 ARP Learning Use this screen to configure each port’s ARP learning mode. Click the link next to ARP Learning in the IP Application > ARP Setup screen to display the screen as shown next. GS2210 Series User’s Guide...
Page 300
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
Table 146 Management > Maintenance LABEL DESCRIPTION Current This field displays which configuration (Configuration 1 or Configuration 2) is currently operating on the Switch. Firmware Click Click Here to go to the Firmware Upgrade screen. Upgrade GS2210 Series User’s Guide...
Switch IP address (192.168.1.1). 37.2.2 Save Configuration Click Config 1 to save the current configuration settings permanently to Configuration 1 on the Switch. GS2210 Series User’s Guide...
Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. Click Management > Maintenance > Firmware Upgrade to view the screen as shown next. GS2210 Series User’s Guide...
Page 304
To reboot, go to Management > Maintenance > Reboot System and click Config 1 or Config 2 (Config 1 and Config 2 are the configuration files you want the Switch to use when it restarts. GS2210 Series User’s Guide...
Choose a location to save the file on your computer from the Save in drop-down list box and type a descriptive name for it in the File name list box. Click Save to save the configuration file to your computer. GS2210 Series User’s Guide...
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
Switch configurations, system-related data (including the default password), the error log and the trace log. Firmware *.bin This is the generic name for the ZyNOS firmware on the Switch. 37.7.2.1 Example FTP Commands ftp> put firmware.bin ras GS2210 Series User’s Guide...
Normal. The server requires a unique User ID and Password to login. Transfer Type Transfer files in either ASCII (plain text format) or in binary mode. Configuration and firmware files should be transferred in binary mode. GS2210 Series User’s Guide...
• FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. GS2210 Series User’s Guide...
“trusted computers” from which an administrator may use a service to manage the Switch. 38.2 The Access Control Main Screen Use this screen to display the main screen. Click Management > Access Control in the navigation panel to display the main screen as shown. GS2210 Series User’s Guide...
Enter the Get Community string, which is the password for the incoming Get- and GetNext- requests from the management station. The Get Community string is only used by SNMP managers using SNMP version 2c or lower. GS2210 Series User’s Guide...
From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP traps that should be sent to each SNMP manager. Figure 226 Management > Access Control > SNMP > Trap Group GS2210 Series User’s Guide...
From the SNMP > Trap Group screen, click Port to view the screen as shown. Use this screen to set whether a trap received on the port(s) would be sent to the SNMP manager. Figure 227 Management > Access Control > SNMP > Trap Group > Port GS2210 Series User’s Guide...
User Information Note: Use the username and password of the login accounts you specify in this screen to create accounts on the SNMP v3 manager. Username Specify the username of a login account on the Switch. GS2210 Series User’s Guide...
Page 315
This field displays the encryption method used for SNMP communication with this user. Group This field displays the SNMP group to which this user belongs. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
Only the administrator has read/write access. Old Password Type the existing system password (1234 is the default password when shipped). New Password Enter your new system password. Retype to Retype your new system password for confirmation confirm GS2210 Series User’s Guide...
“trusted computer(s)” for each service in the Remote Management screen (discussed later). Click Access Control to go back to the main Access Control screen. Figure 230 Management > Access Control > Service Access Control GS2210 Series User’s Guide...
Click Management > Access Control > Remote Management to view the screen as shown next. You can specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click Access Control to return to the Access Control screen. GS2210 Series User’s Guide...
Cancel Click Cancel to begin configuring this screen afresh. 38.7 Technical Reference This section provides technical background information on the topics discussed in this chapter. GS2210 Series User’s Guide...
Used by the agent to inform the manager of some events. SNMP v3 and Security SNMP v3 enhances security for SNMP management. SNMP managers can be required to authenticate with agents before conducting SNMP management sessions. GS2210 Series User’s Guide...
Page 321
This trap is sent when the fan speed goes OfRange above or below the normal operating range. zyHwMonitorFANSpeedOut 1.3.6.1.4.1.890.1.15.3.26.2.6 This trap is sent when the fan speed is OfRangeRecovered recovered from the out of range to normal operating range. GS2210 Series User’s Guide...
Page 322
This trap is sent when the Switch’s real NotReachableRecovered time clock is up to date. intrusionlock zyPortIntrusionLock 1.3.6.1.4.1.890.1.15.3.61.3.2 This trap is sent when intrusion lock occurs on a port. loopguard zyLoopGuardLoopDetect 1.3.6.1.4.1.890.1.15.3.45.2.1 This trap is sent when loopguard shuts down a port. GS2210 Series User’s Guide...
Page 323
The trap is sent when entries in the remote database have any updates. Link Layer Discovery Protocol (LLDP), defined as IEEE 802.1ab, enables LAN devices that support LLDP to exchange their configured settings. This helps eliminate configuration mismatch issues. GS2210 Series User’s Guide...
Page 324
This trap is sent when the OfRangeRecovered transceiver supply voltage is recovered from the out of normal operating range. zyTransceiverDdmiTxBiasOutOf 1.3.6.1.4.1.890.1.15.3.84.3.10 This trap is sent when the RangeRecovered transmitter laser bias current is recovered from the out of normal operating range. GS2210 Series User’s Guide...
Page 325
1.3.6.1.2.1.80.0.3 This trap is sent when a ping test is completed. traceroute traceRouteTestFailed 1.3.6.1.2.1.81.0.2 This trap is sent when a traceroute test fails. traceRouteTestCompleted 1.3.6.1.2.1.81.0.3 This trap is sent when a traceroute test is completed. GS2210 Series User’s Guide...
Figure 233 SSH Communication Example 38.7.2.1 How SSH works The following table summarizes how a secure connection is established between two remote hosts. GS2210 Series User’s Guide...
Page 327
22. Only one SSH connection is allowed at a time. 38.7.2.3 Requirements for Using SSH You must install an SSH client program on a client computer (Windows or Linux operating system) that is used to connect to the Switch over SSH. GS2210 Series User’s Guide...
If you haven’t changed the default HTTPS port on the Switch, then in your browser enter “https:// Switch IP Address/” as the web site address where “Switch IP Address” is the IP address or domain name of the Switch you wish to access. Internet Explorer Warning Messages Internet Explorer 6 GS2210 Series User’s Guide...
Page 329
Figure 237 Security Certificate Warning (Internet Explorer 7 or 8) After you log in, you will see the red address bar with the message Certificate Error. Click on Certificate Error next to the address bar and click View certificates. GS2210 Series User’s Guide...
Page 330
Mozilla Firefox Warning Messages When you attempt to access the Switch HTTPS server, a This Connection is Unstructed screen may display. If that is the case, click I Understand the Risks and then the Add Exception... button. GS2210 Series User’s Guide...
Page 331
38.7.3.2 The Main Screen After you accept the certificate and enter the login username and password, the Switch main screen Internet Explorer appears. The lock displayed in the bottom right of the browser status bar (in 6 or GS2210 Series User’s Guide...
Page 332
Chapter 38 Access Control Internet Explorer Mozilla Firefox) or next to the address bar (in 7 or 8) denotes a secure connection. Figure 242 Example: Lock Denoting a Secure Connection EXAMPLE GS2210 Series User’s Guide...
39.2 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests. Figure 243 Management > Diagnostic GS2210 Series User’s Guide...
Page 334
Enter a time interval (in minutes) and click Blink to show the actual location of the Switch between several devices in a rack. The default time interval is 30 minutes. Click Stop to have the Switch terminate the blinking locater LED. GS2210 Series User’s Guide...
40.2 Syslog Setup Use this screen to configure the device’s system logging settings. Click Management > Syslog in the navigation panel to display this screen. The syslog feature sends logs to an external syslog server. GS2210 Series User’s Guide...
Click Cancel to begin configuring this screen afresh. 40.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to view the screen as shown next. Use this screen to configure a list of external syslog servers. GS2210 Series User’s Guide...
Page 337
This field displays the severity level of the logs that the device is to send to this syslog server. Delete Select an entry’s Delete check box and click Delete to remove the entry. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
The switches being managed by the cluster manager switch. In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. Figure 246 Clustering Application Example GS2210 Series User’s Guide...
Index column is a hyperlink leading to the cluster member switch’s web configurator (see Figure 249 on page 342). MacAddr This is the cluster member switch’s hardware MAC address. Name This is the cluster member switch’s System Name. GS2210 Series User’s Guide...
41.3 Clustering Management Configuration Use this screen to configure clustering management. Click Management > Cluster Management > Configuration to display the next screen. Figure 248 Management > Cluster Management > Configuration EXAMPLE GS2210 Series User’s Guide...
Page 341
This is the cluster member switch’s model name. Remove Select this checkbox and then click the Remove button to remove a cluster member switch from the cluster. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
Figure 249 Cluster Management: Cluster Member Web Configurator Screen example example 41.4.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. GS2210 Series User’s Guide...
Page 343
410AAHW0.bin member switch. This is the cluster member switch’s firmware name as seen in the cluster fw-00-a0-c5-01-23-46 manager switch. This is the cluster member switch’s configuration file name as seen in the config-00-a0-c5-01-23-46 cluster manager switch. GS2210 Series User’s Guide...
Too much port flooding leads to network congestion. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. GS2210 Series User’s Guide...
42.2 Viewing the MAC Table Use this screen to check whether the MAC address is dynamic or static. Click Management > MAC Table in the navigation panel to display the following screen. Figure 252 Management > MAC Table GS2210 Series User’s Guide...
Page 346
This is the VLAN group to which this frame belongs. Port This is the port where the above MAC address is forwarded. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). GS2210 Series User’s Guide...
MAC address that replied. 43.2 Viewing the ARP Table Use the ARP table to view IP-to-MAC address mapping(s) and remove specific dynamic ARP entries. Click Management > ARP Table in the navigation panel to open the following screen. GS2210 Series User’s Guide...
Page 348
This shows 0 for a static entry. Type This shows whether the IP address is dynamic (learned by the Switch) or static (manually configured in the Basic Setting > IP Setup or IP Application > ARP Setup > Static ARP screen). GS2210 Series User’s Guide...
This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. GS2210 Series User’s Guide...
This chapter shows you how you can copy the settings of one port onto other ports. 45.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. GS2210 Series User’s Guide...
Page 351
Select which port settings (you configured in the Basic Setting menus) should be copied to the destination port(s). Advanced Select which port settings (you configured in the Advanced Application menus) should be Application copied to the destination ports. GS2210 Series User’s Guide...
Page 352
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
This field displays the IPv6 address of the Switch or a neighboring device. Address This field displays the MAC address of the IPv6 interface on which the IPv6 address is configure or the MAC address of the neighboring device. GS2210 Series User’s Guide...
Page 354
• dynamic (D): The IP address to MAC address can be successfully resolved using IPv6 Neighbor Discovery protocol. Is it similar as IPv4 ARP (Address Resolution protocol). • static (S): The interface address is statically configured. GS2210 Series User’s Guide...
Make sure you understand the normal behavior of the LED. See Section 3.3 on page Check the hardware connections. See Section 47.1 on page 355. Inspect your cables for damage. Contact the vendor to replace any damaged cables. GS2210 Series User’s Guide...
Make sure your computer is in the same subnet as the Switch. (If you know that there are routers between your computer and the Switch, skip this step.) Reset the device to its factory defaults, and try to access the Switch with the default IP address. Section 4.6 on page GS2210 Series User’s Guide...
Page 357
The recommended screen resolution is 1024 by 768 pixels. Adjust the value in your computer and then you should see the rest of Advanced Application submenus at the bottom of the navigation panel. There is unauthorized access to my Switch via telnet, HTTP and SSH. GS2210 Series User’s Guide...
Click Save at the top right corner of the web configurator to save the configuration permanently. See also Section 37.5 on page 305 for more information about how to save your configuration. GS2210 Series User’s Guide...
Page 361
• ZyXEL BY • http://www.zyxel.by Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 362
• ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 363
Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ GS2210 Series User’s Guide...
Page 364
Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za GS2210 Series User’s Guide...
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world wide web. GS2210 Series User’s Guide...
Page 366
Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). GS2210 Series User’s Guide...
Page 367
TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. GS2210 Series User’s Guide...
A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 178 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits GS2210 Series User’s Guide...
The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 180 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 GS2210 Series User’s Guide...
Page 370
(beginning with fe80). When the interface is connected to a network with a router and the Switch is set to automatically obtain an IPv6 network prefix from the router for the interface, it generates another address which GS2210 Series User’s Guide...
Page 371
The DHCP relay agent can add the remote identification (remote-ID) option and the interface-ID option to the Relay-Forward DHCPv6 messages. The remote-ID option carries a user-defined string, In IPv6, all network interfaces can be associated with several addresses. GS2210 Series User’s Guide...
Page 372
When the Switch needs to send a packet, it first consults the destination cache to determine the next hop. If there is no matching entry in the destination cache, the Switch uses the prefix list to GS2210 Series User’s Guide...
Page 373
Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. GS2210 Series User’s Guide...
Page 374
To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. GS2210 Series User’s Guide...
This publication is subject to change without notice. Trademarks ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
è composta l’apparecchiatura. Lo smaltimento abusivo del prodotto da parte del detentore comporta l’applicazione delle sanzioni amministrative previste dalla normativa vigente." CE Marking GS2210 Series User’s Guide...
Page 378
Appendix D Legal Information Environmental Product Declaration GS2210 Series User’s Guide...
Cisco Discovery Protocol, see CDP and MAC filter CIST configuring Class of Service (CoS) syslog messages trusted ports classifier 156, 158 and QoS authentication editing setup example Authentication and Authorization, see AAA overview authorization setup 156, 158 privilege levels viewing GS2210 Series User’s Guide...
Page 380
242, 245 error disable recovery configuration Ethernet broadcast address 297, 347 Ethernet port test daylight saving time external authentication server default Ethernet settings DHCP configuration options relay example setup fan speed DHCP relay option 82 GS2210 Series User’s Guide...
Page 381
Green Ethernet IP address Guide IP interface CLI Reference IP setup GVRP 87, 94 and port assignment IP source guard 203, 204 ARP inspection GVRP (GARP VLAN Registration Protocol) 204, 224 DHCP snooping 204, 222 static bindings GS2210 Series User’s Guide...
Page 382
ID information MAC-based VLAN setup 141, 143 maintanence status configuration backup traffic distribution algorithm firmware traffic distribution type restoring configuration trunk group maintenance Link Aggregation Control Protocol (LACP) GS2210 Series User’s Guide...
Page 383
Path MTU Discovery Max Age PHB (Per-Hop Behavior) max age ping, test connection max hops path cost policy port priority and classifier revision level and DiffServ status configuration example overview MTU (Multi-Tenant Unit) rules GS2210 Series User’s Guide...
Page 384
Rapid Spanning Tree Protocol, See RSTP. PPPoE IA rear panel connections trusted ports reboot untrusted ports load configuration priority level reboot system priority, queue assignment Reference Guide, CLI Private VLAN registration private VLAN product GS2210 Series User’s Guide...
Page 385
321, 322, 323, 326 subnet based VLAN Spanning Tree Protocol, See STP. and DHCP VLAN SPQ (Strict Priority Queuing) priority setup encryption methods subnet based VLANs how it works switch lockout implementation switch reset SSH (Secure Shell) switch setup GS2210 Series User’s Guide...
Page 386
ARP inspection VLAN ID DHCP snooping VLAN Trunking Protocol, see VTP PPPoE IA VLAN, protocol based, See protocol based VLAN tunnel protocol attribute, and RADIUS Voice VLAN tutorials DHCP snooping VT100 Type of Service (ToS) GS2210 Series User’s Guide...
Page 387
Index warranty note web configurator getting help home login logout navigation panel weight, queuing Weighted Round Robin Scheduling (WRR) WRR (Weighted Round Robin Scheduling) ZON Neighbor Management ZON Utility ZyNOS (ZyXEL Network Operating System) GS2210 Series User’s Guide...
Need help?
Do you have a question about the GS2210 Series and is the answer not in the manual?
Questions and answers