ZyXEL Communications GS2210 Series User Manual

ZyXEL Communications GS2210 Series User Manual

Intelligent layer 2 gbe switch
Hide thumbs Also See for GS2210 Series:
Table of Contents

Advertisement

Quick Links

GS2210 Series
Intelligent Layer 2 GbE Switch
Version 4.10
Edition 2, 03/2014
Quick Start Guide
User's Guide
Default Login Details
IP Address
User Name
www.zyxel.com
Password
https://192.168.1.1
admin
1234
Copyright © 2014 ZyXEL Communications Corporation

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications GS2210 Series

  • Page 1 GS2210 Series Intelligent Layer 2 GbE Switch Version 4.10 Edition 2, 03/2014 Quick Start Guide User’s Guide Default Login Details IP Address https://192.168.1.1 User Name admin www.zyxel.com Password 1234 Copyright © 2014 ZyXEL Communications Corporation...
  • Page 2 Related Documentation • CLI Reference Guide The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to configure the Switch. Note: It is recommended you use the Web Configurator to configure the Switch. GS2210 Series User’s Guide...
  • Page 3: Table Of Contents

    IP Source Guard ...........................189 Loop Guard ............................212 Layer 2 Protocol Tunneling ........................216 PPPoE ..............................220 Error Disable ............................229 Green Ethernet ............................235 Link Layer Discovery Protocol (LLDP) ....................237 Static Route ............................262 Differentiated Services ........................265 DHCP ..............................269 ARP Setup ............................283 GS2210 Series User’s Guide...
  • Page 4 Contents Overview Maintenance ............................287 Access Control ............................296 Diagnostic .............................318 Syslog ..............................320 Cluster Management ..........................323 MAC Table .............................329 ARP Table .............................332 Path MTU Table ............................334 Configure Clone ............................335 Neighbor Table ............................338 Troubleshooting ............................340 GS2210 Series User’s Guide...
  • Page 5: Table Of Contents

    3.1.1 Gigabit Ethernet Ports ......................27 3.1.2 Mini-GBIC Slots ........................28 3.1.3 LED Mode (only available for GS2210-48HP) .................30 3.2 Rear Panel ............................30 3.2.1 Console Port ..........................30 3.2.2 Power Connector ........................30 3.3 LEDs ...............................31 Part II: Technical Reference................32 GS2210 Series User’s Guide...
  • Page 6 7.1.1 What You Can Do ........................55 7.2 Port Status Summary ........................55 7.2.1 Status: Port Details ......................56 Chapter 8 Basic Setting ............................60 8.1 Overview ............................60 8.1.1 What You Can Do ........................60 8.2 System Information ........................60 8.3 General Setup ..........................62 GS2210 Series User’s Guide...
  • Page 7 9.7.1 Configure a Port-based VLAN ....................98 9.8 Technical Reference ........................101 9.8.1 Create an IP-based VLAN Example ..................101 Chapter 10 Static MAC Forward Setup.......................103 10.1 Overview ............................103 10.1.1 What You Can Do ........................103 10.2 Configuring Static MAC Forwarding ..................103 GS2210 Series User’s Guide...
  • Page 8 Chapter 14 Bandwidth Control..........................129 14.1 Overview ............................129 14.1.1 What You Can Do ........................129 14.2 Bandwidth Control Setup ......................129 Chapter 15 Broadcast Storm Control .........................131 15.1 Broadcast Storm Control Overview ....................131 15.1.1 What You Can Do ........................131 GS2210 Series User’s Guide...
  • Page 9 19.2 Port Security Setup ........................149 Chapter 20 Classifier............................152 20.1 Overview ............................152 20.1.1 What You Can Do ........................152 20.1.2 What You Need to Know ......................152 20.2 Configuring the Classifier ......................152 20.2.1 Viewing and Editing Classifier Configuration ..............154 20.3 Classifier Example ........................156 GS2210 Series User’s Guide...
  • Page 10 24.2 AAA Screens ..........................179 24.3 RADIUS Server Setup .......................179 24.4 TACACS+ Server Setup ......................181 24.5 AAA Setup ............................183 24.6 Technical Reference ........................186 24.6.1 Vendor Specific Attribute .....................186 24.6.2 Supported RADIUS Attributes .....................187 24.6.3 Attributes Used for Authentication ..................188 GS2210 Series User’s Guide...
  • Page 11 27.2 Configuring Layer 2 Protocol Tunneling ..................217 Chapter 28 PPPoE ..............................220 28.1 PPPoE Intermediate Agent Overview ...................220 28.1.1 What You Can Do ........................220 28.1.2 What You Need to Know ......................220 28.2 The PPPoE Screen ........................222 28.3 PPPoE Intermediate Agent ......................223 GS2210 Series User’s Guide...
  • Page 12 31.8 LLDP-MED Network Policy ......................257 31.9 LLDP-MED Location ........................258 Chapter 32 Static Route ............................262 32.1 Static Route Overview ........................262 32.1.1 What You Can Do ........................262 32.2 Static Routing ..........................263 32.3 Configuring Static Routing ......................263 Chapter 33 Differentiated Services........................265 GS2210 Series User’s Guide...
  • Page 13 36.1 Overview ............................287 36.1.1 What You Can Do ........................287 36.2 The Maintenance Screen ......................287 36.2.1 Load Factory Default ......................288 36.2.2 Save Configuration ......................288 36.2.3 Reboot System ........................289 36.3 Firmware Upgrade ........................289 36.4 Restore a Configuration File ......................291 GS2210 Series User’s Guide...
  • Page 14 39.1.1 What You Can Do ........................320 39.2 Syslog Setup ..........................320 39.3 Syslog Server Setup ........................321 Chapter 40 Cluster Management ........................323 40.1 Cluster Management Overview ....................323 40.1.1 What You Can Do ........................324 40.2 Cluster Management Status ......................324 GS2210 Series User’s Guide...
  • Page 15 45.2 Viewing the IPv6 Neighbor Table ....................338 Chapter 46 Troubleshooting..........................340 46.1 Power, Hardware Connections, and LEDs ..................340 46.2 Switch Access and Login ......................341 46.3 Switch Configuration ........................343 Appendix A Customer Support ......................344 Appendix B Common Services ......................350 Appendix C IPv6 ..........................353 GS2210 Series User’s Guide...
  • Page 16 Table of Contents Appendix D Legal Information ......................361 Index ..............................364 GS2210 Series User’s Guide...
  • Page 17: User's Guide

    User’s Guide...
  • Page 19: Getting To Know Your Switch

    H A PT ER Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The GS2210 Series consist of the four following models: • GS2210-24 • GS2210-24HP • GS2210-48 • GS2210-48HP Referring to PoE model(s) in this User's Guide only applies for GS2210-24HP and GS2210-48HP.
  • Page 20: Backbone Application

    Switch. You can provide a super-fast uplink connection by using a Gigabit Ethernet/mini-GBIC port on the Switch. Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location. GS2210 Series User’s Guide...
  • Page 21: High Performance Switching Example

    With VLAN, a station cannot directly talk to or hear from stations that are not in the same group(s) unless such traffic first goes through a router. For more information on VLANs, refer to Chapter 9 on page GS2210 Series User’s Guide...
  • Page 22: Ways To Manage The Switch

    Do the following things regularly to make the Switch more secure and to manage the Switch more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. GS2210 Series User’s Guide...
  • Page 23 Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. GS2210 Series User’s Guide...
  • Page 24: Hardware Installation And Connection

    • Four M5 flat head screws and a #2 Philips screwdriver. Failure to use the proper screws may damage the unit. 2.3.1.1 Precautions • Make sure the rack will safely support the combined weight of all the equipment it contains. GS2210 Series User’s Guide...
  • Page 25: Attaching The Mounting Brackets To The Switch

    Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the rack. GS2210 Series User’s Guide...
  • Page 26 Figure 6 Mounting the Switch on a Rack Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. Repeat steps to attach the second mounting bracket on the other side of the rack. GS2210 Series User’s Guide...
  • Page 27: Hardware Panels

    The Switch uses up to one connection for each mini-GBIC and 1000Base-T Ethernet pair. The mini-GBIC slots have priority over the Gigabit ports. This means that if a mini-GBIC slot and the corresponding GbE port are connected at the same time, the GbE port will be disabled. GS2210 Series User’s Guide...
  • Page 28: Mini-Gbic Slots

    3.1.2.1 Transceiver Installation Use the following steps to install a mini-GBIC transceiver (SFP module). Insert the transceiver into the slot with the exposed section of PCB board facing down. Press the transceiver firmly until it clicks into place. GS2210 Series User’s Guide...
  • Page 29 Remove the fiber optic cables from the transceiver. Open the transceiver’s latch (latch styles vary). Pull the transceiver out of the slot. Figure 13 Removing the Fiber Optic Cables Figure 14 Opening the Transceiver’s Latch Example Figure 15 Transceiver Removal Example GS2210 Series User’s Guide...
  • Page 30: Led Mode (Only Available For Gs2210-48Hp)

    Connect the male 9-pin end of the console cable to the console port of the Switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer. 3.2.2 Power Connector Note: Make sure you are using the correct power source as shown on the panel. GS2210 Series User’s Guide...
  • Page 31: Leds

    The system activity is transmitting/receiving data 1000 Mbps. Amber The uplink port is linking at 100 Mbps. Blinking The system activity is transmitting/receiving data 100 Mbps. There is no link or port, the uplink port is shut down. GS2210 Series User’s Guide...
  • Page 32: Technical Reference

    Technical Reference...
  • Page 34: The Web Configurator

    The login screen appears. The default username is admin and associated default password is 1234. The date and time display as shown if you have not configured a time server nor manually entered a time and date in the General Setup screen. GS2210 Series User’s Guide...
  • Page 35: The Status Screen

    A - Click the menu items to open submenu links, and then click on a submenu link to open the screen in the main window. B, C, D, E - These are quick links which allow you to perform certain tasks no matter which screen you are currently working in. GS2210 Series User’s Guide...
  • Page 36 This link takes you to a screen where you can configure general identification information about the Switch. Switch Setup This link takes you to a screen where you can set up global Switch parameters such as VLAN type, GARP and priority queues. GS2210 Series User’s Guide...
  • Page 37 Authentication Dial-In User Service) or TACACS+ (Terminal Access Controller Access- Control System Plus). IP Source Guard This link takes you to screens where you can configure filtering of unauthorized DHCP and ARP packets in your network. GS2210 Series User’s Guide...
  • Page 38: Change Your Password

    MAC, status, type. 4.3.1 Change Your Password After you log in for the first time, it is recommended you change the default administrator password. Click Management > Access Control > Logins to display the next screen. GS2210 Series User’s Guide...
  • Page 39: Saving Your Configuration

    Delete the management VLAN (default is VLAN 1). Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the management port of the Switch. Filter all traffic to the CPU port. Disable all ports. GS2210 Series User’s Guide...
  • Page 40: Resetting The Switch

    4.7 Logging Out of the Web Configurator Click Logout in a screen to exit the web configurator. You have to log in with your password again after you log out. This is recommended after you finish a management session for security reasons. GS2210 Series User’s Guide...
  • Page 41: Help

    Figure 23 Web Configurator: Logout Screen 4.8 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. GS2210 Series User’s Guide...
  • Page 42: Initial Setup Example

    In this example, you want to configure port 1 as a member of VLAN 2. Figure 24 Initial Setup Network Example: VLAN Click Advanced Application > VLAN in the navigation panel and click the Static VLAN link. GS2210 Series User’s Guide...
  • Page 43: Setting Port Vid

    VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on that port get sent to VLAN 2. GS2210 Series User’s Guide...
  • Page 44: Configuring Switch Management Ip Address

    Connect your computer to any Ethernet port on the Switch. Make sure your computer is in the same subnet as the Switch. Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurator. See Section 4.2 on page 34 for more information. GS2210 Series User’s Guide...
  • Page 45 This is the same as the VLAN ID you configure in the Static VLAN screen. Click Add to save your changes back to the run- time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. GS2210 Series User’s Guide...
  • Page 46: Tutorials

    1 and 100 DHCP Client (B) 1 and 100 DHCP Client (C) 1 and 100 Access the Switch through http://192.168.1.1 by default. Log into the Switch by entering the username (default: admin) and password (default: 1234). GS2210 Series User’s Guide...
  • Page 47 Go to Advanced Application > VLAN > VLAN Port Setting, and set the PVID of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. Figure 29 Tutorial: Tag Untagged Frames GS2210 Series User’s Guide...
  • Page 48 5 because the DHCP server is connected to port 5. Keep ports 6 and 7 Untrusted because they are connected to DHCP clients. Click Apply. Tutorial: Set the DHCP Server Port to Trusted Figure 31 GS2210 Series User’s Guide...
  • Page 49: How To Use Dhcp Relay On The Switch

    This tutorial describes how to configure your Switch to forward DHCP client requests to a specific DHCP server. The DHCP server can then assign a specific IP address based on the information in the DHCP requests. GS2210 Series User’s Guide...
  • Page 50: Dhcp Relay Tutorial Introduction

    Follow the steps below to configure port 2 as a member of VLAN 102. Access the web configurator through the Switch’s management port. Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click Apply to save the settings to the run-time memory. GS2210 Series User’s Guide...
  • Page 51 Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending. Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. GS2210 Series User’s Guide...
  • Page 52 Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory. GS2210 Series User’s Guide...
  • Page 53: Configuring Dhcp Relay

    Enter the DHCP server’s IP address (192.168.2.3 in this example) in the Remote DHCP Server 1 field. Select default1 or default2 in the Option 82 Profile field. Click Apply to save your changes back to the run-time memory. GS2210 Series User’s Guide...
  • Page 54: Troubleshooting

    You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. You clicked the Save link on the Switch to have your settings take effect. GS2210 Series User’s Guide...
  • Page 55: System Status And Port Status

    56) to display individual port statistics. 7.2 Port Status Summary To view the port statistics, click Status in all web configurator screens to display the Status screen as shown next. Figure 40 Status (for PoE model(s)) GS2210 Series User’s Guide...
  • Page 56: Status: Port Details

    7.2.1 Status: Port Details Click a number in the Port column in the Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. GS2210 Series User’s Guide...
  • Page 57 This field shows if LACP is enabled on this port or not. TxPkts This field shows the number of transmitted frames on this port RxPkts This field shows the number of received frames on this port GS2210 Series User’s Guide...
  • Page 58 This field shows the number of packets (including bad packets) received that were between 256 and 511 octets in length. 512-1023 This field shows the number of packets (including bad packets) received that were between 512 and 1023 octets in length. GS2210 Series User’s Guide...
  • Page 59 1024 and 1518 octets in length. Giant This field shows the number of packets (including bad packets) received that were between 1519 octets and the maximum frame size. The maximum frame size varies depending on your switch model. GS2210 Series User’s Guide...
  • Page 60: Basic Setting

    (Section 8.8 on page 70) to view IPv6 status and IPv6 configuration. 8.2 System Information In the navigation panel, click Basic Setting > System Info to display the screen as shown. You can check the firmware version number. GS2210 Series User’s Guide...
  • Page 61 This field displays the minimum temperature measured at this sensor. Threshold This field displays the upper temperature limit at this sensor. Status This field displays Normal for temperatures below the threshold and Error for those above. GS2210 Series User’s Guide...
  • Page 62: General Setup

    Use this screen to configure general settings such as the system name and time. Click Basic Setting > General Setup in the navigation panel to display the screen as shown. Figure 43 Basic Setting > General Setup GS2210 Series User’s Guide...
  • Page 63 (1 A.M. GMT or UTC). So in the European Union you would select Last, Sunday, March and the last field depends on your time zone. In Germany for instance, you would select 2:00 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). GS2210 Series User’s Guide...
  • Page 64: Introduction To Vlans

    Click Basic Setting > Switch Setup in the navigation panel to display the screen as shown. The VLAN setup screens change depending on whether you choose 802.1Q or Port Based in the VLAN Type field in this screen. Refer to Chapter 9 on page 86 for more information on VLAN. GS2210 Series User’s Guide...
  • Page 65 Leave All Timer Leave All Timer sets the duration of the Leave All Period timer for GVRP in milliseconds. Each port has a single Leave All Period timer. Leave All Timer must be larger than Leave Timer. GS2210 Series User’s Guide...
  • Page 66: Ip Setup

    The factory default subnet mask is 255.255.255.0. You can configure up to 64 IP addresses which are used to access and manage the Switch from the ports belonging to the pre-defined VLAN(s). Note: You must configure a VLAN first. GS2210 Series User’s Guide...
  • Page 67 IP Address Enter the IP address of your Switch in dotted decimal notation for example 192.168.1.1. IP Subnet Mask Enter the IP subnet mask of your Switch in dotted decimal notation for example 255.255.255.0. GS2210 Series User’s Guide...
  • Page 68: Port Setup

    Click Cancel to clear the selected check boxes in the Delete column. 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the configuration screen. GS2210 Series User’s Guide...
  • Page 69 GS2210 Series User’s Guide...
  • Page 70: Poe Status

    You can also set priorities so that the Switch is able to reserve and allocate power to certain PDs. Note: The POE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. GS2210 Series User’s Guide...
  • Page 71 This field shows which ports can receive power from the Switch. You can set this in Section 8.8.1 on page • Disable - The PD connected to this port cannot get power supply. • Enable - The PD connected to this port can receive power. GS2210 Series User’s Guide...
  • Page 72: Poe Setup

    Use this screen to set the priority levels for the Switch in distributing power to PDs. Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen opens. Figure 49 Basic Setting > PoE Setup GS2210 Series User’s Guide...
  • Page 73: Interface Setup

    Use this screen to set IPv6 interfaces on which you can configure an IPv6 address to access and manage the Switch. Click Basic Setting > Interface Setup in the navigation panel to display the configuration screen. GS2210 Series User’s Guide...
  • Page 74: Ipv6

    Click Cancel to clear the Delete check boxes. 8.10 IPv6 Use this screen to view the IPv6 interface status and configure Switch’s management IPv6 addresses. Click Basic Setting > IPv6 in the navigation panel to display the IPv6 status screen as shown next. GS2210 Series User’s Guide...
  • Page 75: Ipv6 Interface Status

    8.10.1 IPv6 Interface Status Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the Basic Setting > IPv6 screen. The following screen opens. GS2210 Series User’s Guide...
  • Page 76 This field displays the Switch’s link-local IP address and prefix generated by the interface. It Address also shows whether the IP address is preferred, which means it is a valid address and can be used as a sender or receiver address. GS2210 Series User’s Guide...
  • Page 77 This field displays the address record when the Switch queries the DNS server to resolve domain names. Restart Click Click Here to send a new DHCP request to the DHCPv6 server and update the IPv6 DHCPv6 Client address and DNS information for this interface. GS2210 Series User’s Guide...
  • Page 78: Ipv6 Configuration

    Click the link to go to a screen where you can configure the Switch DHCP settings. Setup 8.10.3 IPv6 Global Setup Use this screen to configure the global IPv6 settings. Click the link next to IPv6 Global Setup in the IPv6 Configuration screen to display the screen as shown next. GS2210 Series User’s Guide...
  • Page 79: Ipv6 Interface Setup

    Use this screen to turn on or off an IPv6 interface and enable stateless autoconfiguration on it. Click the link next to IPv6 Interface Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 55 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Interface Setup GS2210 Series User’s Guide...
  • Page 80: Ipv6 Link-Local Address Setup

    Manually configure a static IPv6 link-local address for the interface. Address Default Set the default gateway IPv6 address for the interface. When an interface cannot find a Gateway routing information for a frame’s destination, it forwards the packet to the default gateway. GS2210 Series User’s Guide...
  • Page 81: Ipv6 Global Address Setup

    Cancel Click Cancel to begin configuring this screen afresh. Clear Click Clear to reset the fields to the factory defaults. Index This is the interface index number. Click on an index number to change the settings. GS2210 Series User’s Guide...
  • Page 82: Ipv6 Neighbor Discovery Setup

    Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. GS2210 Series User’s Guide...
  • Page 83: Ipv6 Neighbor Setup

    To have IPv6 function properly, you should configure a static VLAN with the same ID number in the Advanced Application > VLAN screens. Neighbor Specify the IPv6 address of the neighboring device which can be reached through the Address interface. GS2210 Series User’s Guide...
  • Page 84: Dhcpv6 Client Setup

    Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Click the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 60 Basic Setting > IPv6 > IPv6 Configuration > DHCPv6 Client Setup GS2210 Series User’s Guide...
  • Page 85 This field displays whether the Switch obtains a list of domain names from the DHCP server. Information This field displays the time interval (in seconds) at which the Switch exchanges other configuration information with a DHCPv6 server again. Refresh Minimum GS2210 Series User’s Guide...
  • Page 86: Vlan

    The remaining twelve bits define the VLAN ID, giving a possible maximum number of 4,096 VLANs. Note that user priority and VLAN ID are independent of each other. A frame with VID (VLAN Identifier) of null (0) is called a priority frame, meaning that only the priority GS2210 Series User’s Guide...
  • Page 87 Please refer to the following table for common IEEE 802.1Q VLAN terminology. Table 27 IEEE 802.1Q VLAN Terminology VLAN PARAMETER TERM DESCRIPTION VLAN Type Permanent VLAN This is a static VLAN created manually. Dynamic VLAN This is a VLAN configured by a GVRP registration/deregistration process. GS2210 Series User’s Guide...
  • Page 88: Port Vlan Trunking

    1 and 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking port(s). Figure 61 Port VLAN Trunking 9.1.2.3 Select the VLAN Type Select a VLAN type in the Basic Setting > Switch Setup screen. Figure 62 Switch Setup > Select VLAN Type GS2210 Series User’s Guide...
  • Page 89: Static Vlan

    This is the VLAN identification number that was configured in the Static VLAN screen. Elapsed Time This field shows how long it has been since a normal VLAN was registered or a static VLAN was set up. GS2210 Series User’s Guide...
  • Page 90: Vlan Details

    9.3 Configure a Static VLAN Use this screen to configure and view 802.1Q VLAN parameters for the Switch. To configure a static VLAN, click Static VLAN in the VLAN Status screen to display the screen as shown next. GS2210 Series User’s Guide...
  • Page 91 Select Fixed for the port to be a permanent member of this VLAN group. Select Forbidden if you want to prohibit the port from joining this VLAN group. Tagging Select TX Tagging if you want the port to tag all outgoing frames transmitted with this VLAN Group ID. GS2210 Series User’s Guide...
  • Page 92: Configure Vlan Port Settings

    Use the VLAN Port Setting screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click the VLAN Port Setting link in the VLAN Status screen. Figure 66 Advanced Application > VLAN > VLAN Port Setting GS2210 Series User’s Guide...
  • Page 93: Subnet Based Vlans

    IP subnet. For example, an ISP (Internet Services Provider) may divide different types of services it provides to customers into different IP subnets. Traffic for voice services is designated for IP subnet GS2210 Series User’s Guide...
  • Page 94: Configuring Subnet Based Vlan

    Click Subnet Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. Note: Subnet based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. GS2210 Series User’s Guide...
  • Page 95 Cancel Click Cancel to begin configuring this screen afresh. Index This is the index number identifying this subnet based VLAN. Click on any of these numbers to edit an existing subnet based VLAN. GS2210 Series User’s Guide...
  • Page 96: Protocol Based Vlans

    C. Figure 69 Protocol Based VLAN Application Example 9.6.1 Configuring Protocol Based VLAN Click Protocol Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. GS2210 Series User’s Guide...
  • Page 97 This field shows which port belongs to this protocol based VLAN. Name This field shows the name the protocol based VLAN. Ethernet Type This field shows which Ethernet protocol is part of this protocol based VLAN. GS2210 Series User’s Guide...
  • Page 98: Port-Based Vlan Setup

    9.7.1 Configure a Port-based VLAN Select Port Based as the VLAN Type in the Basic Setting > Switch Setup screen and then click Advanced Application > VLAN from the navigation panel to display the next screen. GS2210 Series User’s Guide...
  • Page 99 Chapter 9 VLAN Figure 71 Port Based VLAN Setup (All Connected) GS2210 Series User’s Guide...
  • Page 100 Chapter 9 VLAN Figure 72 Port Based VLAN Setup (Port Isolation) GS2210 Series User’s Guide...
  • Page 101: Technical Reference

    Select the protocol. Leave the default value IP. Type the VLAN ID of an existing VLAN. In our example we already created a static VLAN with an ID of 5. Type 5. Leave the priority set to 0 and click Add. GS2210 Series User’s Guide...
  • Page 102 To add more ports to this protocol based VLAN. Click the index number of the protocol based VLAN entry. Click 1 Change the value in the Port field to the next port you want to add. Click Add. GS2210 Series User’s Guide...
  • Page 103: Static Mac Forward Setup

    Chapter 19 on page 149 for more information on port security. Click Advanced Application > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. Figure 74 Advanced Application > Static MAC Forwarding GS2210 Series User’s Guide...
  • Page 104 This field displays the port where the MAC address shown in the next field will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS2210 Series User’s Guide...
  • Page 105: Static Multicast Forward Setup

    VLAN group. Figure shows frames being forwarded to devices connected to port 3. Figure 77 shows frames being forwarded to ports 2 and 3 within VLAN group 4. Figure 75 No Static Multicast Forwarding GS2210 Series User’s Guide...
  • Page 106: Configuring Static Multicast Forwarding

    Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). Click Advanced Application > Static Multicast Forwarding to display the configuration screen as shown. Figure 78 Advanced Application > Static Multicast Forwarding GS2210 Series User’s Guide...
  • Page 107 This field displays the port(s) within a identified VLAN group to which frames containing the specified multicast MAC address will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS2210 Series User’s Guide...
  • Page 108: Filtering

    12.2 Configure a Filtering Rule Use this screen to create rules for traffic going through the Switch. Click Advanced Application > Filtering in the navigation panel to display the screen as shown next. Figure 79 Advanced Application > Filtering GS2210 Series User’s Guide...
  • Page 109 This field displays the VLAN group identification number. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. GS2210 Series User’s Guide...
  • Page 110: Spanning Tree Protocol

    (R)STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a switch to interact with other (R)STP -compliant switches in your network to ensure that only one path exists between any two stations on the network. GS2210 Series User’s Guide...
  • Page 111 Protocol Data Units) transmitted from the root bridge. If a bridge does not get a Hello BPDU after a predefined interval (Max Age), the bridge assumes that the link to the root bridge is down. This bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a valid network topology. GS2210 Series User’s Guide...
  • Page 112: Stp Port States

    Figure 80 MRSTP Network Example Multiple STP Multiple Spanning Tree Protocol (IEEE 802.1s) is backward compatible with STP/RSTP and addresses the limitations of existing spanning tree protocols (STP and RSTP) in networks to include the following features: GS2210 Series User’s Guide...
  • Page 113: Spanning Tree Protocol Status Screen

    Use the Spanning Tree Configuration screen to activate one of the STP modes on the Switch. Click Configuration in the Advanced Application > Spanning Tree Protocol. Figure 82 Advanced Application > Spanning Tree Protocol > Configuration GS2210 Series User’s Guide...
  • Page 114: Configure Rapid Spanning Tree Protocol

    Use this screen to configure RSTP settings, see Section 13.1 on page 110 for more information on RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 83 Advanced Application > Spanning Tree Protocol > RSTP GS2210 Series User’s Guide...
  • Page 115 Priority decides which port should be disabled when more than one port forms a loop in a switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. GS2210 Series User’s Guide...
  • Page 116: Rapid Spanning Tree Protocol Status

    (second) message. The root bridge determines Hello Time, Max Age and Forwarding Delay. Max Age (second) This is the maximum time (in seconds) the Switch can wait without receiving a configuration message before attempting to reconfigure. GS2210 Series User’s Guide...
  • Page 117: Configure Multiple Rapid Spanning Tree Protocol

    13.6 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click MRSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 13.1 on page 110 for more information on MRSTP. Figure 85 Advanced Application > Spanning Tree Protocol > MRSTP GS2210 Series User’s Guide...
  • Page 118 Priority decides which port should be disabled when more than one port forms a loop in a switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. GS2210 Series User’s Guide...
  • Page 119: Multiple Rapid Spanning Tree Protocol Status

    This ID is the same for Root and Our Bridge if the Switch is the root switch. Hello Time This is the time interval (in seconds) at which the root switch transmits a configuration (second) message. The root bridge determines Hello Time, Max Age and Forwarding Delay. GS2210 Series User’s Guide...
  • Page 120: Configure Multiple Spanning Tree Protocol

    This is the time since the spanning tree was last reconfigured. Change 13.8 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen. Section on page 112 for more information on MSTP. GS2210 Series User’s Guide...
  • Page 121 Select this to activate MSTP on the Switch. Clear this to disable MSTP on the Switch. Note: You must also activate Multiple Spanning Tree in the Advanced Application > Spanning Tree Protocol > Configuration screen to enable MSTP on the Switch. GS2210 Series User’s Guide...
  • Page 122 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. GS2210 Series User’s Guide...
  • Page 123: Multiple Spanning Tree Port Configuration

    Click Advanced Application > Spanning Tree Protocol > MSTP > Port in the navigation panel to display the status screen as shown next. See Section on page 112 for more information on MSTP. Figure 88 Advanced Application > Spanning Tree Protocol > MSTP > Port GS2210 Series User’s Guide...
  • Page 124: Multiple Spanning Tree Protocol Status

    Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section on page 112 for more information on MSTP. Note: This screen is only available after you activate MSTP on the Switch. GS2210 Series User’s Guide...
  • Page 125 This is the path cost from the root port on this Switch to the root switch. Port ID This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. GS2210 Series User’s Guide...
  • Page 126: Technical Reference

    The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP or RSTP, the link for VLAN 2 will be blocked as STP and RSTP allow only one link in the network and block the redundant link. GS2210 Series User’s Guide...
  • Page 127: Mst Region

    Devices that belong to the same MST region are configured to have the same MSTP configuration identification settings. These include the following parameters: • Name of the MST region • Revision level as the unique number for the MST region GS2210 Series User’s Guide...
  • Page 128: Mst Instance

    MST instance are members of the CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. Figure 93 MSTP and Legacy RSTP Network Example GS2210 Series User’s Guide...
  • Page 129: Bandwidth Control

    (Section 14.2 on page 129) to limit the bandwidth for traffic going through the Switch. 14.2 Bandwidth Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. GS2210 Series User’s Guide...
  • Page 130 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS2210 Series User’s Guide...
  • Page 131: Broadcast Storm Control

    (DLF) packets the Switch receives per second on the ports. 15.2 Broadcast Storm Control Setup Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. GS2210 Series User’s Guide...
  • Page 132 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS2210 Series User’s Guide...
  • Page 133: Mirroring

    Click Advanced Application > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 96 Advanced Application > Mirroring GS2210 Series User’s Guide...
  • Page 134 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS2210 Series User’s Guide...
  • Page 135: Link Aggregation

    When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that GS2210 Series User’s Guide...
  • Page 136: Link Aggregation Status

    Section 17.1 on page 135 for more information. Figure 97 Advanced Application > Link Aggregation Status Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. GS2210 Series User’s Guide...
  • Page 137: Link Aggregation Setting

    LACP - if the ports are configured to join a trunk group via LACP. 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 135 for more information on link aggregation. GS2210 Series User’s Guide...
  • Page 138 This is the only screen you need to configure to enable static link aggregation. Aggregation Setting Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this option to activate a trunk group. GS2210 Series User’s Guide...
  • Page 139: Link Aggregation Control Protocol

    Click Cancel to begin configuring this screen afresh. 17.4 Link Aggregation Control Protocol Click Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Section on page 135 for more information on dynamic link aggregation. GS2210 Series User’s Guide...
  • Page 140 The LACP “server” controls the operation of LACP setup. Enter a number to set the priority of an active port using Link Aggregation Control Protocol (LACP). The smaller the number, the higher the priority level. Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. GS2210 Series User’s Guide...
  • Page 141: Technical Reference

    Aggregation Setting. In this screen activate trunk group T1, select the traffic distribution algorithm used by this group and select the ports that should belong to this group as shown in the figure below. Click Apply when you are done. GS2210 Series User’s Guide...
  • Page 142 Chapter 17 Link Aggregation Figure 101 Trunking Example - Configuration Screen Your trunk group 1 (T1) configuration is now complete. GS2210 Series User’s Guide...
  • Page 143: Port Authentication

    At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. GS2210 Series User’s Guide...
  • Page 144: Port Authentication Configuration

    Figure 103 Advanced Application > Port Authentication 18.3 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. In the Port Authentication screen click 802.1x to display the configuration screen as shown. GS2210 Series User’s Guide...
  • Page 145 Specify the number of seconds the Switch waits for client’s response before re-sending an identity request to the client. Supp-Timeout Specify the number of seconds the Switch waits for client’s response to a challenge secs request before sending another request. GS2210 Series User’s Guide...
  • Page 146: Guest Vlan

    Figure 105 Guest VLAN Example VLAN 100 VLAN 102 Internet Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication > 802.1x screen click Guest Vlan to display the configuration screen as shown. GS2210 Series User’s Guide...
  • Page 147 Switch. You must also enable IEEE 802.1x authentication on the Switch and the associated ports. Enter the number that identifies the guest VLAN. Make sure this is a VLAN recognized in your network. GS2210 Series User’s Guide...
  • Page 148 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 149: Port Security

    149) to enable port security and disable MAC address learning. You can also enable the port security feature on a port. 19.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
  • Page 150 Clear this check box to disable the port security feature. The Switch forwards all packets on this port. Address MAC address learning reduces outgoing broadcast traffic. For MAC address learning to occur Learning on a port, the port itself must be active with address learning enabled. GS2210 Series User’s Guide...
  • Page 151 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 152: Classifier

    (or policy) to act upon the traffic that matches the rules. To configure policy rules, refer to Chapter 21 on page 157. Click Advanced Application > Classifier in the navigation panel to display the configuration screen as shown. GS2210 Series User’s Guide...
  • Page 153 Select Any to apply the rule to all MAC addresses. Address To specify a destination, select the second choice and type a MAC address in valid MAC address format (six hexadecimal character pairs). Layer 3 Specify the fields below to configure a layer 3 classifier. GS2210 Series User’s Guide...
  • Page 154: Viewing And Editing Classifier Configuration

    Classifier screen. To change the settings of a rule, click a number in the Index field. Note: When two rules conflict with each other, a higher layer rule has priority over lower layer rule. GS2210 Series User’s Guide...
  • Page 155 In the Internet Protocol there is a field, called “Protocol”, to identify the next level protocol. The following table shows some common protocol types and the corresponding protocol number. Refer http://www.iana.org/assignments/protocol-numbers for a complete list. Table 62 Common IP Protocol Types and Protocol Numbers PROTOCOL TYPE PROTOCOL NUMBER ICMP L2TP GS2210 Series User’s Guide...
  • Page 156: Classifier Example

    The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. After you have configured a classifier, you can configure a policy (in the Policy screen) to define action(s) on the classified traffic flow. Figure 110 Classifier: Example GS2210 Series User’s Guide...
  • Page 157: Policy Rule

    21.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to Section 20.2 on page 152 more information. Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
  • Page 158 Type the number of an outgoing port. Priority Specify a priority level. Rate Limit You can configure the desired bandwidth available to a traffic flow. Traffic that exceeds the maximum bandwidth allocated (in cases where the network is congested) is dropped. GS2210 Series User’s Guide...
  • Page 159 Click Delete to remove the selected entry from the summary table. Delete Click Cancel to clear the Delete check boxes. Cancel This field displays the policy index number. Click an index number to edit the policy. GS2210 Series User’s Guide...
  • Page 160: Viewing And Editing Policy Configuration

    The figure below shows an example Policy screen where you configure a policy to limit bandwidth on a traffic flow classified using the Example classifier (refer to Section 20.3 on page 156). Figure 113 Policy Example GS2210 Series User’s Guide...
  • Page 161: Queuing Method

    A queue is a given an amount of bandwidth irrespective of the incoming traffic on that port. This queue then moves to the back of the list. The next queue is given GS2210 Series User’s Guide...
  • Page 162: Configuring Queuing

    Use this screen to set priorities for the queues of the Switch. This distributes bandwidth across the different traffic queues. Click Advanced Application > Queuing Method in the navigation panel. Figure 114 Advanced Application > Queuing Method GS2210 Series User’s Guide...
  • Page 163 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 164: Multicast

    IP multicast hosts to learn the IP multicast group membership. It checks IGMP packets passing through it, picks out the group registration information, and configures multicasting accordingly. IGMP snooping allows the Switch to learn multicast groups without you having to manually configure them. GS2210 Series User’s Guide...
  • Page 165 VLAN while a receiver port can only receive multicast traffic. Once configured, the Switch maintains a forwarding table that matches the multicast stream to the associated multicast group. MVR Modes You can set your Switch to operate in either dynamic or compatible mode. GS2210 Series User’s Guide...
  • Page 166: Multicast Setup

    23.2 Multicast Setup Use this screen to configure IGMP for IPv4 or MLD for IPv6 and set up multicast VLANs. Click Advanced Application > Multicast in the navigation panel. Figure 117 Advanced Application > Multicast Setup GS2210 Series User’s Guide...
  • Page 167: Ipv4 Multicast Status

    This field displays IP multicast group addresses. 23.3.1 IGMP Snooping Click the IGMP Snooping link in the Advanced Application > Multicast > IPv4 Multicast screen to display the screen as shown. See Section 23.1 on page 164 for more information on multicasting. GS2210 Series User’s Guide...
  • Page 168 01:00:0C:CC:CC:CC and 01:00:0C:CC:CC:CD, are also included in this group. Specify the action to perform when the Switch receives a frame with a reserved multicast address. Select Drop to discard the frame(s). Select Flooding to send the frame(s) to all ports. GS2210 Series User’s Guide...
  • Page 169 Select the name of the IGMP filtering profile to use for this port. Otherwise, select Profile Default to prohibit the port from joining any multicast group. You can create IGMP filtering profiles in the Multicast > IPv4 Multicast > IGMP Snooping > IGMP Filtering Profile screen. GS2210 Series User’s Guide...
  • Page 170: Igmp Snooping Vlan

    IGMP Snooping link and then the IGMP Snooping VLAN link to display the screen as shown. See Section on page 165 for more information on IGMP Snooping VLAN. Figure 120 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping > IGMP Snooping VLAN GS2210 Series User’s Guide...
  • Page 171: Igmp Filtering Profile

    A profile can be assigned to multiple ports. Click Advanced Application > Multicast > IPv4 Multicast in the navigation panel. Click the IGMP Snooping link and then the IGMP Filtering Profile link to display the screen as shown. GS2210 Series User’s Guide...
  • Page 172 To delete a rule(s) from a profile, select the rule(s) that you want to remove in the Delete Rule column, then click the Delete button. Cancel Click Cancel to clear the Delete Profile/Delete Rule check boxes. GS2210 Series User’s Guide...
  • Page 173: General Mvr Configuration

    Enter the VLAN ID (1 to 4094) of the multicast VLAN. 802.1p Priority Select a priority level (0-7) with which the Switch replaces the priority in outgoing IGMP or MLD control packets (belonging to this multicast VLAN). GS2210 Series User’s Guide...
  • Page 174: Mvr Group Configuration

    Use this screen to configure MVR IP multicast group address(es). Click the Group Configuration link in the MVR screen. Note: A port can belong to more than one multicast VLAN. However, IP multicast group addresses in different multicast VLANs cannot overlap. GS2210 Series User’s Guide...
  • Page 175 Delete button to remove the selected entry(ies) from the table. If you delete a multicast VLAN, all multicast groups in this VLAN will also be removed. Cancel Select Cancel to clear the checkbox(es) in the table. GS2210 Series User’s Guide...
  • Page 176: Mvr Configuration Example

    Movie: 230.1.2.50 ~230.1.2.60 VLAN 1 Multicast VID 200 To configure the MVR settings on the Switch, create a multicast VLAN in the MVR screen and set the receiver and source ports. Figure 125 MVR Configuration Example EXAMPLE GS2210 Series User’s Guide...
  • Page 177 Group Configuration screen. The following figure shows an example where two IPv4 multicast groups (News and Movie) are configured for the multicast VLAN 200. Figure 126 MVR Group Configuration Example EXAMPLE Figure 127 MVR Group Configuration Example EXAMPLE GS2210 Series User’s Guide...
  • Page 178: Aaa

    Switch but user B cannot. The Switch can authorize users based on user accounts configured on the Switch itself or it can use an external server to authorize a large number of users. GS2210 Series User’s Guide...
  • Page 179: Aaa Screens

    RADIUS servers and Section 24.6.2 on page 187 for RADIUS attributes utilized by the authentication features on the Switch. Click on the RADIUS Server Setup link in the AAA screen to view the screen as shown. GS2210 Series User’s Guide...
  • Page 180 Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external RADIUS server and the Switch. This key is not sent over the network. This key must be the same on the external RADIUS server and the Switch. GS2210 Series User’s Guide...
  • Page 181: Tacacs+ Server Setup

    Use this screen to configure your TACACS+ server settings. See Section on page 179 for more information on TACACS+ servers. Click on the TACACS+ Server Setup link in the AAA screen to view the screen as shown. GS2210 Series User’s Guide...
  • Page 182 Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. This key is not sent over the network. This key must be the same on the external TACACS+ server and the Switch. GS2210 Series User’s Guide...
  • Page 183: Aaa Setup

    Click Cancel to begin configuring this screen afresh. 24.5 AAA Setup Use this screen to configure authentication and authorization settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. GS2210 Series User’s Guide...
  • Page 184 Method 2 and Method 3 fields. Select local to have the Switch check the access privilege configured for local authentication. Select radius or tacacs+ to have the Switch check the access privilege via the external servers. GS2210 Series User’s Guide...
  • Page 185 If you don’t select this and you have two accounting servers set up, then the Switch sends information to the first accounting server and if it doesn’t get a response from the accounting server then it tries the second accounting server. GS2210 Series User’s Guide...
  • Page 186: Technical Reference

    • Vendor-Type: A vendor specified attribute, identifying the setting you want to modify. • Vendor-data: A value you want to assign to the setting. Note: Refer to the documentation that comes with your RADIUS server on how to configure VSAs for users authenticating via the RADIUS server. GS2210 Series User’s Guide...
  • Page 187: Tunnel Protocol Attribute

    Refer to RFC 2865 for more information about RADIUS attributes used for authentication. This section lists the attributes used by authentication functions on the Switch. In cases where the attribute has a specific format associated with it, the format is specified. GS2210 Series User’s Guide...
  • Page 188: Attributes Used For Authentication

    24.6.3.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 24.6.3.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type - This value is set to Ethernet(15) on the Switch. Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator GS2210 Series User’s Guide...
  • Page 189: Ip Source Guard

    ARP packets in each VLAN. • Use the ARP Inspection Log Status screen (Section 25.8 on page 202) to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. GS2210 Series User’s Guide...
  • Page 190: What You Need To Know

    This field displays how many days, hours, minutes, and seconds the binding is valid; for example, 2d3h4m5s means the binding is still valid for 2 days, 3 hours, 4 minutes, and 5 seconds. This field displays infinity if the binding is always valid (for example, a static binding). GS2210 Series User’s Guide...
  • Page 191: Ip Source Guard Static Binding

    ID as an existing static binding, the new static binding replaces the original one. To open this screen, click Advanced Application > IP Source Guard > Static Binding. Figure 134 Advanced Application > IP Source Guard > Static Binding GS2210 Series User’s Guide...
  • Page 192: Dhcp Snooping

    Click this to clear the Delete check boxes above. 25.4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. GS2210 Series User’s Guide...
  • Page 193 This field displays how long (in seconds) the Switch waits to update the DHCP snooping database after the current bindings change. This section displays information about the current update and the next update of the DHCP snooping database. GS2210 Series User’s Guide...
  • Page 194 MAC address and VLAN ID. Invalid interfaces This field displays the number of bindings the Switch ignored because the port number was a trusted interface or does not exist anymore. GS2210 Series User’s Guide...
  • Page 195: Dhcp Snooping Configure

    TFTP server so that they are still available after a restart. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure. GS2210 Series User’s Guide...
  • Page 196 IP address}/directory, if applicable/file name; for example, tftp://192.168.10.1/database.txt. Timeout interval Enter how long (10-65535 seconds) the Switch tries to complete a specific update in the DHCP snooping database before it gives up. GS2210 Series User’s Guide...
  • Page 197: Dhcp Snooping Port Configure

    To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port. Figure 137 Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port GS2210 Series User’s Guide...
  • Page 198 Switch relays to a DHCP server for each VLAN. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN. Figure 138 Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN GS2210 Series User’s Guide...
  • Page 199: Dhcp Snooping Vlan Configure

    Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN > Port. Figure 139 Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN > Port GS2210 Series User’s Guide...
  • Page 200: Arp Inspection Status

    MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection. GS2210 Series User’s Guide...
  • Page 201: Arp Inspection Status

    25.7 ARP Inspection VLAN Status Use this screen to look at various statistics about ARP packets in each VLAN. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > VLAN Status. GS2210 Series User’s Guide...
  • Page 202: Arp Inspection Vlan Status

    Use this screen to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status. GS2210 Series User’s Guide...
  • Page 203 In the ARP Inspection VLAN Configure screen, you can configure the Switch to generate log messages when ARP packets are discarded or forwarded based on the VLAN ID of the ARP packet. See Section 25.9.2 on page 207. Time This field displays when the log message was generated. GS2210 Series User’s Guide...
  • Page 204: Arp Inspection Configure

    Click Clearing log status table in the ARP Inspection Log Status screen to clear the log and reset this counter. See Section 25.8 on page 202. GS2210 Series User’s Guide...
  • Page 205: Arp Inspection Port Configure

    Use this screen to specify whether ports are trusted or untrusted ports for ARP inspection. You can also specify the maximum rate at which the Switch receives ARP packets on each untrusted port. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure > Port. GS2210 Series User’s Guide...
  • Page 206 1 second, then the Switch accepts a maximum of 15 ARP packets in every one- second interval. If the burst interval is 5 seconds, then the Switch accepts a maximum of 75 ARP packets in every five-second interval. Enter the length (1-15 seconds) of the burst interval. GS2210 Series User’s Guide...
  • Page 207: Arp Inspection Vlan Configure

    This field displays the VLAN ID of each VLAN in the range specified above. If you configure the * VLAN, the settings are applied to all VLANs. Enabled Select Yes to enable ARP inspection on the VLAN. Select No to disable ARP inspection on the VLAN. GS2210 Series User’s Guide...
  • Page 208: Technical Reference

    • The packet is a RELEASE or DECLINE packet, and the source MAC address and source port do not match any of the current bindings. • The rate at which DHCP packets arrive is too high. GS2210 Series User’s Guide...
  • Page 209 You can configure this setting for each source VLAN. This setting is independent of the DHCP relay settings (Chapter 34 on page 269). 25.10.1.4 Configuring DHCP Snooping Follow these steps to configure DHCP snooping on the Switch. GS2210 Series User’s Guide...
  • Page 210: Arp Inspection Overview

    • They do not use the same space in memory that regular MAC address filters use. • They appear only in the ARP Inspection screens and commands, not in the MAC Address Filter screens and commands. GS2210 Series User’s Guide...
  • Page 211 ARP inspection so that the Switch has enough time to build the binding table. Enable ARP inspection on each VLAN. Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. GS2210 Series User’s Guide...
  • Page 212: Loop Guard

    If a switch (not in loop state) connects to a switch in loop state, then it will be affected by the switch in loop state in the following way: GS2210 Series User’s Guide...
  • Page 213 In this example, the probe packet is sent from port N and returns on another port. As long as loop guard is enabled on port N. The Switch will shut down port N if it detects that the probe packet has returned to the Switch. GS2210 Series User’s Guide...
  • Page 214: Loop Guard Setup

    Click Advanced Application > Loop Guard in the navigation panel to display the screen as shown. Note: The loop guard feature can not be enabled on the ports that have Spanning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Figure 152 Advanced Application > Loop Guard GS2210 Series User’s Guide...
  • Page 215 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 216: Layer 2 Protocol Tunneling

    To emulate a point-to-point topology between two customer switches at different sites, such as A and B, you can enable protocol tunneling on edge switches 1 and 2 for PAgP (Port Aggregation Protocol), LACP or UDLD (UniDirectional Link Detection). GS2210 Series User’s Guide...
  • Page 217: Configuring Layer 2 Protocol Tunneling

    Incoming encapsulated layer 2 protocol packets received on a tunnel port are decapsulated and sent to an access port. 27.2 Configuring Layer 2 Protocol Tunneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
  • Page 218 Select this option to have the Switch tunnel STP (Spanning Tree Protocol) packets so that STP can run properly across the service provider’s network and spanning trees can be set up based on bridge information from all (local and remote) networks. GS2210 Series User’s Guide...
  • Page 219 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 220: Pppoe

    Active Discovery Initialization) and PADR (PPPoE Active Discovery Request) packets from PPPoE clients. This tag is defined in RFC 2516 and has the following format for this feature. Table 94 PPPoE Intermediate Agent Vendor-specific Tag Format Tag_Type Tag_Len Value (0x0105) GS2210 Series User’s Guide...
  • Page 221 If you do not configure a Circuit ID string for a specific VLAN on a port or for a specific port, and disable the flexible Circuit ID syntax in the PPPoE > Intermediate Agent screen, the Switch automatically generates a Circuit ID string according to the default Circuit ID syntax which is GS2210 Series User’s Guide...
  • Page 222: The Pppoe Screen

    Use this screen to configure the PPPoE Intermediate Agent on the Switch. Click Advanced Application > PPPoE in the navigation panel to display the screen as shown. Click Click Here to go to the Intermediate Agent screen. Figure 156 Advanced Application > PPPoE Intermediate Agent GS2210 Series User’s Guide...
  • Page 223: Pppoe Intermediate Agent

    Switch, the Switch will use the string specified in the access-node- identifier field. identifier- Specify a string that the Switch adds in the Agent Circuit ID sub-option. You can enter up to string 53 ASCII characters. Spaces are allowed. GS2210 Series User’s Guide...
  • Page 224: Pppoe Ia Per-Port

    Use this row to make the setting the same for all ports. Use this row first and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. GS2210 Series User’s Guide...
  • Page 225: Pppoe Ia Per-Port Per-Vlan

    28.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPPoE IA settings that apply to a specific VLAN on a port. Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown. GS2210 Series User’s Guide...
  • Page 226 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 227: Pppoe Ia For Vlan

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 228 Chapter 28 PPPoE GS2210 Series User’s Guide...
  • Page 229: Error Disable

    Use this screen to view whether the Switch detected that control packets exceeded the rate limit configured for a port and related information. Click the Click Here link next to Errdisable Status link in the Advanced Application > Errdisable screen to display the screen as shown. GS2210 Series User’s Guide...
  • Page 230 - The Switch drops the additional control packets the port(s) has to handle in every one second. Rate This field displays how many control packets this port can receive or transmit per second. It can be adjusted in CPU Protection. 0 means no rate limit. GS2210 Series User’s Guide...
  • Page 231: Cpu Protection Configuration

    Use this row to make the setting the same for all ports. Use this row first and then make adjustments to each port if necessary. Changes in this row are copied to all the ports as soon as you make them. GS2210 Series User’s Guide...
  • Page 232: Error-Disable Detect Configuration

    - The Switch drops all the specified control packets (such as BPDU) on the port. rate-limitation - The Switch decreases the priority value to CPU of the additional control packets the port has to handle in every one second. GS2210 Series User’s Guide...
  • Page 233: Error-Disable Recovery Configuration

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 234 Chapter 29 Error Disable GS2210 Series User’s Guide...
  • Page 235: Green Ethernet

    30.2 Configuring Green Ethernet Click Advanced Application > Green Ethernet in the navigation panel to display the screen as shown. Note: EEE, Auto Power Down and Short Reach are not supported on an uplink port. GS2210 Series User’s Guide...
  • Page 236 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 237: Link Layer Discovery Protocol (Lldp)

    The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. The next figure demonstrates that the network devices Switches and Routers (S and R) transmit and receive device information via LLDPPDU and the network manager can query the information using Simple Network Management Protocol (SNMP). GS2210 Series User’s Guide...
  • Page 238: Lldp-Med Overview

    TLV to provision the endpoint device to such that the endpoint device’s network policy and location identification information is updated. Since LLDPPDU updates status and configuration information periodically, network managers may check the result of provision via remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. GS2210 Series User’s Guide...
  • Page 239: Lldp Screens

    Click here to show a screen with LLDP information from the neighboring devices. Status LLDP Click here to show a screen to configure LLDP parameters. Configuration LLDP-MED LLDP-MED Click here to show a screen to configure LLDP-MED (Link Layer Discovery Protocol for Configuration Media Endpoint Devices) parameters. GS2210 Series User’s Guide...
  • Page 240: Lldp Local Status

    This screen displays a summary of LLDP status on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) to display the screen as shown next. Figure 170 Advanced Application > LLDP > LLDP Local Status GS2210 Series User’s Guide...
  • Page 241: Lldp Local Port Status Detail

    This screen displays detailed LLDP status for each port on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) > then, click a port number, for example 1 (Port) in the local port column to display the screen as shown next. GS2210 Series User’s Guide...
  • Page 242 Chapter 31 Link Layer Discovery Protocol (LLDP) Figure 171 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (Basic TLV) GS2210 Series User’s Guide...
  • Page 243 Chapter 31 Link Layer Discovery Protocol (LLDP) Figure 172 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (MED TLV) GS2210 Series User’s Guide...
  • Page 244 Capabilities This field displays which LLDP-MED TLV are capable to transmit on the Switch. • Network Policy • Location Device Type This is the LLDP-MED device class. The Zyxel Switch device type is: • Network Connectivity GS2210 Series User’s Guide...
  • Page 245: Lldp Remote Status

    This is an alpha-numeric string that contains the specific identifier for the port from which this LLDPDU was transmitted. The port ID is identified by the port ID subtype. Port Description This displays a description for the port from which this LLDPDU was transmitted. GS2210 Series User’s Guide...
  • Page 246: Lldp Remote Port Status Detail

    1, in the Index column in the LLDP Remote Status screen to display the screen as shown next. Figure 174 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Basic TLV) GS2210 Series User’s Guide...
  • Page 247 System Capabilities Supported • System Capabilities Enabled Management This displays the following management address parameters of the remote device. Address TLV • Management Address Subtype • Management Address • Interface Number Subtype • Interface Number • Object Identifier GS2210 Series User’s Guide...
  • Page 248 LLDP PDU. • Port-Protocol VLAN ID • Port-Protocol VLAN ID Supported • Port-Protocol VLAN ID Enabled Vlan Name TLV This shows the VLAN ID and name for remote device port. • VLAN ID • VLAN Name GS2210 Series User’s Guide...
  • Page 249 • Port Class • MDI Supported • MDI Enabled • Pair Controlable • PSE Power Pairs • Power Class Max Frame This displays the maximum supported frame size in octets. Size TLV GS2210 Series User’s Guide...
  • Page 250 Chapter 31 Link Layer Discovery Protocol (LLDP) Figure 176 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED TLV) GS2210 Series User’s Guide...
  • Page 251 This shows the location information of a caller by its: Identification • Coordinate-base LCI - latitude and longitude coordinates of the Location Configuration Information (LCI) • Civic LCI - IETF Geopriv Civic Address based Location Configuration Information • ELIN - (Emergency Location Identifier Number) GS2210 Series User’s Guide...
  • Page 252: Lldp Configuration

    Power Value - power requirement, in fractions of Watts, in current configuration 31.6 LLDP Configuration Use this creen to configure global LLDP settings on the Switch. Click Advanced Application > LLDP > LLDP Configuration (Click Here) to display the screen as shown next. GS2210 Series User’s Guide...
  • Page 253 Select whether LLDP transmission and/or reception is allowed on this port. • Disable - not allowed • Tx-Only - transmit only • Rx-Only - receive only • Tx-Rx - transmit and receive Notification Select whether LLDP notification is enabled on this port. GS2210 Series User’s Guide...
  • Page 254: Lldp Configuration Basic Tlv Setting

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 255: Lldp Configuraion Basic Org-Specific Tlv Setting

    Select to enable the sending of IEEE 802.3 Link Aggregation TLVs on the port(s). Aggregation MAC/PHY Select to enable the sending of IEEE 802.3 MAC/PHY Configuration/Status TLVs on the port(s). Max Frame Select to enable the sending of IEEE 802.3 Max Frame Size TLVs on the port(s). Size GS2210 Series User’s Guide...
  • Page 256: Lldp-Med Configuration

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 257: Lldp-Med Network Policy

    Click Cancel to begin entering the information afresh. Index This field displays the of index number of the network policy. Click an index number to edit the rule. Port This field displays the port number of the network policy. GS2210 Series User’s Guide...
  • Page 258: Lldp-Med Location

    Check the rules that you want to remove in the delete column, then click the Delete button. Cancel Click Cancel to clear the selected checkboxes in the Delete column. 31.9 LLDP-MED Location Click Advanced Application > LLDP > LLDP-MED Location (Click Here) to display the screen as shown next. GS2210 Series User’s Guide...
  • Page 259 Enter the latitude information. The value should be from -90º to 90º. The negative value represents the South. • north • south Longitude Enter the longitude information. The value should be from -180º to 180º. The negative vlaue represents the West. • west • east GS2210 Series User’s Guide...
  • Page 260 Country, State, County, City, Street, Number, ZIP code and additional information. ELIN Number This field shows the Emergency Location Identification Number (ELIN), which is used to identify endpoint devices when they issue emergency call services. The valid length is form 10 octets to 25 octets. GS2210 Series User’s Guide...
  • Page 261 Table 119 Advanced Application > LLDP > LLDP-MED Location LABEL DESCRIPTION Delete Check the locations that you want to remove in the Delete column, then click the Delete button. Cancel Click Cancel to clear the selected check boxes in the delete column. GS2210 Series User’s Guide...
  • Page 262: Static Route

    • Use the Static Routing screen (Section 32.2 on page 263) to check if IPv4 static route is activated. • Use the IPv4 Static Route screen (Section 32.3 on page 263) to activate/deactivate this static route. GS2210 Series User’s Guide...
  • Page 263: Static Routing

    Enter the subnet mask for this destination. Routing is always based on network number. If Mask you need to specify a route to a single host, use a subnet mask of 255.255.255.255 in the subnet mask field to force the network number to be identical to the host ID. GS2210 Series User’s Guide...
  • Page 264 Switch that will forward the packet to the destination. Metric This field displays the cost of transmission for routing purposes. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS2210 Series User’s Guide...
  • Page 265: Differentiated Services

    Figure 186 DiffServ: Differentiated Service Field DSCP (6 bits) CU (2 bits) DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. GS2210 Series User’s Guide...
  • Page 266: Activating Diffserv

    S - Silver B - Bronze 33.2 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the Switch. Click IP Application > DiffServ in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
  • Page 267: Dscp-To-Ieee 802.1P Priority Settings

    The following table shows the default DSCP-to-IEEE802.1p mapping. Table 122 Default DSCP-IEEE 802.1p Mapping DSCP VALUE 0 – 7 8 – 15 16 – 23 24 – 31 32 – 39 40 – 47 48 – 55 56 – 63 IEEE 802.1p GS2210 Series User’s Guide...
  • Page 268: Configuring Dscp Settings

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 269: Dhcp

    • Global - The Switch forwards all DHCP requests to the same DHCP server. • VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can be configured to relay DHCP requests to different DHCP servers for clients in different VLAN. GS2210 Series User’s Guide...
  • Page 270: Dhcp Configuration

    DHCPv4 to open screens where you can enable and configure DHCPv4 relay settings and create option 82 profiles. Click the link next to DHCPv6 to open a screen where you can configure DHCPv6 relay settings. Figure 190 IP Application > DHCP GS2210 Series User’s Guide...
  • Page 271: Dhcpv4 Status

    The DHCP Relay Agent Information feature adds an Agent Information field (also known as the Option 82 field) to DHCP requests. The Option 82 field is in the DHCP headers of client DHCP request frames that the Switch relays to a DHCP server. GS2210 Series User’s Guide...
  • Page 272: Dhcpv4 Option 82 Profile

    34.4.2 DHCPv4 Option 82 Profile Use this screen to create DHCPv4 option 82 profiles. Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Option 82 Profile link to display the screen as shown. GS2210 Series User’s Guide...
  • Page 273 Select this option to have the Switch add its MAC address to the client DHCP requests that it relays to a DHCP server. string Enter a string of up to 64 ASCII characters for the remote ID information in this field. Spaces are allowed. GS2210 Series User’s Guide...
  • Page 274: Configuring Dhcpv4 Global Relay

    Use this screen to configure global DHCPv4 relay. Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Global link to display the screen as shown. Figure 193 IP Application > DHCP > DHCPv4 > Global GS2210 Series User’s Guide...
  • Page 275: Dhcpv4 Global Relay Port Configure

    The Switch adds the Circuit ID sub-option and/or Remote ID sub-option specified in the profile to DHCP requests that it relays to a DHCP server. The profile you select here has priority over the one you select in the DHCP > DHCPv4 > Global screen. GS2210 Series User’s Guide...
  • Page 276: Global Dhcp Relay Configuration Example

    (default1 in this example) to set the Switch to send additional information (such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. GS2210 Series User’s Guide...
  • Page 277: Configuring Dhcpv4 Vlan Settings

    DHCP Status screen that displays. Note: You must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. See Section 5.2 on page 44 information on how to do this. GS2210 Series User’s Guide...
  • Page 278 This field displays Relay for the DHCP mode. DHCP Status For DHCP server configuration, this field displays the starting IP address and the size of the IP address pool. For DHCP relay configuration, this field displays the first remote DHCP server IP address. GS2210 Series User’s Guide...
  • Page 279: Dhcpv4 Vlan Port Configure

    Click Clear to reset the fields to the factory defaults. Index This field displays a sequential number for each entry. Click an index number to change the settings. This field displays the VLAN to which the port(s) belongs. GS2210 Series User’s Guide...
  • Page 280: Example: Dhcp Relay For Two Vlans

    (VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.100. Figure 199 DHCP Relay for Two VLANs DHCP:192.168.1.100 VLAN 1 VLAN 2 DHCP:172.16.10.100 For the example network, configure the VLAN Setting screen as shown. GS2210 Series User’s Guide...
  • Page 281: Dhcpv6 Relay

    The interface-ID should not change even after the relay agent restarts. Use this screen to configure DHCPv6 relay settings for a specific VLAN on the Switch. Click IP Application > DHCP > DHCPv6 in the navigation panel to display the screen as shown. GS2210 Series User’s Guide...
  • Page 282 This field displays whether the remote-ID option is added to DHCPv6 requests from clients in this VLAN. Delete Check the entry(ies) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. GS2210 Series User’s Guide...
  • Page 283: Arp Setup

    In the following example, the Switch does not have IP address and MAC address mapping information for hosts A and B in its ARP table, and host A wants to ping host B. Host A sends an GS2210 Series User’s Guide...
  • Page 284 In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. ARP-Request When the Switch is in ARP-Request learning mode, it updates the ARP table with both ARP replies, gratuitous ARP requests and ARP requests. GS2210 Series User’s Guide...
  • Page 285: Arp Setup

    Figure 202 IP Application > ARP Setup 35.2.1 ARP Learning Use this screen to configure each port’s ARP learning mode. Click the link next to ARP Learning in the IP Application > ARP Setup screen to display the screen as shown next. GS2210 Series User’s Guide...
  • Page 286 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 287: Maintenance

    Table 136 Management > Maintenance LABEL DESCRIPTION Current This field displays which configuration (Configuration 1 or Configuration 2) is currently operating on the Switch. Firmware Click Click Here to go to the Firmware Upgrade screen. Upgrade GS2210 Series User’s Guide...
  • Page 288: Load Factory Default

    Switch IP address (192.168.1.1). 36.2.2 Save Configuration Click Config 1 to save the current configuration settings permanently to Configuration 1 on the Switch. GS2210 Series User’s Guide...
  • Page 289: Reboot System

    Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. Click Management > Maintenance > Firmware Upgrade to view the screen as shown next. GS2210 Series User’s Guide...
  • Page 290 To reboot, go to Management > Maintenance > Reboot System and click Config 1 or Config 2 (Config 1 and Config 2 are the configuration files you want the Switch to use when it restarts. GS2210 Series User’s Guide...
  • Page 291: Restore A Configuration File

    Choose a location to save the file on your computer from the Save in drop-down list box and type a descriptive name for it in the File name list box. Click Save to save the configuration file to your computer. GS2210 Series User’s Guide...
  • Page 292: Tech-Support

    Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 293: Technical Reference

    Switch configurations, system-related data (including the default password), the error log and the trace log. Firmware *.bin This is the generic name for the ZyNOS firmware on the Switch. 36.7.2.1 Example FTP Commands ftp> put firmware.bin ras GS2210 Series User’s Guide...
  • Page 294: Ftp Command Line Procedure

    Normal. The server requires a unique User ID and Password to login. Transfer Type Transfer files in either ASCII (plain text format) or in binary mode. Configuration and firmware files should be transferred in binary mode. GS2210 Series User’s Guide...
  • Page 295: Ftp Restrictions

    • FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. GS2210 Series User’s Guide...
  • Page 296: Access Control

    “trusted computers” from which an administrator may use a service to manage the Switch. 37.2 The Access Control Main Screen Use this screen to display the main screen. Click Management > Access Control in the navigation panel to display the main screen as shown. GS2210 Series User’s Guide...
  • Page 297: Configuring Snmp

    Enter the Get Community string, which is the password for the incoming Get- and GetNext- requests from the management station. The Get Community string is only used by SNMP managers using SNMP version 2c or lower. GS2210 Series User’s Guide...
  • Page 298: Configuring Snmp Trap Group

    From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP traps that should be sent to each SNMP manager. Figure 213 Management > Access Control > SNMP > Trap Group GS2210 Series User’s Guide...
  • Page 299: Enabling/Disabling Sending Of Snmp Traps On A Port

    From the SNMP > Trap Group screen, click Port to view the screen as shown. Use this screen to set whether a trap received on the port(s) would be sent to the SNMP manager. Figure 214 Management > Access Control > SNMP > Trap Group > Port GS2210 Series User’s Guide...
  • Page 300: Configuring Snmp User

    User Information Note: Use the username and password of the login accounts you specify in this screen to create accounts on the SNMP v3 manager. Username Specify the username of a login account on the Switch. GS2210 Series User’s Guide...
  • Page 301 This field displays the encryption method used for SNMP communication with this user. Group This field displays the SNMP group to which this user belongs. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 302: Setting Up Login Accounts

    Only the administrator has read/write access. Old Password Type the existing system password (1234 is the default password when shipped). New Password Enter your new system password. Retype to Retype your new system password for confirmation confirm GS2210 Series User’s Guide...
  • Page 303: Service Port Access Control

    Service Port field. If you change the default port number then you will have to let people (who wish to use the service) know the new port number for that service. GS2210 Series User’s Guide...
  • Page 304: Remote Management

    You can specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click Access Control to return to the Access Control screen. Figure 218 Management > Access Control > Remote Management GS2210 Series User’s Guide...
  • Page 305: Technical Reference

    SNMP version 3. The next figure illustrates an SNMP management operation. SNMP is only available if TCP/IP is configured. Figure 219 SNMP Management Model An SNMP managed network consists of two main components: agents and a manager. GS2210 Series User’s Guide...
  • Page 306 • RFC 1155 SMI • RFC 2674 SNMPv2, SNMPv2c • RFC 1757 RMON • SNMPv2, SNMPv2c or later version, compliant with RFC 2011 SNMPv2 MIB for IP, RFC 2012 SNMPv2 MIB for TCP, RFC 2013 SNMPv2 MIB for UDP GS2210 Series User’s Guide...
  • Page 307: Snmp Traps

    This trap is sent when the voltage goes oltageOutOfRange above or below the normal operating range. zyHwMonitorPowerSupplyV 1.3.6.1.4.1.890.1.15.3.26.2.8 This trap is sent when the power supply oltageOutOfRangeRecovere voltage is recovered from the out of range to normal operating range. GS2210 Series User’s Guide...
  • Page 308 This trap is sent when an Ethernet interface fails to auto-negotiate with the peer Ethernet interface. zyPortAutonegotiationFailedRe 1.3.6.1.4.1.890.1.15.3.61.3.3 This trap is sent when an Ethernet covered interface recovers from failing to auto-negotiate with the peer Ethernet interface. GS2210 Series User’s Guide...
  • Page 309 This trap is sent when the OfRangeRecovered transceiver supply voltage is recovered from the out of normal operating range. zyTransceiverDdmiTxBiasOutOf 1.3.6.1.4.1.890.1.15.3.84.3.10 This trap is sent when the RangeRecovered transmitter laser bias current is recovered from the out of normal operating range. GS2210 Series User’s Guide...
  • Page 310 1.3.6.1.2.1.80.0.3 This trap is sent when a ping test is completed. traceroute traceRouteTestFailed 1.3.6.1.2.1.81.0.2 This trap is sent when a traceroute test fails. traceRouteTestCompleted 1.3.6.1.2.1.81.0.3 This trap is sent when a traceroute test is completed. GS2210 Series User’s Guide...
  • Page 311: Ssh Overview

    Figure 220 SSH Communication Example 37.7.2.1 How SSH works The following table summarizes how a secure connection is established between two remote hosts. GS2210 Series User’s Guide...
  • Page 312 22. Only one SSH connection is allowed at a time. 37.7.2.3 Requirements for Using SSH You must install an SSH client program on a client computer (Windows or Linux operating system) that is used to connect to the Switch over SSH. GS2210 Series User’s Guide...
  • Page 313: Introduction To Https

    If you haven’t changed the default HTTPS port on the Switch, then in your browser enter “https:// Switch IP Address/” as the web site address where “Switch IP Address” is the IP address or domain name of the Switch you wish to access. Internet Explorer Warning Messages Internet Explorer 6 GS2210 Series User’s Guide...
  • Page 314 Figure 224 Security Certificate Warning (Internet Explorer 7 or 8) After you log in, you will see the red address bar with the message Certificate Error. Click on Certificate Error next to the address bar and click View certificates. GS2210 Series User’s Guide...
  • Page 315 Mozilla Firefox Warning Messages When you attempt to access the Switch HTTPS server, a This Connection is Unstructed screen may display. If that is the case, click I Understand the Risks and then the Add Exception... button. GS2210 Series User’s Guide...
  • Page 316 37.7.3.2 The Main Screen After you accept the certificate and enter the login username and password, the Switch main screen Internet Explorer appears. The lock displayed in the bottom right of the browser status bar (in 6 or GS2210 Series User’s Guide...
  • Page 317 Chapter 37 Access Control Internet Explorer Mozilla Firefox) or next to the address bar (in 7 or 8) denotes a secure connection. Figure 229 Example: Lock Denoting a Secure Connection EXAMPLE GS2210 Series User’s Guide...
  • Page 318: Diagnostic

    38.2 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests. Figure 230 Management > Diagnostic GS2210 Series User’s Guide...
  • Page 319 Enter a time interval (in minutes) and click Blink to show the actual location of the Switch between several devices in a rack. The default time interval is 30 minutes. Click Stop to have the Switch terminate the blinking locater LED. GS2210 Series User’s Guide...
  • Page 320: Syslog

    39.2 Syslog Setup Use this screen to configure the device’s system logging settings. Click Management > Syslog in the navigation panel to display this screen. The syslog feature sends logs to an external syslog server. GS2210 Series User’s Guide...
  • Page 321: Syslog Server Setup

    Click Cancel to begin configuring this screen afresh. 39.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to view the screen as shown next. Use this screen to configure a list of external syslog servers. GS2210 Series User’s Guide...
  • Page 322 This field displays the severity level of the logs that the device is to send to this syslog server. Delete Select an entry’s Delete check box and click Delete to remove the entry. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 323: Cluster Management

    The switches being managed by the cluster manager switch. In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. Figure 233 Clustering Application Example GS2210 Series User’s Guide...
  • Page 324: What You Can Do

    Index column is a hyperlink leading to the cluster member switch’s web configurator (see Figure 236 on page 327). MacAddr This is the cluster member switch’s hardware MAC address. Name This is the cluster member switch’s System Name. GS2210 Series User’s Guide...
  • Page 325: Clustering Management Configuration

    40.3 Clustering Management Configuration Use this screen to configure clustering management. Click Management > Cluster Management > Configuration to display the next screen. Figure 235 Management > Cluster Management > Configuration EXAMPLE GS2210 Series User’s Guide...
  • Page 326 This is the cluster member switch’s model name. Remove Select this checkbox and then click the Remove button to remove a cluster member switch from the cluster. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 327: Technical Reference

    Figure 236 Cluster Management: Cluster Member Web Configurator Screen example example 40.4.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. GS2210 Series User’s Guide...
  • Page 328 410AAHW0.bin member switch. This is the cluster member switch’s firmware name as seen in the cluster fw-00-a0-c5-01-23-46 manager switch. This is the cluster member switch’s configuration file name as seen in the config-00-a0-c5-01-23-46 cluster manager switch. GS2210 Series User’s Guide...
  • Page 329: Mac Table

    Too much port flooding leads to network congestion. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. GS2210 Series User’s Guide...
  • Page 330: Viewing The Mac Table

    41.2 Viewing the MAC Table Use this screen to check whether the MAC address is dynamic or static. Click Management > MAC Table in the navigation panel to display the following screen. Figure 239 Management > MAC Table GS2210 Series User’s Guide...
  • Page 331 This is the VLAN group to which this frame belongs. Port This is the port where the above MAC address is forwarded. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). GS2210 Series User’s Guide...
  • Page 332: Arp Table

    MAC address that replied. 42.2 Viewing the ARP Table Use the ARP table to view IP-to-MAC address mapping(s) and remove specific dynamic ARP entries. Click Management > ARP Table in the navigation panel to open the following screen. GS2210 Series User’s Guide...
  • Page 333 This shows 0 for a static entry. Type This shows whether the IP address is dynamic (learned by the Switch) or static (manually configured in the Basic Setting > IP Setup or IP Application > ARP Setup > Static ARP screen). GS2210 Series User’s Guide...
  • Page 334: Path Mtu Table

    This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. GS2210 Series User’s Guide...
  • Page 335: Configure Clone

    This chapter shows you how you can copy the settings of one port onto other ports. 44.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. GS2210 Series User’s Guide...
  • Page 336 Select which port settings (you configured in the Basic Setting menus) should be copied to the destination port(s). Advanced Select which port settings (you configured in the Advanced Application menus) should be Application copied to the destination ports. GS2210 Series User’s Guide...
  • Page 337 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS2210 Series User’s Guide...
  • Page 338: Neighbor Table

    This field displays the IPv6 address of the Switch or a neighboring device. Address This field displays the MAC address of the IPv6 interface on which the IPv6 address is configure or the MAC address of the neighboring device. GS2210 Series User’s Guide...
  • Page 339 • dynamic (D): The IP address to MAC address can be successfully resolved using IPv6 Neighbor Discovery protocol. Is it similar as IPv4 ARP (Address Resolution protocol). • static (S): The interface address is statically configured. GS2210 Series User’s Guide...
  • Page 340: Troubleshooting

    Make sure you understand the normal behavior of the LED. See Section 3.3 on page Check the hardware connections. See Section 46.1 on page 340. Inspect your cables for damage. Contact the vendor to replace any damaged cables. GS2210 Series User’s Guide...
  • Page 341: Switch Access And Login

    Make sure your computer is in the same subnet as the Switch. (If you know that there are routers between your computer and the Switch, skip this step.) Reset the device to its factory defaults, and try to access the Switch with the default IP address. Section 4.6 on page GS2210 Series User’s Guide...
  • Page 342 The recommended screen resolution is 1024 by 768 pixels. Adjust the value in your computer and then you should see the rest of Advanced Application submenus at the bottom of the navigation panel. There is unauthorized access to my Switch via telnet, HTTP and SSH. GS2210 Series User’s Guide...
  • Page 343: Switch Configuration

    Click Save at the top right corner of the web configurator to save the configuration permanently. See also Section 36.5 on page 291 for more information about how to save your configuration. GS2210 Series User’s Guide...
  • Page 344: Appendix A Customer Support

    Maintenance > Tech-Support Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
  • Page 345 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de GS2210 Series User’s Guide...
  • Page 346 • ZyXEL BY • http://www.zyxel.by Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland •...
  • Page 347 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
  • Page 348 Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ GS2210 Series User’s Guide...
  • Page 349 Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za GS2210 Series User’s Guide...
  • Page 350: Appendix B Common Services

    File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world wide web. GS2210 Series User’s Guide...
  • Page 351 Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). GS2210 Series User’s Guide...
  • Page 352 TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. GS2210 Series User’s Guide...
  • Page 353: Appendix C Ipv6

    PP EN D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 addresses.
  • Page 354: Loopback Address

    Appendix C IPv6 Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address.
  • Page 355 Appendix C IPv6 Table 170 Reserved Multicast Address (continued) MULTICAST ADDRESS FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F).
  • Page 356 Appendix C IPv6 combines its interface ID and global and subnet information advertised from the router. This is a routable global IP address. DHCPv6 The Dynamic Host Configuration Protocol for IPv6 (DHCPv6, RFC 3315) is a server-client protocol that allows a DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients.
  • Page 357 Appendix C IPv6 such as the system name. The interface-ID option provides slot number, port information and the VLAN ID to the DHCPv6 server. The remote-ID option (if any) is stripped from the Relay-Reply messages before the relay agent sends the packets to the clients. The DHCP server copies the interface-ID option from the Relay-Forward message into the Relay-Reply message and sends it to the relay agent.
  • Page 358 Appendix C IPv6 determine whether the destination address is on-link and can be reached directly without passing through a router. If the address is onlink, the address is considered as the next hop. Otherwise, the Switch determines the next-hop from the default router list or routing table. Once the next hop IP address is known, the Switch looks into the neighbor cache to get the link-layer address and sends the packet when the neighbor is reachable.
  • Page 359 Appendix C IPv6 Double click Dibbler - a DHCPv6 client. Click Start and then OK. Now your computer can obtain an IPv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer.
  • Page 360 Appendix C IPv6 Click Close to exit the Local Area Connection Status screen. Select Start > All Programs > Accessories > Command Prompt. Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection:...
  • Page 361: Legal Information

    This publication is subject to change without notice. Trademarks ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
  • Page 362: Zyxel Limited Warranty

    è composta l’apparecchiatura. Lo smaltimento abusivo del prodotto da parte del detentore comporta l’applicazione delle sanzioni amministrative previste dalla normativa vigente." CE Marking GS2210 Series User’s Guide...
  • Page 363 Appendix D Legal Information Environmental Product Declaration GS2210 Series User’s Guide...
  • Page 364 Cisco Discovery Protocol, see CDP and MAC filter CIST configuring Class of Service (CoS) syslog messages trusted ports classifier 152, 154 and QoS authentication editing setup example Authentication and Authorization, see AAA overview authorization setup 152, 154 privilege levels viewing GS2210 Series User’s Guide...
  • Page 365 229, 232 error disable recovery configuration Ethernet broadcast address 283, 332 Ethernet port test daylight saving time external authentication server default Ethernet settings DHCP configuration options relay example setup fan speed DHCP relay option 82 GS2210 Series User’s Guide...
  • Page 366 Internet Protocol version 6, see IPv6 CLI Reference IP address GVRP 87, 93 and port assignment IP interface GVRP (GARP VLAN Registration Protocol) IP setup IP source guard 189, 190 ARP inspection 190, 210 DHCP snooping 190, 208 static bindings GS2210 Series User’s Guide...
  • Page 367 ID information maintanence setup 137, 139 configuration backup status firmware traffic distribution algorithm restoring configuration traffic distribution type maintenance trunk group current configuration Link Aggregation Control Protocol (LACP) main screen Link Aggregation Control Protocol, see LACP GS2210 Series User’s Guide...
  • Page 368 DiffServ revision level configuration status example overview rules MTU (Multi-Tenant Unit) viewing multicast Port Aggregation Protocol, see PAgP IGMP throttling IP addresses port authentication setup and RADIUS IEEE802.1x multicast group 144, 181 GS2210 Series User’s Guide...
  • Page 369 40, 288 protocol based VLAN to factory default settings and IEEE 802.1Q tagging restoring configuration application example 40, 291 configuration example RFC 3164 isolate traffic Round Robin Scheduling priority RSTP un-tagged packets GS2210 Series User’s Guide...
  • Page 370 MAC address severity levels static MAC forwarding 94, 96, 103 system information 60, 73, 74 static multicast address system log static multicast forwarding system reboot static routes static trunking example Static VLAN static VLAN GS2210 Series User’s Guide...
  • Page 371 VLAN Trunking Protocol, see VTP tutorials DHCP snooping VLAN, protocol based, See protocol based VLAN Type of Service (ToS) VT100 UDLD UniDirectional Link Detection, see UDLD untrusted ports warranty ARP inspection note DHCP snooping web configurator PPPoE IA getting help GS2210 Series User’s Guide...
  • Page 372 Index home login logout navigation panel weight, queuing Weighted Round Robin Scheduling (WRR) WRR (Weighted Round Robin Scheduling) ZyNOS (ZyXEL Network Operating System) GS2210 Series User’s Guide...

This manual is also suitable for:

Gs2210-24Gs2210-24hpGs2210-48Gs2210-48hp

Table of Contents