Page 1 GS1920 Series Intelligent Layer 2 GbE Switch Version 4.10 Edition 3, 05/2014 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 User Name admin Password 1234 www.zyxel.com Copyright © 2014 ZyXEL Communications Corporation...
Page 2 Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate. GS1920 Series User’s Guide...
Page 3: Table Of Contents
IP Source Guard ...........................200 Loop Guard ............................223 Layer 2 Protocol Tunneling ........................227 PPPoE ..............................231 Error Disable ............................240 Private VLAN ............................246 Green Ethernet ............................248 Link Layer Discovery Protocol (LLDP) ....................250 Static Route ............................274 Differentiated Services ........................277 DHCP ..............................281 GS1920 Series User’s Guide...
Page 4 Contents Overview ARP Setup ............................295 Maintenance ............................299 Access Control ............................308 Diagnostic .............................326 Syslog ..............................328 Cluster Management ..........................331 MAC Table .............................337 ARP Table .............................340 Path MTU Table ............................342 Configure Clone ............................343 Neighbor Table ............................346 Troubleshooting ............................348 GS1920 Series User’s Guide...
Page 5: Table Of Contents
3.1.1 Gigabit Ethernet Ports ......................26 3.1.2 Mini-GBIC Slots ........................27 3.1.3 LED Mode (only available for GS1920-48HP) .................29 3.2 Rear Panel ............................29 3.2.1 Power Connector ........................29 3.3 LEDs ...............................30 3.4 Reset to Factory Defaults ........................30 3.4.1 Side Panels ..........................31 GS1920 Series User’s Guide...
Page 6 7.1.1 What You Can Do ........................52 7.2 ZyXEL One Network (ZON) Utility Screen ..................52 7.3 Neighbor screen ..........................53 7.4 Port Status Summary ........................54 7.4.1 Status: Port Details ......................56 Chapter 8 Basic Setting ............................59 8.1 Overview ............................59 GS1920 Series User’s Guide...
Page 7 9.7.1 Configuring Protocol Based VLAN ..................96 9.8 Port-based VLAN Setup .......................97 9.8.1 Configure a Port-based VLAN ....................98 9.9 Voice VLAN .............................100 9.10 MAC-based VLAN .........................102 9.11 Technical Reference ........................103 9.11.1 Create an IP-based VLAN Example ..................103 GS1920 Series User’s Guide...
Page 8 13.11 Technical Reference ........................128 13.11.1 MSTP Network Example ....................128 13.11.2 MST Region ........................129 13.11.3 MST Instance ........................130 13.11.4 Common and Internal Spanning Tree (CIST) ..............130 Chapter 14 Bandwidth Control..........................131 14.1 Overview ............................131 14.1.1 What You Can Do ........................131 GS1920 Series User’s Guide...
Page 9 18.3 Activate IEEE 802.1x Security ....................145 18.3.1 Guest VLAN ........................147 Chapter 19 Port Security .............................150 19.1 Port Security Overview .........................150 19.1.1 What You Can Do ........................150 19.2 Port Security Setup ........................150 Chapter 20 Classifier............................153 20.1 Overview ............................153 GS1920 Series User’s Guide...
Page 10 23.5.3 MLD Snooping-proxy VLAN Port Role Setting ..............178 23.5.4 MLD Snooping-proxy VLAN Filtering ...................180 23.5.5 MLD Snooping-proxy VLAN Filtering Profile ...............182 23.6 General MVR Configuration ......................183 23.6.1 MVR Group Configuration ....................185 23.6.2 MVR Configuration Example ....................187 Chapter 24 AAA ..............................189 GS1920 Series User’s Guide...
Page 11 25.10.2 ARP Inspection Overview ....................221 Chapter 26 Loop Guard ............................223 26.1 Loop Guard Overview ........................223 26.1.1 What You Can Do ........................223 26.1.2 What You Need to Know ......................223 26.2 Loop Guard Setup .........................225 Chapter 27 Layer 2 Protocol Tunneling......................227 GS1920 Series User’s Guide...
Page 12 Chapter 32 Link Layer Discovery Protocol (LLDP) ...................250 32.1 LLDP Overview ..........................250 32.2 LLDP-MED Overview ........................251 32.3 LLDP Screens ..........................252 32.4 LLDP Local Status ........................253 32.4.1 LLDP Local Port Status Detail ....................254 32.5 LLDP Remote Status ........................258 GS1920 Series User’s Guide...
Page 13 35.4.5 Global DHCP Relay Configuration Example ...............288 35.5 Configuring DHCPv4 VLAN Settings ..................289 35.5.1 DHCPv4 VLAN Port Configure ...................291 35.5.2 Example: DHCP Relay for Two VLANs ................292 35.6 DHCPv6 Relay ..........................293 Chapter 36 ARP Setup ............................295 GS1920 Series User’s Guide...
Page 14 38.3.3 Configuring SNMP User ....................312 38.4 Setting Up Login Accounts ......................314 38.5 Service Port Access Control .......................315 38.6 Remote Management ......................316 38.7 Technical Reference ........................318 38.7.1 About SNMP ........................318 38.7.2 Introduction to HTTPS ......................320 Chapter 39 Diagnostic ............................326 GS1920 Series User’s Guide...
Page 15 43.1.2 What You Need to Know ......................340 43.2 Viewing the ARP Table ........................340 Chapter 44 Path MTU Table ..........................342 44.1 Path MTU Overview ........................342 44.2 Viewing the Path MTU Table ......................342 Chapter 45 Configure Clone..........................343 45.1 Overview ............................343 45.2 Configure Clone ...........................343 GS1920 Series User’s Guide...
Page 16 47.1 Power, Hardware Connections, and LEDs ..................348 47.2 Switch Access and Login ......................349 47.3 Switch Configuration ........................351 Appendix A Customer Support ......................353 Appendix B Common Services ......................359 Appendix C IPv6 ..........................362 Appendix D Legal Information ......................370 Index ..............................373 GS1920 Series User’s Guide...
Page 17: User's Guide
User’s Guide...
Page 18: Getting To Know Your Switch
H A PT ER Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The GS1920 Series consist of the four following models: • GS1920-24 • GS1920-24HP • GS1920-48 • GS1920-48HP Referring to PoE model(s) in this User's Guide only applies for GS1920-24HP and GS1920-48HP.
Page 19: Backbone Application
Switch. You can provide a super-fast uplink connection by using a Gigabit Ethernet/mini-GBIC port on the Switch. Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location. GS1920 Series User’s Guide...
Page 20: High Performance Switching Example
With VLAN, a station cannot directly talk to or hear from stations that are not in the same group(s) unless such traffic first goes through a router. For more information on VLANs, refer to Chapter 9 on page GS1920 Series User’s Guide...
Page 21: Ways To Manage The Switch
• Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it in a safe place. GS1920 Series User’s Guide...
Page 22 Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. See Section 3.4 on page 30 for how to reset the Switch. GS1920 Series User’s Guide...
Page 23: Hardware Installation And Connection
• Four M5 flat head screws and a #2 Philips screwdriver. Failure to use the proper screws may damage the unit. 2.3.1.1 Precautions • Make sure the rack will safely support the combined weight of all the equipment it contains. GS1920 Series User’s Guide...
Page 24: Attaching The Mounting Brackets To The Switch
Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up the two screw holes on the bracket with the screw holes on the side of the rack. GS1920 Series User’s Guide...
Page 25 Figure 6 Mounting the Switch on a Rack Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. Repeat steps to attach the second mounting bracket on the other side of the rack. GS1920 Series User’s Guide...
Page 26: Hardware Panels
An auto-negotiating port can detect and adjust to the optimum Ethernet speed (10/100/1000 Mbps) and duplex mode (full duplex or half duplex) of the connected device. An auto-crossover (auto-MDI/MDI-X) port automatically works with a straight-through or crossover Ethernet cable. GS1920 Series User’s Guide...
Page 27: Mini-Gbic Slots
To avoid possible eye injury, do not look into an operating fiber-optic module’s connectors. • Type: SFP connection interface • Connection speed: 1 Gigabit per second (Gbps) 3.1.2.1 Transceiver Installation Use the following steps to install a mini-GBIC transceiver (SFP module). GS1920 Series User’s Guide...
Page 28 Remove the fiber optic cables from the transceiver. Open the transceiver’s latch (latch styles vary). Pull the transceiver out of the slot. Figure 13 Removing the Fiber Optic Cables Figure 14 Opening the Transceiver’s Latch Example GS1920 Series User’s Guide...
Page 29: Led Mode (Only Available For Gs1920-48Hp)
To connect power to the Switch, insert the female end of the power cord to the AC power receptacle on the rear panel. Connect the other end of the supplied power cord to a power outlet. Make sure that no objects obstruct the airflow of the fans (located on the side of the unit). GS1920 Series User’s Guide...
Page 30: Leds
This means that you will lose all configurations that you had previously and the default Switch IP address, user name and password will be reset to 192.168.1.1, admin and 1234 respectively. GS1920 Series User’s Guide...
Page 31: Side Panels
IP address of your computer to be in the same subnet as that of the default Switch IP address (192.168.1.1). 3.4.1 Side Panels The reset button is located at the side of the Switch as shown. Figure 20 Side Panel: GS1920-48 Figure 21 Side Panel: GS1920-24, GS1920-24HP, GS1920-48HP GS1920 Series User’s Guide...
Page 32: Technical Reference
Technical Reference...
Page 33: The Web Configurator
The login screen appears. The default username is admin and associated default password is 1234. The date and time display as shown if you have not configured a time server nor manually entered a time and date in the General Setup screen. GS1920 Series User’s Guide...
Page 34: The Status Screen
B - Click this link to save your configuration into the Switch’s nonvolatile memory. Nonvolatile memory is the configuration of your Switch that stays the same even if the Switch’s power is turned off. C - Click this link to go to the status page of the Switch. GS1920 Series User’s Guide...
Page 35 This link takes you to a screen where you can configure the IP address, subnet mask (necessary for Switch management) and DNS (domain name server) and set up to 64 IP routing domains. Port Setup This link takes you to a screen where you can configure settings for individual Switch ports. GS1920 Series User’s Guide...
Page 36 This link takes you to a screen where you can configure L2PT (Layer 2 Protocol Tunneling) Tunneling settings on the Switch. PPPoE This link takes you to a screen where you can configure intermediate agent settings in port, VLAN, and PPPoE. GS1920 Series User’s Guide...
Page 37: Change Your Password
MAC address, status and type. 4.3.1 Change Your Password After you log in for the first time, it is recommended you change the default administrator password. Click Management > Access Control > Logins to display the next screen. GS1920 Series User’s Guide...
Page 38: Saving Your Configuration
Delete the management VLAN (default is VLAN 1). Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the management port of the Switch. Filter all traffic to the CPU port. Disable all ports. GS1920 Series User’s Guide...
Page 39: Resetting The Switch
Figure 25 Web Configurator: Logout Screen 4.8 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. GS1920 Series User’s Guide...
Page 40: Initial Setup Example
In this example, you want to configure port 1 as a member of VLAN 2. Figure 26 Initial Setup Network Example: VLAN Click Advanced Application > VLAN > VLAN Configuration in the navigation panel and click the Static VLAN Setup link. GS1920 Series User’s Guide...
Page 41: Setting Port Vid
VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on that port get sent to VLAN 2. GS1920 Series User’s Guide...
Page 42: Configuring Switch Management Ip Address
Connect your computer to any Ethernet port on the Switch. Make sure your computer is in the same subnet as the Switch. Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurator. See Section 4.2 on page 33 for more information. GS1920 Series User’s Guide...
Page 43 This is the same as the VLAN ID you configure in the Static VLAN screen. Click Add to save your changes back to the run- time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. GS1920 Series User’s Guide...
Page 44: Tutorials
1 and 100 DHCP Client (B) 1 and 100 DHCP Client (C) 1 and 100 Access the Switch through http://192.168.1.1 by default. Log into the Switch by entering the username (default: admin) and password (default: 1234). GS1920 Series User’s Guide...
Page 45 Go to Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup, and set the PVID of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. GS1920 Series User’s Guide...
Page 46 Go to Advanced Application > IP Source Guard > DHCP snooping > Configure, activate and specify VLAN 100 as the DHCP VLAN as shown. Click Apply. Tutorial: Specify DHCP VLAN Figure 32 Click the Port link at the top right corner. GS1920 Series User’s Guide...
Page 47 6 or 7, the computer will not able to get an IP address. 10 To check if DHCP snooping works, go to Advanced Application > IP Source Guard, you should see an IP assignment with the type dhcp-snooping as shown. GS1920 Series User’s Guide...
Page 48: How To Use Dhcp Relay On The Switch
Follow the steps below to configure port 2 as a member of VLAN 102. Access the web configurator through the Switch’s management port. Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click Apply to save the settings to the run-time memory. GS1920 Series User’s Guide...
Page 49 Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending. Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off. Figure 38 Tutorial: Create a Static VLAN GS1920 Series User’s Guide...
Page 50: Configuring Dhcp Relay
Click IP Application > DHCP > DHCPv4 and then the Global link to open the DHCP Relay screen. Select the Active check box. Enter the DHCP server’s IP address (192.168.2.3 in this example) in the Remote DHCP Server 1 field. Select default1 or default2 in the Option 82 Profile field. GS1920 Series User’s Guide...
Page 51: Troubleshooting
You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. You clicked the Save link on the Switch to have your settings take effect. GS1920 Series User’s Guide...
Page 52: Zon Utility, Zon Neighbor Management And Port Status
ZON Utility screen and you can perform tasks like basic configuration of the devices and batch firmware upgrade in it. You can download the ZON Utility at www.zyxel.com and install it on a PC. The following figure shows the ZON Utility screen. GS1920 Series User’s Guide...
Page 53: Neighbor Screen
(turn the power off and then back on again), and reset to factory default settings in the Neighbor Management screen. For more information on LLDP, see (Section 32.3 on page 252). Click Status > Neighbor to see the following screen. Status > Neighbor Figure 43 GS1920 Series User’s Guide...
Page 54: Port Status Summary
“-” instead. • You can only reset ZyXEL products. 7.4 Port Status Summary To view the port statistics, click Status in all web configurator screens to display the Status screen as shown next. GS1920 Series User’s Guide...
Page 55 This field shows the total amount of time in hours, minutes and seconds the port has been Clear Counter Enter a port number and then click Clear Counter to erase the recorded statistical information for that port, or select Any to clear statistics for all ports. GS1920 Series User’s Guide...
Page 56: Status: Port Details
This field shows if LACP is enabled on this port or not. TxPkts This field shows the number of transmitted frames on this port RxPkts This field shows the number of received frames on this port GS1920 Series User’s Guide...
Page 57 This field shows the number of packets (including bad packets) received that were between 256 and 511 octets in length. 512-1023 This field shows the number of packets (including bad packets) received that were between 512 and 1023 octets in length. GS1920 Series User’s Guide...
Page 58 1024 and 1518 octets in length. Giant This field shows the number of packets (including bad packets) received that were between 1519 octets and the maximum frame size. The maximum frame size varies depending on your switch model. GS1920 Series User’s Guide...
Page 59: Basic Setting
(Section 8.9 on page 72) to view IPv6 status and IPv6 configuration. 8.2 System Information In the navigation panel, click Basic Setting > System Info to display the screen as shown. You can check the firmware version number. GS1920 Series User’s Guide...
Page 60 You may choose the temperature unit (Centigrade or Fahrenheit) in this field. Temperature BOARD, MAC and PHY refer to the location of the temperature sensors on the Switch printed circuit board. GS1920 Series User’s Guide...
Page 61: General Setup
Error is displayed. 8.3 General Setup Use this screen to configure general settings such as the system name and time. Click Basic Setting > General Setup in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 62 This field displays the date you open this menu. New Date (yyyy- Enter the new date in year, month and day format. The new date then appears in the mm-dd) Current Date field after you click Apply. GS1920 Series User’s Guide...
Page 63: Introduction To Vlans
In traditional switched environments, all broadcast packets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain. Note: VLAN is unidirectional; it only governs outgoing traffic. GS1920 Series User’s Guide...
Page 64: Switch Setup Screen
Join Timer sets the duration of the Join Period timer for GVRP in milliseconds. Each port has a Join Period timer. The allowed Join Time range is between 100 and 65535 milliseconds; the default is 200 milliseconds. See the chapter on VLAN setup for more background information. GS1920 Series User’s Guide...
Page 65: Ip Setup
192.168.1.1. The subnet mask specifies the network number portion of an IP address. The factory default subnet mask is 255.255.255.0. You can configure up to 64 IP addresses which are used to access and manage the Switch from the ports belonging to the pre-defined VLAN(s). GS1920 Series User’s Guide...
Page 66 Select this option if you don’t have a DHCP server or if you wish to assign static IP address information to the Switch. You need to fill in the following fields when you select this option. IP Address Enter the IP address of your Switch in dotted decimal notation for example 192.168.1.1. GS1920 Series User’s Guide...
Page 67: Port Setup
Click Cancel to clear the selected check boxes in the Delete column. 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the configuration screen. GS1920 Series User’s Guide...
Page 68 GS1920 Series User’s Guide...
Page 69: Poe Status
You can also set priorities so that the Switch is able to reserve and allocate power to certain PDs. Note: The POE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. GS1920 Series User’s Guide...
Page 70 This field shows which ports can receive power from the Switch. You can set this in Section 8.8.1 on page • Disable - The PD connected to this port cannot get power supply. • Enable - The PD connected to this port can receive power. GS1920 Series User’s Guide...
Page 71: Poe Setup
Use this screen to set the priority levels for the Switch in distributing power to PDs. Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen opens. Figure 53 Basic Setting > PoE Setup GS1920 Series User’s Guide...
Page 72: Interface Setup
Use this screen to set IPv6 interfaces on which you can configure an IPv6 address to access and manage the Switch. Click Basic Setting > Interface Setup in the navigation panel to display the configuration screen. GS1920 Series User’s Guide...
Page 73: Ipv6
Click Cancel to clear the Delete check boxes. 8.10 IPv6 Use this screen to view the IPv6 interface status and configure Switch’s management IPv6 addresses. Click Basic Setting > IPv6 in the navigation panel to display the IPv6 status screen as shown next. GS1920 Series User’s Guide...
Page 74: Ipv6 Interface Status
This field displays whether the IPv6 interface is activated or not. 8.10.1 IPv6 Interface Status Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the Basic Setting > IPv6 screen. The following screen opens. GS1920 Series User’s Guide...
Page 75 This field displays the Switch’s link-local IP address and prefix generated by the interface. It Address also shows whether the IP address is preferred, which means it is a valid address and can be used as a sender or receiver address. GS1920 Series User’s Guide...
Page 76 This field displays the address record when the Switch queries the DNS server to resolve domain names. Restart Click Click Here to send a new DHCP request to the DHCPv6 server and update the IPv6 DHCPv6 Client address and DNS information for this interface. GS1920 Series User’s Guide...
Page 77: Ipv6 Configuration
Click the link to go to a screen where you can configure the Switch DHCP settings. Setup 8.10.3 IPv6 Global Setup Use this screen to configure the global IPv6 settings. Click the link next to IPv6 Global Setup in the IPv6 Configuration screen to display the screen as shown next. GS1920 Series User’s Guide...
Page 78: Ipv6 Interface Setup
Use this screen to turn on or off an IPv6 interface and enable stateless autoconfiguration on it. Click the link next to IPv6 Interface Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 59 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Interface Setup GS1920 Series User’s Guide...
Page 79: Ipv6 Link-Local Address Setup
Manually configure a static IPv6 link-local address for the interface. Address Default Set the default gateway IPv6 address for the interface. When an interface cannot find a Gateway routing information for a frame’s destination, it forwards the packet to the default gateway. GS1920 Series User’s Guide...
Page 80: Ipv6 Global Address Setup
Cancel Click Cancel to begin configuring this screen afresh. Clear Click Clear to reset the fields to the factory defaults. Index This is the interface index number. Click on an index number to change the settings. GS1920 Series User’s Guide...
Page 81: Ipv6 Neighbor Discovery Setup
Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. GS1920 Series User’s Guide...
Page 82: Ipv6 Neighbor Setup
To have IPv6 function properly, you should configure a static VLAN with the same ID number in the Advanced Application > VLAN screens. Neighbor Specify the IPv6 address of the neighboring device which can be reached through the Address interface. GS1920 Series User’s Guide...
Page 83: Dhcpv6 Client Setup
Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Click the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 64 Basic Setting > IPv6 > IPv6 Configuration > DHCPv6 Client Setup GS1920 Series User’s Guide...
Page 84 This field displays whether the Switch obtains a list of domain names from the DHCP server. Information This field displays the time interval (in seconds) at which the Switch exchanges other Refresh configuration information with a DHCPv6 server again. Minimum GS1920 Series User’s Guide...
Page 85: Vlan
VLAN and provides the information that switches need to process the frame across the network. A tagged frame is four bytes longer than an untagged frame and contains two bytes of TPID (Tag Protocol Identifier, residing within the type/length field of the Ethernet frame) GS1920 Series User’s Guide...
Page 86: Forwarding Tagged And Untagged Frames
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Enable this function to permit VLAN groups beyond the local Switch. GS1920 Series User’s Guide...
Page 87: Port Vlan Trunking
1 and 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking port(s). Figure 65 Port VLAN Trunking 9.1.2.3 Select the VLAN Type Select a VLAN type in the Basic Setting > Switch Setup screen. GS1920 Series User’s Guide...
Page 88: Vlan Status
This is the VLAN identification number that was configured in the Static VLAN screen. Elapsed Time This field shows how long it has been since a normal VLAN was registered or a static VLAN was set up. GS1920 Series User’s Guide...
Page 89: Vlan Details
This field shows how this VLAN was added to the Switch. Dynamic: using GVRP Static: added as a permanent entry Voice: manually added as a Voice VLAN MVR: added via multicast VLAN registration MAC-based: manually added as MAC-based VLAN GS1920 Series User’s Guide...
Page 90: Vlan Configuration
Click Click Here to configure the MAC Based VLAN for the Switch. 9.4 Configure a Static VLAN Use this screen to configure a static VLAN for the Switch. Click Static VLAN in the VLAN Status screen to display the screen as shown next. GS1920 Series User’s Guide...
Page 91 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to change the fields back to their last saved values. GS1920 Series User’s Guide...
Page 92: Configure Vlan Port Settings
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Select this check box to permit VLAN groups beyond the local Switch. Port This field displays the port number. GS1920 Series User’s Guide...
Page 93: Subnet Based Vlans
172.16.1.0/24 (voice services). You also have a subnet based VLAN with priority 5 and VID of 200 for traffic received from IP subnet 192.168.1.0/24 (video services). Lastly, you configure VLAN with priority 3 and VID of 300 for traffic received from IP subnet 10.1.1.0/24 (data services). All GS1920 Series User’s Guide...
Page 94: Configuring Subnet Based Vlan
Click Subnet Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. Note: Subnet based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. Figure 73 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN GS1920 Series User’s Guide...
Page 95: Protocol Based Vlans
VLAN. One advantage of using protocol based VLANs is that priority can be assigned to traffic of the same protocol. Note: Protocol based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. GS1920 Series User’s Guide...
Page 96: Configuring Protocol Based Vlan
Click Protocol Based VLAN Setup in the VLAN Configuration screen to display the configuration screen as shown. Note: Protocol-based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. Figure 75 Advanced Application > VLAN > VLAN Configuration > Protocol Based VLAN Setup GS1920 Series User’s Guide...
Page 97: Port-Based Vlan Setup
Port-based VLANs are specific only to the Switch on which they were created. Note: When you activate port-based VLAN, the Switch uses a default VLAN ID of 1. You cannot change it. GS1920 Series User’s Guide...
Page 98: Configure A Port-Based Vlan
Select Port Based as the VLAN Type in the Basic Setting > Switch Setup screen and then click Advanced Application > VLAN from the navigation panel to display the next screen. Figure 76 Port Based VLAN Setup (All Connected) GS1920 Series User’s Guide...
Page 99 Chapter 9 VLAN Figure 77 Port Based VLAN Setup (Port Isolation) GS1920 Series User’s Guide...
Page 100: Voice Vlan
You can set priority level to the Voice VLAN and add MAC address of IP phones from specific manufacturers by using its ID from the Organizationally Unique Identifiers (OUI). Click Voice VLAN in the VLAN Configuration screen to display the configuration screen as shown. GS1920 Series User’s Guide...
Page 101 Cancel Click Cancel to begin configuring this screen afresh. Index This field displays the index number of the Voice VLAN. OUI address This field displays the OUI address of the Voice VLAN. GS1920 Series User’s Guide...
Page 102: Mac-Based Vlan
MAC address of the data packet that is looked up when untagged packets arrive at the Switch. Type an ID (from 1 to 4094) for the VLAN ID that is associated with the MAC- based VLAN entry. GS1920 Series User’s Guide...
Page 103: Technical Reference
Select the protocol. Leave the default value IP. Type the VLAN ID of an existing VLAN. In our example we already created a static VLAN with an ID of 5. Type 5. Leave the priority set to 0 and click Add. GS1920 Series User’s Guide...
Page 104 To add more ports to this protocol based VLAN. Click the index number of the protocol based VLAN entry. Click 1 Change the value in the Port field to the next port you want to add. Click Add. GS1920 Series User’s Guide...
Page 105: Static Mac Forward Setup
Chapter 19 on page 150 for more information on port security. Click Advanced Application > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. Figure 81 Advanced Application > Static MAC Forwarding GS1920 Series User’s Guide...
Page 106 This field displays the port where the MAC address shown in the next field will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS1920 Series User’s Guide...
Page 107: Static Multicast Forward Setup
VLAN group. Figure shows frames being forwarded to devices connected to port 3. Figure 84 shows frames being forwarded to ports 2 and 3 within VLAN group 4. Figure 82 No Static Multicast Forwarding GS1920 Series User’s Guide...
Page 108: Configuring Static Multicast Forwarding
Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). Click Advanced Application > Static Multicast Forwarding to display the configuration screen as shown. Figure 85 Advanced Application > Static Multicast Forwarding GS1920 Series User’s Guide...
Page 109 This field displays the port(s) within a identified VLAN group to which frames containing the specified multicast MAC address will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS1920 Series User’s Guide...
Page 110: Filtering
12.2 Configure a Filtering Rule Use this screen to create rules for traffic going through the Switch. Click Advanced Application > Filtering in the navigation panel to display the screen as shown next. Figure 86 Advanced Application > Filtering GS1920 Series User’s Guide...
Page 111 This field displays the VLAN group identification number. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. GS1920 Series User’s Guide...
Page 112: Spanning Tree Protocol
(R)STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a switch to interact with other (R)STP -compliant switches in your network to ensure that only one path exists between any two stations on the network. GS1920 Series User’s Guide...
Page 113 Protocol Data Units) transmitted from the root bridge. If a bridge does not get a Hello BPDU after a predefined interval (Max Age), the bridge assumes that the link to the root bridge is down. This bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a valid network topology. GS1920 Series User’s Guide...
Page 114: Stp Port States
Figure 87 MRSTP Network Example Multiple STP Multiple Spanning Tree Protocol (IEEE 802.1s) is backward compatible with STP/RSTP and addresses the limitations of existing spanning tree protocols (STP and RSTP) in networks to include the following features: GS1920 Series User’s Guide...
Page 115: Spanning Tree Protocol Status Screen
Use the Spanning Tree Configuration screen to activate one of the STP modes on the Switch. Click Configuration in the Advanced Application > Spanning Tree Protocol. Figure 89 Advanced Application > Spanning Tree Protocol > Configuration GS1920 Series User’s Guide...
Page 116: Configure Rapid Spanning Tree Protocol
Use this screen to configure RSTP settings, see Section 13.1 on page 112 for more information on RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 90 Advanced Application > Spanning Tree Protocol > RSTP GS1920 Series User’s Guide...
Page 117 Priority decides which port should be disabled when more than one port forms a loop in a switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. GS1920 Series User’s Guide...
Page 118: Rapid Spanning Tree Protocol Status
(second) message. The root bridge determines Hello Time, Max Age and Forwarding Delay. Max Age (second) This is the maximum time (in seconds) the Switch can wait without receiving a configuration message before attempting to reconfigure. GS1920 Series User’s Guide...
Page 119: Configure Multiple Rapid Spanning Tree Protocol
Table 47 Advanced Application > Spanning Tree Protocol > MRSTP LABEL DESCRIPTION Status Click Status to display the MRSTP Status screen (see Figure 91 on page 118). Tree This is a read only index number of the STP trees. GS1920 Series User’s Guide...
Page 120 The slower the media, the higher the cost-see Table 42 on page 113 for more information. Tree Select which STP tree configuration this port should participate in. GS1920 Series User’s Guide...
Page 121: Multiple Rapid Spanning Tree Protocol Status
Forwarding Delay This is the time (in seconds) the root switch will wait before changing states (that is, (second) listening to learning to forwarding). Note: The listening state does not exist in RSTP. GS1920 Series User’s Guide...
Page 122: Configure Multiple Spanning Tree Protocol
This is the time since the spanning tree was last reconfigured. Change 13.8 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen. Section on page 114 for more information on MSTP. GS1920 Series User’s Guide...
Page 123 Select this to activate MSTP on the Switch. Clear this to disable MSTP on the Switch. Note: You must also activate Multiple Spanning Tree in the Advanced Application > Spanning Tree Protocol > Configuration screen to enable MSTP on the Switch. GS1920 Series User’s Guide...
Page 124 Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. GS1920 Series User’s Guide...
Page 125: Multiple Spanning Tree Port Configuration
Click Advanced Application > Spanning Tree Protocol > MSTP > Port in the navigation panel to display the status screen as shown next. See Section on page 114 for more information on MSTP. Figure 95 Advanced Application > Spanning Tree Protocol > MSTP > Port GS1920 Series User’s Guide...
Page 126: Multiple Spanning Tree Protocol Status
Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section on page 114 for more information on MSTP. Note: This screen is only available after you activate MSTP on the Switch. GS1920 Series User’s Guide...
Page 127 This is the path cost from the root port on this Switch to the root switch. Port ID This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. GS1920 Series User’s Guide...
Page 128: Technical Reference
The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP or RSTP, the link for VLAN 2 will be blocked as STP and RSTP allow only one link in the network and block the redundant link. GS1920 Series User’s Guide...
Page 129: Mst Region
Devices that belong to the same MST region are configured to have the same MSTP configuration identification settings. These include the following parameters: • Name of the MST region • Revision level as the unique number for the MST region GS1920 Series User’s Guide...
Page 130: Mst Instance
MST instance are members of the CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions and single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. Figure 100 MSTP and Legacy RSTP Network Example GS1920 Series User’s Guide...
Page 131: Bandwidth Control
131) to limit the bandwidth for traffic going through the Switch. 14.2 Bandwidth Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. Figure 101 Advanced Application > Bandwidth Control GS1920 Series User’s Guide...
Page 132 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS1920 Series User’s Guide...
Page 133: Broadcast Storm Control
(DLF) packets the Switch receives per second on the ports. 15.2 Broadcast Storm Control Setup Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. GS1920 Series User’s Guide...
Page 134 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS1920 Series User’s Guide...
Page 135: Mirroring
Click Advanced Application > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 103 Advanced Application > Mirroring GS1920 Series User’s Guide...
Page 136 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields. GS1920 Series User’s Guide...
Page 137: Link Aggregation
When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that GS1920 Series User’s Guide...
Page 138: Link Aggregation Status
Section 17.1 on page 137 for more information. Figure 104 Advanced Application > Link Aggregation Status Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. GS1920 Series User’s Guide...
Page 139: Link Aggregation Setting
LACP - if the ports are configured to join a trunk group via LACP. 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 137 for more information on link aggregation. GS1920 Series User’s Guide...
Page 140 Select dst-ip to distribute traffic based on the packet’s destination IP address. Select src-dst-ip to distribute traffic based on a combination of the packet’s source and destination IP addresses. Port This field displays the port number. GS1920 Series User’s Guide...
Page 141: Link Aggregation Control Protocol
Click Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Section on page 137 for more information on dynamic link aggregation. Figure 106 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP GS1920 Series User’s Guide...
Page 142: Technical Reference
Make your physical connections - make sure that the ports that you want to belong to the trunk group are connected to the same destination. The following figure shows ports 2-5 on switch A connected to switch B. GS1920 Series User’s Guide...
Page 143 Click Apply when you are done. Figure 108 Trunking Example - Configuration Screen Your trunk group 1 (T1) configuration is now complete. GS1920 Series User’s Guide...
Page 144: Port Authentication
At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. GS1920 Series User’s Guide...
Page 145: Port Authentication Configuration
Figure 110 Advanced Application > Port Authentication 18.3 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. In the Port Authentication screen click 802.1x to display the configuration screen as shown. GS1920 Series User’s Guide...
Page 146 Specify the number of seconds the Switch waits for client’s response before re-sending an identity request to the client. Supp-Timeout Specify the number of seconds the Switch waits for client’s response to a challenge secs request before sending another request. GS1920 Series User’s Guide...
Page 147: Guest Vlan
Figure 112 Guest VLAN Example VLAN 100 VLAN 102 Internet Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication > 802.1x screen click Guest Vlan to display the configuration screen as shown. GS1920 Series User’s Guide...
Page 148 Switch. You must also enable IEEE 802.1x authentication on the Switch and the associated ports. Enter the number that identifies the guest VLAN. Make sure this is a VLAN recognized in your network. GS1920 Series User’s Guide...
Page 149 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 150: Port Security
150) to enable port security and disable MAC address learning. You can also enable the port security feature on a port. 19.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 151 Clear this check box to disable the port security feature. The Switch forwards all packets on this port. Address MAC address learning reduces outgoing broadcast traffic. For MAC address learning to occur Learning on a port, the port itself must be active with address learning enabled. GS1920 Series User’s Guide...
Page 152 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 153: Classifier
(or policy) to act upon the traffic that matches the rules. To configure policy rules, refer to Chapter 21 on page 158. Click Advanced Application > Classifier in the navigation panel to display the configuration screen as shown. GS1920 Series User’s Guide...
Page 154 Select Any to apply the rule to all MAC addresses. Address To specify a destination, select the second choice and type a MAC address in valid MAC address format (six hexadecimal character pairs). Layer 3 Specify the fields below to configure a layer 3 classifier. GS1920 Series User’s Guide...
Page 155: Viewing And Editing Classifier Configuration
Classifier screen. To change the settings of a rule, click a number in the Index field. Note: When two rules conflict with each other, a higher layer rule has priority over lower layer rule. GS1920 Series User’s Guide...
Page 156 In the Internet Protocol there is a field, called “Protocol”, to identify the next level protocol. The following table shows some common protocol types and the corresponding protocol number. Refer http://www.iana.org/assignments/protocol-numbers for a complete list. Table 66 Common IP Protocol Types and Protocol Numbers PROTOCOL TYPE PROTOCOL NUMBER ICMP L2TP GS1920 Series User’s Guide...
Page 157: Classifier Example
The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. After you have configured a classifier, you can configure a policy (in the Policy screen) to define action(s) on the classified traffic flow. Figure 117 Classifier: Example GS1920 Series User’s Guide...
Page 158: Policy Rule
21.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to Section 20.2 on page 153 more information. Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 159 Type the number of an outgoing port. Priority Specify a priority level. Rate Limit You can configure the desired bandwidth available to a traffic flow. Traffic that exceeds the maximum bandwidth allocated (in cases where the network is congested) is dropped. GS1920 Series User’s Guide...
Page 160 Click Delete to remove the selected entry from the summary table. Delete Click Cancel to clear the Delete check boxes. Cancel This field displays the policy index number. Click an index number to edit the policy. GS1920 Series User’s Guide...
Page 161: Viewing And Editing Policy Configuration
The figure below shows an example Policy screen where you configure a policy to limit bandwidth on a traffic flow classified using the Example classifier (refer to Section 20.3 on page 157). Figure 120 Policy Example GS1920 Series User’s Guide...
Page 162: Queuing Method
A queue is a given an amount of bandwidth irrespective of the incoming traffic on that port. This queue then moves to the back of the list. The next queue is given GS1920 Series User’s Guide...
Page 163: Configuring Queuing
Use this screen to set priorities for the queues of the Switch. This distributes bandwidth across the different traffic queues. Click Advanced Application > Queuing Method in the navigation panel. Figure 121 Advanced Application > Queuing Method GS1920 Series User’s Guide...
Page 164 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 165: Multicast
(see the IANA website for more information). IGMP Snooping A Switch can passively snoop on IGMP packets transferred between IP multicast routers/switches and IP multicast hosts to learn the IP multicast group membership. It checks IGMP packets passing GS1920 Series User’s Guide...
Page 166 In the following MLD snooping-proxy example, all connected upstream ports (1 ~7) are treated as one interface. The connection between ports 8 and 9 is blocked by STP to break the loop. If there is GS1920 Series User’s Guide...
Page 167 The following figure shows a network example. The subscriber VLAN (1, 2 and 3) information is hidden from the streaming media server, S. In addition, the multicast VLAN information is only visible to the Switch and S. GS1920 Series User’s Guide...
Page 168 (in this case, an uplink port on the Switch). If there is another subscriber device connected to this port in the same subscriber VLAN, the receiving port will still be on the list of forwarding destination for the multicast traffic. Otherwise, the Switch removes the receiver port from the forwarding table. GS1920 Series User’s Guide...
Page 169: Multicast Setup
Click Advanced Application > Multicast > IPv4 Multicast to display the screen as shown. This screen shows the IPv4 multicast group information. See Section 23.1 on page 165 for more information on multicasting. Figure 125 Advanced Application > Multicast > IPv4 Multicast GS1920 Series User’s Guide...
Page 170: Igmp Snooping
IGMP group membership entry if it does not receive report messages from the port. 802.1p Priority Select a priority level (0-7) to which the Switch changes the priority in outgoing IGMP control packets. Otherwise, select No-Change to not replace the priority. GS1920 Series User’s Guide...
Page 171 Max Group Num. Enter the number of multicast groups this port is allowed to join. Once a port is registered in the specified number of multicast groups, any new IGMP join report frame(s) is dropped on this port. GS1920 Series User’s Guide...
Page 172: Igmp Snooping Vlan
Click Advanced Application > Multicast > IPv4 Multicast in the navigation panel. Click the IGMP Snooping link and then the IGMP Snooping VLAN link to display the screen as shown. See Section on page 166 for more information on IGMP Snooping VLAN. GS1920 Series User’s Guide...
Page 173 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to your previous configuration. GS1920 Series User’s Guide...
Page 174: Igmp Filtering Profile
To configure additional rule(s) for a profile that you have already added, enter the profile name and specify a different IP multicast address range. Start Address Type the starting multicast IP address for a range of multicast IP addresses that you want to belong to the IGMP filter profile. GS1920 Series User’s Guide...
Page 175: Ipv6 Multicast Status
This field displays IP multicast group addresses. Group Timout This field displays the time (in seconds) that elapses before the Switch removes a MLD group membership entry if it does not receive report messages from the port. GS1920 Series User’s Guide...
Page 176: Mld Snooping-Proxy
Cancel Click Cancel to begin configuring this screen afresh. 23.5.2 MLD Snooping-proxy VLAN Click the VLAN link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy screen to display the screen as shown. GS1920 Series User’s Guide...
Page 177 T = (QI*RV) + MRD, where T = Timeout, QI = Query Interval, RV = Robustness Variable, and MRD = Maximum Response Delay. When an MLD Done message is received, the Switch sets the entry’s lifetime to be the product of Last Member Query Interval and Robustness Variable GS1920 Series User’s Guide...
Page 178: Mld Snooping-Proxy Vlan Port Role Setting
Click Cancel to clear the Delete check boxes. 23.5.3 MLD Snooping-proxy VLAN Port Role Setting Click the Port Role Setting link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN screen to display the screen as shown. GS1920 Series User’s Guide...
Page 179 Report or Done messages when receiving queries from a multicast router. Otherwise, select None if the port is not joining a multicast group or does not belong to this VLAN. GS1920 Series User’s Guide...
Page 180: Mld Snooping-Proxy Vlan Filtering
23.5.4 MLD Snooping-proxy VLAN Filtering Use this screen to configure the Switch’s MLD filtering settings. Click the Filtering link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy screen to display the screen as shown. GS1920 Series User’s Guide...
Page 181 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to reset the fields to your previous configuration. GS1920 Series User’s Guide...
Page 182: Mld Snooping-Proxy Vlan Filtering Profile
Profile Name This field displays the descriptive name of the profile. Start Address This field displays the start of the multicast IPv6 address range. End Address This field displays the end of the multicast IPv6 address range. GS1920 Series User’s Guide...
Page 183: General Mvr Configuration
Note: You can create up to five multicast VLANs and up to 256 multicast rules on the Switch. Note: Your Switch automatically creates a static VLAN (with the same VID) when you create a multicast VLAN in this screen. GS1920 Series User’s Guide...
Page 184 Select this option to set this port as the MVR source port that sends and receives multicast traffic. All source ports must belong to a single multicast VLAN. Receiver Port Select this option to set this port as a receiver port that only receives multicast traffic. GS1920 Series User’s Guide...
Page 185: Mvr Group Configuration
Use this screen to configure MVR IP multicast group address(es). Click the Group Configuration link in the MVR screen. Note: A port can belong to more than one multicast VLAN. However, IP multicast group addresses in different multicast VLANs cannot overlap. GS1920 Series User’s Guide...
Page 186 Delete button to remove the selected entry(ies) from the table. If you delete a multicast VLAN, all multicast groups in this VLAN will also be removed. Cancel Select Cancel to clear the checkbox(es) in the table. GS1920 Series User’s Guide...
Page 187: Mvr Configuration Example
Movie: 230.1.2.50 ~230.1.2.60 VLAN 1 Multicast VID 200 To configure the MVR settings on the Switch, create a multicast VLAN in the MVR screen and set the receiver and source ports. Figure 138 MVR Configuration Example EXAMPLE GS1920 Series User’s Guide...
Page 188 Group Configuration screen. The following figure shows an example where two IPv4 multicast groups (News and Movie) are configured for the multicast VLAN 200. Figure 139 MVR Group Configuration Example EXAMPLE Figure 140 MVR Group Configuration Example EXAMPLE GS1920 Series User’s Guide...
Page 189: Aaa
Switch but user B cannot. The Switch can authorize users based on user accounts configured on the Switch itself or it can use an external server to authorize a large number of users. GS1920 Series User’s Guide...
Page 190: Aaa Screens
RADIUS servers and Section 24.6.2 on page 198 for RADIUS attributes utilized by the authentication features on the Switch. Click on the RADIUS Server Setup link in the AAA screen to view the screen as shown. GS1920 Series User’s Guide...
Page 191 Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external RADIUS server and the Switch. This key is not sent over the network. This key must be the same on the external RADIUS server and the Switch. GS1920 Series User’s Guide...
Page 192: Tacacs+ Server Setup
Use this screen to configure your TACACS+ server settings. See Section on page 190 for more information on TACACS+ servers. Click on the TACACS+ Server Setup link in the AAA screen to view the screen as shown. GS1920 Series User’s Guide...
Page 193 Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. This key is not sent over the network. This key must be the same on the external TACACS+ server and the Switch. GS1920 Series User’s Guide...
Page 194: Aaa Setup
Click Cancel to begin configuring this screen afresh. 24.5 AAA Setup Use this screen to configure authentication and authorization settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. GS1920 Series User’s Guide...
Page 195 • Dot1x: Allow an IEEE 802.1x client to have different bandwidth limit or VLAN ID assigned via the external server. Active Select this to activate authorization for a specified event types. GS1920 Series User’s Guide...
Page 196: Technical Reference
(for example, the Switch). A company can create Vendor Specific Attributes (VSAs) to expand the functionality of a RADIUS server. The Switch supports VSAs that allow you to perform the following actions based on user authentication: GS1920 Series User’s Guide...
Page 197: Tunnel Protocol Attribute
You can configure tunnel protocol attributes on the RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication. The port VLAN settings are fixed and untagged. This will also set the port’s VID. The following table GS1920 Series User’s Guide...
Page 198: Supported Radius Attributes
- The format of the User-Name attribute is $enab#$, where # is the privilege level (1-14). User-Password NAS-Identifier NAS-IP-Address 24.6.3.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 24.6.3.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type GS1920 Series User’s Guide...
Page 199 Chapter 24 AAA - This value is set to Ethernet(15) on the Switch. Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator GS1920 Series User’s Guide...
Page 200: Ip Source Guard
ARP packets in each VLAN. • Use the ARP Inspection Log Status screen (Section 25.8 on page 213) to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. GS1920 Series User’s Guide...
Page 201: What You Need To Know
This field displays how many days, hours, minutes, and seconds the binding is valid; for example, 2d3h4m5s means the binding is still valid for 2 days, 3 hours, 4 minutes, and 5 seconds. This field displays infinity if the binding is always valid (for example, a static binding). GS1920 Series User’s Guide...
Page 202: Ip Source Guard Static Binding
ID as an existing static binding, the new static binding replaces the original one. To open this screen, click Advanced Application > IP Source Guard > Static Binding. Figure 147 Advanced Application > IP Source Guard > Static Binding GS1920 Series User’s Guide...
Page 203: Dhcp Snooping
Click this to clear the Delete check boxes above. 25.4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. GS1920 Series User’s Guide...
Page 204 This field displays how long (in seconds) the Switch waits to update the DHCP snooping database after the current bindings change. This section displays information about the current update and the next update of the DHCP snooping database. GS1920 Series User’s Guide...
Page 205 MAC address and VLAN ID. Invalid interfaces This field displays the number of bindings the Switch ignored because the port number was a trusted interface or does not exist anymore. GS1920 Series User’s Guide...
Page 206: Dhcp Snooping Configure
TFTP server so that they are still available after a restart. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure. GS1920 Series User’s Guide...
Page 207 IP address}/directory, if applicable/file name; for example, tftp://192.168.10.1/database.txt. Timeout interval Enter how long (10-65535 seconds) the Switch tries to complete a specific update in the DHCP snooping database before it gives up. GS1920 Series User’s Guide...
Page 208: Dhcp Snooping Port Configure
To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port. Figure 150 Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port GS1920 Series User’s Guide...
Page 209: Dhcp Snooping Vlan Configure
Switch relays to a DHCP server for each VLAN. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN. Figure 151 Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN GS1920 Series User’s Guide...
Page 210: Dhcp Snooping Vlan Port Configure
Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN > Port. Figure 152 Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN > Port GS1920 Series User’s Guide...
Page 211: Arp Inspection Status
MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection. GS1920 Series User’s Guide...
Page 212: Arp Inspection Vlan Status
25.7 ARP Inspection VLAN Status Use this screen to look at various statistics about ARP packets in each VLAN. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > VLAN Status. GS1920 Series User’s Guide...
Page 213: Arp Inspection Log Status
Use this screen to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status. GS1920 Series User’s Guide...
Page 214 In the ARP Inspection VLAN Configure screen, you can configure the Switch to generate log messages when ARP packets are discarded or forwarded based on the VLAN ID of the ARP packet. See Section 25.9.2 on page 218. Time This field displays when the log message was generated. GS1920 Series User’s Guide...
Page 215: Arp Inspection Configure
Click Clearing log status table in the ARP Inspection Log Status screen to clear the log and reset this counter. See Section 25.8 on page 213. GS1920 Series User’s Guide...
Page 216: Arp Inspection Port Configure
Use this screen to specify whether ports are trusted or untrusted ports for ARP inspection. You can also specify the maximum rate at which the Switch receives ARP packets on each untrusted port. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure > Port. GS1920 Series User’s Guide...
Page 217 1 second, then the Switch accepts a maximum of 15 ARP packets in every one- second interval. If the burst interval is 5 seconds, then the Switch accepts a maximum of 75 ARP packets in every five-second interval. Enter the length (1-15 seconds) of the burst interval. GS1920 Series User’s Guide...
Page 218: Arp Inspection Vlan Configure
This field displays the VLAN ID of each VLAN in the range specified above. If you configure the * VLAN, the settings are applied to all VLANs. Enabled Select Yes to enable ARP inspection on the VLAN. Select No to disable ARP inspection on the VLAN. GS1920 Series User’s Guide...
Page 219: Technical Reference
• The packet is a RELEASE or DECLINE packet, and the source MAC address and source port do not match any of the current bindings. • The rate at which DHCP packets arrive is too high. GS1920 Series User’s Guide...
Page 220: Configuring Dhcp Snooping
You can configure this setting for each source VLAN. This setting is independent of the DHCP relay settings (Chapter 35 on page 281). 25.10.1.4 Configuring DHCP Snooping Follow these steps to configure DHCP snooping on the Switch. GS1920 Series User’s Guide...
Page 221: Arp Inspection Overview
• They are stored only in volatile memory. • They do not use the same space in memory that regular MAC address filters use. • They appear only in the ARP Inspection screens, not in the MAC Address Filter screens. GS1920 Series User’s Guide...
Page 222 ARP inspection so that the Switch has enough time to build the binding table. Enable ARP inspection on each VLAN. Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. GS1920 Series User’s Guide...
Page 223: Loop Guard
If a switch (not in loop state) connects to a switch in loop state, then it will be affected by the switch in loop state in the following way: GS1920 Series User’s Guide...
Page 224 In this example, the probe packet is sent from port N and returns on another port. As long as loop guard is enabled on port N. The Switch will shut down port N if it detects that the probe packet has returned to the Switch. GS1920 Series User’s Guide...
Page 225: Loop Guard Setup
Click Advanced Application > Loop Guard in the navigation panel to display the screen as shown. Note: The loop guard feature can not be enabled on the ports that have Spanning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Figure 165 Advanced Application > Loop Guard GS1920 Series User’s Guide...
Page 226 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 227: Layer 2 Protocol Tunneling
To emulate a point-to-point topology between two customer switches at different sites, such as A and B, you can enable protocol tunneling on edge switches 1 and 2 for PAgP (Port Aggregation Protocol), LACP or UDLD (UniDirectional Link Detection). GS1920 Series User’s Guide...
Page 228: Configuring Layer 2 Protocol Tunneling
Incoming encapsulated layer 2 protocol packets received on a tunnel port are decapsulated and sent to an access port. 27.2 Configuring Layer 2 Protocol Tunneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 229 Select this option to have the Switch tunnel STP (Spanning Tree Protocol) packets so that STP can run properly across the service provider’s network and spanning trees can be set up based on bridge information from all (local and remote) networks. GS1920 Series User’s Guide...
Page 230 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 231: Pppoe
(Section 28.3.3 on page 238) to enable the PPPoE Intermediate Agent on a VLAN. 28.1.2 What You Need to Know Read on for concepts on ARP that can help you configure the screen in this chapter. GS1920 Series User’s Guide...
Page 232 VLAN ID on the PPPoE packet. The identifier-string, slot ID, port number and VLAN ID are separated from each other by a pound key (#), semi-colon (;), period (.), comma (,), forward slash (/) or space. An Agent Circuit ID Sub- GS1920 Series User’s Guide...
Page 233 Switch adds a vendor-specific tag to the packet and then forwards it to the trusted port(s). • The Switch discards PADO and PADS packets which are sent from a PPPoE server but received on an untrusted port. GS1920 Series User’s Guide...
Page 234: The Pppoe Screen
Select this option to enable the PPPoE intermediate agent globally on the Switch. access-node- Enter up to 20 ASCII characters to identify the PPPoE intermediate agent. Hyphens (-) and identifier spaces are also allowed. The default is the Switch’s host name. GS1920 Series User’s Guide...
Page 235: Pppoe Ia Per-Port
Note: The Switch will drop all PPPoE packets if you enable the PPPoE Intermediate Agent on the Switch and there are no trusted ports. Click the Port link in the Intermediate Agent screen to display the screen as shown. GS1920 Series User’s Guide...
Page 236 Switch automatically uses the PPPoE client’s MAC address. The Remote ID you configure for a specific VLAN on a port (in the Advanced Application > PPPoE > Intermediate Agent > Port > VLAN screen) has the highest priority. GS1920 Series User’s Guide...
Page 237: Pppoe Ia Per-Port Per-Vlan
Enter a string of up to 63 ASCII characters that the Switch adds into the Agent Circuit ID sub-option for this VLAN on the specified port. Spaces are allowed. The Circuit ID you configure here has the highest priority. GS1920 Series User’s Guide...
Page 238: Pppoe Ia For Vlan
Changes in this row are copied to all the VLANs as soon as you make them. Enabled Select this option to turn on the PPPoE Intermediate Agent on a VLAN. Circuit-id Select this option to make the Circuit ID settings for a specific VLAN take effect. GS1920 Series User’s Guide...
Page 239 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 240: Error Disable
Use this screen to view whether the Switch detected that control packets exceeded the rate limit configured for a port and related information. Click the Click Here link next to Errdisable Status link in the Advanced Application > Errdisable screen to display the screen as shown. GS1920 Series User’s Guide...
Page 241 - The Switch drops the additional control packets the port(s) has to handle in every one second. Rate This field displays how many control packets this port can receive or transmit per second. It can be adjusted in CPU Protection. 0 means no rate limit. GS1920 Series User’s Guide...
Page 242: Cpu Protection Configuration
Note: After you configure this screen, make sure you also enable error detection for the specific control packets in the Advanced Application > Errdisable > Errdisable Detect screen. Figure 177 Advanced Application > Errdisable > CPU protection GS1920 Series User’s Guide...
Page 243: Error-Disable Detect Configuration
Changes in this row are copied to all the entries as soon as you make them. Active Select this option to have the Switch detect if the configured rate limit for a specific control packet is exceeded and take the action selected below. GS1920 Series User’s Guide...
Page 244: Error-Disable Recovery Configuration
Use this screen to configure the Switch to automatically undo an action after the error is gone. Click the Click Here link next to Errdisable Recovery in the Advanced Application > Errdisable screen to display the screen as shown. Figure 179 Advanced Application > Errdisable > Errdisable Recovery GS1920 Series User’s Guide...
Page 245 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 246: Private Vlan
Note: Make sure you keep at least one port in the promiscuous port list for a VLAN with private VLAN enabled. Otherwise, this VLAN is blocked from the whole network. 30.2 Configuring Private VLAN Click Advanced Application > Private VLAN in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 247 This shows the port(s) that can communicate with any ports in the same VLAN. Ports Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. GS1920 Series User’s Guide...
Page 248: Green Ethernet
31.2 Configuring Green Ethernet Click Advanced Application > Green Ethernet in the navigation panel to display the screen as shown. Note: EEE, Auto Power Down and Short Reach are not supported on an uplink port. GS1920 Series User’s Guide...
Page 249 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 250: Link Layer Discovery Protocol (Lldp)
The optional TLVs are inserted between the Time To Live TLV and the End of LLDPDU TLV. The next figure demonstrates that the network devices Switches and Routers (S and R) transmit and receive device information via LLDPPDU and the network manager can query the information using Simple Network Management Protocol (SNMP). GS1920 Series User’s Guide...
Page 251: Lldp-Med Overview
TLV to provision the endpoint device to such that the endpoint device’s network policy and location identification information is updated. Since LLDPPDU updates status and configuration information periodically, network managers may check the result of provision via remote status. The remote status is updated by receiving LLDP-MED TLVs from endpoint devices. GS1920 Series User’s Guide...
Page 252: Lldp Screens
Click here to show a screen with LLDP information from the neighboring devices. Status LLDP Click here to show a screen to configure LLDP parameters. Configuration LLDP-MED LLDP-MED Click here to show a screen to configure LLDP-MED (Link Layer Discovery Protocol for Configuration Media Endpoint Devices) parameters. GS1920 Series User’s Guide...
Page 253: Lldp Local Status
This screen displays a summary of LLDP status on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) to display the screen as shown next. Figure 186 Advanced Application > LLDP > LLDP Local Status GS1920 Series User’s Guide...
Page 254: Lldp Local Port Status Detail
This screen displays detailed LLDP status for each port on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) > then, click a port number, for example 1 (Port) in the local port column to display the screen as shown next. GS1920 Series User’s Guide...
Page 255 Chapter 32 Link Layer Discovery Protocol (LLDP) Figure 187 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (Basic TLV) GS1920 Series User’s Guide...
Page 256 Chapter 32 Link Layer Discovery Protocol (LLDP) Figure 188 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status Detail (MED TLV) GS1920 Series User’s Guide...
Page 257 Capabilities This field displays which LLDP-MED TLV are capable to transmit on the Switch. • Network Policy • Location Device Type This is the LLDP-MED device class. The Zyxel Switch device type is: • Network Connectivity GS1920 Series User’s Guide...
Page 258: Lldp Remote Status
This is an alpha-numeric string that contains the specific identifier for the port from which this LLDPDU was transmitted. The port ID is identified by the port ID subtype. Port Description This displays a description for the port from which this LLDPDU was transmitted. GS1920 Series User’s Guide...
Page 259: Lldp Remote Port Status Detail
1, in the Index column in the LLDP Remote Status screen to display the screen as shown next. Figure 190 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Basic TLV) GS1920 Series User’s Guide...
Page 260 System Capabilities Supported • System Capabilities Enabled Management This displays the following management address parameters of the remote device. Address TLV • Management Address Subtype • Management Address • Interface Number Subtype • Interface Number • Object Identifier GS1920 Series User’s Guide...
Page 261 LLDP PDU. • Port-Protocol VLAN ID • Port-Protocol VLAN ID Supported • Port-Protocol VLAN ID Enabled Vlan Name TLV This shows the VLAN ID and name for remote device port. • VLAN ID • VLAN Name GS1920 Series User’s Guide...
Page 262 • Port Class • MDI Supported • MDI Enabled • Pair Controlable • PSE Power Pairs • Power Class Max Frame This displays the maximum supported frame size in octets. Size TLV GS1920 Series User’s Guide...
Page 263 Chapter 32 Link Layer Discovery Protocol (LLDP) Figure 192 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED TLV) GS1920 Series User’s Guide...
Page 264 This shows the location information of a caller by its: Identification • Coordinate-base LCI - latitude and longitude coordinates of the Location Configuration Information (LCI) • Civic LCI - IETF Geopriv Civic Address based Location Configuration Information • ELIN - (Emergency Location Identifier Number) GS1920 Series User’s Guide...
Page 265: Lldp Configuration
Power Value - power requirement, in fractions of Watts, in current configuration 32.6 LLDP Configuration Use this creen to configure global LLDP settings on the Switch. Click Advanced Application > LLDP > LLDP Configuration (Click Here) to display the screen as shown next. GS1920 Series User’s Guide...
Page 266 Select whether LLDP transmission and/or reception is allowed on this port. • Disable - not allowed • Tx-Only - transmit only • Rx-Only - receive only • Tx-Rx - transmit and receive Notification Select whether LLDP notification is enabled on this port. GS1920 Series User’s Guide...
Page 267: Lldp Configuration Basic Tlv Setting
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 268: Lldp Configuraion Basic Org-Specific Tlv Setting
Status TLVs on the port(s). All check boxes in this column are enabled by default. Max Frame Select check box to enable or disable the sending of IEEE 802.3 Max Frame Size TLVs on Size the port(s). GS1920 Series User’s Guide...
Page 269: Lldp-Med Configuration
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 270: Lldp-Med Network Policy
This field displays the of index number of the network policy. Click an index number to edit the rule. Port This field displays the port number of the network policy. Application Type This field displays the application type of the network policy. GS1920 Series User’s Guide...
Page 271: Lldp-Med Location
Click Cancel to clear the selected checkboxes in the Delete column. 32.9 LLDP-MED Location Click Advanced Application > LLDP > LLDP-MED Location (Click Here) to display the screen as shown next. Figure 198 Advanced Application > LLDP > LLDP-MED Location GS1920 Series User’s Guide...
Page 272 • Street • Leading-Street-Direction • Street-Suffix • Trailing-Street-Suffix • House-Number • House-Number-Suffix • Landmark • Additional-Location • Name • Zip-Code • Building • Unit • Floor • Room-Number • Place-Type • Postal-Community-Name • Post-Office-Box • Additional-Code GS1920 Series User’s Guide...
Page 273 10 octets to 25 octets. Delete Check the locations that you want to remove in the Delete column, then click the Delete button. Cancel Click Cancel to clear the selected check boxes in the delete column. GS1920 Series User’s Guide...
Page 274: Static Route
Click IP Application > Static Routing in the navigation panel to display the screen as shown. Figure 199 IP Application > Static Routing 33.3 Configuring Static Routing Click IP Application > Static Routing > IPv4 Static Route in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 275 This field displays the descriptive name for this route. This is for identification purposes only. Destination This field displays the IP network address of the final destination. Address Subnet Mask This field displays the subnet mask for this destination. GS1920 Series User’s Guide...
Page 276 Switch that will forward the packet to the destination. Metric This field displays the cost of transmission for routing purposes. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. GS1920 Series User’s Guide...
Page 277: Differentiated Services
Figure 201 DiffServ: Differentiated Service Field DSCP (6 bits) CU (2 bits) DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. GS1920 Series User’s Guide...
Page 278: Activating Diffserv
S - Silver B - Bronze 34.2 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the Switch. Click IP Application > DiffServ in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 279: Dscp-To-Ieee 802.1P Priority Settings
The following table shows the default DSCP-to-IEEE802.1p mapping. Table 134 Default DSCP-IEEE 802.1p Mapping DSCP VALUE 0 – 7 8 – 15 16 – 23 24 – 31 32 – 39 40 – 47 48 – 55 56 – 63 IEEE 802.1p GS1920 Series User’s Guide...
Page 280: Configuring Dscp Settings
Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 281: Dhcp
• Global - The Switch forwards all DHCP requests to the same DHCP server. • VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can be configured to relay DHCP requests to different DHCP servers for clients in different VLAN. GS1920 Series User’s Guide...
Page 282: Dhcp Configuration
DHCPv4 to open screens where you can enable and configure DHCPv4 relay settings and create option 82 profiles. Click the link next to DHCPv6 to open a screen where you can configure DHCPv6 relay settings. Figure 205 IP Application > DHCP GS1920 Series User’s Guide...
Page 283: Dhcpv4 Status
The DHCP Relay Agent Information feature adds an Agent Information field (also known as the Option 82 field) to DHCP requests. The Option 82 field is in the DHCP headers of client DHCP request frames that the Switch relays to a DHCP server. GS1920 Series User’s Guide...
Page 284: Dhcpv4 Option 82 Profile
35.4.2 DHCPv4 Option 82 Profile Use this screen to create DHCPv4 option 82 profiles. Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Option 82 Profile link to display the screen as shown. GS1920 Series User’s Guide...
Page 285 Select this option to have the Switch add its MAC address to the client DHCP requests that it relays to a DHCP server. string Enter a string of up to 64 ASCII characters for the remote ID information in this field. Spaces are allowed. GS1920 Series User’s Guide...
Page 286: Configuring Dhcpv4 Global Relay
Use this screen to configure global DHCPv4 relay. Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Global link to display the screen as shown. Figure 208 IP Application > DHCP > DHCPv4 > Global GS1920 Series User’s Guide...
Page 287: Dhcpv4 Global Relay Port Configure
The Switch adds the Circuit ID sub-option and/or Remote ID sub-option specified in the profile to DHCP requests that it relays to a DHCP server. The profile you select here has priority over the one you select in the DHCP > DHCPv4 > Global screen. GS1920 Series User’s Guide...
Page 288: Global Dhcp Relay Configuration Example
(default1 in this example) to set the Switch to send additional information (such as the VLAN ID) together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appropriate IP address according to the VLAN ID. GS1920 Series User’s Guide...
Page 289: Configuring Dhcpv4 Vlan Settings
Click IP Application > DHCP > DHCPv4 in the navigation panel, then click the VLAN link In the DHCP Status screen that displays. Note: You must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. GS1920 Series User’s Guide...
Page 290 This field displays Relay for the DHCP mode. DHCP Status For DHCP server configuration, this field displays the starting IP address and the size of the IP address pool. For DHCP relay configuration, this field displays the first remote DHCP server IP address. GS1920 Series User’s Guide...
Page 291: Dhcpv4 Vlan Port Configure
Click Clear to reset the fields to the factory defaults. Index This field displays a sequential number for each entry. Click an index number to change the settings. This field displays the VLAN to which the port(s) belongs. GS1920 Series User’s Guide...
Page 292: Example: Dhcp Relay For Two Vlans
(VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.100. Figure 214 DHCP Relay for Two VLANs DHCP:192.168.1.100 VLAN 1 VLAN 2 DHCP:172.16.10.100 For the example network, configure the VLAN Setting screen as shown. GS1920 Series User’s Guide...
Page 293: Dhcpv6 Relay
The interface-ID should not change even after the relay agent restarts. Use this screen to configure DHCPv6 relay settings for a specific VLAN on the Switch. Click IP Application > DHCP > DHCPv6 in the navigation panel to display the screen as shown. GS1920 Series User’s Guide...
Page 294 This field displays whether the remote-ID option is added to DHCPv6 requests from clients in this VLAN. Delete Check the entry(ies) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. GS1920 Series User’s Guide...
Page 295: Arp Setup
In the following example, the Switch does not have IP address and MAC address mapping information for hosts A and B in its ARP table, and host A wants to ping host B. Host A sends an GS1920 Series User’s Guide...
Page 296 In Gratuitous-ARP learning mode, the Switch updates its ARP table with either an ARP reply or a gratuitous ARP request. ARP-Request When the Switch is in ARP-Request learning mode, it updates the ARP table with both ARP replies, gratuitous ARP requests and ARP requests. GS1920 Series User’s Guide...
Page 297: Arp Setup
Figure 217 IP Application > ARP Setup 36.2.1 ARP Learning Use this screen to configure each port’s ARP learning mode. Click the link next to ARP Learning in the IP Application > ARP Setup screen to display the screen as shown next. GS1920 Series User’s Guide...
Page 298 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 299: Maintenance
Table 148 Management > Maintenance LABEL DESCRIPTION Current This field displays which configuration (Configuration 1 or Configuration 2) is currently operating on the Switch. Firmware Click Click Here to go to the Firmware Upgrade screen. Upgrade GS1920 Series User’s Guide...
Page 300: Load Factory Default
Switch IP address (192.168.1.1). 37.2.2 Save Configuration Click Config 1 to save the current configuration settings permanently to Configuration 1 on the Switch. GS1920 Series User’s Guide...
Page 301: Reboot System
Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. Click Management > Maintenance > Firmware Upgrade to view the screen as shown next. GS1920 Series User’s Guide...
Page 302: Restore A Configuration File
Config 1 or Config 2 (Config 1 is Firmware 1 and Config 2 is Firmware 2). 37.4 Restore a Configuration File Use this screen to restore a previously saved configuration from your computer to the Switch using the Restore Configuration screen. GS1920 Series User’s Guide...
Page 303: Backup A Configuration File
Mbuf (Memory Buffer) log and crash reports for issue analysis by customer support should you have difficulty with your Switch. Click Menu > Management > Maintenance > Tech-Support to see the following screen. GS1920 Series User’s Guide...
Page 304 RAM and you will need to save it, otherwise it will be lost in even of Switch shutdown or power outage. Memory Section Click Download to see the memory section log report. This log report is stored in flash memory. GS1920 Series User’s Guide...
Page 305: Technical Reference
This is a sample FTP session showing the transfer of the computer file "firmware.bin" to the Switch. ftp> get config config.cfg This is a sample FTP session saving the current configuration to a file called “config.cfg” on your computer. GS1920 Series User’s Guide...
Page 306: Ftp Command Line Procedure
Transfer files in either ASCII (plain text format) or in binary mode. Configuration and firmware files should be transferred in binary mode. Initial Remote Specify the default remote directory (path). Directory Initial Local Directory Specify the default local directory (path). GS1920 Series User’s Guide...
Page 307: Ftp Restrictions
• FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. GS1920 Series User’s Guide...
Page 308: Access Control
“trusted computers” from which an administrator may use a service to manage the Switch. 38.2 The Access Control Main Screen Use this screen to display the main screen. Click Management > Access Control in the navigation panel to display the main screen as shown. GS1920 Series User’s Guide...
Page 309: Configuring Snmp
Enter the Get Community string, which is the password for the incoming Get- and GetNext- requests from the management station. The Get Community string is only used by SNMP managers using SNMP version 2c or lower. GS1920 Series User’s Guide...
Page 310: Configuring Snmp Trap Group
From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP traps that should be sent to each SNMP manager. Figure 228 Management > Access Control > SNMP > Trap Group GS1920 Series User’s Guide...
Page 311: Enabling/Disabling Sending Of Snmp Traps On A Port
From the SNMP > Trap Group screen, click Port to view the screen as shown. Use this screen to set whether a trap received on the port(s) would be sent to the SNMP manager. Figure 229 Management > Access Control > SNMP > Trap Group > Port GS1920 Series User’s Guide...
Page 312: Configuring Snmp User
User Information Note: Use the username and password of the login accounts you specify in this screen to create accounts on the SNMP v3 manager. Username Specify the username of a login account on the Switch. GS1920 Series User’s Guide...
Page 313 This field displays the encryption method used for SNMP communication with this user. Group This field displays the SNMP group to which this user belongs. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 314: Setting Up Login Accounts
Only the administrator has read/write access. Old Password Type the existing system password (1234 is the default password when shipped). New Password Enter your new system password. Retype to Retype your new system password for confirmation confirm GS1920 Series User’s Guide...
Page 315: Service Port Access Control
“trusted computer(s)” for each service in the Remote Management screen (discussed later). Click Access Control to go back to the main Access Control screen. Figure 232 Management > Access Control > Service Access Control GS1920 Series User’s Guide...
Page 316: Remote Management
Click Management > Access Control > Remote Management to view the screen as shown next. You can specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click Access Control to return to the Access Control screen. GS1920 Series User’s Guide...
Page 317 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 318: Technical Reference
In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext operations. Allows the manager to set values for object variables within an agent. Trap Used by the agent to inform the manager of some events. GS1920 Series User’s Guide...
Page 319 The trap is sent when entries in the remote database have any updates. Link Layer Discovery Protocol (LLDP), defined as IEEE 802.1ab, enables LAN devices that support LLDP to exchange their configured settings. This helps eliminate configuration mismatch issues. GS1920 Series User’s Guide...
Page 320: Introduction To Https
Secure Socket Layer (SSL) is an application-level protocol that enables secure transactions of data by ensuring confidentiality (an unauthorized party cannot read the transferred data), authentication (one party can identify the other party) and data integrity (you know if data has been changed). GS1920 Series User’s Guide...
Page 321 When you attempt to access the Switch HTTPS server, a Windows dialog box pops up asking if you trust the server certificate. You see the following Security Alert screen in Internet Explorer. Select Yes to proceed to the web configurator login screen; if you select No, then web configurator access is blocked. GS1920 Series User’s Guide...
Page 322 After you log in, you will see the red address bar with the message Certificate Error. Click on Certificate Error next to the address bar and click View certificates. Figure 238 Certificate Error (Internet Explorer 7 or 8) EXAMPLE GS1920 Series User’s Guide...
Page 323 Mozilla Firefox Warning Messages When you attempt to access the Switch HTTPS server, a This Connection is Unstructed screen may display. If that is the case, click I Understand the Risks and then the Add Exception... button. GS1920 Series User’s Guide...
Page 324 38.7.2.2 The Main Screen After you accept the certificate and enter the login username and password, the Switch main screen Internet Explorer appears. The lock displayed in the bottom right of the browser status bar (in 6 or GS1920 Series User’s Guide...
Page 325 Chapter 38 Access Control Internet Explorer Mozilla Firefox) or next to the address bar (in 7 or 8) denotes a secure connection. Figure 242 Example: Lock Denoting a Secure Connection EXAMPLE GS1920 Series User’s Guide...
Page 326: Diagnostic
39.2 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests. Figure 243 Management > Diagnostic GS1920 Series User’s Guide...
Page 327 Enter a time interval (in minutes) and click Blink to show the actual location of the Switch between several devices in a rack. The default time interval is 30 minutes. Click Stop to have the Switch terminate the blinking locater LED. GS1920 Series User’s Guide...
Page 328: Syslog
40.2 Syslog Setup Use this screen to configure the device’s system logging settings. Click Management > Syslog in the navigation panel to display this screen. The syslog feature sends logs to an external syslog server. GS1920 Series User’s Guide...
Page 329: Syslog Server Setup
Click Cancel to begin configuring this screen afresh. 40.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to view the screen as shown next. Use this screen to configure a list of external syslog servers. GS1920 Series User’s Guide...
Page 330 This field displays the severity level of the logs that the device is to send to this syslog server. Delete Select an entry’s Delete check box and click Delete to remove the entry. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 331: Cluster Management
The switches being managed by the cluster manager switch. In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. Figure 246 Clustering Application Example GS1920 Series User’s Guide...
Page 332: What You Can Do
Index column is a hyperlink leading to the cluster member switch’s web configurator (see Figure 249 on page 335). MacAddr This is the cluster member switch’s hardware MAC address. Name This is the cluster member switch’s System Name. GS1920 Series User’s Guide...
Page 333: Clustering Management Configuration
41.3 Clustering Management Configuration Use this screen to configure clustering management. Click Management > Cluster Management > Configuration to display the next screen. Figure 248 Management > Cluster Management > Configuration EXAMPLE GS1920 Series User’s Guide...
Page 334 This is the cluster member switch’s model name. Remove Select this checkbox and then click the Remove button to remove a cluster member switch from the cluster. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 335: Technical Reference
Figure 249 Cluster Management: Cluster Member Web Configurator Screen example example 41.4.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. GS1920 Series User’s Guide...
Page 336 410AAHW0.bin member switch. This is the cluster member switch’s firmware name as seen in the cluster fw-00-a0-c5-01-23-46 manager switch. This is the cluster member switch’s configuration file name as seen in the config-00-a0-c5-01-23-46 cluster manager switch. GS1920 Series User’s Guide...
Page 337: Mac Table
Too much port flooding leads to network congestion. • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. GS1920 Series User’s Guide...
Page 338: Viewing The Mac Table
42.2 Viewing the MAC Table Use this screen to check whether the MAC address is dynamic or static. Click Management > MAC Table in the navigation panel to display the following screen. Figure 252 Management > MAC Table GS1920 Series User’s Guide...
Page 339 This is the VLAN group to which this frame belongs. Port This is the port where the above MAC address is forwarded. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). GS1920 Series User’s Guide...
Page 340: Arp Table
MAC address that replied. 43.2 Viewing the ARP Table Use the ARP table to view IP-to-MAC address mapping(s) and remove specific dynamic ARP entries. Click Management > ARP Table in the navigation panel to open the following screen. GS1920 Series User’s Guide...
Page 341 This shows 0 for a static entry. Type This shows whether the IP address is dynamic (learned by the Switch) or static (manually configured in the Basic Setting > IP Setup or IP Application > ARP Setup > Static ARP screen). GS1920 Series User’s Guide...
Page 342: Path Mtu Table
This field displays the maximum transmission unit of the links in the path. Expire This field displays how long (in minutes) an entry can still remain in the Path MTU table before it ages out and needs to be relearned. GS1920 Series User’s Guide...
Page 343: Configure Clone
This chapter shows you how you can copy the settings of one port onto other ports. 45.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. GS1920 Series User’s Guide...
Page 344 Select which port settings (you configured in the Basic Setting menus) should be copied to the destination port(s). Advanced Select which port settings (you configured in the Advanced Application menus) should be Application copied to the destination ports. GS1920 Series User’s Guide...
Page 345 Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. GS1920 Series User’s Guide...
Page 346: Neighbor Table
This field displays the IPv6 address of the Switch or a neighboring device. Address This field displays the MAC address of the IPv6 interface on which the IPv6 address is configure or the MAC address of the neighboring device. GS1920 Series User’s Guide...
Page 347 • dynamic (D): The IP address to MAC address can be successfully resolved using IPv6 Neighbor Discovery protocol. Is it similar as IPv4 ARP (Address Resolution protocol). • static (S): The interface address is statically configured. GS1920 Series User’s Guide...
Page 348: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 3.3 on page Check the hardware connections. See Section 47.1 on page 348. Inspect your cables for damage. Contact the vendor to replace any damaged cables. GS1920 Series User’s Guide...
Page 349: Switch Access And Login
Reset the device to its factory defaults, and try to access the Switch with the default IP address. Section 3.4 on page 30. If the problem continues, contact the vendor, or try one of the advanced suggestions. GS1920 Series User’s Guide...
Page 350 Switch. To avoid unauthorized access, configure the secured client setting in the Management > Access Control > Remote Management screen. Computers not belonging to the secured client set cannot get permission to access the Switch. GS1920 Series User’s Guide...
Page 351: Switch Configuration
Click Save at the top right corner of the web configurator to save the configuration permanently. See also Section 37.5 on page 303 for more information about how to save your configuration. GS1920 Series User’s Guide...
Page 352 Chapter 47 Troubleshooting GS1920 Series User’s Guide...
Page 353: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 354 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de Belarus • ZyXEL BY • http://www.zyxel.by...
Page 355 Appendix A Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland • ZyXEL Communications •...
Page 356 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 357 Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ GS1920 Series User’s Guide...
Page 358 Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za GS1920 Series User’s Guide...
Page 359: Appendix B Common Services
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world wide web. GS1920 Series User’s Guide...
Page 360 Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). GS1920 Series User’s Guide...
Page 361 TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. GS1920 Series User’s Guide...
Page 362: Appendix C Ipv6
A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 176 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits GS1920 Series User’s Guide...
Page 363: Loopback Address
The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 178 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 GS1920 Series User’s Guide...
Page 364 (beginning with fe80). When the interface is connected to a network with a router and the Switch is set to automatically obtain an IPv6 network prefix from the router for the interface, it generates another address which GS1920 Series User’s Guide...
Page 365 The DHCP relay agent can add the remote identification (remote-ID) option and the interface-ID option to the Relay-Forward DHCPv6 messages. The remote-ID option carries a user-defined string, In IPv6, all network interfaces can be associated with several addresses. GS1920 Series User’s Guide...
Page 366 When the Switch needs to send a packet, it first consults the destination cache to determine the next hop. If there is no matching entry in the destination cache, the Switch uses the prefix list to GS1920 Series User’s Guide...
Page 367 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. GS1920 Series User’s Guide...
Page 368 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. GS1920 Series User’s Guide...
Page 369 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 GS1920 Series User’s Guide...
Page 370: Appendix D Legal Information
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 371 è composta l’apparecchiatura. Lo smaltimento abusivo del prodotto da parte del detentore comporta l’applicazione delle sanzioni amministrative previste dalla normativa vigente." CE Marking GS1920 Series User’s Guide...
Page 372 Appendix D Legal Information Environmental Product Declaration GS1920 Series User’s Guide...
Page 373: Index
Class of Service (CoS) configuring classifier syslog messages 153, 155 and QoS trusted ports editing authentication example setup overview Authentication and Authorization, see AAA setup 153, 155 authorization viewing setup cloning a port See port cloning GS1920 Series User’s Guide...
Page 374 Ethernet settings DHCP configuration options relay example setup fan speed DHCP relay option 82 FCC interference statement DHCP snooping file transfer using FTP 44, 201, 219 configuring command example DHCP relay option 82 filename convention, configuration GS1920 Series User’s Guide...
Page 375 IP source guard 200, 201 GVRP (GARP VLAN Registration Protocol) ARP inspection 201, 221 DHCP snooping 201, 219 static bindings IP subnet mask IPv6 hardware installation addressing EUI-64 hardware monitor global address hardware overview interface ID GS1920 Series User’s Guide...
Page 376 Link Layer Discovery Protocol (LLDP ) 250, 251 Management Information Base (MIB) LLDP (Link Layer Discovery Protocol) management port LLDP-MED (Link Layer Discovery Protocol for Media Endpoint Devices) managing the device good habits lockout GS1920 Series User’s Guide...
Page 377 170, 176, 178, 180 port details multicast group port isolation multicast VLAN port mirroring 135, 136 Multiple Rapid Spanning Tree Protocol direction Multiple RSTP egress Multiple Spanning Tree Protocol, See MSTP 112, 114 ingress Multiple STP GS1920 Series User’s Guide...
Page 378 RFC 3164 protocol based VLAN Round Robin Scheduling and IEEE 802.1Q tagging RSTP application example configuration example isolate traffic priority un-tagged packets PVID save configuration 38, 300 PVID (Priority Frame) service access control service port GS1920 Series User’s Guide...
Page 379 34, 54 TACACS+ (Terminal Access Controller Access- link aggregation Control System Plus) MSTP tagged VLAN port Tech-Support port details temperature indicator power time 118, 121 VLAN current time zone 112, 229 bridge ID Time (RFC-868) 118, 121 GS1920 Series User’s Guide...
Page 380 Vendor Specific Attribute, See VSA WRR (Weighted Round Robin Scheduling) ventilation 88, 89 number of possible VIDs priority frame VID (VLAN Identifier) ZON Neighbor Management VLAN acceptable frame type ZON Utility automatic registration ZyNOS (ZyXEL Network Operating System) GS1920 Series User’s Guide...
Page 381 Index GS1920 Series User’s Guide...

ZyXEL Communications GS1920 series User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Getting to Know Your Switch

Chapter 2 Hardware Installation and Connection

Chapter 3 Hardware Panels

Part II: Technical Reference

Technical Reference

Chapter 4 The Web Configurator

Chapter 5 Initial Setup Example

Chapter 6 Tutorials

Chapter 7 ZON Utility, ZON Neighbor Management and Port Status

Chapter 8 Basic Setting

Chapter 9 VLAN

Chapter 10 Static MAC Forward Setup

Chapter 11 Static Multicast Forward Setup

Chapter 12 Filtering

Chapter 13 Spanning Tree Protocol

Chapter 14 Bandwidth Control

Chapter 15 Broadcast Storm Control

Chapter 16 Mirroring

Chapter 17 Link Aggregation

Chapter 18 Port Authentication

Chapter 19 Port Security

Chapter 20 Classifier

Chapter 21 Policy Rule

Chapter 22 Queuing Method

Chapter 23 Multicast

Chapter 24 AAA

Chapter 25 IP Source Guard

Chapter 26 Loop Guard

Chapter 27

Layer 2 Protocol Tunneling

Chapter 28 Pppoe

Chapter 29 Error Disable

Chapter 30 Private VLAN

Chapter 31 Green Ethernet

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications GS1920 series

Summary of Contents for ZyXEL Communications GS1920 series