![Zyxel GS2200-48 [279/352] Access control overview](/img/pdf.png)
Zyxel GS2200-48 [279/352] Access control overview
![Zyxel GS2200-48 [279/352] Access control overview](/views2/1010726/page279/bg117.png)
GS2200-48 User’s Guide
279
CHAPTER 32
Access Control
This chapter describes how to control access to the Switch.
32.1 Access Control Overview
A console port and FTP are allowed one session each, Telnet and SSH share nine
sessions, up to five Web sessions (five different usernames and passwords) and/or
limitless SNMP access control sessions are allowed.
A console port access control session and Telnet access control session cannot
coexist when multi-login is disabled. See the Command Reference guide for more
information on disabling multi-login.
32.2 The Access Control Main Screen
Click Management > Access Control in the navigation panel to display the main
screen as shown.
Figure 151 Management > Access Control
Table 101 Access Control Overview
Console Port SSH Telnet FTP Web SNMP
One session Share up to nine
sessions
One session Up to five
accounts
No limit
Содержание
- Default login details 1
- Firmware version 3 0 edition 1 7 2009 1
- Gs2200 48 1
- Intelligent layer 2 switch 1
- Www zyxel com 1
- About this user s guide 3
- Disclaimer 3
- Documentation feedback 3
- Intended audience 3
- Note it is recommended you use the web configurator to configure the switch 3
- Related documentation 3
- Customer support 4
- Need more help 4
- Document conventions 5
- Note notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 5
- Syntax conventions 5
- Warnings and notes 5
- Warnings tell you about things that could harm you or your device 5
- Document conventions 6
- Figures in this user s guide may use the following generic icons the switch icon is not an exact representation of your device 6
- Gs2200 48 user s guide 6
- Icons used in figures 6
- Gs2200 48 user s guide 7
- Safety warnings 7
- Advanced setup 7 9
- Basic configuration 9 9
- Contents overview 9
- Introduction 1 9
- Ip application 35 9
- Appendices and index 37 10
- Management 69 10
- Product specifications 27 10
- About this user s guide 11
- Chapter 1 getting to know your switch 3 11
- Chapter 2 hardware installation and connection 9 11
- Chapter 3 hardware overview 3 11
- Contents overview 11
- Document conventions 11
- Part i introduction 21 11
- Safety warnings 11
- Table of contents 11
- Table of contents 1 11
- Chapter 4 the web configurator 1 12
- Chapter 5 initial setup example 1 12
- Chapter 6 system status and port statistics 7 12
- Chapter 7 basic setting 3 12
- Part ii basic configuration 39 12
- Chapter 10 filtering 03 13
- Chapter 11 spanning tree protocol 05 13
- Chapter 8 vlan 9 13
- Chapter 9 static mac forward setup 9 13
- Part iii advanced setup 77 13
- Chapter 12 bandwidth control 23 14
- Chapter 13 broadcast storm control 27 14
- Chapter 14 mirroring 29 14
- Chapter 15 link aggregation 31 14
- Chapter 16 port authentication 39 14
- Chapter 17 port security 45 15
- Chapter 18 classifier 49 15
- Chapter 19 policy rule 57 15
- Chapter 20 queuing method 65 15
- Chapter 21 vlan stacking 69 15
- Chapter 22 multicast 75 15
- Chapter 23 authentication accounting 91 16
- Chapter 24 ip source guard 05 16
- Chapter 25 loop guard 31 17
- Chapter 26 static routing 37 17
- Chapter 27 rip 39 17
- Chapter 28 differentiated services 41 17
- Chapter 29 dhcp 49 17
- Part iv ip application 235 17
- Chapter 30 vrrp 59 18
- Chapter 31 maintenance 71 18
- Chapter 32 access control 79 18
- Part v management 269 18
- Chapter 33 diagnostic 99 19
- Chapter 34 syslog 01 19
- Chapter 35 cluster management 05 19
- Chapter 36 mac table 13 19
- Chapter 37 ip table 17 19
- Part vi product specifications 327 20
- Part vii appendices and index 337 20
- Introduction 21
- Bridging example 23
- Getting to know your switch 23
- Hapter 23
- Introduction 23
- Figure 1 bridging application 24
- Figure 2 high performance switching 24
- High performance switching example 24
- Figure 3 gigabit to the desktop 25
- Gigabit ethernet to the desktop 25
- Ieee 802 q vlan application example 25
- Tag based vlan example 25
- Figure 4 shared server using vlan example 26
- Good habits for managing the switch 26
- Ways to manage the switch 26
- Freestanding installation 29
- Hapter 29
- Hardware installation and connection 29
- Attaching the mounting brackets to the switch 30
- Failure to use the proper screws may damage the unit 30
- Mounting the switch on a rack 30
- Precautions 30
- Rack mounted installation requirements 30
- Figure 7 mounting the switch on a rack 31
- Mounting the switch on a rack 31
- Front panel connections 33
- Hapter 33
- Hardware overview 33
- Base t ports 34
- Default ethernet settings 34
- Dual personality interfaces 34
- Mini gbic slots 34
- Figure 10 installed transceiver 35
- Figure 9 transceiver installation example 35
- To avoid possible eye injury do not look into an operating fiber optic module s connectors 35
- Transceiver installation 35
- Transceiver removal 35
- B d e a c 36
- Figure 11 opening the transceiver s latch example 36
- Figure 12 transceiver removal example 36
- Figure 13 rear panel 36
- Rear panel 36
- Console port 37
- External backup power supply connector 37
- Power connector 37
- Table 2 panel connections 37
- Chapter 3 hardware overview 38
- Connect the male 9 pin end of the rs 232 console cable to the console port of the switch connect the female end to a serial port com1 com2 or other com port of your computer 38
- Gs2200 48 user s guide 38
- Led color status description 38
- Table 3 leds 38
- The following table describes the leds 38
- Basic configuration 39
- Hapter 41
- Introduction 41
- System login 41
- The web configurator 41
- B d c e 42
- Figure 14 web configurator login 42
- Figure 15 web configurator home screen status 42
- The status screen 42
- Table 4 navigation panel sub links overview 43
- Basic setting advanced application ip application management 44
- Chapter 4 the web configurator 44
- Gs2200 48 user s guide 44
- Table 5 web configurator screen sub links details 44
- The following table lists the various web configurator screens within the sub links 44
- Basic setting advanced application ip application management 45
- Chapter 4 the web configurator 45
- Gs2200 48 user s guide 45
- Link description 45
- Table 6 web configurator screen sub links details 45
- Table 7 navigation panel links 45
- The following table describes the links in the navigation panel 45
- Chapter 4 the web configurator 46
- Gs2200 48 user s guide 46
- Link description 46
- Table 7 navigation panel links continued 46
- Change your password 47
- Chapter 4 the web configurator 47
- Figure 16 change administrator login password 47
- Gs2200 48 user s guide 47
- Link description 47
- Logins to display the next screen 47
- Table 7 navigation panel links continued 47
- Note be careful not to lock yourself and others out of the switch if you do lock yourself out try using out of band management via the management port to configure the switch 48
- Note use the save link when you are done with a configuration session 48
- Resetting the switch 48
- Saving your configuration 48
- Switch lockout 48
- Figure 17 resetting the switch via the console port 49
- Reload the configuration file 49
- Figure 18 web configurator logout screen 50
- Logging out of the web configurator 50
- Configuring an ip interface 51
- Hapter 51
- Initial setup example 51
- Overview 51
- Example 52
- Figure 19 initial setup network example ip interface 52
- Configuring dhcp server settings 53
- Creating a vlan 53
- Example 53
- Example 54
- Figure 20 initial setup network example vlan 54
- Note the vlan group id field in this screen and the vid field in the ip setup screen refer to the same vlan id 54
- Example 55
- Figure 21 initial setup network example port vid 55
- Setting port vid 55
- Enabling rip 56
- Example 56
- Hapter 57
- Overview 57
- System status and port statistics 57
- Chapter 6 system status and port statistics 58
- Figure 22 status 58
- Gs2200 48 user s guide 58
- Label description 58
- Port status summary 58
- Table 8 status 58
- The following table describes the labels in this screen 58
- To view the port statistics click status in all web configurator screens to display the status screen as shown next 58
- Chapter 6 system status and port statistics 59
- Click a number in the port column in the status screen to display individual port statistics use this screen to check status and detailed performance data about an individual port on the switch 59
- Figure 23 status port details 59
- Gs2200 48 user s guide 59
- Label description 59
- Status port details 59
- Table 8 status continued 59
- Chapter 6 system status and port statistics 60
- Gs2200 48 user s guide 60
- Label description 60
- Port details 60
- The following table describes the labels in this screen 60
- Chapter 6 system status and port statistics 61
- Gs2200 48 user s guide 61
- Label description 61
- Port details continued 61
- Basic setting 63
- Hapter 63
- Overview 63
- Chapter 7 basic setting 64
- Gs2200 48 user s guide 64
- Label description 64
- System info 64
- System info to display the screen as shown you can check the firmware version number and monitor the switch temperature fan speeds and voltage in this screen 64
- System information 64
- The following table describes the labels in this screen 64
- Chapter 7 basic setting 65
- Gs2200 48 user s guide 65
- Label description 65
- System info continued 65
- General setup 66
- Chapter 7 basic setting 67
- General setup continued 67
- Gs2200 48 user s guide 67
- Label description 67
- A vlan virtual local area network allows a physical network to be partitioned into multiple logical networks devices on a logical network belong to one group a device can belong to more than one group with vlan a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router 68
- Chapter 7 basic setting 68
- General setup continued 68
- Gs2200 48 user s guide 68
- In mtu multi tenant unit applications vlan is vital in providing isolation and security among the subscribers when properly configured vlan prevents one subscriber from accessing the network resources of another on the same lan thus a user will not see the printers and hard disks of another user on the same network 68
- Introduction to vlans 68
- Label description 68
- Note vlan is unidirectional it only governs outgoing traffic 68
- See chapter 8 on page 79 for information on port based and 802 q tagged vlans 68
- Vlan also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain in traditional switched environments all broadcast packets go to each and every individual port with vlan all broadcasts are confined to a specific broadcast domain 68
- Chapter 7 basic setting 69
- Click basic setting and then switch setup in the navigation panel to display the screen as shown the vlan setup screens change depending on whether you choose 802 q or port based in the vlan type field in this screen refer to the chapter on vlan 69
- Gs2200 48 user s guide 69
- Label description 69
- Switch setup 69
- Switch setup screen 69
- The following table describes the labels in this screen 69
- Chapter 7 basic setting 70
- Gs2200 48 user s guide 70
- Label description 70
- Switch setup continued 70
- Ip interfaces 71
- Ip setup 71
- Chapter 7 basic setting 72
- Gs2200 48 user s guide 72
- Ip setup 72
- Label description 72
- The following table describes the labels in this screen 72
- Chapter 7 basic setting 73
- Gs2200 48 user s guide 73
- Ip setup continued 73
- Label description 73
- Note deleting all ip subnets locks you out of the switch 73
- Port setup 73
- Port setup in the navigation panel to display the configuration screen 73
- Chapter 7 basic setting 74
- Gs2200 48 user s guide 74
- Label description 74
- Note changes in this row are copied to all the ports as soon as you make them 74
- Note due to space limitations the port name may be truncated in some web configurator screens 74
- Port setup 74
- The following table describes the labels in this screen 74
- Chapter 7 basic setting 75
- Gs2200 48 user s guide 75
- Label description 75
- Port setup continued 75
- Advanced setup 77
- Forwarding tagged and untagged frames 79
- Hapter 79
- Introduction to ieee 802 q tagged vlans 79
- Automatic vlan registration 80
- Garp timers 80
- Table 15 ieee 802 q vlan terminology 80
- Chapter 8 vlan 81
- Enable vlan trunking on a port to allow frames belonging to unknown vlan groups to pass through that port this is useful if you want to set up vlan groups on end devices without having to configure the same vlan groups on intermediary devices 81
- Gs2200 48 user s guide 81
- Port vlan trunking 81
- Table 15 ieee 802 q vlan terminology continued 81
- The following figure describes vlan trunking suppose you want to create vlan groups 1 and 2 v1 and v2 on devices a and b without vlan trunking you must configure vlan groups 1 and 2 on all intermediary switches c d and e otherwise they will drop frames with unknown vlan group tags however with vlan trunking enabled on a port s in each intermediary switch you only need to create vlan groups in the end devices a and b c d and e automatically 81
- Vlan parameter term description 81
- Figure 29 port vlan trunking 82
- Figure 30 switch setup select vlan type 82
- Select the vlan type 82
- Static vlan 82
- Chapter 8 vlan 83
- Gs2200 48 user s guide 83
- Label description 83
- Static vlan status 83
- The following table describes the labels in this screen 83
- Vlan from the navigation panel to display the vlan status screen as shown next 83
- Vlan vlan status 83
- Chapter 8 vlan 84
- Configure a static vlan 84
- Gs2200 48 user s guide 84
- Label description 84
- Static vlan details 84
- The following table describes the labels in this screen 84
- Use this screen to configure and view 802 q vlan parameters for the switch see section 8 on page 79 for more information on static vlan to configure a 84
- Use this screen to view detailed port settings and status of the vlan group see section 8 on page 79 for more information on static vlan click on an index number in the vlan status screen to display vlan details 84
- Vlan detail 84
- Chapter 8 vlan 85
- Gs2200 48 user s guide 85
- Label description 85
- Note changes in this row are copied to all the ports as soon as you make them 85
- Static vlan 85
- Static vlan click static vlan in the vlan status screen to display the screen as shown next 85
- The following table describes the related labels in this screen 85
- Chapter 8 vlan 86
- Gs2200 48 user s guide 86
- Label description 86
- Static vlan continued 86
- Chapter 8 vlan 87
- Configure vlan port settings 87
- Gs2200 48 user s guide 87
- Label description 87
- Note changes in this row are copied to all the ports as soon as you make them 87
- The following table describes the labels in this screen 87
- Use the vlan port setting screen to configure the static vlan ieee 802 q settings on a port see section 8 on page 79 for more information on static vlan click the vlan port setting link in the vlan status screen 87
- Vlan port setting 87
- Chapter 8 vlan 88
- For example an isp internet service provider may divide different types of services it provides to customers into different ip subnets traffic for voice services is designated for ip subnet 172 6 24 video for 192 68 24 and data for 10 24 the switch can then be configured to group incoming traffic based on the source ip subnet of incoming frames 88
- Gs2200 48 user s guide 88
- Label description 88
- Subnet based vlans 88
- Subnet based vlans allow you to group traffic into logical vlans based on the source ip subnet you specify when a frame is received on a port the switch checks if a tag is added already and the ip subnet it came from the untagged packets from the same ip subnet are then placed in the same subnet based vlan one advantage of using subnet based vlans is that priority can be assigned to traffic from the same ip subnet 88
- Vlan port setting continued 88
- You can then configure a subnet based vlan with priority 6 and vid of 100 for traffic received from ip subnet 172 6 24 voice services you can also have a subnet based vlan with priority 5 and vid of 200 for traffic received from ip subnet 192 68 24 video services lastly you can configure vlan with priority 3 and vid of 300 for traffic received from ip subnet 10 24 data 88
- Configuring subnet based vlan 89
- Figure 35 subnet based vlan application example 89
- Chapter 8 vlan 90
- Gs2200 48 user s guide 90
- Label description 90
- Note subnet based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 90
- Subnet based vlan 90
- The following table describes the labels in this screen 90
- Chapter 8 vlan 91
- For example ports 1 2 3 and 4 belong to static vlan 100 and ports 4 5 6 7 belong to static vlan 120 you can configure a protocol based vlan a with priority 3 for arp traffic received on port 1 2 and 3 you can also have a protocol based vlan b with priority 2 for apple talk traffic received on port 6 and 7 all upstream arp traffic from port 1 2 and 3 will be grouped together and all upstream apple 91
- Gs2200 48 user s guide 91
- Label description 91
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 91
- Protocol based vlans 91
- Protocol based vlans allow you to group traffic into logical vlans based on the protocol you specify when an upstream frame is received on a port configured for a protocol based vlan the switch checks if a tag is added already and its protocol the untagged packets of the same protocol are then placed in the same protocol based vlan one advantage of using protocol based vlans is that priority can be assigned to traffic of the same protocol 91
- Subnet based vlan continued 91
- Configuring protocol based vlan 92
- Figure 37 protocol based vlan application example 92
- Protocol based vlan 92
- Chapter 8 vlan 93
- Gs2200 48 user s guide 93
- Label description 93
- Note protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based vlans 93
- Protocol based vlan setup 93
- The following table describes the labels in this screen 93
- Create an ip based vlan example 94
- Example 94
- Figure 39 protocol based vlan configuration example 94
- Configure a port based vlan 95
- Note in screens such as ip setup and filtering that require a vid you must enter 1 as the vid 95
- Note when you activate port based vlan the switch uses a default vlan id of 1 you cannot change it 95
- Port based vlan setup 95
- Port based vlan setup all connected 96
- Vlan port based vlan setup port isolation 97
- Chapter 8 vlan 98
- Gs2200 48 user s guide 98
- Label description 98
- The following table describes the labels in this screen 98
- Vlan port based vlan setup 98
- Configuring static mac forwarding 99
- Hapter 99
- Overview 99
- Static mac forward setup 99
- Chapter 9 static mac forward setup 100
- Gs2200 48 user s guide 100
- Label description 100
- Note static mac addresses do not age out 100
- Static mac forwarding 100
- Static mac forwarding in the navigation panel to display the configuration screen as shown 100
- The following table describes the labels in this screen 100
- Chapter 9 static mac forward setup 101
- Gs2200 48 user s guide 101
- Label description 101
- Static mac forwarding continued 101
- Configure a filtering rule 103
- Filtering 103
- Hapter 103
- Chapter 10 filtering 104
- Filtering continued 104
- Gs2200 48 user s guide 104
- Label description 104
- Hapter 105
- Spanning tree protocol 105
- Stp rstp overview 105
- Stp terminology 105
- How stp works 106
- Table 25 stp path costs 106
- Mstp network example 107
- Multiple stp 107
- Note the listening state does not exist in rstp 107
- Stp port states 107
- Table 26 stp port states 107
- Figure 44 stp rstp network example 108
- Figure 45 mstp network example 108
- Mst region 108
- Vlan 1 vlan 2 108
- Common and internal spanning tree cist 109
- Figure 46 mstis in different regions 109
- Mst instance 109
- Figure 47 mstp and legacy rstp network example 110
- Spanning tree protocol 110
- Spanning tree protocol status screen 110
- Chapter 11 spanning tree protocol 111
- Configuration 111
- Gs2200 48 user s guide 111
- Label description 111
- Spanning tree configuration 111
- Spanning tree protocol 111
- The following table describes the labels in this screen 111
- Configure rapid spanning tree protocol 112
- 2 hello time 1 113
- Chapter 11 spanning tree protocol 113
- Configuration screen to enable rstp on the switch 113
- Gs2200 48 user s guide 113
- Label description 113
- Note changes in this row are copied to all the ports as soon as you make them 113
- The following table describes the labels in this screen 113
- Chapter 11 spanning tree protocol 114
- Gs2200 48 user s guide 114
- Label description 114
- Note this screen is only available after you activate rstp on the switch 114
- Rapid spanning tree protocol status 114
- Rstp continued 114
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 11 on page 105 for more information on rstp 114
- Status rstp 114
- Chapter 11 spanning tree protocol 115
- Gs2200 48 user s guide 115
- Label description 115
- Note the listening state does not exist in rstp 115
- Status rstp 115
- The following table describes the labels in this screen 115
- Configure multiple spanning tree protocol 116
- 2 hello time 1 117
- Chapter 11 spanning tree protocol 117
- Configuration screen to enable mstp on the switch 117
- Gs2200 48 user s guide 117
- Label description 117
- The following table describes the labels in this screen 117
- Chapter 11 spanning tree protocol 118
- Gs2200 48 user s guide 118
- Label description 118
- Mstp continued 118
- Note changes in this row are copied to all the ports as soon as you make them 118
- Mstp continued 119
- Multiple spanning tree protocol status 119
- Note this screen is only available after you activate mstp on the switch 119
- Status mstp 119
- Chapter 11 spanning tree protocol 120
- Gs2200 48 user s guide 120
- Label description 120
- Status mstp 120
- The following table describes the labels in this screen 120
- Chapter 11 spanning tree protocol 121
- Gs2200 48 user s guide 121
- Label description 121
- Status mstp 121
- Bandwidth control 123
- Bandwidth control overview 123
- Cir and pir 123
- Hapter 123
- Bandwidth control 124
- Bandwidth control in the navigation panel to bring up the screen as shown next 124
- Bandwidth control setup 124
- Chapter 12 bandwidth control 124
- Gs2200 48 user s guide 124
- Label description 124
- Note changes in this row are copied to all the ports as soon as you make them 124
- The following table describes the related labels in this screen 124
- Bandwidth control continued 125
- Chapter 12 bandwidth control 125
- Gs2200 48 user s guide 125
- Label description 125
- Broadcast storm control 127
- Broadcast storm control setup 127
- Hapter 127
- Broadcast storm control 128
- Chapter 13 broadcast storm control 128
- Gs2200 48 user s guide 128
- Label description 128
- Note changes in this row are copied to all the ports as soon as you make them 128
- The following table describes the labels in this screen 128
- Hapter 129
- Mirroring 129
- Port mirroring setup 129
- Chapter 14 mirroring 130
- Gs2200 48 user s guide 130
- Label description 130
- Mirroring 130
- Note changes in this row are copied to all the ports as soon as you make them 130
- The following table describes the labels in this screen 130
- Dynamic link aggregation 131
- Hapter 131
- Link aggregation 131
- Link aggregation overview 131
- Link aggregation id 132
- Link aggregation status 132
- Table 35 link aggregation id local switch 132
- Table 36 link aggregation id peer switch 132
- Chapter 15 link aggregation 133
- Gs2200 48 user s guide 133
- Label description 133
- Link aggregation status 133
- The following table describes the labels in this screen 133
- Chapter 15 link aggregation 134
- Gs2200 48 user s guide 134
- Label description 134
- Link aggregation setting 134
- Link aggregation setting to display the screen shown next see section 15 on page 131 for more information on link aggregation 134
- The following table describes the labels in this screen 134
- Link aggregation control protocol 135
- Link aggregation setting 135
- Chapter 15 link aggregation 136
- Gs2200 48 user s guide 136
- Label description 136
- Note changes in this row are copied to all the ports as soon as you make them 136
- Note do not configure this screen unless you want to enable dynamic link aggregation 136
- Static trunking example 136
- The following table describes the labels in this screen 136
- This example shows you how to create a static port trunk group for ports 2 5 136
- Example 137
- Figure 60 trunking example physical connections 137
- Figure 61 trunking example configuration screen 137
- Hapter 139
- Ieee 802 x authentication 139
- Port authentication 139
- Port authentication overview 139
- Mac authentication 140
- Authentication reply 141
- Authentication request authentication request 141
- Figure 63 mac authentication process 141
- New connection 141
- Port authentication 141
- Port authentication configuration 141
- Session granted denied 141
- Activate ieee 802 x security 142
- Chapter 16 port authentication 142
- Gs2200 48 user s guide 142
- Label description 142
- Note changes in this row are copied to all the ports as soon as you make them 142
- Note you must first enable 802 x authentication on the switch before configuring it on each port 142
- The following table describes the labels in this screen 142
- Use this screen to activate ieee 802 x security in the port authentication screen click 802 x to display the configuration screen as shown 142
- Activate mac authentication 143
- Chapter 16 port authentication 143
- Gs2200 48 user s guide 143
- Label description 143
- Mac authentication 143
- Use this screen to activate mac authentication in the port authentication screen click mac authentication to display the configuration screen as shown 143
- X continued 143
- Chapter 16 port authentication 144
- Gs2200 48 user s guide 144
- Label description 144
- Mac authentication 144
- Note changes in this row are copied to all the ports as soon as you make them 144
- Note if the aging time in the switch setup screen is set to a lower value then it supersedes this setting see section 7 on page 81 144
- Note you must first enable mac authentication on the switch before configuring it on each port 144
- The following table describes the labels in this screen 144
- About port security 145
- Hapter 145
- Port security 145
- Chapter 17 port security 146
- Gs2200 48 user s guide 146
- Label description 146
- Note changes in this row are copied to all the ports as soon as you make them 146
- Port security 146
- Port security in the navigation panel to display the screen as shown 146
- Port security setup 146
- The following table describes the labels in this screen 146
- Chapter 17 port security 147
- Gs2200 48 user s guide 147
- Label description 147
- Port security continued 147
- About the classifier and qos 149
- Classifier 149
- Configuring the classifier 149
- Hapter 149
- Chapter 18 classifier 150
- Classifier 150
- Classifier in the navigation panel to display the configuration screen as shown 150
- Gs2200 48 user s guide 150
- Label description 150
- The following table describes the labels in this screen 150
- Chapter 18 classifier 151
- Classifier continued 151
- Gs2200 48 user s guide 151
- Label description 151
- Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers 151
- Chapter 18 classifier 152
- Classifier continued 152
- Classifier summary table 152
- Gs2200 48 user s guide 152
- Label description 152
- Note when two rules conflict with each other a higher layer rule has priority over a lower layer rule 152
- Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers 152
- To view a summary of the classifier configuration scroll down to the summary table at the bottom of the classifier screen to change the settings of a rule click a number in the index field 152
- Viewing and editing classifier configuration 152
- Chapter 18 classifier 153
- Ethernet type protocol number 153
- Gs2200 48 user s guide 153
- In the internet protocol there is a field called protocol to identify the ip protocol type the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 153
- Label description 153
- Protocol type protocol number 153
- Table 44 classifier summary table 153
- Table 45 common ethernet types and protocol number 153
- Table 46 common ip protocol types and protocol numbers 153
- The following table describes the labels in this screen 153
- The following table shows some other common ethernet types and the corresponding protocol number 153
- Chapter 18 classifier 154
- Gs2200 48 user s guide 154
- Port number port name 154
- Some of the most common ip ports are 154
- Table 47 common tcp and udp port numbers 154
- Classifier example 155
- Example 155
- Figure 70 classifier example 155
- Diffserv 157
- Dscp and per hop behavior 157
- Hapter 157
- Policy rule 157
- Policy rules overview 157
- Configuring policy rules 158
- Policy rule 159
- Chapter 19 policy rule 160
- Gs2200 48 user s guide 160
- Label description 160
- Policy rule 160
- The following table describes the labels in this screen 160
- Chapter 19 policy rule 161
- Gs2200 48 user s guide 161
- Label description 161
- Policy rule continued 161
- Policy rule summary table 161
- To view a summary of the classifier configuration scroll down to the summary table at the bottom of the policy screen to change the settings of a rule click a number in the index field 161
- Viewing and editing policy configuration 161
- Chapter 19 policy rule 162
- Gs2200 48 user s guide 162
- Label description 162
- Table 49 policy summary table 162
- The following table describes the labels in this screen 162
- Example 163
- Figure 73 policy example 163
- Policy example 163
- Hapter 165
- Queuing method 165
- Queuing method overview 165
- Strictly priority 165
- Weighted fair queuing 165
- Weighted round robin scheduling wrr 166
- Configuring queuing 167
- Note changes in this row are copied to all the ports as soon as you make them 167
- Queuing method 167
- Chapter 20 queuing method 168
- Gs2200 48 user s guide 168
- Label description 168
- Queuing method continued 168
- Hapter 169
- Vlan stacking 169
- Vlan stacking example 169
- Vlan stacking overview 169
- Figure 75 vlan stacking example 170
- Note static vlan tx tagging must be disabled on a port where you choose access port 170
- Note static vlan tx tagging must be enabled on a port where you choose tunnel port 170
- Vlan stacking port roles 170
- Frame format 171
- Table 51 vlan tag format 171
- Vlan tag format 171
- Chapter 21 vlan stacking 172
- Configure the fields as highlighted in the switch vlan stacking screen 172
- Gs2200 48 user s guide 172
- Table 52 single and double tagged 802 1q frame format 172
- Table 53 802 q frame 172
- Chapter 21 vlan stacking 173
- Configuring vlan stacking 173
- Gs2200 48 user s guide 173
- Label description 173
- Note changes in this row are copied to all the ports as soon as you make them 173
- The following table describes the labels in this screen 173
- Vlan stacking 173
- Vlan stacking to display the screen as shown 173
- Chapter 21 vlan stacking 174
- Gs2200 48 user s guide 174
- Label description 174
- Vlan stacking continued 174
- Hapter 175
- Igmp filtering 175
- Ip multicast addresses 175
- Multicast 175
- Multicast overview 175
- Igmp snooping 176
- Igmp snooping and vlans 176
- Multicast 176
- Multicast status 176
- Table 55 multicast status 176
- Multicast setting 177
- Table 55 multicast status continued 177
- Chapter 22 multicast 178
- Gs2200 48 user s guide 178
- Label description 178
- Multicast setting 178
- Note changes in this row are copied to all the ports as soon as you make them 178
- Note if you enable igmp filtering you must create and assign igmp filtering profiles for the ports that you want to allow to join multicast groups 178
- The following table describes the labels in this screen 178
- Chapter 22 multicast 179
- Gs2200 48 user s guide 179
- Igmp snooping vlan 179
- Label description 179
- Multicast in the navigation panel click the multicast setting link and then the igmp snooping vlan link to display the 179
- Multicast setting continued 179
- Chapter 22 multicast 180
- Gs2200 48 user s guide 180
- Igmp snooping vlan 180
- Label description 180
- Note you must also enable igmp snooping in the multicast setting screen first 180
- Screen as shown see section 22 on page 176 for more information on igmp snooping vlan 180
- The following table describes the labels in this screen 180
- An igmp filtering profile specifies a range of multicast groups that clients connected to the switch are able to join a profile contains a range of multicast ip addresses which you want clients to be able to join profiles are assigned to ports in the multicast setting screen clients connected to those ports are then able to join the multicast groups specified in the profile each port can be assigned a single profile a profile can be assigned to multiple ports 181
- Chapter 22 multicast 181
- Gs2200 48 user s guide 181
- Igmp filtering profile 181
- Igmp snooping vlan continued 181
- Label description 181
- Note you cannot configure the same vlan id as in the mvr screen 181
- Chapter 22 multicast 182
- Gs2200 48 user s guide 182
- Igmp filtering profile 182
- Igmp filtering profile link to display the screen as shown 182
- Label description 182
- The following table describes the labels in this screen 182
- Figure 81 mvr network example 183
- Igmp filtering profile continued 183
- Mvr overview 183
- Types of mvr ports 183
- Figure 82 mvr multicast television example 184
- How mvr works 184
- Mvr modes 184
- General mvr configuration 185
- Note you can create up to three multicast vlans and up to 256 multicast rules on the switch 185
- Note your switch automatically creates a static vlan with the same vid when you create a multicast vlan in this screen 185
- Chapter 22 multicast 186
- Gs2200 48 user s guide 186
- Label description 186
- Mvr continued 186
- Note changes in this row are copied to all the ports as soon as you make them 186
- All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group 187
- Chapter 22 multicast 187
- Configure mvr ip multicast group address es in the group configuration screen click group configuration in the mvr screen 187
- Gs2200 48 user s guide 187
- Label description 187
- Mvr group configuration 187
- Note a port can belong to more than one multicast vlan however ip multicast group addresses in different multicast vlans cannot overlap 187
- The following table describes the labels in this screen 187
- Chapter 22 multicast 188
- Figure 85 mvr configuration example 188
- Gs2200 48 user s guide 188
- Label description 188
- Mvr configuration example 188
- Mvr group configuration 188
- The following figure shows a network example where ports 1 2 and 3 on the switch belong to vlan 1 in addition port 7 belongs to the multicast group with vid 200 to receive multicast traffic the news and movie channels from the remote streaming media server s computers a b and c in vlan 1 are able to receive the traffic 188
- Example 189
- Figure 86 mvr configuration example 189
- Example 190
- Figure 87 mvr group configuration example 190
- Figure 88 mvr group configuration example 190
- Authentication accounting 191
- Authentication authorization and accounting 191
- Hapter 191
- Authentication and accounting screens 192
- Client aaa server 192
- Figure 89 aaa server 192
- Local user accounts 192
- Radius and tacacs 192
- Table 61 radius vs tacacs 192
- Auth and acct 193
- Radius server setup 193
- Chapter 23 authentication accounting 194
- Gs2200 48 user s guide 194
- Label description 194
- Radius server setup 194
- The following table describes the labels in this screen 194
- Chapter 23 authentication accounting 195
- Gs2200 48 user s guide 195
- Label description 195
- Radius server setup 195
- Tacacs server setup 195
- Use this screen to configure your tacacs server settings see section 23 on page 192 for more information on tacacs servers click on the tacacs server setup link in the authentication and accounting screen to view the screen as shown 195
- Chapter 23 authentication accounting 196
- Gs2200 48 user s guide 196
- Label description 196
- Tacacs server setup 196
- The following table describes the labels in this screen 196
- Auth and acct setup 197
- Authentication and accounting setup 197
- Chapter 23 authentication accounting 197
- Gs2200 48 user s guide 197
- Label description 197
- Tacacs server setup 197
- Use this screen to configure authentication and accounting settings on the switch click on the auth and acct setup link in the authentication and accounting screen to view the screen as shown 197
- Auth and acct setup 198
- Chapter 23 authentication accounting 198
- Gs2200 48 user s guide 198
- Label description 198
- The following table describes the labels in this screen 198
- Auth and acct setup continued 199
- Chapter 23 authentication accounting 199
- Gs2200 48 user s guide 199
- Label description 199
- Rfc 2865 standard specifies a method for sending vendor specific information between a radius server and a network access device for example the switch a company can create vendor specific attributes vsas to expand the functionality of a radius server 199
- Vendor specific attribute 199
- Assign account privilege levels for the authenticated user 200
- Chapter 23 authentication accounting 200
- Function attribute 200
- Gs2200 48 user s guide 200
- Limit bandwidth on incoming or outgoing traffic for the port the user connects to 200
- Note if you set the privilege level of a login account differently on the radius server s and the switch the user is assigned a privilege level from the database radius or local the switch uses first for user authentication 200
- Note refer to the documentation that comes with your radius server on how to configure vsas for users authenticating via the radius server 200
- Table 65 supported vsas 200
- The following table describes the vsas supported on the switch 200
- The switch supports vsas that allow you to perform the following actions based on user authentication 200
- The vsas are composed of the following 200
- Tunnel protocol attribute 200
- Vendor data a value you want to assign to the setting 200
- Vendor id an identification number assigned to the company by the iana internet assigned numbers authority zyxel s vendor id is 890 200
- Vendor type a vendor specified attribute identifying the setting you want to modify 200
- You can configure tunnel protocol attributes on the radius server refer to your radius server documentation to assign a port on the switch to a vlan based on 200
- Attributes used for authenticating privilege access 201
- Attributes used for authentication 201
- Note you must also create a vlan with the specified vid on the switch 201
- Supported radius attributes 201
- Table 66 supported tunnel protocol attribute 201
- Attributes used by the ieee 802 x authentication 202
- Attributes used for accounting 202
- Attributes used for accounting system events 202
- Attributes used to login users 202
- Attributes used for accounting exec events 203
- Attributes used for accounting ieee 802 x events 203
- Table 67 radius attributes exec events via console 203
- Table 68 radius attributes exec events via telnet ssh 203
- Table 69 radius attributes exec events via console 203
- Table 69 radius attributes exec events via console 204
- Hapter 205
- Ip source guard 205
- Ip source guard overview 205
- Dhcp snooping database 206
- Dhcp snooping overview 206
- Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 206
- Trusted vs untrusted ports 206
- Configuring dhcp snooping 207
- Dhcp relay option 82 information 207
- Figure 94 dhcp snooping database file format 207
- Arp inspection and mac address filters 208
- Arp inspection overview 208
- Figure 95 example man in the middle attack 208
- Configuring arp inspection 209
- Ip source guard 209
- Note it is recommended you enable dhcp snooping at least one day before you enable arp inspection so that the switch has enough time to build the binding table 209
- Syslog 209
- Trusted vs untrusted ports 209
- Chapter 24 ip source guard 210
- Figure 96 ip source guard 210
- Gs2200 48 user s guide 210
- Ip source guard 210
- Ip source guard static binding 210
- Label description 210
- Table 70 ip source guard 210
- The following table describes the labels in this screen 210
- Use this screen to manage static bindings for dhcp snooping and arp inspection static bindings are uniquely identified by the mac address and vlan id each mac address and vlan id can only be in one static binding if you try to create a static binding with the same mac address and vlan id as an existing static binding the 210
- Chapter 24 ip source guard 211
- Figure 97 ip source guard static binding 211
- Gs2200 48 user s guide 211
- Label description 211
- Static binding 211
- Table 71 ip source guard static binding 211
- The following table describes the labels in this screen 211
- Chapter 24 ip source guard 212
- Gs2200 48 user s guide 212
- Label description 212
- Table 71 ip source guard static binding continued 212
- Dhcp snooping 213
- Figure 98 dhcp snooping 214
- Chapter 24 ip source guard 215
- Gs2200 48 user s guide 215
- Label description 215
- Table 72 dhcp snooping 215
- The following table describes the labels in this screen 215
- Chapter 24 ip source guard 216
- Gs2200 48 user s guide 216
- Label description 216
- Table 72 dhcp snooping continued 216
- Dhcp snooping configure 217
- Figure 99 dhcp snooping configure 217
- Table 72 dhcp snooping continued 217
- Chapter 24 ip source guard 218
- Gs2200 48 user s guide 218
- Label description 218
- Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 218
- Note you have to enable dhcp snooping on the dhcp vlan too 218
- Table 73 dhcp snooping configure 218
- The following table describes the labels in this screen 218
- Chapter 24 ip source guard 219
- Dhcp snooping port configure 219
- Figure 100 dhcp snooping port configure 219
- Gs2200 48 user s guide 219
- Label description 219
- Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 219
- Table 73 dhcp snooping configure continued 219
- Use this screen to specify whether ports are trusted or untrusted ports for dhcp snooping 219
- Chapter 24 ip source guard 220
- Dhcp snooping vlan configure 220
- Gs2200 48 user s guide 220
- Label description 220
- Table 74 dhcp snooping port configure 220
- The following table describes the labels in this screen 220
- Use this screen to enable dhcp snooping on each vlan and to specify whether or not the switch adds dhcp relay agent option 82 information chapter 29 on page 249 to dhcp requests that the switch relays to a dhcp server for each vlan to 220
- Chapter 24 ip source guard 221
- Figure 101 dhcp snooping vlan configure 221
- Gs2200 48 user s guide 221
- Label description 221
- Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 221
- Table 75 dhcp snooping vlan configure 221
- The following table describes the labels in this screen 221
- Arp inspection 222
- Arp inspection status 222
- Chapter 24 ip source guard 222
- Figure 102 arp inspection status 222
- Gs2200 48 user s guide 222
- Label description 222
- Table 75 dhcp snooping vlan configure continued 222
- Table 76 arp inspection status 222
- The following table describes the labels in this screen 222
- Arp inspection vlan status 223
- Chapter 24 ip source guard 223
- Figure 103 arp inspection vlan status 223
- Gs2200 48 user s guide 223
- Label description 223
- Table 76 arp inspection status continued 223
- Table 77 arp inspection vlan status 223
- The following table describes the labels in this screen 223
- Vlan status 223
- Arp inspection log status 224
- Chapter 24 ip source guard 224
- Figure 104 arp inspection log status 224
- Gs2200 48 user s guide 224
- Label description 224
- Log status 224
- Table 77 arp inspection vlan status 224
- Table 78 arp inspection log status 224
- The following table describes the labels in this screen 224
- Arp inspection configure 225
- Chapter 24 ip source guard 225
- Gs2200 48 user s guide 225
- Label description 225
- Table 78 arp inspection log status continued 225
- Use this screen to enable arp inspection on the switch you can also configure the length of time the switch stores records of discarded arp packets and global 225
- Chapter 24 ip source guard 226
- Configure 226
- Figure 105 arp inspection configure 226
- Gs2200 48 user s guide 226
- Label description 226
- Table 79 arp inspection configure 226
- The following table describes the labels in this screen 226
- Arp inspection port configure 227
- Chapter 24 ip source guard 227
- Gs2200 48 user s guide 227
- Label description 227
- Table 79 arp inspection configure continued 227
- Use this screen to specify whether ports are trusted or untrusted ports for arp inspection you can also specify the maximum rate at which the switch receives 227
- Chapter 24 ip source guard 228
- Figure 106 arp inspection port configure 228
- Gs2200 48 user s guide 228
- Label description 228
- Table 80 arp inspection port configure 228
- The following table describes the labels in this screen 228
- Arp inspection vlan configure 229
- Chapter 24 ip source guard 229
- Figure 107 arp inspection vlan configure 229
- Gs2200 48 user s guide 229
- Label description 229
- Table 80 arp inspection port configure continued 229
- Table 81 arp inspection vlan configure 229
- The following table describes the labels in this screen 229
- Chapter 24 ip source guard 230
- Gs2200 48 user s guide 230
- Label description 230
- Table 81 arp inspection vlan configure continued 230
- Hapter 231
- Loop guard 231
- Loop guard overview 231
- Figure 109 switch in loop state 232
- Figure 110 loop guard probe packet 232
- Loop guard setup 233
- Chapter 25 loop guard 234
- Gs2200 48 user s guide 234
- Label description 234
- Loop guard 234
- Note changes in this row are copied to all the ports as soon as you make them 234
- The following table describes the labels in this screen 234
- Ip application 235
- Configuring static routing 237
- Hapter 237
- Static routing 237
- Chapter 26 static routing 238
- Gs2200 48 user s guide 238
- Label description 238
- Static routing continued 238
- Configuring rip 239
- Hapter 239
- Rip overview 239
- Automatically created when you configure a new ip domain in the ip setup screen refer to section 7 on page 71 240
- Chapter 27 rip 240
- Gs2200 48 user s guide 240
- Label description 240
- The following table describes the labels in this screen 240
- Differentiated services 241
- Diffserv overview 241
- Dscp and per hop behavior 241
- Hapter 241
- Diffserv network example 242
- Figure 116 diffserv network 242
- Two rate three color marker traffic policing 242
- Figure 117 trtcm color blind mode 243
- Trtcm color aware mode 243
- Trtcm color blind mode 243
- Activating diffserv 244
- Diffserv 244
- Figure 118 trtcm color aware mode 244
- Chapter 28 differentiated services 245
- Configuring 2 rate 3 color marker settings 245
- Diffserv 245
- Gs2200 48 user s guide 245
- Label description 245
- Note changes in this row are copied to all the ports as soon as you make them 245
- The following table describes the labels in this screen 245
- Use this screen to configure trtcm settings click the 2 rate 3 color marker link in the diffserv screen to display the screen as shown next 245
- Chapter 28 differentiated services 246
- Gs2200 48 user s guide 246
- Label description 246
- Note changes in this row are copied to all the ports as soon as you make them 246
- Note you cannot enable both trtcm and bandwidth control at the same time 246
- Note you must also activate diffserv on the switch and the individual ports for the switch to drop red high loss priority colored packets 246
- Rate 3 color marker 246
- The following table describes the labels in this screen 246
- Dscp to ieee 802 p priority settings 247
- Rate 3 color marker continued 247
- Table 87 default dscp ieee 802 p mapping 247
- Chapter 28 differentiated services 248
- Configuring dscp settings 248
- Dscp setting 248
- Gs2200 48 user s guide 248
- Label description 248
- The following table describes the labels in this screen 248
- To change the dscp ieee 802 p mapping click the dscp setting link in the diffserv screen to display the screen as shown next 248
- Dhcp configuration options 249
- Dhcp modes 249
- Dhcp overview 249
- Hapter 249
- Chapter 29 dhcp 250
- Dhcp in the navigation panel and then click an existing index number of a dhcp server configuration to view the screen as shown use 250
- Dhcp in the navigation panel the dhcp status screen displays 250
- Dhcp server status detail 250
- Dhcp status 250
- Gs2200 48 user s guide 250
- Label description 250
- The following table describes the labels in this screen 250
- Vlan the switch is configured on a vlan by vlan basis the switch can be configured as a dhcp server for one vlan and at the same time the switch can be configured to relay dhcp requests for clients in another vlan 250
- Chapter 29 dhcp 251
- Dhcp server status detail 251
- Gs2200 48 user s guide 251
- Label description 251
- The following table describes the labels in this screen 251
- This screen to view details regarding dhcp server settings configured on the switch 251
- Dhcp relay 252
- Dhcp relay agent information 252
- Table 91 relay agent information 252
- Chapter 29 dhcp 253
- Configuring dhcp global relay 253
- Dhcp in the navigation panel and click the global link to display the screen as shown 253
- Global 253
- Gs2200 48 user s guide 253
- Label description 253
- The following table describes the labels in this screen 253
- Example 254
- Figure 125 global dhcp relay network example 254
- Figure 126 dhcp relay configuration example 254
- Global dhcp relay configuration example 254
- Configuring dhcp vlan settings 255
- Note you must set up a management ip address for each vlan that you want to configure dhcp settings for on the switch see section 7 on page 71 for information on how to do this 255
- Chapter 29 dhcp 256
- Gs2200 48 user s guide 256
- Label description 256
- Vlan continued 256
- Example dhcp relay for two vlans 257
- Figure 128 dhcp relay for two vlans 257
- Example 258
- Figure 129 dhcp relay for two vlans configuration example 258
- Hapter 259
- Vrrp overview 259
- Figure 130 vrrp example 1 260
- Vrrp status 260
- Before configuring vrrp first create an ip interface or routing domain in the ip setup screen see the section 7 on page 71 for more information 261
- Chapter 30 vrrp 261
- Click ip application vrrp and click the configuration link to display the vrrp configuration screen as shown next 261
- Gs2200 48 user s guide 261
- Ip interface setup 261
- Label description 261
- Note you can only configure vrrp on interfaces with unique vlan ids 261
- The following sections describe the different parts of the vrrp configuration screen 261
- Vrrp configuration 261
- Vrrp status continued 261
- Chapter 30 vrrp 262
- Gs2200 48 user s guide 262
- Ip interface 262
- Label description 262
- Note routing domains with the same vlan id are not displayed in the table indicated 262
- The following table describes the labels in this screen 262
- Advertisement interval 263
- Note all routers participating in the virtual router must use the same advertisement interval 263
- Preempt mode 263
- Priority 263
- Vrrp parameters 263
- After you set up an ip interface configure the vrrp parameters in the vrrp configuration screen 264
- Chapter 30 vrrp 264
- Configuring vrrp parameters 264
- Gs2200 48 user s guide 264
- Label description 264
- The following table describes the labels in this screen 264
- Vrrp parameters 264
- Chapter 30 vrrp 265
- Configuring vrrp parameters 265
- Figure 134 vrrp configuration summary 265
- Gs2200 48 user s guide 265
- Label description 265
- Table 97 vrrp configuring vrrp parameters 265
- The following sections show two vrrp configuration examples on the switch 265
- The following table describes the labels in this screen 265
- View the vrrp configuration summary at the bottom of the screen 265
- Vrrp configuration examples 265
- Vrrp parameters continued 265
- Example 266
- Figure 135 vrrp configuration example one virtual router network 266
- Figure 136 vrrp example 1 vrrp parameter settings on switch a 266
- Figure 137 vrrp example 1 vrrp parameter settings on switch b 266
- One subnet network example 266
- Example 267
- Figure 138 vrrp example 1 vrrp status on switch a 267
- Figure 139 vrrp example 1 vrrp status on switch b 267
- Figure 140 vrrp configuration example two virtual router network 267
- Two subnets example 267
- Example 268
- Figure 141 vrrp example 2 vrrp parameter settings for vr2 on switch a 268
- Figure 142 vrrp example 2 vrrp parameter settings for vr2 on switch b 268
- Figure 143 vrrp example 2 vrrp status on switch a 268
- Figure 144 vrrp example 2 vrrp status on switch b 268
- Management 269
- Hapter 271
- Maintenance 271
- The maintenance screen 271
- Chapter 31 maintenance 272
- Click ok to reset all switch configurations to the factory defaults 272
- Figure 146 load factory default start 272
- Follow the steps below to reset the switch back to the factory defaults 272
- Gs2200 48 user s guide 272
- In the maintenance screen click the click here button next to load factory default to clear all switch configuration information you configured and return to the factory defaults 272
- In the web configurator click the save button to make the changes take effect if you want to access the switch web configurator again you may need to change the ip address of your computer to be in the same subnet as that of the default switch ip address 192 68 272
- Label description 272
- Load factory default 272
- Maintenance continued 272
- Note make sure to click the save button in any screen to save your settings to the current configuration on the switch 272
- Figure 147 reboot system confirmation 273
- Firmware upgrade 273
- Note clicking the apply or add button does not save the changes permanently all unsaved changes are erased after you reboot the switch 273
- Reboot system 273
- Save configuration 273
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 274
- Firmware upgrade 274
- Restore a configuration file 274
- Restore configuration 274
- Backup a configuration file 275
- Backup configuration 275
- Filename conventions 275
- Ftp command line 275
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 276
- Example ftp commands 276
- Ftp command line procedure 276
- Table 99 filename conventions 276
- Ftp restrictions 277
- Gui based ftp clients 277
- Table 100 general commands for gui based ftp clients 277
- Access control 279
- Access control overview 279
- Hapter 279
- The access control main screen 279
- About snmp 280
- Figure 152 snmp management model 280
- Snmp v3 and security 281
- Supported mibs 281
- Table 102 snmp commands 281
- An oid object id that begins with 1 90 is defined in private mibs otherwise it is a standard mib oid 282
- Chapter 32 access control 282
- Gs2200 48 user s guide 282
- Option object label object id description 282
- Snmp traps 282
- Table 103 snmp system traps 282
- The switch sends traps to an snmp manager when an event occurs the following tables outline the snmp traps by category 282
- Chapter 32 access control 283
- Gs2200 48 user s guide 283
- Option object label object id description 283
- Table 103 snmp system traps continued 283
- Table 104 snmp interfacetraps 283
- Table 105 aaa traps 283
- Chapter 32 access control 284
- Gs2200 48 user s guide 284
- Option object label object id description 284
- Table 105 aaa traps continued 284
- Table 106 snmp ip traps 284
- Table 107 snmp switch traps 284
- Configuring snmp 285
- Table 107 snmp switch traps continued 285
- Chapter 32 access control 286
- Gs2200 48 user s guide 286
- Label description 286
- Logins screen 286
- Note snmp version 2c is backwards compatible with snmp version 1 286
- Note use the username and password of the login accounts you specify in this section to create accounts on the snmp v3 manager 286
- The following table describes the labels in this screen 286
- Chapter 32 access control 287
- Gs2200 48 user s guide 287
- Label description 287
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 287
- Snmp continued 287
- Chapter 32 access control 288
- Configuring snmp trap group 288
- From the snmp screen click trap group to view the screen as shown use the trap group screen to specify the types of snmp traps that should be sent to each snmp manager 288
- Gs2200 48 user s guide 288
- Label description 288
- Setting up login accounts 288
- The following table describes the labels in this screen 288
- Trap group 288
- Up to five people one administrator and four non administrators may access the switch via web configurator at any one time 288
- Logins 289
- Note it is highly recommended that you change the default administrator password 1234 289
- Chapter 32 access control 290
- Figure 156 ssh communication example 290
- Gs2200 48 user s guide 290
- Label description 290
- Logins continued 290
- Ssh overview 290
- Unlike telnet or ftp which transmit data in clear text ssh secure shell is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network 290
- Figure 157 how ssh works 291
- How ssh works 291
- Introduction to https 292
- Requirements for using ssh 292
- Ssh implementation on the switch 292
- Figure 158 https implementation 293
- Https example 293
- Internet explorer warning messages 293
- Note if you disable http in the service access control screen then the switch blocks all http connection attempts 293
- Figure 159 security alert dialog box internet explorer 294
- Netscape navigator warning messages 294
- Example 295
- Figure 160 security certificate 1 netscape 295
- Figure 161 security certificate 2 netscape 295
- Figure 162 example lock denoting a secure connection 296
- Service port access control 296
- The main screen 296
- Chapter 32 access control 297
- Computer s for each service in the remote management screen discussed later click access control to go back to the main access control screen 297
- From the access control screen display the remote management screen as shown next 297
- Gs2200 48 user s guide 297
- Label description 297
- Remote management 297
- Service access control 297
- The following table describes the fields in this screen 297
- Chapter 32 access control 298
- Gs2200 48 user s guide 298
- Label description 298
- Remote management 298
- The following table describes the labels in this screen 298
- You can specify a group of one or more trusted computers from which an administrator may use a service to manage the switch click access control to return to the access control screen 298
- Diagnostic 299
- Hapter 299
- Chapter 33 diagnostic 300
- Diagnostic 300
- Gs2200 48 user s guide 300
- Label description 300
- The following table describes the labels in this screen 300
- Hapter 301
- Syslog 301
- Syslog overview 301
- Chapter 34 syslog 302
- Gs2200 48 user s guide 302
- Label description 302
- Syslog 302
- Syslog in the navigation panel to display this screen the syslog feature sends logs to an external syslog server use this screen to configure the device s system logging settings 302
- Syslog setup 302
- The following table describes the labels in this screen 302
- Chapter 34 syslog 303
- Gs2200 48 user s guide 303
- Label description 303
- Server setup 303
- Syslog server setup 303
- Syslog server setup to open the following screen use this screen to configure a list of external syslog servers 303
- The following table describes the labels in this screen 303
- Cluster management 305
- Clustering management status overview 305
- Hapter 305
- Cluster management 306
- Cluster management status 306
- Figure 168 clustering application example 306
- Note a cluster can only have one manager 306
- Chapter 35 cluster management 307
- Cluster management 307
- Cluster member switch management 307
- Go to the clustering management status screen of the cluster manager switch and then select an index hyperlink from the list of members to go to that cluster member switch s web configurator home page this cluster member web 307
- Gs2200 48 user s guide 307
- Label description 307
- The following table describes the labels in this screen 307
- Figure 170 cluster management cluster member web configurator screen 308
- Chapter 35 cluster management 309
- Figure 171 example uploading firmware to a cluster member switch 309
- Ftp parameter description 309
- Gs2200 48 user s guide 309
- Table 119 ftp upload to cluster member example 309
- The following table explains some of the ftp parameters 309
- Uploading firmware to a cluster member switch 309
- You can use ftp to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example 309
- Chapter 35 cluster management 310
- Clustering management configuration 310
- Configuration 310
- Gs2200 48 user s guide 310
- Label description 310
- The following table describes the labels in this screen 310
- Use this screen to configure clustering management click configuration from the cluster management screen to display the next screen 310
- Chapter 35 cluster management 311
- Configuration continued 311
- Gs2200 48 user s guide 311
- Label description 311
- Hapter 313
- Mac table 313
- Mac table overview 313
- Figure 173 mac table flowchart 314
- Mac table 314
- Viewing the mac table 314
- Chapter 36 mac table 315
- Gs2200 48 user s guide 315
- Label description 315
- Mac table continued 315
- Hapter 317
- Ip table 317
- Ip table overview 317
- Figure 175 ip table flowchart 318
- Ip table 318
- Viewing the ip table 318
- Chapter 37 ip table 319
- Gs2200 48 user s guide 319
- Ip table continued 319
- Label description 319
- Arp table 321
- Arp table overview 321
- Hapter 321
- How arp works 321
- Arp table 322
- Arp table in the navigation panel to open the following screen use the arp table to view ip to mac address mapping s 322
- Chapter 38 arp table 322
- Gs2200 48 user s guide 322
- Label description 322
- The following table describes the labels in this screen 322
- Viewing the arp table 322
- Hapter 323
- Overview 323
- Routing table 323
- Viewing the routing table status 323
- Configure clone 325
- Hapter 325
- Chapter 40 configure clone 326
- Configure clone 326
- Gs2200 48 user s guide 326
- Label description 326
- The following table describes the labels in this screen 326
- Product specifications 327
- Hapter 329
- Product specifications 329
- Chapter 41 product specifications 330
- Feature description 330
- Gs2200 48 user s guide 330
- Table 126 hardware specifications 330
- Table 127 firmware specifications 330
- Chapter 41 product specifications 331
- Feature description 331
- Gs2200 48 user s guide 331
- Table 127 firmware specifications 331
- Chapter 41 product specifications 332
- Feature description 332
- Gs2200 48 user s guide 332
- Note only upload firmware for your specific model 332
- Table 127 firmware specifications 332
- 148800 pps for 100base tx 64byte packet 333
- 1488000 pps for 1000base t 64byte packet 333
- Chapter 41 product specifications 333
- Gs2200 48 user s guide 333
- Table 128 switching specifications 333
- Chapter 41 product specifications 334
- Gs2200 48 user s guide 334
- Standard description 334
- Table 128 switching specifications continued 334
- Table 129 standards supported 334
- The following list which is not exhaustive illustrates the standards supported in the switch 334
- Chapter 41 product specifications 335
- Gs2200 48 user s guide 335
- Standard description 335
- Table 129 standards supported continued 335
- Appendices and index 337
- Certifications 339
- Copyright 339
- Legal information 339
- Ppendix 339
- Ce mark warning 340
- Fcc warning 340
- Notices 340
- Taiwanese bsmi bureau of standards metrology and inspection a warning 340
- Registration 341
- Viewing certifications 341
- Zyxel limited warranty 341
- Gs2200 48 user s guide 343
- Numerics 343
- Gs2200 48 user s guide 344
- Gs2200 48 user s guide 345
- Gs2200 48 user s guide 346
- Gs2200 48 user s guide 347
- Gs2200 48 user s guide 348
- Gs2200 48 user s guide 349
- Gs2200 48 user s guide 350
- Gs2200 48 user s guide 351
Похожие устройства
- Энкор Корвет-503 27503 Инструкция по эксплуатации
- Timberk Atom AC TIM 14H P3 Инструкция по эксплуатации
- Shure C608-N Инструкция по эксплуатации
- Zyxel GS-108B Инструкция по эксплуатации
- Shindaiwa 488 Инструкция по эксплуатации
- Explay GN-520 Инструкция по эксплуатации
- Shure KSM109 Инструкция по эксплуатации
- Zyxel GS-1124 EE Инструкция по эксплуатации
- Энкор Корвет-512 27512 Инструкция по эксплуатации
- Explay PN-955 Инструкция по эксплуатации
- Shure KSM137/SL Инструкция по эксплуатации
- Canon PowerShot A2200 Black Инструкция по эксплуатации
- Zyxel MGS-3712 Инструкция по эксплуатации
- Энкор Корвет-563 27563 Инструкция по эксплуатации
- Honda CBR1100XX Инструкция по эксплуатации
- Shure KSM141/SL Инструкция по эксплуатации
- Patriot РТ 3816 Инструкция по эксплуатации
- Zyxel ES-4124 Инструкция по эксплуатации
- Shure KSM32/CG Инструкция по эксплуатации
- Telwin Telmig 281/2 Turbo Инструкция по эксплуатации