![Zyxel GS1920-48HP [345/405] Example](/img/pdf.png)
Zyxel GS1920-48HP [345/405] Example
![Zyxel GS1920-48HP [345/405] Example](/views2/1168631/page345/bg159.png)
Chapter 39 Access Control
GS1920 Series User’s Guide
345
Figure 246 Security Alert (Mozilla Firefox)
Confirm the HTTPS server URL matches. Click Confirm Security Exception to proceed to the web
configurator login screen.
Figure 247 Security Alert (Mozilla Firefox)
EXAMPLE
Содержание
- Default login details 1
- Gs1920 series 1
- Intelligent layer 2 gbe switch 1
- Quick start guide 1
- User s guide 1
- Important 2
- Keep this guide for future reference 2
- Read carefully before use 2
- Related documentation 2
- Contents overview 3
- Technical reference 2 3
- User s guide 7 3
- Chapter 1 getting to know your switch 8 5
- Chapter 2 hardware installation and connection 3 5
- Chapter 3 hardware panels 6 5
- Contents overview 5
- Part i user s guide 17 5
- Table of contents 5
- Chapter 4 the web configurator 3 6
- Chapter 5 initial setup example 1 6
- Chapter 6 tutorials 5 6
- Chapter 7 status and zon 3 6
- Part ii technical reference 32 6
- Chapter 8 basic setting 2 7
- Chapter 9 vlan 1 7
- Chapter 10 static mac forward setup 112 8
- Chapter 11 static multicast forward setup 114 8
- Chapter 12 filtering 117 8
- Chapter 13 spanning tree protocol 119 8
- Chapter 14 bandwidth control 40 9
- Chapter 15 broadcast storm control 42 9
- Chapter 16 mirroring 44 9
- Chapter 17 link aggregation 46 9
- Chapter 18 port authentication 55 9
- Chapter 19 port security 63 9
- Chapter 20 time range 66 10
- Chapter 21 classifier 68 10
- Chapter 22 policy rule 77 10
- Chapter 23 queuing method 81 10
- Chapter 24 multicast 84 10
- Chapter 25 aaa 09 11
- Chapter 26 ip source guard 20 11
- Chapter 27 loop guard 45 12
- Chapter 28 layer 2 protocol tunneling 49 12
- Chapter 29 pppoe 53 12
- Chapter 30 error disable 61 12
- Chapter 31 private vlan 68 12
- Chapter 32 green ethernet 70 13
- Chapter 33 link layer discovery protocol lldp 72 13
- Chapter 34 static route 97 13
- Chapter 35 differentiated services 00 13
- Chapter 36 dhcp 04 13
- Chapter 37 arp setup 16 14
- Chapter 38 maintenance 20 14
- Chapter 39 access control 29 14
- Chapter 40 diagnostic 47 15
- Chapter 41 system log 50 15
- Chapter 42 syslog setup 51 15
- Chapter 43 cluster management 54 15
- Chapter 44 mac table 60 15
- Appendix a customer support 75 16
- Appendix b common services 81 16
- Appendix c ipv6 84 16
- Appendix d legal information 92 16
- Chapter 45 arp table 63 16
- Chapter 46 path mtu table 65 16
- Chapter 47 configure clone 66 16
- Chapter 48 ipv6 neighbor table 69 16
- Chapter 49 troubleshooting 71 16
- Index 97 16
- User s guide 17
- Getting to know your switch 18
- Introduction 18
- Backbone application 19
- Bridging example 19
- Switch model poe features 19
- High performance switching example 20
- Ieee 802 q vlan application examples 20
- Good habits for managing the switch 21
- Tag based vlan example 21
- Ways to manage the switch 21
- Desktop installation procedure 23
- Hardware installation and connection 23
- Installation scenarios 23
- Mounting the switch on a rack 23
- Rack mounted installation requirements 23
- Attaching the mounting brackets to the switch 24
- Mounting the switch on a rack 24
- Front panel 26
- Gigabit ethernet ports 26
- Hardware panels 26
- Auto crossover 27
- Default ethernet negotiation settings 27
- Mini gbic slots 27
- Note the dual personality ports change to fiber mode directly when inserting the fiber module 27
- To avoid possible eye injury do not look into an operating fiber optic module s connectors 27
- Transceiver installation 27
- Transceiver removal 28
- Led mode only available for gs1920 48hp 29
- Note make sure you are using the correct power source as shown on the panel 29
- Power connector 29
- Rear panel 29
- After you connect the power to the switch view the leds to ensure proper functioning of the switch and as an aid in troubleshooting 30
- Chapter 3 hardware panels 30
- Gs1920 series user s guide 30
- If you forget your password or cannot access the web configurator you will need to use the reset button at the side of the device to reload the factory default configuration file this means that you will lose all configurations that you had previously and the default switch ip address user name and password will be reset to 192 68 admin and 1234 respectively 30
- Led color status description 30
- Reset to factory defaults 30
- Table 3 led descriptions 30
- Note if you want to access the switch web configurator again you may need to change the ip address of your computer to be in the same subnet as that of the default switch ip address 192 68 31
- Side panels 31
- Technical reference 32
- Overview 33
- System login 33
- The web configurator 33
- C d e f 34
- The status screen 34
- Chapter 4 the web configurator 36
- Gs1920 series user s guide 36
- Link description 36
- Table 5 navigation panel links 36
- The following table describes the links in the navigation panel 36
- Chapter 4 the web configurator 37
- Gs1920 series user s guide 37
- Link description 37
- Table 5 navigation panel links continued 37
- Change your password 38
- Note use the save link when you are done with a configuration session 38
- Saving your configuration 38
- Note be careful not to lock yourself and others out of the switch 39
- Reload the configuration file 39
- Resetting the switch 39
- Switch lockout 39
- Logging out of the web configurator 40
- Creating a vlan 41
- Initial setup example 41
- Overview 41
- Note the vlan group id field in this screen and the vid field in the ip setup screen refer to the same vlan id 42
- Setting port vid 42
- Configuring switch management ip address 43
- How to use dhcpv4 snooping on the switch 45
- Overview 45
- Tutorials 45
- Dhcp relay tutorial introduction 48
- How to use dhcpv4 relay on the switch 48
- Creating a vlan 49
- Dhcp server port 2 pvid 102 49
- Vlan 102 49
- Configuring dhcpv4 relay 51
- Troubleshooting 52
- Overview 53
- Status 53
- Status and zon 53
- What you can do 53
- Chapter 7 status and zon 54
- Figure 42 status for poe model s 54
- Gs1920 series user s guide 54
- Label description 54
- Table 7 status 54
- The following table describes the labels in this screen 54
- Chapter 7 status and zon 55
- Gs1920 series user s guide 55
- Label description 55
- Table 7 status continued 55
- The following figure shows the zon utility screen 55
- The zon utility issues requests via zyxel discovery protocol zdp and in response to the query the device responds back with basic information including ip address firmware version location system and model name in the same broadcast domain the information is then displayed in the zon utility screen and you can perform tasks like basic configuration of the devices and batch firmware upgrade in it you can download the zon utility at www zyxel com and install it on a pc 55
- Zon utility is a program designed to help you deploy and manage a network more efficiently it detects devices automatically and allows you to do basic settings on devices in the network without having to be near it 55
- Zyxel one network zon utility screen 55
- Zon neighbor management screen 56
- Chapter 7 status and zon 57
- Gs1920 series user s guide 57
- Label description 57
- Neighbor 57
- Port status 57
- The following table describes the fields in the above screen 57
- This screen displays a port statistical summary with links to each port showing statistical details to view the port statistics click status in all web configurator screens and then the port status link 57
- Chapter 7 status and zon 58
- Figure 45 port status for poe model s 58
- Gs1920 series user s guide 58
- Label description 58
- Port status to see the following screen 58
- Table 9 port status 58
- The following table describes the labels in this screen 58
- Port details 59
- Chapter 7 status and zon 60
- Gs1920 series user s guide 60
- Label description 60
- Table 10 port status port details 60
- The following table describes the labels in this screen 60
- Chapter 7 status and zon 61
- Gs1920 series user s guide 61
- Label description 61
- Table 10 port status port details continued 61
- Basic setting 62
- Overview 62
- System information 62
- What you can do 62
- Chapter 8 basic setting 63
- Gs1920 series user s guide 63
- Label description 63
- System info 63
- System info for poe model s only 63
- The following table describes the labels in this screen 63
- Chapter 8 basic setting 64
- General setup 64
- General setup in the navigation panel to display the screen as shown 64
- Gs1920 series user s guide 64
- Label description 64
- System info continued 64
- Chapter 8 basic setting 65
- General setup 65
- Gs1920 series user s guide 65
- Label description 65
- The following table describes the labels in this screen 65
- A vlan virtual local area network allows a physical network to be partitioned into multiple logical networks devices on a logical network belong to one group a device can belong to more than one group with vlan a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router 66
- Chapter 8 basic setting 66
- General setup continued 66
- Gs1920 series user s guide 66
- In mtu multi tenant unit applications vlan is vital in providing isolation and security among the subscribers when properly configured vlan prevents one subscriber from accessing the network resources of another on the same lan thus a user will not see the printers and hard disks of another user in the same building 66
- Introduction to vlans 66
- Label description 66
- Note vlan is unidirectional it only governs outgoing traffic 66
- Vlan also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain in traditional switched environments all broadcast packets go to each and every individual port with vlan all broadcasts are confined to a specific broadcast domain 66
- Chapter 8 basic setting 67
- Chapter 9 on page 9 67
- Gs1920 series user s guide 67
- Label description 67
- See chapter 9 on page 91 for information on port based and 802 q tagged vlans 67
- Switch setup 67
- Switch setup in the navigation panel to display the screen as shown the vlan setup screens change depending on whether you choose 802 q or port based in the vlan type field in this screen refer to chapter 9 on page 91 for more information on vlan 67
- The following table describes the labels in this screen 67
- Chapter 8 basic setting 68
- Gs1920 series user s guide 68
- Ip setup 68
- Label description 68
- Switch setup continued 68
- Use the ip setup screen to configure the switch ip address default gateway device and the management vlan id the default gateway specifies the ip address of the default gateway next hop for outgoing traffic 68
- Management ip addresses 69
- Note you must configure a vlan first each vlan can only have one management ip address 69
- Chapter 8 basic setting 70
- Gs1920 series user s guide 70
- Ip setup continued 70
- Label description 70
- Port setup 70
- Port setup in the navigation panel to display the configuration screen 70
- Chapter 8 basic setting 71
- Gs1920 series user s guide 71
- Label description 71
- Note changes in this row are copied to all the ports as soon as you make them 71
- Note due to space limitation the port name may be truncated in some web configurator screens 71
- Port setup 71
- The following table describes the labels in this screen 71
- A powered device pd is a device such as an access point or a switch that supports poe power over ethernet so that it can receive power from another device through an ethernet port 72
- Chapter 8 basic setting 72
- Gs1920 series user s guide 72
- In the figure below the ip camera and ip phone get their power directly from the switch aside from minimizing the need for cables and wires poe removes the hassle of trying to find a nearby electric outlet to power up devices 72
- Label description 72
- Note the following screens are available for the poe model s only some features are only available for the ethernet ports 1 to 24 for gs1920 24hp and 1 to 48 for gs1920 48hp 72
- Poe status 72
- Port setup continued 72
- The poe model s supports the ieee 802 at high power over ethernet poe standard 72
- Note the poe power over ethernet devices that supply or receive power and their connected ethernet cables must all be completely indoors 73
- Chapter 8 basic setting 74
- Gs1920 series user s guide 74
- Label description 74
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device needs less than 16w 74
- Poe status 74
- Poe time range status 74
- The following table describes the labels in this screen 74
- Use this screen to see whether poe is scheduled to be enabled on a port 74
- Poe setup 75
- Chapter 8 basic setting 76
- Gs1920 series user s guide 76
- Label description 76
- Note changes in this row are copied to all the ports as soon as you make them 76
- Poe setup 76
- The following table describes the labels in this screen 76
- An ipv6 address is configured on a per interface basis the interface can be a physical interface for example an ethernet port or a virtual interface for example a vlan the switch supports the vlan interface type for ipv6 at the time of writing 77
- Chapter 8 basic setting 77
- Gs1920 series user s guide 77
- Interface setup 77
- Interface setup in the navigation panel to display the configuration screen 77
- Label description 77
- Poe setup continued 77
- Chapter 8 basic setting 78
- Gs1920 series user s guide 78
- Interface setup 78
- Ipv6 in the navigation panel to display the ipv6 status screen as shown next 78
- Label description 78
- The following table describes the labels in this screen 78
- Use this screen to view the ipv6 interface status and configure switch s management ipv6 addresses 78
- Ipv6 interface status 79
- Chapter 8 basic setting 80
- Gs1920 series user s guide 80
- Ipv6 interface status 80
- Label description 80
- The following table describes the labels in this screen 80
- Chapter 8 basic setting 81
- Gs1920 series user s guide 81
- Ipv6 interface status continued 81
- Label description 81
- Chapter 8 basic setting 82
- Gs1920 series user s guide 82
- Ipv6 configuration 82
- Ipv6 global setup 82
- Ipv6 screen the following screen opens 82
- Label description 82
- The following table describes the labels in this screen 82
- Use this screen to configure the global ipv6 settings click the link next to ipv6 global setup in the ipv6 configuration screen to display the screen as shown next 82
- Chapter 8 basic setting 83
- Gs1920 series user s guide 83
- Ipv6 global setup 83
- Ipv6 interface setup 83
- Label description 83
- The following table describes the labels in this screen 83
- Use this screen to turn on or off an ipv6 interface and enable stateless autoconfiguration on it click the link next to ipv6 interface setup in the ipv6 configuration screen to display the screen as shown next 83
- A link local address uniquely identifies a device on the local network the lan it is similar to a private ip address in ipv4 you can have the same link local address on multiple interfaces on a device a link local unicast address has a predefined prefix of fe80 10 84
- Chapter 8 basic setting 84
- Gs1920 series user s guide 84
- Ipv6 interface setup 84
- Ipv6 link local address setup 84
- Label description 84
- The following table describes the labels in this screen 84
- Use this screen to configure the interface s link local address and default gateway click the link next to ipv6 link local address setup in the ipv6 configuration screen to display the screen as shown next 84
- Chapter 8 basic setting 85
- Gs1920 series user s guide 85
- Ipv6 global address setup 85
- Ipv6 link local address setup continued 85
- Label description 85
- The following table describes the labels in this screen 85
- Use this screen to configure the interface s ipv6 global address click the link next to ipv6 global address setup in the ipv6 configuration screen to display the screen as shown next 85
- Chapter 8 basic setting 86
- Gs1920 series user s guide 86
- Ipv6 global address setup continued 86
- Ipv6 neighbor discovery setup 86
- Label description 86
- The following table describes the labels in this screen 86
- Use this screen to configure neighbor discovery settings for each interface click the link next to ipv6 neighbor discovery setup in the ipv6 configuration screen to display the screen as shown next 86
- Chapter 8 basic setting 87
- Gs1920 series user s guide 87
- Ipv6 neighbor discovery setup continued 87
- Ipv6 neighbor setup 87
- Label description 87
- Use this screen to create a static ipv6 neighbor entry in the switch s ipv6 neighbor table to store the neighbor information permanently click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next 87
- Chapter 8 basic setting 88
- Dhcpv6 client setup 88
- Gs1920 series user s guide 88
- Ipv6 neighbor setup 88
- Label description 88
- The following table describes the labels in this screen 88
- Use this screen to configure the switch s dhcp settings when it is acting as a dhcpv6 client click the link next to dhcpv6 client setup in the ipv6 configuration screen to display the screen as shown next 88
- Chapter 8 basic setting 89
- Dhcpv6 client setup 89
- Gs1920 series user s guide 89
- Label description 89
- The following table describes the labels in this screen 89
- Chapter 8 basic setting 90
- Dns domain name system is for mapping a domain name to its corresponding ip address and vice versa use the dns screen to configure and view the default dns servers on the switch 90
- Gs1920 series user s guide 90
- Label description 90
- The following table describes the labels in this screen 90
- Overview 91
- What you can do 91
- What you need to know 91
- Automatic vlan registration 92
- Forwarding tagged and untagged frames 92
- Garp timers 92
- Chapter 9 vlan 93
- Enable vlan trunking on a port to allow frames belonging to unknown vlan groups to pass through that port this is useful if you want to set up vlan groups on end devices without having to configure the same vlan groups on intermediary devices 93
- Figure 68 port vlan trunking 93
- Gs1920 series user s guide 93
- Please refer to the following table for common ieee 802 q vlan terminology 93
- Port vlan trunking 93
- Refer to the following figure suppose you want to create vlan groups 1 and 2 v1 and v2 on devices a and b without vlan trunking you must configure vlan groups 1 and 2 on all intermediary switches c d and e otherwise they will drop frames with unknown vlan group tags however with vlan trunking enabled on a port s in each intermediary switch you only need to create vlan groups in the end devices a and b c d and e automatically allow frames with vlan group tags 1 and 2 vlan groups that are unknown to those switches to pass through their vlan trunking port s 93
- Select the vlan type 93
- Switch setup screen 93
- Table 31 ieee 802 q vlan terminology 93
- Vlan parameter term description 93
- Static vlan 94
- Vlan status 94
- Chapter 9 vlan 95
- Gs1920 series user s guide 95
- Label description 95
- The following table describes the labels in this screen 95
- Use this screen to view detailed port settings and status of the vlan group click on an index number in the vlan status screen to display vlan details 95
- Vlan detail 95
- Vlan details 95
- Vlan vlan status continued 95
- Chapter 9 vlan 96
- Configure a static vlan 96
- Gs1920 series user s guide 96
- Label description 96
- The following table describes the labels in the above screen 96
- Use this screen to configure a static vlan for the switch click the static vlan setup link in the vlan configuration screen to display the screen as shown next 96
- Vlan configuration 96
- Vlan configuration to see the following screen 96
- Chapter 9 vlan 97
- Gs1920 series user s guide 97
- Label description 97
- Note changes in this row are copied to all the ports as soon as you make them 97
- Static vlan setup 97
- The following table describes the related labels in this screen 97
- Chapter 9 vlan 98
- Configure vlan port settings 98
- Gs1920 series user s guide 98
- Label description 98
- Static vlan setup continued 98
- Use the vlan port setup screen to configure the static vlan ieee 802 q settings on a port click the vlan port setup link in the vlan configuration screen 98
- Vlan port setup 98
- Chapter 9 vlan 99
- For example an isp internet services provider may divide different types of services it provides to customers into different ip subnets traffic for voice services is designated for ip subnet 99
- Gs1920 series user s guide 99
- Label description 99
- Note changes in this row are copied to all the ports as soon as you make them 99
- Subnet based vlans 99
- Subnet based vlans allow you to group traffic into logical vlans based on the source ip subnet you specify when a frame is received on a port the switch checks if a tag is added already and the ip subnet it came from the untagged packets from the same ip subnet are then placed in the same subnet based vlan one advantage of using subnet based vlans is that priority can be assigned to traffic from the same ip subnet 99
- The following table describes the labels in this screen 99
- Vlan port setup 99
- Configuring subnet based vlan 100
- Internet 100
- Note subnet based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 100
- Chapter 9 vlan 101
- Gs1920 series user s guide 101
- Label description 101
- Subnet based vlan setup 101
- The following table describes the labels in this screen 101
- Configuring protocol based vlan 102
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 102
- Protocol based vlans 102
- Chapter 9 vlan 103
- Gs1920 series user s guide 103
- Label description 103
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 103
- Note protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based vlans 103
- Protocol based vlan setup 103
- The following table describes the labels in this screen 103
- Voice vlan 104
- Chapter 9 vlan 105
- Gs1920 series user s guide 105
- Label description 105
- Mac based vlan 105
- The following table describes the fields in the above screen 105
- The mac based vlan feature assigns incoming untagged packets to a vlan and classifies the traffic based on the source mac address of the packet when untagged packets arrive at the switch the source mac address of the packet is looked up in a mac to vlan mapping table if an entry is found the corresponding vlan id is assigned to the packet the assigned vlan id is verified against the vlan table if the vlan is valid ingress processing on the packet continues otherwise the packet is dropped 105
- This feature allows users to change ports without having to reconfigure the vlan you can assign priority to the mac based vlan and define a mac to vlan mapping table by entering a specified 105
- Voice vlan setup 105
- Chapter 9 vlan 106
- Click the mac based vlan setup link in the vlan configuration screen to see the following screen 106
- Gs1920 series user s guide 106
- Label description 106
- Mac based vlan setup 106
- Source mac address in the mac based vlan setup screen you can also delete a mac based vlan entry in the same screen 106
- The following table describes the fields in the above screen 106
- Configure a port based vlan 107
- Note in screens such as ip setup and filtering that require a vid you must enter 1 as the vid 107
- Note when you activate port based vlan the switch uses a default vlan id of 1 you cannot change it 107
- Port based vlan setup 107
- Activate this protocol based vlan 110
- Chapter 9 vlan 110
- Create an ip based vlan example 110
- Give this protocol based vlan a descriptive name type ip vlan 110
- Gs1920 series user s guide 110
- Leave the priority set to 0 and click add 110
- Select the protocol leave the default value ip 110
- Technical reference 110
- The following table describes the labels in this screen 110
- This example shows you how to create an ip vlan which includes ports 1 4 and 8 follow these steps 110
- This section provides technical background information on the topics discussed in this chapter 110
- Type the port number you want to include in this protocol based vlan type 1 110
- Type the vlan id of an existing vlan in our example we already created a static vlan with an id of 5 type 5 110
- Vlan port based vlan setup label description 110
- Configuring static mac forwarding 112
- Overview 112
- Static mac forward setup 112
- What you can do 112
- Chapter 10 static mac forward setup 113
- Gs1920 series user s guide 113
- Label description 113
- Note static mac addresses do not age out 113
- Static mac forwarding 113
- The following table describes the labels in this screen 113
- Static multicast forward setup 114
- Static multicast forward setup overview 114
- What you can do 114
- What you need to know 114
- Configuring static multicast forwarding 115
- Chapter 11 static multicast forward setup 116
- Gs1920 series user s guide 116
- Label description 116
- Static multicast forwarding 116
- The following table describes the labels in this screen 116
- Configure a filtering rule 117
- Filtering 117
- Filtering overview 117
- What you can do 117
- Chapter 12 filtering 118
- Filtering 118
- Gs1920 series user s guide 118
- Label description 118
- The following table describes the related labels in this screen 118
- Spanning tree protocol 119
- Spanning tree protocol overview 119
- What you can do 119
- What you need to know 119
- How stp works 120
- Note in this user s guide stp refers to both stp and rstp 120
- Stp terminology 120
- Multiple rstp 121
- Multiple stp 121
- Note each port can belong to one stp tree only 121
- Stp port states 121
- Spanning tree configuration 122
- Spanning tree protocol status screen 122
- Chapter 13 spanning tree protocol 123
- Configuration 123
- Configure rapid spanning tree protocol 123
- Gs1920 series user s guide 123
- Label description 123
- Spanning tree protocol screen 123
- The following table describes the labels in this screen 123
- 2 hello time 1 124
- Chapter 13 spanning tree protocol 124
- Configuration screen to enable rstp on the switch 124
- Gs1920 series user s guide 124
- Label description 124
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 124
- Note changes in this row are copied to all the ports as soon as you make them 124
- The following table describes the labels in this screen 124
- Chapter 13 spanning tree protocol 125
- Gs1920 series user s guide 125
- Label description 125
- Note this screen is only available after you activate rstp on the switch 125
- Rapid spanning tree protocol status 125
- Rstp continued 125
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 119 for more information on rstp 125
- Status rstp 125
- The following table describes the labels in this screen 125
- Chapter 13 spanning tree protocol 126
- Configure multiple rapid spanning tree protocol 126
- Gs1920 series user s guide 126
- Label description 126
- Note the listening state does not exist in rstp 126
- Spanning tree protocol screen see section 13 on page 119 for more information on mrstp 126
- Status rstp continued 126
- Chapter 13 spanning tree protocol 127
- Configuration screen to enable mrstp on the switch 127
- Gs1920 series user s guide 127
- Label description 127
- The following table describes the labels in this screen 127
- 2 hello time 1 128
- Chapter 13 spanning tree protocol 128
- Gs1920 series user s guide 128
- Label description 128
- Mrstp continued 128
- Multiple rapid spanning tree protocol status 128
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 128
- Note changes in this row are copied to all the ports as soon as you make them 128
- Note this screen is only available after you activate mrstp on the switch 128
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 119 for more information on mrstp 128
- Chapter 13 spanning tree protocol 129
- Gs1920 series user s guide 129
- Label description 129
- Note the listening state does not exist in rstp 129
- Status mrstp 129
- The following table describes the labels in this screen 129
- Chapter 13 spanning tree protocol 130
- Configure multiple spanning tree protocol 130
- Gs1920 series user s guide 130
- Label description 130
- Spanning tree protocol screen see multiple stp on page 121 for more information on mstp 130
- Status mrstp continued 130
- Chapter 13 spanning tree protocol 131
- Configuration screen to enable mstp on the switch 131
- Gs1920 series user s guide 131
- Label description 131
- The following table describes the labels in this screen 131
- 2 hello time 1 132
- Chapter 13 spanning tree protocol 132
- Gs1920 series user s guide 132
- Label description 132
- Mstp continued 132
- Note changes in this row are copied to all the ports as soon as you make them 132
- Chapter 13 spanning tree protocol 133
- Gs1920 series user s guide 133
- Label description 133
- Mstp continued 133
- Mstp port configuration 133
- Port in the navigation panel to display the status screen as shown next see multiple stp on page 121 for more information on mstp 133
- Chapter 13 spanning tree protocol 134
- Gs1920 series user s guide 134
- Label description 134
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 134
- Note changes in this row are copied to all the ports as soon as you make them 134
- The following table describes the labels in this screen 134
- Chapter 13 spanning tree protocol 135
- Gs1920 series user s guide 135
- Label description 135
- Multiple spanning tree protocol status 135
- Note this screen is only available after you activate mstp on the switch 135
- Spanning tree protocol in the navigation panel to display the status screen as shown next see multiple stp on page 121 for more information on mstp 135
- Status mstp 135
- The following table describes the labels in this screen 135
- Chapter 13 spanning tree protocol 136
- Gs1920 series user s guide 136
- Label description 136
- Status mstp continued 136
- Chapter 13 spanning tree protocol 137
- Gs1920 series user s guide 137
- Label description 137
- Mstp network example 137
- Status mstp continued 137
- Technical reference 137
- The following figure shows a network example where two vlans are configured on the two switches if the switches are using stp or rstp the link for vlan 2 will be blocked as stp and rstp allow only one link in the network and block the redundant link 137
- This section provides technical background information on the topics discussed in this chapter 137
- Mst region 138
- Vlan 1 vlan 2 138
- Common and internal spanning tree cist 139
- Mst instance 139
- Bandwidth control 140
- Bandwidth control overview 140
- Bandwidth control setup 140
- What you can do 140
- Bandwidth control 141
- Chapter 14 bandwidth control 141
- Gs1920 series user s guide 141
- Label description 141
- Note changes in this row are copied to all the ports as soon as you make them 141
- Note ingress rate bandwidth control applies to layer 2 traffic only 141
- The following table describes the related labels in this screen 141
- Broadcast storm control 142
- Broadcast storm control overview 142
- Broadcast storm control setup 142
- What you can do 142
- Broadcast storm control 143
- Chapter 15 broadcast storm control 143
- Gs1920 series user s guide 143
- Label description 143
- Note changes in this row are copied to all the ports as soon as you make them 143
- The following table describes the labels in this screen 143
- Mirroring 144
- Mirroring overview 144
- Port mirroring setup 144
- What you can do 144
- Chapter 16 mirroring 145
- Gs1920 series user s guide 145
- Label description 145
- Mirroring 145
- Note changes in this row are copied to all the ports as soon as you make them 145
- The following table describes the labels in this screen 145
- Link aggregation 146
- Link aggregation overview 146
- What you can do 146
- What you need to know 146
- Link aggregation id 147
- Link aggregation status 147
- Chapter 17 link aggregation 148
- Gs1920 series user s guide 148
- Label description 148
- Link aggregation status 148
- The following table describes the labels in this screen 148
- Chapter 17 link aggregation 149
- Gs1920 series user s guide 149
- Label description 149
- Link aggregation setting 149
- Link aggregation setting to display the screen shown next see section 17 on page 146 for more information on link aggregation 149
- Link aggregation status continued 149
- Chapter 17 link aggregation 151
- Gs1920 series user s guide 151
- Label description 151
- Lacp to display the screen shown next see dynamic link aggregation on page 146 for more information on dynamic link aggregation 151
- Link aggregation control protocol 151
- Link aggregation setting continued 151
- Note when you enable the port security feature on the switch and configure port security settings for a port you cannot include the port in an active trunk group 151
- Chapter 17 link aggregation 153
- Gs1920 series user s guide 153
- Label description 153
- Lacp continued 153
- Make your physical connections make sure that the ports that you want to belong to the trunk group are connected to the same destination the following figure shows ports 2 5 on switch a connected to switch b 153
- Note changes in this row are copied to all the ports as soon as you make them 153
- Static trunking example 153
- Technical reference 153
- This example shows you how to create a static port trunk group for ports 2 5 153
- This section provides technical background information on the topics discussed in this chapter 153
- Port authentication 155
- Port authentication overview 155
- What you can do 155
- What you need to know 155
- Mac authentication 156
- Activate ieee 802 x security 157
- Port authentication configuration 157
- Chapter 18 port authentication 158
- Gs1920 series user s guide 158
- Guest vlan 158
- Label description 158
- Note changes in this row are copied to all the ports as soon as you make them 158
- Note you must first enable 802 x authentication on the switch before configuring it on each port 158
- The following table describes the labels in this screen 158
- When 802 x port authentication is enabled on the switch and its ports clients that do not have the correct credentials are blocked from using the port s you can configure your switch to have one vlan that acts as a guest vlan if you enable the guest vlan 102 in the example on a port 2 in the example the user a in the example that is not ieee 802 x capable or fails to enter the correct username and password can still access the port but traffic from the user is forwarded to the guest vlan that is unauthenticated users can have access to limited network resources in the same guest vlan such as the internet the rights granted to the guest vlan depends on how the network administrator configures switches or routers with the guest network feature 158
- Internet 159
- Vlan 100 159
- Vlan 102 159
- Activate mac authentication 160
- Chapter 18 port authentication 160
- Gs1920 series user s guide 160
- Guest vlan 160
- Label description 160
- The following table describes the labels in this screen 160
- Use this screen to activate mac authentication in the port authentication screen click mac authentication to display the configuration screen as shown 160
- Chapter 18 port authentication 161
- Gs1920 series user s guide 161
- Label description 161
- Mac authentication 161
- Note if the aging time in the switch setup screen is set to a lower value then it supersedes this setting see section 8 on page 67 161
- Note you must first enable mac authentication on the switch before configuring it on each port 161
- The following table describes the labels in this screen 161
- Chapter 18 port authentication 162
- Gs1920 series user s guide 162
- Label description 162
- Mac authentication continued 162
- Note changes in this row are copied to all the ports as soon as you make them 162
- Port security 163
- Port security overview 163
- Port security setup 163
- What you can do 163
- Chapter 19 port security 164
- Gs1920 series user s guide 164
- Label description 164
- Note changes in this row are copied to all the ports as soon as you make them 164
- Port security 164
- The following table describes the labels in this screen 164
- Chapter 19 port security 165
- Gs1920 series user s guide 165
- Label description 165
- Port security continued 165
- Configuring time range 166
- Time range 166
- Time range overview 166
- What you can do 166
- Chapter 20 time range 167
- Gs1920 series user s guide 167
- Label description 167
- The following table describes the labels in this screen 167
- Time range 167
- Classifier 168
- Classifier overview 168
- Classifier status 168
- What you can do 168
- What you need to know 168
- Chapter 21 classifier 169
- Classifier configuration 169
- Classifier in the navigation panel to display the configuration screen as shown 169
- Classifier status 169
- Gs1920 series user s guide 169
- In the classifier status screen click classifier configuration to display the configuration screen as shown 169
- Label description 169
- The following table describes the labels in this screen 169
- Use the classifier configuration screen to define the classifiers after you define the classifier you can specify actions or policy to act upon the traffic that matches the rules to configure policy rules refer to chapter 22 on page 177 169
- Chapter 21 classifier 171
- Classifier configuration 171
- Gs1920 series user s guide 171
- Label description 171
- Note make sure you also enable logging in the classifier global setting screen 171
- The following table describes the labels in this screen 171
- Chapter 21 classifier 172
- Classifier configuration continued 172
- Gs1920 series user s guide 172
- Label description 172
- Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers 172
- Chapter 21 classifier 173
- Classifier configuration summary table 173
- Ethernet type protocol number 173
- Gs1920 series user s guide 173
- Label description 173
- Note when two rules conflict with each other a higher layer rule has priority over lower layer rule 173
- Table 71 common ethernet types and protocol numbers 173
- The following table describes the labels in this screen 173
- The following table shows some other common ethernet types and the corresponding protocol number 173
- To view a summary of the classifier configuration scroll down to the summary table at the bottom of the classifier screen to change the settings of a rule click a number in the index field 173
- Viewing and editing classifier configuration summary 173
- Classifier global setting 174
- After you have configured a classifier you can configure a policy in the policy screen to define action s on the classified traffic flow 175
- Chapter 21 classifier 175
- Classifier example 175
- Classifier global setting 175
- Gs1920 series user s guide 175
- Label description 175
- The following screen shows an example where you configure a classifier that identifies all traffic from mac address 00 50 ba ad 4f 81 on port 2 175
- The following table describes the labels in this screen 175
- Configuring policy rules 177
- Policy rule 177
- Policy rules overview 177
- What you can do 177
- Chapter 22 policy rule 178
- Gs1920 series user s guide 178
- Label description 178
- Policy rule 178
- The following table describes the labels in this screen 178
- Chapter 22 policy rule 179
- Gs1920 series user s guide 179
- Label description 179
- Note you can specify only one action pair in a policy rule to have the switch take multiple actions on the same traffic flow you need to define multiple classifiers with the same criteria and apply different policy rules 179
- Policy rule continued 179
- Policy example 180
- Queuing method 181
- Queuing method overview 181
- What you can do 181
- What you need to know 181
- Configuring queuing 182
- Chapter 23 queuing method 183
- Gs1920 series user s guide 183
- Label description 183
- Note changes in this row are copied to all the ports as soon as you make them 183
- Queuing method 183
- The following table describes the labels in this screen 183
- Multicast 184
- Multicast overview 184
- What you can do 184
- What you need to know 184
- Igmp snooping 185
- Igmp snooping and vlans 185
- Mld snooping proxy 185
- Mld messages 186
- Mvr overview 186
- Report 186
- How mvr works 187
- Multicast vlan vlan 1 187
- Mvr modes 187
- Types of mvr ports 187
- Vlan 2 187
- Vlan 3 187
- Ipv4 multicast status 188
- Multicast setup 188
- Multicast vlan vlan 1 188
- Igmp snooping 189
- Chapter 24 multicast 190
- Gs1920 series user s guide 190
- Igmp snooping 190
- Label description 190
- The following table describes the labels in this screen 190
- Chapter 24 multicast 191
- Gs1920 series user s guide 191
- Igmp snooping continued 191
- Igmp snooping vlan 191
- Ipv4 multicast in the navigation panel click the igmp snooping link and then the igmp snooping vlan link to display the screen as shown see igmp snooping and vlans on page 185 for more information on igmp snooping vlan 191
- Label description 191
- Chapter 24 multicast 192
- Gs1920 series user s guide 192
- Igmp snooping vlan 192
- Label description 192
- The following table describes the labels in this screen 192
- Igmp filtering profile 193
- Chapter 24 multicast 194
- Gs1920 series user s guide 194
- Igmp filtering profile continued 194
- Ipv6 multicast 194
- Ipv6 multicast status 194
- Ipv6 multicast to display the screen as shown this screen shows the ipv6 multicast group information see section 24 on page 184 for more information on multicasting 194
- Label description 194
- The following table describes the fields in the above screen 194
- Mld snooping proxy 195
- Mld snooping proxy vlan 195
- Chapter 24 multicast 196
- Gs1920 series user s guide 196
- Label description 196
- The following table describes the fields in the above screen 196
- Chapter 24 multicast 197
- Gs1920 series user s guide 197
- Label description 197
- Mld snooping proxy vlan port role setting 197
- Vlan screen to display the screen as shown see section 24 on page 184 for more information on multicasting 197
- Chapter 24 multicast 198
- Gs1920 series user s guide 198
- Label description 198
- Port role setting 198
- The following table describes the fields in the above screen 198
- Chapter 24 multicast 199
- Gs1920 series user s guide 199
- Label description 199
- Mld snooping proxy filtering 199
- Mld snooping proxy screen to display the screen as shown 199
- Port role setting 199
- Chapter 24 multicast 200
- Filtering 200
- Gs1920 series user s guide 200
- Label description 200
- The following table describes the fields in the above screen 200
- Chapter 24 multicast 201
- Filtering 201
- Filtering profile 201
- Filtering screen to display the screen as shown 201
- Gs1920 series user s guide 201
- Label description 201
- Mld snooping proxy filtering profile 201
- The following table describes the fields in the above screen 201
- Chapter 24 multicast 202
- Filtering profile 202
- General mvr configuration 202
- Gs1920 series user s guide 202
- Label description 202
- Mvr to display the screen as shown next 202
- Note you can create up to five multicast vlans and up to 256 multicast rules on the switch 202
- Note your switch automatically creates a static vlan with the same vid when you create a multicast vlan in this screen 202
- Chapter 24 multicast 203
- Gs1920 series user s guide 203
- Label description 203
- The following table describes the related labels in this screen 203
- All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group 204
- Chapter 24 multicast 204
- Gs1920 series user s guide 204
- Label description 204
- Mvr continued 204
- Mvr group configuration 204
- Note a port can belong to more than one multicast vlan however ip multicast group addresses in different multicast vlans cannot overlap 204
- Use this screen to configure mvr ip multicast group address es click the group configuration link in the mvr screen 204
- Chapter 24 multicast 205
- Group configuration 205
- Gs1920 series user s guide 205
- Label description 205
- The following table describes the labels in this screen 205
- Multicast vid 200 vlan 1 206
- Mvr configuration example 206
- Example 207
- Example 208
- Aaa overview 209
- What you can do 209
- What you need to know 209
- Aaa screens 210
- Local user accounts 210
- Radius and tacacs 210
- Chapter 25 aaa 211
- Gs1920 series user s guide 211
- Label description 211
- Radius server setup 211
- The following table describes the labels in this screen 211
- Use this screen to configure your radius server settings see radius and tacacs on page 210 for more information on radius servers and section 25 on page 218 for radius attributes utilized by the authentication features on the switch click on the radius server setup link in the aaa screen to view the screen as shown 211
- Chapter 25 aaa 212
- Gs1920 series user s guide 212
- Label description 212
- Radius server setup continued 212
- Tacacs server setup 212
- Use this screen to configure your tacacs server settings see radius and tacacs on page 210 for more information on tacacs servers click on the tacacs server setup link in the aaa screen to view the screen as shown 212
- Chapter 25 aaa 213
- Gs1920 series user s guide 213
- Label description 213
- Tacacs server setup 213
- The following table describes the labels in this screen 213
- Aaa setup 214
- Chapter 25 aaa 214
- Gs1920 series user s guide 214
- Label description 214
- Tacacs server setup continued 214
- Use this screen to configure authentication authorization and accounting settings on the switch click on the aaa setup link in the aaa screen to view the screen as shown 214
- Aaa setup 215
- Chapter 25 aaa 215
- Gs1920 series user s guide 215
- Label description 215
- The following table describes the labels in this screen 215
- Aaa setup continued 216
- Chapter 25 aaa 216
- Gs1920 series user s guide 216
- Label description 216
- Rfc 2865 standard specifies a method for sending vendor specific information between a radius server and a network access device for example the switch a company can create vendor specific attributes vsas to expand the functionality of a radius server 216
- Technical reference 216
- This section provides technical background information on the topics discussed in this chapter 216
- Vendor specific attribute 216
- Note refer to the documentation that comes with your radius server on how to configure vsas for users authenticating via the radius server 217
- Tunnel protocol attribute 217
- Attributes used by the ieee 802 x authentication 218
- Attributes used for authenticating privilege access 218
- Attributes used for authentication 218
- Attributes used to login users 218
- Supported radius attributes 218
- Ip source guard 220
- Ip source guard overview 220
- What you can do 220
- Ip source guard screen 221
- What you need to know 221
- Ipv4 source guard setup 222
- Ipv4 source guard static binding 222
- Arp learning screen before you use the arp freeze feature 223
- Chapter 26 ip source guard 223
- Gs1920 series user s guide 223
- Label description 223
- Static binding 223
- The following table describes the labels in this screen 223
- Chapter 26 ip source guard 224
- Dhcp snooping 224
- Gs1920 series user s guide 224
- Label description 224
- Static binding 224
- Chapter 26 ip source guard 225
- Dhcp snooping 225
- Gs1920 series user s guide 225
- Label description 225
- The following table describes the labels in this screen 225
- Chapter 26 ip source guard 226
- Dhcp snooping 226
- Gs1920 series user s guide 226
- Label description 226
- Chapter 26 ip source guard 227
- Configure 227
- Dhcp snooping 227
- Dhcp snooping configure 227
- Gs1920 series user s guide 227
- Label description 227
- Chapter 26 ip source guard 228
- Configure 228
- Gs1920 series user s guide 228
- Label description 228
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 228
- Note you have to enable dhcp snooping on the dhcp vlan too 228
- The following table describes the labels in this screen 228
- Chapter 26 ip source guard 229
- Configure continued continued 229
- Dhcp snooping port configure 229
- Gs1920 series user s guide 229
- Label description 229
- Note if dhcp snooping is enabled but there are no trusted ports dhcp requests cannot reach the dhcp server 229
- Use this screen to specify whether ports are trusted or untrusted ports for dhcp snooping 229
- Chapter 26 ip source guard 231
- Dhcp snooping vlan configure 231
- Gs1920 series user s guide 231
- Label description 231
- The following table describes the labels in this screen 231
- Chapter 26 ip source guard 232
- Dhcp snooping vlan port configure 232
- Gs1920 series user s guide 232
- Label description 232
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 232
- Vlan continued 232
- Arp inspection 233
- Arp inspection status 233
- Chapter 26 ip source guard 233
- Gs1920 series user s guide 233
- Label description 233
- The following table describes the labels in this screen 233
- Arp inspection 234
- Arp inspection vlan status 234
- Chapter 26 ip source guard 234
- Gs1920 series user s guide 234
- Label description 234
- The following table describes the labels in this screen 234
- Vlan status 234
- Arp inspection log status 235
- Chapter 26 ip source guard 235
- Gs1920 series user s guide 235
- Label description 235
- Log status 235
- The following table describes the labels in this screen 235
- Vlan status 235
- Chapter 26 ip source guard 236
- Gs1920 series user s guide 236
- Label description 236
- Log status 236
- The following table describes the labels in this screen 236
- Arp inspection configure 237
- Chapter 26 ip source guard 237
- Configure 237
- Gs1920 series user s guide 237
- Label description 237
- The following table describes the labels in this screen 237
- Arp inspection port configure 238
- Chapter 26 ip source guard 238
- Configure continued 238
- Gs1920 series user s guide 238
- Label description 238
- Chapter 26 ip source guard 239
- Gs1920 series user s guide 239
- Label description 239
- Note changes in this row are copied to all the ports as soon as you make them 239
- The following table describes the labels in this screen 239
- Arp inspection vlan configure 240
- Chapter 26 ip source guard 240
- Gs1920 series user s guide 240
- Label description 240
- Port continued 240
- The following table describes the labels in this screen 240
- Dhcp snooping overview 241
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 241
- Technical reference 241
- Trusted vs untrusted ports 241
- Dhcp relay option 82 information 242
- Dhcp snooping database 242
- Arp inspection and mac address filters 243
- Arp inspection overview 243
- Configuring dhcp snooping 243
- Configuring arp inspection 244
- Note it is recommended you enable dhcp snooping at least one day before you enable arp inspection so that the switch has enough time to build the binding table 244
- Syslog 244
- Trusted vs untrusted ports 244
- Loop guard 245
- Loop guard overview 245
- What you can do 245
- What you need to know 245
- Loop guard setup 247
- Note after resolving the loop problem on your network you can re activate the disabled port via the web configurator see section 8 on page 70 247
- Note the loop guard feature can not be enabled on the ports that have spanning tree protocol rstp mrstp or mstp enabled 247
- Chapter 27 loop guard 248
- Gs1920 series user s guide 248
- Label description 248
- Loop guard 248
- Note changes in this row are copied to all the ports as soon as you make them 248
- The following table describes the labels in this screen 248
- Layer 2 protocol tunneling 249
- Layer 2 protocol tunneling overview 249
- What you can do 249
- What you need to know 249
- Configuring layer 2 protocol tunneling 250
- Layer 2 protocol tunneling mode 250
- Service provider s network c 250
- Chapter 28 layer 2 protocol tunneling 252
- Gs1920 series user s guide 252
- Label description 252
- Layer 2 protocol tunneling continued 252
- Note you can enable l2pt services for stp lacp vtp cdp udld and pagp on the access port s only 252
- Pppoe intermediate agent overview 253
- What you can do 253
- What you need to know 253
- Chapter 29 pppoe 254
- Flexible circuit id syntax with identifier string and variables 254
- Gs1920 series user s guide 254
- If you do not configure a circuit id string for a vlan on a specific port or for a specific port the switch adds the user defined identifier string and variables into the agent circuit id sub option the variables can be the slot id of the pppoe client the port number of the pppoe client and or the vlan id on the pppoe packet 254
- Intermediate agent screen the switch automatically generates a circuit id string according to the default circuit id syntax which is 254
- Sub option format 254
- Table 113 pppoe ia circuit id sub option format user defined string 254
- Table 114 pppoe ia remote id sub option format 254
- Table 115 pppoe ia circuit id sub option format using identifier string and variables 254
- The 1 in the first field identifies this as an agent circuit id sub option and 2 identifies this as an agent remote id sub option the next field specifies the length of the field the switch takes the circuit id string you manually configure for a vlan on a port as the highest priority and the circuit id string for a port as the second priority in addition the switch puts the pppoe client s mac address into the agent remote id sub option if you do not specify any user defined string 254
- The identifier string slot id port number and vlan id are separated from each other by a pound key semi colon period comma forward slash or space an agent circuit id sub option example is switch 07 0123 and indicates the pppoe packets come from a pppoe client which is connected to the switch s port 7 and belong to vlan 123 254
- The tag_type is 0x0105 for vendor specific tags as defined in rfc 2516 the tag_len indicates the length of value i1 and i2 the value is the 32 bit number 0x00000de9 which stands for the adsl forum iana entry i1 and i2 are pppoe intermediate agent sub options which contain additional information about the pppoe client 254
- There are two types of sub option agent circuit id sub option and agent remote id sub option they have the following formats 254
- Wt 101 default circuit id syntax 254
- Note the switch will drop all pppoe discovery packets if you enable the pppoe intermediate agent and there are no trusted ports 255
- Port state 255
- Pppoe screen 255
- Chapter 29 pppoe 256
- Gs1920 series user s guide 256
- Intermediate agent 256
- Intermediate agent in the navigation panel to display the screen as shown 256
- Label description 256
- Pppoe intermediate agent 256
- The following table describes the labels in this screen 256
- Use this screen to configure the switch to give a pppoe termination server additional subscriber information that the server can use to identify and authenticate a pppoe client 256
- Chapter 29 pppoe 257
- Click the port link in the intermediate agent screen to display the screen as shown 257
- Gs1920 series user s guide 257
- Intermediate agent continued 257
- Label description 257
- Note the switch will drop all pppoe packets if you enable the pppoe intermediate agent on the switch and there are no trusted ports 257
- Pppoe ia per port 257
- Use this screen to specify whether individual ports are trusted or untrusted ports and have the switch add extra information to pppoe discovery packets from pppoe clients on a per port basis 257
- Chapter 29 pppoe 258
- Gs1920 series user s guide 258
- Label description 258
- Port screen to display the screen as shown 258
- Pppoe ia per port per vlan 258
- The following table describes the labels in this screen 258
- Use this screen to configure pppoe ia settings that apply to a specific vlan on a port 258
- Chapter 29 pppoe 259
- Click the vlan link in the intermediate agent screen to display the screen as shown 259
- Gs1920 series user s guide 259
- Label description 259
- Pppoe ia for vlan 259
- The following table describes the labels in this screen 259
- Use this screen to set whether the pppoe intermediate agent is enabled on a vlan and whether the switch appends the circuit id and or remote id to pppoe discovery packets from a specific vlan 259
- Chapter 29 pppoe 260
- Gs1920 series user s guide 260
- Label description 260
- The following table describes the labels in this screen 260
- Cpu protection overview 261
- Error disable 261
- Error disable overview 261
- Error disable recovery overview 261
- What you can do 261
- Error disable screen 262
- Error disable status 262
- Chapter 30 error disable 263
- Errdisable status 263
- Gs1920 series user s guide 263
- Label description 263
- The following table describes the labels in this screen 263
- Chapter 30 error disable 264
- Cpu protection configuration 264
- Errdisable detect screen 264
- Errdisable screen to display the screen as shown 264
- Errdisable status continued 264
- Gs1920 series user s guide 264
- Label description 264
- Chapter 30 error disable 265
- Cpu protection 265
- Gs1920 series user s guide 265
- Label description 265
- The following table describes the labels in this screen 265
- Chapter 30 error disable 266
- Errdisable detect 266
- Errdisable screen to display the screen as shown 266
- Error disable detect configuration 266
- Error disable recovery configuration 266
- Gs1920 series user s guide 266
- Label description 266
- The following table describes the labels in this screen 266
- Chapter 30 error disable 267
- Errdisable recovery 267
- Gs1920 series user s guide 267
- Label description 267
- The following table describes the labels in this screen 267
- Configuring private vlan 268
- Private vlan 268
- Private vlan overview 268
- Chapter 31 private vlan 269
- Gs1920 series user s guide 269
- Label description 269
- Private vlan 269
- The following table describes the labels in this screen 269
- Configuring green ethernet 270
- Green ethernet 270
- Green ethernet overview 270
- Chapter 32 green ethernet 271
- Green ethernet 271
- Gs1920 series user s guide 271
- Label description 271
- The following table describes the labels in this screen 271
- Link layer discovery protocol lldp 272
- Lldp overview 272
- Lldp med overview 273
- Lldp screens 274
- Lldp local status 275
- Chapter 33 link layer discovery protocol lldp 276
- Gs1920 series user s guide 276
- Label description 276
- Lldp local port status detail 276
- Lldp local status 276
- Lldp local status and then click a port number for example 1 in the local port column to display the screen as shown next 276
- The following table describes the labels in this screen 276
- Chapter 33 link layer discovery protocol lldp 278
- Gs1920 series user s guide 278
- Label description 278
- Lldp local port status detail 278
- The following table describes the labels in this screen 278
- Chapter 33 link layer discovery protocol lldp 279
- Gs1920 series user s guide 279
- Label description 279
- Lldp local port status detail 279
- Lldp remote status 279
- Lldp remote status click here to display the screen as shown next 279
- The following table describes the labels in this screen 279
- Lldp remote port status detail 280
- Chapter 33 link layer discovery protocol lldp 281
- Gs1920 series user s guide 281
- Label description 281
- Lldp remote port status detail basic tlv 281
- Chapter 33 link layer discovery protocol lldp 283
- Gs1920 series user s guide 283
- Label description 283
- Lldp remote port status detail dot1 and dot3 tlv 283
- Chapter 33 link layer discovery protocol lldp 285
- Gs1920 series user s guide 285
- Label description 285
- Lldp remote port status detail med tlv 285
- The following table describes the labels in the med tlv part of the screen 285
- Chapter 33 link layer discovery protocol lldp 286
- Gs1920 series user s guide 286
- Label description 286
- Lldp configuration 286
- Lldp configuration click here to display the screen as shown next 286
- Lldp remote port status detail med tlv 286
- Chapter 33 link layer discovery protocol lldp 287
- Gs1920 series user s guide 287
- Label description 287
- Lldp configuration 287
- The following table describes the labels in this screen 287
- Basic tlv setting 288
- Basic tlv setting to display the screen as shown next 288
- Chapter 33 link layer discovery protocol lldp 288
- Gs1920 series user s guide 288
- Label description 288
- Lldp configuration 288
- Lldp configuration basic tlv setting 288
- Basic tlv setting 289
- Chapter 33 link layer discovery protocol lldp 289
- Gs1920 series user s guide 289
- Label description 289
- Lldp configuration org specific tlv setting 289
- Org specific tlv setting to display the screen as shown next 289
- The following table describes the labels in this screen 289
- Chapter 33 link layer discovery protocol lldp 290
- Gs1920 series user s guide 290
- Label description 290
- Org specific tlv setting 290
- The following table describes the labels in this screen 290
- Chapter 33 link layer discovery protocol lldp 291
- Gs1920 series user s guide 291
- Label description 291
- Lldp med configuration 291
- Lldp med configuration to display the screen as shown next 291
- Org specific tlv setting 291
- Chapter 33 link layer discovery protocol lldp 292
- Gs1920 series user s guide 292
- Label description 292
- Lldp med configuration 292
- Lldp med network policy 292
- Lldp med network policy click here to display the screen as shown next 292
- The following table describes the labels in this screen 292
- Chapter 33 link layer discovery protocol lldp 293
- Gs1920 series user s guide 293
- Label description 293
- Lldp med location 293
- Lldp med location click here to display the screen as shown next 293
- Lldp med network policy 293
- The following table describes the labels in this screen 293
- Chapter 33 link layer discovery protocol lldp 294
- Gs1920 series user s guide 294
- Label description 294
- Lldp med location 294
- The following table describes the labels in this screen 294
- Chapter 33 link layer discovery protocol lldp 295
- Gs1920 series user s guide 295
- Label description 295
- Lldp med location 295
- Chapter 33 link layer discovery protocol lldp 296
- Gs1920 series user s guide 296
- Label description 296
- Lldp med location 296
- Ipv4 static route 297
- Static route 297
- Static route overview 297
- Static routing 297
- What you can do 297
- Chapter 34 static route 298
- Gs1920 series user s guide 298
- Ipv4 static route 298
- Label description 298
- The following table describes the related labels you use to create a static route 298
- Chapter 34 static route 299
- Gs1920 series user s guide 299
- Ipv4 static route continued 299
- Label description 299
- Differentiated services 300
- Differentiated services overview 300
- What you can do 300
- What you need to know 300
- Activating diffserv 301
- Diffserv network example 301
- P platinum g gold s silver b bronze 301
- Chapter 35 differentiated services 302
- Diffserv 302
- Dscp to ieee 802 p priority settings 302
- Gs1920 series user s guide 302
- Label description 302
- The following table describes the labels in this screen 302
- You can configure the dscp to ieee 802 p mapping to allow the switch to prioritize all traffic based on the incoming dscp value according to the diffserv to ieee 802 p mapping table 302
- Chapter 35 differentiated services 303
- Configuring dscp settings 303
- Dscp setting 303
- Gs1920 series user s guide 303
- Label description 303
- Table 142 default dscp ieee 802 p mapping 303
- The following table describes the labels in this screen 303
- The following table shows the default dscp to ieee802 p mapping 303
- To change the dscp ieee 802 p mapping click the dscp setting link in the diffserv screen to display the screen as shown next 303
- Dhcp overview 304
- What you can do 304
- What you need to know 304
- Dhcp configuration 305
- Dhcpv4 relay 305
- Dhcpv4 status 305
- Dhcpv4 relay agent information 306
- Dhcpv4 relay agent information format 306
- Sub option format 306
- Chapter 36 dhcp 307
- Dhcpv4 in the navigation panel and click the option 82 profile link to display the screen as shown 307
- Dhcpv4 option 82 profile 307
- Gs1920 series user s guide 307
- Label description 307
- Option 82 profile 307
- Table 148 dhcp relay agent remote id sub option format 307
- The 1 in the first field identifies this as an agent circuit id sub option and 2 identifies this as an agent remote id sub option the next field specifies the length of the field 307
- The following table describes the labels in this screen 307
- Chapter 36 dhcp 308
- Configuring dhcpv4 global relay 308
- Dhcpv4 in the navigation panel and click the global link to display the screen as shown 308
- Global 308
- Gs1920 series user s guide 308
- Label description 308
- Option 82 profile continued 308
- Chapter 36 dhcp 309
- Dhcpv4 global relay port configure 309
- Global 309
- Gs1920 series user s guide 309
- Label description 309
- The following table describes the labels in this screen 309
- 68 00 dhcp server 310
- Chapter 36 dhcp 310
- Configure the dhcp relay screen as shown make sure you select a dhcp option 82 profile default1 in this example to set the switch to send additional information such as the vlan id together with the dhcp requests to the dhcp server this allows the dhcp server to assign the appropriate ip address according to the vlan id 310
- Figure 216 global dhcp relay network example 310
- Global dhcp relay configuration example 310
- Gs1920 series user s guide 310
- Label description 310
- Port continued 310
- The follow figure shows a network example where the switch is used to relay dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server that services the dhcp clients in both domains 310
- Vlan1 vlan2 310
- Configuring dhcpv4 vlan settings 311
- Example 311
- Note you must set up a management ip address for each vlan that you want to configure dhcp settings for on the switch see section 5 on page 43 for information on how to do this 311
- Chapter 36 dhcp 312
- Dhcpv4 vlan port configure 312
- Gs1920 series user s guide 312
- Label description 312
- The following table describes the labels in this screen 312
- Vlan continued 312
- Chapter 36 dhcp 313
- Dhcp 172 6 0 00 313
- Dhcp 192 68 00 313
- Example dhcp relay for two vlans 313
- Figure 220 dhcp relay for two vlans 313
- For the example network configure the vlan setting screen as shown 313
- Gs1920 series user s guide 313
- Label description 313
- Port continued 313
- The following example displays two vlans vids 1 and 2 for a campus network two dhcp servers are installed to serve each vlan the system is set up to forward dhcp requests from the dormitory rooms vlan 1 to the dhcp server with an ip address of 192 68 00 requests from the academic buildings vlan 2 are sent to the other dhcp server with an ip address of 172 6 0 00 313
- Dhcpv6 relay 314
- Example 314
- Chapter 36 dhcp 315
- Dhcpv6 315
- Gs1920 series user s guide 315
- Label description 315
- The following table describes the labels in this screen 315
- Arp overview 316
- Arp setup 316
- What you can do 316
- What you need to know 316
- Arp request 317
- Gratuitous arp 317
- Arp learning 318
- Arp setup 318
- Arp learning 319
- Chapter 37 arp setup 319
- Gs1920 series user s guide 319
- Label description 319
- The following table describes the labels in this screen 319
- Maintenance 320
- Overview 320
- The maintenance screen 320
- What you can do 320
- Chapter 38 maintenance 321
- Click ok to reset all switch configurations to the factory defaults 321
- Erase running configuration 321
- Figure 226 erase running configuration confirmation 321
- Follow the steps below to reset the switch back to the factory defaults 321
- Gs1920 series user s guide 321
- In the maintenance screen click the click here button next to erase running configuration to clear all switch configuration information you configured and return to the factory defaults 321
- Label description 321
- Maintenance 321
- Note make sure to click the save button in any screen to save your settings to the current configuration on the switch 321
- The following table describes the labels in this screen 321
- Firmware upgrade 322
- Note clicking the apply or add button does not save the changes permanently all unsaved changes are erased after you reboot the switch 322
- Reboot system 322
- Save configuration 322
- After the firmware upgrade process is complete see the system info screen to verify your current firmware version number 323
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 323
- Chapter 38 maintenance 323
- Firmware upgrade 323
- Firmware upgrade to view the screen as shown next 323
- Gs1920 series user s guide 323
- Label description 323
- Make sure you have downloaded and unzipped the correct model firmware and version to your computer before uploading to the device 323
- Type the path and file name of the firmware file you wish to upload to the switch in the file path text box or click browse to locate it select the rebooting checkbox if you want to reboot the switch and apply the new firmware immediately firmware upgrades are only applied after a reboot click upgrade to load the new firmware 323
- When firmware is uploaded using the web configurator and to specify which image is loaded when the switch starts up 323
- Back up your current switch configuration to a computer using the backup configuration screen 324
- Backing up your switch configurations allows you to create various snap shots of your device from which you may restore at a later date 324
- Backup a configuration file 324
- Chapter 38 maintenance 324
- Firmware upgrade 324
- Gs1920 series user s guide 324
- Label description 324
- Restore a configuration file 324
- Restore configuration 324
- Type the path and file name of the configuration file you wish to restore in the file path text box or click browse to locate it after you have specified the file click restore config is the name of the configuration file on the switch so your backup configuration file is automatically renamed when you restore using this screen 324
- Use this screen to restore a previously saved configuration from your computer to the switch 324
- Use this screen to save and store your current device settings 324
- Tech support 325
- Chapter 38 maintenance 326
- Ftp command line 326
- Gs1920 series user s guide 326
- Label description 326
- Tech support 326
- Technical reference 326
- This section provides technical background information on the topics discussed in this chapter 326
- This section shows some examples of uploading to or downloading files from the switch using ftp commands first understand the filename conventions 326
- You may need wordpad or similar software to see the log report correctly the table below describes the fields in the above screen 326
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 327
- Example ftp commands 327
- Filename conventions 327
- Ftp command line procedure 327
- Ftp restrictions 328
- Gui based ftp clients 328
- Access control 329
- Access control overview 329
- The access control main screen 329
- What you can do 329
- Access control 330
- Chapter 39 access control 330
- Configuring snmp 330
- Gs1920 series user s guide 330
- Label description 330
- Snmp to view the screen as shown 330
- The following table describes the labels in this screen 330
- Use this screen to configure your snmp settings 330
- Chapter 39 access control 331
- Configuring snmp trap group 331
- From the snmp screen click trap group to view the screen as shown use the trap group screen to specify the types of snmp traps that should be sent to each snmp manager 331
- Gs1920 series user s guide 331
- Label description 331
- Snmp continued 331
- The following table describes the labels in this screen 331
- Trap group 331
- Chapter 39 access control 332
- Enabling disabling sending of snmp traps on a port 332
- Gs1920 series user s guide 332
- Label description 332
- The following table describes the labels in this screen 332
- Trap group continued continued 332
- Trap group screen click port to view the screen as shown use this screen to set whether a trap received on the port s would be sent to the snmp manager 332
- Configuring snmp user 333
- Chapter 39 access control 334
- Gs1920 series user s guide 334
- Label description 334
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 334
- User continued 334
- Note it is highly recommended that you change the default administrator password 1234 335
- Setting up login accounts 335
- Chapter 39 access control 336
- Gs1920 series user s guide 336
- Label description 336
- Logins continued 336
- Service access control 336
- Service access control allows you to decide what services you may use to access the switch you may also change the default service port and configure trusted computer s for each service in the remote management screen discussed later click access control to go back to the main access control screen 336
- Chapter 39 access control 337
- Gs1920 series user s guide 337
- Label description 337
- Remote management 337
- Remote management to view the screen as shown next 337
- Service access control 337
- The following table describes the fields in this screen 337
- Use this screen to specify a group of one or more trusted computers from which an administrator may use a service to manage the switch 337
- You can specify a group of one or more trusted computers from which an administrator may use a service to manage the switch click access control to return to the access control screen 337
- Chapter 39 access control 338
- Gs1920 series user s guide 338
- Label description 338
- Remote management 338
- Technical reference 338
- The following table describes the labels in this screen 338
- This section provides technical background information on the topics discussed in this chapter 338
- About snmp 339
- Snmp v3 and security 339
- Snmp traps 340
- Supported mibs 340
- Chapter 39 access control 341
- Gs1920 series user s guide 341
- Https hypertext transfer protocol over secure socket layer or http over ssl is a web protocol that encrypts and decrypts web pages secure socket layer ssl is an application level protocol that enables secure transactions of data by ensuring confidentiality an unauthorized party cannot read the transferred data authentication one party can identify the other party and data integrity you know if data has been changed 341
- Https on the switch is used so that you may securely access the switch using the web configurator the ssl protocol specifies that the ssl server the switch must always authenticate itself to the ssl client the computer which requests the https connection with the switch whereas the ssl client only should authenticate itself when the ssl server requires it to do so authenticating client certificates is optional and if selected means the ssl client must send the 341
- Introduction to https 341
- It relies upon certificates public keys and private keys 341
- Option object label object id description 341
- Table 171 snmp aaa traps 341
- Table 172 snmp ip traps 341
- Table 173 snmp switch traps 341
- Https example 342
- Internet explorer warning messages 342
- Note if you disable http in the service access control screen then the switch blocks all http connection attempts 342
- Example 344
- Mozilla firefox warning messages 344
- Example 345
- Example 346
- The main screen 346
- Diagnostic 347
- Overview 347
- Chapter 40 diagnostic 348
- Diagnostic 348
- Gs1920 series user s guide 348
- Label description 348
- Note the device to which you want to run a traceroute must belong to the vlan you specify here 348
- The following table describes the labels in this screen 348
- Chapter 40 diagnostic 349
- Diagnostic continued 349
- Gs1920 series user s guide 349
- Label description 349
- Overview 350
- System log 350
- Syslog overview 351
- Syslog setup 351
- What you can do 351
- Chapter 42 syslog setup 352
- Gs1920 series user s guide 352
- Label description 352
- Syslog setup 352
- The following table describes the labels in this screen 352
- Chapter 42 syslog setup 353
- Gs1920 series user s guide 353
- Label description 353
- Syslog setup 353
- Cluster management 354
- Cluster management overview 354
- Cluster management status 355
- Note a cluster can only have one manager 355
- What you can do 355
- Clustering management configuration 356
- Example 356
- Chapter 43 cluster management 357
- Configuration 357
- Gs1920 series user s guide 357
- Label description 357
- The following table describes the labels in this screen 357
- Cluster member switch management 358
- Example 358
- Technical reference 358
- Uploading firmware to a cluster member switch 358
- Mac table 360
- Mac table overview 360
- What you can do 360
- What you need to know 360
- Viewing the mac table 361
- Chapter 44 mac table 362
- Gs1920 series user s guide 362
- Label description 362
- Mac table 362
- The following table describes the labels in this screen 362
- Arp table 363
- Overview 363
- Viewing the arp table 363
- What you can do 363
- What you need to know 363
- Arp table 364
- Chapter 45 arp table 364
- Gs1920 series user s guide 364
- Label description 364
- The following table describes the labels in this screen 364
- Path mtu overview 365
- Path mtu table 365
- Viewing the path mtu table 365
- Configure clone 366
- Overview 366
- Chapter 47 configure clone 368
- Configure clone 368
- Gs1920 series user s guide 368
- Label description 368
- The following table describes the labels in this screen 368
- Ipv6 neighbor table 369
- Ipv6 neighbor table overview 369
- Viewing the ipv6 neighbor table 369
- Chapter 48 ipv6 neighbor table 370
- Gs1920 series user s guide 370
- Ipv6 neighbor table continued 370
- Label description 370
- Power hardware connections and leds 371
- Troubleshooting 371
- I cannot see or access the login screen in the web configurator 372
- I forgot the ip address for the switch 372
- I forgot the username and or password 372
- Switch access and login 372
- I can see the login screen but i cannot log in to the switch 373
- I cannot see some of advanced application submenus at the bottom of the navigation panel 373
- Pop up windows javascripts and java permissions 373
- There is unauthorized access to my switch 373
- I lost my configuration settings after i restart the switch 374
- Switch configuration 374
- Customer support 375
- Ppendi 375
- Austria 376
- Belarus 376
- Europe 376
- Malaysia 376
- Pakistan 376
- Philippines 376
- Singapore 376
- Taiwan 376
- Thailand 376
- Vietnam 376
- Belgium 377
- Bulgaria 377
- Czech republic 377
- Denmark 377
- Estonia 377
- Finland 377
- France 377
- Germany 377
- Hungary 377
- Latvia 377
- Lithuania 378
- Netherlands 378
- Norway 378
- Poland 378
- Romania 378
- Russia 378
- Slovakia 378
- Sweden 378
- Switzerland 378
- Argentina 379
- Ecuador 379
- Israel 379
- Latin america 379
- Middle east 379
- North america 379
- Turkey 379
- Ukraine 379
- Africa 380
- Australia 380
- Oceania 380
- South africa 380
- Common services 381
- Ppendi 381
- Appendix b common services 382
- Gs1920 series user s guide 382
- Name protocol port s description 382
- Table 186 commonly used services continued 382
- Appendix b common services 383
- Gs1920 series user s guide 383
- Name protocol port s description 383
- Table 186 commonly used services continued 383
- Ppendi 384
- Global address 385
- Loopback address 385
- Multicast address 385
- Unspecified address 385
- Eui 64 386
- Interface id 386
- Stateless autoconfiguration 386
- Subnet masking 386
- Dhcp relay agent 387
- Dhcpv6 387
- Identity association 387
- Rebind 387
- Renew rebind 387
- Renew to s1 387
- Icmpv6 388
- Ipv6 cache 388
- Neighbor discovery protocol ndp 388
- Prefix delegation 388
- Example enabling dhcpv6 on windows xp 389
- Example enabling ipv6 on windows xp 2003 vista 389
- Example enabling ipv6 on windows 7 390
- Legal information 392
- Ppendi 392
- Appendix d legal information 393
- Ce emc statement 393
- Gs1920 series user s guide 393
- List of national codes 393
- Notices 393
- Safety warnings 393
- Appendix d legal information 394
- Environment statment 394
- European union disposal and recycling information 394
- Gs1920 series user s guide 394
- Weee directive 394
- Environmental product declaration 395
- Appendix d legal information 396
- Gs1920 series user s guide 396
- Open source licenses 396
- Registration 396
- Trademarks 396
- Viewing certifications 396
- Zyxel limited warranty 396
- 台灣 396
- Numerics 397
Похожие устройства
- Epson Expression 11000XL Руководство по установке
- Zyxel GS1920-48HP Технические характеристики
- Epson Perfection V800 Photo Руководство пользователя
- Epson Perfection V850 Pro Руководство пользователя
- Epson Expression 11000XL Pro Руководство по установке
- Epson GT-1500 Руководство по установке
- Epson GT-S85 Руководство по установке
- Epson GT-S85N Руководство по установке
- Epson Perfection V37 Руководство по установке
- Epson Perfection V370 Руководство по установке
- Epson Perfection V500 Office Руководство по установке
- Ardo TL 80 E Таблица программ
- Toshiba 32L6353RK Инструкция по загрузке прошивки
- Toshiba 32L6353RK Инструкция по прошивке
- Zyxel GS2200-8HP Инструкция по эксплуатации
- Zyxel GS2200-8HP Технические характеристики
- Zyxel GS2200-8HP Справочник командного интерфейса
- Zyxel GS2200-8HP Рекомендации по настройке
- Zyxel GS2200-24P Справочник командного интерфейса
- Zyxel GS2200-24P Технические характеристики
Скачать
Случайные обсуждения