Zyxel GS1920-24 [90/381] Vlan configuration

Содержание

• Default login details p.1
• Quick start guide p.1
• Gs1920 series p.1
• User s guide p.1
• Intelligent layer 2 gbe switch p.1
• Read carefully before use p.2
• Keep this guide for future reference p.2
• Important p.2
• User s guide 7 p.3
• Contents overview p.3
• Technical reference 2 p.3
• Chapter 2 hardware installation and connection 3 p.5
• Table of contents p.5
• Part i user s guide 17 p.5
• Contents overview p.5
• Chapter 3 hardware panels 6 p.5
• Chapter 1 getting to know your switch 8 p.5
• Chapter 4 the web configurator 3 p.6
• Chapter 8 basic setting 9 p.6
• Chapter 6 tutorials 4 p.6
• Chapter 5 initial setup example 0 p.6
• Part ii technical reference 32 p.6
• Chapter 7 zon utility zon neighbor management and port status 2 p.6
• Chapter 9 vlan 5 p.7
• Chapter 10 static mac forward setup 05 p.8
• Chapter 14 bandwidth control 31 p.8
• Chapter 13 spanning tree protocol 112 p.8
• Chapter 12 filtering 110 p.8
• Chapter 11 static multicast forward setup 07 p.8
• Chapter 18 port authentication 44 p.9
• Chapter 16 mirroring 35 p.9
• Chapter 20 classifier 53 p.9
• Chapter 19 port security 50 p.9
• Chapter 17 link aggregation 37 p.9
• Chapter 15 broadcast storm control 33 p.9
• Chapter 21 policy rule 58 p.10
• Chapter 24 aaa 89 p.10
• Chapter 23 multicast 65 p.10
• Chapter 22 queuing method 62 p.10
• Chapter 27 layer 2 protocol tunneling 27 p.11
• Chapter 26 loop guard 23 p.11
• Chapter 25 ip source guard 00 p.11
• Chapter 32 link layer discovery protocol lldp 50 p.12
• Chapter 31 green ethernet 48 p.12
• Chapter 30 private vlan 46 p.12
• Chapter 29 error disable 40 p.12
• Chapter 28 pppoe 31 p.12
• Chapter 35 dhcp 81 p.13
• Chapter 36 arp setup 95 p.13
• Chapter 34 differentiated services 77 p.13
• Chapter 33 static route 74 p.13
• Chapter 38 access control 08 p.14
• Chapter 37 maintenance 99 p.14
• Chapter 39 diagnostic 26 p.14
• Chapter 45 configure clone 43 p.15
• Chapter 44 path mtu table 42 p.15
• Chapter 43 arp table 40 p.15
• Chapter 42 mac table 37 p.15
• Chapter 41 cluster management 31 p.15
• Chapter 40 syslog 28 p.15
• User s guide p.17
• Getting to know your switch p.18
• Introduction p.18
• Switch model poe features p.19
• Bridging example p.19
• Backbone application p.19
• Ieee 802 q vlan application examples p.20
• High performance switching example p.20
• Ways to manage the switch p.21
• Tag based vlan example p.21
• Good habits for managing the switch p.21
• Rack mounted installation requirements p.23
• Mounting the switch on a rack p.23
• Installation scenarios p.23
• Hardware installation and connection p.23
• Desktop installation procedure p.23
• Mounting the switch on a rack p.24
• Attaching the mounting brackets to the switch p.24
• Front panel p.26
• Hardware panels p.26
• Gigabit ethernet ports p.26
• Mini gbic slots p.27
• Default ethernet negotiation settings p.27
• Auto crossover p.27
• Transceiver installation p.27
• To avoid possible eye injury do not look into an operating fiber optic module s connectors p.27
• Note the dual personality ports change to fiber mode directly when inserting the fiber module p.27
• Transceiver removal p.28
• Rear panel p.29
• Power connector p.29
• Note make sure you are using the correct power source as shown on the panel p.29
• Led mode only available for gs1920 48hp p.29
• Chapter 3 hardware panels p.30
• Reset to factory defaults p.30
• If you forget your password or cannot access the web configurator you will need to use the reset button at the side of the device to reload the factory default configuration file this means that you will lose all configurations that you had previously and the default switch ip address user name and password will be reset to 192 68 admin and 1234 respectively p.30
• Gs1920 series user s guide p.30
• Table 3 led descriptions p.30
• Led color status description p.30
• After you connect the power to the switch view the leds to ensure proper functioning of the switch and as an aid in troubleshooting p.30
• Note if you want to access the switch web configurator again you may need to change the ip address of your computer to be in the same subnet as that of the default switch ip address 192 68 p.31
• Side panels p.31
• Technical reference p.32
• The web configurator p.33
• System login p.33
• Overview p.33
• The status screen p.34
• Table 5 navigation panel links continued p.36
• Link description p.36
• Gs1920 series user s guide p.36
• Chapter 4 the web configurator p.36
• Link description p.37
• Table 5 navigation panel links continued p.37
• Logins to display the next screen p.37
• Gs1920 series user s guide p.37
• Chapter 4 the web configurator p.37
• Change your password p.37
• Switch lockout p.38
• Saving your configuration p.38
• Note use the save link when you are done with a configuration session p.38
• Resetting the switch p.39
• Note be careful not to lock yourself and others out of the switch p.39
• Logging out of the web configurator p.39
• Overview p.40
• Initial setup example p.40
• Creating a vlan p.40
• Setting port vid p.41
• Note the vlan group id field in this screen and the vid field in the ip setup screen refer to the same vlan id p.41
• Configuring switch management ip address p.42
• Tutorials p.44
• Overview p.44
• How to use dhcp snooping on the switch p.44
• Creating a vlan p.48
• Vlan 102 p.48
• How to use dhcp relay on the switch p.48
• Dhcp server port 2 pvid 102 p.48
• Dhcp relay tutorial introduction p.48
• Configuring dhcp relay p.50
• Troubleshooting p.51
• Zyxel one network zon utility screen p.52
• Zon utility zon neighbor management and port status p.52
• What you can do p.52
• Overview p.52
• Neighbor screen p.53
• Port status summary p.54
• Neighbor p.54
• Label description p.54
• Gs1920 series user s guide p.54
• Chapter 7 zon utility zon neighbor management and port status p.54
• To view the port statistics click status in all web configurator screens to display the status screen as shown next p.54
• The following table describes the fields in the above screen p.54
• Chapter 7 zon utility zon neighbor management and port status p.55
• The following table describes the labels in this screen p.55
• Table 8 status p.55
• Label description p.55
• Gs1920 series user s guide p.55
• Figure 44 status for poe model s p.55
• The following table describes the labels in this screen p.56
• Table 9 status port details p.56
• Status port details p.56
• Port details p.56
• Label description p.56
• Gs1920 series user s guide p.56
• Click a number in the port column in the status screen to display individual port statistics use this screen to check status and detailed performance data about an individual port on the switch p.56
• Chapter 7 zon utility zon neighbor management and port status p.56
• Table 9 status port details continued p.57
• Label description p.57
• Gs1920 series user s guide p.57
• Chapter 7 zon utility zon neighbor management and port status p.57
• Table 9 status port details continued p.58
• Label description p.58
• Gs1920 series user s guide p.58
• Chapter 7 zon utility zon neighbor management and port status p.58
• What you can do p.59
• System information p.59
• Overview p.59
• Basic setting p.59
• System info p.60
• Label description p.60
• Gs1920 series user s guide p.60
• Chapter 8 basic setting p.60
• The following table describes the labels in this screen p.60
• System info for poe model s only p.60
• System info continued p.61
• Label description p.61
• Gs1920 series user s guide p.61
• General setup in the navigation panel to display the screen as shown p.61
• General setup p.61
• Chapter 8 basic setting p.61
• The following table describes the labels in this screen p.62
• Label description p.62
• Gs1920 series user s guide p.62
• General setup p.62
• Chapter 8 basic setting p.62
• General setup continued p.63
• Chapter 8 basic setting p.63
• A vlan virtual local area network allows a physical network to be partitioned into multiple logical networks devices on a logical network belong to one group a device can belong to more than one group with vlan a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router p.63
• Vlan also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain in traditional switched environments all broadcast packets go to each and every individual port with vlan all broadcasts are confined to a specific broadcast domain p.63
• Note vlan is unidirectional it only governs outgoing traffic p.63
• Label description p.63
• Introduction to vlans p.63
• In mtu multi tenant unit applications vlan is vital in providing isolation and security among the subscribers when properly configured vlan prevents one subscriber from accessing the network resources of another on the same lan thus a user will not see the printers and hard disks of another user in the same building p.63
• Gs1920 series user s guide p.63
• The following table describes the labels in this screen p.64
• Switch setup screen p.64
• Switch setup in the navigation panel to display the screen as shown the vlan setup screens change depending on whether you choose 802 q or port based in the vlan type field in this screen refer to chapter 9 on page 85 for more information on vlan p.64
• Switch setup p.64
• See chapter 9 on page 85 for information on port based and 802 q tagged vlans p.64
• Label description p.64
• Gs1920 series user s guide p.64
• Chapter 8 basic setting p.64
• Gs1920 series user s guide p.65
• Chapter 8 basic setting p.65
• You can configure up to 64 ip addresses which are used to access and manage the switch from the ports belonging to the pre defined vlan s p.65
• Use the ip setup screen to configure the switch ip address default gateway device the default domain name server and the management vlan id the default gateway specifies the ip address of the default gateway next hop for outgoing traffic p.65
• The switch needs an ip address for it to be managed over the network the factory default ip address is 192 68 the subnet mask specifies the network number portion of an ip address the factory default subnet mask is 255 55 55 p.65
• Switch setup continued p.65
• Management ip addresses p.65
• Label description p.65
• Ip setup p.65
• The following table describes the labels in this screen p.66
• Note you must configure a vlan first p.66
• Label description p.66
• Ip setup p.66
• Gs1920 series user s guide p.66
• Chapter 8 basic setting p.66
• Ip setup continued p.67
• Gs1920 series user s guide p.67
• Chapter 8 basic setting p.67
• Port setup in the navigation panel to display the configuration screen p.67
• Port setup p.67
• Label description p.67
• The following table describes the labels in this screen p.68
• Port setup p.68
• Note due to space limitation the port name may be truncated in some web configurator screens p.68
• Note changes in this row are copied to all the ports as soon as you make them p.68
• Label description p.68
• Gs1920 series user s guide p.68
• Chapter 8 basic setting p.68
• Label description p.69
• In the figure below the ip camera and ip phone get their power directly from the switch aside from minimizing the need for cables and wires poe removes the hassle of trying to find a nearby electric outlet to power up devices p.69
• Gs1920 series user s guide p.69
• Figure 51 powered device examples p.69
• Chapter 8 basic setting p.69
• A powered device pd is a device such as an access point or a switch that supports poe power over ethernet so that it can receive power from another device through an ethernet port p.69
• You can also set priorities so that the switch is able to reserve and allocate power to certain pds p.69
• The poe model s supports the ieee 802 at high power over ethernet poe standard p.69
• Port setup continued p.69
• Poe status p.69
• Note the poe power over ethernet devices that supply or receive power and their connected ethernet cables must all be completely indoors p.69
• Note the following screens are available for the poe model s only some features are only available for the ethernet ports 1 to 24 for gs1920 24hp and 1 to 48 for gs1920 48hp p.69
• The following table describes the labels in this screen p.70
• Poe status p.70
• Poe setup p.70
• Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device needs less than 16w p.70
• Label description p.70
• Gs1920 series user s guide p.70
• Chapter 8 basic setting p.70
• Label description p.71
• Gs1920 series user s guide p.71
• Chapter 8 basic setting p.71
• Use this screen to set the priority levels for the switch in distributing power to pds p.71
• Poe status screen the following screen opens p.71
• Poe status continued p.71
• Poe setup p.71
• The following table describes the labels in this screen p.72
• Poe setup p.72
• Label description p.72
• Interface setup in the navigation panel to display the configuration screen p.72
• Interface setup p.72
• Gs1920 series user s guide p.72
• Chapter 8 basic setting p.72
• An ipv6 address is configured on a per interface basis the interface can support virtual interface for example a vlan the switch supports the vlan interface type for ipv6 at the time of writing p.72
• Ipv6 in the navigation panel to display the ipv6 status screen as shown next p.73
• Interface setup p.73
• Gs1920 series user s guide p.73
• Chapter 8 basic setting p.73
• Use this screen to view the ipv6 interface status and configure switch s management ipv6 addresses p.73
• The following table describes the labels in this screen p.73
• Label description p.73
• Ipv6 interface status p.74
• The following table describes the labels in this screen p.75
• Label description p.75
• Ipv6 interface status p.75
• Gs1920 series user s guide p.75
• Chapter 8 basic setting p.75
• Label description p.76
• Ipv6 interface status continued p.76
• Gs1920 series user s guide p.76
• Chapter 8 basic setting p.76
• Ipv6 configuration p.77
• Gs1920 series user s guide p.77
• Chapter 8 basic setting p.77
• Use this screen to configure the global ipv6 settings click the link next to ipv6 global setup in the ipv6 configuration screen to display the screen as shown next p.77
• The following table describes the labels in this screen p.77
• Label description p.77
• Ipv6 screen the following screen opens p.77
• Ipv6 global setup p.77
• Use this screen to turn on or off an ipv6 interface and enable stateless autoconfiguration on it click the link next to ipv6 interface setup in the ipv6 configuration screen to display the screen as shown next p.78
• The following table describes the labels in this screen p.78
• Label description p.78
• Ipv6 interface setup p.78
• Ipv6 global setup p.78
• Gs1920 series user s guide p.78
• Chapter 8 basic setting p.78
• Ipv6 interface setup p.79
• Gs1920 series user s guide p.79
• Chapter 8 basic setting p.79
• A link local address uniquely identifies a device on the local network the lan it is similar to a private ip address in ipv4 you can have the same link local address on multiple interfaces on a device a link local unicast address has a predefined prefix of fe80 10 p.79
• Use this screen to configure the interface s link local address and default gateway click the link next to ipv6 link local address setup in the ipv6 configuration screen to display the screen as shown next p.79
• The following table describes the labels in this screen p.79
• Label description p.79
• Ipv6 link local address setup p.79
• Use this screen to configure the interface s ipv6 global address click the link next to ipv6 global address setup in the ipv6 configuration screen to display the screen as shown next p.80
• The following table describes the labels in this screen p.80
• Label description p.80
• Ipv6 link local address setup continued p.80
• Ipv6 global address setup p.80
• Gs1920 series user s guide p.80
• Chapter 8 basic setting p.80
• Label description p.81
• Ipv6 neighbor discovery setup p.81
• Ipv6 global address setup continued p.81
• Gs1920 series user s guide p.81
• Chapter 8 basic setting p.81
• Use this screen to configure neighbor discovery settings for each interface click the link next to ipv6 neighbor discovery setup in the ipv6 configuration screen to display the screen as shown next p.81
• The following table describes the labels in this screen p.81
• Use this screen to create a static ipv6 neighbor entry in the switch s ipv6 neighbor table to store the neighbor information permanently click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next p.82
• The following table describes the labels in this screen p.82
• Label description p.82
• Ipv6 neighbor setup p.82
• Ipv6 neighbor discovery setup continued p.82
• Gs1920 series user s guide p.82
• Chapter 8 basic setting p.82
• Use this screen to configure the switch s dhcp settings when it is acting as a dhcpv6 client click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next p.83
• Label description p.83
• Ipv6 neighbor setup continued p.83
• Gs1920 series user s guide p.83
• Dhcpv6 client setup p.83
• Chapter 8 basic setting p.83
• Chapter 8 basic setting p.84
• The following table describes the labels in this screen p.84
• Label description p.84
• Gs1920 series user s guide p.84
• Dhcpv6 client setup p.84
• What you need to know p.85
• What you can do p.85
• Overview p.85
• Garp timers p.86
• Forwarding tagged and untagged frames p.86
• Automatic vlan registration p.86
• Port vlan trunking p.87
• Please refer to the following table for common ieee 802 q vlan terminology p.87
• Gs1920 series user s guide p.87
• Figure 65 port vlan trunking p.87
• Enable vlan trunking on a port to allow frames belonging to unknown vlan groups to pass through that port this is useful if you want to set up vlan groups on end devices without having to configure the same vlan groups on intermediary devices p.87
• Chapter 9 vlan p.87
• Vlan parameter term description p.87
• Table 28 ieee 802 q vlan terminology p.87
• Switch setup screen p.87
• Select the vlan type p.87
• Refer to the following figure suppose you want to create vlan groups 1 and 2 v1 and v2 on devices a and b without vlan trunking you must configure vlan groups 1 and 2 on all intermediary switches c d and e otherwise they will drop frames with unknown vlan group tags however with vlan trunking enabled on a port s in each intermediary switch you only need to create vlan groups in the end devices a and b c d and e automatically allow frames with vlan group tags 1 and 2 vlan groups that are unknown to those switches to pass through their vlan trunking port s p.87
• Vlan from the navigation panel to display the vlan status screen as shown next p.88
• Use a static vlan to decide whether an incoming frame on a port should be p.88
• The following table describes the labels in this screen p.88
• Static vlan p.88
• Sent to a vlan group as normal depending on its vlan tag p.88
• Sent to a group whether it has a vlan tag or not p.88
• Select vlan type p.88
• Label description p.88
• Gs1920 series user s guide p.88
• Chapter 9 vlan p.88
• Blocked from a vlan group regardless of its vlan tag p.88
• You can also tag all outgoing frames that were previously untagged from a port with the specified vid p.88
• Vlan vlan status p.88
• Vlan status p.88
• Vlan vlan status continued p.89
• Vlan details p.89
• Vlan detail s p.89
• Vlan detail p.89
• Use this screen to view detailed port settings and status of the vlan group click on an index number in the vlan status screen to display vlan details p.89
• The following table describes the labels in this screen p.89
• Label description p.89
• Gs1920 series user s guide p.89
• Chapter 9 vlan p.89
• Vlan configuration p.90
• Configure a static vlan p.90
• Gs1920 series user s guide p.91
• Chapter 9 vlan p.91
• The following table describes the related labels in this screen p.91
• Static vlan setup p.91
• Note changes in this row are copied to all the ports as soon as you make them p.91
• Label description p.91
• Vlan port setup p.92
• Vlan port set up p.92
• Use the vlan port setting screen to configure the static vlan ieee 802 q settings on a port click the vlan port setup link in the vlan status screen p.92
• The following table describes the labels in this screen p.92
• Static vlan setup continued p.92
• Label description p.92
• Gs1920 series user s guide p.92
• Configure vlan port settings p.92
• Chapter 9 vlan p.92
• Gs1920 series user s guide p.93
• For example an isp internet services provider may divide different types of services it provides to customers into different ip subnets traffic for voice services is designated for ip subnet 172 6 24 video for 192 68 24 and data for 10 24 the switch can then be configured to group incoming traffic based on the source ip subnet of incoming frames p.93
• Chapter 9 vlan p.93
• You configure a subnet based vlan with priority 6 and vid of 100 for traffic received from ip subnet 172 6 24 voice services you also have a subnet based vlan with priority 5 and vid of 200 for traffic received from ip subnet 192 68 24 video services lastly you configure vlan with priority 3 and vid of 300 for traffic received from ip subnet 10 24 data services all p.93
• Vlan port set up p.93
• Subnet based vlans allow you to group traffic into logical vlans based on the source ip subnet you specify when a frame is received on a port the switch checks if a tag is added already and the ip subnet it came from the untagged packets from the same ip subnet are then placed in the same subnet based vlan one advantage of using subnet based vlans is that priority can be assigned to traffic from the same ip subnet p.93
• Subnet based vlans p.93
• Subnet based vlan s p.93
• Note changes in this row are copied to all the ports as soon as you make them p.93
• Label description p.93
• Note subnet based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan p.94
• Internet p.94
• Configuring subnet based vlan p.94
• Protocol based vlans p.95
• Protocol based vlan s p.95
• Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan p.95
• Label description p.95
• Gs1920 series user s guide p.95
• Chapter 9 vlan p.95
• The following table describes the labels in this screen p.95
• Subnet based vlan setup p.95
• Protocol based vlans allow you to group traffic into logical vlans based on the protocol you specify when an upstream frame is received on a port configured for a protocol based vlan the switch checks if a tag is added already and its protocol the untagged packets of the same protocol are then placed in the same protocol based vlan one advantage of using protocol based vlans is that priority can be assigned to traffic of the same protocol p.95
• Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan p.96
• Configuring protocol based vlan p.96
• Note when you activate port based vlan the switch uses a default vlan id of 1 you cannot change it p.97
• The following table describes the labels in this screen p.97
• Protocol based vlan setup p.97
• Port based vlans require allowed outgoing ports to be defined for each port therefore if you wish to allow two subscriber ports to talk to each other for example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports p.97
• Port based vlans are vlans where the packet forwarding decision is based on the destination mac address and its associated port p.97
• Port based vlans are specific only to the switch on which they were created p.97
• Port based vlan setup p.97
• Note protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based vlans p.97
• Label description p.97
• Gs1920 series user s guide p.97
• Chapter 9 vlan p.97
• Note in screens such as ip setup and filtering that require a vid you must enter 1 as the vid p.98
• Configure a port based vlan p.98
• You can set priority level to the voice vlan and add mac address of ip phones from specific manufacturers by using its id from the organizationally unique identifiers oui p.100
• Voice vlan ensures that the sound quality of an ip phone is preserved from deteriorating when the data traffic on the switch ports is high it groups the voice traffic with defined priority into an assigned vlan which enables the separation of voice and data traffic coming onto the switch port p.100
• Voice vlan p.100
• The following table describes the labels in this screen p.100
• Table 36 port based vlan setup label description p.100
• Gs1920 series user s guide p.100
• Click voice vlan in the vlan configuration screen to display the configuration screen as shown p.100
• Chapter 9 vlan p.100
• Voice vlan setup p.101
• The following table describes the fields in the above screen p.101
• Label description p.101
• Gs1920 series user s guide p.101
• Chapter 9 vlan p.101
• Label description p.102
• Mac based vlan p.102
• Type the vlan id of an existing vlan in our example we already created a static vlan with an id of 5 type 5 p.103
• Type the port number you want to include in this protocol based vlan type 1 p.103
• This section provides technical background information on the topics discussed in this chapter p.103
• This example shows you how to create an ip vlan which includes ports 1 4 and 8 follow these steps p.103
• Technical reference p.103
• Select the protocol leave the default value ip p.103
• Mac based vlan setup p.103
• Leave the priority set to 0 and click add p.103
• Label description p.103
• Gs1920 series user s guide p.103
• Give this protocol based vlan a descriptive name type ip vlan p.103
• Create an ip based vlan example p.103
• Chapter 9 vlan p.103
• Activate this protocol based vlan p.103
• Configuring static mac forwarding p.105
• What you can do p.105
• Static mac forward setup p.105
• Overview p.105
• The following table describes the labels in this screen p.106
• Static mac forwarding p.106
• Note static mac addresses do not age out p.106
• Label description p.106
• Gs1920 series user s guide p.106
• Chapter 10 static mac forward setup p.106
• What you need to know p.107
• What you can do p.107
• Static multicast forward setup overview p.107
• Static multicast forward setup p.107
• Configuring static multicast forwarding p.108
• Gs1920 series user s guide p.109
• Chapter 11 static multicast forward setup p.109
• The following table describes the labels in this screen p.109
• Static multicast forwarding p.109
• Label description p.109
• What you can do p.110
• Filtering overview p.110
• Filtering p.110
• Configure a filtering rule p.110
• The following table describes the related labels in this screen p.111
• Label description p.111
• Gs1920 series user s guide p.111
• Filtering p.111
• Chapter 12 filtering p.111
• What you need to know p.112
• What you can do p.112
• Spanning tree protocol overview p.112
• Spanning tree protocol p.112
• Stp terminology p.113
• Note in this user s guide stp refers to both stp and rstp p.113
• How stp works p.113
• Stp port states p.114
• Note each port can belong to one stp tree only p.114
• Multiple stp p.114
• Multiple rstp p.114
• Spanning tree protocol status screen p.115
• Spanning tree configuration p.115
• The following table describes the labels in this screen p.116
• Spanning tree protocol screen p.116
• Label description p.116
• Gs1920 series user s guide p.116
• Configure rapid spanning tree protocol p.116
• Configuration p.116
• Chapter 13 spanning tree protocol p.116
• The following table describes the labels in this screen p.117
• Note changes in this row are copied to all the ports as soon as you make them p.117
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu p.117
• Label description p.117
• Gs1920 series user s guide p.117
• Configuration screen to enable rstp on the switch p.117
• Chapter 13 spanning tree protocol p.117
• 2 hello time 1 p.117
• Status rstp p.118
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 112 for more information on rstp p.118
• Rstp continued p.118
• Rapid spanning tree protocol status p.118
• Note this screen is only available after you activate rstp on the switch p.118
• Label description p.118
• Gs1920 series user s guide p.118
• Chapter 13 spanning tree protocol p.118
• The following table describes the labels in this screen p.118
• The following table describes the labels in this screen p.119
• Status rstp continued p.119
• Spanning tree protocol screen see section 13 on page 112 for more information on mrstp p.119
• Note the listening state does not exist in rstp p.119
• Label description p.119
• Gs1920 series user s guide p.119
• Configure multiple rapid spanning tree protocol p.119
• Chapter 13 spanning tree protocol p.119
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu p.120
• Mrstp continued p.120
• Label description p.120
• Gs1920 series user s guide p.120
• Configuration screen to enable mrstp on the switch p.120
• Chapter 13 spanning tree protocol p.120
• 2 hello time 1 p.120
• Note changes in this row are copied to all the ports as soon as you make them p.120
• The following table describes the labels in this screen p.121
• Status mrstp p.121
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 112 for more information on mrstp p.121
• Note this screen is only available after you activate mrstp on the switch p.121
• Note the listening state does not exist in rstp p.121
• Multiple rapid spanning tree protocol status p.121
• Mrstp continued p.121
• Label description p.121
• Gs1920 series user s guide p.121
• Chapter 13 spanning tree protocol p.121
• Configure multiple spanning tree protocol p.122
• Label description p.123
• Gs1920 series user s guide p.123
• Configuration screen to enable mstp on the switch p.123
• Chapter 13 spanning tree protocol p.123
• The following table describes the labels in this screen p.123
• Note changes in this row are copied to all the ports as soon as you make them p.124
• Mstp continued p.124
• Label description p.124
• Gs1920 series user s guide p.124
• Chapter 13 spanning tree protocol p.124
• 2 hello time 1 p.124
• Port in the navigation panel to display the status screen as shown next see section on page 114 for more information on mstp p.125
• Multiple spanning tree port configuration p.125
• Mstp continued p.125
• Label description p.125
• Gs1920 series user s guide p.125
• Chapter 13 spanning tree protocol p.125
• Label description p.126
• Gs1920 series user s guide p.126
• Chapter 13 spanning tree protocol p.126
• The following table describes the labels in this screen p.126
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section on page 114 for more information on mstp p.126
• Note this screen is only available after you activate mstp on the switch p.126
• Note changes in this row are copied to all the ports as soon as you make them p.126
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu p.126
• Multiple spanning tree protocol status p.126
• The following table describes the labels in this screen p.127
• Status mstp p.127
• Label description p.127
• Gs1920 series user s guide p.127
• Chapter 13 spanning tree protocol p.127
• Status mstp continued p.128
• Mstp network example p.128
• Label description p.128
• Gs1920 series user s guide p.128
• Chapter 13 spanning tree protocol p.128
• This section provides technical background information on the topics discussed in this chapter p.128
• The following figure shows a network example where two vlans are configured on the two switches if the switches are using stp or rstp the link for vlan 2 will be blocked as stp and rstp allow only one link in the network and block the redundant link p.128
• Technical reference p.128
• Vlan 1 vlan 2 p.129
• Mst region p.129
• Mst instance p.130
• Common and internal spanning tree cist p.130
• What you can do p.131
• Overview p.131
• Bandwidth control setup p.131
• Bandwidth control p.131
• Note changes in this row are copied to all the ports as soon as you make them p.132
• Label description p.132
• Gs1920 series user s guide p.132
• Chapter 14 bandwidth control p.132
• Bandwidth control p.132
• The following table describes the related labels in this screen p.132
• Note ingress rate bandwidth control applies to layer 2 traffic only p.132
• What you can do p.133
• Broadcast storm control setup p.133
• Broadcast storm control overview p.133
• Broadcast storm control p.133
• The following table describes the labels in this screen p.134
• Note changes in this row are copied to all the ports as soon as you make them p.134
• Label description p.134
• Gs1920 series user s guide p.134
• Chapter 15 broadcast storm control p.134
• Broadcast storm control p.134
• What you can do p.135
• Port mirroring setup p.135
• Mirroring overview p.135
• Mirroring p.135
• The following table describes the labels in this screen p.136
• Note changes in this row are copied to all the ports as soon as you make them p.136
• Mirroring p.136
• Label description p.136
• Gs1920 series user s guide p.136
• Chapter 16 mirroring p.136
• What you need to know p.137
• What you can do p.137
• Overview p.137
• Link aggregation p.137
• Link aggregation status p.138
• Link aggregation id p.138
• Link aggregation setting p.139
• Label description p.139
• Gs1920 series user s guide p.139
• Chapter 17 link aggregation p.139
• The following table describes the labels in this screen p.139
• Link aggregation status p.139
• Link aggregation setting to display the screen shown next see section 17 on page 137 for more information on link aggregation p.139
• The following table describes the labels in this screen p.140
• Link aggregation setting p.140
• Label description p.140
• Gs1920 series user s guide p.140
• Chapter 17 link aggregation p.140
• Link aggregation control protocol p.141
• Static trunking example p.142
• Note do not configure this screen unless you want to enable dynamic link aggregation p.142
• Note changes in this row are copied to all the ports as soon as you make them p.142
• Make your physical connections make sure that the ports that you want to belong to the trunk group are connected to the same destination the following figure shows ports 2 5 on switch a connected to switch b p.142
• Label description p.142
• Gs1920 series user s guide p.142
• Chapter 17 link aggregation p.142
• This section provides technical background information on the topics discussed in this chapter p.142
• This example shows you how to create a static port trunk group for ports 2 5 p.142
• The following table describes the labels in this screen p.142
• Technical reference p.142
• What you need to know p.144
• What you can do p.144
• Port authentication overview p.144
• Port authentication p.144
• Session granted denied p.145
• Port authentication configuration p.145
• New connection p.145
• Login info request p.145
• Login credentials p.145
• Authentication request p.145
• Authentication reply p.145
• Activate ieee 802 x security p.145
• The following table describes the labels in this screen p.146
• Note you must first enable 802 x authentication on the switch before configuring it on each port p.146
• Note changes in this row are copied to all the ports as soon as you make them p.146
• Label description p.146
• Gs1920 series user s guide p.146
• Chapter 18 port authentication p.146
• Vlan 102 p.147
• Vlan 100 p.147
• Internet p.147
• Guest vlan p.147
• The following table describes the labels in this screen p.148
• Label description p.148
• Guest vlan p.148
• Gs1920 series user s guide p.148
• Chapter 18 port authentication p.148
• Chapter 18 port authentication p.149
• Label description p.149
• Guest vlan continued p.149
• Gs1920 series user s guide p.149
• What you can do p.150
• Port security setup p.150
• Port security overview p.150
• Port security p.150
• The following table describes the labels in this screen p.151
• Port security p.151
• Note changes in this row are copied to all the ports as soon as you make them p.151
• Label description p.151
• Gs1920 series user s guide p.151
• Chapter 19 port security p.151
• Label description p.152
• Gs1920 series user s guide p.152
• Chapter 19 port security p.152
• Port security continued p.152
• What you need to know p.153
• What you can do p.153
• Overview p.153
• Configuring the classifier p.153
• Classifier p.153
• The following table describes the labels in this screen p.154
• Label description p.154
• Gs1920 series user s guide p.154
• Classifier p.154
• Chapter 20 classifier p.154
• Note when two rules conflict with each other a higher layer rule has priority over lower layer rule p.155
• Label description p.155
• Gs1920 series user s guide p.155
• Classifier continued p.155
• Chapter 20 classifier p.155
• Viewing and editing classifier configuration p.155
• To view a summary of the classifier configuration scroll down to the summary table at the bottom of the classifier screen to change the settings of a rule click a number in the index field p.155
• Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers p.155
• The following table shows some other common ethernet types and the corresponding protocol number p.156
• The following table describes the labels in this screen p.156
• Table 66 common ip protocol types and protocol numbers p.156
• Table 65 common ethernet types and protocol numbers p.156
• Table 64 classifier summary table p.156
• Protocol type protocol number p.156
• Label description p.156
• In the internet protocol there is a field called protocol to identify the next level protocol the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list p.156
• Gs1920 series user s guide p.156
• Ethernet type protocol number p.156
• Classifier summary table p.156
• Chapter 20 classifier p.156
• Classifier example p.157
• What you can do p.158
• Policy rules overview p.158
• Policy rule p.158
• Configuring policy rules p.158
• The following table describes the labels in this screen p.159
• Policy rule p.159
• Label description p.159
• Gs1920 series user s guide p.159
• Chapter 21 policy rule p.159
• Policy rule continued p.160
• Note you can specify only one action pair in a policy rule to have the switch take multiple actions on the same traffic flow you need to define multiple classifiers with the same criteria and apply different policy rules p.160
• Label description p.160
• Gs1920 series user s guide p.160
• Chapter 21 policy rule p.160
• Viewing and editing policy configuration p.161
• Policy example p.161
• What you need to know p.162
• What you can do p.162
• Queuing method overview p.162
• Queuing method p.162
• Configuring queuing p.163
• The following table describes the labels in this screen p.164
• Queuing method p.164
• Note changes in this row are copied to all the ports as soon as you make them p.164
• Label description p.164
• Gs1920 series user s guide p.164
• Chapter 22 queuing method p.164
• What you need to know p.165
• What you can do p.165
• Multicast overview p.165
• Multicast p.165
• Igmp snooping and vlans p.166
• Mld snooping proxy p.166
• Report p.167
• Mvr overview p.167
• Mld messages p.167
• Vlan 3 p.168
• Vlan 2 p.168
• Types of mvr ports p.168
• Mvr modes p.168
• Multicast vlan vlan 1 p.168
• How mvr works p.168
• Multicast vlan vlan 1 p.169
• Multicast setup p.169
• Ipv4 multicast status p.169
• Igmp snooping p.170
• Gs1920 series user s guide p.170
• Chapter 23 multicast p.170
• The following table describes the labels in this screen p.170
• Label description p.170
• Ipv4 multicast screen to display the screen as shown see section 23 on page 165 for more information on multicasting p.170
• Ipv4 multicast p.170
• Label description p.171
• Igmp snooping continued p.171
• Gs1920 series user s guide p.171
• Chapter 23 multicast p.171
• Label description p.172
• Ipv4 multicast in the navigation panel click the igmp snooping link and then the igmp snooping vlan link to display the screen as shown see section on page 166 for more information on igmp snooping vlan p.172
• Igmp snooping vlan p.172
• Igmp snooping continued p.172
• Gs1920 series user s guide p.172
• Chapter 23 multicast p.172
• Gs1920 series user s guide p.173
• Chapter 23 multicast p.173
• The following table describes the labels in this screen p.173
• Label description p.173
• Igmp snooping vlan p.173
• Igmp filtering profile p.174
• The following table describes the fields in the above screen p.175
• Label description p.175
• Ipv6 multicast to display the screen as shown this screen shows the ipv6 multicast group information see section 23 on page 165 for more information on multicasting p.175
• Ipv6 multicast status p.175
• Ipv6 multicast p.175
• Igmp filtering profile continued p.175
• Gs1920 series user s guide p.175
• Chapter 23 multicast p.175
• Mld snooping proxy vlan p.176
• Mld snooping proxy p.176
• Label description p.176
• Chapter 23 multicast p.177
• The following table describes the fields in the above screen p.177
• Label description p.177
• Gs1920 series user s guide p.177
• Vlan screen to display the screen as shown p.178
• Mld snooping proxy vlan port role setting p.178
• Label description p.178
• Gs1920 series user s guide p.178
• Chapter 23 multicast p.178
• The following table describes the fields in the above screen p.179
• Port role setting p.179
• Port role p.179
• Mld snooping proxy vlan id p.179
• Label description p.179
• Gs1920 series user s guide p.179
• Chapter 23 multicast p.179
• Cancel p.180
• Port role setting p.180
• Mld snooping proxy vlan filtering p.180
• Mld snooping proxy screen to display the screen as shown p.180
• Leave timeout p.180
• Leave mode p.180
• Label description p.180
• Gs1920 series user s guide p.180
• Fast leave timeout p.180
• Chapter 23 multicast p.180
• Gs1920 series user s guide p.181
• Group limit p.181
• Filtering profile p.181
• Filtering p.181
• Chapter 23 multicast p.181
• Cancel p.181
• Active p.181
• The following table describes the fields in the above screen p.181
• Max group num p.181
• Label description p.181
• The following table describes the fields in the above screen p.182
• Start address p.182
• Profile name p.182
• Mld snooping proxy vlan filtering profile p.182
• Label description p.182
• Gs1920 series user s guide p.182
• Filtering screen to display the screen as shown p.182
• Filtering profile p.182
• End address p.182
• Chapter 23 multicast p.182
• Note you can create up to five multicast vlans and up to 256 multicast rules on the switch p.183
• Label description p.183
• General mvr configuration p.183
• Note your switch automatically creates a static vlan with the same vid when you create a multicast vlan in this screen p.183
• The following table describes the related labels in this screen p.184
• Label description p.184
• Gs1920 series user s guide p.184
• Chapter 23 multicast p.184
• Use this screen to configure mvr ip multicast group address es click the group configuration link in the mvr screen p.185
• Note a port can belong to more than one multicast vlan however ip multicast group addresses in different multicast vlans cannot overlap p.185
• Mvr group configuration p.185
• Mvr continued p.185
• Label description p.185
• Gs1920 series user s guide p.185
• Chapter 23 multicast p.185
• All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group p.185
• Gs1920 series user s guide p.186
• Group configuration p.186
• Chapter 23 multicast p.186
• The following table describes the labels in this screen p.186
• Label description p.186
• Mvr configuration example p.187
• Multicast vid 200 vlan 1 p.187
• Example p.187
• Example p.188
• What you need to know p.189
• What you can do p.189
• Aaa overview p.189
• Radius server setup p.190
• Radius and tacacs p.190
• Local user accounts p.190
• Aaa screens p.190
• Label description p.191
• Gs1920 series user s guide p.191
• Chapter 24 aaa p.191
• The following table describes the labels in this screen p.191
• Radius server setup p.191
• Chapter 24 aaa p.192
• Use this screen to configure your tacacs server settings see section on page 190 for more information on tacacs servers click on the tacacs server setup link in the aaa screen to view the screen as shown p.192
• Tacacs server setup p.192
• Radius server setup continued p.192
• Label description p.192
• Gs1920 series user s guide p.192
• The following table describes the labels in this screen p.193
• Tacacs server setup p.193
• Label description p.193
• Gs1920 series user s guide p.193
• Chapter 24 aaa p.193
• Gs1920 series user s guide p.194
• Chapter 24 aaa p.194
• Aaa setup p.194
• Use this screen to configure authentication and authorization settings on the switch click on the aaa setup link in the aaa screen to view the screen as shown p.194
• Tacacs server setup continued p.194
• Label description p.194
• The following table describes the labels in this screen p.195
• Label description p.195
• Gs1920 series user s guide p.195
• Chapter 24 aaa p.195
• Aaa setup p.195
• This section provides technical background information on the topics discussed in this chapter p.196
• The switch supports vsas that allow you to perform the following actions based on user authentication p.196
• Technical reference p.196
• Rfc 2865 standard specifies a method for sending vendor specific information between a radius server and a network access device for example the switch a company can create vendor specific attributes vsas to expand the functionality of a radius server p.196
• Label description p.196
• Gs1920 series user s guide p.196
• Chapter 24 aaa p.196
• Aaa setup continued p.196
• Vendor specific attribute p.196
• Tunnel protocol attribute p.197
• Note refer to the documentation that comes with your radius server on how to configure vsas for users authenticating via the radius server p.197
• Supported radius attributes p.198
• Attributes used to login users p.198
• Attributes used for authentication p.198
• Attributes used for authenticating privilege access p.198
• Attributes used by the ieee 802 x authentication p.198
• What you can do p.200
• Overview p.200
• Ip source guard p.200
• What you need to know p.201
• Ip source guard p.201
• Ip source guard static binding p.202
• Chapter 25 ip source guard p.203
• Arp learning screen before you use the arp freeze feature p.203
• The following table describes the labels in this screen p.203
• Static binding p.203
• Label description p.203
• Gs1920 series user s guide p.203
• Dhcp snooping p.203
• The following table describes the labels in this screen p.204
• Label description p.204
• Gs1920 series user s guide p.204
• Dhcp snooping p.204
• Chapter 25 ip source guard p.204
• Label description p.205
• Gs1920 series user s guide p.205
• Dhcp snooping continued p.205
• Chapter 25 ip source guard p.205
• Configure p.206
• Chapter 25 ip source guard p.206
• Label description p.206
• Gs1920 series user s guide p.206
• Dhcp snooping continued p.206
• Dhcp snooping configure p.206
• The following table describes the labels in this screen p.207
• Note you have to enable dhcp snooping on the dhcp vlan too p.207
• Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed p.207
• Label description p.207
• Gs1920 series user s guide p.207
• Configure p.207
• Chapter 25 ip source guard p.207
• Label description p.208
• Gs1920 series user s guide p.208
• Dhcp snooping port configure p.208
• Configure continued p.208
• Chapter 25 ip source guard p.208
• Use this screen to specify whether ports are trusted or untrusted ports for dhcp snooping p.208
• Note if dhcp snooping is enabled but there are no trusted ports dhcp requests cannot reach the dhcp server p.208
• The following table describes the labels in this screen p.209
• Label description p.209
• Gs1920 series user s guide p.209
• Dhcp snooping vlan configure p.209
• Chapter 25 ip source guard p.209
• The following table describes the labels in this screen p.210
• Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed p.210
• Label description p.210
• Gs1920 series user s guide p.210
• Dhcp snooping vlan port configure p.210
• Chapter 25 ip source guard p.210
• Chapter 25 ip source guard p.211
• Arp inspection status p.211
• Arp inspection p.211
• The following table describes the labels in this screen p.211
• Label description p.211
• Gs1920 series user s guide p.211
• Vlan status p.212
• The following table describes the labels in this screen p.212
• Label description p.212
• Gs1920 series user s guide p.212
• Chapter 25 ip source guard p.212
• Arp inspection vlan status p.212
• Arp inspection p.212
• The following table describes the labels in this screen p.213
• Log status p.213
• Label description p.213
• Gs1920 series user s guide p.213
• Chapter 25 ip source guard p.213
• Arp inspection log status p.213
• Vlan status p.213
• The following table describes the labels in this screen p.214
• Log status p.214
• Label description p.214
• Gs1920 series user s guide p.214
• Chapter 25 ip source guard p.214
• The following table describes the labels in this screen p.215
• Label description p.215
• Gs1920 series user s guide p.215
• Configure p.215
• Chapter 25 ip source guard p.215
• Arp inspection configure p.215
• Gs1920 series user s guide p.216
• Configure continued p.216
• Chapter 25 ip source guard p.216
• Arp inspection port configure p.216
• Label description p.216
• The following table describes the labels in this screen p.217
• Label description p.217
• Gs1920 series user s guide p.217
• Chapter 25 ip source guard p.217
• The following table describes the labels in this screen p.218
• Label description p.218
• Gs1920 series user s guide p.218
• Chapter 25 ip source guard p.218
• Arp inspection vlan configure p.218
• Trusted vs untrusted ports p.219
• Technical reference p.219
• Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed p.219
• Dhcp snooping overview p.219
• Dhcp relay option 82 information p.220
• Configuring dhcp snooping p.220
• Dhcp snooping database p.220
• Arp inspection overview p.221
• Arp inspection and mac address filters p.221
• Trusted vs untrusted ports p.222
• Syslog p.222
• Note it is recommended you enable dhcp snooping at least one day before you enable arp inspection so that the switch has enough time to build the binding table p.222
• Configuring arp inspection p.222
• What you need to know p.223
• What you can do p.223
• Loop guard overview p.223
• Loop guard p.223
• Note the loop guard feature can not be enabled on the ports that have spanning tree protocol rstp mrstp or mstp enabled p.225
• Note after resolving the loop problem on your network you can re activate the disabled port via the web configurator see section 8 on page 67 p.225
• Loop guard setup p.225
• Gs1920 series user s guide p.226
• Chapter 26 loop guard p.226
• The following table describes the labels in this screen p.226
• Note changes in this row are copied to all the ports as soon as you make them p.226
• Loop guard p.226
• Label description p.226
• What you need to know p.227
• What you can do p.227
• Layer 2 protocol tunneling overview p.227
• Layer 2 protocol tunneling p.227
• Service provider s network c p.228
• Layer 2 protocol tunneling mode p.228
• Configuring layer 2 protocol tunneling p.228
• Note all the edge switches in the service provider s network should be set to use the same mac address for encapsulation p.229
• Layer 2 protocol tunneling p.229
• Label description p.229
• Gs1920 series user s guide p.229
• Chapter 27 layer 2 protocol tunneling p.229
• The following table describes the labels in this screen p.229
• Note the mac address can be either a unicast mac address or multicast mac address if you use a unicast mac address make sure the mac address does not exist in the address table of a switch on the service provider s network p.229
• Note changes in this row are copied to all the ports as soon as you make them p.229
• Note you can enable l2pt services for stp lacp vtp cdp udld and pagp on the access port s only p.230
• Layer 2 protocol tunneling continued p.230
• Label description p.230
• Gs1920 series user s guide p.230
• Chapter 27 layer 2 protocol tunneling p.230
• What you need to know p.231
• What you can do p.231
• Pppoe intermediate agent overview p.231
• Sub option format p.232
• Pppoe intermediate agent tag format p.232
• Flexible circuit id syntax with identifier string and variables p.232
• Every port is either a trusted port or an untrusted port for the pppoe intermediate agent this setting is independent of the trusted untrusted setting for dhcp snooping or arp inspection you can also specify the agent sub options circuit id and remote id that the switch adds to padi and padr packets from pppoe clients p.233
• Chapter 28 pppoe p.233
• Wt 101 default circuit id syntax p.233
• Untrusted ports are connected to subscribers p.233
• Trusted ports are connected to pppoe servers p.233
• The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port p.233
• Table 108 pppoe ia circuit id sub option format defined in wt 101 p.233
• Table 107 pppoe ia circuit id sub option format using identifier string and variables p.233
• Port state p.233
• Option example is switch 07 0123 and indicates the pppoe packets come from a pppoe client which is connected to the switch s port 7 and belong to vlan 123 p.233
• Note the switch will drop all pppoe discovery packets if you enable the pppoe intermediate agent and there are no trusted ports p.233
• Intermediate agent screen the switch automatically generates a circuit id string according to the default circuit id syntax which is defined in the dsl forum working text wt 101 the default access node identifier is the host name of the pppoe intermediate agent and the eth indicates ethernet p.233
• If a pado pppoe active discovery offer pads pppoe active discovery session confirmation or padt pppoe active discovery terminate packet is sent from a pppoe server and received on a trusted port the switch forwards it to all other ports p.233
• If a padi padr or padt packet is sent from a pppoe client and received on an untrusted port the switch adds a vendor specific tag to the packet and then forwards it to the trusted port s p.233
• If a padi or padr packet is sent from a pppoe client but received on a trusted port the switch forwards it to other trusted port s p.233
• Gs1920 series user s guide p.233
• The pppoe screen p.234
• Pppoe intermediate agent p.234
• Use this screen to specify whether individual ports are trusted or untrusted ports and have the switch add extra information to pppoe discovery packets from pppoe clients on a per port basis p.235
• Pppoe ia per port p.235
• Note the switch will drop all pppoe packets if you enable the pppoe intermediate agent on the switch and there are no trusted ports p.235
• Label description p.235
• Intermediate agent continued p.235
• Gs1920 series user s guide p.235
• Click the port link in the intermediate agent screen to display the screen as shown p.235
• Chapter 28 pppoe p.235
• The following table describes the labels in this screen p.236
• Label description p.236
• Gs1920 series user s guide p.236
• Chapter 28 pppoe p.236
• Port continued p.237
• Label description p.237
• Gs1920 series user s guide p.237
• Chapter 28 pppoe p.237
• Use this screen to configure pppoe ia settings that apply to a specific vlan on a port p.237
• The following table describes the labels in this screen p.237
• Pppoe ia per port per vlan p.237
• Port screen to display the screen as shown p.237
• Vlan continued p.238
• Use this screen to set whether the pppoe intermediate agent is enabled on a vlan and whether the switch appends the circuit id and or remote id to pppoe discovery packets from a specific vlan p.238
• The following table describes the labels in this screen p.238
• Pppoe ia for vlan p.238
• Label description p.238
• Gs1920 series user s guide p.238
• Click the vlan link in the intermediate agent screen to display the screen as shown p.238
• Chapter 28 pppoe p.238
• Vlan continued p.239
• Label description p.239
• Gs1920 series user s guide p.239
• Chapter 28 pppoe p.239
• The error disable screens overview p.240
• Error disable status p.240
• Error disable overview p.240
• Error disable p.240
• The following table describes the labels in this screen p.241
• Label description p.241
• Gs1920 series user s guide p.241
• Errdisable status p.241
• Chapter 29 error disable p.241
• Errdisable detect screen p.242
• Cpu protection configuration p.242
• Error disable detect configuration p.243
• Errdisable screen to display the screen as shown p.243
• Errdisable detect p.243
• Cpu protection p.243
• Chapter 29 error disable p.243
• The following table describes the labels in this screen p.243
• Label description p.243
• Gs1920 series user s guide p.243
• Error disable recovery configuration p.244
• The following table describes the labels in this screen p.245
• Label description p.245
• Gs1920 series user s guide p.245
• Errdisable recovery p.245
• Chapter 29 error disable p.245
• Private vlan overview p.246
• Private vlan p.246
• Configuring private vlan p.246
• Private vlan p.247
• Label description p.247
• Gs1920 series user s guide p.247
• Chapter 30 private vlan p.247
• The following table describes the labels in this screen p.247
• Green ethernet overview p.248
• Green ethernet p.248
• Configuring green ethernet p.248
• The following table describes the labels in this screen p.249
• Label description p.249
• Gs1920 series user s guide p.249
• Green ethernet p.249
• Chapter 31 green ethernet p.249
• Lldp overview p.250
• Link layer discovery protocol lldp p.250
• Lldp med overview p.251
• Lldp screens p.252
• Lldp local status p.253
• Gs1920 series user s guide p.254
• Chapter 32 link layer discovery protocol lldp p.254
• The following table describes the labels in this screen p.254
• Lldp local status and then click a port number for example 1 port in the local port column to display the screen as shown next p.254
• Lldp local status p.254
• Lldp local port status detail p.254
• Label description p.254
• The following table describes the labels in this screen p.257
• Lldp local port status detail p.257
• Label description p.257
• Gs1920 series user s guide p.257
• Chapter 32 link layer discovery protocol lldp p.257
• Lldp remote status click here to display the screen as shown next p.258
• Lldp remote status p.258
• Lldp local port status detail p.258
• Label description p.258
• Gs1920 series user s guide p.258
• Chapter 32 link layer discovery protocol lldp p.258
• The following table describes the labels in this screen p.258
• Lldp remote port status detail p.259
• The following table describes the labels in basic tlv part of the screen p.260
• Lldp remote port status detail basic tlv p.260
• Label description p.260
• Gs1920 series user s guide p.260
• Chapter 32 link layer discovery protocol lldp p.260
• The following table describes the labels in the dot1 and dot3 parts of the screen p.261
• Lldp remote port status detail dot1 and dot3 tlv p.261
• Label description p.261
• Gs1920 series user s guide p.261
• Dot 1 and dot3 tlv p.261
• Chapter 32 link layer discovery protocol lldp p.261
• Label description p.262
• Gs1920 series user s guide p.262
• Chapter 32 link layer discovery protocol lldp p.262
• Lldp remote port status detail dot1 and dot3 tlv p.262
• The following table describes the labels in the med tlv part of the screen p.264
• Lldp remote port status detail med tlv p.264
• Label description p.264
• Gs1920 series user s guide p.264
• Chapter 32 link layer discovery protocol lldp p.264
• Lldp remote port status detail med tlv p.265
• Lldp configuration click here to display the screen as shown next p.265
• Lldp configuration p.265
• Label description p.265
• Gs1920 series user s guide p.265
• Chapter 32 link layer discovery protocol lldp p.265
• Lldp configuration p.266
• Label description p.266
• Gs1920 series user s guide p.266
• Chapter 32 link layer discovery protocol lldp p.266
• The following table describes the labels in this screen p.266
• The following table describes the labels in this screen p.267
• Lldp configuration basic tlv setting p.267
• Lldp configuration p.267
• Label description p.267
• Gs1920 series user s guide p.267
• Chapter 32 link layer discovery protocol lldp p.267
• Basic tlv setting to display the screen as shown next p.267
• Basic tlv setting p.267
• The following table describes the labels in this screen p.268
• Org specific tlv setting to display the screen as shown next p.268
• Org specific tlv setting p.268
• Lldp configuraion basic org specific tlv setting p.268
• Label description p.268
• Gs1920 series user s guide p.268
• Chapter 32 link layer discovery protocol lldp p.268
• The following table describes the labels in this screen p.269
• Org specific tlv setting p.269
• Lldp med configuration click here to display the screen as shown next p.269
• Lldp med configuration p.269
• Label description p.269
• Gs1920 series user s guide p.269
• Chapter 32 link layer discovery protocol lldp p.269
• The following table describes the labels in this screen p.270
• Lldp med network policy click here to display the screen as shown next p.270
• Lldp med network policy p.270
• Label description p.270
• Gs1920 series user s guide p.270
• Chapter 32 link layer discovery protocol lldp p.270
• Lldp med location p.271
• Gs1920 series user s guide p.272
• Chapter 32 link layer discovery protocol lldp p.272
• The following table describes the labels in this screen p.272
• Lldp med location p.272
• Label description p.272
• Lldp med location p.273
• Label description p.273
• Gs1920 series user s guide p.273
• Chapter 32 link layer discovery protocol lldp p.273
• What you can do p.274
• Static routing p.274
• Static route overview p.274
• Static route p.274
• Configuring static routing p.274
• Label description p.275
• Ipv4 static route p.275
• Gs1920 series user s guide p.275
• Chapter 33 static route p.275
• The following table describes the related labels you use to create a static route p.275
• Label description p.276
• Ipv4 static route continued p.276
• Gs1920 series user s guide p.276
• Chapter 33 static route p.276
• What you need to know p.277
• What you can do p.277
• Differentiated services overview p.277
• Differentiated services p.277
• Activating diffserv p.278
• P platinum g gold s silver b bronze p.278
• Diffserv network example p.278
• Gs1920 series user s guide p.279
• Dscp to ieee 802 p priority settings p.279
• Diffserv p.279
• Chapter 34 differentiated services p.279
• You can configure the dscp to ieee 802 p mapping to allow the switch to prioritize all traffic based on the incoming dscp value according to the diffserv to ieee 802 p mapping table p.279
• The following table shows the default dscp to ieee802 p mapping p.279
• The following table describes the labels in this screen p.279
• Table 134 default dscp ieee 802 p mapping p.279
• Label description p.279
• Configuring dscp settings p.280
• What you need to know p.281
• What you can do p.281
• Dhcp overview p.281
• Dhcp relay agent information p.282
• Dhcp relay p.282
• Dhcp configuration p.282
• Dhcpv4 status p.283
• Dhcpv4 relay agent information p.283
• Dhcpv4 relay p.283
• A dhcp relay agent information option has the following format p.284
• There are two types of sub option agent circuit id sub option and agent remote id sub option they have the following formats p.284
• The 1 in the first field identifies this as an agent circuit id sub option and 2 identifies this as an agent remote id sub option the next field specifies the length of the field p.284
• Table 140 dhcp relay agent remote id sub option format p.284
• Table 139 dhcp relay agent circuit id sub option format p.284
• Table 138 dhcp relay agent information option format p.284
• Sub option format p.284
• I1 i2 and in are dhcp relay agent sub options which contain additional information about the dhcp client you need to define at least one sub option p.284
• Gs1920 series user s guide p.284
• Dhcpv4 relay agent information format p.284
• Dhcpv4 option 82 profile p.284
• Dhcpv4 in the navigation panel and click the option 82 profile link to display the screen as shown p.284
• Chapter 35 dhcp p.284
• Option 82 profile p.285
• Label description p.285
• Gs1920 series user s guide p.285
• Chapter 35 dhcp p.285
• The following table describes the labels in this screen p.285
• Option 82 profile continued p.286
• Label description p.286
• Gs1920 series user s guide p.286
• Global p.286
• Dhcpv4 in the navigation panel and click the global link to display the screen as shown p.286
• Configuring dhcpv4 global relay p.286
• Chapter 35 dhcp p.286
• The following table describes the labels in this screen p.287
• Label description p.287
• Gs1920 series user s guide p.287
• Global p.287
• Dhcpv4 global relay port configure p.287
• Chapter 35 dhcp p.287
• Chapter 35 dhcp p.288
• 68 00 dhcp server p.288
• Vlan1 vlan2 p.288
• The follow figure shows a network example where the switch is used to relay dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server that services the dhcp clients in both domains p.288
• Port continued p.288
• Label description p.288
• Gs1920 series user s guide p.288
• Global dhcp relay configuration example p.288
• Figure 210 global dhcp relay network example p.288
• Configure the dhcp relay screen as shown make sure you select a dhcp option 82 profile default1 in this example to set the switch to send additional information such as the vlan id together with the dhcp requests to the dhcp server this allows the dhcp server to assign the appropriate ip address according to the vlan id p.288
• Note you must set up a management ip address for each vlan that you want to configure dhcp settings for on the switch p.289
• Example p.289
• Configuring dhcpv4 vlan settings p.289
• The following table describes the labels in this screen p.290
• Label description p.290
• Gs1920 series user s guide p.290
• Chapter 35 dhcp p.290
• Chapter 35 dhcp p.291
• Vlan continued p.291
• The following table describes the labels in this screen p.291
• Label description p.291
• Gs1920 series user s guide p.291
• Dhcpv4 vlan port configure p.291
• The following example displays two vlans vids 1 and 2 for a campus network two dhcp servers are installed to serve each vlan the system is set up to forward dhcp requests from the dormitory rooms vlan 1 to the dhcp server with an ip address of 192 68 00 requests from the academic buildings vlan 2 are sent to the other dhcp server with an ip address of 172 6 0 00 p.292
• Port continued p.292
• Label description p.292
• Gs1920 series user s guide p.292
• For the example network configure the vlan setting screen as shown p.292
• Figure 214 dhcp relay for two vlans p.292
• Example dhcp relay for two vlans p.292
• Chapter 35 dhcp p.292
• 6 0 00 p.292
• Example p.293
• Dhcpv6 relay p.293
• The following table describes the labels in this screen p.294
• Label description p.294
• Gs1920 series user s guide p.294
• Dhcpv6 p.294
• Chapter 35 dhcp p.294
• What you need to know p.295
• What you can do p.295
• Arp setup p.295
• Arp overview p.295
• Gratuitous arp p.296
• Arp request p.296
• Arp setup p.297
• Arp learning p.297
• Gs1920 series user s guide p.298
• Chapter 36 arp setup p.298
• Arp learning p.298
• The following table describes the labels in this screen p.298
• Label description p.298
• What you can do p.299
• The maintenance screen p.299
• Overview p.299
• Maintenance p.299
• Load factory default p.300
• Label description p.300
• In the web configurator click the save button in the top of the screen to make the changes take effect if you want to access the switch web configurator again you may need to change the ip address of your computer to be in the same subnet as that of the default switch ip address 192 68 p.300
• In the maintenance screen click the click here button next to load factory default to clear all switch configuration information you configured and return to the factory defaults p.300
• Gs1920 series user s guide p.300
• Follow the steps below to reset the switch back to the factory defaults p.300
• Figure 220 load factory default start p.300
• Click ok to reset all switch configurations to the factory defaults p.300
• Click config 1 to save the current configuration settings permanently to configuration 1 on the switch p.300
• Chapter 37 maintenance p.300
• Save configuration p.300
• Note make sure to click the save button in any screen to save your settings to the current configuration on the switch p.300
• Maintenance continued p.300
• Reboot system p.301
• Note clicking the apply or add button does not save the changes permanently all unsaved changes are erased after you reboot the switch p.301
• Firmware upgrade p.301
• Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device p.301
• Use this screen to restore a previously saved configuration from your computer to the switch using the restore configuration screen p.302
• The following table describes the labels in this screen p.302
• Restore a configuration file p.302
• Maintenance p.302
• Label description p.302
• Gs1920 series user s guide p.302
• Firmware upgrade p.302
• Chapter 37 maintenance p.302
• Backup a configuration file p.303
• Tech support p.303
• You may need wordpad or similar software to see the log report correctly the table below describes the fields in the above screen p.304
• Tech support p.304
• Gs1920 series user s guide p.304
• Chapter 37 maintenance p.304
• Technical reference p.305
• Tech support p.305
• Table 151 filename conventions p.305
• Put firmware bin ras 0 p.305
• Gs1920 series user s guide p.305
• Get config config cfg p.305
• Ftp command line p.305
• Filename conventions p.305
• File type internal name external name description p.305
• Example ftp commands p.305
• Zynos zyxel network operating system sometimes referred to as the ras file is the system firmware and has a bin filename extension p.305
• Chapter 37 maintenance p.305
• This section shows some examples of uploading to or downloading files from the switch using ftp commands first understand the filename conventions p.305
• This section provides technical background information on the topics discussed in this chapter p.305
• This is a sample ftp session showing the transfer of the computer file firmware bin to the switch p.305
• This is a sample ftp session saving the current configuration to a file called config cfg on your computer p.305
• The configuration file also known as the romfile or rom contains the factory default settings in the screens such as password switch setup ip setup and so on once you have customized the switch s settings they can be saved back to your computer under a filename of your choosing p.305
• Gui based ftp clients p.306
• Ftp command line procedure p.306
• Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device p.306
• Ftp restrictions p.307
• What you can do p.308
• The access control main screen p.308
• Access control overview p.308
• Access control p.308
• Chapter 38 access control p.309
• Access control p.309
• Use this screen to configure your snmp settings p.309
• The following table describes the labels in this screen p.309
• Snmp to view the screen as shown p.309
• Label description p.309
• Gs1920 series user s guide p.309
• Configuring snmp p.309
• Trap group p.310
• Snmp continued p.310
• Label description p.310
• Gs1920 series user s guide p.310
• From the snmp screen click trap group to view the screen as shown use the trap group screen to specify the types of snmp traps that should be sent to each snmp manager p.310
• Configuring snmp trap group p.310
• Chapter 38 access control p.310
• Gs1920 series user s guide p.311
• Enabling disabling sending of snmp traps on a port p.311
• Chapter 38 access control p.311
• Trap group screen click port to view the screen as shown use this screen to set whether a trap received on the port s would be sent to the snmp manager p.311
• Trap group p.311
• The following table describes the labels in this screen p.311
• Label description p.311
• Configuring snmp user p.312
• User continued p.313
• Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch p.313
• Label description p.313
• Gs1920 series user s guide p.313
• Chapter 38 access control p.313
• Setting up login accounts p.314
• Setting up login account s p.314
• Note it is highly recommended that you change the default administrator password 1234 p.314
• Label description p.315
• Gs1920 series user s guide p.315
• Chapter 38 access control p.315
• Service port access control p.315
• Service access control allows you to decide what services you may use to access the switch you may also change the default service port and configure trusted computer s for each service in the remote management screen discussed later click access control to go back to the main access control screen p.315
• Service access control p.315
• Logins continued p.315
• You can specify a group of one or more trusted computers from which an administrator may use a service to manage the switch click access control to return to the access control screen p.316
• Use this screen to specify a group of one or more trusted computers from which an administrator may use a service to manage the switch p.316
• The following table describes the fields in this screen p.316
• Service access control p.316
• Remote management to view the screen as shown next p.316
• Remote management p.316
• Label description p.316
• Gs1920 series user s guide p.316
• Chapter 38 access control p.316
• Label description p.317
• Gs1920 series user s guide p.317
• Chapter 38 access control p.317
• The following table describes the labels in this screen p.317
• Remote management p.317
• Technical reference p.318
• About snmp p.318
• Supported mibs p.319
• Snmp v3 and security p.319
• Snmp traps p.319
• Table 161 snmp system traps continued p.320
• Option object label object id description p.320
• Introduction to https p.320
• Https hypertext transfer protocol over secure socket layer or http over ssl is a web protocol that encrypts and decrypts web pages secure socket layer ssl is an application level protocol that enables secure transactions of data by ensuring confidentiality an unauthorized party cannot read the transferred data authentication one party can identify the other party and data integrity you know if data has been changed p.320
• Gs1920 series user s guide p.320
• Chapter 38 access control p.320
• Note if you disable http in the service access control screen then the switch blocks all http connection attempts p.321
• Internet explorer warning messages p.321
• Https example p.321
• Example p.322
• Mozilla firefox warning messages p.323
• The main screen p.324
• Internet explore p.324
• Example p.324
• Internet explore p.325
• Example p.325
• Overview p.326
• Diagnostic p.326
• The following table describes the labels in this screen p.327
• Label description p.327
• Gs1920 series user s guide p.327
• Diagnostic p.327
• Chapter 39 diagnostic p.327
• Syslog overview p.328
• Syslog p.328
• What you can do p.328
• Syslog setup p.328
• The following table describes the labels in this screen p.329
• Syslog server setup to view the screen as shown next use this screen to configure a list of external syslog servers p.329
• Syslog server setup p.329
• Syslog p.329
• Label description p.329
• Gs1920 series user s guide p.329
• Chapter 40 syslog p.329
• The following table describes the labels in this screen p.330
• Syslog server setup p.330
• Label description p.330
• Gs1920 series user s guide p.330
• Chapter 40 syslog p.330
• Cluster management overview p.331
• Cluster management p.331
• What you can do p.332
• Note a cluster can only have one manager p.332
• Cluster management status p.332
• Example p.333
• Clustering management configuration p.333
• The following table describes the labels in this screen p.334
• Label description p.334
• Gs1920 series user s guide p.334
• Configuration p.334
• Chapter 41 cluster management p.334
• Uploading firmware to a cluster member switch p.335
• Technical reference p.335
• Example p.335
• Cluster member switch management p.335
• Mac table overview p.337
• Mac table p.337
• What you need to know p.337
• What you can do p.337
• Viewing the mac table p.338
• The following table describes the labels in this screen p.339
• Mac table p.339
• Label description p.339
• Gs1920 series user s guide p.339
• Chapter 42 mac table p.339
• What you need to know p.340
• What you can do p.340
• Viewing the arp table p.340
• Overview p.340
• Arp table p.340
• Gs1920 series user s guide p.341
• Chapter 43 arp table p.341
• Arp table p.341
• The following table describes the labels in this screen p.341
• Label description p.341
• Viewing the path mtu table p.342
• Path mtu table p.342
• Path mtu overview p.342
• Overview p.343
• Configure clone p.343
• The following table describes the labels in this screen p.344
• Label description p.344
• Gs1920 series user s guide p.344
• Configure clone p.344
• Chapter 45 configure clone p.344
• Label description p.345
• Gs1920 series user s guide p.345
• Configure clone continued p.345
• Chapter 45 configure clone p.345
• Viewing the ipv6 neighbor table p.346
• Neighbor table p.346
• Ipv6 neighbor table overview p.346
• Neighbor table continued p.347
• Label description p.347
• Gs1920 series user s guide p.347
• Chapter 46 neighbor table p.347
• Power hardware connections and leds p.348
• Troubleshooting p.348
• Switch access and login p.349
• I forgot the username and or password p.349
• I forgot the ip address for the switch p.349
• I cannot see or access the login screen in the web configurator p.349
• Pop up windows javascripts and java permissions p.350
• I cannot see some of advanced application submenus at the bottom of the navigation panel p.350
• I can see the login screen but i cannot log in to the switch p.350
• There is unauthorized access to my switch p.350
• Switch configuration p.351
• I lost my configuration settings after i restart the switch p.351
• Ppendi p.353
• Customer support p.353
• Vietnam p.354
• Thailand p.354
• Taiwan p.354
• Singapore p.354
• Philipines p.354
• Pakistan p.354
• Malaysia p.354
• Europe p.354
• Belarus p.354
• Austria p.354
• Belgium p.355
• Latvia p.355
• Hungary p.355
• Germany p.355
• France p.355
• Finland p.355
• Estonia p.355
• Denmark p.355
• Bulgaria p.355
• Sweden p.356
• Slovakia p.356
• Russia p.356
• Romania p.356
• Poland p.356
• Norway p.356
• Netherlands p.356
• Lithuania p.356
• Switzerland p.356
• Ukraine p.357
• Turkey p.357
• North america p.357
• Middle east p.357
• Latin america p.357
• Ecuador p.357
• Argentina p.357
• South africa p.358
• Oceania p.358
• Australia p.358
• Africa p.358
• Ppendi p.359
• Common services p.359
• Gs1920 series user s guide p.360
• Appendix b common services p.360
• Table 175 commonly used services continued p.360
• Name protocol port s description p.360
• Table 175 commonly used services continued p.361
• Name protocol port s description p.361
• Gs1920 series user s guide p.361
• Appendix b common services p.361
• Ppendi p.362
• Unspecified address p.363
• Multicast address p.363
• Loopback address p.363
• Global address p.363
• Subnet masking p.364
• Stateless autoconfiguration p.364
• Interface id p.364
• Eui 64 p.364
• Dhcp relay agent p.365
• Renew to s1 p.365
• Renew rebind p.365
• Rebind p.365
• Identity association p.365
• Dhcpv6 p.365
• Prefix delegation p.366
• Neighbor discovery protocol ndp p.366
• Ipv6 cache p.366
• Icmpv6 p.366
• Example enabling ipv6 on windows xp 2003 vista p.367
• Example enabling dhcpv6 on windows xp p.367
• Example enabling ipv6 on windows 7 p.368
• Ppendi p.370
• Legal information p.370
• Ce marking p.371
• Appendix d legal information p.371
• Zyxel limited warranty p.371
• Safety warnings p.371
• Registration p.371
• Gs1920 series user s guide p.371
• Environmental product declaration p.372
• Numerics p.373