![Zyxel GS1920-48 [158/381] Policy rule](/img/pdf.png)
Zyxel GS1920-48 [158/381] Policy rule
![Zyxel GS1920-24HP [158/381] Policy rule](/views2/1168622/page158/bg9e.png)
GS1920 Series User’s Guide
158
CHAPTER 21
Policy Rule
21.1 Policy Rules Overview
This chapter shows you how to configure policy rules.
A classifier distinguishes traffic into flows based on the configured criteria (refer to Chapter 20 on
page 153 for more information). A policy rule ensures that a traffic flow gets the requested
treatment in the network.
21.1.1 What You Can Do
Use the Policy screen (Section 21.2 on page 158) to enable the policy and display the active
classifier(s) you configure in the Classifier screen.
21.2 Configuring Policy Rules
You must first configure a classifier in the Classifier screen. Refer to Section 20.2 on page 153 for
more information.
Click Advanced Applications > Policy Rule in the navigation panel to display the screen as
shown.
Содержание
- Default login details 1
- Gs1920 series 1
- Intelligent layer 2 gbe switch 1
- Quick start guide 1
- User s guide 1
- Important 2
- Keep this guide for future reference 2
- Read carefully before use 2
- Contents overview 3
- Technical reference 2 3
- User s guide 7 3
- Chapter 1 getting to know your switch 8 5
- Chapter 2 hardware installation and connection 3 5
- Chapter 3 hardware panels 6 5
- Contents overview 5
- Part i user s guide 17 5
- Table of contents 5
- Chapter 4 the web configurator 3 6
- Chapter 5 initial setup example 0 6
- Chapter 6 tutorials 4 6
- Chapter 7 zon utility zon neighbor management and port status 2 6
- Chapter 8 basic setting 9 6
- Part ii technical reference 32 6
- Chapter 9 vlan 5 7
- Chapter 10 static mac forward setup 05 8
- Chapter 11 static multicast forward setup 07 8
- Chapter 12 filtering 110 8
- Chapter 13 spanning tree protocol 112 8
- Chapter 14 bandwidth control 31 8
- Chapter 15 broadcast storm control 33 9
- Chapter 16 mirroring 35 9
- Chapter 17 link aggregation 37 9
- Chapter 18 port authentication 44 9
- Chapter 19 port security 50 9
- Chapter 20 classifier 53 9
- Chapter 21 policy rule 58 10
- Chapter 22 queuing method 62 10
- Chapter 23 multicast 65 10
- Chapter 24 aaa 89 10
- Chapter 25 ip source guard 00 11
- Chapter 26 loop guard 23 11
- Chapter 27 layer 2 protocol tunneling 27 11
- Chapter 28 pppoe 31 12
- Chapter 29 error disable 40 12
- Chapter 30 private vlan 46 12
- Chapter 31 green ethernet 48 12
- Chapter 32 link layer discovery protocol lldp 50 12
- Chapter 33 static route 74 13
- Chapter 34 differentiated services 77 13
- Chapter 35 dhcp 81 13
- Chapter 36 arp setup 95 13
- Chapter 37 maintenance 99 14
- Chapter 38 access control 08 14
- Chapter 39 diagnostic 26 14
- Chapter 40 syslog 28 15
- Chapter 41 cluster management 31 15
- Chapter 42 mac table 37 15
- Chapter 43 arp table 40 15
- Chapter 44 path mtu table 42 15
- Chapter 45 configure clone 43 15
- User s guide 17
- Getting to know your switch 18
- Introduction 18
- Backbone application 19
- Bridging example 19
- Switch model poe features 19
- High performance switching example 20
- Ieee 802 q vlan application examples 20
- Good habits for managing the switch 21
- Tag based vlan example 21
- Ways to manage the switch 21
- Desktop installation procedure 23
- Hardware installation and connection 23
- Installation scenarios 23
- Mounting the switch on a rack 23
- Rack mounted installation requirements 23
- Attaching the mounting brackets to the switch 24
- Mounting the switch on a rack 24
- Front panel 26
- Gigabit ethernet ports 26
- Hardware panels 26
- Auto crossover 27
- Default ethernet negotiation settings 27
- Mini gbic slots 27
- Note the dual personality ports change to fiber mode directly when inserting the fiber module 27
- To avoid possible eye injury do not look into an operating fiber optic module s connectors 27
- Transceiver installation 27
- Transceiver removal 28
- Led mode only available for gs1920 48hp 29
- Note make sure you are using the correct power source as shown on the panel 29
- Power connector 29
- Rear panel 29
- After you connect the power to the switch view the leds to ensure proper functioning of the switch and as an aid in troubleshooting 30
- Chapter 3 hardware panels 30
- Gs1920 series user s guide 30
- If you forget your password or cannot access the web configurator you will need to use the reset button at the side of the device to reload the factory default configuration file this means that you will lose all configurations that you had previously and the default switch ip address user name and password will be reset to 192 68 admin and 1234 respectively 30
- Led color status description 30
- Reset to factory defaults 30
- Table 3 led descriptions 30
- Note if you want to access the switch web configurator again you may need to change the ip address of your computer to be in the same subnet as that of the default switch ip address 192 68 31
- Side panels 31
- Technical reference 32
- Overview 33
- System login 33
- The web configurator 33
- The status screen 34
- Chapter 4 the web configurator 36
- Gs1920 series user s guide 36
- Link description 36
- Table 5 navigation panel links continued 36
- Change your password 37
- Chapter 4 the web configurator 37
- Gs1920 series user s guide 37
- Link description 37
- Logins to display the next screen 37
- Table 5 navigation panel links continued 37
- Note use the save link when you are done with a configuration session 38
- Saving your configuration 38
- Switch lockout 38
- Logging out of the web configurator 39
- Note be careful not to lock yourself and others out of the switch 39
- Resetting the switch 39
- Creating a vlan 40
- Initial setup example 40
- Overview 40
- Note the vlan group id field in this screen and the vid field in the ip setup screen refer to the same vlan id 41
- Setting port vid 41
- Configuring switch management ip address 42
- How to use dhcp snooping on the switch 44
- Overview 44
- Tutorials 44
- Creating a vlan 48
- Dhcp relay tutorial introduction 48
- Dhcp server port 2 pvid 102 48
- How to use dhcp relay on the switch 48
- Vlan 102 48
- Configuring dhcp relay 50
- Troubleshooting 51
- Overview 52
- What you can do 52
- Zon utility zon neighbor management and port status 52
- Zyxel one network zon utility screen 52
- Neighbor screen 53
- Chapter 7 zon utility zon neighbor management and port status 54
- Gs1920 series user s guide 54
- Label description 54
- Neighbor 54
- Port status summary 54
- The following table describes the fields in the above screen 54
- To view the port statistics click status in all web configurator screens to display the status screen as shown next 54
- Chapter 7 zon utility zon neighbor management and port status 55
- Figure 44 status for poe model s 55
- Gs1920 series user s guide 55
- Label description 55
- Table 8 status 55
- The following table describes the labels in this screen 55
- Chapter 7 zon utility zon neighbor management and port status 56
- Click a number in the port column in the status screen to display individual port statistics use this screen to check status and detailed performance data about an individual port on the switch 56
- Gs1920 series user s guide 56
- Label description 56
- Port details 56
- Status port details 56
- Table 9 status port details 56
- The following table describes the labels in this screen 56
- Chapter 7 zon utility zon neighbor management and port status 57
- Gs1920 series user s guide 57
- Label description 57
- Table 9 status port details continued 57
- Chapter 7 zon utility zon neighbor management and port status 58
- Gs1920 series user s guide 58
- Label description 58
- Table 9 status port details continued 58
- Basic setting 59
- Overview 59
- System information 59
- What you can do 59
- Chapter 8 basic setting 60
- Gs1920 series user s guide 60
- Label description 60
- System info 60
- System info for poe model s only 60
- The following table describes the labels in this screen 60
- Chapter 8 basic setting 61
- General setup 61
- General setup in the navigation panel to display the screen as shown 61
- Gs1920 series user s guide 61
- Label description 61
- System info continued 61
- Chapter 8 basic setting 62
- General setup 62
- Gs1920 series user s guide 62
- Label description 62
- The following table describes the labels in this screen 62
- A vlan virtual local area network allows a physical network to be partitioned into multiple logical networks devices on a logical network belong to one group a device can belong to more than one group with vlan a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router 63
- Chapter 8 basic setting 63
- General setup continued 63
- Gs1920 series user s guide 63
- In mtu multi tenant unit applications vlan is vital in providing isolation and security among the subscribers when properly configured vlan prevents one subscriber from accessing the network resources of another on the same lan thus a user will not see the printers and hard disks of another user in the same building 63
- Introduction to vlans 63
- Label description 63
- Note vlan is unidirectional it only governs outgoing traffic 63
- Vlan also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain in traditional switched environments all broadcast packets go to each and every individual port with vlan all broadcasts are confined to a specific broadcast domain 63
- Chapter 8 basic setting 64
- Gs1920 series user s guide 64
- Label description 64
- See chapter 9 on page 85 for information on port based and 802 q tagged vlans 64
- Switch setup 64
- Switch setup in the navigation panel to display the screen as shown the vlan setup screens change depending on whether you choose 802 q or port based in the vlan type field in this screen refer to chapter 9 on page 85 for more information on vlan 64
- Switch setup screen 64
- The following table describes the labels in this screen 64
- Chapter 8 basic setting 65
- Gs1920 series user s guide 65
- Ip setup 65
- Label description 65
- Management ip addresses 65
- Switch setup continued 65
- The switch needs an ip address for it to be managed over the network the factory default ip address is 192 68 the subnet mask specifies the network number portion of an ip address the factory default subnet mask is 255 55 55 65
- Use the ip setup screen to configure the switch ip address default gateway device the default domain name server and the management vlan id the default gateway specifies the ip address of the default gateway next hop for outgoing traffic 65
- You can configure up to 64 ip addresses which are used to access and manage the switch from the ports belonging to the pre defined vlan s 65
- Chapter 8 basic setting 66
- Gs1920 series user s guide 66
- Ip setup 66
- Label description 66
- Note you must configure a vlan first 66
- The following table describes the labels in this screen 66
- Chapter 8 basic setting 67
- Gs1920 series user s guide 67
- Ip setup continued 67
- Label description 67
- Port setup 67
- Port setup in the navigation panel to display the configuration screen 67
- Chapter 8 basic setting 68
- Gs1920 series user s guide 68
- Label description 68
- Note changes in this row are copied to all the ports as soon as you make them 68
- Note due to space limitation the port name may be truncated in some web configurator screens 68
- Port setup 68
- The following table describes the labels in this screen 68
- A powered device pd is a device such as an access point or a switch that supports poe power over ethernet so that it can receive power from another device through an ethernet port 69
- Chapter 8 basic setting 69
- Figure 51 powered device examples 69
- Gs1920 series user s guide 69
- In the figure below the ip camera and ip phone get their power directly from the switch aside from minimizing the need for cables and wires poe removes the hassle of trying to find a nearby electric outlet to power up devices 69
- Label description 69
- Note the following screens are available for the poe model s only some features are only available for the ethernet ports 1 to 24 for gs1920 24hp and 1 to 48 for gs1920 48hp 69
- Note the poe power over ethernet devices that supply or receive power and their connected ethernet cables must all be completely indoors 69
- Poe status 69
- Port setup continued 69
- The poe model s supports the ieee 802 at high power over ethernet poe standard 69
- You can also set priorities so that the switch is able to reserve and allocate power to certain pds 69
- Chapter 8 basic setting 70
- Gs1920 series user s guide 70
- Label description 70
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device needs less than 16w 70
- Poe setup 70
- Poe status 70
- The following table describes the labels in this screen 70
- Chapter 8 basic setting 71
- Gs1920 series user s guide 71
- Label description 71
- Poe setup 71
- Poe status continued 71
- Poe status screen the following screen opens 71
- Use this screen to set the priority levels for the switch in distributing power to pds 71
- An ipv6 address is configured on a per interface basis the interface can support virtual interface for example a vlan the switch supports the vlan interface type for ipv6 at the time of writing 72
- Chapter 8 basic setting 72
- Gs1920 series user s guide 72
- Interface setup 72
- Interface setup in the navigation panel to display the configuration screen 72
- Label description 72
- Poe setup 72
- The following table describes the labels in this screen 72
- Chapter 8 basic setting 73
- Gs1920 series user s guide 73
- Interface setup 73
- Ipv6 in the navigation panel to display the ipv6 status screen as shown next 73
- Label description 73
- The following table describes the labels in this screen 73
- Use this screen to view the ipv6 interface status and configure switch s management ipv6 addresses 73
- Ipv6 interface status 74
- Chapter 8 basic setting 75
- Gs1920 series user s guide 75
- Ipv6 interface status 75
- Label description 75
- The following table describes the labels in this screen 75
- Chapter 8 basic setting 76
- Gs1920 series user s guide 76
- Ipv6 interface status continued 76
- Label description 76
- Chapter 8 basic setting 77
- Gs1920 series user s guide 77
- Ipv6 configuration 77
- Ipv6 global setup 77
- Ipv6 screen the following screen opens 77
- Label description 77
- The following table describes the labels in this screen 77
- Use this screen to configure the global ipv6 settings click the link next to ipv6 global setup in the ipv6 configuration screen to display the screen as shown next 77
- Chapter 8 basic setting 78
- Gs1920 series user s guide 78
- Ipv6 global setup 78
- Ipv6 interface setup 78
- Label description 78
- The following table describes the labels in this screen 78
- Use this screen to turn on or off an ipv6 interface and enable stateless autoconfiguration on it click the link next to ipv6 interface setup in the ipv6 configuration screen to display the screen as shown next 78
- A link local address uniquely identifies a device on the local network the lan it is similar to a private ip address in ipv4 you can have the same link local address on multiple interfaces on a device a link local unicast address has a predefined prefix of fe80 10 79
- Chapter 8 basic setting 79
- Gs1920 series user s guide 79
- Ipv6 interface setup 79
- Ipv6 link local address setup 79
- Label description 79
- The following table describes the labels in this screen 79
- Use this screen to configure the interface s link local address and default gateway click the link next to ipv6 link local address setup in the ipv6 configuration screen to display the screen as shown next 79
- Chapter 8 basic setting 80
- Gs1920 series user s guide 80
- Ipv6 global address setup 80
- Ipv6 link local address setup continued 80
- Label description 80
- The following table describes the labels in this screen 80
- Use this screen to configure the interface s ipv6 global address click the link next to ipv6 global address setup in the ipv6 configuration screen to display the screen as shown next 80
- Chapter 8 basic setting 81
- Gs1920 series user s guide 81
- Ipv6 global address setup continued 81
- Ipv6 neighbor discovery setup 81
- Label description 81
- The following table describes the labels in this screen 81
- Use this screen to configure neighbor discovery settings for each interface click the link next to ipv6 neighbor discovery setup in the ipv6 configuration screen to display the screen as shown next 81
- Chapter 8 basic setting 82
- Gs1920 series user s guide 82
- Ipv6 neighbor discovery setup continued 82
- Ipv6 neighbor setup 82
- Label description 82
- The following table describes the labels in this screen 82
- Use this screen to create a static ipv6 neighbor entry in the switch s ipv6 neighbor table to store the neighbor information permanently click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next 82
- Chapter 8 basic setting 83
- Dhcpv6 client setup 83
- Gs1920 series user s guide 83
- Ipv6 neighbor setup continued 83
- Label description 83
- Use this screen to configure the switch s dhcp settings when it is acting as a dhcpv6 client click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next 83
- Chapter 8 basic setting 84
- Dhcpv6 client setup 84
- Gs1920 series user s guide 84
- Label description 84
- The following table describes the labels in this screen 84
- Overview 85
- What you can do 85
- What you need to know 85
- Automatic vlan registration 86
- Forwarding tagged and untagged frames 86
- Garp timers 86
- Chapter 9 vlan 87
- Enable vlan trunking on a port to allow frames belonging to unknown vlan groups to pass through that port this is useful if you want to set up vlan groups on end devices without having to configure the same vlan groups on intermediary devices 87
- Figure 65 port vlan trunking 87
- Gs1920 series user s guide 87
- Please refer to the following table for common ieee 802 q vlan terminology 87
- Port vlan trunking 87
- Refer to the following figure suppose you want to create vlan groups 1 and 2 v1 and v2 on devices a and b without vlan trunking you must configure vlan groups 1 and 2 on all intermediary switches c d and e otherwise they will drop frames with unknown vlan group tags however with vlan trunking enabled on a port s in each intermediary switch you only need to create vlan groups in the end devices a and b c d and e automatically allow frames with vlan group tags 1 and 2 vlan groups that are unknown to those switches to pass through their vlan trunking port s 87
- Select the vlan type 87
- Switch setup screen 87
- Table 28 ieee 802 q vlan terminology 87
- Vlan parameter term description 87
- Blocked from a vlan group regardless of its vlan tag 88
- Chapter 9 vlan 88
- Gs1920 series user s guide 88
- Label description 88
- Select vlan type 88
- Sent to a group whether it has a vlan tag or not 88
- Sent to a vlan group as normal depending on its vlan tag 88
- Static vlan 88
- The following table describes the labels in this screen 88
- Use a static vlan to decide whether an incoming frame on a port should be 88
- Vlan from the navigation panel to display the vlan status screen as shown next 88
- Vlan status 88
- Vlan vlan status 88
- You can also tag all outgoing frames that were previously untagged from a port with the specified vid 88
- Chapter 9 vlan 89
- Gs1920 series user s guide 89
- Label description 89
- The following table describes the labels in this screen 89
- Use this screen to view detailed port settings and status of the vlan group click on an index number in the vlan status screen to display vlan details 89
- Vlan detail 89
- Vlan detail s 89
- Vlan details 89
- Vlan vlan status continued 89
- Configure a static vlan 90
- Vlan configuration 90
- Chapter 9 vlan 91
- Gs1920 series user s guide 91
- Label description 91
- Note changes in this row are copied to all the ports as soon as you make them 91
- Static vlan setup 91
- The following table describes the related labels in this screen 91
- Chapter 9 vlan 92
- Configure vlan port settings 92
- Gs1920 series user s guide 92
- Label description 92
- Static vlan setup continued 92
- The following table describes the labels in this screen 92
- Use the vlan port setting screen to configure the static vlan ieee 802 q settings on a port click the vlan port setup link in the vlan status screen 92
- Vlan port set up 92
- Vlan port setup 92
- Chapter 9 vlan 93
- For example an isp internet services provider may divide different types of services it provides to customers into different ip subnets traffic for voice services is designated for ip subnet 172 6 24 video for 192 68 24 and data for 10 24 the switch can then be configured to group incoming traffic based on the source ip subnet of incoming frames 93
- Gs1920 series user s guide 93
- Label description 93
- Note changes in this row are copied to all the ports as soon as you make them 93
- Subnet based vlan s 93
- Subnet based vlans 93
- Subnet based vlans allow you to group traffic into logical vlans based on the source ip subnet you specify when a frame is received on a port the switch checks if a tag is added already and the ip subnet it came from the untagged packets from the same ip subnet are then placed in the same subnet based vlan one advantage of using subnet based vlans is that priority can be assigned to traffic from the same ip subnet 93
- Vlan port set up 93
- You configure a subnet based vlan with priority 6 and vid of 100 for traffic received from ip subnet 172 6 24 voice services you also have a subnet based vlan with priority 5 and vid of 200 for traffic received from ip subnet 192 68 24 video services lastly you configure vlan with priority 3 and vid of 300 for traffic received from ip subnet 10 24 data services all 93
- Configuring subnet based vlan 94
- Internet 94
- Note subnet based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 94
- Chapter 9 vlan 95
- Gs1920 series user s guide 95
- Label description 95
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 95
- Protocol based vlan s 95
- Protocol based vlans 95
- Protocol based vlans allow you to group traffic into logical vlans based on the protocol you specify when an upstream frame is received on a port configured for a protocol based vlan the switch checks if a tag is added already and its protocol the untagged packets of the same protocol are then placed in the same protocol based vlan one advantage of using protocol based vlans is that priority can be assigned to traffic of the same protocol 95
- Subnet based vlan setup 95
- The following table describes the labels in this screen 95
- Configuring protocol based vlan 96
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 96
- Chapter 9 vlan 97
- Gs1920 series user s guide 97
- Label description 97
- Note protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based vlans 97
- Note when you activate port based vlan the switch uses a default vlan id of 1 you cannot change it 97
- Port based vlan setup 97
- Port based vlans are specific only to the switch on which they were created 97
- Port based vlans are vlans where the packet forwarding decision is based on the destination mac address and its associated port 97
- Port based vlans require allowed outgoing ports to be defined for each port therefore if you wish to allow two subscriber ports to talk to each other for example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports 97
- Protocol based vlan setup 97
- The following table describes the labels in this screen 97
- Configure a port based vlan 98
- Note in screens such as ip setup and filtering that require a vid you must enter 1 as the vid 98
- Chapter 9 vlan 100
- Click voice vlan in the vlan configuration screen to display the configuration screen as shown 100
- Gs1920 series user s guide 100
- Table 36 port based vlan setup label description 100
- The following table describes the labels in this screen 100
- Voice vlan 100
- Voice vlan ensures that the sound quality of an ip phone is preserved from deteriorating when the data traffic on the switch ports is high it groups the voice traffic with defined priority into an assigned vlan which enables the separation of voice and data traffic coming onto the switch port 100
- You can set priority level to the voice vlan and add mac address of ip phones from specific manufacturers by using its id from the organizationally unique identifiers oui 100
- Chapter 9 vlan 101
- Gs1920 series user s guide 101
- Label description 101
- The following table describes the fields in the above screen 101
- Voice vlan setup 101
- Label description 102
- Mac based vlan 102
- Activate this protocol based vlan 103
- Chapter 9 vlan 103
- Create an ip based vlan example 103
- Give this protocol based vlan a descriptive name type ip vlan 103
- Gs1920 series user s guide 103
- Label description 103
- Leave the priority set to 0 and click add 103
- Mac based vlan setup 103
- Select the protocol leave the default value ip 103
- Technical reference 103
- This example shows you how to create an ip vlan which includes ports 1 4 and 8 follow these steps 103
- This section provides technical background information on the topics discussed in this chapter 103
- Type the port number you want to include in this protocol based vlan type 1 103
- Type the vlan id of an existing vlan in our example we already created a static vlan with an id of 5 type 5 103
- Configuring static mac forwarding 105
- Overview 105
- Static mac forward setup 105
- What you can do 105
- Chapter 10 static mac forward setup 106
- Gs1920 series user s guide 106
- Label description 106
- Note static mac addresses do not age out 106
- Static mac forwarding 106
- The following table describes the labels in this screen 106
- Static multicast forward setup 107
- Static multicast forward setup overview 107
- What you can do 107
- What you need to know 107
- Configuring static multicast forwarding 108
- Chapter 11 static multicast forward setup 109
- Gs1920 series user s guide 109
- Label description 109
- Static multicast forwarding 109
- The following table describes the labels in this screen 109
- Configure a filtering rule 110
- Filtering 110
- Filtering overview 110
- What you can do 110
- Chapter 12 filtering 111
- Filtering 111
- Gs1920 series user s guide 111
- Label description 111
- The following table describes the related labels in this screen 111
- Spanning tree protocol 112
- Spanning tree protocol overview 112
- What you can do 112
- What you need to know 112
- How stp works 113
- Note in this user s guide stp refers to both stp and rstp 113
- Stp terminology 113
- Multiple rstp 114
- Multiple stp 114
- Note each port can belong to one stp tree only 114
- Stp port states 114
- Spanning tree configuration 115
- Spanning tree protocol status screen 115
- Chapter 13 spanning tree protocol 116
- Configuration 116
- Configure rapid spanning tree protocol 116
- Gs1920 series user s guide 116
- Label description 116
- Spanning tree protocol screen 116
- The following table describes the labels in this screen 116
- 2 hello time 1 117
- Chapter 13 spanning tree protocol 117
- Configuration screen to enable rstp on the switch 117
- Gs1920 series user s guide 117
- Label description 117
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 117
- Note changes in this row are copied to all the ports as soon as you make them 117
- The following table describes the labels in this screen 117
- Chapter 13 spanning tree protocol 118
- Gs1920 series user s guide 118
- Label description 118
- Note this screen is only available after you activate rstp on the switch 118
- Rapid spanning tree protocol status 118
- Rstp continued 118
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 112 for more information on rstp 118
- Status rstp 118
- The following table describes the labels in this screen 118
- Chapter 13 spanning tree protocol 119
- Configure multiple rapid spanning tree protocol 119
- Gs1920 series user s guide 119
- Label description 119
- Note the listening state does not exist in rstp 119
- Spanning tree protocol screen see section 13 on page 112 for more information on mrstp 119
- Status rstp continued 119
- The following table describes the labels in this screen 119
- 2 hello time 1 120
- Chapter 13 spanning tree protocol 120
- Configuration screen to enable mrstp on the switch 120
- Gs1920 series user s guide 120
- Label description 120
- Mrstp continued 120
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 120
- Note changes in this row are copied to all the ports as soon as you make them 120
- Chapter 13 spanning tree protocol 121
- Gs1920 series user s guide 121
- Label description 121
- Mrstp continued 121
- Multiple rapid spanning tree protocol status 121
- Note the listening state does not exist in rstp 121
- Note this screen is only available after you activate mrstp on the switch 121
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 112 for more information on mrstp 121
- Status mrstp 121
- The following table describes the labels in this screen 121
- Configure multiple spanning tree protocol 122
- Chapter 13 spanning tree protocol 123
- Configuration screen to enable mstp on the switch 123
- Gs1920 series user s guide 123
- Label description 123
- The following table describes the labels in this screen 123
- 2 hello time 1 124
- Chapter 13 spanning tree protocol 124
- Gs1920 series user s guide 124
- Label description 124
- Mstp continued 124
- Note changes in this row are copied to all the ports as soon as you make them 124
- Chapter 13 spanning tree protocol 125
- Gs1920 series user s guide 125
- Label description 125
- Mstp continued 125
- Multiple spanning tree port configuration 125
- Port in the navigation panel to display the status screen as shown next see section on page 114 for more information on mstp 125
- Chapter 13 spanning tree protocol 126
- Gs1920 series user s guide 126
- Label description 126
- Multiple spanning tree protocol status 126
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 126
- Note changes in this row are copied to all the ports as soon as you make them 126
- Note this screen is only available after you activate mstp on the switch 126
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section on page 114 for more information on mstp 126
- The following table describes the labels in this screen 126
- Chapter 13 spanning tree protocol 127
- Gs1920 series user s guide 127
- Label description 127
- Status mstp 127
- The following table describes the labels in this screen 127
- Chapter 13 spanning tree protocol 128
- Gs1920 series user s guide 128
- Label description 128
- Mstp network example 128
- Status mstp continued 128
- Technical reference 128
- The following figure shows a network example where two vlans are configured on the two switches if the switches are using stp or rstp the link for vlan 2 will be blocked as stp and rstp allow only one link in the network and block the redundant link 128
- This section provides technical background information on the topics discussed in this chapter 128
- Mst region 129
- Vlan 1 vlan 2 129
- Common and internal spanning tree cist 130
- Mst instance 130
- Bandwidth control 131
- Bandwidth control setup 131
- Overview 131
- What you can do 131
- Bandwidth control 132
- Chapter 14 bandwidth control 132
- Gs1920 series user s guide 132
- Label description 132
- Note changes in this row are copied to all the ports as soon as you make them 132
- Note ingress rate bandwidth control applies to layer 2 traffic only 132
- The following table describes the related labels in this screen 132
- Broadcast storm control 133
- Broadcast storm control overview 133
- Broadcast storm control setup 133
- What you can do 133
- Broadcast storm control 134
- Chapter 15 broadcast storm control 134
- Gs1920 series user s guide 134
- Label description 134
- Note changes in this row are copied to all the ports as soon as you make them 134
- The following table describes the labels in this screen 134
- Mirroring 135
- Mirroring overview 135
- Port mirroring setup 135
- What you can do 135
- Chapter 16 mirroring 136
- Gs1920 series user s guide 136
- Label description 136
- Mirroring 136
- Note changes in this row are copied to all the ports as soon as you make them 136
- The following table describes the labels in this screen 136
- Link aggregation 137
- Overview 137
- What you can do 137
- What you need to know 137
- Link aggregation id 138
- Link aggregation status 138
- Chapter 17 link aggregation 139
- Gs1920 series user s guide 139
- Label description 139
- Link aggregation setting 139
- Link aggregation setting to display the screen shown next see section 17 on page 137 for more information on link aggregation 139
- Link aggregation status 139
- The following table describes the labels in this screen 139
- Chapter 17 link aggregation 140
- Gs1920 series user s guide 140
- Label description 140
- Link aggregation setting 140
- The following table describes the labels in this screen 140
- Link aggregation control protocol 141
- Chapter 17 link aggregation 142
- Gs1920 series user s guide 142
- Label description 142
- Make your physical connections make sure that the ports that you want to belong to the trunk group are connected to the same destination the following figure shows ports 2 5 on switch a connected to switch b 142
- Note changes in this row are copied to all the ports as soon as you make them 142
- Note do not configure this screen unless you want to enable dynamic link aggregation 142
- Static trunking example 142
- Technical reference 142
- The following table describes the labels in this screen 142
- This example shows you how to create a static port trunk group for ports 2 5 142
- This section provides technical background information on the topics discussed in this chapter 142
- Port authentication 144
- Port authentication overview 144
- What you can do 144
- What you need to know 144
- Activate ieee 802 x security 145
- Authentication reply 145
- Authentication request 145
- Login credentials 145
- Login info request 145
- New connection 145
- Port authentication configuration 145
- Session granted denied 145
- Chapter 18 port authentication 146
- Gs1920 series user s guide 146
- Label description 146
- Note changes in this row are copied to all the ports as soon as you make them 146
- Note you must first enable 802 x authentication on the switch before configuring it on each port 146
- The following table describes the labels in this screen 146
- Guest vlan 147
- Internet 147
- Vlan 100 147
- Vlan 102 147
- Chapter 18 port authentication 148
- Gs1920 series user s guide 148
- Guest vlan 148
- Label description 148
- The following table describes the labels in this screen 148
- Chapter 18 port authentication 149
- Gs1920 series user s guide 149
- Guest vlan continued 149
- Label description 149
- Port security 150
- Port security overview 150
- Port security setup 150
- What you can do 150
- Chapter 19 port security 151
- Gs1920 series user s guide 151
- Label description 151
- Note changes in this row are copied to all the ports as soon as you make them 151
- Port security 151
- The following table describes the labels in this screen 151
- Chapter 19 port security 152
- Gs1920 series user s guide 152
- Label description 152
- Port security continued 152
- Classifier 153
- Configuring the classifier 153
- Overview 153
- What you can do 153
- What you need to know 153
- Chapter 20 classifier 154
- Classifier 154
- Gs1920 series user s guide 154
- Label description 154
- The following table describes the labels in this screen 154
- Chapter 20 classifier 155
- Classifier continued 155
- Gs1920 series user s guide 155
- Label description 155
- Note when two rules conflict with each other a higher layer rule has priority over lower layer rule 155
- Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers 155
- To view a summary of the classifier configuration scroll down to the summary table at the bottom of the classifier screen to change the settings of a rule click a number in the index field 155
- Viewing and editing classifier configuration 155
- Chapter 20 classifier 156
- Classifier summary table 156
- Ethernet type protocol number 156
- Gs1920 series user s guide 156
- In the internet protocol there is a field called protocol to identify the next level protocol the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 156
- Label description 156
- Protocol type protocol number 156
- Table 64 classifier summary table 156
- Table 65 common ethernet types and protocol numbers 156
- Table 66 common ip protocol types and protocol numbers 156
- The following table describes the labels in this screen 156
- The following table shows some other common ethernet types and the corresponding protocol number 156
- Classifier example 157
- Configuring policy rules 158
- Policy rule 158
- Policy rules overview 158
- What you can do 158
- Chapter 21 policy rule 159
- Gs1920 series user s guide 159
- Label description 159
- Policy rule 159
- The following table describes the labels in this screen 159
- Chapter 21 policy rule 160
- Gs1920 series user s guide 160
- Label description 160
- Note you can specify only one action pair in a policy rule to have the switch take multiple actions on the same traffic flow you need to define multiple classifiers with the same criteria and apply different policy rules 160
- Policy rule continued 160
- Policy example 161
- Viewing and editing policy configuration 161
- Queuing method 162
- Queuing method overview 162
- What you can do 162
- What you need to know 162
- Configuring queuing 163
- Chapter 22 queuing method 164
- Gs1920 series user s guide 164
- Label description 164
- Note changes in this row are copied to all the ports as soon as you make them 164
- Queuing method 164
- The following table describes the labels in this screen 164
- Multicast 165
- Multicast overview 165
- What you can do 165
- What you need to know 165
- Igmp snooping and vlans 166
- Mld snooping proxy 166
- Mld messages 167
- Mvr overview 167
- Report 167
- How mvr works 168
- Multicast vlan vlan 1 168
- Mvr modes 168
- Types of mvr ports 168
- Vlan 2 168
- Vlan 3 168
- Ipv4 multicast status 169
- Multicast setup 169
- Multicast vlan vlan 1 169
- Chapter 23 multicast 170
- Gs1920 series user s guide 170
- Igmp snooping 170
- Ipv4 multicast 170
- Ipv4 multicast screen to display the screen as shown see section 23 on page 165 for more information on multicasting 170
- Label description 170
- The following table describes the labels in this screen 170
- Chapter 23 multicast 171
- Gs1920 series user s guide 171
- Igmp snooping continued 171
- Label description 171
- Chapter 23 multicast 172
- Gs1920 series user s guide 172
- Igmp snooping continued 172
- Igmp snooping vlan 172
- Ipv4 multicast in the navigation panel click the igmp snooping link and then the igmp snooping vlan link to display the screen as shown see section on page 166 for more information on igmp snooping vlan 172
- Label description 172
- Chapter 23 multicast 173
- Gs1920 series user s guide 173
- Igmp snooping vlan 173
- Label description 173
- The following table describes the labels in this screen 173
- Igmp filtering profile 174
- Chapter 23 multicast 175
- Gs1920 series user s guide 175
- Igmp filtering profile continued 175
- Ipv6 multicast 175
- Ipv6 multicast status 175
- Ipv6 multicast to display the screen as shown this screen shows the ipv6 multicast group information see section 23 on page 165 for more information on multicasting 175
- Label description 175
- The following table describes the fields in the above screen 175
- Label description 176
- Mld snooping proxy 176
- Mld snooping proxy vlan 176
- Chapter 23 multicast 177
- Gs1920 series user s guide 177
- Label description 177
- The following table describes the fields in the above screen 177
- Chapter 23 multicast 178
- Gs1920 series user s guide 178
- Label description 178
- Mld snooping proxy vlan port role setting 178
- Vlan screen to display the screen as shown 178
- Chapter 23 multicast 179
- Gs1920 series user s guide 179
- Label description 179
- Mld snooping proxy vlan id 179
- Port role 179
- Port role setting 179
- The following table describes the fields in the above screen 179
- Cancel 180
- Chapter 23 multicast 180
- Fast leave timeout 180
- Gs1920 series user s guide 180
- Label description 180
- Leave mode 180
- Leave timeout 180
- Mld snooping proxy screen to display the screen as shown 180
- Mld snooping proxy vlan filtering 180
- Port role setting 180
- Active 181
- Cancel 181
- Chapter 23 multicast 181
- Filtering 181
- Filtering profile 181
- Group limit 181
- Gs1920 series user s guide 181
- Label description 181
- Max group num 181
- The following table describes the fields in the above screen 181
- Chapter 23 multicast 182
- End address 182
- Filtering profile 182
- Filtering screen to display the screen as shown 182
- Gs1920 series user s guide 182
- Label description 182
- Mld snooping proxy vlan filtering profile 182
- Profile name 182
- Start address 182
- The following table describes the fields in the above screen 182
- General mvr configuration 183
- Label description 183
- Note you can create up to five multicast vlans and up to 256 multicast rules on the switch 183
- Note your switch automatically creates a static vlan with the same vid when you create a multicast vlan in this screen 183
- Chapter 23 multicast 184
- Gs1920 series user s guide 184
- Label description 184
- The following table describes the related labels in this screen 184
- All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group 185
- Chapter 23 multicast 185
- Gs1920 series user s guide 185
- Label description 185
- Mvr continued 185
- Mvr group configuration 185
- Note a port can belong to more than one multicast vlan however ip multicast group addresses in different multicast vlans cannot overlap 185
- Use this screen to configure mvr ip multicast group address es click the group configuration link in the mvr screen 185
- Chapter 23 multicast 186
- Group configuration 186
- Gs1920 series user s guide 186
- Label description 186
- The following table describes the labels in this screen 186
- Example 187
- Multicast vid 200 vlan 1 187
- Mvr configuration example 187
- Example 188
- Aaa overview 189
- What you can do 189
- What you need to know 189
- Aaa screens 190
- Local user accounts 190
- Radius and tacacs 190
- Radius server setup 190
- Chapter 24 aaa 191
- Gs1920 series user s guide 191
- Label description 191
- Radius server setup 191
- The following table describes the labels in this screen 191
- Chapter 24 aaa 192
- Gs1920 series user s guide 192
- Label description 192
- Radius server setup continued 192
- Tacacs server setup 192
- Use this screen to configure your tacacs server settings see section on page 190 for more information on tacacs servers click on the tacacs server setup link in the aaa screen to view the screen as shown 192
- Chapter 24 aaa 193
- Gs1920 series user s guide 193
- Label description 193
- Tacacs server setup 193
- The following table describes the labels in this screen 193
- Aaa setup 194
- Chapter 24 aaa 194
- Gs1920 series user s guide 194
- Label description 194
- Tacacs server setup continued 194
- Use this screen to configure authentication and authorization settings on the switch click on the aaa setup link in the aaa screen to view the screen as shown 194
- Aaa setup 195
- Chapter 24 aaa 195
- Gs1920 series user s guide 195
- Label description 195
- The following table describes the labels in this screen 195
- Aaa setup continued 196
- Chapter 24 aaa 196
- Gs1920 series user s guide 196
- Label description 196
- Rfc 2865 standard specifies a method for sending vendor specific information between a radius server and a network access device for example the switch a company can create vendor specific attributes vsas to expand the functionality of a radius server 196
- Technical reference 196
- The switch supports vsas that allow you to perform the following actions based on user authentication 196
- This section provides technical background information on the topics discussed in this chapter 196
- Vendor specific attribute 196
- Note refer to the documentation that comes with your radius server on how to configure vsas for users authenticating via the radius server 197
- Tunnel protocol attribute 197
- Attributes used by the ieee 802 x authentication 198
- Attributes used for authenticating privilege access 198
- Attributes used for authentication 198
- Attributes used to login users 198
- Supported radius attributes 198
- Ip source guard 200
- Overview 200
- What you can do 200
- Ip source guard 201
- What you need to know 201
- Ip source guard static binding 202
- Arp learning screen before you use the arp freeze feature 203
- Chapter 25 ip source guard 203
- Dhcp snooping 203
- Gs1920 series user s guide 203
- Label description 203
- Static binding 203
- The following table describes the labels in this screen 203
- Chapter 25 ip source guard 204
- Dhcp snooping 204
- Gs1920 series user s guide 204
- Label description 204
- The following table describes the labels in this screen 204
- Chapter 25 ip source guard 205
- Dhcp snooping continued 205
- Gs1920 series user s guide 205
- Label description 205
- Chapter 25 ip source guard 206
- Configure 206
- Dhcp snooping configure 206
- Dhcp snooping continued 206
- Gs1920 series user s guide 206
- Label description 206
- Chapter 25 ip source guard 207
- Configure 207
- Gs1920 series user s guide 207
- Label description 207
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 207
- Note you have to enable dhcp snooping on the dhcp vlan too 207
- The following table describes the labels in this screen 207
- Chapter 25 ip source guard 208
- Configure continued 208
- Dhcp snooping port configure 208
- Gs1920 series user s guide 208
- Label description 208
- Note if dhcp snooping is enabled but there are no trusted ports dhcp requests cannot reach the dhcp server 208
- Use this screen to specify whether ports are trusted or untrusted ports for dhcp snooping 208
- Chapter 25 ip source guard 209
- Dhcp snooping vlan configure 209
- Gs1920 series user s guide 209
- Label description 209
- The following table describes the labels in this screen 209
- Chapter 25 ip source guard 210
- Dhcp snooping vlan port configure 210
- Gs1920 series user s guide 210
- Label description 210
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 210
- The following table describes the labels in this screen 210
- Arp inspection 211
- Arp inspection status 211
- Chapter 25 ip source guard 211
- Gs1920 series user s guide 211
- Label description 211
- The following table describes the labels in this screen 211
- Arp inspection 212
- Arp inspection vlan status 212
- Chapter 25 ip source guard 212
- Gs1920 series user s guide 212
- Label description 212
- The following table describes the labels in this screen 212
- Vlan status 212
- Arp inspection log status 213
- Chapter 25 ip source guard 213
- Gs1920 series user s guide 213
- Label description 213
- Log status 213
- The following table describes the labels in this screen 213
- Vlan status 213
- Chapter 25 ip source guard 214
- Gs1920 series user s guide 214
- Label description 214
- Log status 214
- The following table describes the labels in this screen 214
- Arp inspection configure 215
- Chapter 25 ip source guard 215
- Configure 215
- Gs1920 series user s guide 215
- Label description 215
- The following table describes the labels in this screen 215
- Arp inspection port configure 216
- Chapter 25 ip source guard 216
- Configure continued 216
- Gs1920 series user s guide 216
- Label description 216
- Chapter 25 ip source guard 217
- Gs1920 series user s guide 217
- Label description 217
- The following table describes the labels in this screen 217
- Arp inspection vlan configure 218
- Chapter 25 ip source guard 218
- Gs1920 series user s guide 218
- Label description 218
- The following table describes the labels in this screen 218
- Dhcp snooping overview 219
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 219
- Technical reference 219
- Trusted vs untrusted ports 219
- Configuring dhcp snooping 220
- Dhcp relay option 82 information 220
- Dhcp snooping database 220
- Arp inspection and mac address filters 221
- Arp inspection overview 221
- Configuring arp inspection 222
- Note it is recommended you enable dhcp snooping at least one day before you enable arp inspection so that the switch has enough time to build the binding table 222
- Syslog 222
- Trusted vs untrusted ports 222
- Loop guard 223
- Loop guard overview 223
- What you can do 223
- What you need to know 223
- Loop guard setup 225
- Note after resolving the loop problem on your network you can re activate the disabled port via the web configurator see section 8 on page 67 225
- Note the loop guard feature can not be enabled on the ports that have spanning tree protocol rstp mrstp or mstp enabled 225
- Chapter 26 loop guard 226
- Gs1920 series user s guide 226
- Label description 226
- Loop guard 226
- Note changes in this row are copied to all the ports as soon as you make them 226
- The following table describes the labels in this screen 226
- Layer 2 protocol tunneling 227
- Layer 2 protocol tunneling overview 227
- What you can do 227
- What you need to know 227
- Configuring layer 2 protocol tunneling 228
- Layer 2 protocol tunneling mode 228
- Service provider s network c 228
- Chapter 27 layer 2 protocol tunneling 229
- Gs1920 series user s guide 229
- Label description 229
- Layer 2 protocol tunneling 229
- Note all the edge switches in the service provider s network should be set to use the same mac address for encapsulation 229
- Note changes in this row are copied to all the ports as soon as you make them 229
- Note the mac address can be either a unicast mac address or multicast mac address if you use a unicast mac address make sure the mac address does not exist in the address table of a switch on the service provider s network 229
- The following table describes the labels in this screen 229
- Chapter 27 layer 2 protocol tunneling 230
- Gs1920 series user s guide 230
- Label description 230
- Layer 2 protocol tunneling continued 230
- Note you can enable l2pt services for stp lacp vtp cdp udld and pagp on the access port s only 230
- Pppoe intermediate agent overview 231
- What you can do 231
- What you need to know 231
- Flexible circuit id syntax with identifier string and variables 232
- Pppoe intermediate agent tag format 232
- Sub option format 232
- Chapter 28 pppoe 233
- Every port is either a trusted port or an untrusted port for the pppoe intermediate agent this setting is independent of the trusted untrusted setting for dhcp snooping or arp inspection you can also specify the agent sub options circuit id and remote id that the switch adds to padi and padr packets from pppoe clients 233
- Gs1920 series user s guide 233
- If a padi or padr packet is sent from a pppoe client but received on a trusted port the switch forwards it to other trusted port s 233
- If a padi padr or padt packet is sent from a pppoe client and received on an untrusted port the switch adds a vendor specific tag to the packet and then forwards it to the trusted port s 233
- If a pado pppoe active discovery offer pads pppoe active discovery session confirmation or padt pppoe active discovery terminate packet is sent from a pppoe server and received on a trusted port the switch forwards it to all other ports 233
- Intermediate agent screen the switch automatically generates a circuit id string according to the default circuit id syntax which is defined in the dsl forum working text wt 101 the default access node identifier is the host name of the pppoe intermediate agent and the eth indicates ethernet 233
- Note the switch will drop all pppoe discovery packets if you enable the pppoe intermediate agent and there are no trusted ports 233
- Option example is switch 07 0123 and indicates the pppoe packets come from a pppoe client which is connected to the switch s port 7 and belong to vlan 123 233
- Port state 233
- Table 107 pppoe ia circuit id sub option format using identifier string and variables 233
- Table 108 pppoe ia circuit id sub option format defined in wt 101 233
- The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port 233
- Trusted ports are connected to pppoe servers 233
- Untrusted ports are connected to subscribers 233
- Wt 101 default circuit id syntax 233
- Pppoe intermediate agent 234
- The pppoe screen 234
- Chapter 28 pppoe 235
- Click the port link in the intermediate agent screen to display the screen as shown 235
- Gs1920 series user s guide 235
- Intermediate agent continued 235
- Label description 235
- Note the switch will drop all pppoe packets if you enable the pppoe intermediate agent on the switch and there are no trusted ports 235
- Pppoe ia per port 235
- Use this screen to specify whether individual ports are trusted or untrusted ports and have the switch add extra information to pppoe discovery packets from pppoe clients on a per port basis 235
- Chapter 28 pppoe 236
- Gs1920 series user s guide 236
- Label description 236
- The following table describes the labels in this screen 236
- Chapter 28 pppoe 237
- Gs1920 series user s guide 237
- Label description 237
- Port continued 237
- Port screen to display the screen as shown 237
- Pppoe ia per port per vlan 237
- The following table describes the labels in this screen 237
- Use this screen to configure pppoe ia settings that apply to a specific vlan on a port 237
- Chapter 28 pppoe 238
- Click the vlan link in the intermediate agent screen to display the screen as shown 238
- Gs1920 series user s guide 238
- Label description 238
- Pppoe ia for vlan 238
- The following table describes the labels in this screen 238
- Use this screen to set whether the pppoe intermediate agent is enabled on a vlan and whether the switch appends the circuit id and or remote id to pppoe discovery packets from a specific vlan 238
- Vlan continued 238
- Chapter 28 pppoe 239
- Gs1920 series user s guide 239
- Label description 239
- Vlan continued 239
- Error disable 240
- Error disable overview 240
- Error disable status 240
- The error disable screens overview 240
- Chapter 29 error disable 241
- Errdisable status 241
- Gs1920 series user s guide 241
- Label description 241
- The following table describes the labels in this screen 241
- Cpu protection configuration 242
- Errdisable detect screen 242
- Chapter 29 error disable 243
- Cpu protection 243
- Errdisable detect 243
- Errdisable screen to display the screen as shown 243
- Error disable detect configuration 243
- Gs1920 series user s guide 243
- Label description 243
- The following table describes the labels in this screen 243
- Error disable recovery configuration 244
- Chapter 29 error disable 245
- Errdisable recovery 245
- Gs1920 series user s guide 245
- Label description 245
- The following table describes the labels in this screen 245
- Configuring private vlan 246
- Private vlan 246
- Private vlan overview 246
- Chapter 30 private vlan 247
- Gs1920 series user s guide 247
- Label description 247
- Private vlan 247
- The following table describes the labels in this screen 247
- Configuring green ethernet 248
- Green ethernet 248
- Green ethernet overview 248
- Chapter 31 green ethernet 249
- Green ethernet 249
- Gs1920 series user s guide 249
- Label description 249
- The following table describes the labels in this screen 249
- Link layer discovery protocol lldp 250
- Lldp overview 250
- Lldp med overview 251
- Lldp screens 252
- Lldp local status 253
- Chapter 32 link layer discovery protocol lldp 254
- Gs1920 series user s guide 254
- Label description 254
- Lldp local port status detail 254
- Lldp local status 254
- Lldp local status and then click a port number for example 1 port in the local port column to display the screen as shown next 254
- The following table describes the labels in this screen 254
- Chapter 32 link layer discovery protocol lldp 257
- Gs1920 series user s guide 257
- Label description 257
- Lldp local port status detail 257
- The following table describes the labels in this screen 257
- Chapter 32 link layer discovery protocol lldp 258
- Gs1920 series user s guide 258
- Label description 258
- Lldp local port status detail 258
- Lldp remote status 258
- Lldp remote status click here to display the screen as shown next 258
- The following table describes the labels in this screen 258
- Lldp remote port status detail 259
- Chapter 32 link layer discovery protocol lldp 260
- Gs1920 series user s guide 260
- Label description 260
- Lldp remote port status detail basic tlv 260
- The following table describes the labels in basic tlv part of the screen 260
- Chapter 32 link layer discovery protocol lldp 261
- Dot 1 and dot3 tlv 261
- Gs1920 series user s guide 261
- Label description 261
- Lldp remote port status detail dot1 and dot3 tlv 261
- The following table describes the labels in the dot1 and dot3 parts of the screen 261
- Chapter 32 link layer discovery protocol lldp 262
- Gs1920 series user s guide 262
- Label description 262
- Lldp remote port status detail dot1 and dot3 tlv 262
- Chapter 32 link layer discovery protocol lldp 264
- Gs1920 series user s guide 264
- Label description 264
- Lldp remote port status detail med tlv 264
- The following table describes the labels in the med tlv part of the screen 264
- Chapter 32 link layer discovery protocol lldp 265
- Gs1920 series user s guide 265
- Label description 265
- Lldp configuration 265
- Lldp configuration click here to display the screen as shown next 265
- Lldp remote port status detail med tlv 265
- Chapter 32 link layer discovery protocol lldp 266
- Gs1920 series user s guide 266
- Label description 266
- Lldp configuration 266
- The following table describes the labels in this screen 266
- Basic tlv setting 267
- Basic tlv setting to display the screen as shown next 267
- Chapter 32 link layer discovery protocol lldp 267
- Gs1920 series user s guide 267
- Label description 267
- Lldp configuration 267
- Lldp configuration basic tlv setting 267
- The following table describes the labels in this screen 267
- Chapter 32 link layer discovery protocol lldp 268
- Gs1920 series user s guide 268
- Label description 268
- Lldp configuraion basic org specific tlv setting 268
- Org specific tlv setting 268
- Org specific tlv setting to display the screen as shown next 268
- The following table describes the labels in this screen 268
- Chapter 32 link layer discovery protocol lldp 269
- Gs1920 series user s guide 269
- Label description 269
- Lldp med configuration 269
- Lldp med configuration click here to display the screen as shown next 269
- Org specific tlv setting 269
- The following table describes the labels in this screen 269
- Chapter 32 link layer discovery protocol lldp 270
- Gs1920 series user s guide 270
- Label description 270
- Lldp med network policy 270
- Lldp med network policy click here to display the screen as shown next 270
- The following table describes the labels in this screen 270
- Lldp med location 271
- Chapter 32 link layer discovery protocol lldp 272
- Gs1920 series user s guide 272
- Label description 272
- Lldp med location 272
- The following table describes the labels in this screen 272
- Chapter 32 link layer discovery protocol lldp 273
- Gs1920 series user s guide 273
- Label description 273
- Lldp med location 273
- Configuring static routing 274
- Static route 274
- Static route overview 274
- Static routing 274
- What you can do 274
- Chapter 33 static route 275
- Gs1920 series user s guide 275
- Ipv4 static route 275
- Label description 275
- The following table describes the related labels you use to create a static route 275
- Chapter 33 static route 276
- Gs1920 series user s guide 276
- Ipv4 static route continued 276
- Label description 276
- Differentiated services 277
- Differentiated services overview 277
- What you can do 277
- What you need to know 277
- Activating diffserv 278
- Diffserv network example 278
- P platinum g gold s silver b bronze 278
- Chapter 34 differentiated services 279
- Diffserv 279
- Dscp to ieee 802 p priority settings 279
- Gs1920 series user s guide 279
- Label description 279
- Table 134 default dscp ieee 802 p mapping 279
- The following table describes the labels in this screen 279
- The following table shows the default dscp to ieee802 p mapping 279
- You can configure the dscp to ieee 802 p mapping to allow the switch to prioritize all traffic based on the incoming dscp value according to the diffserv to ieee 802 p mapping table 279
- Configuring dscp settings 280
- Dhcp overview 281
- What you can do 281
- What you need to know 281
- Dhcp configuration 282
- Dhcp relay 282
- Dhcp relay agent information 282
- Dhcpv4 relay 283
- Dhcpv4 relay agent information 283
- Dhcpv4 status 283
- A dhcp relay agent information option has the following format 284
- Chapter 35 dhcp 284
- Dhcpv4 in the navigation panel and click the option 82 profile link to display the screen as shown 284
- Dhcpv4 option 82 profile 284
- Dhcpv4 relay agent information format 284
- Gs1920 series user s guide 284
- I1 i2 and in are dhcp relay agent sub options which contain additional information about the dhcp client you need to define at least one sub option 284
- Sub option format 284
- Table 138 dhcp relay agent information option format 284
- Table 139 dhcp relay agent circuit id sub option format 284
- Table 140 dhcp relay agent remote id sub option format 284
- The 1 in the first field identifies this as an agent circuit id sub option and 2 identifies this as an agent remote id sub option the next field specifies the length of the field 284
- There are two types of sub option agent circuit id sub option and agent remote id sub option they have the following formats 284
- Chapter 35 dhcp 285
- Gs1920 series user s guide 285
- Label description 285
- Option 82 profile 285
- The following table describes the labels in this screen 285
- Chapter 35 dhcp 286
- Configuring dhcpv4 global relay 286
- Dhcpv4 in the navigation panel and click the global link to display the screen as shown 286
- Global 286
- Gs1920 series user s guide 286
- Label description 286
- Option 82 profile continued 286
- Chapter 35 dhcp 287
- Dhcpv4 global relay port configure 287
- Global 287
- Gs1920 series user s guide 287
- Label description 287
- The following table describes the labels in this screen 287
- 68 00 dhcp server 288
- Chapter 35 dhcp 288
- Configure the dhcp relay screen as shown make sure you select a dhcp option 82 profile default1 in this example to set the switch to send additional information such as the vlan id together with the dhcp requests to the dhcp server this allows the dhcp server to assign the appropriate ip address according to the vlan id 288
- Figure 210 global dhcp relay network example 288
- Global dhcp relay configuration example 288
- Gs1920 series user s guide 288
- Label description 288
- Port continued 288
- The follow figure shows a network example where the switch is used to relay dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server that services the dhcp clients in both domains 288
- Vlan1 vlan2 288
- Configuring dhcpv4 vlan settings 289
- Example 289
- Note you must set up a management ip address for each vlan that you want to configure dhcp settings for on the switch 289
- Chapter 35 dhcp 290
- Gs1920 series user s guide 290
- Label description 290
- The following table describes the labels in this screen 290
- Chapter 35 dhcp 291
- Dhcpv4 vlan port configure 291
- Gs1920 series user s guide 291
- Label description 291
- The following table describes the labels in this screen 291
- Vlan continued 291
- 6 0 00 292
- Chapter 35 dhcp 292
- Example dhcp relay for two vlans 292
- Figure 214 dhcp relay for two vlans 292
- For the example network configure the vlan setting screen as shown 292
- Gs1920 series user s guide 292
- Label description 292
- Port continued 292
- The following example displays two vlans vids 1 and 2 for a campus network two dhcp servers are installed to serve each vlan the system is set up to forward dhcp requests from the dormitory rooms vlan 1 to the dhcp server with an ip address of 192 68 00 requests from the academic buildings vlan 2 are sent to the other dhcp server with an ip address of 172 6 0 00 292
- Dhcpv6 relay 293
- Example 293
- Chapter 35 dhcp 294
- Dhcpv6 294
- Gs1920 series user s guide 294
- Label description 294
- The following table describes the labels in this screen 294
- Arp overview 295
- Arp setup 295
- What you can do 295
- What you need to know 295
- Arp request 296
- Gratuitous arp 296
- Arp learning 297
- Arp setup 297
- Arp learning 298
- Chapter 36 arp setup 298
- Gs1920 series user s guide 298
- Label description 298
- The following table describes the labels in this screen 298
- Maintenance 299
- Overview 299
- The maintenance screen 299
- What you can do 299
- Chapter 37 maintenance 300
- Click config 1 to save the current configuration settings permanently to configuration 1 on the switch 300
- Click ok to reset all switch configurations to the factory defaults 300
- Figure 220 load factory default start 300
- Follow the steps below to reset the switch back to the factory defaults 300
- Gs1920 series user s guide 300
- In the maintenance screen click the click here button next to load factory default to clear all switch configuration information you configured and return to the factory defaults 300
- In the web configurator click the save button in the top of the screen to make the changes take effect if you want to access the switch web configurator again you may need to change the ip address of your computer to be in the same subnet as that of the default switch ip address 192 68 300
- Label description 300
- Load factory default 300
- Maintenance continued 300
- Note make sure to click the save button in any screen to save your settings to the current configuration on the switch 300
- Save configuration 300
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 301
- Firmware upgrade 301
- Note clicking the apply or add button does not save the changes permanently all unsaved changes are erased after you reboot the switch 301
- Reboot system 301
- Chapter 37 maintenance 302
- Firmware upgrade 302
- Gs1920 series user s guide 302
- Label description 302
- Maintenance 302
- Restore a configuration file 302
- The following table describes the labels in this screen 302
- Use this screen to restore a previously saved configuration from your computer to the switch using the restore configuration screen 302
- Backup a configuration file 303
- Tech support 303
- Chapter 37 maintenance 304
- Gs1920 series user s guide 304
- Tech support 304
- You may need wordpad or similar software to see the log report correctly the table below describes the fields in the above screen 304
- Chapter 37 maintenance 305
- Example ftp commands 305
- File type internal name external name description 305
- Filename conventions 305
- Ftp command line 305
- Get config config cfg 305
- Gs1920 series user s guide 305
- Put firmware bin ras 0 305
- Table 151 filename conventions 305
- Tech support 305
- Technical reference 305
- The configuration file also known as the romfile or rom contains the factory default settings in the screens such as password switch setup ip setup and so on once you have customized the switch s settings they can be saved back to your computer under a filename of your choosing 305
- This is a sample ftp session saving the current configuration to a file called config cfg on your computer 305
- This is a sample ftp session showing the transfer of the computer file firmware bin to the switch 305
- This section provides technical background information on the topics discussed in this chapter 305
- This section shows some examples of uploading to or downloading files from the switch using ftp commands first understand the filename conventions 305
- Zynos zyxel network operating system sometimes referred to as the ras file is the system firmware and has a bin filename extension 305
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 306
- Ftp command line procedure 306
- Gui based ftp clients 306
- Ftp restrictions 307
- Access control 308
- Access control overview 308
- The access control main screen 308
- What you can do 308
- Access control 309
- Chapter 38 access control 309
- Configuring snmp 309
- Gs1920 series user s guide 309
- Label description 309
- Snmp to view the screen as shown 309
- The following table describes the labels in this screen 309
- Use this screen to configure your snmp settings 309
- Chapter 38 access control 310
- Configuring snmp trap group 310
- From the snmp screen click trap group to view the screen as shown use the trap group screen to specify the types of snmp traps that should be sent to each snmp manager 310
- Gs1920 series user s guide 310
- Label description 310
- Snmp continued 310
- Trap group 310
- Chapter 38 access control 311
- Enabling disabling sending of snmp traps on a port 311
- Gs1920 series user s guide 311
- Label description 311
- The following table describes the labels in this screen 311
- Trap group 311
- Trap group screen click port to view the screen as shown use this screen to set whether a trap received on the port s would be sent to the snmp manager 311
- Configuring snmp user 312
- Chapter 38 access control 313
- Gs1920 series user s guide 313
- Label description 313
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 313
- User continued 313
- Note it is highly recommended that you change the default administrator password 1234 314
- Setting up login account s 314
- Setting up login accounts 314
- Chapter 38 access control 315
- Gs1920 series user s guide 315
- Label description 315
- Logins continued 315
- Service access control 315
- Service access control allows you to decide what services you may use to access the switch you may also change the default service port and configure trusted computer s for each service in the remote management screen discussed later click access control to go back to the main access control screen 315
- Service port access control 315
- Chapter 38 access control 316
- Gs1920 series user s guide 316
- Label description 316
- Remote management 316
- Remote management to view the screen as shown next 316
- Service access control 316
- The following table describes the fields in this screen 316
- Use this screen to specify a group of one or more trusted computers from which an administrator may use a service to manage the switch 316
- You can specify a group of one or more trusted computers from which an administrator may use a service to manage the switch click access control to return to the access control screen 316
- Chapter 38 access control 317
- Gs1920 series user s guide 317
- Label description 317
- Remote management 317
- The following table describes the labels in this screen 317
- About snmp 318
- Technical reference 318
- Snmp traps 319
- Snmp v3 and security 319
- Supported mibs 319
- Chapter 38 access control 320
- Gs1920 series user s guide 320
- Https hypertext transfer protocol over secure socket layer or http over ssl is a web protocol that encrypts and decrypts web pages secure socket layer ssl is an application level protocol that enables secure transactions of data by ensuring confidentiality an unauthorized party cannot read the transferred data authentication one party can identify the other party and data integrity you know if data has been changed 320
- Introduction to https 320
- Option object label object id description 320
- Table 161 snmp system traps continued 320
- Https example 321
- Internet explorer warning messages 321
- Note if you disable http in the service access control screen then the switch blocks all http connection attempts 321
- Example 322
- Mozilla firefox warning messages 323
- Example 324
- Internet explore 324
- The main screen 324
- Example 325
- Internet explore 325
- Diagnostic 326
- Overview 326
- Chapter 39 diagnostic 327
- Diagnostic 327
- Gs1920 series user s guide 327
- Label description 327
- The following table describes the labels in this screen 327
- Syslog 328
- Syslog overview 328
- Syslog setup 328
- What you can do 328
- Chapter 40 syslog 329
- Gs1920 series user s guide 329
- Label description 329
- Syslog 329
- Syslog server setup 329
- Syslog server setup to view the screen as shown next use this screen to configure a list of external syslog servers 329
- The following table describes the labels in this screen 329
- Chapter 40 syslog 330
- Gs1920 series user s guide 330
- Label description 330
- Syslog server setup 330
- The following table describes the labels in this screen 330
- Cluster management 331
- Cluster management overview 331
- Cluster management status 332
- Note a cluster can only have one manager 332
- What you can do 332
- Clustering management configuration 333
- Example 333
- Chapter 41 cluster management 334
- Configuration 334
- Gs1920 series user s guide 334
- Label description 334
- The following table describes the labels in this screen 334
- Cluster member switch management 335
- Example 335
- Technical reference 335
- Uploading firmware to a cluster member switch 335
- Mac table 337
- Mac table overview 337
- What you can do 337
- What you need to know 337
- Viewing the mac table 338
- Chapter 42 mac table 339
- Gs1920 series user s guide 339
- Label description 339
- Mac table 339
- The following table describes the labels in this screen 339
- Arp table 340
- Overview 340
- Viewing the arp table 340
- What you can do 340
- What you need to know 340
- Arp table 341
- Chapter 43 arp table 341
- Gs1920 series user s guide 341
- Label description 341
- The following table describes the labels in this screen 341
- Path mtu overview 342
- Path mtu table 342
- Viewing the path mtu table 342
- Configure clone 343
- Overview 343
- Chapter 45 configure clone 344
- Configure clone 344
- Gs1920 series user s guide 344
- Label description 344
- The following table describes the labels in this screen 344
- Chapter 45 configure clone 345
- Configure clone continued 345
- Gs1920 series user s guide 345
- Label description 345
- Ipv6 neighbor table overview 346
- Neighbor table 346
- Viewing the ipv6 neighbor table 346
- Chapter 46 neighbor table 347
- Gs1920 series user s guide 347
- Label description 347
- Neighbor table continued 347
- Power hardware connections and leds 348
- Troubleshooting 348
- I cannot see or access the login screen in the web configurator 349
- I forgot the ip address for the switch 349
- I forgot the username and or password 349
- Switch access and login 349
- I can see the login screen but i cannot log in to the switch 350
- I cannot see some of advanced application submenus at the bottom of the navigation panel 350
- Pop up windows javascripts and java permissions 350
- There is unauthorized access to my switch 350
- I lost my configuration settings after i restart the switch 351
- Switch configuration 351
- Customer support 353
- Ppendi 353
- Austria 354
- Belarus 354
- Europe 354
- Malaysia 354
- Pakistan 354
- Philipines 354
- Singapore 354
- Taiwan 354
- Thailand 354
- Vietnam 354
- Belgium 355
- Bulgaria 355
- Denmark 355
- Estonia 355
- Finland 355
- France 355
- Germany 355
- Hungary 355
- Latvia 355
- Lithuania 356
- Netherlands 356
- Norway 356
- Poland 356
- Romania 356
- Russia 356
- Slovakia 356
- Sweden 356
- Switzerland 356
- Argentina 357
- Ecuador 357
- Latin america 357
- Middle east 357
- North america 357
- Turkey 357
- Ukraine 357
- Africa 358
- Australia 358
- Oceania 358
- South africa 358
- Common services 359
- Ppendi 359
- Appendix b common services 360
- Gs1920 series user s guide 360
- Name protocol port s description 360
- Table 175 commonly used services continued 360
- Appendix b common services 361
- Gs1920 series user s guide 361
- Name protocol port s description 361
- Table 175 commonly used services continued 361
- Ppendi 362
- Global address 363
- Loopback address 363
- Multicast address 363
- Unspecified address 363
- Eui 64 364
- Interface id 364
- Stateless autoconfiguration 364
- Subnet masking 364
- Dhcp relay agent 365
- Dhcpv6 365
- Identity association 365
- Rebind 365
- Renew rebind 365
- Renew to s1 365
- Icmpv6 366
- Ipv6 cache 366
- Neighbor discovery protocol ndp 366
- Prefix delegation 366
- Example enabling dhcpv6 on windows xp 367
- Example enabling ipv6 on windows xp 2003 vista 367
- Example enabling ipv6 on windows 7 368
- Legal information 370
- Ppendi 370
- Appendix d legal information 371
- Ce marking 371
- Gs1920 series user s guide 371
- Registration 371
- Safety warnings 371
- Zyxel limited warranty 371
- Environmental product declaration 372
- Numerics 373
Похожие устройства
- Zyxel GS1920-48 Технические характеристики
- Gorenje ggs 64 ab Инструкция по эксплуатации
- Zyxel XS1920-12 Инструкция по эксплуатации
- Grillver партикс air 500 Инструкция по эксплуатации
- Zyxel GS1100-16 Инструкция по эксплуатации
- Zyxel GS1100-16 Технические характеристики
- Zyxel ES1100-24E Инструкция по эксплуатации
- Zyxel ES1100-24E Технические характеристики
- Zyxel ES1100-24G Инструкция по эксплуатации
- Zyxel ES1100-24G Технические характеристики
- Zyxel GS1100-24 Инструкция по эксплуатации
- Zyxel GS1100-24 Технические характеристики
- Zyxel XGS1910-24 Инструкция по эксплуатации
- Zyxel XGS1910-24 Технические характеристики
- Zyxel XGS1910-48 Инструкция по эксплуатации
- Zyxel XGS1910-48 Технические характеристики
- Grillver партикс air 730 Инструкция по эксплуатации
- Grillver файркрафт стандарт Инструкция по эксплуатации
- Grillver берель 400 к Инструкция по эксплуатации
- Grillver стандарт air Инструкция по эксплуатации