Zyxel XS1920-12 Инструкция по эксплуатации онлайн
Quick Start Guide
www.zyxel.com
XS1920 Series
10 GbE Web-managed Switches
Version 4.20
Edition 2, 1/2015
Copyright © 2015 ZyXEL Communications Corporation
User’s Guide
Default Login Details
LAN IP Address http://192.168.1.1
User Name admin
Password 1234
Содержание
- Default login details 1
- Gbe web managed switches 1
- Quick start guide 1
- User s guide 1
- Xs1920 series 1
- Important 2
- Keep this guide for future reference 2
- Read carefully before use 2
- Contents overview 3
- Technical reference 1 3
- User s guide 7 3
- Chapter 1 getting to know your switch 8 5
- Chapter 2 hardware installation and connection 2 5
- Chapter 3 hardware panels 5 5
- Contents overview 5
- Part i user s guide 17 5
- Part ii technical reference 31 5
- Table of contents 5
- Chapter 4 the web configurator 2 6
- Chapter 5 initial setup example 9 6
- Chapter 6 tutorials 3 6
- Chapter 7 zon utility zon neighbor management and port status 1 6
- Chapter 8 basic setting 8 6
- Chapter 9 vlan 6 7
- Chapter 10 static mac forward setup 08 8
- Chapter 11 static multicast forward setup 110 8
- Chapter 12 filtering 113 8
- Chapter 13 spanning tree protocol 115 8
- Chapter 14 bandwidth control 34 8
- Chapter 15 broadcast storm control 36 9
- Chapter 16 mirroring 38 9
- Chapter 17 link aggregation 40 9
- Chapter 18 port authentication 48 9
- Chapter 19 port security 56 9
- Chapter 20 time range 60 9
- Chapter 21 classifier 62 10
- Chapter 22 policy rule 71 10
- Chapter 23 queuing method 75 10
- Chapter 24 multicast 78 10
- Chapter 25 aaa 01 11
- Chapter 26 ip source guard 12 11
- Chapter 27 loop guard 35 11
- Chapter 28 layer 2 protocol tunneling 39 12
- Chapter 29 pppoe 43 12
- Chapter 30 error disable 52 12
- Chapter 31 mac pinning 58 12
- Chapter 32 private vlan 60 12
- Chapter 33 green ethernet 64 12
- Chapter 34 link layer discovery protocol lldp 66 13
- Chapter 35 static route 91 13
- Chapter 36 differentiated services 96 13
- Chapter 37 dhcp 00 13
- Chapter 38 arp setup 13 14
- Chapter 39 maintenance 18 14
- Chapter 40 access control 27 14
- Chapter 41 diagnostic 44 15
- Chapter 42 syslog 46 15
- Chapter 43 cluster management 49 15
- Chapter 44 mac table 55 15
- Chapter 45 ip table 58 15
- User s guide 17
- Backbone application 18
- Getting to know your switch 18
- Introduction 18
- Bridging example 19
- High performance switching example 19
- Ieee 802 q vlan application examples 20
- Tag based vlan example 20
- Good habits for managing the switch 21
- Ways to manage the switch 21
- Desktop installation procedure 22
- Hardware installation and connection 22
- Installation scenarios 22
- Mounting the switch on a rack 22
- Rack mounted installation requirements 22
- Attaching the mounting brackets to the switch 23
- Mounting the switch on a rack 23
- Front panel 25
- Gigabit ethernet ports 25
- Hardware panels 25
- Default ethernet negotiation settings 26
- Sfp sfp slots 26
- Sfp slots 26
- Transceiver installation 26
- Transceiver removal 27
- Note make sure you are using the correct power source as shown on the panel 28
- Power connector 28
- Rear panel 28
- After you connect the power to the switch view the leds to ensure proper functioning of the switch and as an aid in troubleshooting 29
- Chapter 3 hardware panels 29
- If you forget your password or cannot access the web configurator you will need to use the reset button on the device to reload the factory default configuration file this means that you will lose all configurations that you had previously and the default switch ip address user name and password will be reset to 192 68 admin and 1234 respectively 29
- Led color status description 29
- Reset to factory defaults 29
- Table 3 led descriptions 29
- Xs1920 series user s guide 29
- Note if you want to access the switch web configurator again you may need to change the ip address of your computer to be in the same subnet as that of the default switch ip address 192 68 30
- Technical reference 31
- Overview 32
- System login 32
- The web configurator 32
- B c d e 33
- The status screen 33
- Chapter 4 the web configurator 35
- Link description 35
- Table 5 navigation panel links continued 35
- Xs1920 series user s guide 35
- Chapter 4 the web configurator 36
- Link description 36
- Table 5 navigation panel links continued 36
- Xs1920 series user s guide 36
- Change your password 37
- Note use the save link when you are done with a configuration session 37
- Saving your configuration 37
- Switch lockout 37
- Logging out of the web configurator 38
- Note be careful not to lock yourself and others out of the switch 38
- Resetting the switch 38
- Creating a vlan 39
- Initial setup example 39
- Overview 39
- Note the vlan group id field in this screen and the vid field in the ip setup screen refer to the same vlan id 40
- Setting port vid 40
- Configuring switch management ip address 41
- How to use dhcp snooping on the switch 43
- Overview 43
- Tutorials 43
- Creating a vlan 47
- Dhcp relay tutorial introduction 47
- Dhcp server port 2 pvid 102 47
- How to use dhcp relay on the switch 47
- Vlan 102 47
- Configuring dhcp relay 49
- Troubleshooting 50
- Overview 51
- What you can do 51
- Zon utility zon neighbor management and port status 51
- Zyxel one network zon utility screen 51
- Neighbor screen 52
- Chapter 7 zon utility zon neighbor management and port status 53
- Figure 36 status 53
- Label description 53
- Neighbor 53
- Port status summary 53
- The following table describes the fields in the above screen 53
- To view the port statistics click status in all web configurator screens to display the status screen as shown next 53
- Xs1920 series user s guide 53
- Chapter 7 zon utility zon neighbor management and port status 54
- Click a number in the port column in the status screen to display individual port statistics use this screen to check status and detailed performance data about an individual port on the switch 54
- Label description 54
- Status port details 54
- Table 8 status 54
- The following table describes the labels in this screen 54
- Xs1920 series user s guide 54
- Chapter 7 zon utility zon neighbor management and port status 55
- Label description 55
- Port details 55
- Table 9 status port details 55
- The following table describes the labels in this screen 55
- Xs1920 series user s guide 55
- Chapter 7 zon utility zon neighbor management and port status 56
- Label description 56
- Table 9 status port details continued 56
- Xs1920 series user s guide 56
- Chapter 7 zon utility zon neighbor management and port status 57
- Label description 57
- Table 9 status port details continued 57
- Xs1920 series user s guide 57
- Basic setting 58
- Overview 58
- System information 58
- What you can do 58
- Chapter 8 basic setting 59
- Label description 59
- System info 59
- The following table describes the labels in this screen 59
- Xs1920 series user s guide 59
- Chapter 8 basic setting 60
- General setup 60
- General setup in the navigation panel to display the screen as shown 60
- Label description 60
- System info continued 60
- Xs1920 series user s guide 60
- Chapter 8 basic setting 61
- General setup 61
- Label description 61
- The following table describes the labels in this screen 61
- Xs1920 series user s guide 61
- A vlan virtual local area network allows a physical network to be partitioned into multiple logical networks devices on a logical network belong to one group a device can belong to more than one group with vlan a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router 62
- Chapter 8 basic setting 62
- General setup continued 62
- In mtu multi tenant unit applications vlan is vital in providing isolation and security among the subscribers when properly configured vlan prevents one subscriber from accessing the network resources of another on the same lan thus a user will not see the printers and hard disks of another user in the same building 62
- Introduction to vlans 62
- Label description 62
- Xs1920 series user s guide 62
- Chapter 8 basic setting 63
- Label description 63
- Note vlan is unidirectional it only governs outgoing traffic 63
- See chapter 9 on page 86 for information on port based and 802 q tagged vlans 63
- Switch setup 63
- Switch setup in the navigation panel to display the screen as shown the vlan setup screens change depending on whether you choose 802 q or port based in the vlan type field in this screen refer to chapter 9 on page 86 for more information on vlan 63
- Switch setup screen 63
- The following table describes the labels in this screen 63
- Vlan also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain in traditional switched environments all broadcast packets go to each and every individual port with vlan all broadcasts are confined to a specific broadcast domain 63
- Xs1920 series user s guide 63
- Chapter 8 basic setting 64
- Label description 64
- Switch setup continued 64
- Xs1920 series user s guide 64
- Ip setup 65
- Ip status 65
- Ip status details 65
- Note you must configure a vlan first 65
- Dynamic ip details dhcp 66
- Static ip details 66
- Chapter 8 basic setting 67
- Ip configuration 67
- Ip configuration to display the next screen 67
- Ip interfaces 67
- Ip status_details dynamic continued 67
- Label description 67
- On the switch an ip address is not bound to any physical ports since each ip address on the switch must be in a separate subnet the configured ip address is also known as ip interface or routing domain in addition this allows routing between subnets based on the ip address without additional routers 67
- The switch needs an ip address for it to be managed over the network the factory default ip address is 192 68 the subnet mask specifies the network number portion of an ip address the factory default subnet mask is 255 55 55 67
- Use this screen to configure ip related settings 67
- Xs1920 series user s guide 67
- You can configure multiple routing domains on the same vlan as long as the ip address ranges for the domains do not overlap to change the ip address of the switch in a routing domain simply add a new routing domain entry with a different ip address in the same subnet 67
- You can configure up to 32 ip domains which are used to access and manage the switch from the ports belonging to the pre defined vlan s 67
- Chapter 8 basic setting 68
- Ip configuration 68
- Label description 68
- The following table describes the labels in this screen 68
- Xs1920 series user s guide 68
- Chapter 8 basic setting 69
- Ip configuration continued 69
- Label description 69
- Note deleting all ip subnets locks you out of the switch 69
- Port setup 69
- Port setup in the navigation panel to display the configuration screen 69
- Xs1920 series user s guide 69
- Chapter 8 basic setting 70
- Label description 70
- Note changes in this row are copied to all the ports as soon as you make them 70
- Note due to space limitation the port name may be truncated in some web configurator screens 70
- Port setup 70
- The following table describes the labels in this screen 70
- Xs1920 series user s guide 70
- An ipv6 address is configured on a per interface basis the interface can support virtual interface for example a vlan the switch supports the vlan interface type for ipv6 at the time of writing 71
- Chapter 8 basic setting 71
- Interface setup 71
- Interface setup in the navigation panel to display the configuration screen 71
- Label description 71
- The following table describes the labels in this screen 71
- Xs1920 series user s guide 71
- Ipv6 interface status 72
- Chapter 8 basic setting 73
- Ipv6 interface status 73
- Label description 73
- The following table describes the labels in this screen 73
- Xs1920 series user s guide 73
- Chapter 8 basic setting 74
- Ipv6 interface status continued 74
- Label description 74
- Xs1920 series user s guide 74
- Chapter 8 basic setting 75
- Ipv6 configuration 75
- Ipv6 interface status continued 75
- Ipv6 screen the following screen opens 75
- Label description 75
- The following table describes the labels in this screen 75
- Xs1920 series user s guide 75
- Chapter 8 basic setting 76
- Ipv6 configuration continued 76
- Ipv6 global setup 76
- Ipv6 interface setup 76
- Label description 76
- The following table describes the labels in this screen 76
- Use this screen to configure the global ipv6 settings click the link next to ipv6 global setup in the ipv6 configuration screen to display the screen as shown next 76
- Use this screen to turn on or off an ipv6 interface and enable stateless autoconfiguration on it click the link next to ipv6 interface setup in the ipv6 configuration screen to display the screen as shown next 76
- Xs1920 series user s guide 76
- A link local address uniquely identifies a device on the local network the lan it is similar to a private ip address in ipv4 you can have the same link local address on multiple interfaces on a device a link local unicast address has a predefined prefix of fe80 10 77
- Chapter 8 basic setting 77
- Ipv6 interface setup 77
- Ipv6 link local address setup 77
- Label description 77
- The following table describes the labels in this screen 77
- Use this screen to configure the interface s link local address and default gateway click the link next to ipv6 link local address setup in the ipv6 configuration screen to display the screen as shown next 77
- Xs1920 series user s guide 77
- Chapter 8 basic setting 78
- Ipv6 global address setup 78
- Ipv6 link local address setup 78
- Label description 78
- The following table describes the labels in this screen 78
- Use this screen to configure the interface s ipv6 global address click the link next to ipv6 global address setup in the ipv6 configuration screen to display the screen as shown next 78
- Xs1920 series user s guide 78
- Chapter 8 basic setting 79
- Ipv6 global address setup 79
- Ipv6 neighbor discovery setup 79
- Label description 79
- The following table describes the labels in this screen 79
- Use this screen to configure neighbor discovery settings for each interface click the link next to ipv6 neighbor discovery setup in the ipv6 configuration screen to display the screen as shown next 79
- Xs1920 series user s guide 79
- Chapter 8 basic setting 80
- Ipv6 neighbor discovery setup 80
- Ipv6 router discovery setup 80
- Label description 80
- The following table describes the labels in this screen 80
- Use this screen to configure router discovery settings for each interface click the link next to ipv6 router discovery setup in the ipv6 configuration screen to display the screen as shown next 80
- Xs1920 series user s guide 80
- Chapter 8 basic setting 81
- Ipv6 router discovery setup 81
- Label description 81
- Note the minimum time interval cannot be greater than three quarters of the maximum time interval 81
- The following table describes the labels in this screen 81
- Xs1920 series user s guide 81
- Chapter 8 basic setting 82
- Ipv6 prefix setup 82
- Ipv6 router discovery setup continued 82
- Label description 82
- The following table describes the labels in this screen 82
- Use this screen to configure the switch s ipv6 prefix list for each interface click the link next to ipv6 prefix setup in the ipv6 configuration screen to display the screen as shown next 82
- Xs1920 series user s guide 82
- Chapter 8 basic setting 83
- Ipv6 neighbor setup 83
- Ipv6 prefix setup continued 83
- Label description 83
- Use this screen to create a static ipv6 neighbor entry in the switch s ipv6 neighbor table to store the neighbor information permanently click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next 83
- Xs1920 series user s guide 83
- Chapter 8 basic setting 84
- Dhcpv6 client setup 84
- Ipv6 neighbor setup 84
- Label description 84
- The following table describes the labels in this screen 84
- Use this screen to configure the switch s dhcp settings when it is acting as a dhcpv6 client click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next 84
- Xs1920 series user s guide 84
- Chapter 8 basic setting 85
- Dhcpv6 client setup 85
- Label description 85
- The following table describes the labels in this screen 85
- Xs1920 series user s guide 85
- Overview 86
- What you can do 86
- What you need to know 86
- Automatic vlan registration 87
- Forwarding tagged and untagged frames 87
- Garp timers 87
- Chapter 9 vlan 88
- Enable vlan trunking on a port to allow frames belonging to unknown vlan groups to pass through that port this is useful if you want to set up vlan groups on end devices without having to configure the same vlan groups on intermediary devices 88
- Figure 60 port vlan trunking 88
- Gvrp garp vlan registration protocol is a registration protocol that defines a way for switches to register necessary vlan members on ports across the network enable this function to permit vlan groups beyond the local switch 88
- Please refer to the following table for common ieee 802 q vlan terminology 88
- Port vlan trunking 88
- Refer to the following figure suppose you want to create vlan groups 1 and 2 v1 and v2 on devices a and b without vlan trunking you must configure vlan groups 1 and 2 on all intermediary switches c d and e otherwise they will drop frames with unknown vlan group tags however with vlan trunking enabled on a port s in each intermediary switch you only need to create vlan groups in the end devices a and b c d and e automatically allow frames with vlan group tags 1 and 2 vlan groups that are unknown to those switches to pass through their vlan trunking port s 88
- Table 31 ieee 802 q vlan terminology 88
- Vlan parameter term description 88
- Xs1920 series user s guide 88
- Select the vlan type 89
- Static vlan 89
- Vlan status 89
- Chapter 9 vlan 90
- Label description 90
- The following table describes the labels in this screen 90
- Use this screen to view detailed port settings and status of the vlan group click on an index number in the vlan status screen to display vlan details 90
- Vlan detail 90
- Vlan details 90
- Vlan vlan status continued 90
- Xs1920 series user s guide 90
- Chapter 9 vlan 91
- Click private vlan status in the vlan status screen to display the screen as shown next 91
- Label description 91
- Private vlan 91
- Private vlan status 91
- The following table describes the labels in this screen 91
- Vlan detail continued 91
- Xs1920 series user s guide 91
- Chapter 9 vlan 92
- Configure a static vlan 92
- Label description 92
- Private vlan status continued 92
- The following table describes the labels in the above screen 92
- Use this screen to configure a static vlan for the switch click static vlan in the vlan status screen to display the screen as shown next 92
- Vlan configuration 92
- Vlan configuration to see the following screen 92
- Xs1920 series user s guide 92
- Chapter 9 vlan 93
- Label description 93
- Static vlan setup 93
- The following table describes the related labels in this screen 93
- Xs1920 series user s guide 93
- Chapter 9 vlan 94
- Configure vlan port settings 94
- Label description 94
- Note changes in this row are copied to all the ports as soon as you make them 94
- Static vlan setup continued 94
- Use the vlan port setting screen to configure the static vlan ieee 802 q settings on a port click the vlan port setup link in the vlan status screen 94
- Xs1920 series user s guide 94
- Chapter 9 vlan 95
- Label description 95
- Note changes in this row are copied to all the ports as soon as you make them 95
- The following table describes the labels in this screen 95
- Vlan port setup 95
- Xs1920 series user s guide 95
- Chapter 9 vlan 96
- For example an isp internet services provider may divide different types of services it provides to customers into different ip subnets traffic for voice services is designated for ip subnet 172 6 24 video for 192 68 24 and data for 10 24 the switch can then be configured to group incoming traffic based on the source ip subnet of incoming frames 96
- Label description 96
- Subnet based vlans 96
- Subnet based vlans allow you to group traffic into logical vlans based on the source ip subnet you specify when a frame is received on a port the switch checks if a tag is added already and the ip subnet it came from the untagged packets from the same ip subnet are then placed in the same subnet based vlan one advantage of using subnet based vlans is that priority can be assigned to traffic from the same ip subnet 96
- Vlan port setup 96
- Xs1920 series user s guide 96
- You configure a subnet based vlan with priority 6 and vid of 100 for traffic received from ip subnet 172 6 24 voice services you also have a subnet based vlan with priority 5 and vid of 200 for traffic received from ip subnet 192 68 24 video services lastly you configure vlan with priority 3 and vid of 300 for traffic received from ip subnet 10 24 data services all untagged incoming frames will be classified based on their source ip subnet and prioritized accordingly that is video services receive the highest priority and data the lowest 96
- Configuring subnet based vlan 97
- Internet 97
- Note subnet based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 97
- Chapter 9 vlan 98
- Label description 98
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 98
- Protocol based vlans 98
- Protocol based vlans allow you to group traffic into logical vlans based on the protocol you specify when an upstream frame is received on a port configured for a protocol based vlan the switch checks if a tag is added already and its protocol the untagged packets of the same protocol are then placed in the same protocol based vlan one advantage of using protocol based vlans is that priority can be assigned to traffic of the same protocol 98
- Subnet based vlan setup 98
- The following table describes the labels in this screen 98
- Xs1920 series user s guide 98
- Configuring protocol based vlan 99
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 99
- Chapter 9 vlan 100
- Click voice vlan in the vlan configuration screen to display the configuration screen as shown 100
- Label description 100
- Note protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based vlans 100
- Protocol based vlan setup 100
- The following table describes the labels in this screen 100
- Voice vlan 100
- Voice vlan ensures that the sound quality of an ip phone is preserved from deteriorating when the data traffic on the switch ports is high it groups the voice traffic with defined priority into an assigned vlan which enables the separation of voice and data traffic coming onto the switch port 100
- Xs1920 series user s guide 100
- You can set priority level to the voice vlan and add mac address of ip phones from specific manufacturers by using its id from the organizationally unique identifiers oui 100
- Chapter 9 vlan 101
- Label description 101
- The following table describes the fields in the above screen 101
- Voice vlan setup 101
- Xs1920 series user s guide 101
- Label description 102
- Mac based vlan 102
- Chapter 9 vlan 103
- Label description 103
- Mac based vlan setup 103
- Note in screens such as ip setup and filtering that require a vid you must enter 1 as the vid 103
- Note when you activate port based vlan the switch uses a default vlan id of 1 you cannot change it 103
- Port based vlan setup 103
- Port based vlans are specific only to the switch on which they were created 103
- Port based vlans are vlans where the packet forwarding decision is based on the destination mac address and its associated port 103
- Port based vlans require allowed outgoing ports to be defined for each port therefore if you wish to allow two subscriber ports to talk to each other for example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports 103
- The following table describes the fields in the above screen 103
- The port based vlan setup screen is shown next the cpu management port forms a vlan with all ethernet ports 103
- Xs1920 series user s guide 103
- Port based vlan 104
- Chapter 9 vlan 105
- Figure 76 port based vlan setup port isolation 105
- Table 42 port based vlan setup label description 105
- The following table describes the labels in this screen 105
- Xs1920 series user s guide 105
- Create an ip based vlan example 106
- Technical reference 106
- Configuring static mac forwarding 108
- Overview 108
- Static mac forward setup 108
- What you can do 108
- Chapter 10 static mac forward setup 109
- Label description 109
- Note static mac addresses do not age out 109
- Static mac forwarding 109
- The following table describes the labels in this screen 109
- Xs1920 series user s guide 109
- Static multicast forward setup 110
- Static multicast forward setup overview 110
- What you can do 110
- What you need to know 110
- Configuring static multicast forwarding 111
- Chapter 11 static multicast forward setup 112
- Label description 112
- Static multicast forwarding 112
- The following table describes the labels in this screen 112
- Xs1920 series user s guide 112
- Configure a filtering rule 113
- Filtering 113
- Filtering overview 113
- What you can do 113
- Chapter 12 filtering 114
- Filtering 114
- Label description 114
- The following table describes the related labels in this screen 114
- Xs1920 series user s guide 114
- Spanning tree protocol 115
- Spanning tree protocol overview 115
- What you can do 115
- What you need to know 115
- How stp works 116
- Note in this user s guide stp refers to both stp and rstp 116
- Stp terminology 116
- Multiple rstp 117
- Multiple stp 117
- Note each port can belong to one stp tree only 117
- Stp port states 117
- Spanning tree configuration 118
- Spanning tree protocol status screen 118
- Chapter 13 spanning tree protocol 119
- Configuration 119
- Configure rapid spanning tree protocol 119
- Label description 119
- Spanning tree protocol screen 119
- The following table describes the labels in this screen 119
- Xs1920 series user s guide 119
- 2 hello time 1 120
- Chapter 13 spanning tree protocol 120
- Configuration screen to enable rstp on the switch 120
- Label description 120
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 120
- Note changes in this row are copied to all the ports as soon as you make them 120
- The following table describes the labels in this screen 120
- Xs1920 series user s guide 120
- Chapter 13 spanning tree protocol 121
- Label description 121
- Note this screen is only available after you activate rstp on the switch 121
- Rapid spanning tree protocol status 121
- Rstp continued 121
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 115 for more information on rstp 121
- Status rstp 121
- The following table describes the labels in this screen 121
- Xs1920 series user s guide 121
- Configure multiple rapid spanning tree protocol 122
- Chapter 13 spanning tree protocol 123
- Configuration screen to enable mrstp on the switch 123
- Label description 123
- The following table describes the labels in this screen 123
- Xs1920 series user s guide 123
- 2 hello time 1 124
- Chapter 13 spanning tree protocol 124
- Label description 124
- Mrstp continued 124
- Multiple rapid spanning tree protocol status 124
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 124
- Note changes in this row are copied to all the ports as soon as you make them 124
- Note this screen is only available after you activate mrstp on the switch 124
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 115 for more information on mrstp 124
- Xs1920 series user s guide 124
- Chapter 13 spanning tree protocol 125
- Configure multiple spanning tree protocol 125
- Label description 125
- Note the listening state does not exist in rstp 125
- Spanning tree protocol screen see section on page 117 for more information on mstp 125
- Status mrstp 125
- The following table describes the labels in this screen 125
- Xs1920 series user s guide 125
- Chapter 13 spanning tree protocol 126
- Configuration screen to enable mstp on the switch 126
- Label description 126
- The following table describes the labels in this screen 126
- Xs1920 series user s guide 126
- 2 hello time 1 127
- Chapter 13 spanning tree protocol 127
- Label description 127
- Mstp continued 127
- Note changes in this row are copied to all the ports as soon as you make them 127
- Xs1920 series user s guide 127
- Chapter 13 spanning tree protocol 128
- Label description 128
- Mstp continued 128
- Multiple spanning tree port configuration 128
- Port in the navigation panel to display the status screen as shown next see section on page 117 for more information on mstp 128
- Xs1920 series user s guide 128
- Chapter 13 spanning tree protocol 129
- Label description 129
- Multiple spanning tree protocol status 129
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 129
- Note changes in this row are copied to all the ports as soon as you make them 129
- Note this screen is only available after you activate mstp on the switch 129
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section on page 117 for more information on mstp 129
- The following table describes the labels in this screen 129
- Xs1920 series user s guide 129
- Chapter 13 spanning tree protocol 130
- Label description 130
- Status mstp 130
- The following table describes the labels in this screen 130
- Xs1920 series user s guide 130
- Chapter 13 spanning tree protocol 131
- Label description 131
- Mstp network example 131
- Status mstp continued 131
- Technical reference 131
- The following figure shows a network example where two vlans are configured on the two switches if the switches are using stp or rstp the link for vlan 2 will be blocked as stp and rstp allow only one link in the network and block the redundant link 131
- This section provides technical background information on the topics discussed in this chapter 131
- Xs1920 series user s guide 131
- Mst region 132
- Vlan 1 vlan 2 132
- Common and internal spanning tree cist 133
- Mst instance 133
- Bandwidth control 134
- Bandwidth control setup 134
- Overview 134
- What you can do 134
- Bandwidth control 135
- Chapter 14 bandwidth control 135
- Label description 135
- Note changes in this row are copied to all the ports as soon as you make them 135
- Note ingress rate bandwidth control applies to layer 2 traffic only 135
- The following table describes the related labels in this screen 135
- Xs1920 series user s guide 135
- Broadcast storm control 136
- Broadcast storm control overview 136
- Broadcast storm control setup 136
- What you can do 136
- Broadcast storm control 137
- Chapter 15 broadcast storm control 137
- Label description 137
- Note changes in this row are copied to all the ports as soon as you make them 137
- The following table describes the labels in this screen 137
- Xs1920 series user s guide 137
- Mirroring 138
- Mirroring overview 138
- Port mirroring setup 138
- What you can do 138
- Chapter 16 mirroring 139
- Label description 139
- Mirroring 139
- Note changes in this row are copied to all the ports as soon as you make them 139
- The following table describes the labels in this screen 139
- Xs1920 series user s guide 139
- Link aggregation 140
- Overview 140
- What you can do 140
- What you need to know 140
- Link aggregation id 141
- Link aggregation status 141
- Chapter 17 link aggregation 142
- Label description 142
- Link aggregation setting 142
- Link aggregation setting to display the screen shown next see section 17 on page 140 for more information on link aggregation 142
- Link aggregation status 142
- The following table describes the labels in this screen 142
- Xs1920 series user s guide 142
- Chapter 17 link aggregation 144
- Label description 144
- Lacp to display the screen shown next see section on page 140 for more information on dynamic link aggregation 144
- Link aggregation control protocol 144
- Link aggregation setting continued 144
- Note when you enable the port security feature on the switch and configure port security settings for a port you cannot include the port in an active trunk group 144
- Xs1920 series user s guide 144
- Chapter 17 link aggregation 145
- Label description 145
- Note do not configure this screen unless you want to enable dynamic link aggregation 145
- The following table describes the labels in this screen 145
- Xs1920 series user s guide 145
- Static trunking example 146
- Technical reference 146
- Example 147
- Port authentication 148
- Port authentication overview 148
- What you need to know 148
- Mac authentication 149
- Activate ieee 802 x security 150
- Port authentication configuration 150
- Chapter 18 port authentication 151
- Guest vlan 151
- Label description 151
- Note changes in this row are copied to all the ports as soon as you make them 151
- Note you must first enable 802 x authentication on the switch before configuring it on each port 151
- The following table describes the labels in this screen 151
- When 802 x port authentication is enabled on the switch and its ports clients that do not have the correct credentials are blocked from using the port s you can configure your switch to have one vlan that acts as a guest vlan if you enable the guest vlan 102 in the example on a port 2 in the example the user a in the example that is not ieee 802 x capable or fails to enter the correct username and password can still access the port but traffic from the user is forwarded to the guest vlan that is unauthenticated users can have access to limited network resources in the same guest vlan such as the internet the rights granted to the guest vlan depends on how the network administrator configures switches or routers with the guest network feature 151
- Xs1920 series user s guide 151
- Internet 152
- Vlan 100 152
- Vlan 102 152
- Activate mac authentication 153
- Chapter 18 port authentication 153
- Guest vlan continued 153
- Label description 153
- Use this screen to activate mac authentication in the port authentication screen click mac authentication to display the configuration screen as shown 153
- Xs1920 series user s guide 153
- Chapter 18 port authentication 155
- Label description 155
- Mac authentication continued 155
- Note changes in this row are copied to all the ports as soon as you make them 155
- Xs1920 series user s guide 155
- Port security 156
- Port security overview 156
- Port security setup 156
- What you can do 156
- Chapter 19 port security 157
- Label description 157
- Note changes in this row are copied to all the ports as soon as you make them 157
- Port security 157
- The following table describes the labels in this screen 157
- Xs1920 series user s guide 157
- Chapter 19 port security 158
- Label description 158
- Port security continued 158
- Port security screen to display the screen as shown 158
- The following table describes the labels in this screen 158
- Vlan mac address limit 158
- Xs1920 series user s guide 158
- Chapter 19 port security 159
- Label description 159
- Vlan mac address limit continued 159
- Xs1920 series user s guide 159
- About time range 160
- Time range 160
- Time range setup 160
- Chapter 20 time range 161
- Label description 161
- The following table describes the labels in this screen 161
- Time range 161
- Xs1920 series user s guide 161
- Classifier 162
- Classifier status 162
- Overview 162
- What you can do 162
- What you need to know 162
- Chapter 21 classifier 163
- Classifier configuration 163
- Classifier status 163
- Click classifier configuration in the classifier status screen to display the configuration screen as shown 163
- Label description 163
- The following table describes the labels in this screen 163
- Xs1920 series user s guide 163
- Chapter 21 classifier 165
- Classifier configuration 165
- Label description 165
- The following table describes the labels in this screen 165
- Xs1920 series user s guide 165
- Chapter 21 classifier 166
- Classifier configuration continued 166
- Label description 166
- Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers 166
- Xs1920 series user s guide 166
- Chapter 21 classifier 167
- Classifier summary table 167
- Ethernet type protocol number 167
- Label description 167
- Note when two rules conflict with each other a higher layer rule has priority over lower layer rule 167
- Table 72 classifier status summary table 167
- Table 73 common ethernet types and protocol numbers 167
- The following table describes the labels in this screen 167
- The following table shows some other common ethernet types and the corresponding protocol number 167
- To view a summary of the classifier configuration scroll down to the summary table at the bottom of the classifier configuration screen to change the settings of a rule click a number in the index field 167
- Viewing and editing classifier configuration 167
- Xs1920 series user s guide 167
- Chapter 21 classifier 168
- Classifier global setting 168
- Click classifier global setting in the classifier configuration screen to display the configuration screen as shown 168
- In the internet protocol there is a field called protocol to identify the next level protocol the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 168
- Label description 168
- Protocol name tcp udp port number 168
- Protocol type protocol number 168
- See appendix b on page 379 for information on commonly used port numbers 168
- Some of the most common tcp and udp port numbers are 168
- Table 74 common ip protocol types and protocol numbers 168
- Table 75 common tcp and udp port numbers 168
- The following table describes the labels in this screen 168
- Xs1920 series user s guide 168
- After you have configured a classifier you can configure a policy in the policy screen to define action s on the classified traffic flow 169
- Chapter 21 classifier 169
- Classifier example 169
- Classifier global setting 169
- Label description 169
- The following screen shows an example where you configure a classifier that identifies all traffic from mac address 00 50 ba ad 4f 81 on port 2 169
- Xs1920 series user s guide 169
- Example 170
- Configuring policy rules 171
- Policy rule 171
- Policy rules overview 171
- What you can do 171
- Chapter 22 policy rule 173
- Label description 173
- Note you can specify only one action pair in a policy rule to have the switch take multiple actions on the same traffic flow you need to define multiple classifiers with the same criteria and apply different policy rules 173
- Policy rule continued 173
- Xs1920 series user s guide 173
- Chapter 22 policy rule 174
- Label description 174
- Policy rule continued 174
- Policy rule summary table 174
- To view a summary of the classifier configuration scroll down to the summary table at the bottom of the policy screen to change the settings of a rule click a number in the index field 174
- Viewing and editing policy configuration 174
- Xs1920 series user s guide 174
- Queuing method 175
- Queuing method overview 175
- What you can do 175
- What you need to know 175
- Configuring queuing 176
- Chapter 23 queuing method 177
- Label description 177
- Note changes in this row are copied to all the ports as soon as you make them 177
- Queuing method 177
- The following table describes the labels in this screen 177
- Xs1920 series user s guide 177
- Multicast 178
- Multicast overview 178
- What you can do 178
- What you need to know 178
- Igmp snooping and vlans 179
- Mld snooping proxy 179
- Mld messages 180
- Mvr overview 180
- Report 180
- How mvr works 181
- Multicast vlan vlan 1 181
- Mvr modes 181
- Types of mvr ports 181
- Vlan 2 181
- Vlan 3 181
- Ipv4 multicast status 182
- Multicast setup 182
- Multicast vlan vlan 1 182
- Igmp snooping 183
- Chapter 24 multicast 184
- Igmp snooping 184
- Label description 184
- The following table describes the labels in this screen 184
- Xs1920 series user s guide 184
- Chapter 24 multicast 185
- Igmp snooping continued 185
- Igmp snooping vlan 185
- Ipv4 multicast in the navigation panel click the igmp snooping link and then the igmp snooping vlan link to display the screen as shown see section on page 179 for more information on igmp snooping vlan 185
- Label description 185
- Xs1920 series user s guide 185
- Chapter 24 multicast 186
- Igmp snooping vlan 186
- Label description 186
- The following table describes the labels in this screen 186
- Xs1920 series user s guide 186
- Igmp filtering profile 187
- Chapter 24 multicast 188
- Igmp filtering profile continued 188
- Ipv6 multicast 188
- Ipv6 multicast status 188
- Ipv6 multicast to display the screen as shown this screen shows the ipv6 multicast group information see section 24 on page 178 for more information on multicasting 188
- Label description 188
- The following table describes the fields in the above screen 188
- Xs1920 series user s guide 188
- Label description 189
- Mld snooping proxy 189
- Mld snooping proxy vlan 189
- Chapter 24 multicast 190
- Label description 190
- The following table describes the fields in the above screen 190
- Xs1920 series user s guide 190
- Chapter 24 multicast 191
- Label description 191
- Mld snooping proxy vlan port role setting 191
- Vlan screen to display the screen as shown 191
- Xs1920 series user s guide 191
- Chapter 24 multicast 192
- Label description 192
- Leave mode 192
- Mld snooping proxy vlan id 192
- Port role 192
- Port role setting 192
- The following table describes the fields in the above screen 192
- Xs1920 series user s guide 192
- Label description 193
- Mld snooping proxy vlan filtering 193
- Active 194
- Cancel 194
- Chapter 24 multicast 194
- Filtering 194
- Filtering profile 194
- Filtering screen to display the screen as shown 194
- Group limit 194
- Label description 194
- Max group num 194
- Mld snooping proxy vlan filtering profile 194
- The following table describes the fields in the above screen 194
- Xs1920 series user s guide 194
- Cancel 195
- Chapter 24 multicast 195
- Delete 195
- Delete click delte button to permanently delete the entries you selected in the delete column 195
- End address 195
- Filtering profile 195
- General mvr configuration 195
- Label description 195
- Mvr to display the screen as shown next 195
- Note you can create up to five multicast vlans and up to 256 multicast rules on the switch 195
- Note your switch automatically creates a static vlan with the same vid when you create a multicast vlan in this screen 195
- Profile name 195
- Start address 195
- The following table describes the fields in the above screen 195
- Xs1920 series user s guide 195
- Chapter 24 multicast 196
- Label description 196
- The following table describes the related labels in this screen 196
- Xs1920 series user s guide 196
- All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group 197
- Chapter 24 multicast 197
- Label description 197
- Mvr continued 197
- Mvr group configuration 197
- Note a port can belong to more than one multicast vlan however ip multicast group addresses in different multicast vlans cannot overlap 197
- Use this screen to configure mvr ip multicast group address es click the group configuration link in the mvr screen 197
- Xs1920 series user s guide 197
- Chapter 24 multicast 198
- Group configuration 198
- Label description 198
- The following table describes the labels in this screen 198
- Xs1920 series user s guide 198
- Example 199
- Multicast vid 200 vlan 1 199
- Mvr configuration example 199
- Example 200
- Aaa overview 201
- What you can do 201
- What you need to know 201
- Aaa screens 202
- Local user accounts 202
- Radius and tacacs 202
- Radius server setup 202
- Chapter 25 aaa 203
- Label description 203
- Radius server setup 203
- The authentication features on the switch click on the radius server setup link in the aaa screen to view the screen as shown 203
- The following table describes the labels in this screen 203
- Xs1920 series user s guide 203
- Chapter 25 aaa 204
- Label description 204
- Radius server setup continued 204
- Tacacs server setup 204
- Use this screen to configure your tacacs server settings see section on page 202 for more information on tacacs servers click on the tacacs server setup link in the aaa screen to view the screen as shown 204
- Xs1920 series user s guide 204
- Chapter 25 aaa 205
- Label description 205
- Tacacs server setup 205
- The following table describes the labels in this screen 205
- Xs1920 series user s guide 205
- Aaa setup 206
- Chapter 25 aaa 206
- Label description 206
- Tacacs server setup continued 206
- Use this screen to configure authentication and authorization settings on the switch click on the aaa setup link in the aaa screen to view the screen as shown 206
- Xs1920 series user s guide 206
- Aaa setup 207
- Chapter 25 aaa 207
- Label description 207
- The following table describes the labels in this screen 207
- Xs1920 series user s guide 207
- Aaa setup continued 208
- Chapter 25 aaa 208
- Label description 208
- Rfc 2865 standard specifies a method for sending vendor specific information between a radius server and a network access device for example the switch a company can create vendor specific attributes vsas to expand the functionality of a radius server 208
- Technical reference 208
- The switch supports vsas that allow you to perform the following actions based on user authentication 208
- This section provides technical background information on the topics discussed in this chapter 208
- Vendor specific attribute 208
- Xs1920 series user s guide 208
- Note refer to the documentation that comes with your radius server on how to configure vsas for users authenticating via the radius server 209
- Tunnel protocol attribute 209
- Attributes used by the ieee 802 x authentication 210
- Attributes used for authenticating privilege access 210
- Attributes used for authentication 210
- Attributes used to login users 210
- Supported radius attributes 210
- Ip source guard 212
- Overview 212
- What you can do 212
- Ip source guard 213
- What you need to know 213
- Ip source guard static binding 214
- Arp learning screen before you use the arp freeze feature 215
- Chapter 26 ip source guard 215
- Dhcp snooping 215
- Label description 215
- Static binding 215
- The following table describes the labels in this screen 215
- Xs1920 series user s guide 215
- Chapter 26 ip source guard 216
- Dhcp snooping 216
- Label description 216
- The following table describes the labels in this screen 216
- Xs1920 series user s guide 216
- Chapter 26 ip source guard 217
- Dhcp snooping continued 217
- Label description 217
- Xs1920 series user s guide 217
- Chapter 26 ip source guard 218
- Configure 218
- Dhcp snooping configure 218
- Dhcp snooping continued 218
- Label description 218
- Xs1920 series user s guide 218
- Chapter 26 ip source guard 219
- Configure 219
- Label description 219
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 219
- Note you have to enable dhcp snooping on the dhcp vlan too 219
- The following table describes the labels in this screen 219
- Xs1920 series user s guide 219
- Chapter 26 ip source guard 220
- Configure continued 220
- Dhcp snooping port configure 220
- Label description 220
- Note if dhcp snooping is enabled but there are no trusted ports dhcp requests cannot reach the dhcp server 220
- Use this screen to specify whether ports are trusted or untrusted ports for dhcp snooping 220
- Xs1920 series user s guide 220
- Chapter 26 ip source guard 221
- Dhcp snooping vlan configure 221
- Label description 221
- The following table describes the labels in this screen 221
- Xs1920 series user s guide 221
- Chapter 26 ip source guard 222
- Dhcp snooping vlan port configure 222
- Label description 222
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 222
- The following table describes the labels in this screen 222
- Xs1920 series user s guide 222
- Arp inspection 223
- Arp inspection status 223
- Chapter 26 ip source guard 223
- Label description 223
- The following table describes the labels in this screen 223
- Xs1920 series user s guide 223
- Arp inspection 224
- Arp inspection vlan status 224
- Chapter 26 ip source guard 224
- Label description 224
- The following table describes the labels in this screen 224
- Vlan status 224
- Xs1920 series user s guide 224
- Arp inspection log status 225
- Chapter 26 ip source guard 225
- Label description 225
- Log status 225
- The following table describes the labels in this screen 225
- Vlan status 225
- Xs1920 series user s guide 225
- Chapter 26 ip source guard 226
- Label description 226
- Log status 226
- The following table describes the labels in this screen 226
- Xs1920 series user s guide 226
- Arp inspection configure 227
- Chapter 26 ip source guard 227
- Configure 227
- Label description 227
- The following table describes the labels in this screen 227
- Xs1920 series user s guide 227
- Arp inspection port configure 228
- Chapter 26 ip source guard 228
- Configure continued 228
- Label description 228
- Xs1920 series user s guide 228
- Chapter 26 ip source guard 229
- Label description 229
- The following table describes the labels in this screen 229
- Xs1920 series user s guide 229
- Arp inspection vlan configure 230
- Chapter 26 ip source guard 230
- Label description 230
- The following table describes the labels in this screen 230
- Xs1920 series user s guide 230
- Dhcp snooping overview 231
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 231
- Technical reference 231
- Trusted vs untrusted ports 231
- Configuring dhcp snooping 232
- Dhcp relay option 82 information 232
- Dhcp snooping database 232
- Arp inspection and mac address filters 233
- Arp inspection overview 233
- Configuring arp inspection 234
- Note it is recommended you enable dhcp snooping at least one day before you enable arp inspection so that the switch has enough time to build the binding table 234
- Syslog 234
- Trusted vs untrusted ports 234
- Loop guard 235
- Loop guard overview 235
- What you can do 235
- What you need to know 235
- Loop guard setup 237
- Note after resolving the loop problem on your network you can re activate the disabled port via the web configurator see section 8 on page 69 237
- Note the loop guard feature can not be enabled on the ports that have spanning tree protocol rstp mrstp or mstp enabled 237
- Chapter 27 loop guard 238
- Label description 238
- Loop guard 238
- Note changes in this row are copied to all the ports as soon as you make them 238
- The following table describes the labels in this screen 238
- Xs1920 series user s guide 238
- Layer 2 protocol tunneling 239
- Layer 2 protocol tunneling overview 239
- What you can do 239
- What you need to know 239
- Configuring layer 2 protocol tunneling 240
- Layer 2 protocol tunneling mode 240
- Service provider s network c 240
- Chapter 28 layer 2 protocol tunneling 241
- Label description 241
- Layer 2 protocol tunneling 241
- Note all the edge switches in the service provider s network should be set to use the same mac address for encapsulation 241
- Note changes in this row are copied to all the ports as soon as you make them 241
- Note the mac address can be either a unicast mac address or multicast mac address if you use a unicast mac address make sure the mac address does not exist in the address table of a switch on the service provider s network 241
- The following table describes the labels in this screen 241
- Xs1920 series user s guide 241
- Chapter 28 layer 2 protocol tunneling 242
- Label description 242
- Layer 2 protocol tunneling continued 242
- Note you can enable l2pt services for stp lacp vtp cdp udld and pagp on the access port s only 242
- Xs1920 series user s guide 242
- Pppoe intermediate agent overview 243
- What you can do 243
- What you need to know 243
- Flexible circuit id syntax with identifier string and variables 244
- Pppoe intermediate agent tag format 244
- Sub option format 244
- Chapter 29 pppoe 245
- Every port is either a trusted port or an untrusted port for the pppoe intermediate agent this setting is independent of the trusted untrusted setting for dhcp snooping or arp inspection you can also specify the agent sub options circuit id and remote id that the switch adds to padi and padr packets from pppoe clients 245
- If a padi or padr packet is sent from a pppoe client but received on a trusted port the switch forwards it to other trusted port s 245
- If a padi padr or padt packet is sent from a pppoe client and received on an untrusted port the switch adds a vendor specific tag to the packet and then forwards it to the trusted port s 245
- If a pado pppoe active discovery offer pads pppoe active discovery session confirmation or padt pppoe active discovery terminate packet is sent from a pppoe server and received on a trusted port the switch forwards it to all other ports 245
- Intermediate agent screen the switch automatically generates a circuit id string according to the default circuit id syntax which is defined in the dsl forum working text wt 101 the default access node identifier is the host name of the pppoe intermediate agent and the eth indicates ethernet 245
- Note the switch will drop all pppoe discovery packets if you enable the pppoe intermediate agent and there are no trusted ports 245
- Option example is switch 07 0123 and indicates the pppoe packets come from a pppoe client which is connected to the switch s port 7 and belong to vlan 123 245
- Port state 245
- Table 116 pppoe ia circuit id sub option format using identifier string and variables 245
- Table 117 pppoe ia circuit id sub option format defined in wt 101 245
- The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port 245
- Trusted ports are connected to pppoe servers 245
- Untrusted ports are connected to subscribers 245
- Wt 101 default circuit id syntax 245
- Xs1920 series user s guide 245
- Pppoe intermediate agent 246
- The pppoe screen 246
- Chapter 29 pppoe 247
- Click the port link in the intermediate agent screen to display the screen as shown 247
- Intermediate agent continued 247
- Label description 247
- Note the switch will drop all pppoe packets if you enable the pppoe intermediate agent on the switch and there are no trusted ports 247
- Pppoe ia per port 247
- Use this screen to specify whether individual ports are trusted or untrusted ports and have the switch add extra information to pppoe discovery packets from pppoe clients on a per port basis 247
- Xs1920 series user s guide 247
- Chapter 29 pppoe 248
- Label description 248
- The following table describes the labels in this screen 248
- Xs1920 series user s guide 248
- Chapter 29 pppoe 249
- Label description 249
- Port continued 249
- Port screen to display the screen as shown 249
- Pppoe ia per port per vlan 249
- The following table describes the labels in this screen 249
- Use this screen to configure pppoe ia settings that apply to a specific vlan on a port 249
- Xs1920 series user s guide 249
- Chapter 29 pppoe 250
- Click the vlan link in the intermediate agent screen to display the screen as shown 250
- Label description 250
- Pppoe ia for vlan 250
- The following table describes the labels in this screen 250
- Use this screen to set whether the pppoe intermediate agent is enabled on a vlan and whether the switch appends the circuit id and or remote id to pppoe discovery packets from a specific vlan 250
- Vlan continued 250
- Xs1920 series user s guide 250
- Chapter 29 pppoe 251
- Label description 251
- Vlan continued 251
- Xs1920 series user s guide 251
- Error disable 252
- Error disable overview 252
- Error disable status 252
- The error disable screens overview 252
- Chapter 30 error disable 253
- Errdisable status 253
- Label description 253
- The following table describes the labels in this screen 253
- Xs1920 series user s guide 253
- Cpu protection configuration 254
- Errdisable detect screen 254
- Chapter 30 error disable 255
- Cpu protection 255
- Errdisable screen to display the screen as shown 255
- Error disable detect configuration 255
- Label description 255
- The following table describes the labels in this screen 255
- Xs1920 series user s guide 255
- Chapter 30 error disable 256
- Errdisable detect 256
- Errdisable screen to display the screen as shown 256
- Error disable recovery configuration 256
- Label description 256
- Some features such as loop guard or cpu protection allow the switch to shut down a port or discard specific packets on a port when an error is detected on the port for example if the switch detects that packets sent out the port s loop back to the switch the switch can shut down the port s automatically after that you need to enable the port s or allow the packets on a port manually via the web configurator with error disable recovery you can set the disabled port s to become active or start receiving the packets again after the time interval you specify 256
- The following table describes the labels in this screen 256
- Xs1920 series user s guide 256
- Chapter 30 error disable 257
- Errdisable recovery 257
- Label description 257
- The following table describes the labels in this screen 257
- Xs1920 series user s guide 257
- Mac pinning 258
- Mac pinning configuration 258
- Mac pinning overview 258
- Chapter 31 mac pinning 259
- Label description 259
- Mac pinning 259
- Mac pinning standalone mode 259
- Note changes in this row are copied to all the ports as soon as you make them 259
- The following table describes the labels in this screen 259
- Xs1920 series user s guide 259
- Private vlan 260
- Private vlan overview 260
- Label description 261
- Table 127 pvlan graphic key 261
- Table 128 spanning pvlan graphic key 261
- Configuration 262
- Vlan port setting enabled will not be able to communicate with each other 262
- Chapter 32 private vlan 263
- Label description 263
- Note the vlan id and mode selected here must be the same as the vlan id and vlan typ 263
- Private vlan 263
- The following table describes the labels in this screen 263
- Xs1920 series user s guide 263
- Configuring green ethernet 264
- Green ethernet 264
- Green ethernet overview 264
- Chapter 33 green ethernet 265
- Green ethernet 265
- Label description 265
- The following table describes the labels in this screen 265
- Xs1920 series user s guide 265
- Link layer discovery protocol lldp 266
- Lldp overview 266
- Lldp med overview 267
- Lldp screens 268
- Lldp local status 269
- Chapter 34 link layer discovery protocol lldp 270
- Label description 270
- Lldp local port status detail 270
- Lldp local status 270
- Lldp local status and then click a port number for example 1 port in the local port column to display the screen as shown next 270
- The following table describes the labels in this screen 270
- Xs1920 series user s guide 270
- Chapter 34 link layer discovery protocol lldp 273
- Label description 273
- Lldp local port status detail 273
- The following table describes the labels in this screen 273
- Xs1920 series user s guide 273
- Chapter 34 link layer discovery protocol lldp 274
- Label description 274
- Lldp local port status detail 274
- Lldp remote status 274
- Lldp remote status click here to display the screen as shown next 274
- The following table describes the labels in this screen 274
- Xs1920 series user s guide 274
- Lldp remote port status detail 275
- Chapter 34 link layer discovery protocol lldp 276
- Label description 276
- Lldp remote port status detail basic tlv 276
- The following table describes the labels in basic tlv part of the screen 276
- Xs1920 series user s guide 276
- Chapter 34 link layer discovery protocol lldp 277
- Dot 1 and dot3 tlv 277
- Label description 277
- Lldp remote port status detail dot1 and dot3 tlv 277
- The following table describes the labels in the dot1 and dot3 parts of the screen 277
- Xs1920 series user s guide 277
- Chapter 34 link layer discovery protocol lldp 278
- Label description 278
- Lldp remote port status detail dot1 and dot3 tlv 278
- Xs1920 series user s guide 278
- Chapter 34 link layer discovery protocol lldp 280
- Label description 280
- Lldp remote port status detail med tlv 280
- The following table describes the labels in the med tlv part of the screen 280
- Xs1920 series user s guide 280
- Chapter 34 link layer discovery protocol lldp 281
- Label description 281
- Lldp configuration 281
- Lldp configuration click here to display the screen as shown next 281
- Lldp remote port status detail med tlv 281
- Xs1920 series user s guide 281
- Chapter 34 link layer discovery protocol lldp 282
- Label description 282
- Lldp configuration 282
- The following table describes the labels in this screen 282
- Xs1920 series user s guide 282
- Basic tlv setting 283
- Basic tlv setting to display the screen as shown next 283
- Chapter 34 link layer discovery protocol lldp 283
- Label description 283
- Lldp configuration 283
- Lldp configuration basic tlv setting 283
- The following table describes the labels in this screen 283
- Xs1920 series user s guide 283
- Chapter 34 link layer discovery protocol lldp 284
- Label description 284
- Lldp configuraion basic org specific tlv setting 284
- Org specific tlv setting 284
- Org specific tlv setting to display the screen as shown next 284
- The following table describes the labels in this screen 284
- Xs1920 series user s guide 284
- Chapter 34 link layer discovery protocol lldp 285
- Label description 285
- Lldp med configuration 285
- Lldp med configuration click here to display the screen as shown next 285
- Org specific tlv setting 285
- The following table describes the labels in this screen 285
- Xs1920 series user s guide 285
- Chapter 34 link layer discovery protocol lldp 286
- Label description 286
- Lldp med network policy 286
- Lldp med network policy click here to display the screen as shown next 286
- The following table describes the labels in this screen 286
- Xs1920 series user s guide 286
- Chapter 34 link layer discovery protocol lldp 287
- Label description 287
- Lldp med location 287
- Lldp med location click here to display the screen as shown next 287
- Lldp med network policy 287
- Xs1920 series user s guide 287
- Chapter 34 link layer discovery protocol lldp 288
- Label description 288
- Lldp med location 288
- The following table describes the labels in this screen 288
- Xs1920 series user s guide 288
- Chapter 34 link layer discovery protocol lldp 289
- Label description 289
- Lldp med location 289
- Xs1920 series user s guide 289
- Static route 291
- Static route overview 291
- Static routing 291
- What you can do 291
- Configuring static routing 292
- Internet 292
- Chapter 35 static route 293
- Ipv4 static route 293
- Label description 293
- The following table describes the related labels you use to create a static route 293
- Xs1920 series user s guide 293
- Chapter 35 static route 294
- Configuring ipv6 static routing 294
- Ipv4 static route continued 294
- Ipv6 static route 294
- Label description 294
- Static routing screen to display the screen as shown 294
- The following table describes the related labels you use to create a static route 294
- Xs1920 series user s guide 294
- Chapter 35 static route 295
- Ipv6 static route continued 295
- Label description 295
- Xs1920 series user s guide 295
- Differentiated services 296
- Differentiated services overview 296
- What you can do 296
- What you need to know 296
- Activating diffserv 297
- Diffserv network example 297
- P platinum g gold s silver b bronze 297
- Chapter 36 differentiated services 298
- Diffserv 298
- Dscp to ieee 802 p priority settings 298
- Label description 298
- The following table describes the labels in this screen 298
- Xs1920 series user s guide 298
- You can configure the dscp to ieee 802 p mapping to allow the switch to prioritize all traffic based on the incoming dscp value according to the diffserv to ieee 802 p mapping table 298
- Chapter 36 differentiated services 299
- Configuring dscp settings 299
- Dscp setting 299
- Label description 299
- Table 147 default dscp ieee 802 p mapping 299
- The following table describes the labels in this screen 299
- The following table shows the default dscp to ieee802 p mapping 299
- To change the dscp ieee 802 p mapping click the dscp setting link in the diffserv screen to display the screen as shown next 299
- Xs1920 series user s guide 299
- Dhcp overview 300
- What you can do 300
- What you need to know 300
- Dhcp configuration 301
- Dhcp relay 301
- Dhcp relay agent information 301
- Dhcpv4 relay 302
- Dhcpv4 relay agent information 302
- Dhcpv4 status 302
- A dhcp relay agent information option has the following format 303
- Chapter 37 dhcp 303
- Dhcpv4 in the navigation panel and click the option 82 profile link to display the screen as shown 303
- Dhcpv4 option 82 profile 303
- Dhcpv4 relay agent information format 303
- I1 i2 and in are dhcp relay agent sub options which contain additional information about the dhcp client you need to define at least one sub option 303
- Sub option format 303
- Table 151 dhcp relay agent information option format 303
- Table 152 dhcp relay agent circuit id sub option format 303
- Table 153 dhcp relay agent remote id sub option format 303
- The 1 in the first field identifies this as an agent circuit id sub option and 2 identifies this as an agent remote id sub option the next field specifies the length of the field 303
- There are two types of sub option agent circuit id sub option and agent remote id sub option they have the following formats 303
- Xs1920 series user s guide 303
- Chapter 37 dhcp 304
- Label description 304
- Option 82 profile 304
- The following table describes the labels in this screen 304
- Xs1920 series user s guide 304
- Chapter 37 dhcp 305
- Configuring dhcpv4 global relay 305
- Dhcpv4 in the navigation panel and click the global link to display the screen as shown 305
- Global 305
- Label description 305
- Option 82 profile continued 305
- The following table describes the labels in this screen 305
- Xs1920 series user s guide 305
- Chapter 37 dhcp 306
- Dhcpv4 global relay port configure 306
- Global continued 306
- Label description 306
- The following table describes the labels in this screen 306
- Xs1920 series user s guide 306
- Example 307
- Global dhcp relay configuration example 307
- Vlan1 vlan2 307
- Chapter 37 dhcp 308
- Configuring dhcpv4 vlan settings 308
- Dhcpv4 in the navigation panel then click the vlan link in the dhcp status screen that displays 308
- Label description 308
- Note you must set up a management ip address for each vlan that you want to configure dhcp settings for on the switch 308
- The following table describes the labels in this screen 308
- Xs1920 series user s guide 308
- Chapter 37 dhcp 309
- Dhcpv4 vlan port configure 309
- Label description 309
- The following table describes the labels in this screen 309
- Vlan continued 309
- Xs1920 series user s guide 309
- 6 0 00 310
- Example 310
- Example dhcp relay for two vlans 310
- Dhcpv6 relay 311
- Chapter 37 dhcp 312
- Dhcpv6 continued 312
- Label description 312
- Xs1920 series user s guide 312
- Arp learning mode 313
- Arp overview 313
- Arp setup 313
- How arp works 313
- Arp request 314
- Gratuitous arp 314
- Arp learning 315
- Arp setup 315
- Arp learning 316
- Arp setup screen to display the screen as shown 316
- Chapter 38 arp setup 316
- Label description 316
- Static arp 316
- The following table describes the labels in this screen 316
- Xs1920 series user s guide 316
- Cancel 317
- Chapter 38 arp setup 317
- Label description 317
- Static arp 317
- The following table describes the related labels in this screen 317
- Xs1920 series user s guide 317
- Maintenance 318
- Overview 318
- The maintenance screen 318
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 319
- Chapter 39 maintenance 319
- Firmware upgrade 319
- Firmware upgrade to view the screen as shown next 319
- Label description 319
- Maintenance continued 319
- Make sure you have downloaded and unzipped the correct model firmware and version to your computer before uploading to the device 319
- Note make sure to click the save button in any screen to save your settings to the current configuration on the switch 319
- Use the following screen to upgrade your switch to the latest firmware the switch supports dual firmware images firmware 1 and firmware 2 use this screen to specify which image is updated when firmware is uploaded using the web configurator and to specify which image is loaded when the switch starts up 319
- Xs1920 series user s guide 319
- Chapter 39 maintenance 320
- Firmware upgrade 320
- Label description 320
- Restore a configuration file 320
- Restore configuration 320
- The following table describes the labels in this screen 320
- The top of firmware upgrade screen shows which firmware version is currently running on the switch select the config boot image drop down list box if you want to reboot the switch and click apply to apply the new firmware immediately firmware upgrades are only applied after a reboot click upgrade to load the new firmware after the firmware upgrade process is complete see the system info screen to verify your current firmware version number 320
- Type the path and file name of the configuration file you wish to restore in the file path text box or click browse to locate it after you have specified the file click restore config is the name of 320
- Use this screen to restore a previously saved configuration from your computer to the switch using the restore configuration screen 320
- Xs1920 series user s guide 320
- Backup a configuration file 321
- Erase running configuration 321
- Factory default 322
- Note clicking the apply or add button does not save the changes permanently all unsaved changes are erased after you reboot the switch 322
- Reboot system 322
- Save configuration 322
- Chapter 39 maintenance 323
- Click ok to reset all switch configurations to the factory defaults 323
- Tech support 323
- Tech support to see the following screen 323
- Xs1920 series user s guide 323
- You may need wordpad or similar software to see the log report correctly the table below describes the fields in the above screen 323
- Chapter 39 maintenance 324
- Example ftp commands 324
- File type internal name external name description 324
- Filename conventions 324
- Ftp command line 324
- Put firmware bin ras 0 324
- Table 165 filename conventions 324
- Tech support 324
- Technical reference 324
- The configuration file also known as the romfile or rom contains the factory default settings in the screens such as password switch setup ip setup and so on once you have customized the switch s settings they can be saved back to your computer under a filename of your choosing 324
- This section provides technical background information on the topics discussed in this chapter 324
- This section shows some examples of uploading to or downloading files from the switch using ftp commands first understand the filename conventions 324
- Xs1920 series user s guide 324
- Zynos zyxel network operating system sometimes referred to as the ras file is the system firmware and has a bin filename extension 324
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 325
- Ftp command line procedure 325
- Gui based ftp clients 325
- Ftp restrictions 326
- Access control 327
- Access control overview 327
- The access control main screen 327
- What you can do 327
- Access control 328
- Chapter 40 access control 328
- Configuring snmp 328
- Label description 328
- Snmp to view the screen as shown 328
- The following table describes the labels in this screen 328
- Use this screen to configure your snmp settings 328
- Xs1920 series user s guide 328
- Chapter 40 access control 329
- Configuring snmp trap group 329
- From the snmp screen click trap group to view the screen as shown use the trap group screen to specify the types of snmp traps that should be sent to each snmp manager 329
- Label description 329
- Snmp continued 329
- The following table describes the labels in this screen 329
- Trap group 329
- Xs1920 series user s guide 329
- Chapter 40 access control 330
- Enabling disabling sending of snmp traps on a port 330
- Label description 330
- The following table describes the labels in this screen 330
- Trap group continued continued 330
- Trap group screen click port to view the screen as shown use this screen to set whether a trap received on the port s would be sent to the snmp manager 330
- Xs1920 series user s guide 330
- Chapter 40 access control 331
- Configuring snmp user 331
- From the snmp screen click user to view the screen as shown use the user screen to create snmp users for authentication with managers using snmp v3 and associate them to snmp groups an snmp user is an snmp manager 331
- Label description 331
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 331
- Note use the username and password of the login accounts you specify in this screen to create accounts on the snmp v3 manager 331
- Port continued 331
- The following table describes the labels in this screen 331
- Xs1920 series user s guide 331
- An administrator is someone who can both view and configure switch changes the username for the administrator is always admin the default administrator password is 1234 332
- Chapter 40 access control 332
- Label description 332
- Setting up login accounts 332
- Up to five people one administrator and four non administrators may access the switch via web configurator at any one time 332
- User continued 332
- Xs1920 series user s guide 332
- A non administrator username is something other than admin is someone who can view but not configure switch settings 333
- Chapter 40 access control 333
- Label description 333
- Logins 333
- Logins to view the screen as shown 333
- Note it is highly recommended that you change the default administrator password 1234 333
- The following table describes the labels in this screen 333
- Xs1920 series user s guide 333
- Chapter 40 access control 334
- Label description 334
- Logins continued 334
- Service access control 334
- Service access control allows you to decide what services you may use to access the switch you may also change the default service port and configure trusted computer s for each service in the remote management screen discussed later click access control to go back to the main access control screen 334
- Service port access control 334
- The following table describes the fields in this screen 334
- Xs1920 series user s guide 334
- Remote management 335
- About snmp 336
- An snmp managed network consists of two main components agents and a manager 336
- Chapter 40 access control 336
- Figure 241 snmp management model 336
- Label description 336
- Remote management 336
- Simple network management protocol snmp is an application layer protocol used to manage and monitor tcp ip based devices snmp is used to exchange management information between the network management system nms and a network element ne a manager station can manage and monitor the switch through the network via snmp version 1 snmpv1 snmp version 2c or snmp version 3 the next figure illustrates an snmp management operation snmp is only available if tcp ip is configured 336
- Technical reference 336
- The following table describes the labels in this screen 336
- This section provides technical background information on the topics discussed in this chapter 336
- Xs1920 series user s guide 336
- Snmp v3 and security 337
- Supported mibs 337
- Chapter 40 access control 338
- Option object label object id description 338
- Snmp traps 338
- Table 176 snmp system traps 338
- The switch sends traps to an snmp manager when an event occurs the following tables outline the snmp traps by category 338
- Xs1920 series user s guide 338
- Introduction to https 339
- Https example 340
- Internet explorer warning messages 340
- Note if you disable http in the service access control screen then the switch blocks all http connection attempts 340
- Example 341
- Mozilla firefox warning messages 341
- Example 342
- Internet explore 342
- The main screen 342
- Example 343
- Internet explore 343
- Diagnostic 344
- Overview 344
- Chapter 41 diagnostic 345
- Diagnostic 345
- Label description 345
- The following table describes the labels in this screen 345
- Xs1920 series user s guide 345
- Syslog 346
- Syslog overview 346
- Syslog setup 346
- What you can do 346
- Chapter 42 syslog 347
- Label description 347
- Syslog 347
- Syslog server setup 347
- Syslog server setup to view the screen as shown next use this screen to configure a list of external syslog servers 347
- The following table describes the labels in this screen 347
- Xs1920 series user s guide 347
- Chapter 42 syslog 348
- Label description 348
- Syslog server setup 348
- The following table describes the labels in this screen 348
- Xs1920 series user s guide 348
- Cluster management 349
- Cluster management overview 349
- Cluster management status 350
- Note a cluster can only have one manager 350
- What you can do 350
- Clustering management configuration 351
- Example 351
- Chapter 43 cluster management 352
- Configuration 352
- Label description 352
- The following table describes the labels in this screen 352
- Xs1920 series user s guide 352
- Cluster member switch management 353
- Example 353
- Technical reference 353
- Uploading firmware to a cluster member switch 353
- Mac table 355
- Mac table overview 355
- What you can do 355
- What you need to know 355
- Viewing the mac table 356
- Chapter 44 mac table 357
- Label description 357
- Mac table 357
- The following table describes the labels in this screen 357
- Xs1920 series user s guide 357
- Ip table 358
- Ip table overview 358
- Chapter 45 ip table 359
- Ip table 359
- Ip table in the navigation panel to display the following screen 359
- Label description 359
- The following table describes the labels in this screen 359
- Viewing the ip table 359
- Xs1920 series user s guide 359
- Arp table 360
- Overview 360
- Viewing the arp table 360
- What you can do 360
- What you need to know 360
- Arp table 361
- Chapter 46 arp table 361
- Label description 361
- The following table describes the labels in this screen 361
- Xs1920 series user s guide 361
- Overview 362
- Routing table 362
- Viewing the routing table status 362
- Path mtu overview 363
- Path mtu table 363
- Viewing the path mtu table 363
- Configure clone 364
- Overview 364
- Chapter 49 configure clone 365
- Configure clone 365
- Label description 365
- The following table describes the labels in this screen 365
- Xs1920 series user s guide 365
- Chapter 49 configure clone 366
- Configure clone continued 366
- Label description 366
- Xs1920 series user s guide 366
- Ipv6 neighbor table overview 367
- Neighbor table 367
- Viewing the ipv6 neighbor table 367
- Chapter 50 neighbor table 368
- Label description 368
- Neighbor table continued 368
- Xs1920 series user s guide 368
- Power hardware connections and leds 369
- Troubleshooting 369
- I cannot see or access the login screen in the web configurator 370
- I forgot the ip address for the switch 370
- I forgot the username and or password 370
- Switch access and login 370
- I can see the login screen but i cannot log in to the switch 371
- I cannot see some of advanced application submenus at the bottom of the navigation panel 371
- Pop up windows javascripts and java permissions 371
- There is unauthorized access to my switch 371
- I lost my configuration settings after i restart the switch 372
- Switch configuration 372
- Customer support 373
- Ppendi 373
- Austria 374
- Europe 374
- Malaysia 374
- Pakistan 374
- Philipines 374
- Singapore 374
- Taiwan 374
- Thailand 374
- Vietnam 374
- Belarus 375
- Belgium 375
- Bulgaria 375
- Denmark 375
- Estonia 375
- Finland 375
- France 375
- Germany 375
- Hungary 375
- Latvia 375
- Lithuania 376
- Netherlands 376
- Norway 376
- Poland 376
- Romania 376
- Russia 376
- Slovakia 376
- Sweden 376
- Switzerland 376
- Argentina 377
- Ecuador 377
- Latin america 377
- Middle east 377
- North america 377
- Turkey 377
- Ukraine 377
- Africa 378
- Australia 378
- Oceania 378
- South africa 378
- Common services 379
- Ppendi 379
- Appendix b common services 380
- Name protocol port s description 380
- Table 192 commonly used services continued 380
- Xs1920 series user s guide 380
- Appendix b common services 381
- Name protocol port s description 381
- Table 192 commonly used services continued 381
- Xs1920 series user s guide 381
- Ppendi 382
- Global address 383
- Loopback address 383
- Multicast address 383
- Unspecified address 383
- Eui 64 384
- Interface id 384
- Stateless autoconfiguration 384
- Subnet masking 384
- Dhcp relay agent 385
- Dhcpv6 385
- Identity association 385
- Rebind 385
- Renew rebind 385
- Renew to s1 385
- Icmpv6 386
- Ipv6 cache 386
- Neighbor discovery protocol ndp 386
- Prefix delegation 386
- Example enabling dhcpv6 on windows xp 387
- Example enabling ipv6 on windows xp 2003 vista 387
- Example enabling ipv6 on windows 7 388
- Legal information 390
- Ppendi 390
- Appendix d legal information 391
- Environment statment 391
- List of national codes 391
- Notices 391
- Safety warnings 391
- Weee directive 391
- Xs1920 series user s guide 391
- Appendix d legal information 392
- Xs1920 series user s guide 392
- Environmental product declaration 393
- Appendix d legal information 394
- Open source licenses 394
- Registration 394
- Taiwanese bsmi bureau of standards metrology and inspection a warning 394
- Trademarks 394
- Viewing certifications 394
- Xs1920 series user s guide 394
- Zyxel limited warranty 394
- Numerics 395
Похожие устройства
- Grillver партикс air 500 Инструкция по эксплуатации
- Zyxel GS1100-16 Инструкция по эксплуатации
- Zyxel GS1100-16 Технические характеристики
- Zyxel ES1100-24E Инструкция по эксплуатации
- Zyxel ES1100-24E Технические характеристики
- Zyxel ES1100-24G Инструкция по эксплуатации
- Zyxel ES1100-24G Технические характеристики
- Zyxel GS1100-24 Инструкция по эксплуатации
- Zyxel GS1100-24 Технические характеристики
- Zyxel XGS1910-24 Инструкция по эксплуатации
- Zyxel XGS1910-24 Технические характеристики
- Zyxel XGS1910-48 Инструкция по эксплуатации
- Zyxel XGS1910-48 Технические характеристики
- Grillver партикс air 730 Инструкция по эксплуатации
- Grillver файркрафт стандарт Инструкция по эксплуатации
- Grillver берель 400 к Инструкция по эксплуатации
- Grillver стандарт air Инструкция по эксплуатации
- Hasbro kre-o серия трансформеры атака с воздуха Инструкция по эксплуатации
- Hasbro kre-o серия трансформеры побег из тюрьмы Инструкция по эксплуатации
- Hasbro kre-o серия трансформеры битва у моста Инструкция по эксплуатации