![Zyxel XS1920-12 — настройка частных VLAN: Руководство пользователя [262/403]](/icons/site-icon-64.png){kind=icon}
Zyxel XS1920-12 — настройка частных VLAN: Руководство пользователя [262/403]
Превью страниц
Страница 262 /
403
![Zyxel XS1920-12 [262/403] Vlan port setting enabled will not be able to communicate with each other](/views2/1168898/page262/bg106.png)
Chapter 32 Private VLAN
XS1920 Series User’s Guide
262
• Community ports in C-VLAN 101 can communicate with promiscuous ports in P-VLAN 100 and
other community ports in C-VLAN 101. They cannot communicate with isolated ports in I-VLAN
102.
• Isolated ports can communicate with promiscuous ports in P-VLAN 100. They cannot
communicate with other isolated ports in I-VLAN 102 nor community ports in C-VLAN 101.
Note: Isolation in VLAN > VLAN Configuration > VLAN Port Setting (see Section
9.6 on page 94) has a higher priority than private VLAN settings, so promiscuous
ports with Isolation in VLAN > VLAN Port Setting enabled will not be able to
communicate with each other.
32.1.1 Configuration
You must go to the Static VLAN screen first (see Section 9.5 on page 92) to create VLAN IDs for
Primary, Isolated or Community VLANs.
Click Advanced Application > Private VLAN to display the following screen.
Figure 185 Advanced Application > Private VLAN
Содержание
1788- User s guide
- Xs1920 series
- Default login details
- Quick start guide
- Gbe web managed switches
- Important
- Read carefully before use
- Keep this guide for future reference
- User s guide 7
- Technical reference 1
- Contents overview
- Chapter 2 hardware installation and connection 2
- Chapter 1 getting to know your switch 8
- Part ii technical reference 31
- Part i user s guide 17
- Contents overview
- Chapter 3 hardware panels 5
- Table of contents
- Chapter 8 basic setting 8
- Chapter 7 zon utility zon neighbor management and port status 1
- Chapter 6 tutorials 3
- Chapter 5 initial setup example 9
- Chapter 4 the web configurator 2
- Chapter 9 vlan 6
- Chapter 14 bandwidth control 34
- Chapter 13 spanning tree protocol 115
- Chapter 12 filtering 113
- Chapter 11 static multicast forward setup 110
- Chapter 10 static mac forward setup 08
- Chapter 18 port authentication 48
- Chapter 17 link aggregation 40
- Chapter 16 mirroring 38
- Chapter 15 broadcast storm control 36
- Chapter 20 time range 60
- Chapter 19 port security 56
- Chapter 24 multicast 78
- Chapter 23 queuing method 75
- Chapter 22 policy rule 71
- Chapter 21 classifier 62
- Chapter 27 loop guard 35
- Chapter 26 ip source guard 12
- Chapter 25 aaa 01
- Chapter 33 green ethernet 64
- Chapter 32 private vlan 60
- Chapter 31 mac pinning 58
- Chapter 30 error disable 52
- Chapter 29 pppoe 43
- Chapter 28 layer 2 protocol tunneling 39
- Chapter 34 link layer discovery protocol lldp 66
- Chapter 37 dhcp 00
- Chapter 36 differentiated services 96
- Chapter 35 static route 91
- Chapter 40 access control 27
- Chapter 39 maintenance 18
- Chapter 38 arp setup 13
- Chapter 45 ip table 58
- Chapter 44 mac table 55
- Chapter 43 cluster management 49
- Chapter 42 syslog 46
- Chapter 41 diagnostic 44
- User s guide
- Introduction
- Getting to know your switch
- Backbone application
- Bridging example
- High performance switching example
- Tag based vlan example
- Ieee 802 q vlan application examples
- Ways to manage the switch
- Good habits for managing the switch
- Rack mounted installation requirements
- Mounting the switch on a rack
- Installation scenarios
- Hardware installation and connection
- Desktop installation procedure
- Mounting the switch on a rack
- Attaching the mounting brackets to the switch
- Hardware panels
- Gigabit ethernet ports
- Front panel
- Default ethernet negotiation settings
- Transceiver installation
- Sfp slots
- Sfp sfp slots
- Transceiver removal
- Rear panel
- Power connector
- Note make sure you are using the correct power source as shown on the panel
- If you forget your password or cannot access the web configurator you will need to use the reset button on the device to reload the factory default configuration file this means that you will lose all configurations that you had previously and the default switch ip address user name and password will be reset to 192 68 admin and 1234 respectively
- Xs1920 series user s guide
- Table 3 led descriptions
- Reset to factory defaults
- Led color status description
- Chapter 3 hardware panels
- After you connect the power to the switch view the leds to ensure proper functioning of the switch and as an aid in troubleshooting
- Note if you want to access the switch web configurator again you may need to change the ip address of your computer to be in the same subnet as that of the default switch ip address 192 68
- Technical reference
- The web configurator
- System login
- Overview
- The status screen
- B c d e
- Xs1920 series user s guide
- Table 5 navigation panel links continued
- Link description
- Chapter 4 the web configurator
- Xs1920 series user s guide
- Table 5 navigation panel links continued
- Link description
- Chapter 4 the web configurator
- Saving your configuration
- Note use the save link when you are done with a configuration session
- Change your password
- Switch lockout
- Resetting the switch
- Note be careful not to lock yourself and others out of the switch
- Logging out of the web configurator
- Overview
- Initial setup example
- Creating a vlan
- Setting port vid
- Note the vlan group id field in this screen and the vid field in the ip setup screen refer to the same vlan id
- Configuring switch management ip address
- Tutorials
- Overview
- How to use dhcp snooping on the switch
- Dhcp server port 2 pvid 102
- Dhcp relay tutorial introduction
- Creating a vlan
- Vlan 102
- How to use dhcp relay on the switch
- Configuring dhcp relay
- Troubleshooting
- Zyxel one network zon utility screen
- Zon utility zon neighbor management and port status
- What you can do
- Overview
- Neighbor screen
- To view the port statistics click status in all web configurator screens to display the status screen as shown next
- The following table describes the fields in the above screen
- Port status summary
- Neighbor
- Label description
- Figure 36 status
- Chapter 7 zon utility zon neighbor management and port status
- Xs1920 series user s guide
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Table 8 status
- Status port details
- Label description
- Click a number in the port column in the status screen to display individual port statistics use this screen to check status and detailed performance data about an individual port on the switch
- Chapter 7 zon utility zon neighbor management and port status
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Table 9 status port details
- Port details
- Label description
- Chapter 7 zon utility zon neighbor management and port status
- Label description
- Chapter 7 zon utility zon neighbor management and port status
- Xs1920 series user s guide
- Table 9 status port details continued
- Xs1920 series user s guide
- Table 9 status port details continued
- Label description
- Chapter 7 zon utility zon neighbor management and port status
- What you can do
- System information
- Overview
- Basic setting
- Xs1920 series user s guide
- The following table describes the labels in this screen
- System info
- Label description
- Chapter 8 basic setting
- Chapter 8 basic setting
- Xs1920 series user s guide
- System info continued
- Label description
- General setup in the navigation panel to display the screen as shown
- General setup
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- General setup
- Chapter 8 basic setting
- Label description
- Introduction to vlans
- In mtu multi tenant unit applications vlan is vital in providing isolation and security among the subscribers when properly configured vlan prevents one subscriber from accessing the network resources of another on the same lan thus a user will not see the printers and hard disks of another user in the same building
- General setup continued
- Chapter 8 basic setting
- A vlan virtual local area network allows a physical network to be partitioned into multiple logical networks devices on a logical network belong to one group a device can belong to more than one group with vlan a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router
- Xs1920 series user s guide
- Xs1920 series user s guide
- Vlan also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain in traditional switched environments all broadcast packets go to each and every individual port with vlan all broadcasts are confined to a specific broadcast domain
- The following table describes the labels in this screen
- Switch setup screen
- Switch setup in the navigation panel to display the screen as shown the vlan setup screens change depending on whether you choose 802 q or port based in the vlan type field in this screen refer to chapter 9 on page 86 for more information on vlan
- Switch setup
- See chapter 9 on page 86 for information on port based and 802 q tagged vlans
- Note vlan is unidirectional it only governs outgoing traffic
- Label description
- Chapter 8 basic setting
- Xs1920 series user s guide
- Switch setup continued
- Label description
- Chapter 8 basic setting
- Ip setup
- Note you must configure a vlan first
- Ip status details
- Ip status
- Static ip details
- Dynamic ip details dhcp
- You can configure multiple routing domains on the same vlan as long as the ip address ranges for the domains do not overlap to change the ip address of the switch in a routing domain simply add a new routing domain entry with a different ip address in the same subnet
- Xs1920 series user s guide
- Use this screen to configure ip related settings
- The switch needs an ip address for it to be managed over the network the factory default ip address is 192 68 the subnet mask specifies the network number portion of an ip address the factory default subnet mask is 255 55 55
- On the switch an ip address is not bound to any physical ports since each ip address on the switch must be in a separate subnet the configured ip address is also known as ip interface or routing domain in addition this allows routing between subnets based on the ip address without additional routers
- Label description
- Ip status_details dynamic continued
- Ip interfaces
- Ip configuration to display the next screen
- Ip configuration
- Chapter 8 basic setting
- You can configure up to 32 ip domains which are used to access and manage the switch from the ports belonging to the pre defined vlan s
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Ip configuration
- Chapter 8 basic setting
- Xs1920 series user s guide
- Port setup in the navigation panel to display the configuration screen
- Port setup
- Note deleting all ip subnets locks you out of the switch
- Label description
- Ip configuration continued
- Chapter 8 basic setting
- Note changes in this row are copied to all the ports as soon as you make them
- Label description
- Chapter 8 basic setting
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Port setup
- Note due to space limitation the port name may be truncated in some web configurator screens
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Interface setup in the navigation panel to display the configuration screen
- Interface setup
- Chapter 8 basic setting
- An ipv6 address is configured on a per interface basis the interface can support virtual interface for example a vlan the switch supports the vlan interface type for ipv6 at the time of writing
- Ipv6 interface status
- The following table describes the labels in this screen
- Label description
- Ipv6 interface status
- Chapter 8 basic setting
- Xs1920 series user s guide
- Xs1920 series user s guide
- Label description
- Ipv6 interface status continued
- Chapter 8 basic setting
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Ipv6 screen the following screen opens
- Ipv6 interface status continued
- Ipv6 configuration
- Chapter 8 basic setting
- Ipv6 interface setup
- Ipv6 global setup
- Ipv6 configuration continued
- Chapter 8 basic setting
- Xs1920 series user s guide
- Use this screen to turn on or off an ipv6 interface and enable stateless autoconfiguration on it click the link next to ipv6 interface setup in the ipv6 configuration screen to display the screen as shown next
- Use this screen to configure the global ipv6 settings click the link next to ipv6 global setup in the ipv6 configuration screen to display the screen as shown next
- The following table describes the labels in this screen
- Label description
- Xs1920 series user s guide
- Use this screen to configure the interface s link local address and default gateway click the link next to ipv6 link local address setup in the ipv6 configuration screen to display the screen as shown next
- The following table describes the labels in this screen
- Label description
- Ipv6 link local address setup
- Ipv6 interface setup
- Chapter 8 basic setting
- A link local address uniquely identifies a device on the local network the lan it is similar to a private ip address in ipv4 you can have the same link local address on multiple interfaces on a device a link local unicast address has a predefined prefix of fe80 10
- Ipv6 link local address setup
- Ipv6 global address setup
- Chapter 8 basic setting
- Xs1920 series user s guide
- Use this screen to configure the interface s ipv6 global address click the link next to ipv6 global address setup in the ipv6 configuration screen to display the screen as shown next
- The following table describes the labels in this screen
- Label description
- Xs1920 series user s guide
- Use this screen to configure neighbor discovery settings for each interface click the link next to ipv6 neighbor discovery setup in the ipv6 configuration screen to display the screen as shown next
- The following table describes the labels in this screen
- Label description
- Ipv6 neighbor discovery setup
- Ipv6 global address setup
- Chapter 8 basic setting
- The following table describes the labels in this screen
- Label description
- Ipv6 router discovery setup
- Ipv6 neighbor discovery setup
- Chapter 8 basic setting
- Xs1920 series user s guide
- Use this screen to configure router discovery settings for each interface click the link next to ipv6 router discovery setup in the ipv6 configuration screen to display the screen as shown next
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note the minimum time interval cannot be greater than three quarters of the maximum time interval
- Label description
- Ipv6 router discovery setup
- Chapter 8 basic setting
- Xs1920 series user s guide
- Use this screen to configure the switch s ipv6 prefix list for each interface click the link next to ipv6 prefix setup in the ipv6 configuration screen to display the screen as shown next
- The following table describes the labels in this screen
- Label description
- Ipv6 router discovery setup continued
- Ipv6 prefix setup
- Chapter 8 basic setting
- Chapter 8 basic setting
- Xs1920 series user s guide
- Use this screen to create a static ipv6 neighbor entry in the switch s ipv6 neighbor table to store the neighbor information permanently click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next
- Label description
- Ipv6 prefix setup continued
- Ipv6 neighbor setup
- Xs1920 series user s guide
- Use this screen to configure the switch s dhcp settings when it is acting as a dhcpv6 client click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next
- The following table describes the labels in this screen
- Label description
- Ipv6 neighbor setup
- Dhcpv6 client setup
- Chapter 8 basic setting
- The following table describes the labels in this screen
- Label description
- Dhcpv6 client setup
- Chapter 8 basic setting
- Xs1920 series user s guide
- What you need to know
- What you can do
- Overview
- Garp timers
- Forwarding tagged and untagged frames
- Automatic vlan registration
- Vlan parameter term description
- Table 31 ieee 802 q vlan terminology
- Refer to the following figure suppose you want to create vlan groups 1 and 2 v1 and v2 on devices a and b without vlan trunking you must configure vlan groups 1 and 2 on all intermediary switches c d and e otherwise they will drop frames with unknown vlan group tags however with vlan trunking enabled on a port s in each intermediary switch you only need to create vlan groups in the end devices a and b c d and e automatically allow frames with vlan group tags 1 and 2 vlan groups that are unknown to those switches to pass through their vlan trunking port s
- Port vlan trunking
- Please refer to the following table for common ieee 802 q vlan terminology
- Gvrp garp vlan registration protocol is a registration protocol that defines a way for switches to register necessary vlan members on ports across the network enable this function to permit vlan groups beyond the local switch
- Figure 60 port vlan trunking
- Enable vlan trunking on a port to allow frames belonging to unknown vlan groups to pass through that port this is useful if you want to set up vlan groups on end devices without having to configure the same vlan groups on intermediary devices
- Chapter 9 vlan
- Xs1920 series user s guide
- Vlan status
- Static vlan
- Select the vlan type
- Xs1920 series user s guide
- Vlan vlan status continued
- Vlan details
- Vlan detail
- Use this screen to view detailed port settings and status of the vlan group click on an index number in the vlan status screen to display vlan details
- The following table describes the labels in this screen
- Label description
- Chapter 9 vlan
- Private vlan
- Label description
- Click private vlan status in the vlan status screen to display the screen as shown next
- Chapter 9 vlan
- Xs1920 series user s guide
- Vlan detail continued
- The following table describes the labels in this screen
- Private vlan status
- Xs1920 series user s guide
- Vlan configuration to see the following screen
- Vlan configuration
- Use this screen to configure a static vlan for the switch click static vlan in the vlan status screen to display the screen as shown next
- The following table describes the labels in the above screen
- Private vlan status continued
- Label description
- Configure a static vlan
- Chapter 9 vlan
- Static vlan setup
- Label description
- Chapter 9 vlan
- Xs1920 series user s guide
- The following table describes the related labels in this screen
- Xs1920 series user s guide
- Use the vlan port setting screen to configure the static vlan ieee 802 q settings on a port click the vlan port setup link in the vlan status screen
- Static vlan setup continued
- Note changes in this row are copied to all the ports as soon as you make them
- Label description
- Configure vlan port settings
- Chapter 9 vlan
- Xs1920 series user s guide
- Vlan port setup
- The following table describes the labels in this screen
- Note changes in this row are copied to all the ports as soon as you make them
- Label description
- Chapter 9 vlan
- Chapter 9 vlan
- You configure a subnet based vlan with priority 6 and vid of 100 for traffic received from ip subnet 172 6 24 voice services you also have a subnet based vlan with priority 5 and vid of 200 for traffic received from ip subnet 192 68 24 video services lastly you configure vlan with priority 3 and vid of 300 for traffic received from ip subnet 10 24 data services all untagged incoming frames will be classified based on their source ip subnet and prioritized accordingly that is video services receive the highest priority and data the lowest
- Xs1920 series user s guide
- Vlan port setup
- Subnet based vlans allow you to group traffic into logical vlans based on the source ip subnet you specify when a frame is received on a port the switch checks if a tag is added already and the ip subnet it came from the untagged packets from the same ip subnet are then placed in the same subnet based vlan one advantage of using subnet based vlans is that priority can be assigned to traffic from the same ip subnet
- Subnet based vlans
- Label description
- For example an isp internet services provider may divide different types of services it provides to customers into different ip subnets traffic for voice services is designated for ip subnet 172 6 24 video for 192 68 24 and data for 10 24 the switch can then be configured to group incoming traffic based on the source ip subnet of incoming frames
- Note subnet based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan
- Internet
- Configuring subnet based vlan
- Subnet based vlan setup
- Protocol based vlans allow you to group traffic into logical vlans based on the protocol you specify when an upstream frame is received on a port configured for a protocol based vlan the switch checks if a tag is added already and its protocol the untagged packets of the same protocol are then placed in the same protocol based vlan one advantage of using protocol based vlans is that priority can be assigned to traffic of the same protocol
- Protocol based vlans
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan
- Label description
- Chapter 9 vlan
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan
- Configuring protocol based vlan
- You can set priority level to the voice vlan and add mac address of ip phones from specific manufacturers by using its id from the organizationally unique identifiers oui
- Xs1920 series user s guide
- Voice vlan ensures that the sound quality of an ip phone is preserved from deteriorating when the data traffic on the switch ports is high it groups the voice traffic with defined priority into an assigned vlan which enables the separation of voice and data traffic coming onto the switch port
- Voice vlan
- The following table describes the labels in this screen
- Protocol based vlan setup
- Note protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based vlans
- Label description
- Click voice vlan in the vlan configuration screen to display the configuration screen as shown
- Chapter 9 vlan
- Label description
- Chapter 9 vlan
- Xs1920 series user s guide
- Voice vlan setup
- The following table describes the fields in the above screen
- Mac based vlan
- Label description
- The port based vlan setup screen is shown next the cpu management port forms a vlan with all ethernet ports
- The following table describes the fields in the above screen
- Port based vlans require allowed outgoing ports to be defined for each port therefore if you wish to allow two subscriber ports to talk to each other for example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports
- Port based vlans are vlans where the packet forwarding decision is based on the destination mac address and its associated port
- Port based vlans are specific only to the switch on which they were created
- Port based vlan setup
- Note when you activate port based vlan the switch uses a default vlan id of 1 you cannot change it
- Note in screens such as ip setup and filtering that require a vid you must enter 1 as the vid
- Mac based vlan setup
- Label description
- Chapter 9 vlan
- Xs1920 series user s guide
- Port based vlan
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Table 42 port based vlan setup label description
- Figure 76 port based vlan setup port isolation
- Chapter 9 vlan
- Technical reference
- Create an ip based vlan example
- What you can do
- Static mac forward setup
- Overview
- Configuring static mac forwarding
- Note static mac addresses do not age out
- Label description
- Chapter 10 static mac forward setup
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Static mac forwarding
- What you need to know
- What you can do
- Static multicast forward setup overview
- Static multicast forward setup
- Configuring static multicast forwarding
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Static multicast forwarding
- Label description
- Chapter 11 static multicast forward setup
- Filtering overview
- Filtering
- Configure a filtering rule
- What you can do
- Xs1920 series user s guide
- The following table describes the related labels in this screen
- Label description
- Filtering
- Chapter 12 filtering
- What you need to know
- What you can do
- Spanning tree protocol overview
- Spanning tree protocol
- Stp terminology
- Note in this user s guide stp refers to both stp and rstp
- How stp works
- Note each port can belong to one stp tree only
- Multiple stp
- Multiple rstp
- Stp port states
- Spanning tree protocol status screen
- Spanning tree configuration
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Spanning tree protocol screen
- Label description
- Configure rapid spanning tree protocol
- Configuration
- Chapter 13 spanning tree protocol
- Note changes in this row are copied to all the ports as soon as you make them
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu
- Label description
- Configuration screen to enable rstp on the switch
- Chapter 13 spanning tree protocol
- 2 hello time 1
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Status rstp
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 115 for more information on rstp
- Rstp continued
- Rapid spanning tree protocol status
- Note this screen is only available after you activate rstp on the switch
- Label description
- Chapter 13 spanning tree protocol
- Configure multiple rapid spanning tree protocol
- The following table describes the labels in this screen
- Label description
- Configuration screen to enable mrstp on the switch
- Chapter 13 spanning tree protocol
- Xs1920 series user s guide
- Xs1920 series user s guide
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 115 for more information on mrstp
- Note this screen is only available after you activate mrstp on the switch
- Note changes in this row are copied to all the ports as soon as you make them
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu
- Multiple rapid spanning tree protocol status
- Mrstp continued
- Label description
- Chapter 13 spanning tree protocol
- 2 hello time 1
- Spanning tree protocol screen see section on page 117 for more information on mstp
- Note the listening state does not exist in rstp
- Label description
- Configure multiple spanning tree protocol
- Chapter 13 spanning tree protocol
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Status mrstp
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Configuration screen to enable mstp on the switch
- Chapter 13 spanning tree protocol
- Xs1920 series user s guide
- Note changes in this row are copied to all the ports as soon as you make them
- Mstp continued
- Label description
- Chapter 13 spanning tree protocol
- 2 hello time 1
- Label description
- Chapter 13 spanning tree protocol
- Xs1920 series user s guide
- Port in the navigation panel to display the status screen as shown next see section on page 117 for more information on mstp
- Multiple spanning tree port configuration
- Mstp continued
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section on page 117 for more information on mstp
- Note this screen is only available after you activate mstp on the switch
- Note changes in this row are copied to all the ports as soon as you make them
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu
- Multiple spanning tree protocol status
- Label description
- Chapter 13 spanning tree protocol
- Status mstp
- Label description
- Chapter 13 spanning tree protocol
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Xs1920 series user s guide
- This section provides technical background information on the topics discussed in this chapter
- The following figure shows a network example where two vlans are configured on the two switches if the switches are using stp or rstp the link for vlan 2 will be blocked as stp and rstp allow only one link in the network and block the redundant link
- Technical reference
- Status mstp continued
- Mstp network example
- Label description
- Chapter 13 spanning tree protocol
- Vlan 1 vlan 2
- Mst region
- Mst instance
- Common and internal spanning tree cist
- Bandwidth control setup
- Bandwidth control
- What you can do
- Overview
- Xs1920 series user s guide
- The following table describes the related labels in this screen
- Note ingress rate bandwidth control applies to layer 2 traffic only
- Note changes in this row are copied to all the ports as soon as you make them
- Label description
- Chapter 14 bandwidth control
- Bandwidth control
- What you can do
- Broadcast storm control setup
- Broadcast storm control overview
- Broadcast storm control
- Label description
- Chapter 15 broadcast storm control
- Broadcast storm control
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note changes in this row are copied to all the ports as soon as you make them
- What you can do
- Port mirroring setup
- Mirroring overview
- Mirroring
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note changes in this row are copied to all the ports as soon as you make them
- Mirroring
- Label description
- Chapter 16 mirroring
- What you can do
- Overview
- Link aggregation
- What you need to know
- Link aggregation status
- Link aggregation id
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Link aggregation status
- Link aggregation setting to display the screen shown next see section 17 on page 140 for more information on link aggregation
- Link aggregation setting
- Label description
- Chapter 17 link aggregation
- Note when you enable the port security feature on the switch and configure port security settings for a port you cannot include the port in an active trunk group
- Link aggregation setting continued
- Link aggregation control protocol
- Lacp to display the screen shown next see section on page 140 for more information on dynamic link aggregation
- Label description
- Chapter 17 link aggregation
- Xs1920 series user s guide
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note do not configure this screen unless you want to enable dynamic link aggregation
- Label description
- Chapter 17 link aggregation
- Technical reference
- Static trunking example
- Example
- What you need to know
- Port authentication overview
- Port authentication
- Mac authentication
- Port authentication configuration
- Activate ieee 802 x security
- Chapter 18 port authentication
- Xs1920 series user s guide
- When 802 x port authentication is enabled on the switch and its ports clients that do not have the correct credentials are blocked from using the port s you can configure your switch to have one vlan that acts as a guest vlan if you enable the guest vlan 102 in the example on a port 2 in the example the user a in the example that is not ieee 802 x capable or fails to enter the correct username and password can still access the port but traffic from the user is forwarded to the guest vlan that is unauthenticated users can have access to limited network resources in the same guest vlan such as the internet the rights granted to the guest vlan depends on how the network administrator configures switches or routers with the guest network feature
- The following table describes the labels in this screen
- Note you must first enable 802 x authentication on the switch before configuring it on each port
- Note changes in this row are copied to all the ports as soon as you make them
- Label description
- Guest vlan
- Vlan 102
- Vlan 100
- Internet
- Xs1920 series user s guide
- Use this screen to activate mac authentication in the port authentication screen click mac authentication to display the configuration screen as shown
- Label description
- Guest vlan continued
- Chapter 18 port authentication
- Activate mac authentication
- Xs1920 series user s guide
- Note changes in this row are copied to all the ports as soon as you make them
- Mac authentication continued
- Label description
- Chapter 18 port authentication
- What you can do
- Port security setup
- Port security overview
- Port security
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Port security
- Note changes in this row are copied to all the ports as soon as you make them
- Label description
- Chapter 19 port security
- Chapter 19 port security
- Xs1920 series user s guide
- Vlan mac address limit
- The following table describes the labels in this screen
- Port security screen to display the screen as shown
- Port security continued
- Label description
- Xs1920 series user s guide
- Vlan mac address limit continued
- Label description
- Chapter 19 port security
- Time range setup
- Time range
- About time range
- The following table describes the labels in this screen
- Label description
- Chapter 20 time range
- Xs1920 series user s guide
- Time range
- What you need to know
- What you can do
- Overview
- Classifier status
- Classifier
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Click classifier configuration in the classifier status screen to display the configuration screen as shown
- Classifier status
- Classifier configuration
- Chapter 21 classifier
- Classifier configuration
- Chapter 21 classifier
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Xs1920 series user s guide
- Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers
- Label description
- Classifier configuration continued
- Chapter 21 classifier
- The following table describes the labels in this screen
- Table 73 common ethernet types and protocol numbers
- Table 72 classifier status summary table
- Note when two rules conflict with each other a higher layer rule has priority over lower layer rule
- Label description
- Ethernet type protocol number
- Classifier summary table
- Chapter 21 classifier
- Xs1920 series user s guide
- Viewing and editing classifier configuration
- To view a summary of the classifier configuration scroll down to the summary table at the bottom of the classifier configuration screen to change the settings of a rule click a number in the index field
- The following table shows some other common ethernet types and the corresponding protocol number
- The following table describes the labels in this screen
- Table 75 common tcp and udp port numbers
- Table 74 common ip protocol types and protocol numbers
- Some of the most common tcp and udp port numbers are
- See appendix b on page 379 for information on commonly used port numbers
- Protocol type protocol number
- Protocol name tcp udp port number
- Label description
- In the internet protocol there is a field called protocol to identify the next level protocol the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list
- Click classifier global setting in the classifier configuration screen to display the configuration screen as shown
- Classifier global setting
- Chapter 21 classifier
- Xs1920 series user s guide
- Xs1920 series user s guide
- The following screen shows an example where you configure a classifier that identifies all traffic from mac address 00 50 ba ad 4f 81 on port 2
- Label description
- Classifier global setting
- Classifier example
- Chapter 21 classifier
- After you have configured a classifier you can configure a policy in the policy screen to define action s on the classified traffic flow
- Example
- What you can do
- Policy rules overview
- Policy rule
- Configuring policy rules
- Note you can specify only one action pair in a policy rule to have the switch take multiple actions on the same traffic flow you need to define multiple classifiers with the same criteria and apply different policy rules
- Label description
- Chapter 22 policy rule
- Xs1920 series user s guide
- Policy rule continued
- Xs1920 series user s guide
- Viewing and editing policy configuration
- To view a summary of the classifier configuration scroll down to the summary table at the bottom of the policy screen to change the settings of a rule click a number in the index field
- Policy rule summary table
- Policy rule continued
- Label description
- Chapter 22 policy rule
- What you need to know
- What you can do
- Queuing method overview
- Queuing method
- Configuring queuing
- Label description
- Chapter 23 queuing method
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Queuing method
- Note changes in this row are copied to all the ports as soon as you make them
- What you need to know
- What you can do
- Multicast overview
- Multicast
- Mld snooping proxy
- Igmp snooping and vlans
- Report
- Mvr overview
- Mld messages
- Mvr modes
- Multicast vlan vlan 1
- How mvr works
- Vlan 3
- Vlan 2
- Types of mvr ports
- Multicast vlan vlan 1
- Multicast setup
- Ipv4 multicast status
- Igmp snooping
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Igmp snooping
- Chapter 24 multicast
- Ipv4 multicast in the navigation panel click the igmp snooping link and then the igmp snooping vlan link to display the screen as shown see section on page 179 for more information on igmp snooping vlan
- Igmp snooping vlan
- Igmp snooping continued
- Chapter 24 multicast
- Xs1920 series user s guide
- Label description
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Igmp snooping vlan
- Chapter 24 multicast
- Igmp filtering profile
- Xs1920 series user s guide
- The following table describes the fields in the above screen
- Label description
- Ipv6 multicast to display the screen as shown this screen shows the ipv6 multicast group information see section 24 on page 178 for more information on multicasting
- Ipv6 multicast status
- Ipv6 multicast
- Igmp filtering profile continued
- Chapter 24 multicast
- Mld snooping proxy vlan
- Mld snooping proxy
- Label description
- Xs1920 series user s guide
- The following table describes the fields in the above screen
- Label description
- Chapter 24 multicast
- Xs1920 series user s guide
- Vlan screen to display the screen as shown
- Mld snooping proxy vlan port role setting
- Label description
- Chapter 24 multicast
- Mld snooping proxy vlan id
- Leave mode
- Label description
- Chapter 24 multicast
- Xs1920 series user s guide
- The following table describes the fields in the above screen
- Port role setting
- Port role
- Mld snooping proxy vlan filtering
- Label description
- Mld snooping proxy vlan filtering profile
- Max group num
- Label description
- Group limit
- Filtering screen to display the screen as shown
- Filtering profile
- Filtering
- Chapter 24 multicast
- Cancel
- Active
- Xs1920 series user s guide
- The following table describes the fields in the above screen
- The following table describes the fields in the above screen
- Start address
- Profile name
- Note your switch automatically creates a static vlan with the same vid when you create a multicast vlan in this screen
- Note you can create up to five multicast vlans and up to 256 multicast rules on the switch
- Mvr to display the screen as shown next
- Label description
- General mvr configuration
- Filtering profile
- End address
- Delete click delte button to permanently delete the entries you selected in the delete column
- Delete
- Chapter 24 multicast
- Cancel
- Xs1920 series user s guide
- Xs1920 series user s guide
- The following table describes the related labels in this screen
- Label description
- Chapter 24 multicast
- Xs1920 series user s guide
- Use this screen to configure mvr ip multicast group address es click the group configuration link in the mvr screen
- Note a port can belong to more than one multicast vlan however ip multicast group addresses in different multicast vlans cannot overlap
- Mvr group configuration
- Mvr continued
- Label description
- Chapter 24 multicast
- All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group
- Label description
- Group configuration
- Chapter 24 multicast
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Mvr configuration example
- Multicast vid 200 vlan 1
- Example
- Example
- What you need to know
- What you can do
- Aaa overview
- Radius server setup
- Radius and tacacs
- Local user accounts
- Aaa screens
- Radius server setup
- Label description
- Chapter 25 aaa
- Xs1920 series user s guide
- The following table describes the labels in this screen
- The authentication features on the switch click on the radius server setup link in the aaa screen to view the screen as shown
- Xs1920 series user s guide
- Use this screen to configure your tacacs server settings see section on page 202 for more information on tacacs servers click on the tacacs server setup link in the aaa screen to view the screen as shown
- Tacacs server setup
- Radius server setup continued
- Label description
- Chapter 25 aaa
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Tacacs server setup
- Label description
- Chapter 25 aaa
- Chapter 25 aaa
- Aaa setup
- Xs1920 series user s guide
- Use this screen to configure authentication and authorization settings on the switch click on the aaa setup link in the aaa screen to view the screen as shown
- Tacacs server setup continued
- Label description
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Chapter 25 aaa
- Aaa setup
- This section provides technical background information on the topics discussed in this chapter
- The switch supports vsas that allow you to perform the following actions based on user authentication
- Technical reference
- Rfc 2865 standard specifies a method for sending vendor specific information between a radius server and a network access device for example the switch a company can create vendor specific attributes vsas to expand the functionality of a radius server
- Label description
- Chapter 25 aaa
- Aaa setup continued
- Xs1920 series user s guide
- Vendor specific attribute
- Tunnel protocol attribute
- Note refer to the documentation that comes with your radius server on how to configure vsas for users authenticating via the radius server
- Supported radius attributes
- Attributes used to login users
- Attributes used for authentication
- Attributes used for authenticating privilege access
- Attributes used by the ieee 802 x authentication
- What you can do
- Overview
- Ip source guard
- What you need to know
- Ip source guard
- Ip source guard static binding
- Arp learning screen before you use the arp freeze feature
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Static binding
- Label description
- Dhcp snooping
- Chapter 26 ip source guard
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Dhcp snooping
- Chapter 26 ip source guard
- Xs1920 series user s guide
- Label description
- Dhcp snooping continued
- Chapter 26 ip source guard
- Chapter 26 ip source guard
- Xs1920 series user s guide
- Label description
- Dhcp snooping continued
- Dhcp snooping configure
- Configure
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note you have to enable dhcp snooping on the dhcp vlan too
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed
- Label description
- Configure
- Chapter 26 ip source guard
- Label description
- Dhcp snooping port configure
- Configure continued
- Chapter 26 ip source guard
- Xs1920 series user s guide
- Use this screen to specify whether ports are trusted or untrusted ports for dhcp snooping
- Note if dhcp snooping is enabled but there are no trusted ports dhcp requests cannot reach the dhcp server
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Dhcp snooping vlan configure
- Chapter 26 ip source guard
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed
- Label description
- Dhcp snooping vlan port configure
- Chapter 26 ip source guard
- Arp inspection status
- Arp inspection
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Chapter 26 ip source guard
- Xs1920 series user s guide
- Vlan status
- The following table describes the labels in this screen
- Label description
- Chapter 26 ip source guard
- Arp inspection vlan status
- Arp inspection
- The following table describes the labels in this screen
- Log status
- Label description
- Chapter 26 ip source guard
- Arp inspection log status
- Xs1920 series user s guide
- Vlan status
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Log status
- Label description
- Chapter 26 ip source guard
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Configure
- Chapter 26 ip source guard
- Arp inspection configure
- Configure continued
- Chapter 26 ip source guard
- Arp inspection port configure
- Xs1920 series user s guide
- Label description
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Chapter 26 ip source guard
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Chapter 26 ip source guard
- Arp inspection vlan configure
- Trusted vs untrusted ports
- Technical reference
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed
- Dhcp snooping overview
- Configuring dhcp snooping
- Dhcp snooping database
- Dhcp relay option 82 information
- Arp inspection overview
- Arp inspection and mac address filters
- Trusted vs untrusted ports
- Syslog
- Note it is recommended you enable dhcp snooping at least one day before you enable arp inspection so that the switch has enough time to build the binding table
- Configuring arp inspection
- What you need to know
- What you can do
- Loop guard overview
- Loop guard
- Note the loop guard feature can not be enabled on the ports that have spanning tree protocol rstp mrstp or mstp enabled
- Note after resolving the loop problem on your network you can re activate the disabled port via the web configurator see section 8 on page 69
- Loop guard setup
- Chapter 27 loop guard
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note changes in this row are copied to all the ports as soon as you make them
- Loop guard
- Label description
- What you need to know
- What you can do
- Layer 2 protocol tunneling overview
- Layer 2 protocol tunneling
- Service provider s network c
- Layer 2 protocol tunneling mode
- Configuring layer 2 protocol tunneling
- Note all the edge switches in the service provider s network should be set to use the same mac address for encapsulation
- Layer 2 protocol tunneling
- Label description
- Chapter 28 layer 2 protocol tunneling
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note the mac address can be either a unicast mac address or multicast mac address if you use a unicast mac address make sure the mac address does not exist in the address table of a switch on the service provider s network
- Note changes in this row are copied to all the ports as soon as you make them
- Xs1920 series user s guide
- Note you can enable l2pt services for stp lacp vtp cdp udld and pagp on the access port s only
- Layer 2 protocol tunneling continued
- Label description
- Chapter 28 layer 2 protocol tunneling
- What you need to know
- What you can do
- Pppoe intermediate agent overview
- Sub option format
- Pppoe intermediate agent tag format
- Flexible circuit id syntax with identifier string and variables
- Chapter 29 pppoe
- Xs1920 series user s guide
- Wt 101 default circuit id syntax
- Untrusted ports are connected to subscribers
- Trusted ports are connected to pppoe servers
- The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port
- Table 117 pppoe ia circuit id sub option format defined in wt 101
- Table 116 pppoe ia circuit id sub option format using identifier string and variables
- Port state
- Option example is switch 07 0123 and indicates the pppoe packets come from a pppoe client which is connected to the switch s port 7 and belong to vlan 123
- Note the switch will drop all pppoe discovery packets if you enable the pppoe intermediate agent and there are no trusted ports
- Intermediate agent screen the switch automatically generates a circuit id string according to the default circuit id syntax which is defined in the dsl forum working text wt 101 the default access node identifier is the host name of the pppoe intermediate agent and the eth indicates ethernet
- If a pado pppoe active discovery offer pads pppoe active discovery session confirmation or padt pppoe active discovery terminate packet is sent from a pppoe server and received on a trusted port the switch forwards it to all other ports
- If a padi padr or padt packet is sent from a pppoe client and received on an untrusted port the switch adds a vendor specific tag to the packet and then forwards it to the trusted port s
- If a padi or padr packet is sent from a pppoe client but received on a trusted port the switch forwards it to other trusted port s
- Every port is either a trusted port or an untrusted port for the pppoe intermediate agent this setting is independent of the trusted untrusted setting for dhcp snooping or arp inspection you can also specify the agent sub options circuit id and remote id that the switch adds to padi and padr packets from pppoe clients
- Pppoe intermediate agent
- The pppoe screen
- Xs1920 series user s guide
- Use this screen to specify whether individual ports are trusted or untrusted ports and have the switch add extra information to pppoe discovery packets from pppoe clients on a per port basis
- Pppoe ia per port
- Note the switch will drop all pppoe packets if you enable the pppoe intermediate agent on the switch and there are no trusted ports
- Label description
- Intermediate agent continued
- Click the port link in the intermediate agent screen to display the screen as shown
- Chapter 29 pppoe
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Chapter 29 pppoe
- Port continued
- Label description
- Chapter 29 pppoe
- Xs1920 series user s guide
- Use this screen to configure pppoe ia settings that apply to a specific vlan on a port
- The following table describes the labels in this screen
- Pppoe ia per port per vlan
- Port screen to display the screen as shown
- Xs1920 series user s guide
- Vlan continued
- Use this screen to set whether the pppoe intermediate agent is enabled on a vlan and whether the switch appends the circuit id and or remote id to pppoe discovery packets from a specific vlan
- The following table describes the labels in this screen
- Pppoe ia for vlan
- Label description
- Click the vlan link in the intermediate agent screen to display the screen as shown
- Chapter 29 pppoe
- Vlan continued
- Label description
- Chapter 29 pppoe
- Xs1920 series user s guide
- The error disable screens overview
- Error disable status
- Error disable overview
- Error disable
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Errdisable status
- Chapter 30 error disable
- Errdisable detect screen
- Cpu protection configuration
- Error disable detect configuration
- Errdisable screen to display the screen as shown
- Cpu protection
- Chapter 30 error disable
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Some features such as loop guard or cpu protection allow the switch to shut down a port or discard specific packets on a port when an error is detected on the port for example if the switch detects that packets sent out the port s loop back to the switch the switch can shut down the port s automatically after that you need to enable the port s or allow the packets on a port manually via the web configurator with error disable recovery you can set the disabled port s to become active or start receiving the packets again after the time interval you specify
- Label description
- Error disable recovery configuration
- Errdisable screen to display the screen as shown
- Errdisable detect
- Chapter 30 error disable
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Errdisable recovery
- Chapter 30 error disable
- Mac pinning overview
- Mac pinning configuration
- Mac pinning
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note changes in this row are copied to all the ports as soon as you make them
- Mac pinning standalone mode
- Mac pinning
- Label description
- Chapter 31 mac pinning
- Private vlan overview
- Private vlan
- Table 128 spanning pvlan graphic key
- Table 127 pvlan graphic key
- Label description
- Configuration
- Vlan port setting enabled will not be able to communicate with each other
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Private vlan
- Note the vlan id and mode selected here must be the same as the vlan id and vlan typ
- Label description
- Chapter 32 private vlan
- Green ethernet overview
- Green ethernet
- Configuring green ethernet
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Green ethernet
- Chapter 33 green ethernet
- Link layer discovery protocol lldp
- Lldp overview
- Lldp med overview
- Lldp screens
- Lldp local status
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Lldp local status and then click a port number for example 1 port in the local port column to display the screen as shown next
- Lldp local status
- Lldp local port status detail
- Label description
- Chapter 34 link layer discovery protocol lldp
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Lldp local port status detail
- Label description
- Chapter 34 link layer discovery protocol lldp
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Lldp remote status click here to display the screen as shown next
- Lldp remote status
- Lldp local port status detail
- Label description
- Chapter 34 link layer discovery protocol lldp
- Lldp remote port status detail
- Xs1920 series user s guide
- The following table describes the labels in basic tlv part of the screen
- Lldp remote port status detail basic tlv
- Label description
- Chapter 34 link layer discovery protocol lldp
- Label description
- Dot 1 and dot3 tlv
- Chapter 34 link layer discovery protocol lldp
- Xs1920 series user s guide
- The following table describes the labels in the dot1 and dot3 parts of the screen
- Lldp remote port status detail dot1 and dot3 tlv
- Xs1920 series user s guide
- Lldp remote port status detail dot1 and dot3 tlv
- Label description
- Chapter 34 link layer discovery protocol lldp
- Xs1920 series user s guide
- The following table describes the labels in the med tlv part of the screen
- Lldp remote port status detail med tlv
- Label description
- Chapter 34 link layer discovery protocol lldp
- Lldp configuration click here to display the screen as shown next
- Lldp configuration
- Label description
- Chapter 34 link layer discovery protocol lldp
- Xs1920 series user s guide
- Lldp remote port status detail med tlv
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Lldp configuration
- Label description
- Chapter 34 link layer discovery protocol lldp
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Lldp configuration basic tlv setting
- Lldp configuration
- Label description
- Chapter 34 link layer discovery protocol lldp
- Basic tlv setting to display the screen as shown next
- Basic tlv setting
- Chapter 34 link layer discovery protocol lldp
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Org specific tlv setting to display the screen as shown next
- Org specific tlv setting
- Lldp configuraion basic org specific tlv setting
- Label description
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Org specific tlv setting
- Lldp med configuration click here to display the screen as shown next
- Lldp med configuration
- Label description
- Chapter 34 link layer discovery protocol lldp
- Lldp med network policy
- Label description
- Chapter 34 link layer discovery protocol lldp
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Lldp med network policy click here to display the screen as shown next
- Xs1920 series user s guide
- Lldp med network policy
- Lldp med location click here to display the screen as shown next
- Lldp med location
- Label description
- Chapter 34 link layer discovery protocol lldp
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Lldp med location
- Label description
- Chapter 34 link layer discovery protocol lldp
- Label description
- Chapter 34 link layer discovery protocol lldp
- Xs1920 series user s guide
- Lldp med location
- What you can do
- Static routing
- Static route overview
- Static route
- Internet
- Configuring static routing
- Xs1920 series user s guide
- The following table describes the related labels you use to create a static route
- Label description
- Ipv4 static route
- Chapter 35 static route
- Ipv4 static route continued
- Configuring ipv6 static routing
- Chapter 35 static route
- Xs1920 series user s guide
- The following table describes the related labels you use to create a static route
- Static routing screen to display the screen as shown
- Label description
- Ipv6 static route
- Xs1920 series user s guide
- Label description
- Ipv6 static route continued
- Chapter 35 static route
- What you need to know
- What you can do
- Differentiated services overview
- Differentiated services
- P platinum g gold s silver b bronze
- Diffserv network example
- Activating diffserv
- You can configure the dscp to ieee 802 p mapping to allow the switch to prioritize all traffic based on the incoming dscp value according to the diffserv to ieee 802 p mapping table
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Dscp to ieee 802 p priority settings
- Diffserv
- Chapter 36 differentiated services
- Xs1920 series user s guide
- To change the dscp ieee 802 p mapping click the dscp setting link in the diffserv screen to display the screen as shown next
- The following table shows the default dscp to ieee802 p mapping
- The following table describes the labels in this screen
- Table 147 default dscp ieee 802 p mapping
- Label description
- Dscp setting
- Configuring dscp settings
- Chapter 36 differentiated services
- What you need to know
- What you can do
- Dhcp overview
- Dhcp relay agent information
- Dhcp relay
- Dhcp configuration
- Dhcpv4 status
- Dhcpv4 relay agent information
- Dhcpv4 relay
- Sub option format
- I1 i2 and in are dhcp relay agent sub options which contain additional information about the dhcp client you need to define at least one sub option
- Dhcpv4 relay agent information format
- Dhcpv4 option 82 profile
- Dhcpv4 in the navigation panel and click the option 82 profile link to display the screen as shown
- Chapter 37 dhcp
- A dhcp relay agent information option has the following format
- Xs1920 series user s guide
- There are two types of sub option agent circuit id sub option and agent remote id sub option they have the following formats
- The 1 in the first field identifies this as an agent circuit id sub option and 2 identifies this as an agent remote id sub option the next field specifies the length of the field
- Table 153 dhcp relay agent remote id sub option format
- Table 152 dhcp relay agent circuit id sub option format
- Table 151 dhcp relay agent information option format
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Option 82 profile
- Label description
- Chapter 37 dhcp
- Label description
- Global
- Dhcpv4 in the navigation panel and click the global link to display the screen as shown
- Configuring dhcpv4 global relay
- Chapter 37 dhcp
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Option 82 profile continued
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Global continued
- Dhcpv4 global relay port configure
- Chapter 37 dhcp
- Vlan1 vlan2
- Global dhcp relay configuration example
- Example
- Label description
- Dhcpv4 in the navigation panel then click the vlan link in the dhcp status screen that displays
- Configuring dhcpv4 vlan settings
- Chapter 37 dhcp
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note you must set up a management ip address for each vlan that you want to configure dhcp settings for on the switch
- Xs1920 series user s guide
- Vlan continued
- The following table describes the labels in this screen
- Label description
- Dhcpv4 vlan port configure
- Chapter 37 dhcp
- Example dhcp relay for two vlans
- Example
- 6 0 00
- Dhcpv6 relay
- Label description
- Dhcpv6 continued
- Chapter 37 dhcp
- Xs1920 series user s guide
- How arp works
- Arp setup
- Arp overview
- Arp learning mode
- Gratuitous arp
- Arp request
- Arp setup
- Arp learning
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Static arp
- Label description
- Chapter 38 arp setup
- Arp setup screen to display the screen as shown
- Arp learning
- Xs1920 series user s guide
- The following table describes the related labels in this screen
- Static arp
- Label description
- Chapter 38 arp setup
- Cancel
- The maintenance screen
- Overview
- Maintenance
- Make sure you have downloaded and unzipped the correct model firmware and version to your computer before uploading to the device
- Maintenance continued
- Label description
- Firmware upgrade to view the screen as shown next
- Firmware upgrade
- Chapter 39 maintenance
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device
- Xs1920 series user s guide
- Use the following screen to upgrade your switch to the latest firmware the switch supports dual firmware images firmware 1 and firmware 2 use this screen to specify which image is updated when firmware is uploaded using the web configurator and to specify which image is loaded when the switch starts up
- Note make sure to click the save button in any screen to save your settings to the current configuration on the switch
- Xs1920 series user s guide
- Use this screen to restore a previously saved configuration from your computer to the switch using the restore configuration screen
- Type the path and file name of the configuration file you wish to restore in the file path text box or click browse to locate it after you have specified the file click restore config is the name of
- The top of firmware upgrade screen shows which firmware version is currently running on the switch select the config boot image drop down list box if you want to reboot the switch and click apply to apply the new firmware immediately firmware upgrades are only applied after a reboot click upgrade to load the new firmware after the firmware upgrade process is complete see the system info screen to verify your current firmware version number
- The following table describes the labels in this screen
- Restore configuration
- Restore a configuration file
- Label description
- Firmware upgrade
- Chapter 39 maintenance
- Erase running configuration
- Backup a configuration file
- Factory default
- Save configuration
- Reboot system
- Note clicking the apply or add button does not save the changes permanently all unsaved changes are erased after you reboot the switch
- You may need wordpad or similar software to see the log report correctly the table below describes the fields in the above screen
- Xs1920 series user s guide
- Tech support to see the following screen
- Tech support
- Click ok to reset all switch configurations to the factory defaults
- Chapter 39 maintenance
- Table 165 filename conventions
- Put firmware bin ras 0
- Ftp command line
- Filename conventions
- File type internal name external name description
- Example ftp commands
- Chapter 39 maintenance
- Zynos zyxel network operating system sometimes referred to as the ras file is the system firmware and has a bin filename extension
- Xs1920 series user s guide
- This section shows some examples of uploading to or downloading files from the switch using ftp commands first understand the filename conventions
- This section provides technical background information on the topics discussed in this chapter
- The configuration file also known as the romfile or rom contains the factory default settings in the screens such as password switch setup ip setup and so on once you have customized the switch s settings they can be saved back to your computer under a filename of your choosing
- Technical reference
- Tech support
- Gui based ftp clients
- Ftp command line procedure
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device
- Ftp restrictions
- What you can do
- The access control main screen
- Access control overview
- Access control
- Access control
- Xs1920 series user s guide
- Use this screen to configure your snmp settings
- The following table describes the labels in this screen
- Snmp to view the screen as shown
- Label description
- Configuring snmp
- Chapter 40 access control
- Xs1920 series user s guide
- Trap group
- The following table describes the labels in this screen
- Snmp continued
- Label description
- From the snmp screen click trap group to view the screen as shown use the trap group screen to specify the types of snmp traps that should be sent to each snmp manager
- Configuring snmp trap group
- Chapter 40 access control
- Chapter 40 access control
- Xs1920 series user s guide
- Trap group screen click port to view the screen as shown use this screen to set whether a trap received on the port s would be sent to the snmp manager
- Trap group continued continued
- The following table describes the labels in this screen
- Label description
- Enabling disabling sending of snmp traps on a port
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Port continued
- Note use the username and password of the login accounts you specify in this screen to create accounts on the snmp v3 manager
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch
- Label description
- From the snmp screen click user to view the screen as shown use the user screen to create snmp users for authentication with managers using snmp v3 and associate them to snmp groups an snmp user is an snmp manager
- Configuring snmp user
- Chapter 40 access control
- An administrator is someone who can both view and configure switch changes the username for the administrator is always admin the default administrator password is 1234
- Xs1920 series user s guide
- User continued
- Up to five people one administrator and four non administrators may access the switch via web configurator at any one time
- Setting up login accounts
- Label description
- Chapter 40 access control
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Note it is highly recommended that you change the default administrator password 1234
- Logins to view the screen as shown
- Logins
- Label description
- Chapter 40 access control
- A non administrator username is something other than admin is someone who can view but not configure switch settings
- Label description
- Chapter 40 access control
- Xs1920 series user s guide
- The following table describes the fields in this screen
- Service port access control
- Service access control allows you to decide what services you may use to access the switch you may also change the default service port and configure trusted computer s for each service in the remote management screen discussed later click access control to go back to the main access control screen
- Service access control
- Logins continued
- Remote management
- The following table describes the labels in this screen
- Technical reference
- Simple network management protocol snmp is an application layer protocol used to manage and monitor tcp ip based devices snmp is used to exchange management information between the network management system nms and a network element ne a manager station can manage and monitor the switch through the network via snmp version 1 snmpv1 snmp version 2c or snmp version 3 the next figure illustrates an snmp management operation snmp is only available if tcp ip is configured
- Remote management
- Label description
- Figure 241 snmp management model
- Chapter 40 access control
- An snmp managed network consists of two main components agents and a manager
- About snmp
- Xs1920 series user s guide
- This section provides technical background information on the topics discussed in this chapter
- Supported mibs
- Snmp v3 and security
- Xs1920 series user s guide
- The switch sends traps to an snmp manager when an event occurs the following tables outline the snmp traps by category
- Table 176 snmp system traps
- Snmp traps
- Option object label object id description
- Chapter 40 access control
- Introduction to https
- Note if you disable http in the service access control screen then the switch blocks all http connection attempts
- Internet explorer warning messages
- Https example
- Mozilla firefox warning messages
- Example
- The main screen
- Internet explore
- Example
- Internet explore
- Example
- Overview
- Diagnostic
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Diagnostic
- Chapter 41 diagnostic
- What you can do
- Syslog setup
- Syslog overview
- Syslog
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Syslog server setup to view the screen as shown next use this screen to configure a list of external syslog servers
- Syslog server setup
- Syslog
- Label description
- Chapter 42 syslog
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Syslog server setup
- Label description
- Chapter 42 syslog
- Cluster management overview
- Cluster management
- Note a cluster can only have one manager
- Cluster management status
- What you can do
- Example
- Clustering management configuration
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Configuration
- Chapter 43 cluster management
- Uploading firmware to a cluster member switch
- Technical reference
- Example
- Cluster member switch management
- What you need to know
- What you can do
- Mac table overview
- Mac table
- Viewing the mac table
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Mac table
- Label description
- Chapter 44 mac table
- Ip table overview
- Ip table
- Xs1920 series user s guide
- Viewing the ip table
- The following table describes the labels in this screen
- Label description
- Ip table in the navigation panel to display the following screen
- Ip table
- Chapter 45 ip table
- Arp table
- What you need to know
- What you can do
- Viewing the arp table
- Overview
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Chapter 46 arp table
- Arp table
- Viewing the routing table status
- Routing table
- Overview
- Viewing the path mtu table
- Path mtu table
- Path mtu overview
- Configure clone
- Overview
- Xs1920 series user s guide
- The following table describes the labels in this screen
- Label description
- Configure clone
- Chapter 49 configure clone
- Xs1920 series user s guide
- Label description
- Configure clone continued
- Chapter 49 configure clone
- Viewing the ipv6 neighbor table
- Neighbor table
- Ipv6 neighbor table overview
- Neighbor table continued
- Label description
- Chapter 50 neighbor table
- Xs1920 series user s guide
- Troubleshooting
- Power hardware connections and leds
- Switch access and login
- I forgot the username and or password
- I forgot the ip address for the switch
- I cannot see or access the login screen in the web configurator
- There is unauthorized access to my switch
- Pop up windows javascripts and java permissions
- I cannot see some of advanced application submenus at the bottom of the navigation panel
- I can see the login screen but i cannot log in to the switch
- Switch configuration
- I lost my configuration settings after i restart the switch
- Ppendi
- Customer support
- Austria
- Vietnam
- Thailand
- Taiwan
- Singapore
- Philipines
- Pakistan
- Malaysia
- Europe
- Germany
- France
- Finland
- Estonia
- Denmark
- Bulgaria
- Belgium
- Belarus
- Latvia
- Hungary
- Switzerland
- Sweden
- Slovakia
- Russia
- Romania
- Poland
- Norway
- Netherlands
- Lithuania
- North america
- Middle east
- Latin america
- Ecuador
- Argentina
- Ukraine
- Turkey
- South africa
- Oceania
- Australia
- Africa
- Ppendi
- Common services
- Xs1920 series user s guide
- Table 192 commonly used services continued
- Name protocol port s description
- Appendix b common services
- Xs1920 series user s guide
- Table 192 commonly used services continued
- Name protocol port s description
- Appendix b common services
- Ppendi
- Unspecified address
- Multicast address
- Loopback address
- Global address
- Subnet masking
- Stateless autoconfiguration
- Interface id
- Eui 64
- Renew to s1
- Renew rebind
- Rebind
- Identity association
- Dhcpv6
- Dhcp relay agent
- Icmpv6
- Prefix delegation
- Neighbor discovery protocol ndp
- Ipv6 cache
- Example enabling ipv6 on windows xp 2003 vista
- Example enabling dhcpv6 on windows xp
- Example enabling ipv6 on windows 7
- Ppendi
- Legal information
- Xs1920 series user s guide
- Weee directive
- Safety warnings
- Notices
- List of national codes
- Environment statment
- Appendix d legal information
- Appendix d legal information
- Xs1920 series user s guide
- Environmental product declaration
- Zyxel limited warranty
- Xs1920 series user s guide
- Viewing certifications
- Trademarks
- Taiwanese bsmi bureau of standards metrology and inspection a warning
- Registration
- Open source licenses
- Appendix d legal information
- Numerics
Похожие устройства
-
Zyxel XGS4600-52FОфициальные технические данные -
Zyxel XGS4600-32FТехнические характеристики
-
Zyxel XGS4600-32Техническое описание
-
Zyxel XGS1210-12Краткая инструкция -
Zyxel XS3700-24Технический обзор -
Zyxel GS2210-8HPПодробное техническое описание
-
Zyxel GS2210-24HPТехническая спецификация
-
Zyxel GS2210-48HPТехническое описание
-
Zyxel GS2210-8Техническая спецификация
-
Zyxel GS2210-24Технический паспорт устройства
-
Zyxel GS2210-48Техническая спецификация
-
Zyxel XGS2210-28HPТехническая спецификация
Узнайте, как правильно настраивать частные VLAN, включая взаимодействие между портами и конфигурацию VLAN ID для различных типов VLAN.