![Zyxel GS2210-48 [31/387] Technical reference](/img/pdf.png)
Zyxel GS2210-48 [31/387] Technical reference
![Zyxel GS2210-48 [31/387] Technical reference](/views2/1168950/page31/bg1f.png)
Содержание
- Default login details 1
- Gs2210 series 1
- Intelligent layer 2 gbe switch 1
- Quick start guide 1
- User s guide 1
- Important 2
- Keep this guide for future reference 2
- Note it is recommended you use the web configurator to configure the switch 2
- Read carefully before use 2
- Related documentation 2
- Contents overview 3
- Technical reference 1 3
- User s guide 7 3
- Chapter 1 getting to know your switch 8 5
- Chapter 2 hardware installation and connection 3 5
- Chapter 3 hardware panels 6 5
- Contents overview 5
- Part i user s guide 17 5
- Part ii technical reference 31 5
- Table of contents 5
- Chapter 4 the web configurator 2 6
- Chapter 5 initial setup example 0 6
- Chapter 6 tutorials 4 6
- Chapter 7 zon utility zon neighbor management and port status 2 6
- Chapter 8 basic setting 0 6
- Chapter 10 static mac forward setup 07 7
- Chapter 9 vlan 6 7
- Chapter 11 static multicast forward setup 09 8
- Chapter 12 filtering 112 8
- Chapter 13 spanning tree protocol 114 8
- Chapter 14 bandwidth control 33 8
- Chapter 15 broadcast storm control 35 9
- Chapter 16 mirroring 37 9
- Chapter 17 link aggregation 39 9
- Chapter 18 port authentication 47 9
- Chapter 19 port security 53 9
- Chapter 20 classifier 56 9
- Chapter 21 policy rule 61 10
- Chapter 22 queuing method 65 10
- Chapter 23 multicast 68 10
- Chapter 24 aaa 92 10
- Chapter 25 ip source guard 03 11
- Chapter 26 loop guard 26 11
- Chapter 27 layer 2 protocol tunneling 30 11
- Chapter 28 pppoe 34 12
- Chapter 29 error disable 42 12
- Chapter 30 private vlan 47 12
- Chapter 31 green ethernet 49 12
- Chapter 32 link layer discovery protocol lldp 51 12
- Chapter 33 static route 76 13
- Chapter 34 differentiated services 79 13
- Chapter 35 dhcp 83 13
- Chapter 36 arp setup 97 13
- Chapter 37 maintenance 01 14
- Chapter 38 access control 10 14
- Chapter 39 diagnostic 33 14
- Chapter 40 syslog 35 15
- Chapter 41 cluster management 38 15
- Chapter 42 mac table 44 15
- Chapter 43 arp table 47 15
- Chapter 44 path mtu table 49 15
- Chapter 45 configure clone 50 15
- User s guide 17
- Getting to know your switch 18
- Introduction 18
- Backbone application 19
- Bridging example 19
- Switch model poe features 19
- High performance switching example 20
- Ieee 802 q vlan application examples 20
- Good habits for managing the switch 21
- Tag based vlan example 21
- Ways to manage the switch 21
- Desktop installation procedure 23
- Hardware installation and connection 23
- Installation scenarios 23
- Mounting the switch on a rack 23
- Rack mounted installation requirements 23
- Attaching the mounting brackets to the switch 24
- Mounting the switch on a rack 24
- Front panel 26
- Gigabit ethernet ports 26
- Hardware panels 26
- Auto crossover 27
- Default ethernet negotiation settings 27
- Mini gbic slots 27
- Note the dual personality ports change to fiber mode directly when inserting the fiber module 27
- To avoid possible eye injury do not look into an operating fiber optic module s connectors 27
- Transceiver installation 27
- Transceiver removal 28
- Console port 29
- Led mode only available for gs2210 48hp 29
- Note make sure you are using the correct power source as shown on the panel 29
- Power connector 29
- Rear panel 29
- After you connect the power to the switch view the leds to ensure proper functioning of the switch and as an aid in troubleshooting 30
- Chapter 3 hardware panels 30
- Gs2210 series user s guide 30
- Led color status description 30
- See chapter 47 on page 355 for information on the switch s power supply requirements 30
- Table 3 led descriptions 30
- To connect power to the switch insert the female end of the power cord to the ac power receptacle on the rear panel connect the other end of the supplied power cord to a power outlet make sure that no objects obstruct the airflow of the fans located on the side of the unit 30
- Technical reference 31
- Overview 32
- System login 32
- The web configurator 32
- The status screen 33
- Chapter 4 the web configurator 35
- Gs2210 series user s guide 35
- Link description 35
- Table 5 navigation panel links continued 35
- Change your password 36
- Chapter 4 the web configurator 36
- Gs2210 series user s guide 36
- Link description 36
- Logins to display the next screen 36
- Table 5 navigation panel links continued 36
- Note use the save link when you are done with a configuration session 37
- Saving your configuration 37
- Switch lockout 37
- Logging out of the web configurator 38
- Note be careful not to lock yourself and others out of the switch 38
- Reload the configuration file 38
- Resetting the switch 38
- Creating a vlan 40
- Initial setup example 40
- Overview 40
- Note the vlan group id field in this screen and the vid field in the ip setup screen refer to the same vlan id 41
- Setting port vid 41
- Configuring switch management ip address 42
- How to use dhcp snooping on the switch 44
- Overview 44
- Tutorials 44
- Creating a vlan 48
- Dhcp relay tutorial introduction 48
- Dhcp server port 2 pvid 102 48
- How to use dhcp relay on the switch 48
- Vlan 102 48
- Configuring dhcp relay 51
- Troubleshooting 51
- Overview 52
- What you can do 52
- Zon utility zon neighbor management and port status 52
- Zyxel one network zon utility screen 52
- Zon neighbor management screen 53
- Chapter 7 zon utility zon neighbor management and port status 54
- Gs2210 series user s guide 54
- Label description 54
- Neighbor 54
- The following table describes the fields in the above screen 54
- Chapter 7 zon utility zon neighbor management and port status 55
- Figure 42 status for poe model s 55
- Gs2210 series user s guide 55
- Label description 55
- Neighbor 55
- Port status summary 55
- To view the port statistics click status in all web configurator screens to display the status screen as shown next 55
- Chapter 7 zon utility zon neighbor management and port status 56
- Click a number in the port column in the status screen to display individual port statistics use this screen to check status and detailed performance data about an individual port on the switch 56
- Gs2210 series user s guide 56
- Label description 56
- Status port details 56
- Table 8 status 56
- The following table describes the labels in this screen 56
- Chapter 7 zon utility zon neighbor management and port status 57
- Gs2210 series user s guide 57
- Label description 57
- Port details 57
- Table 9 status port details 57
- The following table describes the labels in this screen 57
- Chapter 7 zon utility zon neighbor management and port status 58
- Gs2210 series user s guide 58
- Label description 58
- Table 9 status port details continued 58
- Chapter 7 zon utility zon neighbor management and port status 59
- Gs2210 series user s guide 59
- Label description 59
- Table 9 status port details continued 59
- Basic setting 60
- Overview 60
- System information 60
- What you can do 60
- Chapter 8 basic setting 61
- Gs2210 series user s guide 61
- Label description 61
- System info 61
- System info for poe model s only 61
- The following table describes the labels in this screen 61
- Chapter 8 basic setting 62
- General setup 62
- General setup in the navigation panel to display the screen as shown 62
- Gs2210 series user s guide 62
- Label description 62
- System info continued 62
- Chapter 8 basic setting 63
- General setup 63
- Gs2210 series user s guide 63
- Label description 63
- The following table describes the labels in this screen 63
- A vlan virtual local area network allows a physical network to be partitioned into multiple logical networks devices on a logical network belong to one group a device can belong to more than one group with vlan a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router 64
- Chapter 8 basic setting 64
- General setup continued 64
- Gs2210 series user s guide 64
- In mtu multi tenant unit applications vlan is vital in providing isolation and security among the subscribers when properly configured vlan prevents one subscriber from accessing the network resources of another on the same lan thus a user will not see the printers and hard disks of another user in the same building 64
- Introduction to vlans 64
- Label description 64
- Note vlan is unidirectional it only governs outgoing traffic 64
- See chapter 9 on page 86 for information on port based and 802 q tagged vlans 64
- Switch setup in the navigation panel to display the screen as shown the vlan setup screens change depending on whether you choose 802 q or port based in the vlan type field in this screen refer to chapter 9 on page 86 for more information on vlan 64
- Switch setup screen 64
- Vlan also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain in traditional switched environments all broadcast packets go to each and every individual port with vlan all broadcasts are confined to a specific broadcast domain 64
- Chapter 8 basic setting 65
- Chapter 9 on page 8 65
- Gs2210 series user s guide 65
- Label description 65
- Switch setup 65
- The following table describes the labels in this screen 65
- Chapter 8 basic setting 66
- Gs2210 series user s guide 66
- Ip setup 66
- Label description 66
- Management ip addresses 66
- Note you must configure a vlan first 66
- Switch setup continued 66
- The switch needs an ip address for it to be managed over the network the factory default ip address is 192 68 the subnet mask specifies the network number portion of an ip address the factory default subnet mask is 255 55 55 66
- Use the ip setup screen to configure the switch ip address default gateway device the default domain name server and the management vlan id the default gateway specifies the ip address of the default gateway next hop for outgoing traffic 66
- You can configure up to 64 ip addresses which are used to access and manage the switch from the ports belonging to the pre defined vlan s 66
- Chapter 8 basic setting 67
- Gs2210 series user s guide 67
- Ip setup 67
- Label description 67
- The following table describes the labels in this screen 67
- Chapter 8 basic setting 68
- Gs2210 series user s guide 68
- Ip setup continued 68
- Label description 68
- Port setup 68
- Port setup in the navigation panel to display the configuration screen 68
- Chapter 8 basic setting 69
- Gs2210 series user s guide 69
- Label description 69
- Note changes in this row are copied to all the ports as soon as you make them 69
- Note due to space limitation the port name may be truncated in some web configurator screens 69
- Port setup 69
- The following table describes the labels in this screen 69
- A powered device pd is a device such as an access point or a switch that supports poe power over ethernet so that it can receive power from another device through an ethernet port 70
- Chapter 8 basic setting 70
- Figure 49 powered device examples 70
- Gs2210 series user s guide 70
- In the figure below the ip camera and ip phone get their power directly from the switch aside from minimizing the need for cables and wires poe removes the hassle of trying to find a nearby electric outlet to power up devices 70
- Label description 70
- Note the following screens are available for the poe model s only some features are only available for the ethernet ports 1 to 24 for gs2210 24hp and 1 to 48 for gs2210 48hp 70
- Note the poe power over ethernet devices that supply or receive power and their connected ethernet cables must all be completely indoors 70
- Poe status 70
- Port setup continued 70
- The poe model s supports the ieee 802 at high power over ethernet poe standard 70
- You can also set priorities so that the switch is able to reserve and allocate power to certain pds 70
- Chapter 8 basic setting 71
- Gs2210 series user s guide 71
- Label description 71
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device needs less than 16w 71
- Poe setup 71
- Poe status 71
- The following table describes the labels in this screen 71
- Chapter 8 basic setting 72
- Gs2210 series user s guide 72
- Label description 72
- Poe setup 72
- Poe status continued 72
- Poe status screen the following screen opens 72
- Use this screen to set the priority levels for the switch in distributing power to pds 72
- An ipv6 address is configured on a per interface basis the interface can support virtual interface for example a vlan the switch supports the vlan interface type for ipv6 at the time of writing 73
- Chapter 8 basic setting 73
- Gs2210 series user s guide 73
- Interface setup 73
- Interface setup in the navigation panel to display the configuration screen 73
- Label description 73
- Poe setup 73
- The following table describes the labels in this screen 73
- Chapter 8 basic setting 74
- Gs2210 series user s guide 74
- Interface setup 74
- Ipv6 in the navigation panel to display the ipv6 status screen as shown next 74
- Label description 74
- The following table describes the labels in this screen 74
- Use this screen to view the ipv6 interface status and configure switch s management ipv6 addresses 74
- Ipv6 interface status 75
- Chapter 8 basic setting 76
- Gs2210 series user s guide 76
- Ipv6 interface status 76
- Label description 76
- The following table describes the labels in this screen 76
- Chapter 8 basic setting 77
- Gs2210 series user s guide 77
- Ipv6 interface status continued 77
- Label description 77
- Chapter 8 basic setting 78
- Gs2210 series user s guide 78
- Ipv6 configuration 78
- Ipv6 global setup 78
- Ipv6 screen the following screen opens 78
- Label description 78
- The following table describes the labels in this screen 78
- Use this screen to configure the global ipv6 settings click the link next to ipv6 global setup in the ipv6 configuration screen to display the screen as shown next 78
- Chapter 8 basic setting 79
- Gs2210 series user s guide 79
- Ipv6 global setup 79
- Ipv6 interface setup 79
- Label description 79
- The following table describes the labels in this screen 79
- Use this screen to turn on or off an ipv6 interface and enable stateless autoconfiguration on it click the link next to ipv6 interface setup in the ipv6 configuration screen to display the screen as shown next 79
- A link local address uniquely identifies a device on the local network the lan it is similar to a private ip address in ipv4 you can have the same link local address on multiple interfaces on a device a link local unicast address has a predefined prefix of fe80 10 80
- Chapter 8 basic setting 80
- Gs2210 series user s guide 80
- Ipv6 interface setup 80
- Ipv6 link local address setup 80
- Label description 80
- The following table describes the labels in this screen 80
- Use this screen to configure the interface s link local address and default gateway click the link next to ipv6 link local address setup in the ipv6 configuration screen to display the screen as shown next 80
- Chapter 8 basic setting 81
- Gs2210 series user s guide 81
- Ipv6 global address setup 81
- Ipv6 link local address setup continued 81
- Label description 81
- The following table describes the labels in this screen 81
- Use this screen to configure the interface s ipv6 global address click the link next to ipv6 global address setup in the ipv6 configuration screen to display the screen as shown next 81
- Chapter 8 basic setting 82
- Gs2210 series user s guide 82
- Ipv6 global address setup continued 82
- Ipv6 neighbor discovery setup 82
- Label description 82
- The following table describes the labels in this screen 82
- Use this screen to configure neighbor discovery settings for each interface click the link next to ipv6 neighbor discovery setup in the ipv6 configuration screen to display the screen as shown next 82
- Chapter 8 basic setting 83
- Gs2210 series user s guide 83
- Ipv6 neighbor discovery setup continued 83
- Ipv6 neighbor setup 83
- Label description 83
- The following table describes the labels in this screen 83
- Use this screen to create a static ipv6 neighbor entry in the switch s ipv6 neighbor table to store the neighbor information permanently click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next 83
- Chapter 8 basic setting 84
- Dhcpv6 client setup 84
- Gs2210 series user s guide 84
- Ipv6 neighbor setup continued 84
- Label description 84
- Use this screen to configure the switch s dhcp settings when it is acting as a dhcpv6 client click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next 84
- Chapter 8 basic setting 85
- Dhcpv6 client setup 85
- Gs2210 series user s guide 85
- Label description 85
- The following table describes the labels in this screen 85
- Overview 86
- What you can do 86
- What you need to know 86
- Automatic vlan registration 87
- Forwarding tagged and untagged frames 87
- Garp timers 87
- Chapter 9 vlan 88
- Enable vlan trunking on a port to allow frames belonging to unknown vlan groups to pass through that port this is useful if you want to set up vlan groups on end devices without having to configure the same vlan groups on intermediary devices 88
- Figure 63 port vlan trunking 88
- Gs2210 series user s guide 88
- Please refer to the following table for common ieee 802 q vlan terminology 88
- Port vlan trunking 88
- Refer to the following figure suppose you want to create vlan groups 1 and 2 v1 and v2 on devices a and b without vlan trunking you must configure vlan groups 1 and 2 on all intermediary switches c d and e otherwise they will drop frames with unknown vlan group tags however with vlan trunking enabled on a port s in each intermediary switch you only need to create vlan groups in the end devices a and b c d and e automatically allow frames with vlan group tags 1 and 2 vlan groups that are unknown to those switches to pass through their vlan trunking port s 88
- Select the vlan type 88
- Switch setup screen 88
- Table 28 ieee 802 q vlan terminology 88
- Vlan parameter term description 88
- Blocked from a vlan group regardless of its vlan tag 89
- Chapter 9 vlan 89
- Gs2210 series user s guide 89
- Label description 89
- Select vlan type 89
- Sent to a group whether it has a vlan tag or not 89
- Sent to a vlan group as normal depending on its vlan tag 89
- Static vlan 89
- The following table describes the labels in this screen 89
- Use a static vlan to decide whether an incoming frame on a port should be 89
- Vlan from the navigation panel to display the vlan status screen as shown next 89
- Vlan status 89
- Vlan vlan status 89
- You can also tag all outgoing frames that were previously untagged from a port with the specified vid 89
- Chapter 9 vlan 90
- Gs2210 series user s guide 90
- Label description 90
- The following table describes the labels in this screen 90
- Use this screen to view detailed port settings and status of the vlan group click on an index number in the vlan status screen to display vlan details 90
- Vlan detail 90
- Vlan details 90
- Vlan vlan status continued 90
- Chapter 9 vlan 91
- Configure a static vlan 91
- Gs2210 series user s guide 91
- Label description 91
- The following table describes the labels in the above screen 91
- Use this screen to configure a static vlan for the switch click static vlan in the vlan status screen to display the screen as shown next 91
- Vlan configuration 91
- Vlan configuration to see the following screen 91
- Chapter 9 vlan 92
- Gs2210 series user s guide 92
- Label description 92
- Note changes in this row are copied to all the ports as soon as you make them 92
- Static vlan setup 92
- The following table describes the related labels in this screen 92
- Chapter 9 vlan 93
- Configure vlan port settings 93
- Gs2210 series user s guide 93
- Label description 93
- Static vlan setup continued 93
- Use the vlan port setup screen to configure the static vlan ieee 802 q settings on a port click the vlan port setup link in the vlan configuration screen 93
- Vlan port setup 93
- Chapter 9 vlan 94
- For example an isp internet services provider may divide different types of services it provides to customers into different ip subnets traffic for voice services is designated for ip subnet 94
- Gs2210 series user s guide 94
- Label description 94
- Note changes in this row are copied to all the ports as soon as you make them 94
- Subnet based vlans 94
- Subnet based vlans allow you to group traffic into logical vlans based on the source ip subnet you specify when a frame is received on a port the switch checks if a tag is added already and the ip subnet it came from the untagged packets from the same ip subnet are then placed in the same subnet based vlan one advantage of using subnet based vlans is that priority can be assigned to traffic from the same ip subnet 94
- The following table describes the labels in this screen 94
- Vlan port setup 94
- Configuring subnet based vlan 95
- Internet 95
- Note subnet based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 95
- Chapter 9 vlan 96
- Gs2210 series user s guide 96
- Label description 96
- Subnet based vlan setup 96
- The following table describes the labels in this screen 96
- Configuring protocol based vlan 97
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 97
- Protocol based vlans 97
- Chapter 9 vlan 98
- Gs2210 series user s guide 98
- Label description 98
- Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 98
- Note protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based vlans 98
- Protocol based vlan setup 98
- The following table describes the labels in this screen 98
- Configure a port based vlan 99
- Note in screens such as ip setup and filtering that require a vid you must enter 1 as the vid 99
- Note when you activate port based vlan the switch uses a default vlan id of 1 you cannot change it 99
- Port based vlan setup 99
- Chapter 9 vlan 102
- Click voice vlan in the vlan configuration screen to display the configuration screen as shown 102
- Gs2210 series user s guide 102
- Table 36 port based vlan setup label description 102
- The following table describes the labels in this screen 102
- Voice vlan 102
- Voice vlan ensures that the sound quality of an ip phone is preserved from deteriorating when the data traffic on the switch ports is high it groups the voice traffic with defined priority into an assigned vlan which enables the separation of voice and data traffic coming onto the switch port 102
- You can set priority level to the voice vlan and add mac address of ip phones from specific manufacturers by using its id from the organizationally unique identifiers oui 102
- Chapter 9 vlan 103
- Gs2210 series user s guide 103
- Label description 103
- The following table describes the fields in the above screen 103
- Voice vlan setup 103
- Label description 104
- Mac based vlan 104
- Activate this protocol based vlan 105
- Chapter 9 vlan 105
- Create an ip based vlan example 105
- Give this protocol based vlan a descriptive name type ip vlan 105
- Gs2210 series user s guide 105
- Label description 105
- Leave the priority set to 0 and click add 105
- Mac based vlan setup 105
- Select the protocol leave the default value ip 105
- Technical reference 105
- This example shows you how to create an ip vlan which includes ports 1 4 and 8 follow these steps 105
- This section provides technical background information on the topics discussed in this chapter 105
- Type the port number you want to include in this protocol based vlan type 1 105
- Type the vlan id of an existing vlan in our example we already created a static vlan with an id of 5 type 5 105
- Configuring static mac forwarding 107
- Overview 107
- Static mac forward setup 107
- What you can do 107
- Chapter 10 static mac forward setup 108
- Gs2210 series user s guide 108
- Label description 108
- Note static mac addresses do not age out 108
- Static mac forwarding 108
- The following table describes the labels in this screen 108
- Static multicast forward setup 109
- Static multicast forward setup overview 109
- What you can do 109
- What you need to know 109
- Configuring static multicast forwarding 110
- Chapter 11 static multicast forward setup 111
- Gs2210 series user s guide 111
- Label description 111
- Static multicast forwarding 111
- The following table describes the labels in this screen 111
- Configure a filtering rule 112
- Filtering 112
- Filtering overview 112
- What you can do 112
- Chapter 12 filtering 113
- Filtering 113
- Gs2210 series user s guide 113
- Label description 113
- The following table describes the related labels in this screen 113
- Spanning tree protocol 114
- Spanning tree protocol overview 114
- What you can do 114
- What you need to know 114
- How stp works 115
- Note in this user s guide stp refers to both stp and rstp 115
- Stp terminology 115
- Multiple rstp 116
- Multiple stp 116
- Note each port can belong to one stp tree only 116
- Stp port states 116
- Spanning tree configuration 117
- Spanning tree protocol status screen 117
- Chapter 13 spanning tree protocol 118
- Configuration 118
- Configure rapid spanning tree protocol 118
- Gs2210 series user s guide 118
- Label description 118
- Spanning tree protocol screen 118
- The following table describes the labels in this screen 118
- 2 hello time 1 119
- Chapter 13 spanning tree protocol 119
- Configuration screen to enable rstp on the switch 119
- Gs2210 series user s guide 119
- Label description 119
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 119
- Note changes in this row are copied to all the ports as soon as you make them 119
- The following table describes the labels in this screen 119
- Chapter 13 spanning tree protocol 120
- Gs2210 series user s guide 120
- Label description 120
- Note this screen is only available after you activate rstp on the switch 120
- Rapid spanning tree protocol status 120
- Rstp continued 120
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 114 for more information on rstp 120
- Status rstp 120
- The following table describes the labels in this screen 120
- Configure multiple rapid spanning tree protocol 121
- 2 hello time 1 122
- Chapter 13 spanning tree protocol 122
- Configuration screen to enable mrstp on the switch 122
- Gs2210 series user s guide 122
- Label description 122
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 122
- Note changes in this row are copied to all the ports as soon as you make them 122
- The following table describes the labels in this screen 122
- Chapter 13 spanning tree protocol 123
- Gs2210 series user s guide 123
- Label description 123
- Mrstp continued 123
- Multiple rapid spanning tree protocol status 123
- Note this screen is only available after you activate mrstp on the switch 123
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 114 for more information on mrstp 123
- Status mrstp 123
- The following table describes the labels in this screen 123
- Chapter 13 spanning tree protocol 124
- Configure multiple spanning tree protocol 124
- Gs2210 series user s guide 124
- Label description 124
- Note the listening state does not exist in rstp 124
- Spanning tree protocol screen see section on page 116 for more information on mstp 124
- Status mrstp continued 124
- Chapter 13 spanning tree protocol 125
- Configuration screen to enable mstp on the switch 125
- Gs2210 series user s guide 125
- Label description 125
- The following table describes the labels in this screen 125
- 2 hello time 1 126
- Chapter 13 spanning tree protocol 126
- Gs2210 series user s guide 126
- Label description 126
- Mstp continued 126
- Note changes in this row are copied to all the ports as soon as you make them 126
- Chapter 13 spanning tree protocol 127
- Gs2210 series user s guide 127
- Label description 127
- Mstp continued 127
- Multiple spanning tree port configuration 127
- Port in the navigation panel to display the status screen as shown next see section on page 116 for more information on mstp 127
- Chapter 13 spanning tree protocol 128
- Gs2210 series user s guide 128
- Label description 128
- Multiple spanning tree protocol status 128
- Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 128
- Note changes in this row are copied to all the ports as soon as you make them 128
- Note this screen is only available after you activate mstp on the switch 128
- Spanning tree protocol in the navigation panel to display the status screen as shown next see section on page 116 for more information on mstp 128
- The following table describes the labels in this screen 128
- Chapter 13 spanning tree protocol 129
- Gs2210 series user s guide 129
- Label description 129
- Status mstp 129
- The following table describes the labels in this screen 129
- Chapter 13 spanning tree protocol 130
- Gs2210 series user s guide 130
- Label description 130
- Mstp network example 130
- Status mstp continued 130
- Technical reference 130
- The following figure shows a network example where two vlans are configured on the two switches if the switches are using stp or rstp the link for vlan 2 will be blocked as stp and rstp allow only one link in the network and block the redundant link 130
- This section provides technical background information on the topics discussed in this chapter 130
- Mst region 131
- Vlan 1 vlan 2 131
- Common and internal spanning tree cist 132
- Mst instance 132
- Bandwidth control 133
- Bandwidth control setup 133
- Overview 133
- What you can do 133
- Bandwidth control 134
- Chapter 14 bandwidth control 134
- Gs2210 series user s guide 134
- Label description 134
- Note changes in this row are copied to all the ports as soon as you make them 134
- Note ingress rate bandwidth control applies to layer 2 traffic only 134
- The following table describes the related labels in this screen 134
- Broadcast storm control 135
- Broadcast storm control overview 135
- Broadcast storm control setup 135
- What you can do 135
- Broadcast storm control 136
- Chapter 15 broadcast storm control 136
- Gs2210 series user s guide 136
- Label description 136
- Note changes in this row are copied to all the ports as soon as you make them 136
- The following table describes the labels in this screen 136
- Mirroring 137
- Mirroring overview 137
- Port mirroring setup 137
- What you can do 137
- Chapter 16 mirroring 138
- Gs2210 series user s guide 138
- Label description 138
- Mirroring 138
- Note changes in this row are copied to all the ports as soon as you make them 138
- The following table describes the labels in this screen 138
- Link aggregation 139
- Overview 139
- What you can do 139
- What you need to know 139
- Link aggregation id 140
- Link aggregation status 140
- Chapter 17 link aggregation 141
- Gs2210 series user s guide 141
- Label description 141
- Link aggregation setting 141
- Link aggregation setting to display the screen shown next see section 17 on page 139 for more information on link aggregation 141
- Link aggregation status 141
- The following table describes the labels in this screen 141
- Chapter 17 link aggregation 143
- Gs2210 series user s guide 143
- Label description 143
- Lacp to display the screen shown next see section on page 139 for more information on dynamic link aggregation 143
- Link aggregation control protocol 143
- Link aggregation setting continued 143
- Note when you enable the port security feature on the switch and configure port security settings for a port you cannot include the port in an active trunk group 143
- Chapter 17 link aggregation 144
- Gs2210 series user s guide 144
- Label description 144
- Note do not configure this screen unless you want to enable dynamic link aggregation 144
- The following table describes the labels in this screen 144
- Static trunking example 145
- Technical reference 145
- Port authentication 147
- Port authentication overview 147
- What you can do 147
- What you need to know 147
- Activate ieee 802 x security 148
- Authentication reply 148
- Authentication request 148
- Login credentials 148
- Login info request 148
- New connection 148
- Port authentication configuration 148
- Session granted denied 148
- Chapter 18 port authentication 149
- Gs2210 series user s guide 149
- Label description 149
- Note changes in this row are copied to all the ports as soon as you make them 149
- Note you must first enable 802 x authentication on the switch before configuring it on each port 149
- The following table describes the labels in this screen 149
- Guest vlan 150
- Internet 150
- Vlan 100 150
- Vlan 102 150
- Chapter 18 port authentication 151
- Gs2210 series user s guide 151
- Guest vlan 151
- Label description 151
- The following table describes the labels in this screen 151
- Chapter 18 port authentication 152
- Gs2210 series user s guide 152
- Guest vlan continued 152
- Label description 152
- Port security 153
- Port security overview 153
- Port security setup 153
- What you can do 153
- Chapter 19 port security 154
- Gs2210 series user s guide 154
- Label description 154
- Note changes in this row are copied to all the ports as soon as you make them 154
- Port security 154
- The following table describes the labels in this screen 154
- Chapter 19 port security 155
- Gs2210 series user s guide 155
- Label description 155
- Port security continued 155
- Classifier 156
- Configuring the classifier 156
- Overview 156
- What you can do 156
- What you need to know 156
- Chapter 20 classifier 157
- Classifier 157
- Gs2210 series user s guide 157
- Label description 157
- The following table describes the labels in this screen 157
- Chapter 20 classifier 158
- Classifier continued 158
- Gs2210 series user s guide 158
- Label description 158
- Note when two rules conflict with each other a higher layer rule has priority over lower layer rule 158
- Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers 158
- To view a summary of the classifier configuration scroll down to the summary table at the bottom of the classifier screen to change the settings of a rule click a number in the index field 158
- Viewing and editing classifier configuration 158
- Chapter 20 classifier 159
- Classifier summary table 159
- Ethernet type protocol number 159
- Gs2210 series user s guide 159
- In the internet protocol there is a field called protocol to identify the next level protocol the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 159
- Label description 159
- Protocol type protocol number 159
- Table 64 classifier summary table 159
- Table 65 common ethernet types and protocol numbers 159
- Table 66 common ip protocol types and protocol numbers 159
- The following table describes the labels in this screen 159
- The following table shows some other common ethernet types and the corresponding protocol number 159
- Classifier example 160
- Configuring policy rules 161
- Policy rule 161
- Policy rules overview 161
- What you can do 161
- Chapter 21 policy rule 162
- Gs2210 series user s guide 162
- Label description 162
- Policy rule 162
- The following table describes the labels in this screen 162
- Chapter 21 policy rule 163
- Gs2210 series user s guide 163
- Label description 163
- Note you can specify only one action pair in a policy rule to have the switch take multiple actions on the same traffic flow you need to define multiple classifiers with the same criteria and apply different policy rules 163
- Policy rule continued 163
- Policy example 164
- Viewing and editing policy configuration 164
- Queuing method 165
- Queuing method overview 165
- What you can do 165
- What you need to know 165
- Configuring queuing 166
- Chapter 22 queuing method 167
- Gs2210 series user s guide 167
- Label description 167
- Note changes in this row are copied to all the ports as soon as you make them 167
- Queuing method 167
- The following table describes the labels in this screen 167
- Multicast 168
- Multicast overview 168
- What you can do 168
- What you need to know 168
- Igmp snooping and vlans 169
- Mld snooping proxy 169
- Mld messages 170
- Mvr overview 170
- Report 170
- How mvr works 171
- Multicast vlan vlan 1 171
- Mvr modes 171
- Types of mvr ports 171
- Vlan 2 171
- Vlan 3 171
- Ipv4 multicast status 172
- Multicast setup 172
- Multicast vlan vlan 1 172
- Chapter 23 multicast 173
- Gs2210 series user s guide 173
- Igmp snooping 173
- Ipv4 multicast 173
- Ipv4 multicast screen to display the screen as shown see section 23 on page 168 for more information on multicasting 173
- Label description 173
- The following table describes the labels in this screen 173
- Chapter 23 multicast 174
- Gs2210 series user s guide 174
- Igmp snooping continued 174
- Label description 174
- Chapter 23 multicast 175
- Gs2210 series user s guide 175
- Igmp snooping continued 175
- Igmp snooping vlan 175
- Ipv4 multicast in the navigation panel click the igmp snooping link and then the igmp snooping vlan link to display the screen as shown see section on page 169 for more information on igmp snooping vlan 175
- Label description 175
- Chapter 23 multicast 176
- Gs2210 series user s guide 176
- Igmp snooping vlan 176
- Label description 176
- The following table describes the labels in this screen 176
- An igmp filtering profile specifies a range of multicast groups that clients connected to the switch are able to join a profile contains a range of multicast ip addresses which you want clients to be able to join profiles are assigned to ports in the igmp snooping screen clients connected to those ports are then able to join the multicast groups specified in the profile each port can be assigned a single profile a profile can be assigned to multiple ports 177
- Chapter 23 multicast 177
- Gs2210 series user s guide 177
- Igmp filtering profile 177
- Igmp snooping vlan continued 177
- Ipv4 multicast in the navigation panel click the igmp snooping link and then the igmp filtering profile link to display the screen as shown 177
- Label description 177
- The following table describes the labels in this screen 177
- Chapter 23 multicast 178
- Gs2210 series user s guide 178
- Igmp filtering profile 178
- Ipv6 multicast 178
- Ipv6 multicast status 178
- Ipv6 multicast to display the screen as shown this screen shows the ipv6 multicast group information see section 23 on page 168 for more information on multicasting 178
- Label description 178
- The following table describes the fields in the above screen 178
- Label description 179
- Mld snooping proxy 179
- Mld snooping proxy vlan 179
- Chapter 23 multicast 180
- Gs2210 series user s guide 180
- Label description 180
- The following table describes the fields in the above screen 180
- Chapter 23 multicast 181
- Gs2210 series user s guide 181
- Label description 181
- Mld snooping proxy vlan port role setting 181
- Vlan screen to display the screen as shown see section 23 on page 168 for more information on multicasting 181
- Chapter 23 multicast 182
- Gs2210 series user s guide 182
- Label description 182
- Mld snooping proxy vlan id 182
- Port role 182
- Port role setting 182
- The following table describes the fields in the above screen 182
- Cancel 183
- Chapter 23 multicast 183
- Fast leave timeout 183
- Gs2210 series user s guide 183
- Label description 183
- Leave mode 183
- Leave timeout 183
- Mld snooping proxy screen to display the screen as shown 183
- Mld snooping proxy vlan filtering 183
- Port role setting 183
- Active 184
- Cancel 184
- Chapter 23 multicast 184
- Filtering 184
- Filtering profile 184
- Group limit 184
- Gs2210 series user s guide 184
- Label description 184
- Max group num 184
- The following table describes the fields in the above screen 184
- Chapter 23 multicast 185
- End address 185
- Filtering profile 185
- Filtering screen to display the screen as shown 185
- Gs2210 series user s guide 185
- Label description 185
- Mld snooping proxy vlan filtering profile 185
- Profile name 185
- Start address 185
- The following table describes the fields in the above screen 185
- General mvr configuration 186
- Label description 186
- Note you can create up to five multicast vlans and up to 256 multicast rules on the switch 186
- Note your switch automatically creates a static vlan with the same vid when you create a multicast vlan in this screen 186
- Chapter 23 multicast 187
- Gs2210 series user s guide 187
- Label description 187
- The following table describes the related labels in this screen 187
- All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group 188
- Chapter 23 multicast 188
- Gs2210 series user s guide 188
- Label description 188
- Mvr continued 188
- Mvr group configuration 188
- Note a port can belong to more than one multicast vlan however ip multicast group addresses in different multicast vlans cannot overlap 188
- Use this screen to configure mvr ip multicast group address es click the group configuration link in the mvr screen 188
- Chapter 23 multicast 189
- Group configuration 189
- Gs2210 series user s guide 189
- Label description 189
- The following table describes the labels in this screen 189
- Example 190
- Multicast vid 200 vlan 1 190
- Mvr configuration example 190
- Example 191
- Aaa overview 192
- What you can do 192
- What you need to know 192
- Aaa screens 193
- Local user accounts 193
- Radius and tacacs 193
- Radius server setup 193
- Chapter 24 aaa 194
- Gs2210 series user s guide 194
- Label description 194
- Radius server setup 194
- The following table describes the labels in this screen 194
- Chapter 24 aaa 195
- Gs2210 series user s guide 195
- Label description 195
- Radius server setup continued 195
- Tacacs server setup 195
- Use this screen to configure your tacacs server settings see section on page 193 for more information on tacacs servers click on the tacacs server setup link in the aaa screen to view the screen as shown 195
- Chapter 24 aaa 196
- Gs2210 series user s guide 196
- Label description 196
- Tacacs server setup 196
- The following table describes the labels in this screen 196
- Aaa setup 197
- Chapter 24 aaa 197
- Gs2210 series user s guide 197
- Label description 197
- Tacacs server setup continued 197
- Use this screen to configure authentication and authorization settings on the switch click on the aaa setup link in the aaa screen to view the screen as shown 197
- Aaa setup 198
- Chapter 24 aaa 198
- Gs2210 series user s guide 198
- Label description 198
- The following table describes the labels in this screen 198
- Aaa setup continued 199
- Chapter 24 aaa 199
- Gs2210 series user s guide 199
- Label description 199
- Aaa setup continued 200
- Assign account privilege levels see the cli reference guide for more information on account privilege levels for the authenticated user 200
- Chapter 24 aaa 200
- Gs2210 series user s guide 200
- Label description 200
- Limit bandwidth on incoming or outgoing traffic for the port the user connects to 200
- Note refer to the documentation that comes with your radius server on how to configure vsas for users authenticating via the radius server 200
- Rfc 2865 standard specifies a method for sending vendor specific information between a radius server and a network access device for example the switch a company can create vendor specific attributes vsas to expand the functionality of a radius server 200
- Technical reference 200
- The switch supports vsas that allow you to perform the following actions based on user authentication 200
- The vsas are composed of the following 200
- This section provides technical background information on the topics discussed in this chapter 200
- Vendor data a value you want to assign to the setting 200
- Vendor id an identification number assigned to the company by the iana internet assigned numbers authority zyxel s vendor id is 890 200
- Vendor specific attribute 200
- Vendor type a vendor specified attribute identifying the setting you want to modify 200
- Supported radius attributes 201
- Tunnel protocol attribute 201
- Attributes used by the ieee 802 x authentication 202
- Attributes used for authenticating privilege access 202
- Attributes used for authentication 202
- Attributes used to login users 202
- Ip source guard 203
- Overview 203
- What you can do 203
- Ip source guard 204
- What you need to know 204
- Ip source guard static binding 205
- Arp learning screen before you use the arp freeze feature 206
- Chapter 25 ip source guard 206
- Dhcp snooping 206
- Gs2210 series user s guide 206
- Label description 206
- Static binding 206
- The following table describes the labels in this screen 206
- Chapter 25 ip source guard 207
- Dhcp snooping 207
- Gs2210 series user s guide 207
- Label description 207
- The following table describes the labels in this screen 207
- Chapter 25 ip source guard 208
- Dhcp snooping continued 208
- Gs2210 series user s guide 208
- Label description 208
- Chapter 25 ip source guard 209
- Configure 209
- Dhcp snooping configure 209
- Dhcp snooping continued 209
- Gs2210 series user s guide 209
- Label description 209
- Chapter 25 ip source guard 210
- Configure 210
- Gs2210 series user s guide 210
- Label description 210
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 210
- Note you have to enable dhcp snooping on the dhcp vlan too 210
- The following table describes the labels in this screen 210
- Chapter 25 ip source guard 211
- Configure continued 211
- Dhcp snooping port configure 211
- Gs2210 series user s guide 211
- Label description 211
- Note if dhcp snooping is enabled but there are no trusted ports dhcp requests cannot reach the dhcp server 211
- Use this screen to specify whether ports are trusted or untrusted ports for dhcp snooping 211
- Chapter 25 ip source guard 212
- Dhcp snooping vlan configure 212
- Gs2210 series user s guide 212
- Label description 212
- The following table describes the labels in this screen 212
- Chapter 25 ip source guard 213
- Dhcp snooping vlan port configure 213
- Gs2210 series user s guide 213
- Label description 213
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 213
- The following table describes the labels in this screen 213
- Arp inspection 214
- Arp inspection status 214
- Chapter 25 ip source guard 214
- Gs2210 series user s guide 214
- Label description 214
- The following table describes the labels in this screen 214
- Arp inspection 215
- Arp inspection vlan status 215
- Chapter 25 ip source guard 215
- Gs2210 series user s guide 215
- Label description 215
- The following table describes the labels in this screen 215
- Vlan status 215
- Arp inspection log status 216
- Chapter 25 ip source guard 216
- Gs2210 series user s guide 216
- Label description 216
- Log status 216
- The following table describes the labels in this screen 216
- Vlan status 216
- Chapter 25 ip source guard 217
- Gs2210 series user s guide 217
- Label description 217
- Log status 217
- The following table describes the labels in this screen 217
- Arp inspection configure 218
- Chapter 25 ip source guard 218
- Configure 218
- Gs2210 series user s guide 218
- Label description 218
- The following table describes the labels in this screen 218
- Arp inspection port configure 219
- Chapter 25 ip source guard 219
- Configure continued 219
- Gs2210 series user s guide 219
- Label description 219
- Chapter 25 ip source guard 220
- Gs2210 series user s guide 220
- Label description 220
- The following table describes the labels in this screen 220
- Arp inspection vlan configure 221
- Chapter 25 ip source guard 221
- Gs2210 series user s guide 221
- Label description 221
- Port continued 221
- The following table describes the labels in this screen 221
- Dhcp snooping overview 222
- Note if dhcp is enabled and there are no trusted ports dhcp requests will not succeed 222
- Technical reference 222
- Trusted vs untrusted ports 222
- Configuring dhcp snooping 223
- Dhcp relay option 82 information 223
- Dhcp snooping database 223
- Arp inspection and mac address filters 224
- Arp inspection overview 224
- Configuring arp inspection 225
- Note it is recommended you enable dhcp snooping at least one day before you enable arp inspection so that the switch has enough time to build the binding table 225
- Syslog 225
- Trusted vs untrusted ports 225
- Loop guard 226
- Loop guard overview 226
- What you can do 226
- What you need to know 226
- Loop guard setup 228
- Note after resolving the loop problem on your network you can re activate the disabled port via the web configurator see section 8 on page 68 or via commands see the cli reference guide 228
- Note the loop guard feature can not be enabled on the ports that have spanning tree protocol rstp mrstp or mstp enabled 228
- Chapter 26 loop guard 229
- Gs2210 series user s guide 229
- Label description 229
- Loop guard 229
- Note changes in this row are copied to all the ports as soon as you make them 229
- The following table describes the labels in this screen 229
- Layer 2 protocol tunneling 230
- Layer 2 protocol tunneling overview 230
- What you can do 230
- What you need to know 230
- Configuring layer 2 protocol tunneling 231
- Layer 2 protocol tunneling mode 231
- Service provider s network c 231
- Chapter 27 layer 2 protocol tunneling 232
- Gs2210 series user s guide 232
- Label description 232
- Layer 2 protocol tunneling 232
- Note all the edge switches in the service provider s network should be set to use the same mac address for encapsulation 232
- Note changes in this row are copied to all the ports as soon as you make them 232
- Note the mac address can be either a unicast mac address or multicast mac address if you use a unicast mac address make sure the mac address does not exist in the address table of a switch on the service provider s network 232
- The following table describes the labels in this screen 232
- Chapter 27 layer 2 protocol tunneling 233
- Gs2210 series user s guide 233
- Label description 233
- Layer 2 protocol tunneling continued 233
- Note you can enable l2pt services for stp lacp vtp cdp udld and pagp on the access port s only 233
- Pppoe intermediate agent overview 234
- What you can do 234
- What you need to know 234
- Chapter 28 pppoe 235
- Flexible circuit id syntax with identifier string and variables 235
- Gs2210 series user s guide 235
- If you do not configure a circuit id string for a vlan on a specific port or for a specific port the switch adds the user defined identifier string and variables into the agent circuit id sub option the variables can be the slot id of the pppoe client the port number of the pppoe client and or the vlan id on the pppoe packet 235
- Intermediate agent screen the switch automatically generates a circuit id string according to the default circuit id syntax which is 235
- Sub option format 235
- Table 104 pppoe ia circuit id sub option format user defined string 235
- Table 105 pppoe ia remote id sub option format 235
- Table 106 pppoe ia circuit id sub option format using identifier string and variables 235
- The 1 in the first field identifies this as an agent circuit id sub option and 2 identifies this as an agent remote id sub option the next field specifies the length of the field the switch takes the circuit id string you manually configure for a vlan on a port as the highest priority and the circuit id string for a port as the second priority in addition the switch puts the pppoe client s mac address into the agent remote id sub option if you do not specify any user defined string 235
- The identifier string slot id port number and vlan id are separated from each other by a pound key semi colon period comma forward slash or space an agent circuit id sub option example is switch 07 0123 and indicates the pppoe packets come from a pppoe client which is connected to the switch s port 7 and belong to vlan 123 235
- The tag_type is 0x0105 for vendor specific tags as defined in rfc 2516 the tag_len indicates the length of value i1 and i2 the value is the 32 bit number 0x00000de9 which stands for the adsl forum iana entry i1 and i2 are pppoe intermediate agent sub options which contain additional information about the pppoe client 235
- There are two types of sub option agent circuit id sub option and agent remote id sub option they have the following formats 235
- Wt 101 default circuit id syntax 235
- Note the switch will drop all pppoe discovery packets if you enable the pppoe intermediate agent and there are no trusted ports 236
- Port state 236
- The pppoe screen 236
- Chapter 28 pppoe 237
- Gs2210 series user s guide 237
- Intermediate agent 237
- Intermediate agent in the navigation panel to display the screen as shown 237
- Label description 237
- Pppoe intermediate agent 237
- The following table describes the labels in this screen 237
- Use this screen to configure the switch to give a pppoe termination server additional subscriber information that the server can use to identify and authenticate a pppoe client 237
- Chapter 28 pppoe 238
- Click the port link in the intermediate agent screen to display the screen as shown 238
- Gs2210 series user s guide 238
- Intermediate agent continued 238
- Label description 238
- Note the switch will drop all pppoe packets if you enable the pppoe intermediate agent on the switch and there are no trusted ports 238
- Pppoe ia per port 238
- The following table describes the labels in this screen 238
- Use this screen to specify whether individual ports are trusted or untrusted ports and have the switch add extra information to pppoe discovery packets from pppoe clients on a per port basis 238
- Chapter 28 pppoe 239
- Gs2210 series user s guide 239
- Label description 239
- Port continued 239
- Port screen to display the screen as shown 239
- Pppoe ia per port per vlan 239
- Use this screen to configure pppoe ia settings that apply to a specific vlan on a port 239
- Chapter 28 pppoe 240
- Gs2210 series user s guide 240
- Label description 240
- The following table describes the labels in this screen 240
- Chapter 28 pppoe 241
- Click the vlan link in the intermediate agent screen to display the screen as shown 241
- Gs2210 series user s guide 241
- Label description 241
- Pppoe ia for vlan 241
- The following table describes the labels in this screen 241
- Use this screen to set whether the pppoe intermediate agent is enabled on a vlan and whether the switch appends the circuit id and or remote id to pppoe discovery packets from a specific vlan 241
- Error disable 242
- Error disable overview 242
- Error disable status 242
- What you can do 242
- Chapter 29 error disable 243
- Errdisable status 243
- Gs2210 series user s guide 243
- Label description 243
- The following table describes the labels in this screen 243
- Chapter 29 error disable 244
- Cpu protection 244
- Cpu protection configuration 244
- Errdisable detect screen 244
- Errdisable screen to display the screen as shown 244
- Errdisable status continued 244
- Gs2210 series user s guide 244
- Label description 244
- The following table describes the labels in this screen 244
- Chapter 29 error disable 245
- Cpu protection 245
- Errdisable detect 245
- Errdisable screen to display the screen as shown 245
- Error disable detect configuration 245
- Gs2210 series user s guide 245
- Label description 245
- The following table describes the labels in this screen 245
- Chapter 29 error disable 246
- Errdisable detect continued 246
- Errdisable recovery 246
- Errdisable screen to display the screen as shown 246
- Error disable recovery configuration 246
- Gs2210 series user s guide 246
- Label description 246
- The following table describes the labels in this screen 246
- Configuring private vlan 247
- Private vlan 247
- Private vlan overview 247
- Chapter 30 private vlan 248
- Gs2210 series user s guide 248
- Label description 248
- Private vlan 248
- The following table describes the labels in this screen 248
- Configuring green ethernet 249
- Green ethernet 249
- Green ethernet overview 249
- Chapter 31 green ethernet 250
- Green ethernet 250
- Gs2210 series user s guide 250
- Label description 250
- The following table describes the labels in this screen 250
- Link layer discovery protocol lldp 251
- Lldp overview 251
- Lldp med overview 252
- Lldp screens 253
- Lldp local status 254
- Chapter 32 link layer discovery protocol lldp 255
- Gs2210 series user s guide 255
- Label description 255
- Lldp local port status detail 255
- Lldp local status 255
- Lldp local status and then click a port number for example 1 port in the local port column to display the screen as shown next 255
- The following table describes the labels in this screen 255
- Chapter 32 link layer discovery protocol lldp 258
- Gs2210 series user s guide 258
- Label description 258
- Lldp local port status detail 258
- The following table describes the labels in this screen 258
- Chapter 32 link layer discovery protocol lldp 259
- Gs2210 series user s guide 259
- Label description 259
- Lldp local port status detail 259
- Lldp remote status 259
- Lldp remote status click here to display the screen as shown next 259
- The following table describes the labels in this screen 259
- Lldp remote port status detail 260
- Chapter 32 link layer discovery protocol lldp 261
- Gs2210 series user s guide 261
- Label description 261
- Lldp remote port status detail basic tlv 261
- The following table describes the labels in basic tlv part of the screen 261
- Chapter 32 link layer discovery protocol lldp 262
- Dot 1 and dot3 tlv 262
- Gs2210 series user s guide 262
- Label description 262
- Lldp remote port status detail dot1 and dot3 tlv 262
- The following table describes the labels in the dot1 and dot3 parts of the screen 262
- Chapter 32 link layer discovery protocol lldp 263
- Gs2210 series user s guide 263
- Label description 263
- Lldp remote port status detail dot1 and dot3 tlv 263
- Chapter 32 link layer discovery protocol lldp 265
- Gs2210 series user s guide 265
- Label description 265
- Lldp remote port status detail med tlv 265
- The following table describes the labels in the med tlv part of the screen 265
- Chapter 32 link layer discovery protocol lldp 266
- Gs2210 series user s guide 266
- Label description 266
- Lldp configuration 266
- Lldp configuration click here to display the screen as shown next 266
- Lldp remote port status detail med tlv 266
- Chapter 32 link layer discovery protocol lldp 267
- Gs2210 series user s guide 267
- Label description 267
- Lldp configuration 267
- The following table describes the labels in this screen 267
- Basic tlv setting 268
- Basic tlv setting to display the screen as shown next 268
- Chapter 32 link layer discovery protocol lldp 268
- Gs2210 series user s guide 268
- Label description 268
- Lldp configuration 268
- Lldp configuration basic tlv setting 268
- The following table describes the labels in this screen 268
- Chapter 32 link layer discovery protocol lldp 269
- Gs2210 series user s guide 269
- Label description 269
- Lldp configuration basic org specific tlv setting 269
- Org specific tlv setting 269
- Org specific tlv setting to display the screen as shown next 269
- The following table describes the labels in this screen 269
- Chapter 32 link layer discovery protocol lldp 270
- Gs2210 series user s guide 270
- Label description 270
- Lldp med configuration 270
- Lldp med configuration click here to display the screen as shown next 270
- Org specific tlv setting 270
- The following table describes the labels in this screen 270
- Chapter 32 link layer discovery protocol lldp 271
- Gs2210 series user s guide 271
- Label description 271
- Lldp med network policy 271
- Lldp med network policy click here to display the screen as shown next 271
- The following table describes the labels in this screen 271
- Chapter 32 link layer discovery protocol lldp 272
- Gs2210 series user s guide 272
- Label description 272
- Lldp med location 272
- Lldp med location click here to display the screen as shown next 272
- Lldp med network policy 272
- Chapter 32 link layer discovery protocol lldp 273
- Gs2210 series user s guide 273
- Label description 273
- Lldp med location 273
- The following table describes the labels in this screen 273
- Chapter 32 link layer discovery protocol lldp 274
- Gs2210 series user s guide 274
- Label description 274
- Lldp med location 274
- Static route 276
- Static route overview 276
- What you can do 276
- Configuring static routing 277
- Static routing 277
- Chapter 33 static route 278
- Gs2210 series user s guide 278
- Ipv4 static route continued 278
- Label description 278
- Differentiated services 279
- Differentiated services overview 279
- What you can do 279
- What you need to know 279
- Activating diffserv 280
- Diffserv network example 280
- P platinum g gold s silver b bronze 280
- Chapter 34 differentiated services 281
- Diffserv 281
- Dscp to ieee 802 p priority settings 281
- Gs2210 series user s guide 281
- Label description 281
- Table 132 default dscp ieee 802 p mapping 281
- The following table describes the labels in this screen 281
- The following table shows the default dscp to ieee802 p mapping 281
- You can configure the dscp to ieee 802 p mapping to allow the switch to prioritize all traffic based on the incoming dscp value according to the diffserv to ieee 802 p mapping table 281
- Configuring dscp settings 282
- Dhcp overview 283
- What you can do 283
- What you need to know 283
- Dhcp configuration 284
- Dhcp relay 284
- Dhcp relay agent information 284
- Dhcpv4 relay 285
- Dhcpv4 relay agent information 285
- Dhcpv4 status 285
- A dhcp relay agent information option has the following format 286
- Chapter 35 dhcp 286
- Dhcpv4 in the navigation panel and click the option 82 profile link to display the screen as shown 286
- Dhcpv4 option 82 profile 286
- Dhcpv4 relay agent information format 286
- Gs2210 series user s guide 286
- I1 i2 and in are dhcp relay agent sub options which contain additional information about the dhcp client you need to define at least one sub option 286
- Sub option format 286
- Table 136 dhcp relay agent information option format 286
- Table 137 dhcp relay agent circuit id sub option format 286
- Table 138 dhcp relay agent remote id sub option format 286
- The 1 in the first field identifies this as an agent circuit id sub option and 2 identifies this as an agent remote id sub option the next field specifies the length of the field 286
- There are two types of sub option agent circuit id sub option and agent remote id sub option they have the following formats 286
- Chapter 35 dhcp 287
- Gs2210 series user s guide 287
- Label description 287
- Option 82 profile 287
- The following table describes the labels in this screen 287
- Chapter 35 dhcp 288
- Configuring dhcpv4 global relay 288
- Dhcpv4 in the navigation panel and click the global link to display the screen as shown 288
- Global 288
- Gs2210 series user s guide 288
- Label description 288
- Option 82 profile continued 288
- Chapter 35 dhcp 289
- Dhcpv4 global relay port configure 289
- Global 289
- Gs2210 series user s guide 289
- Label description 289
- The following table describes the labels in this screen 289
- 68 00 dhcp server 290
- Chapter 35 dhcp 290
- Configure the dhcp relay screen as shown make sure you select a dhcp option 82 profile default1 in this example to set the switch to send additional information such as the vlan id together with the dhcp requests to the dhcp server this allows the dhcp server to assign the appropriate ip address according to the vlan id 290
- Figure 208 global dhcp relay network example 290
- Global dhcp relay configuration example 290
- Gs2210 series user s guide 290
- Label description 290
- Port continued 290
- The follow figure shows a network example where the switch is used to relay dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server that services the dhcp clients in both domains 290
- Vlan1 vlan2 290
- Configuring dhcpv4 vlan settings 291
- Example 291
- Note you must set up a management ip address for each vlan that you want to configure dhcp settings for on the switch see section 5 on page 42 for information on how to do this 291
- Chapter 35 dhcp 292
- Gs2210 series user s guide 292
- Label description 292
- The following table describes the labels in this screen 292
- Chapter 35 dhcp 293
- Dhcpv4 vlan port configure 293
- Gs2210 series user s guide 293
- Label description 293
- The following table describes the labels in this screen 293
- Vlan continued 293
- 6 0 00 294
- Chapter 35 dhcp 294
- Example dhcp relay for two vlans 294
- Figure 212 dhcp relay for two vlans 294
- For the example network configure the vlan setting screen as shown 294
- Gs2210 series user s guide 294
- Label description 294
- Port continued 294
- The following example displays two vlans vids 1 and 2 for a campus network two dhcp servers are installed to serve each vlan the system is set up to forward dhcp requests from the dormitory rooms vlan 1 to the dhcp server with an ip address of 192 68 00 requests from the academic buildings vlan 2 are sent to the other dhcp server with an ip address of 172 6 0 00 294
- Dhcpv6 relay 295
- Example 295
- Chapter 35 dhcp 296
- Dhcpv6 296
- Gs2210 series user s guide 296
- Label description 296
- The following table describes the labels in this screen 296
- Arp overview 297
- Arp setup 297
- What you can do 297
- What you need to know 297
- Arp request 298
- Gratuitous arp 298
- Arp learning 299
- Arp setup 299
- Arp learning 300
- Chapter 36 arp setup 300
- Gs2210 series user s guide 300
- Label description 300
- The following table describes the labels in this screen 300
- Maintenance 301
- Overview 301
- The maintenance screen 301
- What you can do 301
- Chapter 37 maintenance 302
- Click config 1 to save the current configuration settings permanently to configuration 1 on the switch 302
- Click ok to reset all switch configurations to the factory defaults 302
- Figure 218 load factory default start 302
- Follow the steps below to reset the switch back to the factory defaults 302
- Gs2210 series user s guide 302
- In the maintenance screen click the click here button next to load factory default to clear all switch configuration information you configured and return to the factory defaults 302
- In the web configurator click the save button in the top of the screen to make the changes take effect if you want to access the switch web configurator again you may need to change the ip address of your computer to be in the same subnet as that of the default switch ip address 192 68 302
- Label description 302
- Load factory default 302
- Maintenance continued 302
- Note make sure to click the save button in any screen to save your settings to the current configuration on the switch 302
- Save configuration 302
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 303
- Firmware upgrade 303
- Note clicking the apply or add button does not save the changes permanently all unsaved changes are erased after you reboot the switch 303
- Reboot system 303
- After the firmware upgrade process is complete see the system info screen to verify your current firmware version number 304
- Chapter 37 maintenance 304
- Firmware upgrade 304
- Gs2210 series user s guide 304
- Label description 304
- Type the path and file name of the firmware file you wish to upload to the switch in the file path text box or click browse to locate it select the rebooting checkbox if you want to reboot the switch and apply the new firmware immediately firmware upgrades are only applied after a reboot click upgrade to load the new firmware 304
- Backup a configuration file 305
- Restore a configuration file 305
- Chapter 37 maintenance 306
- Gs2210 series user s guide 306
- Tech support 306
- Tech support to see the following screen 306
- The tech support feature is a log enhancement tool that logs useful information such as cpu utilization history memory and mbuf memory buffer log and crash reports for issue analysis by customer support should you have difficulty with your switch the tech support menu eases your effort in obtaining reports and it is also available in cli command by typing show tech support command 306
- You may need wordpad or similar software to see the log report correctly the table below describes the fields in the above screen 306
- Chapter 37 maintenance 307
- Example ftp commands 307
- File type internal name external name description 307
- Filename conventions 307
- Ftp command line 307
- Gs2210 series user s guide 307
- Put firmware bin ras 307
- Table 149 filename conventions 307
- Tech support 307
- Technical reference 307
- The configuration file also known as the romfile or rom contains the factory default settings in the screens such as password switch setup ip setup and so on once you have customized the switch s settings they can be saved back to your computer under a filename of your choosing 307
- This section provides technical background information on the topics discussed in this chapter 307
- This section shows some examples of uploading to or downloading files from the switch using ftp commands first understand the filename conventions 307
- Zynos zyxel network operating system sometimes referred to as the ras file is the system firmware and has a bin filename extension 307
- Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 308
- Ftp command line procedure 308
- Gui based ftp clients 308
- Ftp restrictions 309
- Access control 310
- Access control overview 310
- The access control main screen 310
- What you can do 310
- Access control 311
- Chapter 38 access control 311
- Configuring snmp 311
- Gs2210 series user s guide 311
- Label description 311
- Snmp to view the screen as shown 311
- The following table describes the labels in this screen 311
- Use this screen to configure your snmp settings 311
- Chapter 38 access control 312
- Configuring snmp trap group 312
- From the snmp screen click trap group to view the screen as shown use the trap group screen to specify the types of snmp traps that should be sent to each snmp manager 312
- Gs2210 series user s guide 312
- Label description 312
- Snmp continued 312
- Trap group 312
- Chapter 38 access control 313
- Enabling disabling sending of snmp traps on a port 313
- Gs2210 series user s guide 313
- Label description 313
- The following table describes the labels in this screen 313
- Trap group 313
- Trap group screen click port to view the screen as shown use this screen to set whether a trap received on the port s would be sent to the snmp manager 313
- Chapter 38 access control 314
- Configuring snmp user 314
- From the snmp screen click user to view the screen as shown use the user screen to create snmp users for authentication with managers using snmp v3 and associate them to snmp groups an snmp user is an snmp manager 314
- Gs2210 series user s guide 314
- Label description 314
- Note use the username and password of the login accounts you specify in this screen to create accounts on the snmp v3 manager 314
- The following table describes the labels in this screen 314
- Chapter 38 access control 315
- Gs2210 series user s guide 315
- Label description 315
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 315
- User continued 315
- Note it is highly recommended that you change the default administrator password 1234 316
- Setting up login accounts 316
- Chapter 38 access control 317
- Gs2210 series user s guide 317
- Label description 317
- Logins continued 317
- Service access control 317
- Service access control allows you to decide what services you may use to access the switch you may also change the default service port and configure trusted computer s for each service in the remote management screen discussed later click access control to go back to the main access control screen 317
- Service port access control 317
- Chapter 38 access control 318
- Gs2210 series user s guide 318
- Label description 318
- Remote management 318
- Remote management to view the screen as shown next 318
- Service access control 318
- The following table describes the fields in this screen 318
- Use this screen to specify a group of one or more trusted computers from which an administrator may use a service to manage the switch 318
- You can specify a group of one or more trusted computers from which an administrator may use a service to manage the switch click access control to return to the access control screen 318
- Chapter 38 access control 319
- Gs2210 series user s guide 319
- Label description 319
- Remote management 319
- Technical reference 319
- The following table describes the labels in this screen 319
- This section provides technical background information on the topics discussed in this chapter 319
- About snmp 320
- Snmp v3 and security 320
- Snmp traps 321
- Supported mibs 321
- Chapter 38 access control 322
- Gs2210 series user s guide 322
- Option object label object id description 322
- Table 159 snmp system traps continued 322
- Chapter 38 access control 323
- Gs2210 series user s guide 323
- Option object label object id description 323
- Table 159 snmp system traps continued 323
- Table 160 snmp interfacetraps 323
- Chapter 38 access control 324
- Gs2210 series user s guide 324
- Option object label object id description 324
- Table 160 snmp interfacetraps continued 324
- Chapter 38 access control 325
- Gs2210 series user s guide 325
- Option object label object id description 325
- Table 161 aaa traps 325
- Table 162 snmp ip traps 325
- Chapter 38 access control 326
- Figure 233 ssh communication example 326
- Gs2210 series user s guide 326
- How ssh works 326
- Option object label object id description 326
- Ssh overview 326
- Table 163 snmp switch traps 326
- The following table summarizes how a secure connection is established between two remote hosts 326
- Unlike telnet or ftp which transmit data in clear text ssh secure shell is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network 326
- Requirements for using ssh 327
- Ssh implementation on the switch 327
- Https example 328
- Internet explorer warning messages 328
- Introduction to https 328
- Note if you disable http in the service access control screen then the switch blocks all http connection attempts 328
- Example 330
- Mozilla firefox warning messages 330
- Example 331
- Internet explore 331
- The main screen 331
- Example 332
- Internet explore 332
- Diagnostic 333
- Overview 333
- Chapter 39 diagnostic 334
- Diagnostic 334
- Gs2210 series user s guide 334
- Label description 334
- The following table describes the labels in this screen 334
- Syslog 335
- Syslog overview 335
- Syslog setup 335
- What you can do 335
- Chapter 40 syslog 336
- Gs2210 series user s guide 336
- Label description 336
- Syslog 336
- Syslog server setup 336
- Syslog server setup to view the screen as shown next use this screen to configure a list of external syslog servers 336
- The following table describes the labels in this screen 336
- Chapter 40 syslog 337
- Gs2210 series user s guide 337
- Label description 337
- Syslog server setup 337
- The following table describes the labels in this screen 337
- Cluster management 338
- Cluster management overview 338
- Cluster management status 339
- Note a cluster can only have one manager 339
- What you can do 339
- Clustering management configuration 340
- Example 340
- Chapter 41 cluster management 341
- Configuration 341
- Gs2210 series user s guide 341
- Label description 341
- The following table describes the labels in this screen 341
- Cluster member switch management 342
- Example 342
- Technical reference 342
- Uploading firmware to a cluster member switch 342
- Mac table 344
- Mac table overview 344
- What you can do 344
- What you need to know 344
- Viewing the mac table 345
- Chapter 42 mac table 346
- Gs2210 series user s guide 346
- Label description 346
- Mac table 346
- The following table describes the labels in this screen 346
- Arp table 347
- Overview 347
- Viewing the arp table 347
- What you can do 347
- What you need to know 347
- Arp table 348
- Chapter 43 arp table 348
- Gs2210 series user s guide 348
- Label description 348
- The following table describes the labels in this screen 348
- Path mtu overview 349
- Path mtu table 349
- Viewing the path mtu table 349
- Configure clone 350
- Overview 350
- Chapter 45 configure clone 351
- Configure clone 351
- Gs2210 series user s guide 351
- Label description 351
- The following table describes the labels in this screen 351
- Chapter 45 configure clone 352
- Configure clone continued 352
- Gs2210 series user s guide 352
- Label description 352
- Ipv6 neighbor table overview 353
- Neighbor table 353
- Viewing the ipv6 neighbor table 353
- Chapter 46 neighbor table 354
- Gs2210 series user s guide 354
- Label description 354
- Neighbor table continued 354
- Power hardware connections and leds 355
- Troubleshooting 355
- I cannot see or access the login screen in the web configurator 356
- I forgot the ip address for the switch 356
- I forgot the username and or password 356
- Switch access and login 356
- I can see the login screen but i cannot log in to the switch 357
- I cannot see some of advanced application submenus at the bottom of the navigation panel 357
- Pop up windows javascripts and java permissions 357
- There is unauthorized access to my switch via telnet http and ssh 357
- I lost my configuration settings after i restart the switch 358
- Switch configuration 358
- Customer support 359
- Ppendi 359
- Austria 360
- Europe 360
- Malaysia 360
- Pakistan 360
- Philipines 360
- Singapore 360
- Taiwan 360
- Thailand 360
- Vietnam 360
- Belarus 361
- Belgium 361
- Bulgaria 361
- Denmark 361
- Estonia 361
- Finland 361
- France 361
- Germany 361
- Hungary 361
- Latvia 361
- Lithuania 362
- Netherlands 362
- Norway 362
- Poland 362
- Romania 362
- Russia 362
- Slovakia 362
- Sweden 362
- Switzerland 362
- Argentina 363
- Ecuador 363
- Latin america 363
- Middle east 363
- North america 363
- Turkey 363
- Ukraine 363
- Africa 364
- Australia 364
- Oceania 364
- South africa 364
- Common services 365
- Ppendi 365
- Appendix b common services 366
- Gs2210 series user s guide 366
- Name protocol port s description 366
- Table 177 commonly used services continued 366
- Appendix b common services 367
- Gs2210 series user s guide 367
- Name protocol port s description 367
- Table 177 commonly used services continued 367
- Ppendi 368
- Global address 369
- Loopback address 369
- Multicast address 369
- Unspecified address 369
- Eui 64 370
- Interface id 370
- Stateless autoconfiguration 370
- Subnet masking 370
- Dhcp relay agent 371
- Dhcpv6 371
- Identity association 371
- Rebind 371
- Renew rebind 371
- Renew to s1 371
- Icmpv6 372
- Ipv6 cache 372
- Neighbor discovery protocol ndp 372
- Prefix delegation 372
- Example enabling dhcpv6 on windows xp 373
- Example enabling ipv6 on windows xp 2003 vista 373
- Example enabling ipv6 on windows 7 374
- Legal information 376
- Ppendi 376
- Appendix d legal information 377
- Ce marking 377
- Gs2210 series user s guide 377
- Registration 377
- Safety warnings 377
- Zyxel limited warranty 377
- Environmental product declaration 378
- Numerics 379
Похожие устройства
- Zyxel GS2210-48 Технические характеристики
- Zyxel GS2210-48 Справочник командного интерфейса
- Zyxel GS2210-48 Рекомендации по настройке
- HP pro 3520, d5s13ea Инструкция по эксплуатации
- HP designjet t520 (cq893a) Инструкция по эксплуатации
- Zyxel GS3700-24 Инструкция по эксплуатации
- Zyxel GS3700-24 Технические характеристики
- Zyxel GS3700-24 Справочник командного интерфейса
- Zyxel GS3700-48 Инструкция по эксплуатации
- Zyxel GS3700-48 Технические характеристики
- Zyxel GS3700-48 Справочник командного интерфейса
- HP pro 3520, d1t70ea Инструкция по эксплуатации
- HP envy 17-j002er, e0z66ea Инструкция по эксплуатации
- Zyxel XGS3700-24 Инструкция по эксплуатации
- Zyxel XGS3700-24 Технические характеристики
- Zyxel XGS3700-24 Справочник командного интерфейса
- Zyxel XGS3700-24 Рекомендации по настройке
- HP deskjet ink advantage 2545 Инструкция по эксплуатации
- Zyxel XGS3700-48 Инструкция по эксплуатации
- Zyxel XGS3700-48 Технические характеристики