Zyxel XS3700-24 [238/440] Chapter 25 ip source guard

Содержание

• Default login details 1
• Gbe l2 switch 1
• Quick start guide 1
• User s guide 1
• Xs3700 series 1
• Important 2
• Keep this guide for future reference 2
• Note it is recommended you use the web configurator to configure the switch 2
• Note this guide is a reference for a series of products therefore some features or options in this guide may not be available in your product 2
• Read carefully before use 2
• Related documentation 2
• Contents overview 3
• Technical reference 4 3
• User s guide 8 3
• Chapter 1 getting to know your switch 9 5
• Chapter 2 hardware installation and connection 4 5
• Chapter 3 hardware overview 8 5
• Contents overview 5
• Part i user s guide 18 5
• Table of contents 5
• Chapter 4 the web configurator 5 6
• Chapter 5 zon utility zon neighbor management and port status 5 6
• Chapter 6 basic setting 2 6
• Part ii technical reference 44 6
• Chapter 10 filtering 06 7
• Chapter 7 vlan 0 7
• Chapter 8 static mac forward setup 01 7
• Chapter 9 static multicast forward setup 03 7
• Chapter 11 spanning tree protocol 08 8
• Chapter 12 bandwidth control 26 8
• Chapter 13 broadcast storm control 28 8
• Chapter 14 mirroring 30 8
• Chapter 15 link aggregation 40 8
• Chapter 16 port authentication 48 9
• Chapter 17 port security 56 9
• Chapter 18 time range 59 9
• Chapter 19 classifier 61 9
• Chapter 20 policy rule 70 9
• Chapter 21 queuing method 75 10
• Chapter 22 vlan stacking 78 10
• Chapter 23 multicast 85 10
• Chapter 24 aaa 08 11
• Chapter 25 ip source guard 21 11
• Chapter 26 loop guard 43 11
• Chapter 27 vlan mapping 46 12
• Chapter 28 layer 2 protocol tunneling 49 12
• Chapter 29 sflow 53 12
• Chapter 30 pppoe 57 12
• Chapter 31 error disable 65 12
• Chapter 32 mac pinning 71 13
• Chapter 33 private vlan 73 13
• Chapter 34 green ethernet 77 13
• Chapter 35 link layer discovery protocol lldp 79 13
• Chapter 36 static route 05 13
• Chapter 37 policy routing 09 13
• Chapter 38 differentiated services 13 14
• Chapter 39 dhcp 21 14
• Chapter 40 vrrp 35 14
• Chapter 41 arp setup 44 15
• Chapter 42 maintenance 50 15
• Chapter 43 access control 59 15
• Chapter 44 diagnostic 80 16
• Chapter 45 syslog 82 16
• Chapter 46 cluster management 85 16
• Chapter 47 mac table 91 16
• Chapter 48 ip table 94 16
• Chapter 49 arp table 96 16
• User s guide 18
• Bridging example 19
• Getting to know your switch 19
• Introduction 19
• Backbone 20
• Branch 20
• Gigabit ethernet to the desktop 20
• High performance switching example 20
• Rd sales 20
• Ieee 802 q vlan application example 21
• Internet 21
• Tag based vlan example 21
• Ipv6 support 22
• Ways to manage the switch 22
• Good habits for managing the switch 23
• Freestanding installation 24
• Hardware installation and connection 24
• Attaching the brackets to the switch 25
• Installation requirements 25
• Mounting the switch on a rack 25
• Note failure to use the proper screws may damage the unit 25
• Note zyxel provides extensible rear mounting brackets rm400 to install the switch in a 21 inch 23 inch or 24 inch rack see the rm400 hardware installation guide 25
• Precautions 25
• Mounting the switch on a rack 26
• Power module installation 27
• Ethernet ports 28
• Front panel connections 28
• Hardware overview 28
• Default ethernet negotiation settings 29
• Sfp sfp slots 29
• To avoid possible eye injury do not look into an operating fiber optic module s connectors 29
• Transceiver installation 29
• Transceiver removal 30
• Console port 31
• Management port 31
• Power connection 31
• Rear panel 31
• Removing and installing the fan module 31
• Connecting the power 32
• Disconnecting the power 32
• Note use the included power cord for the ac power connection 32
• Chapter 3 hardware overview 33
• Led color status description 33
• Table 3 leds 33
• The following table describes the leds 33
• Xs3700 series user s guide 33
• Chapter 3 hardware overview 34
• Led color status description 34
• Table 3 leds continued 34
• Xs3700 series user s guide 34
• Introduction 35
• System login 35
• The web configurator 35
• B d c e 36
• The web configurator layout 36
• Chapter 4 the web configurator 38
• Link description 38
• Table 5 navigation panel links 38
• The following table describes the links in the navigation panel 38
• Xs3700 series user s guide 38
• Chapter 4 the web configurator 39
• Link description 39
• Table 5 navigation panel links continued 39
• Xs3700 series user s guide 39
• Change your password 40
• Chapter 4 the web configurator 40
• Figure 14 change administrator login password 40
• Link description 40
• Logins to display the next screen 40
• Saving your configuration 40
• Table 5 navigation panel links continued 40
• When you are done modifying the settings in a screen click apply to save your changes back to the run time memory settings in the run time memory are lost when the switch s power is turned off 40
• Xs3700 series user s guide 40
• Note be careful not to lock yourself and others out of the switch if you do lock yourself out try using out of band management via the management port to configure the switch 41
• Note use the save link when you are done with a configuration session 41
• Reload the configuration file 41
• Resetting the switch 41
• Switch lockout 41
• Logging out of the web configurator 42
• Technical reference 44
• Overview 45
• Zon utility zon neighbor management and port status 45
• Zyxel one network zon utility screen 45
• Zon neighbor screen 46
• Chapter 5 zon utility zon neighbor management and port status 47
• Figure 19 status 47
• Label description 47
• Neighbor 47
• Port status summary 47
• The following table describes the fields in the above screen 47
• To view the port statistics click status in all web configurator screens to display the status screen as shown next 47
• Xs3700 series user s guide 47
• Chapter 5 zon utility zon neighbor management and port status 48
• Click a number in the port column in the status screen to display individual port statistics use this screen to check status and detailed performance data about an individual port on the switch 48
• Label description 48
• Status port details 48
• Table 7 status 48
• The following table describes the labels in this screen 48
• Xs3700 series user s guide 48
• Chapter 5 zon utility zon neighbor management and port status 49
• Figure 20 status port details 49
• Label description 49
• Port details 49
• The following table describes the labels in this screen 49
• Xs3700 series user s guide 49
• Chapter 5 zon utility zon neighbor management and port status 50
• Label description 50
• Port details continued 50
• Xs3700 series user s guide 50
• Chapter 5 zon utility zon neighbor management and port status 51
• Label description 51
• Port details continued 51
• Xs3700 series user s guide 51
• Basic setting 52
• System information 52
• Chapter 6 basic setting 53
• Label description 53
• System info 53
• The following table describes the labels in this screen 53
• Xs3700 series user s guide 53
• Chapter 6 basic setting 54
• General setup 54
• General setup in the navigation panel to display the screen as shown 54
• Label description 54
• The following table describes the labels in this screen 54
• Xs3700 series user s guide 54
• A vlan virtual local area network allows a physical network to be partitioned into multiple logical networks devices on a logical network belong to one group a device can belong to more than one group with vlan a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router 55
• Chapter 6 basic setting 55
• General setup continued 55
• In mtu multi tenant unit applications vlan is vital in providing isolation and security among the subscribers when properly configured vlan prevents one subscriber from accessing the network 55
• Introduction to vlans 55
• Label description 55
• Xs3700 series user s guide 55
• Note vlan is unidirectional it only governs outgoing traffic 56
• Switch setup 56
• Chapter 6 basic setting 57
• Label description 57
• Switch setup continued 57
• Xs3700 series user s guide 57
• Ip setup 58
• Ip status 58
• Ip status details 58
• Note you must configure a vlan first 58
• Dynamic ip details dhcp 59
• Static ip details 59
• Chapter 6 basic setting 60
• Ip configuration 60
• Ip configuration to display the next screen 60
• Ip interfaces 60
• Ip status_details dynamic continued 60
• Label description 60
• On the switch an ip address is not bound to any physical ports since each ip address on the switch must be in a separate subnet the configured ip address is also known as ip interface or routing domain in addition this allows routing between subnets based on the ip address without additional routers 60
• The switch needs an ip address for it to be managed over the network the factory default ip address is 192 68 the subnet mask specifies the network number portion of an ip address the factory default subnet mask is 255 55 55 60
• Use this screen to configure ip related settings 60
• Xs3700 series user s guide 60
• You can configure multiple routing domains on the same vlan as long as the ip address ranges for the domains do not overlap to change the ip address of the switch in a routing domain simply add a new routing domain entry with a different ip address in the same subnet 60
• You can configure up to 128 ip domains which are used to access and manage the switch from the ports belonging to the pre defined vlan s 60
• Chapter 6 basic setting 61
• Ip configuration 61
• Label description 61
• The following table describes the labels in this screen 61
• Xs3700 series user s guide 61
• Chapter 6 basic setting 62
• Ip configuration continued 62
• Label description 62
• Note deleting all ip subnets locks you out of the switch 62
• Xs3700 series user s guide 62
• Chapter 6 basic setting 63
• Label description 63
• Note changes in this row are copied to all the ports as soon as you make them 63
• Note due to space limitations the port name may be truncated in some web configurator screens 63
• Port setup 63
• Port setup in the navigation panel to display the configuration screen 63
• The following table describes the labels in this screen 63
• Xs3700 series user s guide 63
• Chapter 6 basic setting 64
• Label description 64
• Port setup continued 64
• Xs3700 series user s guide 64
• An ipv6 address is configured on a per interface basis the interface can be a physical interface for example an ethernet port or a virtual interface for example a vlan the switch supports the vlan interface type for ipv6 at the time of writing 65
• Chapter 6 basic setting 65
• Interface setup 65
• Interface setup in the navigation panel to display the configuration screen 65
• Label description 65
• The following table describes the labels in this screen 65
• Vlan screens 65
• Xs3700 series user s guide 65
• Ipv6 interface status 66
• Chapter 6 basic setting 67
• Ipv6 interface status 67
• Label description 67
• The following table describes the labels in this screen 67
• Xs3700 series user s guide 67
• Chapter 6 basic setting 68
• Ipv6 interface status continued 68
• Label description 68
• Xs3700 series user s guide 68
• Chapter 6 basic setting 69
• Ipv6 configuration 69
• Ipv6 interface status continued 69
• Ipv6 screen the following screen opens 69
• Label description 69
• The following table describes the labels in this screen 69
• Xs3700 series user s guide 69
• Chapter 6 basic setting 70
• Ipv6 global setup 70
• Ipv6 interface setup 70
• Label description 70
• The following table describes the labels in this screen 70
• Use this screen to configure the global ipv6 settings click the link next to ipv6 global setup in the ipv6 configuration screen to display the screen as shown next 70
• Use this screen to turn on or off an ipv6 interface and enable stateless autoconfiguration on it click the link next to ipv6 interface setup in the ipv6 configuration screen to display the screen as shown next 70
• Xs3700 series user s guide 70
• A link local address uniquely identifies a device on the local network the lan it is similar to a private ip address in ipv4 you can have the same link local address on multiple interfaces on a device a link local unicast address has a predefined prefix of fe80 10 71
• Chapter 6 basic setting 71
• Ipv6 interface setup 71
• Ipv6 link local address setup 71
• Label description 71
• The following table describes the labels in this screen 71
• Use this screen to configure the interface s link local address and default gateway click the link next to ipv6 link local address setup in the ipv6 configuration screen to display the screen as shown next 71
• Xs3700 series user s guide 71
• Chapter 6 basic setting 72
• Ipv6 global address setup 72
• Ipv6 link local address setup 72
• Label description 72
• The following table describes the labels in this screen 72
• Use this screen to configure the interface s ipv6 global address click the link next to ipv6 global address setup in the ipv6 configuration screen to display the screen as shown next 72
• Xs3700 series user s guide 72
• Chapter 6 basic setting 73
• Ipv6 global address setup 73
• Ipv6 neighbor discovery setup 73
• Label description 73
• The following table describes the labels in this screen 73
• Use this screen to configure neighbor discovery settings for each interface click the link next to ipv6 neighbor discovery setup in the ipv6 configuration screen to display the screen as shown next 73
• Xs3700 series user s guide 73
• Chapter 6 basic setting 74
• Ipv6 neighbor discovery setup 74
• Ipv6 router discovery setup 74
• Label description 74
• The following table describes the labels in this screen 74
• Use this screen to configure router discovery settings for each interface click the link next to ipv6 router discovery setup in the ipv6 configuration screen to display the screen as shown next 74
• Xs3700 series user s guide 74
• Chapter 6 basic setting 75
• Ipv6 router discovery setup 75
• Label description 75
• Note the minimum time interval cannot be greater than three quarters of the maximum time interval 75
• The following table describes the labels in this screen 75
• Xs3700 series user s guide 75
• Chapter 6 basic setting 76
• Ipv6 prefix setup 76
• Ipv6 router discovery setup continued 76
• Label description 76
• The following table describes the labels in this screen 76
• Use this screen to configure the switch s ipv6 prefix list for each interface click the link next to ipv6 prefix setup in the ipv6 configuration screen to display the screen as shown next 76
• Xs3700 series user s guide 76
• Chapter 6 basic setting 77
• Ipv6 neighbor setup 77
• Ipv6 prefix setup continued 77
• Label description 77
• Use this screen to create a static ipv6 neighbor entry in the switch s ipv6 neighbor table to store the neighbor information permanently click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next 77
• Xs3700 series user s guide 77
• Chapter 6 basic setting 78
• Dhcpv6 client setup 78
• Interface setup screen 78
• Ipv6 neighbor setup 78
• Label description 78
• The following table describes the labels in this screen 78
• Use this screen to configure the switch s dhcp settings when it is acting as a dhcpv6 client click the link next to ipv6 neighbor setup in the ipv6 configuration screen to display the screen as shown next 78
• Vlan screens 78
• Xs3700 series user s guide 78
• Chapter 6 basic setting 79
• Dhcpv6 client setup 79
• Label description 79
• The following table describes the labels in this screen 79
• Xs3700 series user s guide 79
• Introduction to ieee 802 q tagged vlans 80
• Overview 80
• What you can do 80
• Automatic vlan registration 81
• Forwarding tagged and untagged frames 81
• Garp timers 81
• Chapter 7 vlan 82
• Enable vlan trunking on a port to allow frames belonging to unknown vlan groups to pass through that port this is useful if you want to set up vlan groups on end devices without having to configure the same vlan groups on intermediary devices 82
• Gvrp garp vlan registration protocol is a registration protocol that defines a way for switches to register necessary vlan members on ports across the network enable this function to permit vlan groups beyond the local switch 82
• Please refer to the following table for common ieee 802 q vlan terminology 82
• Port vlan trunking 82
• Table 30 ieee 802 q vlan terminology 82
• The following figure describes vlan trunking suppose you want to create vlan groups 1 and 2 v1 and v2 on devices a and b without vlan trunking you must configure vlan groups 1 and 2 on all intermediary switches c d and e otherwise they will drop frames with unknown vlan group tags however with vlan trunking enabled on a port s in each intermediary switch you only need to create vlan groups in the end devices a and b c d and e automatically allow frames with vlan group tags 1 and 2 vlan groups that are unknown to those switches to pass through their vlan trunking port s 82
• Vlan parameter term description 82
• Xs3700 series user s guide 82
• Q static vlan 83
• Select the vlan type 83
• Vlan status 83
• Chapter 7 vlan 84
• Label description 84
• The following table describes the labels in this screen 84
• Use this screen to view detailed port settings and status of the vlan group see section 7 on page 80 for more information on 802 q vlan click on an index number in the vlan status screen to display vlan details 84
• Vlan details 84
• Vlan vlan status 84
• Xs3700 series user s guide 84
• Chapter 7 vlan 85
• Label description 85
• The following table describes the labels in this screen 85
• Vlan detail 85
• Xs3700 series user s guide 85
• Chapter 7 vlan 86
• Click private vlan status in the vlan status screen to display the screen as shown next 86
• Label description 86
• Private vlan 86
• Private vlan status 86
• The following table describes the labels in this screen 86
• Vlan configuration 86
• Vlan configuration to see the following screen 86
• Xs3700 series user s guide 86
• Chapter 7 vlan 87
• Configure a static vlan 87
• Label description 87
• The following table describes the labels in the above screen 87
• Use this screen to configure a static vlan for the switch click static vlan in the vlan status screen to display the screen as shown next 87
• Vlan configuration 87
• Xs3700 series user s guide 87
• Chapter 7 vlan 88
• Label description 88
• Static vlan setup 88
• The following table describes the related labels in this screen 88
• Xs3700 series user s guide 88
• Chapter 7 vlan 89
• Configure vlan port settings 89
• Label description 89
• Note changes in this row are copied to all the ports as soon as you make them 89
• Static vlan setup continued 89
• Use the vlan port setting screen to configure the static vlan ieee 802 q settings on a port click the vlan port setup link in the vlan status screen 89
• Xs3700 series user s guide 89
• Chapter 7 vlan 90
• Label description 90
• Note changes in this row are copied to all the ports as soon as you make them 90
• The following table describes the labels in this screen 90
• Vlan port setup 90
• Xs3700 series user s guide 90
• Chapter 7 vlan 91
• For example an isp internet services provider may divide different types of services it provides to customers into different ip subnets traffic for voice services is designated for ip subnet 172 6 24 video for 192 68 24 and data for 10 24 the switch can then be configured to group incoming traffic based on the source ip subnet of incoming frames 91
• Label description 91
• Subnet based vlans 91
• Subnet based vlans allow you to group traffic into logical vlans based on the source ip subnet you specify when a frame is received on a port the switch checks if a tag is added already and the ip subnet it came from the untagged packets from the same ip subnet are then placed in the same subnet based vlan one advantage of using subnet based vlans is that priority can be assigned to traffic from the same ip subnet 91
• Vlan port setup 91
• Xs3700 series user s guide 91
• You configure a subnet based vlan with priority 6 and vid of 100 for traffic received from ip subnet 172 6 24 voice services you also have a subnet based vlan with priority 5 and vid of 200 for traffic received from ip subnet 192 68 24 video services lastly you configure vlan with priority 3 and vid of 300 for traffic received from ip subnet 10 24 data services all untagged incoming frames will be classified based on their source ip subnet and prioritized accordingly that is video services receive the highest priority and data the lowest 91
• Configuring subnet based vlan 92
• Internet 92
• Note subnet based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 92
• Chapter 7 vlan 93
• Label description 93
• Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 93
• Protocol based vlans 93
• Protocol based vlans allow you to group traffic into logical vlans based on the protocol you specify when an upstream frame is received on a port configured for a protocol based vlan the switch checks if a tag is added already and its protocol the untagged packets of the same protocol are then placed in the same protocol based vlan one advantage of using protocol based vlans is that priority can be assigned to traffic of the same protocol 93
• Subnet based vlan setup 93
• The following table describes the labels in this screen 93
• Xs3700 series user s guide 93
• Configuring protocol based vlan 94
• Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 94
• Chapter 7 vlan 95
• Click voice vlan in the vlan configuration screen to display the configuration screen as shown 95
• Label description 95
• Note protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based vlans 95
• Protocol based vlan setup 95
• The following table describes the labels in this screen 95
• Voice vlan 95
• Voice vlan ensures that the sound quality of an ip phone is preserved from deteriorating when the data traffic on the switch ports is high it groups the voice traffic with defined priority into an assigned vlan which enables the separation of voice and data traffic coming onto the switch port 95
• Xs3700 series user s guide 95
• You can set priority level to the voice vlan and add mac address of ip phones from specific manufacturers by using its id from the organizationally unique identifiers oui 95
• Chapter 7 vlan 96
• Label description 96
• The following table describes the fields in the above screen 96
• Voice vlan setup 96
• Xs3700 series user s guide 96
• Label description 97
• Mac based vlan 97
• Chapter 7 vlan 98
• Label description 98
• Mac based vlan setup 98
• Note in screens such as ip setup and filtering that require a vid you must enter 1 as the vid 98
• Note when you activate port based vlan the switch uses a default vlan id of 1 you cannot change it 98
• Port based vlan setup 98
• Port based vlans are specific only to the switch on which they were created 98
• Port based vlans are vlans where the packet forwarding decision is based on the destination mac address and its associated port 98
• Port based vlans require allowed outgoing ports to be defined for each port therefore if you wish to allow two subscriber ports to talk to each other for example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports 98
• The following table describes the fields in the above screen 98
• The port based vlan setup screen is shown next the cpu management port forms a vlan with all ethernet ports 98
• Xs3700 series user s guide 98
• Port based vlan 99
• Chapter 7 vlan 100
• Figure 59 port based vlan setup port isolation 100
• Table 41 port based vlan setup label description 100
• The following table describes the labels in this screen 100
• Xs3700 series user s guide 100
• Configuring static mac forwarding 101
• Overview 101
• Static mac forward setup 101
• Chapter 8 static mac forward setup 102
• Label description 102
• Note static mac addresses do not age out 102
• Static mac forwarding 102
• The following table describes the labels in this screen 102
• Xs3700 series user s guide 102
• Static multicast forward setup 103
• Static multicast forwarding overview 103
• Configuring static multicast forwarding 104
• Chapter 9 static multicast forward setup 105
• Label description 105
• Static multicast forwarding continued 105
• Xs3700 series user s guide 105
• Configure a filtering rule 106
• Filtering 106
• Chapter 10 filtering 107
• Filtering continued 107
• Label description 107
• Xs3700 series user s guide 107
• Spanning tree protocol 108
• Stp rstp overview 108
• Stp terminology 108
• How stp works 109
• Multiple rstp 109
• Stp port states 109
• Mstp network example 110
• Multiple stp 110
• Note each port can belong to one stp tree only 110
• Mst region 111
• Vlan 1 vlan 2 111
• Common and internal spanning tree cist 112
• Mst instance 112
• Spanning tree protocol status screen 112
• Spanning tree configuration 113
• Configure rapid spanning tree protocol 114
• 2 hello time 1 115
• Chapter 11 spanning tree protocol 115
• Label description 115
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 115
• Note changes in this row are copied to all the ports as soon as you make them 115
• Note this screen is only available after you activate rstp on the switch 115
• Rapid spanning tree protocol status 115
• Rstp continued 115
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 11 on page 108 for more information on rstp 115
• Xs3700 series user s guide 115
• Chapter 11 spanning tree protocol 116
• Configure multiple rapid spanning tree protocol 116
• Label description 116
• Note the listening state does not exist in rstp 116
• Spanning tree protocol screen see section 11 on page 108 for more information on mrstp 116
• Status rstp 116
• The following table describes the labels in this screen 116
• Xs3700 series user s guide 116
• Chapter 11 spanning tree protocol 117
• Configuration screen to enable mrstp on the switch 117
• Label description 117
• The following table describes the labels in this screen 117
• Xs3700 series user s guide 117
• 2 hello time 1 118
• Chapter 11 spanning tree protocol 118
• Label description 118
• Mrstp continued 118
• Multiple rapid spanning tree protocol status 118
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 118
• Note changes in this row are copied to all the ports as soon as you make them 118
• Note this screen is only available after you activate mrstp on the switch 118
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 11 on page 108 for more information on mrstp 118
• Xs3700 series user s guide 118
• Chapter 11 spanning tree protocol 119
• Configure multiple spanning tree protocol 119
• Label description 119
• Note the listening state does not exist in rstp 119
• Spanning tree protocol screen see section 11 on page 110 for more information on mstp 119
• Status mrstp 119
• The following table describes the labels in this screen 119
• Xs3700 series user s guide 119
• 2 hello time 1 121
• Chapter 11 spanning tree protocol 121
• Configuration screen to enable mstp on the switch 121
• Label description 121
• The following table describes the labels in this screen 121
• Xs3700 series user s guide 121
• Chapter 11 spanning tree protocol 122
• Label description 122
• Mstp continued 122
• Mstp screen 122
• Multiple spanning tree protocol port configuration 122
• Note changes in this row are copied to all the ports as soon as you make them 122
• Xs3700 series user s guide 122
• Chapter 11 spanning tree protocol 123
• Label description 123
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 123
• Note changes in this row are copied to all the ports as soon as you make them 123
• The following table describes the labels in this screen 123
• Xs3700 series user s guide 123
• Chapter 11 spanning tree protocol 124
• Label description 124
• Multiple spanning tree protocol status 124
• Note this screen is only available after you activate mstp on the switch 124
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 11 on page 110 for more information on mstp 124
• Status mstp 124
• The following table describes the labels in this screen 124
• Xs3700 series user s guide 124
• Chapter 11 spanning tree protocol 125
• Label description 125
• Status mstp continued 125
• Xs3700 series user s guide 125
• Bandwidth control 126
• Bandwidth control overview 126
• Bandwidth control setup 126
• Cir and pir 126
• Bandwidth control 127
• Chapter 12 bandwidth control 127
• Label description 127
• Note changes in this row are copied to all the ports as soon as you make them 127
• The following table describes the related labels in this screen 127
• Xs3700 series user s guide 127
• Broadcast storm control 128
• Broadcast storm control setup 128
• Broadcast storm control 129
• Chapter 13 broadcast storm control 129
• Label description 129
• Note changes in this row are copied to all the ports as soon as you make them 129
• The following table describes the labels in this screen 129
• Xs3700 series user s guide 129
• Mirroring 130
• Port mirroring 130
• Destination b 131
• Destination c 131
• Intermediate a destination a 131
• Intermediate b 131
• Multi destination rmirror 131
• Remote port mirroring rmirror vlan 131
• Single destination rmirror 131
• Source 131
• Source intermediate destination 131
• Port rules in port mirroring 132
• Table 57 port rules between different remote port mirroring vlans 132
• Table 58 port rules between remote and local port mirroring 132
• Chapter 14 mirroring 133
• Label description 133
• Local port mirroring 133
• Mirroring 133
• Mirroring in the navigation panel to display the mirroring screen use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port 133
• Note changes in this row are copied to all the ports as soon as you make them 133
• The following table describes the labels in this screen 133
• Xs3700 series user s guide 133
• Chapter 14 mirroring 134
• Label description 134
• Mirroring continued 134
• Mirroring screen the following screen opens 134
• Remote port mirroring 134
• Rmirror 134
• The following table describes the labels in this screen 134
• Use this screen to create a remote port mirroring rmirror vlan through which the mirrored traffic is forwarded 134
• Xs3700 series user s guide 134
• Source 135
• Chapter 14 mirroring 136
• Click the destination link in the rmirror screen the following screen opens 136
• Destination 136
• Label description 136
• Note changes in this row are copied to all the ports as soon as you make them 136
• Source continued 136
• Use this screen to specify the rmirror vlan and configure the monitor port when the switch is the destination device in remote port mirroring 136
• Xs3700 series user s guide 136
• Chapter 14 mirroring 137
• Click the connected port link in the rmirror screen the following screen opens 137
• Connected port 137
• Destination 137
• Label description 137
• The following table describes the labels in this screen 137
• Use this screen to select the rmirror vlan and specify the port s that helps forward mirrored traffic to other connected switches and or receive mirrored traffic from other connected port in the same rmirror vlan 137
• Xs3700 series user s guide 137
• Chapter 14 mirroring 138
• Connected port 138
• Label description 138
• Note changes in this row are copied to all the ports as soon as you make them 138
• The following table describes the labels in this screen 138
• Xs3700 series user s guide 138
• Dynamic link aggregation 140
• Link aggregation 140
• Link aggregation overview 140
• Link aggregation id 141
• Link aggregation status 141
• Chapter 15 link aggregation 142
• Label description 142
• Link aggregation setting 142
• Link aggregation setting to display the screen shown next see section 15 on page 140 for more information on link aggregation 142
• Link aggregation status 142
• The following table describes the labels in this screen 142
• Xs3700 series user s guide 142
• Chapter 15 link aggregation 144
• Label description 144
• Lacp to display the screen shown next see section 15 on page 140 for more information on dynamic link aggregation 144
• Link aggregation control protocol 144
• Link aggregation setting continued 144
• Note when you enable the port security feature on the switch and configure port security settings for a port you cannot include the port in an active trunk group 144
• Xs3700 series user s guide 144
• Chapter 15 link aggregation 145
• Label description 145
• Note do not configure this screen unless you want to enable dynamic link aggregation 145
• The following table describes the labels in this screen 145
• Xs3700 series user s guide 145
• Static trunking example 146
• Example 147
• Ieee 802 x authentication 148
• Port authentication 148
• Port authentication overview 148
• Mac authentication 149
• Activate ieee 802 x security 150
• Authentication reply 150
• Authentication request authentication request 150
• New connection 150
• Port authentication configuration 150
• Session granted denied 150
• Chapter 16 port authentication 151
• Label description 151
• Note changes in this row are copied to all the ports as soon as you make them 151
• Note you must first enable 802 x authentication on the switch before configuring it on each port 151
• The following table describes the labels in this screen 151
• Xs3700 series user s guide 151
• Guest vlan 152
• Internet 152
• Vlan 100 152
• Vlan 102 152
• Chapter 16 port authentication 153
• Guest vlan 153
• Label description 153
• Note changes in this row are copied to all the ports as soon as you make them 153
• The following table describes the labels in this screen 153
• Xs3700 series user s guide 153
• Activate mac authentication 154
• Chapter 16 port authentication 154
• Guest vlan continued 154
• Label description 154
• Mac authentication 154
• Note you must first enable mac authentication on the switch before configuring it on each port 154
• The following table describes the labels in this screen 154
• Use this screen to activate mac authentication in the port authentication screen click mac authentication to display the configuration screen as shown 154
• Xs3700 series user s guide 154
• Chapter 16 port authentication 155
• Label description 155
• Mac authentication continued 155
• Note changes in this row are copied to all the ports as soon as you make them 155
• Note if the aging time in the switch setup screen is set to a lower value then it supersedes this setting see section 6 on page 56 155
• Xs3700 series user s guide 155
• About port security 156
• Port security 156
• Port security setup 156
• Chapter 17 port security 157
• Label description 157
• Note changes in this row are copied to all the ports as soon as you make them 157
• Port security 157
• Port security screen to display the screen as shown 157
• The following table describes the labels in this screen 157
• Vlan mac address limit 157
• Xs3700 series user s guide 157
• Chapter 17 port security 158
• Label description 158
• The following table describes the labels in this screen 158
• Vlan mac address limit 158
• Xs3700 series user s guide 158
• About time range 159
• Time range 159
• Time range setup 159
• Chapter 18 time range 160
• Label description 160
• The following table describes the labels in this screen 160
• Time range 160
• Xs3700 series user s guide 160
• Classifier 161
• Classifier status 161
• Overview 161
• What you can do 161
• What you need to know 161
• Chapter 19 classifier 162
• Classifier classifier status 162
• Classifier configuration 162
• Click classifier configuration in the classifier status screen to display the configuration screen as shown 162
• Label description 162
• The following table describes the labels in this screen 162
• Xs3700 series user s guide 162
• Chapter 19 classifier 164
• Classifier configuration 164
• Label description 164
• The following table describes the labels in this screen 164
• Xs3700 series user s guide 164
• Chapter 19 classifier 165
• Classifier configuration continued 165
• Label description 165
• Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers 165
• To view a summary of the classifier configuration scroll down to the summary table at the bottom of the classifier configuration screen to change the settings of a rule click a number in the index field 165
• Viewing and editing classifier configuration 165
• Xs3700 series user s guide 165
• Chapter 19 classifier 166
• Classifier configuration summary table 166
• Ethernet type protocol number 166
• In the internet protocol there is a field called protocol to identify the next level protocol the following table shows some common protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 166
• Label description 166
• Note when two rules conflict with each other a higher layer rule has priority over lower layer rule 166
• Protocol type protocol number 166
• Table 78 common ethernet types and protocol numbers 166
• Table 79 common ip protocol types and protocol numbers 166
• The following table describes the labels in this screen 166
• The following table shows some other common ethernet types and the corresponding protocol number 166
• Xs3700 series user s guide 166
• Chapter 19 classifier 167
• Classifier global setting 167
• Click classifier global setting in the classifier configuration screen to display the configuration screen as shown 167
• Label description 167
• Protocol name tcp udp port number 167
• Protocol type protocol number 167
• Some of the most common tcp and udp port numbers are 167
• Table 79 common ip protocol types and protocol numbers 167
• Table 80 common tcp and udp port numbers 167
• The following table describes the labels in this screen 167
• Xs3700 series user s guide 167
• Classifier example 168
• Example 169
• Configuring policy rules 170
• Diffserv 170
• Dscp and per hop behavior 170
• Policy rule 170
• Policy rules overview 170
• Chapter 20 policy rule 172
• Label description 172
• Policy rule continued 172
• Xs3700 series user s guide 172
• Chapter 20 policy rule 173
• Label description 173
• Policy example 173
• Policy rule continued 173
• Policy rule summary table 173
• Table 83 policy summary table 173
• The figure below shows an example policy screen where you configure a policy to limit bandwidth and discard out of profile traffic on a traffic flow classified using the example classifier refer to section 19 on page 168 173
• The following table describes the labels in this screen 173
• To view a summary of the classifier configuration scroll down to the summary table at the bottom of the policy screen to change the settings of a rule click a number in the index field 173
• Viewing and editing policy configuration 173
• Xs3700 series user s guide 173
• Example 174
• Queuing method 175
• Queuing method overview 175
• Strictly priority 175
• Weighted fair queuing 175
• Configuring queuing 176
• Weighted round robin scheduling wrr 176
• Chapter 21 queuing method 177
• Label description 177
• Note changes in this row are copied to all the ports as soon as you make them 177
• Queuing method 177
• The following table describes the labels in this screen 177
• Xs3700 series user s guide 177
• Vlan stacking 178
• Vlan stacking example 178
• Vlan stacking overview 178
• Note static vlan tx tagging must be disabled on a port where you choose normal or access port 179
• Note static vlan tx tagging must be enabled on a port where you choose tunnel port 179
• Vlan stacking port roles 179
• Vlan tag format 179
• Configuring vlan stacking 180
• Frame format 180
• Chapter 22 vlan stacking 181
• Label description 181
• Note changes in this row are copied to all the ports as soon as you make them 181
• Note you can define up to four different tunnel tpids including 8100 in this screen at a time 181
• The following table describes the labels in this screen 181
• Vlan stacking 181
• Xs3700 series user s guide 181
• Chapter 22 vlan stacking 182
• Label description 182
• Note selective q in q rules are only applied to single tagged frames received on the access ports if the incoming frames are untagged or single tagged but received on a tunnel port or cannot match any selective q in q rules the switch applies the port based q in q rules to them 182
• Port based q in q 182
• Port based q in q lets the switch treat all frames received on the same port as the same vlan flows and add the same outer vlan tag to them even they have different customer vlan ids 182
• Port based qinq 182
• Selective q in q 182
• Selective q in q is vlan based it allows the switch to add different outer vlan tags to the incoming frames received on one port according to their inner vlan tags 182
• The following table describes the labels in this screen 182
• Vlan stacking screen to display the screen as shown 182
• Xs3700 series user s guide 182
• Chapter 22 vlan stacking 183
• Label description 183
• Selective qinq 183
• The following table describes the labels in this screen 183
• Vlan stacking screen to display the screen as shown 183
• Xs3700 series user s guide 183
• Chapter 22 vlan stacking 184
• Label description 184
• Selective qinq continued 184
• Xs3700 series user s guide 184
• Igmp filtering 185
• Ip multicast addresses 185
• Multicast 185
• Multicast overview 185
• Igmp snooping 186
• Igmp snooping and vlans 186
• Mld snooping proxy 186
• Mld messages 187
• Multicast setup 187
• Report 187
• Igmp snooping 188
• Ipv4 multicast status 188
• Chapter 23 multicast 189
• Igmp snooping 189
• Label description 189
• Note if you enable igmp filtering you must create and assign igmp filtering profiles for the ports that you want to allow to join multicast groups 189
• The following table describes the labels in this screen 189
• Xs3700 series user s guide 189
• Chapter 23 multicast 190
• Igmp snooping continued 190
• Label description 190
• Note changes in this row are copied to all the ports as soon as you make them 190
• Xs3700 series user s guide 190
• Chapter 23 multicast 191
• Igmp snooping continued 191
• Igmp snooping vlan 191
• Ipv4 multicast in the navigation panel click the igmp snooping link and then the igmp snooping vlan link to display the screen as shown see section 23 on page 186 for more information on igmp snooping vlan 191
• Label description 191
• Xs3700 series user s guide 191
• An igmp filtering profile specifies a range of multicast groups that clients connected to the switch are able to join a profile contains a range of multicast ip addresses which you want clients to be able to join profiles are assigned to ports in the igmp snooping screen clients connected to those ports are then able to join the multicast groups specified in the profile each port can be assigned a single profile a profile can be assigned to multiple ports 192
• Chapter 23 multicast 192
• Igmp filtering profile 192
• Igmp snooping screen first 192
• Igmp snooping vlan 192
• Ipv4 multicast in the navigation panel click the igmp snooping link and then the igmp filtering profile link to display the screen as shown 192
• Label description 192
• Note you cannot configure the same vlan id as in the mvr screen 192
• The following table describes the labels in this screen 192
• Xs3700 series user s guide 192
• Chapter 23 multicast 193
• Igmp filtering profile 193
• Label description 193
• The following table describes the labels in this screen 193
• Xs3700 series user s guide 193
• Ipv6 multicast status 194
• Mld snooping proxy 194
• Chapter 23 multicast 195
• Ipv6 multicast screen to display the screen as shown see section 23 on page 185 for more information on multicasting 195
• Label description 195
• Mld snooping proxy vlan 195
• The following table describes the labels in this screen 195
• Xs3700 series user s guide 195
• Chapter 23 multicast 196
• Label description 196
• Mld snooping proxy vlan port role setting 196
• Vlan screen to display the screen as shown see section 23 on page 185 for more information on multicasting 196
• Xs3700 series user s guide 196
• Chapter 23 multicast 197
• Label description 197
• Note changes in this row are copied to all the ports as soon as you make them 197
• Port role setting 197
• The following table describes the labels in this screen 197
• Xs3700 series user s guide 197
• Chapter 23 multicast 198
• Filtering 198
• Ipv6 multicast screen to display the screen as shown see section 23 on page 185 for more information on multicasting 198
• Label description 198
• Mld snooping proxy filtering 198
• Port role setting continued 198
• Xs3700 series user s guide 198
• Chapter 23 multicast 199
• Filtering 199
• Filtering profile 199
• Filtering screen to display the screen as shown 199
• Label description 199
• Mld snooping proxy filtering profile 199
• Note changes in this row are copied to all the ports as soon as you make them 199
• The following table describes the labels in this screen 199
• Xs3700 series user s guide 199
• Chapter 23 multicast 200
• Filtering profile 200
• Label description 200
• Multicast vlan registration mvr is designed for applications such as media on demand mod that use multicast traffic across an ethernet ring based service provider network 200
• Mvr allows one single multicast vlan to be shared among different subscriber vlans on the network while isolated in different subscriber vlans connected devices can subscribe to and unsubscribe from the multicast stream in the multicast vlan this improves bandwidth utilization with reduced multicast traffic in the subscriber vlans and simplifies multicast group management 200
• Mvr only responds to igmp join and leave control messages from multicast groups that are configured under mvr join and leave reports from other multicast groups are managed by igmp snooping 200
• Mvr overview 200
• The following figure shows a network example the subscriber vlan 1 2 and 3 information is hidden from the streaming media server s in addition the multicast vlan information is only visible to the switch and s 200
• The following table describes the labels in this screen 200
• Xs3700 series user s guide 200
• How mvr works 201
• Multicast vlan vlan 1 201
• Mvr modes 201
• Types of mvr ports 201
• Vlan 2 201
• Vlan 3 201
• General mvr configuration 202
• Multicast vlan vlan 1 202
• Note you can create up to five multicast vlans and up to 256 multicast rules on the switch 202
• Note your switch automatically creates a static vlan with the same vid when you create a multicast vlan in this screen 202
• Chapter 23 multicast 203
• Label description 203
• The following table describes the related labels in this screen 203
• Xs3700 series user s guide 203
• All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group 204
• Chapter 23 multicast 204
• Label description 204
• Mvr continued 204
• Mvr group configuration 204
• Note a port can belong to more than one multicast vlan however ip multicast group addresses in different multicast vlans cannot overlap 204
• Note changes in this row are copied to all the ports as soon as you make them 204
• Use this screen to configure mvr ip multicast group address es click the group configuration link in the mvr screen 204
• Xs3700 series user s guide 204
• Chapter 23 multicast 205
• Group configuration 205
• Label description 205
• Note if you delete a multicast vlan all multicast groups in this vlan will also be removed 205
• The following table describes the labels in this screen 205
• Xs3700 series user s guide 205
• Example 206
• Multicast vid 200 vlan 1 206
• Mvr configuration example 206
• Example 207
• Authentication authorization and accounting aaa 208
• Local user accounts 208
• Aaa screens 209
• Radius and tacacs 209
• Radius server setup 209
• Chapter 24 aaa 210
• Label description 210
• Radius server setup 210
• The following table describes the labels in this screen 210
• Xs3700 series user s guide 210
• Chapter 24 aaa 211
• Label description 211
• Radius server setup continued 211
• Tacacs server setup 211
• Use this screen to configure your tacacs server settings see section 24 on page 209 for more information on tacacs servers click on the tacacs server setup link in the authentication and accounting screen to view the screen as shown 211
• Xs3700 series user s guide 211
• Chapter 24 aaa 212
• Label description 212
• Tacacs server setup 212
• The following table describes the labels in this screen 212
• Xs3700 series user s guide 212
• Aaa setup 213
• Chapter 24 aaa 213
• Label description 213
• Tacacs server setup continued 213
• Use this screen to configure authentication authorization and accounting settings on the switch click on the aaa setup link in the aaa screen to view the screen as shown 213
• Xs3700 series user s guide 213
• Aaa setup 214
• Chapter 24 aaa 214
• Label description 214
• The following table describes the labels in this screen 214
• Xs3700 series user s guide 214
• Aaa setup continued 215
• Chapter 24 aaa 215
• Label description 215
• Xs3700 series user s guide 215
• Aaa setup continued 216
• Assign account privilege levels see the cli reference guide for more information on account privilege levels for the authenticated user 216
• Chapter 24 aaa 216
• Label description 216
• Limit bandwidth on incoming or outgoing traffic for the port the user connects to 216
• Note refer to the documentation that comes with your radius server on how to configure vsas for users authenticating via the radius server 216
• Rfc 2865 standard specifies a method for sending vendor specific information between a radius server and a network access device for example the switch a company can create vendor specific attributes vsas to expand the functionality of a radius server 216
• The switch supports vsas that allow you to perform the following actions based on user authentication 216
• The vsas are composed of the following 216
• Vendor data a value you want to assign to the setting 216
• Vendor id an identification number assigned to the company by the iana internet assigned numbers authority zyxel s vendor id is 890 216
• Vendor specific attribute 216
• Vendor type a vendor specified attribute identifying the setting you want to modify 216
• Xs3700 series user s guide 216
• Supported radius attributes 217
• Tunnel protocol attribute 217
• Attributes used by the ieee 802 x authentication 218
• Attributes used for accounting 218
• Attributes used for authenticating privilege access 218
• Attributes used for authentication 218
• Attributes used to login users 218
• Attributes used for accounting exec events 219
• Attributes used for accounting system events 219
• Attributes used for accounting ieee 802 x events 220
• Dhcp snooping overview 221
• Ip source guard 221
• Ip source guard overview 221
• Dhcp snooping database 222
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 222
• Arp inspection overview 223
• Configuring dhcp snooping 223
• Dhcp relay option 82 information 223
• Arp inspection and mac address filters 224
• Configuring arp inspection 224
• Note it is recommended you enable dhcp snooping at least one day before you enable arp inspection so that the switch has enough time to build the binding table 224
• Syslog 224
• Trusted vs untrusted ports 224
• Chapter 25 ip source guard 225
• Figure 141 ip source guard 225
• Ip source guard 225
• Ip source guard static binding 225
• Label description 225
• Static binding 225
• Table 113 ip source guard 225
• The following table describes the labels in this screen 225
• Xs3700 series user s guide 225
• Arp learning screen before you use the arp freeze feature 226
• Chapter 25 ip source guard 226
• Label description 226
• Static binding 226
• The following table describes the labels in this screen 226
• Xs3700 series user s guide 226
• Chapter 25 ip source guard 227
• Dhcp snooping 227
• Label description 227
• Static binding continued 227
• Xs3700 series user s guide 227
• Chapter 25 ip source guard 228
• Dhcp snooping 228
• Label description 228
• The following table describes the labels in this screen 228
• Xs3700 series user s guide 228
• Chapter 25 ip source guard 229
• Dhcp snooping continued 229
• Label description 229
• Xs3700 series user s guide 229
• Chapter 25 ip source guard 230
• Configure 230
• Dhcp snooping configure 230
• Dhcp snooping continued 230
• Label description 230
• Xs3700 series user s guide 230
• Chapter 25 ip source guard 231
• Configure 231
• Label description 231
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 231
• Note you have to enable dhcp snooping on the dhcp vlan too 231
• The following table describes the labels in this screen 231
• Xs3700 series user s guide 231
• Chapter 25 ip source guard 232
• Configure continued 232
• Dhcp snooping port configure 232
• Label description 232
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 232
• Use this screen to specify whether ports are trusted or untrusted ports for dhcp snooping 232
• Xs3700 series user s guide 232
• Chapter 25 ip source guard 233
• Dhcp snooping port configure 233
• Dhcp snooping vlan configure 233
• Label description 233
• The following table describes the labels in this screen 233
• Xs3700 series user s guide 233
• Chapter 25 ip source guard 234
• Dhcp snooping vlan configure 234
• Dhcp snooping vlan port configure 234
• Label description 234
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 234
• The following table describes the labels in this screen 234
• Xs3700 series user s guide 234
• Arp inspection 235
• Arp inspection status 235
• Chapter 25 ip source guard 235
• Dhcp snooping vlan port configure 235
• Label description 235
• The following table describes the labels in this screen 235
• Vlan screen 235
• Xs3700 series user s guide 235
• Arp inspection status 236
• Arp inspection vlan status 236
• Chapter 25 ip source guard 236
• Label description 236
• The following table describes the labels in this screen 236
• Vlan status 236
• Xs3700 series user s guide 236
• Arp inspection log status 237
• Arp inspection vlan status 237
• Chapter 25 ip source guard 237
• Label description 237
• Log status 237
• The following table describes the labels in this screen 237
• Xs3700 series user s guide 237
• Arp inspection log status 238
• Chapter 25 ip source guard 238
• Label description 238
• The following table describes the labels in this screen 238
• Xs3700 series user s guide 238
• Arp inspection configure 239
• Chapter 25 ip source guard 239
• Configure 239
• Label description 239
• The following table describes the labels in this screen 239
• Xs3700 series user s guide 239
• Arp inspection configure continued 240
• Arp inspection port configure 240
• Chapter 25 ip source guard 240
• Label description 240
• Xs3700 series user s guide 240
• Arp inspection port configure 241
• Arp inspection vlan configure 241
• Chapter 25 ip source guard 241
• Label description 241
• The following table describes the labels in this screen 241
• Xs3700 series user s guide 241
• Arp inspection vlan configure 242
• Chapter 25 ip source guard 242
• Label description 242
• The following table describes the labels in this screen 242
• Xs3700 series user s guide 242
• Loop guard 243
• Loop guard overview 243
• Note after resolving the loop problem on your network you can re activate the disabled port via the web configurator see section 6 on page 63 or via commands see the ethernet switch cli reference guide 244
• Chapter 26 loop guard 245
• Label description 245
• Loop guard 245
• Loop guard in the navigation panel to display the screen as shown 245
• Loop guard setup 245
• Note changes in this row are copied to all the ports as soon as you make them 245
• Note the loop guard feature can not be enabled on the ports that have spanning tree protocol rstp mrstp or mstp enabled 245
• The following table describes the labels in this screen 245
• Xs3700 series user s guide 245
• Enabling vlan mapping 246
• Vlan mapping 246
• Vlan mapping example 246
• Vlan mapping overview 246
• Chapter 27 vlan mapping 247
• Click the vlan mapping configure link in the vlan mapping screen to display the screen as shown use this screen to enable and edit the vlan mapping rule s 247
• Configuring vlan mapping 247
• Figure 160 vlan mapping 247
• Label description 247
• Table 127 vlan mapping 247
• The following table describes the labels in this screen 247
• Xs3700 series user s guide 247
• Chapter 27 vlan mapping 248
• Figure 161 vlan mapping configuration 248
• Label description 248
• Table 128 vlan mapping configuration 248
• The following table describes the labels in this screen 248
• Xs3700 series user s guide 248
• Layer 2 protocol tunneling 249
• Layer 2 protocol tunneling overview 249
• Configuring layer 2 protocol tunneling 250
• Layer 2 protocol tunneling mode 250
• Service provider s network c 250
• Chapter 28 layer 2 protocol tunneling 251
• Label description 251
• Layer 2 protocol tunneling 251
• Note all the edge switches in the service provider s network should be set to use the same mac address for encapsulation 251
• Note changes in this row are copied to all the ports as soon as you make them 251
• Note the mac address can be either a unicast mac address or multicast mac address if you use a unicast mac address make sure the mac address does not exist in the address table of a switch on the service provider s network 251
• The following table describes the labels in this screen 251
• Xs3700 series user s guide 251
• Chapter 28 layer 2 protocol tunneling 252
• Label description 252
• Layer 2 protocol tunneling continued 252
• Note you can enable l2pt services for stp lacp vtp cdp udld and pagp on the access port s only 252
• Xs3700 series user s guide 252
• Sflow overview 253
• Sflow port configuration 253
• Chapter 29 sflow 254
• Label description 254
• Note changes in this row are copied to all the ports as soon as you make them 254
• The following table describes the labels in this screen 254
• Xs3700 series user s guide 254
• Chapter 29 sflow 255
• Click the collector link in the sflow screen to display the screen as shown you can configure up to four sflow collectors in this screen you may want to configure more than one collector if the traffic load to be monitored is more than one collector can manage 255
• Collector 255
• Collector screen the sflow collector does not need to be in the same subnet as the switch but it must be accessible from the switch 255
• Label description 255
• Note configure udp port 6343 the default on a nat router to allow port forwarding if the collector is behind a nat router configure a firewall rule for udp port 6343 the default to allow incoming traffic if the collector is behind a firewall 255
• Sflow collector configuration 255
• Sflow continued 255
• The following table describes the labels in this screen 255
• Xs3700 series user s guide 255
• Chapter 29 sflow 256
• Collector continued 256
• Label description 256
• Xs3700 series user s guide 256
• Pppoe intermediate agent overview 257
• Pppoe intermediate agent tag format 257
• Sub option format 257
• Chapter 30 pppoe 258
• Every port is either a trusted port or an untrusted port for the pppoe intermediate agent this setting is independent of the trusted untrusted setting for dhcp snooping or arp inspection you can also specify the agent sub options circuit id and remote id that the switch adds to padi and padr packets from pppoe clients 258
• Flexible circuit id syntax with identifier string and variables 258
• If you do not configure a circuit id string for a vlan on a specific port or for a specific port the switch adds the user defined identifier string and variables into the agent circuit id sub option the variables can be the slot id of the pppoe client the port number of the pppoe client and or the vlan id on the pppoe packet 258
• Intermediate agent screen the switch automatically generates a circuit id string according to the default circuit id syntax which is defined in the dsl forum working text wt 101 the default access node identifier is the host name of the pppoe intermediate agent and the eth indicates ethernet 258
• Port state 258
• Table 134 pppoe ia remote id sub option format 258
• Table 135 pppoe ia circuit id sub option format using identifier string and variables 258
• Table 136 pppoe ia circuit id sub option format defined in wt 101 258
• The 1 in the first field identifies this as an agent circuit id sub option and 2 identifies this as an agent remote id sub option the next field specifies the length of the field the switch takes the circuit id string you manually configure for a vlan on a port as the highest priority and the circuit id string for a port as the second priority in addition the switch puts the pppoe client s mac address into the agent remote id sub option if you do not specify any user defined string 258
• The identifier string slot id port number and vlan id are separated from each other by a pound key semi colon period comma forward slash or space an agent circuit id sub option example is switch 07 0123 and indicates the pppoe packets come from a pppoe client which is connected to the switch s port 7 and belong to vlan 123 258
• Wt 101 default circuit id syntax 258
• Xs3700 series user s guide 258
• Note the switch will drop all pppoe discovery packets if you enable the pppoe intermediate agent and there are no trusted ports 259
• Pppoe intermediate agent 259
• The pppoe screen 259
• Chapter 30 pppoe 260
• Intermediate agent 260
• Label description 260
• The following table describes the labels in this screen 260
• Xs3700 series user s guide 260
• Note the switch will drop all pppoe packets if you enable the pppoe intermediate agent on the switch and there are no trusted ports 261
• Pppoe ia per port 261
• Chapter 30 pppoe 262
• Label description 262
• Port continued 262
• Port screen to display the screen as shown 262
• Pppoe ia per port per vlan 262
• Use this screen to configure pppoe ia settings that apply to a specific vlan on a port 262
• Xs3700 series user s guide 262
• Chapter 30 pppoe 263
• Label description 263
• Note changes in this row are copied to all the vlans as soon as you make them 263
• The following table describes the labels in this screen 263
• Xs3700 series user s guide 263
• Chapter 30 pppoe 264
• Click the vlan link in the intermediate agent screen to display the screen as shown 264
• Label description 264
• Note changes in this row are copied to all the vlans as soon as you make them 264
• Pppoe ia for vlan 264
• The following table describes the labels in this screen 264
• Use this screen to set whether the pppoe intermediate agent is enabled on a vlan and whether the switch appends the circuit id and or remote id to pppoe discovery packets from a specific vlan 264
• Xs3700 series user s guide 264
• Cpu protection overview 265
• Error disable 265
• Error disable recovery overview 265
• The error disable screen 265
• Error disable status 266
• Chapter 31 error disable 267
• Cpu protection configuration 267
• Errdisable detect screen 267
• Errdisable screen to display the screen as shown 267
• Errdisable status 267
• Label description 267
• The following table describes the labels in this screen 267
• Xs3700 series user s guide 267
• Chapter 31 error disable 268
• Cpu protection 268
• Errdisable screen to display the screen as shown 268
• Error disable detect configuration 268
• Label description 268
• Note changes in this row are copied to all the ports as soon as you make them 268
• The following table describes the labels in this screen 268
• Xs3700 series user s guide 268
• Chapter 31 error disable 269
• Errdisable detect 269
• Errdisable screen to display the screen as shown 269
• Error disable recovery configuration 269
• Label description 269
• Note changes in this row are copied to all the entries as soon as you make them 269
• The following table describes the labels in this screen 269
• Xs3700 series user s guide 269
• Chapter 31 error disable 270
• Errdisable recovery 270
• Label description 270
• Note changes in this row are copied to all the entries as soon as you make them 270
• The following table describes the labels in this screen 270
• Xs3700 series user s guide 270
• Mac pinning 271
• Mac pinning configuration 271
• Mac pinning overview 271
• Chapter 32 mac pinning 272
• Label description 272
• Mac pinning 272
• Note changes in this row are copied to all the ports as soon as you make them 272
• The following table describes the labels in this screen 272
• Xs3700 series user s guide 272
• Private vlan 273
• Private vlan overview 273
• Label description 274
• Table 146 pvlan graphic key continued 274
• Table 147 spanning pvlan graphic key 274
• Configuration 275
• Vlan port setting enabled will not be able to communicate with each other 275
• Chapter 33 private vlan 276
• Label description 276
• Note changes in this row are copied to all the entries as soon as you make them 276
• Note the vlan id and mode selected here must be the same as the vlan id and vlan typ 276
• Private vlan 276
• The following table describes the labels in this screen 276
• Xs3700 series user s guide 276
• Configuring green ethernet 277
• Green ethernet 277
• Green ethernet overview 277
• Chapter 34 green ethernet 278
• Green ethernet 278
• Label description 278
• Note changes in this row are copied to all the ports as soon as you make them 278
• The following table describes the labels in this screen 278
• Xs3700 series user s guide 278
• Link layer discovery protocol lldp 279
• Lldp overview 279
• Lldp med overview 280
• Lldp screens 281
• Chapter 35 link layer discovery protocol lldp 282
• Label description 282
• Lldp continued 282
• Lldp local status 282
• Lldp local status to display the screen as shown next 282
• Xs3700 series user s guide 282
• Chapter 35 link layer discovery protocol lldp 283
• Label description 283
• Lldp local status 283
• The following table describes the labels in this screen 283
• Xs3700 series user s guide 283
• Chapter 35 link layer discovery protocol lldp 284
• Label description 284
• Lldp local port status detail 284
• Lldp local status 284
• Lldp local status and then click a port number for example 1 port in the local port column to display the screen as shown next 284
• Xs3700 series user s guide 284
• Chapter 35 link layer discovery protocol lldp 287
• Label description 287
• Lldp local port status detail 287
• The following table describes the labels in this screen 287
• Xs3700 series user s guide 287
• Chapter 35 link layer discovery protocol lldp 288
• Label description 288
• Lldp local port status detail 288
• Lldp remote status 288
• Lldp remote status to display the screen as shown next 288
• The following table describes the labels in this screen 288
• Xs3700 series user s guide 288
• Lldp remote port status detail 289
• Chapter 35 link layer discovery protocol lldp 290
• Label description 290
• Lldp remote port status detail basic tlv 290
• The following table describes the labels in basic tlv part of the screen 290
• Xs3700 series user s guide 290
• Chapter 35 link layer discovery protocol lldp 291
• Dot 1 and dot3 tlv 291
• Label description 291
• Lldp remote port status detail dot1 and dot3 tlv 291
• The following table describes the labels in the dot1 and dot3 parts of the screen 291
• Xs3700 series user s guide 291
• Chapter 35 link layer discovery protocol lldp 292
• Label description 292
• Lldp remote port status detail dot1 and dot3 tlv 292
• Xs3700 series user s guide 292
• Chapter 35 link layer discovery protocol lldp 294
• Label description 294
• Lldp remote port status detail med tlv 294
• The following table describes the labels in the med tlv part of the screen 294
• Xs3700 series user s guide 294
• Chapter 35 link layer discovery protocol lldp 295
• Label description 295
• Lldp configuration 295
• Lldp configuration to display the screen as shown next 295
• Lldp remote port status detail med tlv 295
• Xs3700 series user s guide 295
• Chapter 35 link layer discovery protocol lldp 296
• Label description 296
• Lldp configuration 296
• The following table describes the labels in this screen 296
• Xs3700 series user s guide 296
• Basic tlv setting 297
• Basic tlv setting to display the screen as shown next 297
• Chapter 35 link layer discovery protocol lldp 297
• Label description 297
• Lldp configuration 297
• Lldp configuration basic tlv setting 297
• The following table describes the labels in this screen 297
• Xs3700 series user s guide 297
• Basic tlv setting 298
• Chapter 35 link layer discovery protocol lldp 298
• Label description 298
• Lldp configuration basic org specific tlv setting 298
• Org specific tlv setting 298
• Org specific tlv setting to display the screen as shown next 298
• The following table describes the labels in this screen 298
• Xs3700 series user s guide 298
• Chapter 35 link layer discovery protocol lldp 299
• Label description 299
• Lldp med configuration 299
• Lldp med configuration to display the screen as shown next 299
• Note for poe models only 299
• Org specific tlv setting 299
• The following table describes the labels in this screen 299
• Xs3700 series user s guide 299
• Chapter 35 link layer discovery protocol lldp 300
• Label description 300
• Lldp med configuration 300
• Lldp med network policy 300
• Lldp med network policy to display the screen as shown next 300
• The following table describes the labels in this screen 300
• Xs3700 series user s guide 300
• Chapter 35 link layer discovery protocol lldp 301
• Label description 301
• Lldp med location 301
• Lldp med location to display the screen as shown next 301
• Lldp med network policy 301
• Xs3700 series user s guide 301
• Chapter 35 link layer discovery protocol lldp 302
• Label description 302
• Lldp med location 302
• The following table describes the labels in this screen 302
• Xs3700 series user s guide 302
• Chapter 35 link layer discovery protocol lldp 303
• Label description 303
• Lldp med location 303
• Xs3700 series user s guide 303
• Chapter 35 link layer discovery protocol lldp 304
• Label description 304
• Lldp med location 304
• Xs3700 series user s guide 304
• Static route 305
• Static routing 305
• Static routing overview 305
• Configuring ipv4 static routing 306
• Chapter 36 static route 307
• Configuring ipv6 static routing 307
• Ipv4 static route continued 307
• Label description 307
• Static routing screen to display the screen as shown 307
• Xs3700 series user s guide 307
• Chapter 36 static route 308
• Ipv6 static route 308
• Label description 308
• The following table describes the related labels you use to create a static route 308
• Xs3700 series user s guide 308
• Benefits 309
• Configuring policy routing profile 309
• Policy route overview 309
• Policy routing 309
• Chapter 37 policy routing 310
• Label description 310
• Policy routing 310
• Policy routing rule configuration 310
• The following table describes the labels in this screen 310
• Use this screen to configure a policy route to override the default shortest path routing behavior and forward packets based on the classifier and action you specify a policy route rule defines the matching classifier and the action to take when a packet meets the criteria in the classifier the action is taken only when all the criteria are met policy based routing is applied to incoming packets on a per interface basis before normal routing the switch does not perform normal routing on packets that match any of the policy routes 310
• Xs3700 series user s guide 310
• You must first configure a layer 3 classifier in the classifier screen see section 19 on page 161 and a policy routing profile in the policy routing screen see section 37 on page 309 310
• Chapter 37 policy routing 311
• Label description 311
• Policy routing screen to display the screen as shown 311
• Rule configuration 311
• The following table describes the labels in this screen 311
• Xs3700 series user s guide 311
• Chapter 37 policy routing 312
• Label description 312
• Rule configuration continued 312
• Xs3700 series user s guide 312
• Differentiated services 313
• Diffserv network example 313
• Diffserv overview 313
• Dscp and per hop behavior 313
• P platinum g gold s silver b bronze 314
• Two rate three color marker traffic policing 314
• Activating diffserv 315
• Exceed cir 315
• Exceed pir 315
• Red yellow 315
• Trtcm color aware mode 315
• Trtcm color blind mode 315
• Chapter 38 differentiated services 316
• Configuring 2 rate 3 color marker settings 316
• Diffserv 316
• Label description 316
• Note changes in this row are copied to all the ports as soon as you make them 316
• Note you cannot enable both trtcm and bandwidth control at the same time 316
• The following table describes the labels in this screen 316
• Use this screen to configure trtcm settings click the 2 rate 3 color marker link in the diffserv screen to display the screen as shown next 316
• Xs3700 series user s guide 316
• Chapter 38 differentiated services 317
• Label description 317
• Note changes in this row are copied to all the ports as soon as you make them 317
• Note you must also activate diffserv on the switch and the individual ports for the switch to drop red high loss priority colored packets 317
• Rate 3 color marker 317
• The following table describes the labels in this screen 317
• Xs3700 series user s guide 317
• Chapter 38 differentiated services 318
• Dscp profile 318
• Label description 318
• Rate 3 color marker continued 318
• Rate 3 color marker screen 318
• The following table describes the labels in this screen 318
• Xs3700 series user s guide 318
• Chapter 38 differentiated services 319
• Configuring dscp settings 319
• Dscp profile continued 319
• Dscp setting 319
• Dscp to ieee 802 p priority settings 319
• Label description 319
• Table 170 default dscp ieee 802 p mapping 319
• The following table shows the default dscp to ieee802 p mapping 319
• To change the dscp ieee 802 p mapping click the dscp setting link in the diffserv screen to display the screen as shown next 319
• Xs3700 series user s guide 319
• You can configure the dscp to ieee 802 p mapping to allow the switch to prioritize all traffic based on the incoming dscp value according to the diffserv to ieee 802 p mapping table 319
• Chapter 38 differentiated services 320
• Dscp setting 320
• Label description 320
• The following table describes the labels in this screen 320
• Xs3700 series user s guide 320
• Dhcp configuration 321
• Dhcp configuration options 321
• Dhcp modes 321
• Dhcp overview 321
• Dhcpv4 server status detail 322
• Dhcpv4 status 322
• Chapter 39 dhcp 323
• Configure dhcp relay on the switch if the dhcp clients and the dhcp server are not in the same broadcast domain during the initial ip address leasing the switch helps to relay network information such as the ip address and subnet mask between a dhcp client and a dhcp server once the dhcp client obtains an ip address and can connect to the network network information renewal is done between the dhcp client and the dhcp server without the help of the switch 323
• Dhcpv4 relay 323
• Label description 323
• Server status detail 323
• The following table describes the labels in this screen 323
• Xs3700 series user s guide 323
• Dhcpv4 option 82 profile 324
• Dhcpv4 relay agent information 324
• Dhcpv4 relay agent information format 324
• Sub option format 324
• Chapter 39 dhcp 325
• Label description 325
• Option 82 profile 325
• The following table describes the labels in this screen 325
• Xs3700 series user s guide 325
• Chapter 39 dhcp 326
• Configuring dhcpv4 global relay 326
• Dhcpv4 in the navigation panel and click the global link to display the screen as shown 326
• Global 326
• Label description 326
• Option 82 profile continued 326
• The following table describes the labels in this screen 326
• Xs3700 series user s guide 326
• Chapter 39 dhcp 327
• Dhcpv4 global relay port configure 327
• Global continued 327
• Global screen 327
• Label description 327
• The following table describes the labels in this screen 327
• Xs3700 series user s guide 327
• Example 328
• Global dhcp relay configuration example 328
• Vlan1 vlan2 328
• Configuring dhcp vlan settings 329
• Note you must set up a management ip address for each vlan that you want to configure dhcp settings for on the switch see section 6 on page 58 for information on how to do this 329
• Chapter 39 dhcp 330
• Dhcpv4 vlan port configure 330
• Label description 330
• Vlan continued 330
• Xs3700 series user s guide 330
• Chapter 39 dhcp 331
• Label description 331
• The following table describes the labels in this screen 331
• Vlan screen 331
• Xs3700 series user s guide 331
• 6 0 00 332
• Example 332
• Example dhcp relay for two vlans 332
• Dhcpv6 relay 333
• Chapter 39 dhcp 334
• Dhcpv6 continued 334
• Label description 334
• Xs3700 series user s guide 334
• Vrrp overview 335
• Before configuring vrrp first create an ip interface or routing domain in the ip setup screen see the section 6 on page 58 for more information 336
• Chapter 40 vrrp 336
• Ip interface setup 336
• Label description 336
• The following sections describe the different parts of the vrrp configuration screen 336
• The following table describes the labels in this screen 336
• Vrrp configuration 336
• Vrrp in the navigation panel to display the vrrp status screen as shown next 336
• Vrrp status 336
• Xs3700 series user s guide 336
• Chapter 40 vrrp 337
• Click ip application vrrp and click the configuration link to display the vrrp configuration screen as shown next 337
• Label description 337
• Note routing domains with the same vlan id are not displayed in the table indicated 337
• Note you can only configure vrrp on interfaces with unique vlan ids 337
• The following table describes the labels in this screen 337
• Vrrp configuration ip interface 337
• Xs3700 series user s guide 337
• Advertisement interval 338
• Configuring vrrp parameters 338
• Note all routers participating in the virtual router must use the same advertisement interval 338
• Preempt mode 338
• Priority 338
• Vrrp parameters 338
• Chapter 40 vrrp 339
• Label description 339
• The following table describes the labels in this screen 339
• Vrrp configuration vrrp parameters 339
• Xs3700 series user s guide 339
• Chapter 40 vrrp 340
• Label description 340
• One subnet network example 340
• The figure below shows a simple vrrp network with only one virtual router vr1 vrid 1 and two switches the network is connected to the wan via an uplink gateway g 172 6 00 the host computer x is set to use vr1 as the default gateway 340
• The following sections show two vrrp configuration examples on the switch 340
• The following table describes the labels in this screen 340
• View the vrrp configuration summary at the bottom of the screen 340
• Viewing vrrp summary 340
• Vrrp configuration examples 340
• Vrrp configuration summary 340
• Xs3700 series user s guide 340
• Example 341
• Example 342
• Two subnets example 342
• Example 343
• Arp learning mode 344
• Arp overview 344
• Arp setup 344
• How arp works 344
• Arp request 345
• Gratuitous arp 345
• Arp learning 346
• Arp setup 346
• Arp learning 347
• Arp setup screen to display the screen as shown 347
• Chapter 41 arp setup 347
• Label description 347
• Note changes in this row are copied to all the ports as soon as you make them 347
• Static arp 347
• The following table describes the labels in this screen 347
• Xs3700 series user s guide 347
• Chapter 41 arp setup 348
• Label description 348
• Static arp 348
• The following table describes the related labels in this screen 348
• Xs3700 series user s guide 348
• Maintenance 350
• The maintenance screen 350
• Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 351
• Firmware upgrade 351
• Chapter 42 maintenance 352
• Firmware upgrade 352
• Label description 352
• Reboot click upgrade to load the new firmware after the firmware upgrade process is complete see the system info screen to verify your current firmware version number 352
• Restore a configuration file 352
• Restore a previously saved configuration from your computer to the switch using the restore configuration screen 352
• Restore configuration 352
• Type the path and file name of the configuration file you wish to restore in the file path text box or click browse to display the choose file screen from which you can locate it after you have specified the file click restore config is the name of the configuration file on the switch so your backup configuration file is automatically renamed when you restore using this screen 352
• Xs3700 series user s guide 352
• Backup a configuration file 353
• Erase running configuration 353
• Save configuration 353
• Factory default 354
• Note clicking the apply or add button does not save the changes permanently all unsaved changes are erased after you reboot the switch 354
• Reboot system 354
• Tech support 355
• Chapter 42 maintenance 356
• External name description 356
• File type internal name 356
• Filename conventions 356
• Ftp command line 356
• Label description 356
• Table 192 filename conventions 356
• Tech support 356
• The configuration file also known as the romfile or rom contains the factory default settings in the screens such as password switch setup ip setup and so on once you have customized the switch s settings they can be saved back to your computer under a filename of your choosing 356
• This section shows some examples of uploading to or downloading files from the switch using ftp commands first understand the filename conventions 356
• Xs3700 series user s guide 356
• You can store up to two images or firmware files of the same device model on the switch only one image is used at a time 356
• Zynos zyxel network operating system sometimes referred to as the ras file is the system firmware and has a bin filename extension 356
• Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 357
• Example ftp commands 357
• Ftp command line procedure 357
• Chapter 42 maintenance 358
• Command description 358
• Ftp restrictions 358
• Ftp service is disabled in the service access control screen 358
• Ftp will not work when 358
• Gui based ftp clients 358
• Table 193 general commands for gui based ftp clients 358
• The following table describes some of the commands that you may see in gui based ftp clients 358
• The ip address es in the remote management screen does not match the client ip address if it does not match the switch will disconnect the ftp session immediately 358
• Xs3700 series user s guide 358
• About snmp 359
• Access control 359
• Access control overview 359
• The access control main screen 359
• Snmp v3 and security 360
• An oid object id that begins with 1 90 5 is defined in private mibs otherwise it is a standard mib oid 361
• Chapter 43 access control 361
• Mibs let administrators collect statistics and monitor status and performance 361
• Option object label object id description 361
• Rfc 1155 smi 361
• Rfc 1157 snmp v1 361
• Rfc 1493 bridge mibs 361
• Rfc 1643 ethernet mibs 361
• Rfc 1757 rmon 361
• Rfc 2674 snmpv2 snmpv2c 361
• Snmp mib ii rfc 1213 361
• Snmp traps 361
• Snmpv2 snmpv2c or later version compliant with rfc 2011 snmpv2 mib for ip rfc 2012 snmpv2 mib for tcp rfc 2013 snmpv2 mib for udp 361
• Supported mibs 361
• Table 196 snmp system traps 361
• The switch sends traps to an snmp manager when an event occurs the following tables outline the snmp traps by category 361
• The switch supports the following mibs 361
• Xs3700 series user s guide 361
• Chapter 43 access control 362
• Option object label object id description 362
• Table 196 snmp system traps continued 362
• Table 197 snmp interfacetraps 362
• Xs3700 series user s guide 362
• Chapter 43 access control 363
• Option object label object id description 363
• Table 197 snmp interfacetraps continued 363
• Table 198 aaa traps 363
• Xs3700 series user s guide 363
• Chapter 43 access control 364
• Configuring snmp 364
• From the access control screen display the snmp screen you can click access control to go back to the access control screen 364
• Option object label object id description 364
• Table 199 snmp ip traps 364
• Table 200 snmp switch traps 364
• Xs3700 series user s guide 364
• Chapter 43 access control 365
• Label description 365
• Note snmp version 2c is backwards compatible with snmp version 1 365
• The following table describes the labels in this screen 365
• User screen 365
• Xs3700 series user s guide 365
• Chapter 43 access control 366
• Configuring snmp trap group 366
• From the snmp screen click trap group to view the screen as shown use the trap group screen to specify the types of snmp traps that should be sent to each snmp manager 366
• Label description 366
• Snmp continued 366
• The following table describes the labels in this screen 366
• Trap group 366
• Xs3700 series user s guide 366
• Configuring snmp user 367
• Enabling disabling sending of snmp traps on a port 367
• Chapter 43 access control 368
• Label description 368
• Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 368
• Note use the username and password of the login accounts you specify in this screen to create accounts on the snmp v3 manager 368
• The following table describes the labels in this screen 368
• Xs3700 series user s guide 368
• A non administrator username is something other than admin is someone who can view but not configure switch settings 369
• An administrator is someone who can both view and configure switch changes the username for the administrator is always admin the default administrator password is 1234 369
• Chapter 43 access control 369
• Label description 369
• Logins to view the screen as shown 369
• Note it is highly recommended that you change the default administrator password 1234 369
• Setting up login accounts 369
• Up to five people one administrator and four non administrators may access the switch via web configurator at any one time 369
• User continued 369
• Xs3700 series user s guide 369
• Chapter 43 access control 370
• Label description 370
• Logins 370
• The following table describes the labels in this screen 370
• Xs3700 series user s guide 370
• Chapter 43 access control 371
• Figure 257 ssh communication example 371
• How ssh works 371
• Label description 371
• Logins continued 371
• Ssh overview 371
• The following table summarizes how a secure connection is established between two remote hosts 371
• Unlike telnet or ftp which transmit data in clear text ssh secure shell is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network 371
• Xs3700 series user s guide 371
• Ssh implementation on the switch 372
• Introduction to https 373
• Note if you disable http in the service access control screen then the switch blocks all http connection attempts 373
• Requirements for using ssh 373
• Https example 374
• Internet explorer 6 374
• Internet explorer 7 or 8 374
• Internet explorer warning messages 374
• Example 375
• Mozilla firefox warning messages 375
• Example 376
• Example 377
• Internet explore 377
• Service access control 377
• The main screen 377
• Chapter 43 access control 378
• From the access control screen display the remote management screen as shown next 378
• Label description 378
• Remote management 378
• Service access control 378
• The following table describes the fields in this screen 378
• Xs3700 series user s guide 378
• You can specify a group of one or more trusted computers from which an administrator may use a service to manage the switch click access control to return to the access control screen 378
• Chapter 43 access control 379
• Label description 379
• Remote management 379
• The following table describes the labels in this screen 379
• Xs3700 series user s guide 379
• Diagnostic 380
• Chapter 44 diagnostic 381
• Diagnostic continued 381
• Label description 381
• Xs3700 series user s guide 381
• Syslog 382
• Syslog overview 382
• Syslog setup 382
• Chapter 45 syslog 383
• Label description 383
• Syslog 383
• Syslog server setup 383
• Syslog server setup to open the following screen use this screen to configure a list of external syslog servers 383
• The following table describes the labels in this screen 383
• Xs3700 series user s guide 383
• Chapter 45 syslog 384
• Label description 384
• Server setup 384
• The following table describes the labels in this screen 384
• Xs3700 series user s guide 384
• Cluster management 385
• Clustering management status overview 385
• Cluster management status 386
• Note a cluster can only have one manager 386
• Chapter 46 cluster management 387
• Cluster management 387
• Cluster member switch management 387
• Go to the clustering management status screen of the cluster manager switch and then select an index hyperlink from the list of members to go to that cluster member switch s web configurator home page this cluster member web configurator home page and the home page that you d see if you accessed it directly are different 387
• Label description 387
• The following table describes the labels in this screen 387
• Xs3700 series user s guide 387
• Example 388
• Uploading firmware to a cluster member switch 388
• Clustering management configuration 389
• Example 389
• Chapter 46 cluster management 390
• Configuration 390
• Label description 390
• The following table describes the labels in this screen 390
• Xs3700 series user s guide 390
• Mac table 391
• Mac table overview 391
• Chapter 47 mac table 392
• Label description 392
• Mac table 392
• Mac table in the navigation panel to display the following screen use this screen to search specific mac addresses you can also directly add dynamic mac address es into the static mac forwarding table or mac filtering table from the mac table using this screen 392
• The following table describes the labels in this screen 392
• Viewing the mac table 392
• Xs3700 series user s guide 392
• Chapter 47 mac table 393
• Label description 393
• Mac table continued 393
• Xs3700 series user s guide 393
• Ip table 394
• Ip table overview 394
• Chapter 48 ip table 395
• Ip table 395
• Ip table in the navigation panel to display the following screen 395
• Label description 395
• The following table describes the labels in this screen 395
• Viewing the ip table 395
• Xs3700 series user s guide 395
• Arp table 396
• Arp table overview 396
• How arp works 396
• The arp table screen 396
• Arp table 397
• Chapter 49 arp table 397
• Label description 397
• The following table describes the labels in this screen 397
• Xs3700 series user s guide 397
• Overview 398
• Routing table 398
• Viewing the routing table status 398
• Path mtu overview 399
• Path mtu table 399
• Viewing the path mtu table 399
• Configure clone 400
• Chapter 52 configure clone 401
• Configure clone 401
• Label description 401
• The following table describes the labels in this screen 401
• Xs3700 series user s guide 401
• Ipv6 neighbor table overview 402
• Neighbor table 402
• Viewing the ipv6 neighbor table 402
• Chapter 53 neighbor table 403
• Label description 403
• Neighbor table continued 403
• Xs3700 series user s guide 403
• Power hardware connections and leds 404
• Troubleshooting 404
• I cannot see or access the login screen in the web configurator 405
• I forgot the ip address for the switch 405
• I forgot the username and or password 405
• One of the leds does not behave as expected 405
• Switch access and login 405
• I can see the login screen but i cannot log in to the switch 406
• Pop up windows javascripts and java permissions 406
• I cannot see some of advanced application submenus at the bottom of the navigation panel 407
• I lost my configuration settings after i restart the switch 407
• Switch configuration 407
• There is unauthorized access to my switch via telnet http and ssh 407
• Common services 408
• Ppendi 408
• Appendix a common services 409
• Name protocol port s description 409
• Table 223 commonly used services continued 409
• Xs3700 series user s guide 409
• Appendix a common services 410
• Name protocol port s description 410
• Table 223 commonly used services continued 410
• Xs3700 series user s guide 410
• Ppendi 411
• Global address 412
• Loopback address 412
• Multicast address 412
• Unspecified address 412
• Eui 64 413
• Interface id 413
• Stateless autoconfiguration 413
• Subnet masking 413
• Dhcp relay agent 414
• Dhcpv6 414
• Identity association 414
• Rebind 414
• Renew rebind 414
• Renew to s1 414
• Icmpv6 415
• Ipv6 cache 415
• Neighbor discovery protocol ndp 415
• Prefix delegation 415
• Mld messages 416
• Multicast listener discovery 416
• Example enabling dhcpv6 on windows xp 417
• Example enabling ipv6 on windows xp 2003 vista 417
• Example enabling ipv6 on windows 7 418
• Customer support 420
• Ppendi 420
• Austria 421
• Europe 421
• Malaysia 421
• Pakistan 421
• Philipines 421
• Singapore 421
• Taiwan 421
• Thailand 421
• Vietnam 421
• Belarus 422
• Belgium 422
• Bulgaria 422
• Denmark 422
• Estonia 422
• Finland 422
• France 422
• Germany 422
• Hungary 422
• Latvia 422
• Lithuania 423
• Netherlands 423
• Norway 423
• Poland 423
• Romania 423
• Russia 423
• Slovakia 423
• Sweden 423
• Switzerland 423
• Argentina 424
• Ecuador 424
• Latin america 424
• Middle east 424
• North america 424
• Turkey 424
• Ukraine 424
• Africa 425
• Australia 425
• Oceania 425
• South africa 425
• Legal information 426
• Ppendi 426
• Appendix d legal information 427
• Environment statment 427
• List of national codes 427
• Notices 427
• Safety warnings 427
• Weee directive 427
• Xs3700 series user s guide 427
• Appendix d legal information 428
• Xs3700 series user s guide 428
• Environmental product declaration 429
• Appendix d legal information 430
• Open source licenses 430
• Registration 430
• Taiwanese bsmi bureau of standards metrology and inspection a warning 430
• Trademarks 430
• Viewing certifications 430
• Xs3700 series user s guide 430
• Zyxel limited warranty 430
• Numbers 431